@cleocode/core 2026.4.9 → 2026.4.11

package/dist/store/data-accessor.js

@@ -0,0 +1,26 @@
+/**
+ * DataAccessor re-export + factory functions.
+ *
+ * The DataAccessor interface is defined in @cleocode/contracts.
+ * This module re-exports it and provides the concrete SQLite factory.
+ *
+ * @epic T4454
+ */
+/**
+ * Create a DataAccessor for the given working directory.
+ * Always creates a SQLite accessor (ADR-006 canonical storage).
+ *
+ * ALL accessors returned are safety-enabled by default via SafetyDataAccessor wrapper.
+ * Use CLEO_DISABLE_SAFETY=true to bypass (emergency only).
+ */
+export async function createDataAccessor(_engine, cwd) {
+    const { createSqliteDataAccessor } = await import('./sqlite-data-accessor.js');
+    const inner = await createSqliteDataAccessor(cwd);
+    const { wrapWithSafety } = await import('./safety-data-accessor.js');
+    return wrapWithSafety(inner, cwd);
+}
+/** Convenience: get a DataAccessor with auto-detected engine. */
+export async function getAccessor(cwd) {
+    return createDataAccessor(undefined, cwd);
+}
+//# sourceMappingURL=data-accessor.js.map

package/dist/store/data-accessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-accessor.js","sourceRoot":"","sources":["../../src/store/data-accessor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAkB,EAClB,GAAY;IAEZ,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAElD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACrE,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAY;IAEZ,OAAO,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC"}

package/dist/store/data-safety-central.js

@@ -0,0 +1,269 @@
+/**
+ * Centralized Data Safety Manager
+ *
+ * SINGLE POINT OF SAFETY for ALL CLEO data operations.
+ *
+ * Design Principles:
+ * - All data operations MUST flow through this layer
+ * - Zero-config safety: works automatically for all callers
+ * - Atomic operations: verify + checkpoint + log in single transaction
+ * - Recoverable: every operation leaves system in valid state
+ *
+ * This eliminates the need for wrapper functions and ensures safety
+ * at the architectural level, not as an afterthought.
+ *
+ * @task T4739
+ * @epic T4732
+ */
+import { getLogger } from '../logger.js';
+import { checkSequence, repairSequence } from '../sequence/index.js';
+import { gitCheckpoint } from './git-checkpoint.js';
+import { vacuumIntoBackup } from './sqlite-backup.js';
+const log = getLogger('data-safety');
+/** Safety violation error */
+export class DataSafetyError extends Error {
+    code;
+    context;
+    constructor(message, code, context) {
+        super(message);
+        this.code = code;
+        this.context = context;
+        this.name = 'DataSafetyError';
+    }
+}
+const DEFAULT_SAFETY = {
+    verify: true,
+    checkpoint: true,
+    validateSequence: true,
+    strict: true,
+};
+const stats = {
+    writes: 0,
+    verifications: 0,
+    checkpoints: 0,
+    errors: 0,
+    lastCheckpoint: null,
+};
+/** Get current safety statistics */
+export function getSafetyStats() {
+    return { ...stats };
+}
+/** Reset safety statistics (for testing) */
+export function resetSafetyStats() {
+    stats.writes = 0;
+    stats.verifications = 0;
+    stats.checkpoints = 0;
+    stats.errors = 0;
+    stats.lastCheckpoint = null;
+}
+/**
+ * Verify sequence integrity before write.
+ * Auto-repairs if sequence is behind database.
+ */
+async function ensureSequenceValid(cwd, options) {
+    if (!options?.validateSequence)
+        return;
+    const check = await checkSequence(cwd);
+    if (!check.valid) {
+        log.warn({ counter: check.counter, maxId: check.maxIdInData }, 'Sequence behind, repairing');
+        const repair = await repairSequence(cwd);
+        if (!repair.repaired && options.strict) {
+            throw new DataSafetyError(`Sequence repair failed: ${repair.message}`, 'SEQUENCE_INVALID', {
+                check,
+                repair,
+            });
+        }
+    }
+}
+/**
+ * Create a checkpoint after successful write.
