@cleocode/core 2026.8.1 → 2026.8.3

package/dist/store/ports/domain-binding.js

@@ -0,0 +1,500 @@
+/**
+ * Path-keyed domain binding registry — the single owner of every per-domain
+ * Drizzle wrapper in the CLEO runtime.
+ *
+ * ## Why this module exists (E6-L13 · T12037)
+ *
+ * Before this leaf, each store facade (`sqlite.ts`, `memory-sqlite.ts`,
+ * `conduit-sqlite.ts`, `nexus-sqlite.ts`, `skills-db.ts`) owned its OWN
+ * process-global singleton quartet:
+ *
+ * ```ts
+ * let _db: NodeSQLiteDatabase | null = null;
+ * let _nativeDb: DatabaseSync | null = null;
+ * let _dbPath: string | null = null;
+ * let _initPromise: Promise<NodeSQLiteDatabase> | null = null;
+ * ```
+ *
+ * Five independent caches over ONE shared `DatabaseSync` produced a documented
+ * class of defects:
+ *
+ * - **Last-project-wins** — `_dbPath` held a single project. Touching project B
+ *   reset the singleton, so an interleaved project-A query re-opened and
+ *   re-migrated on every alternation (thrash, not just slowness).
+ * - **Cross-domain staleness** — the tasks singleton could reference a
+ *   `DatabaseSync` that the brain domain had already closed (T12019/T12020),
+ *   surfacing as `database is not open` or, worse, a silently-nulled
+ *   `sourceSessionId`.
+ * - **Band-aid retry loops** — both `getDb` and `getBrainDb` grew bounded
+ *   re-acquisition loops (T12035) purely to paper over the above.
+ *
+ * This module replaces all five with ONE registry keyed by
+ * `${scope}::${canonical dbPath}::${domain}`, layered on the
+ * {@link CleoRuntime} store registry (T12036). A binding is valid only while
+ * the {@link ProjectStore} / {@link GlobalStore} instance it was established
+ * against is still the one the runtime hands out AND its native handle is
+ * open. Any eviction — a `close()`, a `_resetDualScopeDbCache`, an external
+ * teardown — yields a fresh store object, which invalidates every binding
+ * derived from it by identity comparison. No liveness polling, no retry loop,
+ * no "last opened project".
+ *
+ * ## What a domain owns after this leaf
+ *
+ * A domain owns its `establish` function — the schema reconciliation it must
+ * run against a native handle (legacy Drizzle wrapping, `runMigrations`,
+ * vec0 extension loading, seed rows). It no longer owns caching, path
+ * resolution, single-flight, or liveness. Those are this module's job.
+ *
+ * @packageDocumentation
+ * @task T12037 (E6-L13)
+ * @epic T11249 (E6)
+ * @saga T11242 (SG-DB-SUBSTRATE-V2)
+ */
+import { resolve } from 'node:path';
+import { createCleoRuntime, resolveDualScopeDbPath, } from '../dual-scope-db.js';
+/**
+ * The process-wide {@link CleoRuntime} instance backing every domain port.
+ *
+ * A single runtime is correct here: the runtime registry is itself path-keyed,
+ * so one instance serves every project the process touches. It is lazily
+ * constructed so importing this module has no side effects (a hard constraint
+ * — the Gate-13 chokepoint audit rejects import-time DB work).
+ */
+let _runtime = null;
+/**
+ * Get (or lazily create) the process-wide {@link CleoRuntime}.
+ *
+ * @returns The shared runtime store registry.
+ */
+export function getCleoRuntime() {
+    if (!_runtime) {
+        _runtime = createCleoRuntime();
+    }
+    return _runtime;
+}
+/**
+ * Tear down the process-wide runtime: close every registry entry and drop
+ * every domain binding. The next {@link getCleoRuntime} call builds a fresh
+ * registry.
+ *
+ * Used by full-teardown paths (`closeAllDatabases`) and by tests that need a
+ * pristine process state between cases.
+ */
+export function resetCleoRuntime() {
+    releaseAllDomainBindings();
+    if (_runtime) {
+        try {
+            _runtime.closeAll();
+        }
+        catch {
+            // Best-effort teardown — the registry is discarded either way.
