@jungjaehoon/mama-os 0.28.6 → 0.29.1

package/dist/gateways/turn-contract.d.ts

@@ -0,0 +1,104 @@
+/**
+ * The turn contract.
+ *
+ * Router-neutral on purpose. This module imports nothing from the message router, so a
+ * user-facing surface can depend on how a turn is served without depending on WHAT
+ * serves it. Keeping the contract next to its current implementation would leave the
+ * coupling in place while looking inverted - a surface would still reach a concrete
+ * router through its own base class.
+ *
+ * A surface owns receive, normalization, progress display, delivery and its restart
+ * ledger. Everything inward of `processTurn` - session locks, durable persistence,
+ * prompt assembly, the model run - belongs to the implementation.
+ *
+ * Connectors do not pass through here. They are data the agent reads, never a turn.
+ */
+import type { MessageSource, NormalizedMessage, RelatedDecision } from './types.js';
+import type { StreamCallbacks } from '../agent/types.js';
+/** Options a caller may pass alongside a turn. */
+export interface ProcessOptions {
+    /** Called immediately if the session is busy and the turn was queued. */
+    onQueued?: () => void;
+    onStream?: StreamCallbacks;
+}
+/** Fields every turn outcome carries, whatever happened. */
+export interface TurnOutcomeBase {
+    /** Response text from the agent. */
+    response: string;
+    /** Session the turn ran in. */
+    sessionId: string;
+    /** Related decisions that were injected. */
+    injectedDecisions: RelatedDecision[];
+    /** Processing duration in milliseconds. */
+    duration: number;
+}
+/**
+ * A turn that reached the model. It may still carry no durable run handle - see below.
+ *
+ * Run identity lives on this branch rather than as optional fields on one flat shape,
+ * because a turn can end WITHOUT reaching the model. With optional fields a caller
+ * cannot tell "no id recorded" from "no run happened", and anything that later traces a
+ * delivered claim back to its evidence rests on exactly that distinction.
+ */
+/**
+ * Whether this turn left a resolvable trail, and if not, why.
+ *
+ * A bare nullable id collapsed two different facts into one value: a backend that simply
+ * produces no run identity is an expected capability state, while a run that was created
+ * and then failed to commit is a durability failure someone has to repair. Both leave a
+ * resolver with nothing, so they looked identical - and only one of them is a problem.
+ */
+export type TurnProvenance = {
+    status: 'available';
+    modelRunId: string;
+} | {
+    status: 'unavailable';
+    reason: 'backend_no_run' | 'commit_failed';
+};
+export interface CompletedTurn extends TurnOutcomeBase {
+    outcome: 'completed';
+    /** Whether a resolvable run handle exists for this turn, and why not when it does not. */
+    provenance: TurnProvenance;
+    /** Stable id for this inbound turn. */
+    sourceTurnId: string;
+    /** Canonical reference to the message that started it. */
+    sourceMessageRef: string;
+}
+/** A turn answered without a model run - the caller must not look for run identity. */
+export interface BlockedTurn extends TurnOutcomeBase {
+    outcome: 'blocked';
+    /** Why no model run exists. */
+    reason: 'security_block';
+}
+/** Discriminated on `outcome`; both branches keep the base fields. */
+export type ProcessingResult = CompletedTurn | BlockedTurn;
+/**
+ * The one callable boundary between a user-facing surface and turn processing.
+ *
+ * Session ownership belongs to the implementation, and the shape says so: nothing about
+ * a session appears in the input, so a caller cannot hand one in, and the id it gets
+ * back is the one the implementation chose. Durable conversation state, the backend
+ * resume decision and the per-channel lock are held together; splitting any of them
+ * across this boundary would leave one lock with two owners.
+ *
+ * Known exception, stated rather than discovered later: scheduled operator reports do
+ * not pass through here. They run their own lane against a forced fresh session, so two
+ * session models exist today.
+ */
+export interface TurnProcessor {
+    processTurn(message: NormalizedMessage, options?: ProcessOptions): Promise<ProcessingResult>;
+}
+/**
+ * Session data a surface may read for its own DISPLAY concerns - naming a channel,
+ * listing what is active. Deliberately separate from `TurnProcessor`: reading session
+ * data to render something is not turn ownership, and a surface that needs it should
+ * have to ask for it by name rather than receive a whole router.
