@cleocode/core 2026.9.26 → 2026.10.2

package/dist/cloud/manifest-check.js

@@ -1,9 +1,30 @@
+/*
+ * The checkpoint manifest rules of Cleo Nexus, mirrored from cleo-nexus
+ * `packages/shared/src/manifest-check.ts` (journal spec §2.11, T089, T090): the server runs them on
+ * every checkpoint create, and a client runs them to know what the server will accept before it
+ * writes anything. Keep the two copies identical in behaviour (T13034).
+ */
+/**
+ * 3 for a manifest with the §2.11 accounting fields (checkpoint/v3), else 2. The server's copy is in
+ * its wire contract; contracts export no runtime helpers here (arch gate 10), so it lives beside the
+ * rules.
+ *
+ * @param m - A checkpoint manifest.
+ * @returns The manifest format, which picks the checkpoint signing domain.
+ */
+export function manifestVersion(m) {
+    return m.replayPin !== undefined ? 3 : 2;
+}
 /** Sum the per-table deltas of every segment folded into a checkpoint. */
 export function sumDeltas(deltas) {
     const out = {};
     for (const d of deltas) {
         for (const [table, { created, deleted }] of Object.entries(d)) {
-            const prev = out[table] ?? { created: 0, deleted: 0 };
+            // Own keys only: a table named like an Object.prototype member must not read the prototype.
+            const prev = (Object.hasOwn(out, table) ? out[table] : undefined) ?? {
+                created: 0,
+                deleted: 0,
+            };
             out[table] = { created: prev.created + created, deleted: prev.deleted + deleted };
         }
     }
@@ -12,10 +33,10 @@ export function sumDeltas(deltas) {
 /**
  * Decide whether a new checkpoint manifest may replace its parent.
  *
- * The rule is exact, not a heuristic: for every table,
+ * The rule is exact, not a heuristic: for every table either side names,
  * `next.rows === parent.rows + created - deleted`, summed over the segments between the two
- * checkpoints. Every shrink therefore needs a tombstone op to back it. A table present in the
- * parent must still be present, even with 0 rows.
+ * checkpoints. Every shrink therefore needs a tombstone op to back it, and every new table's rows
+ * need declared creates. A table with rows in the parent must still be present, even with 0 rows.
  *
  * With no parent (genesis), only the schema version is checked.
  */
@@ -31,14 +52,22 @@ export function checkManifest(parent, next, between, maxAcceptedSchemaVersion) {
     if (parent === null)
         return { ok: true };
     const findings = [];
-    const tables = new Set([...Object.keys(parent.tables), ...Object.keys(between)]);
-    for (const table of tables) {
-        const parentRows = parent.tables[table]?.rows ?? 0;
-        const { created, deleted } = between[table] ?? { created: 0, deleted: 0 };
+    // Every table either side names: a new table with rows needs declared creates too.
+    const tables = new Set([
+        ...Object.keys(parent.tables),
+        ...Object.keys(between),
+        ...Object.keys(next.tables),
+    ]);
+    for (const table of [...tables].sort()) {
+        const parentRows = Object.hasOwn(parent.tables, table) ? (parent.tables[table]?.rows ?? 0) : 0;
+        const { created, deleted } = Object.hasOwn(between, table)
+            ? (between[table] ?? { created: 0, deleted: 0 })
+            : { created: 0, deleted: 0 };
         const expectedRows = parentRows + created - deleted;
-        const entry = next.tables[table];
+        const entry = Object.hasOwn(next.tables, table) ? next.tables[table] : undefined;
         if (entry === undefined) {
-            if (parentRows > 0 || expectedRows > 0) {
+            // Absent counts as 0 rows only when 0 is what the journal leaves (a negative expectation too).
