@dsh-enhanced/personal-memory 0.1.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-enhanced contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,115 @@
+# @dsh-enhanced/personal-memory
+
+面向个人助理的短期上下文之外长期记忆：保存简短且稳定的事实、偏好、约定和经验，按 user/agent 与 user-global/workspace 双维隔离，通过 `assistant-policy` 的持久审批提案写入。研究资料、文档和项目知识不属于这里，应交给 `personal-wiki`。
+
+## 安装
+
+本插件要求 `@dsh-enhanced/assistant-policy` 已经挂载并提供 `ctx.assistantPolicy`。生产环境还应组合
+`@dsh-enhanced/assistant-delivery`，由当前 Agent 会话绑定的 owner 私聊派生审批 principal、workspace
+和投递 binding：
+
+```sh
+dsh plugin --profile web add @dsh-enhanced/assistant-policy
+dsh plugin --profile web add @dsh-enhanced/assistant-delivery
+dsh plugin --profile web add @dsh-enhanced/personal-memory
+dsh --profile web --dump-config
+```
+
+上面的 Policy 片段只覆盖 Memory 自身的前台权限，不足以发送或点击审批卡。生产飞书闭环应运行
+`dsh-lark-setup --profile web --create-app --allow-agent-tools`；向导会为 exact owner binding 写入
+`dsh-enhanced-personal-memory` 的 `approval.send` 与 owner `approval.decide` 规则。若手工维护 Policy，必须
+提供同等精确的 source、workspace、principal 与 binding 限制，不能使用通配 owner 或 workspace。
+
+默认数据库位于 `$DSH_HOME/personal-memory/memory.sqlite`。单独安装后的 policy 默认没有 allow 规则，所以记忆搜索、快照和提案都会 fail closed；需要在 profile 中按实际 preset 与绝对 workspace 放行：
+
+```yaml
+- id: dsh-enhanced-assistant-policy
+  name: '@dsh-enhanced/assistant-policy'
+  config:
+    databasePath: !!js dshHomePath('assistant-policy/policy.sqlite')
+    rules:
+      - id: allow-primary-memory-service
+        effect: allow
+        subject: { kind: agent, id: primary, workspace: /absolute/workspace }
+        actions: [export, propose, search, snapshot]
+        resource: { kind: memory, id: "*" }
+        context: { initiators: [foreground] }
+      - id: allow-primary-memory-tools
+        effect: allow
+        subject: { kind: agent, id: primary, workspace: /absolute/workspace }
+        actions: [execute]
+        resource: { kind: tool, id: memory_* }
+        context: { initiators: [foreground] }
+    budgets: []
+```
+
+## 行为与工具
+
+- `memory_search`：显式检索当前 agent 可见的四个域；ASCII 与中文 unigram/bigram 均可召回，排序和 tie-break 确定，读取不更新任何计数。
+- `memory_manage`：只创建 add/replace/remove 提案，返回完整 diff、proposal id、TTL 和版本；它没有直接提交路径，也不接受模型提供 principal 或 TTL。principal、workspace 和飞书投递 binding 必须来自当前 Agent 的 authenticated Delivery owner route，TTL 来自可信配置；没有活动绑定时 fail closed。
+- `ctx.personalMemory.decideProposal(...)`：供绑定 owner 的可信通道/UI 决定提案。principal、版本、决定内容和理由均受幂等/CAS 约束。
+- `ctx.personalMemory.exportJson(agent)`：导出版本化 JSON，不包含哈希、状态、时间戳、token 表或审计表。
+- `ctx.personalMemory.proposeImport(...)`：先验证整个有界文档，再为每条记录创建审批提案；Agent 路径同样由 Delivery 派生审批 authority，未批准前不会写入 memory record。仅在未组合 Delivery 的可信本地/headless 集成中，程序化调用方可以显式传入 principal；一旦 Delivery 可用就不能用该字段覆盖绑定 owner。
+
+每次 `agent/session-start` 最多注入一次冻结快照。快照合并 user-global、当前 workspace、当前 agent-global 和当前 agent-workspace，受 top-K、字节和粗略 token 三重预算约束；`sensitive` 记录不会进入环境快照。内容被包在 `<memory_source>` 中并明确标为“不可信数据而非指令”，所有 XML 元字符在预算计算前转义，记录无法闭合数据边界。`memory_search` 与 `memory_manage` 的模型可见结果也分别使用有界、转义的 `<memory_search_results>` / `<memory_proposal_results>` framing。缺少绝对 cwd 或 agent preset 时不搜索、不提案、不注入，也不会退化到共享域。
+
+## 数据与一致性
+
+SQLite 使用 WAL、`busy_timeout`、外键、FULL synchronous 和前向 schema 版本；目录为 `0700`，数据库为 `0600`。记录包含 stable id、内容哈希、provenance、trust、confidence、sensitivity、TTL、supersedes 和 version。replace/remove 在批准后重新读取 target version 并以 CAS 提交；审批与内存位于两个数据库，若进程恰好在 policy 批准后退出，可用原决定安全重放。并发变化会把提案标为 `conflicted`，不会覆盖新值。
