dsh-kingdom 0.8.0 → 2.0.0

package/lib/capability/service.js

@@ -13,7 +13,48 @@ function parseJson(json) {
         return null;
     }
 }
-/** 从 effective 集 + 请求构建 EnforcementRequest。 */
+/**
+ * requested mode 只能被 Effective Capability 收窄，不能反向扩大授权：
+ * - 只有 effective 含 filesystem.write 时，workspace-write 才可 materialize；
+ * - 没有 write 时，非 write-required Task 只能以 read-only 继续；
+ * - write-required Task 在交集缺失时由调用方 fail-closed。
+ */
+function selectSandboxMode(requested, resolution) {
+    const effective = requested === 'workspace-write' && resolution.effective['filesystem.write'] === true
+        ? 'workspace-write'
+        : 'read-only';
+    return {
+        requested,
+        effective,
+        boundedNarrowing: requested !== effective,
+    };
+}
+/**
+ * A read-only request is also an upper bound on the materialized effective set.
+ * The resolver may observe an extra write grant/ceiling/runtime capability, but
+ * that capability is not materialized when the caller requested read-only.
+ */
+function boundResolutionToRequestedSandbox(requested, resolution) {
+    if (requested !== 'read-only' || resolution.effective['filesystem.write'] !== true)
+        return resolution;
+    const effective = { ...resolution.effective };
+    delete effective['filesystem.write'];
+    return { ...resolution, effective };
+}
+/** 为 typed Runtime evidence 增加本次 requested/effective mode 及收窄事实。 */
+function annotateSandboxEvidence(evidenceJson, mode) {
+    const parsed = JSON.parse(evidenceJson);
+    return JSON.stringify({
+        ...parsed,
+        payload: {
+            ...(parsed.payload ?? {}),
+            requestedSandboxMode: mode.requested,
+            effectiveSandboxMode: mode.effective,
+            boundedNarrowing: mode.boundedNarrowing,
+        },
+    });
+}
+/** 从 effective 集 + 已收窄 mode 构建 EnforcementRequest。 */
 function buildRequest(resolution, sandboxMode, territoryPath, presetId) {
     return {
         tools: effectiveTools(resolution.effective),
@@ -23,6 +64,16 @@ function buildRequest(resolution, sandboxMode, territoryPath, presetId) {
         ...(presetId ? { presetId } : {}),
     };
 }
+/** cleanup 必须同时有成功标记和 teardown evidence；缺任一项都属于未知。 */
+async function cleanupConfirmed(adapter, request, context) {
+    try {
+        const result = await adapter.cleanup(request, context);
+        return result.ok && typeof result.evidenceJson === 'string' && result.evidenceJson.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
 /** 释放 lease 的 zero-execution 收尾（合法源：RECOVERING/MATERIALIZING/RELEASING）。 */
 function zeroExecutionRelease(store, leaseId, reason) {
     const lease = store.getLease(leaseId);
@@ -36,6 +87,18 @@ function zeroExecutionRelease(store, leaseId, reason) {
     void recovering;
     return releaseExecutionLease(store, leaseId, { phase: 'capability-gate', reason }, reason);
 }
+/** cleanup 不可确认时保留 Lease，避免把未知 Runtime policy 状态伪装成 RELEASED。 */
+function keepLeaseInRecovery(store, leaseId, reason) {
+    const lease = store.getLease(leaseId);
+    if (!lease)
+        throw new Error(`keepLeaseInRecovery: lease ${leaseId} 不存在`);
+    // RECOVERING 仍未释放；把原因持久化，返回值必须反映实际 Ledger 行。
+    advanceLeaseState(store, leaseId, 'RECOVERING', { releaseReason: reason });
+    const recovering = store.getLease(leaseId);
+    if (!recovering)
+        throw new Error(`keepLeaseInRecovery: lease ${leaseId} vanished`);
+    return recovering;
+}
 /**
  * 完整能力闸门（TX-0D..TX-2S/2F）：
  * - 返回 materialized=false + DENIED Decision = zero execution（无 Execution / Dispatch）；
@@ -45,9 +108,7 @@ export async function runCapabilityGate(input) {
     const { store, adapter, kingdomId, taskId, attemptNo, workerBindingId, supervisorBindingId, leaseId } = input;
     const requirement = parseJson(input.requirementJson) ?? {};
     const ceiling = parseJson(input.ceilingJson);
-    const enforceable = await adapter.capabilities(input.context);
-    const resolution = resolveEffectiveCapability({ requirement, grant: input.grant, ceiling, enforceable });
-    const deny = (enforcementStatus, reasonCode) => {
+    const deny = (resolution, enforcementStatus, reasonCode, cleanupConfirmed = true) => {
