@corenel/harness 0.10.0 → 0.11.0

package/dist/audit/log.js

@@ -0,0 +1,457 @@
+import { flattenFiles } from '@corenel/protocol';
+import { sha256Hex } from '../core/hash.js';
+import { newSpanId } from './ids.js';
+export const AUDIT_SEGMENT_LINES = 1000;
+export const AUDIT_RETENTION_DAYS = 180;
+export const AUDIT_GENESIS = 'sha256:genesis';
+const DAY = 86400000;
+const ZERO_TRACE = '0'.repeat(32);
+/** A writerId becomes part of file names, so it is limited to letters,
+ * digits and `_`: no `-` (names are split on it), no path characters. */
+const WRITER_ID = /^[A-Za-z0-9_]{1,64}$/;
+/** `audit-<host>` or `audit-<host>-<writerId>`: the name prefix of one file set. */
+function auditStem(host, writerId) {
+    if (writerId === undefined)
+        return `audit-${host}`;
+    if (!WRITER_ID.test(writerId))
+        throw new Error(`audit: invalid writerId ${JSON.stringify(writerId)}`);
+    return `audit-${host}-${writerId}`;
+}
+export function activeSegmentName(host, writerId) {
+    return `${auditStem(host, writerId)}.jsonl`;
+}
+/** The files of `host` that belong to a writer OTHER than `ownWriterId`: every
+ * `audit-<host>-<writerId>.jsonl` active segment and
+ * `audit-<host>-<writerId>-<yyyymmdd>-<n>.jsonl` archive whose writerId
+ * differs. Files without a writerId (the daemon's) and other hosts' files
+ * never match: a writerless archive `audit-<host>-<date>-<n>.jsonl` has no
+ * way to fit `<writerId>` (no `-`) followed by `.jsonl` or a full
+ * `-<8 digits>-<n>` suffix. `date` is set for an archive, absent for an active segment. */
+export function foreignWriterFiles(names, host, ownWriterId) {
+    const re = new RegExp(`^audit-${host}-([A-Za-z0-9_]{1,64})(?:-(\\d{8})-\\d+)?\\.jsonl$`);
+    const out = [];
+    for (const name of names) {
+        const m = re.exec(name);
+        if (!m || m[1] === ownWriterId)
+            continue;
+        out.push(m[2] ? { name, date: m[2] } : { name });
+    }
+    return out;
+}
+/** The archived segments of one file set (`host`, plus `writerId` when set)
+ * among `names` (basenames), oldest first by (date, n). Shared with the
+ * verifier so both walk the same order. Without a writerId only the host's
+ * own archives match: a writerId holds no `-` and a date is exactly 8 digits
+ * then `-`, so `audit-<host>-<writerId>-...` never parses as
+ * `audit-<host>-<date>-<n>`. */
+export function sortedAuditArchives(names, host, writerId) {
+    const re = new RegExp(`^${auditStem(host, writerId)}-(\\d{8})-(\\d+)\\.jsonl$`);
+    const out = [];
+    for (const name of names) {
+        const m = re.exec(name);
+        if (m)
+            out.push({ name, date: m[1], n: Number(m[2]) });
+    }
+    return out.sort((a, b) => (a.date === b.date ? a.n - b.n : a.date < b.date ? -1 : 1));
+}
+/** Basenames of every file under `root` (as decisionLog does, via flattenFiles). */
+export function auditFileNames(nodes) {
+    return flattenFiles(nodes).map((n) => n.path.split('/').pop() ?? '');
+}
+/** The non-empty lines of a segment's text, without their newlines. */
+export function segmentLines(text) {
+    return text.split('\n').filter((l) => l.length > 0);
+}
+export async function lineHash(line) {
+    return 'sha256:' + (await sha256Hex(line + '\n'));
+}
+/** Last retention run per file set (`root`+`host`+`writerId`): retention runs
+ * at most once a day per log, however many log instances a process creates. */
+const retentionRuns = new Map();
+/** Test-only: forget every retention run so each test starts independent. */
+export function __resetAuditRetentionForTest() {
+    retentionRuns.clear();
+}
+function parseLine(line) {
+    try {
+        const v = JSON.parse(line);
+        return v && typeof v === 'object' && !Array.isArray(v) ? v : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** `event` of the newest `kind: 'audit'` line in `lines`, or null. */
+function newestAuditEvent(lines) {
+    for (let i = lines.length - 1; i >= 0; i--) {
+        const v = parseLine(lines[i]);
+        if (v?.kind === 'audit' && typeof v.event === 'string')
+            return v.event;
+    }
+    return null;
+}
+/** Epoch ms of the newest line's `ts`, or NaN when it cannot be dated. */
+function newestTs(lines) {