+            if (parentRows > 0 || expectedRows !== 0) {
                 findings.push({
                     table,
                     parentRows,
@@ -67,4 +96,274 @@ export function checkManifest(parent, next, between, maxAcceptedSchemaVersion) {
         ? { ok: true }
         : { ok: false, code: 'E_REGRESSION', tables: findings };
 }
+/** A window built from all of its transactions (and segment schema versions), for small windows and tests. */
+export function windowOf(txns, schemaVersions = []) {
+    return { deltas: sumDeltas(txns.map((t) => t.deltas)), txns, schemaVersions };
+}
+/**
+ * The transition points of a replay pin (journal spec §2.11 §7): each seq at which the highest
+ * schemaVersion seen so far rises above everything before it, starting from `baseline` (the parent
+ * checkpoint's schemaVersion).
+ */
+export function schemaRises(baseline, schemaVersions) {
+    const out = [];
+    let max = baseline;
+    for (const s of schemaVersions) {
+        if (s.schemaVersion > max) {
+            out.push({ seq: s.seq, schemaVersion: s.schemaVersion });
+            max = s.schemaVersion;
+        }
+    }
+    return out;
+}
+/** The key of a transaction ref in maps. */
+export function txnRefKey(r) {
+    return `${r.replicaId}\u0000${r.replicaSeq}\u0000${r.txn}`;
+}
+const ZERO = { created: 0, deleted: 0 };
+const own = (d, t) => Object.hasOwn(d, t) ? (d[t] ?? ZERO) : ZERO;
+function addInto(into, d, sign = 1) {
+    for (const [t, c] of Object.entries(d)) {
+        const s = into.get(t) ?? ZERO;
+        into.set(t, { created: s.created + sign * c.created, deleted: s.deleted + sign * c.deleted });
+    }
+}
+/**
+ * Decide whether a v3 checkpoint manifest may replace its parent (journal spec §2.11 §4). Exact:
+ * no aggregate slack for pending and no age bound. With `A` = (window transactions ∪ the parent's
+ * pending) − the new pending, every table must hold
+ *
+ *   rows = parent.rows + Decl(A).created − Decl(A).deleted
+ *          − Σ voided.created + Σ voided.deleted
+ *          + Σ revived.created − Σ revived.deleted
+ *          − pruned
+ *
+ * and: pending ⊆ window ∪ parent.pending; every voided ref ∈ A with counts ≤ its declared counts;
+ * every revived ref in the stream's cumulative voided set with counts ≤ what is still voided there;
+ * 0 ≤ pruned ≤ parent.rows + Decl(A).created; the replay pin's transitions are exactly the window's
+ * schema rise points from the parent's schemaVersion, and the manifest's schemaVersion is at least the
+ * parent's and the last of those rises (T090), so the next window's baseline never sits below what
+ * the replay already reached. Decl(A) is computed from the window's sum, so
+ * only the named transactions need loading: Decl(window) + Decl(parent.pending) − Decl(pending).
+ * A v2 manifest is the v3 one with empty lists; a v2 segment is one transaction (txn 0) with the
+ * segment's deltas. Once a stream has a v3 checkpoint, a v2 one is refused (E_STREAM_VERSION): the
+ * lineage is linear, so checking the parent ratchets the whole stream.
+ *
+ * @param input.window - The window's deltas sum, its named transactions and its segment versions.
+ * @param input.parentPending - The declared deltas of the parent manifest's pending refs. Each of
+ *   them must be here (`pending-unresolved` otherwise).
+ * @param input.voidedBefore - The stream's cumulative voided set before this checkpoint: at least
+ *   the entries of every ref `next.revived` names.
