@amalgm/shell 0.1.164-preview.36072132286 → 0.1.164-preview.36809057014

package/dist/detection/git-notice.js

@@ -0,0 +1,444 @@
+/** Git storage is evidence for checkout owners, never lexical containment.
+ * Each enrolled repository's binding is Git's answer over complete witnessed
+ * inputs: asked once, then reused while every witness stands. A notice path
+ * consumes only the bindings whose storage or sources it can reach; an
+ * unrelated leaf consumes none. A checkout Git does not bind, whose storage
+ * lies within its address, is ordinary ground there. Layouts the named lane
+ * cannot own retain responsibility through complete reconciliation. */
+import { lstatSync, readdirSync, realpathSync } from "node:fs";
+import { dirname, join, relative, sep } from "node:path";
+import { CaptureSourceChangedError } from "../content-cache-host.js";
+import { collectGitBinding, gitStorageDirectory } from "../git-binding.js";
+import { currentGitHost } from "../git-command.js";
+import { observeGitConfiguration } from "../git-configuration.js";
+import { closePhysically } from "../source-proof.js";
+import { readThroughAddresses } from "../sync-address.js";
+const inside = (parent, path) => path === parent || path.startsWith(`${parent}${sep}`);
+export class GitNoticeChanged extends Error {
+    constructor(cause) { super("Git notice consumers changed; retain suspicion and route afresh", { cause }); }
+}
+/** Only these bounded domains describe this checkout's Git state by name. An
+ * unknown or coalesced administrative container must be examined more widely:
+ * the whole repository when its storage is private, else by reconciliation. */
+export function ordinaryGitDomain(path) {
+    if (!path || path === "." || path.split("/").some(part => !part || part === "." || part === ".."))
+        return false;
+    const [first] = path.split("/");
+    if (["refs", "objects", "logs"].includes(first))
+        return true;
+    return !path.includes("/") && /^(HEAD|index|packed-refs|config|shallow|MERGE_HEAD|MERGE_MSG|MERGE_MODE|ORIG_HEAD|FETCH_HEAD|COMMIT_EDITMSG|AUTO_MERGE|CHERRY_PICK_HEAD|REVERT_HEAD|sharedindex\.[0-9a-f]+)(\.lock)?$/.test(path);
+}
+/** Storage Git keeps inside a checkout's storage for other checkouts:
+ * submodule and linked-worktree administrative directories. */
+export function foreignGitDomain(path) {
+    const [first] = path.split("/");
+    return first === "modules" || first === "worktrees";
+}
+const metadataReader = {
+    stat(path) {
+        try {
+            return lstatSync(path);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return null;
+            throw error;
+        }
+    },
+    names: path => readdirSync(path),
+};
+/** An exclusion witness for mutable Git state. Symlinks, multiply linked
+ * files and unknown ref storage make the consumer description incomplete.
+ * Git objects are immutable addresses; this never walks the object store. */
+export function privateGitMetadata(directory, reader = metadataReader) {
+    const privatePath = (path, recursive) => {
+        const stat = reader.stat(path);
+        if (!stat)
+            return true;
+        if (stat.isFile())
+            return stat.nlink === 1;
+        if (!recursive || !stat.isDirectory())
+            return false;
+        return reader.names(path).every(name => privatePath(join(path, name), true));
+    };
+    if (reader.stat(join(directory, "reftable")))
+        return false;
+    if (!["refs", "logs"].every(name => privatePath(join(directory, name), true)))
+        return false;
+    return reader.names(directory).every(name => {
+        const path = join(directory, name), stat = reader.stat(path);
+        // Nested repositories, hooks and immutable objects are not this checkout's
+        // mutable control files. Their consumers have their own binding entries.
