@aligndottech/cli 0.48.0 → 0.50.0

package/dist/lib/scope.js

@@ -0,0 +1,323 @@
+/**
+ * L4: which scope a source is read under, and changing it. The one place the CLI (`align connect`, `align sync`) and the MCP tool
+ * (`align_scope`) both decide and write, so a change made by an agent takes exactly the path a person's does.
+ *
+ * Scope is one of two things per source (Decision 7): "yours" (items you are involved in) or "team" (everyone's, in a NAMED place the
+ * token can see: a repo, Jira projects, Linear teams, a GitLab project, Confluence spaces). There is no "everything": a team scope
+ * always has a name. Zoom is always yours; Slack, Notion and Teams already read all the token can see and have nothing to name.
+ *
+ * Where it lives:
+ * - the CHOICE is in the config store beside the token (config.ts `getConnectorScope`), so forgetting the connector removes it;
+ * - each scope has its own `source_sync` row, keyed by `scopeKeyOf`, with the source's window and its own watermark.
+ *   Changing scope adds or reuses a row and never touches another one, and never deletes an imported item.
+ *
+ * Fail direction: an unreadable, missing or unknown choice reads as "yours", the narrower scope. The only blocked case is Confluence
+ * with no spaces, which has no "yours" to fall back to (its API lists whatever the token can read).
+ */
+import fs from 'node:fs';
+import { CAPTURE_SOURCES } from './capture-sources.js';
+import { findConfluenceSpace, findJiraProject, findLinearTeam, githubRepoVisibility, gitlabProjectVisibility, listConfluenceSpaces, listJiraProjects, listLinearTeams, ScopeLookupError, } from './scope-choices.js';
+import { describeScopeKey, disclosureText, fetchOptsFor, FIXED_SCOPES, normaliseScopeValues, SCOPED_SOURCES, scopeKeyOf, ScopeValueError, YOURS_KEY, } from './scope-values.js';
+import { adoptScope, readRows } from './sync/sync-state.js';
+import { inheritedWindowSince } from './sync/window.js';
+/**
+ * The disclosure was shown to a person for this scope: remember it, and if an agent's choice of exactly this scope was waiting
+ * for that, it is active now. The one place a pending scope becomes active.
+ */
+export function markTold(store, source, scopeKey) {
+    store.markDisclosed(source, scopeKey);
+    const s = store.getScope(source);
+    if (s?.kind === 'team' && s.pending && isScoped(source) && scopeKeyOf(source, s.labels) === scopeKey) {
+        store.saveScope(source, { kind: 'team', values: s.values, labels: s.labels });
+    }
+}
+const YOURS_LABEL = 'your own items';
+const labelOf = (source) => CAPTURE_SOURCES[source]?.label ?? source;
+const isScoped = (source) => SCOPED_SOURCES.includes(source);
+function yours(origin, note) {
+    return { scope: 'yours', scopeKey: YOURS_KEY, extras: {}, label: YOURS_LABEL, origin, ...(note !== undefined ? { note } : {}) };
+}
+function team(source, values, labels, origin, deps, foreground) {
+    const scopeKey = scopeKeyOf(source, labels);
+    return {
+        scope: 'team', scopeKey, extras: fetchOptsFor(source, values), label: describeScopeKey(source, scopeKey, 'team'), origin,
+        ...(source === 'github' ? { repo: values[0] } : {}),
+        ...(foreground && !deps.store.isDisclosed(source, scopeKey) ? { disclosure: disclosureText(source, labels) } : {}),
+    };
+}
+/** The line for a repo or project the token cannot see (P0 measured GitHub answering 422 for a private repo). */
+export function cannotSeeNote(source, place) {
+    return source === 'github'
+        ? `Your GitHub token cannot see ${place}, so only items you are involved in were imported. Reconnect with repo access: align connect github`
+        : `Your GitLab token cannot see ${place}, so only your own merge requests were imported. Reconnect with access: align connect gitlab`;
+}
+/** Confluence has no "only yours": with no chosen spaces it reads nothing. */
+export const CONFLUENCE_NEEDS_SPACES = 'Confluence reads only the spaces you choose, and none are chosen yet. Pick them: align connect --source confluence --spaces ENG,OPS';
+const WIDEN_FLAG = { jira: '--projects KEYS', linear: '--teams KEYS' };
+/**
+ * Which scope a source is read under right now. `foreground` is a person at a terminal (`align connect`, `align sync`): only there is
+ * a disclosure returned, and only there is an auto-detected team scope read before the disclosure was shown. A background run reads
+ * what a person chose, or what they were already told about, and otherwise stays at yours.
+ */
+export async function resolveScope(source, deps, o) {
+    if (!isScoped(source))
+        return yours('default');
+    const stored = deps.store.getScope(source);
+    // "Foreground" means a person at a terminal: without one nothing is announced, confirmed or widened by the folder.
+    o = { foreground: o.foreground && deps.isTty() };
+    if (stored?.kind === 'team' && stored.pending) {
+        const person = o.foreground;
+        // Only a person at a terminal is shown the disclosure and asked. Anything else keeps what was in force. A pending scope is NEVER
+        // promoted silently: the disclosure is shown every time, even if this scope was told before, and the caller must get an explicit Yes.