+ */
+export function checkManifestV3(input) {
+    const { parent, next } = input;
+    const transitions = next.replayPin?.transitions ?? [];
+    const ahead = Math.max(next.schemaVersion, ...transitions.map((t) => t.schemaVersion));
+    if (ahead > input.maxAcceptedSchemaVersion) {
+        return {
+            ok: false,
+            code: 'E_SCHEMA_AHEAD',
+            schemaVersion: ahead,
+            maxAccepted: input.maxAcceptedSchemaVersion,
+        };
+    }
+    if (parent !== null && manifestVersion(parent) === 3 && manifestVersion(next) === 2) {
+        return {
+            ok: false,
+            code: 'E_STREAM_VERSION',
+            reason: 'stream-v3',
+            parentVersion: 3,
+            nextVersion: 2,
+        };
+    }
+    const pending = next.pending ?? [];
+    const voided = next.voided ?? [];
+    const revived = next.revived ?? [];
+    const pruned = next.pruned ?? {};
+    const findings = [];
+    for (const [list, refs] of [
+        ['pending', pending],
+        ['voided', voided.map((v) => v.ref)],
+        ['revived', revived.map((v) => v.ref)],
+    ]) {
+        const seen = new Set();
+        for (const ref of refs) {
+            const k = txnRefKey(ref);
+            if (seen.has(k))
+                findings.push({ reason: 'duplicate-ref', list, ref });
+            seen.add(k);
+        }
+    }
+    if (parent === null) {
+        // Genesis snapshots the store: there is no window to account for or replay.
+        const empty = pending.length === 0 &&
+            voided.length === 0 &&
+            revived.length === 0 &&
+            Object.keys(pruned).length === 0 &&
+            transitions.length === 0;
+        if (!empty)
+            findings.push({ reason: 'genesis-not-empty' });
+        return findings.length > 0
+            ? { ok: false, code: 'E_MANIFEST_ACCOUNTING', findings }
+            : { ok: true };
+    }
+    const parentPending = new Map(input.parentPending.map((t) => [txnRefKey(t.ref), t]));
+    for (const ref of parent.pending ?? []) {
+        if (!parentPending.has(txnRefKey(ref)))
+            findings.push({ reason: 'pending-unresolved', ref });
+    }
+    const candidates = new Map();
+    for (const t of input.window.txns)
+        candidates.set(txnRefKey(t.ref), t);
+    for (const [k, t] of parentPending)
+        candidates.set(k, t);
+    const pendingKeys = new Set(pending.map(txnRefKey));
+    // Decl(A) = Decl(window) + Decl(parent.pending) − Decl(pending), without expanding the window.
+    const declA = new Map();
+    addInto(declA, input.window.deltas);
+    for (const t of parentPending.values())
+        addInto(declA, t.deltas);
+    for (const ref of pending) {
+        const t = candidates.get(txnRefKey(ref));
+        if (!t)
+            findings.push({ reason: 'pending-not-in-window', ref });
+        else
+            addInto(declA, t.deltas, -1);
+    }
+    const appliedByKey = new Map([...candidates].filter(([k]) => !pendingKeys.has(k)));
+    for (const v of voided) {
+        const declared = appliedByKey.get(txnRefKey(v.ref));
+        if (!declared) {
+            findings.push({ reason: 'voided-not-applied', ref: v.ref });
+            continue;
+        }
+        for (const [table, c] of Object.entries(v.deltas)) {
+            const d = own(declared.deltas, table);
+            if (c.created > d.created || c.deleted > d.deleted) {
+                findings.push({ reason: 'voided-exceeds-declared', ref: v.ref, table });
+            }
+        }
+    }
+    const before = new Map(input.voidedBefore.map((t) => [txnRefKey(t.ref), t]));
+    for (const r of revived) {
+        const still = before.get(txnRefKey(r.ref));
+        if (!still) {
+            findings.push({ reason: 'revived-not-voided', ref: r.ref });
+            continue;
+        }
+        for (const [table, c] of Object.entries(r.deltas)) {
+            const d = own(still.deltas, table);
+            if (c.created > d.created || c.deleted > d.deleted) {
+                findings.push({ reason: 'revived-exceeds-voided', ref: r.ref, table });
+            }
+        }
+    }
+    for (const [table, n] of Object.entries(pruned)) {
+        const parentRows = Object.hasOwn(parent.tables, table) ? (parent.tables[table]?.rows ?? 0) : 0;
+        const max = parentRows + (declA.get(table)?.created ?? 0);
+        if (n < 0 || n > max)
+            findings.push({ reason: 'pruned-out-of-range', table, pruned: n, max });
+    }
+    if (next.replayPin !== undefined) {
+        const expected = schemaRises(parent.schemaVersion, input.window.schemaVersions);
+        const actual = transitions.map((t) => ({ seq: t.seq, schemaVersion: t.schemaVersion }));
+        const same = expected.length === actual.length &&
+            expected.every((e, i) => e.seq === actual[i]?.seq && e.schemaVersion === actual[i]?.schemaVersion);
+        if (!same)
+            findings.push({ reason: 'transitions-mismatch', expected, actual });
+        // T090: the next window's baseline is this manifest's schemaVersion, so it may not sit below the
+        // parent's or the window's last rise; the server would then expect rises the replay already did.