         const decision = recordCapabilityDecision(store, {
             kingdomId, taskId, workerBindingId, supervisorBindingId,
             requirementSnapshot: input.requirementJson ?? undefined,
@@ -59,59 +120,141 @@ export async function runCapabilityGate(input) {
             requirementCoverage: resolution.coverage,
             reasonCode: reasonCode ?? resolution.deniedReasons[0] ?? null,
         });
-        const lease = zeroExecutionRelease(store, leaseId, `capability-denied:${enforcementStatus}`);
-        return { decision, lease, materialized: false };
+        const closeReason = `capability-denied:${enforcementStatus}`;
+        const lease = cleanupConfirmed
+            ? zeroExecutionRelease(store, leaseId, closeReason)
+            : keepLeaseInRecovery(store, leaseId, closeReason);
+        return { decision, lease, materialized: false, enforcementRequest: null };
     };
-    // TX-0D：ceiling 缺失 → 拒（B-7）
+    const emptyEnforceable = { tools: [], sandboxMode: null, approvalPolicy: null, presetId: null };
+    if (input.stillAuthorized && !input.stillAuthorized()) {
+        return deny(resolveEffectiveCapability({ requirement, grant: input.grant, ceiling, enforceable: emptyEnforceable }), 'NOT_ATTEMPTED', 'AUTHORITY_CHANGED');
+    }
+    // TX-0D：ceiling 缺失 → 拒（B-7），且不触碰 Runtime。
     if (ceiling === null) {
-        return deny('UNAVAILABLE', 'CEILING_NOT_CONFIGURED');
+        const resolution = resolveEffectiveCapability({ requirement, grant: input.grant, ceiling, enforceable: emptyEnforceable });
+        return deny(resolution, 'NOT_ATTEMPTED', 'CEILING_NOT_CONFIGURED');
+    }
+    // Supervisor Grant 是权威输入；没有任何 true Grant 时 fail-closed，
+    // 不能因 requirement 为空而把无授权执行误当作 coverage=NONE 的允许。
+    if (!Object.values(input.grant).some(value => value === true)) {
+        const resolution = resolveEffectiveCapability({ requirement, grant: input.grant, ceiling, enforceable: emptyEnforceable });
+        return deny(resolution, 'NOT_ATTEMPTED', 'GRANT_NOT_CONFIGURED');
+    }
+    let enforceable;
+    try {
+        enforceable = await adapter.capabilities(input.context);
+    }
+    catch (error) {
+        const resolution = resolveEffectiveCapability({ requirement, grant: input.grant, ceiling, enforceable: emptyEnforceable });
+        const detail = error instanceof Error ? error.message : String(error);
+        return deny(resolution, 'UNAVAILABLE', `ENFORCEABLE_SET_FAILED:${detail}`);
+    }
+    const resolution = resolveEffectiveCapability({ requirement, grant: input.grant, ceiling, enforceable });
+    if (input.stillAuthorized && !input.stillAuthorized())
+        return deny(resolution, 'NOT_ATTEMPTED', 'AUTHORITY_CHANGED');
+    const writeRequired = requirement['filesystem.write'] === true;
+    const writeEffective = resolution.effective['filesystem.write'] === true;
+    if (writeRequired && !writeEffective) {
+        const writeUnavailable = resolution.deniedReasons.some(reason => reason.startsWith('filesystem.write: Runtime 无法证明 enforce'));
+        return deny(resolution, writeUnavailable ? 'UNAVAILABLE' : 'NOT_ATTEMPTED', 'REQUIRED_WRITE_NOT_EFFECTIVE');
+    }
+    if (writeRequired && input.sandboxMode === 'read-only') {
+        return deny(resolution, 'NOT_ATTEMPTED', 'REQUIRED_WRITE_NOT_REQUESTED');
+    }
+    // coverage 是信息字段；只有 Grant∩Ceiling∩EnforceableSet 为空才阻断。
+    if (Object.keys(resolution.effective).length === 0) {
+        const runtimeUnavailable = resolution.deniedReasons.some(reason => reason.includes('Runtime 无法证明 enforce'));
+        return deny(resolution, runtimeUnavailable ? 'UNAVAILABLE' : 'NOT_ATTEMPTED', resolution.deniedReasons[0] ?? 'NO_EFFECTIVE_CAPABILITY');
     }
-    // TX-0D：必需能力未全覆盖 → 拒（fail-closed，不部分治理）
-    if (resolution.coverage !== 'FULL') {
-        return deny('NOT_ATTEMPTED', resolution.deniedReasons[0] ?? 'REQUIREMENT_NOT_FULLY_EFFECTIVE');
+    // The requested mode also constrains what can be recorded as the effective
+    // snapshot. Without this second bound, an extra filesystem.write grant could
+    // remain in the decision while materialization is read-only.
