@animalabs/agent-framework 0.26.2 → 0.28.0

package/dist/src/modules/workspace/direct-write.js

@@ -0,0 +1,417 @@
+/**
+ * A direct mount's writes (MountConfig.backend): disk is the only copy, so a
+ * write lands there whole when its call answers, or doesn't happen and leaves
+ * disk as it was. Ported from anima-research/hands-mcp's staged write
+ * (src/shared.ts), behind the mount's boundary as the workspace's other
+ * effects hold it (effects.ts):
+ *
+ * - The file's directory is located inside the mount (checkDir), and where
+ *   the file lands is judged as a push's write judges it (refusedLanding):
+ *   inside the mount, in no nested mount's directory, and covered by the
+ *   mount's include. A link at the file is refused on a mount that doesn't
+ *   follow links; on one that does, the write goes to the file it leads to
+ *   when the call stages it, judged the same way, and the link stays.
+ * - The new bytes are staged beside the file, in `.workspace-staged-<id>`,
+ *   at the file's mode, special bits included as far as the kernel lets this
+ *   process set them (a setgid bit only for a member of the file's group),
+ *   and renamed over it, so a reader beside the agent never sees half a file
+ *   and a process killed mid-write leaves the old file whole. A file this
+ *   process may not write is refused, as a push's write, which opens it for
+ *   writing, is refused: the rename needs only the directory's permission.
+ *   A process that dies between staging and its rename leaves the staged
+ *   file, under that name, which `ls` and `git status` show; so does a
+ *   refused write whose removal of its staged file fails or can't tell the
+ *   file is its own, or whose directory another writer moved after the
+ *   staging, since the removal goes by path (discard) and the path then
+ *   leads elsewhere. Nothing sweeps it, and the answer doesn't name it.
+ *   The removal checks the staged name holds that file and unlinks it with
+ *   no turn of the event loop between, so only a file another writer puts
+ *   there in that instant can be removed in its place, or one put there
+ *   that a stat can't tell from it: on the freed inode number, with the
+ *   same size, mode and owner, in the same tick of a coarse clock.
+ * - The rename gives a hard-linked path a file of its own, and the other
+ *   links keep the old text: `otherLinks` counts them for the answer.
+ * - Just before the rename, an edit's file is checked unchanged since its
+ *   read, by its bytes, read again, and its identity (checkUnchanged),
+ *   synchronously, so the check and the renames after it run with no turn
+ *   of the event loop between. Only a change landing in that instant isn't
+ *   seen, which for edit_many runs from the check through its last rename:
+ *   no rename can be made conditional.
+ * - No sync. The store-backed kind syncs its pushes for its agreement
+ *   record (reconcile.ts), and a direct mount keeps none, so a power loss
+ *   or a kernel crash can lose a direct write after its answer said it
+ *   landed, as it can a hands-mcp write. A process dying can't: the rename is
+ *   whole by then.
+ *
+ * Node has no openat or renameat, so the stage and the rename go through the
+ * checked directory's path: a directory replaced by another writer on disk
+ * between the directory's check and the staging, or after its last check
+ * (placedStill), can redirect them, as effects.ts says of a create. For
+ * edit_many that last check is each file's, before the other files' checks.
+ */
+import { randomUUID } from 'node:crypto';
+import { accessSync, closeSync, constants as fsConstants, lstatSync, openSync, readSync, renameSync, unlinkSync } from 'node:fs';
+import { lstat, open, realpath } from 'node:fs/promises';
+import { relative, sep } from 'node:path';
+import { refusedLanding } from './effects.js';
+import { ROOT_RECHECK, errnoWayOn, errnoWords, onlyTheHost, systemWords } from './answers.js';
+import { NONBLOCK, LEAVES_MOUNT, NOT_A_DIRECTORY, NOT_FOLLOWED, OUTSIDE_PARENT, ROOT_UNAVAILABLE, checkDir, checkRoot, errno, rootAbsence, nameOf, parentOf, } from './observe.js';
+const DIRECTORY_THERE = 'A file can\'t be written over a directory; give another path.';
+const NOT_REGULAR_THERE = onlyTheHost('put a regular file there');
+/** An open that follows no link at the path, where the platform has one. */
+const NOFOLLOW = typeof fsConstants.O_NOFOLLOW === 'number' ? fsConstants.O_NOFOLLOW : 0;
+/** The name a staged file starts with, beside the file it replaces. */
+export const STAGED_PREFIX = '.workspace-staged-';
+/**
+ * Why a direct write didn't happen when its mount's root was replaced under
+ * it: a direct mount keeps no root to sync to (MountConfig.backend), so its
+ * next call works beneath whatever is there then.
