pi-daddy 0.28.0 → 0.32.1

package/dist/kernel/delegate.js

@@ -0,0 +1,320 @@
+/**
+ * Governed delegation planning. Owning the spawn makes the grant an argument; each child receives its own
+ * environment, and `tool:delegate` determines whether it is a delegator or a leaf.
+ */
+import { planSpawn } from "./spawn.js";
+import { ceilingForDefinition, digestDefinition } from "./definitions.js";
+import { assertNarrowing } from "./resolve.js";
+import { checkRoutingAuthority, checkWorkspaceWildcardRequest } from "./routing-authority.js";
+import { DELEGATE_CAPABILITY, agentCapability, maySpawnDefinition, normaliseCapability } from "./capabilities.js";
+// Re-exported so the split stays internal: `delegate.ts` has been the import site for these since 0.6.0 and
+// four modules plus the test suite name it. Moving the definitions without moving the door would be churn
+// charged to every caller for a line count they did not cause.
+export { DELEGATE_CAPABILITY, agentCapability, maySpawnDefinition, normaliseCapability } from "./capabilities.js";
+import { ENV_APPROVED, ENV_DEPTH, ENV_EXECUTION_ID, ENV_FANOUT, ENV_GATED, ENV_GRANT, ENV_LEDGER, ENV_MAX_DEPTH, ENV_PARENT_ID, inheritableGrant, } from "./propagation.js";
+import { inheritApprovals } from "./approval.js";
+import { explainDoubledNamespace, suggestForUnknown, unknownCapabilities } from "./catalog.js";
+import { GovernanceRefusal, refusal } from "./refusals.js";
+import { digestTask, normaliseCorrelation } from "./correlation.js";
+import { resolveDelegationApproval } from "./delegation-approval.js";
+import { assertCapabilitiesArePropagatable } from "./capabilities.js";
+import { GOVERNANCE_ENV_KEYS } from "./env-names.js";
+export function planDelegation(request, ctx) {
+    const childDepth = ctx.depth + 1;
+    const denied = (plan, code) => plan.reason ? { ...plan, refusal: refusal(code, plan.reason) } : plan;
+    // G6 / B-I3: every refusal carries a result, including the four below that return before `resolve()`
+    // is ever called. The extension guarded its ledger write with `if (ledgerPath && plan.result)`, so
+    // those four governance decisions — disabled, too deep, no task, unknown capability — were never
+    // audited at all. An empty result is the honest record: nothing was resolved, and that is the fact.
+    // Bounded/whitelisted correlation is a REFUSAL, not an exception escaping the planner. It is reachable
+    // from a model-facing tool parameter on all three delegation tools, and throwing from here produced a
+    // governed refusal with no code and no ledger line at all — the ledger file was never even created
+    // (R-112). Caught here so it becomes an ordinary recorded decision.
+    let correlation;
+    let correlationRefused;
+    try {
+        correlation = normaliseCorrelation(request.correlation);
+    }
+    catch (error) {
+        correlationRefused =
+            error instanceof GovernanceRefusal
+                ? { code: error.code, message: error.message, ...(error.details ? { details: error.details } : {}) }
+                : refusal("CORRELATION_INVALID", String(error instanceof Error ? error.message : error));
+    }
+    const taskDigest = digestTask(request.task ?? "");
+    const empty = {
+        ok: false,
+        args: [],
+        env: {},
+        effective: [],
+        childDepth,
+        requested: [],
+        taskDigest,
+        ...(correlation ? { correlation } : {}),
+        result: { effective: [], denied: [], clipped: [], gatedBlocked: [], universal: [], subsumedBy: [] },
+    };
+    if (correlationRefused) {
+        return { ...empty, reason: correlationRefused.message, refusal: correlationRefused };
+    }
+    if (ctx.maxDepth <= 0) {
+        return denied({ ...empty, reason: "delegation is disabled (maxDepth 0)" }, "DEPTH_EXCEEDED");
+    }
+    if (childDepth > ctx.maxDepth) {
+        return denied({ ...empty, reason: `delegation depth limit reached (${ctx.maxDepth})` }, "DEPTH_EXCEEDED");
+    }
+    if (!request.task?.trim())
+        return denied({ ...empty, reason: "a delegation needs a task" }, "TASK_MISSING");
+    // ADR-0035's routing guards live in `routing-authority.ts` with their rationale; both are checked here,
+    // before anything is said about the target, because they are governance questions about the SESSION.
+    const routing = checkRoutingAuthority(request.boundWorkspaceId, ctx.ownGrant);
+    if (routing) {
+        return denied({
+            ...empty,
+            ...(routing.denied ? { requested: routing.denied, result: { ...empty.result, denied: routing.denied } } : {}),
+            reason: routing.reason,
+        }, routing.code);
+    }
+    // ADR-0016. A named definition replaces the model's tool list with an operator-authored ceiling.
+    let requested;
+    let systemPrompt;
+    let definitionDigest;
+    /** The definition being spawned, hoisted so the gate below can name its authorising id (ADR-0024). */
+    let spawned;
+    if (request.agent) {
+        const definition = ctx.definitions?.get(request.agent);
+        spawned = definition;
+        // No fallback, deliberately. pi-subagents resolves an unknown type to `general-purpose`, whose
+        // omitted tool list means EVERY tool — so a typo there granted the full surface. An unknown name
+        // here is simply an error.
+        if (!definition) {
+            const known = [...(ctx.definitions?.keys() ?? [])].sort();
+            return denied({
+                ...empty,
+                reason: `unknown agent "${request.agent}"` +
+                    (known.length > 0 ? ` — known definitions: ${known.join(", ")}` : " — no definitions were found"),
+            }, "UNKNOWN_DEFINITION");
+        }
+        // ADR-0017: authorisation comes BEFORE anything is said about the file. Which definitions this
+        // session may spawn is a governance question about the SESSION; whether the file declares its tools
+        // properly is a diagnostic about the DEFINITION, and answering the second one first would report a
+        // malformed-file error to a caller who was never allowed to spawn it either way.
+        //
+        // Recorded as a denial rather than a bare refusal, deliberately: `denied` is the escalation signal
+        // ADR-0008 designates, and asking to run a definition this session was not granted IS an attempt to
+        // exceed the grant. A refusal that left `denied` empty would keep it out of every audit query.