+ * Non-blocking - failures are logged but don't fail the operation.
+ */
+async function checkpoint(context, cwd, options) {
+    if (!options?.checkpoint)
+        return;
+    try {
+        await gitCheckpoint('auto', context, cwd);
+        stats.checkpoints++;
+        stats.lastCheckpoint = new Date();
+    }
+    catch (err) {
+        // Checkpoint failures are non-fatal but logged
+        log.warn({ err }, 'Checkpoint failed (non-fatal)');
+    }
+    vacuumIntoBackup({ cwd }).catch(() => { }); // non-fatal SQLite snapshot
+}
+/**
+ * Verify sessions were written correctly.
+ */
+async function verifySessions(data, accessor, options) {
+    if (!options?.verify)
+        return;
+    stats.verifications++;
+    const readBack = await accessor.loadSessions();
+    if (readBack.length !== data.length) {
+        throw new DataSafetyError(`Sessions verification failed: count mismatch. Expected ${data.length}, got ${readBack.length}`, 'VERIFICATION_FAILED', { expected: data.length, actual: readBack.length });
+    }
+}
+/**
+ * Verify ArchiveFile was written correctly.
+ */
+async function verifyArchiveFile(data, accessor, options) {
+    if (!options?.verify)
+        return;
+    stats.verifications++;
+    const readBack = await accessor.loadArchive();
+    if (!readBack) {
+        throw new DataSafetyError('ArchiveFile verification failed: file not found after write', 'VERIFICATION_FAILED');
+    }
+    if (readBack.archivedTasks.length !== data.archivedTasks.length) {
+        throw new DataSafetyError(`ArchiveFile verification failed: count mismatch. Expected ${data.archivedTasks.length}, got ${readBack.archivedTasks.length}`, 'VERIFICATION_FAILED', { expected: data.archivedTasks.length, actual: readBack.archivedTasks.length });
+    }
+}
+/**
+ * Safe wrapper for DataAccessor.saveSessions()
+ */
+export async function safeSaveSessions(accessor, data, cwd, options) {
+    const opts = { ...DEFAULT_SAFETY, ...options };
+    await accessor.saveSessions(data);
+    stats.writes++;
+    await verifySessions(data, accessor, opts);
+    await checkpoint(`saved Sessions (${data.length} sessions)`, cwd, opts);
+}
+/**
+ * Safe wrapper for DataAccessor.saveArchive()
+ */
+export async function safeSaveArchive(accessor, data, cwd, options) {
+    const opts = { ...DEFAULT_SAFETY, ...options };
+    await accessor.saveArchive(data);
+    stats.writes++;
+    await verifyArchiveFile(data, accessor, opts);
+    await checkpoint(`saved Archive (${data.archivedTasks.length} tasks)`, cwd, opts);
+}
+/**
+ * Safe wrapper for single-task write operations (T5034).
+ *
+ * Performs:
+ * 1. Sequence validation
+ * 2. Write operation (caller-provided function)
+ * 3. Git checkpoint
+ *
+ * Verification is lightweight — no full-file read-back. The write
+ * itself is a targeted SQL operation that either succeeds or throws.
+ */
+export async function safeSingleTaskWrite(_accessor, taskId, writeFn, cwd, options) {
+    const opts = { ...DEFAULT_SAFETY, ...options };
+    // 1. Validate sequence
+    await ensureSequenceValid(cwd, opts);
+    // 2. Perform targeted write
+    await writeFn();
+    stats.writes++;
+    // 3. Checkpoint (lightweight — no full-file verify)
+    await checkpoint(`single-task ${taskId}`, cwd, opts);
+}
+/**
+ * Safe wrapper for DataAccessor.appendLog()
+ *
+ * Note: Log appends are fire-and-forget (no verification)
+ * but we still checkpoint to ensure data is committed.
