@ashlr/hub 3.7.0 → 3.9.0

package/dist/core/verse/preferences.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Verse operator preferences — `<verse root>/preferences.json` (default
+ * `~/.ashlr/verse/preferences.json`, 0600 inside a 0700 directory).
+ *
+ * What lives here is deliberately SMALL and STANDING: choices the operator made
+ * once and expects every future session to honour.
+ *
+ *   seats.<seatId>.contextMode   default context mode for NEW sessions on a seat
+ *   memory.enabled               shared project memory, globally (default ON)
+ *   memory.disabledProjects      canonical project paths that opted out
+ *
+ * Nothing here is consulted by a RUNNING session. A session pins its mode and
+ * whether it was offered memory at creation (session.contextMode,
+ * session.memoryEnabled, launch.memory), so flipping a preference can never
+ * silently change what an in-flight conversation can reach or what it costs.
+ *
+ * HONESTY / SAFETY RULES
+ *  - Absent means default. A seat set back to `standard` is REMOVED rather than
+ *    stored, so the file only ever records a deviation from the default.
+ *  - Load is TOTAL: a missing, unreadable, oversized or hand-mangled file yields
+ *    the defaults (field by field — one bad seat entry does not discard the
+ *    memory opt-outs). The server must boot on any file.
+ *  - Update is STRICT: exactly one of the three `VersePreferencesUpdate` forms,
+ *    no unknown keys, every value validated. A body can never change more than
+ *    the operator clicked (types.ts `VersePreferencesUpdate`).
+ *  - Writes are atomic (O_EXCL|O_NOFOLLOW temp, fchmod 0600, fsync, rename) and
+ *    refuse to write through a symlinked directory.
+ *
+ * Spends nothing, reads no secrets, starts no process.
+ */
+import { type VerseContextMode, type VersePreferences, type VersePreferencesUpdate } from './types.js';
+/**
+ * The error every V3.9 service module (preferences, project memory, handoff,
+ * search, context fit) throws for a bad request.
+ *
+ * Shaped like session-engine's `VerseError` — same `code` vocabulary, same
+ * status mapping — because verse-api maps errors by DUCK TYPE on `.code`, so a
+ * throw from here becomes the contract's 400/413 with no extra wiring. It is a
+ * separate class, not an import of `VerseError`, on purpose: these modules are
+ * pure services and must not link against the session engine (and, through
+ * it, every adapter) just to report a validation failure.
+ */
+export type VerseServiceErrorCode = 'VERSE_INVALID' | 'VERSE_TOO_LARGE';
+export declare class VerseServiceError extends Error {
+    readonly code: VerseServiceErrorCode;
+    readonly status: 400 | 413;
+    constructor(code: VerseServiceErrorCode, message: string);
+}
+export declare const VERSE_PREFERENCES_FILE = "preferences.json";
+/** Registry bounds — a blast radius for a runaway client, not a UI limit. */
+export declare const VERSE_PREFERENCES_MAX_SEATS = 500;
+export declare const VERSE_PREFERENCES_MAX_DISABLED_PROJECTS = 1000;
+/** The Verse store root every service module defaults to (same as the session engine). */
+export declare function defaultVerseRoot(): string;
+export declare function defaultVersePreferences(): VersePreferences;
+/**
+ * mkdir -p with 0700 on every directory we CREATE, then refuse to proceed if
+ * the final directory is a symlink or is not ours. Pre-existing ancestors are
+ * left alone (they may legitimately be the operator's).
+ */
+export declare function ensurePrivateDirectory(path: string): void;
+/**
+ * Create-exclusive temp file beside the target (O_NOFOLLOW), write, fchmod
+ * 0600, fsync, rename over the target. The temp name starts with `.` and ends
+ * with `.tmp` so directory listings can skip an orphan from a crash.
+ */
+export declare function writePrivateFileAtomic(target: string, content: string): void;
+/**
+ * Read a regular file without following a symlink at its name, up to
+ * `maxBytes`. Null when absent, not a regular file, or unreadable. `truncated`
+ * says whether the file was longer than the cap.
