@allocator-one/rcl 4.4.19

package/dist/converge/target-ownership.d.ts

@@ -0,0 +1,29 @@
+/** Opaque authority; its started operations drain before the registry is released. */
+export interface NativeTargetOwnership {
+    readonly target: string;
+}
+type Qualification = 'ordinary' | 'recovery';
+interface NativeTargetOptions {
+    qualification?: Qualification;
+    lockTimeoutMs?: number;
+    lockRetryMs?: number;
+}
+/** Ordinary writers share the qualified protocol without inheriting recovery fallback. */
+export declare function withNativeTarget<T>(gitCommonDir: string, target: string, work: (ownership: NativeTargetOwnership) => Promise<T>, options?: NativeTargetOptions): Promise<T>;
+/** Explicit recovery entry point: strict qualification cannot silently fall back. */
+export declare function withRecoveryTarget<T>(gitCommonDir: string, target: string, work: (ownership: NativeTargetOwnership) => Promise<T>): Promise<T>;
+/** A token cannot authorize another repository, target, or a later invocation. */
+export declare function assertNativeTargetOwnership(ownership: NativeTargetOwnership, gitCommonDir: string, target: string): Promise<void>;
+/** Return the immutable canonical repository directory bound when ownership was acquired. */
+export declare function ownedNativeTargetCommonDir(ownership: NativeTargetOwnership, gitCommonDir: string, target: string): Promise<string>;
+/** Recovery effects require authority acquired through strict filesystem qualification. */
+export declare function assertRecoveryTargetOwnership(ownership: NativeTargetOwnership, gitCommonDir: string, target: string): Promise<void>;
+/**
+ * Register synchronously before the first await. Each operation gets explicit
+ * child authority, so it may finish its own nested writes while its parent
+ * drains; unrelated work cannot reuse a closing token or infer reentrancy.
+ * Siblings queue for the entire read/derive/write operation. Each explicit
+ * child owns its own queue, so awaited nested writes do not deadlock.
+ */
+export declare function withOwnedNativeOperation<T>(ownership: NativeTargetOwnership, gitCommonDir: string, target: string, work: (operation: NativeTargetOwnership) => Promise<T>): Promise<T>;
+export {};

package/dist/converge/target-ownership.js

@@ -0,0 +1,95 @@
+import { realpath } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { withRecoveryLock } from '../evidence/original-run/lock.js';
+import { withNativeLock } from './native-lock.js';
+const registrations = new WeakMap();
+async function scope(commonDir, target, qualification, work) {
+    const ownership = Object.freeze({ target });
+    const registration = { commonDir, target, qualification, active: true, accepting: true,
+        tail: Promise.resolve(), pending: new Set(), errors: [] };
+    registrations.set(ownership, registration);
+    let value;
+    try {
+        value = await work(ownership);
+    }
+    catch (error) {
+        registration.errors.push(error);
+    }
+    finally {
+        registration.accepting = false;
+        await Promise.all(registration.pending);
+        registration.active = false;
+    }
+    const errors = [...new Set(registration.errors)];
+    if (errors.length === 1)
+        throw errors[0];
+    if (errors.length > 1)
+        throw new AggregateError(errors, 'native_target_operations_failed');
+    return value;
+}
+/** Ordinary writers share the qualified protocol without inheriting recovery fallback. */
+export async function withNativeTarget(gitCommonDir, target, work, options = {}) {
+    target = target.trim();
+    if (!target)
+        throw new Error('native_target_required');
+    const qualification = options.qualification ?? 'ordinary';
+    if (qualification !== 'ordinary' && qualification !== 'recovery')
+        throw new Error('native_target_invalid_qualification');
+    if (qualification === 'recovery' && (options.lockTimeoutMs !== undefined || options.lockRetryMs !== undefined)) {
+        throw new Error('native_target_recovery_timing_unsupported');
+    }
+    const commonDir = await realpath(resolve(gitCommonDir));
+    const lock = qualification === 'recovery' ? withRecoveryLock : withNativeLock;
+    return qualification === 'ordinary'
+        ? lock(join(commonDir, 'rcl-native-target-locks'), target, () => scope(commonDir, target, qualification, work), {}, {
+            lockTimeoutMs: options.lockTimeoutMs,
+            lockRetryMs: options.lockRetryMs,
+        })
+        : lock(join(commonDir, 'rcl-native-target-locks'), target, () => scope(commonDir, target, qualification, work));
+}
+/** Explicit recovery entry point: strict qualification cannot silently fall back. */
+export function withRecoveryTarget(gitCommonDir, target, work) {
+    return withNativeTarget(gitCommonDir, target, work, { qualification: 'recovery' });
+}
+/** A token cannot authorize another repository, target, or a later invocation. */
+export async function assertNativeTargetOwnership(ownership, gitCommonDir, target) {
+    const registration = registrations.get(ownership);
+    const commonDir = await realpath(resolve(gitCommonDir));
+    if (!registration?.active || !registration.accepting || registration.target !== target.trim() ||
+        registration.commonDir !== commonDir)
+        throw new Error('native_target_not_owned');
+}
+/** Return the immutable canonical repository directory bound when ownership was acquired. */
+export async function ownedNativeTargetCommonDir(ownership, gitCommonDir, target) {
+    await assertNativeTargetOwnership(ownership, gitCommonDir, target);
+    return registrations.get(ownership).commonDir;
+}
+/** Recovery effects require authority acquired through strict filesystem qualification. */
+export async function assertRecoveryTargetOwnership(ownership, gitCommonDir, target) {
+    await assertNativeTargetOwnership(ownership, gitCommonDir, target);
+    if (registrations.get(ownership)?.qualification !== 'recovery')
+        throw new Error('native_target_recovery_not_owned');
+}
+/**
+ * Register synchronously before the first await. Each operation gets explicit
+ * child authority, so it may finish its own nested writes while its parent
+ * drains; unrelated work cannot reuse a closing token or infer reentrancy.
+ * Siblings queue for the entire read/derive/write operation. Each explicit
+ * child owns its own queue, so awaited nested writes do not deadlock.
+ */
+export function withOwnedNativeOperation(ownership, gitCommonDir, target, work) {
+    const registration = registrations.get(ownership);
+    if (!registration?.active || !registration.accepting || registration.target !== target.trim()) {
+        return Promise.reject(new Error('native_target_not_owned'));
+    }
+    const operation = registration.tail.then(() => scope(registration.commonDir, registration.target, registration.qualification, async (child) => {
+        await assertNativeTargetOwnership(child, gitCommonDir, target);
+        return work(child);
+    }));
+    const completion = operation.then(() => { }, error => { registration.errors.push(error); });
+    registration.tail = completion;
+    registration.pending.add(completion);
+    void completion.then(() => { registration.pending.delete(completion); });
+    return operation;
+}
+//# sourceMappingURL=target-ownership.js.map

