@allocator-one/rcl 4.4.19

package/dist/telemetry/recovery/discovery.js

@@ -0,0 +1,277 @@
+import { execFile } from 'node:child_process';
+import { readdir, realpath } from 'node:fs/promises';
+import { homedir, tmpdir } from 'node:os';
+import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import { promisify } from 'node:util';
+import { resolveDataDir } from '../../config/data-dir.js';
+import { parseRepoName } from '../../resolver/github.js';
+import { scrubDeep } from '../scrub.js';
+import { fileFailure, hasSyntheticAncestor, platformPath, readStable } from './files.js';
+import { parseSource, SHA256, unsupportedSourceDetails, UUID } from './source.js';
+const execute = promisify(execFile);
+const SKIP = new Set(['node_modules', 'deps', '_build', '.next', '.cache', '.ssh', '.aws', 'secrets', 'credentials', 'objects', 'hooks', 'refs', 'logs', 'vendor']);
+const RCL_DIRECTORY = /(?:^|[-_.])rcl[-_.](?:converge|reports?|output|data|run)|review-council-output|^outbox$|^scratchpad$/i;
+const REPORT_NAME = /(?:report.*\.json|\.json\.tmp|report_json\.json)$/i;
+const REFERENCE_NAME = /(?:ledger|converge|handoff|progress|metadata|manifest).*(?:\.md|\.json|\.txt)$/i;
+export async function gitMetadata(worktree, args) {
+    const env = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith('GIT_')));
+    const { stdout } = await execute('git', ['-C', worktree, ...args], {
+        env: { ...env, GIT_CONFIG_NOSYSTEM: '1', GIT_CONFIG_GLOBAL: '/dev/null' },
+        timeout: 5000, maxBuffer: 4 * 1024 * 1024,
+    });
+    return stdout.trim();
+}
+export function repositoryFromRemote(remote) {
+    const match = /^(?:git@github\.com:|https:\/\/github\.com\/|ssh:\/\/git@github\.com\/)([^\s?#]+?)(?:\.git)?$/.exec(remote);
+    const parsed = match ? parseRepoName(match[1]) : null;
+    return parsed ? `${parsed.owner}/${parsed.repo}` : null;
+}
+export function beneath(path, root) {
+    const child = relative(root, path);
+    return child === '' || (!child.startsWith('..') && !isAbsolute(child));
+}
+function credentialPath(path) {
+    return path.split(/[\\/]/).some((part) => ['secrets', 'credentials', '.ssh', '.aws', '.env'].includes(part)) ||
+        /^(?:.*credentials.*|auth|tokens?)\.json$/i.test(basename(path));
+}
+/** Report references are hints to regular files, never evidence reconstructed from prose. */
+export function reportReferences(text, from) {
+    const paths = new Set();
+    for (const line of text.split('\n')) {
+        if (!/report|json[-_ ]?file|artifact|output|round/i.test(line))
+            continue;
+        for (const match of line.matchAll(/`([^`\n]+\.json(?:\.tmp)?)`|"([^"\n]+\.json(?:\.tmp)?)"|'([^'\n]+\.json(?:\.tmp)?)'|((?:\/|\.\.?\/)[^\s<>`"']+\.json(?:\.tmp)?)/g)) {
+            const value = match[1] ?? match[2] ?? match[3] ?? match[4];
+            if (value.includes('://'))
+                continue;
+            const path = platformPath(isAbsolute(value) ? value : resolve(dirname(from), value));
+            if (!credentialPath(path))
+                paths.add(path);
+        }
+    }
+    return [...paths];
+}
+/** Filename-first discovery. Original report bytes and queues are never modified. */
+export async function inventoryRefutations(options = {}) {
+    const excluded = new Set(options.excludeSha256 ?? []);
+    if ([...excluded].some((hash) => !SHA256.test(hash)))
+        throw new Error('invalid_excluded_sha256');
+    const inventory = {
+        kind: 'rcl-refutation-inventory', version: 1, created_at: new Date().toISOString(),
+        coverage: { roots: [], worktrees: [], git_common_dirs: [], references: [], issues: [], excluded_sha256: [], outbox: [] }, reports: [],
+    };
+    const coverage = inventory.coverage;
+    const roots = options.roots ?? [join(homedir(), 'Development'), '/tmp', '/private/tmp', tmpdir(), resolveDataDir()];
+    const directories = [];
+    const visited = new Set();
+    const candidates = new Map();
+    const referenceFiles = new Set();
+    const repositories = new Set();
+    const referencedProofs = new Map();
+    const syntheticAncestors = new Map();
+    const containingProofs = (path) => {
+        const matches = coverage.worktrees.filter((p) => beneath(path, p.worktree)).sort((a, b) => b.worktree.length - a.worktree.length);
+        return matches.length ? [matches[0]] : [];
+    };
+    const addRoot = async (path) => {
+        try {
+            const canonical = await realpath(path);
+            if (!coverage.roots.includes(canonical)) {
+                coverage.roots.push(canonical);
+                directories.push({ path: canonical, rcl: RCL_DIRECTORY.test(basename(canonical)), synthetic: false });
+            }
+        }
+        catch (error) {
+            coverage.issues.push({ path: platformPath(path), reason: fileFailure(error) });
+        }
+    };
+    for (const path of roots)
+        await addRoot(path);
+    const inspectGit = async (path) => {
+        try {