+        if (!maySpawnDefinition(ctx.ownGrant, definition.name)) {
+            const authorising = agentCapability(definition.name);
+            const held = ctx.ownGrant.filter((c) => c.startsWith("agent:")).sort();
+            return denied({
+                ...empty,
+                requested: [authorising],
+                result: { ...empty.result, denied: [authorising] },
+                reason: `cannot spawn "${definition.name}" — this session does not hold ${authorising} ` +
+                    `(the definition lives at ${definition.source}). ` +
+                    (held.length > 0
+                        ? `It may spawn: ${held.join(", ")}.`
+                        : `It may spawn no definitions at all; add ${authorising} to its grant to allow this one.`),
+            }, "DEFINITION_NOT_AUTHORIZED");
+        }
+        // ADR-0018. Recorded from here on — after authorisation, because the digest is a fact about a file
+        // this caller was allowed to read, and before every remaining outcome, because a spawn refused for a
+        // malformed declaration is still a spawn of THIS version of the definition.
+        //
+        // Assigned into `empty`, which every subsequent refusal spreads. That is the R-28 discipline applied
+        // to a record field rather than an argument: instead of eight `definitionDigest` spellings that a
+        // ninth return could forget, there is one, and forgetting it is not expressible. The success return
+        // does not spread `empty`, so it names the field explicitly.
+        definitionDigest = digestDefinition(definition);
+        Object.assign(empty, { definitionDigest });
+        const ceiling = ceilingForDefinition(definition);
+        if (ceiling.undeclared) {
+            return denied({
+                ...empty,
+                reason: `agent "${definition.name}" declares no \`allowed-tools\`, so it cannot be spawned — add one ` +
+                    `to ${definition.source}. An undeclared capability set is treated as NONE, never as everything.`,
+            }, "UNDECLARED_TOOLS");
+        }
+        if (ceiling.patterns.length > 0) {
+            return denied({
+                ...empty,
+                reason: `agent "${definition.name}" restricts a tool with a pattern (${ceiling.patterns.join(", ")}), ` +
+                    `which pi's --tools cannot express — it matches whole tool names only. Granting the bare tool ` +
+                    `would widen the declaration and dropping it would silently narrow, so neither is done.`,
+            }, "CEILING_PATTERNS_UNRESOLVED");
+        }
+        requested = ceiling.capabilities;
+        systemPrompt = definition.body;
+    }
+    else {
+        requested = (request.tools ?? []).map(normaliseCapability);
+    }
+    // Unknown is reported before denied, and separately: "does not exist here" and "you lack authority"
+    // have different causes and different fixes. Collapsing them hides typos and stale grants.
+    if (ctx.catalog) {
+        const unknown = unknownCapabilities(requested, ctx.catalog);
+        if (unknown.length > 0) {
+            // Name the likely intent where there is one. `ceilingForDefinition` refuses to TRANSLATE names
+            // (lowercasing and no more), so an author who wrote Claude Code's `Glob` gets `tool:glob` and a
+            // refusal — correct, and previously unhelpful, because pi's equivalent is `find` and no amount of
+            // staring at "not present in this session's catalog" says so. The hint changes nothing about the
+            // refusal; it just stops the author having to guess which of nine built-ins was meant.
+            // A doubled namespace is answered first and instead: it is not a guess about what the author meant
+            // but a statement of what the field did, and "did you mean tool:read?" beside `tool:tool:read` shows
+            // the author a correction without ever saying that `allowed-tools` supplies the `tool:` itself.
+            const hints = unknown
+                .map((c) => {
+                const doubled = explainDoubledNamespace(c);
+                if (doubled !== null)
+                    return doubled;
+                const s = suggestForUnknown(c, ctx.catalog);
+                return s === null ? null : `${c} → did you mean ${s}?`;
+            })
+                .filter((h) => h !== null);
+            return denied({
+                ...empty,
+                requested,
+                reason: `unknown capabilit${unknown.length === 1 ? "y" : "ies"}: ${unknown.join(", ")} — not present in ` +
+                    `this session's catalog (typo, or an uninstalled package?)` +
+                    (hints.length > 0 ? ` — ${hints.join("; ")}` : ""),
+            }, "UNKNOWN_TOOL");
+        }
+    }
+    // See `checkWorkspaceWildcardRequest`: refused for a HOLDER (the ledger must not record authority the
+    // child will not receive), and left to `resolve()` for anyone else, so the probe lands in `denied`.
+    const wildcardRequest = checkWorkspaceWildcardRequest(requested, ctx.ownGrant);
+    if (wildcardRequest) {
+        return denied({ ...empty, requested, reason: wildcardRequest.reason }, wildcardRequest.code);
+    }
+    const { result, approvalBinding, bindingMismatch } = resolveDelegationApproval({
+        task: request.task,
+        agent: request.agent,
+        boundWorkspaceId: request.boundWorkspaceId,
+        boundContextId: request.boundContextId,
+        requested,
+        parentGrant: ctx.ownGrant,
+        gated: ctx.gated,
+        approved: ctx.approved,
+        spawned,
+        definitionDigest,
+        correlation,
+        parentId: ctx.spawnId ?? `d${ctx.depth}`,
+    });
+    if (approvalBinding)
+        Object.assign(empty, { approvalBinding });
+    if (result.denied.length > 0) {
+        return denied({
+            ...empty,
+            requested,
+            result,
+            reason: `cannot grant ${result.denied.join(", ")} — this session does not hold it (capability escalation blocked)`,
+        }, "CAPABILITY_ESCALATION");
+    }
+    // ADR-0011: narrowing is checked BEFORE the gate, and the order is load-bearing rather than
+    // stylistic. `assertNarrowing` refuses regardless of approval, so with the old order this returned
+    // "requires explicit approval" for a delegation that could never be approved — telling the operator
+    // to go and find a human who cannot help. `shouldSeekApproval` now also refuses to prompt in this
+    // case; this reordering makes the reported *reason* agree with what actually blocks the spawn.
+    try {
+        assertNarrowing(result);
+    }
+    catch (error) {
+        // ADR-0011's narrowing invariant is the hardest rule this package enforces, and it was the one
+        // refusal an external controller could not identify by code (R-109).