package/dist/converge/target-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target-ownership.js","sourceRoot":"","sources":["../../src/converge/target-ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAgBlD,MAAM,aAAa,GAAG,IAAI,OAAO,EAAuC,CAAC;AAEzE,KAAK,UAAU,KAAK,CAAI,SAAiB,EAAE,MAAc,EAAE,aAA4B,EACrF,IAAsD;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI;QAClG,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5D,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3C,IAAI,KAAoB,CAAC;IACzB,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IACtC,OAAO,KAAK,EAAE,CAAC;QAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;YAC1C,CAAC;QACP,YAAY,CAAC,SAAS,GAAG,KAAK,CAAC;QAC/B,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC;IAC9B,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;IAC3F,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAI,YAAoB,EAAE,MAAc,EAC5E,IAAsD,EACtD,UAA+B,EAAE;IACjC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,UAAU,CAAC;IAC1D,IAAI,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzH,IAAI,aAAa,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC;IAC9E,OAAO,aAAa,KAAK,UAAU;QACjC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE;YAClH,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC;QACF,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;AACpH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAI,YAAoB,EAAE,MAAc,EACxE,IAAsD;IACtD,OAAO,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,SAAgC,EAChF,YAAoB,EAAE,MAAc;IACpC,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE;QACzF,YAAY,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AACvF,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,SAAgC,EAC/E,YAAoB,EAAE,MAAc;IACpC,MAAM,2BAA2B,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,aAAa,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,SAAgC,EAClF,YAAoB,EAAE,MAAc;IACpC,MAAM,2BAA2B,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,aAAa,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACtH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAI,SAAgC,EAAE,YAAoB,EAAE,MAAc,EAChH,IAAsD;IACtD,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9F,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,aAAa,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;QAC1I,MAAM,2BAA2B,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,YAAY,CAAC,IAAI,GAAG,UAAU,CAAC;IAC/B,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,KAAK,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/converge/terminal-rejection-schema.d.ts

@@ -0,0 +1,42 @@
+import { z } from 'zod';
+export declare const rejectionSelectionSchema: z.ZodObject<{
+    target: z.ZodString;
+    runId: z.ZodString;
+    reportPath: z.ZodString;
+    reportSha256: z.ZodString;
+    reason: z.ZodString;
+}, z.core.$strict>;
+export declare const rejectionManifestSchema: z.ZodObject<{
+    target: z.ZodString;
+    runId: z.ZodString;
+    reportPath: z.ZodString;
+    reportSha256: z.ZodString;
+    reason: z.ZodString;
+    kind: z.ZodLiteral<"rcl-terminal-rejection">;
+    version: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    createdAt: z.ZodString;
+    gitCommonDir: z.ZodString;
+    dataDir: z.ZodString;
+    stateSha256: z.ZodString;
+    attemptSha256: z.ZodString;
+    quarantineSha256: z.ZodString;
+    cycleId: z.ZodNullable<z.ZodString>;
+    attempt: z.ZodNumber;
+    round: z.ZodNumber;
+    headSha: z.ZodString;
+    inputSha256: z.ZodString;
+}, z.core.$strict>;
+export type RejectionSelection = z.infer<typeof rejectionSelectionSchema>;
+export type RejectionManifest = z.infer<typeof rejectionManifestSchema>;
+export declare const rejectionEntrySchema: z.ZodObject<{
+    manifestJson: z.ZodString;
+    manifestSha256: z.ZodString;
+}, z.core.$strict>;
+export type RejectionEntry = z.infer<typeof rejectionEntrySchema>;
+export declare function rejectionManifest(entry: RejectionEntry): RejectionManifest;
+/** A missing/truncated audit cannot silently revive the original report. */
+export declare function validateTerminalRejectionAudit(state: {
+    terminalRejections?: RejectionEntry[];
+    terminalRejectionCount?: number;
+}): void;