+        }
+        _runtime = null;
+    }
+}
+/**
+ * Established bindings, keyed `${scope}::${canonical dbPath}::${domain}`.
+ * Type-erased; {@link bindProjectDomain} re-applies the caller's type at the
+ * boundary, which is sound because the key includes the domain id and each
+ * domain passes exactly one `establish` shape.
+ */
+const _bindings = new Map();
+/**
+ * In-flight `establish` calls, same keying as {@link _bindings}. Concurrent
+ * binders for one key share a single establishment (single-flight).
+ */
+const _inflight = new Map();
+/**
+ * Build the composite registry key for a domain binding.
+ *
+ * @param scope - The dual-scope discriminator.
+ * @param dbPath - Canonical (already `path.resolve`d) database path.
+ * @param domain - Stable domain id (e.g. `'tasks'`, `'brain'`).
+ */
+function bindingKey(scope, dbPath, domain) {
+    return `${scope}::${dbPath}::${domain}`;
+}
+/**
+ * Extract the underlying `DatabaseSync` from a store's Drizzle handle.
+ *
+ * Drizzle's `node:sqlite` driver exposes the native connection as `$client`.
+ * This is the ONLY place that reach-through happens — domains receive the
+ * already-extracted handle.
+ *
+ * @param store - The runtime store to unwrap.
+ * @returns The live native connection.
+ * @throws If the Drizzle handle exposes no `$client`.
+ */
+function nativeOf(store) {
+    const native = store.db.$client;
+    if (!native) {
+        throw new Error(`T12037: CleoRuntime store for ${store.scope}::${store.dbPath} exposed no $client — ` +
+            'cannot bind a domain schema to it.');
+    }
+    return native;
+}
+/**
+ * Reuse the cached binding for `key` if it is still valid.
+ *
+ * A binding is valid iff it was established against the SAME store instance
+ * the runtime just returned (identity, not path — a reopened store is a new
+ * object) and that store's native connection is still open.
+ *
+ * @param key - Composite registry key.
+ * @param store - The store the runtime returned for this open.
+ * @returns The still-valid row, or `undefined` if it must be re-established.
+ */
+function reuseValid(key, store) {
+    const row = _bindings.get(key);
+    if (!row)
+        return undefined;
+    if (row.store !== store || !store.isOpen || !row.native.isOpen) {
+        _bindings.delete(key);
+        return undefined;
+    }
+    return row;
+}
+/**
+ * Establish (or reuse) `domain`'s binding against a store, single-flighted.
+ *
+ * @param key - Composite registry key.
+ * @param store - The store to bind against.
+ * @param establish - Domain schema reconciliation.
+ */
+async function bindAgainst(key, store, establish) {
+    const cached = reuseValid(key, store);
+    if (cached)
+        return cached;
+    const pending = _inflight.get(key);
+    if (pending) {
+        const row = await pending;
+        // The in-flight establishment may have raced an eviction; re-validate.
+        if (row.store === store && row.native.isOpen)
+            return row;
+        return bindAgainst(key, store, establish);
+    }
+    const native = nativeOf(store);
+    const flight = (async () => {
+        const db = await establish(native, store);
+        const row = { store, native, db };
+        // Publish only if this store is still the live one for the key. A close
+        // that landed during `establish` must not resurrect a dead binding.
+        if (store.isOpen && native.isOpen) {
+            _bindings.set(key, row);
+        }
+        return row;
+    })();
+    _inflight.set(key, flight);
+    try {
+        return await flight;
+    }
+    finally {
+        if (_inflight.get(key) === flight) {
+            _inflight.delete(key);
+        }
+    }
+}
+/**
+ * Maximum consecutive attempts to obtain a binding over a LIVE connection.
+ *
+ * The shared consolidated `DatabaseSync` can be closed in the microtask gap
+ * between the runtime resolving a store and `establish` finishing against it
+ * (another domain's `closeDb()`, a `_resetDualScopeDbCache`, a fire-and-forget
+ * brain write crossing a test boundary). One reacquisition is enough: closing
+ * the dead store evicts it from BOTH the runtime registry and the dual-scope
+ * chokepoint cache, so the retry necessarily opens a fresh connection.
