@allocator-one/rcl 4.4.19

package/dist/evidence/claim-recovery/claim-index.js

@@ -0,0 +1,56 @@
+import { object, uuidSchema } from './validation/primitives.js';
+import { isEventReceiptScope } from './validation/receipts.js';
+export const CLAIM_EVENT_KINDS = ['round_processed', 'verdicts_recorded', 'finding_identity_corrected',
+    'finding_claim_split', 'finding_obligation_transferred', 'finding_claim_disposition'];
+export const MAX_CLAIM_EVENTS = 20000;
+const integer = (x) => typeof x === 'number' && Number.isSafeInteger(x) && x >= 0;
+export function claimEventSelector(value) {
+    return object(value) && Object.keys(value).sort().join(',') === 'id,kind,sequence' &&
+        uuidSchema.safeParse(value.id).success && integer(value.sequence) && value.sequence > 0 &&
+        CLAIM_EVENT_KINDS.includes(value.kind);
+}
+/** A bounded, pinned selector index. Payloads are read separately by exact UUID. */
+export async function readClaimEventIndex(sink, scope, through) {
+    scope = structuredClone(scope);
+    if (!object(scope) || !isEventReceiptScope(scope) || !integer(through) || sink.baseUrl !== scope.base_url || sink.credentialSource === 'attest') {
+        throw new Error('invalid_claim_index_selection');
+    }
+    const all = [];
+    const ids = new Set();
+    let after = 0;
+    for (;;) {
+        const query = new URLSearchParams({
+            index: 'claim_recovery', after_sequence: String(after),
+            through_sequence: String(through), limit: '50'
+        });
+        const result = await sink.getJson(`/api/v1/reviews/runs/${scope.run_id}/events?${query}`, (data, meta) => {
+            if (!object(meta) || Object.keys(meta).sort().join(',') !==
+                'claim_recovery_version,complete,next_after_sequence,org_id,run_id,through_sequence' ||
+                meta.org_id !== scope.org_id || meta.run_id !== scope.run_id || meta.claim_recovery_version !== 1 ||
+                meta.through_sequence !== through || typeof meta.complete !== 'boolean' ||
+                !Array.isArray(data) || data.length > 50)
+                return null;
+            let previous = after;
+            for (const row of data) {
+                if (!claimEventSelector(row) || row.sequence <= previous || row.sequence > through || ids.has(row.id) ||
+                    data.filter(other => object(other) && other.id === row.id).length !== 1)
+                    return null;
+                previous = row.sequence;
+            }
+            if (meta.complete ? meta.next_after_sequence !== null :
+                data.length !== 50 || meta.next_after_sequence !== previous || previous <= after || previous >= through)
+                return null;
+            return { rows: data, next: meta.next_after_sequence };
+        }, { requireCompleteRead: true });
+        if (result.kind !== 'ok')
+            return result;
+        all.push(...result.value.rows);
+        result.value.rows.forEach(row => ids.add(row.id));
+        if (all.length > MAX_CLAIM_EVENTS)
+            return { kind: 'conflict', message: 'claim_event_index_limit' };
+        if (result.value.next === null)
+            return { kind: 'ok', httpStatus: 200, value: all };
+        after = result.value.next;
+    }
+}
+//# sourceMappingURL=claim-index.js.map

package/dist/evidence/claim-recovery/claim-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-index.js","sourceRoot":"","sources":["../../../src/evidence/claim-recovery/claim-index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAC,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAC,CAAC,iBAAiB,EAAC,mBAAmB,EAAC,4BAA4B;IAChG,qBAAqB,EAAC,gCAAgC,EAAC,2BAA2B,CAAU,CAAC;AAM/F,MAAM,CAAC,MAAM,gBAAgB,GAAC,KAAK,CAAC;AACpC,MAAM,OAAO,GAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAG,QAAQ,IAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAE,CAAC,IAAE,CAAC,CAAC;AAC9F,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,kBAAkB;QAC5E,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,IAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAE,KAAK,CAAC,QAAQ,GAAC,CAAC;QACjF,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAwC,CAAC,CAAC;AAC/E,CAAC;AACD,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAiB,EAAC,KAAwB,EAAC,OAAe;IAClG,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAE,IAAI,CAAC,OAAO,KAAG,KAAK,CAAC,QAAQ,IAAE,IAAI,CAAC,gBAAgB,KAAG,QAAQ,EAAE,CAAC;QACnI,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,GAAG,GAAC,IAAI,GAAG,EAAU,CAAC;IAC5B,IAAI,KAAK,GAAC,CAAC,CAAC;IACZ,SAAQ,CAAC;QACP,MAAM,KAAK,GAAC,IAAI,eAAe,CAAC;YAC9B,KAAK,EAAE,gBAAgB,EAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC;YACrD,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,EAAC,KAAK,EAAE,IAAI;SAC9C,CAAC,CAAC;QACH,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,KAAK,CAAC,MAAM,WAAW,KAAK,EAAE,EAAC,CAAC,IAAI,EAAC,IAAI,EAAE,EAAE;YACnG,IAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;gBAClD,oFAAoF;gBACpF,IAAI,CAAC,MAAM,KAAG,KAAK,CAAC,MAAM,IAAE,IAAI,CAAC,MAAM,KAAG,KAAK,CAAC,MAAM,IAAE,IAAI,CAAC,sBAAsB,KAAG,CAAC;gBACvF,IAAI,CAAC,gBAAgB,KAAG,OAAO,IAAE,OAAO,IAAI,CAAC,QAAQ,KAAG,SAAS;gBACjE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC,MAAM,GAAC,EAAE;gBACpC,OAAO,IAAI,CAAC;YACd,IAAI,QAAQ,GAAC,KAAK,CAAC;YACnB,KAAI,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACtB,IAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAE,GAAG,CAAC,QAAQ,IAAE,QAAQ,IAAE,GAAG,CAAC,QAAQ,GAAC,OAAO,IAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,KAAK,CAAC,EAAE,KAAG,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,KAAG,CAAC;oBACjE,OAAO,IAAI,CAAC;gBACd,QAAQ,GAAC,GAAG,CAAC,QAAQ,CAAC;YACxB,CAAC;YACD,IAAG,IAAI,CAAC,QAAQ,CAAA,CAAC,CAAC,IAAI,CAAC,mBAAmB,KAAG,IAAI,CAAA,CAAC;gBAChD,IAAI,CAAC,MAAM,KAAG,EAAE,IAAE,IAAI,CAAC,mBAAmB,KAAG,QAAQ,IAAE,QAAQ,IAAE,KAAK,IAAE,QAAQ,IAAE,OAAO;gBACzF,OAAO,IAAI,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,IAA4B,EAAC,IAAI,EAAE,IAAI,CAAC,mBAAkC,EAAE,CAAC;QAC9F,CAAC,EAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,IAAG,MAAM,CAAC,IAAI,KAAG,IAAI;YACnB,OAAO,MAAM,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,IAAG,GAAG,CAAC,MAAM,GAAC,gBAAgB;YAC5B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAC,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACjE,IAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAG,IAAI;YACzB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAC,UAAU,EAAE,GAAG,EAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACnD,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/evidence/claim-recovery/confirmation.d.ts