+        const floor = Math.max(parent.schemaVersion, ...expected.map((e) => e.schemaVersion));
+        if (next.schemaVersion < floor) {
+            findings.push({
+                reason: 'schema-version-below-floor',
+                schemaVersion: next.schemaVersion,
+                floor,
+            });
+        }
+    }
+    if (findings.length > 0)
+        return { ok: false, code: 'E_MANIFEST_ACCOUNTING', findings };
+    // The exact row rule, per table.
+    const adjust = new Map();
+    const bump = (t, n) => adjust.set(t, (adjust.get(t) ?? 0) + n);
+    for (const v of voided)
+        for (const [t, c] of Object.entries(v.deltas))
+            bump(t, c.deleted - c.created);
+    for (const r of revived)
+        for (const [t, c] of Object.entries(r.deltas))
+            bump(t, c.created - c.deleted);
+    for (const [t, n] of Object.entries(pruned))
+        bump(t, -n);
+    const tables = new Set([
+        ...Object.keys(parent.tables),
+        ...declA.keys(),
+        ...adjust.keys(),
+        ...Object.keys(next.tables),
+    ]);
+    const regressions = [];
+    for (const table of [...tables].sort()) {
+        const parentRows = Object.hasOwn(parent.tables, table) ? (parent.tables[table]?.rows ?? 0) : 0;
+        const { created, deleted } = declA.get(table) ?? ZERO;
+        const expectedRows = parentRows + created - deleted + (adjust.get(table) ?? 0);
+        const entry = Object.hasOwn(next.tables, table) ? next.tables[table] : undefined;
+        if (entry === undefined) {
+            if (parentRows > 0 || expectedRows !== 0) {
+                regressions.push({
+                    table,
+                    parentRows,
+                    created,
+                    deleted,
+                    expectedRows,
+                    actualRows: 0,
+                    reason: 'missing-table',
+                });
+            }
+            continue;
+        }
+        if (entry.rows !== expectedRows) {
+            regressions.push({
+                table,
+                parentRows,
+                created,
+                deleted,
+                expectedRows,
+                actualRows: entry.rows,
+                reason: 'count-mismatch',
+            });
+        }
+    }
+    return regressions.length === 0
+        ? { ok: true }
+        : { ok: false, code: 'E_REGRESSION', tables: regressions };
+}
+/**
+ * The stream's cumulative voided set after an accepted checkpoint: the set before it, plus this
+ * window's `voided`, minus its `revived`, per ref and table; refs left with nothing are dropped.