+ *
+ * Before this module each facade carried its own copy of this loop
+ * (T12020 · T12035). It lives here now — one implementation, every domain.
+ */
+const MAX_LIVENESS_ATTEMPTS = 2;
+/**
+ * Obtain a binding whose connection is guaranteed live, with bounded
+ * reacquisition.
+ *
+ * @param scope - Dual-scope discriminator, for the eviction filter.
+ * @param key - Composite registry key.
+ * @param dbPath - Canonical database path, for the eviction filter.
+ * @param openStore - Opens (or reuses) the store for this key.
+ * @param establish - Domain schema reconciliation.
+ * @returns A row whose `native` was open at publication.
+ * @throws When every attempt yielded a dead connection.
+ */
+async function bindLive(scope, key, dbPath, openStore, establish) {
+    let lastError;
+    for (let attempt = 0; attempt < MAX_LIVENESS_ATTEMPTS; attempt += 1) {
+        let store;
+        try {
+            store = await openStore();
+        }
+        catch (err) {
+            // The runtime's OWN bounded reacquisition can exhaust when a sibling
+            // keeps closing the shared handle across a microtask boundary (a
+            // fire-and-forget brain write crossing a test teardown is the usual
+            // culprit). That is transient, not terminal: drop our bindings for the
+            // path so the chokepoint cache is not holding a corpse, and take one
+            // more pass. A genuinely broken open fails again and rethrows.
+            lastError = err;
+            releaseDomainBindings({ scope, dbPath });
+            if (attempt + 1 >= MAX_LIVENESS_ATTEMPTS)
+                throw err;
+            continue;
+        }
+        try {
+            const row = await bindAgainst(key, store, establish);
+            if (row.store.isOpen && row.native.isOpen)
+                return row;
+        }
+        catch (err) {
+            // A connection closed mid-`establish` surfaces as "database is not
+            // open" from the migration/DDL path. Retry once against a fresh
+            // handle; a genuine schema error will fail again and rethrow below.
+            lastError = err;
+            if (store.isOpen)
+                throw err;
+        }
+        // Dead handle. Closing the store evicts the runtime entry AND the
+        // chokepoint cache entry, so the next attempt opens a fresh connection.
+        releaseDomainBindings({ scope, dbPath });
+        try {
+            store.close();
+        }
+        catch {
+            // Already closed — the eviction is what matters.
+        }
+    }
+    if (lastError !== undefined)
+        throw lastError;
+    throw new Error(`T12037: could not bind ${key} over a live connection after ` +
+        `${MAX_LIVENESS_ATTEMPTS} attempts — the consolidated handle was closed each time.`);
+}
+/**
+ * Bind a project-scope domain schema to the {@link ProjectStore} for `cwd`.
+ *
+ * This is the replacement for every `getXxxDb(cwd)` project-domain facade.
+ * The returned binding carries the store itself, so callers that need a
+ * cross-domain transaction hold an explicit handle rather than reaching for a
+ * process global.
+ *
+ * @typeParam TDb - The domain's Drizzle handle type.
+ * @param domain - Stable domain id; part of the registry key.
+ * @param cwd - Project working directory. Resolved to the canonical
+ *   `cleo.db` path and forwarded as `exodusCwd` so a port open arms the
+ *   exodus-on-open auto-migration exactly like the facade it replaces.
+ * @param establish - Reconcile the domain's schema against the native handle
+ *   and return the domain-typed Drizzle instance. Called once per
+ *   (path, domain, store instance); MUST be idempotent because a store
+ *   eviction re-runs it.
+ * @returns The live {@link DomainBinding}.
+ */
+export async function bindProjectDomain(domain, cwd, establish) {
+    const dbPath = resolve(resolveDualScopeDbPath('project', cwd));
+    const row = await bindLive('project', bindingKey('project', dbPath, domain), dbPath, () => getCleoRuntime().openProject(dbPath, { exodusCwd: cwd }), establish);
+    return row;
+}
+/**
+ * Bind a project-scope domain schema to an EXPLICIT database path.