+
+创建提案时先在 Memory 数据库持久化 creation intent，再调用 Policy 原子创建 proposal + dispatch，最后在
+同一个本地事务 attach Policy ID 并删除 intent。任一步崩溃后，reconcile 都能从 intent 自动续做，不依赖
+原 Agent turn 或人工重发。恢复使用 Policy 的原子 recover-or-create：同一个 `BEGIN IMMEDIATE` 先匹配
+requester、principal、action、resource、绝对 deadline、diff、summary 和 exact dispatch route；若已有提案，
+即使 deadline 已过也返回既有终态，若尚无提案则只在 deadline 前创建。deadline 后 Policy 会永久 tombstone
+该幂等键，普通 propose 也不能复活或留下孤儿审批卡；Memory 随后把 intent 持久标为 `conflicted`。pending
+扫描使用持久 round-robin 顺序；一页未决定提案不会饿死后页已决提案。已经 attach Policy ID 的本地提案只按
+该 ID 做只读恢复；Policy 行缺失会 durable conflict，绝不重新创建 proposal/dispatch。proposal 与 intent 的
+判定也在同一个本地写事务中完成，避免多进程交错留下双状态或 poison intent。旧 schema 的 crash-gap intent
+先做 scoped read-only lookup；确有旧 Policy 行时精确回放原 TTL/dispatch，否则回到绝对 deadline 的原子恢复。
+
+JSON 导入是一组独立、可重放的提案，不承诺跨所有记录的一次性批准或全批原子提交。SQLite 仅承诺单机多连接语义，不用于多主机共享文件系统。
+
+## 配置上限
+
+| 字段 | 默认值 | 作用 |
+|---|---:|---|
+| `approvalMode` | `delivery-required` | 生产默认要求 authenticated Delivery route；仅可信本地/headless 集成可显式设为 `delivery-or-headless` 并传 principal |
+| `maxContentBytes` | 4096 | 单条内容最大 UTF-8 字节数 |
+| `maxRecordsPerIdentity` | 1000 | 每个完整身份域的活动记录上限 |
+| `searchLimit` | 20 | 未显式指定时的搜索上限 |
+| `snapshotLimit` | 20 | 会话快照候选上限 |
+| `snapshotMaxBytes` | 8192 | 快照最大 UTF-8 字节数 |
+| `snapshotMaxTokens` | 2048 | 快照粗略 token 上限 |
+| `defaultProposalTtlMs` | 900000 | 默认提案有效期（15 分钟） |
+| `maxImportRecords` | 100 | 单次导入最大记录数 |
+| `reconcileIntervalMs` | 15000 | 提交“会话结束后才被批准”的提案的轮询间隔；`0` 关闭定时器，上限为 Node timer 的 `2147483647` ms |
+| `reconcileLimit` | 50 | 每轮 reconcile 检查的本地待决提案上限 |
+
+## 延迟审批的提交闭环
+
+`memory_manage` 只创建提案，永不直接写入。提案与 Policy 的 durable approval-dispatch route 在同一事务创建，Delivery 会把 Policy 冻结的 summary/diff/版本投递给 exact owner binding。审批可能发生在原 turn 结束之后（例如几分钟后在飞书卡片上点击），因此本插件会周期性调用 `reconcileProposals()`：读取 policy 账本中该提案的**终态**，再用与 `decideProposal` 完全相同的事务路径提交。
+
+三条边界：
+
+- **不推断批准**：pending 仍然是 pending；只有 policy 账本给出 `approved`/`rejected` 才落盘。
+- **幂等**：重复 reconcile 不会重复写入或重复结算，重启后同样安全。
+- **完整校验**：提交前重新校验 proposal id、requester、principal、action、resource、summary、diff hash、expiry、版本与 decider；任一字段不符会把本地提案持久标为 `conflicted`，绝不写 memory。
+- **不复活 intent**：Policy 在一个事务内完成 existing-exact / create-before-deadline / abandon-after-deadline 三选一；abandonment tombstone 会阻止其他进程随后创建孤儿 dispatch。
+- **不反向调用**：policy 从不回调本插件；方向始终是本插件读取 policy。
+
+需要完全由宿主驱动时，把 `reconcileIntervalMs` 设为 `0` 并自行调用 `reconcileProposals()`。可信的无 Delivery
+集成还必须显式配置 `approvalMode: delivery-or-headless`；Delivery 热重载或尚未就绪不会让生产默认自动
+降级为 caller-supplied principal。
+
+## 权限与非目标
+
+- 文件系统：只读写配置的 SQLite 数据库及其 WAL/SHM 辅助文件。
+- 网络：本插件本身不发网络请求；组合 Delivery 时只写 durable dispatch，由 channel 插件负责发送审批卡片。
+- 子进程、凭据、浏览器、安装脚本：无。
+- 数据敏感性：`sensitive` 只表示禁止环境快照；显式、已授权的搜索仍可能把内容发送给当前模型。真正的密码/API key 应放在后续 `credentials-keychain`，不要写入 memory。
+- 非目标：向量数据库、自动无审批写入、自动遗忘/dreaming、知识图谱、Wiki 长文、跨设备同步和多用户 ACL。
+
+## 兼容性
+
+已针对 DeepSeek Harness `0.1.0-rc.8`（源码提交 `141eb6fef83422698aef7a981029e843e8161534`）验证。详见仓库[兼容性基线](../../docs/compatibility.md)。

package/cordis.patch.yml

@@ -0,0 +1,18 @@
+- insert:
+    - id: dsh-enhanced-personal-memory
+      name: '@dsh-enhanced/personal-memory'
+      inject:
+        - assistantPolicy
+      config:
+        databasePath: !!js dshHomePath('personal-memory/memory.sqlite')
+        approvalMode: delivery-required
+        maxContentBytes: 4096