+ */
+export async function safeAppendLog(accessor, entry, cwd, options) {
+    const opts = { ...DEFAULT_SAFETY, ...options, verify: false }; // Logs don't need verification
+    await accessor.appendLog(entry);
+    stats.writes++;
+    await checkpoint('log entry', cwd, opts);
+}
+/**
+ * Run comprehensive data integrity check.
+ * Validates all data files and sequence consistency.
+ */
+export async function runDataIntegrityCheck(accessor, cwd) {
+    const errors = [];
+    const warnings = [];
+    // 1. Check sequence
+    try {
+        const seqCheck = await checkSequence(cwd);
+        if (!seqCheck.valid) {
+            errors.push(`Sequence invalid: counter=${seqCheck.counter}, maxId=T${seqCheck.maxIdInData}`);
+            // Try to repair
+            const repair = await repairSequence(cwd);
+            if (repair.repaired) {
+                warnings.push(`Auto-repaired sequence: ${repair.oldCounter} -> ${repair.newCounter}`);
+            }
+            else {
+                errors.push('Sequence auto-repair failed');
+            }
+        }
+    }
+    catch (err) {
+        errors.push(`Sequence check failed: ${String(err)}`);
+    }
+    // 2. Verify task data can be queried
+    try {
+        const count = await accessor.countTasks();
+        if (count < 0) {
+            errors.push('Task count returned negative value');
+        }
+    }
+    catch (err) {
+        errors.push(`Task data query failed: ${String(err)}`);
+    }
+    try {
+        const sessions = await accessor.loadSessions();
+        if (!Array.isArray(sessions)) {
+            errors.push('Sessions data is not an array');
+        }
+    }
+    catch (err) {
+        errors.push(`Sessions load failed: ${String(err)}`);
+    }
+    // 3. Check for checkpoint recency
+    if (stats.lastCheckpoint) {
+        const minutesSinceCheckpoint = (Date.now() - stats.lastCheckpoint.getTime()) / 60000;
+        if (minutesSinceCheckpoint > 60) {
+            warnings.push(`Last checkpoint was ${Math.round(minutesSinceCheckpoint)} minutes ago`);
+        }
+    }
+    return {
+        passed: errors.length === 0,
+        errors,
+        warnings,
+        stats: getSafetyStats(),
+    };
+}
+/**
+ * Force immediate checkpoint.
+ * Use before destructive operations.
+ */
+export async function forceSafetyCheckpoint(context, cwd) {
+    log.info({ context }, 'Forcing checkpoint');
+    await gitCheckpoint('manual', context, cwd);
+    vacuumIntoBackup({ cwd, force: true }).catch(() => { }); // non-fatal SQLite snapshot
+}
+/**
+ * Disable all safety for current process.
+ * DANGEROUS - only use for recovery operations.
+ */
+export function disableSafety() {
+    log.warn('All safety checks disabled - emergency recovery mode');
+    // Set all safety options to false
+    Object.assign(DEFAULT_SAFETY, {
+        verify: false,
+        checkpoint: false,
+        validateSequence: false,
+        strict: false,
+    });
+}
+/**
+ * Re-enable safety after being disabled.