+    return Date.parse(String(parseLine(lines[lines.length - 1] ?? '')?.ts ?? ''));
+}
+const utcDate = (ms) => new Date(ms).toISOString().slice(0, 10).replace(/-/g, '');
+async function readOrNull(fs, path) {
+    try {
+        return await fs.read(path);
+    }
+    catch {
+        return null;
+    }
+}
+export function createAuditLog(opts) {
+    const requested = opts.segmentLines ?? AUDIT_SEGMENT_LINES;
+    const maxLines = Number.isFinite(requested) ? Math.max(1, Math.floor(requested)) : AUDIT_SEGMENT_LINES;
+    const retentionDays = opts.retentionDays ?? AUDIT_RETENTION_DAYS;
+    const flushMs = opts.flushMs ?? 1000;
+    const flushAt = opts.flushAt ?? 50;
+    const now = opts.now ?? (() => Date.now());
+    const host = opts.host;
+    const writerId = opts.writerId;
+    const stem = auditStem(host, writerId);
+    const activeName = activeSegmentName(host, writerId);
+    const activePath = `${opts.root}/${activeName}`;
+    const retentionKey = `${opts.root}|${host}|${writerId ?? ''}`;
+    /** Resolve `enabled` live: a plain boolean is fixed, a callback is called
+     * fresh on every check (see AuditLogOptions.enabled). The ONE guarded read
+     * site for `opts.enabled` -- append(), flush() and writeBatch() all go
+     * through this, so a callback that throws can never escape as an unhandled
+     * exception (flush() would otherwise reject) or an unhandled rejection.
+     * Fails toward ENABLED: a broken settings read must not silently turn
+     * auditing off. */
+    const isEnabled = () => {
+        try {
+            return typeof opts.enabled === 'function' ? opts.enabled() : opts.enabled;
+        }
+        catch {
+            return true;
+        }
+    };
+    let queue = [];
+    let timer = null;
+    let chain = Promise.resolve();
+    /* Disk-confirmed state, loaded lazily and reloaded when another writer
+     * changed the active file. Only advanced after a write lands. */
+    let loaded = false;
+    /** The active file's exact bytes as last read or written; null = absent. */
+    let diskText = null;
+    /** What the next active write starts from: diskText with a torn tail
+     * newline-terminated and any prefix already archived dropped. */
+    let activeText = '';
+    let activeCount = 0;
+    let lastHash = AUDIT_GENESIS;
+    let lastAuditEvent = null;
+    let lostCount = 0;
+    let pendingGap = 0;
+    let gapSince = null;
+    const isoNow = () => new Date(now()).toISOString();
+    const pointLine = (extra) => ({
+        v: 1, ts: isoNow(), trace: ZERO_TRACE, span: newSpanId(), phase: 'point', host, kind: 'audit', ...extra,
+    });
+    async function listNames(fs) {
+        try {
+            return auditFileNames(await fs.list(opts.root));
+        }
+        catch {
+            return null;
+        }
+    }
+    /** Throws when the state cannot be known: guessing "empty" would restart
+     * the chain at genesis over data that is really there. */
+    async function ensureLoaded(fs) {
+        if (loaded)
+            return;
+        const names = await listNames(fs);
+        let disk;
+        try {
+            disk = await fs.read(activePath);
+        }
+        catch (e) {
+            // Absent only when the read fails AND a successful listing agrees.
+            if (names === null || names.includes(activeName))
+                throw e;
+            disk = null;
+        }
+        let text = disk ?? '';
+        // A torn tail stays as data (the verifier reports it) but is terminated,
+        // so the next line is never concatenated onto it.
+        if (text.length && !text.endsWith('\n'))
+            text += '\n';
+        let lines = segmentLines(text);
+        if (!lines.length && names === null)
+            throw new Error('audit: cannot list archives to find the last line');
+        const archives = sortedAuditArchives(names ?? [], host, writerId);
+        const newest = archives[archives.length - 1];
+        const archived = newest ? segmentLines(await fs.read(`${opts.root}/${newest.name}`)) : [];
+        // A rollover that archived these lines but died before rewriting the
+        // active file leaves them duplicated here: they are already archived.
