@intentius/chant 0.124.45 → 0.124.48

package/dist/lifecycle/ledger-read.d.ts

@@ -0,0 +1,65 @@
+import { type FilterFields } from "../read-filter.js";
+import type { LedgerReadPort } from "./ledger-port.js";
+import { type QueryLedger, type QueryTable } from "./query.js";
+/** The version of the `ledger` document this chant writes. */
+export declare const LEDGER_READ_CONTRACT_VERSION = 1;
+/** `$id` of the JSON Schema for `chant ledger --json`. */
+export declare const LEDGER_READ_SCHEMA_ID = "https://intentius.io/chant/schemas/workspace/ledger/v1/ledger.schema.json";
+/** The tables, in the order `chant query` lists them. */
+export declare const LEDGER_TABLES: QueryTable[];
+/** The column `--since` compares, per table; null for a table with no time of its own. */
+export declare const LEDGER_TIME_COLUMN: Record<QueryTable, string | null>;
+/** The fields `--where` takes on a table: its columns, typed. */
+export declare function ledgerFields(table: QueryTable): FilterFields;
+export type LedgerValue = string | number | boolean | null | Record<string, unknown> | unknown[];
+export type LedgerRow = Record<string, LedgerValue>;
+export interface LedgerReadOptions {
+    where?: readonly string[];
+    /** An ISO date or time, or a span back from now such as `7d`. */
+    since?: string;
+    /** The revision of `chant/lifecycle` the ports read, as given; only echoed here. */
+    at?: string | null;
+    now?: Date;
+}
+export type LedgerReadDocument = {
+    $schema: string;
+    contract: number;
+    table: QueryTable;
+    /** The table's columns, in order. */
+    columns: string[];
+    at: string | null;
+    filter: {
+        where: string[];
+        since: string | null;
+    };
+    /** Rows in the table before the filter. */
+    total: number;
+    rows: LedgerRow[];
+    /** Lines and files of this table that could not be read as their kind, left out. */
+    malformed: number;
+} | {
+    $schema: string;
+    contract: number;
+    error: {
+        code: LedgerReadErrorCode;
+        message: string;
+    };
+};
+/** Why the read printed no rows. Closed. */
+export declare const LEDGER_READ_ERROR_CODES: readonly ["filter-invalid", "table-unknown", "revision-unknown", "ledger-unreadable"];
+export type LedgerReadErrorCode = (typeof LEDGER_READ_ERROR_CODES)[number];
+/** A failure document. */
+export declare function ledgerReadFailure(code: LedgerReadErrorCode, message: string): LedgerReadDocument;
+/** Read one table from the ledgers and filter it. A bad table or filter is a failure document, before anything is read. */
+export declare function readLedgerTable(table: string, ledgers: readonly QueryLedger[] | (() => Promise<readonly QueryLedger[]>), opts?: LedgerReadOptions): Promise<LedgerReadDocument>;
+/** Thrown by {@link resolveLedgerRevision} for a revision git can't resolve. */
+export declare class LedgerRevisionError extends Error {
+}
+/** The commit `rev` names in the repository at `cwd`. Throws a {@link LedgerRevisionError}. */
+export declare function resolveLedgerRevision(cwd: string, rev: string): string;
+/**
+ * A port over the ledger as the commit `commit` holds it, under `prefix`
+ * (`""`, or `_members/<member>/` per level). It never fetches.
+ */
+export declare function revisionLedgerReadPort(cwd: string, commit: string, prefix: string): LedgerReadPort;
+//# sourceMappingURL=ledger-read.d.ts.map

package/dist/lifecycle/ledger-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-read.d.ts","sourceRoot":"","sources":["../../src/lifecycle/ledger-read.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAqD,KAAK,YAAY,EAAwB,MAAM,gBAAgB,CAAC;AAE5H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAA+B,KAAK,WAAW,EAAiB,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAExG,8DAA8D;AAC9D,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB,8EAA8E,CAAC;AAEjH,yDAAyD;AACzD,eAAO,MAAM,aAAa,EAAgC,UAAU,EAAE,CAAC;AAEvE,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAQhE,CAAC;AASF,iEAAiE;AACjE,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CAM5D;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,EAAE,CAAC;AACjG,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAmBpD,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,MAAM,kBAAkB,GAC1B;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;IAClB,qCAAqC;IACrC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAClD,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,mBAAmB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEjG,4CAA4C;AAC5C,eAAO,MAAM,uBAAuB,uFAAwH,CAAC;AAC7J,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3E,0BAA0B;AAC1B,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAEhG;AAED,2HAA2H;AAC3H,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoCzL;AAED,gFAAgF;AAChF,qBAAa,mBAAoB,SAAQ,KAAK;CAAG;AAEjD,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAMtE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAsBlG"}

