@functional-systems/srcx 0.1.0-dev.37 → 0.1.0-dev.39

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 ## Unreleased
 
+- Add experimental `import --artifact-storage segments` for self-contained,
+  digest-verified local format-2 artifacts. Reuse unchanged per-file objects with
+  hardlinks and explicit copy fallback; retain format-1 reads and the JSONL default,
+  complete source/hash/vector validation, resumable publication and immutable reads.
+  Preview JSON adds `artifactFormat`; existing artifacts reject a storage override.
+  Measure complete build time, writes and additional inode allocation separately
+  from the earlier storage-only prototype; this is not a default promotion.
+
+- Batch local artifact records in a bounded 64 KiB write buffer and hash their
+  existing canonical representation instead of serializing each record twice.
+  Preserve the artifact format, record order/hashes, document limits and full
+  validation; write larger records directly and remove partial output on failure.
+  Add write-count, canonical-byte and failure-cleanup regressions, and document
+  local build profiles separately from database performance.
+
 - Reduce incremental publication reads by comparing against a fully validated,
   identity-matched local baseline when available, with immutable remote fallback
   after local file loss. Reuse complete candidate validation within one invocation

package/DESIGN.md

@@ -390,6 +390,15 @@ readers on multiple machines do not require local registration state.
    serialized sizes and record-set hashes before starting uploads. The execution
    journal supplies the separate attempt ID when sealing the final manifest.
 
+Local `records.jsonl` output batches complete canonical record lines in a 64 KiB
+buffer, flushing before a line would exceed that bound. Larger individual lines
+are written directly after flushing earlier records. Hash the existing canonical
+representation, which is byte-equivalent to hashing the record object, rather
+than serializing the object again. Flush all records before writing build metadata
+and running full artifact validation. Write failures remove the partial output
+directory; previous artifacts remain untouched. This changes write-call overhead,
+not artifact bytes, order, schema or validation requirements.
+
 Dry-run executes the same inventory/chunking path but performs no database mutation
 or embedding call. Report `managed` eligible chunks and `managedTokens` (estimated
 input tokens for the complete corpus), with `embedded=0` in the local artifact.
@@ -451,6 +460,149 @@ record and 20 chunk records; these can share upload requests with other files.
 Original text appears once in its file record, with exact source ranges in chunks.
 Search context can repeat in chunk search text without changing the quoted source.
 