+ *
+ * Used by domains whose legacy lifecycle API accepted an on-disk path (test
+ * fixtures, snapshot inspection). Never arms exodus-on-open — an explicit
+ * path must not auto-migrate a legacy fleet into a fixture.
+ *
+ * @typeParam TDb - The domain's Drizzle handle type.
+ * @param domain - Stable domain id.
+ * @param dbPath - Absolute path to a consolidated `cleo.db`.
+ * @param establish - See {@link bindProjectDomain}.
+ */
+export async function bindProjectDomainAtPath(domain, dbPath, establish) {
+    const normalized = resolve(dbPath);
+    const row = await bindLive('project', bindingKey('project', normalized, domain), normalized, () => getCleoRuntime().openProject(normalized), establish);
+    return row;
+}
+/**
+ * Bind a global-scope domain schema to the {@link GlobalStore}.
+ *
+ * This is the replacement for every `getXxxDb()` global-domain facade
+ * (nexus, skills, agents, telemetry).
+ *
+ * @typeParam TDb - The domain's Drizzle handle type.
+ * @param domain - Stable domain id; part of the registry key.
+ * @param establish - See {@link bindProjectDomain}.
+ * @param cwd - Optional cwd forwarded as `exodusCwd` for the global scope's
+ *   own legacy-fleet auto-migration.
+ */
+export async function bindGlobalDomain(domain, establish, cwd) {
+    const dbPath = resolve(resolveDualScopeDbPath('global'));
+    const row = await bindLive('global', bindingKey('global', dbPath, domain), dbPath, () => getCleoRuntime().openGlobal({ exodusCwd: cwd }), establish);
+    return row;
+}
+/**
+ * Bind a global-scope domain schema to an EXPLICIT database path.
+ *
+ * The path-aware sibling of {@link bindGlobalDomain}, for domains whose
+ * lifecycle API accepts an on-disk path — notably the skills registry's
+ * test-sandbox `{ path }` override. Never arms exodus-on-open.
+ *
+ * @typeParam TDb - The domain's Drizzle handle type.
+ * @param domain - Stable domain id.
+ * @param dbPath - Absolute path to a global-scope `cleo.db`.
+ * @param establish - See {@link bindProjectDomain}.
+ */
+export async function bindGlobalDomainAtPath(domain, dbPath, establish) {
+    const normalized = resolve(dbPath);
+    const row = await bindLive('global', bindingKey('global', normalized, domain), normalized, () => getCleoRuntime().openGlobalAt(normalized), establish);
+    return row;
+}
+/**
+ * Synchronously read an ALREADY-established binding at an EXPLICIT path.
+ *
+ * @typeParam TDb - The domain's Drizzle handle type.
+ * @param scope - Dual-scope discriminator.
+ * @param dbPath - Absolute database path.
+ * @param domain - Stable domain id.
+ */
+export function peekDomainAtPath(scope, dbPath, domain) {
+    const row = _bindings.get(bindingKey(scope, resolve(dbPath), domain));
+    if (!row?.native.isOpen)
+        return null;
+    return row;
+}
+/**
+ * Drop cached bindings.
+ *
+ * Dropping a binding does NOT close any connection — the runtime registry and
+ * the dual-scope chokepoint own connection lifecycle. This only forces the
+ * next bind to re-run the domain's `establish`.
+ *
+ * @param filter - Restrict the drop. Omit any field to match all values of it.
+ *   `{ scope: 'project' }` drops every project-domain binding;
+ *   `{ domain: 'brain' }` drops the brain binding for every project.