+        return denied({ ...empty, requested, result, reason: String(error instanceof Error ? error.message : error) }, "NARROWING_VIOLATED");
+    }
+    if (result.gatedBlocked.length > 0) {
+        const code = bindingMismatch ? "APPROVAL_SCOPE_MISMATCH" : "GATED_UNAPPROVED";
+        const suffix = bindingMismatch ? " (an approval exists, but its task/workspace/context scope does not match)" : "";
+        return denied({ ...empty, requested, result, reason: `${result.gatedBlocked.join(", ")} requires explicit approval${suffix}` }, code);
+    }
+    const canSubDelegate = result.effective.includes(DELEGATE_CAPABILITY);
+    const plan = planSpawn({
+        effective: result.effective,
+        prompt: request.task,
+        model: request.model,
+        provider: request.provider,
+        thinking: request.thinking,
+        skillPaths: ctx.skillPaths,
+        contextFiles: ctx.contextFiles,
+        systemPrompt,
+        sessionFile: ctx.sessionFile,
+        print: ctx.interactive ? false : undefined,
+    });
+    // R-32. A `skill:` capability the catalog cannot place is refused rather than dropped. Dropping it
+    // would hand back a child whose grant claims a skill it does not have — the ledger would record a
+    // capability that never reached the process, which is precisely the kind of lie an audit trail must
+    // not contain. `unknownCapabilities` above catches names absent from the catalog entirely; this
+    // catches one that is known but whose path we could not resolve, which is a different fault.
+    if (plan.unresolvedSkills.length > 0) {
+        return denied({
+            ...empty,
+            requested,
+            result,
+            reason: `cannot locate ${plan.unresolvedSkills.join(", ")} on disk — granted but unresolvable, so the ` +
+                `child would silently lack it`,
+        }, "DEFINITION_UNREADABLE");
+    }
+    // `-e` loads even under `--no-extensions`. A delegate-capable child loads the governance extension;
+    // a leaf gets only the no-tool observer. Neither path alters --tools or the computed grant.
+    const args = [...plan.args];
+    const observer = canSubDelegate ? ctx.extensionPath : ctx.observerExtensionPath;
+    if (observer)
+        args.splice(args.length - 1, 0, "-e", observer);
+    // `inheritableGrant`, not `result.effective` directly: this is the path a DELEGATED child's grant
+    // actually travels, and the "held but never inherited" rule for `tool:*` and `workspace:*` was enforced
+    // only in `childEnv`. A parent holding `workspace:*` could request it for its child and this line handed
+    // it over, so the rule ADR-0035 advertises held by accident — masked downstream rather than enforced
+    // here. One spelling of the rule, called from both paths.
+    const inheritable = inheritableGrant(result.effective);
+    const env = {
+        [ENV_GRANT]: (assertCapabilitiesArePropagatable(inheritable), inheritable.join(",")),
+        [ENV_DEPTH]: String(childDepth),
+        [ENV_MAX_DEPTH]: String(ctx.maxDepth),
+    };
+    // The child's own share of the subtree budget, and its identity. Both attenuate downward like depth: a
+    // child can never be handed more budget than its parent had left, so the total bound holds across
+    // process boundaries with no shared state.
+    if (ctx.fanoutBudget !== undefined)
+        env[ENV_FANOUT] = String(ctx.fanoutBudget);
+    if (ctx.childSpawnId)
+        env[ENV_PARENT_ID] = ctx.childSpawnId;
+    if (ctx.childExecutionId)
+        env[ENV_EXECUTION_ID] = ctx.childExecutionId;
+    if (ctx.gated.length > 0)
+        env[ENV_GATED] = ctx.gated.join(",");
+    // Approvals ride down with the grant, but only ever for what this child actually received — so
+    // `approved ⊆ grant` holds at every level (ADR-0010). Written even when empty, so this object states
+    // the child's approval set outright rather than leaving it to whatever the caller merges over; see
+    // `mergeChildEnv`, which is what actually stops the parent's value leaking through.
+    // Clamped to what the child actually INHERITS, not to what it was granted. The two differ only for a
+    // non-inheritable wildcard, and passing down an approval for a capability the child does not hold would
+    // leave banked authority with nothing to spend it on — `childEnv` clamps to `inheritable` for the same
+    // reason on the other path.
+    env[ENV_APPROVED] = inheritApprovals(ctx.approved ?? [], inheritable).join(",");
+    if (ctx.ledgerPath)
+        env[ENV_LEDGER] = ctx.ledgerPath;
+    // Composition-supplied per-child environment (the activity timeline's observation identity today).
+    // Never process-global grant state: a key in the governance namespace is a programming error in the
+    // caller, refused loudly rather than letting a product widen what the child inherits.
+    for (const [key, value] of Object.entries(ctx.childEnv?.({ childExecutionId: ctx.childExecutionId }) ?? {})) {
+        if (GOVERNANCE_ENV_KEYS.includes(key) || key in env)
+            throw new Error(`childEnv may not set governance key ${key}`);
+        env[key] = value;
+    }
+    return {
+        ok: true,
+        args,
+        env,
+        effective: result.effective,
+        result,
+        childDepth,
+        requested,
+        childId: ctx.childSpawnId,
+        executionId: ctx.childExecutionId,
+        taskDigest,
+        ...(correlation ? { correlation } : {}),
+        ...(approvalBinding ? { approvalBinding } : {}),
+        ...(definitionDigest ? { definitionDigest } : {}),
+    };
+}
+//# sourceMappingURL=delegate.js.map

package/dist/kernel/delegate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate.js","sourceRoot":"","sources":["../../src/kernel/delegate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAA+C,MAAM,kBAAkB,CAAC;AACvH,OAAO,EAAE,eAAe,EAAuC,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAElH,4GAA4G;AAC5G,0GAA0G;AAC1G,+DAA+D;AAC/D,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAClH,OAAO,EACL,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,SAAS,EACT,UAAU,EACV,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAA4B,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,mBAAmB,EAAgB,MAAM,cAAc,CAAC;AAC7G,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAA4C,MAAM,eAAe,CAAC;AACrG,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAkD,MAAM,kBAAkB,CAAC;AACpH,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAErE,OAAO,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,UAAU,cAAc,CAAC,OAA0B,EAAE,GAAsB;IAC/E,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAE,IAAiB,EAAc,EAAE,CACjE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,qGAAqG;IACrG,mGAAmG;IACnG,iGAAiG;IACjG,oGAAoG;IACpG,uGAAuG;IACvG,sGAAsG;IACtG,mGAAmG;IACnG,oEAAoE;IACpE,IAAI,WAA4C,CAAC;IACjD,IAAI,kBAAiD,CAAC;IACtD,IAAI,CAAC;QACH,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kBAAkB;YAChB,KAAK,YAAY,iBAAiB;gBAChC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACpG,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,EAAE;QACR,GAAG,EAAE,EAAE;QACP,SAAS,EAAE,EAAE;QACb,UAAU;QACV,SAAS,EAAE,EAAE;QACb,UAAU;QACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;KACpG,CAAC;IAEF,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,UAAU,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