+        if (lines.length && archived.length && lines[0] === archived[0]) {
+            let k = 0;
+            while (k < lines.length && k < archived.length && lines[k] === archived[k])
+                k++;
+            lines = lines.slice(k);
+            text = lines.map((l) => l + '\n').join('');
+        }
+        diskText = disk;
+        activeText = text;
+        activeCount = lines.length;
+        lastHash = lines.length
+            ? await lineHash(lines[lines.length - 1])
+            : archived.length ? await lineHash(archived[archived.length - 1]) : AUDIT_GENESIS;
+        lastAuditEvent = newestAuditEvent(lines) ?? newestAuditEvent(archived);
+        loaded = true;
+    }
+    /** Another writer changed the active file since we last touched it: reload
+     * so the pending lines chain onto the true last line. */
+    async function ensureFresh(fs) {
+        if ((await readOrNull(fs, activePath)) === diskText)
+            return;
+        loaded = false;
+        await ensureLoaded(fs);
+    }
+    /** Delete archives older than the window, judged by the UTC date in their
+     * name (the date of their newest line): before the cutoff day -> delete
+     * unread; after it -> keep unread; on it -> read the newest line. Never
+     * this log's own active segment, never by count; at most once a day per
+     * file set, checked on every flush so a long-lived log keeps pruning.
+     *
+     * A log WITH a writerId also sweeps the same host's other writers' files
+     * (foreignWriterFiles): a writerId lives only as long as its page, so a
+     * closed page would otherwise never be pruned. Their archives follow the
+     * same rule; their active segment goes only when its newest line is older
+     * than the cutoff -- one that cannot be read or dated is kept. Another
+     * host's files, and writerless files, are never touched. */
+    async function retention(fs) {
+        const t = now();
+        const last = retentionRuns.get(retentionKey);
+        if (last !== undefined && t - last < DAY)
+            return;
+        retentionRuns.set(retentionKey, t);
+        const cutoff = t - retentionDays * DAY;
+        const cutoffDate = utcDate(cutoff);
+        const names = await listNames(fs);
+        if (!names)
+            return;
+        const expired = [...sortedAuditArchives(names, host, writerId)];
+        if (writerId !== undefined)
+            expired.push(...foreignWriterFiles(names, host, writerId));
+        for (const f of expired) {
+            if (f.date !== undefined && f.date > cutoffDate)
+                continue;
+            const path = `${opts.root}/${f.name}`;
+            try {
+                if (f.date !== undefined && f.date < cutoffDate) {
+                    await fs.remove(path);
+                }
+                else {
+                    // On the cutoff day, or an active segment (no date in its name).
+                    const ts = newestTs(segmentLines(await fs.read(path)));
+                    if (Number.isFinite(ts) && ts < cutoff)
+                        await fs.remove(path);
+                }
+            }
+            catch {
+                /* best effort: one file's failure does not stop the rest, and a
+                 * file that cannot be read is kept */
+            }
+        }
+    }
+    /** Archive `text` under `<stem>-<date>-<n>.jsonl`: the UTC date of
+     * its newest line, n = 1 + the highest listed n for that date, bumped past
+     * any name that already exists (a listing may omit it) -- never overwrites. */
+    async function createArchive(fs, text) {
+        const ts = newestTs(segmentLines(text));
+        const date = utcDate(Number.isFinite(ts) ? ts : now());
+        let n = 0;
+        for (const a of sortedAuditArchives((await listNames(fs)) ?? [], host, writerId))
+            if (a.date === date)
+                n = Math.max(n, a.n);
+        for (;;) {
+            n += 1;
+            const path = `${opts.root}/${stem}-${date}-${n}.jsonl`;
+            try {
+                await fs.create(path, text);
+                return;
+            }
+            catch (e) {
+                // Taken -> try the next n; otherwise it is a real write failure.