package/dist/lifecycle/ledger-read.js

@@ -0,0 +1,160 @@
+/**
+ * `chant ledger <table>` (#4363): the rows of one ledger on `chant/lifecycle`
+ * as a JSON read contract (`workspace/ledger.schema.json`), filtered with
+ * `--where`, `--since` and `--at` instead of SQL.
+ *
+ * The tables, their columns and the rows are the ones `chant query` loads
+ * (`./query.ts` {@link QUERY_TABLES}, {@link loadQueryData}), so the two
+ * agree on every row. A column `chant query` keeps as JSON text is an object
+ * or array here. No SQL engine loads.
+ *
+ * `--since <time>` keeps the rows whose time column ({@link LEDGER_TIME_COLUMN})
+ * is at or after it. `--at <rev>` reads the ledger as the commit `rev` of
+ * `chant/lifecycle` held it ({@link revisionLedgerReadPort}).
+ *
+ * Everything here but {@link revisionLedgerReadPort} is pure over a
+ * {@link LedgerReadPort}, so a product that reads the branch its own way
+ * (terragucci, behold) supplies its own port.
+ */
+import { execFileSync } from "node:child_process";
+import { FilterError, matchesWhere, parseSince, parseWhere } from "../read-filter.js";
+import { loadQueryData, QUERY_TABLES } from "./query.js";
+/** The version of the `ledger` document this chant writes. */
+export const LEDGER_READ_CONTRACT_VERSION = 1;
+/** `$id` of the JSON Schema for `chant ledger --json`. */
+export const LEDGER_READ_SCHEMA_ID = "https://intentius.io/chant/schemas/workspace/ledger/v1/ledger.schema.json";
+/** The tables, in the order `chant query` lists them. */
+export const LEDGER_TABLES = Object.keys(QUERY_TABLES);
+/** The column `--since` compares, per table; null for a table with no time of its own. */
+export const LEDGER_TIME_COLUMN = {
+    resources: "observed_at",
+    snapshots: "observed_at",
+    runs: "started",
+    gates: "timestamp",
+    deploys: "timestamp",
+    releases: null,
+    cuts: "timestamp",
+};
+/** The columns that hold JSON, which this read prints parsed. */
+const JSON_COLUMNS = new Set(["attributes", "labels", "outcomes", "promoted_from", "restores", "redeploys", "artifacts"]);
+/** The columns that hold an ISO instant. */
+const TIME_COLUMNS = new Set(["last_updated", "observed_at", "started", "ended", "timestamp", "expires_at"]);
+/** INTEGER columns that hold 0 or 1, which this read prints as booleans. */
+const BOOLEAN_COLUMNS = new Set(["signed", "empty"]);
+/** The fields `--where` takes on a table: its columns, typed. */
+export function ledgerFields(table) {
+    const out = {};
+    for (const [name, sqlType] of QUERY_TABLES[table]) {
+        out[name] = BOOLEAN_COLUMNS.has(name) ? "boolean" : sqlType === "INTEGER" ? "number" : JSON_COLUMNS.has(name) ? "json" : TIME_COLUMNS.has(name) ? "time" : "text";
+    }
+    return out;
+}
+/** The row as the contract prints it: JSON columns parsed, 0/1 columns as booleans. */
+function contractRow(table, row) {
+    const out = {};
+    for (const [name] of QUERY_TABLES[table]) {
+        const v = row[name] ?? null;
+        if (v !== null && JSON_COLUMNS.has(name) && typeof v === "string") {
+            try {
+                out[name] = JSON.parse(v);
+            }
+            catch {
+                out[name] = v;
+            }
+        }
+        else if (BOOLEAN_COLUMNS.has(name) && typeof v === "number")
+            out[name] = v === 1;
+        else
+            out[name] = v;
+    }
+    return out;
+}
+/** Why the read printed no rows. Closed. */
+export const LEDGER_READ_ERROR_CODES = ["filter-invalid", "table-unknown", "revision-unknown", "ledger-unreadable"];
+const head = { $schema: LEDGER_READ_SCHEMA_ID, contract: LEDGER_READ_CONTRACT_VERSION };
+/** A failure document. */
+export function ledgerReadFailure(code, message) {
+    return { ...head, error: { code, message } };
+}
+/** Read one table from the ledgers and filter it. A bad table or filter is a failure document, before anything is read. */
+export async function readLedgerTable(table, ledgers, opts = {}) {
+    if (!LEDGER_TABLES.includes(table))
+        return ledgerReadFailure("table-unknown", `no table ${JSON.stringify(table)}; the tables are ${LEDGER_TABLES.join(", ")}`);
+    const t = table;
+    let clauses;
+    let since = null;
+    try {
+        clauses = parseWhere(opts.where ?? [], ledgerFields(t), opts.now);
+        if (opts.since !== undefined) {
+            if (LEDGER_TIME_COLUMN[t] === null)
+                throw new FilterError(`--since: ${t} has no time column; filter it with --where`);
+            since = parseSince(opts.since, opts.now);
+        }
+    }
+    catch (err) {
+        if (err instanceof FilterError)
+            return ledgerReadFailure("filter-invalid", err.message);
+        throw err;
+    }
+    const load = await loadQueryData(typeof ledgers === "function" ? await ledgers() : ledgers);
+    const all = load.data[t].map((r) => contractRow(t, r));
+    const timeCol = LEDGER_TIME_COLUMN[t];
+    const sinceMs = since === null ? null : Date.parse(since);
+    const rows = all.filter((r) => {
+        if (sinceMs !== null && timeCol !== null) {
+            const v = r[timeCol];
+            if (typeof v !== "string" || !(Date.parse(v) >= sinceMs))
+                return false;
+        }
+        return matchesWhere(r, clauses);
+    });
+    return {
+        ...head,
+        table: t,
+        columns: QUERY_TABLES[t].map(([c]) => c),
+        at: opts.at ?? null,
+        filter: { where: [...(opts.where ?? [])], since },
+        total: all.length,
+        rows,
+        malformed: load.malformed[t],
+    };
+}
+/** Thrown by {@link resolveLedgerRevision} for a revision git can't resolve. */
+export class LedgerRevisionError extends Error {
+}
+/** The commit `rev` names in the repository at `cwd`. Throws a {@link LedgerRevisionError}. */
+export function resolveLedgerRevision(cwd, rev) {
+    try {
+        return execFileSync("git", ["rev-parse", "--verify", "--quiet", `${rev}^{commit}`], { cwd, encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    }
+    catch {
+        throw new LedgerRevisionError(`--at ${rev} names no commit here; give a commit of chant/lifecycle, such as chant/lifecycle~3`);
+    }
+}
+/**
+ * A port over the ledger as the commit `commit` holds it, under `prefix`
+ * (`""`, or `_members/<member>/` per level). It never fetches.
+ */
+export function revisionLedgerReadPort(cwd, commit, prefix) {
+    const git = (args) => {
+        try {
+            return execFileSync("git", args, { cwd, encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"], maxBuffer: 256 * 1024 * 1024 });
+        }
+        catch {
+            return null;
+        }
+    };
+    const lsTree = (path, nameOnly) => {
+        const spec = path === "" ? commit : `${commit}:${path}`;
+        const out = git(["ls-tree", "--full-tree", ...(nameOnly ? ["--name-only"] : []), spec]);
+        return out === null ? [] : out.split("\n").filter(Boolean);
+    };
+    return {
+        read: async (dir, file) => git(["show", `${commit}:${prefix}${dir}/${file}`]),
+        list: async (dir) => lsTree(`${prefix}${dir}`, true),
+        trees: async () => lsTree(prefix.replace(/\/$/, ""), false)
+            .map((line) => /^\d+\s+(\w+)\s+[0-9a-f]+\t(.+)$/.exec(line))
+            .filter((m) => m !== null && m[1] === "tree")
+            .map((m) => m[2]),
+    };
+}