+ */
+export function releaseDomainBindings(filter) {
+    if (!filter) {
+        _bindings.clear();
+        return;
+    }
+    const wantPath = filter.dbPath === undefined ? undefined : resolve(filter.dbPath);
+    for (const key of [..._bindings.keys()]) {
+        const sep = key.indexOf('::');
+        const lastSep = key.lastIndexOf('::');
+        const scope = key.slice(0, sep);
+        const dbPath = key.slice(sep + 2, lastSep);
+        const domain = key.slice(lastSep + 2);
+        if (filter.scope !== undefined && scope !== filter.scope)
+            continue;
+        if (wantPath !== undefined && dbPath !== wantPath)
+            continue;
+        if (filter.domain !== undefined && domain !== filter.domain)
+            continue;
+        _bindings.delete(key);
+    }
+}
+/**
+ * Drop every cached binding in every scope. Equivalent to
+ * `releaseDomainBindings()` with no filter; named for call-site clarity in
+ * teardown paths.
+ */
+export function releaseAllDomainBindings() {
+    _bindings.clear();
+}
+/**
+ * Snapshot of currently-established binding keys.
+ *
+ * Read-only diagnostic surface for `cleo health` / architecture tests that
+ * assert a process holds exactly one binding per (path, domain).
+ */
+export function boundDomainKeys() {
+    return new Set(_bindings.keys());
+}
+/**
+ * Synchronously look up the native `DatabaseSync` of an ALREADY-established
+ * project-domain binding.
+ *
+ * This exists solely to keep the legacy synchronous native getters
+ * (`getNativeDb`, `getNativeTasksDb`, `getBrainNativeDb`) working while their
+ * call sites migrate to the async binding. Unlike the module-global they
+ * replace, this lookup is **path-keyed** — passing the caller's `cwd` returns
+ * that project's handle rather than "whichever project was opened last".
+ *
+ * Returns `null` when nothing is bound yet or the connection has since
+ * closed; callers must have awaited the domain's async binder first.
+ *
+ * @param domain - Stable domain id.
+ * @param cwd - Project working directory; resolved to the canonical path.
+ * @returns The live native connection, or `null`.
+ *
+ * @deprecated Read `.native` from the {@link DomainBinding} instead. Removed
+ *   when the last synchronous native getter is retired (T12040 · E6-L16).
+ */
+export function boundProjectNative(domain, cwd) {
+    return peekProjectDomain(domain, cwd)?.native ?? null;
+}
+/**
+ * Synchronously read an ALREADY-established project-domain binding without
+ * opening anything.
+ *
+ * Returns `null` when the domain is unbound for that project or its
+ * connection has closed. Unlike {@link bindProjectDomain} this never triggers
+ * an open, so it is safe on synchronous code paths (accessor predicates,
+ * health probes) that must not force a migration.
+ *
+ * @typeParam TDb - The domain's Drizzle handle type, as passed to
+ *   {@link bindProjectDomain}. Unchecked at runtime — the caller is
+ *   responsible for using the same type it bound with.
+ * @param domain - Stable domain id.
+ * @param cwd - Project working directory.
+ */
+export function peekProjectDomain(domain, cwd) {
+    const dbPath = resolve(resolveDualScopeDbPath('project', cwd));
+    const row = _bindings.get(bindingKey('project', dbPath, domain));
+    if (row?.native.isOpen)
+        return row;
+    // An EXPLICIT `cwd` is a precise request: if that project is not bound, say
+    // so. Never silently answer with a different project's connection — that is
+    // the cross-project hazard this cutover exists to remove.
+    if (cwd !== undefined)
+        return null;
+    // No `cwd` means "the project". Ambient resolution can still miss when the
+    // caller bound an EXPLICIT project root that differs from the ambient one
+    // (a test fixture, a tool operating on another checkout). Fall back ONLY
+    // when the answer is unambiguous — exactly one project bound for this
+    // domain. With two or more we return null, forcing the caller to pass a
+    // `cwd`, which is precisely the situation where it must.
+    const suffix = `::${domain}`;
+    let sole;
+    for (const [key, candidate] of _bindings) {
+        if (!key.startsWith('project::') || !key.endsWith(suffix))
+            continue;
+        if (!candidate.native.isOpen)
+            continue;
+        if (sole)
+            return null; // ambiguous — the caller must disambiguate
+        sole = candidate;
+    }
+    return sole ?? null;
+}
+/**
+ * Synchronous sibling of {@link peekProjectDomain} for the global scope.
+ *
+ * @typeParam TDb - The domain's Drizzle handle type.