+ */
+export function enableSafety() {
+    log.info('Safety checks re-enabled');
+    Object.assign(DEFAULT_SAFETY, {
+        verify: true,
+        checkpoint: true,
+        validateSequence: true,
+        strict: true,
+    });
+}
+//# sourceMappingURL=data-safety-central.js.map

package/dist/store/data-safety-central.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-safety-central.js","sourceRoot":"","sources":["../../src/store/data-safety-central.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;AAErC,6BAA6B;AAC7B,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAG/B;IACA;IAHT,YACE,OAAe,EACR,IAA+E,EAC/E,OAAiC;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAA2E;QAC/E,YAAO,GAAP,OAAO,CAA0B;QAGxC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAcD,MAAM,cAAc,GAAkB;IACpC,MAAM,EAAE,IAAI;IACZ,UAAU,EAAE,IAAI;IAChB,gBAAgB,EAAE,IAAI;IACtB,MAAM,EAAE,IAAI;CACb,CAAC;AAWF,MAAM,KAAK,GAAgB;IACzB,MAAM,EAAE,CAAC;IACT,aAAa,EAAE,CAAC;IAChB,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,cAAc,EAAE,IAAI;CACrB,CAAC;AAEF,oCAAoC;AACpC,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,gBAAgB;IAC9B,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACjB,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC;IACxB,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;IACtB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACjB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,GAAY,EAAE,OAAuB;IACtE,IAAI,CAAC,OAAO,EAAE,gBAAgB;QAAE,OAAO;IAEvC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,eAAe,CAAC,2BAA2B,MAAM,CAAC,OAAO,EAAE,EAAE,kBAAkB,EAAE;gBACzF,KAAK;gBACL,MAAM;aACP,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,GAAY,EAAE,OAAuB;IAC9E,IAAI,CAAC,OAAO,EAAE,UAAU;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1C,KAAK,CAAC,WAAW,EAAE,CAAC;QACpB,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+CAA+C;QAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,4BAA4B;AACzE,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAe,EACf,QAAsB,EACtB,OAAuB;IAEvB,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO;IAE7B,KAAK,CAAC,aAAa,EAAE,CAAC;IAEtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACvB,0DAA0D,IAAI,CAAC,MAAM,SAAS,QAAQ,CAAC,MAAM,EAAE,EAC/F,qBAAqB,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAC9B,IAAiB,EACjB,QAAsB,EACtB,OAAuB;IAEvB,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO;IAE7B,KAAK,CAAC,aAAa,EAAE,CAAC;IAEtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,eAAe,CACvB,6DAA6D,EAC7D,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CACvB,6DAA6D,IAAI,CAAC,aAAa,CAAC,MAAM,SAAS,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,EAC9H,qBAAqB,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAsB,EACtB,IAAe,EACf,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/C,MAAM,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,CAAC,mBAAmB,IAAI,CAAC,MAAM,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAsB,EACtB,IAAiB,EACjB,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/C,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,UAAU,CAAC,kBAAkB,IAAI,CAAC,aAAa,CAAC,MAAM,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAuB,EACvB,MAAc,EACd,OAA4B,EAC5B,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/C,uBAAuB;IACvB,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAErC,4BAA4B;IAC5B,MAAM,OAAO,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,oDAAoD;IACpD,MAAM,UAAU,CAAC,eAAe,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAsB,EACtB,KAA8B,EAC9B,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,+BAA+B;IAE9F,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAsB,EACtB,GAAY;IAOZ,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,6BAA6B,QAAQ,CAAC,OAAO,YAAY,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAE7F,gBAAgB;YAChB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,kCAAkC;IAClC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,sBAAsB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC;QACrF,IAAI,sBAAsB,GAAG,EAAE,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3B,MAAM;QACN,QAAQ;QACR,KAAK,EAAE,cAAc,EAAE;KACxB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe,EAAE,GAAY;IACvE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC5C,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,4BAA4B;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,GAAG,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAEjE,kCAAkC;IAClC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE;QAC5B,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,KAAK;QACjB,gBAAgB,EAAE,KAAK;QACvB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAErC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE;QAC5B,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/store/data-safety.js

@@ -0,0 +1,274 @@
+/**
+ * Data Safety Module - Critical protection layer for CLEO data operations.
+ *
+ * Implements:
+ * - Write verification (verify data was actually persisted)
+ * - Collision detection (prevent duplicate task IDs)
+ * - Sequence validation (ensure sequence counter matches database)
+ * - Auto-checkpoint integration (git commit after writes)
+ *
+ * @task T4739
+ * @epic T4732
+ */
+import { eq } from 'drizzle-orm';
+import { getLogger } from '../logger.js';
+import { checkSequence, repairSequence } from '../sequence/index.js';
+import { gitCheckpoint } from './git-checkpoint.js';
+import { getDb } from './sqlite.js';
+import { vacuumIntoBackup } from './sqlite-backup.js';
+import * as schema from './tasks-schema.js';
+const log = getLogger('data-safety');
+const DEFAULT_CONFIG = {
+    verifyWrites: true,
+    detectCollisions: true,
+    validateSequence: true,
+    autoCheckpoint: true,
+    strictMode: true,
+};
+/** Safety violation error. */
+export class SafetyError extends Error {
+    code;
+    details;
+    constructor(message, code, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = 'SafetyError';
+    }
+}
+/**
+ * Check if a task ID already exists (collision detection).