+            const common = await realpath(resolve(path, await gitMetadata(path, ['rev-parse', '--git-common-dir'])));
+            if (repositories.has(common))
+                return;
+            repositories.add(common);
+            coverage.git_common_dirs.push(common);
+            const repo = repositoryFromRemote(await gitMetadata(path, ['config', '--get', 'remote.origin.url']));
+            const registered = (await gitMetadata(path, ['worktree', 'list', '--porcelain', '-z']))
+                .split('\0').filter((line) => line.startsWith('worktree ')).map((line) => line.slice(9));
+            for (const worktree of registered) {
+                const canonical = platformPath(worktree);
+                if (repo)
+                    coverage.worktrees.push({ worktree: canonical, repo });
+                else
+                    coverage.issues.push({ path: canonical, reason: 'repository_remote_unbound' });
+                await addRoot(canonical);
+            }
+            await addRoot(common);
+        }
+        catch {
+            coverage.issues.push({ path, reason: 'git_metadata_unavailable' });
+        }
+    };
+    while (directories.length > 0) {
+        const directory = directories.pop();
+        if (visited.has(directory.path))
+            continue;
+        visited.add(directory.path);
+        let entries;
+        try {
+            entries = await readdir(directory.path, { withFileTypes: true });
+        }
+        catch (error) {
+            coverage.issues.push({ path: directory.path, reason: fileFailure(error) });
+            continue;
+        }
+        const synthetic = directory.synthetic || entries.some((entry) => entry.name === 'SYNTHETIC_TEST_ONLY' && entry.isFile());
+        if (entries.some((entry) => entry.name === '.git' && !entry.isSymbolicLink()))
+            await inspectGit(directory.path);
+        for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+            const path = join(directory.path, entry.name);
+            if (SKIP.has(entry.name) || entry.name === '.git' || credentialPath(path))
+                continue;
+            if (entry.isSymbolicLink()) {
+                if (REPORT_NAME.test(entry.name) || /rcl|review-council/i.test(entry.name))
+                    coverage.issues.push({ path, reason: 'symlink_excluded' });
+            }
+            else if (entry.isDirectory()) {
+                directories.push({ path, rcl: directory.rcl || RCL_DIRECTORY.test(entry.name), synthetic });
+            }
+            else if (entry.isFile() || REPORT_NAME.test(entry.name)) {
+                if (REPORT_NAME.test(entry.name) || (directory.rcl && /\.json(?:\.tmp)?$/i.test(entry.name)))
+                    candidates.set(path, synthetic);
+                if (REFERENCE_NAME.test(entry.name) && !REPORT_NAME.test(entry.name))
+                    referenceFiles.add(path);
+            }
+        }
+        if (visited.size % 1000 === 0)
+            options.progress?.(`Scanned ${visited.size} directories; ${candidates.size} candidate files`);
+    }
+    for (const path of referenceFiles) {
+        try {
+            const source = await readStable(path, 2 * 1024 * 1024);
+            for (const reference of reportReferences(source.text, path)) {
+                if (!coverage.references.includes(reference))
+                    coverage.references.push(reference);
+                if (!candidates.has(reference))
+                    candidates.set(reference, false);
+                if (REFERENCE_NAME.test(basename(reference)) && !REPORT_NAME.test(basename(reference)))
+                    referenceFiles.add(reference);
+                const proofs = containingProofs(path).map((p) => ({ ...p, reference_path: path, reference_sha256: source.sha256 }));
+                referencedProofs.set(reference, [...(referencedProofs.get(reference) ?? []), ...proofs]);
+            }
+        }
+        catch (error) {
+            coverage.issues.push({ path, reason: `reference_${fileFailure(error)}` });
+        }
+    }
+    const reports = new Map();
+    for (const [path, synthetic] of [...candidates].sort(([a], [b]) => a.localeCompare(b))) {
+        try {
+            const file = await readStable(path);
+            if (synthetic || await hasSyntheticAncestor(path, syntheticAncestors))
+                excluded.add(file.sha256);
+            let parsed;
+            try {
+                parsed = parseSource(file.text);
+            }
+            catch (error) {
+                const reason = error instanceof Error ? error.message : 'unsupported_report';
+                if (reason !== 'not_report')
+                    coverage.issues.push({ path, reason });
+                if (reason === 'unsupported_report' || reason === 'unsupported_identity_version') {
+                    // Retain the original digest and disposition even when no transport
+                    // can safely reconstruct this producer's unsupported shape.