+        maxRecordsPerIdentity: 1000
+        searchLimit: 20
+        snapshotLimit: 20
+        snapshotMaxBytes: 8192
+        snapshotMaxTokens: 2048
+        defaultProposalTtlMs: 900000
+        maxImportRecords: 100
+        reconcileIntervalMs: 15000
+        reconcileLimit: 50

package/lib/index.d.ts

@@ -0,0 +1,11 @@
+import type { Context } from '@deepseek-ai/cordis';
+import { PersonalMemoryService } from './service.js';
+import type { Config } from './service.js';
+import { version } from './version.js';
+export declare const name = "dsh-enhanced-personal-memory";
+export { PersonalMemoryService, version };
+export type { Config };
+export * from './types.js';
+export declare function apply(ctx: Context, config: import('./service.js').Config): void;
+export default PersonalMemoryService;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,eAAO,MAAM,IAAI,iCAAiC,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAA;AACzC,YAAY,EAAE,MAAM,EAAE,CAAA;AACtB,cAAc,YAAY,CAAA;AAE1B,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,cAAc,EAAE,MAAM,GAAG,IAAI,CAE/E;AAED,eAAe,qBAAqB,CAAA"}

package/lib/index.js

@@ -0,0 +1,10 @@
+import { PersonalMemoryService } from './service.js';
+import { version } from './version.js';
+export const name = 'dsh-enhanced-personal-memory';
+export { PersonalMemoryService, version };
+export * from './types.js';
+export function apply(ctx, config) {
+    new PersonalMemoryService(ctx, config);
+}
+export default PersonalMemoryService;
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAEpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,IAAI,GAAG,8BAA8B,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAA;AAEzC,cAAc,YAAY,CAAA;AAE1B,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAqC;IACvE,IAAI,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACxC,CAAC;AAED,eAAe,qBAAqB,CAAA"}

package/lib/proposals.d.ts

@@ -0,0 +1,29 @@
+import { type ApprovalDecisionInput, type ApprovalProposalLookupInput, type ApprovalProposalInput, type ApprovalProposalRecoveryInput, type ApprovalProposalRecoveryResult, type ApprovalProposalResult, type ApprovalProposalSnapshot } from '@dsh-enhanced/assistant-policy';
+import { MemoryStore } from './store.js';
+import type { MemoryProposalDecisionInput, MemoryProposalInput, MemoryProposalResult } from './types.js';
+export interface MemoryApprovalPolicy {
+    propose(input: ApprovalProposalInput): ApprovalProposalResult;
+    recoverOrCreateProposal(input: ApprovalProposalRecoveryInput): ApprovalProposalRecoveryResult;
+    decideProposal(input: ApprovalDecisionInput): ApprovalProposalResult;
+    getProposal(proposalId: string): ApprovalProposalSnapshot | undefined;
+    getProposalByIdempotencyKey?(input: ApprovalProposalLookupInput): ApprovalProposalSnapshot | undefined;
+}
+export declare class MemoryProposalManager {
+    #private;
+    private readonly store;
+    private readonly policy;
+    constructor(store: MemoryStore, policy: MemoryApprovalPolicy);
+    propose(input: MemoryProposalInput): MemoryProposalResult;
+    decide(input: MemoryProposalDecisionInput): MemoryProposalResult;
+    getProposal(proposalId: string): MemoryProposalResult | undefined;
+    /**
+     * Commit locally pending proposals whose policy decision already settled
+     * elsewhere, for example on an approval card minutes after the turn ended.