+ */
+export interface SessionDirectory {
+    listSessions(source: MessageSource): ReadonlyArray<{
+        readonly channelId: string;
+        readonly channelName?: string | null;
+    }>;
+    updateChannelName(source: MessageSource, channelId: string, channelName: string): boolean;
+}
+//# sourceMappingURL=turn-contract.d.ts.map

package/dist/gateways/turn-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-contract.d.ts","sourceRoot":"","sources":["../../src/gateways/turn-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,kDAAkD;AAClD,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,iBAAiB,EAAE,eAAe,EAAE,CAAC;IACrC,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,gBAAgB,GAAG,eAAe,CAAA;CAAE,CAAC;AAE1E,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,OAAO,EAAE,WAAW,CAAC;IACrB,0FAA0F;IAC1F,UAAU,EAAE,cAAc,CAAC;IAC3B,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,uFAAuF;AACvF,MAAM,WAAW,WAAY,SAAQ,eAAe;IAClD,OAAO,EAAE,SAAS,CAAC;IACnB,+BAA+B;IAC/B,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,WAAW,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC9F;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CACV,MAAM,EAAE,aAAa,GACpB,aAAa,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACvF,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3F"}

package/dist/{memory/consult-contract.js → gateways/turn-contract.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=consult-contract.js.map
+//# sourceMappingURL=turn-contract.js.map

package/dist/gateways/turn-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-contract.js","sourceRoot":"","sources":["../../src/gateways/turn-contract.ts"],"names":[],"mappings":""}

package/dist/memory/provenance-live.d.ts

@@ -0,0 +1,111 @@
+import type { MemoryScopeRef } from '@jungjaehoon/mama-core';
+import { type ChannelGrant } from '@jungjaehoon/mama-core/context-compile';
+import { type IndexedEvent, type ParsedSourceRef, type ProvenanceResolution } from './provenance-resolver.js';
+/** The columns the predicate needs. Shared so a test reads exactly what production does. */
+export declare const EVENT_INDEX_COLUMNS = "event_index_id, source_connector, source_id, channel, content,\n            event_datetime, source_timestamp_ms, memory_scope_kind, memory_scope_id,\n            project_id, tenant_id";
+export interface EventRow {
+    event_index_id: unknown;
+    source_connector: unknown;
+    source_id: unknown;
+    channel: unknown;
+    content: unknown;
+    event_datetime: unknown;
+    source_timestamp_ms: unknown;
+    memory_scope_kind: unknown;
+    memory_scope_id: unknown;
+    project_id: unknown;
+    tenant_id: unknown;
+}
+export interface LiveProvenanceOptions {
+    /** Scopes active NOW. Not the scopes the memory was written under. */
+    scopes: MemoryScopeRef[];
+    /**
+     * Raw connectors this caller may read. No grant means NO raw events, never all of
+     * them - the reader fails closed here and so must this. An earlier version accepted
+     * `null` to mean "scope alone decides", which turned a missing envelope into a
+     * connector-wide grant.
+     */
+    connectors: readonly string[];
+    /**
+     * The channels of each connector this caller may read, when the caller holds a grant.
+     * Present means the grant decides, exactly as it does in the reader. Absent means the
+     * pre-grant rule applies, so a caller that has not been given one is unaffected.
+     */
+    channels?: ChannelGrant;
+    /** Project and tenant window, mirroring the reader's filters on the same columns. */
+    projectIds?: readonly string[];
+    tenantId?: string | null;
+    /**
+     * Visibility clamp on observation time, in epoch ms. Only the MAX is threaded from the
+     * call site, deliberately: the reader's lower bound comes solely from `range.start_ms`,
+     * which is caller-chosen narrowing, while the upper bound folds in `as_of`, which is an
+     * authority clamp. A future reader should not "fix" the asymmetry. The reader bounds raw candidates
+     * by `COALESCE(event_datetime, source_timestamp_ms)`; without a counterpart here, an
+     * `as_of` boundary would hold for reading and not for citation. Nothing assigns
+     * `envelope.scope.as_of` today, so these are null in practice - implemented now
+     * because a filter with no counterpart is exactly the shape the tenant leak had.
+     */
+    minObservedMs?: number | null;
+    maxObservedMs?: number | null;
+    excerptChars?: number;
+    /** Redaction to apply to excerpts, so this surface scrubs what recall scrubs. */
+    redact?: (text: string) => string;
+}
+/**
+ * Parse a stored source ref into what it actually is.