+                    const existing = reports.get(file.sha256);
+                    if (existing)
+                        existing.paths.push(path);
+                    else
+                        reports.set(file.sha256, {
+                            sha256: file.sha256, bytes: file.raw.length, paths: [path], mtime: file.mtime,
+                            format: 'unknown', repository_proofs: [], state: 'unsupported', reason,
+                            ...unsupportedSourceDetails(file.text),
+                        });
+                }
+                if (reason === 'not_report' && basename(path) === 'envelope.json' && path.split('/').includes('outbox')) {
+                    const envelope = JSON.parse(file.text);
+                    const id = envelope['run']?.id;
+                    const declared = Array.isArray(envelope['artifacts_declared'])
+                        ? envelope['artifacts_declared'].find((a) => !!a && typeof a === 'object' && a.kind === 'report_json') : undefined;
+                    const digest = typeof declared?.sha256 === 'string' && SHA256.test(declared.sha256) ? declared.sha256 : null;
+                    const reportPath = join(dirname(path), 'artifacts', 'report_json.json');
+                    coverage.outbox.push({ path, sha256: file.sha256, run_id: typeof id === 'string' && UUID.test(id) ? id : null, report_sha256: digest, report_path: reportPath });
+                    try {
+                        const original = await readStable(reportPath);
+                        if (original.sha256 !== digest)
+                            coverage.issues.push({ path, reason: 'outbox_original_report_conflict' });
+                    }
+                    catch {
+                        coverage.issues.push({ path, reason: 'outbox_original_report_missing' });
+                    }
+                }
+                continue;
+            }
+            const existing = reports.get(file.sha256);
+            const proofs = [...containingProofs(path), ...(referencedProofs.get(path) ?? [])];
+            if (existing) {
+                existing.paths.push(path);
+                for (const proof of proofs)
+                    if (!existing.repository_proofs.some((p) => p.worktree === proof.worktree && p.repo === proof.repo && p.reference_path === proof.reference_path))
+                        existing.repository_proofs.push(proof);
+                continue;
+            }
+            const report = parsed.format === 'modern' ? parsed.report : undefined;
+            const target = report ? scrubDeep(report.run.target) : null;
+            const source = {
+                sha256: file.sha256, bytes: file.raw.length, paths: [path], mtime: file.mtime, format: parsed.format,
+                run_id: report?.run.id ?? null, repo: target?.repo ?? null, target,
+                repository_proofs: proofs, state: 'ready', refutations: parsed.refutations,
+            };
+            if (source.refutations.length === 0)
+                source.state = 'no_refutations';
+            else if (parsed.unsafe && parsed.format === 'modern') {
+                source.state = 'unsafe';
+                source.reason = 'original_artifact_requires_redaction';
+            }
+            reports.set(file.sha256, source);
+        }
+        catch (error) {
+            coverage.issues.push({ path, reason: fileFailure(error) });
+        }
+    }
+    for (const source of reports.values()) {
+        if (excluded.has(source.sha256)) {
+            source.state = 'synthetic';
+            source.reason = 'explicit_synthetic_exclusion';
+        }
+        else if (source.format === 'legacy' && source.state === 'ready') {
+            const repos = new Set(source.repository_proofs.map((proof) => proof.repo.toLowerCase()));
+            if (repos.size === 1)
+                source.repo = [...repos][0];
+            else {
+                source.state = 'unbound';
+                source.reason = repos.size === 0 ? 'repository_not_proven' : 'ambiguous_repository';
+            }
+        }
+    }
+    const runDigests = new Map();
+    for (const source of reports.values())
+        if (source.run_id && source.state !== 'synthetic') {
+            const hashes = runDigests.get(source.run_id) ?? new Set();
+            hashes.add(source.sha256);
+            runDigests.set(source.run_id, hashes);
+        }
+    for (const source of reports.values())
+        if (source.run_id && (runDigests.get(source.run_id)?.size ?? 0) > 1 && source.state !== 'synthetic') {
+            source.state = 'conflict';
+            source.reason = 'same_original_run_multiple_digests';
+        }
+    inventory.reports = [...reports.values()];
+    coverage.excluded_sha256 = [...excluded].sort();
+    coverage.roots.sort();
+    coverage.git_common_dirs.sort();
+    coverage.references.sort();
+    return inventory;
+}
+//# sourceMappingURL=discovery.js.map