+ */
+export declare function readPrivateFileCapped(path: string, maxBytes: number): {
+    text: string;
+    bytes: number;
+    mtimeMs: number;
+    truncated: boolean;
+} | null;
+/** Decode bytes, dropping a trailing partial UTF-8 sequence rather than emitting U+FFFD. */
+export declare function utf8Prefix(bytes: Buffer): string;
+/**
+ * The spelling a project path is stored and compared under: absolute, symlinks
+ * resolved when the directory exists (so `/tmp/x` and `/private/tmp/x` are one
+ * project on macOS). Throws VERSE_INVALID for anything that is not an absolute
+ * path — callers validate reachability with path-guard before they get here.
+ */
+export declare function canonicalProjectPath(projectPath: string): string;
+export declare function versePreferencesPath(root?: string): string;
+/** The operator's preferences, or the defaults. Total: never throws. */
+export declare function loadVersePreferences(root?: string): VersePreferences;
+type ParsedUpdate = {
+    kind: 'seat';
+    seatId: string;
+    contextMode: VerseContextMode;
+} | {
+    kind: 'memory';
+    memoryEnabled: boolean;
+} | {
+    kind: 'project';
+    projectPath: string;
+    memoryEnabled: boolean;
+};
+/**
+ * Validate an update body against EXACTLY one of the three forms. Exported so
+ * the API can reject a malformed body before touching disk, with the same
+ * wording this module would use.
+ */
+export declare function parseVersePreferencesUpdate(value: unknown): ParsedUpdate;
+/**
+ * Apply ONE validated change and persist atomically. Returns the full
+ * preferences as stored. Throws VERSE_INVALID for a malformed update (nothing
+ * is written) and VERSE_TOO_LARGE when a registry bound would be exceeded.
+ */
+export declare function updateVersePreferences(update: VersePreferencesUpdate, root?: string): VersePreferences;
+/**
+ * Should a NEW session on this project be offered shared memory? Global switch
+ * AND not opted out. A path that cannot be canonicalised is treated as
+ * disabled — never "enabled because we could not check".
+ */
+export declare function memoryEnabledFor(prefs: VersePreferences, projectPath: string): boolean;
+/** The context mode a new session on this seat starts in. */
+export declare function seatDefaultMode(prefs: VersePreferences, seatId: string): VerseContextMode;
+export {};

package/dist/core/verse/preferences.js

@@ -0,0 +1,403 @@
+/**
+ * Verse operator preferences — `<verse root>/preferences.json` (default
+ * `~/.ashlr/verse/preferences.json`, 0600 inside a 0700 directory).
+ *
+ * What lives here is deliberately SMALL and STANDING: choices the operator made
+ * once and expects every future session to honour.
+ *
+ *   seats.<seatId>.contextMode   default context mode for NEW sessions on a seat
+ *   memory.enabled               shared project memory, globally (default ON)
+ *   memory.disabledProjects      canonical project paths that opted out
+ *
+ * Nothing here is consulted by a RUNNING session. A session pins its mode and
+ * whether it was offered memory at creation (session.contextMode,
+ * session.memoryEnabled, launch.memory), so flipping a preference can never
+ * silently change what an in-flight conversation can reach or what it costs.
+ *
+ * HONESTY / SAFETY RULES
+ *  - Absent means default. A seat set back to `standard` is REMOVED rather than
+ *    stored, so the file only ever records a deviation from the default.
+ *  - Load is TOTAL: a missing, unreadable, oversized or hand-mangled file yields
+ *    the defaults (field by field — one bad seat entry does not discard the
+ *    memory opt-outs). The server must boot on any file.
+ *  - Update is STRICT: exactly one of the three `VersePreferencesUpdate` forms,
+ *    no unknown keys, every value validated. A body can never change more than
+ *    the operator clicked (types.ts `VersePreferencesUpdate`).
+ *  - Writes are atomic (O_EXCL|O_NOFOLLOW temp, fchmod 0600, fsync, rename) and
+ *    refuse to write through a symlinked directory.
+ *
+ * Spends nothing, reads no secrets, starts no process.