+        if (person) {
+            return { ...team(source, stored.values, stored.labels, 'chosen', deps, true), disclosure: disclosureText(source, stored.labels), activates: true };
+        }
+        const kept = await resolveFrom(source, stored.pending.previous, deps, { foreground: false });
+        return { ...kept, pendingConfirm: true, note: `Team scope for ${source} is waiting for you to confirm: run \`align sync ${source}\` (it will show what it reads)` };
+    }
+    return resolveFrom(source, stored, deps, o);
+}
+async function resolveFrom(source, stored, deps, o) {
+    if (stored?.kind === 'team')
+        return team(source, stored.values, stored.labels, 'chosen', deps, o.foreground);
+    if (source === 'confluence') {
+        return {
+            ...yours('default'),
+            blocked: CONFLUENCE_NEEDS_SPACES,
+        };
+    }
+    if (stored?.kind === 'yours')
+        return yours('chosen');
+    if (source === 'github' || source === 'gitlab')
+        return autoDetected(source, deps, o.foreground);
+    return yours('default', `Reading only your own items. To read a team's: align connect --source ${source} ${WIDEN_FLAG[source] ?? ''}`.trim());
+}
+/** The folder's remote is gitlab.com; a token saved for another host would read a different project of the same path. */
+function selfManagedGitlab(deps, source) {
+    const domain = deps.store.fields(source)?.['domain'];
+    return source === 'gitlab' && !!domain && domain !== 'gitlab.com';
+}
+async function autoDetected(source, deps, foreground) {
+    const place = selfManagedGitlab(deps, source) ? undefined : source === 'github' ? await deps.cwdRepo() : await deps.cwdGitlabProject();
+    if (place === undefined) {
+        return yours('default', source === 'github'
+            ? "Reading only your own GitHub items (this folder is not a GitHub repo). To read everyone's in a repo: align connect --source github --repo owner/repo"
+            : "Reading only your own merge requests (this folder is not a GitLab project). To read everyone's in a project: align connect --source gitlab --gitlab-project group/project");
+    }
+    // A background run must not widen by itself: until the person has been told what a team read is, it stays at yours.
+    if (!foreground && !deps.store.isDisclosed(source, scopeKeyOf(source, [place])))
+        return yours('default');
+    const fields = deps.store.fields(source);
+    const seen = fields?.['token']
+        ? source === 'github' ? await githubRepoVisibility(fields['token'], place, deps.fetch) : await gitlabProjectVisibility(fields, place, deps.fetch)
+        : 'unknown';
+    if (seen === 'invisible')
+        return yours('default', cannotSeeNote(source, place));
+    // 'unknown' proceeds: a probe that could not answer is not evidence of a refusal, and the fetch reports its own.
+    return team(source, [place], [place], 'detected', deps, foreground);
+}
+/** A change that was refused. The message is written for the person and never carries a value that was refused. */
+export class ScopeRefusal extends Error {
+    kind;
+    constructor(message, kind) {
+        super(message);
+        this.kind = kind;
+        this.name = 'ScopeRefusal';
+    }
+}
+const day = (iso) => iso.slice(0, 10);
+async function verify(source, raw, deps, fields) {
+    let given;
+    try {
+        given = normaliseScopeValues(source, raw);
+    }
+    catch (e) {
+        if (e instanceof ScopeValueError)
+            throw new ScopeRefusal(`${e.message} Nothing was changed.`, 'invalid');
+        throw e;
+    }
+    const name = labelOf(source);
+    try {
+        switch (source) {
+            case 'github': {
+                const seen = await githubRepoVisibility(fields['token'] ?? '', given[0], deps.fetch);
+                if (seen === 'invisible')
+                    throw new ScopeRefusal(`Your GitHub token cannot see the repo you named. Nothing was changed. Reconnect with repo access: align connect github`, 'invisible');
+                if (seen === 'unknown')
+                    throw new ScopeRefusal(`Align could not check whether your GitHub token can see the repo you named (GitHub did not answer clearly). Nothing was changed; try again.`, 'unverified');
+                return { values: given, labels: given };
+            }
+            case 'gitlab': {
+                const seen = await gitlabProjectVisibility(fields, given[0], deps.fetch);
+                if (seen === 'invisible')
+                    throw new ScopeRefusal(`Your GitLab token cannot see the project you named. Nothing was changed.`, 'not_visible');
+                if (seen === 'unknown')
+                    throw new ScopeRefusal(`Align could not check whether your GitLab token can see the project you named. Nothing was changed; try again.`, 'unverified');
+                return { values: given, labels: given };
+            }
+            case 'jira':
+            case 'confluence': {
+                const cap = deps.listMax !== undefined ? { max: deps.listMax } : {};
+                const listed = source === 'jira' ? await listJiraProjects(fields, deps.fetch, cap) : await listConfluenceSpaces(fields, deps.fetch, cap);
+                const visible = new Set(listed.items.map((x) => x.key));
+                let missing = given.filter((g) => !visible.has(g));
+                // A truncated list cannot say a key is invisible: ask for each missing key directly.