+ * @param domain - Stable domain id.
+ */
+export function peekGlobalDomain(domain) {
+    const dbPath = resolve(resolveDualScopeDbPath('global'));
+    const row = _bindings.get(bindingKey('global', dbPath, domain));
+    if (!row || !row.native.isOpen)
+        return null;
+    return row;
+}
+/**
+ * Synchronous sibling of {@link boundProjectNative} for the global scope.
+ *
+ * @param domain - Stable domain id.
+ * @returns The live native connection, or `null`.
+ *
+ * @deprecated See {@link boundProjectNative}.
+ */
+export function boundGlobalNative(domain) {
+    return peekGlobalDomain(domain)?.native ?? null;
+}
+//# sourceMappingURL=domain-binding.js.map

package/dist/store/ports/domain-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-binding.js","sourceRoot":"","sources":["../../../src/store/ports/domain-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAEL,iBAAiB,EAGjB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;GAOG;AACH,IAAI,QAAQ,GAAuB,IAAI,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB;IAC9B,wBAAwB,EAAE,CAAC;IAC3B,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;AACH,CAAC;AAuBD;;;;;GAKG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEhD;;;GAGG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;AAEzD;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,KAA2B,EAAE,MAAc,EAAE,MAAc;IAC7E,OAAO,GAAG,KAAK,KAAK,MAAM,KAAK,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,QAAQ,CAAC,KAAiC;IACjD,MAAM,MAAM,GAAI,KAAK,CAAC,EAAiC,CAAC,OAAO,CAAC;IAChE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iCAAiC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,wBAAwB;YACnF,oCAAoC,CACvC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,KAAiC;IAChE,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/D,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,KAAiC,EACjC,SAAqE;IAErE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;QAC1B,uEAAuE;QACvE,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC;QACzD,OAAO,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,CAAC,KAAK,IAAyB,EAAE;QAC9C,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,KAAc,CAAC,CAAC;QACnD,MAAM,GAAG,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC9C,wEAAwE;QACxE,oEAAoE;QACpE,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,EAAE,CAAC;IAEL,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;YAClC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,QAAQ,CACrB,KAA2B,EAC3B,GAAW,EACX,MAAc,EACd,SAAoD,EACpD,SAAqE;IAErE,IAAI,SAAkB,CAAC;IAEvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,qBAAqB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACpE,IAAI,KAAiC,CAAC;QACtC,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,iEAAiE;YACjE,oEAAoE;YACpE,uEAAuE;YACvE,qEAAqE;YACrE,+DAA+D;YAC/D,SAAS,GAAG,GAAG,CAAC;YAChB,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,IAAI,OAAO,GAAG,CAAC,IAAI,qBAAqB;gBAAE,MAAM,GAAG,CAAC;YACpD,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YACrD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,gEAAgE;YAChE,oEAAoE;YACpE,SAAS,GAAG,GAAG,CAAC;YAChB,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,GAAG,CAAC;QAC9B,CAAC;QAED,kEAAkE;QAClE,wEAAwE;QACxE,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;IAED,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,SAAS,CAAC;IAC7C,MAAM,IAAI,KAAK,CACb,0BAA0B,GAAG,gCAAgC;QAC3D,GAAG,qBAAqB,2DAA2D,CACtF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,GAAuB,EACvB,SAA4E;IAE5E,MAAM,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,SAAS,EACT,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EACrC,MAAM,EACN,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAC9D,SAAS,CACV,CAAC;IACF,OAAO,GAAuC,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,MAAc,EACd,SAA4E;IAE5E,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,SAAS,EACT,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,EACzC,UAAU,EACV,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAC9C,SAAS,CACV,CAAC;IACF,OAAO,GAAuC,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,SAA2E,EAC3E,GAAY;IAEZ,MAAM,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,QAAQ,EACR,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EACpC,MAAM,EACN,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EACrD,SAAS,CACV,CAAC;IACF,OAAO,GAAsC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,MAAc,EACd,SAA2E;IAE3E,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,QAAQ,EACR,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,EACxC,UAAU,EACV,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAC/C,SAAS,CACV,CAAC;IACF,OAAO,GAAsC,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAA2B,EAC3B,MAAc,EACd,MAAc;IAEd,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,GAAqD,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAIrC;IACC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClF,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,SAAS;QACnE,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;YAAE,SAAS;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,SAAS;QACtE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,GAAY;IAC7D,OAAO,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,GAAY;IAEZ,MAAM,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,EAAE,MAAM,CAAC,MAAM;QAAE,OAAO,GAAuC,CAAC;IAEvE,4EAA4E;IAC5E,4EAA4E;IAC5E,0DAA0D;IAC1D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEnC,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,sEAAsE;IACtE,wEAAwE;IACxE,yDAAyD;IACzD,MAAM,MAAM,GAAG,KAAK,MAAM,EAAE,CAAC;IAC7B,IAAI,IAA4B,CAAC;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QACpE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS;QACvC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;QAClE,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,OAAQ,IAAqD,IAAI,IAAI,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAM,MAAc;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,GAAsC,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AAClD,CAAC"}

package/dist/store/ports/fk-integrity.d.ts

@@ -0,0 +1,155 @@
+/**
+ * Foreign-key integrity verification for the consolidated dual-scope
+ * `cleo.db` files.