+ */
+export function nextVoidedSet(before, voided, revived) {
+    const out = new Map();
+    const apply = (list, sign) => {
+        for (const t of list) {
+            const k = txnRefKey(t.ref);
+            const e = out.get(k) ?? { ref: t.ref, counts: new Map() };
+            addInto(e.counts, t.deltas, sign);
+            out.set(k, e);
+        }
+    };
+    apply(before, 1);
+    apply(voided, 1);
+    apply(revived, -1);
+    const result = [];
+    for (const { ref, counts } of out.values()) {
+        const deltas = {};
+        for (const [t, c] of [...counts.entries()].sort(([a], [b]) => (a < b ? -1 : 1))) {
+            if (c.created > 0 || c.deleted > 0)
+                deltas[t] = { created: c.created, deleted: c.deleted };
+        }
+        if (Object.keys(deltas).length > 0)
+            result.push({ ref, deltas });
+    }
+    return result;
+}
 //# sourceMappingURL=manifest-check.js.map

package/dist/cloud/manifest-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-check.js","sourceRoot":"","sources":["../../src/cloud/manifest-check.ts"],"names":[],"mappings":"AAiBA,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,MAA8B;IACtD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAuB,EACvB,IAAc,EACd,OAAoB,EACpB,wBAAgC;IAEhC,IAAI,IAAI,CAAC,aAAa,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB;YACtB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,wBAAwB;SACtC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAEzC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;QACnD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,UAAU,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK;oBACL,UAAU;oBACV,OAAO;oBACP,OAAO;oBACP,YAAY;oBACZ,UAAU,EAAE,CAAC;oBACb,MAAM,EAAE,eAAe;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK;gBACL,UAAU;gBACV,OAAO;gBACP,OAAO;gBACP,YAAY;gBACZ,UAAU,EAAE,KAAK,CAAC,IAAI;gBACtB,MAAM,EAAE,gBAAgB;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"manifest-check.js","sourceRoot":"","sources":["../../src/cloud/manifest-check.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,CAAW;IACzC,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAmBD,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,MAA8B;IACtD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,4FAA4F;YAC5F,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI;gBACnE,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;aACX,CAAC;YACF,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAuB,EACvB,IAAc,EACd,OAAoB,EACpB,wBAAgC;IAEhC,IAAI,IAAI,CAAC,aAAa,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB;YACtB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,wBAAwB;SACtC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAEzC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,mFAAmF;IACnF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;QACrB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QACvB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;KAC5B,CAAC,CAAC;IACH,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;YACxD,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YAChD,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,+FAA+F;YAC/F,IAAI,UAAU,GAAG,CAAC,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;gBACzC,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK;oBACL,UAAU;oBACV,OAAO;oBACP,OAAO;oBACP,YAAY;oBACZ,UAAU,EAAE,CAAC;oBACb,MAAM,EAAE,eAAe;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK;gBACL,UAAU;gBACV,OAAO;gBACP,OAAO;gBACP,YAAY;gBACZ,UAAU,EAAE,KAAK,CAAC,IAAI;gBACtB,MAAM,EAAE,gBAAgB;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC5D,CAAC;AA+BD,8GAA8G;AAC9G,MAAM,UAAU,QAAQ,CACtB,IAA4B,EAC5B,iBAAwC,EAAE;IAE1C,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,cAAqC;IACjF,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YACzD,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAsBD,4CAA4C;AAC5C,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,OAAO,GAAG,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,UAAU,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC;AAC7D,CAAC;AAGD,MAAM,IAAI,GAAW,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAChD,MAAM,GAAG,GAAG,CAAC,CAAc,EAAE,CAAS,EAAU,EAAE,CAChD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAwB,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAEtE,SAAS,OAAO,CAAC,IAAyB,EAAE,CAAc,EAAE,IAAI,GAAG,CAAC;IAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,eAAe,CAAC,KAO/B;IACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACvF,IAAI,KAAK,GAAG,KAAK,CAAC,wBAAwB,EAAE,CAAC;QAC3C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB;YACtB,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,KAAK,CAAC,wBAAwB;SAC5C,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,WAAW;YACnB,aAAa,EAAE,CAAC;YAChB,WAAW,EAAE,CAAC;SACf,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI;QACzB,CAAC,SAAS,EAAE,OAAO,CAAC;QACpB,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;KAC9B,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,4EAA4E;QAC5E,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAChC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC;YACxB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE;YACxD,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IAC9F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI;QAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,aAAa;QAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,+FAA+F;IAC/F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;;YAC3D,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACxF,MAAM,IAAI,GACR,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YACjC,QAAQ,CAAC,KAAK,CACZ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,CACnF,CAAC;QACJ,IAAI,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,iGAAiG;QACjG,iGAAiG;QACjG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACtF,IAAI,IAAI,CAAC,aAAa,GAAG,KAAK,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,4BAA4B;gBACpC,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC;IAEvF,iCAAiC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,MAAM;QACpB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,OAAO;QACrB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;QACrB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,GAAG,KAAK,CAAC,IAAI,EAAE;QACf,GAAG,MAAM,CAAC,IAAI,EAAE;QAChB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;KAC5B,CAAC,CAAC;IACH,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QACtD,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,UAAU,GAAG,CAAC,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;gBACzC,WAAW,CAAC,IAAI,CAAC;oBACf,KAAK;oBACL,UAAU;oBACV,OAAO;oBACP,OAAO;oBACP,YAAY;oBACZ,UAAU,EAAE,CAAC;oBACb,MAAM,EAAE,eAAe;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,WAAW,CAAC,IAAI,CAAC;gBACf,KAAK;gBACL,UAAU;gBACV,OAAO;gBACP,OAAO;gBACP,YAAY;gBACZ,UAAU,EAAE,KAAK,CAAC,IAAI;gBACtB,MAAM,EAAE,gBAAgB;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,KAAK,CAAC;QAC7B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,MAA8B,EAC9B,MAA8B,EAC9B,OAA+B;IAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwD,CAAC;IAC5E,MAAM,KAAK,GAAG,CAAC,IAA4B,EAAE,IAAY,EAAE,EAAE;QAC3D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAG,EAAkB,EAAE,CAAC;YAC1E,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;gBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7F,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cloud/nexus-attach.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Attach this machine's copy of a project to Cleo Nexus and report its
+ * presence: steps 3 to 5 of `cleo project link` with a device credential
+ * (cleo-nexus device contract §3.6, §3.7).
+ *
+ * 1. `ensureProjectReplica` binds the canonical project store to a replica
+ *    once (no `sync.*` flag is set, so capture, push and pull stay off) and
+ *    returns its id.
+ * 2. `POST /v1/projects/:projectId/replicas {deviceId, replicaId}` pins that
+ *    replica to this Nexus device. The pin never moves: a 409 `replica-copied`
+ *    whose holder is a revoked device of the same user means this machine was
+ *    re-enrolled, so the store rebinds (`device-reenrolled`) and the new id is
+ *    attached; any other holder is a genuinely copied store and fails with
+ *    `E_NEXUS_REPLICA_COPIED`.
+ * 3. `PUT /v1/projects/:projectId/replicas/:replicaId/presence` sends the
+ *    path-free presence ({@link toReplicaPresence}) built from a local git
+ *    probe. A presence failure is a warning: the attach already stands.
+ *
+ * Nothing here sends a path, a hostname or a secret.
+ *
+ * @task T12905
+ * @epic T12323
+ */
+import type { NexusReplicaAttachment } from '@cleocode/contracts';
+import { type FetchLike } from './http.js';
+/** Timeout of each attach or presence call. */
+export declare const NEXUS_ATTACH_TIMEOUT_MS = 15000;
+/** The store binding the attach needs: bind once, and rebind on a re-enrolled device. */
+export interface ProjectReplicaBinder {
+    /** Bind the store if it is unbound; return the active replica id. */
+    ensure(): Promise<{
+        replicaId: string;
+        reboundFrom?: string;
+    }>;
+    /** Retire the active replica and mint a new id (contract §3.7, R6). */
+    rebindReenrolled(): Promise<{
+        replicaId: string;
+        previousReplicaId: string;
+    }>;
+}
+/** Options for {@link attachProjectReplica}. */
+export interface AttachProjectReplicaOptions {
+    /** Resolved API origin. */
+    apiUrl: string;
+    /** The device credential's bearer token (never logged). */
+    bearer: string;
+    /** This machine's Nexus device id. */
+    deviceId: string;
+    /** The server's project id. */
+    projectId: string;
+    /** Project root, for the local git probe only (never sent). */
+    projectRoot: string;
+    /** CLEO version reported in presence. */
+    cliVersion: string;
+    /** Store binding; defaults to the canonical project store ({@link canonicalReplicaBinder}). */
+    binder?: ProjectReplicaBinder;
+    /** `fetch` override. */
+    fetch?: FetchLike;
+    /** Clock, for the presence observation time when git cannot be probed. */
+    now?: () => Date;
+    /** Per-call timeout; default {@link NEXUS_ATTACH_TIMEOUT_MS}. */
+    timeoutMs?: number;
+    /**
+     * `cleo project link --rebind`: retire the store's replica and mint a new id
+     * before attaching. The remedy when the old id is held by another device:
+     * this machine's revoked device after a re-enrolment (when the server cannot
+     * say so itself), or the original of a copied store.