+                if (listed.truncated && missing.length > 0) {
+                    const still = [];
+                    for (const k of missing)
+                        if (!(source === 'jira' ? await findJiraProject(fields, k, deps.fetch) : await findConfluenceSpace(fields, k, deps.fetch)))
+                            still.push(k);
+                    missing = still;
+                }
+                if (missing.length > 0) {
+                    throw new ScopeRefusal(`Your ${name} token cannot see ${missing.length} of the ${source === 'jira' ? 'projects' : 'spaces'} you gave (the values are not printed back).${listed.truncated ? ` The list was cut off after ${listed.items.length}, so each was also asked for directly.` : ''} Nothing was changed.`, 'not_visible');
+                }
+                return { values: given, labels: given };
+            }
+            case 'linear': {
+                const listed = await listLinearTeams(fields, deps.fetch);
+                const found = given.map((g) => listed.items.find((t) => t.id === g || t.key === g));
+                if (listed.truncated) {
+                    for (let i = 0; i < given.length; i++)
+                        if (found[i] === undefined)
+                            found[i] = await findLinearTeam(fields, given[i], deps.fetch);
+                }
+                const missing = given.filter((_, i) => found[i] === undefined);
+                if (missing.length > 0) {
+                    throw new ScopeRefusal(`Your Linear token cannot see ${missing.length} of the teams you gave (the values are not printed back).${listed.truncated ? ` The list was cut off after ${listed.items.length}, so each key was also asked for directly.` : ''} Nothing was changed.`, 'not_visible');
+                }
+                const hits = found;
+                return { values: hits.map((t) => t.id), labels: hits.map((t) => t.key) };
+            }
+        }
+    }
+    catch (e) {
+        if (e instanceof ScopeLookupError)
+            throw new ScopeRefusal(`${e.message} Nothing was changed.`, 'lookup');
+        throw e;
+    }
+}
+/**
+ * Check a requested scope WITHOUT writing anything: refuses (ScopeRefusal) what is unknown, fixed, not connected, malformed, or not
+ * visible to the token. `fields` are the connector fields to check with - the saved ones, or the in-flight ones of a connect whose
+ * token is not saved yet.
+ */
+export async function chooseScope(deps, source, input, fields) {
+    if (!isScoped(source)) {
+        const fixed = FIXED_SCOPES[source];
+        if (fixed)
+            throw new ScopeRefusal(`${labelOf(source)} reads ${fixed.text}. There is no scope to choose for it.`, 'fixed');
+        throw new ScopeRefusal(`Unknown source. A scope can be set for: ${SCOPED_SOURCES.join(', ')}.`, 'unknown_source');
+    }
+    if (!fields?.['token']) {
+        throw new ScopeRefusal(`${labelOf(source)} is not connected, so its scope cannot be set. Connecting needs a token only the person can supply: align connect ${source}`, 'not_connected');
+    }
+    if (input.scope === 'yours') {
+        if (source === 'confluence') {
+            throw new ScopeRefusal('Confluence has no "only yours" scope: it reads the spaces you choose. Name them: align connect --source confluence --spaces ENG,OPS', 'no_yours');
+        }
+        return { source, scope: 'yours', scopeKey: YOURS_KEY, label: YOURS_LABEL, values: [], labels: [] };
+    }
+    const v = await verify(source, input.values, deps, fields);
+    const scopeKey = scopeKeyOf(source, v.labels);
+    return { source, scope: 'team', scopeKey, label: describeScopeKey(source, scopeKey, 'team'), values: v.values, labels: v.labels };
+}
+/** Write a checked choice: the stored preference, and the scope's own `source_sync` row (the source's window, no watermark). Deletes nothing. */
+/**
+ * `windowSince` is the window a connect actually READ (its `--since`), given only when the person gave one; it becomes the window of a NEW
+ * scope row so the next sync does not read it all again. An existing row keeps its own. Absent: the source's window.
+ */
+export function commitScope(deps, source, choice, by, windowSince) {
+    if (choice.scope === 'team') {
+        // An AGENT's team choice waits for a person (the disclosure at a terminal); what was in force stays in force until then.
+        // Re-choosing the scope that is already active is not a change, so it needs no confirmation.
+        const current = deps.store.getScope(source);
+        const active = current === null ? null : current.kind === 'team' && current.pending ? current.pending.previous : current.kind === 'team' ? { kind: 'team', values: current.values, labels: current.labels } : current;
+        const same = active?.kind === 'team' && scopeKeyOf(source, active.labels) === choice.scopeKey;
+        const waits = by.via === 'mcp' || by.unattended === true;
+        deps.store.saveScope(source, waits && !same
+            ? { kind: 'team', values: choice.values, labels: choice.labels, pending: { previous: active } }
+            : { kind: 'team', values: choice.values, labels: choice.labels });
+    }
+    // "Yours" is written down for every source that has one: otherwise GitHub and GitLab widen again from the folder's remote, and Jira
+    // and Linear from the keys local decisions cite, as if nothing had been chosen.
+    else {
+        deps.store.saveScope(source, { kind: 'yours' });
+        // Narrowed: a wider scope chosen later is announced again.
+        deps.store.clearDisclosed(source);
+    }
+    const pending = deps.store.getScope(source)?.kind === 'team' && deps.store.getScope(source).pending !== undefined;
+    if (deps.dbPath === undefined || !fs.existsSync(deps.dbPath))
+        return { newRow: true, pending };
+    const window = windowSince !== undefined ? windowSince : inheritedWindowSince(readRows(deps.dbPath, source), deps.now());
+    const adopted = adoptScope(deps.dbPath, { source, scopeKey: choice.scopeKey, scope: choice.scope }, window, { via: by.via, agent: by.via === 'mcp' ? by.agent : null });
+    return { newRow: adopted.created, pending, row: adopted.row };
+}
+/**
+ * Set a source's scope. The ONE writer: `align_scope set` ends here, and `align connect --scope ...` ends in the same
+ * chooseScope + commitScope pair. Refuses (ScopeRefusal) rather than guessing, and stores nothing on any refusal.