package/dist/converge/terminal-rejection-schema.js

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+import { sha256 } from '../telemetry/recovery/files.js';
+import { decodeOriginalReport } from '../evidence/original-run/decode.js';
+const digest = z.string().regex(/^[a-f0-9]{64}$/);
+export const rejectionSelectionSchema = z.object({
+    target: z.string().min(1).max(200).refine(value => value.trim() === value),
+    runId: z.string().uuid(), reportPath: z.string().min(1), reportSha256: digest,
+    reason: z.string().trim().min(1).max(500),
+}).strict();
+export const rejectionManifestSchema = rejectionSelectionSchema.extend({
+    kind: z.literal('rcl-terminal-rejection'), version: z.literal(1),
+    operationId: z.string().uuid(), createdAt: z.string().datetime(),
+    gitCommonDir: z.string().min(1), dataDir: z.string().min(1),
+    stateSha256: digest, attemptSha256: digest, quarantineSha256: digest,
+    cycleId: z.string().uuid().nullable(), attempt: z.number().int().positive().safe(),
+    round: z.number().int().positive().safe(), headSha: z.string().regex(/^[a-f0-9]{40}$/), inputSha256: digest,
+}).strict();
+export const rejectionEntrySchema = z.object({ manifestJson: z.string().max(16384), manifestSha256: digest }).strict();
+export function rejectionManifest(entry) {
+    rejectionEntrySchema.parse(entry);
+    if (sha256(entry.manifestJson) !== entry.manifestSha256)
+        throw new Error('rejection_manifest_digest_mismatch');
+    return rejectionManifestSchema.parse(decodeOriginalReport(entry.manifestJson).value);
+}
+/** A missing/truncated audit cannot silently revive the original report. */
+export function validateTerminalRejectionAudit(state) {
+    const entries = state.terminalRejections;
+    if (entries === undefined) {
+        if (state.terminalRejectionCount !== undefined)
+            throw new Error('terminal_rejection_audit_invalid');
+        return;
+    }
+    if (!Array.isArray(entries) || entries.length === 0 || entries.length > 10000 || state.terminalRejectionCount !== entries.length) {
+        throw new Error('terminal_rejection_audit_invalid');
+    }
+    for (const entry of entries)
+        rejectionManifest(entry);
+}
+//# sourceMappingURL=terminal-rejection-schema.js.map

package/dist/converge/terminal-rejection-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-rejection-schema.js","sourceRoot":"","sources":["../../src/converge/terminal-rejection-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC;IAC1E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM;IAC7E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC,MAAM,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM;IACpE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;IAClF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,MAAM;CAC5G,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEvH,MAAM,UAAU,iBAAiB,CAAC,KAAqB;IACrD,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/G,OAAO,uBAAuB,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,8BAA8B,CAAC,KAAiF;IAC9H,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,CAAC;IACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACpG,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,sBAAsB,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACjI,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC"}

package/dist/converge/terminal-rejection.d.ts

@@ -0,0 +1,13 @@
+import { type ConvergeRunState } from './run-state.js';
+import { type RejectionManifest, type RejectionSelection } from './terminal-rejection-schema.js';
+/** Read-only selection: no admission, accounting, provider or server operation. */
+export declare function previewTerminalRejection(input: RejectionSelection, gitCommonDir: string, dataDirectory: string): Promise<RejectionManifest>;
+/** Immutable proof precedes the atomic native write; replay never duplicates an audit. */
+export declare function applyTerminalRejection(input: {
+    manifest: string;
+    manifestSha256: string;
+}, gitCommonDir: string, dataDirectory: string): Promise<'applied' | 'unchanged'>;
+/** Each native audit references durable original bytes, never a bare cleared bit. */
+export declare function verifyTerminalRejections(common: string, state: ConvergeRunState): Promise<void>;
+/** Called under ordinary native ownership; a disposition still needs an explicit bounded retry. */
+export declare function terminalRejectionForLaunch(common: string, state: ConvergeRunState): Promise<boolean>;