+ */
+export const ROOT_MOVED = 'the mount root changed while this call was being applied: a new call works beneath whatever directory the mount\'s path leads to then';
+export const identityOf = (info) => ({
+    dev: info.dev,
+    ino: info.ino,
+    size: info.size,
+    mode: info.mode,
+    uid: info.uid,
+    gid: info.gid,
+    mtimeNs: info.mtimeNs,
+    ctimeNs: info.ctimeNs,
+});
+export const sameIdentity = (a, b) => a.dev === b.dev && a.ino === b.ino && a.size === b.size && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid
+    && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs;
+/** Another writer replaced, changed or removed the file between its read and its rename; nothing was written. */
+export class FileChanged extends Error {
+}
+/** Why a direct write didn't happen, in words for its answer; disk is as it was. */
+export class WriteRefused extends Error {
+    wayOn;
+    errno;
+    constructor(message, wayOn = null, errno) {
+        super(message);
+        this.wayOn = wayOn;
+        this.errno = errno;
+    }
+}
+const AFRESH = 'Calling again checks it afresh.';
+const NAME_ITS_OWN = "Calling again won't change that; if you know the file it leads to, name that file by its own path.";
+function rootWayOn(code) {
+    return code === 'ENOENT' || code === 'ENOTDIR' ? onlyTheHost("put the mount's directory back at its path") : errnoWayOn(code, ROOT_RECHECK, true);
+}
+function refusedWayOn(reason, code, hostsName = false) {
+    if (reason === ROOT_UNAVAILABLE)
+        return rootWayOn(code);
+    if (code !== undefined)
+        return errnoWayOn(code, undefined, hostsName);
+    if (reason === NOT_FOLLOWED)
+        return NAME_ITS_OWN;
+    if (reason === OUTSIDE_PARENT || reason === LEAVES_MOUNT)
+        return "Calling again won't change that; the workspace writes only inside its mounts.";
+    if (reason === NOT_A_DIRECTORY)
+        return "Calling again won't change that while something other than a directory stands where the path needs one; another path, or removing what stands there, would.";
+    return null;
+}
+/**
+ * Test seams. `afterStage` is called once a call's files are staged, before
+ * they're checked unchanged (another writer acting then); `beforeRename`
+ * just before each rename, inside its refusal, so throwing stands for the
+ * rename failing. Production sets neither.
+ */
+export const directWriteTestSeam = {};
+/** The mount-relative path of a real path inside the mount's root, `/`-separated. */
+function relativeTo(rootReal, real) {
+    return relative(rootReal, real).split(sep).join('/');
+}
+/**
+ * The checked directory a mount-relative file lies in, beneath a checked
+ * root, or why not. With `makeDirectory`, missing directories are made, as
+ * a push's write makes them; without it, a missing one refuses the write,
+ * since an edit replaces a file that exists.
+ */
+async function directoryOf(view, rootReal, rel, makeDirectory) {
+    const checked = await checkDir(view, rootReal, parentOf(rel), { create: makeDirectory });
+    if (checked.kind === 'checked')
+        return checked.dir;
+    if (checked.kind === 'absent')
+        throw new FileChanged(rel);
+    const reason = checked.outside ? OUTSIDE_PARENT : checked.reason;
+    throw new WriteRefused(reason, refusedWayOn(reason, checked.errno));
+}
+/**
+ * Stage `bytes` beside the mount-relative file `rel`, to be renamed over it:
+ * the first half of a direct write. The file keeps its mode, special bits
+ * included, as far as the kernel lets this process set them; a new file
+ * takes `0666` less the umask, as a shell's would. Its owner and group are
+ * this process's and the ones its directory gives a new file, and an ACL or
+ * extended attribute on the file isn't carried over, as with any write that
+ * renames over a file. Anything there that isn't a regular file is refused,
+ * and a refusal removes the staged file it made, except where the header
+ * says one is left. The staged file is written and moded through its own
+ * handle, never through its name again.
+ */
+export async function stageContained(view, rootReal, rel, bytes, { makeDirectory = false } = {}) {
+    const root = await checkRoot(view, rootReal);
+    if ('reason' in root) {
+        const code = root.errno ?? await rootAbsence(rootReal);
+        throw new WriteRefused(root.reason, rootWayOn(code), code);
+    }
+    let parent = await directoryOf(view, rootReal, rel, makeDirectory);
+    let path = parent.at(nameOf(rel));
+    let info = await lstat(path, { bigint: true }).catch((err) => {
+        if (errno(err) === 'ENOENT')
+            return null;
+        throw new WriteRefused(`cannot stat the file (${systemWords(errno(err), err)})`, errnoWayOn(errno(err)), errno(err));
+    });
+    if (info?.isSymbolicLink()) {
+        if (!view.followSymlinks)
+            throw new WriteRefused(NOT_FOLLOWED, NAME_ITS_OWN);
+        // A followed link stands for the file it leads to, as a read takes it:
+        // the write goes there, judged where it lands, and the link stays.
+        const real = await realpath(path).catch((err) => {
+            throw errno(err) === 'ENOENT'
+                ? new WriteRefused("a symlink whose target doesn't exist", onlyTheHost('remove the link or make it lead to a file'))
+                : new WriteRefused(`cannot resolve the symlink (${systemWords(errno(err), err)})`, errnoWayOn(errno(err)), errno(err));
+        });
+        const leaves = await refusedLanding(view, rootReal, rel, real);
+        if (leaves !== null)
+            throw new WriteRefused(leaves, refusedWayOn(leaves));
+        const realRel = relativeTo(rootReal, real);
+        parent = await directoryOf(view, rootReal, realRel, false);
+        path = parent.at(nameOf(realRel));
+        info = await lstat(path, { bigint: true }).catch((err) => {
+            // Gone since realpath found it: another writer's change.