package/dist/telemetry/recovery/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/telemetry/recovery/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAGlF,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpK,MAAM,aAAa,GAAG,uGAAuG,CAAC;AAC9H,MAAM,WAAW,GAAG,oDAAoD,CAAC;AACzE,MAAM,cAAc,GAAG,iFAAiF,CAAC;AAEzG,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,IAAc;IAChE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE;QACjE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,EAAE;QACzE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;KAC1C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,KAAK,GAAG,+FAA+F,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1G,2CAA2C,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IACzD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACzE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,kIAAkI,CAAC,EAAE,CAAC;YACtK,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC;YAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YACrF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAA4B,EAAE;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACjG,MAAM,SAAS,GAAsB;QACnC,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClF,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;KACtI,CAAC;IACF,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IACpH,MAAM,WAAW,GAA8D,EAAE,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC9D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtD,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAqB,EAAE;QAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClI,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QACpD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC/B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACxG,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACrG,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9C,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;YACzG,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO;YACrC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;YACrG,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;iBACpF,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,IAAI;oBAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;;oBAC5D,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACpF,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAAC,CAAC;IACjF,CAAC,CAAC;IAEF,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAG,CAAC;QACrC,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1C,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACzE,OAAO,KAAK,EAAE,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACvG,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzH,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAAE,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChH,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC;gBAAE,SAAS;YACpF,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACzI,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9F,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1D,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC9H,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC;YAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,OAAO,CAAC,IAAI,iBAAiB,UAAU,CAAC,IAAI,kBAAkB,CAAC,CAAC;IAC/H,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;YACvD,KAAK,MAAM,SAAS,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAClF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBACjE,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;oBAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACtH,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBACpH,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;IAChG,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,SAAS,IAAI,MAAM,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjG,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YACxC,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC;gBAC7E,IAAI,MAAM,KAAK,YAAY;oBAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBACpE,IAAI,MAAM,KAAK,oBAAoB,IAAI,MAAM,KAAK,8BAA8B,EAAE,CAAC;oBACjF,oEAAoE;oBACpE,4DAA4D;oBAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC1C,IAAI,QAAQ;wBAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;wBACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;4BAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;4BAC7E,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM;4BACtE,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvC,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,MAAM,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,eAAe,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAA4B,CAAC;oBAClE,MAAM,EAAE,GAAI,QAAQ,CAAC,KAAK,CAAkC,EAAE,EAAE,CAAC;oBACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;wBAC5D,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,CAAwB,CAAC,IAAI,KAAK,aAAa,CAAqC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC1L,MAAM,MAAM,GAAG,OAAO,QAAQ,EAAE,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC7G,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;oBACxE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;oBACjK,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;wBAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;4BAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,CAAC;oBAC5G,CAAC;oBAAC,MAAM,CAAC;wBAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;oBAAC,CAAC;gBACvF,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAClF,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,KAAK,MAAM,KAAK,IAAI,MAAM;oBAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC;wBAAE,