package/dist/converge/terminal-rejection.js

@@ -0,0 +1,275 @@
+import { randomUUID } from 'node:crypto';
+import { lstat, realpath } from 'node:fs/promises';
+import { join, resolve, dirname } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { z } from 'zod';
+import { readStable } from '../telemetry/recovery/files.js';
+import { decodeOriginalReport } from '../evidence/original-run/decode.js';
+import { syncDirectory } from '../evidence/original-run/journal.js';
+import { inspectRecoveryDirectory, prepareLockRoot } from '../evidence/original-run/lock-path.js';
+import { originalRunReportSchema } from '../telemetry/recovery/source.js';
+import { Quarantine, QUARANTINE_DIR } from '../telemetry/quarantine.js';
+import { OUTBOX_DIR } from '../telemetry/outbox.js';
+import { REVIEWER_OUTBOX_DIR } from '../telemetry/reviewer-delivery.js';
+import { buildRunEnvelope } from '../telemetry/envelope.js';
+import { validateRunEnvelope } from '../telemetry/envelope-validation.js';
+import { verifiedConsensusDiagnostics } from '../telemetry/deliver.js';
+import { mergedBlockingHealth } from './legacy-launch-health.js';
+import { convergeAttemptStatePath, validateConvergeAttemptState } from './attempt-budget.js';
+import { convergeRunStatePath, loadConvergeRunState, writeState } from './run-state.js';
+import { launchSchema } from './launch-record.js';
+import { assertNoPendingFreshReview, assertReviewCyclePair } from './fresh-review.js';
+import { withRecoveryTarget } from './target-ownership.js';
+import { retainStaleFile as retain, selectedStaleFile as selected } from './stale-report-storage.js';
+import { rejectionManifest, rejectionManifestSchema, rejectionSelectionSchema, validateTerminalRejectionAudit } from './terminal-rejection-schema.js';
+const parse = (file) => decodeOriginalReport(file.text).value;
+function refuse(code) { throw new Error(`terminal_rejection_${code}`); }
+function deadOwner(pid) {
+    try {
+        process.kill(pid, 0);
+    }
+    catch (error) {
+        if (error.code === 'ESRCH')
+            return;
+    }
+    refuse('owner_live_or_uncertain');
+}
+async function absent(path) {
+    try {
+        await lstat(path);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        throw error;
+    }
+    refuse('pending_delivery');
+}
+/** Do not use Outbox.list: incomplete directories and unreadable entries must block too. */
+async function noDelivery(dataDir, runId) {
+    await inspectRecoveryDirectory(dataDir, true);
+    for (const root of [OUTBOX_DIR, REVIEWER_OUTBOX_DIR]) {
+        const directory = join(dataDir, root);
+        try {
+            await lstat(directory);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                continue;
+            throw error;
+        }
+        await inspectRecoveryDirectory(directory, true);
+        await absent(join(directory, runId.toLowerCase()));
+    }
+}
+function eligible(state, attemptBytes, m) {
+    const attempts = validateConvergeAttemptState(parse(attemptBytes), m.target, 'terminal rejection');
+    validateTerminalRejectionAudit(state);
+    const launch = launchSchema.parse(state.lastLaunch);
+    if (state.target !== m.target || launch.status !== 'completed' || launch.runId !== m.runId ||
+        launch.reportJsonSha256 !== m.reportSha256 || launch.retainedOriginal || launch.recovery || launch.pendingResume ||
+        launch.attempt !== attempts.attemptsUsed || !attempts.attempts.some(a => a.attempt === launch.attempt && a.pid === launch.pid) ||
+        !isDeepStrictEqual(state.cycle, attempts.cycle) || !launch.reviewerHealth ||
+        state.rounds.some(r => r.runId === launch.runId || r.round === launch.round) ||
+        launch.round !== Math.max(0, ...state.rounds.map(r => r.round)) + 1)
+        refuse('ineligible_launch');
+    return launch;
+}
+async function proof(state, attempts, m, dataDir, retainedDirectory) {
+    const launch = eligible(state, attempts, m);
+    const reportBytes = await selected(retainedDirectory ? join(retainedDirectory, 'report.json') : m.reportPath, m.reportSha256);
+    const raw = parse(reportBytes), report = originalRunReportSchema.parse(raw);
+    if (report.run.id !== launch.runId || report.run.target.head_sha !== launch.headSha ||
+        report.run.converge?.target !== m.target || report.run.converge?.attempt !== launch.attempt ||
+        report.run.converge?.round !== launch.round || report.run.cycle_id !== state.cycle?.id ||
+        report.run.provenance === 'backfill' || report.run.gating.mode !== 'verified-consensus' ||
+        report.stats.totalReviews !== launch.totalReviews || report.stats.successfulReviews !== launch.successfulReviews ||
+        report.reviews.length !== launch.totalReviews || report.reviews.filter(r => r.status === 'success').length !== launch.successfulReviews ||
+        !isDeepStrictEqual(mergedBlockingHealth(report, launch.reviewerHealth.policy.fraction), launch.reviewerHealth))
+        refuse('report_binding');
+    const quarantine = new Quarantine(retainedDirectory ? join(retainedDirectory, QUARANTINE_DIR) : join(dataDir, QUARANTINE_DIR));
+    await inspectRecoveryDirectory(quarantine.dir, true);
+    const retained = await quarantine.inspect(m.runId);
+    if (retained?.status !== 'complete' || retained.manifest.acknowledged || retained.observations.length > 0 ||
+        retained.manifest.artifacts['report_json']?.sha256 !== m.reportSha256 || !retained.manifest.envelope)
+        refuse('quarantine_proof');
+    await inspectRecoveryDirectory(retained.path, true);
+    const manifest = await readStable(join(retained.path, 'manifest.json'), 64000);