+     *
+     * Approval is never inferred: the decision is read back from the policy ledger,
+     * and only a terminal policy status is settled here. Each settle reuses the
+     * existing idempotent commit path, so repeated reconciles are safe.
+     */
+    reconcile(limit: number): MemoryProposalResult[];
+}
+//# sourceMappingURL=proposals.d.ts.map

package/lib/proposals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals.d.ts","sourceRoot":"","sources":["../src/proposals.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC9B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAGL,WAAW,EAGZ,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAEV,2BAA2B,EAC3B,mBAAmB,EACnB,oBAAoB,EAIrB,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CAAA;IAC7D,uBAAuB,CAAC,KAAK,EAAE,6BAA6B,GAAG,8BAA8B,CAAA;IAC7F,cAAc,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CAAA;IACpE,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAAA;IACrE,2BAA2B,CAAC,CAAC,KAAK,EAAE,2BAA2B,GAAG,wBAAwB,GAAG,SAAS,CAAA;CACvG;AAiED,qBAAa,qBAAqB;;IAE9B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,oBAAoB;IAG/C,OAAO,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB;IAwJzD,MAAM,CAAC,KAAK,EAAE,2BAA2B,GAAG,oBAAoB;IA+BhE,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAKjE;;;;;;;OAOG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,EAAE;CA+EjD"}

package/lib/proposals.js

@@ -0,0 +1,329 @@
+import { createHash } from 'node:crypto';
+import { ApprovalSettlementConflict, validateApprovalSettlement, } from '@dsh-enhanced/assistant-policy';
+import { hashMemoryMutation, isMissingPolicyProposalId, MemoryStore, MemoryStoreError, missingPolicyProposalId, } from './store.js';
+function deterministicProposalId(idempotencyKey) {
+    return `memory-${createHash('sha256').update(idempotencyKey).digest('hex').slice(0, 32)}`;
+}
+function proposalDiff(mutation) {
+    return JSON.stringify(mutation, null, 2);
+}
+function proposalSummary(mutation) {
+    const target = mutation.op === 'add' ? mutation.entry.kind : mutation.id;
+    return `${mutation.op} ${mutation.identity.owner} ${mutation.identity.scope} memory ${target}`;
+}
+function hashMemoryProposalIntent(input) {
+    const dispatch = input.dispatch === undefined
+        ? null
+        : {
+            sourceId: input.dispatch.sourceId,
+            bindingId: input.dispatch.bindingId,
+            workspace: input.dispatch.workspace,
+            principal: input.dispatch.principal,
+        };
+    return createHash('sha256').update(JSON.stringify({
+        mutation: input.mutation,
+        ttlMs: input.ttlMs,
+        dispatch,
+    })).digest('hex');
+}
+function proposalCreationVersion(proposal) {
+    const expectedCurrentVersion = proposal.status === 'pending' ? 1 : 2;
+    if (proposal.version !== expectedCurrentVersion) {
+        throw new MemoryStoreError('invalid-entry', 'assistant-policy returned an invalid proposal lifecycle version');
+    }
+    return 1;
+}
+function permanentPolicyRecoveryFailure(error) {
+    if (error === null || typeof error !== 'object' || !('code' in error))
+        return false;
+    return ['idempotency-conflict', 'invalid-input', 'invalid-path', 'unauthorized']
+        .includes(String(error.code));
+}
+function result(proposal, replayed, record) {
+    const diff = proposalDiff(proposal.mutation);
+    return Object.freeze({
+        proposalId: proposal.proposalId,
+        policyProposalId: proposal.policyProposalId,
+        status: proposal.status,
+        version: proposal.version,
+        expiresAt: proposal.expiresAt,
+        mutation: proposal.mutation,
+        diff,
+        summary: proposalSummary(proposal.mutation),
+        replayed,
+        ...(record === undefined ? {} : { record }),
+    });
+}
+export class MemoryProposalManager {
+    store;
+    policy;
+    constructor(store, policy) {
+        this.store = store;
+        this.policy = policy;
+    }
+    propose(input) {
+        if (input.idempotencyKey.trim() === '') {
+            throw new MemoryStoreError('invalid-entry', 'proposal idempotencyKey must not be empty');
+        }
+        const proposalId = deterministicProposalId(input.idempotencyKey);
+        const mutation = this.store.normalizeMutation(input.mutation, { preflight: false });
+        const normalized = {
+            ...input,
+            mutation,
+        };
+        const mutationHash = hashMemoryProposalIntent(normalized);
+        const prepared = this.store.prepareProposalIntent({
+            ...normalized,
+            proposalId,
+            mutationHash,
+        });
+        if (prepared.kind === 'conflict') {