+### Experimental segmented local artifacts
+
+Status: opt-in implementation. `import --artifact-storage segments` writes local
+format 2; the default remains format 1 and a single `records.jsonl`. Presets,
+remote schema, publication ordering and full validation are unchanged. See the
+storage-only prototype and integrated-build measurements in `VALIDATION.md`.
+
+The segmented layout uses one logical segment per included file: the exact
+file record followed by all of its chunks, in ordinal order. A new artifact owns
+all objects it needs. It may share physical storage through hardlinks, but never
+depends on a previous artifact's directory, a global cache, or the current Git
+checkout after construction. This targets retained-record rewrites; it does not
+make full validation proportional to the delta.
+
+The segmented descriptor extends the local storage version only:
+
+```ts
+type RecordPart = {
+  fileId: string;
+  digest: string; // SHA-256 of exact canonical UTF-8 JSONL, including newlines.
+  byteLength: number;
+  recordCount: number;
+};
+
+// Existing logical Build fields remain unchanged.
+// `directory` is resolved at load time, never used as an external object pointer.
+type SegmentedBuild = Omit<Build, "format"> & {
+  format: 2;
+  recordParts: RecordPart[];
+};
+```
+
+Objects live at `objects/<64-lowercase-hex-digest>.jsonl` beneath the artifact.
+Ordered references preserve the builder's existing changed-then-retained record
+order, with no excluded-file segments. Full inventory entries, `recordHashes`,
+counts and aggregate hashes remain in `build.json`. This keeps logical
+identity independent of physical layout: for the same repository/commit/config,
+changing only storage layout retains `buildId`, `configHash`, `recordsHash` and
+`inventoryHash`. Object digests add storage integrity checks; they do not replace
+record/source checks.
+
+Require exactly one part per included inventory file, no duplicate file references,
+and `recordCount === 1 + chunkIds.length` for that file. Each object must begin with
+its referenced file record and contain only that file's expected chunks. Byte and
+record counts must be positive safe integers, not allocation instructions from
+untrusted metadata.
+
+The writer and full validator follow these rules:
+
+1. Fully validate the previous artifact before reusing its records or hashes.
+   Keep the existing repository/configuration and Git blob/mode reuse conditions.
+   For a format-2 previous build, find retained objects from its validated file
+   inventory and part mapping; avoid the extra whole-record copy pass.
+2. Stream added/modified file groups to unique temporary objects, with the current
+   per-document size checks and bounded write buffer. Hash actual serialized
+   bytes, close each object and install it under its digest. Do not buffer an
+   entire file's chunk set in memory or impose an arbitrary new segment-size cap.
+3. Hardlink retained objects into the new artifact, using exclusive destination
+   creation. `EXDEV`, `ENOTSUP`, `EOPNOTSUPP` and `ENOSYS` use exclusive copy
+   fallback. Other I/O, missing-object or permission failures remain failures.
+   No destination reference may point back into the previous directory.
+4. Keep new output private to its attempt. Finish all objects before installing
+   the descriptor, then run complete validation against the new artifact. Object
+   write failures remove only that attempt's partial output. Interrupted output
+   is never accepted because a descriptor or marker exists. Atomic rename alone
+   is not an fsync or power-loss durability guarantee.
+5. On every full validation, check descriptor shape and logical membership,
+   recompute each referenced object's byte digest/count, and run all existing
+   uniqueness, record-hash, exact source/position/token and embedding-input checks.
+   A valid digest or matching count cannot establish that an old file belongs to
+   the new build. Retained records are not sampled or exempted.
+6. Reject arbitrary object paths, symlink objects/directories and special files.
+   Use digest-derived paths, `O_NOFOLLOW | O_NONBLOCK` file opens and post-open
+   regular-file/size checks, plus a local regular-directory check. The feature
+   requires native no-follow support; the local measurements use macOS. The existing
+   single-host model assumes importer-owned artifact directories; hostile
+   concurrent directory replacement by the same OS user is outside that model.
+   Keep one open record handle and bounded UTF-8 line decoding, retaining the
+   existing largest-document allowance. File mode, inode identity, mtime and a
+   previous validation receipt are not integrity proofs.
+
+The shared `records()` iterator verifies object digests when fully consumed, as
+`validateBuild()` always does. Partial consumers do not establish completeness;
+publication readiness probes follow full build validation. No persistent
+validation receipt skips object/record/source checks on restart.
+
+Hardlinks reduce copying but do not enforce immutability: a write to one shared
+inode can corrupt several local artifacts. Rehashing and complete source checks
+must detect this on every use. Read-only modes can be defense in depth only.
+Remote published Tags remain the authority for immutable version reads and do
+not depend on the survival or integrity of local hardlinks.
+
+| Condition | Required behavior |
+| --- | --- |
+| Previous directory deleted after the new build | New artifact remains self-contained and validates. |
+| Artifact copied or relocated | Resolve all references beneath the new directory; no original paths needed. |
+| Missing/corrupt object in the pending build | Fail before corpus mutation; retain the journal. Never substitute the current Git tip. |
+| Previous local build entirely absent | Preserve the existing cold-build/remote-baseline recovery paths. |
+| Missing object in an otherwise present previous build | Preserve the current missing-record validation failure; no silent reuse of metadata. |
+| Previous local cache unavailable during publication retry | Validate the intact pending artifact and use its journal's immutable remote baseline, as today. |
+| Corrupt matching local baseline cache | Preserve fail-closed validation rather than trusting its declared hashes. |
+| Cross-filesystem link failure | Explicit copy fallback writes retained bytes too; no delta-write claim for that path. |
+| Partial object/descriptor write or stale local receipt | Remain unpublished; reconstruct only from the exact original build identity or restore matching objects. |
+
+No global shared-object garbage collector is needed:
+deleting one artifact unlinks its own objects without invalidating other hardlinks.
+Do not prune local artifacts associated with an active journal or claim this
+implements remote version retention/cleanup.
+
+Runtime integration and compatibility:
+
+- The storage-format reader/descriptor validator retains legacy format-1 reads
+  and resumption. Internal readers accept the already loaded Build, avoiding
+  repeated parsing of a large descriptor. Directory-based callers load its
+  `build.json`. Unknown formats and missing format-2 descriptors/objects fail;
+  they do not fall back to a stray
+  `records.jsonl` merely because it exists.
+- `--artifact-storage jsonl|segments` selects storage for a new build and defaults
+  to `jsonl`, even when the previous artifact is segmented. Initial conversion
+  from format 1 requires the full retained-record pass. Existing `--artifact`
+  imports use the recorded format and reject an explicit storage override.
+  Preview JSON adds `artifactFormat` (1 or 2); the remaining logical fields and
+  exit codes are unchanged. Storage selection is not an embedding preset change.
+- `validateBuild`, previous-record reuse, publication readiness probes and
+  changed-record uploads use the shared reader. Full candidate validation,
+  final-marker ordering and managed-vector validation/hydration remain intact.
+- Default JSONL evaluation fixtures and frozen archive byte hashes remain format
+  1. Consumers reading `records.jsonl` directly must opt into the shared reader
+  before accepting format 2; they are not automatically migrated. Installed-package
+  lexical/managed CLI tests cover segmented resumption, loss of the previous local
+  artifact, tracked imports and immutable reads.
+
+Default promotion requires end-to-end measurements including descriptor bytes, initial
+conversion, full validation, cold recovery, cross-filesystem copies and bounded
+memory/open handles. The prototype reduces record payload writes but adds many
+file operations and shows slower validation. Integrated builds also trade speed
+for materially lower writes and additional allocated storage. This justifies an
+explicit experimental choice, while format 1 remains the default. Pack-based physical
+storage or batched reads can be investigated later if per-file open/link overhead
+dominates; neither is silently assumed by this implementation. Skipping full remote
+candidate verification still requires the separate verified backend contract
+described in section 9. Dependency ingestion remains outside this work.
+
 ## 7. Code-search schema v1
 
