@jevitate/cli 0.7.0 → 0.9.0

package/dist/journey-proposal-store.js

@@ -0,0 +1,342 @@
+import { lstat, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname, join, relative, sep } from "node:path";
+import { contentHash, clock } from "@jevitate/domain";
+import { JourneyProposalSchema, RejectedProposalSchema, } from "@jevitate/journey";
+import { assertRecordingProofUntouched, flattenRecording, healFloor, sanitizeStep } from "@jevitate/runtime";
+import { journeyReviewHash } from "./journey-review.js";
+import { journeyStepRisk } from "./journey-heal.js";
+import { redactCredentialShapes, redactText, redactUrl } from "@jevitate/ai-core";
+/**
+ * #453 — proposed Journey revisions, beside the journeys directory (`.proposals/`, committed with
+ * the PR like `.approved/`; a dot-folder, so never listed as a Journey). One PENDING proposal per
+ * Journey, keyed by the Journey id: `.proposals/<id>.json`; a newer one replaces it. A rejected one
+ * moves to `.proposals/<id>.rejected/<proposalId>.json` with who rejected it and why. A run never
+ * writes the stored Journey — only `journey promote --proposal` does.
+ *
+ * Nothing here can hold a secret: step values arrive through `sanitizeStep` (hidden), every string
+ * passes the redaction of the run's secret values, and the recording is the Journey's own. The free
+ * text (hypotheses, evidence, notes, rejection details, paths) is also scrubbed of credential-shaped
+ * values and sensitive URL parameters. It DOES hold control labels and change evidence — the files
+ * are committed (docs/journeys.md).
+ *
+ * #453 review: the store never follows a symlink — the `.proposals/` directories and files are
+ * `lstat`ed on read and write and a link is refused (`JourneyProposalInvalidError`); a write goes
+ * to a temporary file renamed into place (atomic).
+ */
+/** No pending proposal with that id (or none at all). Exit 64. */
+export class JourneyProposalNotFoundError extends Error {
+    code = "E_JOURNEY_PROPOSAL_NOT_FOUND";
+}
+/** The proposal was made against a Journey that has changed since, or its proof fields were touched. Exit 64. */
+export class JourneyProposalStaleError extends Error {
+    code = "E_JOURNEY_PROPOSAL_STALE";
+}
+/** A proposal that changes more than retargets (an assertion, a wait, a request check…) — refused. */
+export class JourneyProposalProofError extends Error {
+    code = "E_JOURNEY_PROPOSAL_PROOF";
+}
+/** A proposal file that is not valid. */
+export class JourneyProposalInvalidError extends Error {
+    code = "E_JOURNEY_PROPOSAL_INVALID";
+}
+const PROPOSAL_ID = /^[0-9a-f]{12}$/;
+/** True for a well-formed proposal id (12 hex characters) — also what keeps `../x` out of every path. */
+export function isProposalId(id) {
+    return PROPOSAL_ID.test(id);
+}
+function parts(id) {
+    const p = id.split("/");
+    return { dir: p.slice(0, -1), base: p[p.length - 1] ?? id };
+}
+export function proposalPath(journeysDir, journeyId) {
+    const { dir, base } = parts(journeyId);
+    return join(journeysDir, ".proposals", ...dir, `${base}.json`);
+}
+export function rejectedProposalPath(journeysDir, journeyId, proposalId) {
+    const { dir, base } = parts(journeyId);
+    return join(journeysDir, ".proposals", ...dir, `${base}.rejected`, `${proposalId}.json`);
+}
+/**
+ * Refuses (`JourneyProposalInvalidError`) when `.proposals/` or any directory or file on the way to
+ * `path` under it is a symbolic link — never followed, for a read or a write. Components that do not
+ * exist yet are fine (a write creates them).
+ */
+async function assertNoSymlink(path) {
+    const marker = `${sep}.proposals${sep}`;
+    const at = path.lastIndexOf(marker);
+    if (at < 0)
+        throw new JourneyProposalInvalidError(`${path} is not under a .proposals directory`);
+    const root = path.slice(0, at + marker.length - 1);
+    const parts = relative(root, path).split(sep).filter((p) => p !== "");
+    let cur = root;
+    for (const next of [null, ...parts]) {
+        if (next !== null)
+            cur = join(cur, next);
+        let st;
+        try {
+            st = await lstat(cur);
+        }
+        catch (err) {
+            if (typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT")
+                return;
+            throw err;
+        }
+        if (st.isSymbolicLink())
+            throw new JourneyProposalInvalidError(`refusing to follow a symbolic link at ${cur} — proposals are never read or written through a link`);
+    }
+}
+async function readJson(path) {
+    await assertNoSymlink(path);
+    let raw;
+    try {
+        raw = await readFile(path, "utf8");
+    }
+    catch (err) {
+        if (typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        throw new JourneyProposalInvalidError(`${path} is not valid JSON`);
+    }
+}
+async function writeJson(path, value) {
+    await assertNoSymlink(path);
+    await mkdir(dirname(path), { recursive: true });
+    await assertNoSymlink(path);
+    const tmp = `${path}.${process.pid}.${clock.monotonicMs().toString(36)}.tmp`;
+    await writeFile(tmp, `${JSON.stringify(value, null, 2)}\n`, { flag: "wx" });
+    try {
+        await rename(tmp, path);
+    }
+    catch (err) {
+        await rm(tmp, { force: true });
+        throw err;
+    }
+}
+async function removeFile(path) {
+    await assertNoSymlink(path);
+    await rm(path, { force: true });
+}
+/** Deterministic JSON (keys sorted, undefined dropped): two steps are the same when these agree. */
+function canonical(v) {
+    if (Array.isArray(v))
+        return `[${v.map(canonical).join(",")}]`;
+    if (v !== null && typeof v === "object") {