@@ -0,0 +1,53 @@
+import { type AuthenticatedSelectedReceipts, type AuthenticatedReceiptContent } from './authenticated-receipts.js';
+import { type AuthenticatedCarrierInventory, type CarrierInventoryContent } from './carrier-inventory.js';
+import type { AcceptedClaimDisposition } from './validation/native-occurrences.js';
+import type { CarrierSourceInventory } from './validation/carrier-types.js';
+import type { OccurrenceContext, ReceiptAttribution } from './validation/occurrence-types.js';
+/** A historical witness. It does not establish the current claim or gate state. */
+export interface RecoveryConfirmation {
+    readonly qualification: 'authenticated-confirmation-source';
+}
+export interface RecoveryConfirmationContent {
+    actorUserId: string;
+    claimIdentity: string;
+    disposition: AcceptedClaimDisposition;
+    assertion: ReceiptAttribution;
+    source: CarrierSourceInventory;
+    sourceEventSequence: number;
+    health: {
+        blocking: number;
+        successful: number;
+        required: number;
+    };
+    claimStanding: 'not-evaluated';
+    /** Matching sightings remain visible for the complete obligation projection. */
+    sightings: Array<{
+        findingRef: string;
+        severity: string;
+        gating: string;
+        status: string;
+        pendingRound: number | null;
+    }>;
+    receiptCutoff: string | null;
+}
+export declare function recoveryConfirmationContent(witness: RecoveryConfirmation): RecoveryConfirmationContent;
+/**
+ * Qualify an actual later review against an authenticated fixed assertion.
+ * Both inputs must come from the bounded readers. A witness never retires a
+ * carrier, selects the latest disposition, clears a re-gating sighting, or
+ * approves a head: those require the complete current obligation projection.
+ * A supplied receipt cutoff applies to every receipt used by this witness.
+ */
+export declare function qualifyRecoveryConfirmation(proof: AcceptedClaimDisposition, inventory: AuthenticatedCarrierInventory, receipts: AuthenticatedSelectedReceipts, receiptCutoff?: string): {
+    kind: 'eligible';
+    value: RecoveryConfirmation;
+} | {
+    kind: 'ineligible';
+    reason: 'confirmation_source_conflict';
+};
+/** Content replay used when validating retained proof; this function does not
+ * authenticate transport or grant native mutation authority. */
+export declare function replayRecoveryConfirmation(proof: AcceptedClaimDisposition, candidates: CarrierInventoryContent, reads: AuthenticatedReceiptContent, receiptCutoff?: string): RecoveryConfirmationContent | null;
+/** Replay one candidate against an already attributed assertion. Pure content
+ * checking only: callers must authenticate the complete source and receipt view. */
+export declare function replayEligibleConfirmationCandidate(context: OccurrenceContext, claimIdentity: string, assertion: ReceiptAttribution, candidates: CarrierInventoryContent, receiptCutoff?: string): Omit<RecoveryConfirmationContent, 'disposition'> | null;