+        if (stat?.isDirectory())
+            return true;
+        return privatePath(path, false);
+    });
+}
+const lstatOrNull = (path) => {
+    try {
+        return lstatSync(path);
+    }
+    catch (error) {
+        if (["ENOENT", "ENOTDIR"].includes(error.code ?? ""))
+            return null;
+        throw error;
+    }
+};
+const present = (path) => lstatOrNull(path) !== null;
+/** A name in Git storage no bound checkout consumes owes the directory
+ * holding that storage. */
+const ground = (path) => {
+    const parts = path.split(sep), at = parts.indexOf(".git");
+    return at < 0 ? path : parts.slice(0, at).join(sep) || sep;
+};
+const changed = () => { throw new CaptureSourceChangedError("Git notice binding changed"); };
+async function certify(member) {
+    const host = currentGitHost().key;
+    const binding = await collectGitBinding(member.absolutePath);
+    const storage = binding.binding;
+    const configuration = await observeGitConfiguration(member.absolutePath);
+    // The association was witnessed after Git answered; one closing answer
+    // proves it held throughout. Reuse afterwards needs only the witnesses.
+    await binding.semantic();
+    const marker = join(member.absolutePath, ".git"), worktrees = join(storage.common, "worktrees");
+    const storages = [...new Set([storage.gitDir, storage.common])];
+    const { directory: named, gitfile } = gitStorageDirectory(member.absolutePath);
+    const direct = gitfile !== null || lstatSync(marker).isDirectory();
+    const shared = present(worktrees), commondir = present(join(storage.gitDir, "commondir"));
+    const complete = storages.every(path => privateGitMetadata(path));
+    const validate = () => {
+        if (currentGitHost().key !== host)
+            changed();
+        closePhysically(binding);
+        closePhysically(configuration);
+        if (present(worktrees) !== shared || storages.every(path => privateGitMetadata(path)) !== complete)
+            changed();
+    };
+    validate();
+    const points = [member.absolutePath, storage.worktree, marker, ...storages, ...configuration.sources];
+    return Object.freeze({ member, storage, binding, configuration, complete, validate,
+        layout: direct && !shared && !commondir && storage.gitDir === realpathSync(named)
+            && storage.common === storage.gitDir && storage.index === join(storage.gitDir, "index"),
+        storages: Object.freeze(storages),
+        points: Object.freeze([...new Set(points.flatMap(readThroughAddresses))]) });
+}
+const isCertificate = (answer) => !!answer && !("unbound" in answer);
+async function answer(member) {
+    const marker = join(member.absolutePath, ".git");
+    const unbound = () => {
+        const stat = lstatOrNull(marker);
+        return stat === null || (stat.isDirectory() && !present(join(marker, "commondir")))
+            ? Object.freeze({ member, unbound: true }) : null;
+    };
+    // Without a marker there is nothing for Git to answer.
+    if (!present(marker))
+        return unbound();
+    try {
+        return await certify(member);
+    }
+    catch {
+        return unbound();
+    }
+}
+/** Paths to consumers: inside a storage directory, but not in the storage it
+ * keeps for other checkouts, or at or above any point. An enclosing Card +
+ * Checkpoint takes a nested gitlink from its own index and reads nothing of
+ * the nested repository's storage (name-reach.ts). */
+class RouteIndex {
+    #within = new Map();
+    #reach = new Map();
+    constructor(certificates) {
+        const add = (map, key, certificate) => {
+            const list = map.get(key) ?? [];
+            if (!list.includes(certificate))
+                list.push(certificate);
+            map.set(key, list);
+        };
+        for (const certificate of certificates) {
+            for (const storage of certificate.storages)
+                add(this.#within, storage, certificate);
+            for (const point of [...certificate.points, ...certificate.storages]) {
+                for (let at = point;; at = dirname(at)) {
+                    add(this.#reach, at, certificate);
+                    if (dirname(at) === at)
+                        break;
+                }
+            }
+        }
+    }
+    consumers(path) {
+        const found = new Set(this.#reach.get(path) ?? []);
+        for (let at = dirname(path);; at = dirname(at)) {
+            const within = this.#within.get(at);
+            if (within && !foreignGitDomain(relative(at, path).split(sep).join("/"))) {
+                for (const certificate of within)
+                    found.add(certificate);
+            }
+            if (dirname(at) === at)
+                break;
+        }
+        return [...found];
+    }
+}
+const sameMember = (a, b) => a.rootUUID === b.rootUUID && a.absolutePath === b.absolutePath;
+/** The maintained binding table. Binding is serial and coalesced: callers
+ * share one task per repository, and a refresh never overwrites a newer
+ * entry. A refresh caused by a moved witness rings its checkout, so the
+ * changed consumer is reconciled over its old and new footprint. */
+export class GitNoticeBindings {
+    rebound;
+    #entries = new Map();
+    #queue = Promise.resolve();
+    #index = null;
+    constructor(rebound = () => { }) {
+        this.rebound = rebound;
+    }
+    #bind(member) {
+        const current = this.#entries.get(member.uuid);
+        if (current && sameMember(current.member, member))
+            return current;
+        const task = this.#queue.then(() => answer(member)).then(value => value, () => null);
+        this.#queue = task;
+        const entry = { member, task };
+        this.#entries.set(member.uuid, entry);
+        void task.then(value => {
+            entry.answer = value;
+            // Only a certificate is retained: the next observation asks again.