+    const artifacts = { report_json: reportBytes.text };
+    if (retained.manifest.artifacts['report_md'])
+        artifacts.report_md = (await readStable(join(retained.path, 'report.md'))).text;
+    const storedEnvelope = parse(await readStable(join(retained.path, 'envelope.json')));
+    // Only the supported, pre-network missing-label rejection is disposable. A
+    // transport/server refusal, malformed envelope or valid report is not proof.
+    const diagnostics = verifiedConsensusDiagnostics(raw);
+    if (diagnostics.length === 0 || diagnostics.some(d => !/^(findings|belowThresholdFindings)\.\d+\.gating\.reason$/.test(d.path)))
+        refuse('unsupported_local_rejection');
+    const levels = ['full', 'findings', 'envelope'];
+    const projections = levels.flatMap(level => [false, true].map(parseFailures => buildRunEnvelope(raw, artifacts, { level, parseFailures, delivery: { mode: 'direct' } })));
+    const envelope = projections.find(candidate => isDeepStrictEqual(candidate, storedEnvelope));
+    if (!envelope || validateRunEnvelope(envelope, artifacts).length > 0 ||
+        !isDeepStrictEqual(retained.manifest.diagnostics, diagnostics))
+        refuse('rejection_diagnostics');
+    return { launch, reportBytes, manifest, quarantinePath: retained.path, quarantineManifest: retained.manifest };
+}
+function bound(m, state, launch) {
+    if (m.cycleId !== (state.cycle?.id ?? null) || m.attempt !== launch.attempt || m.round !== launch.round ||
+        m.headSha !== launch.headSha || m.inputSha256 !== launch.inputSha256)
+        refuse('identity_changed');
+}
+function directory(common, m) { return join(common, 'rcl-terminal-rejections', m.operationId); }
+function nextState(before, entry, m) {
+    return { ...before, lastLaunch: { ...before.lastLaunch, deliveryPending: false, deliveryFailure: 'local-invalid' },
+        terminalRejections: [...(before.terminalRejections ?? []), entry],
+        terminalRejectionCount: (before.terminalRejections?.length ?? 0) + 1, updatedAt: m.createdAt };
+}
+/** Read-only selection: no admission, accounting, provider or server operation. */
+export async function previewTerminalRejection(input, gitCommonDir, dataDirectory) {
+    const s = rejectionSelectionSchema.parse(input), common = await realpath(resolve(gitCommonDir));
+    const dataDir = await realpath(resolve(dataDirectory));
+    await assertNoPendingFreshReview(common, s.target);
+    const native = await readStable(convergeRunStatePath(common, s.target));
+    const attempts = await readStable(convergeAttemptStatePath(common, s.target));
+    const state = await loadConvergeRunState(common, s.target);
+    if (!state || !isDeepStrictEqual(state, parse(native)))
+        refuse('state_changed');
+    await assertReviewCyclePair(common, s.target, state.cycle);
+    await verifyTerminalRejections(common, state);
+    if (state.terminalRejections?.some(e => rejectionManifest(e).runId === s.runId))
+        refuse('already_disposed');
+    const evidence = await proof(state, attempts, s, dataDir);
+    deadOwner(evidence.launch.pid);
+    await noDelivery(dataDir, s.runId);
+    const m = rejectionManifestSchema.parse({ ...s, reportPath: await realpath(resolve(s.reportPath)),
+        kind: 'rcl-terminal-rejection', version: 1, operationId: randomUUID(), createdAt: new Date().toISOString(),
+        gitCommonDir: common, dataDir, stateSha256: native.sha256, attemptSha256: attempts.sha256,
+        quarantineSha256: evidence.manifest.sha256, cycleId: state.cycle?.id ?? null,
+        attempt: evidence.launch.attempt, round: evidence.launch.round, headSha: evidence.launch.headSha, inputSha256: evidence.launch.inputSha256 });
+    await selected(convergeRunStatePath(common, s.target), native.sha256);
+    await selected(convergeAttemptStatePath(common, s.target), attempts.sha256);
+    return m;
+}
+/** Immutable proof precedes the atomic native write; replay never duplicates an audit. */
+export async function applyTerminalRejection(input, gitCommonDir, dataDirectory) {
+    z.object({ manifest: z.string().min(1), manifestSha256: z.string().regex(/^[a-f0-9]{64}$/) }).strict().parse(input);
+    const original = await selected(input.manifest, input.manifestSha256);
+    const m = rejectionManifestSchema.parse(parse(original)), common = await realpath(resolve(gitCommonDir));
+    if (m.gitCommonDir !== common || m.dataDir !== await realpath(resolve(dataDirectory)))
+        refuse('repository_or_data_directory');
+    const entry = { manifestJson: original.text, manifestSha256: original.sha256 };
+    return withRecoveryTarget(common, m.target, async (ownership) => {
+        await assertNoPendingFreshReview(common, m.target);
+        const current = await readStable(convergeRunStatePath(common, m.target));
+        const state = await loadConvergeRunState(common, m.target);
+        if (!state || !isDeepStrictEqual(state, parse(current)))
+            refuse('state_changed');
+        await assertReviewCyclePair(common, m.target, state.cycle);
+        await verifyTerminalRejections(common, state);
+        const prior = state.terminalRejections?.find(e => rejectionManifest(e).operationId === m.operationId);
+        if (prior) {
+            if (!isDeepStrictEqual(prior, entry))
+                refuse('operation_conflict');
+            const before = parse(await selected(join(directory(common, m), 'native-before.json'), m.stateSha256));
+            if (!isDeepStrictEqual(state, nextState(before, entry, m)))
+                refuse('state_changed');
+            await selected(convergeAttemptStatePath(common, m.target), m.attemptSha256);