+    const materializationResolution = boundResolutionToRequestedSandbox(input.sandboxMode, resolution);
+    if (Object.keys(materializationResolution.effective).length === 0) {
+        const runtimeUnavailable = materializationResolution.deniedReasons.some(reason => reason.includes('Runtime 无法证明 enforce'));
+        return deny(materializationResolution, runtimeUnavailable ? 'UNAVAILABLE' : 'NOT_ATTEMPTED', materializationResolution.deniedReasons[0] ?? 'NO_EFFECTIVE_CAPABILITY');
     }
+    const boundedSandbox = selectSandboxMode(input.sandboxMode, materializationResolution);
     // TX-1：写 plan → PREPARING → MATERIALIZING
     const plan = {
         type: 'DshEnforcementPlan/v1',
         payload: {
-            tools: effectiveTools(resolution.effective),
-            sandboxMode: input.sandboxMode,
+            tools: effectiveTools(materializationResolution.effective),
+            sandboxMode: boundedSandbox.effective,
+            requestedSandboxMode: boundedSandbox.requested,
+            effectiveSandboxMode: boundedSandbox.effective,
+            boundedNarrowing: boundedSandbox.boundedNarrowing,
             approvalPolicy: 'never',
             presetId: input.presetId ?? null,
-            coverage: resolution.coverage,
-            effective: resolution.effective,
+            coverage: materializationResolution.coverage,
+            effective: materializationResolution.effective,
         },
     };
     setLeasePlan(store, leaseId, JSON.stringify(plan));
     advanceLeaseState(store, leaseId, 'PREPARING');
     advanceLeaseState(store, leaseId, 'MATERIALIZING');
     const territoryPath = input.context.agent.session.header?.cwd ?? '';
-    const request = buildRequest(resolution, input.sandboxMode, territoryPath, input.presetId);
+    const request = buildRequest(materializationResolution, boundedSandbox.effective, territoryPath, input.presetId);
     // TX-2 前置：preflight（无副作用）
-    const preflight = await adapter.preflight(request, input.context);
+    let preflight;
+    try {
+        preflight = await adapter.preflight(request, input.context);
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        const cleanupOk = await cleanupConfirmed(adapter, request, input.context);
+        return deny(materializationResolution, 'UNAVAILABLE', `PREFLIGHT_FAILED:${detail}`, cleanupOk);
+    }
     if (!preflight.ok) {
-        await adapter.cleanup(request, input.context);
-        return deny('UNAVAILABLE', `PREFLIGHT_FAILED:${preflight.reasons.join(';')}`);
+        const cleanupOk = await cleanupConfirmed(adapter, request, input.context);
+        return deny(materializationResolution, 'UNAVAILABLE', `PREFLIGHT_FAILED:${preflight.reasons.join(';')}`, cleanupOk);
     }
     // TX-2S/2F：materialize
-    const materialized = await adapter.materialize(request, input.context);
+    if (input.stillAuthorized && !input.stillAuthorized())
+        return deny(materializationResolution, 'NOT_ATTEMPTED', 'AUTHORITY_CHANGED');
+    let materialized;
+    try {
+        materialized = await adapter.materialize(request, input.context);
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        const cleanupOk = await cleanupConfirmed(adapter, request, input.context);
+        return deny(materializationResolution, 'FAILED', `MATERIALIZE_FAILED:${detail}`, cleanupOk);
+    }
     if (!materialized.ok || !materialized.evidenceJson) {
-        await adapter.cleanup(request, input.context);
-        return deny('FAILED', `MATERIALIZE_FAILED:${(materialized.reasons ?? []).join(';') || 'no-reason'}`);
+        const cleanupOk = await cleanupConfirmed(adapter, request, input.context);
+        return deny(materializationResolution, 'FAILED', `MATERIALIZE_FAILED:${(materialized.reasons ?? []).join(';') || 'no-reason'}`, cleanupOk);
+    }
+    if (input.stillAuthorized && !input.stillAuthorized()) {
+        const cleanupOk = await cleanupConfirmed(adapter, request, input.context);
+        return deny(materializationResolution, 'FAILED', 'AUTHORITY_CHANGED', cleanupOk);
+    }
+    let enforcementEvidenceJson;
+    try {
+        enforcementEvidenceJson = annotateSandboxEvidence(materialized.evidenceJson, boundedSandbox);
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        const cleanupOk = await cleanupConfirmed(adapter, request, input.context);
+        return deny(materializationResolution, 'FAILED', `MATERIALIZE_EVIDENCE_INVALID:${detail}`, cleanupOk);
     }
     const decision = recordCapabilityDecision(store, {
         kingdomId, taskId, workerBindingId, supervisorBindingId,
         requirementSnapshot: input.requirementJson ?? undefined,
         ceilingSnapshot: input.ceilingJson ?? undefined,
         proposedGrantSnapshot: JSON.stringify(input.grant),
-        effectiveSnapshot: JSON.stringify(resolution.effective),
+        effectiveSnapshot: JSON.stringify(materializationResolution.effective),
         decision: 'GRANTED',
         enforcementStatus: 'ENFORCED',
-        enforcementEvidenceJson: materialized.evidenceJson,
-        requirementCoverage: resolution.coverage,
+        enforcementEvidenceJson,
+        requirementCoverage: materializationResolution.coverage,
+        reasonCode: boundedSandbox.boundedNarrowing ? 'BOUNDED_SANDBOX_NARROWING' : null,