+            if (!isCertificate(value) && this.#entries.get(member.uuid) === entry)
+                this.#entries.delete(member.uuid);
+        });
+        return entry;
+    }
+    /** Retire a certificate whose witness moved and refresh it through the
+     * same owner. Observations already holding it keep it and fail closed.
+     * The ring follows the replacement in the same turn: any examination that
+     * cuts it observes through the refreshed entry, so the next cut already
+     * owes the checkout, never a later one once the answer arrives. */
+    #refresh(certificate, ring) {
+        const entry = this.#entries.get(certificate.member.uuid);
+        if (entry?.answer !== certificate)
+            return;
+        this.#entries.delete(certificate.member.uuid);
+        this.#bind(certificate.member);
+        if (ring)
+            this.rebound(certificate.member.absolutePath);
+    }
+    #retain(members) {
+        const ids = new Set(members.map(member => member.uuid));
+        for (const id of this.#entries.keys())
+            if (!ids.has(id))
+                this.#entries.delete(id);
+    }
+    /** Startup discovery: bind every member in the background, one at a time,
+     * so the first notice does not pay for every repository. */
+    discover(members) {
+        this.#retain(members);
+        for (const member of members)
+            this.#bind(member);
+    }
+    #routes(certificates) {
+        const cached = this.#index;
+        if (cached && cached.certificates.length === certificates.length
+            && cached.certificates.every((certificate, index) => certificate === certificates[index]))
+            return cached.routes;
+        const routes = new RouteIndex(certificates);
+        this.#index = { certificates, routes };
+        return routes;
+    }
+    async observe(members, rowOf) {
+        const started = performance.now();
+        this.#retain(members);
+        const answers = await Promise.all(members.map(member => this.#bind(member).task));
+        const discoveryWaitMs = performance.now() - started;
+        const certificates = answers.filter(isCertificate);
+        // An incomplete description is checked on each use so its recovery is seen.
+        for (const certificate of certificates) {
+            if (certificate.complete)
+                continue;
+            try {
+                certificate.validate();
+            }
+            catch {
+                this.#refresh(certificate, false);
+            }
+        }
+        if (answers.includes(null) || certificates.some(certificate => !certificate.complete)) {
+            const roots = Object.freeze([...new Set(members.map(member => member.rootUUID))]);
+            const refuse = () => { throw new GitNoticeChanged(new Error("Git consumer description is incomplete")); };
+            return { route: () => ({ kind: "reconcile", rootUUIDs: roots }), own: () => null, held: address => address,
+                discoveryWaitMs, routeMs: () => 0, semanticMs: () => 0,
+                proof: { semantic: async () => refuse(), witnesses: [], admission: refuse } };
+        }
+        const unbound = answers.filter(value => value !== null && !isCertificate(value)).map(value => value.member);
+        return this.#view(this.#routes(certificates), unbound, rowOf, discoveryWaitMs);
+    }
+    #view(routes, unboundMembers, rowOf, discoveryWaitMs) {
+        const consumed = new Set(), answered = new Map();
+        // One view is one observation's answer: each certificate's witnesses and
+        // each consumer's O row are read once for all its names. Admission
+        // re-validates every consumed certificate before anything is trusted.