+                if ((await readOrNull(fs, path)) === null)
+                    throw e;
+            }
+        }
+    }
+    async function writeActive(fs, text) {
+        if (diskText === null)
+            await fs.create(activePath, text);
+        else
+            await fs.write(activePath, text);
+        diskText = text;
+    }
+    /** Commit entries[from, to) as landed on disk. */
+    function landed(entries, from, to) {
+        for (let i = from; i < to; i++) {
+            const e = entries[i];
+            if (e.draft.kind === 'audit' && typeof e.draft.event === 'string')
+                lastAuditEvent = e.draft.event;
+            if (e.covers) {
+                pendingGap -= e.covers;
+                if (pendingGap <= 0) {
+                    pendingGap = 0;
+                    gapSince = null;
+                }
+            }
+        }
+    }
+    /** Write entries[progress.done..], advancing `progress.done` and the
+     * disk-confirmed state at each write that lands. */
+    async function writeFrom(fs, entries, progress) {
+        await ensureFresh(fs);
+        let text = activeText;
+        let count = activeCount;
+        let hash = lastHash;
+        let start = progress.done;
+        for (let i = progress.done; i < entries.length; i++) {
+            if (count >= maxLines) {
+                await createArchive(fs, text);
+                /* Lines [start, i) are durable in the archive. The active file still
+                 * holds them until the write below lands; a reload reconciles that. */
+                activeText = '';
+                activeCount = 0;
+                lastHash = hash;
+                landed(entries, start, i);
+                progress.done = i;
+                start = i;
+                text = '';
+                count = 0;
+            }
+            const line = JSON.stringify({ ...entries[i].draft, prev: hash });
+            hash = await lineHash(line);
+            text += line + '\n';
+            count += 1;
+        }
+        await writeActive(fs, text);
+        activeText = text;
+        activeCount = count;
+        lastHash = hash;
+        landed(entries, start, entries.length);
+        progress.done = entries.length;
+    }
+    function lose(drafts) {
+        if (!drafts.length)
+            return;
+        lostCount += drafts.length;
+        pendingGap += drafts.length;
+        if (gapSince === null)
+            gapSince = String(drafts[0].ts);
+    }
+    const gapLine = () => ({
+        draft: pointLine({ kind: 'gap', lost: pendingGap, since: gapSince ?? isoNow() }), user: false, covers: pendingGap,
+    });
+    async function writeBatch(drafts) {
+        let fs = null;
+        try {
+            fs = await opts.files();
+        }
+        catch {
+            fs = null;
+        }
+        if (!fs) {
+            lose(drafts);
+            return;
+        }
+        for (let attempt = 0; !loaded; attempt++) {
+            try {
+                await ensureLoaded(fs);
+            }
+            catch {
+                if (attempt >= 1) {
+                    lose(drafts);
+                    return;
+                }
+            }
+        }
+        try {
+            await retention(fs);
+        }
+        catch { /* best effort */ }
+        // The setting applies at APPEND time: append() only ever queued a draft
+        // because isEnabled() said yes when it was called, so every draft here
+        // was accepted while enabled and must be written -- never dropped
+        // uncounted -- however isEnabled() answers NOW at flush time. What
+        // differs by the current answer is only ORDER and whether a marker is
+        // owed: turning off announces AFTER whatever was captured before the
+        // flip; turning back on announces BEFORE whatever was captured since.
+        const entries = [];
+        const enabledNow = isEnabled();
+        if (enabledNow && lastAuditEvent === 'disabled') {
+            entries.push({ draft: pointLine({ event: 'enabled' }), user: false });
+        }
+        if (pendingGap > 0 && (drafts.length || entries.length || (!enabledNow && lastAuditEvent !== 'disabled'))) {
+            entries.push(gapLine());
+        }
+        for (const draft of drafts)
+            entries.push({ draft, user: true });
+        if (!enabledNow && lastAuditEvent !== 'disabled') {
+            entries.push({ draft: pointLine({ event: 'disabled' }), user: false });
+        }
+        if (!entries.length)
+            return;
+        const progress = { done: 0 };
+        for (let attempt = 0; attempt < 2 && progress.done < entries.length; attempt++) {
+            try {
+                await writeFrom(fs, entries, progress);
+            }
+            catch {
+                /* retried once; then the remainder is counted as lost */
+            }
+        }
+        lose(entries.slice(progress.done).filter((e) => e.user).map((e) => e.draft));
+    }
+    function flush() {
+        if (timer) {
+            clearTimeout(timer);
+            timer = null;
+        }
+        const batch = queue;
+        queue = [];
+        const switchPending = !isEnabled() || !loaded;
+        if (!batch.length && !switchPending)
+            return chain;
+        chain = chain.then(() => writeBatch(batch)).catch(() => {
+            /* writeBatch accounts for its own failures; nothing may reject flush() */
+        });