+ */
+import { closeSync, constants as fsConstants, fchmodSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readSync, renameSync, rmSync, writeSync, } from 'node:fs';
+import { randomBytes } from 'node:crypto';
+import { homedir } from 'node:os';
+import { basename, dirname, isAbsolute, join, resolve as resolvePath } from 'node:path';
+import { physicalPath } from './path-guard.js';
+import { VERSE_CONTEXT_MODES, } from './types.js';
+export class VerseServiceError extends Error {
+    code;
+    status;
+    constructor(code, message) {
+        super(message);
+        this.name = 'VerseServiceError';
+        this.code = code;
+        this.status = code === 'VERSE_TOO_LARGE' ? 413 : 400;
+    }
+}
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+export const VERSE_PREFERENCES_FILE = 'preferences.json';
+/** A preferences file larger than this is not ours; treat it as absent. */
+const MAX_PREFERENCES_BYTES = 256 * 1024;
+/** Registry bounds — a blast radius for a runaway client, not a UI limit. */
+export const VERSE_PREFERENCES_MAX_SEATS = 500;
+export const VERSE_PREFERENCES_MAX_DISABLED_PROJECTS = 1000;
+/** Same spelling rule the seat catalog uses for ids (`local:qwen3:ctx64k`, `codex-personal`). */
+const SEAT_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._:@/+-]{0,199}$/;
+const MAX_PATH_CHARS = 4096;
+/** The Verse store root every service module defaults to (same as the session engine). */
+export function defaultVerseRoot() {
+    // Re-resolved per call so a relocated HOME (tests) is honoured.
+    return join(homedir(), '.ashlr', 'verse');
+}
+export function defaultVersePreferences() {
+    return { version: 1, seats: {}, memory: { enabled: true, disabledProjects: [] } };
+}
+// ---------------------------------------------------------------------------
+// Private-file primitives (shared with project-memory.ts)
+// ---------------------------------------------------------------------------
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * mkdir -p with 0700 on every directory we CREATE, then refuse to proceed if
+ * the final directory is a symlink or is not ours. Pre-existing ancestors are
+ * left alone (they may legitimately be the operator's).
+ */
+export function ensurePrivateDirectory(path) {
+    mkdirSync(path, { recursive: true, mode: 0o700 });
+    const stat = lstatSync(path);
+    if (stat.isSymbolicLink() || !stat.isDirectory()) {
+        throw new Error(`refusing to use ${path}: not a real directory`);
+    }
+    if (typeof process.getuid === 'function' && stat.uid !== process.getuid()) {
+        throw new Error(`refusing to use ${path}: owned by another user`);
+    }
+}
+/**
+ * Create-exclusive temp file beside the target (O_NOFOLLOW), write, fchmod
+ * 0600, fsync, rename over the target. The temp name starts with `.` and ends
+ * with `.tmp` so directory listings can skip an orphan from a crash.
+ */
+export function writePrivateFileAtomic(target, content) {
+    const temp = join(dirname(target), `.${basename(target)}.${process.pid}.${randomBytes(6).toString('hex')}.tmp`);
+    const noFollow = typeof fsConstants.O_NOFOLLOW === 'number' ? fsConstants.O_NOFOLLOW : 0;
+    const fd = openSync(temp, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | noFollow, 0o600);
+    let published = false;
+    try {
+        const bytes = Buffer.from(content, 'utf8');
+        let offset = 0;
+        while (offset < bytes.length) {
+            const written = writeSync(fd, bytes, offset, bytes.length - offset, offset);
+            if (written <= 0)
+                throw new Error('verse private write made no progress');
+            offset += written;
+        }
+        fchmodSync(fd, 0o600);
+        fsyncSync(fd);
+        // rename() replaces a symlink at the target NAME (the file it pointed at
+        // is never written), so a planted link cannot redirect this write. A
+        // directory there is refused up front so the error names the real problem.
+        let existing = null;
+        try {
+            existing = lstatSync(target);
+        }
+        catch {
+            existing = null;
+        }
+        if (existing && !existing.isFile() && !existing.isSymbolicLink()) {
+            throw new Error(`refusing to replace ${target}: not a regular file`);
+        }
+        renameSync(temp, target);
+        published = true;
+    }
+    finally {
+        closeSync(fd);
+        if (!published) {
+            try {
+                rmSync(temp, { force: true });
+            }
+            catch { /* best effort */ }
+        }
+    }
+}
+/**
+ * Read a regular file without following a symlink at its name, up to
+ * `maxBytes`. Null when absent, not a regular file, or unreadable. `truncated`
+ * says whether the file was longer than the cap.