+            throw new MemoryStoreError('idempotency-conflict', 'proposal key was used for another mutation');
+        }
+        if (prepared.kind === 'proposal') {
+            return this.#replayStoredProposal(prepared.proposal, normalized);
+        }
+        return this.#submitProposal(prepared.intent, prepared.replayed);
+    }
+    #replayStoredProposal(existing, authority) {
+        if (isMissingPolicyProposalId(existing.policyProposalId)) {
+            if (existing.policyProposalId !== missingPolicyProposalId(existing.proposalId, authority.ttlMs, authority.dispatch)) {
+                throw new MemoryStoreError('idempotency-conflict', 'expired proposal intent replay changed its authority');
+            }
+            return result(existing, true);
+        }
+        if (existing.status !== 'pending')
+            return result(existing, true);
+        return this.#recoverAttachedProposal(existing);
+    }
+    #submitProposal(input, intentReplayed) {
+        const proposalId = deterministicProposalId(input.idempotencyKey);
+        const diff = proposalDiff(input.mutation);
+        const mutationHash = hashMemoryProposalIntent(input);
+        const legacyMutationHash = hashMemoryMutation(input.mutation);
+        if (input.proposalId !== proposalId
+            || (input.mutationHash !== mutationHash && input.mutationHash !== legacyMutationHash)) {
+            throw new MemoryStoreError('idempotency-conflict', 'durable proposal intent does not match its canonical payload');
+        }
+        const policyContent = {
+            idempotencyKey: `personal-memory:${input.idempotencyKey}`,
+            requester: input.requester,
+            principal: input.principal,
+            action: `memory.${input.mutation.op}`,
+            resource: { kind: 'memory', id: proposalId },
+            diff,
+            summary: proposalSummary(input.mutation),
+            ...(input.dispatch === undefined ? {} : { dispatch: input.dispatch }),
+        };
+        let policyProposal;
+        try {
+            const notAfter = input.createdAt + input.ttlMs;
+            if (!Number.isSafeInteger(notAfter)) {
+                throw new MemoryStoreError('invalid-entry', 'proposal intent deadline exceeds the safe timestamp range');
+            }
+            const legacyReplay = input.mutationHash === legacyMutationHash
+                && input.mutationHash !== mutationHash;
+            const legacyExisting = legacyReplay
+                ? this.policy.getProposalByIdempotencyKey?.({
+                    idempotencyKey: policyContent.idempotencyKey,
+                    requester: policyContent.requester,
+                    principal: policyContent.principal,
+                    action: policyContent.action,
+                    resource: policyContent.resource,
+                })
+                : undefined;
+            if (legacyExisting !== undefined) {
+                // The read is deliberately scoped and non-creating. Policy proposal rows
+                // are immutable/non-deletable, so ordinary propose now performs an exact
+                // legacy TTL/dispatch replay without opening a missing-row create path.
+                policyProposal = this.policy.propose({ ...policyContent, ttlMs: input.ttlMs });
+            }
+            else {
+                const recovered = this.policy.recoverOrCreateProposal({ ...policyContent, notAfter });
+                if (recovered.kind === 'abandoned') {
+                    const conflicted = this.store.conflictProposalIntent(proposalId);
+                    return result(conflicted.proposal, intentReplayed || recovered.replayed || conflicted.replayed);
+                }
+                policyProposal = recovered.proposal;
+            }
+        }
+        catch (error) {
+            if (!permanentPolicyRecoveryFailure(error)
+                && !(error instanceof MemoryStoreError && error.code === 'invalid-entry'))
+                throw error;
+            const conflicted = this.store.conflictProposalIntent(proposalId);
+            return result(conflicted.proposal, intentReplayed || conflicted.replayed);
+        }
+        let expectedVersion;
+        try {
+            expectedVersion = proposalCreationVersion(policyProposal);
+        }
+        catch {
+            const conflicted = this.store.conflictProposalIntent(proposalId);
+            return result(conflicted.proposal, intentReplayed || conflicted.replayed);
+        }
+        const attached = this.store.getProposal(proposalId);
+        if (attached !== undefined && attached.policyProposalId !== policyProposal.proposalId) {
+            return this.#settleSecurityConflict(attached);
+        }