 The Collection uses one sparse document schema with `kind` distinguishing file,

package/README.md

@@ -139,7 +139,39 @@ and tag names that collide require `refs/heads/...` or `refs/tags/...`. No autom
 fetch, history replay, or revision expressions are supported.
 
 Each artifact contains `build.json` (inventory, configuration, counts, hashes,
-change/deletion plan) and `records.jsonl` (exact file records and retrieval chunks).
+change/deletion plan) and, by default, `records.jsonl` (exact file records and
+retrieval chunks).
+
+For an experimental alternative that reduces retained-record rewrites, use
+`--artifact-storage segments` when creating a new build:
+
+```sh
+srcx import --path /path/to/repo --ref main --dry-run \
+  --artifact-storage segments --output /tmp/srcx-segmented-a
+srcx import --path /path/to/repo --ref next --dry-run \
+  --artifact-storage segments --previous /tmp/srcx-segmented-a \
+  --output /tmp/srcx-segmented-b
+```
+
+Format 2 stores `build.json` and digest-addressed JSONL objects under `objects/`.
+Unchanged objects can share filesystem storage through hardlinks, while each
+artifact remains usable after deleting the previous directory. Full local source
+and record/hash checks still run; publication retains complete candidate
+validation. Fewer bytes are written, but more
+file operations can make builds slower; descriptor construction and full checks
+still scale with corpus size. Segmented mode requires native no-follow and
+nonblocking file-open support. Cross-filesystem/unsupported-link copies rewrite the
+retained bytes too. See [local build measurements](VALIDATION.md).
+
+The default is `--artifact-storage jsonl`; storage does not change the embedding
+preset or require a new Collection. Preview JSON includes `artifactFormat` (1 or 2).
+Use `--artifact <directory>` to import/resume either format without a storage flag;
+an explicit `--artifact-storage` cannot override an existing artifact. Older CLIs
+accept only format 1, and tools that directly read `records.jsonl` need the shared
+artifact reader to support format 2. Linked files are not tamper-proof: full checks
+detect shared-object corruption. Preserve the pending artifact and journal until
+publication completes.
+
 Artifacts contain source code; keep them with the same access policy as the repo.
 Every tree entry is accounted for, including explicit exclusions for symlinks,
 submodules, LFS pointers, dependencies/build output, image assets (including SVG), binary/invalid UTF-8 data,

package/VALIDATION.md

@@ -918,6 +918,132 @@ discovery also still reads version metadata. Further delta-only validation needs
 a verified backend completeness/preservation/readiness contract; a marker or
 changed-record sample is not a substitute. Dependency ingestion is outside scope.
 