+        const o = v;
+        return `{${Object.keys(o)
+            .filter((k) => o[k] !== undefined)
+            .sort()
+            .map((k) => `${JSON.stringify(k)}:${canonical(o[k])}`)
+            .join(",")}}`;
+    }
+    return JSON.stringify(v) ?? "undefined";
+}
+function originOf(url) {
+    if (!/^[a-z][a-z0-9+.-]*:/i.test(url))
+        return null;
+    try {
+        return new URL(url).origin;
+    }
+    catch {
+        return "invalid";
+    }
+}
+/**
+ * #453 review: re-runs the heal floor on every step a revision changes (on write, on read for review
+ * and on accept) — a proposal file edited by hand, or written by an older build, never lets
+ * `journey promote --proposal` store what the runner would not have healed:
+ *  - the floor (`healFloor` with the built-in `SafetyPolicy` classification, `journeyStepRisk`) holds
+ *    for the step before AND after: never a proof / write / risky-control step;
+ *  - a retargeted click/fill expects only GET/HEAD/OPTIONS requests (part of the floor);
+ *  - a retargeted navigate URL stays on the Journey's allowed origin (its recorded site).
+ */
+export function proposalFloorViolation(stored, proposed) {
+    const riskOf = journeyStepRisk();
+    const before = flattenRecording(stored.recording);
+    const after = flattenRecording(proposed);
+    let site = null;
+    try {
+        site = new URL(stored.recording.site).origin;
+    }
+    catch {
+        site = null;
+    }
+    for (let i = 0; i < after.length; i++) {
+        const b = before[i];
+        const a = after[i];
+        if (b !== undefined && canonical(b.step) === canonical(a.step))
+            continue;
+        for (const [which, rec] of [["before", b?.recorded], ["after", a.recorded]]) {
+            if (rec === undefined)
+                return `step ${i + 1} is not in the stored Journey`;
+            const floor = healFloor(rec, riskOf);
+            if (floor.floor !== "healable")
+                return `step ${i + 1} (${which}): ${floor.reason}`;
+        }
+        if (a.step.kind === "navigate") {
+            const o = originOf(a.step.url);
+            if (o !== null && o !== site)
+                return `step ${i + 1}: the retargeted URL is on ${o}, not the Journey's origin ${site ?? "(none)"}`;
+        }
+    }
+    return null;
+}
+/** The Journey as it would be stored on accept: the stored one with the proposed recording. */
+export function proposedJourney(stored, proposal) {
+    return { ...stored, recording: proposal.recording };
+}
+/**
+ * Writes the proposal for `journeyId`, replacing a pending one. Refused (`JourneyProposalProofError`)
+ * when the revision changes anything but retargets (`assertRecordingProofUntouched`).
+ */
+export async function writeJourneyProposal(journeysDir, input) {
+    const violation = assertRecordingProofUntouched(input.base.recording, input.draft.recording);
+    if (violation !== null)
+        throw new JourneyProposalProofError(`refusing to store a proposal that touches the Journey's proof (${violation.code}): ${violation.detail}`);
+    const floor = proposalFloorViolation(input.base, input.draft.recording);
+    if (floor !== null)
+        throw new JourneyProposalProofError(`refusing to store a proposal the heal floor refuses: ${floor}`);
+    const baseHash = journeyReviewHash(input.base);
+    const secrets = [...(input.secrets ?? [])];
+    // Every string: the run's secret values. Free text (not the recording or a step): also
+    // credential-shaped values and sensitive URL parameters (#453 review).
+    const scrub = (v, free = true) => typeof v === "string"
+        ? free
+            ? redactUrl(redactCredentialShapes(secrets.length === 0 ? v : redactText(v, secrets)))
+            : secrets.length === 0
+                ? v
+                : redactText(v, secrets)
+        : Array.isArray(v)
+            ? v.map((x) => scrub(x, free))
+            : v !== null && typeof v === "object"
+                ? Object.fromEntries(Object.entries(v).map(([k, x]) => [k, scrub(x, free)]))
+                : v;
+    const screenshotOf = (n) => input.attempts.find((a) => a.n === n)?.observation?.screenshot;
+    const steps = input.draft.steps.map((s) => {
+        const shot = screenshotOf(s.attempt);
+        const before = s.evidence[0]?.before;
+        const after = s.evidence[0]?.after;
+        return {
+            index: s.index,
+            before: sanitizeStep(s.before),
+            after: sanitizeStep(s.after),
+            justification: {
+                hypothesis: s.hypothesis,
+                evidence: [...s.evidence],
+                ...(s.anchorNotInChange === true ? { anchorNotInChange: true } : {}),
+            },
+            evidence: { ...(before === undefined ? {} : { before }), ...(after === undefined ? {} : { after }) },
+            ...(shot === undefined ? {} : { screenshots: [shot] }),
+        };
+    });
+    const proposalId = contentHash({ baseHash, steps: steps.map((s) => ({ index: s.index, after: s.after })) }).slice(0, 12);
+    const proposed = proposedJourney(input.base, { recording: input.draft.recording });
+    const body = {
+        v: 1,
+        kind: "journey-proposal",
+        proposalId,
+        journeyId: input.journeyId,
+        baseHash,
+        proposedHash: journeyReviewHash(proposed),
+        createdAt: clock.nowIso(),
+        recording: input.draft.recording,
+        steps,
+        changes: {
+            ...(input.changes.range === undefined ? {} : { range: input.changes.range }),
+            ...(input.changes.baseSha === undefined ? {} : { baseSha: input.changes.baseSha }),