package/dist/lifecycle/observe.d.ts

@@ -13,6 +13,7 @@ import type { ObservationLexicon } from "../lexicon.js";
 import type { BuildResult } from "../build.js";
 import type { LiveObservation, IREdge } from "../graph-ir.js";
 import type { ResourceMetadata } from "../lexicon.js";
+import { type RootRead } from "../observation.js";
 export interface ObserveResult {
     observations: LiveObservation[];
     warnings: string[];
@@ -25,7 +26,34 @@ export interface ObserveResult {
      * answer, not ahead of it.
      */
     notes: string[];
+    /**
+     * Facts about declared entities beside their verdict (#4372), keyed like
+     * the observations' resources (stack-qualified where those are). A planned
+     * create is the case: absent, with the plan's attributes. Never part of
+     * `observations`, so nothing that classifies or paints presence sees it;
+     * {@link carryAnnotations} puts it on the declared nodes of an overlay.
+     */
+    annotations?: Record<string, Record<string, unknown>>;
+    /**
+     * Which read answered each declared entity (#2267), keyed like the
+     * observations' resources: `"state"`, `"live"`, `"plan"` or `"live+plan"`
+     * from the terraform lexicon. Present only for lexicons that report it.
+     */
+    sources?: Record<string, string>;
+    /** Which read answered each root, and why it fell back (structured, from the lexicon). */
+    rootReads?: Record<string, RootRead>;
 }
+/**
+ * Put each entity's annotations (#4372) on its node, by id. Only attributes
+ * are touched: `_status`, `physicalId` and `ownership` stay what the overlay
+ * decided, so a planned create is still painted pending and still absent to
+ * every consumer that asks. An annotation wins a collision with a declared
+ * attribute, the same precedence an observed attribute has in the overlay.
+ */
+export declare function carryAnnotations<N extends {
+    id: string;
+    attrs: Record<string, unknown>;
+}>(nodes: N[], annotations: Record<string, Record<string, unknown>> | undefined): N[];
 /**
  * Query every plugin that implements `describeResources` for its resources in
  * `environment`. `owned` (default true for the managed-only diagram, epic #776)

