@kya-os/cli 1.8.1 → 1.8.3

package/dist/orchestrator/hub-observer.js

@@ -0,0 +1,474 @@
+/**
+ * A coordination hub, observed from outside its process.
+ *
+ * This is what makes the daemon host pluggable. `OrchestratorDaemon` takes a
+ * structural `EventSource` -- `onEvent` plus `getRecentEvents` -- rather than the
+ * concrete hub, so anything that can supply those two methods can drive it. In
+ * process, the hub itself supplies them. Here they come over a WebSocket, which
+ * lets the daemon run wherever the operator already runs things and attach to
+ * whichever hub they already point their agents at.
+ *
+ * The CLI deliberately does not depend on @kya-os/compute: compute is PID 1 in a
+ * Fly worker, this is a published CLI. So the observer protocol is spoken
+ * directly, against the wire format in @kya-os/contracts/handshake rather than
+ * a copy of it. (Not `/proof`: both a `proof.ts` and a `proof/index.ts` exist
+ * there, and Node and tsc disagree about which one that subpath means.)
+ *
+ * ## Why connect() waits for the snapshot
+ *
+ * `getRecentEvents` is synchronous, because in-process it reads an array. Over a
+ * socket the history arrives in a frame, so `connect()` does not resolve until
+ * that frame lands. A daemon started before it arrives would reconcile against
+ * an empty window and silently skip the recovery a restart exists to perform --
+ * the failure mode is a quiet no-op, which is the kind that survives review.
+ *
+ * @module cli/orchestrator/hub-observer
+ */
+import { readFileSync } from "node:fs";
+import { createPublicKey } from "node:crypto";
+import { SignJWT } from "jose";
+import WebSocket from "ws";
+import { DIDCOMM_POP_TYP, DIDCOMM_POP_ALG, ObserverHelloSchema, DIDCommChallengeSchema, DIDCommProofSchema, } from "@kya-os/contracts/handshake";
+import { ed25519PrivateKeyFromSeed } from "../utils/dco/ssh-key.js";
+import { HubEventLikeSchema } from "./events.js";
+/**
+ * Read an identity file, returning undefined rather than throwing.
+ *
+ * A missing or malformed identity is a normal state -- the operator may not have
+ * run `dco setup` -- and it only matters if the hub demands authentication. The
+ * hub's rejection message says far more about what is wrong than a parse error
+ * raised here would.
+ */
+export function readObserverIdentity(path) {
+    try {
+        const raw = JSON.parse(readFileSync(path, "utf8"));
+        if (typeof raw !== "object" || raw === null)
+            return undefined;
+        const rec = raw;
+        const did = rec["did"];
+        const privateKey = rec["privateKey"];
+        if (typeof did !== "string" || did.length === 0)
+            return undefined;
+        if (typeof privateKey !== "string" || privateKey.length === 0)
+            return undefined;
+        // Check the seed HERE, not later inside a socket handler. A corrupted
+        // identity is a configuration problem, and surfacing it as "no usable
+        // identity" beats an exception thrown from an open handler where nothing is
+        // waiting to catch it.
+        if (Buffer.from(privateKey, "base64").length !== 32)
+            return undefined;
+        return { did, privateKey };
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The public JWK the hub needs to bind a did:key to the presented key. */
+export function publicJwkFor(identity) {
+    const key = ed25519PrivateKeyFromSeed(Buffer.from(identity.privateKey, "base64"));
+    return JSON.stringify(createPublicKey(key).export({ format: "jwk" }));
+}
+/**
+ * The `observe` hello frame for an optional identity -- shared by every
+ * observer-wire client (this file's long-lived `HubObserver` and
+ * `hub-dispatch.ts`'s short-lived one-shot client), so the two cannot
+ * silently drift on what an anonymous vs. authenticated hello looks like.