+ *
+ * The shapes here were measured, not guessed. Of the source refs on this machine 13,403
+ * are `memory:`, 1,748 are `envelope:`, 9 are `message:` and none are `raw:`. An earlier
+ * version of this parser understood only `raw:` and reported every real memory as
+ * `unsupported_ref` - a tool that was wired, callable, and answered nothing.
+ */
+export declare function parseSourceRef(ref: string): ParsedSourceRef;
+/**
+ * Whether an event may be shown under the authority active now.
+ *
+ * When a channel grant is supplied this DELEGATES to the shared rule rather than copying
+ * it. The previous version copied the reader clause for clause and said so in a comment,
+ * which held until the reader changed - then the copy silently became a different rule
+ * that refused excerpts for the very events the reader was citing. The differential test
+ * meant to catch that kept passing, because its fixtures never set a grant.
+ *
+ * "A shared predicate would be better than a faithful copy" is what the old comment here
+ * said. It was right.
+ *
+ * Without a grant the pre-grant rule still applies, so callers that have not been given
+ * one behave exactly as before.
+ */
+export declare function isEventVisibleNow(event: IndexedEvent, options: {
+    scopes: readonly MemoryScopeRef[];
+    connectors: readonly string[];
+    channels?: ChannelGrant;
+    projectIds?: readonly string[];
+    tenantId?: string | null;
+    minObservedMs?: number | null;
+    maxObservedMs?: number | null;
+}): boolean;
+/**
+ * Row to the struct the predicate judges.
+ *
+ * Exported because it is the layer BELOW the predicate, and a differential that
+ * hand-builds its own struct proves the predicate mirrors the reader while leaving this
+ * mapping unjudged - which is where a scope-column coercion bug already lived once.
+ */
+export declare function toIndexedEvent(row: EventRow): IndexedEvent;
+/**
+ * Whether a message ref may be named.
+ *
+ * `sourceMessageRef` is built as `source:channelId:turnId` (message-router.ts), and a
+ * channel scope id as `source:channelId` (scope-context.ts) - so a ref belongs to a
+ * caller's channel exactly when an active channel scope is its prefix. Compared as a
+ * prefix rather than parsed, because a turn id can itself contain a colon
+ * (`generated:<uuid>`) and splitting on the last one would silently mis-attribute it.
+ *
+ * This matters beyond tidiness: every memory carrying such a ref is also bound to
+ * global:system, which every caller holds, so an unchecked ref handed a private channel
+ * identifier to any agent that could read the memory at all.
+ */
+export declare function isMessageRefVisible(ref: string, scopes: readonly MemoryScopeRef[]): boolean;
+/** Resolve one memory's support against the live index and the scopes active now. */
+export declare function resolveMemoryProvenanceLive(memoryId: string, options: LiveProvenanceOptions): Promise<ProvenanceResolution>;
+//# sourceMappingURL=provenance-live.d.ts.map

package/dist/memory/provenance-live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance-live.d.ts","sourceRoot":"","sources":["../../src/memory/provenance-live.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC7F,OAAO,EAEL,KAAK,YAAY,EAEjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,0BAA0B,CAAC;AAElC,4FAA4F;AAC5F,eAAO,MAAM,mBAAmB,4LAEE,CAAC;AAEnC,MAAM,WAAW,QAAQ;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB;AAiBD,MAAM,WAAW,qBAAqB;IACpC,sEAAsE;IACtE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB;;;;;OAKG;IACH,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,qFAAqF;IACrF,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAqB3D;AAoBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE;IACP,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAClC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GACA,OAAO,CA8DT;AAyDD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,YAAY,CAkB1D;AAwGD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,CAE3F;AAQD,qFAAqF;AACrF,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CAqD/B"}

package/dist/memory/provenance-live.js

@@ -0,0 +1,381 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EVENT_INDEX_COLUMNS = void 0;
+exports.parseSourceRef = parseSourceRef;
+exports.isEventVisibleNow = isEventVisibleNow;
+exports.toIndexedEvent = toIndexedEvent;
+exports.isMessageRefVisible = isMessageRefVisible;
+exports.resolveMemoryProvenanceLive = resolveMemoryProvenanceLive;
+/**
+ * The live wiring for provenance resolution: real memory records, real events, real scope.
+ *
+ * The resolver itself is pure. This is where it meets the database, and the one rule that
+ * governs the whole file is that CITATION MUST NOT OUT-READ READING. If this path were
+ * more permissive than the path that reads raw events normally, then citing a claim would
+ * become a way to see events the read path denies - the handle would launder access.