+## Local build profiling and buffered artifact writes
+
+A synthetic TypeScript corpus with 24 functions per file was profiled at 120,
+600 and 1,200 files. Each incremental build has one addition, one modification
+and one deletion; only two files require chunking. Separate cold builds and
+source-identical commits verify the same record hashes and expose the full-corpus
+work that remains. These measurements cover local `materialize()` only, excluding
+publication, source upload, database operations and embeddings.
+
+An instrumented scratch copy of the builder at `605dc2f` times previous-artifact
+validation, Git inventory/blob reads, changed-source chunking, canonicalization,
+record hashing/writes and final validation. Native record streams and file-handle
+writes are observed for logical bytes and call counts. Every instrumented build
+is compared with an uninstrumented build for equal `recordsHash` and
+`inventoryHash`. CPU profiles and raw reports remain local diagnostic evidence;
+the maintained regression fixture is in `test/build-io.test.mjs`.
+
+Before the change, the 1,200-file instrumented incremental build took a median
+1.918 seconds, with about 1.262 seconds (66%) in previous/final validation and
+0.470 seconds in record canonicalization, hashing and writes. A source-identical
+commit still reads the old artifact twice and the new artifact once. The Git
+inventory and actual changed-file chunking are a small fraction of this fixture's
+total time; skipping unchanged Git blobs alone does not make local builds scale
+with the changed-code size.
+
+The following before/after times are medians of three **uninstrumented** builds
+per size on the same local host and Node.js 24.15.0, with warm filesystem/parser
+state (Apple M5 Pro, macOS arm64). After builds retain the same record/inventory
+hashes as the baseline.
+
+| Files | Chunks | Before (ms) | After (ms) | Time reduction | Record write calls before / after |
+| ----- | ------ | ----------- | ---------- | -------------- | --------------------------------- |
+| 120   | 2,880  | 228.4       | 201.8      | 11.7%          | 3,000 / 46                        |
+| 600   | 14,400 | 959.9       | 781.7      | 18.6%          | 15,000 / 227                      |
+| 1,200 | 28,800 | 1,898.6     | 1,537.4    | 19.0%          | 30,000 / 454                      |
+
+For 1,200 files, both versions deliver 88,351,006 bytes across three full
+`records.jsonl` read passes and write 29,450,206 artifact bytes. The reduction
+is in `FileHandle.write` calls (98.5%) and duplicate serialization, not total bytes
+or validation coverage. Logical stream bytes are not physical disk I/O; buffered
+writes are not an fsync/durability guarantee. Host-specific timings are diagnostic
+results, not a general performance promise or LambdaDB measurement.
+
+The buffer remains bounded at 64 KiB; larger permitted records bypass it intact.
+`test/build-io.test.mjs` checks small/large record boundaries, final flushes, exact
+canonical JSONL and record hashes, unchanged managed inputs, fewer write calls,
+and cleanup after intermediate/final write failures without changing prior
+artifacts. Builtin filesystem mocks are isolated to a test-file process and
+restored between tests.
+
+Validation passed on Node.js 24.15.0 and 22.23.4: 186 full-suite tests and seven
+installed-package CLI tests on each runtime, plus typechecking on both. Formatting,
+version consistency, diff checks and the five CI Python suites (17 tests) also
+passed. No database calls, source uploads, paid operations or package publication
+were performed.
+
+Further gains require reducing full artifact copying and validation, rather than
+removing additional write calls. A segmented immutable-artifact design would need
+explicit integrity, availability and recovery rules before reusing validation
+across builds. No local or remote full-validation shortcut is introduced here.
+
+## Integrated experimental segmented builds
+
+The opt-in runtime now implements `import --artifact-storage segments`; JSONL is
+still the default. Production objects are streamed within the existing
+document/64 KiB buffer bounds,
+opened with native no-follow/nonblocking flags and checked as regular files, and
+fully validated on every build/import. The threat boundary remains importer-owned
+artifact directories and the existing single-host writer model. The directory
+hierarchy is not protected against hostile concurrent replacement by the same
+operating-system user. No object digest or local receipt replaces full source
+checks or complete immutable-candidate verification.
+
+An integrated local comparison runs the entire `materialize()` invocation on the
+same fixed 120/600/1,200-file TypeScript corpora, with one addition/modification/
+deletion and three warm repetitions per storage mode. Both modes use the same
+current builder and retain identical record/inventory hashes. A separate compiled
+`1e7fa47` JSONL control checks the original path too. Filesystem observers count
+actual completed record-write bytes and descriptor writes, including `build.json`.
+
+| Files | JSONL median (ms) | Segments median (ms) | JSONL total write bytes | Segments total write bytes | JSONL record bytes read | Segments record bytes read |
+| ----- | ----------------- | -------------------- | ----------------------- | -------------------------- | ----------------------- | -------------------------- |
+| 120   | 215.1             | 256.7                | 3,672,397               | 804,547                    | 8,834,926               | 5,889,886                  |
+| 600   | 857.8             | 1,083.0              | 18,340,719              | 3,805,029                  | 44,175,406              | 29,450,206                 |
+| 1,200 | 1,664.5           | 2,070.4              | 36,676,122              | 7,555,632                  | 88,351,006              | 58,900,606                 |
+
+Host: Node.js 24.15.0, Apple M5 Pro/macOS arm64; warm filesystem/parser state,
+without fsync. At 1,200 files, record payload writes fall from 29,450,206 to 48,890
+bytes, while the format-2 descriptor still writes about 7.51 MB. Total application
+writes fall about 79.4%; wall time rises about 24.4%. The extra retained-record
+copy pass is eliminated, but previous/new build validation still reads every
+record. The merged JSONL control's 1,200-file median is 1,623.6 ms, with the same
+record-byte totals. Timings are host-specific diagnostics, not a general speedup
+claim or LambdaDB/embedding performance measurement.
+
+For the 1,200-file update, the sum of `stat.blocks * 512` for newly introduced
+regular-file inodes falls from 36,679,680 to 7,557,120 bytes. Retained objects share
+existing inodes with the previous build. This excludes directory blocks and does
+not resolve filesystem compression, shared extents, snapshots or billed storage;
+it is an inode-allocation observation, not an exact physical-storage charge.
+
+Initial conversion from format 1 writes all 29,450,206 record bytes again and
+retains the full copy pass. A source-identical format-2 build writes zero record
+bytes, but still writes a roughly 7.50 MB descriptor, links all 1,200 objects and
+performs both full validations. First-build and conversion measurements are
+retained with the warm-run evidence. Real cross-filesystem behavior is not tested;
+an injected `EXDEV` test verifies exclusive copy fallback, while injected `EIO`
+fails and cleans up. Metadata is still proportional to the corpus.
+
+Focused regressions cover both conversion directions, relocation/deletion of the
+previous artifact, actual record/descriptor write counts on a fixed corpus,
+digest/record/source corruption, stale/duplicate/unsafe references, symlink
+rejection, large Unicode/CRLF records, early-reader closure, empty builds, unknown
+formats, argument validation, and partial-write/link cleanup. Managed small/large
+publication tests resume after old-artifact loss and retain immutable old reads.
+The installed-tarball suite also exercises segmented lexical/managed CLI retry,
+tracked imports, search and exact reads through a loopback SDK fixture.
+
+Validation passed on Node.js 24.15.0 and 22.23.4: 201 full-suite tests, nine
+installed-tarball CLI tests and typechecking on each runtime. Formatting, version
+consistency, diff checks and all five CI Python suites (17 tests) also passed.
+No live backend calls, source uploads, paid operations or package publication
+were performed for this implementation. Linux/Windows and real
+cross-volume/power-loss checks have not been run locally; native no-follow support
+is required for the experimental mode. The default JSONL path is unchanged.
+
 ## Local checks
 
