instar 1.3.1219 → 1.3.1221

package/dist/core/StageBActivationGate.d.ts

@@ -83,7 +83,37 @@ export declare function resolveStageBProductionActivation(input: StageBProductio
 export declare function stageBConfigSha256(config: StageBConfigSurface | undefined): string;
 export declare function parseShippedStageBEvidence(value: unknown): StageBShippedReleaseEvidence | null;
 export declare function bundledStageBReleaseEvidence(): StageBShippedReleaseEvidence | null;
-export declare function verifyBundledStageBReleaseEvidence(packageVersion: string): StageBInactiveReason | null;
+/**
+ * Canonical digest of a signed artifact: the exact field-ordered bytes the
+ * Echo signature covers, plus the signature. Stable across property order and
+ * construction path, unlike JSON.stringify of the object.
+ */
+export declare function canonicalShippedArtifactDigest(artifact: StageBRcArtifact): string;
+/**
+ * Package-shipped evidence verification (spec: stage-b-evidence-code-binding).
+ *
+ * Binds the evidence to the CODE the canary certified, not to a version
+ * number: `packageVersion`, `gitCommit`, and `echoMachineId` are read from the
+ * artifact itself as historical provenance of where the canary ran (the
+ * machine-id comparison was artifact-sourced in the version-bound design too),
+ * while `configSha256` REMAINS a real comparison against this build's expected
+ * behavioral config, and the NEW binding requires the artifact's canonical
+ * digest to equal the reviewed certified-set manifest's `artifactDigest`. The
+ * code side of that binding — "did the certified sources change since this
+ * evidence was approved?" — is enforced where sources exist: the publish gate
+ * runs scripts/stage-b-certified-fingerprint.mjs --check, and refuses to ship
+ * a package whose certified sources drifted from the manifest. An installed
+ * package therefore carries a manifest and evidence the publish gate already
+ * proved consistent; runtime re-verifies shape, signature, thresholds, config
+ * binding, and the digest linkage.
+ */
+export declare function verifyShippedStageBEvidence(shipped: StageBShippedReleaseEvidence | null): StageBInactiveReason | null;
+/**
+ * @param _packageVersion Unused since the code-binding spec: the version was a
+ * one-shot proxy for "the certified code changed" and froze publishing one
+ * release after it shipped. Kept for call-site compatibility.
+ */
+export declare function verifyBundledStageBReleaseEvidence(_packageVersion: string): StageBInactiveReason | null;
 /**
  * Idempotent migration decision. Explicit false is never changed. A valid RC
  * moves absent/already-true installs to pending activation for the next restart.

package/dist/core/StageBActivationGate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StageBActivationGate.d.ts","sourceRoot":"","sources":["../../src/core/StageBActivationGate.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,sBAAsB,oFAEzB,CAAC;AAEX,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,CAAC,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,QAAQ,EAAE,qBAAqB,CAAC;IAChC,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,EAAE,UAAU,GAAG,UAAU,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAiB,SAAQ,wBAAwB;IAChE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,iFAAiF;IACjF,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,6EAA6E;IAC7E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,yEAAyE;IACzE,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gFAAgF;IAChF,eAAe,CAAC,EAAE,4BAA4B,GAAG,IAAI,CAAC;CACvD;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,CAAC,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GAAG,qBAAqB,GAAG,qBAAqB,GACnE,kBAAkB,GAAG,wBAAwB,GAAG,2BAA2B,GAC3E,4BAA4B,GAAG,kBAAkB,GAAG,4BAA4B,GAChF,uBAAuB,GAAG,iBAAiB,GAAG,qBAAqB,GACnE,uBAAuB,GAAG,qBAAqB,GAAG,qBAAqB,GACvE,2BAA2B,GAAG,8BAA8B,CAAC;AAEjE,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,QAAQ,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;IAC7D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,iEAAiE;AACjE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAS/E;AAED,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,wBAAwB;IAE/D,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,gBAAgB,GAAG,sBAAsB;IAgBtG,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,IAAI;CAqBxE;AAED;;+EAE+E;AAC/E,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,+BAA+B,GAAG,sBAAsB,CAqChH;AAED;;;0DAG0D;AAC1D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAIlF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,4BAA4B,GAAG,IAAI,CAM9F;AAED,wBAAgB,4BAA4B,IAAI,4BAA4B,GAAG,IAAI,CAElF;AAED,wBAAgB,kCAAkC,CAAC,cAAc,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAUtG;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,EACtC,IAAI,EAAE,oBAAoB,GACzB,mBAAmB,CAKrB;AAED;;;2EAG2E;AAC3E,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,oBAAoB,EAAE,OAAO,GAC5B,mBAAmB,CAWrB"}
