@dsh-enhanced/lark-channel 0.1.64 → 0.1.66

package/lib/rsi-scanner-retirement-stage.js

@@ -0,0 +1,183 @@
+import { createHash } from 'node:crypto';
+import { isAbsolute, resolve } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { inspectAutomationRetirementSnapshot } from '@dsh-enhanced/assistant-automations';
+import { ActiveLarkOwnerBindingsSnapshotError, inspectActiveLarkOwnerBindingsLocally, inspectRevokedOwnerRouteLocally } from '@dsh-enhanced/assistant-delivery';
+import { validateMemoryLearningOwner } from '@dsh-enhanced/assistant-growth-contract';
+import { deriveScannerRetirementConfiguration } from './rsi-scanner-retirement-config.js';
+import { applyScannerRetirementMaintenance } from './rsi-scanner-retirement-runtime.js';
+import { prepareScannerRetirementOperations, verifyScannerRetirementTransition } from './rsi-scanner-retirement-transition.js';
+export class ScannerRetirementStageError extends Error {
+    code;
+    constructor(code) {
+        super(`scanner retirement stage rejected: ${code}`);
+        this.code = code;
+        this.name = 'ScannerRetirementStageError';
+    }
+}
+function fail(code) { throw new ScannerRetirementStageError(code); }
+function canonical(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(',')}]`;
+    const object = value;
+    return `{${Object.keys(object).sort().map(key => `${JSON.stringify(key)}:${canonical(object[key])}`).join(',')}}`;
+}
+const digest = (value) => createHash('sha256').update(canonical(value)).digest('hex');
+const same = (a, b) => canonical(a) === canonical(b);
+function freeze(value) {
+    if (value && typeof value === 'object' && !Object.isFrozen(value)) {
+        Object.values(value).forEach(freeze);
+        Object.freeze(value);
+    }
+    return value;
+}
+function sameStage(before, current) {
+    if (before.database.device !== current.database.device || before.database.inode !== current.database.inode)
+        fail('storage-drift');
+}
+function selectTargets(before, configured) {
+    return configured.filter(target => {
+        const record = before.records.find(row => row.id === target.automationId);
+        const marker = before.retirements.find(row => row.owner === target.owner && row.automationId === target.automationId);
+        if (record && record.owner !== target.owner)
+            fail('invalid-target');
+        // A formal marker can outlive its definition; neither case creates a row.
+        if (marker)
+            return false;
+        if (!record)
+            return false;
+        if (!['active', 'paused'].includes(record.status))
+            fail('invalid-target');
+        return true;
+    });
+}
+function proveActive(config, owner) {
+    const authority = config.ownerQuery.authority;
+    const active = inspectActiveLarkOwnerBindingsLocally({ databasePath: config.ownerQuery.databasePath,
+        account: authority.principal.account, tenant: authority.principal.tenant, workspace: authority.workspace, agentPreset: authority.agentPreset });
+    const matches = active.bindings.filter(binding => binding.owner.id === owner.principalRecordId
+        && binding.owner.version === owner.principalVersion && binding.owner.status === 'active' && binding.owner.role === 'owner'
+        && isDeepStrictEqual(binding.owner.principal, authority.principal) && isDeepStrictEqual(binding.principal, authority.principal)
+        && isDeepStrictEqual(binding.conversation, authority.conversation) && binding.workspace === authority.workspace
+        && binding.agentPreset === authority.agentPreset && binding.policyRef === authority.policyRef
+        && binding.generation >= authority.minimumGeneration);
+    if (matches.length !== 1)
+        fail('owner-unavailable');
+}
+function validatePlan(plan) {
+    try {
+        if (Object.keys(plan).sort().join(',') !== 'automationsDatabasePath,before,dshHome,effectiveConfigDigest,operations,owner,ownerProof,planDigest,profile,protocol,targets'
+            || plan.protocol !== 'lark-channel/scanner-retirement-plan/v1' || !/^[a-f0-9]{64}$/u.test(plan.effectiveConfigDigest)
+            || !isAbsolute(plan.automationsDatabasePath) || resolve(plan.automationsDatabasePath) !== plan.automationsDatabasePath
+            || plan.targets.length < 1 || plan.targets.length > 4)
+            fail('invalid-plan');
+        const { planDigest, ...unsigned } = plan;
+        if (digest(unsigned) !== planDigest)
+            fail('invalid-plan');
+        const owner = validateMemoryLearningOwner(plan.owner), proof = plan.ownerProof;
+        if (proof.frozenPrincipalVersion !== owner.principalVersion || proof.state.principalRecordId !== owner.principalRecordId
+            || proof.state.principalId !== owner.principalId || proof.state.authorityId !== owner.authorityId
+            || proof.state.authorityHash !== owner.authorityHash || proof.authority.workspace !== owner.workspace
+            || proof.authority.agentPreset !== owner.agentPreset)
+            fail('invalid-plan');
+        if (!same(prepareScannerRetirementOperations(plan), plan.operations))
+            fail('invalid-plan');
+    }
+    catch (error) {
+        if (error instanceof ScannerRetirementStageError)
+            throw error;
+        fail('invalid-plan');
+    }
+}
+function completion(plan, after) {
+    sameStage(plan.before, after);
+    const transition = verifyScannerRetirementTransition({ ...plan, after });
+    const unsigned = { protocol: 'lark-channel/scanner-retirement-completion/v1', planDigest: plan.planDigest, after, transition };
+    return freeze({ ...unsigned, completionDigest: digest(unsigned) });
+}
+/** Read-only preparation for a parent-attested, stopped stage. No Store is opened. */
+export function captureScannerRetirementPlan(input) {
+    const { expectedStorageDigest, ...scope } = input;
+    const config = deriveScannerRetirementConfiguration(scope);
+    const before = inspectAutomationRetirementSnapshot(config.automationsDatabasePath);
+    if (!/^[a-f0-9]{64}$/u.test(expectedStorageDigest) || before.storageDigest !== expectedStorageDigest)
+        fail('storage-drift');
+    const noop = (reason) => freeze({ status: 'no-op', reason,
+        effectiveConfigDigest: config.effectiveConfigDigest, beforeSnapshotDigest: before.snapshotDigest, storageDigest: before.storageDigest });
+    let ownerProof;
+    try {
+        ownerProof = inspectRevokedOwnerRouteLocally(config.ownerQuery);
+    }
+    catch (error) {
+        if (!(error instanceof ActiveLarkOwnerBindingsSnapshotError) || error.code !== 'owner-not-revoked')
+            throw error;
+        proveActive(config, input.owner);
+        return noop('owner-active');
+    }
+    const targets = selectTargets(before, config.targets);
+    if (targets.length === 0)
+        return noop('no-targets');
+    const operations = prepareScannerRetirementOperations({ before, ownerProof, targets });
+    const unsigned = { protocol: 'lark-channel/scanner-retirement-plan/v1', dshHome: input.dshHome, profile: input.profile,
+        owner: structuredClone(input.owner), automationsDatabasePath: config.automationsDatabasePath,
+        effectiveConfigDigest: config.effectiveConfigDigest, before, ownerProof, targets, operations };
+    return freeze({ status: 'prepared', plan: { ...unsigned, planDigest: digest(unsigned) } });
+}
+/** Uses only the archived tuples; a partial or close failure never renews a key or grant. */
+export async function applyScannerRetirementPlan(input) {
+    input.signal.throwIfAborted();
+    // Own a detached copy across every asynchronous maintenance boundary.