+     */
+    rebind?: boolean;
+}
+/**
+ * The binder over the canonical project store: opens it through the
+ * dual-scope chokepoint (never a raw file) and binds in live mode.
+ *
+ * @param projectRoot - Project root whose `.cleo/cleo.db` holds the replica.
+ * @returns A binder for {@link attachProjectReplica}.
+ */
+export declare function canonicalReplicaBinder(projectRoot: string): ProjectReplicaBinder;
+/**
+ * The binder over the global store (`<cleoHome>/cleo.db`): binds its
+ * global-scope replica, the one the account's `home:` stream knows this
+ * device's main brain by (T12952).
+ *
+ * @returns A binder for {@link attachHomeReplica}.
+ */
+export declare function canonicalGlobalReplicaBinder(): ProjectReplicaBinder;
+/**
+ * Attach the project store's replica to this Nexus device and report its
+ * presence (contract §3.6 steps 3 to 5). Idempotent: a repeat attaches the
+ * same replica id (200) and re-sends presence.
+ *
+ * @param opts - Origin, credential, ids, project root and test overrides.
+ * @returns The attachment and any warnings (a failed presence report).
+ * @throws {NexusAccountError} `E_NEXUS_REPLICA_COPIED` when another live
+ *   device or another user holds this replica id; an API error from the
+ *   attach otherwise (mapped by the caller).
+ */
+export declare function attachProjectReplica(opts: AttachProjectReplicaOptions): Promise<{
+    replica: NexusReplicaAttachment;
+    warnings: string[];
+}>;
+/** Options for {@link attachHomeReplica}. */
+export interface AttachHomeReplicaOptions extends Omit<AttachProjectReplicaOptions, 'projectId' | 'projectRoot'> {
+}
+/**
+ * Attach this device's global store (the main brain) to the account's
+ * `home:` stream and report its presence (T12952; cleo-nexus T084): the
+ * same rules as {@link attachProjectReplica}, on `/v1/account/home/replicas`.
+ * Presence carries no git block (the global store is not a repository).
+ *
+ * @param opts - Origin, credential, ids and test overrides.
+ * @returns The attachment and any warnings.
+ * @throws {NexusAccountError} `E_NEXUS_REPLICA_COPIED`, or an API error.
+ */
+export declare function attachHomeReplica(opts: AttachHomeReplicaOptions): Promise<{
+    replica: NexusReplicaAttachment;
+    warnings: string[];
+}>;
+//# sourceMappingURL=nexus-attach.d.ts.map

package/dist/cloud/nexus-attach.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nexus-attach.d.ts","sourceRoot":"","sources":["../../src/cloud/nexus-attach.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAsB,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAItF,OAAO,EAAE,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AAI7D,+CAA+C;AAC/C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,yFAAyF;AACzF,MAAM,WAAW,oBAAoB;IACnC,qEAAqE;IACrE,MAAM,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,uEAAuE;IACvE,gBAAgB,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED,gDAAgD;AAChD,MAAM,WAAW,2BAA2B;IAC1C,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,wBAAwB;IACxB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAKD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CAkBhF;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,IAAI,oBAAoB,CAkBnE;AAmED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC;IAAE,OAAO,EAAE,sBAAsB,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAYlE;AAED,6CAA6C;AAC7C,MAAM,WAAW,wBACf,SAAQ,IAAI,CAAC,2BAA2B,EAAE,WAAW,GAAG,aAAa,CAAC;CAAG;AAE3E;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC;IAAE,OAAO,EAAE,sBAAsB,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAmClE"}