+{"version":3,"file":"StageBActivationGate.d.ts","sourceRoot":"","sources":["../../src/core/StageBActivationGate.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,sBAAsB,oFAEzB,CAAC;AAEX,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,CAAC,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,QAAQ,EAAE,qBAAqB,CAAC;IAChC,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,EAAE,UAAU,GAAG,UAAU,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAiB,SAAQ,wBAAwB;IAChE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,iFAAiF;IACjF,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,6EAA6E;IAC7E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,yEAAyE;IACzE,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gFAAgF;IAChF,eAAe,CAAC,EAAE,4BAA4B,GAAG,IAAI,CAAC;CACvD;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,CAAC,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GAAG,qBAAqB,GAAG,qBAAqB,GACnE,kBAAkB,GAAG,wBAAwB,GAAG,2BAA2B,GAC3E,4BAA4B,GAAG,kBAAkB,GAAG,4BAA4B,GAChF,uBAAuB,GAAG,iBAAiB,GAAG,qBAAqB,GACnE,uBAAuB,GAAG,qBAAqB,GAAG,qBAAqB,GACvE,2BAA2B,GAAG,8BAA8B,CAAC;AAEjE,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,QAAQ,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;IAC7D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,iEAAiE;AACjE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAS/E;AAED,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,wBAAwB;IAE/D,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,gBAAgB,GAAG,sBAAsB;IAgBtG,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,IAAI;CAqBxE;AAED;;+EAE+E;AAC/E,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,+BAA+B,GAAG,sBAAsB,CAqDhH;AAED;;;0DAG0D;AAC1D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAIlF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,4BAA4B,GAAG,IAAI,CAM9F;AAED,wBAAgB,4BAA4B,IAAI,4BAA4B,GAAG,IAAI,CAElF;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAKjF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GAAG,IAAI,GAC3C,oBAAoB,GAAG,IAAI,CAc7B;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,eAAe,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAEvG;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,EACtC,IAAI,EAAE,oBAAoB,GACzB,mBAAmB,CAKrB;AAED;;;2EAG2E;AAC3E,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,oBAAoB,EAAE,OAAO,GAC5B,mBAAmB,CAWrB"}

package/dist/core/StageBActivationGate.js

@@ -8,6 +8,7 @@ import crypto from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
 import { SHIPPED_CODEX_STAGE_B_RELEASE_EVIDENCE } from '../data/codexStageBReleaseEvidence.js';
+import { STAGE_B_CERTIFIED_SET } from '../data/stageBCertifiedSet.js';
 export const STAGE_B_REQUIRED_CASES = [
     'identical', 'multiline', 'active-turn', 'resize', 'outage', 'transfer',
 ];
@@ -106,19 +107,35 @@ export function resolveStageBProductionActivation(input) {
     // fleet machine verifies it against the Echo public key pinned in the
     // reviewed package; using the target machine's own key/id here would make
     // fleet activation impossible while looking correctly fail-closed.
-    const shipped = input.shippedEvidence === undefined
+    const usingBundled = input.shippedEvidence === undefined;
+    const shipped = usingBundled
         ? parseShippedStageBEvidence(SHIPPED_CODEX_STAGE_B_RELEASE_EVIDENCE)
         : input.shippedEvidence;
     if (!shipped)
         return localStatus;
-    return new StageBActivationGate({
-        packageVersion: input.packageVersion,
-        gitCommit: input.gitCommit,
+    // Code-binding spec: package evidence is verified against the artifact's own
+    // run provenance + the certified-set manifest digest, never the CURRENT
+    // version — the version binding rejected the shipped artifact on every
+    // release after the one it named, leaving Stage B silently dark fleet-wide.