+ */
+export function readPrivateFileCapped(path, maxBytes) {
+    const noFollow = typeof fsConstants.O_NOFOLLOW === 'number' ? fsConstants.O_NOFOLLOW : 0;
+    let fd;
+    try {
+        fd = openSync(path, fsConstants.O_RDONLY | noFollow);
+    }
+    catch {
+        return null;
+    }
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile())
+            return null;
+        const want = Math.min(stat.size, maxBytes);
+        const buffer = Buffer.alloc(want);
+        let offset = 0;
+        while (offset < want) {
+            const read = readSync(fd, buffer, offset, want - offset, offset);
+            if (read <= 0)
+                break;
+            offset += read;
+        }
+        const slice = buffer.subarray(0, offset);
+        return {
+            text: utf8Prefix(slice),
+            bytes: stat.size,
+            mtimeMs: stat.mtimeMs,
+            truncated: stat.size > maxBytes,
+        };
+    }
+    catch {
+        return null;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Decode bytes, dropping a trailing partial UTF-8 sequence rather than emitting U+FFFD. */
+export function utf8Prefix(bytes) {
+    let end = bytes.length;
+    // Walk back over at most 3 continuation bytes to the lead byte of the last char.
+    let i = end - 1;
+    let continuation = 0;
+    while (i >= 0 && continuation < 4 && (bytes[i] & 0xc0) === 0x80) {
+        i -= 1;
+        continuation += 1;
+    }
+    if (i >= 0) {
+        const lead = bytes[i];
+        const need = lead >= 0xf0 ? 4 : lead >= 0xe0 ? 3 : lead >= 0xc0 ? 2 : 1;
+        if (need > 1 && continuation + 1 < need)
+            end = i;
+    }
+    return bytes.subarray(0, end).toString('utf8');
+}
+// ---------------------------------------------------------------------------
+// Canonical project paths
+// ---------------------------------------------------------------------------
+/**
+ * The spelling a project path is stored and compared under: absolute, symlinks
+ * resolved when the directory exists (so `/tmp/x` and `/private/tmp/x` are one
+ * project on macOS). Throws VERSE_INVALID for anything that is not an absolute
+ * path — callers validate reachability with path-guard before they get here.
+ */
+export function canonicalProjectPath(projectPath) {
+    if (typeof projectPath !== 'string' || projectPath.length === 0) {
+        throw new VerseServiceError('VERSE_INVALID', 'projectPath is required');
+    }
+    if (projectPath.length > MAX_PATH_CHARS) {
+        throw new VerseServiceError('VERSE_INVALID', `projectPath must be at most ${MAX_PATH_CHARS} characters`);
+    }
+    if (projectPath.includes('\0')) {
+        throw new VerseServiceError('VERSE_INVALID', 'projectPath must not contain NUL bytes');
+    }
+    const expanded = projectPath === '~' ? homedir() : projectPath.startsWith('~/') ? join(homedir(), projectPath.slice(2)) : projectPath;
+    if (!isAbsolute(expanded)) {
+        throw new VerseServiceError('VERSE_INVALID', 'projectPath must be an absolute path');
+    }
+    const lexical = resolvePath(expanded);
+    return physicalPath(lexical) ?? lexical;
+}
+// ---------------------------------------------------------------------------
+// Load
+// ---------------------------------------------------------------------------
+function isContextMode(value) {
+    return typeof value === 'string' && VERSE_CONTEXT_MODES.includes(value);
+}
+/** Field-by-field salvage of whatever is on disk. Never throws. */
+function sanitizePreferences(raw) {
+    const out = defaultVersePreferences();
+    if (!isObject(raw))
+        return out;
+    const seats = raw['seats'];
+    if (isObject(seats)) {
+        let kept = 0;
+        for (const [seatId, entry] of Object.entries(seats)) {
+            if (kept >= VERSE_PREFERENCES_MAX_SEATS)
+                break;
+            if (!SEAT_ID_RE.test(seatId) || !isObject(entry))
+                continue;
+            const mode = entry['contextMode'];
+            // Only a deviation from the default is worth keeping.