 Runtime used: Node.js 24.15.0, npm 11.12.1. Dependencies are pinned in

package/dist/artifact.d.ts

@@ -0,0 +1,31 @@
+import { type Doc } from "./common.js";
+import type { Build } from "./build.js";
+export type ArtifactStorage = "jsonl" | "segments";
+export type RecordPart = {
+    fileId: string;
+    digest: string;
+    byteLength: number;
+    recordCount: number;
+};
+export declare function validateStorage(b: Build): void;
+/** Digest verification completes when the iterator is exhausted; validateBuild always exhausts it. */
+export declare function artifactRecords(b: Build): AsyncGenerator<Doc>;
+/** Owns only this build's output; retained objects are verified again by full build validation. */
+export declare class ArtifactWriter {
+    readonly directory: string;
+    readonly storage: ArtifactStorage;
+    readonly recordHashes: Record<string, string>;
+    readonly parts: RecordPart[];
+    private output?;
+    private pending;
+    private pendingBytes;
+    private part?;
+    private constructor();
+    static create(directory: string, storage: ArtifactStorage): Promise<ArtifactWriter>;
+    private flush;
+    private finishPart;
+    emit(doc: Doc): Promise<void>;
+    retain(previous: Build, part: RecordPart, ids: readonly string[]): Promise<void>;
+    finish(): Promise<void>;
+    close(): Promise<void>;
+}