     });
     bindCapabilityDecision(store, leaseId, decision.decision_id);
     const lease = advanceLeaseState(store, leaseId, 'DISPATCH_READY');
-    return { decision, lease, materialized: true };
+    // 返回 buildRequest 生成且已通过本次 preflight/materialize 的同一对象；
+    // 后续 teardown 必须消费它，不得依据 capability snapshot 重新推导。
+    return { decision, lease, materialized: true, enforcementRequest: request };
 }
 //# sourceMappingURL=service.js.map

package/lib/capability/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/capability/service.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,GACb,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAkC,MAAM,eAAe,CAAA;AA8B1G,SAAS,SAAS,CAAC,IAAmB;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAA;QACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAgC,CAAA;QACjH,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,SAAS,YAAY,CAAC,UAAsB,EAAE,WAA4C,EAAE,aAAqB,EAAE,QAAiB;IAClI,OAAO;QACL,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC;QAC3C,aAAa;QACb,WAAW;QACX,cAAc,EAAE,OAAO;QACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,oBAAoB,CAAC,KAAmB,EAAE,OAAe,EAAE,MAAc;IAChF,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,MAAM,CAAC,CAAA;IACzE,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACnG,OAAO,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAA;IAC5F,CAAC;IACD,6CAA6C;IAC7C,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;IAClE,KAAK,UAAU,CAAA;IACf,OAAO,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAA;AAC5F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA0B;IAChE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IAC7G,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAA;IAC1D,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC5C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC7D,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;IAExG,MAAM,IAAI,GAAG,CAAC,iBAA6D,EAAE,UAAyB,EAAwB,EAAE;QAC9H,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,EAAE;YAC/C,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,mBAAmB;YACvD,mBAAmB,EAAE,KAAK,CAAC,eAAe,IAAI,SAAS;YACvD,eAAe,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;YAC/C,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;YAClD,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;YACvD,QAAQ,EAAE,QAAQ;YAClB,iBAAiB;YACjB,mBAAmB,EAAE,UAAU,CAAC,QAAQ;YACxC,UAAU,EAAE,UAAU,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI;SAC9D,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,iBAAiB,EAAE,CAAC,CAAA;QAC5F,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;IACjD,CAAC,CAAA;IAED,4BAA4B;IAC5B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAA;IACtD,CAAC;IACD,wCAAwC;IACxC,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,iCAAiC,CAAC,CAAA;IAChG,CAAC;IAED,0CAA0C;IAC1C,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE;YACP,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC;YAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,cAAc,EAAE,OAAO;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC;KACF,CAAA;IACD,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IAClD,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;IAC9C,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,CAAA;IAElD,MAAM,aAAa,GAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAoD,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAA;IACjH,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;IAE1F,0BAA0B;IAC1B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACjE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7C,OAAO,IAAI,CAAC,aAAa,EAAE,oBAAoB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED,uBAAuB;IACvB,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACtE,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;QACnD,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7C,OAAO,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,CAAA;IACtG,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,EAAE;QAC/C,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,mBAAmB;QACvD,mBAAmB,EAAE,KAAK,CAAC,eAAe,IAAI,SAAS;QACvD,eAAe,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;QAC/C,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;QAClD,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QACvD,QAAQ,EAAE,SAAS;QACnB,iBAAiB,EAAE,UAAU;QAC7B,uBAAuB,EAAE,YAAY,CAAC,YAAY;QAClD,mBAAmB,EAAE,UAAU,CAAC,QAAQ;KACzC,CAAC,CAAA;IACF,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACjE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;AAChD,CAAC"}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/capability/service.