+            deadOwner(state.lastLaunch.pid);
+            await noDelivery(m.dataDir, m.runId);
+            return 'unchanged';
+        }
+        if (state.terminalRejections?.some(e => {
+            const priorManifest = rejectionManifest(e);
+            return priorManifest.runId === m.runId || priorManifest.reportSha256 === m.reportSha256;
+        }))
+            refuse('already_disposed');
+        const before = await selected(convergeRunStatePath(common, m.target), m.stateSha256);
+        const attempts = await selected(convergeAttemptStatePath(common, m.target), m.attemptSha256);
+        const evidence = await proof(state, attempts, m, m.dataDir);
+        bound(m, state, evidence.launch);
+        if (evidence.manifest.sha256 !== m.quarantineSha256)
+            refuse('quarantine_changed');
+        deadOwner(evidence.launch.pid);
+        await noDelivery(m.dataDir, m.runId);
+        const dir = directory(common, m);
+        await prepareLockRoot(dirname(dir));
+        await syncDirectory(common);
+        await prepareLockRoot(dir);
+        await syncDirectory(dirname(dir));
+        await retain(join(dir, 'manifest.json'), original.raw);
+        await retain(join(dir, 'native-before.json'), before.raw);
+        await retain(join(dir, 'attempts-before.json'), attempts.raw);
+        await retain(join(dir, 'report.json'), evidence.reportBytes.raw);
+        await retain(join(dir, 'quarantine-manifest.json'), evidence.manifest.raw);
+        const retainedQuarantine = join(dir, QUARANTINE_DIR, m.runId);
+        await prepareLockRoot(dirname(retainedQuarantine));
+        await syncDirectory(dir);
+        await prepareLockRoot(retainedQuarantine);
+        await syncDirectory(dirname(retainedQuarantine));
+        const files = ['manifest.json', 'pending.json', 'envelope.json', 'events.json', 'report.json',
+            ...(evidence.quarantineManifest.artifacts['report_md'] ? ['report.md'] : [])];
+        for (const file of files)
+            await retain(join(retainedQuarantine, file), (await readStable(join(evidence.quarantinePath, file))).raw);
+        const retainedEvidence = await proof(state, attempts, m, m.dataDir, dir);
+        if (retainedEvidence.manifest.sha256 !== m.quarantineSha256)
+            refuse('quarantine_changed');
+        // Recheck mutable source observations immediately before the atomic write.
+        const final = await proof(state, attempts, m, m.dataDir);
+        if (final.manifest.sha256 !== m.quarantineSha256)
+            refuse('quarantine_changed');
+        await selected(convergeRunStatePath(common, m.target), m.stateSha256);
+        await selected(convergeAttemptStatePath(common, m.target), m.attemptSha256);
+        deadOwner(evidence.launch.pid);
+        await noDelivery(m.dataDir, m.runId);
+        await writeState(common, nextState(state, entry, m), ownership);
+        return 'applied';
+    });
+}
+/** Each native audit references durable original bytes, never a bare cleared bit. */
+export async function verifyTerminalRejections(common, state) {
+    validateTerminalRejectionAudit(state);
+    if (state.terminalRejections === undefined)
+        return;
+    if (!Array.isArray(state.terminalRejections) || state.terminalRejections.length === 0 || state.terminalRejections.length > 10000)
+        refuse('audit_invalid');
+    const prefix = [];
+    const runs = new Set();
+    for (const entry of state.terminalRejections) {
+        const m = rejectionManifest(entry), dir = directory(common, m);
+        if (m.gitCommonDir !== common || m.target !== state.target || m.cycleId !== (state.cycle?.id ?? null) || runs.has(m.runId) ||
+            state.rounds.some(r => r.runId === m.runId))
+            refuse('audit_binding');
+        await inspectRecoveryDirectory(dirname(dir), true);
+        await inspectRecoveryDirectory(dir, true);
+        await selected(join(dir, 'manifest.json'), entry.manifestSha256);
+        const before = parse(await selected(join(dir, 'native-before.json'), m.stateSha256));
+        const attempts = await selected(join(dir, 'attempts-before.json'), m.attemptSha256);
+        if (!isDeepStrictEqual(before.terminalRejections ?? [], prefix))
+            refuse('audit_prefix');
+        await selected(join(dir, 'report.json'), m.reportSha256);
+        await selected(join(dir, 'quarantine-manifest.json'), m.quarantineSha256);
+        const evidence = await proof(before, attempts, m, m.dataDir, dir);
+        bound(m, before, evidence.launch);
+        if (evidence.manifest.sha256 !== m.quarantineSha256)
+            refuse('quarantine_changed');
+        prefix.push(entry);
+        runs.add(m.runId);
+    }
+}
+/** Called under ordinary native ownership; a disposition still needs an explicit bounded retry. */
+export async function terminalRejectionForLaunch(common, state) {
+    await verifyTerminalRejections(common, state);
+    const launch = state.lastLaunch;
+    const entry = state.terminalRejections?.find(e => rejectionManifest(e).runId === launch?.runId);
+    if (!entry)
+        return false;
+    const m = rejectionManifest(entry);
+    const before = parse(await selected(join(directory(common, m), 'native-before.json'), m.stateSha256));
+    if (!isDeepStrictEqual(launch, { ...before.lastLaunch, deliveryPending: false, deliveryFailure: 'local-invalid' })) {
+        refuse('launch_changed');
+    }
+    await selected(convergeAttemptStatePath(common, m.target), m.attemptSha256);
+    deadOwner(launch.pid);
+    await noDelivery(m.dataDir, m.runId);
+    return true;
+}
+//# sourceMappingURL=terminal-rejection.js.map