+            ...(input.changes.headSha === undefined ? {} : { headSha: input.changes.headSha }),
+            notes: [...(input.changes.notes ?? [])],
+        },
+        attempts: input.attempts.map((a) => ({ ...a, candidate: a.candidate === null ? null : sanitizeStep(a.candidate) })),
+        run: input.runResultPath === undefined ? {} : { resultPath: input.runResultPath },
+    };
+    const plain = JSON.parse(JSON.stringify(body));
+    const strict = scrub(plain, false);
+    const free = scrub(plain, true);
+    const scrubbed = {
+        ...free,
+        ...Object.fromEntries(["v", "kind", "proposalId", "journeyId", "baseHash", "proposedHash", "createdAt", "recording"].map((k) => [k, strict[k]])),
+        steps: free.steps.map((st, i) => ({ ...st, before: strict.steps[i].before, after: strict.steps[i].after })),
+        changes: { ...free.changes, ...("baseSha" in strict.changes ? { baseSha: strict.changes.baseSha } : {}), ...("headSha" in strict.changes ? { headSha: strict.changes.headSha } : {}) },
+        attempts: free.attempts.map((a, i) => ({ ...a, candidate: strict.attempts[i].candidate })),
+    };
+    const parsed = JourneyProposalSchema.safeParse(scrubbed);
+    if (!parsed.success)
+        throw new JourneyProposalInvalidError(`the proposal does not satisfy its schema: ${parsed.error.issues[0]?.path.join(".") ?? ""} ${parsed.error.issues[0]?.message ?? "invalid"}`);
+    const path = proposalPath(journeysDir, input.journeyId);
+    const previous = await readJourneyProposal(journeysDir, input.journeyId).catch(() => null);
+    await writeJson(path, parsed.data);
+    return {
+        proposalId,
+        path,
+        ...(previous !== null && previous.proposalId !== proposalId ? { supersededProposal: previous.proposalId } : {}),
+    };
+}
+/** The pending proposal for a Journey, or null. An unreadable or invalid file is refused, never ignored. */
+export async function readJourneyProposal(journeysDir, journeyId) {
+    const path = proposalPath(journeysDir, journeyId);
+    const raw = await readJson(path);
+    if (raw === null)
+        return null;
+    const parsed = JourneyProposalSchema.safeParse(raw);
+    if (!parsed.success)
+        throw new JourneyProposalInvalidError(`${path} is not a valid Journey proposal: ${parsed.error.issues[0]?.message ?? "invalid"}`);
+    return parsed.data;
+}
+/** The pending proposal named `proposalId` for the Journey; `JourneyProposalNotFoundError` when none matches. */
+export async function requireJourneyProposal(journeysDir, journeyId, proposalId) {
+    const proposal = isProposalId(proposalId) ? await readJourneyProposal(journeysDir, journeyId) : null;
+    if (proposal === null || proposal.proposalId !== proposalId || proposal.journeyId !== journeyId) {
+        throw new JourneyProposalNotFoundError(`journey '${journeyId}' has no pending proposal '${proposalId}' — see: jevitate journey review ${journeyId}`);
+    }
+    return proposal;
+}
+/** True when the proposal was made against a different Journey than the stored one. */
+export function isProposalStale(stored, proposal) {
+    return journeyReviewHash(stored) !== proposal.baseHash;
+}
+/**
+ * Re-checks a proposal against the stored Journey (on read for review and again on accept): stale
+ * when the Journey changed since, proof-touched when the file was edited to change anything but
+ * retargets, or when its hash no longer matches its recording.
+ */
+export function checkProposal(stored, proposal) {
+    if (isProposalStale(stored, proposal)) {
+        return new JourneyProposalStaleError(`proposal '${proposal.proposalId}' was made against journey '${stored.metadata.id}' ${proposal.baseHash.slice(0, 8)}, which has changed since (now ${journeyReviewHash(stored).slice(0, 8)}) — re-run the self-heal: jevitate journey run ${stored.metadata.id} --self-heal`);
+    }
+    const violation = assertRecordingProofUntouched(stored.recording, proposal.recording);
+    if (violation !== null)
+        return new JourneyProposalProofError(`proposal '${proposal.proposalId}' touches the Journey's proof (${violation.code}): ${violation.detail}`);
+    const floor = proposalFloorViolation(stored, proposal.recording);
+    if (floor !== null)
+        return new JourneyProposalProofError(`proposal '${proposal.proposalId}' changes a step the heal floor refuses: ${floor}`);
+    if (journeyReviewHash(proposedJourney(stored, proposal)) !== proposal.proposedHash) {
+        return new JourneyProposalProofError(`proposal '${proposal.proposalId}' does not match its recorded hash — the file was edited`);
+    }
+    return null;
+}
+/** Deletes the pending proposal (after it was accepted). */
+export async function deleteJourneyProposal(journeysDir, journeyId) {
+    await removeFile(proposalPath(journeysDir, journeyId));
+}
+/** Moves the pending proposal to `.rejected/`, recording when, why and how it was rejected. */
+export async function rejectJourneyProposal(journeysDir, journeyId, proposalId, rejection) {
+    const proposal = await requireJourneyProposal(journeysDir, journeyId, proposalId);
+    const record = RejectedProposalSchema.parse({
+        v: 1,
+        kind: "journey-proposal-rejected",
+        rejectedAt: clock.nowIso(),
+        reason: rejection.reason,
+        provenance: rejection.provenance,
+        proposal,
+    });
+    const path = rejectedProposalPath(journeysDir, journeyId, proposalId);
+    await writeJson(path, record);
+    await removeFile(proposalPath(journeysDir, journeyId));
+    return { path };
+}
+//# sourceMappingURL=journey-proposal-store.js.map