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,GACb,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAkC,MAAM,eAAe,CAAA;AA4C1G,SAAS,SAAS,CAAC,IAAmB;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAA;QACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAgC,CAAA;QACjH,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,SAA+B,EAAE,UAAsB;IAChF,MAAM,SAAS,GAAG,SAAS,KAAK,iBAAiB,IAAI,UAAU,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,IAAI;QACpG,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,WAAW,CAAA;IACf,OAAO;QACL,SAAS;QACT,SAAS;QACT,gBAAgB,EAAE,SAAS,KAAK,SAAS;KAC1C,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iCAAiC,CAAC,SAA+B,EAAE,UAAsB;IAChG,IAAI,SAAS,KAAK,WAAW,IAAI,UAAU,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,IAAI;QAAE,OAAO,UAAU,CAAA;IACrG,MAAM,SAAS,GAAG,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,CAAA;IAC7C,OAAO,SAAS,CAAC,kBAAkB,CAAC,CAAA;IACpC,OAAO,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAA;AACrC,CAAC;AAED,oEAAoE;AACpE,SAAS,uBAAuB,CAAC,YAAoB,EAAE,IAA0B;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAA0C,CAAA;IAChF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,MAAM;QACT,OAAO,EAAE;YACP,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YACzB,oBAAoB,EAAE,IAAI,CAAC,SAAS;YACpC,oBAAoB,EAAE,IAAI,CAAC,SAAS;YACpC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,YAAY,CAAC,UAAsB,EAAE,WAAiC,EAAE,aAAqB,EAAE,QAAiB;IACvH,OAAO;QACL,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC;QAC3C,aAAa;QACb,WAAW;QACX,cAAc,EAAE,OAAO;QACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAA;AACH,CAAC;AAED,sDAAsD;AACtD,KAAK,UAAU,gBAAgB,CAC7B,OAAuB,EACvB,OAA2B,EAC3B,OAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACtD,OAAO,MAAM,CAAC,EAAE,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAA;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,oBAAoB,CAAC,KAAmB,EAAE,OAAe,EAAE,MAAc;IAChF,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,MAAM,CAAC,CAAA;IACzE,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACnG,OAAO,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAA;IAC5F,CAAC;IACD,6CAA6C;IAC7C,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;IAClE,KAAK,UAAU,CAAA;IACf,OAAO,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAA;AAC5F,CAAC;AAED,iEAAiE;AACjE,SAAS,mBAAmB,CAAC,KAAmB,EAAE,OAAe,EAAE,MAAc;IAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,MAAM,CAAC,CAAA;IACxE,6CAA6C;IAC7C,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1E,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,WAAW,CAAC,CAAA;IAClF,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA0B;IAChE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IAC7G,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAA;IAC1D,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,CACX,UAAsB,EACtB,iBAA6D,EAC7D,UAAyB,EACzB,gBAAgB,GAAG,IAAI,EACD,EAAE;QACxB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,EAAE;YAC/C,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,mBAAmB;YACvD,mBAAmB,EAAE,KAAK,CAAC,eAAe,IAAI,SAAS;YACvD,eAAe,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;YAC/C,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;YAClD,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;YACvD,QAAQ,EAAE,QAAQ;YAClB,iBAAiB;YACjB,mBAAmB,EAAE,UAAU,CAAC,QAAQ;YACxC,UAAU,EAAE,UAAU,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI;SAC9D,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,qBAAqB,iBAAiB,EAAE,CAAA;QAC5D,MAAM,KAAK,GAAG,gBAAgB;YAC5B,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;YACnD,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;QACpD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;IAC3E,CAAC,CAAA;IAED,MAAM,gBAAgB,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAW,CAAA;IACxG,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,0BAA0B,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAA;IAC5J,CAAC;IAED,0CAA0C;IAC1C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAC1H,OAAO,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAA;IACpE,CAAC;IAED,wDAAwD;IACxD,kDAAkD;IAClD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAC1H,OAAO,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAA;IAClE,CAAC;IAED,IAAI,WAAgE,CAAA;IACpE,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAC1H,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrE,OAAO,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,0BAA0B,MAAM,EAAE,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;IACxG,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE;QAAE,OAAO,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAA;IAEpH,MAAM,aAAa,GAAG,WAAW,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAAA;IAC9D,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAAA;IACxE,IAAI,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,MAAM,gBAAgB,GAAG,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC9D,MAAM,CAAC,UAAU,CAAC,wCAAwC,CAAC,CAAC,CAAA;QAC9D,OAAO,IAAI,CACT,UAAU,EACV,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,EAClD,8BAA8B,CAC/B,CAAA;IACH,CAAC;IACD,IAAI,aAAa,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,8BAA8B,CAAC,CAAA;IAC1E,CAAC;IAED,wDAAwD;IACxD,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,kBAAkB,GAAG,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAA;QAC3G,OAAO,IAAI,CACT,UAAU,EACV,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,EACpD,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,yBAAyB,CACzD,CAAA;IACH,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,6DAA6D;IAC7D,MAAM,yBAAyB,GAAG,iCAAiC,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IAClG,IAAI,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAA;QAC1H,OAAO,IAAI,CACT,yBAAyB,EACzB,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,EACpD,yBAAyB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,yBAAyB,CACxE,CAAA;IACH,CAAC;IACD,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAA;IAEtF,0CAA0C;IAC1C,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE;YACP,KAAK,EAAE,cAAc,CAAC,yBAAyB,