+    const plan = freeze(structuredClone(input.plan));
+    validatePlan(plan);
+    const config = deriveScannerRetirementConfiguration({ effectiveConfig: input.effectiveConfig, dshHome: plan.dshHome, profile: plan.profile, owner: plan.owner });
+    if (config.effectiveConfigDigest !== plan.effectiveConfigDigest || config.automationsDatabasePath !== plan.automationsDatabasePath
+        || !same(selectTargets(plan.before, config.targets), plan.targets)
+        || !same(config.ownerQuery.authority, plan.ownerProof.authority)
+        || config.ownerQuery.principalRecordId !== plan.ownerProof.state.principalRecordId
+        || config.ownerQuery.frozenPrincipalVersion !== plan.ownerProof.frozenPrincipalVersion)
+        fail('configuration-drift');
+    const ownerProof = inspectRevokedOwnerRouteLocally(config.ownerQuery);
+    if (ownerProof.snapshotDigest !== plan.ownerProof.snapshotDigest)
+        fail('owner-drift');
+    const current = inspectAutomationRetirementSnapshot(plan.automationsDatabasePath);
+    sameStage(plan.before, current);
+    const completed = plan.targets.filter(target => current.retirements.some(marker => marker.owner === target.owner && marker.automationId === target.automationId));
+    if (!same(current, plan.before))
+        verifyScannerRetirementTransition({ before: plan.before, after: current, ownerProof: plan.ownerProof, targets: completed });
+    input.signal.throwIfAborted();
+    if (completed.length === plan.targets.length)
+        return completion(plan, current);
+    await applyScannerRetirementMaintenance({ policyConfig: config.policyConfig, automationsConfig: config.automationsConfig,
+        operations: plan.operations, signal: input.signal });
+    input.signal.throwIfAborted();
+    return completion(plan, inspectAutomationRetirementSnapshot(plan.automationsDatabasePath));
+}
+/** Recheck permanent markers after legitimate task/history progress, using the frozen stage path. */
+export function verifyScannerRetirementPersistence(input) {
+    const { plan, completion: receipt } = structuredClone(input);
+    validatePlan(plan);
+    const { completionDigest, ...unsigned } = receipt;
+    if (Object.keys(receipt).sort().join(',') !== 'after,completionDigest,planDigest,protocol,transition'
+        || receipt.protocol !== 'lark-channel/scanner-retirement-completion/v1' || receipt.planDigest !== plan.planDigest
+        || digest(unsigned) !== completionDigest || !same(completion(plan, receipt.after), receipt))
+        fail('invalid-plan');
+    const current = inspectAutomationRetirementSnapshot(plan.automationsDatabasePath);
+    sameStage(plan.before, current);
+    // A validated historical completion may remain on v16 without opening a
+    // writer. A v17 completion can never use that allowance to accept a downgrade.
+    const historicalV16 = current.schemaVersion === 16 && receipt.after.schemaVersion === 16
+        && (plan.before.schemaVersion === 15 || plan.before.schemaVersion === 16);
+    if (current.schemaVersion !== 17 && !historicalV16)
+        fail('persistence-drift');
+    for (const target of plan.targets) {
+        const record = receipt.after.records.find(row => row.id === target.automationId);
+        const marker = receipt.after.retirements.find(row => row.owner === target.owner && row.automationId === target.automationId);
+        if (!record || !marker || !same(record, current.records.find(row => row.id === target.automationId))
+            || !same(marker, current.retirements.find(row => row.owner === target.owner && row.automationId === target.automationId)))
+            fail('persistence-drift');
+    }
+    return current;
+}
+//# sourceMappingURL=rsi-scanner-retirement-stage.js.map

package/lib/rsi-scanner-retirement-stage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-scanner-retirement-stage.js","sourceRoot":"","sources":["../src/rsi-scanner-retirement-stage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,mCAAmC,EAAqC,MAAM,qCAAqC,CAAA;AAC5H,OAAO,EAAE,oCAAoC,EAAE,qCAAqC,EAAE,+BAA+B,EACnF,MAAM,kCAAkC,CAAA;AAC1E,OAAO,EAAE,2BAA2B,EAA4B,MAAM,yCAAyC,CAAA;AAC/G,OAAO,EAAE,oCAAoC,EAAiF,MAAM,oCAAoC,CAAA;AACxK,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAA;AACvF,OAAO,EAAE,kCAAkC,EAAE,iCAAiC,EAC4B,MAAM,wCAAwC,CAAA;AAyBxJ,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC/B;IAArB,YAAqB,IAA6I;QAChK,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QADjC,SAAI,GAAJ,IAAI,CAAyI;QAC3G,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAA;IAChG,CAAC;CACF;AACD,SAAS,IAAI,CAAC,IAAyC,IAAW,MAAM,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC;AAC/G,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACtE,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;AACnH,CAAC;AACD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC9F,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAA;AACtE,SAAS,MAAM,CAAI,KAAQ;IACzB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAAC,CAAC;IACjI,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,SAAS,CAAC,MAAoC,EAAE,OAAqC;IAC5F,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,KAAK;QAAE,IAAI,CAAC,eAAe,CAAC,CAAA;AACnI,CAAC;AACD,SAAS,aAAa,CAAC,MAAoC,EAAE,UAA8C;IACzG,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC,CAAA;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAAC,CAAA;QACrH,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACnE,0EAA0E;QAC1E,IAAI,MAAM;YAAE,OAAO,KAAK,CAAA;QACxB,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACzB,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACzE,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC;AACD,SAAS,WAAW,CAAC,MAAsC,EAAE,KAA0B;IACrF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAA;IAC7C,MAAM,MAAM,GAAG,qCAAqC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QACjG,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;IACjJ,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,iBAAiB;WACzF,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,gBAAgB,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;WACvH,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC;WAC5H,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;WAC5G,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;WAC1F,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAA;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;AACrD,CAAC;AACD,SAAS,YAAY,CAAC,IAA2B;IAC/C,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,8HAA8H;eACpK,IAAI,CAAC,QAAQ,KAAK,yCAAyC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC;eAClH,CAAC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,IAAI,CAAC,uBAAuB;eACnH,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAC7E,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAA;QACxC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,UAAU;YAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QACzD,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,UAAU,CAAA;QAC9E,IAAI,KAAK,CAAC,sBAAsB,KAAK,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;eACnH,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;eAC9F,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;eAClG,KAAK,CAAC,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAC5E,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC;YAAE,IAAI,CAAC,cAAc,CAAC,CAAA;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,KAAK,YAAY,2BAA2B;YAAE,MAAM,KAAK,CAAC;QAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAAC,CAAC;AACzG,CAAC;AACD,SAAS,UAAU,CAAC,IAA2B,EAAE,KAAmC;IAClF,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC7B,MAAM,UAAU,GAAG,iCAAiC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,+CAAwD,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;IACvI,OAAO,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,4BAA4B,CAAC,KAA8E;IACzH,MAAM,EAAE,qBAAqB,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAA;IACjD,MAAM,MAAM,GAAG,oCAAoC,CAAC,KAAK,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,mCAAmC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;IAClF,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,qBAAqB;QAAE,IAAI,CAAC,eAAe,CAAC,CAAA;IAC3H,MAAM,IAAI,GAAG,CAAC,MAAqC,EAA4B,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;QAChH,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAA;IAC1I,IAAI,UAAqC,CAAA;IACzC,IAAI,CAAC;QAAC,UAAU,GAAG,+BAA+B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;IACvE,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,KAAK,YAAY,oCAAoC,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAAE,MAAM,KAAK,CAAA;QAC/G,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QAChC,OAAO,IAAI,CAAC,cAAc,CAAC,CAAA;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,kCAAkC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;IACtF,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,yCAAkD,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;QAC7H,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;QAC5F,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;IAChG,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;AAC5F,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAoF;IACnI,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;IAC7B,sEAAsE;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAChD,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,MAAM,MAAM,GAAG,oCAAoC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;IAChK,IAAI,MAAM,CAAC,qBAAqB,KAAK,IAAI,CAAC,qBAAqB,IAAI,MAAM,CAAC,uBAAuB,KAAK,IAAI,CAAC,uBAAuB;WAC7H,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC;WAC/D,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;WAC7D,MAAM,CAAC,UAAU,CAAC,iBAAiB,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,iBAAiB;WAC/E,MAAM,CAAC,UAAU,CAAC,sBAAsB,KAAK,IAAI,CAAC,UAAU,CAAC,sBAAsB;QAAE,IAAI,CAAC,qBAAqB,CAAC,CAAA;IACrH,MAAM,UAAU,GAAG,+BAA+B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACrE,IAAI,UAAU,CAAC,cAAc,KAAK,IAAI,CAAC,UAAU,CAAC,cAAc;QAAE,IAAI,CAAC,aAAa,CAAC,CAAA;IACrF,MAAM,OAAO,GAAG,mCAAmC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACjF,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;IACjK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;QAAE,iCAAiC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;IAC5J,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;IAC7B,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC9E,MAAM,iCAAiC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QACtH,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACtD,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;IAC7B,OAAO,UAAU,CAAC,IAAI,EAAE,mCAAmC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,kCAAkC,CAAC,KAA+E;IAChI,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IAC5D,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,MAAM,EAAE,gBAAgB,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;IACjD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,uDAAuD;WAChG,OAAO,CAAC,QAAQ,KAAK,+CAA+C,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;WAC9G,MAAM,CAAC,QAAQ,CAAC,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAE,IAAI,CAAC,cAAc,CAAC,CAAA;IACnH,MAAM,OAAO,GAAG,mCAAmC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACjF,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,wEAAwE;IACxE,+EAA+E;IAC/E,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,EAAE;WACnF,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,EAAE,CAAC,CAAA;IAC3E,IAAI,OAAO,CAAC,aAAa,KAAK,EAAE,IAAI,CAAC,aAAa;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC7E,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC,CAAA;QAChF,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAAC,CAAA;QAC5H,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC;eAC/F,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC;YAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;IACxJ,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/lib/rsi-scanner-retirement-transition.d.ts

@@ -0,0 +1,57 @@
+import type { AutomationRetirementReceipt, AutomationRetirementSnapshot } from '@dsh-enhanced/assistant-automations';
+import type { RevokedOwnerRouteSnapshot } from '@dsh-enhanced/assistant-delivery';
+declare const scannerPrefixes: {
+    readonly 'assistant-memory-learning': "memory-scan-";
+    readonly 'assistant-growth-usage': "usage-scan-";
+    readonly 'plugin-control-plane-task-observations': "task-observation-scan-";
+    readonly 'plugin-control-plane-live-qualification': "live-qualification-scan-";
+};
+export interface ScannerRetirementTarget {
+    readonly owner: keyof typeof scannerPrefixes;
+    readonly automationId: string;
+}
+export interface ScannerRetirementTransitionInput {
+    readonly before: AutomationRetirementSnapshot;
+    readonly after: AutomationRetirementSnapshot;
+    readonly ownerProof: RevokedOwnerRouteSnapshot;
+    readonly targets: readonly ScannerRetirementTarget[];
+}
+export type ScannerRetirementOperation = Pick<AutomationRetirementReceipt, 'owner' | 'automationId' | 'operationId' | 'definitionHash' | 'expectedVersion' | 'reason' | 'evidenceDigest'>;
+export declare const scannerRetirementTransitionProtocol: "lark-channel/scanner-retirement-transition/v1";
+export interface ScannerRetirementTransitionReceipt {
+    readonly protocol: typeof scannerRetirementTransitionProtocol;
+    readonly beforeSnapshotDigest: string;
+    readonly afterSnapshotDigest: string;
+    readonly ownerProofSnapshotDigest: string;
+    readonly targets: readonly Readonly<ScannerRetirementTarget & {
+        evidenceDigest: string;
+        markerDigest: string;
+    }>[];
+    readonly receiptDigest: string;
+}
+export type ScannerRetirementTransitionErrorCode = 'invalid-proof' | 'invalid-targets' | 'definitions-changed' | 'retirements-changed' | 'history-changed' | 'schema-changed';
+export declare class ScannerRetirementTransitionError extends Error {
+    readonly code: ScannerRetirementTransitionErrorCode;
+    constructor(code: ScannerRetirementTransitionErrorCode);
+}
+/**
+ * Freeze the exact operations before any staged service is mounted. Inputs have
+ * the same trusted-reader and independently derived configuration requirements
+ * as transition verification. These tuples confer no permission: the writer must
+ * use the formal Automations service and retain them unchanged across retries.