+        const saved = this.store.saveProposal({
+            proposalId,
+            policyProposalId: policyProposal.proposalId,
+            idempotencyKey: input.idempotencyKey,
+            requester: input.requester,
+            principal: input.principal,
+            mutation: input.mutation,
+            mutationHash,
+            expiresAt: policyProposal.expiresAt,
+            version: expectedVersion,
+        });
+        const replayed = intentReplayed || policyProposal.replayed || saved.replayed;
+        if (saved.proposal.status !== 'pending' || policyProposal.status === 'pending') {
+            return result(saved.proposal, replayed);
+        }
+        const snapshot = this.policy.getProposal(saved.proposal.policyProposalId);
+        return this.#settleValidated(saved.proposal, snapshot, saved.proposal.version, replayed);
+    }
+    #recoverAttachedProposal(proposal) {
+        const snapshot = this.policy.getProposal(proposal.policyProposalId);
+        if (snapshot === undefined)
+            return this.#settleSecurityConflict(proposal);
+        if (snapshot.status !== 'pending') {
+            return this.#settleValidated(proposal, snapshot, proposal.version, true);
+        }
+        const exactPending = snapshot.proposalId === proposal.policyProposalId
+            && snapshot.requester === proposal.requester
+            && snapshot.principal === proposal.principal
+            && snapshot.action === `memory.${proposal.mutation.op}`
+            && snapshot.resource.kind === 'memory'
+            && snapshot.resource.id === proposal.proposalId
+            && snapshot.summary === proposalSummary(proposal.mutation)
+            && snapshot.diffHash === createHash('sha256').update(proposalDiff(proposal.mutation)).digest('hex')
+            && snapshot.expiresAt === proposal.expiresAt
+            && snapshot.version === proposal.version
+            && snapshot.decidedBy === undefined
+            && snapshot.decisionReason === undefined;
+        return exactPending ? result(proposal, true) : this.#settleSecurityConflict(proposal);
+    }
+    decide(input) {
+        const proposal = this.store.getProposal(input.proposalId);
+        if (proposal === undefined)
+            throw new MemoryStoreError('not-found', 'memory proposal was not found');
+        if (isMissingPolicyProposalId(proposal.policyProposalId)) {
+            if (input.principal !== proposal.principal) {
+                throw new MemoryStoreError('invalid-entry', 'memory proposal is bound to another principal');
+            }
+            return result(proposal, true);
+        }
+        const decision = this.policy.decideProposal({
+            proposalId: proposal.policyProposalId,
+            principal: input.principal,
+            expectedVersion: input.expectedVersion,
+            decision: input.decision,
+            reason: input.reason,
+        });
+        if (decision.status === 'pending') {
+            return this.#settleSecurityConflict(proposal);
+        }
+        if (proposal.status !== 'pending') {
+            const replay = this.store.settleProposal({
+                proposalId: proposal.proposalId,
+                policyStatus: decision.status,
+                policyVersion: decision.version,
+            });
+            return result(replay.proposal, decision.replayed || replay.replayed, replay.record);
+        }
+        const snapshot = this.policy.getProposal(proposal.policyProposalId);
+        return this.#settleValidated(proposal, snapshot, proposal.version, decision.replayed);
+    }
+    getProposal(proposalId) {
+        const proposal = this.store.getProposal(proposalId);
+        return proposal === undefined ? undefined : result(proposal, true);
+    }
+    /**
+     * Commit locally pending proposals whose policy decision already settled
+     * elsewhere, for example on an approval card minutes after the turn ended.
+     *
+     * Approval is never inferred: the decision is read back from the policy ledger,
+     * and only a terminal policy status is settled here. Each settle reuses the
+     * existing idempotent commit path, so repeated reconciles are safe.
+     */
+    reconcile(limit) {
+        const settled = [];
+        const intentLimit = limit === 1 ? 1 : Math.floor(limit / 2);
+        const intents = this.store.listProposalIntents(intentLimit);
+        for (const intent of intents) {
+            try {
+                // Re-resolve proposal-vs-intent under the local write lock before any
+                // Policy call. This also removes poison residue left by older versions
+                // that could represent both states in separate tables.