+            if (errno(err) === 'ENOENT')
+                throw new FileChanged(rel);
+            throw new WriteRefused(`cannot stat the file the symlink leads to (${systemWords(errno(err), err)})`, errnoWayOn(errno(err)), errno(err));
+        });
+        if (info.isSymbolicLink())
+            throw new FileChanged(rel);
+    }
+    else {
+        // A file, or none yet, reached through a link among its directories
+        // lands where the mount may not act: in a nested mount's directory, or
+        // on a file its own include leaves out (refusedLanding).
+        const leaves = await refusedLanding(view, rootReal, rel, path);
+        if (leaves !== null)
+            throw new WriteRefused(leaves, refusedWayOn(leaves));
+    }
+    if (info?.isDirectory())
+        throw new WriteRefused('a directory', DIRECTORY_THERE);
+    if (info && !info.isFile())
+        throw new WriteRefused('not a regular file', NOT_REGULAR_THERE);
+    // A fixed-length name, so a file whose own name is near the 255-byte limit can still be replaced.
+    const temp = parent.at(`${STAGED_PREFIX}${randomUUID()}`);
+    let made = false;
+    try {
+        // A new file is made at 0666 and the kernel takes the umask off as it
+        // makes it. A file being replaced gives the staged file its own mode,
+        // which only a chmod can set past the umask, and only after the bytes
+        // are written, since a write clears a set-user or set-group bit; until
+        // then the staged file is the owner's alone, so no other user can read
+        // a private file's new text while it's staged.
+        const handle = await open(temp, 'wx', info ? 0o600 : 0o666);
+        made = true;
+        let staged;
+        try {
+            await handle.writeFile(bytes);
+            if (info)
+                await handle.chmod(Number(info.mode & 4095n));
+            const own = await handle.stat({ bigint: true });
+            staged = { path, temp, tempIdentity: identityOf(own), root: root.dir, parent, otherLinks: 0 };
+        }
+        catch (err) {
+            // Removed while its handle is still open, so its device and inode
+            // name it and no other file: one made at its name since can't have
+            // taken its inode number. One that can't be told is left.
+            const mine = await handle.stat({ bigint: true }).catch(() => null);
+            if (mine)
+                removeIf(temp, (there) => there.dev === mine.dev && there.ino === mine.ino);
+            await handle.close().catch(() => undefined);
+            throw err;
+        }
+        try {
+            await handle.close();
+        }
+        catch (err) {
+            // Closed, or not, with its bytes in doubt: removed by its whole identity, as a refusal's.
+            await discard(staged);
+            throw err;
+        }
+        return staged;
+    }
+    catch (err) {
+        // A staged file that couldn't be made names the directory: a push's
+        // write in place needs only the file, and this one needs both.
+        throw new WriteRefused(made
+            ? `cannot write the staged file beside it (${systemWords(errno(err), err)})`
+            : `cannot make the staged file in its directory (${systemWords(errno(err), err)}): a direct write needs to write the file's directory as well as the file`, errnoWayOn(errno(err)), errno(err));
+    }
+}
+/**
+ * Throw unless the root and the file's directory are still the ones the
+ * staging checked, with a push's words for the directory (effects.ts
+ * moved()).
+ */
+export async function placedStill(staged) {
+    if (!(await staged.root.stillHere()))
+        throw new WriteRefused(ROOT_MOVED);
+    if (!(await staged.parent.stillHere()))
+        throw new WriteRefused('the directory changed since it was checked', AFRESH);
+}
+/**
+ * Throw unless the file is still what its read found: FileChanged when it
+ * changed or is gone, nothing written. `expected` is null for a write, which
+ * read nothing and replaces whatever is there. Either way a link swapped in
+ * at the file the rename replaces (on a mount that follows links, the file
+ * the link at the agent's path led to when the call staged it) is refused
+ * rather than replaced, and so is a file this process may not write. It reads the entry the
+ * rename replaces, and then the file's bytes, synchronously, as renameInto
+ * runs, so a check and the renames after it run with no turn of the event
+ * loop between.
+ *
+ * The identity, taken once the bytes are read, catches a file replaced or
+ * re-moded under the call, which equal bytes wouldn't show. The bytes are
+ * compared with the ones the edit read: a kernel that stamps files from a
+ * coarse clock, as Linux before 6.13 does, leaves a file's identity as it
+ * was after a second write of the same size within one tick of its last
+ * change (on Debian's Linux 6.12.113 with ext4, 1,632 to 1,752 of 2,000
+ * such rewrites kept every stamp, in three runs), and the bytes show that
+ * change on every clock. The bytes are read through an open that follows
+ * no link and doesn't wait on a pipe put at the path since its lstat, and
+ * at most one byte past what the edit read, so the check never blocks and
+ * reads no more than that.