package/dist/journey-proposal-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journey-proposal-store.js","sourceRoot":"","sources":["../src/journey-proposal-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAKvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAgD,MAAM,mBAAmB,CAAC;AAE3J,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAElF;;;;;;;;;;;;;;;;GAgBG;AAEH,kEAAkE;AAClE,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,IAAI,GAAG,8BAA8B,CAAC;CAChD;AAED,iHAAiH;AACjH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,IAAI,GAAG,0BAA0B,CAAC;CAC5C;AAED,sGAAsG;AACtG,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,IAAI,GAAG,0BAA0B,CAAC;CAC5C;AAED,yCAAyC;AACzC,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,IAAI,GAAG,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,yGAAyG;AACzG,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,SAAiB;IACjE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB,EAAE,SAAiB,EAAE,UAAkB;IAC7F,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,WAAW,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,GAAG,GAAG,aAAa,GAAG,EAAE,CAAC;IACxC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,EAAE,GAAG,CAAC;QAAE,MAAM,IAAI,2BAA2B,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,IAAI;YAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO;YAC9F,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,EAAE,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,2BAA2B,CAAC,yCAAyC,GAAG,uDAAuD,CAAC,CAAC;IACtK,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnG,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,KAAc;IACnD,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;IAC7E,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,oGAAoG;AACpG,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;aACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aACjC,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAe,EAAE,QAAmB;IACzE,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QACzE,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAU,EAAE,CAAC;YACrF,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,+BAA+B,CAAC;YAC3E,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC,8BAA8B,IAAI,IAAI,QAAQ,EAAE,CAAC;QACpI,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAqBD,+FAA+F;AAC/F,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,QAA4C;IAC3F,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,KAAgC;IAC9F,MAAM,SAAS,GAAG,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7F,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,yBAAyB,CAAC,kEAAkE,SAAS,CAAC,IAAI,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACtK,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,yBAAyB,CAAC,wDAAwD,KAAK,EAAE,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3C,uFAAuF;IACvF,uEAAuE;IACvE,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,IAAI,GAAG,IAAI,EAAW,EAAE,CACjD,OAAO,CAAC,KAAK,QAAQ;QACnB,CAAC,CAAC,IAAI;YACJ,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACtF,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBACpB,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC;QAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;gBACnC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC5E,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,YAAY,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC;IACvH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QACnC,OAAO;YACL,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9B,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;YAC5B,aAAa,EAAE;gBACb,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;gBACzB,GAAG,CAAC,CAAC,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9E;YACD,QAAQ,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YACpG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG;QACX,CAAC,EAAE,CAAU;QACb,IAAI,EAAE,kBAA2B;QACjC,UAAU;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ;QACR,YAAY,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACzC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE;QACzB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;QAChC,KAAK;QACL,OAAO,EAAE;YACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC5E,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAClF,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAClF,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;SACxC;QACD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnH,GAAG,EAAE,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE;KAClF,CAAC;IAIF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAS,CAAC;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,CAAS,CAAC;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAS,CAAC;IACxC,MAAM,QAAQ,GAAG;QACf,GAAG,IAAI;QACP,GAAG,MAAM,CAAC,WAAW,CAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,CAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3J,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7G,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACtL,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,CAAC,CAAC;KAC5F,CAAC;IACF,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,2BAA2B,CAAC,6CAA6C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;IACxM,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3F,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,UAAU;QACV,IAAI;QACJ,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChH,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB,EAAE,SAAiB;IAC9E,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,2BAA2B,CAAC,GAAG,IAAI,qCAAqC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;IACvJ,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB,EAAE,SAAiB,EAAE,UAAkB;IACrG,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrG,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChG,MAAM,IAAI,4BAA4B,CAAC,YAAY,SAAS,8BAA8B,UAAU,oCAAoC,SAAS,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,QAAyB;IACxE,OAAO,iBAAiB,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAe,EAAE,QAAyB;IACtE,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,yBAAyB,CAClC,aAAa,QAAQ,CAAC,UAAU,+BAA+B,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,kCAAkC,iBAAiB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,kDAAkD,MAAM,CAAC,QAAQ,CAAC,EAAE,cAAc,CAC7Q,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,6BAA6B,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtF,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,yBAAyB,CAAC,aAAa,QAAQ,CAAC,UAAU,kCAAkC,SAAS,CAAC,IAAI,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvK,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,yBAAyB,CAAC,aAAa,QAAQ,CAAC,UAAU,4CAA4C,KAAK,EAAE,CAAC,CAAC;IAC9I,IAAI,iBAAiB,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;QACnF,OAAO,IAAI,yBAAyB,CAAC,aAAa,QAAQ,CAAC,UAAU,0DAA0D,CAAC,CAAC;IACnI,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAmB,EAAE,SAAiB;IAChF,MAAM,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB,EACnB,SAAiB,EACjB,UAAkB,EAClB,SAA+E;IAE/E,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAClF,MAAM,MAAM,GAAqB,sBAAsB,CAAC,KAAK,CAAC;QAC5D,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACtE,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9B,MAAM,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC"}