,mCAAmC,GAAG,CAAC,QAAQ,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,cAAc,CAAC,CAAC;IAE5G,wGAAwG;IACxG,qGAAqG;IACrG,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9E,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,MAAM,CACX;YACE,GAAG,KAAK;YACR,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7G,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,EACD,OAAO,CAAC,IAAI,CACb,CAAC;IACJ,CAAC;IAED,iGAAiG;IACjG,IAAI,SAAuB,CAAC;IAC5B,IAAI,YAAgC,CAAC;IACrC,IAAI,gBAA8C,CAAC;IACnD,sGAAsG;IACtG,IAAI,OAAoC,CAAC;IAEzC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvD,OAAO,GAAG,UAAU,CAAC;QACrB,+FAA+F;QAC/F,iGAAiG;QACjG,2BAA2B;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,OAAO,MAAM,CACX;gBACE,GAAG,KAAK;gBACR,MAAM,EACJ,kBAAkB,OAAO,CAAC,KAAK,GAAG;oBAClC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,yBAAyB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,8BAA8B,CAAC;aACpG,EACD,oBAAoB,CACrB,CAAC;QACJ,CAAC;QAED,+FAA+F;QAC/F,oGAAoG;QACpG,mGAAmG;QACnG,iFAAiF;QACjF,EAAE;QACF,mGAAmG;QACnG,oGAAoG;QACpG,+FAA+F;QAC/F,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACvE,OAAO,MAAM,CACX;gBACE,GAAG,KAAK;gBACR,SAAS,EAAE,CAAC,WAAW,CAAC;gBACxB,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;gBAClD,MAAM,EACJ,iBAAiB,UAAU,CAAC,IAAI,kCAAkC,WAAW,GAAG;oBAChF,4BAA4B,UAAU,CAAC,MAAM,KAAK;oBAClD,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;wBACd,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;wBACrC,CAAC,CAAC,2CAA2C,WAAW,kCAAkC,CAAC;aAChG,EACD,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QAED,mGAAmG;QACnG,qGAAqG;QACrG,4EAA4E;QAC5E,EAAE;QACF,qGAAqG;QACrG,kGAAkG;QAClG,oGAAoG;QACpG,6DAA6D;QAC7D,gBAAgB,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAE3C,MAAM,OAAO,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,OAAO,MAAM,CACX;gBACE,GAAG,KAAK;gBACR,MAAM,EACJ,UAAU,UAAU,CAAC,IAAI,qEAAqE;oBAC9F,MAAM,UAAU,CAAC,MAAM,yEAAyE;aACnG,EACD,kBAAkB,CACnB,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,MAAM,CACX;gBACE,GAAG,KAAK;gBACR,MAAM,EACJ,UAAU,UAAU,CAAC,IAAI,sCAAsC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/F,+FAA+F;oBAC/F,wFAAwF;aAC3F,EACD,6BAA6B,CAC9B,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC;QACjC,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7D,CAAC;IAED,oGAAoG;IACpG,2FAA2F;IAC3F,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,+FAA+F;YAC/F,gGAAgG;YAChG,kGAAkG;YAClG,iGAAiG;YACjG,uFAAuF;YACvF,mGAAmG;YACnG,qGAAqG;YACrG,gGAAgG;YAChG,MAAM,KAAK,GAAG,OAAO;iBAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,OAAO,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;gBAC3C,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,OAAO,CAAC;gBACrC,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,EAAE,GAAG,CAAC,OAAQ,CAAC,CAAC;gBAC7C,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC;YACzD,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAC1C,OAAO,MAAM,CACX;gBACE,GAAG,KAAK;gBACR,SAAS;gBACT,MAAM,EACJ,oBAAoB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;oBACjG,2DAA2D;oBAC3D,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,EACD,cAAc,CACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sGAAsG;IACtG,oGAAoG;IACpG,MAAM,eAAe,GAAG,6BAA6B,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/E,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,yBAAyB,CAAC;QAC7E,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS;QACT,WAAW,EAAE,GAAG,CAAC,QAAQ;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO;QACP,gBAAgB;QAChB,WAAW;QACX,QAAQ,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE;KACzC,CAAC,CAAC;IACH,IAAI,eAAe;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE/D,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CACX;YACE,GAAG,KAAK;YACR,SAAS;YACT,MAAM;YACN,MAAM,EAAE,gBAAgB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kEAAkE;SACnH,EACD,uBAAuB,CACxB,CAAC;IACJ,CAAC;IACD,4FAA4F;IAC5F,mGAAmG;IACnG,oGAAoG;IACpG,kGAAkG;IAClG,+FAA+F;IAC/F,IAAI,CAAC;QACH,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+FAA+F;QAC/F,qEAAqE;QACrE,OAAO,MAAM,CACX,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAC/F,oBAAoB,CACrB,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC9E,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,4EAA4E,CAAC,CAAC,CAAC,EAAE,CAAC;QACnH,OAAO,MAAM,CACX,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,MAAM,EAAE,EAAE,EAChH,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,SAAS,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,OAAO,CAAC,IAAI;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,YAAY;QACZ,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC3C,CAAC,CAAC;IAEH,mGAAmG;IACnG,kGAAkG;IAClG,oGAAoG;IACpG,gGAAgG;IAChG,6FAA6F;IAC7F,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,MAAM,CACX;YACE,GAAG,KAAK;YACR,SAAS;YACT,MAAM;YACN,MAAM,EACJ,iBAAiB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,8CAA8C;gBAC/F,8BAA8B;SACjC,EACD,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,4FAA4F;IAC5F,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAChF,IAAI,QAAQ;QAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE9D,kGAAkG;IAClG,wGAAwG;IACxG,yGAAyG;IACzG,qGAAqG;IACrG,0DAA0D;IAC1D,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,GAAG,GAA2B;QAClC,CAAC,SAAS,CAAC,EAAE,CAAC,iCAAiC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpF,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;QAC/B,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;KACtC,CAAC;IACF,uGAAuG;IACvG,kGAAkG;IAClG,2CAA2C;IAC3C,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,YAAY;QAAE,GAAG,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;IAC5D,IAAI,GAAG,CAAC,gBAAgB;QAAE,GAAG,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC;IACvE,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,+FAA+F;IAC/F,qGAAqG;IACrG,mGAAmG;IACnG,oFAAoF;IACpF,qGAAqG;IACrG,wGAAwG;IACxG,uGAAuG;IACvG,4BAA4B;IAC5B,GAAG,CAAC,YAAY,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChF,IAAI,GAAG,CAAC,UAAU;QAAE,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC;IACrD,mGAAmG;IACnG,oGAAoG;IACpG,sFAAsF;IACtF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5G,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;QACnH,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,GAAG;QACH,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM;QACN,UAAU;QACV,SAAS;QACT,OAAO,EAAE,GAAG,CAAC,YAAY;QACzB,WAAW,EAAE,GAAG,CAAC,gBAAgB;QACjC,UAAU;QACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/kernel/delegation-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-approval.d.ts","sourceRoot":"","sources":["../../src/kernel/delegation-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAE3E,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAA+C,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAEhH;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;OAGG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,uGAAuG;IACvG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,CAwFzF"}

package/dist/kernel/delegation-approval.js

@@ -0,0 +1,93 @@
+import { DELEGATE_SUBJECT } from "./approval.js";
+import { agentCapability, workspaceCapability } from "./capabilities.js";
+import { approvalBindingsEqual, buildApprovalBinding, } from "./correlation.js";
+import { AGENT_WILDCARD, WORKSPACE_WILDCARD, resolve } from "./resolve.js";
+/**
+ * Resolve the approval half of one delegation after its requested capability set is known.