+        const validated = new Set(), rows = new Map();
+        const validate = (certificate) => {
+            if (validated.has(certificate))
+                return;
+            certificate.validate();
+            validated.add(certificate);
+        };
+        const row = (uuid) => {
+            if (!rows.has(uuid))
+                rows.set(uuid, rowOf(uuid));
+            return rows.get(uuid);
+        };
+        let routing = 0, semantic = 0;
+        const fail = (certificate, error) => {
+            this.#refresh(certificate, true);
+            throw new GitNoticeChanged(error);
+        };
+        // A private checkout whose own proof fails is released: its address,
+        // examined whole, recaptures it wherever its marker names its storage.
+        const unbound = new Map(unboundMembers.map(member => [member.uuid, member]));
+        const release = (certificate) => {
+            unbound.set(certificate.member.uuid, certificate.member);
+            this.#refresh(certificate, false);
+        };
+        const bound = (certificate) => !unbound.has(certificate.member.uuid);
+        // Holders of one address are its ancestors, so the last one found is outermost.
+        const held = (address) => {
+            let outer = address;
+            for (const member of unbound.values())
+                if (inside(member.absolutePath, outer))
+                    outer = member.absolutePath;
+            return outer;
+        };
+        // The consumer's own O result must carry this very answer.
+        const certified = (certificate) => {
+            const own = row(certificate.member.uuid);
+            return own?.payloadVersion != null && own.gitConfigurationObservation != null
+                && certificate.configuration.stamp(certificate.member.uuid, own.payloadVersion, certificate.storage)
+                    === own.gitConfigurationObservation;
+        };
+        // O's directory is the one the certificate's association witnesses.
+        const sameDirectory = (certificate) => {
+            const own = row(certificate.member.uuid);
+            const [device, inode] = certificate.storage.identities[0].split(":");
+            return own?.physicalKey != null && own.physicalKey === `${device}:${inode}`;
+        };
+        const own = (path) => {
+            const consumers = routes.consumers(path).filter(bound);
+            const self = consumers.find(certificate => certificate.member.absolutePath === path);
+            if (!self?.layout || !consumers.every(certificate => inside(path, certificate.member.absolutePath)))
+                return null;
+            try {
+                validate(self);
+            }
+            catch {
+                release(self);
+                return null;
+            }
+            if (!sameDirectory(self))
+                return null;
+            consumed.add(self);
+            return self.member.uuid;
+        };
+        const route = (path) => {
+            const consumers = routes.consumers(path).filter(bound);
+            const only = consumers.length === 1 ? consumers[0] : null;
+            const domain = only?.layout && inside(only.storage.gitDir, path)
+                ? relative(only.storage.gitDir, path).split(sep).join("/") : null;
+            // One checkout's private storage is its own Git state. An ordinary
+            // domain its O result certifies keeps the repository's named paths; any
+            // other change there, or a configuration O no longer carries, owes that
+            // repository's complete examination, never another root's.
+            if (only && domain !== null) {
+                try {
+                    validate(only);
+                }
+                catch {
+                    release(only);
+                    return { kind: "worktree", address: only.member.absolutePath };
+                }
+                consumed.add(only);
+                return { kind: "single", uuid: only.member.uuid, whole: !ordinaryGitDomain(domain) || !certified(only) };
+            }
+            // Ground holding every checkout the name reaches, each over storage Git
+            // keeps for it alone, recaptures them all when examined whole.
+            const address = ground(path);
+            if (consumers.every(certificate => certificate.layout && inside(address, certificate.member.absolutePath))) {
+                return { kind: "worktree", address };
+            }
+            // Reconciliation examines these consumers afresh; a moved witness
+            // needs its certificate refreshed, not another ring.