package/dist/journey-result-record.d.ts

@@ -0,0 +1,40 @@
+import { type MissionOutcome } from "@jevitate/domain";
+import type { Journey } from "@jevitate/journey";
+import type { HealReport, JourneyRunResult } from "@jevitate/runtime";
+/**
+ * #453: the `*.result.json` record of one Journey run — what `jevitate report`, the run index and a
+ * `check` suite read. Shared by `runJourneyProgrammatically` (a self-heal run persists it) and,
+ * once it switches over, `check`. Every string passes `redactSecretParams`.
+ */
+/** The proposal a `healed-pending-review` run wrote (a person reviews it; the stored Journey is untouched). */
+export interface JourneyResultProposal {
+    readonly id: string;
+    readonly path: string;
+    /** The retargeted steps, 1-based, as the review prints them. */
+    readonly steps: readonly {
+        readonly number: number;
+        readonly before: string;
+        readonly after: string;
+    }[];
+    readonly reviewCommand?: string;
+    readonly acceptCommand?: string;
+}
+export interface JourneyResultContext {
+    /** The Journey as stored (names the secret params; locates the failing step's page). */
+    readonly journey: Journey;
+    /** The run's params (secret ones are redacted from the record). */
+    readonly params: Readonly<Record<string, string>>;
+    readonly startedAt: string;
+    readonly engine?: unknown;
+    readonly suite?: unknown;
+    readonly targetBuild?: unknown;
+    readonly proposal?: JourneyResultProposal;
+    /** The run's heal report when the result does not already carry it. */
+    readonly heal?: HealReport;
+}
+export interface JourneyResultRecord {
+    readonly missionOutcome: MissionOutcome;
+    readonly exitCode: number;
+    readonly result: Record<string, unknown>;
+}
+export declare function journeyResultRecord(r: JourneyRunResult, ctx: JourneyResultContext): JourneyResultRecord;