package/dist/artifact.js

@@ -0,0 +1,237 @@
+import { constants, createReadStream } from "node:fs";
+import { copyFile, link, lstat, mkdir, open, realpath, rename, } from "node:fs/promises";
+import { createHash, randomUUID } from "node:crypto";
+import { createInterface } from "node:readline";
+import { join } from "node:path";
+import { canonical, hash, invariant } from "./common.js";
+const bufferLimit = 64 * 1024;
+const documentLimit = 4_800_000;
+function requireSegmentSupport() {
+    invariant(constants.O_NOFOLLOW && constants.O_NONBLOCK, "Segmented artifacts require no-follow file-open support.");
+}
+const objectPath = (directory, digest) => {
+    invariant(/^[a-f0-9]{64}$/.test(digest), "Invalid artifact object digest.");
+    return join(directory, "objects", `${digest}.jsonl`);
+};
+export function validateStorage(b) {
+    invariant(b.format === 1 || b.format === 2, "Unsupported artifact format.");
+    if (b.format === 1)
+        return;
+    const included = b.inventory.filter((e) => e.status === "included");
+    const files = new Map(included.map((e) => [e.fileId, e]));
+    invariant(files.size === included.length &&
+        Array.isArray(b.recordParts) &&
+        b.recordParts.length === included.length, "Invalid segmented artifact inventory.");
+    const seen = new Set();
+    for (const part of b.recordParts) {
+        const entry = files.get(part?.fileId);
+        invariant(part &&
+            typeof part.fileId === "string" &&
+            /^f-[a-f0-9]{64}$/.test(part.fileId) &&
+            entry &&
+            Array.isArray(entry.chunkIds) &&
+            !seen.has(part.fileId) &&
+            typeof part.digest === "string" &&
+            /^[a-f0-9]{64}$/.test(part.digest) &&
+            Number.isSafeInteger(part.byteLength) &&
+            part.byteLength > 0 &&
+            Number.isSafeInteger(part.recordCount) &&
+            part.recordCount === entry.chunkIds.length + 1, "Invalid segmented artifact part.");
+        seen.add(part.fileId);
+    }
+}
+async function objectDirectory(directory) {
+    requireSegmentSupport();
+    const path = join(directory, "objects");
+    const info = await lstat(path);
+    invariant(info.isDirectory() &&
+        !info.isSymbolicLink() &&
+        (await realpath(path)) === join(await realpath(directory), "objects"), "Artifact objects must be a local regular directory.");
+}
+async function openObject(directory, part) {
+    requireSegmentSupport();
+    const file = await open(objectPath(directory, part.digest), constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    try {
+        const info = await file.stat();
+        invariant(info.isFile() && info.size === part.byteLength, "Artifact object is not a regular file of the expected size.");
+        return file;
+    }
+    catch (error) {
+        await file.close();
+        throw error;
+    }
+}
+/** Digest verification completes when the iterator is exhausted; validateBuild always exhausts it. */
+export async function* artifactRecords(b) {
+    if (b.format === 1) {
+        const input = createReadStream(join(b.directory, "records.jsonl"), {
+            encoding: "utf8",
+        });
+        const lines = createInterface({ input, crlfDelay: Infinity });
+        try {
+            for await (const line of lines)
+                if (line)
+                    yield JSON.parse(line);
+        }
+        finally {
+            lines.close();
+            input.destroy();
+        }
+        return;
+    }
+    validateStorage(b);
+    await objectDirectory(b.directory);
+    const files = new Map(b.inventory.map((e) => [e.fileId, e]));
+    for (const part of b.recordParts) {
+        const file = await openObject(b.directory, part);
+        const input = file.createReadStream({
+            autoClose: false,
+            highWaterMark: bufferLimit,
+        });
+        const digest = createHash("sha256"), decoder = new TextDecoder("utf-8", { fatal: true });
+        let pending = "", bytes = 0, count = 0;
+        try {
+            for await (const chunk of input) {
+                const data = chunk;
+                digest.update(data);
+                bytes += data.length;
+                pending += decoder.decode(data, { stream: true });
+                let newline;
+                while ((newline = pending.indexOf("\n")) >= 0) {
+                    const line = pending.slice(0, newline);
+                    pending = pending.slice(newline + 1);
+                    invariant(line.length && Buffer.byteLength(line) <= documentLimit, "Invalid artifact record size.");
+                    const doc = JSON.parse(line);
+                    const entry = files.get(part.fileId);
+                    invariant(count === 0
+                        ? doc.kind === "file" && doc.id === part.fileId