+ *
+ * ## Why this exists (E6-L10 · T11530)
+ *
+ * The E6 cutover consolidated eight standalone databases into two files
+ * (project `cleo.db` and global `cleo.db`) and re-pointed every cross-domain
+ * foreign key at the PREFIXED consolidated tables. Two properties must hold
+ * afterwards and neither is self-evident:
+ *
+ * 1. **Referential integrity survived the move.** Exodus copies tables in
+ *    dependency order, but a partially-applied migration, a hand-edited row,
+ *    or a legacy DB restored from a pre-consolidation backup can leave an
+ *    orphan whose parent row never made the trip.
+ * 2. **The FKs point at the right tables.** SQLite resolves a `REFERENCES`
+ *    clause lazily, so an FK naming a table that no longer exists is not an
+ *    error at DDL time — it fails only when a write touches it. A schema that
+ *    still references the retired bare `tasks` table looks fine until
+ *    something inserts.
+ *
+ * `PRAGMA foreign_key_check` answers both: it walks every FK in the schema and
+ * returns one row per violation, including one whose `parent` names a table
+ * that does not exist. So a structural defect and a row-level orphan surface
+ * through the same path.
+ *
+ * The verification runs against the LIVE consolidated files, not a fixture —
+ * this is the check that proves a real installation is sound.
+ *
+ * @packageDocumentation
+ * @task T11530 (E6-L10)
+ * @epic T11249 (E6)
+ * @saga T11242 (SG-DB-SUBSTRATE-V2)
+ */
+import type { DatabaseSync } from 'node:sqlite';
+import type { DualScope } from '../dual-scope-db.js';
+/**
+ * One referential-integrity violation.
+ *
+ * Mirrors a `PRAGMA foreign_key_check` row, plus the scope it was found in so
+ * a combined project+global report stays attributable.
+ *
+ * @task T11530
+ */
+export interface ForeignKeyViolation {
+    /** Which consolidated `cleo.db` the violation was found in. */
+    readonly scope: DualScope;
+    /** The child table holding the orphan row. */
+    readonly table: string;
+    /**
+     * `rowid` of the orphan row, or `null` when the violation is structural
+     * (the referenced parent TABLE does not exist, so there is no single row).
+     */
+    readonly rowid: number | null;
+    /** The parent table the foreign key references. */
+    readonly parent: string;
+    /**
+     * Index of the failing foreign key within the child table's FK list, as
+     * reported by `PRAGMA foreign_key_list`. `-1` for structural violations.
+     */
+    readonly fkid: number;
+}
+/**
+ * Result of verifying one or both consolidated scopes.
+ *
+ * @task T11530
+ */
+export interface ForeignKeyIntegrityReport {
+    /** `true` when {@link violations} is empty. */
+    readonly ok: boolean;
+    /** The scopes actually checked. */
+    readonly scopes: readonly DualScope[];
+    /** Every violation found, in scope order. */
+    readonly violations: readonly ForeignKeyViolation[];
+}
+/**
+ * Run `PRAGMA foreign_key_check` against one open connection.