+ * So this path does not have its own rule any more. When the caller holds a channel grant
+ * it calls the SAME function the reader compiles into SQL (mama-core channel-grant.ts).
+ * Mirroring by hand is what this file used to do, and the mirror held right up until the
+ * reader changed - at which point citation started refusing excerpts for the very events
+ * the reader was citing, and the differential test kept passing because its fixtures never
+ * set a grant.
+ *
+ * The pre-grant rule below is retained for callers that hold no grant. It matters that it
+ * stays generous about unscoped rows: 19,394 of 30,671 indexed events carry no scope at
+ * all, so denying them outright would make provenance useless for most of the corpus.
+ */
+const mama_core_1 = require("@jungjaehoon/mama-core");
+const context_compile_1 = require("@jungjaehoon/mama-core/context-compile");
+const provenance_resolver_js_1 = require("./provenance-resolver.js");
+/** The columns the predicate needs. Shared so a test reads exactly what production does. */
+exports.EVENT_INDEX_COLUMNS = `event_index_id, source_connector, source_id, channel, content,
+            event_datetime, source_timestamp_ms, memory_scope_kind, memory_scope_id,
+            project_id, tenant_id`;
+/**
+ * Statuses every memory read path excludes (source-readers.ts:293, and recall's own
+ * history exclusion). Mirrored so a citation cannot present a retired record as current.
+ */
+const RETIRED_MEMORY_STATUSES = new Set(['superseded', 'quarantined', 'contradicted', 'stale']);
+/**
+ * Parse a stored source ref into what it actually is.
+ *
+ * The shapes here were measured, not guessed. Of the source refs on this machine 13,403
+ * are `memory:`, 1,748 are `envelope:`, 9 are `message:` and none are `raw:`. An earlier
+ * version of this parser understood only `raw:` and reported every real memory as
+ * `unsupported_ref` - a tool that was wired, callable, and answered nothing.
+ */
+function parseSourceRef(ref) {
+    const separator = ref.indexOf(':');
+    if (separator <= 0 || separator === ref.length - 1) {
+        return { kind: 'unsupported' };
+    }
+    const prefix = ref.slice(0, separator);
+    const rest = ref.slice(separator + 1);
+    if (prefix === 'memory' || prefix === 'envelope' || prefix === 'message') {
+        return { kind: prefix, id: rest };
+    }
+    if (prefix !== 'raw') {
+        return { kind: 'unsupported' };
+    }
+    // `raw:<connector>:<event_index_id>`. Split on the FIRST colon of the remainder so a
+    // colon inside the id cannot shift the boundary.
+    const inner = rest.indexOf(':');
+    if (inner <= 0 || inner === rest.length - 1) {
+        return { kind: 'unsupported' };
+    }
+    return { kind: 'raw', connector: rest.slice(0, inner), eventIndexId: rest.slice(inner + 1) };
+}
+/**
+ * The time bound, shared by both branches.
+ *
+ * An event with no timestamp at all cannot satisfy a bound the reader applies to a
+ * COALESCE of two columns, so it is excluded whenever one is set.
+ */
+function isWithinObservedWindow(event, options) {
+    const min = options.minObservedMs ?? null;
+    const max = options.maxObservedMs ?? null;
+    if (min === null && max === null)
+        return true;
+    const observedMs = event.observedAt === null ? null : Date.parse(event.observedAt);
+    if (observedMs === null || Number.isNaN(observedMs))
+        return false;
+    return (min === null || observedMs >= min) && (max === null || observedMs <= max);
+}
+/**
+ * Whether an event may be shown under the authority active now.
+ *
+ * When a channel grant is supplied this DELEGATES to the shared rule rather than copying
+ * it. The previous version copied the reader clause for clause and said so in a comment,
+ * which held until the reader changed - then the copy silently became a different rule
+ * that refused excerpts for the very events the reader was citing. The differential test
+ * meant to catch that kept passing, because its fixtures never set a grant.
+ *
+ * "A shared predicate would be better than a faithful copy" is what the old comment here
+ * said. It was right.
+ *
+ * Without a grant the pre-grant rule still applies, so callers that have not been given
+ * one behave exactly as before.
+ */
+function isEventVisibleNow(event, options) {
+    const { scopes, connectors } = options;
+    if (options.channels) {
+        return ((0, context_compile_1.isChannelGranted)(event.connector, event.channel, options.channels) &&
+            isWithinObservedWindow(event, options));
+    }
+    const projectIds = options.projectIds ?? [];
+    const tenantId = options.tenantId ?? null;
+    // The reader's own guard: no connectors or no scopes means no raw events at all.