CAAC,SAAS,CAAC;YAC1D,WAAW,EAAE,cAAc,CAAC,SAAS;YACrC,oBAAoB,EAAE,cAAc,CAAC,SAAS;YAC9C,oBAAoB,EAAE,cAAc,CAAC,SAAS;YAC9C,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;YACjD,cAAc,EAAE,OAAO;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,QAAQ,EAAE,yBAAyB,CAAC,QAAQ;YAC5C,SAAS,EAAE,yBAAyB,CAAC,SAAS;SAC/C;KACF,CAAA;IACD,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IAClD,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;IAC9C,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,CAAA;IAElD,MAAM,aAAa,GAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAoD,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAA;IACjH,MAAM,OAAO,GAAG,YAAY,CAAC,yBAAyB,EAAE,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEhH,0BAA0B;IAC1B,IAAI,SAA2D,CAAA;IAC/D,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAC7D,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACzE,OAAO,IAAI,CAAC,yBAAyB,EAAE,aAAa,EAAE,oBAAoB,MAAM,EAAE,EAAE,SAAS,CAAC,CAAA;IAChG,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACzE,OAAO,IAAI,CAAC,yBAAyB,EAAE,aAAa,EAAE,oBAAoB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;IACrH,CAAC;IAED,uBAAuB;IACvB,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE;QAAE,OAAO,IAAI,CAAC,yBAAyB,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAA;IACnI,IAAI,YAAgE,CAAA;IACpE,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAClE,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACzE,OAAO,IAAI,CAAC,yBAAyB,EAAE,QAAQ,EAAE,sBAAsB,MAAM,EAAE,EAAE,SAAS,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACzE,OAAO,IAAI,CACT,yBAAyB,EACzB,QAAQ,EACR,sBAAsB,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,EAC7E,SAAS,CACV,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACzE,OAAO,IAAI,CAAC,yBAAyB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAA;IAClF,CAAC;IAED,IAAI,uBAA+B,CAAA;IACnC,IAAI,CAAC;QACH,uBAAuB,GAAG,uBAAuB,CAAC,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IAC9F,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACzE,OAAO,IAAI,CAAC,yBAAyB,EAAE,QAAQ,EAAE,gCAAgC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAA;IACvG,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,EAAE;QAC/C,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,mBAAmB;QACvD,mBAAmB,EAAE,KAAK,CAAC,eAAe,IAAI,SAAS;QACvD,eAAe,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;QAC/C,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;QAClD,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,SAAS,CAAC;QACtE,QAAQ,EAAE,SAAS;QACnB,iBAAiB,EAAE,UAAU;QAC7B,uBAAuB;QACvB,mBAAmB,EAAE,yBAAyB,CAAC,QAAQ;QACvD,UAAU,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI;KACjF,CAAC,CAAA;IACF,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACjE,wDAAwD;IACxD,mDAAmD;IACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAA;AAC7E,CAAC"}

package/lib/capability/tool-disclosure.js

@@ -0,0 +1,144 @@
+export const DISCOVERY_TOOL_NAME = 'kingdom_find_tools';
+const bytes = (value) => Buffer.byteLength(JSON.stringify(value), 'utf8');
+const object = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+const toolName = (value) => typeof value === 'string' && /^[A-Za-z0-9_.:-]{1,128}$/u.test(value);
+/** Display policy only. The existing Capability Gate remains authoritative for calls. */
+export class ToolDisclosureRuntime {
+    config;
+    states = new WeakMap();
+    active = new Set();
+    observations = new WeakMap();
+    constructor(config) {
+        if (!config || !['off', 'pilot'].includes(config.mode))
+            throw new Error('Invalid tool disclosure mode');
+        const residentTools = [...new Set(config.residentTools ?? [])], phaseTools = [...new Set(config.phaseTools ?? [])];
+        const maxResults = config.maxResults ?? 3, maxResultBytes = config.maxResultBytes ?? 12000;
+        if (residentTools.length > 64 || phaseTools.length > 64 || ![...residentTools, ...phaseTools].every(toolName)
+            || !Number.isSafeInteger(maxResults) || maxResults < 1 || maxResults > 5
+            || !Number.isSafeInteger(maxResultBytes) || maxResultBytes < 1024 || maxResultBytes > 64000)
+            throw new Error('Invalid tool disclosure bounds');
+        this.config = Object.freeze({ mode: config.mode, residentTools, phaseTools, maxResults, maxResultBytes });
+    }
+    metadata(assembly) { return this.observations.get(assembly); }
+    catalog(agent, state) {
+        const raw = agent.ctx.tools.schemas();
+        if (!Array.isArray(raw))
+            throw new Error('TOOL_CATALOG_UNAVAILABLE');
+        const result = [], names = new Set(), identities = new Map();
+        for (const entry of raw) {
+            if (!object(entry) || !toolName(entry.name) || !state.allowed.has(entry.name))
+                continue;
+            if (names.has(entry.name) || typeof entry.description !== 'string' || !object(entry.parameters))
+                throw new Error('TOOL_CATALOG_AMBIGUOUS');
+            const definition = agent.ctx.tools.get(entry.name);
+            if (!definition)
+                continue;
+            names.add(entry.name);
+            identities.set(entry.name, definition);
+            result.push({ name: entry.name, description: entry.description, parameters: structuredClone(entry.parameters) });
+        }
+        const stamp = JSON.stringify(result);