package/dist/lifecycle/observe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"observe.d.ts","sourceRoot":"","sources":["../../src/lifecycle/observe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAI5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAYnD,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAwBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,kBAAkB,EAAE,EAC7B,WAAW,EAAE,WAAW,EACxB,IAAI,CAAC,EAAE;IACL,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzE;;8CAE0C;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;0CAEsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+EAC2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,GACA,OAAO,CAAC,aAAa,CAAC,CAgMxB;AAyBD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE;IACJ,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,GACA,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CA2B3C;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAID;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE;IACJ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAC9E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChE,GACA,OAAO,CAAC,qBAAqB,CAAC,CA0ChC"}
+{"version":3,"file":"observe.d.ts","sourceRoot":"","sources":["../../src/lifecycle/observe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAI5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAML,KAAK,QAAQ,EACd,MAAM,gBAAgB,CAAC;AAKxB,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;CACtC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACvF,KAAK,EAAE,CAAC,EAAE,EACV,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GAC/D,CAAC,EAAE,CAML;AAyBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,kBAAkB,EAAE,EAC7B,WAAW,EAAE,WAAW,EACxB,IAAI,CAAC,EAAE;IACL,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzE;;8CAE0C;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;0CAEsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+EAC2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,GACA,OAAO,CAAC,aAAa,CAAC,CAsMxB;AAyBD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE;IACJ,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,GACA,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CA2B3C;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAID;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE;IACJ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAC9E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChE,GACA,OAAO,CAAC,qBAAqB,CAAC,CA0ChC"}

package/dist/lifecycle/observe.js

@@ -4,6 +4,21 @@ import { mergeObservations, normalizeObservation, unobservedAll, formatUnobserve
 import { zeroResourcesWarning } from "../live-endpoint.js";
 import { unqualifiedKey } from "./identity.js";
 import { isObservableDeclarable } from "../declarable.js";
+/**
+ * Put each entity's annotations (#4372) on its node, by id. Only attributes
+ * are touched: `_status`, `physicalId` and `ownership` stay what the overlay
+ * decided, so a planned create is still painted pending and still absent to
+ * every consumer that asks. An annotation wins a collision with a declared
+ * attribute, the same precedence an observed attribute has in the overlay.
+ */
+export function carryAnnotations(nodes, annotations) {
+    if (!annotations || Object.keys(annotations).length === 0)
+        return nodes;
+    return nodes.map((n) => {
+        const a = annotations[n.id];
+        return a && Object.keys(a).length > 0 ? { ...n, attrs: { ...n.attrs, ...a } } : n;
+    });
+}
 /**
  * Re-key a normalized observation's entities by `${stack}::${id}` (#1162) so a
  * bare LogicalResourceId shared across stacks (e.g. `vpc`) stays unambiguous
@@ -19,6 +34,7 @@ function qualifyObservation(obs, stackName) {
         queried: q(obs.queried),
         // Which read answered (#2267) is per entity, so it re-keys with them.
         sources: q(obs.sources),
+        ...(obs.annotations ? { annotations: q(obs.annotations) } : {}),
         notes: obs.notes,
         // Exports are already keyed by stack (#1279); nothing to qualify.
         ...(obs.stackExports ? { stackExports: obs.stackExports } : {}),
@@ -74,6 +90,9 @@ export async function observeResources(environment, plugins, buildResult, opts)
     const warnings = [];
     const errors = [];
     const notes = [];
+    const annotations = {};
+    const sources = {};
+    const rootReads = {};
     for (const plugin of plugins) {
         if (!plugin.describeResources)
             continue;
@@ -170,6 +189,9 @@ export async function observeResources(environment, plugins, buildResult, opts)
                 if (!notes.includes(line))
                     notes.push(line);
             }
+            Object.assign(annotations, observed.annotations ?? {});
+            Object.assign(sources, observed.sources);
+            Object.assign(rootReads, observed.rootReads ?? {});
             // What the estate depends on but does not declare (#1273). Read after the
             // managed resources, because the declared observation is the closure's
             // roots — there is nothing to reference out from until it exists.
@@ -224,7 +246,7 @@ export async function observeResources(environment, plugins, buildResult, opts)
             }, environment, entityNames.length);
         }
     }
-    return { observations, warnings, errors, notes };
+    return { observations, warnings, errors, notes, annotations, ...(Object.keys(sources).length > 0 ? { sources } : {}), ...(Object.keys(rootReads).length > 0 ? { rootReads } : {}) };
 }
 /**
  * The subset of an observation belonging to one stack.