+    if (connectors.length === 0 || scopes.length === 0) {
+        return false;
+    }
+    if (!connectors.includes(event.connector)) {
+        return false;
+    }
+    const hasGlobalSystemScope = scopes.some((scope) => scope.kind === 'global' && scope.id === 'system');
+    const hasScopedVisibility = scopes.some((scope) => !(scope.kind === 'global' && scope.id === 'system')) ||
+        projectIds.length > 0 ||
+        Boolean(tenantId);
+    const includesLegacyGlobalSystem = hasGlobalSystemScope && !hasScopedVisibility;
+    if (projectIds.length > 0) {
+        const projectMatches = (event.projectId !== null &&
+            event.projectId !== undefined &&
+            projectIds.includes(event.projectId)) ||
+            (includesLegacyGlobalSystem && (event.projectId ?? null) === null);
+        if (!projectMatches) {
+            return false;
+        }
+    }
+    if (tenantId) {
+        const tenantMatches = event.tenantId === tenantId ||
+            (includesLegacyGlobalSystem && (event.tenantId ?? null) === null);
+        if (!tenantMatches) {
+            return false;
+        }
+    }
+    if (!isWithinObservedWindow(event, options)) {
+        return false;
+    }
+    const scope = event.memoryScope ?? null;
+    if (!scope) {
+        return includesLegacyGlobalSystem;
+    }
+    return scopes.some((active) => active.kind === scope.kind &&
+        (active.id === scope.id ||
+            // Rows written before the global/system alignment carry id 'global'.
+            (active.kind === 'global' && active.id === 'system' && scope.id === 'global')));
+}
+async function resolveAdapter() {
+    const dbManager = (await import('@jungjaehoon/mama-core/db-manager'));
+    try {
+        return dbManager.getAdapter();
+    }
+    catch (error) {
+        if (typeof dbManager.initDB !== 'function') {
+            throw error;
+        }
+        await dbManager.initDB();
+        return dbManager.getAdapter();
+    }
+}
+/**
+ * One column to epoch ms, with SQL's notion of "absent" and no other.
+ *
+ * `COALESCE` falls through on NULL and nothing else, so 0 and negative values are
+ * PRESENT to the reader. Treating them as missing - which this did, by requiring
+ * `value > 0` - made the mapper judge a different instant than the query: a row with
+ * `event_datetime = 0` compared as 0 in SQL and as its source timestamp here. The
+ * differential caught it the moment it was routed through the production mapper.
+ *
+ * The non-numeric string branch is DEFENSIVE, not faithful: SQLite orders a TEXT value
+ * above every INTEGER regardless of what it spells, so SQL would exclude such a row from
+ * any upper bound while `Date.parse` gives it a real instant. Unreachable - both columns
+ * are INTEGER-affinity, the write path passes a number, and all 30,671 live rows store
+ * integers - but it is a divergence if it ever runs, and better named than implied.
+ */
+function toEpochMs(value) {
+    if (typeof value === 'number') {
+        return Number.isFinite(value) ? value : null;
+    }
+    // better-sqlite3 returns bigint when safeIntegers is on. Nothing enables it today, but
+    // without this arm flipping that flag would null every timestamp and silently disable
+    // the time clamp entirely.
+    if (typeof value === 'bigint') {
+        return Number(value);
+    }
+    if (typeof value === 'string' && value.trim().length > 0) {
+        const numeric = Number(value);
+        if (Number.isFinite(numeric)) {
+            return numeric;
+        }
+        const parsed = Date.parse(value);
+        return Number.isNaN(parsed) ? null : parsed;
+    }
+    return null;
+}
+function coalesceObservedAt(eventDatetime, sourceTimestampMs) {
+    const ms = toEpochMs(eventDatetime) ?? toEpochMs(sourceTimestampMs);
+    return ms === null ? null : new Date(ms).toISOString();
+}
+/**
+ * Row to the struct the predicate judges.
+ *
+ * Exported because it is the layer BELOW the predicate, and a differential that
+ * hand-builds its own struct proves the predicate mirrors the reader while leaving this
+ * mapping unjudged - which is where a scope-column coercion bug already lived once.