+        return chain;
+    }
+    function schedule() {
+        if (!timer)
+            timer = setTimeout(() => { timer = null; void flush(); }, flushMs);
+    }
+    return {
+        append(d) {
+            try {
+                if (!isEnabled()) {
+                    /* Dropped by design; only the one-time `disabled` line is owed. */
+                    if (!loaded)
+                        schedule();
+                    return;
+                }
+                queue.push(d);
+                if (queue.length >= flushAt) {
+                    void flush();
+                    return;
+                }
+                schedule();
+            }
+            catch {
+                /* never throws into a run */
+            }
+        },
+        flush,
+        lost: () => lostCount,
+    };
+}
+//# sourceMappingURL=log.js.map

package/dist/audit/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../audit/log.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAC9C,MAAM,GAAG,GAAG,QAAU,CAAC;AACvB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAElC;yEACyE;AACzE,MAAM,SAAS,GAAG,sBAAsB,CAAC;AAEzC,oFAAoF;AACpF,SAAS,SAAS,CAAC,IAAe,EAAE,QAAiB;IACnD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtG,OAAO,SAAS,IAAI,IAAI,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAe,EAAE,QAAiB;IAClE,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;AAC9C,CAAC;AAID;;;;;;2FAM2F;AAC3F,MAAM,UAAU,kBAAkB,CAAC,KAAe,EAAE,IAAe,EAAE,WAAmB;IACtF,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,UAAU,IAAI,mDAAmD,CAAC,CAAC;IACzF,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW;YAAE,SAAS;QACzC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;gCAKgC;AAChC,MAAM,UAAU,mBAAmB,CAAC,KAAe,EAAE,IAAe,EAAE,QAAiB;IACrF,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IAChF,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,KAAyC;IACtE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,OAAO,SAAS,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AA8BD;+EAC+E;AAC/E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD,6EAA6E;AAC7E,MAAM,UAAU,4BAA4B;IAC1C,aAAa,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC;AAUD,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,gBAAgB,CAAC,KAAe;IACvC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,SAAS,QAAQ,CAAC,KAAe;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAElG,KAAK,UAAU,UAAU,CAAC,EAAe,EAAE,IAAY;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAqB;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACvG,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,oBAAoB,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;IAChD,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;IAC9D;;;;;;uBAMmB;IACnB,MAAM,SAAS,GAAG,GAAY,EAAE;QAC9B,IAAI,CAAC;YACH,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,KAAK,GAAiB,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAyC,IAAI,CAAC;IACvD,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7C;qEACiE;IACjE,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,4EAA4E;IAC5E,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC;qEACiE;IACjE,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,QAAQ,GAAG,aAAa,CAAC;IAC7B,IAAI,cAAc,GAAkB,IAAI,CAAC;IAEzC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,SAAS,GAAG,CAAC,KAAsC,EAAc,EAAE,CAAC,CAAC;QACzE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK;KACxG,CAAC,CAAC;IAEH,KAAK,UAAU,SAAS,CAAC,EAAe;QACtC,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;8DAC0D;IAC1D,KAAK,UAAU,YAAY,CAAC,EAAe;QACzC,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,IAAmB,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,mEAAmE;YACnE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,MAAM,CAAC,CAAC;YAC1D,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACtB,yEAAyE;QACzE,kDAAkD;QAClD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,IAAI,IAAI,CAAC;QACtD,IAAI,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAE1G,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,qEAAqE;QACrE,sEAAsE;QACtE,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;YAChF,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,GAAG,IAAI,CAAC;QAClB,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,QAAQ,GAAG,KAAK,CAAC,MAAM;YACrB,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACpF,cAAc,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED;6DACyD;IACzD,KAAK,UAAU,WAAW,CAAC,EAAe;QACxC,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO;QAC5D,MAAM,GAAG,KAAK,CAAC;QACf,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;gEAW4D;IAC5D,KAAK,UAAU,SAAS,CAAC,EAAe;QACtC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,IAAI,GAAG,GAAG;YAAE,OAAO;QACjD,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,GAAG,aAAa,GAAG,GAAG,CAAC;QACvC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,OAAO,GAAsC,CAAC,GAAG,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnG,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,GAAG,UAAU;gBAAE,SAAS;YAC1D,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,GAAG,UAAU,EAAE,CAAC;oBAChD,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,iEAAiE;oBACjE,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,MAAM;wBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP;sDACsC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;mFAE+E;IAC/E,KAAK,UAAU,aAAa,CAAC,EAAe,EAAE,IAAY;QACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,mBAAmB,CAAC,CAAC,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