+ */
+export declare function prepareScannerRetirementOperations(input: Omit<ScannerRetirementTransitionInput, 'after'>): readonly ScannerRetirementOperation[];
+/**
+ * Pure verification of a preselected retirement change; grants no write or execution permission.
+ * Both snapshots and ownerProof MUST come from the formal trusted local readers.
+ * The parent installer MUST independently derive exact targets from frozen effective
+ * configuration and bind that configuration, owner route and transaction to this call.
+ * For Memory, ownerProof.frozenPrincipalVersion MUST equal the frozen learning
+ * grant owner.principalVersion; its expectedOwner scope uses that grant version,
+ * while the observed revoked state can be at a later durable principal version.
+ * A matching scanner prefix does not prove that a definition belongs to that config.
+ * Digests are consistency checks after trusted reads, never external authenticity signatures.
+ */
+export declare function verifyScannerRetirementTransition(input: ScannerRetirementTransitionInput): ScannerRetirementTransitionReceipt;
+export {};
+//# sourceMappingURL=rsi-scanner-retirement-transition.d.ts.map

package/lib/rsi-scanner-retirement-transition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-scanner-retirement-transition.d.ts","sourceRoot":"","sources":["../src/rsi-scanner-retirement-transition.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,2BAA2B,EAE3B,4BAA4B,EAC7B,MAAM,qCAAqC,CAAA;AAE5C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AAEjF,QAAA,MAAM,eAAe;;;;;CAKX,CAAA;AAEV,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,eAAe,CAAA;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAA;IAC7C,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAA;IAC5C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAA;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAA;CACrD;AAED,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,2BAA2B,EACvE,OAAO,GAAG,cAAc,GAAG,aAAa,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,QAAQ,GAAG,gBAAgB,CAAC,CAAA;AAEhH,eAAO,MAAM,mCAAmC,EAAG,+CAAwD,CAAA;AAE3G,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,QAAQ,EAAE,OAAO,mCAAmC,CAAA;IAC7D,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,QAAQ,CAAC,uBAAuB,GAAG;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAA;IACjH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,MAAM,oCAAoC,GAAG,eAAe,GAAG,iBAAiB,GAAG,qBAAqB,GAC1G,qBAAqB,GAAG,iBAAiB,GAAG,gBAAgB,CAAA;AAEhE,qBAAa,gCAAiC,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,oCAAoC;gBAA1C,IAAI,EAAE,oCAAoC;CAIhE;AAgJD;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,IAAI,CAAC,gCAAgC,EAAE,OAAO,CAAC,GACrD,SAAS,0BAA0B,EAAE,CAgCvC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,gCAAgC,GAAG,kCAAkC,CAsE7H"}

package/lib/rsi-scanner-retirement-transition.js

@@ -0,0 +1,320 @@
+import { createHash } from 'node:crypto';
+import { externalPrincipalId, ownerRouteAuthorityHash } from '@dsh-enhanced/assistant-delivery';
+const scannerPrefixes = {
+    'assistant-memory-learning': 'memory-scan-',
+    'assistant-growth-usage': 'usage-scan-',
+    'plugin-control-plane-task-observations': 'task-observation-scan-',
+    'plugin-control-plane-live-qualification': 'live-qualification-scan-',
+};
+export const scannerRetirementTransitionProtocol = 'lark-channel/scanner-retirement-transition/v1';
+export class ScannerRetirementTransitionError extends Error {
+    code;
+    constructor(code) {
+        super(`scanner retirement transition rejected: ${code}`);
+        this.code = code;
+        this.name = 'ScannerRetirementTransitionError';
+    }
+}
+const digestPattern = /^[a-f0-9]{64}$/u;
+const digest = (value) => createHash('sha256').update(value).digest('hex');
+const jsonDigest = (value) => digest(JSON.stringify(value));
+const integer = (value, minimum = 0) => typeof value === 'number'
+    && Number.isSafeInteger(value) && value >= minimum;
+function reject(code) { throw new ScannerRetirementTransitionError(code); }
+function canonicalJson(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    const object = value;
+    return `{${Object.keys(object).sort().map(key => `${JSON.stringify(key)}:${canonicalJson(object[key])}`).join(',')}}`;
+}
+function same(left, right) { return canonicalJson(left) === canonicalJson(right); }
+function freeze(value) {
+    if (value !== null && typeof value === 'object' && !Object.isFrozen(value)) {
+        Object.values(value).forEach(freeze);
+        Object.freeze(value);
+    }
+    return value;
+}
+function uniqueMap(items, key, code) {
+    const result = new Map();
+    for (const item of items) {
+        const identity = key(item);
+        if (result.has(identity))
+            reject(code);
+        result.set(identity, item);
+    }
+    return result;
+}
+const markerKey = (marker) => JSON.stringify([marker.owner, marker.automationId]);
+const schemaKey = (entry) => JSON.stringify([entry.type, entry.name]);
+/** Reconstruct the exact scope insertion order passed by each production scanner runtime. */
+function ownerEvidence(proof) {
+    if (proof.protocol !== 'assistant-delivery/revoked-owner-route-snapshot/v1'
+        || ![23, 24, 25, 26, 27, 28, 29, 30, 31].includes(proof.schemaVersion)
+        || !integer(proof.frozenPrincipalVersion, 1) || !digestPattern.test(proof.snapshotDigest))
+        reject('invalid-proof');
+    const authority = proof.authority;
+    const authorityHash = ownerRouteAuthorityHash(authority);
+    // The public hash function validates the full authority and canonicalizes it.