package/dist/lifecycle/release-workstation.d.ts

@@ -39,6 +39,13 @@ export interface Trunk {
 }
 /** The trunk of the repository at `cwd`: `ci.green.branch` when declared, else what `origin/HEAD` names, else `main`. */
 export declare function resolveTrunk(cwd: string, greenBranch: string | null): Trunk;
+/**
+ * {@link checkOnTrunk} across the branches `ci.green` judges (#4325): the
+ * trunk `commit` is on, `trunk` itself or one of `others` (the declaration's
+ * further green branches, which `ci.branches` routes members to). A commit on
+ * none of them is refused with the first trunk's error.
+ */
+export declare function checkOnGreenBranches(cwd: string, commit: string, trunk: Trunk, others: readonly string[]): Trunk;
 /**
  * Refuse `commit` unless it is reachable from `<remote>/<branch>` as this
  * clone knows it. A commit on the local branch only is `release-commit-not-pushed`;

package/dist/lifecycle/release-workstation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"release-workstation.d.ts","sourceRoot":"","sources":["../../src/lifecycle/release-workstation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAE7D,MAAM,MAAM,oBAAoB,GAAG,6BAA6B,GAAG,2BAA2B,GAAG,wBAAwB,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAExK,wDAAwD;AACxD,qBAAa,qBAAsB,SAAQ,KAAK;IAE5C,QAAQ,CAAC,IAAI,EAAE,oBAAoB;IAEnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM;IAHvB,YACW,IAAI,EAAE,oBAAoB,EACnC,OAAO,EAAE,MAAM,EACN,GAAG,CAAC,EAAE,MAAM,YAAA,EAItB;CACF;AAaD,uDAAuD;AACvD,eAAO,MAAM,cAAc,WAAW,CAAC;AAEvC,sDAAsD;AACtD,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,iBAAiB,GAAG,aAAa,GAAG,SAAS,CAAC;CACrD;AAED,yHAAyH;AACzH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,CAM3E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAwB5E;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAehE;AAED,iCAAiC;AACjC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC;AAEpE,yHAAyH;AACzH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmB1D;AAED,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAG5F;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG,SAAS,CAarD;AAED,gHAAgH;AAChH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAY9F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAMzJ"}
+{"version":3,"file":"release-workstation.d.ts","sourceRoot":"","sources":["../../src/lifecycle/release-workstation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAE7D,MAAM,MAAM,oBAAoB,GAAG,6BAA6B,GAAG,2BAA2B,GAAG,wBAAwB,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAExK,wDAAwD;AACxD,qBAAa,qBAAsB,SAAQ,KAAK;IAE5C,QAAQ,CAAC,IAAI,EAAE,oBAAoB;IAEnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM;IAHvB,YACW,IAAI,EAAE,oBAAoB,EACnC,OAAO,EAAE,MAAM,EACN,GAAG,CAAC,EAAE,MAAM,YAAA,EAItB;CACF;AAaD,uDAAuD;AACvD,eAAO,MAAM,cAAc,WAAW,CAAC;AAEvC,sDAAsD;AACtD,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,iBAAiB,GAAG,aAAa,GAAG,SAAS,CAAC;CACrD;AAED,yHAAyH;AACzH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,CAM3E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,KAAK,CAgBhH;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAwB5E;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAehE;AAED,iCAAiC;AACjC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC;AAEpE,yHAAyH;AACzH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmB1D;AAED,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAG5F;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG,SAAS,CAarD;AAED,gHAAgH;AAChH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAY9F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAMzJ"}