package/dist/converge/terminal-rejection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-rejection.js","sourceRoot":"","sources":["../../src/converge/terminal-rejection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAA6B,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAC/F,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAsB,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,UAAU,EAAyB,MAAM,gBAAgB,CAAC;AAC/G,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,eAAe,IAAI,MAAM,EAAE,iBAAiB,IAAI,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrG,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,8BAA8B,EACrC,MAAM,gCAAgC,CAAC;AAE/G,MAAM,KAAK,GAAG,CAAC,IAA4C,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;AACtG,SAAS,MAAM,CAAC,IAAY,IAAW,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACvF,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAC7B,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO;IAAC,CAAC;IAChF,MAAM,CAAC,yBAAyB,CAAC,CAAC;AACpC,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC1B,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC9F,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAC7B,CAAC;AACD,4FAA4F;AAC5F,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,KAAa;IACtD,MAAM,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAC/B,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAChG,MAAM,wBAAwB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AACD,SAAS,QAAQ,CAAC,KAAuB,EAAE,YAAoD,EAAE,CAAqB;IACpH,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACnG,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QACxF,MAAM,CAAC,gBAAgB,KAAK,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa;QAChH,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC;QAC9H,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc;QACzE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC;QAC5E,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;QAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,KAAK,UAAU,KAAK,CAAC,KAAuB,EAAE,QAAgD,EAC5F,CAAqB,EAAE,OAAe,EAAE,iBAA0B;IAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9H,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO;QACjF,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,KAAK,MAAM,CAAC,OAAO;QAC3F,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,EAAE,EAAE;QACtF,MAAM,CAAC,GAAG,CAAC,UAAU,KAAK,UAAU,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,oBAAoB;QACvF,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB;QAChH,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,iBAAiB;QACvI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,cAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;QAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC5I,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/H,MAAM,wBAAwB,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,QAAS,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAa,CAAC,MAAM,GAAG,CAAC;QACzG,QAAQ,CAAC,QAAS,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,QAAS,CAAC,QAAQ;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACrI,MAAM,wBAAwB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAkB,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,QAAQ,CAAC,QAAS,CAAC,SAAS,CAAC,WAAW,CAAC;QAAE,SAAS,CAAC,SAAS,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/H,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IACrF,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,WAAW,GAAG,4BAA4B,CAAC,GAAmB,CAAC,CAAC;IACtE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,0DAA0D,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,CAAC,6BAA6B,CAAC,CAAC;IACvK,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;IACzD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAC5E,gBAAgB,CAAC,GAAmB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,QAAQ,IAAI,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;QAClE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAS,CAAC,WAAW,EAAE,WAAW,CAAC;QAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACnG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,EAAE,QAAQ,CAAC,QAAS,EAAE,CAAC;AAClH,CAAC;AACD,SAAS,KAAK,CAAC,CAAoB,EAAE,KAAuB,EAAE,MAA6C;IACzG,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;QACrG,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;AACrG,CAAC;AACD,SAAS,SAAS,CAAC,MAAc,EAAE,CAAoB,IAAY,OAAO,IAAI,CAAC,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACnI,SAAS,SAAS,CAAC,MAAwB,EAAE,KAAqB,EAAE,CAAoB;IACtF,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,UAAW,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE;QACjH,kBAAkB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;QACjE,sBAAsB,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;AACnG,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAyB,EAAE,YAAoB,EAAE,aAAqB;IACnH,MAAM,CAAC,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAChG,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACvD,MAAM,0BAA0B,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAChF,MAAM,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5G,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC/F,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1G,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM;QACzF,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI;QAC5E,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAChJ,MAAM,QAAQ,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,QAAQ,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAmD,EAAE,YAAoB,EAAE,aAAqB;IAC3I,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACzG,IAAI,CAAC,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAAE,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAC9H,MAAM,KAAK,GAAmB,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC/F,OAAO,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;QAC5D,MAAM,0BAA0B,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QACjF,MAAM,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;QACtG,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC;gBAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAqB,CAAC;YAC1H,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YACpF,MAAM,QAAQ,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;YAC5E,SAAS,CAAC,KAAK,CAAC,UAAW,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE;YACrC,MAAM,aAAa,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAC3C,OAAO,aAAa,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,aAAa,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,CAAC;QAC1F,CAAC,CAAC;YAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5D,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,gBAAgB;YAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAClF,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1D,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC7E,MAAM,eAAe,CAAC,kBAAkB,CAAC,CAAC;QAAC,MAAM,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,CAAC,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa;YAC3F,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpI,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,gBAAgB;YAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC1F,2EAA2E;QAC3E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,gBAAgB;YAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC/E,MAAM,QAAQ,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,QAAQ,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;QAC5E,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAc,EAAE,KAAuB;IACpF,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS;QAAE,OAAO;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1J,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YACxH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QACvE,MAAM,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAAC,MAAM,wBAAwB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9F,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAqB,CAAC;QACzG,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;QACpF,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,EAAE,MAAM,CAAC;YAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QACxF,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClE,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,gBAAgB;YAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAAc,EAAE,KAAuB;IACtF,MAAM,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,EAAE,KAAK,CAAC,CAAC;IAChG,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAqB,CAAC;IAC1H,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QACnH,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,QAAQ,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IAC5E,SAAS,CAAC,MAAO,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/coordination/registry-lock.d.ts