+            for (const certificate of consumers) {
+                try {
+                    validate(certificate);
+                }
+                catch {
+                    this.#refresh(certificate, false);
+                }
+            }
+            return { kind: "reconcile", rootUUIDs: [...new Set(consumers.map(certificate => certificate.member.rootUUID))] };
+        };
+        return {
+            discoveryWaitMs,
+            routeMs: () => routing,
+            semanticMs: () => semantic,
+            own(path) {
+                const began = performance.now();
+                try {
+                    return own(path);
+                }
+                finally {
+                    routing += performance.now() - began;
+                }
+            },
+            held,
+            route(path) {
+                const known = answered.get(path);
+                if (known)
+                    return known;
+                const began = performance.now();
+                try {
+                    const answer = route(path);
+                    answered.set(path, answer);
+                    return answer;
+                }
+                finally {
+                    routing += performance.now() - began;
+                }
+            },
+            proof: {
+                // Only an answer its witnesses cannot close is asked again.
+                semantic: async () => {
+                    const began = performance.now();
+                    try {
+                        for (const certificate of consumed)
+                            if (!certificate.configuration.reusable) {
+                                try {
+                                    await certificate.binding.semantic();
+                                    await certificate.configuration.semantic();
+                                }
+                                catch (error) {
+                                    fail(certificate, error);
+                                }
+                            }
+                    }
+                    finally {
+                        semantic += performance.now() - began;
+                    }
+                },
+                witnesses: [],
+                admission: () => {
+                    for (const certificate of consumed) {
+                        try {
+                            certificate.validate();
+                        }
+                        catch (error) {
+                            fail(certificate, error);
+                        }
+                    }
+                },
+            },
+        };
+    }
+}
+//# sourceMappingURL=git-notice.js.map

package/dist/detection/git-notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-notice.js","sourceRoot":"","sources":["../../src/detection/git-notice.ts"],"names":[],"mappings":"AAAA;;;;;;uEAMuE;AACvE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAc,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAiD,MAAM,mBAAmB,CAAC;AAC1H,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAoC,MAAM,yBAAyB,CAAC;AACpG,OAAO,EAAE,eAAe,EAAoB,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AA4C1D,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,IAAY,EAAW,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;AAChH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,KAAc,IAAI,KAAK,CAAC,iEAAiE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;CACrH;AAED;;+EAE+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChH,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,uLAAuL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnO,CAAC;AAED;+DAC+D;AAC/D,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,CAAC;AACtD,CAAC;AAID,MAAM,cAAc,GAAmB;IACrC,IAAI,CAAC,IAAI;QACP,IAAI,CAAC;YAAC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAC/B,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACrG,CAAC;IACD,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;CACjC,CAAC;AAEF;;6EAE6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,SAAyB,cAAc;IAC3F,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,SAAkB,EAAW,EAAE;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;QACpD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,IAAI,EAAE,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,IAAY,EAAgB,EAAE;IACjD,IAAI,CAAC;QAAC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC/B,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AAC9H,CAAC,CAAC;AACF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;AACtE;2BAC2B;AAC3B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;AAC7D,CAAC,CAAC;AACF,MAAM,OAAO,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,yBAAyB,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC;AAyBpG,KAAK,UAAU,OAAO,CAAC,MAAuB;IAC5C,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC,GAAG,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,cAAc,EAAE,CAAC,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7C,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,eAAe,CAAC,aAAa,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;IAChH,CAAC,CAAC;IACF,QAAQ,EAAE,CAAC;IACX,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ;QAChF,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC;eAC5E,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;QACzF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAQD,MAAM,aAAa,GAAG,CAAC,MAA0B,EAAyB,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;AAEhH,KAAK,UAAU,MAAM,CAAC,MAAuB;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,GAAW,EAAE;QAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YACjF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC,CAAC;IACF,uDAAuD;IACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC;QAAC,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;AACnE,CAAC;AAED;;;sDAGsD;AACtD,MAAM,UAAU;IACL,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC3C,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEnD,YAAY,YAAoC;QAC9C,MAAM,GAAG,GAAG,CAAC,GAA+B,EAAE,GAAW,EAAE,WAAwB,EAAQ,EAAE;YAC3F,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YACpF,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrE,KAAK,IAAI,EAAE,GAAG,KAAK,GAAI,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;oBACxC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;oBAClC,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;wBAAE,MAAM;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,KAAK,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,GAAI,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzE,KAAK,MAAM,WAAW,IAAI,MAAM;oBAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;gBAAE,MAAM;QAChC,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;CACF;AAOD,MAAM,UAAU,GAAG,CAAC,CAAkB,EAAE,CAAkB,EAAW,EAAE,CACrE,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,CAAC;AAEjE;;;oEAGoE;AACpE,MAAM,OAAO,iBAAiB;IAKC;IAJpB,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC7C,MAAM,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,GAA0F,IAAI,CAAC;IAErG,YAA6B,UAAsC,GAAG,EAAE,GAAE,CAAC;QAA9C,YAAO,GAAP,OAAO,CAAuC;IAAG,CAAC;IAE/E,KAAK,CAAC,MAAuB;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,KAAK,GAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACrB,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YACrB,mEAAmE;YACnE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3G,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;uEAImE;IACnE,QAAQ,CAAC,WAAwB,EAAE,IAAa;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,KAAK,EAAE,MAAM,KAAK,WAAW;YAAE,OAAO;QAC1C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,CAAC,OAAmC;QACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IAED;gEAC4D;IAC5D,QAAQ,CAAC,OAAmC;QAC1C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CAAC,YAAoC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;eAC3D,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QAClH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAmC,EAC/C,KAAiD;QACjD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACpD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnD,4EAA4E;QAC5E,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,WAAW,CAAC,QAAQ;gBAAE,SAAS;YACnC,IAAI,CAAC;gBAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;QAC9E,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,MAAM,MAAM,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjH,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO;gBACxG,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtD,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;QAClF,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,MAAkB,EAAE,cAA0C,EAClE,KAAiD,EAAE,eAAuB;QAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAe,EAAE,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;QACtF,yEAAyE;QACzE,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAe,EAAE,IAAI,GAAG,IAAI,GAAG,EAAoC,CAAC;QAC7F,MAAM,QAAQ,GAAG,CAAC,WAAwB,EAAQ,EAAE;YAClD,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,OAAO;YACvC,WAAW,CAAC,QAAQ,EAAE,CAAC;YACvB,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,IAAY,EAA4B,EAAE;YACrD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,IAAI,OAAO,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,WAAwB,EAAE,KAAc,EAAS,EAAE;YAC/D,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAU,CAAC,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,CAAC,WAAwB,EAAQ,EAAE;YACjD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,WAAwB,EAAW,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3F,gFAAgF;QAChF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAU,EAAE;YACvC,IAAI,KAAK,GAAG,OAAO,CAAC;YACpB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE;gBAAE,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC;oBAAE,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;YAC3G,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,2DAA2D;QAC3D,MAAM,SAAS,GAAG,CAAC,WAAwB,EAAW,EAAE;YACtD,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,GAAG,EAAE,cAAc,IAAI,IAAI,IAAI,GAAG,CAAC,2BAA2B,IAAI,IAAI;mBACxE,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC;wBAC9F,GAAG,CAAC,2BAA2B,CAAC;QAC1C,CAAC,CAAC;QACF,oEAAoE;QACpE,MAAM,aAAa,GAAG,CAAC,WAAwB,EAAW,EAAE;YAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtE,OAAO,GAAG,EAAE,WAAW,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;QAC9E,CAAC,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAiB,EAAE;YAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;YACrF,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjH,IAAI,CAAC;gBAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAC7D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAkB,EAAE;YAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;gBAC9D,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpE,mEAAmE;YACnE,wEAAwE;YACxE,wEAAwE;YACxE,2DAA2D;YAC3D,IAAI,IAAI,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAAC,CAAC;gBAChH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3G,CAAC;YACD,wEAAwE;YACxE,+DAA+D;YAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBAC3G,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YACvC,CAAC;YACD,kEAAkE;YAClE,qDAAqD;YACrD,KAAK,MAAM,WAAW,IAAI,SAAS,EAAE,CAAC;gBACpC,IAAI,CAAC;oBAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBAAC,CAAC;YAC7E,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACnH,CAAC,CAAC;QACF,OAAO;YACL,eAAe;YACf,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;YACtB,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ;YAC1B,GAAG,CAAC,IAAI;gBACN,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBAChC,IAAI,CAAC;oBAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBAAC,CAAC;YAC7E,CAAC;YACD,IAAI;YACJ,KAAK,CAAC,IAAI;gBACR,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,KAAK;oBAAE,OAAO,KAAK,CAAC;gBACxB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAC3B,OAAO,MAAM,CAAC;gBAChB,CAAC;wBAAS,CAAC;oBAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBAAC,CAAC;YACrD,CAAC;YACD,KAAK,EAAE;gBACL,4DAA4D;gBAC5D,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACnB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;oBAChC,IAAI,CAAC;wBACH,KAAK,MAAM,WAAW,IAAI,QAAQ;4BAAE,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;gCAC5E,IAAI,CAAC;oCAAC,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oCAAC,MAAM,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;gCAAC,CAAC;gCACzF,OAAO,KAAK,EAAE,CAAC;oCAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gCAAC,CAAC;4BAC7C,CAAC;oBACH,CAAC;4BAAS,CAAC;wBAAC,QAAQ,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;oBAAC,CAAC;gBACtD,CAAC;gBACD,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,GAAG,EAAE;oBACd,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;wBACnC,IAAI,CAAC;4BAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;wBAAC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;wBAAC,CAAC;oBAC7E,CAAC;gBACH,CAAC;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/detection/ground-proof.d.ts

@@ -0,0 +1,130 @@
+import { type Steps } from "@amalgm/live";
+import { type ContentBoundary } from "../content-clock.js";
+import type { GitMarker } from "../git-repository-host.js";
+import { type PathsWitness } from "../physical-path-witness.js";
+import { type SourceProof } from "../source-proof.js";
+import { type SourceStat } from "../source-signature.js";
+export interface GroundFingerprint {
+    readonly physicalKey: string;
+    readonly sourceSignature: string | null;
+    readonly filesystemMode: number | null;
+}
+export interface GroundSource extends GroundFingerprint {
+    readonly relativePath: string;
+    readonly absolutePath: string;
+    /** A walked directory's `.git` entry as its classification read it. */
+    readonly gitMarker?: GitMarker | null;
+}
+/** Reads current ground by address; null when the address is empty. */
+export interface GroundReader {
+    stat(source: GroundSource): SourceStat | null;
+    marker(directory: string): GitMarker | null;
+    /** A directory's names in code-unit order; null when it can no longer be
+     * listed, which never lists again as walked. */
+    list(directory: string): readonly string[] | null;
+}
+/** How a walk's listings close: the clock stamped before its reads, and the
+ * names, in code-unit order, of each listing that clock did not qualify, by
+ * absolute address. A directory the walk could not list is null there: its
+ * membership is a gap the walk names, never a listing to close. */
+export interface WalkListings {
+    readonly clock: ContentBoundary | null;
+    readonly names: ReadonlyMap<string, readonly string[] | null>;
+}
+/** How one retained source compares with its walk read. */
+export interface GroundChange {
+    /** Gone, or another object or kind stands at the address. */
+    object: boolean;
+    /** The same object with other size, times or mode. */
+    content: boolean;
+    /** A directory's `.git` entry differs. */
+    marker: boolean;
+    /** A directory whose listing did not close: listed inside its racy
+     * interval, where a same-tick entry change could have left it looking the
+     * same, or listed again, where no stamp can qualify it, with other names. */
+    listing: boolean;
+}
+/** A closed walk, answered by absolute address so one pass can consult the
+ * closure that observed each member. Each answer is about one retained
+ * address; a reread that differs is input for a later attempt, never a new
+ * expected value. */
+export declare class GroundClosure {
+    #private;
+    constructor(observed: ReadonlyMap<string, boolean>, changes: ReadonlyMap<string, GroundChange>);
+    observes(path: string): boolean;
+    /** Bytes, entry list and marker closed exactly as walked. */
+    settled(path: string): boolean;
+    /** A directory an address resolves through: the same object and marker.