+    const shippedGate = new StageBActivationGate({
+        packageVersion: shipped.artifact.packageVersion,
+        gitCommit: shipped.artifact.gitCommit,
         configSha256,
         echoMachineId: shipped.artifact.echoMachineId,
         echoPublicKeyPem: shipped.echoPublicKeyPem,
         developmentAgent: input.developmentAgent,
-    }).evaluate(input.config, shipped.artifact);
+    });
+    const status = shippedGate.evaluate(input.config, shipped.artifact);
+    // The certified-set manifest vouches for the PACKAGE-BUNDLED artifact; an
+    // explicitly injected override (the documented test/release-tool seam) keeps
+    // every shape/signature/threshold/config check but cannot match a manifest
+    // bound to different evidence, so the digest linkage applies only when the
+    // bundled constant is in use — which is every production caller.
+    if (usingBundled && status.active
+        && canonicalShippedArtifactDigest(shipped.artifact) !== STAGE_B_CERTIFIED_SET.artifactDigest) {
+        return { ...status, active: false, reason: 'artifact-binding-mismatch' };
+    }
+    return status;
 }
 /** The release candidate and fleet activation share this behavioral config
  * digest. Rollout-only switches are deliberately excluded: candidateCanary is
@@ -141,17 +158,59 @@ export function parseShippedStageBEvidence(value) {
 export function bundledStageBReleaseEvidence() {
     return parseShippedStageBEvidence(SHIPPED_CODEX_STAGE_B_RELEASE_EVIDENCE);
 }
-export function verifyBundledStageBReleaseEvidence(packageVersion) {
-    const shipped = bundledStageBReleaseEvidence();
+/**
+ * Canonical digest of a signed artifact: the exact field-ordered bytes the
+ * Echo signature covers, plus the signature. Stable across property order and
+ * construction path, unlike JSON.stringify of the object.
+ */
+export function canonicalShippedArtifactDigest(artifact) {
+    const { signature, ...unsigned } = artifact;
+    return crypto.createHash('sha256')
+        .update(canonicalStageBRcArtifact(unsigned) + '\n' + signature)
+        .digest('hex');
+}
+/**
+ * Package-shipped evidence verification (spec: stage-b-evidence-code-binding).
+ *
+ * Binds the evidence to the CODE the canary certified, not to a version
+ * number: `packageVersion`, `gitCommit`, and `echoMachineId` are read from the
+ * artifact itself as historical provenance of where the canary ran (the
+ * machine-id comparison was artifact-sourced in the version-bound design too),
+ * while `configSha256` REMAINS a real comparison against this build's expected
+ * behavioral config, and the NEW binding requires the artifact's canonical
+ * digest to equal the reviewed certified-set manifest's `artifactDigest`. The
+ * code side of that binding — "did the certified sources change since this
+ * evidence was approved?" — is enforced where sources exist: the publish gate
+ * runs scripts/stage-b-certified-fingerprint.mjs --check, and refuses to ship
+ * a package whose certified sources drifted from the manifest. An installed
+ * package therefore carries a manifest and evidence the publish gate already
+ * proved consistent; runtime re-verifies shape, signature, thresholds, config
+ * binding, and the digest linkage.
+ */
+export function verifyShippedStageBEvidence(shipped) {
     if (!shipped)
         return 'artifact-missing';
-    return new StageBActivationGate({
-        packageVersion,
-        gitCommit: `package:${packageVersion}`,
+    const reason = new StageBActivationGate({
+        packageVersion: shipped.artifact.packageVersion,
+        gitCommit: shipped.artifact.gitCommit,
         configSha256: stageBConfigSha256({ ledgerObserverEnabled: true }),
         echoMachineId: shipped.artifact.echoMachineId,
         echoPublicKeyPem: shipped.echoPublicKeyPem,
     }).verifyArtifact(shipped.artifact);
+    if (reason)
+        return reason;
+    if (canonicalShippedArtifactDigest(shipped.artifact) !== STAGE_B_CERTIFIED_SET.artifactDigest) {
+        return 'artifact-binding-mismatch';
+    }
+    return null;
+}
+/**
+ * @param _packageVersion Unused since the code-binding spec: the version was a
+ * one-shot proxy for "the certified code changed" and froze publishing one
+ * release after it shipped. Kept for call-site compatibility.