+ */
+function toIndexedEvent(row) {
+    const scopeKind = typeof row.memory_scope_kind === 'string' ? row.memory_scope_kind : null;
+    const scopeId = typeof row.memory_scope_id === 'string' ? row.memory_scope_id : null;
+    // Only a row with BOTH columns null is unscoped, because that is the only row the
+    // reader's `IS NULL AND IS NULL` clause matches. Collapsing a half-populated or
+    // empty-string row to "unscoped" would hand it the legacy allowance the reader denies.
+    const unscoped = scopeKind === null && scopeId === null;
+    return {
+        connector: String(row.source_connector ?? ''),
+        eventIndexId: String(row.event_index_id ?? ''),
+        sourceId: String(row.source_id ?? ''),
+        channel: typeof row.channel === 'string' ? row.channel : null,
+        observedAt: coalesceObservedAt(row.event_datetime, row.source_timestamp_ms),
+        content: typeof row.content === 'string' ? row.content : '',
+        memoryScope: unscoped ? null : { kind: scopeKind ?? '', id: scopeId ?? '' },
+        projectId: typeof row.project_id === 'string' ? row.project_id : null,
+        tenantId: typeof row.tenant_id === 'string' ? row.tenant_id : null,
+    };
+}
+function stringOrNull(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value : null;
+}
+/**
+ * Fetch a memory's provenance under the scopes active now.
+ *
+ * Two lookups on purpose. The first is scope-strict. Only if that finds nothing do we ask
+ * again admitting records with no scope bindings, and a record that appears only on the
+ * second pass is reported as legacy rather than as support. A memory that appears on
+ * neither is reported as unknown - never as "exists but withheld", which would confirm
+ * the existence of something outside the caller's scope.
+ */
+async function lookupWithLegacyFallback(memoryId, scopes) {
+    const scoped = await (0, mama_core_1.getMemoryProvenance)(memoryId, { scopes });
+    if (scoped) {
+        return { record: scoped, legacy: false };
+    }
+    const unbound = await (0, mama_core_1.getMemoryProvenance)(memoryId, { scopes, includeLegacyUnscoped: true });
+    return unbound ? { record: unbound, legacy: true } : null;
+}
+/**
+ * The stored record's status. `getMemoryProvenance` selects it nowhere, so this is a
+ * separate read rather than a field that was there all along - which is precisely why the
+ * status filter had no counterpart on this path for four review rounds.
+ */
+async function loadRetirement(memoryId) {
+    const adapter = await resolveAdapter();
+    const row = adapter
+        .prepare(`SELECT status, superseded_by FROM decisions WHERE id = ? LIMIT 1`)
+        .get(memoryId);
+    const status = typeof row?.status === 'string' ? row.status : null;
+    const supersededBy = typeof row?.superseded_by === 'string' ? row.superseded_by : null;
+    return {
+        status,
+        // Either signal retires it: the reader filters on status, and recall additionally
+        // requires `superseded_by IS NULL`.
+        retired: (status !== null && RETIRED_MEMORY_STATUSES.has(status)) || supersededBy !== null,
+    };
+}
+async function loadRecord(memoryId, scopes) {
+    const found = await lookupWithLegacyFallback(memoryId, scopes);
+    if (!found) {
+        return null;
+    }
+    const record = found.record;
+    const retirement = await loadRetirement(record.memory_id);
+    const provenance = record.provenance;
+    return {
+        status: retirement.status,
+        retired: retirement.retired,
+        modelRunId: record.model_run_id,
+        contextPacketId: stringOrNull(provenance?.context_packet_id),
+        sourceRefs: record.source_refs.map(parseSourceRef),
+        legacyUnscoped: found.legacy,
+    };
+}
+/**
+ * Which supporting memories the caller may see, resolved up front.
+ *
+ * The pure resolver checks visibility synchronously, so this pre-answers it for the
+ * memory refs a record carries - typically a handful, up to fifty in the live corpus,
+ * and up to two lookups each, so ~100 serial round trips at the tail. Bounded and off
+ * the hot path (agent-invoked, not per-turn); the second lookup fires only for an
+ * ancestor with no scope bindings, of which the live corpus has two. Worth replacing
+ * with one bindings query if a memory ever carries hundreds of ancestors.
+ * Uses the SAME two-pass gate as the record itself, legacy pass included: an ancestor
+ * with no scope bindings is admitted exactly where an unbound record is, rather than
+ * reported out of scope because the second pass was skipped. An earlier docstring
+ * claimed that parity without the code doing it.