+ *
+ * Kept as one function because the ordering is security-relevant: compute the unapproved and potential
+ * effective sets first, derive the exact binding from those trusted values, then decide which approvals
+ * match. An approval must never define the scope against which it is checked.
+ */
+export function resolveDelegationApproval(input) {
+    const subject = input.agent ?? DELEGATE_SUBJECT;
+    const unapproved = resolve({
+        requested: input.requested,
+        parentGrant: input.parentGrant,
+        gated: input.gated,
+        approved: [],
+    });
+    /**
+     * Authorities the PARENT is spending on this one delegation, gated as such.
+     *
+     * ADR-0024 established the shape for `agent:<name>`: the id is gated as the parent's authority to run
+     * that definition *now*, and never joins requested/effective, because that would hand the child authority
+     * to recursively spawn itself. ADR-0035 added a second member of the category — `workspace:<id>`, the
+     * authority to route this child somewhere — and shipped without it, so `PI_DADDY_GATED=workspace:prod`
+     * was accepted, recorded, and silently inert: no human was ever asked. The ADR claimed the opposite in
+     * three places.
+     *
+     * A LIST rather than two variables on purpose. This is the third namespace whose authorising id is gated
+     * per-delegation rather than granted downward, and the first two were written as one special case each;
+     * a fourth should extend an array, not add a third `if` and a third field to thread through.
+     */
+    const authorisingCapabilities = [];
+    const gateAuthority = (authorising, wildcard) => {
+        if (input.gated.includes(authorising) || input.gated.includes(wildcard)) {
+            authorisingCapabilities.push(authorising);
+            unapproved.gatedBlocked = [...unapproved.gatedBlocked, authorising];
+        }
+    };
+    if (input.spawned)
+        gateAuthority(agentCapability(input.spawned.name), AGENT_WILDCARD);
+    // Trusted: `boundWorkspaceId` is set only from a routing spec resolved against the operator registry,
+    // never from a model-supplied `correlation` claim (R-110).
+    if (input.boundWorkspaceId) {
+        gateAuthority(workspaceCapability(input.boundWorkspaceId), WORKSPACE_WILDCARD);
+    }
+    const potential = resolve({
+        requested: input.requested,
+        parentGrant: input.parentGrant,
+        gated: input.gated,
+        // If the definition also declares its own authorising `agent:<name>`, the same approval unblocks
+        // that requested child capability too; excluding it here would bind a smaller set than we provision.
+        approved: unapproved.gatedBlocked,
+    });
+    const approvalBinding = input.correlation
+        ? buildApprovalBinding({
+            task: input.task,
+            requested: input.requested,
+            effective: potential.effective,
+            definitionSha256: input.definitionDigest?.sha256,
+            parentId: input.parentId,
+            workspaceId: input.boundWorkspaceId,
+            contextId: input.boundContextId,
+            treeSha: input.correlation?.tree_sha,
+            lastChangeSeq: input.correlation?.last_change_seq,
+        })
+        : undefined;
+    const forSubject = (input.approved ?? []).filter((approval) => approval.subject === subject);
+    const approvedCapabilities = forSubject
+        .filter((approval) => approvalBinding ? approvalBindingsEqual(approval.binding, approvalBinding) : approval.binding === undefined)
+        .map((approval) => approval.capability);
+    const bindingMismatch = approvalBinding !== undefined &&
+        forSubject.some((approval) => approval.binding !== undefined && !approvalBindingsEqual(approval.binding, approvalBinding));
+    const result = resolve({
+        requested: input.requested,
+        parentGrant: input.parentGrant,
+        gated: input.gated,
+        approved: approvedCapabilities,
+    });
+    // Filtered against what `resolve()` already listed, not just against approvals. In the ORDINARY chained
+    // configuration — route the child to `prod` AND grant it `workspace:prod` so it can route onward — the
+    // authorising id and the requested id are spelled identically, so appending unconditionally produced
+    // `gatedBlocked: ["workspace:prod","workspace:prod"]`, which reached the refusal text a model reads
+    // (*"workspace:prod, workspace:prod requires explicit approval"*) and the append-only ledger, whose schema
+    // has no `uniqueItems`. The old `agent:`-only code had the same shape and never hit it, because a
+    // self-recursive `agent:X` ceiling is not a thing anybody writes.