+            if (isContextMode(mode) && mode !== 'standard') {
+                out.seats[seatId] = { contextMode: mode };
+                kept += 1;
+            }
+        }
+    }
+    const memory = raw['memory'];
+    if (isObject(memory)) {
+        if (typeof memory['enabled'] === 'boolean')
+            out.memory.enabled = memory['enabled'];
+        const disabled = memory['disabledProjects'];
+        if (Array.isArray(disabled)) {
+            const seen = new Set();
+            for (const item of disabled) {
+                if (seen.size >= VERSE_PREFERENCES_MAX_DISABLED_PROJECTS)
+                    break;
+                if (typeof item !== 'string' || item.length === 0 || item.length > MAX_PATH_CHARS)
+                    continue;
+                if (item.includes('\0') || !isAbsolute(item))
+                    continue;
+                seen.add(item);
+            }
+            out.memory.disabledProjects = [...seen].sort();
+        }
+    }
+    return out;
+}
+export function versePreferencesPath(root = defaultVerseRoot()) {
+    return join(root, VERSE_PREFERENCES_FILE);
+}
+/** The operator's preferences, or the defaults. Total: never throws. */
+export function loadVersePreferences(root = defaultVerseRoot()) {
+    const file = readPrivateFileCapped(versePreferencesPath(root), MAX_PREFERENCES_BYTES);
+    if (!file || file.truncated)
+        return defaultVersePreferences();
+    try {
+        return sanitizePreferences(JSON.parse(file.text));
+    }
+    catch {
+        return defaultVersePreferences();
+    }
+}
+function sameKeys(value, keys) {
+    const own = Object.keys(value);
+    return own.length === keys.length && keys.every((key) => Object.prototype.hasOwnProperty.call(value, key));
+}
+/**
+ * Validate an update body against EXACTLY one of the three forms. Exported so
+ * the API can reject a malformed body before touching disk, with the same
+ * wording this module would use.
+ */
+export function parseVersePreferencesUpdate(value) {
+    if (!isObject(value)) {
+        throw new VerseServiceError('VERSE_INVALID', 'preferences update must be a JSON object');
+    }
+    if (sameKeys(value, ['seatId', 'contextMode'])) {
+        const seatId = value['seatId'];
+        const mode = value['contextMode'];
+        if (typeof seatId !== 'string' || !SEAT_ID_RE.test(seatId)) {
+            throw new VerseServiceError('VERSE_INVALID', 'seatId must be a seat id');
+        }
+        if (!isContextMode(mode)) {
+            throw new VerseServiceError('VERSE_INVALID', `contextMode must be one of: ${VERSE_CONTEXT_MODES.join(', ')}`);
+        }
+        return { kind: 'seat', seatId, contextMode: mode };
+    }
+    if (sameKeys(value, ['memoryEnabled'])) {
+        if (typeof value['memoryEnabled'] !== 'boolean') {
+            throw new VerseServiceError('VERSE_INVALID', 'memoryEnabled must be a boolean');
+        }
+        return { kind: 'memory', memoryEnabled: value['memoryEnabled'] };
+    }
+    if (sameKeys(value, ['projectPath', 'memoryEnabled'])) {
+        const projectPath = value['projectPath'];
+        if (typeof projectPath !== 'string') {
+            throw new VerseServiceError('VERSE_INVALID', 'projectPath must be a string');
+        }
+        if (typeof value['memoryEnabled'] !== 'boolean') {
+            throw new VerseServiceError('VERSE_INVALID', 'memoryEnabled must be a boolean');
+        }
+        return { kind: 'project', projectPath: canonicalProjectPath(projectPath), memoryEnabled: value['memoryEnabled'] };
+    }
+    throw new VerseServiceError('VERSE_INVALID', 'preferences update must be exactly one of {seatId, contextMode}, {memoryEnabled}, or {projectPath, memoryEnabled}');
+}
+/**
+ * Apply ONE validated change and persist atomically. Returns the full
+ * preferences as stored. Throws VERSE_INVALID for a malformed update (nothing
+ * is written) and VERSE_TOO_LARGE when a registry bound would be exceeded.