+ */
+export function verifyBundledStageBReleaseEvidence(_packageVersion) {
+    return verifyShippedStageBEvidence(bundledStageBReleaseEvidence());
 }
 /**
  * Idempotent migration decision. Explicit false is never changed. A valid RC

package/dist/core/StageBActivationGate.js.map

@@ -1 +1 @@
-{"version":3,"file":"StageBActivationGate.js","sourceRoot":"","sources":["../../src/core/StageBActivationGate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAE/F,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU;CAC/D,CAAC;AAkFX,iEAAiE;AACjE,MAAM,UAAU,yBAAyB,CAAC,GAA6B;IACrE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY;QACtE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa;QAChE,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,eAAe;YACtD,GAAG,CAAC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC9F,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,gBAAgB;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,QAAkC;QAAlC,aAAQ,GAAR,QAAQ,CAA0B;IAAG,CAAC;IAEnE,QAAQ,CAAC,MAAuC,EAAE,QAA2B;QAC3E,MAAM,UAAU,GAAG,MAAM,EAAE,qBAAqB,IAAI,IAAI,CAAC;QACzD,MAAM,iBAAiB,GAAG,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;QACnE,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1H,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC5E,IAAI,MAAM,EAAE,sBAAsB,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACvF,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACzE,IAAI,CAAC,iBAAiB;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrD,CAAC;IAED,cAAc,CAAC,QAA0B;QACvC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;YAAE,OAAO,wBAAwB,CAAC;QACnE,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACxB,IAAI,QAAQ,CAAC,cAAc,KAAK,CAAC,CAAC,cAAc,IAAI,QAAQ,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;eACjF,QAAQ,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YAC5F,OAAO,2BAA2B,CAAC;QACrC,CAAC;QACD,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;YAC5C,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,EACnF,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC,CAAC,kEAAkE;YAAC,cAAc,GAAG,KAAK,CAAC;QAAC,CAAC;QACtG,IAAI,CAAC,cAAc;YAAE,OAAO,4BAA4B,CAAC;QACzD,IAAI,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK;YAAE,OAAO,kBAAkB,CAAC;QAC3F,IAAI,QAAQ,CAAC,aAAa,GAAG,EAAE;YAAE,OAAO,4BAA4B,CAAC;QACrE,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,uBAAuB,CAAC;QACzG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,iBAAiB,CAAC;QAC5F,IAAI,QAAQ,CAAC,gBAAgB,KAAK,UAAU;YAAE,OAAO,qBAAqB,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;+EAE+E;AAC/E,MAAM,UAAU,iCAAiC,CAAC,KAAsC;IACtF,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,aAA2C,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAqB,CAAC;IACvI,CAAC;IAAC,MAAM,CAAC,CAAC,wEAAwE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;QACzC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY;QACZ,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpE,IAAI,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,kBAAkB;WAC9D,WAAW,CAAC,MAAM,KAAK,qBAAqB,IAAI,WAAW,CAAC,MAAM,KAAK,mBAAmB;WAC1F,WAAW,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAClD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,KAAK,SAAS;QACjD,CAAC,CAAC,0BAA0B,CAAC,sCAAsC,CAAC;QACpE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC1B,IAAI,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC;IACjC,OAAO,IAAI,oBAAoB,CAAC;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY;QACZ,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa;QAC7C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED;;;0DAG0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,MAAuC;IACxE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACvD,qBAAqB,EAAE,MAAM,EAAE,qBAAqB,KAAK,IAAI;KAC9D,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,KAA8C,CAAC;IAC3D,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ;WAClE,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,GAAmC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO,0BAA0B,CAAC,sCAAsC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,cAAsB;IACvE,MAAM,OAAO,GAAG,4BAA4B,EAAE,CAAC;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,kBAAkB,CAAC;IACxC,OAAO,IAAI,oBAAoB,CAAC;QAC9B,cAAc;QACd,SAAS,EAAE,WAAW,cAAc,EAAE;QACtC,YAAY,EAAE,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;QACjE,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa;QAC7C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAuC,EACvC,QAAsC,EACtC,IAA0B;IAE1B,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACtC,IAAI,OAAO,CAAC,qBAAqB,KAAK,KAAK;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IACnG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACxE,OAAO,EAAE,GAAG,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC;AACpF,CAAC;AAED;;;2EAG2E;AAC3E,MAAM,UAAU,0BAA0B,CACxC,MAAuC,EACvC,oBAA6B;IAE7B,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACtC,IAAI,OAAO,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,CAAC,qBAAqB,GAAG,oBAAoB,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,sBAAsB,KAAK,SAAS,IAAI,oBAAoB,EAAE,CAAC;QACzE,OAAO,CAAC,sBAAsB,GAAG,KAAK,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,uBAAuB,GAAG,oBAAoB,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI,CAAC;IACjG,IAAI,OAAO,CAAC,qBAAqB,KAAK,SAAS;QAAE,OAAO,CAAC,qBAAqB,GAAG,KAAK,CAAC;IACvF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,QAA0B;IAChD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAuB;IACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WACzE,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WAC/E,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;WACjF,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;WACpE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC;WACjE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,GAAG;WAC1H,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtJ,MAAM,WAAW,GAAuC;QACtD,cAAc,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,aAAa,EAAE,kBAAkB;KAC9F,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrI,IAAI,KAAK,CAAC,gBAAgB,KAAK,UAAU,IAAI,KAAK,CAAC,gBAAgB,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"StageBActivationGate.js","sourceRoot":"","sources":["../../src/core/StageBActivationGate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU;CAC/D,CAAC;AAkFX,iEAAiE;AACjE,MAAM,UAAU,yBAAyB,CAAC,GAA6B;IACrE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY;QACtE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa;QAChE,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,eAAe;YACtD,GAAG,CAAC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC9F,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,gBAAgB;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,QAAkC;QAAlC,aAAQ,GAAR,QAAQ,CAA0B;IAAG,CAAC;IAEnE,QAAQ,CAAC,MAAuC,EAAE,QAA2B;QAC3E,MAAM,UAAU,GAAG,MAAM,EAAE,qBAAqB,IAAI,IAAI,CAAC;QACzD,MAAM,iBAAiB,GAAG,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;QACnE,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1H,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC5E,IAAI,MAAM,EAAE,sBAAsB,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACvF,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACzE,IAAI,CAAC,iBAAiB;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrD,CAAC;IAED,cAAc,CAAC,QAA0B;QACvC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;YAAE,OAAO,wBAAwB,CAAC;QACnE,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACxB,IAAI,QAAQ,CAAC,cAAc,KAAK,CAAC,CAAC,cAAc,IAAI,QAAQ,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;eACjF,QAAQ,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YAC5F,OAAO,2BAA2B,CAAC;QACrC,CAAC;QACD,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;YAC5C,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,EACnF,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC,CAAC,kEAAkE;YAAC,cAAc,GAAG,KAAK,CAAC;QAAC,CAAC;QACtG,IAAI,CAAC,cAAc;YAAE,OAAO,4BAA4B,CAAC;QACzD,IAAI,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK;YAAE,OAAO,kBAAkB,CAAC;QAC3F,IAAI,QAAQ,CAAC,aAAa,GAAG,EAAE;YAAE,OAAO,4BAA4B,CAAC;QACrE,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,uBAAuB,CAAC;QACzG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,iBAAiB,CAAC;QAC5F,IAAI,QAAQ,CAAC,gBAAgB,KAAK,UAAU;YAAE,OAAO,qBAAqB,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;+EAE+E;AAC/E,MAAM,UAAU,iCAAiC,CAAC,KAAsC;IACtF,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,aAA2C,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAqB,CAAC;IACvI,CAAC;IAAC,MAAM,CAAC,CAAC,wEAAwE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;QACzC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY;QACZ,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpE,IAAI,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,kBAAkB;WAC9D,WAAW,CAAC,MAAM,KAAK,qBAAqB,IAAI,WAAW,CAAC,MAAM,KAAK,mBAAmB;WAC1F,WAAW,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAClD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC;IACzD,MAAM,OAAO,GAAG,YAAY;QAC1B,CAAC,CAAC,0BAA0B,CAAC,sCAAsC,CAAC;QACpE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC1B,IAAI,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC;IACjC,6EAA6E;IAC7E,wEAAwE;IACxE,uEAAuE;IACvE,4EAA4E;IAC5E,MAAM,WAAW,GAAG,IAAI,oBAAoB,CAAC;QAC3C,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc;QAC/C,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;QACrC,YAAY;QACZ,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa;QAC7C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,iEAAiE;IACjE,IAAI,YAAY,IAAI,MAAM,CAAC,MAAM;WAC5B,8BAA8B,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,cAAc,EAAE,CAAC;QAC/F,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;0DAG0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,MAAuC;IACxE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACvD,qBAAqB,EAAE,MAAM,EAAE,qBAAqB,KAAK,IAAI;KAC9D,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,KAA8C,CAAC;IAC3D,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ;WAClE,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,GAAmC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO,0BAA0B,CAAC,sCAAsC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAA0B;IACvE,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAC5C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;SAC/B,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;SAC9D,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA4C;IAE5C,IAAI,CAAC,OAAO;QAAE,OAAO,kBAAkB,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC;QACtC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc;QAC/C,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;QACrC,YAAY,EAAE,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;QACjE,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa;QAC7C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,8BAA8B,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,cAAc,EAAE,CAAC;QAC9F,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAAC,eAAuB;IACxE,OAAO,2BAA2B,CAAC,4BAA4B,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAuC,EACvC,QAAsC,EACtC,IAA0B;IAE1B,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACtC,IAAI,OAAO,CAAC,qBAAqB,KAAK,KAAK;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IACnG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACxE,OAAO,EAAE,GAAG,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC;AACpF,CAAC;AAED;;;2EAG2E;AAC3E,MAAM,UAAU,0BAA0B,CACxC,MAAuC,EACvC,oBAA6B;IAE7B,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACtC,IAAI,OAAO,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,CAAC,qBAAqB,GAAG,oBAAoB,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,sBAAsB,KAAK,SAAS,IAAI,oBAAoB,EAAE,CAAC;QACzE,OAAO,CAAC,sBAAsB,GAAG,KAAK,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,uBAAuB,GAAG,oBAAoB,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI,CAAC;IACjG,IAAI,OAAO,CAAC,qBAAqB,KAAK,SAAS;QAAE,OAAO,CAAC,qBAAqB,GAAG,KAAK,CAAC;IACvF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,QAA0B;IAChD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAuB;IACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WACzE,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WAC/E,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;WACjF,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;WACpE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC;WACjE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,GAAG;WAC1H,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtJ,MAAM,WAAW,GAAuC;QACtD,cAAc,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,aAAa,EAAE,kBAAkB;KAC9F,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrI,IAAI,KAAK,CAAC,gBAAgB,KAAK,UAAU,IAAI,KAAK,CAAC,gBAAgB,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/aspClassifierRef.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Process-wide handle to the inbound ASP classifier.
+ *
+ * The classifier is built in the messaging wiring (commands/server.ts) AFTER
+ * the HTTP route context exists (server/AgentServer.ts), and both the polling
+ * ingress and the lifeline-forward ingress must read the SAME classifier's
+ * verdicts (single-use nonce: a message is verified once, at log time, and
+ * every later reader asks this one instance). A module-level reference is the
+ * smallest seam that lets both read it without a construction-order dance.