+        if (state.catalogStamp !== stamp || [...identities].some(([name, definition]) => state.identities.get(name) !== definition)) {
+            state.discovered.clear();
+            state.catalogStamp = stamp;
+            state.identities = identities;
+            state.fallback = null;
+        }
+        return result;
+    }
+    install(agent, allowedTools) {
+        if (this.config.mode === 'off')
+            return () => { };
+        if (!agent || typeof agent.ctx?.on !== 'function' || typeof agent.ctx.tools?.schemas !== 'function' || typeof agent.ctx.tools.get !== 'function') {
+            throw new Error('TOOL_DISCLOSURE_SEAM_UNAVAILABLE');
+        }
+        if (this.states.get(agent)?.active)
+            throw new Error('TOOL_DISCLOSURE_ALREADY_ACTIVE');
+        if (!allowedTools.every(toolName))
+            throw new Error('TOOL_DISCLOSURE_ALLOWED_SET_INVALID');
+        const state = { active: true, allowed: new Set(allowedTools), discovered: new Set(), catalogStamp: '', identities: new Map(), fallback: null, dispose() { } };
+        this.catalog(agent, state);
+        const listener = agent.ctx.on('system-prompt/assemble', async (_before, context, next) => {
+            const result = await next();
+            if (!state.active || context.agent !== agent)
+                return result;
+            if (!result || !Array.isArray(result.tools))
+                throw new Error('TOOL_DISCLOSURE_ASSEMBLY_INVALID');
+            const allowed = result.tools.filter(schema => state.allowed.has(schema.name));
+            const beforeBytes = bytes(allowed);
+            let reason = state.fallback, catalog = [];
+            try {
+                catalog = this.catalog(agent, state);
+                reason = state.fallback;
+            }
+            catch {
+                reason = 'TOOL_CATALOG_UNAVAILABLE';
+                state.discovered.clear();
+            }
+            if (!state.allowed.has(DISCOVERY_TOOL_NAME))
+                reason = 'DISCOVERY_NOT_GRANTED';
+            else if (!catalog.some(schema => schema.name === DISCOVERY_TOOL_NAME) || !allowed.some(schema => schema.name === DISCOVERY_TOOL_NAME))
+                reason = 'DISCOVERY_SCHEMA_UNAVAILABLE';
+            const visible = new Set([DISCOVERY_TOOL_NAME, ...this.config.residentTools, ...this.config.phaseTools, ...state.discovered]);
+            const selected = reason ? allowed : allowed.filter(schema => visible.has(schema.name));
+            // Keep the provider's native schemas and stable order. Never synthesize a
+            // tool wrapper, grant a hidden capability, or re-install the Gate guard.
+            const transformed = { ...result, tools: selected };
+            this.observations.set(transformed, { toolsBefore: allowed.length, toolsAfter: selected.length, toolsBytesBefore: beforeBytes,
+                toolsBytesAfter: bytes(selected), mode: reason ? 'off' : 'pilot', reasonCode: reason });
+            return transformed;
+        });
+        state.dispose = () => {
+            if (!state.active)
+                return;
+            // The listener must be gone before declaring teardown successful.
+            listener();
+            state.active = false;
+            state.discovered.clear();
+            this.states.delete(agent);
+            this.active.delete(state);
+        };
+        this.states.set(agent, state);
+        this.active.add(state);
+        return state.dispose;
+    }
+    find(input, execution) {
+        const agent = execution.agent, state = agent && this.states.get(agent);
+        if (execution.signal?.aborted || !state?.active || !state.allowed.has(DISCOVERY_TOOL_NAME))
+            throw new Error('TOOL_DISCOVERY_NOT_AUTHORIZED');
+        if (!object(input) || Object.keys(input).some(key => key !== 'query') || typeof input.query !== 'string'
+            || !input.query.trim() || input.query.length > 160)
+            throw new Error('TOOL_DISCOVERY_QUERY_INVALID');
+        const query = input.query.trim().toLocaleLowerCase(), terms = query.split(/\s+/u).filter(Boolean).slice(0, 8);
+        const catalog = this.catalog(agent, state);
+        const scored = catalog.filter(schema => schema.name !== DISCOVERY_TOOL_NAME).map(schema => {
+            const name = schema.name.toLocaleLowerCase(), description = schema.description.toLocaleLowerCase();
+            const score = name === query ? 1000 : terms.reduce((score, term) => score + (name.includes(term) ? 10 : 0) + (description.includes(term) ? 1 : 0), 0);
+            return { schema, score };
+        }).filter(item => item.score > 0).sort((a, b) => b.score - a.score || a.schema.name.localeCompare(b.schema.name));
+        const selected = [];
+        for (const { schema } of scored) {
+            if (selected.length === this.config.maxResults)
+                break;
+            const proposed = [...selected, schema];
+            const response = { tools: proposed, availableNextStep: true, truncated: false };
+            if (bytes(response) > this.config.maxResultBytes) {
+                // A schema too large to return is not silently undiscoverable. Restore
+                // the same authorized native surface on the next step, with no resend.