package/dist/evidence/claim-recovery/confirmation.js

@@ -0,0 +1,151 @@
+import { isDeepStrictEqual } from 'node:util';
+import { stableStringify } from '../../report/run-header.js';
+import { buildRunEnvelope } from '../../telemetry/envelope.js';
+import { originalRunReportSchema } from '../../telemetry/recovery/source.js';
+import { decodeRecoveryOriginal as decodeOriginalReport } from './validation/recovery-json.js';
+import { authenticatedReceiptContent } from './authenticated-receipts.js';
+import { carrierInventoryContent } from './carrier-inventory.js';
+import { prepareClaimDisposition } from './validation/occurrence.js';
+import { hash, validateOccurrenceSource } from './validation/occurrence-source.js';
+import { instant, object } from './validation/primitives.js';
+import { isStoredEventReceipt, matchesPreparedEventReceipt } from './validation/receipts.js';
+const accepted = new WeakMap();
+export function recoveryConfirmationContent(witness) {
+    const content = accepted.get(witness);
+    if (!content)
+        throw new Error('unverified_recovery_confirmation');
+    return structuredClone(content);
+}
+const requireEvidence = (value) => { if (!value)
+    throw new Error('confirmation_source_conflict'); };
+const time = (value) => BigInt(instant(value));
+const attribution = (r) => ({ eventId: r.id, actorUserId: r.actor_user_id,
+    occurredAt: r.occurred_at, receivedAt: r.received_at, sequence: r.sequence });
+const callKeys = ['model', 'role', 'provider', 'lane', 'chunk_index', 'status', 'duration_ms', 'input_tokens',
+    'output_tokens', 'reasoning_tokens', 'dropped_findings', 'warnings', 'error', 'async'];
+const headerKeys = ['id', 'command', 'rcl_version', 'config_sha256', 'roster', 'thresholds', 'gating',
+    'spec', 'context_files', 'plan', 'runner', 'duration_ms', 'ci_exit_code'];
+function fields(row, keys) {
+    return Object.fromEntries(keys.map(key => [key, row[key] ?? null]));
+}
+/**
+ * Qualify an actual later review against an authenticated fixed assertion.
+ * Both inputs must come from the bounded readers. A witness never retires a
+ * carrier, selects the latest disposition, clears a re-gating sighting, or
+ * approves a head: those require the complete current obligation projection.
+ * A supplied receipt cutoff applies to every receipt used by this witness.
+ */
+export function qualifyRecoveryConfirmation(proof, inventory, receipts, receiptCutoff) {
+    try {
+        const content = replayRecoveryConfirmation(proof, carrierInventoryContent(inventory), authenticatedReceiptContent(receipts), receiptCutoff);
+        if (!content)
+            return { kind: 'ineligible', reason: 'confirmation_source_conflict' };
+        const value = Object.freeze({ qualification: 'authenticated-confirmation-source' });
+        accepted.set(value, content);
+        return { kind: 'eligible', value };
+    }
+    catch {
+        return { kind: 'ineligible', reason: 'confirmation_source_conflict' };
+    }
+}
+/** Content replay used when validating retained proof; this function does not
+ * authenticate transport or grant native mutation authority. */
+export function replayRecoveryConfirmation(proof, candidates, reads, receiptCutoff) {
+    try {
+        proof = structuredClone(proof);
+        const p = proof.preparation;
+        const prepared = prepareClaimDisposition(p);
+        requireEvidence(p.verdict === 'fixed' && proof.actorUserId === p.actorUserId &&
+            reads.actorUserId === candidates.actorUserId && candidates.inventory.inventoryStatus === 'complete');
+        const cutoff = receiptCutoff === undefined ? undefined : time(receiptCutoff);
+        const beforeCutoff = (received) => requireEvidence(cutoff === undefined || time(received) <= cutoff);
+        const verified = new Map(reads.selections.flatMap(s => s.receipts.map(r => [r.id, r])));
+        const requireReceipt = (r) => {
+            requireEvidence(isDeepStrictEqual(verified.get(r.id), r));
+            beforeCutoff(r.received_at);
+        };
+        const sources = [p.split.source, ...p.laterSources ?? []];
+        for (const source of sources) {
+            const bound = validateOccurrenceSource(source);
+            const selected = reads.selections.find(s => s.selection.scope.run_id === source.scope.run_id);
+            requireEvidence(selected && isDeepStrictEqual(fields(selected.selection, ['scope', 'target', 'round', 'reportSha256', 'headSha']), { scope: source.scope,
+                target: bound.target, round: bound.round, reportSha256: bound.digest, headSha: bound.head }));
+            for (const r of [source.classification, ...source.corrections])
+                requireReceipt(r);
+        }
+        for (const r of [proof.receipt, p.split.receipt, ...(p.originalVerdict ? [p.originalVerdict] : []),
+            ...(p.previousDisposition ? [p.previousDisposition] : [])])
+            requireReceipt(r);
+        requireEvidence(isStoredEventReceipt(proof.receipt, p.sourceContext.scope) &&
+            matchesPreparedEventReceipt(proof.receipt, JSON.stringify(prepared.event), p.sourceContext.scope, proof.actorUserId) &&
+            proof.receipt.sequence > p.sourceContext.eventSequence &&
+            time(proof.receipt.received_at) >= time(p.split.receipt.received_at) &&
+            sources.flatMap(s => [s.classification, ...s.corrections]).every(r => time(r.received_at) <= time(proof.receipt.received_at)));