+                        : doc.kind === "chunk" &&
+                            doc.fileId === part.fileId &&
+                            doc.id === entry.chunkIds[count - 1], "Artifact part membership mismatch.");
+                    count++;
+                    yield doc;
+                }
+                invariant(Buffer.byteLength(pending) <= documentLimit, "Artifact record exceeds safe document limit.");
+            }
+            pending += decoder.decode();
+            invariant(!pending &&
+                bytes === part.byteLength &&
+                count === part.recordCount &&
+                digest.digest("hex") === part.digest, "Artifact object digest/count mismatch.");
+        }
+        finally {
+            input.destroy();
+            await file.close();
+        }
+    }
+}
+/** Owns only this build's output; retained objects are verified again by full build validation. */
+export class ArtifactWriter {
+    directory;
+    storage;
+    recordHashes = {};
+    parts = [];
+    output;
+    pending = [];
+    pendingBytes = 0;
+    part;
+    constructor(directory, storage) {
+        this.directory = directory;
+        this.storage = storage;
+    }
+    static async create(directory, storage) {
+        const writer = new ArtifactWriter(directory, storage);
+        if (storage === "jsonl")
+            writer.output = await open(join(directory, "records.jsonl"), "wx", 0o600);
+        else {
+            requireSegmentSupport();
+            await mkdir(join(directory, "objects"), { mode: 0o700 });
+        }
+        return writer;
+    }
+    async flush() {
+        if (!this.pending.length)
+            return;
+        await this.output.write(this.pending.join(""));
+        this.pending = [];
+        this.pendingBytes = 0;
+    }
+    async finishPart() {
+        await this.flush();
+        if (!this.part)
+            return;
+        await this.output.close();
+        this.output = undefined;
+        const part = this.part;
+        const digest = part.digest.digest("hex");
+        // Output is private to this newly created artifact; no other writer shares it.
+        await rename(part.temp, objectPath(this.directory, digest));
+        this.parts.push({
+            fileId: part.fileId,
+            digest,
+            byteLength: part.bytes,
+            recordCount: part.count,
+        });
+        this.part = undefined;
+    }
+    async emit(doc) {
+        const data = canonical(doc), bytes = Buffer.byteLength(data);
+        invariant(bytes <= documentLimit, `Serialized document exceeds safe limit: ${doc.id}`);
+        invariant(!this.recordHashes[doc.id], "Duplicate document ID.");
+        this.recordHashes[doc.id] = hash(data);
+        if (this.storage === "segments") {
+            if (doc.kind === "file") {
+                await this.finishPart();
+                const temp = join(this.directory, "objects", `${randomUUID()}.tmp`);
+                this.output = await open(temp, "wx", 0o600);
+                this.part = {
+                    fileId: doc.id,
+                    temp,
+                    digest: createHash("sha256"),
+                    bytes: 0,
+                    count: 0,
+                };
+            }
+            invariant(this.part, "Orphan artifact chunk.");
+            this.part.digest.update(data + "\n");
+            this.part.bytes += bytes + 1;
+            this.part.count++;
+        }
+        if (this.pendingBytes + bytes + 1 > bufferLimit)
+            await this.flush();
+        if (bytes + 1 >= bufferLimit)
+            await this.output.write(data + "\n");
+        else {
+            this.pending.push(data + "\n");
+            this.pendingBytes += bytes + 1;
+        }
+    }
+    async retain(previous, part, ids) {
+        await this.finishPart();
+        await objectDirectory(previous.directory);
+        const file = await openObject(previous.directory, part);
+        await file.close();
+        const source = objectPath(previous.directory, part.digest), target = objectPath(this.directory, part.digest);
+        try {
+            await link(source, target);
+        }
+        catch (error) {
+            if (!["EXDEV", "ENOTSUP", "EOPNOTSUPP", "ENOSYS"].includes(error.code ?? ""))
+                throw error;
+            await copyFile(source, target, constants.COPYFILE_EXCL);
+        }
+        for (const id of ids) {
+            invariant(!this.recordHashes[id], "Duplicate document ID.");
+            this.recordHashes[id] = previous.recordHashes[id];
+        }
+        this.parts.push({ ...part });
+    }
+    async finish() {
+        await this.finishPart();
+    }
+    async close() {
+        await this.output?.close();
+        this.output = undefined;
+    }
+}
+//# sourceMappingURL=artifact.js.map