+    const stillGated = authorisingCapabilities.filter((c) => !approvedCapabilities.includes(c) && !result.gatedBlocked.includes(c));
+    if (stillGated.length > 0)
+        result.gatedBlocked = [...result.gatedBlocked, ...stillGated];
+    return { result, ...(approvalBinding ? { approvalBinding } : {}), bindingMismatch };
+}
+//# sourceMappingURL=delegation-approval.js.map

package/dist/kernel/delegation-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-approval.js","sourceRoot":"","sources":["../../src/kernel/delegation-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAA4B,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAGrB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,OAAO,EAAuC,MAAM,cAAc,CAAC;AAEhH;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAmBzC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,gBAAgB,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC;QACzB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;IAEH;;;;;;;;;;;;;OAaG;IACH,MAAM,uBAAuB,GAAiB,EAAE,CAAC;IACjD,MAAM,aAAa,GAAG,CAAC,WAAuB,EAAE,QAAoB,EAAE,EAAE;QACtE,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1C,UAAU,CAAC,YAAY,GAAG,CAAC,GAAG,UAAU,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,OAAO;QAAE,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC;IACtF,sGAAsG;IACtG,2DAA2D;IAC3D,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,iGAAiG;QACjG,qGAAqG;QACrG,QAAQ,EAAE,UAAU,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW;QACvC,CAAC,CAAC,oBAAoB,CAAC;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,MAAM;YAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,gBAAgB;YACnC,SAAS,EAAE,KAAK,CAAC,cAAc;YAC/B,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ;YACpC,aAAa,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe;SAClD,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAC7F,MAAM,oBAAoB,GAAG,UAAU;SACpC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CACnB,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAC5G;SACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,eAAe,GACnB,eAAe,KAAK,SAAS;QAC7B,UAAU,CAAC,IAAI,CACb,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAC1G,CAAC;IACJ,MAAM,MAAM,GAAG,OAAO,CAAC;QACrB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,oBAAoB;KAC/B,CAAC,CAAC;IACH,wGAAwG;IACxG,uGAAuG;IACvG,qGAAqG;IACrG,oGAAoG;IACpG,2GAA2G;IAC3G,kGAAkG;IAClG,kEAAkE;IAClE,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC7E,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,YAAY,EAAE,GAAG,UAAU,CAAC,CAAC;IACzF,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC;AACtF,CAAC"}

package/dist/kernel/env-names.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Every environment variable this package reads or writes, in one place (ADR-0076 PR 3b).
+ *
+ * Two namespaces existed before: `PI_GRANTS_*` for governance and `PI_DADDY_*` for products. Everything is
+ * `PI_DADDY_*` now. The kernel's `childEnv` hook used to refuse product-supplied keys by prefix; with one
+ * prefix it refuses by the closed list below, so the list must name every variable that shapes governance.
+ * `test/env-names.test.ts` forces that: every key the planner writes into a child's environment must be in
+ * GOVERNANCE_ENV_KEYS, and no `PI_GRANTS_` literal may survive anywhere except the legacy table here.
+ *
+ * Legacy names are adopted once per process (`adoptLegacyEnvironment`) so an operator's `export
+ * PI_GRANTS_HERDR=1` keeps working for one minor release with a visible warning; the new name always wins
+ * when both are set. Children are spawned with the new names only.
+ */
+export declare const ENV_GRANT = "PI_DADDY_GRANT";
+export declare const ENV_DEPTH = "PI_DADDY_DEPTH";
+export declare const ENV_MAX_DEPTH = "PI_DADDY_MAX_DEPTH";
+export declare const ENV_GATED = "PI_DADDY_GATED";
+export declare const ENV_LEDGER = "PI_DADDY_LEDGER";
+export declare const ENV_APPROVED = "PI_DADDY_APPROVED";
+export declare const ENV_FANOUT = "PI_DADDY_FANOUT";
+export declare const ENV_PARENT_ID = "PI_DADDY_PARENT_ID";
+export declare const ENV_EXECUTION_ID = "PI_DADDY_EXECUTION_ID";
+export declare const ENV_HERDR = "PI_DADDY_HERDR";
+export declare const ENV_HERDR_WORKSPACE = "PI_DADDY_HERDR_WORKSPACE";
+export declare const ENV_HERDR_KEEP_PANE = "PI_DADDY_HERDR_KEEP_PANE";
+export declare const ENV_CHILD_TIMEOUT = "PI_DADDY_CHILD_TIMEOUT";
+export declare const ENV_CHILD_IDLE_TIMEOUT = "PI_DADDY_CHILD_IDLE_TIMEOUT";
+export declare const ENV_APPROVAL_TIMEOUT = "PI_DADDY_APPROVAL_TIMEOUT";
+export declare const ENV_ALLOW_UNRESOLVED_MODELS = "PI_DADDY_ALLOW_UNRESOLVED_MODELS";
+export declare const ENV_WORKSPACE_REGISTRY = "PI_DADDY_WORKSPACE_REGISTRY";
+export declare const ENV_WORKSPACE_LEASE_DIR = "PI_DADDY_WORKSPACE_LEASE_DIR";
+export declare const ENV_EXECUTION_ARCHIVE = "PI_DADDY_EXECUTION_ARCHIVE";
+export declare const ENV_NATIVE_SESSION_ROOT = "PI_DADDY_NATIVE_SESSION_ROOT";
+export declare const ENV_RETAIN_NATIVE_SESSIONS = "PI_DADDY_RETAIN_NATIVE_SESSIONS";
+export declare const ENV_GOVERNANCE = "PI_DADDY_GOVERNANCE";
+/** Every variable that shapes governance. The `childEnv` hook may set none of these. */
+export declare const GOVERNANCE_ENV_KEYS: readonly string[];
+/**
+ * The names retired by ADR-0076 PR 3b, old → new. Read for one minor release, never written. Test-tier
+ * switches (`PI_GRANTS_IT_MODEL`, `PI_GRANTS_KEEP_TMP`) are included so an operator's shell keeps working.
+ */
+export declare const LEGACY_ENV_NAMES: Readonly<Record<string, string>>;
+/**
+ * Copy each legacy variable to its new name when the new name is absent. Returns the legacy names adopted,
+ * so the caller can warn once. Never overwrites a value set under the new name, and never deletes the old
+ * one (a sibling process of an older release may still read it).