+        const assertion = prepared.assertionReceipt.kind === 'preserved' ? prepared.assertionReceipt.receipt : attribution(proof.receipt);
+        const candidate = replayEligibleConfirmationCandidate(p.sourceContext, p.split.selection.identity, assertion, candidates, receiptCutoff);
+        return candidate ? { ...candidate, disposition: proof } : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Replay one candidate against an already attributed assertion. Pure content
+ * checking only: callers must authenticate the complete source and receipt view. */
+export function replayEligibleConfirmationCandidate(context, claimIdentity, assertion, candidates, receiptCutoff) {
+    try {
+        const cutoff = receiptCutoff === undefined ? undefined : time(receiptCutoff);
+        const beforeCutoff = (received) => requireEvidence(cutoff === undefined || time(received) <= cutoff);
+        beforeCutoff(assertion.receivedAt);
+        const floor = time(assertion.receivedAt);
+        const own = candidates.inventory;
+        requireEvidence(own.carrier.kind === 'classified_group' && own.sources.length === 1);
+        const source = own.sources[0];
+        const selection = source.selector;
+        requireEvidence(selection.scope.base_url === context.scope.base_url && selection.scope.org_id === context.scope.org_id &&
+            selection.scope.repo.toLowerCase() === context.scope.repo.toLowerCase() &&
+            selection.scope.pr_number === context.scope.pr_number && selection.target === context.target &&
+            selection.round > context.round && selection.scope.run_id !== context.scope.run_id &&
+            typeof source.reportJson === 'string' && source.storedRun && source.classifications?.length === 1 && source.corrections &&
+            source.correctionIds && isDeepStrictEqual([...source.correctionIds].sort(), source.corrections.map(r => r.id).sort()));
+        const classification = source.classifications[0];
+        requireEvidence(classification.id === own.carrier.classificationId && classification.payload.classification_version === 1);
+        const bound = validateOccurrenceSource({ scope: selection.scope, reportJson: source.reportJson, storedRun: source.storedRun,
+            classification, corrections: source.corrections });
+        requireEvidence(bound.digest === selection.reportSha256 && bound.head === selection.headSha &&
+            bound.target === selection.target && bound.round === selection.round);
+        const raw = decodeOriginalReport(source.reportJson, { exactNumbers: true, originalProse: 'control-code-units-v1' });
+        requireEvidence(originalRunReportSchema.safeParse(raw.value).success);
+        const report = raw.value;
+        const run = source.storedRun;
+        const envelope = buildRunEnvelope(report, { report_json: source.reportJson }, { level: 'full', delivery: { mode: 'direct' } });
+        requireEvidence(isDeepStrictEqual(envelope.run, report.run) &&
+            isDeepStrictEqual(fields(run, headerKeys), fields(report.run, headerKeys)) &&
+            run.repo_verified === true && run.is_cross_repository === false && run.provenance === 'live' &&
+            (report.run.provenance === undefined || report.run.provenance === 'live') &&
+            time(run.started_at) === time(report.run.started_at) && time(run.finished_at) === time(report.run.finished_at) &&
+            time(run.started_at) > floor && time(run.finished_at) >= time(run.started_at) &&
+            time(run.received_at) >= time(run.finished_at) && time(run.received_at) > floor &&
+            time(classification.received_at) >= time(run.received_at) && time(classification.received_at) > floor);
+        beforeCutoff(run.received_at);
+        for (const r of [classification, ...source.corrections])
+            beforeCutoff(r.received_at);
+        requireEvidence(Array.isArray(run.calls) && run.calls.every(c => object(c) && callKeys.every(k => Object.hasOwn(c, k))));
+        const storedCalls = run.calls;
+        const canonical = (rows) => rows.map(r => stableStringify(fields(r, callKeys))).sort();
+        requireEvidence(isDeepStrictEqual(canonical(storedCalls), canonical(envelope.calls)));
+        const blocking = envelope.calls.filter(c => c.lane === 'blocking');
+        const successful = blocking.filter(c => c.status === 'success').length;
+        const required = Math.max(2, Math.ceil(2 * blocking.length / 3));
+        requireEvidence(blocking.length >= 2 && successful >= required && hash(source.reportJson) === selection.reportSha256);
+        return structuredClone({ actorUserId: candidates.actorUserId, claimIdentity: claimIdentity,
+            assertion, source, sourceEventSequence: candidates.runSequences.find(r => r.runId === selection.scope.run_id).eventSequence,
+            health: { blocking: blocking.length, successful, required }, claimStanding: 'not-evaluated',
+            sightings: bound.members.filter(m => m.identity === claimIdentity || m.mapping?.matched_identity === claimIdentity).map(m => ({ findingRef: m.ref,
+                severity: m.severity, gating: m.gating, status: m.mapping.status, pendingRound: m.mapping.pending_round })),
+            receiptCutoff: receiptCutoff ?? null });
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=confirmation.js.map