+                const prepared = this.store.prepareProposalIntent({
+                    ...intent,
+                    proposalId: intent.proposalId,
+                    mutationHash: intent.mutationHash,
+                });
+                if (prepared.kind === 'conflict') {
+                    this.store.deferProposalIntent(intent.proposalId);
+                    continue;
+                }
+                const recovered = prepared.kind === 'proposal'
+                    ? this.#replayStoredProposal(prepared.proposal, intent)
+                    : this.#submitProposal(prepared.intent, true);
+                if (recovered.status !== 'pending')
+                    settled.push(recovered);
+            }
+            catch {
+                this.store.deferProposalIntent(intent.proposalId);
+            }
+        }
+        const pendingLimit = Math.max(1, limit - intents.length);
+        for (const pending of this.store.listPendingProposals(pendingLimit)) {
+            try {
+                const decision = this.policy.getProposal(pending.policyProposalId);
+                if (decision?.status !== 'pending') {
+                    settled.push(this.#settleValidated(pending, decision, pending.version, false));
+                    continue;
+                }
+                this.store.deferPendingProposal(pending.proposalId);
+            }
+            catch {
+                this.store.deferPendingProposal(pending.proposalId);
+            }
+        }
+        return settled;
+    }
+    #settleValidated(proposal, snapshot, expectedVersion, policyReplayed) {
+        try {
+            const terminal = validateApprovalSettlement(snapshot, {
+                proposalId: proposal.policyProposalId,
+                requester: proposal.requester,
+                principal: proposal.principal,
+                action: `memory.${proposal.mutation.op}`,
+                resource: { kind: 'memory', id: proposal.proposalId },
+                summary: proposalSummary(proposal.mutation),
+                diff: proposalDiff(proposal.mutation),
+                expiresAt: proposal.expiresAt,
+                expectedVersion,
+            });
+            const applied = this.store.settleProposal({
+                proposalId: proposal.proposalId,
+                policyStatus: terminal.status,
+                policyVersion: terminal.version,
+            });
+            return result(applied.proposal, policyReplayed || applied.replayed, applied.record);
+        }
+        catch (error) {
+            if (!(error instanceof ApprovalSettlementConflict))
+                throw error;
+            return this.#settleSecurityConflict(proposal);
+        }
+    }
+    #settleSecurityConflict(proposal) {
+        const conflicted = this.store.settleProposal({
+            proposalId: proposal.proposalId,
+            policyStatus: 'conflicted',
+        });
+        return result(conflicted.proposal, conflicted.replayed);
+    }
+}
+//# sourceMappingURL=proposals.js.map

package/lib/proposals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals.js","sourceRoot":"","sources":["../src/proposals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAQ3B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,WAAW,EACX,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,YAAY,CAAA;AAmBnB,SAAS,uBAAuB,CAAC,cAAsB;IACrD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAC3F,CAAC;AAED,SAAS,YAAY,CAAC,QAAwB;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,QAAwB;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAA;IACxE,OAAO,GAAG,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,WAAW,MAAM,EAAE,CAAA;AAChG,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAmE;IACnG,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC3C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC;YACA,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;YACjC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;SACpC,CAAA;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;KACT,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgC;IAC/D,MAAM,sBAAsB,GAAG,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACpE,IAAI,QAAQ,CAAC,OAAO,KAAK,sBAAsB,EAAE,CAAC;QAChD,MAAM,IAAI,gBAAgB,CAAC,eAAe,EAAE,iEAAiE,CAAC,CAAA;IAChH,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,8BAA8B,CAAC,KAAc;IACpD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACnF,OAAO,CAAC,sBAAsB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC;SAC7E,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,MAAM,CACb,QAA8B,EAC9B,QAAiB,EACjB,MAAqB;IAErB,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI;QACJ,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,QAAQ;QACR,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,OAAO,qBAAqB;IAEb;IACA;IAFnB,YACmB,KAAkB,EAClB,MAA4B;QAD5B,UAAK,GAAL,KAAK,CAAa;QAClB,WAAM,GAAN,MAAM,CAAsB;IAC5C,CAAC;IAEJ,OAAO,CAAC,KAA0B;QAChC,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAA;QAC1F,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;QACnF,MAAM,UAAU,GAAwB;YACtC,GAAG,KAAK;YACR,QAAQ;SACT,CAAA;QACD,MAAM,YAAY,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAA;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC;YAChD,GAAG,UAAU;YACb,UAAU;YACV,YAAY;SACb,CAAC,CAAA;QACF,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,EAAE,4CAA4C,CAAC,CAAA;QAClG,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QAClE,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACjE,CAAC;IAED,qBAAqB,CACnB,QAA8B,EAC9B,SAA0D;QAE1D,IAAI,yBAAyB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,uBAAuB,CACvD,QAAQ,CAAC,UAAU,EACnB,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,QAAQ,CACnB,EAAE,CAAC;gBACF,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,EAAE,sDAAsD,CAAC,CAAA;YAC5G,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC/B,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAChE,OAAO,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAA;IAChD,CAAC;IAED,eAAe,CACb,KAAiC,EACjC,cAAuB;QAEvB,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QAChE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACzC,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAA;QACpD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC7D,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU;eAC9B,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,YAAY,KAAK,kBAAkB,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,EAAE,8DAA8D,CAAC,CAAA;QACpH,CAAC;QACD,MAAM,aAAa,GAAG;YACpB,cAAc,EAAE,mBAAmB,KAAK,CAAC,cAAc,EAAE;YACzD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,UAAU,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE;YACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE;YAC5C,IAAI;YACJ,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACtE,CAAA;QACD,IAAI,cAAsC,CAAA;QAC1C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAA;YAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,gBAAgB,CAAC,eAAe,EAAE,2DAA2D,CAAC,CAAA;YAC1G,CAAC;YACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,KAAK,kBAAkB;mBACzD,KAAK,CAAC,YAAY,KAAK,YAAY,CAAA;YACxC,MAAM,cAAc,GAAG,YAAY;gBACjC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC;oBAC1C,cAAc,EAAE,aAAa,CAAC,cAAc;oBAC5C,SAAS,EAAE,aAAa,CAAC,SAAS;oBAClC,SAAS,EAAE,aAAa,CAAC,SAAS;oBAClC,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,QAAQ,EAAE,aAAa,CAAC,QAAQ;iBACjC,CAAC;gBACF,CAAC,CAAC,SAAS,CAAA;YACb,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,yEAAyE;gBACzE,yEAAyE;gBACzE,wEAAwE;gBACxE,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;YAChF,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,GAAG,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAA;gBACrF,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAA;oBAChE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,IAAI,SAAS,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAA;gBACjG,CAAC;gBACD,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAA;YACrC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC;mBACrC,CAAC,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC;gBAAE,MAAM,KAAK,CAAA;YACxF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAA;YAChE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,eAAuB,CAAA;QAC3B,IAAI,CAAC;YACH,eAAe,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAA;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAA;YAChE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC3E,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,gBAAgB,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC;YACtF,OAAO,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QAC/C,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YACpC,UAAU;YACV,gBAAgB,EAAE,cAAc,CAAC,UAAU;YAC3C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY;YACZ,SAAS,EAAE,cAAc,CAAC,SAAS;YACnC,OAAO,EAAE,eAAe;SACzB,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,cAAc,IAAI,cAAc,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAA;QAC5E,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/E,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACzC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QACzE,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC1F,CAAC;IAED,wBAAwB,CAAC,QAA8B;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QACnE,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,gBAAgB;eACjE,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;eACzC,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;eACzC,QAAQ,CAAC,MAAM,KAAK,UAAU,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE;eACpD,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;eACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,UAAU;eAC5C,QAAQ,CAAC,OAAO,KAAK,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC;eACvD,QAAQ,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;eAChG,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;eACzC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;eACrC,QAAQ,CAAC,SAAS,KAAK,SAAS;eAChC,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAA;QAC1C,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;IACvF,CAAC;IAED,MAAM,CAAC,KAAkC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACzD,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAA;QACpG,IAAI,yBAAyB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzD,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC3C,MAAM,IAAI,gBAAgB,CAAC,eAAe,EAAE,+CAA+C,CAAC,CAAA;YAC9F,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC/B,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC1C,UAAU,EAAE,QAAQ,CAAC,gBAAgB;YACrC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAA;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBACvC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,aAAa,EAAE,QAAQ,CAAC,OAAO;aAChC,CAAC,CAAA;YACF,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QACnE,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACvF,CAAC;IAED,WAAW,CAAC,UAAkB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;QACnD,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACpE,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,KAAa;QACrB,MAAM,OAAO,GAA2B,EAAE,CAAA;QAC1C,MAAM,WAAW,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAA;QAC3D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,sEAAsE;gBACtE,uEAAuE;gBACvE,uDAAuD;gBACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC;oBAChD,GAAG,MAAM;oBACT,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAA;gBACF,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACjC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;oBACjD,SAAQ;gBACV,CAAC;gBACD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,KAAK,UAAU;oBAC5C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;oBACvD,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBAC/C,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YACnD,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QACxD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;gBAClE,IAAI,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;oBACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;oBAC9E,SAAQ;gBACV,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,gBAAgB,CACd,QAA8B,EAC9B,QAA8C,EAC9C,eAAuB,EACvB,cAAuB;QAEvB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,EAAE;gBACpD,UAAU,EAAE,QAAQ,CAAC,gBAAgB;gBACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,UAAU,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE;gBACrD,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC3C,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,eAAe;aAChB,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBACxC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,aAAa,EAAE,QAAQ,CAAC,OAAO;aAChC,CAAC,CAAA;YACF,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,0BAA0B,CAAC;gBAAE,MAAM,KAAK,CAAA;YAC/D,OAAO,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,uBAAuB,CAAC,QAA8B;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;YAC3C,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,YAAY;SAC3B,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;IACzD,CAAC;CACF"}