+     * Its own entry list may have changed; a sibling's churn crosses no route. */
+    routes(path: string): boolean;
+    /** Nothing at or beneath the directory changed. */
+    settledUnder(directory: string): boolean;
+    /** The first walked directory whose entry list did not close, with what
+     * moved, or null when every one closed: an identity the walk did not find
+     * was then absent from all of them, not moved between reads. A racy listing
+     * has not closed. */
+    get unsettledDirectory(): string | null;
+    /** Absolute addresses whose walk read did not close. */
+    get changed(): readonly string[];
+}
+/** This is evidence, never an identity resolver. Any changed source restarts
+ * reconciliation; fresh bytes must not inherit an old directory's UUID map.
+ * Parents open before children and close afterward. This rejects persistent
+ * replacement during the read; it does not make path resolution atomic.
+ *
+ * It closes in one of two forms. `close` answers per address, for a caller
+ * that waits only where ground moved. `witness` is the whole walk as plain
+ * data, for a journey that concludes every membership at once; any thread
+ * judges it, so a cold walk never closes on the admitting thread.
+ *
+ * A listing its walk's content clock qualified closes as its directory's
+ * signature does (see content-clock.ts). Any other closes only by a fresh
+ * listing, taken after the whole walk, that names exactly what the walk
+ * listed while the directory stands as walked on both sides. A racy listing
+ * must also qualify under a later stamp, which proves no same-tick change is
+ * hidden. A listing no stamp can qualify, on a filesystem ground-profile.ts
+ * does not trust or on another device than the clock, closes by agreement
+ * alone: an entry moved once between a directory not yet listed and one
+ * already listed changes one of those listings between its two reads. Only
+ * an entry moved and moved back across both reads, each move inside its
+ * directories' clock ticks, escapes that; any move is a later Watch
+ * generation. Such ground loses shortcuts, never conclusions. A walk that
+ * concludes nothing from its listings keeps none. */
+export declare class GroundSourceProof {
+    #private;
+    /** The proof of a walk's sources, built as steps. */
+    static ofWalk(sources: Iterable<GroundSource>, reader: GroundReader, listings: WalkListings | null): Steps<GroundSourceProof>;
+    private constructor();
+    /** Directories listed inside their racy interval, by absolute address. */
+    get racy(): readonly string[];
+    /** Directories listed where no stamp can qualify them, by absolute address. */
+    get unqualified(): readonly string[];
+    /** How long after this walk's stamp a later stamp can qualify every racy
+     * directory, if none changes; 0 when none is racy. */
+    get racyWaitMs(): number;
+    /** Closes every listing its walk's clock did not qualify by listing it
+     * again, a racy one under clock, a later stamp, as Git settles a racily
+     * clean entry. Returns the first directory that stays open; each closed
+     * one is neither racy nor unqualified any more. */
+    closeListings(clock: ContentBoundary | null, checkpoint?: () => void): Promise<string | null>;
+    /** Every retained source as one witness, parents first, built as steps
+     * once. Judging it reads each source forward, then each directory again in
+     * reverse, as `close` does. */
+    witness(): Steps<PathsWitness>;
+    /** Closes every retained source outside any transaction, yielding as it
+     * goes: parents forward before children, directories again in reverse,
+     * each directory's marker with it. Changes are answers, not failures; an
+     * unreadable address is a fault. */
+    close(checkpoint?: () => void): Promise<GroundClosure>;
+}
+/** An examined root's physical basis and any slower repository dependencies. */
+export interface GroundObservationProof {
+    readonly physical: GroundSourceProof;
+    readonly dependencies: readonly SourceProof[];
+}
+/** Every dependency answers semantically before any root closes physically,
+ * so no root's physical close can precede another root's Git work. Each
+ * root's walk closes on both sides of its dependencies' witnesses, parents
+ * open before children and closed afterward, as two leaves because a proof
+ * closes once. Later filesystem changes belong to later Watch generations. */
+export declare function groundSourceProof(proofs: readonly GroundObservationProof[]): Promise<SourceProof>;