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrN,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,MAAM,MAAM,GAAmB;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;gBACpG,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM;gBAClE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;aAC3E,CAAC;YACF,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,KAAK,GAAG,gBAAgB,CAAC;iBAChE,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;gBAAC,MAAM,CAAC,MAAM,GAAG,sCAAsC,CAAC;YAAC,CAAC;YAC1I,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACtC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC;YAAC,MAAM,CAAC,MAAM,GAAG,8BAA8B,CAAC;QAAC,CAAC;aAC3G,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACzF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC;iBAC9C,CAAC;gBAAC,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;gBAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sBAAsB,CAAC;YAAC,CAAC;QACzH,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE;QAAE,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACzF,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9H,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE;QAAE,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC3I,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;YAAC,MAAM,CAAC,MAAM,GAAG,oCAAoC,CAAC;QAClF,CAAC;IACD,SAAS,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,eAAe,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/telemetry/recovery/files.d.ts

@@ -0,0 +1,20 @@
+export declare const MAX_REPORT_BYTES: number;
+export declare function sha256(bytes: string | Buffer): string;
+/** Only the operating system's standard aliases may precede an explicit reference. */
+export declare function platformPath(path: string): string;
+/** Stable, bounded, regular-file read. Ordinary Windows capture reuse may opt into its native file checks. */
+export declare function readStable(path: string, limit?: number, options?: {
+    sync?: boolean;
+    allowMissingSafeFlagsOnWindows?: boolean;
+}): Promise<{
+    text: string;
+    raw: Buffer;
+    sha256: string;
+    mtime: string;
+}>;
+/** Local manifests contain evidence, so neither partial writes nor broad permissions are acceptable. */
+export declare function writeRecoveryArtifact(path: string, value: unknown): Promise<void>;
+/** Never echo parser messages or source content in discovery diagnostics. */
+export declare function fileFailure(error: unknown): string;
+/** Explicit synthetic markers apply to referenced files and every retained alias. */
+export declare function hasSyntheticAncestor(path: string, cache?: Map<string, boolean>): Promise<boolean>;

package/dist/telemetry/recovery/files.js

@@ -0,0 +1,123 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { constants } from 'node:fs';
+import { link, lstat, mkdir, open, realpath, unlink } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+export const MAX_REPORT_BYTES = 25 * 1024 * 1024;
+export function sha256(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+/** Only the operating system's standard aliases may precede an explicit reference. */
+export function platformPath(path) {
+    const absolute = resolve(path);
+    if (process.platform !== 'darwin')
+        return absolute;
+    return absolute.replace(/^\/tmp(?=\/|$)/, '/private/tmp').replace(/^\/var(?=\/|$)/, '/private/var');
+}
+/** Stable, bounded, regular-file read. Ordinary Windows capture reuse may opt into its native file checks. */
+export async function readStable(path, limit = MAX_REPORT_BYTES, options = {}) {
+    if ((constants.O_NOFOLLOW === undefined || constants.O_NONBLOCK === undefined) &&
+        !(options.allowMissingSafeFlagsOnWindows && process.platform === 'win32'))
+        throw new Error('safe_file_flags_unavailable');
+    const canonical = platformPath(path);
+    if (await realpath(dirname(canonical)) !== dirname(canonical))
+        throw new Error('symlink_directory');
+    const entry = await lstat(canonical);
+    if (!entry.isFile())
+        throw new Error(entry.isSymbolicLink() ? 'symlink_file' : 'not_regular');
+    // Windows requires a writable descriptor for FlushFileBuffers. POSIX permits
+    // fsync on this read descriptor, preserving ordinary read-only recovery.
+    const access = options.sync && process.platform === 'win32' ? constants.O_RDWR : constants.O_RDONLY;
+    const handle = await open(canonical, access | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+    try {
+        const before = await handle.stat();
+        if (!before.isFile())
+            throw new Error('not_regular');
+        if (entry.ino !== before.ino || entry.dev !== before.dev)
+            throw new Error('changing_source');
+        if (before.size > limit)
+            throw new Error('oversized');
+        const buffer = Buffer.alloc(before.size + 1);
+        let length = 0;
+        while (length < buffer.length) {
+            const { bytesRead } = await handle.read(buffer, length, buffer.length - length, length);
+            if (bytesRead === 0)
+                break;
+            length += bytesRead;
+        }
+        // Flush retained checkpoint bytes on the same descriptor before confirming
+        // their stability; readable bytes alone do not acknowledge durability.