+ * @throws SafetyError if task exists and strict mode is enabled
+ */
+export async function checkTaskExists(taskId, cwd, config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    if (!cfg.detectCollisions)
+        return false;
+    const db = await getDb(cwd);
+    const existing = await db.select().from(schema.tasks).where(eq(schema.tasks.id, taskId)).all();
+    const exists = existing.length > 0;
+    if (exists && cfg.strictMode) {
+        throw new SafetyError(`Task ID collision detected: ${taskId} already exists`, 'COLLISION_DETECTED', { taskId, existingTask: existing[0] });
+    }
+    return exists;
+}
+/**
+ * Verify a task was actually written to the database.
+ * @throws SafetyError if verification fails
+ */
+export async function verifyTaskWrite(taskId, expectedData, cwd, config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    if (!cfg.verifyWrites)
+        return true;
+    const db = await getDb(cwd);
+    const rows = await db.select().from(schema.tasks).where(eq(schema.tasks.id, taskId)).all();
+    if (rows.length === 0) {
+        if (cfg.strictMode) {
+            throw new SafetyError(`Write verification failed: Task ${taskId} not found after write`, 'WRITE_VERIFICATION_FAILED', { taskId });
+        }
+        return false;
+    }
+    // Verify expected data if provided
+    if (expectedData) {
+        const row = rows[0];
+        for (const [key, value] of Object.entries(expectedData)) {
+            if (value !== undefined && row[key] !== value) {
+                if (cfg.strictMode) {
+                    throw new SafetyError(`Write verification failed: Task ${taskId} field ${key} mismatch`, 'WRITE_VERIFICATION_MISMATCH', { taskId, field: key, expected: value, actual: row[key] });
+                }
+                return false;
+            }
+        }
+    }
+    return true;
+}
+/**
+ * Validate and repair sequence if necessary.
+ * @returns true if sequence was valid or successfully repaired
+ */
+export async function validateAndRepairSequence(cwd, config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    if (!cfg.validateSequence)
+        return { valid: true, repaired: false };
+    try {
+        const check = await checkSequence(cwd);
+        if (check.valid) {
+            return { valid: true, repaired: false };
+        }
+        // Sequence is behind, repair it
+        const repair = await repairSequence(cwd);
+        if (repair.repaired) {
+            log.warn({ oldCounter: repair.oldCounter, newCounter: repair.newCounter }, 'Sequence repaired');
+            return {
+                valid: true,
+                repaired: true,
+                oldCounter: repair.oldCounter,
+                newCounter: repair.newCounter,
+            };
+        }
+        // repairSequence returning repaired:false means "already valid, nothing to do"
+        return { valid: true, repaired: false };
+    }
+    catch (err) {
+        if (cfg.strictMode) {
+            throw new SafetyError(`Sequence validation failed: ${String(err)}`, 'SEQUENCE_VALIDATION_FAILED', { error: String(err) });
+        }
+        return { valid: false, repaired: false };
+    }
+}
+/**
+ * Trigger auto-checkpoint after successful write.
+ */
+export async function triggerCheckpoint(context, cwd, config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    if (!cfg.autoCheckpoint)
+        return;
+    try {
+        await gitCheckpoint('auto', context, cwd);
+    }
+    catch (err) {
+        // Checkpoint failures are non-fatal but should be logged
+        log.warn({ err }, 'Checkpoint failed (non-fatal)');
+    }
+    vacuumIntoBackup({ cwd }).catch(() => { }); // non-fatal SQLite snapshot
+}
+/**
+ * Safely create a task with all safety mechanisms.
+ * Wraps the actual createTask operation.