+    // Rebuild canonical field order to reject noncanonical values while accepting
+    // arbitrary incoming JSON key order, without importing another bundle's internals.
+    const conversation = authority.conversation;
+    const principal = authority.principal;
+    const orderedAuthority = {
+        id: authority.id,
+        conversation: { channel: conversation.channel, account: conversation.account, tenant: conversation.tenant,
+            kind: conversation.kind, chat: conversation.chat, ...(conversation.thread === undefined ? {} : { thread: conversation.thread }) },
+        principal: { channel: principal.channel, account: principal.account, tenant: principal.tenant, user: principal.user },
+        workspace: authority.workspace, agentPreset: authority.agentPreset, policyRef: authority.policyRef,
+        minimumGeneration: authority.minimumGeneration,
+    };
+    if (jsonDigest(orderedAuthority) !== authorityHash)
+        reject('invalid-proof');
+    const state = proof.state;
+    if (state.status !== 'revoked' || state.authorityId !== authority.id || state.authorityHash !== authorityHash
+        || state.principalId !== externalPrincipalId(principal)
+        || typeof state.principalRecordId !== 'string' || !/^principal_[0-9a-f-]{8,}$/u.test(state.principalRecordId)
+        || !integer(state.principalVersion, 1) || state.principalVersion < proof.frozenPrincipalVersion)
+        reject('invalid-proof');
+    const orderedState = { status: 'revoked', authorityId: authority.id, authorityHash,
+        principalId: externalPrincipalId(principal), principalRecordId: state.principalRecordId, principalVersion: state.principalVersion };
+    if (!same(state, orderedState))
+        reject('invalid-proof');
+    const { snapshotDigest, ...unsigned } = proof;
+    if (digest(canonicalJson(unsigned)) !== snapshotDigest)
+        reject('invalid-proof');
+    return owner => jsonDigest({ protocol: 'scanner-owner-revoked/v1',
+        scope: { authorityId: authority.id, principalId: orderedState.principalId,
+            workspace: authority.workspace, agentPreset: authority.agentPreset,
+            ...(owner === 'assistant-memory-learning' ? { expectedOwner: { authorityHash,
+                    principalRecordId: orderedState.principalRecordId, principalVersion: proof.frozenPrincipalVersion } } : {}) },
+        state: orderedState });
+}
+function stableDefinition(record) {
+    const { status: _status, nextRunAt: _nextRunAt, updatedAt: _updatedAt, version: _version, ...stable } = record;
+    return stable;
+}
+/** Reproduce SQLite ADD COLUMN's insertion before the table constraints. */
+function addRunQuiescenceColumnSql(sql) {
+    if (sql === null)
+        return undefined;
+    let depth = 0;
+    // Skip quoted strings/identifiers and comments when finding structural commas.
+    const tokens = /'(?:''|[^'])*'|"(?:""|[^"])*"|`(?:``|[^`])*`|\[[^\]]*\]|--[^\n]*|\/\*[\s\S]*?\*\/|[(),]/gu;
+    for (const token of sql.matchAll(tokens)) {
+        if (token[0] === '(')
+            depth++;
+        if (token[0] === ')') {
+            depth--;
+            if (depth === 0)
+                return `${sql.slice(0, token.index)}, quiescent INTEGER CHECK(quiescent IN (0, 1))${sql.slice(token.index)}`;
+        }
+        if (token[0] === ',' && depth === 1
+            && /^\s*(?:CHECK|CONSTRAINT|FOREIGN\s+KEY|PRIMARY\s+KEY|UNIQUE)\b/iu.test(sql.slice(token.index + 1))) {
+            return `${sql.slice(0, token.index)}, quiescent INTEGER CHECK(quiescent IN (0, 1))${sql.slice(token.index)}`;
+        }
+    }
+    return undefined;
+}
+function verifySchema(before, after) {
+    const original = uniqueMap(before.schemaEntries, schemaKey, 'schema-changed');
+    const current = uniqueMap(after.schemaEntries, schemaKey, 'schema-changed');
+    const upgradesQuiescence = before.schemaVersion < 17 && after.schemaVersion === 17;
+    for (const [key, entry] of original) {
+        const updated = current.get(key);
+        if (upgradesQuiescence && entry.type === 'table' && entry.name === 'automation_runs') {
+            // Preserve every byte of the pre-existing SQL, including table constraints.
+            const expectedSql = addRunQuiescenceColumnSql(entry.sql);
+            if (typeof expectedSql !== 'string' || expectedSql === entry.sql
+                || !same({ ...entry, sql: expectedSql }, updated))
+                reject('schema-changed');
+        }
+        else if (!same(entry, updated))
+            reject('schema-changed');
+    }
+    if (before.schemaVersion === after.schemaVersion) {
+        if (original.size !== current.size || !same(before.schemaEntries, after.schemaEntries)
+            || before.schemaDigest !== after.schemaDigest)
+            reject('schema-changed');
+        return;
+    }
+    // Formal readers verify the exact retirement table/trigger SQL. Preserve the
+    // historical seven-identity v15->v16 allowance; upgrading to v17 additionally
+    // permits only the exact run quiescence column and immutable trigger.