package/dist/evidence/claim-recovery/confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation.js","sourceRoot":"","sources":["../../../src/evidence/claim-recovery/confirmation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,IAAI,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC/F,OAAO,EAAE,2BAA2B,EAAwE,MAAM,6BAA6B,CAAC;AAChJ,OAAO,EAAE,uBAAuB,EAAoE,MAAM,wBAAwB,CAAC;AACnI,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAA2B,MAAM,0BAA0B,CAAC;AAoBtH,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAqD,CAAC;AAClF,MAAM,UAAU,2BAA2B,CAAC,OAA6B;IACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AACD,MAAM,eAAe,GAAG,CAAC,KAAc,EAAQ,EAAE,GAAG,IAAI,CAAC,KAAK;IAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC;AACnH,MAAM,IAAI,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,MAAM,WAAW,GAAG,CAAC,CAAqB,EAAsB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,aAAa;IAC/G,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAChF,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc;IAC3G,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACzF,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ;IACnG,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AAC5E,SAAS,MAAM,CAAC,GAAW,EAAE,IAAc;IACzC,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAG,GAA+B,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAA+B,EAAE,SAAwC,EACnH,QAAuC,EAAE,aAAsB;IAE/D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,EAAE,uBAAuB,CAAC,SAAS,CAAC,EAAE,2BAA2B,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;QAC5I,IAAI,CAAC,OAAO;YAAE,OAAO,EAAC,IAAI,EAAC,YAAY,EAAC,MAAM,EAAC,8BAA8B,EAAC,CAAC;QAC/E,MAAM,KAAK,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,mCAA4C,EAAC,CAAC,CAAC;QAAA,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAC,OAAO,CAAC,CAAC;QACpH,OAAO,EAAC,IAAI,EAAC,UAAU,EAAC,KAAK,EAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QAAA,OAAO,EAAC,IAAI,EAAC,YAAY,EAAC,MAAM,EAAC,8BAA8B,EAAC,CAAC;IAAA,CAAC;AAC7E,CAAC;AAED;gEACgE;AAChE,MAAM,UAAU,0BAA0B,CAAC,KAA8B,EAAC,UAAkC,EAC1G,KAAiC,EAAC,aAAqB;IACvD,IAAI,CAAC;QACH,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;QAC5B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QAC5C,eAAe,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW;YAC1E,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,SAAS,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC;QACvG,MAAM,MAAM,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,CAAC,QAAiB,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC;QAC9G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC,CAAC;QACjG,MAAM,cAAc,GAAG,CAAC,CAAqB,EAAE,EAAE;YAC/C,eAAe,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACzF,CAAC,CAAC;QACF,MAAM,OAAO,GAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC9E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9F,eAAe,CAAC,QAAQ,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK;gBACtJ,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAChG,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;gBAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QAChF,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;YACxE,2BAA2B,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC;YACpH,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,aAAa,CAAC,aAAa;YACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YACpE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACjI,MAAM,SAAS,GAAG,QAAQ,CAAC,gBAAgB,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClI,MAAM,SAAS,GAAC,mCAAmC,CAAC,CAAC,CAAC,aAAa,EAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAC,SAAS,EAAC,UAAU,EAAC,aAAa,CAAC,CAAC;QACnI,OAAO,SAAS,CAAA,CAAC,CAAA,EAAC,GAAG,SAAS,EAAC,WAAW,EAAC,KAAK,EAAC,CAAA,CAAC,CAAA,IAAI,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,mCAAmC,CAAC,OAAyB,EAAC,aAAoB,EAAC,SAA4B,EAC7H,UAAkC,EAAC,aAAqB;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAC,aAAa,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,IAAI,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,YAAY,GAAC,CAAC,QAAgB,EAAC,EAAE,CAAA,eAAe,CAAC,MAAM,KAAG,SAAS,IAAE,IAAI,CAAC,QAAQ,CAAC,IAAE,MAAM,CAAC,CAAC;QACnG,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC;QACjC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,kBAAkB,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;QAClC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM;YACpH,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE;YACvE,SAAS,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAC5F,SAAS,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM;YAClF,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,eAAe,EAAE,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW;YACvH,MAAM,CAAC,aAAa,IAAI,iBAAiB,CAAC,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzH,MAAM,cAAc,GAAG,MAAM,CAAC,eAAgB,CAAC,CAAC,CAAE,CAAC;QACnD,eAAe,CAAC,cAAc,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,cAAc,CAAC,OAAO,CAAC,sBAAsB,KAAK,CAAC,CAAC,CAAC;QAC3H,MAAM,KAAK,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAU;YAC3H,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,WAAY,EAAE,CAAC,CAAC;QACtD,eAAe,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO;YACzF,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,UAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACrH,eAAe,CAAC,uBAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAiE,CAAC;QACrF,MAAM,GAAG,GAAG,MAAM,CAAC,SAAU,CAAC;QAC9B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,UAAW,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAChI,eAAe,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;YACzD,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAC1E,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,mBAAmB,KAAK,KAAK,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM;YAC5F,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC;YACzE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;YAC9G,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK;YAC/E,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC;QACzG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,WAAY,CAAC;YAAE,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACtF,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzH,MAAM,WAAW,GAAG,GAAG,CAAC,KAAkC,CAAC;QAC3D,MAAM,SAAS,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjG,eAAe,CAAC,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACjE,eAAe,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,UAAU,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,UAAW,CAAC,KAAK,SAAS,CAAC,YAAY,CAAC,CAAC;QACvH,OAAO,eAAe,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,aAAa,EAAE,aAAa;YACxF,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,aAAa;YAC5H,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,eAAwB;YACpG,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,CAAC,OAAO,EAAE,gBAAgB,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG;gBAC/I,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,OAAQ,CAAC,MAAgB,EAAE,YAAY,EAAE,CAAC,CAAC,OAAQ,CAAC,aAA8B,EAAE,CAAC,CAAC;YAC1I,aAAa,EAAE,aAAa,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC"}