+ */
+export function updateVersePreferences(update, root = defaultVerseRoot()) {
+    const parsed = parseVersePreferencesUpdate(update);
+    const prefs = loadVersePreferences(root);
+    switch (parsed.kind) {
+        case 'seat': {
+            if (parsed.contextMode === 'standard') {
+                delete prefs.seats[parsed.seatId];
+            }
+            else {
+                if (!(parsed.seatId in prefs.seats) && Object.keys(prefs.seats).length >= VERSE_PREFERENCES_MAX_SEATS) {
+                    throw new VerseServiceError('VERSE_TOO_LARGE', `at most ${VERSE_PREFERENCES_MAX_SEATS} seats can carry a preference`);
+                }
+                prefs.seats[parsed.seatId] = { contextMode: parsed.contextMode };
+            }
+            break;
+        }
+        case 'memory':
+            prefs.memory.enabled = parsed.memoryEnabled;
+            break;
+        case 'project': {
+            const set = new Set(prefs.memory.disabledProjects);
+            if (parsed.memoryEnabled) {
+                set.delete(parsed.projectPath);
+            }
+            else {
+                if (!set.has(parsed.projectPath) && set.size >= VERSE_PREFERENCES_MAX_DISABLED_PROJECTS) {
+                    throw new VerseServiceError('VERSE_TOO_LARGE', `at most ${VERSE_PREFERENCES_MAX_DISABLED_PROJECTS} projects can opt out of memory`);
+                }
+                set.add(parsed.projectPath);
+            }
+            prefs.memory.disabledProjects = [...set].sort();
+            break;
+        }
+    }
+    ensurePrivateDirectory(root);
+    // Stable key order so the file diffs cleanly and two equal states are byte-identical.
+    const seats = {};
+    for (const seatId of Object.keys(prefs.seats).sort())
+        seats[seatId] = prefs.seats[seatId];
+    const stored = {
+        version: 1,
+        seats,
+        memory: { enabled: prefs.memory.enabled, disabledProjects: prefs.memory.disabledProjects },
+    };
+    writePrivateFileAtomic(versePreferencesPath(root), `${JSON.stringify(stored, null, 2)}\n`);
+    return stored;
+}
+// ---------------------------------------------------------------------------
+// Helpers the API resolves creation defaults through
+// ---------------------------------------------------------------------------
+/**
+ * Should a NEW session on this project be offered shared memory? Global switch
+ * AND not opted out. A path that cannot be canonicalised is treated as
+ * disabled — never "enabled because we could not check".
+ */
+export function memoryEnabledFor(prefs, projectPath) {
+    if (!prefs.memory.enabled)
+        return false;
+    let canonical;
+    try {
+        canonical = canonicalProjectPath(projectPath);
+    }
+    catch {
+        return false;
+    }
+    return !prefs.memory.disabledProjects.includes(canonical);
+}
+/** The context mode a new session on this seat starts in. */
+export function seatDefaultMode(prefs, seatId) {
+    const mode = prefs.seats[seatId]?.contextMode;
+    return isContextMode(mode) ? mode : 'standard';
+}
+//# sourceMappingURL=preferences.js.map

package/dist/core/verse/preferences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preferences.js","sourceRoot":"","sources":["../../../src/core/verse/preferences.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EACL,SAAS,EACT,SAAS,IAAI,WAAW,EACxB,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,MAAM,EACN,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAExF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,mBAAmB,GAIpB,MAAM,YAAY,CAAC;AAmBpB,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAwB;IAC5B,MAAM,CAAY;IAE3B,YAAY,IAA2B,EAAE,OAAe;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACvD,CAAC;CACF;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAEzD,2EAA2E;AAC3E,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,MAAM,CAAC,MAAM,uCAAuC,GAAG,IAAI,CAAC;AAC5D,iGAAiG;AACjG,MAAM,UAAU,GAAG,wCAAwC,CAAC;AAC5D,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB;IAC9B,gEAAgE;IAChE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,wBAAwB,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,yBAAyB,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,OAAe;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChH,MAAM,QAAQ,GAAG,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7G,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5E,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1E,MAAM,IAAI,OAAO,CAAC;QACpB,CAAC;QACD,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,yEAAyE;QACzE,qEAAqE;QACrE,2EAA2E;QAC3E,IAAI,QAAQ,GAAwC,IAAI,CAAC;QACzD,IAAI,CAAC;YAAC,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;QAAC,CAAC;QAChE,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,sBAAsB,CAAC,CAAC;QACvE,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzB,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC;gBAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,QAAgB;IAEhB,MAAM,QAAQ,GAAG,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACjE,IAAI,IAAI,IAAI,CAAC;gBAAE,MAAM;YACrB,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC;YACvB,KAAK,EAAE,IAAI,CAAC,IAAI;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,IAAI,GAAG,QAAQ;SAChC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,iFAAiF;IACjF,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IAChB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAChE,CAAC,IAAI,CAAC,CAAC;QACP,YAAY,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,IAAI,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC,GAAG,IAAI;YAAE,GAAG,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,+BAA+B,cAAc,aAAa,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACtI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,sCAAsC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACjG,CAAC;AAED,mEAAmE;AACnE,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,GAAG,GAAG,uBAAuB,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAE/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,IAAI,IAAI,IAAI,2BAA2B;gBAAE,MAAM;YAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;YAClC,sDAAsD;YACtD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;gBAC1C,IAAI,IAAI,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,IAAI,IAAI,uCAAuC;oBAAE,MAAM;gBAChE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;oBAAE,SAAS;gBAC5F,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACvD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe,gBAAgB,EAAE;IACpE,OAAO,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAC5C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,OAAe,gBAAgB,EAAE;IACpE,MAAM,IAAI,GAAG,qBAAqB,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACtF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,uBAAuB,EAAE,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAY,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAWD,SAAS,QAAQ,CAAC,KAA8B,EAAE,IAAuB;IACvE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;QAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,+BAA+B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;QACzC,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;IACpH,CAAC;IACD,MAAM,IAAI,iBAAiB,CACzB,eAAe,EACf,mHAAmH,CACpH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA8B,EAC9B,OAAe,gBAAgB,EAAE;IAEjC,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAEzC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,2BAA2B,EAAE,CAAC;oBACtG,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,WAAW,2BAA2B,+BAA+B,CAAC,CAAC;gBACxH,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YACnE,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,QAAQ;YACX,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC;YAC5C,MAAM;QACR,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,uCAAuC,EAAE,CAAC;oBACxF,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,WAAW,uCAAuC,iCAAiC,CAAC,CAAC;gBACtI,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC9B,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM;QACR,CAAC;IACH,CAAC;IAED,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7B,sFAAsF;IACtF,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAqB;QAC/B,OAAO,EAAE,CAAC;QACV,KAAK;QACL,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE;KAC3F,CAAC;IACF,sBAAsB,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAuB,EAAE,WAAmB;IAC3E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,KAAuB,EAAE,MAAc;IACrE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9C,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;AACjD,CAAC"}

package/dist/core/verse/project-memory.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Shared project memory — one private directory per project that EVERY seat
+ * working on that project reads (and, where the CLI can be granted a writable
+ * root, maintains):
+ *
+ *   <verse root>/memory/<basename-slug>-<sha256(realpath)[0:12]>/MEMORY.md
+ *   (default verse root: ~/.ashlr/verse — dir 0700, files 0600)
+ *
+ * WHY VERSE OWNS IT rather than each CLI's native memory: every seat runs in an
+ * isolated home (`native-profiles/<seat>/native-state`), so Claude's auto
+ * memory, Codex's `memories` and Grok's `memory/` are per ACCOUNT, and none of
+ * them crosses engines. A plain Markdown file in a directory Verse controls is
+ * the one surface all four engines can be pointed at, costs nothing (no
+ * background extraction model runs — those spend automatically), and stays
+ * OUTSIDE the repository, so nothing an agent writes here lands in a diff.
+ * (docs/VERSE-CONTEXT.md, research frontier-native-memory.)
+ *
+ * HOW A SESSION SEES IT: `prepareProjectMemory` returns `{dir, block,
+ * writable}`, which the API snapshots into the private launch record at
+ * creation. The adapters send the SAME `block` on every turn (claude/local:
+ * `--append-system-prompt`; codex/grok per their adapters) — byte-identical, so
+ * the provider's prompt cache survives turn after turn. The block carries the
+ * MEMORY.md of the moment the chat began; agents that can reach `dir` read the
+ * live file for anything newer.
+ *
+ * SAFETY
+ *  - The directory key is a hash of the canonical path, so two projects with
+ *    the same basename never share memory and a path cannot traverse out.