+ */
+export async function safeCreateTask(createFn, task, cwd, config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    // 1. Validate sequence before creation
+    if (cfg.validateSequence) {
+        await validateAndRepairSequence(cwd, config);
+    }
+    // 2. Check for collisions
+    if (cfg.detectCollisions) {
+        await checkTaskExists(task.id, cwd, config);
+    }
+    // 3. Perform the actual creation
+    const result = await createFn();
+    // 4. Trigger checkpoint
+    if (cfg.autoCheckpoint) {
+        await triggerCheckpoint(`created ${task.id}`, cwd, config);
+    }
+    return result;
+}
+/**
+ * Safely update a task with all safety mechanisms.
+ */
+export async function safeUpdateTask(updateFn, taskId, _updates, cwd, config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    // 1. Perform the actual update
+    const result = await updateFn();
+    if (!result)
+        return null;
+    // 2. Trigger checkpoint
+    if (cfg.autoCheckpoint) {
+        await triggerCheckpoint(`updated ${taskId}`, cwd, config);
+    }
+    return result;
+}
+/**
+ * Safely delete a task with all safety mechanisms.
+ */
+export async function safeDeleteTask(deleteFn, taskId, cwd, config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    // 1. Perform the actual deletion
+    const result = await deleteFn();
+    if (!result)
+        return false;
+    // 2. Trigger checkpoint
+    if (cfg.autoCheckpoint) {
+        await triggerCheckpoint(`deleted ${taskId}`, cwd, config);
+    }
+    return result;
+}
+/**
+ * Verify session write.
+ */
+export async function verifySessionWrite(sessionId, cwd, config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    if (!cfg.verifyWrites)
+        return true;
+    const db = await getDb(cwd);
+    const rows = await db
+        .select()
+        .from(schema.sessions)
+        .where(eq(schema.sessions.id, sessionId))
+        .all();
+    if (rows.length === 0) {
+        if (cfg.strictMode) {
+            throw new SafetyError(`Write verification failed: Session ${sessionId} not found after write`, 'SESSION_WRITE_VERIFICATION_FAILED', { sessionId });
+        }
+        return false;
+    }
+    return true;
+}
+/**
+ * Safely create a session with all safety mechanisms.
+ */
+export async function safeCreateSession(createFn, session, cwd, config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    // 1. Perform the actual creation
+    const result = await createFn();
+    // 2. Verify the write
+    if (cfg.verifyWrites) {
+        await verifySessionWrite(session.id, cwd, config);
+    }
+    // 3. Trigger checkpoint
+    if (cfg.autoCheckpoint) {
+        await triggerCheckpoint(`session ${session.id} started`, cwd, config);
+    }
+    return result;
+}
+/**
+ * Force a checkpoint before destructive operations.
+ * Use this before migrations, bulk updates, etc.
+ */
+export async function forceCheckpointBeforeOperation(operation, cwd) {
+    log.info({ operation }, 'Forcing checkpoint before operation');
+    try {
+        await gitCheckpoint('manual', `pre-${operation}`, cwd);
+    }
+    catch (err) {
+        log.error({ err }, 'Failed to create pre-operation checkpoint');
+        // Don't throw - checkpoint failures shouldn't block operations
+    }
+    vacuumIntoBackup({ cwd, force: true }).catch(() => { }); // non-fatal SQLite snapshot
+}
+/**
+ * Run comprehensive data integrity check.
+ * Reports all issues found.