+    const additions = before.schemaVersion === 15 ? [
+        { type: 'table', name: 'automation_system_retirements', table: 'automation_system_retirements', sql: '' },
+        { type: 'index', name: 'sqlite_autoindex_automation_system_retirements_1', table: 'automation_system_retirements', sql: null },
+        { type: 'index', name: 'sqlite_autoindex_automation_system_retirements_2', table: 'automation_system_retirements', sql: null },
+        { type: 'trigger', name: 'automation_retirements_no_update', table: 'automation_system_retirements', sql: '' },
+        { type: 'trigger', name: 'automation_retirements_no_delete', table: 'automation_system_retirements', sql: '' },
+        { type: 'trigger', name: 'automation_retired_no_activate_insert', table: 'automation_definitions', sql: '' },
+        { type: 'trigger', name: 'automation_retired_no_activate_update', table: 'automation_definitions', sql: '' },
+    ] : [];
+    if (upgradesQuiescence)
+        additions.push({ type: 'trigger', name: 'automation_run_quiescence_immutable',
+            table: 'automation_runs', sql: `CREATE TRIGGER automation_run_quiescence_immutable\n  BEFORE UPDATE OF quiescent ON automation_runs WHEN NEW.quiescent IS NOT OLD.quiescent\n  BEGIN SELECT RAISE(ABORT, 'run quiescence observation is immutable'); END` });
+    const allowed = new Map(additions.map(entry => [schemaKey(entry), entry]));
+    if (current.size !== original.size + allowed.size)
+        reject('schema-changed');
+    for (const [key, entry] of current) {
+        if (original.has(key))
+            continue;
+        const expected = allowed.get(key);
+        if (expected === undefined || entry.table !== expected.table
+            || (entry.name === 'automation_run_quiescence_immutable' && entry.sql !== expected.sql)
+            || (expected.sql === null ? entry.sql !== null : typeof entry.sql !== 'string' || entry.sql.length === 0))
+            reject('schema-changed');
+        allowed.delete(key);
+    }
+    if (allowed.size !== 0)
+        reject('schema-changed');
+}
+/**
+ * Freeze the exact operations before any staged service is mounted. Inputs have
+ * the same trusted-reader and independently derived configuration requirements
+ * as transition verification. These tuples confer no permission: the writer must
+ * use the formal Automations service and retain them unchanged across retries.
+ */
+export function prepareScannerRetirementOperations(input) {
+    try {
+        const { before, ownerProof } = input;
+        if (before.protocol !== 'assistant-automations/retirement-snapshot/v1'
+            || ![15, 16, 17].includes(before.schemaVersion) || before.inFlightCount !== 0
+            || !digestPattern.test(before.snapshotDigest))
+            reject('invalid-proof');
+        const evidenceForOwner = ownerEvidence(ownerProof);
+        if (!Array.isArray(input.targets) || input.targets.length > 4)
+            reject('invalid-targets');
+        const originals = uniqueMap(before.records, record => record.id, 'definitions-changed');
+        const oldMarkers = uniqueMap(before.retirements, markerKey, 'retirements-changed');
+        if (before.schemaVersion === 15 && oldMarkers.size !== 0)
+            reject('retirements-changed');
+        const owners = new Set();
+        return freeze(input.targets.map((inputTarget) => {
+            const target = { owner: inputTarget.owner, automationId: inputTarget.automationId };
+            const prefix = Object.hasOwn(scannerPrefixes, target.owner) ? scannerPrefixes[target.owner] : undefined;
+            if (!same(target, inputTarget) || prefix === undefined || typeof target.automationId !== 'string'
+                || !new RegExp(`^${prefix}[a-f0-9]{64}$`, 'u').test(target.automationId) || owners.has(target.owner))
+                reject('invalid-targets');
+            owners.add(target.owner);
+            const record = originals.get(target.automationId);
+            if (record === undefined || record.owner !== target.owner || record.runningTaskCount !== 0
+                || !['active', 'paused'].includes(record.status) || !integer(record.version, 1)
+                || !digestPattern.test(record.definitionHash))
+                reject('definitions-changed');
+            if (oldMarkers.has(markerKey(target)))
+                reject('retirements-changed');
+            const evidenceDigest = evidenceForOwner(target.owner);
+            return { ...target, definitionHash: record.definitionHash, expectedVersion: record.version,
+                operationId: `owner-revoked:${jsonDigest([target.owner, target.automationId, record.definitionHash, record.version, evidenceDigest])}`,
+                reason: 'owner-revoked', evidenceDigest };
+        }));
+    }
+    catch (error) {
+        if (error instanceof ScannerRetirementTransitionError)
+            throw error;
+        return reject('invalid-proof');
+    }
+}
+/**
+ * Pure verification of a preselected retirement change; grants no write or execution permission.
+ * Both snapshots and ownerProof MUST come from the formal trusted local readers.
+ * The parent installer MUST independently derive exact targets from frozen effective
+ * configuration and bind that configuration, owner route and transaction to this call.
+ * For Memory, ownerProof.frozenPrincipalVersion MUST equal the frozen learning
+ * grant owner.principalVersion; its expectedOwner scope uses that grant version,
+ * while the observed revoked state can be at a later durable principal version.
+ * A matching scanner prefix does not prove that a definition belongs to that config.
+ * Digests are consistency checks after trusted reads, never external authenticity signatures.
+ */
+export function verifyScannerRetirementTransition(input) {
+    try {
+        const { before, after, ownerProof } = input;
+        if (before.protocol !== 'assistant-automations/retirement-snapshot/v1' || after.protocol !== before.protocol
+            || ![15, 16, 17].includes(before.schemaVersion) || ![16, 17].includes(after.schemaVersion)
+            || after.schemaVersion < before.schemaVersion
+            || before.inFlightCount !== 0 || after.inFlightCount !== 0
+            || !digestPattern.test(before.snapshotDigest) || !digestPattern.test(after.snapshotDigest))
+            reject('invalid-proof');
+        const operations = prepareScannerRetirementOperations(input);
+        const targets = input.targets.map(target => ({ owner: target.owner, automationId: target.automationId }));
+        const selected = uniqueMap(targets, target => target.automationId, 'invalid-targets');
+        const originals = uniqueMap(before.records, record => record.id, 'definitions-changed');
+        const current = uniqueMap(after.records, record => record.id, 'definitions-changed');
+        if (originals.size !== current.size)
+            reject('definitions-changed');
+        for (const [id, record] of originals) {
+            const updated = current.get(id);
+            if (updated === undefined || record.runningTaskCount !== 0 || updated.runningTaskCount !== 0
+                || record.immutableDigest !== updated.immutableDigest)
+                reject('definitions-changed');
+            if (!selected.has(id) && !same(record, updated))
+                reject('definitions-changed');
+        }
+        const oldMarkers = uniqueMap(before.retirements, markerKey, 'retirements-changed');
+        const newMarkers = uniqueMap(after.retirements, markerKey, 'retirements-changed');
+        uniqueMap(after.retirements, marker => marker.operationId, 'retirements-changed');
+        if ((before.schemaVersion === 15 && oldMarkers.size !== 0)
+            || newMarkers.size !== oldMarkers.size + targets.length)
+            reject('retirements-changed');
+        for (const [key, marker] of oldMarkers)
+            if (!same(marker, newMarkers.get(key)))
+                reject('retirements-changed');
+        const receipts = targets.map((target, index) => {
+            const operation = operations[index];