package/dist/journey-result-record.js

@@ -0,0 +1,28 @@
+import { JOURNEY_MISSION_OUTCOME, journeyExitCode } from "@jevitate/domain";
+import { redactSecretParams } from "./journey-api.js";
+import { journeyStepUrl } from "./check-plan.js";
+export function journeyResultRecord(r, ctx) {
+    const at = r.outcome === "quarantined" || r.outcome === "heal-exhausted" ? r.at : undefined;
+    const url = journeyStepUrl(ctx.journey, at);
+    const heal = r.heal ?? ctx.heal;
+    const record = {
+        missionOutcome: JOURNEY_MISSION_OUTCOME[r.outcome],
+        exitCode: journeyExitCode(r.outcome),
+        result: {
+            mode: "journey",
+            journeyId: ctx.journey.metadata.id,
+            outcome: r.outcome,
+            ...(r.outcome === "quarantined" || r.outcome === "heal-exhausted" ? { reason: r.reason, ...(r.at === undefined ? {} : { at: r.at }) } : {}),
+            ...(url === undefined ? {} : { url }),
+            ...(heal === undefined ? {} : { heal }),
+            ...(ctx.proposal === undefined ? {} : { proposal: ctx.proposal }),
+            startedAt: ctx.startedAt,
+            target: { seedUrl: ctx.journey.recording.site, allowlist: [new URL(ctx.journey.recording.site).origin] },
+            ...(ctx.engine === undefined ? {} : { engine: ctx.engine }),
+            ...(ctx.suite === undefined ? {} : { suite: ctx.suite }),
+            ...(ctx.targetBuild === undefined ? {} : { targetBuild: ctx.targetBuild }),
+        },
+    };
+    return redactSecretParams(record, ctx.journey, ctx.params);
+}
+//# sourceMappingURL=journey-result-record.js.map

package/dist/journey-result-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journey-result-record.js","sourceRoot":"","sources":["../src/journey-result-record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAuB,MAAM,kBAAkB,CAAC;AAGjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAsCjD,MAAM,UAAU,mBAAmB,CAAC,CAAmB,EAAE,GAAyB;IAChF,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,KAAK,aAAa,IAAI,CAAC,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;IAChC,MAAM,MAAM,GAAwB;QAClC,cAAc,EAAE,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC;QAClD,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE;YACN,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YAClC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,IAAI,CAAC,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3I,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjE,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE;YACxG,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;SAC3E;KACF,CAAC;IACF,OAAO,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC"}

package/dist/journey-review-api.d.ts

@@ -0,0 +1,19 @@
+import { type Journey, type JourneyReview } from "@jevitate/journey";
+import { type ApprovalAction } from "./pre-approval.js";
+import { type JevSetup } from "./jev-advisor.js";
+/**
+ * #432: loads one Journey and everything its review sheet needs — the targets.json safety config of
+ * its site's origin, its approved snapshot, its last mutation-proof verdict — and builds the sheet.
+ * An unknown id is `UnknownJourneyError`, exactly as `journey promote` refuses one. #433: also its
+ * catalog links and the pre-approval findings (`catalogDir`: default the project's `.jevitate/`).
+ */
+export declare function reviewJourneyById(journeysDir: string, id: string, opts?: {
+    readonly targetsFile?: string;
+    readonly catalogDir?: string | null;
+    readonly readiness?: boolean;
+    readonly jev?: JevSetup;
+    readonly action?: ApprovalAction;
+}): Promise<{
+    journey: Journey;
+    review: JourneyReview;
+}>;