package/dist/evidence/claim-recovery/context.d.ts

@@ -0,0 +1,15 @@
+import type { HarnessSink, SinkOutcome } from '../../telemetry/sink.js';
+import type { EventReceiptScope } from '../event-receipts.js';
+export interface ClaimRecoverySelection {
+    scope: EventReceiptScope;
+    target: string;
+    round: number;
+    reportSha256: string;
+    headSha: string;
+}
+export interface ClaimRecoveryContext {
+    actorUserId: string;
+    eventSequence: number;
+}
+/** Read the current operator and recovery capability against one exact source. */
+export declare function readClaimRecoveryContext(sink: HarnessSink, selection: ClaimRecoverySelection, expectedActor?: string): Promise<SinkOutcome<ClaimRecoveryContext>>;

package/dist/evidence/claim-recovery/context.js

@@ -0,0 +1,40 @@
+import { object, uuidSchema } from './validation/primitives.js';
+import { isEventReceiptScope } from './validation/receipts.js';
+/** Read the current operator and recovery capability against one exact source. */
+export async function readClaimRecoveryContext(sink, selection, expectedActor) {
+    const cloned = structuredClone(selection);
+    if (!object(cloned) || !isEventReceiptScope(cloned.scope))
+        throw new Error('invalid_claim_recovery_selection');
+    const { scope, target, round, reportSha256, headSha } = cloned;
+    if (typeof target !== 'string' ||
+        typeof round !== 'number' || !Number.isSafeInteger(round) || round <= 0 ||
+        typeof reportSha256 !== 'string' || typeof headSha !== 'string' ||
+        !uuidSchema.safeParse(scope.org_id).success || !uuidSchema.safeParse(scope.run_id).success ||
+        !target || target.trim() !== target ||
+        !/^[a-f0-9]{64}$/.test(reportSha256) || !/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(headSha) ||
+        expectedActor !== undefined && !uuidSchema.safeParse(expectedActor).success) {
+        throw new Error('invalid_claim_recovery_selection');
+    }
+    if (sink.credentialSource === 'attest')
+        throw new Error('unsupported_attested_recovery');
+    if (sink.baseUrl !== scope.base_url)
+        throw new Error('claim_recovery_destination_conflict');
+    return sink.getJson(`/api/v1/reviews/runs/${scope.run_id}`, (data, meta) => {
+        if (!object(meta) || meta.org_id !== scope.org_id || meta.evidence_protocol_version !== 2 ||
+            meta.claim_recovery_version !== 1 || !uuidSchema.safeParse(meta.actor_user_id).success ||
+            expectedActor !== undefined && meta.actor_user_id !== expectedActor ||
+            !object(meta.recovery) || meta.recovery.truncated !== false ||
+            !Number.isSafeInteger(meta.recovery.event_sequence) || meta.recovery.event_sequence < 0 ||
+            !object(data) || data.id !== scope.run_id || !object(data.target) ||
+            !['pr', 'patch'].includes(data.target.kind) || data.target.repo !== scope.repo ||
+            data.target.pr_number !== scope.pr_number || data.target.head_sha !== headSha ||
+            !object(data.converge) || data.converge.target !== target || data.converge.round !== round ||
+            !Array.isArray(data.artifacts))
+            return null;
+        const originals = data.artifacts.filter(a => object(a) && a.kind === 'report_json');
+        if (originals.length !== 1 || originals[0].declared_sha256 !== reportSha256 || originals[0].stored !== true)
+            return null;
+        return { actorUserId: meta.actor_user_id, eventSequence: meta.recovery.event_sequence };
+    }, { requireCompleteRead: true });
+}
+//# sourceMappingURL=context.js.map

package/dist/evidence/claim-recovery/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/evidence/claim-recovery/context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAY/D,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAiB,EAAE,SAAiC,EACjG,aAAsB;IACtB,MAAM,MAAM,GAAY,eAAe,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC/G,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QACvE,OAAO,YAAY,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;QAC/D,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO;QAC1F,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM;QACnC,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC;QACxF,aAAa,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACzF,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QACzE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,yBAAyB,KAAK,CAAC;YACrF,IAAI,CAAC,sBAAsB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO;YACtF,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,aAAa;YACnE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK;YAC3D,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAK,IAAI,CAAC,QAAQ,CAAC,cAAyB,GAAG,CAAC;YACnG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACjE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAc,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YACxF,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO;YAC7E,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK;YAC1F,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QACpF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,YAAY,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACzH,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,aAAuB,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAwB,EAAE,CAAC;IAC9G,CAAC,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC"}

package/dist/evidence/claim-recovery/proof-storage.d.ts

@@ -0,0 +1,6 @@
+/** Immutable document roots share exact content-addressed bytes in this one
+ * operation. UUID/payload journals remain separate; a root is not authority. */
+export declare function writeClaimProof(path: string, pool: string, value: unknown): Promise<void>;
+/** All references are re-read and hashed; missing or mutated bytes refuse even
+ * when the small root and its manifest digest still match. */
+export declare function readClaimProof(path: string, pool: string): Promise<unknown>;