+ */
+export function checkUnchanged(staged, expected) {
+    let now;
+    try {
+        now = lstatSync(staged.path, { bigint: true });
+    }
+    catch (err) {
+        if (errno(err) !== 'ENOENT')
+            throw new WriteRefused(`cannot check that it hadn't changed (${systemWords(errno(err), err)})`, errnoWayOn(errno(err)), errno(err));
+        if (expected !== null)
+            throw new FileChanged(staged.path);
+        return;
+    }
+    if (now.isSymbolicLink())
+        throw new WriteRefused('it became a symlink while this call was being applied', AFRESH);
+    if (now.isDirectory())
+        throw new WriteRefused('a directory', DIRECTORY_THERE);
+    if (!now.isFile())
+        throw new WriteRefused('not a regular file', NOT_REGULAR_THERE);
+    // As a push's write, which opens the file for writing, would be refused:
+    // the rename needs only the directory's permission, and would replace a
+    // file its owner made read-only.
+    try {
+        accessSync(staged.path, fsConstants.W_OK);
+    }
+    catch (err) {
+        const code = errno(err);
+        // Removed since the lstat: a write makes the file anew; an edit's read is gone.
+        if (code === 'ENOENT') {
+            if (expected === null)
+                return;
+            throw new FileChanged(staged.path);
+        }
+        if (code === 'EACCES' || code === 'EPERM') {
+            throw new WriteRefused(`a file the host's process may not write (${errnoWords(code)}): its mode or owner keeps that process out, and calling again is refused until the file's owner, or whoever runs the host, changes that`);
+        }
+        throw new WriteRefused(`cannot check that the host's process may write it (${systemWords(code, err)})`, errnoWayOn(code), code);
+    }
+    if (expected === null)
+        return;
+    let bytes;
+    let after;
+    try {
+        // No link followed, and no wait on a pipe, if either was put at the path since the lstat.
+        const fd = openSync(staged.path, fsConstants.O_RDONLY | NOFOLLOW | NONBLOCK);
+        try {
+            // One byte past what the edit read, enough to see the file differs:
+            // a file another writer made larger, or a pipe a writer keeps
+            // filling, put at the path since, costs no more than that.
+            bytes = readBounded(fd, expected.bytes.length + 1);
+        }
+        finally {
+            closeSync(fd);
+        }
+        // And the entry is still the file the edit read, after its bytes were read.
+        after = lstatSync(staged.path, { bigint: true });
+    }
+    catch (err) {
+        // ELOOP: a link put at the path since the lstat; EAGAIN: a pipe, with a
+        // writer and nothing in it yet. Either is another writer's change.
+        if (errno(err) === 'ENOENT' || errno(err) === 'ELOOP' || errno(err) === 'EAGAIN')
+            throw new FileChanged(staged.path);
+        throw new WriteRefused(`cannot check that it hadn't changed (${systemWords(errno(err), err)})`, errnoWayOn(errno(err)), errno(err));
+    }
+    if (!sameIdentity(identityOf(after), expected.identity) || !bytes.equals(expected.bytes))
+        throw new FileChanged(staged.path);
+}
+/** Up to `limit` bytes from the start of `fd`, fewer at its end. */
+function readBounded(fd, limit) {
+    const buffer = Buffer.alloc(limit);
+    let filled = 0;
+    while (filled < limit) {
+        // From where the last read ended (a pipe has no positions to read at).
+        const got = readSync(fd, buffer, filled, limit - filled, null);
+        if (got === 0)
+            break;
+        filled += got;
+    }
+    return buffer.subarray(0, filled);
+}
+/**
+ * Rename the staged file over the file, synchronously (checkUnchanged says
+ * why), counting the other hard links it splits the path from just before.
+ * A failed rename leaves the file as it was; the caller removes the staged
+ * file (discard).
+ */
+export function renameInto(staged) {
+    let otherLinks;
+    try {
+        directWriteTestSeam.beforeRename?.(staged.path);
+        // The staged file is still the one this call wrote, not another put at its name.
+        const temp = lstatSync(staged.temp, { bigint: true });
+        if (!temp.isFile() || !sameIdentity(identityOf(temp), staged.tempIdentity)) {
+            throw new WriteRefused('another writer replaced the staged copy of the new text before it could be renamed over the file, which is as it was', 'Calling again writes it afresh.');
+        }
+        otherLinks = otherLinksAt(staged.path);
+        renameSync(staged.temp, staged.path);
+    }
+    catch (err) {
+        if (err instanceof WriteRefused)
+            throw err;
+        throw new WriteRefused(`cannot rename the staged file over it (${systemWords(errno(err), err)})`, errnoWayOn(errno(err)), errno(err));
+    }
+    // Set once the rename has happened, so a count never stands for a split that didn't.
+    staged.otherLinks = otherLinks;
+}
+/** The other hard links of what the entry at `path` holds: 0 for none there, and when lstat fails, since the count only informs the answer. */
+function otherLinksAt(path) {
+    try {
+        return lstatSync(path).nlink - 1;
+    }
+    catch {
+        return 0;
+    }
+}
+/**
+ * Remove a staged file that won't be renamed, best effort: only the file
+ * this call staged, by its whole identity, since whatever another writer
+ * put at its name since is theirs, as renameInto leaves it too. Checked and
+ * removed synchronously, as the rename is (checkUnchanged says why).