+ */
+async function resolveVisibleMemoryRefs(record, scopes) {
+    const visible = new Set();
+    if (!record) {
+        return visible;
+    }
+    const ids = new Set(record.sourceRefs.flatMap((ref) => (ref.kind === 'memory' ? [ref.id] : [])));
+    for (const id of ids) {
+        if (await lookupWithLegacyFallback(id, scopes)) {
+            visible.add(id);
+        }
+    }
+    return visible;
+}
+/**
+ * Whether a message ref may be named.
+ *
+ * `sourceMessageRef` is built as `source:channelId:turnId` (message-router.ts), and a
+ * channel scope id as `source:channelId` (scope-context.ts) - so a ref belongs to a
+ * caller's channel exactly when an active channel scope is its prefix. Compared as a
+ * prefix rather than parsed, because a turn id can itself contain a colon
+ * (`generated:<uuid>`) and splitting on the last one would silently mis-attribute it.
+ *
+ * This matters beyond tidiness: every memory carrying such a ref is also bound to
+ * global:system, which every caller holds, so an unchecked ref handed a private channel
+ * identifier to any agent that could read the memory at all.
+ */
+function isMessageRefVisible(ref, scopes) {
+    return scopes.some((scope) => scope.kind === 'channel' && ref.startsWith(`${scope.id}:`));
+}
+// Known limit, stated rather than discovered: the channel id space is not prefix-free.
+// Real channel ids already contain colons, so a channel `S:X` produces refs that a caller
+// scoped to `S` matches. Nothing in the ref format distinguishes "channel S, turn X:99"
+// from "channel S:X, turn 99", so this cannot be resolved by parsing harder - it would
+// take a delimiter the writer does not use. There are no such colliding pairs in the live
+// scope table, so the guarantee holds on today's data rather than structurally.
+/** Resolve one memory's support against the live index and the scopes active now. */
+async function resolveMemoryProvenanceLive(memoryId, options) {
+    const record = await loadRecord(memoryId, options.scopes);
+    const visibleMemoryRefs = await resolveVisibleMemoryRefs(record, options.scopes);
+    const adapter = await resolveAdapter();
+    const statement = adapter.prepare(`SELECT ${exports.EVENT_INDEX_COLUMNS}
+       FROM connector_event_index
+      WHERE event_index_id = ?
+      LIMIT 1`);
+    return (0, provenance_resolver_js_1.resolveMemoryProvenance)(memoryId, {
+        lookupMemoryProvenance: () => record,
+        lookupEvent: (connector, eventIndexId) => {
+            const row = statement.get(eventIndexId);
+            if (!row) {
+                return null;
+            }
+            const event = toIndexedEvent(row);
+            // The id is a hash of connector plus source id, so a connector mismatch means the
+            // ref was rewritten rather than that the event moved. Treat it as gone, not as data.
+            return event.connector === connector ? event : null;
+        },
+        ...(options.redact === undefined ? {} : { redact: options.redact }),
+        isSupportVisible: (support) => {
+            if (support.kind === 'memory') {
+                return visibleMemoryRefs.has(support.id);
+            }
+            if (support.kind === 'message') {
+                return isMessageRefVisible(support.id, options.scopes);
+            }
+            // Envelope hashes are emitted. The reason is NOT that the hash is inert - it is a
+            // lookup key into GET /api/memory/provenance, which serves unscoped results by
+            // hash and explicitly refuses scope filters (memory-provenance-handler.ts:26-33).
+            // What makes it safe is that the route sits behind requireAdminAuth
+            // (api/index.ts:215) and no role holding mama_provenance has an admin token or a
+            // shell. That is an access control in another file, so if this tool is ever
+            // granted to a role with either, revisit this line - the hash stops being safe
+            // before anything here changes.