package/dist/lifecycle/release-workstation.js

@@ -53,6 +53,31 @@ export function resolveTrunk(cwd, greenBranch) {
         return { remote: RELEASE_REMOTE, branch: head.slice(prefix.length), from: "origin/HEAD" };
     return { remote: RELEASE_REMOTE, branch: "main", from: "default" };
 }
+/**
+ * {@link checkOnTrunk} across the branches `ci.green` judges (#4325): the
+ * trunk `commit` is on, `trunk` itself or one of `others` (the declaration's
+ * further green branches, which `ci.branches` routes members to). A commit on
+ * none of them is refused with the first trunk's error.
+ */
+export function checkOnGreenBranches(cwd, commit, trunk, others) {
+    try {
+        checkOnTrunk(cwd, commit, trunk);
+        return trunk;
+    }
+    catch (err) {
+        for (const branch of others) {
+            const routed = { ...trunk, branch };
+            try {
+                checkOnTrunk(cwd, commit, routed);
+                return routed;
+            }
+            catch {
+                // Not on this one either; the next, then the first branch's error.
+            }
+        }
+        throw err;
+    }
+}
 /**
  * Refuse `commit` unless it is reachable from `<remote>/<branch>` as this
  * clone knows it. A commit on the local branch only is `release-commit-not-pushed`;

package/dist/lifecycle/run-ledger.d.ts

@@ -1,6 +1,7 @@
 import type { OpConfig } from "../op/types.js";
 import type { StepRecord } from "../op/local-executor.js";
 import { type OpRunRecord, type OpRunRecordInput } from "../op/runtime.js";
+import { type LedgerLocation } from "./git.js";
 /** The env a run records against when its Op declares no `labels.Env`. */
 export declare const DEFAULT_RUN_ENV = "local";
 /** The env a run records against: the Op's own `labels.Env`, else {@link DEFAULT_RUN_ENV}. */
@@ -32,6 +33,8 @@ export declare function buildRunRecord(config: Pick<OpConfig, "name" | "labels">
     runOrigin?: OpRunRecord["runOrigin"];
     /** Each phase's wall-clock time, by name, as the executor measured it. */
     phaseDurations?: Record<string, number>;
+    /** The workspace run that started this one (#2554). */
+    workspaceRun?: OpRunRecord["workspaceRun"];
 }): OpRunRecordInput;
 /**
  * Append one immutable run record. Does not push to the remote — call
@@ -54,9 +57,7 @@ export declare function appendRunRecord(input: OpRunRecordInput, opts?: {
  * lines are skipped and counted, never thrown on — a hand-edited or truncated
  * ledger degrades to a shorter history, the stance every ledger here takes.
  */
-export declare function readRunLedger(environment: string, op: string, opts?: {
-    cwd?: string;
-}): Promise<{
+export declare function readRunLedger(environment: string, op: string, opts?: LedgerLocation): Promise<{
     records: OpRunRecord[];
     malformed: number;
 }>;

package/dist/lifecycle/run-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-ledger.d.ts","sourceRoot":"","sources":["../../src/lifecycle/run-ledger.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAA+C,MAAM,eAAe,CAAC;AASrI,0EAA0E;AAC1E,eAAO,MAAM,eAAe,UAAU,CAAC;AAMvC,8FAA8F;AAC9F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,CAEjE;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC,EACzC,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,KAAK,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,OAAO,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IACjC,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;IACrC,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,GACA,gBAAgB,CAkDlB;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAsBlD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAIxD;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CA+B7F"}
+{"version":3,"file":"run-ledger.d.ts","sourceRoot":"","sources":["../../src/lifecycle/run-ledger.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAA+C,MAAM,eAAe,CAAC;AACrI,OAAO,EAAsF,KAAK,cAAc,EAAE,MAAM,OAAO,CAAC;AAQhI,0EAA0E;AAC1E,eAAO,MAAM,eAAe,UAAU,CAAC;AAMvC,8FAA8F;AAC9F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,CAEjE;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC,EACzC,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,KAAK,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,OAAO,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IACjC,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;IACrC,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,uDAAuD;IACvD,YAAY,CAAC,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC;CAC5C,GACA,gBAAgB,CAmDlB;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAsBlD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC;IAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAIxD;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CA+B7F"}

package/dist/lifecycle/run-ledger.js

@@ -118,6 +118,7 @@ export function buildRunRecord(config, records, times) {
         ...(times.resumed ? { resumed: times.resumed } : {}),
         ...(times.gitSha ? { gitSha: times.gitSha } : {}),
         ...(times.runOrigin ? { runOrigin: times.runOrigin } : {}),
+        ...(times.workspaceRun ? { workspaceRun: times.workspaceRun } : {}),
     };
 }
 /**