+ *
+ * @param native - An open consolidated `cleo.db` connection.
+ * @param scope - The scope label to attribute violations to.
+ * @returns Every violation the pragma reported.
+ */
+export declare function checkForeignKeys(native: DatabaseSync, scope: DualScope): readonly ForeignKeyViolation[];
+/**
+ * Verify foreign-key integrity across the consolidated dual-scope databases.
+ *
+ * Opens each requested scope through the ProjectStore/GlobalStore ports — the
+ * same chokepoint the runtime uses — so the check runs against exactly the
+ * connection (and therefore the schema and pragmas) production code sees.
+ *
+ * The `establish` callbacks are deliberately inert: this is a read-only probe
+ * and must not reconcile or migrate anything as a side effect of checking.
+ *
+ * @param options - Which scopes to check and which project.
+ * @returns A report; `ok` is `true` only when ZERO violations were found.
+ *
+ * @example
+ * ```ts
+ * const report = await verifyForeignKeyIntegrity({ cwd: projectRoot });
+ * if (!report.ok) {
+ *   for (const v of report.violations) {
+ *     console.error(`${v.scope}: ${v.table} row ${v.rowid} → missing ${v.parent}`);
+ *   }
+ * }
+ * ```
+ *
+ * @task T11530
+ */
+export declare function verifyForeignKeyIntegrity(options?: {
+    /** Project working directory. Defaults to the ambient project. */
+    readonly cwd?: string;
+    /** Scopes to check. Defaults to BOTH — the AC requires project AND global. */
+    readonly scopes?: readonly DualScope[];
+}): Promise<ForeignKeyIntegrityReport>;
+/**
+ * Outcome of a repair pass.
+ *
+ * @task T11530
+ */
+export interface ForeignKeyRepairReport {
+    /** Violations found before the repair ran. */
+    readonly found: readonly ForeignKeyViolation[];
+    /** Violations the repair deleted (parent FK declared `ON DELETE CASCADE`). */
+    readonly repaired: readonly ForeignKeyViolation[];
+    /**
+     * Violations left in place because the schema does NOT authorise deleting
+     * the child — the FK's `ON DELETE` is not `CASCADE`, so removing the row is
+     * a judgement call an operator must make.
+     */
+    readonly skipped: readonly ForeignKeyViolation[];
+    /** `true` when a re-check after the repair reported zero violations. */
+    readonly ok: boolean;
+}
+/**
+ * Delete orphan rows whose foreign key declares `ON DELETE CASCADE`.
+ *
+ * These rows are the residue of a parent deletion that happened while FK
+ * enforcement was off — most commonly a pre-consolidation legacy database that
+ * exodus then copied verbatim. The schema already says they should not exist;
+ * this restores that invariant.
+ *
+ * Rows whose FK is NOT `CASCADE` are reported in `skipped` and left untouched.
+ *
+ * @param options - Which scopes to repair and which project.
+ * @returns What was found, repaired, and deliberately skipped.
+ *
+ * @task T11530
+ */
+export declare function repairForeignKeyViolations(options?: {
+    /** Project working directory. Defaults to the ambient project. */
+    readonly cwd?: string;
+    /** Scopes to repair. Defaults to BOTH. */
+    readonly scopes?: readonly DualScope[];
+}): Promise<ForeignKeyRepairReport>;
+//# sourceMappingURL=fk-integrity.d.ts.map

package/dist/store/ports/fk-integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fk-integrity.d.ts","sourceRoot":"","sources":["../../../src/store/ports/fk-integrity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGrD;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC,6CAA6C;IAC7C,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACrD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,SAAS,GACf,SAAS,mBAAmB,EAAE,CA6BhC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,CAAC,EAAE;IACxD,kEAAkE;IAClE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;CACxC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAcrC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC/C,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,wEAAwE;IACxE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;CACtB;AA6BD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,CAAC,EAAE;IACzD,kEAAkE;IAClE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;CACxC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAuClC"}