package/dist/journey-review-api.js

@@ -0,0 +1,53 @@
+import { FsJourneyStore, JourneyReviewSchema } from "@jevitate/journey";
+import { buildJourneyReview } from "./journey-review.js";
+import { readApprovedSnapshot, readVerifyRecord } from "./journey-review-store.js";
+import { UnknownJourneyError } from "./journey-api.js";
+import { loadCatalog, resolveCatalogDir } from "./catalog-api.js";
+import { catalogJourney, journeyLinks } from "./catalog.js";
+import { preApprovalFindings } from "./pre-approval.js";
+import { jevLayerOf } from "./jev-advisor.js";
+import { checkProposal, readJourneyProposal } from "./journey-proposal-store.js";
+import { loadTargetsFile, resolveTargetConfig } from "./target-config.js";
+/**
+ * #432: loads one Journey and everything its review sheet needs — the targets.json safety config of
+ * its site's origin, its approved snapshot, its last mutation-proof verdict — and builds the sheet.
+ * An unknown id is `UnknownJourneyError`, exactly as `journey promote` refuses one. #433: also its
+ * catalog links and the pre-approval findings (`catalogDir`: default the project's `.jevitate/`).
+ */
+export async function reviewJourneyById(journeysDir, id, opts = {}) {
+    const journey = await new FsJourneyStore(journeysDir).get(id);
+    if (journey === null)
+        throw new UnknownJourneyError(`unknown journey '${id}'`);
+    let origin = null;
+    try {
+        origin = new URL(journey.recording.site).origin;
+    }
+    catch {
+        origin = null;
+    }
+    const safety = origin === null ? undefined : resolveTargetConfig(loadTargetsFile(opts.targetsFile), origin).safety;
+    // #433: the catalog links and the shared pre-approval findings, as `journey promote` gates on them.
+    const catalog = await loadCatalog(opts.catalogDir === undefined ? resolveCatalogDir(undefined) : opts.catalogDir, journeysDir);
+    const links = journeyLinks(catalog, catalogJourney(journey));
+    const findings = await preApprovalFindings({ kind: "journey", id: journey.metadata.id }, catalog, {
+        action: opts.action ?? "review",
+        journey,
+        ...(opts.readiness === true ? { readiness: true } : {}),
+        ...(opts.jev === undefined ? {} : { jev: opts.jev }),
+    });
+    // #453: a pending self-heal proposal, re-checked against the stored Journey (stale, or its proof touched).
+    const pending = await readJourneyProposal(journeysDir, id);
+    const proposalProblem = pending === null ? null : checkProposal(journey, pending);
+    const review = buildJourneyReview(journey, {
+        ...(pending === null
+            ? {}
+            : { proposal: { proposal: pending, stale: proposalProblem?.code === "E_JOURNEY_PROPOSAL_STALE", ...(proposalProblem === null ? {} : { problem: proposalProblem.message }) } }),
+        ...(safety === undefined ? {} : { safety }),
+        catalog: { links, findings },
+        approvedSnapshot: await readApprovedSnapshot(journeysDir, id),
+        lastVerify: await readVerifyRecord(journeysDir, id),
+    });
+    // Fail closed: what is emitted always matches the published schema.
+    return { journey, review: JourneyReviewSchema.parse(opts.jev === undefined ? review : { ...review, jev: jevLayerOf(opts.jev) }) };
+}
+//# sourceMappingURL=journey-review-api.js.map

package/dist/journey-review-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journey-review-api.js","sourceRoot":"","sources":["../src/journey-review-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAoC,MAAM,mBAAmB,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAuB,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAiB,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,EAAU,EACV,OAAwK,EAAE;IAE1K,MAAM,OAAO,GAAG,MAAM,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC/E,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;IACnH,oGAAoG;IACpG,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/H,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE;QAChG,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,QAAQ;QAC/B,OAAO;QACP,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,2GAA2G;IAC3G,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,EAAE;QACzC,GAAG,CAAC,OAAO,KAAK,IAAI;YAClB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,KAAK,0BAA0B,EAAE,GAAG,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QAChL,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;QAC5B,gBAAgB,EAAE,MAAM,oBAAoB,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7D,UAAU,EAAE,MAAM,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,oEAAoE;IACpE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;AACpI,CAAC"}