+            return true;
+        },
+        isVisible: (event) => isEventVisibleNow(event, {
+            scopes: options.scopes,
+            connectors: options.connectors,
+            ...(options.channels ? { channels: options.channels } : {}),
+            ...(options.projectIds === undefined ? {} : { projectIds: options.projectIds }),
+            tenantId: options.tenantId ?? null,
+            minObservedMs: options.minObservedMs ?? null,
+            maxObservedMs: options.maxObservedMs ?? null,
+        }),
+        ...(options.excerptChars === undefined ? {} : { excerptChars: options.excerptChars }),
+    });
+}
+//# sourceMappingURL=provenance-live.js.map

package/dist/memory/provenance-live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance-live.js","sourceRoot":"","sources":["../../src/memory/provenance-live.ts"],"names":[],"mappings":";;;AA2GA,wCAqBC;AAmCD,8CAyEC;AAgED,wCAkBC;AAqHD,kDAEC;AASD,kEAwDC;AAtfD;;;;;;;;;;;;;;;;;GAiBG;AACH,sDAA6D;AAE7D,4EAA6F;AAC7F,qEAMkC;AAElC,4FAA4F;AAC/E,QAAA,mBAAmB,GAAG;;kCAED,CAAC;AAyBnC;;;GAGG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;AAsChG;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAEtC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,qFAAqF;IACrF,iDAAiD;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAC7B,KAAmB,EACnB,OAAyE;IAEzE,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnF,IAAI,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,UAAU,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,UAAU,IAAI,GAAG,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,iBAAiB,CAC/B,KAAmB,EACnB,OAQC;IAED,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,CACL,IAAA,kCAAgB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC;YAClE,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CACvC,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;IAE1C,iFAAiF;IACjF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CACtC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,CAC5D,CAAC;IACF,MAAM,mBAAmB,GACvB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;QAC3E,UAAU,CAAC,MAAM,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpB,MAAM,0BAA0B,GAAG,oBAAoB,IAAI,CAAC,mBAAmB,CAAC;IAEhF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,cAAc,GAClB,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI;YACvB,KAAK,CAAC,SAAS,KAAK,SAAS;YAC7B,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC,0BAA0B,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,aAAa,GACjB,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAC3B,CAAC,0BAA0B,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC1B,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;YACrB,qEAAqE;YACrE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CACnF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,SAAS,GACb,CAAC,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAA+B,CAAC;IACpF,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IACD,uFAAuF;IACvF,sFAAsF;IACtF,2BAA2B;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,aAAsB,EAAE,iBAA0B;IAC5E,MAAM,EAAE,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACpE,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,GAAa;IAC1C,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,kFAAkF;IAClF,gFAAgF;IAChF,uFAAuF;IACvF,MAAM,QAAQ,GAAG,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC;IACxD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC7C,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;QAC9C,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QAC7D,UAAU,EAAE,kBAAkB,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,mBAAmB,CAAC;QAC3E,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAC3D,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,IAAI,EAAE,EAAE;QAC3E,SAAS,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QACrE,QAAQ,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,wBAAwB,CACrC,QAAgB,EAChB,MAAwB;IAKxB,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAmB,EAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAmB,EAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC3B,QAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,CAAC,QAAQ,CAA8D,CAAC;IAC9E,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,YAAY,GAAG,OAAO,GAAG,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,OAAO;QACL,MAAM;QACN,kFAAkF;QAClF,oCAAoC;QACpC,OAAO,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,YAAY,KAAK,IAAI;KAC3F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAgB,EAChB,MAAwB;IAExB,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiD,CAAC;IAC5E,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,UAAU,EAAE,MAAM,CAAC,YAAY;QAC/B,eAAe,EAAE,YAAY,CAAC,UAAU,EAAE,iBAAiB,CAAC;QAC5D,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC;QAClD,cAAc,EAAE,KAAK,CAAC,MAAM;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,wBAAwB,CACrC,MAAqC,EACrC,MAAwB;IAExB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjG,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,MAAM,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,mBAAmB,CAAC,GAAW,EAAE,MAAiC;IAChF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC5F,CAAC;AACD,uFAAuF;AACvF,0FAA0F;AAC1F,wFAAwF;AACxF,uFAAuF;AACvF,0FAA0F;AAC1F,gFAAgF;AAEhF,qFAAqF;AAC9E,KAAK,UAAU,2BAA2B,CAC/C,QAAgB,EAChB,OAA8B;IAE9B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAC/B,UAAU,2BAAmB;;;cAGnB,CACX,CAAC;IAEF,OAAO,IAAA,gDAAuB,EAAC,QAAQ,EAAE;QACvC,sBAAsB,EAAE,GAAG,EAAE,CAAC,MAAM;QACpC,WAAW,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE;YACvC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,YAAY,CAAyB,CAAC;YAChE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YAClC,kFAAkF;YAClF,qFAAqF;YACrF,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE;YAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;YACD,kFAAkF;YAClF,+EAA+E;YAC/E,kFAAkF;YAClF,oEAAoE;YACpE,iFAAiF;YACjF,4EAA4E;YAC5E,+EAA+E;YAC/E,gCAAgC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,iBAAiB,CAAC,KAAK,EAAE;YACvB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAC/E,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;YAClC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;SAC7C,CAAC;QACJ,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;KACtF,CAAC,CAAC;AACL,CAAC"}