+ */
+export declare function adoptLegacyEnvironment(env: NodeJS.ProcessEnv): string[];
+/** The one-line warning shown when legacy names were adopted. */
+export declare function legacyEnvironmentWarning(adopted: readonly string[]): string;
+//# sourceMappingURL=env-names.d.ts.map

package/dist/kernel/env-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-names.d.ts","sourceRoot":"","sources":["../../src/kernel/env-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAC1C,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAC1C,eAAO,MAAM,aAAa,uBAAuB,CAAC;AAClD,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAC1C,eAAO,MAAM,UAAU,oBAAoB,CAAC;AAC5C,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAChD,eAAO,MAAM,UAAU,oBAAoB,CAAC;AAC5C,eAAO,MAAM,aAAa,uBAAuB,CAAC;AAClD,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AAGxD,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAC1C,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAC9D,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAC9D,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAC1D,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AACpE,eAAO,MAAM,oBAAoB,8BAA8B,CAAC;AAChE,eAAO,MAAM,2BAA2B,qCAAqC,CAAC;AAC9E,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AACpE,eAAO,MAAM,uBAAuB,iCAAiC,CAAC;AACtE,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAClE,eAAO,MAAM,uBAAuB,iCAAiC,CAAC;AACtE,eAAO,MAAM,0BAA0B,oCAAoC,CAAC;AAC5E,eAAO,MAAM,cAAc,wBAAwB,CAAC;AAEpD,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAuB/C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAuB5D,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,CASvE;AAED,iEAAiE;AACjE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAK3E"}

package/dist/kernel/env-names.js

@@ -0,0 +1,112 @@
+/**
+ * Every environment variable this package reads or writes, in one place (ADR-0076 PR 3b).
+ *
+ * Two namespaces existed before: `PI_GRANTS_*` for governance and `PI_DADDY_*` for products. Everything is
+ * `PI_DADDY_*` now. The kernel's `childEnv` hook used to refuse product-supplied keys by prefix; with one
+ * prefix it refuses by the closed list below, so the list must name every variable that shapes governance.
+ * `test/env-names.test.ts` forces that: every key the planner writes into a child's environment must be in
+ * GOVERNANCE_ENV_KEYS, and no `PI_GRANTS_` literal may survive anywhere except the legacy table here.
+ *
+ * Legacy names are adopted once per process (`adoptLegacyEnvironment`) so an operator's `export
+ * PI_GRANTS_HERDR=1` keeps working for one minor release with a visible warning; the new name always wins
+ * when both are set. Children are spawned with the new names only.
+ */
+// Governance state pushed at a child by the spawn plan. Stripped from the parent's environment first, so a
+// child holds exactly what the plan decided (see GRANT_ENV_KEYS in propagation.ts).
+export const ENV_GRANT = "PI_DADDY_GRANT";
+export const ENV_DEPTH = "PI_DADDY_DEPTH";
+export const ENV_MAX_DEPTH = "PI_DADDY_MAX_DEPTH";
+export const ENV_GATED = "PI_DADDY_GATED";
+export const ENV_LEDGER = "PI_DADDY_LEDGER";
+export const ENV_APPROVED = "PI_DADDY_APPROVED";
+export const ENV_FANOUT = "PI_DADDY_FANOUT";
+export const ENV_PARENT_ID = "PI_DADDY_PARENT_ID";
+export const ENV_EXECUTION_ID = "PI_DADDY_EXECUTION_ID";
+// Operator preferences a child inherits unchanged. Still governance: they decide executor, deadlines, gates.
+export const ENV_HERDR = "PI_DADDY_HERDR";
+export const ENV_HERDR_WORKSPACE = "PI_DADDY_HERDR_WORKSPACE";
+export const ENV_HERDR_KEEP_PANE = "PI_DADDY_HERDR_KEEP_PANE";
+export const ENV_CHILD_TIMEOUT = "PI_DADDY_CHILD_TIMEOUT";
+export const ENV_CHILD_IDLE_TIMEOUT = "PI_DADDY_CHILD_IDLE_TIMEOUT";
+export const ENV_APPROVAL_TIMEOUT = "PI_DADDY_APPROVAL_TIMEOUT";
+export const ENV_ALLOW_UNRESOLVED_MODELS = "PI_DADDY_ALLOW_UNRESOLVED_MODELS";
+export const ENV_WORKSPACE_REGISTRY = "PI_DADDY_WORKSPACE_REGISTRY";
+export const ENV_WORKSPACE_LEASE_DIR = "PI_DADDY_WORKSPACE_LEASE_DIR";
+export const ENV_EXECUTION_ARCHIVE = "PI_DADDY_EXECUTION_ARCHIVE";
+export const ENV_NATIVE_SESSION_ROOT = "PI_DADDY_NATIVE_SESSION_ROOT";
+export const ENV_RETAIN_NATIVE_SESSIONS = "PI_DADDY_RETAIN_NATIVE_SESSIONS";
+export const ENV_GOVERNANCE = "PI_DADDY_GOVERNANCE";
+/** Every variable that shapes governance. The `childEnv` hook may set none of these. */
+export const GOVERNANCE_ENV_KEYS = Object.freeze([
+    ENV_GRANT,
+    ENV_DEPTH,
+    ENV_MAX_DEPTH,
+    ENV_GATED,
+    ENV_LEDGER,
+    ENV_APPROVED,
+    ENV_FANOUT,
+    ENV_PARENT_ID,
+    ENV_EXECUTION_ID,
+    ENV_HERDR,
+    ENV_HERDR_WORKSPACE,
+    ENV_HERDR_KEEP_PANE,
+    ENV_CHILD_TIMEOUT,
+    ENV_CHILD_IDLE_TIMEOUT,
+    ENV_APPROVAL_TIMEOUT,
+    ENV_ALLOW_UNRESOLVED_MODELS,
+    ENV_WORKSPACE_REGISTRY,
+    ENV_WORKSPACE_LEASE_DIR,
+    ENV_EXECUTION_ARCHIVE,
+    ENV_NATIVE_SESSION_ROOT,
+    ENV_RETAIN_NATIVE_SESSIONS,
+    ENV_GOVERNANCE,
+]);
+/**
+ * The names retired by ADR-0076 PR 3b, old → new. Read for one minor release, never written. Test-tier
+ * switches (`PI_GRANTS_IT_MODEL`, `PI_GRANTS_KEEP_TMP`) are included so an operator's shell keeps working.