+ * Never deletes an item.
+ */
+export async function setScope(deps, source, input, by) {
+    const choice = await chooseScope(deps, source, input, deps.store.fields(source));
+    const { newRow: created, pending, row } = commitScope(deps, choice.source, choice, by);
+    const name = labelOf(choice.source);
+    const result = { source: choice.source, scope: choice.scope, scopeKey: choice.scopeKey, label: choice.label, newRow: created, text: '' };
+    if (choice.scope === 'yours') {
+        result.text = `${name} now reads only your own items. Items already imported from the wider scope stay in your graph; they are no longer refreshed.`;
+        return result;
+    }
+    const back = row?.high_water ? day(row.high_water) : undefined;
+    const reach = row === undefined || row.window_since === null
+        ? `for all the history its ceiling allows`
+        : `back to ${day(row.window_since)}`;
+    result.text = created || back === undefined
+        ? `${name} now reads ${choice.label}. This scope has not been read before, so the next sync re-reads ${name} ${reach} for it. That can take a few minutes and uses part of your ${name} rate limit. Nothing already imported is deleted.`
+        : `${name} now reads ${choice.label}. This scope was read before, so the next sync catches up since ${back}. Nothing already imported is deleted.`;
+    result.disclosure = disclosureText(choice.source, choice.labels);
+    if (pending) {
+        result.pending = true;
+        result.text = `${name} will read ${choice.label} once the person confirms it. It is waiting for the person: nothing reads it in the background, or when an agent runs a sync, until they run \`align sync ${choice.source}\` at a terminal, which shows what it reads first. Until then ${name} keeps its current scope. When confirmed, the first sync re-reads ${name} ${reach} for this scope (a few minutes, some of its rate limit). Nothing already imported is deleted.`;
+    }
+    return result;
+}
+const VIEW_ORDER = ['github', 'jira', 'confluence', 'slack', 'teams', 'gitlab', 'linear', 'notion', 'zoom'];
+/**
+ * Each connected source's scope as a sync here would read it. Makes no network call: a GitHub repo found from the folder is reported as
+ * what the next sync will try, and the sync itself checks the token can see it.
+ */
+export async function viewScopes(deps) {
+    const out = [];
+    for (const source of VIEW_ORDER) {
+        if (!deps.store.fields(source)?.['token'])
+            continue;
+        const fixed = FIXED_SCOPES[source];
+        if (fixed) {
+            out.push({ source, kind: fixed.scope, scope_key: YOURS_KEY, label: fixed.text, can_set: false, origin: 'fixed' });
+            continue;
+        }
+        const raw = deps.store.getScope(source);
+        // A waiting agent choice is not in force: show what is, and what is waiting.
+        const waitingKey = raw?.kind === 'team' && raw.pending ? raw : undefined;
+        const stored = waitingKey ? waitingKey.pending.previous : raw;
+        const waiting = waitingKey ? { waiting: describeScopeKey(source, scopeKeyOf(source, waitingKey.labels), 'team') } : {};
+        const push = (v) => { out.push({ ...v, ...waiting }); };
+        if (stored?.kind === 'team') {
+            push({ source, kind: 'team', scope_key: scopeKeyOf(source, stored.labels), label: describeScopeKey(source, scopeKeyOf(source, stored.labels), 'team'), values: stored.labels, can_set: true, origin: 'chosen' });
+        }
+        else if (source === 'confluence') {
+            push({ source, kind: 'unset', scope_key: YOURS_KEY, label: 'no spaces chosen, so nothing is read', can_set: true, origin: 'default' });
+        }
+        else if (stored?.kind === 'yours') {
+            push({ source, kind: 'yours', scope_key: YOURS_KEY, label: YOURS_LABEL, can_set: true, origin: 'chosen' });
+        }
+        else {
+            const place = selfManagedGitlab(deps, source) ? undefined : source === 'github' ? await deps.cwdRepo() : source === 'gitlab' ? await deps.cwdGitlabProject() : undefined;
+            push(place !== undefined
+                ? { source, kind: 'team', scope_key: scopeKeyOf(source, [place]), label: describeScopeKey(source, scopeKeyOf(source, [place]), 'team'), values: [place], can_set: true, origin: 'detected' }
+                : { source, kind: 'yours', scope_key: YOURS_KEY, label: YOURS_LABEL, can_set: true, origin: 'default' });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=scope.js.map

package/dist/lib/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/lib/scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EACW,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,gBAAgB,EAC3J,eAAe,EAAE,gBAAgB,GAClC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACa,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EACpH,UAAU,EAAE,eAAe,EAAoB,SAAS,GACzD,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAgBxD;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAiB,EAAE,MAAc,EAAE,QAAgB;IAC1E,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrG,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AA0CD,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAU,EAAE,CAAE,eAAqD,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,MAAM,CAAC;AAC5H,MAAM,QAAQ,GAAG,CAAC,MAAc,EAA0B,EAAE,CAAE,cAAoC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAEpH,SAAS,KAAK,CAAC,MAA+B,EAAE,IAAa;IAC3D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClI,CAAC;AAED,SAAS,IAAI,CAAC,MAAoB,EAAE,MAAgB,EAAE,MAAgB,EAAE,MAA+B,EAAE,IAAe,EAAE,UAAmB;IAC3I,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO;QACL,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM;QACxH,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnH,CAAC;AACJ,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,aAAa,CAAC,MAA2