+            const { evidenceDigest } = operation;
+            const record = originals.get(target.automationId);
+            const updated = current.get(target.automationId);
+            if (record === undefined || updated === undefined || record.owner !== target.owner
+                || (record.status !== 'active' && record.status !== 'paused') || record.runningTaskCount !== 0
+                || updated.runningTaskCount !== 0 || !integer(record.version, 1) || !integer(updated.version, 2)
+                || updated.version !== record.version + 1 || updated.status !== 'paused' || Object.hasOwn(updated, 'nextRunAt')
+                || !same(stableDefinition(record), stableDefinition(updated)))
+                reject('definitions-changed');
+            const key = markerKey(target);
+            const marker = newMarkers.get(key);
+            if (oldMarkers.has(key) || marker === undefined || !integer(marker.retiredAt)
+                || updated.updatedAt !== marker.retiredAt)
+                reject('retirements-changed');
+            const expected = {
+                ...operation, definitionVersion: updated.version, automationStatus: 'paused', retiredAt: marker.retiredAt,
+            };
+            if (!same(marker, expected))
+                reject('retirements-changed');
+            return { ...target, evidenceDigest, markerDigest: digest(canonicalJson(expected)) };
+        });
+        const history = uniqueMap(before.historyTables, table => table.name, 'history-changed');
+        const updatedHistory = uniqueMap(after.historyTables, table => table.name, 'history-changed');
+        if (history.size !== updatedHistory.size)
+            reject('history-changed');
+        for (const [index, table] of before.historyTables.entries()) {
+            const updated = updatedHistory.get(table.name);
+            if (after.historyTables[index]?.name !== table.name)
+                reject('history-changed');
+            if (before.schemaVersion < 17 && after.schemaVersion === 17 && table.name === 'automation_runs') {
+                // Only the trusted reader can compute this old-column projection. The
+                // new nullable column must carry no retrospectively signed observations.
+                if (!updated || updated.rowCount !== table.rowCount || updated.legacyDigest !== table.digest
+                    || updated.nonNullQuiescentCount !== 0
+                    || Object.keys(table).sort().join(',') !== 'digest,name,rowCount'
+                    || Object.keys(updated).sort().join(',') !== 'digest,legacyDigest,name,nonNullQuiescentCount,rowCount')
+                    reject('history-changed');
+            }
+            else if (!same(table, updated))
+                reject('history-changed');
+        }
+        verifySchema(before, after);
+        receipts.sort((left, right) => left.owner < right.owner ? -1 : left.owner > right.owner ? 1 : 0);
+        const unsigned = { protocol: scannerRetirementTransitionProtocol, beforeSnapshotDigest: before.snapshotDigest,
+            afterSnapshotDigest: after.snapshotDigest, ownerProofSnapshotDigest: ownerProof.snapshotDigest, targets: receipts };
+        return freeze({ ...unsigned, receiptDigest: digest(canonicalJson(unsigned)) });
+    }
+    catch (error) {
+        if (error instanceof ScannerRetirementTransitionError)
+            throw error;
+        return reject('invalid-proof');
+    }
+}
+//# sourceMappingURL=rsi-scanner-retirement-transition.js.map

package/lib/rsi-scanner-retirement-transition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-scanner-retirement-transition.js","sourceRoot":"","sources":["../src/rsi-scanner-retirement-transition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAOxC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAG/F,MAAM,eAAe,GAAG;IACtB,2BAA2B,EAAE,cAAc;IAC3C,wBAAwB,EAAE,aAAa;IACvC,wCAAwC,EAAE,wBAAwB;IAClE,yCAAyC,EAAE,0BAA0B;CAC7D,CAAA;AAiBV,MAAM,CAAC,MAAM,mCAAmC,GAAG,+CAAwD,CAAA;AAc3G,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IACpC;IAArB,YAAqB,IAA0C;QAC7D,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAA;QADrC,SAAI,GAAJ,IAAI,CAAsC;QAE7D,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAA;IAChD,CAAC;CACF;AAED,MAAM,aAAa,GAAG,iBAAiB,CAAA;AACvC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC1F,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5E,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,OAAO,GAAG,CAAC,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ;OACtF,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,OAAO,CAAA;AAEpD,SAAS,MAAM,CAAC,IAA0C,IAAW,MAAM,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC;AACvH,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAC1E,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;AACvH,CAAC;AACD,SAAS,IAAI,CAAC,IAAa,EAAE,KAAc,IAAa,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAC7G,SAAS,MAAM,CAAI,KAAQ;IACzB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,SAAS,CAAI,KAAmB,EAAE,GAAwB,EAAE,IAA0C;IAC7G,MAAM,MAAM,GAAG,IAAI,GAAG,EAAa,CAAA;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;QAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AACD,MAAM,SAAS,GAAG,CAAC,MAA+C,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;AAClI,MAAM,SAAS,GAAG,CAAC,KAAsC,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;AAE9G,6FAA6F;AAC7F,SAAS,aAAa,CAAC,KAAgC;IACrD,IAAI,KAAK,CAAC,QAAQ,KAAK,oDAAoD;WACtE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;WACnE,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAAE,MAAM,CAAC,eAAe,CAAC,CAAA;IACpH,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;IACjC,MAAM,aAAa,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAA;IACxD,8EAA8E;IAC9E,8EAA8E;IAC9E,mFAAmF;IACnF,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAA;IAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAA;IACrC,MAAM,gBAAgB,GAAG;QACvB,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,YAAY,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM;YACvG,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE;QACnI,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;QACrH,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS;QAClG,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;KAC/C,CAAA;IACD,IAAI,UAAU,CAAC,gBAAgB,CAAC,KAAK,aAAa;QAAE,MAAM,CAAC,eAAe,CAAC,CAAA;IAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;IACzB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa;WACxG,KAAK,CAAC,WAAW,KAAK,mBAAmB,CAAC,SAAS,CAAC;WACpD,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;WAC1G,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,sBAAsB;QAAE,MAAM,CAAC,eAAe,CAAC,CAAA;IAC1H,MAAM,YAAY,GAAG,EAAE,MAAM,EAAE,SAAkB,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,aAAa;QACzF,WAAW,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAA;IACrI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC;QAAE,MAAM,CAAC,eAAe,CAAC,CAAA;IACvD,MAAM,EAAE,cAAc,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAA;IAC7C,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KAAK,cAAc;QAAE,MAAM,CAAC,eAAe,CAAC,CAAA;IAC/E,OAAO,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,0BAA0B;QAC/D,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW;YACvE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW;YAClE,GAAG,CAAC,KAAK,KAAK,2BAA2B,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,aAAa;oBAC1E,iBAAiB,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACjH,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA4C;IACpE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAA;IAC9G,OAAO,MAAM,CAAA;AACf,CAAC;AAED,4EAA4E;AAC5E,SAAS,yBAAyB,CAAC,GAAkB;IACnD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAClC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,+EAA+E;IAC/E,MAAM,MAAM,GAAG,2FAA2F,CAAA;IAC1G,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAA;QAC7B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,KAAK,EAAE,CAAA;YACP,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,iDAAiD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAA;QAC/H,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC;eAC9B,iEAAiE