+ */
+export const LEGACY_ENV_NAMES = Object.freeze({
+    PI_GRANTS_GRANT: ENV_GRANT,
+    PI_GRANTS_DEPTH: ENV_DEPTH,
+    PI_GRANTS_MAX_DEPTH: ENV_MAX_DEPTH,
+    PI_GRANTS_GATED: ENV_GATED,
+    PI_GRANTS_LEDGER: ENV_LEDGER,
+    PI_GRANTS_APPROVED: ENV_APPROVED,
+    PI_GRANTS_FANOUT: ENV_FANOUT,
+    PI_GRANTS_PARENT_ID: ENV_PARENT_ID,
+    PI_GRANTS_EXECUTION_ID: ENV_EXECUTION_ID,
+    PI_GRANTS_HERDR: ENV_HERDR,
+    PI_GRANTS_HERDR_WORKSPACE: ENV_HERDR_WORKSPACE,
+    PI_GRANTS_HERDR_KEEP_PANE: ENV_HERDR_KEEP_PANE,
+    PI_GRANTS_CHILD_TIMEOUT: ENV_CHILD_TIMEOUT,
+    PI_GRANTS_APPROVAL_TIMEOUT: ENV_APPROVAL_TIMEOUT,
+    PI_GRANTS_ALLOW_UNRESOLVED_MODELS: ENV_ALLOW_UNRESOLVED_MODELS,
+    PI_GRANTS_WORKSPACE_REGISTRY: ENV_WORKSPACE_REGISTRY,
+    PI_GRANTS_WORKSPACE_LEASE_DIR: ENV_WORKSPACE_LEASE_DIR,
+    PI_GRANTS_EXECUTION_ARCHIVE: ENV_EXECUTION_ARCHIVE,
+    PI_GRANTS_NATIVE_SESSION_ROOT: ENV_NATIVE_SESSION_ROOT,
+    PI_GRANTS_RETAIN_NATIVE_SESSIONS: ENV_RETAIN_NATIVE_SESSIONS,
+    PI_GRANTS_IT_MODEL: "PI_DADDY_IT_MODEL",
+    PI_GRANTS_KEEP_TMP: "PI_DADDY_KEEP_TMP",
+});
+/**
+ * Copy each legacy variable to its new name when the new name is absent. Returns the legacy names adopted,
+ * so the caller can warn once. Never overwrites a value set under the new name, and never deletes the old
+ * one (a sibling process of an older release may still read it).
+ */
+export function adoptLegacyEnvironment(env) {
+    const adopted = [];
+    for (const [legacy, current] of Object.entries(LEGACY_ENV_NAMES)) {
+        if (env[legacy] !== undefined && env[current] === undefined) {
+            env[current] = env[legacy];
+            adopted.push(legacy);
+        }
+    }
+    return adopted;
+}
+/** The one-line warning shown when legacy names were adopted. */
+export function legacyEnvironmentWarning(adopted) {
+    return (`pi-daddy: ${adopted.join(", ")} ${adopted.length === 1 ? "is" : "are"} deprecated since ADR-0076 PR 3b; ` +
+        `rename to ${adopted.map((n) => LEGACY_ENV_NAMES[n]).join(", ")}. Legacy names are read for one minor release only.`);
+}
+//# sourceMappingURL=env-names.js.map

package/dist/kernel/env-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-names.js","sourceRoot":"","sources":["../../src/kernel/env-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,2GAA2G;AAC3G,oFAAoF;AACpF,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAC1C,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAC1C,MAAM,CAAC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAClD,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAC5C,MAAM,CAAC,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAChD,MAAM,CAAC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAClD,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAExD,6GAA6G;AAC7G,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAC1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AACpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAChE,MAAM,CAAC,MAAM,2BAA2B,GAAG,kCAAkC,CAAC;AAC9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AACtE,MAAM,CAAC,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAEpD,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAsB,MAAM,CAAC,MAAM,CAAC;IAClE,SAAS;IACT,SAAS;IACT,aAAa;IACb,SAAS;IACT,UAAU;IACV,YAAY;IACZ,UAAU;IACV,aAAa;IACb,gBAAgB;IAChB,SAAS;IACT,mBAAmB;IACnB,mBAAmB;IACnB,iBAAiB;IACjB,sBAAsB;IACtB,oBAAoB;IACpB,2BAA2B;IAC3B,sBAAsB;IACtB,uBAAuB;IACvB,qBAAqB;IACrB,uBAAuB;IACvB,0BAA0B;IAC1B,cAAc;CACf,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC9E,eAAe,EAAE,SAAS;IAC1B,eAAe,EAAE,SAAS;IAC1B,mBAAmB,EAAE,aAAa;IAClC,eAAe,EAAE,SAAS;IAC1B,gBAAgB,EAAE,UAAU;IAC5B,kBAAkB,EAAE,YAAY;IAChC,gBAAgB,EAAE,UAAU;IAC5B,mBAAmB,EAAE,aAAa;IAClC,sBAAsB,EAAE,gBAAgB;IACxC,eAAe,EAAE,SAAS;IAC1B,yBAAyB,EAAE,mBAAmB;IAC9C,yBAAyB,EAAE,mBAAmB;IAC9C,uBAAuB,EAAE,iBAAiB;IAC1C,0BAA0B,EAAE,oBAAoB;IAChD,iCAAiC,EAAE,2BAA2B;IAC9D,4BAA4B,EAAE,sBAAsB;IACpD,6BAA6B,EAAE,uBAAuB;IACtD,2BAA2B,EAAE,qBAAqB;IAClD,6BAA6B,EAAE,uBAAuB;IACtD,gCAAgC,EAAE,0BAA0B;IAC5D,kBAAkB,EAAE,mBAAmB;IACvC,kBAAkB,EAAE,mBAAmB;CACxC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAsB;IAC3D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjE,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,wBAAwB,CAAC,OAA0B;IACjE,OAAO,CACL,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,oCAAoC;QAC1G,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,CACrH,CAAC;AACJ,CAAC"}

package/dist/kernel/execution-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-id.d.ts","sourceRoot":"","sources":["../../src/kernel/execution-id.ts"],"names":[],"mappings":"AAEA,0GAA0G;AAC1G,MAAM,MAAM,WAAW,GAAG,QAAQ,MAAM,EAAE,CAAC;AAI3C,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAED,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAgB,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAErG"}

package/dist/kernel/execution-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-id.js","sourceRoot":"","sources":["../../src/kernel/execution-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,MAAM,eAAe,GAAG,iFAAiF,CAAC;AAE1G,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,UAAU,EAAE,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,KAAK,GAAG,aAAa;IACrE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;AAC7F,CAAC"}

package/dist/kernel/fanout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fanout.d.ts","sourceRoot":"","sources":["../../src/kernel/fanout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,oGAAoG;AACpG,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,IAAwB,CAAC;AAErD,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAM7D;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,CAmBtE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpE"}