B,EAAE,KAAa;IACtE,OAAO,MAAM,KAAK,QAAQ;QACxB,CAAC,CAAC,gCAAgC,KAAK,qGAAqG;QAC5I,CAAC,CAAC,gCAAgC,KAAK,8FAA8F,CAAC;AAC1I,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,qIAAqI,CAAC;AAE7K,MAAM,UAAU,GAA2B,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AAE/F;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,IAAe,EAAE,CAA0B;IAC5F,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,mHAAmH;IACnH,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IACjD,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC;QAC5B,iIAAiI;QACjI,sIAAsI;QACtI,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACrJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,MAAM,oDAAoD,MAAM,iCAAiC,EAAE,CAAC;IACtK,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAoB,EAAE,MAAwC,EAAE,IAAe,EAAE,CAA0B;IACpI,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7G,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO;YACL,GAAG,KAAK,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,uBAAuB;SACjC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC,SAAS,EAAE,yEAAyE,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAChJ,CAAC;AAED,yHAAyH;AACzH,SAAS,iBAAiB,CAAC,IAAe,EAAE,MAAc;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACrD,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,KAAK,YAAY,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAA2B,EAAE,IAAe,EAAE,UAAmB;IAC3F,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACvI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,SAAS,EAAE,MAAM,KAAK,QAAQ;YACzC,CAAC,CAAC,sJAAsJ;YACxJ,CAAC,CAAC,2KAA2K,CAAC,CAAC;IACnL,CAAC;IACD,oHAAoH;IACpH,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC5B,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;QACjJ,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAChF,iHAAiH;IACjH,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACtE,CAAC;AASD,mHAAmH;AACnH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACC;IAAtC,YAAY,OAAe,EAAW,IAAmI;QACvK,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,SAAI,GAAJ,IAAI,CAA+H;QAEvK,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAiBD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAItD,KAAK,UAAU,MAAM,CAAC,MAAoB,EAAE,GAAY,EAAE,IAAe,EAAE,MAA8B;IACvG,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QAAC,KAAK,GAAG,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,YAAY,eAAe;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,uBAAuB,EAAE,SAAS,CAAC,CAAC;QACzG,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtF,IAAI,IAAI,KAAK,WAAW;oBAAE,MAAM,IAAI,YAAY,CAAC,wHAAwH,EAAE,WAAW,CAAC,CAAC;gBACxL,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,YAAY,CAAC,6IAA6I,EAAE,YAAY,CAAC,CAAC;gBAC5M,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC1C,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1E,IAAI,IAAI,KAAK,WAAW;oBAAE,MAAM,IAAI,YAAY,CAAC,0EAA0E,EAAE,aAAa,CAAC,CAAC;gBAC5I,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,YAAY,CAAC,gHAAgH,EAAE,YAAY,CAAC,CAAC;gBAC/K,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC1C,CAAC;YACD,KAAK,MAAM,CAAC;YACZ,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,MAAM,MAAM,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACzI,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxD,IAAI,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnD,qFAAqF;gBACrF,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;oBAC3B,KAAK,MAAM,CAAC,IAAI,OAAO;wBAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;4BAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnK,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,YAAY,CAAC,QAAQ,IAAI,qBAAqB,OAAO,CAAC,MAAM,WAAW,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,+CAA+C,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,MAAM,wCAAwC,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,aAAa,CAAC,CAAC;gBACrU,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC1C,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;wBAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;4BAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpI,CAAC;gBACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;gBAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,YAAY,CAAC,gCAAgC,OAAO,CAAC,MAAM,4DAA4D,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,MAAM,4CAA4C,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,aAAa,CAAC,CAAC;gBACjS,CAAC;gBACD,MAAM,IAAI,GAAG,KAA2C,CAAC;gBACzD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,gBAAgB;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,uBAAuB,EAAE,QAAQ,CAAC,CAAC;QACzG,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAe,EAAE,MAAc,EAAE,KAAe,EAAE,MAAqC;IACvH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,CAAC,IAAI,uCAAuC,EAAE,OAAO,CAAC,CAAC;QAC1H,MAAM,IAAI,YAAY,CAAC,2CAA2C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,YAAY,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,qHAAqH,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;IAC3L,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,IAAI,YAAY,CAAC,qIAAqI,EAAE,UAAU,CAAC,CAAC;QAC5K,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACpI,CAAC;AAED,iJAAiJ;AACjJ;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAe,EAAE,MAAoB,EAAE,MAAc,EAAE,EAAa,EAAE,WAA2B;IAC3H,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC5B,yHAAyH;QACzH,6FAA6F;QAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAuB,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1O,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC;QAC9F,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,IAAI;YACzC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;YAC/F,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,oIAAoI;IACpI,gFAAgF;SAC3E,CAAC;QACJ,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,2DAA2D;QAC3D,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,MAAM,IAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAA2B,CAAC,OAAO,KAAK,SAAS,CAAC;IAC7I,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/F,MAAM,MAAM,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzH,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxK,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAe,EAAE,MAAc,EAAE,KAAe,EAAE,EAAa;IAC5F,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzJ,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,GAAG,GAAG,IAAI,+HAA+H,CAAC;QACrJ,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI;QAC1D,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,WAAW,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;IACvC,MAAM,CAAC,IAAI,GAAG,OAAO,IAAI,IAAI,KAAK,SAAS;QACzC,CAAC,CAAC,GAAG,IAAI,cAAc,MAAM,CAAC,KAAK,oEAAoE,IAAI,IAAI,KAAK,8DAA8D,IAAI,mDAAmD;QACzO,CAAC,CAAC,GAAG,IAAI,cAAc,MAAM,CAAC,KAAK,mEAAmE,IAAI,wCAAwC,CAAC;IACrJ,MAAM,CAAC,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,IAAI,GAAG,GAAG,IAAI,cAAc,MAAM,CAAC,KAAK,6JAA6J,MAAM,CAAC,MAAM,iEAAiE,IAAI,qEAAqE,IAAI,IAAI,KAAK,+FAA+F,CAAC;IACld,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAqBD,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAErH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAe;IAC9C,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC;YAAE,SAAS;QACpD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAClH,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,6EAA6E;QAC7E,MAAM,UAAU,GAAG,GAAG,EAAE,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,MAAM,MAAM,GAAqC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;QACjG,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,MAAsB,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvI,MAAM,IAAI,GAAG,CAAC,CAAY,EAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,MAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,MAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnP,CAAC;aAAM,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,sCAAsC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACzI,CAAC;aAAM,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7G,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACzK,IAAI,CAAC,KAAK,KAAK,SAAS;gBACtB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,MAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,MAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE;gBAC5N,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/share/command.d.ts

@@ -0,0 +1,32 @@
+import { type EnvironmentConfig } from '../config.js';
+import { type ShareClient } from './run.js';
+import type { Judge } from '../curation/judgements-db.js';
+export interface ShareOptions {
+    ids: string[];
+    allRatified?: boolean;
+    /** An already-parsed lower bound (ISO), for --since. */
+    sinceIso?: string;
+    confirm?: string;
+    retract?: string;
+    envName: string;
+}
+export interface ShareDeps {
+    cloudEnv: EnvironmentConfig;
+    /** This install's salt for the opaque client_key. */
+    salt: string;
+    /** The environment's default gateway URL: anything else is shown in the preview. */
+    defaultGatewayUrl: string;
+    localDbPath: string | null;
+    client: () => ShareClient;
+    judge: () => Promise<Judge>;
+    /** The person's own git identity: `--all-ratified` shares only what they ratified. */
+    owner: () => Promise<string>;
+    /** True inside an agent that `align` launched (ALIGN_WRAPPED): a share is then refused, as a speed bump. */
+    wrapped: boolean;
+    /** Show `shown` and ask on the controlling terminal; null when there is no interactive terminal. */
+    ttyConfirm: (shown: string, question: string) => Promise<boolean | null>;
+    out: (line: string) => void;
+    err: (line: string) => void;
+}
+export declare function runShare(opts: ShareOptions, deps: ShareDeps): Promise<number>;
+//# sourceMappingURL=command.d.ts.map

package/dist/lib/share/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../src/lib/share/command.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAqG,KAAK,WAAW,EAAc,MAAM,UAAU,CAAC;AAC3J,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,WAAW,CAAC;IAC1B,KAAK,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,sFAAsF;IACtF,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,4GAA4G;IAC5G,OAAO,EAAE,OAAO,CAAC;IACjB,oGAAoG;IACpG,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAID,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CA4FnF"}

package/dist/lib/share/command.js

@@ -0,0 +1,136 @@
+/**
+ * L9: `align share` as a function of injected dependencies, returning an exit code. The commander
+ * wrapper (commands/share.ts) wires the real config, gateway client and prompts; tests wire fakes.
+ *
+ * Who may complete a share: a person at a terminal. EVERY path (a plain `align share` and
+ * `align share --confirm <code>`) shows the preview on the CONTROLLING terminal and needs a typed
+ * yes there (default No). There is no `--yes`: a flag is exactly what an agent would pass. A caller
+ * with no controlling terminal is refused. The known gap (an agent that allocates its own
+ * pseudo-terminal) is stated in SECURITY.md.
+ */
+import { visible } from './visible.js';
+import { teamCtaLine } from '../team-cta.js';
+import { combinedHash, consumeCode, lookupCode, sweepPending } from './pending.js';
+import { prepare, ratifiedRows, renderResults, renderTeamText, retract, secretRefusal, send, ShareError } from './run.js';
+const NO_TERMINAL = 'Confirm this in your own terminal: there is no interactive terminal here (an agent shell, a pipe and a hook have none). Nothing was sent.';
+export async function runShare(opts, deps) {
+    // Every line this prints can carry text a stranger wrote (a remote id, a tenant name, a server error, a
+    // pending file's env). visible() is idempotent, so lines that were already escaped pass through unchanged.