+ */
+export async function runDataIntegrityCheck(cwd) {
+    const issues = [];
+    const repairs = [];
+    // 1. Check sequence
+    try {
+        const seqCheck = await checkSequence(cwd);
+        if (!seqCheck.valid) {
+            issues.push(`Sequence invalid: counter ${seqCheck.counter} < max ID T${seqCheck.maxIdInData}`);
+            // Auto-repair
+            const repair = await repairSequence(cwd);
+            if (repair.repaired) {
+                repairs.push(`Sequence repaired: ${repair.oldCounter} -> ${repair.newCounter}`);
+            }
+            else {
+                issues.push('Sequence repair failed');
+            }
+        }
+    }
+    catch (err) {
+        issues.push(`Sequence check failed: ${String(err)}`);
+    }
+    // 2. Check for ghost entries (would need to compare structured audit log with database)
+    // This is a complex check that would require loading the entire log
+    // For now, we skip this but document it as needed
+    return {
+        passed: issues.length === repairs.length,
+        issues,
+        repairs,
+    };
+}
+//# sourceMappingURL=data-safety.js.map

package/dist/store/data-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-safety.js","sourceRoot":"","sources":["../../src/store/data-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAE5C,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;AAgBrC,MAAM,cAAc,GAAiB;IACnC,YAAY,EAAE,IAAI;IAClB,gBAAgB,EAAE,IAAI;IACtB,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,8BAA8B;AAC9B,MAAM,OAAO,WAAY,SAAQ,KAAK;IAG3B;IACA;IAHT,YACE,OAAe,EACR,IAAY,EACZ,OAAiC;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAA0B;QAGxC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,GAAY,EACZ,SAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,IAAI,CAAC,GAAG,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAExC,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAE/F,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAEnC,IAAI,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,WAAW,CACnB,+BAA+B,MAAM,iBAAiB,EACtD,oBAAoB,EACpB,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CACtC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,YAA4B,EAC5B,GAAY,EACZ,SAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAE3F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,WAAW,CACnB,mCAAmC,MAAM,wBAAwB,EACjE,2BAA2B,EAC3B,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mCAAmC;IACnC,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACxD,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,GAAuB,CAAC,KAAK,KAAK,EAAE,CAAC;gBAClE,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;oBACnB,MAAM,IAAI,WAAW,CACnB,mCAAmC,MAAM,UAAU,GAAG,WAAW,EACjE,6BAA6B,EAC7B,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,GAAuB,CAAC,EAAE,CAC9E,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAY,EACZ,SAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,IAAI,CAAC,GAAG,CAAC,gBAAgB;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC1C,CAAC;QAED,gCAAgC;QAChC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CACN,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAChE,mBAAmB,CACpB,CAAC;YACF,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,WAAW,CACnB,+BAA+B,MAAM,CAAC,GAAG,CAAC,EAAE,EAC5C,4BAA4B,EAC5B,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CACvB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,GAAY,EACZ,SAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,IAAI,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO;IAEhC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,4BAA4B;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAA6B,EAC7B,IAAU,EACV,GAAY,EACZ,SAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,uCAAuC;IACvC,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,MAAM,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,0BAA0B;IAC1B,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,iCAAiC;IACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;IAEhC,wBAAwB;IACxB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,iBAAiB,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAoC,EACpC,MAAc,EACd,QAAuB,EACvB,GAAY,EACZ,SAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,+BAA+B;IAC/B,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,wBAAwB;IACxB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,iBAAiB,CAAC,WAAW,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgC,EAChC,MAAc,EACd,GAAY,EACZ,SAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,iCAAiC;IACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,wBAAwB;IACxB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,iBAAiB,CAAC,WAAW,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,GAAY,EACZ,SAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;SACrB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;SACxC,GAAG,EAAE,CAAC;IAET,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,WAAW,CACnB,sCAAsC,SAAS,wBAAwB,EACvE,mCAAmC,EACnC,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgC,EAChC,OAAgB,EAChB,GAAY,EACZ,SAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,iCAAiC;IACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;IAEhC,sBAAsB;IACtB,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QACrB,MAAM,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,wBAAwB;IACxB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,iBAAiB,CAAC,WAAW,OAAO,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,SAAiB,EACjB,GAAY;IAEZ,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,qCAAqC,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,2CAA2C,CAAC,CAAC;QAChE,+DAA+D;IACjE,CAAC;IAED,gBAAgB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,4BAA4B;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAY;IAKtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,6BAA6B,QAAQ,CAAC,OAAO,cAAc,QAAQ,CAAC,WAAW,EAAE,CAClF,CAAC;YAEF,cAAc;YACd,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAClF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,wFAAwF;IACxF,oEAAoE;IACpE,kDAAkD;IAElD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QACxC,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC"}