+ */
+export async function discard(staged) {
+    removeIf(staged.temp, (there) => there.isFile() && sameIdentity(identityOf(there), staged.tempIdentity));
+}
+/** Unlink what's at `path` if `ours` says it's the file meant; best effort, with no turn of the event loop between the check and the unlink. */
+function removeIf(path, ours) {
+    try {
+        if (ours(lstatSync(path, { bigint: true })))
+            unlinkSync(path);
+    }
+    catch {
+        // Gone already, or not ours to know: left, as the header says.
+    }
+}
+//# sourceMappingURL=direct-write.js.map

package/dist/src/modules/workspace/direct-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-write.js","sourceRoot":"","sources":["../../../../src/modules/workspace/direct-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,IAAI,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEjI,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9F,OAAO,EAGL,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,KAAK,EACL,WAAW,EACX,MAAM,EACN,QAAQ,GACT,MAAM,cAAc,CAAC;AAEtB,MAAM,eAAe,GAAG,+DAA+D,CAAC;AACxF,MAAM,iBAAiB,GAAG,WAAW,CAAC,0BAA0B,CAAC,CAAC;AAElE,4EAA4E;AAC5E,MAAM,QAAQ,GAAG,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzF,uEAAuE;AACvE,MAAM,CAAC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,uIAAuI,CAAC;AAoBlK,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAiB,EAAgB,EAAE,CAAC,CAAC;IAC9D,GAAG,EAAE,IAAI,CAAC,GAAG;IACb,GAAG,EAAE,IAAI,CAAC,GAAG;IACb,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,GAAG,EAAE,IAAI,CAAC,GAAG;IACb,GAAG,EAAE,IAAI,CAAC,GAAG;IACb,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,OAAO,EAAE,IAAI,CAAC,OAAO;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAe,EAAE,CAAe,EAAW,EAAE,CACxE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;OAC/G,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC;AAExD,iHAAiH;AACjH,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AAEzC,oFAAoF;AACpF,MAAM,OAAO,YAAa,SAAQ,KAAK;IACC,KAAK;IAAiC,KAAK;IAAjF,YAAY,OAAe,EAAW,KAAK,GAAkB,IAAI,EAAW,KAAc;QACxF,KAAK,CAAC,OAAO,CAAC,CAAC;qBADqB,KAAK;qBAAiC,KAAK;IAEjF,CAAC;CACF;AAED,MAAM,MAAM,GAAG,iCAAiC,CAAC;AAEjD,MAAM,YAAY,GAAG,oGAAoG,CAAC;AAE1H,SAAS,SAAS,CAAC,IAAwB;IACzC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,4CAA4C,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;AACpJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa,EAAE,SAAS,GAAG,KAAK;IACpE,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACtE,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACjD,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,+EAA+E,CAAC;IACjJ,IAAI,MAAM,KAAK,eAAe;QAAE,OAAO,6JAA6J,CAAC;IACrM,OAAO,IAAI,CAAC;AACd,CAAC;AAyBD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAG5B,EAAE,CAAC;AAEP,qFAAqF;AACrF,SAAS,UAAU,CAAC,QAAgB,EAAE,IAAY;IAChD,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CAAC,IAAe,EAAE,QAAgB,EAAE,GAAW,EAAE,aAAsB;IAC/F,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACzF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC;IACnD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjE,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAe,EACf,QAAgB,EAChB,GAAW,EACX,KAAa,EACb,EAAE,aAAa,GAAG,KAAK,EAAE,GAAgC,EAAE;IAE3D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACnE,IAAI,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACpE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,IAAI,YAAY,CAAC,yBAAyB,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC7E,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACvD,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAC3B,CAAC,CAAC,IAAI,YAAY,CAAC,sCAAsC,EAAE,WAAW,CAAC,2CAA2C,CAAC,CAAC;gBACpH,CAAC,CAAC,IAAI,YAAY,CAAC,+BAA+B,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3H,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAChE,yDAAyD;YACzD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,MAAM,IAAI,YAAY,CAAC,8CAA8C,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5I,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,oEAAoE;QACpE,uEAAuE;QACvE,yDAAyD;QACzD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,EAAE,WAAW,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAChF,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;IAC5F,kGAAkG;IAClG,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,GAAG,aAAa,GAAG,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,CAAC;QACH,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,+CAA+C;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,GAAG,IAAI,CAAC;QACZ,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,IAAI;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,KAAO,CAAC,CAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAChG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kEAAkE;YAClE,mEAAmE;YACnE,0DAA0D;YAC1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,IAAI;gBAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;YACtF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0FAA0F;YAC1F,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,oEAAoE;QACpE,+DAA+D;QAC/D,MAAM,IAAI,YAAY,CAAC,IAAI;YACzB,CAAC,CAAC,2CAA2C,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG;YAC5E,CAAC,CAAC,iDAAiD,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,2EAA2E,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACpM,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC;AACvH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,QAA0D;IACvG,IAAI,GAAgB,CAAC;IACrB,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,wCAAwC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjK,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,uDAAuD,EAAE,MAAM,CAAC,CAAC;IAClH,IAAI,GAAG,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC9E,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;IACnF,yEAAyE;IACzE,wEAAwE;IACxE,iCAAiC;IACjC,IAAI,CAAC;QACH,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,gFAAgF;QAChF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO;YAC9B,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1C,MAAM,IAAI,YAAY,CAAC,4CAA4C,UAAU,CAAC,IAAI,CAAC,0IAA0I,CAAC,CAAC;QACjO,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,sDAAsD,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAClI,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO;IAC9B,IAAI,KAAa,CAAC;IAClB,IAAI,KAAkB,CAAC;IACvB,IAAI,CAAC;QACH,0FAA0F;QAC1F,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,oEAAoE;YACpE,8DAA8D;YAC9D,2DAA2D;YAC3D,KAAK,GAAG,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,4EAA4E;QAC5E,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,mEAAmE;QACnE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrH,MAAM,IAAI,YAAY,CAAC,wCAAwC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACtI,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/H,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,EAAU,EAAE,KAAa;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,EAAE,CAAC;QACtB,uEAAuE;QACvE,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM;QACrB,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,mBAAmB,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,iFAAiF;QACjF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,YAAY,CAAC,sHAAsH,EAAE,iCAAiC,CAAC,CAAC;QACpL,CAAC;QACD,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY;YAAE,MAAM,GAAG,CAAC;QAC3C,MAAM,IAAI,YAAY,CAAC,0CAA0C,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACxI,CAAC;IACD,qFAAqF;IACrF,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;AACjC,CAAC;AAED,+IAA+I;AAC/I,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc;IAC1C,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,gJAAgJ;AAChJ,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAqC;IACnE,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;AACH,CAAC"}

package/dist/src/modules/workspace/disk-agreement.d.ts

@@ -10,14 +10,14 @@
  * intent — tombstones, store origin, conflicts — lives in BranchIntents and
  * rewinds with the tree.
  *
- * P is evidence about one directory, so each mount also records the identity
- * (device and inode) of the root that evidence was gathered under. A root
- * that isn't that directory any more (an unmounted drive whose mountpoint is
- * now empty, a replaced directory) is an unavailable mount, never a disk on
- * which every file was deleted; only an explicit acceptance takes it, and
- * that starts its evidence afresh. A place, where a walk stopped (`walks`),
- * binds no root: it only says where the next walk starts, in whatever
- * directory the root is by then.
+ * P is evidence about one directory, so each mount also records the identity of
+ * the root that evidence was gathered under (sameRootIdentity says when two
+ * name the same directory). A root that isn't that directory any more (an
+ * unmounted drive whose mountpoint is now empty, a replaced directory) is an
+ * unavailable mount, never a disk on which every file was deleted; only an
+ * explicit acceptance takes it, and that starts its evidence afresh. A place,
+ * where a walk stopped (`walks`), binds no root: it only says where the next
+ * walk starts, in whatever directory the root is by then.
  *
  * Every transition is write-ahead (see reconcile.ts): an `intent` entry
  * (`pending`, with the prior value and the expected one) is durable before the
@@ -32,7 +32,14 @@
  * agree); one that shows on disk is completed only by a push whose barriers
  * succeed, since its completion releases a draft's protection.
  */
+import { AsyncLocalStorage } from 'node:async_hooks';
 import type { JsStore } from '@animalabs/chronicle';
+import { Refusal } from './answers.js';
+export declare class EvidenceUnavailable extends Refusal {
+}
+export declare const callGate: AsyncLocalStorage<{
+    passed: boolean;
+}>;
 /** Everything `stat` says about a file that can vouch for unchanged bytes. */
 export interface Fingerprint {
     size: number;
@@ -98,11 +105,23 @@ export interface Interrupted {
     candidates: Candidate[];
 }
 export type Physical = Agreed | Pending | Interrupted;
-/** Which directory a mount root is: its device and inode, as decimal strings. */
+/**
+ * Which directory a mount root is: its device and inode, and its birth time
+ * in nanoseconds as the runtime reports it, where that is above zero, as decimal
+ * strings.
+ */
 export interface RootIdentity {
     dev: string;
     ino: string;
+    born?: string;
 }
+/**
+ * Whether two identities name the same directory: the same device and inode,
+ * or the same inode and birth time on another device, since macOS can give a
+ * volume another device number after a reboot. A birth time in whole seconds
+ * doesn't count across devices: filesystems made in the same second can give
+ * their roots one inode (2 on ext4) and one birth time.
+ */
 export declare function sameRootIdentity(a: RootIdentity, b: RootIdentity): boolean;
 export declare const DISK_AGREEMENT_RECORD_TYPE = "workspace/disk-agreement";
 export declare function candidateOf(value: Agreed): Candidate;
@@ -151,6 +170,7 @@ export declare class DiskAgreement {
      * open's rebuild threw: there is no whole evidence to read.