+    const out = (l) => deps.out(visible(l, { keepNewline: true }));
+    const err = (l) => deps.err(visible(l, { keepNewline: true }));
+    if (deps.wrapped) {
+        err('align share is not run from inside an agent that align launched. Open a normal terminal of your own and run it there. Nothing was sent.');
+        return 1;
+    }
+    if (deps.cloudEnv.mode === 'demo') {
+        err('align share needs a team account, and this environment is in demo mode. Run: align login');
+        return 1;
+    }
+    if (deps.cloudEnv.mode === 'local-embedded' || !deps.cloudEnv.authToken) {
+        err(`align share sends decisions from your local graph to your team's.\n  ${teamCtaLine()}\n  Already have a team? Run: align login`);
+        return 1;
+    }
+    if (!deps.localDbPath) {
+        err('There is no local graph on this machine to share from. `align setup --local` creates one.');
+        return 1;
+    }
+    const dbPath = deps.localDbPath;
+    sweepPending(); // codes are 10 minutes; a file a day old is leftover
+    const ctx = async () => ({ dbPath, envName: opts.envName, client: deps.client(), judge: await deps.judge(), salt: deps.salt, gatewayUrl: deps.cloudEnv.gatewayUrl, defaultGatewayUrl: deps.defaultGatewayUrl });
+    try {
+        if (opts.retract !== undefined) {
+            const r = await retract(await ctx(), opts.retract);
+            (r.ok ? out : err)(r.message);
+            return r.ok ? 0 : 1;
+        }
+        let ids = opts.ids;
+        let pendingCode;
+        if (opts.confirm !== undefined) {
+            const found = lookupCode(opts.confirm);
+            if (!found.ok) {
+                err(found.reason === 'expired' ? 'That confirmation code has expired. Ask your agent to start the share again.' : 'That confirmation code is not valid (unknown, malformed or already used). Nothing was sent.');
+                return 1;
+            }
+            if (found.pending.envName !== opts.envName) {
+                err(`That code was issued for ${found.pending.envName}, not ${opts.envName}. Nothing was sent.`);
+                return 1;
+            }
+            ids = found.pending.localIds;
+            pendingCode = opts.confirm;
+        }
+        else if (ids.length === 0) {
+            if (!opts.allRatified && opts.sinceIso === undefined) {
+                err('Name what to share: align share <id> [<id>...], or --all-ratified, or --since <30d|2w|6m>.');
+                return 2;
+            }
+            ids = ratifiedRows(dbPath, { owner: await deps.owner(), sinceIso: opts.sinceIso }).map((r) => r.id);
+            if (ids.length === 0) {
+                out('Nothing to share: you have no ratified decisions in that range.');
+                return 0;
+            }
+        }
+        const c = await ctx();
+        const prep = await prepare(c, ids);
+        if (prep.secrets.length) {
+            err(secretRefusal(prep.secrets));
+            return 1;
+        }
+        for (const a of prep.already)
+            out(`Already shared as ${visible(a.remoteId)}: ${visible(a.title)}`);
+        if (prep.payloads.length === 0)
+            return 0;
+        if (pendingCode !== undefined) {
+            const found = lookupCode(pendingCode);
+            if (!found.ok) {
+                err('That confirmation code is no longer valid. Nothing was sent.');
+                return 1;
+            }
+            if (found.pending.hash !== combinedHash(prep.payloads, prep)) {
+                err('What would be shared, or where it would go (the workspace or the gateway), has changed since your agent previewed it. Nothing was sent. Ask your agent to start again.');
+                return 1;
+            }
+            const yes = await deps.ttyConfirm(prep.preview, `Share ${prep.payloads.length} decision${prep.payloads.length === 1 ? '' : 's'} with ${visible(prep.dest.workspace)}?`);
+            if (yes === null) {
+                err(NO_TERMINAL);
+                return 1;
+            }
+            if (!yes) {
+                out('Nothing was sent.');
+                return 0;
+            }
+            if (!consumeCode(pendingCode)) {
+                err('That code was already used. Nothing was sent.');
+                return 1;
+            }
+        }
+        else {
+            const yes = await deps.ttyConfirm(prep.preview, `Share ${prep.payloads.length} decision${prep.payloads.length === 1 ? '' : 's'} with ${visible(prep.dest.workspace)}?`);
+            if (yes === null) {
+                err(NO_TERMINAL);
+                return 1;
+            }
+            if (!yes) {
+                out('Nothing was sent.');
+                return 0;
+            }
+        }
+        const results = await send(c, prep, {
+            confirmTeamText: async (i) => {
+                const shown = `"${visible(i.title)}" is already on your team graph, as:\n${renderTeamText(i.team)}\nYour ratification would put your name on THAT text, not on yours.`;
+                return (await deps.ttyConfirm(shown, 'Do you stand behind the team\'s text?')) === true;
+            },
+        });
+        out(`\n${renderResults(results)}`);
+        const failed = results.some((r) => r.outcome.kind === 'refused' || r.outcome.kind === 'unknown');
+        return failed ? 1 : 0;
+    }
+    catch (e) {
+        if (e instanceof ShareError) {
+            err(e.message);
+            return e.exitCode;
+        }
+        err(e.message);
+        return 1;
+    }
+}
+//# sourceMappingURL=command.js.map