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACxG,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,iDAAiD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAA;QAC9G,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,MAAoC,EAAE,KAAmC;IAC7F,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC7E,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC3E,MAAM,kBAAkB,GAAG,MAAM,CAAC,aAAa,GAAG,EAAE,IAAI,KAAK,CAAC,aAAa,KAAK,EAAE,CAAA;IAClF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACrF,4EAA4E;YAC5E,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACxD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,KAAK,CAAC,GAAG;mBAC3D,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC;gBAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;QAC/E,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC;eACjF,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;YAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;QACzE,OAAM;IACR,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,sEAAsE;IACtE,MAAM,SAAS,GAAsC,MAAM,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,+BAA+B,EAAE,GAAG,EAAE,EAAE,EAAE;QACzG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,kDAAkD,EAAE,KAAK,EAAE,+BAA+B,EAAE,GAAG,EAAE,IAAI,EAAE;QAC9H,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,kDAAkD,EAAE,KAAK,EAAE,+BAA+B,EAAE,GAAG,EAAE,IAAI,EAAE;QAC9H,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kCAAkC,EAAE,KAAK,EAAE,+BAA+B,EAAE,GAAG,EAAE,EAAE,EAAE;QAC9G,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kCAAkC,EAAE,KAAK,EAAE,+BAA+B,EAAE,GAAG,EAAE,EAAE,EAAE;QAC9G,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,uCAAuC,EAAE,KAAK,EAAE,wBAAwB,EAAE,GAAG,EAAE,EAAE,EAAE;QAC5G,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,uCAAuC,EAAE,KAAK,EAAE,wBAAwB,EAAE,GAAG,EAAE,EAAE,EAAE;KAC7G,CAAC,CAAC,CAAC,EAAE,CAAA;IACN,IAAI,kBAAkB;QAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,qCAAqC;YACnG,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,0NAA0N,EAAE,CAAC,CAAA;IAC9P,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;QAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;eACvD,CAAC,KAAK,CAAC,IAAI,KAAK,qCAAqC,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC;eACpF,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;QACrI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,KAAsD;IAEtD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;QACpC,IAAI,MAAM,CAAC,QAAQ,KAAK,8CAA8C;eACjE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;eAC1E,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAAE,MAAM,CAAC,eAAe,CAAC,CAAA;QACxE,MAAM,gBAAgB,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;QACxF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAA;QACvF,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAA;QAClF,IAAI,MAAM,CAAC,aAAa,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;QACvF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;QAChC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAoC,EAAE,EAAE;YACvE,MAAM,MAAM,GAA4B,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,CAAA;YAC5G,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACvG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;mBAC5F,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;YACjI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACxB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;YACjD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,gBAAgB,KAAK,CAAC;mBACrF,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;mBAC5E,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;YAC9E,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;YACpE,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrD,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO;gBACxF,WAAW,EAAE,iBAAiB,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE;gBACtI,MAAM,EAAE,eAAwB,EAAE,cAAc,EAAE,CAAA;QACtD,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gCAAgC;YAAE,MAAM,KAAK,CAAA;QAClE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAA;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAAuC;IACvF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;QAC3C,IAAI,MAAM,CAAC,QAAQ,KAAK,8CAA8C,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;eACvG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;eACvF,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa;eAC1C,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC;eACvD,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;YAAE,MAAM,CAAC,eAAe,CAAC,CAAA;QACrH,MAAM,UAAU,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAA;QAC5D,MAAM,OAAO,GAA8B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;QACpI,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAA;QACrF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAA;QACvF,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAA;QACpF,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;QAClE,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/B,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,KAAK,CAAC,IAAI,OAAO,CAAC,gBAAgB,KAAK,CAAC;mBACvF,MAAM,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe;gBAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;YACtF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;gBAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAA;QAClF,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAA;QACjF,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAA;QACjF,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC;eACrD,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;QACxF,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;QAC7G,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAE,CAAA;YACpC,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,CAAA;YACpC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;YACjD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;YAChD,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;mBAC7E,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,KAAK,CAAC;mBAC3F,OAAO,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;mBAC7F,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC;mBAC5G,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;YAC9F,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;YAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAClC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;mBACxE,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;YAC1E,MAAM,QAAQ,GAAgC;gBAC5C,GAAG,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;aAC1G,CAAA;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAAE,MAAM,CAAC,qBAAqB,CAAC,CAAA;YAC1D,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAA;QACrF,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;QACvF,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;QAC7F,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI;YAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;QACnE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC9C,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,KAAK,CAAC,IAAI;gBAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;YAC9E,IAAI,MAAM,CAAC,aAAa,GAAG,EAAE,IAAI,KAAK,CAAC,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAChG,sEAAsE;gBACtE,yEAAyE;gBACzE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM;uBACvF,OAAO,CAAC,qBAAqB,KAAK,CAAC;uBACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,sBAAsB;uBAC9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,yDAAyD;oBAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;YACrI,CAAC;iBAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;gBAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;QAC7D,CAAC;QACD,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC3B,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAChG,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,mCAAmC,EAAE,oBAAoB,EAAE,MAAM,CAAC,cAAc;YAC3G,mBAAmB,EAAE,KAAK,CAAC,cAAc,EAAE,wBAAwB,EAAE,UAAU,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;QACrH,OAAO,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gCAAgC;YAAE,MAAM,KAAK,CAAA;QAClE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAA;IAChC,CAAC;AACH,CAAC"}