      */
     ensureReconciled(): void;
+    get awaitsReopen(): boolean;
     /** Whether evidence recorded so far still awaits a barrier. */
     get needsBarrier(): boolean;
     /**
@@ -179,8 +199,10 @@ export declare class DiskAgreement {
     rootIdentityForRead(mount: string): RootIdentity | undefined;
     /**
      * Record the root's identity just before the first evidence a mount gains:
-     * the caller saw it as the root while gathering that evidence. A no-op once
-     * one is recorded; changing it is acceptRoot's alone.
+     * the caller saw it as the root while gathering that evidence. Once one is
+     * recorded, the same directory seen on another device, or with a birth
+     * time the record lacks, replaces it and keeps the evidence; another
+     * directory is acceptRoot's alone.
      */
     recordRootIdentity(mount: string, identity: RootIdentity): void;
     /**

package/dist/src/modules/workspace/disk-agreement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"disk-agreement.d.ts","sourceRoot":"","sources":["../../../../src/modules/workspace/disk-agreement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAGpD,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,MAAM,MAAM,GACd;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,MAAM,MAAM,SAAS,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,gFAAgF;IAChF,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,SAAS,CAAC;IAClB,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,aAAa,CAAC;IACpB,oEAAoE;IACpE,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;AAEtD,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAQD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,OAAO,CAE1E;AAiCD,eAAO,MAAM,0BAA0B,6BAA6B,CAAC;AAKrE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAEpD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,CAEjE;AAiBD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,UAAU,CAA6C;IAC/D;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAS;IACzB;;;;OAIG;IACH,OAAO,CAAC,KAAK,CAAS;IACtB,gHAAgH;IAChH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAE9C,YAAY,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,OAAO,CAAA;KAAO,EAIvE;IAED;;;;OAIG;IACH,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAGxD;IAED;;;;;;;;;;OAUG;IACH,gBAAgB,IAAI,IAAI,CAcvB;IAED,+DAA+D;IAC/D,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAO;IA2Cf,uFAAuF;IACvF,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAGpD;IAED;;;;;;;;;;;;;OAaG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAG3D;IAED;;;;OAIG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAG9D;IAED;;;OAGG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAEtD;IAED,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAGrD;IAED,wEAAwE;IACxE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAS3D;IAED;;;OAGG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAGnE;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,IAAI,CAEzG;IAED;;;OAGG;IACH,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE,IAAI,GAAE;QAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,IAAI,CAEhH;IAED,wEAAwE;IACxE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAGxC;IAED;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAGtE;IAED,OAAO,CAAC,KAAK;IAmBb,+DAA+D;IAC/D,eAAe,IAAI,IAAI,CAgBtB;IAED,kFAAkF;IAClF,OAAO,IAAI,IAAI,CAGd;CACF"}
+{"version":3,"file":"disk-agreement.d.ts","sourceRoot":"","sources":["../../../../src/modules/workspace/disk-agreement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,OAAO,EAAe,MAAM,cAAc,CAAC;AAKpD,qBAAa,mBAAoB,SAAQ,OAAO;CAAG;AAEnD,eAAO,MAAM,QAAQ;YAAmC,OAAO;EAAK,CAAC;AAErE,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,MAAM,MAAM,GACd;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,MAAM,MAAM,SAAS,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,gFAAgF;IAChF,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,SAAS,CAAC;IAClB,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,aAAa,CAAC;IACpB,oEAAoE;IACpE,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAQD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,OAAO,CAI1E;AAiCD,eAAO,MAAM,0BAA0B,6BAA6B,CAAC;AAKrE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAEpD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,CAEjE;AAiBD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,UAAU,CAA6C;IAC/D;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAS;IACzB;;;;OAIG;IACH,OAAO,CAAC,KAAK,CAAS;IACtB,gHAAgH;IAChH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAE9C,YAAY,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,OAAO,CAAA;KAAO,EAIvE;IAED;;;;OAIG;IACH,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAGxD;IAED;;;;;;;;;;OAUG;IACH,gBAAgB,IAAI,IAAI,CAUvB;IAED,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED,+DAA+D;IAC/D,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAO;IA2Cf,uFAAuF;IACvF,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAGpD;IAED;;;;;;;;;;;;;OAaG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAG3D;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAS9D;IAED;;;OAGG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAEtD;IAED,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAGrD;IAED,wEAAwE;IACxE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAS3D;IAED;;;OAGG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAGnE;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,IAAI,CAEzG;IAED;;;OAGG;IACH,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE,IAAI,GAAE;QAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,IAAI,CAEhH;IAED,wEAAwE;IACxE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAGxC;IAED;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAGtE;IAED,OAAO,CAAC,KAAK;IAmBb,+DAA+D;IAC/D,eAAe,IAAI,IAAI,CAgBtB;IAED,kFAAkF;IAClF,OAAO,IAAI,IAAI,CAGd;CACF"}

package/dist/src/modules/workspace/disk-agreement.js

@@ -10,14 +10,14 @@
  * intent — tombstones, store origin, conflicts — lives in BranchIntents and
  * rewinds with the tree.