package/dist/evidence/claim-recovery/proof-storage.js

@@ -0,0 +1,97 @@
+import { mkdir, lstat, link, unlink } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { dirname, join } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { decodeRecoveryDocument } from '../original-run/decode.js';
+import { inspectRecoveryDirectory } from '../original-run/lock-path.js';
+import { serializeRecoveryDocument, writeExclusiveBytes, syncDirectory, MAX_RECOVERY_DOCUMENT_BYTES } from '../original-run/journal.js';
+import { readStable, writeRecoveryArtifact } from '../../telemetry/recovery/files.js';
+import { packRecoveryMaterial, unpackRecoveryMaterial } from './validation/materials.js';
+const MAX = 64 * 1024 * 1024;
+/** Immutable document roots share exact content-addressed bytes in this one
+ * operation. UUID/payload journals remain separate; a root is not authority. */
+export async function writeClaimProof(path, pool, value) {
+    await inspectRecoveryDirectory(dirname(pool), true);
+    try {
+        await mkdir(pool, { mode: 0o700 });
+        await syncDirectory(dirname(pool));
+    }
+    catch (e) {
+        if (e.code !== 'EEXIST')
+            throw e;
+    }
+    await inspectRecoveryDirectory(pool, true);
+    const packed = packRecoveryMaterial(value);
+    for (const row of packed.materials) {
+        const destination = join(pool, row.sha256);
+        let exists = false;
+        try {
+            await lstat(destination);
+            exists = true;
+        }
+        catch (e) {
+            if (e.code !== 'ENOENT')
+                throw e;
+        }
+        if (exists) {
+            const current = await readStable(destination, MAX);
+            if (current.sha256 !== row.sha256 || current.text !== row.text)
+                throw new Error('claim_proof_material_conflict');
+        }
+        else {
+            const temporary = join(pool, randomUUID() + '.tmp');
+            try {
+                await writeExclusiveBytes(temporary, Buffer.from(row.text, 'utf8'));
+                try {
+                    await link(temporary, destination);
+                }
+                catch (e) {
+                    if (e.code !== 'EEXIST')
+                        throw e;
+                    const current = await readStable(destination, MAX);
+                    if (current.sha256 !== row.sha256 || current.text !== row.text)
+                        throw new Error('claim_proof_material_conflict');
+                }
+            }
+            finally {
+                try {
+                    await unlink(temporary);
+                }
+                catch (e) {
+                    if (e.code !== 'ENOENT')
+                        throw e;
+                }
+            }
+        }
+    }
+    await syncDirectory(pool);
+    const root = { kind: 'rcl-claim-proof', version: 1, rootSha256: packed.rootSha256, sha256s: packed.materials.map(m => m.sha256).sort() };
+    serializeRecoveryDocument(root, MAX_RECOVERY_DOCUMENT_BYTES);
+    await inspectRecoveryDirectory(dirname(path), true);
+    await writeRecoveryArtifact(path, root);
+    await syncDirectory(dirname(path));
+}
+/** All references are re-read and hashed; missing or mutated bytes refuse even
+ * when the small root and its manifest digest still match. */
+export async function readClaimProof(path, pool) {
+    await inspectRecoveryDirectory(dirname(path), true);
+    await inspectRecoveryDirectory(pool, true);
+    const root = decodeRecoveryDocument((await readStable(path, MAX_RECOVERY_DOCUMENT_BYTES)).text);
+    if (!root || root.kind !== 'rcl-claim-proof' || root.version !== 1 || typeof root.rootSha256 !== 'string' || !Array.isArray(root.sha256s) ||
+        root.sha256s.length > 20000 || !root.sha256s.includes(root.rootSha256) || !isDeepStrictEqual(root.sha256s, [...new Set(root.sha256s)].sort()) ||
+        !isDeepStrictEqual(Object.keys(root).sort(), ['kind', 'rootSha256', 'sha256s', 'version']))
+        throw new Error('claim_proof_reference_conflict');
+    let bytes = 0;
+    const rows = [];
+    for (const sha of root.sha256s) {
+        if (typeof sha !== 'string' || !/^[a-f0-9]{64}$/.test(sha))
+            throw new Error('claim_proof_reference_conflict');
+        const raw = await readStable(join(pool, sha), MAX);
+        bytes += Buffer.byteLength(raw.text);
+        if (raw.sha256 !== sha || bytes > MAX)
+            throw new Error('claim_proof_material_conflict');
+        rows.push({ sha256: sha, text: raw.text });
+    }
+    return unpackRecoveryMaterial(root.rootSha256, rows);
+}
+//# sourceMappingURL=proof-storage.js.map

package/dist/evidence/claim-recovery/proof-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-storage.js","sourceRoot":"","sources":["../../../src/evidence/claim-recovery/proof-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAC,IAAI,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAC,mBAAmB,EAAC,aAAa,EAAC,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACrI,OAAO,EAAE,UAAU,EAAC,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAC,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACxF,MAAM,GAAG,GAAC,EAAE,GAAC,IAAI,GAAC,IAAI,CAAC;AACvB;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAC,IAAY,EAAC,KAAc;IAC5E,MAAM,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAM,CAAC,EAAE,CAAC;QACR,IAAI,CAA2B,CAAC,IAAI,KAAG,QAAQ;YAC7C,MAAM,CAAC,CAAC;IACZ,CAAC;IACD,MAAM,wBAAwB,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACzC,KAAI,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,WAAW,GAAC,IAAI,CAAC,IAAI,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,GAAC,KAAK,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;YACzB,MAAM,GAAC,IAAI,CAAC;QACd,CAAC;QACD,OAAM,CAAC,EAAE,CAAC;YACR,IAAI,CAA2B,CAAC,IAAI,KAAG,QAAQ;gBAC7C,MAAM,CAAC,CAAC;QACZ,CAAC;QACD,IAAG,MAAM,EAAE,CAAC;YACV,MAAM,OAAO,GAAC,MAAM,UAAU,CAAC,WAAW,EAAC,GAAG,CAAC,CAAC;YAChD,IAAG,OAAO,CAAC,MAAM,KAAG,GAAG,CAAC,MAAM,IAAE,OAAO,CAAC,IAAI,KAAG,GAAG,CAAC,IAAI;gBACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrD,CAAC;aACI,CAAC;YACJ,MAAM,SAAS,GAAC,IAAI,CAAC,IAAI,EAAC,UAAU,EAAE,GAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,mBAAmB,CAAC,SAAS,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,CAAC;gBAClE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,EAAC,WAAW,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAM,CAAC,EAAE,CAAC;oBACR,IAAI,CAA2B,CAAC,IAAI,KAAG,QAAQ;wBAC7C,MAAM,CAAC,CAAC;oBACV,MAAM,OAAO,GAAC,MAAM,UAAU,CAAC,WAAW,EAAC,GAAG,CAAC,CAAC;oBAChD,IAAG,OAAO,CAAC,MAAM,KAAG,GAAG,CAAC,MAAM,IAAE,OAAO,CAAC,IAAI,KAAG,GAAG,CAAC,IAAI;wBACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;oBACO,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;gBACD,OAAM,CAAC,EAAE,CAAC;oBACR,IAAI,CAA2B,CAAC,IAAI,KAAG,QAAQ;wBAC7C,MAAM,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAC,EAAE,IAAI,EAAE,iBAAiB,EAAC,OAAO,EAAE,CAAC,EAAC,UAAU,EAAE,MAAM,CAAC,UAAU,EAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACpI,yBAAyB,CAAC,IAAI,EAAC,2BAA2B,CAAC,CAAC;IAC5D,MAAM,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,CAAC,CAAC;IACnD,MAAM,qBAAqB,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;IACvC,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AACD;8DAC8D;AAC9D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAC,IAAY;IAC5D,MAAM,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,CAAC,CAAC;IACnD,MAAM,wBAAwB,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAC,sBAAsB,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAA2B,CAAC;IACvH,IAAG,CAAC,IAAI,IAAE,IAAI,CAAC,IAAI,KAAG,iBAAiB,IAAE,IAAI,CAAC,OAAO,KAAG,CAAC,IAAE,OAAO,IAAI,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QACxH,IAAI,CAAC,OAAO,CAAC,MAAM,GAAC,KAAK,IAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAC,CAAC,MAAM,EAAC,YAAY,EAAC,SAAS,EAAC,SAAS,CAAC,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,IAAI,KAAK,GAAC,CAAC,CAAC;IACZ,MAAM,IAAI,GAAC,EAAE,CAAC;IACd,KAAI,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAG,OAAO,GAAG,KAAG,QAAQ,IAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,MAAM,GAAG,GAAC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAC,GAAG,CAAC,EAAC,GAAG,CAAC,CAAC;QAC/C,KAAK,IAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAG,GAAG,CAAC,MAAM,KAAG,GAAG,IAAE,KAAK,GAAC,GAAG;YAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAC,IAAI,CAAC,CAAC;AACtD,CAAC"}