package/dist/lint/discover.js

@@ -142,5 +142,7 @@ function isPostSynthCheck(obj) {
         typeof o.description === "string" &&
         typeof o.check === "function" &&
         // Exclude LintRules (which also have check) by checking for PostSynthCheck-specific fields
-        typeof o.severity !== "string");
+        typeof o.severity !== "string" &&
+        // A cross-root check (chant #1939) is not a per-build check.
+        o.scope !== "cross-root");
 }

package/dist/lint/post-synth.d.ts

@@ -175,6 +175,11 @@ export interface PostSynthDiagnostic {
         /** Where it is missing from (e.g. a root module name). */
         scope: string;
     };
+    /**
+     * The build root the finding is about, set by a {@link CrossRootCheck}
+     * (chant #1939). Absent from a per-build finding.
+     */
+    root?: string;
 }
 /**
  * A post-synthesis check that validates build output. Lexicons ship these as
@@ -196,8 +201,17 @@ export interface PostSynthCheck {
      * new check would otherwise change the audit output of every project.
      */
     auditOptIn?: boolean;
+    /**
+     * `"build"`, the default: the check sees one build. A check that reads
+     * across build roots is a {@link CrossRootCheck} instead (chant #1939).
+     */
+    scope?: "build";
 }
-/** Structural type guard — used to collect project-authored policy checks. */
+/**
+ * Structural type guard — used to collect project-authored policy checks.
+ * A {@link CrossRootCheck} is not a `PostSynthCheck`, so a policy module or a
+ * lexicon's check directory that exports one never puts it in a per-build run.
+ */
 export declare function isPostSynthCheck(value: unknown): value is PostSynthCheck;
 /**
  * Run a set of post-synthesis checks against a build result. `env` is threaded
@@ -214,4 +228,116 @@ export declare function runPostSynthChecks(checks: PostSynthCheck[], buildResult
     projectDir?: string;
     projectConfig?: Record<string, unknown>;
 }): PostSynthDiagnostic[];
+/**
+ * One build root handed to {@link runCrossRootChecks}: a name, and the build
+ * result the caller already has for it. The caller decides what a root is
+ * (a workspace member, a project directory, an environment's build) and
+ * builds it; this module never builds or reads the disk.
+ */
+export interface CrossRootInput {
+    /**
+     * The root's name, unique within one run. A workspace member's name, or a
+     * project-relative path. Findings name it in {@link PostSynthDiagnostic.root}.
+     */
+    root: string;
+    /** The root's directory, when it has one. */
+    dir?: string;
+    /** The environment this root was built for, when known. */
+    env?: string;
+    buildResult: PostSynthContext["buildResult"];
+    projectConfig?: Record<string, unknown>;
+}
+/**
+ * One build root as a cross-root check sees it: an ordinary
+ * {@link PostSynthContext} over that root's build, so a per-build helper
+ * (k8s's `allManifests(ctx)`) works on it unchanged, plus its name.
+ */
+export interface BuildRootView extends PostSynthContext {
+    readonly root: string;
+    readonly dir?: string;
+    readonly docs: OutputDoc[];
+}
+/** An {@link OutputDoc} tagged with the build root it came from. */
+export interface RootedOutputDoc extends OutputDoc {
+    root: string;
+}
+/**
+ * A link between two build roots, as the caller knows it (chant #2549): in a
+ * workspace, a member link from the declaration or one the members' graphs
+ * surface. A cross-root check that compares what the outputs say with what
+ * was written down reads these from {@link CrossRootContext.links}.
+ */
+export interface CrossRootLink {
+    consumer: string;
+    producer: string;
+    output: string;
+    /** How the link was found: `declared`, `kind-reader`, or `inferred:<rule>` for one the roots' graphs surface. */
+    origin: string;
+    /** The consumer's parameter an inferred link feeds; null or absent for a declared one. */
+    input?: string | null;
+    /** Whether the link resolved against the producer's outputs, as the caller judged it. */
+    status?: string;
+}
+/** An entity tagged with the build root that declared it. */
+export interface RootedEntity {
+    root: string;
+    name: string;
+    entity: Declarable;
+}
+/**
+ * Context provided to a {@link CrossRootCheck}. `roots` keeps every root's
+ * build apart; `docs` and `entities` are the union across roots, each entry
+ * tagged with its root, built lazily on first access.
+ */
+export interface CrossRootContext {
+    /** Every root in the run, in the order the caller gave them. */
+    readonly roots: readonly BuildRootView[];
+    /** Look a root up by name. */
+    root(name: string): BuildRootView | undefined;
+    /** Every root's parsed output documents, tagged by root. Lazy. */
+    readonly docs: readonly RootedOutputDoc[];
+    /** Every root's entities, tagged by root. Lazy. */
+    readonly entities: readonly RootedEntity[];
+    /** The run's environment, when the caller set one for the whole run. */
+    readonly env?: string;
+    readonly activityContracts?: ReadonlyMap<string, ActivityContract>;
+    /** The links between roots the caller passed (#2549), or absent when it passed none. */
+    readonly links?: readonly CrossRootLink[];
+}
+/** What a cross-root run takes besides its roots. */
+export interface CrossRootOptions {
+    env?: string;
+    activityContracts?: ReadonlyMap<string, ActivityContract>;
+    /** The links between roots (#2549), handed to every check as {@link CrossRootContext.links}. */
+    links?: readonly CrossRootLink[];
+}
+/**
+ * A check that reads across build roots (chant #1939). It declares
+ * `scope: "cross-root"`, and only {@link runCrossRootChecks} runs it:
+ * `chant build`, `chant lint` and every other per-build pass skip it, so a
+ * project that never asks for a cross-root run pays nothing for it.
+ */
+export interface CrossRootCheck {
+    id: string;
+    description: string;
+    scope: "cross-root";
+    check(ctx: CrossRootContext): PostSynthDiagnostic[];
+    /** As {@link PostSynthCheck.auditOptIn}. */
+    auditOptIn?: boolean;
+}
+/** Structural type guard for {@link CrossRootCheck}. */
+export declare function isCrossRootCheck(value: unknown): value is CrossRootCheck;
+/**
+ * Build the {@link CrossRootContext} for a set of roots. Exported for tests
+ * and for a caller that runs checks itself; most callers want
+ * {@link runCrossRootChecks}. Throws on an empty or duplicate root name.
+ */
+export declare function createCrossRootContext(inputs: readonly CrossRootInput[], opts?: CrossRootOptions): CrossRootContext;
+/**
+ * Run the cross-root checks in `checks` over `roots` (chant #1939). Anything
+ * in `checks` that is not a {@link CrossRootCheck} is skipped, so a caller can
+ * pass a lexicon's whole check list. With no cross-root check to run it
+ * returns at once, without building a context.
+ */
+export declare function runCrossRootChecks(checks: ReadonlyArray<CrossRootCheck | PostSynthCheck>, roots: readonly CrossRootInput[], opts?: CrossRootOptions): PostSynthDiagnostic[];
 //# sourceMappingURL=post-synth.d.ts.map