+                state.fallback = 'DISCOVERY_RESULT_TOO_LARGE';
+                return { tools: [], availableNextStep: true, fallback: 'AUTHORIZED_NATIVE_SURFACE_NEXT_STEP', reasonCode: state.fallback };
+            }
+            selected.push(schema);
+        }
+        if (state.discovered.size + selected.filter(schema => !state.discovered.has(schema.name)).length > 32) {
+            state.fallback = 'DISCOVERY_SET_LIMIT';
+            return { tools: [], availableNextStep: true, fallback: 'AUTHORIZED_NATIVE_SURFACE_NEXT_STEP', reasonCode: state.fallback };
+        }
+        for (const schema of selected)
+            state.discovered.add(schema.name);
+        return { tools: selected, availableNextStep: true, truncated: scored.length > selected.length };
+    }
+    dispose() { for (const state of [...this.active])
+        state.dispose(); }
+}
+//# sourceMappingURL=tool-disclosure.js.map

package/lib/capability/tool-disclosure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-disclosure.js","sourceRoot":"","sources":["../../src/capability/tool-disclosure.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAA;AAwBvD,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAA;AAClF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAClI,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAE1H,yFAAyF;AACzF,MAAM,OAAO,qBAAqB;IACvB,MAAM,CAA0C;IACxC,MAAM,GAAG,IAAI,OAAO,EAAiB,CAAA;IACrC,MAAM,GAAG,IAAI,GAAG,EAAS,CAAA;IACzB,YAAY,GAAG,IAAI,OAAO,EAA8B,CAAA;IAEzE,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACvG,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAA;QAClH,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,KAAK,CAAA;QAC1F,IAAI,aAAa,CAAC,MAAM,GAAG,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,UAAU,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;eACxG,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC;eACrE,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,IAAI,IAAI,cAAc,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAChJ,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;IAC3G,CAAC;IAED,QAAQ,CAAC,QAAgB,IAAoC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA,CAAC,CAAC;IAE7F,OAAO,CAAC,KAAY,EAAE,KAAY;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,OAAQ,EAAE,CAAA;QACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QACpE,MAAM,MAAM,GAAa,EAAE,EAAE,KAAK,GAAG,IAAI,GAAG,EAAU,EAAE,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAA;QAC/F,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACvF,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;YAC1I,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,GAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACpD,IAAI,CAAC,UAAU;gBAAE,SAAQ;YACzB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;YAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAClH,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACpC,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,EAAE,CAAC;YAC5H,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;YAAC,KAAK,CAAC,UAAU,GAAG,UAAU,CAAA;YACnF,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;QACvB,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,CAAC,KAAY,EAAE,YAA+B;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAA;QAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;YACjJ,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QACrF,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACzF,MAAM,KAAK,GAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,KAAI,CAAC,EAAE,CAAA;QACnK,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAiB,EAAE,OAA4B,EAAE,IAA6B,EAAE,EAAE;YAC/I,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;YAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,MAAM,CAAA;YAC3D,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YAChG,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;YAC7E,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;YAClC,IAAI,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,GAAa,EAAE,CAAA;YACnD,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAA;YAAC,CAAC;YACrE,MAAM,CAAC;gBAAC,MAAM,GAAG,0BAA0B,CAAC;gBAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;YACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBAAE,MAAM,GAAG,uBAAuB,CAAA;iBACxE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,mBAAmB,CAAC;gBAAE,MAAM,GAAG,8BAA8B,CAAA;YAC9K,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;YAC5H,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;YACtF,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,WAAW,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;YAClD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW;gBAC1H,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;YACzF,OAAO,WAAW,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAM;YACzB,kEAAkE;YAClE,QAAQ,EAAE,CAAC;YAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClH,CAAC,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrD,OAAO,KAAK,CAAC,OAAO,CAAA;IACtB,CAAC;IAED,IAAI,CAAC,KAAc,EAAE,SAAoD;QACvE,MAAM,KAAK,GAAG,SAAS,CAAC,KAA0B,EAAE,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3F,IAAI,SAAS,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC5I,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;eACnG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACrG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAM,EAAE,KAAK,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YACxF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAA;YAClG,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACrJ,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;QAC1B,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QACjH,MAAM,QAAQ,GAAa,EAAE,CAAA;QAC7B,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU;gBAAE,MAAK;YACrD,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAA;YACtC,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;YAC/E,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACjD,uEAAuE;gBACvE,uEAAuE;gBACvE,KAAK,CAAC,QAAQ,GAAG,4BAA4B,CAAA;gBAC7C,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,qCAAqC,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAA;YAC5H,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvB,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACtG,KAAK,CAAC,QAAQ,GAAG,qBAAqB,CAAA;YACtC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,qCAAqC,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC5H,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,QAAQ;YAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAChE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAA;IACjG,CAAC;IAED,OAAO,KAAW,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAAE,KAAK,CAAC,OAAO,EAAE,CAAA,CAAC,CAAC;CAC1E"}