@@ -0,0 +1,82 @@
+export interface RegistryRegistration<Scope> {
+    version: 1;
+    pid: number;
+    token: string;
+    scope: Scope;
+    state: 'choosing' | 'ready';
+    ticket?: number;
+}
+type LockStage = 'legacy_reserved' | 'choosing_published' | 'ticket_selected' | 'ready_published' | 'before_reap' | 'after_reap' | 'scan_complete';
+/** Internal deterministic test seams. The CLI never accepts these overrides. */
+export interface RegistryHooks<Scope> {
+    /** Test-only pause after private legacy preparation, before atomic publication. */
+    onLegacyPrepared?: () => Promise<void>;
+    scope?: () => Promise<Scope>;
+    token?: () => string;
+    probe?: (pid: number) => void;
+    now?: () => number;
+    wait?: () => Promise<void>;
+    read?: (path: string) => Promise<string>;
+    onEvent?: (event: {
+        stage: LockStage;
+        registration: RegistryRegistration<Scope>;
+        peer?: RegistryRegistration<Scope>;
+    }) => Promise<void>;
+}
+export interface RegistryPolicy<Scope> {
+    scope: () => Promise<Scope>;
+    validScope: (value: unknown) => value is Scope;
+    prepareRoot: (path: string) => Promise<string>;
+    inspectRegistry: (path: string) => Promise<void>;
+    sync: (path: string) => Promise<void>;
+    read?: (path: string) => Promise<string>;
+    mayProbePid: (scope: Scope) => boolean;
+    /** Bounded waiting policy for callers that expose lock timing as part of their contract. */
+    lockTimeoutMs?: number;
+    lockRetryMs?: number;
+}
+/** Options for the pre-3.8 recovery-lock compatibility reservation.
+ *
+ * Older clients serialize solely with `<sha256(identity)>.lock`.  New clients
+ * hold that pathname for their entire bakery critical section, so either
+ * protocol observes the other.  Reclaim deliberately retains the old
+ * PID-only semantics: this document has no boot or namespace binding.
+ */
+export interface LegacyReservationOptions {
+    sync: (path: string) => Promise<void>;
+    read?: (path: string) => Promise<string>;
+    probe?: (pid: number) => void;
+    now?: () => number;
+    wait?: () => Promise<void>;
+    lockTimeoutMs?: number;
+    lockRetryMs?: number;
+    onPrepared?: () => Promise<void>;
+    /** Legacy owner documents lack scope, so strict recovery must not reclaim them. */
+    reclaimLegacy?: boolean;
+    qualifiedLegacy?: (owner: unknown) => boolean;
+    /** A scoped compatibility owner may be probed only under the caller's policy. */
+    mayProbeLegacy?: (owner: LegacyOwner) => boolean;
+}
+interface LegacyOwner {
+    pid: number;
+    token: string;
+    scope?: unknown;
+}
+/**
+ * Reserve the legacy recovery-lock pathname for the duration of `work`.
+ * Creation, stale-owner reclamation, and release are all ownership checked so
+ * the bridge cannot be a check-then-act preflight beside the bakery registry.
+ */
+export declare function withLegacyReservation<T>(root: string, identity: string, owner: LegacyOwner, work: () => Promise<T>, options?: LegacyReservationOptions): Promise<T>;
+/** Work completed; only coordination cleanup failed. Never replay the result. */
+export declare class RegistryCleanupError<T = unknown> extends Error {
+    readonly result: T;
+    constructor(result: T, cause: unknown);
+}
+/**
+ * Dynamic Lamport bakery on coherent local storage: choosing is visible before
+ * ticket selection, then one fixed (ticket, token) orders this acquisition.
+ * Each path is unique for all time. No shared reclaim guard or TTL is involved.
+ */
+export declare function withRegistryLock<T, Scope>(root: string, identity: string, work: () => Promise<T>, policy: RegistryPolicy<Scope>, hooks?: RegistryHooks<Scope>): Promise<T>;
+export {};