  *
- * P is evidence about one directory, so each mount also records the identity
- * (device and inode) of the root that evidence was gathered under. A root
- * that isn't that directory any more (an unmounted drive whose mountpoint is
- * now empty, a replaced directory) is an unavailable mount, never a disk on
- * which every file was deleted; only an explicit acceptance takes it, and
- * that starts its evidence afresh. A place, where a walk stopped (`walks`),
- * binds no root: it only says where the next walk starts, in whatever
- * directory the root is by then.
+ * P is evidence about one directory, so each mount also records the identity of
+ * the root that evidence was gathered under (sameRootIdentity says when two
+ * name the same directory). A root that isn't that directory any more (an
+ * unmounted drive whose mountpoint is now empty, a replaced directory) is an
+ * unavailable mount, never a disk on which every file was deleted; only an
+ * explicit acceptance takes it, and that starts its evidence afresh. A place,
+ * where a walk stopped (`walks`), binds no root: it only says where the next
+ * walk starts, in whatever directory the root is by then.
  *
  * Every transition is write-ahead (see reconcile.ts): an `intent` entry
  * (`pending`, with the prior value and the expected one) is durable before the
@@ -32,15 +32,33 @@
  * agree); one that shows on disk is completed only by a push whose barriers
  * succeed, since its completion releases a draft's protection.
  */
+import { AsyncLocalStorage } from 'node:async_hooks';
 import { resolve } from 'node:path';
 import { RecordJournal } from '../../record-journal.js';
+import { Refusal, onlyTheHost } from './answers.js';
+const UNTIL_REOPENED = "the workspace can't check its files against disk until its store is reopened";
+const REOPEN = onlyTheHost('reopen it with a restart');
+export class EvidenceUnavailable extends Refusal {
+}
+export const callGate = new AsyncLocalStorage();
 /** Whether two configured roots name the same path, whatever their spelling
  *  (a trailing slash, a relative form). A symlinked alias is another path. */
 function sameRootPath(a, b) {
     return resolve(a) === resolve(b);
 }
+/**
+ * Whether two identities name the same directory: the same device and inode,
+ * or the same inode and birth time on another device, since macOS can give a
+ * volume another device number after a reboot. A birth time in whole seconds
+ * doesn't count across devices: filesystems made in the same second can give
+ * their roots one inode (2 on ext4) and one birth time.
+ */
 export function sameRootIdentity(a, b) {
-    return a.dev === b.dev && a.ino === b.ino;
+    if (a.ino !== b.ino)
+        return false;
+    if (a.dev === b.dev)
+        return true;
+    return a.born !== undefined && a.born === b.born && !a.born.endsWith('000000000');
 }
 export const DISK_AGREEMENT_RECORD_TYPE = 'workspace/disk-agreement';
 /** Checkpoint once the tail outgrows this many entries, or the live paths, whichever is larger. */
@@ -113,15 +131,19 @@ export class DiskAgreement {
      */
     ensureReconciled() {
         if (this.journal.needsReopen) {
-            throw new Error('Disk-agreement evidence is unavailable until the store is reopened, as at the next start: ' +
-                'an append to its journal failed inside the store, and the evidence may lack what it recorded');
+            throw new EvidenceUnavailable(`${UNTIL_REOPENED}: an append to its record of what disk last agreed with failed inside the store, so that record may lack what the append held. ${REOPEN}`);
         }
         if (!this.whole) {
-            throw new Error('Disk-agreement evidence is unavailable until the store is reopened, as at the next start: ' +
-                'reading it back from the store failed');
+            throw new EvidenceUnavailable(`${UNTIL_REOPENED}: reading back its record of what disk last agreed with failed. ${REOPEN}`);
         }
         if (this.journal.needsReconcile)
             this.rebuild();
+        const gate = callGate.getStore();
+        if (gate)
+            gate.passed = true;
+    }
+    get awaitsReopen() {
+        return this.journal.needsReopen || !this.whole;
     }
     /** Whether evidence recorded so far still awaits a barrier. */
     get needsBarrier() {
@@ -204,12 +226,21 @@ export class DiskAgreement {
     }
     /**
      * Record the root's identity just before the first evidence a mount gains:
-     * the caller saw it as the root while gathering that evidence. A no-op once
-     * one is recorded; changing it is acceptRoot's alone.
+     * the caller saw it as the root while gathering that evidence. Once one is
+     * recorded, the same directory seen on another device, or with a birth
+     * time the record lacks, replaces it and keeps the evidence; another
+     * directory is acceptRoot's alone.
      */
     recordRootIdentity(mount, identity) {
-        if (this.rootIdentity(mount) !== undefined)
-            return;
+        const recorded = this.rootIdentity(mount);
+        if (recorded !== undefined) {
+            if (!sameRootIdentity(recorded, identity))
+                return;
+            const renumbered = recorded.dev !== identity.dev;
+            const bornLearned = recorded.born === undefined && identity.born !== undefined;
+            if (!renumbered && !bornLearned)
+                return;
+        }
         this.write({ t: 'root', mount, identity }, {});
     }
     /**