+ */
+import type { AspInboundClassifier } from './AspInboundClassifier.js';
+export declare function setAspClassifierRef(classifier: AspInboundClassifier | null): void;
+export declare function getAspClassifierRef(): AspInboundClassifier | null;
+//# sourceMappingURL=aspClassifierRef.d.ts.map

package/dist/core/aspClassifierRef.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspClassifierRef.d.ts","sourceRoot":"","sources":["../../src/core/aspClassifierRef.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAItE,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAEjF;AAED,wBAAgB,mBAAmB,IAAI,oBAAoB,GAAG,IAAI,CAEjE"}

package/dist/core/aspClassifierRef.js

@@ -0,0 +1,8 @@
+let ref = null;
+export function setAspClassifierRef(classifier) {
+    ref = classifier;
+}
+export function getAspClassifierRef() {
+    return ref;
+}
+//# sourceMappingURL=aspClassifierRef.js.map

package/dist/core/aspClassifierRef.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspClassifierRef.js","sourceRoot":"","sources":["../../src/core/aspClassifierRef.ts"],"names":[],"mappings":"AAYA,IAAI,GAAG,GAAgC,IAAI,CAAC;AAE5C,MAAM,UAAU,mBAAmB,CAAC,UAAuC;IACzE,GAAG,GAAG,UAAU,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/data/stageBCertifiedSet.d.ts

@@ -0,0 +1,271 @@
+/**
+ * Stage-B certified-set manifest (spec: stage-b-evidence-code-binding).
+ * Maintained ONLY by scripts/stage-b-certified-fingerprint.mjs --write, which
+ * refuses to rebind old evidence onto changed code. Every closure member is
+ * either certified (fingerprinted) or excluded with a written reason; the
+ * --check partition is fail-closed for anything new.
+ */
+export declare const STAGE_B_CERTIFIED_SET: {
+    readonly roots: readonly ["src/core/InboundDeliveryStore.ts", "src/core/CodexDeliveryObserver.ts", "src/core/CodexComposerAdapter.ts", "src/core/CodexLifecycleProductionComposition.ts", "src/core/StageBStartupReadiness.ts"];
+    readonly certified: readonly ["src/core/CodexComposerAdapter.ts", "src/core/CodexDeliveryObserver.ts", "src/core/CodexLifecycleProductionComposition.ts", "src/core/InboundDeliveryStore.ts", "src/core/SessionRecoveryChannel.ts", "src/core/SessionRecoveryConsumer.ts", "src/core/StageBStartupReadiness.ts"];
+    readonly excluded: readonly [{
+        readonly file: "src/core/AccountFollowMeGrants.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/AccountFollowMeSpendSlice.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/AnthropicSubscriptionRouter.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/CircuitBreakingIntelligenceProvider.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/ClaudeCliIntelligenceProvider.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/CodexCliIntelligenceProvider.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/Config.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/CredentialAuditEmit.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/CredentialWriteFunnel.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/GateSignalDetectors.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/GeminiCliIntelligenceProvider.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/InFlightSyncOpMarker.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/InstrumentAssessment.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/InteractivePoolIntelligenceProvider.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/JargonDetector.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/JudgmentProvenanceLog.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/LlmCircuitBreaker.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/MessagingToneGate.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/ModelTierEscalation.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/OAuthRefresher.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/PhysicalEffectLock.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/PiCliIntelligenceProvider.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/ProjectRoundLock.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/SafeFsExecutor.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/SafeGitExecutor.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/SecretMigrator.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/SecretStore.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/SessionLivenessOracle.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/SourceTreeGuard.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/SpawnCapIntelligenceProvider.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/SqliteRegistry.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/StageBActivationGate.ts";
+        readonly reason: "release policy, not canaried delivery behavior; binding it would force irrelevant two-hour canaries for gate-policy fixes (incl. the code-binding fix itself), and it adds no adversarial protection since the manifest is equally PR-editable";
+    }, {