5H,SAAS,CAAC;YACR,CAAC,IAAI,CAAC,CAAC;YACP,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,iEAAiE;gBACjE,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI;oBAAE,MAAM,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,EAAe,EAAE,IAAY;QACtD,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;;YACpD,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,kDAAkD;IAClD,SAAS,MAAM,CAAC,OAAkB,EAAE,IAAY,EAAE,EAAU;QAC1D,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAAE,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;YAClG,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC;gBACvB,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;oBAAC,UAAU,GAAG,CAAC,CAAC;oBAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED;wDACoD;IACpD,KAAK,UAAU,SAAS,CAAC,EAAe,EAAE,OAAkB,EAAE,QAA0B;QACtF,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,IAAI,GAAG,UAAU,CAAC;QACtB,IAAI,KAAK,GAAG,WAAW,CAAC;QACxB,IAAI,IAAI,GAAG,QAAQ,CAAC;QACpB,IAAI,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpD,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACtB,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC9B;uFACuE;gBACvE,UAAU,GAAG,EAAE,CAAC;gBAChB,WAAW,GAAG,CAAC,CAAC;gBAChB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC1B,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;gBAClB,KAAK,GAAG,CAAC,CAAC;gBACV,IAAI,GAAG,EAAE,CAAC;gBACV,KAAK,GAAG,CAAC,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC;YACpB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,MAAM,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5B,UAAU,GAAG,IAAI,CAAC;QAClB,WAAW,GAAG,KAAK,CAAC;QACpB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IACjC,CAAC;IAED,SAAS,IAAI,CAAC,MAAoB;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;QAC3B,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,QAAQ,KAAK,IAAI;YAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,CAAC;QAC9B,KAAK,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU;KAClH,CAAC,CAAC;IAEH,KAAK,UAAU,UAAU,CAAC,MAAoB;QAC5C,IAAI,EAAE,GAAuB,IAAI,CAAC;QAClC,IAAI,CAAC;YAAC,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,EAAE,GAAG,IAAI,CAAC;QAAC,CAAC;QACrD,IAAI,CAAC,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YAAC,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAExD,wEAAwE;QACxE,uEAAuE;QACvE,kEAAkE;QAClE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,OAAO,GAAc,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,SAAS,EAAE,CAAC;QAC/B,IAAI,UAAU,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,IAAI,cAAc,KAAK,UAAU,CAAC,CAAC,EAAE,CAAC;YAC1G,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAE5B,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/E,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,SAAS,KAAK;QACZ,IAAI,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,KAAK,GAAG,EAAE,CAAC;QACX,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAClD,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACrD,0EAA0E;QAC5E,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,QAAQ;QACf,IAAI,CAAC,KAAK;YAAE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC;IAED,OAAO;QACL,MAAM,CAAC,CAAC;YACN,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;oBACjB,mEAAmE;oBACnE,IAAI,CAAC,MAAM;wBAAE,QAAQ,EAAE,CAAC;oBACxB,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACd,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;oBAAC,KAAK,KAAK,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACtD,QAAQ,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;QACH,CAAC;QACD,KAAK;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;KACtB,CAAC;AACJ,CAAC"}

package/dist/audit/recorder.d.ts

@@ -0,0 +1,31 @@
+import type { AgentEvent, AuditDraft, AuditHost, DecisionEvent, NodeEvent } from '@corenel/protocol';
+export interface AuditRunContext {
+    host: AuditHost;
+    session?: string;
+    run?: string;
+    agent?: string;
+    model?: string;
+}
+export interface AuditRecorder {
+    onEvent(e: AgentEvent): void;
+    onNodeEvent(e: NodeEvent): void;
+    onDecision(e: DecisionEvent): void;
+    finish(outcome: string): void;
+    /** Resolves once every step enqueued so far has run (and emitted, or had
+     * its emit swallowed -- see `safeEmit`). A host awaits this before
+     * flushing/closing the log, so a pending async step can never be dropped
+     * mid-write. */
+    whenIdle(): Promise<void>;
+    readonly trace: string;
+}
+export declare function createAuditRecorder(opts: {
+    ctx: AuditRunContext;
+    emit: (d: AuditDraft) => void;
+    now?: () => number;
+    ids?: {
+        trace: () => string;
+        span: () => string;
+    };
+    hash?: (args: unknown) => Promise<string>;
+}): AuditRecorder;
+//# sourceMappingURL=recorder.d.ts.map

package/dist/audit/recorder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorder.d.ts","sourceRoot":"","sources":["../../audit/recorder.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAIrG,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACpH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAChC,UAAU,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACnC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;oBAGgB;IAChB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AA0CD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,GAAG,EAAE,eAAe,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,MAAM,CAAA;KAAE,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3C,GAAG,aAAa,CAsIhB"}