+ *  - MEMORY.md is read without following symlinks: an agent that replaced it
+ *    with a link to ~/.ssh/id_ed25519 would otherwise have that file echoed to
+ *    the UI and into every future system prompt.
+ *  - The block is `scrubSecrets`'d and capped at VERSE_MEMORY_BLOCK_MAX_BYTES.
+ *    The instructions tell agents never to store secrets; the scrub is the
+ *    backstop, not the policy.
+ *  - The block is ARGV-SAFE: C0/C1 control characters (NUL above all) are
+ *    stripped. The block rides on argv (`--append-system-prompt=…`,
+ *    `--rules=…`) and Node's spawn throws ERR_INVALID_ARG_VALUE for any argv
+ *    element containing NUL. Agents write MEMORY.md directly (not through
+ *    `writeProjectMemory`'s NUL check), and the block is pinned into the
+ *    launch record — so one stray NUL would otherwise make every new chat in
+ *    the project unable to start, permanently.
+ *
+ * Spends nothing and starts no process.
+ */
+import { VERSE_MEMORY_BLOCK_MAX_BYTES, type VerseProjectMemory } from './types.js';
+export declare const VERSE_MEMORY_DIRNAME = "memory";
+export declare const VERSE_MEMORY_FILE = "MEMORY.md";
+/** Hard cap on the system-prompt block, instructions included. */
+export { VERSE_MEMORY_BLOCK_MAX_BYTES };
+/** Marker appended where the snapshot in the block was cut. */
+export declare const VERSE_MEMORY_TRUNCATION_MARKER = "[\u2026 MEMORY.md continues \u2014 read the file for the rest]";
+/**
+ * The memory directory for a project. Pure path arithmetic (no I/O beyond the
+ * realpath canonicalisation); does not create anything.
+ *
+ * @param root the Verse store root (default `~/.ashlr/verse`), the same root
+ *             the session engine and preferences use.
+ */
+export declare function projectMemoryDir(projectPath: string, root?: string): string;
+/**
+ * Text made safe to pass as (part of) an argv element and to show as prose:
+ * CRLF → LF, then every control character except `\n` and `\t` removed.
+ * Exported so the engine can repair a snapshot pinned before this existed
+ * (a launch record carrying a NUL must be healed, not rejected — rejecting it
+ * would brick the session it belongs to).
+ */
+export declare function stripUnsafeControlChars(text: string): string;
+/**
+ * Deterministic: the same (dir, content, writable) always yields the same
+ * bytes, so a block snapshotted into a launch record keeps the prompt prefix
+ * cache-stable for the whole conversation.
+ */
+export declare function renderMemoryBlock(input: {
+    dir: string;
+    projectName: string;
+    content: string;
+    writable: boolean;
+}): string;
+/**
+ * Create the project's memory directory (0700) and render the block a new
+ * session will carry. Called once, at session creation; the result is pinned
+ * in the launch record (`VerseSeatLaunch.memory`).
+ *
+ * `writable` is the SEAT's capability, decided by the caller from the engine:
+ * claude/local (`--add-dir`) and codex (writable root) can write; grok, which
+ * reaches only its `--cwd`, cannot.
+ */
+export declare function prepareProjectMemory(projectPath: string, opts: {
+    writable: boolean;
+    root?: string;
+}): {
+    dir: string;
+    block: string;
+    writable: boolean;
+};
+/**
+ * The project's memory as the UI shows it. Never creates anything; a project
+ * with no memory yet reads as empty with `updatedAt: null`.
+ *
+ * `enabled` is passed in (the API resolves it from preferences) so this stays
+ * a pure read of the directory.
+ */
+export declare function readProjectMemory(projectPath: string, enabled: boolean, root?: string): VerseProjectMemory;
+/**
+ * Replace MEMORY.md with the operator's text (atomic, 0600). An empty string
+ * clears it. Rejects content over VERSE_MEMORY_MAX_BYTES (VERSE_TOO_LARGE)
+ * rather than truncating what the operator wrote, and NUL bytes (VERSE_INVALID).
+ *
+ * Allowed whether or not memory is enabled for the project — it is the
+ * operator's own file — and `enabled` in the result reports the preference.
+ */
+export declare function writeProjectMemory(projectPath: string, content: string, root?: string): VerseProjectMemory;