package/dist/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../src/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EACL,QAAQ,EACR,IAAI,EACJ,KAAK,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,MAAM,GAEP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAa,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAY,MAAM,aAAa,CAAC;AAUnE,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9B,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,SAAS,qBAAqB;IAC5B,SAAS,CACP,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,EAC5C,0DAA0D,CAC3D,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE;IACvD,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,iCAAiC,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,CAAQ;IACtC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,8BAA8B,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,SAAS,CACP,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;QAC5B,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAC1C,uCAAuC,CACxC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,SAAS,CACP,IAAI;YACF,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACpC,KAAK;YACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC7B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACtB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAClC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;YACrC,IAAI,CAAC,UAAU,GAAG,CAAC;YACnB,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAChD,kCAAkC,CACnC,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,SAAiB;IAC9C,qBAAqB,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,SAAS,CACP,IAAI,CAAC,WAAW,EAAE;QAChB,CAAC,IAAI,CAAC,cAAc,EAAE;QACtB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,EACvE,qDAAqD,CACtD,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,UAAU,CACvB,SAAiB,EACjB,IAAgB;IAEhB,qBAAqB,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CACrB,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAClC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CACjE,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,SAAS,CACP,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU,EAC9C,6DAA6D,CAC9D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,eAAe,CAAC,CAAQ;IAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE;YACjE,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK;gBAAE,IAAI,IAAI;oBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAQ,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,eAAe,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,WAAY,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;YAClC,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,WAAW;SAC3B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,EACjC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,OAAO,GAAG,EAAE,EACd,KAAK,GAAG,CAAC,EACT,KAAK,GAAG,CAAC,CAAC;QACZ,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,KAAe,CAAC;gBAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACpB,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;gBACrB,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,IAAI,OAAe,CAAC;gBACpB,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBACvC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;oBACrC,SAAS,CACP,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,aAAa,EACvD,+BAA+B,CAChC,CAAC;oBACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAQ,CAAC;oBACpC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC;oBACtC,SAAS,CACP,KAAK,KAAK,CAAC;wBACT,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM;wBAC/C,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO;4BAClB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;4BAC1B,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,QAAS,CAAC,KAAK,GAAG,CAAC,CAAC,EAC3C,oCAAoC,CACrC,CAAC;oBACF,KAAK,EAAE,CAAC;oBACR,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,SAAS,CACP,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,aAAa,EAC3C,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC5B,SAAS,CACP,CAAC,OAAO;gBACN,KAAK,KAAK,IAAI,CAAC,UAAU;gBACzB,KAAK,KAAK,IAAI,CAAC,WAAW;gBAC1B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,EACtC,wCAAwC,CACzC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,OAAO,cAAc;IAcd;IACA;IAdF,YAAY,GAA2B,EAAE,CAAC;IAC1C,KAAK,GAAiB,EAAE,CAAC;IAC1B,MAAM,CAAc;IACpB,OAAO,GAAa,EAAE,CAAC;IACvB,YAAY,GAAG,CAAC,CAAC;IACjB,IAAI,CAMV;IACF,YACW,SAAiB,EACjB,OAAwB;QADxB,cAAS,GAAT,SAAS,CAAQ;QACjB,YAAO,GAAP,OAAO,CAAiB;IAChC,CAAC;IACJ,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,SAAiB,EACjB,OAAwB;QAExB,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,OAAO,KAAK,OAAO;YACrB,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;aACvE,CAAC;YACJ,qBAAqB,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QACjC,MAAM,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;IACxB,CAAC;IACO,KAAK,CAAC,UAAU;QACtB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,MAAM,IAAI,CAAC,MAAO,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,+EAA+E;QAC/E,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,KAAK;YACtB,WAAW,EAAE,IAAI,CAAC,KAAK;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAQ;QACjB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,EACzB,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClC,SAAS,CACP,KAAK,IAAI,aAAa,EACtB,2CAA2C,GAAG,CAAC,EAAE,EAAE,CACpD,CAAC;QACF,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC5C,IAAI,CAAC,IAAI,GAAG;oBACV,MAAM,EAAE,GAAG,CAAC,EAAE;oBACd,IAAI;oBACJ,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC;oBAC5B,KAAK,EAAE,CAAC;oBACR,KAAK,EAAE,CAAC;iBACT,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,GAAG,CAAC,GAAG,WAAW;YAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACpE,IAAI,KAAK,GAAG,CAAC,IAAI,WAAW;YAAE,MAAM,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;aAC/D,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,YAAY,IAAI,KAAK,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,MAAM,CACV,QAAe,EACf,IAAgB,EAChB,GAAsB;QAEtB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EACxD,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,QAAQ,CACnD,KAA+B,CAAC,IAAI,IAAI,EAAE,CAC5C;gBAED,MAAM,KAAK,CAAC;YACd,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAC5D,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAE,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IAC1B,CAAC;CACF"}