+        if (options.sync)
+            await handle.sync();
+        const after = await handle.stat();
+        const current = await lstat(canonical);
+        if (length !== before.size || before.size !== after.size || before.mtimeMs !== after.mtimeMs ||
+            before.ctimeMs !== after.ctimeMs || before.ino !== after.ino || before.dev !== after.dev ||
+            current.ino !== before.ino || current.dev !== before.dev || !current.isFile() ||
+            await realpath(dirname(canonical)) !== dirname(canonical))
+            throw new Error('changing_source');
+        const raw = buffer.subarray(0, length);
+        let text;
+        try {
+            text = new TextDecoder('utf-8', { fatal: true }).decode(raw);
+        }
+        catch {
+            throw new Error('invalid_utf8');
+        }
+        return { raw, text, sha256: sha256(raw), mtime: before.mtime.toISOString() };
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** Local manifests contain evidence, so neither partial writes nor broad permissions are acceptable. */
+export async function writeRecoveryArtifact(path, value) {
+    const destination = resolve(path);
+    await mkdir(dirname(destination), { recursive: true, mode: 0o700 });
+    const temporary = `${destination}.${randomBytes(12).toString('hex')}.tmp`;
+    const handle = await open(temporary, 'wx', 0o600);
+    try {
+        await handle.writeFile(JSON.stringify(value, null, 2) + '\n');
+        await handle.sync();
+    }
+    catch (error) {
+        await unlink(temporary).catch(() => undefined);
+        throw error;
+    }
+    finally {
+        await handle.close();
+    }
+    try {
+        // Exclusive publication cannot overwrite a source report or a reviewed plan.
+        await link(temporary, destination);
+    }
+    finally {
+        await unlink(temporary);
+    }
+}
+/** Never echo parser messages or source content in discovery diagnostics. */
+export function fileFailure(error) {
+    const known = new Set(['safe_file_flags_unavailable', 'symlink_directory', 'symlink_file', 'not_regular', 'oversized', 'changing_source', 'invalid_utf8']);
+    if (error instanceof Error && known.has(error.message))
+        return error.message;
+    const code = error?.code;
+    return typeof code === 'string' && /^[A-Z0-9_]+$/.test(code) ? code : 'unreadable';
+}
+/** Explicit synthetic markers apply to referenced files and every retained alias. */
+export async function hasSyntheticAncestor(path, cache = new Map()) {
+    const directory = dirname(platformPath(path));
+    const cached = cache.get(directory);
+    if (cached !== undefined)
+        return cached;
+    let marked = false;
+    try {
+        marked = (await lstat(resolve(directory, 'SYNTHETIC_TEST_ONLY'))).isFile();
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    const found = marked || (directory !== dirname(directory) && await hasSyntheticAncestor(directory, cache));
+    cache.set(directory, found);
+    return found;
+}
+//# sourceMappingURL=files.js.map

package/dist/telemetry/recovery/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../src/telemetry/recovery/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,MAAM,UAAU,MAAM,CAAC,KAAsB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;AACtG,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,KAAK,GAAG,gBAAgB,EAAE,UAAwE,EAAE;IACjJ,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC;QAC1E,CAAC,CAAC,OAAO,CAAC,8BAA8B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9H,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC9F,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;IACpG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7F,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACxF,IAAI,SAAS,KAAK,CAAC;gBAAE,MAAM;YAC3B,MAAM,IAAI,SAAS,CAAC;QACtB,CAAC;QACD,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,OAAO,CAAC,IAAI;YAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YACxF,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxF,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAC7E,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAClG,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAAC,CAAC;QAChH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/E,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,KAAc;IACtE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9D,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC;QACH,6EAA6E;QAC7E,MAAM,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,6BAA6B,EAAE,mBAAmB,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3J,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC7E,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;IACxD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;AACrF,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,QAAQ,IAAI,GAAG,EAAmB;IACzF,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAAC,CAAC;IACnF,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,IAAI,MAAM,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3G,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/telemetry/recovery/plan.d.ts

@@ -0,0 +1,10 @@
+import type { HarnessSink } from '../sink.js';
+import type { RecoveryInventory, RecoveryManifest, RecoveryOutcome } from './types.js';
+/** A discovery artifact has no reviewed destination and must never authorize writes. */
+export declare function validateRecoveryManifest(value: unknown): RecoveryManifest;
+/** Server-owned organization metadata is required even when the organization has no runs. */
+export declare function recoveryDestination(sink: HarnessSink): Promise<RecoveryManifest['destination']>;
+/** GET-only classification. No outbox, ledger events, model calls or gate mutations. */
+export declare function planRecovery(inventory: RecoveryInventory, sink: HarnessSink): Promise<RecoveryManifest>;
+/** Apply only reviewed selections, reconstructing payloads from retained original bytes. */
+export declare function applyRecovery(value: unknown, sink: HarnessSink): Promise<RecoveryOutcome>;