package/dist/evidence/claim-recovery/validation/anchors.d.ts

@@ -0,0 +1,20 @@
+import type { ClaimDescriptor } from './claims.js';
+import { type ClaimSplitInput, type PreparedClaimSplit } from './claim-split.js';
+import { type EventReceipt, type EventReceiptScope } from './receipts.js';
+export interface NativeCorrectionAnchor {
+    version: 1;
+    operationId: string;
+    destination: EventReceiptScope;
+    identity: string;
+    descriptor: ClaimDescriptor;
+    source: PreparedClaimSplit['source'];
+    nativeSource: {
+        version: 1 | 2 | 3;
+        sha256: string;
+    };
+    /** Preserve exact prepared bytes separately from normalized stored fields. */
+    eventJson: string;
+    receipt: EventReceipt;
+}
+/** Receipt-backed recovery metadata is separate from original producer history. */
+export declare function correctionAnchor(input: ClaimSplitInput, receipt: EventReceipt, actor: string, operationId: string): NativeCorrectionAnchor;

package/dist/evidence/claim-recovery/validation/anchors.js

@@ -0,0 +1,22 @@
+import { prepareClaimSplit } from './claim-split.js';
+import { matchesPreparedEventReceipt } from './receipts.js';
+import { uuidSchema } from './primitives.js';
+/** Receipt-backed recovery metadata is separate from original producer history. */
+export function correctionAnchor(input, receipt, actor, operationId) {
+    try {
+        if (!uuidSchema.safeParse(operationId).success)
+            throw new Error('invalid_operation');
+        const prepared = prepareClaimSplit(input);
+        const eventJson = JSON.stringify(prepared.event);
+        if (!matchesPreparedEventReceipt(receipt, eventJson, input.scope, actor))
+            throw new Error('receipt_mismatch');
+        const evidence = prepared.event.payload.native_evidence;
+        return structuredClone({ version: 1, operationId, destination: input.scope, identity: input.identity, descriptor: input.descriptor,
+            source: prepared.source, nativeSource: { version: evidence.state_version, sha256: evidence.state_sha256 },
+            eventJson, receipt });
+    }
+    catch {
+        throw new Error('correction_anchor_source_conflict');
+    }
+}
+//# sourceMappingURL=anchors.js.map

package/dist/evidence/claim-recovery/validation/anchors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchors.js","sourceRoot":"","sources":["../../../../src/evidence/claim-recovery/validation/anchors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAiD,MAAM,kBAAkB,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAA6C,MAAM,eAAe,CAAC;AACvG,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAe7C,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,KAAsB,EAAE,OAAqB,EAAE,KAAa,EAAE,WAAmB;IAChH,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC9G,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,eAAqE,CAAC;QAC9G,OAAO,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;YAChI,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,YAAY,EAAE;YACzG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAAC,CAAC;AACnE,CAAC"}

package/dist/evidence/claim-recovery/validation/carrier-projection.d.ts

@@ -0,0 +1,9 @@
+import type { CarrierProjectionInput, OccurrenceCarrierProjection } from './carrier-types.js';
+export declare const MAX_CARRIER_INVENTORY = 2000;
+export declare const MAX_CARRIER_PREFIX_ROUNDS = 1000;
+/**
+ * Project only the supplied inventory's content. Even a residual-free result is
+ * neither authenticated prefix completeness nor native/server closure, claim
+ * disposition, gate standing or permission to write. No accounting is changed.
+ */
+export declare function projectOccurrenceCarrier(input: CarrierProjectionInput): OccurrenceCarrierProjection;