package/dist/journey-review-store.d.ts

@@ -0,0 +1,16 @@
+import { type Journey } from "@jevitate/journey";
+import type { JourneyVerifyRecord } from "./journey-review.js";
+export declare function approvedSnapshotPath(journeysDir: string, id: string): string;
+export declare function verifyRecordPath(journeysDir: string, id: string): string;
+/** A sidecar that exists but cannot be read as what it should be — refused, never silently ignored. */
+export declare class ReviewSidecarError extends Error {
+    readonly code = "E_JOURNEY_REVIEW";
+}
+/** #432: keeps the Journey as approved — the next review's "change since last approval" diffs against it. */
+export declare function writeApprovedSnapshot(journeysDir: string, journey: Journey): Promise<void>;
+/** #432: the Journey as last approved, or null when none was kept. */
+export declare function readApprovedSnapshot(journeysDir: string, id: string): Promise<Journey | null>;
+/** #432: records the last mutation-proof verdict beside the Journey. */
+export declare function writeVerifyRecord(journeysDir: string, record: JourneyVerifyRecord): Promise<void>;
+/** #432: the last recorded mutation-proof verdict, or null when `journey verify --mutate` never ran. */
+export declare function readVerifyRecord(journeysDir: string, id: string): Promise<JourneyVerifyRecord | null>;

package/dist/journey-review-store.js

@@ -0,0 +1,95 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { JourneySchema } from "@jevitate/journey";
+/**
+ * #432 — the review sheet's sidecars beside a journeys directory (dot-folders: never listed as a
+ * Journey, never discovered as a namespace):
+ *  - `.approved/<id>.json` — the Journey exactly as last approved (`journey promote`, `demo approve`),
+ *    what "change since last approval" diffs against;
+ *  - `.verify/<id>.json` — the last `journey verify --mutate` verdict, bound to the review hash.
+ * `<ns>/<id>` for a shared Journey. Neither ever holds a secret value: a Journey never carries one.
+ */
+function sidecarPath(journeysDir, folder, id) {
+    const parts = id.split("/");
+    return join(journeysDir, folder, ...parts.slice(0, -1), `${parts[parts.length - 1] ?? id}.json`);
+}
+export function approvedSnapshotPath(journeysDir, id) {
+    return sidecarPath(journeysDir, ".approved", id);
+}
+export function verifyRecordPath(journeysDir, id) {
+    return sidecarPath(journeysDir, ".verify", id);
+}
+/** A sidecar that exists but cannot be read as what it should be — refused, never silently ignored. */
+export class ReviewSidecarError extends Error {
+    code = "E_JOURNEY_REVIEW";
+}
+async function readJson(path) {
+    let raw;
+    try {
+        raw = await readFile(path, "utf8");
+    }
+    catch (err) {
+        if (typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        throw new ReviewSidecarError(`${path} is not valid JSON`);
+    }
+}
+async function writeJson(path, value) {
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    await writeFile(path, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
+}
+/** The file's own (plain) id, as `FsJourneyStore` writes a namespaced Journey. */
+function baseId(id) {
+    const parts = id.split("/");
+    return parts[parts.length - 1] ?? id;
+}
+/** #432: keeps the Journey as approved — the next review's "change since last approval" diffs against it. */
+export async function writeApprovedSnapshot(journeysDir, journey) {
+    const id = journey.metadata.id;
+    await writeJson(approvedSnapshotPath(journeysDir, id), JourneySchema.parse({ ...journey, metadata: { ...journey.metadata, id: baseId(id) } }));
+}
+/** #432: the Journey as last approved, or null when none was kept. */
+export async function readApprovedSnapshot(journeysDir, id) {
+    const path = approvedSnapshotPath(journeysDir, id);
+    const raw = await readJson(path);
+    if (raw === null)
+        return null;
+    const parsed = JourneySchema.safeParse(raw);
+    if (!parsed.success)
+        throw new ReviewSidecarError(`${path} is not a valid Journey snapshot`);
+    return { ...parsed.data, metadata: { ...parsed.data.metadata, id } };
+}
+/** #432: records the last mutation-proof verdict beside the Journey. */
+export async function writeVerifyRecord(journeysDir, record) {
+    await writeJson(verifyRecordPath(journeysDir, record.journeyId), record);
+}
+function isVerifyRecord(v) {
+    if (v === null || typeof v !== "object")
+        return false;
+    const o = v;
+    return (typeof o.journeyId === "string" &&
+        typeof o.contentHash === "string" &&
+        typeof o.verdict === "string" &&
+        typeof o.at === "string" &&
+        (o.reason === undefined || typeof o.reason === "string") &&
+        o.summary !== null &&
+        typeof o.summary === "object" &&
+        Object.values(o.summary).every((n) => typeof n === "number"));
+}
+/** #432: the last recorded mutation-proof verdict, or null when `journey verify --mutate` never ran. */
+export async function readVerifyRecord(journeysDir, id) {
+    const path = verifyRecordPath(journeysDir, id);
+    const raw = await readJson(path);
+    if (raw === null)
+        return null;
+    if (!isVerifyRecord(raw))
+        throw new ReviewSidecarError(`${path} is not a valid verify record`);
+    return raw;
+}
+//# sourceMappingURL=journey-review-store.js.map