package/dist/lint/post-synth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"post-synth.d.ts","sourceRoot":"","sources":["../../src/lint/post-synth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;IAChD,8CAA8C;IAC9C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACnE;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,8BAA8B;IAC9B,WAAW,EAAE;QACX,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;QAChD,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjD,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,GAC9C,MAAM,SAAS,EAAE,CAQnB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAE1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE5F;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,EAAE;QACR,kEAAkE;QAClE,IAAI,EAAE,MAAM,CAAC;QACb,0DAA0D;QAC1D,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IACpD;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAQxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EAAE,EACxB,WAAW,EAAE,gBAAgB,CAAC,aAAa,CAAC,EAC5C,GAAG,CAAC,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACnK,mBAAmB,EAAE,CAqBvB"}
+{"version":3,"file":"post-synth.d.ts","sourceRoot":"","sources":["../../src/lint/post-synth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;IAChD,8CAA8C;IAC9C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACnE;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,8BAA8B;IAC9B,WAAW,EAAE;QACX,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;QAChD,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjD,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,GAC9C,MAAM,SAAS,EAAE,CAQnB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAE1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE5F;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,EAAE;QACR,kEAAkE;QAClE,IAAI,EAAE,MAAM,CAAC;QACb,0DAA0D;QAC1D,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IACpD;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CASxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EAAE,EACxB,WAAW,EAAE,gBAAgB,CAAC,aAAa,CAAC,EAC5C,GAAG,CAAC,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACnK,mBAAmB,EAAE,CAwBvB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAc,SAAQ,gBAAgB;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;CAC5B;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,iHAAiH;IACjH,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,6DAA6D;AAC7D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,8BAA8B;IAC9B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAC9C,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,CAAC;IAC1C,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,wEAAwE;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACnE,wFAAwF;IACxF,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CAC3C;AAED,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1D,gGAAgG;IAChG,KAAK,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IACpD,4CAA4C;IAC5C,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CASxE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,IAAI,CAAC,EAAE,gBAAgB,GACtB,gBAAgB,CA0ClB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,CAAC,cAAc,GAAG,cAAc,CAAC,EACtD,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,IAAI,CAAC,EAAE,gBAAgB,GACtB,mBAAmB,EAAE,CAOvB"}