+        readonly file: "src/core/canonicalFeedback.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/claudeForbiddenGuard.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/decisionQualityTypes.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/deferral-floor.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/devAgentGate.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/durableSecretScrub.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/dynamicMcpConfig.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/frameworkFacts.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/hostSemaphoreCore.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/hostSpawnSemaphore.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/inboundQueueConfig.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/intelligenceProviderFactory.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/internal-id-leak.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/machineCoherenceAdvert.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/machineCoherenceManifest.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/machineServesChannel.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/models.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/seamlessnessConfig.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/core/self-stop-floor.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/core/types.ts";
+        readonly reason: "universal shared type module; changes routinely for every subsystem";
+    }, {
+        readonly file: "src/data/codexStageBReleaseEvidence.ts";
+        readonly reason: "the evidence itself; bound by artifactDigest, fingerprinting it would be circular";
+    }, {
+        readonly file: "src/data/provenanceCoverage.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/data/stageBCertifiedSet.ts";
+        readonly reason: "this manifest; self-reference would be circular";
+    }, {
+        readonly file: "src/monitoring/CredentialProvider.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/monitoring/DegradationReporter.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/monitoring/ErrorCodeExtractor.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/monitoring/Redactor.ts";
+        readonly reason: "cross-cutting utility shared far beyond Codex delivery, certified by its own suite; binding it would re-freeze releases on unrelated churn";
+    }, {
+        readonly file: "src/providers/adapters/gemini-cli/models.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/gemini-cli/observability/geminiCapacityPolicy.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/gemini-cli/transport/geminiSpawn.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/openai-codex/errors.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/openai-codex/models.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/openai-codex/observability/eventNormalizer.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/openai-codex/transport/codexSpawn.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/openai-codex/transport/codexUsageParser.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/pi-cli/config.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/pi-cli/errors.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/pi-cli/policy.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/pi-cli/transport/oneShotCompletion.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/adapters/pi-cli/transport/piSpawn.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/capabilities.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/costAwareRouting.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/errors.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/events.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/primitives/observability/usageMeterProvider.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/primitives/transport/oneShotCompletion.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/registry.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/routing.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }, {
+        readonly file: "src/providers/types.ts";
+        readonly reason: "LLM-provider plumbing reached through a dynamic import in a certified module; shared across every internal LLM feature and certified by its own suites — binding it would re-freeze releases on unrelated provider churn";
+    }];
+    readonly fingerprint: "6aafe889d2bf5e21aeb821348fdbc593e0ca34282de706d53a5eb44cd848ea4b";
+    readonly artifactDigest: "7499d16a6ab0b986757121c3d1b3f97f93f7204d341e0a07aaecb360863c75eb";
+    readonly fileHashes: {
+        readonly "src/core/CodexComposerAdapter.ts": "8d4753c45f317092f3d1e8d6e5a73a875dbf046cbac20066220fa036b4f0e065";
+        readonly "src/core/CodexDeliveryObserver.ts": "7de40edfd2f64adfcef9e18bf6191acb4bdeb294886f0369895b948e1be345dd";
+        readonly "src/core/CodexLifecycleProductionComposition.ts": "a94897fbd317af61c5ea8d09da7484b2799b985ef44af2e2cc304f769fff62a4";
+        readonly "src/core/InboundDeliveryStore.ts": "93009f9b2cc2c4ee2124c09e8fe3f8ac30edf17b033c13864ff61b0e14ea0e88";
+        readonly "src/core/SessionRecoveryChannel.ts": "d38b8ebc6d073008ae2d9f9109a254019813499d5d327a3ff00e4b2a72272b65";
+        readonly "src/core/SessionRecoveryConsumer.ts": "6a00ca4993d188f1c95eaa7d156795804f00f7e10e600ea12fa2e8cd40423268";
+        readonly "src/core/StageBStartupReadiness.ts": "92275608368d44abc98802f9a445acc6419fd57bddb8c2e4935f32961d401183";
+    };
+    readonly boundAt: "2026-09-04";
+    readonly boundBy: "echo (operator-approved rebinding, topic 52075, 2026-09-03)";
+    readonly note: "Initial binding: certified sources verified byte-identical to the evidence commit (git diff 92a21075d..1b46533a7 over the certified set is empty), so the approved 2026-08-31 canary evidence remains the honest witness.";
+};
+export type StageBCertifiedSet = typeof STAGE_B_CERTIFIED_SET;
+//# sourceMappingURL=stageBCertifiedSet.d.ts.map

package/dist/data/stageBCertifiedSet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stageBCertifiedSet.d.ts","sourceRoot":"","sources":["../../src/data/stageBCertifiedSet.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqWxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,OAAO,qBAAqB,CAAC"}