package/dist/lib/share/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../../src/lib/share/command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,OAAO,EAAiB,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAoB,UAAU,EAAE,MAAM,UAAU,CAAC;AAgC3J,MAAM,WAAW,GAAG,2IAA2I,CAAC;AAEhK,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,IAAe;IAChE,wGAAwG;IACxG,2GAA2G;IAC3G,MAAM,GAAG,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,GAAG,CAAC,yIAAyI,CAAC,CAAC;QAC/I,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAClC,GAAG,CAAC,0FAA0F,CAAC,CAAC;QAChG,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,wEAAwE,WAAW,EAAE,2CAA2C,CAAC,CAAC;QACtI,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,GAAG,CAAC,2FAA2F,CAAC,CAAC;QACjG,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IAChC,YAAY,EAAE,CAAC,CAAC,qDAAqD;IACrE,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAEhN,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACnB,IAAI,WAA+B,CAAC;QACpC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,6FAA6F,CAAC,CAAC;gBACjN,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC3C,GAAG,CAAC,4BAA4B,KAAK,CAAC,OAAO,CAAC,OAAO,SAAS,IAAI,CAAC,OAAO,qBAAqB,CAAC,CAAC;gBACjG,OAAO,CAAC,CAAC;YACX,CAAC;YACD,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC7B,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACrD,GAAG,CAAC,4FAA4F,CAAC,CAAC;gBAClG,OAAO,CAAC,CAAC;YACX,CAAC;YACD,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;QAC7G,CAAC;QAED,MAAM,CAAC,GAAG,MAAM,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,GAAa,MAAM,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACxE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,GAAG,CAAC,qBAAqB,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,wKAAwK,CAAC,CAAC;gBAC9K,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,YAAY,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACxK,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjD,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjD,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,YAAY,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACxK,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjD,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE;YAClC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3B,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,yCAAyC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,qEAAqE,CAAC;gBACvK,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,uCAAuC,CAAC,CAAC,KAAK,IAAI,CAAC;YAC1F,CAAC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QACjG,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC;YAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QAAC,CAAC;QACnE,GAAG,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/lib/share/ledger.d.ts

@@ -0,0 +1,59 @@
+export interface Promotion {
+    localId: string;
+    env: string;
+    tenantId: string;
+    remoteId: string;
+    contentHash: string;
+    /** The share attached to a decision the team already held. Retracting it must NOT archive that decision. */
+    matched: boolean;
+    /** The opaque idempotency key sent as `client_key` at the first share; reused for every later one. */
+    clientKey: string;
+    /** Hashes of judgements already stored in that workspace. */
+    sent: string[];
+    /** A matched share whose ratify/supersede still waits for the person to confirm the team's text. */
+    confirmPending: boolean;
+    sharedAt: string;
+    retractedAt: string | null;
+}
+/** The write side of a ledger row: the clock columns are the database's. */
+export interface PromotionWrite {
+    localId: string;
+    env: string;
+    tenantId: string;
+    remoteId: string;
+    contentHash: string;
+    matched: boolean;
+    clientKey: string;
+    sent: string[];
+    confirmPending: boolean;
+}
+export interface LedgerRow {
+    local_id: string;
+    env: string;
+    tenant_id: string;
+    remote_id: string;
+    content_hash: string;
+    matched: number;
+    client_key: string;
+    sent: string;
+    confirm_pending: number;
+    shared_at: string;
+    retracted_at: string | null;
+}
+export declare function getPromotion(dbPath: string, localId: string, env: string, tenantId: string): Promotion | null;
+/** A row `align push` left before the ledger existed: it names no workspace. */
+export declare function getLegacyPromotion(dbPath: string, localId: string, env: string): Promotion | null;
+/** Insert, or replace the hash and remote id of an existing row; a re-share clears an earlier retraction. */
+export declare function recordPromotion(dbPath: string, p: PromotionWrite): void;
+/** Several rows in ONE transaction: all of them land or none do. */
+export declare function recordPromotions(dbPath: string, rows: readonly PromotionWrite[]): void;
+export declare function markRetracted(dbPath: string, localId: string, env: string, tenantId: string): void;
+/** Every live (not retracted) share into one workspace, keyed by local id. */
+export declare function listPromotions(dbPath: string, env: string, tenantId: string): Map<string, Promotion>;
+/** Every ledger row, raw, so a reset can carry the record of what was shared across a wipe. [] when there is none. */
+export declare function exportLedger(dbPath: string): LedgerRow[];
+/** Put exported rows back (replay-safe: the key is the table's primary key). */
+export declare function restoreLedger(dbPath: string, rows: readonly LedgerRow[]): void;
+/** True when the ledger table has every column this code uses. A share checks it BEFORE any request. */
+export declare function ledgerReady(dbPath: string): boolean;
+//# sourceMappingURL=ledger.d.ts.map

package/dist/lib/share/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../../src/lib/share/ledger.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,4GAA4G;IAC5G,OAAO,EAAE,OAAO,CAAC;IACjB,sGAAsG;IACtG,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oGAAoG;IACpG,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAqCpP,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAK7G;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEjG;AAED,6GAA6G;AAC7G,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,GAAG,IAAI,CAUvE;AAQD,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,cAAc,EAAE,GAAG,IAAI,CAUtF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAIlG;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAKpG;AAED,sHAAsH;AACtH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAExD;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,GAAG,IAAI,CAa9E;AAED,wGAAwG;AACxG,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAMnD"}