+ */
+export function buildObserverHello(identity) {
+    return ObserverHelloSchema.parse({
+        type: "observe",
+        ...(identity ? { did: identity.did, publicKey: publicJwkFor(identity) } : {}),
+    });
+}
+/** Sign the hub's challenge, per the wire format in contracts. */
+export async function signChallenge(identity, nonce) {
+    const key = ed25519PrivateKeyFromSeed(Buffer.from(identity.privateKey, "base64"));
+    return new SignJWT({ nonce })
+        .setProtectedHeader({
+        alg: DIDCOMM_POP_ALG,
+        kid: `${identity.did}#key-1`,
+        typ: DIDCOMM_POP_TYP,
+    })
+        .setSubject(identity.did)
+        .sign(key);
+}
+/**
+ * Validate a raw `challenge` frame and, if well-formed, answer it: sign its
+ * nonce and build the wire `proof` frame to send back. Returns `undefined`
+ * for a frame that fails `DIDCommChallengeSchema` (not this caller's to
+ * handle -- the same "ignore, don't fail" choice both callers already made
+ * before this was factored out). Every caller of the observer
+ * `observe`/`challenge`/`proof` handshake shares this exact step -- {@link
+ * HubObserver}'s long-lived `connect()` and the one-shot
+ * `github-credential-anchor-sender.ts` -- so it lives here once rather than
+ * being reimplemented per caller.
+ */
+export async function respondToObserverChallenge(identity, rawChallenge) {
+    const challenge = DIDCommChallengeSchema.safeParse(rawChallenge);
+    if (!challenge.success)
+        return undefined;
+    const jws = await signChallenge(identity, challenge.data.nonce);
+    return JSON.stringify(DIDCommProofSchema.parse({ type: "proof", jws }));
+}
+/**
+ * Hosts that need no transport encryption because nothing off this machine
+ * can reach them. Both `::1` and `[::1]` are listed because `URL#hostname`
+ * keeps an IPv6 literal's brackets rather than stripping them.
+ */
+export const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
+/**
+ * Is this an unencrypted `ws://` endpoint pointed somewhere other than this
+ * machine?
+ *
+ * A loopback hub genuinely does not need TLS -- nothing but this machine can
+ * see the socket. Anything else sends the DID, the public key, and the signed
+ * proof of possession over a transport anyone on the path can read; `wss://`
+ * is the production default for exactly this reason, and a plain `ws://` to a
+ * remote host is far more likely a dev config that escaped dev than a
+ * deliberate choice. An endpoint this cannot even parse is left alone: it
+ * fails at `connect()`, with a clearer error than anything said here.
+ */
+export function isPlaintextNonLoopback(endpoint) {
+    let url;
+    try {
+        url = new URL(endpoint);
+    }
+    catch {
+        return false;
+    }
+    return url.protocol === "ws:" && !LOOPBACK_HOSTS.has(url.hostname.toLowerCase());
+}
+/**
+ * How many live events to retain between snapshots.
+ *
+ * The hub bounds its own ring; a client that did not would grow forever on a
+ * connection that never drops. Sized generously relative to the reconcile window
+ * the daemon actually reads.
+ */
+const MAX_LIVE_HISTORY = 1000;
+/** Is this object actually shaped like a {@link HubEventLike}? */
+function isHubEventLike(value) {
+    return HubEventLikeSchema.safeParse(value).success;
+}
+/** How many times to retry a replayed event whose write failed, and the gap between attempts. */
+const REPLAY_RETRY_ATTEMPTS = 3;
+const REPLAY_RETRY_DELAY_MS = 200;
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+export class HubObserver {
+    constructor(config) {
+        this.handlers = [];
+        this.history = [];
+        this.closedByUs = false;
+        this.backoffMs = 500;
+        /**
+         * Has a handshake ever completed?
+         *
+         * Reconnecting is only right after a connection that WORKED. Retrying a first
+         * failure means a misconfigured or unauthorised hub is retried forever in the
+         * background while the caller has already been told it failed -- a daemon that
+         * looks alive and records nothing, which is the outcome connect() rejects to
+         * avoid.
+         */
+        this.hasConnected = false;
+        /**
+         * Serializes `handleFrame` across messages.
+         *
+         * `ws.on("message")` fires and forgets (`void this.handleFrame(...)`), which
+         * was harmless while every frame finished synchronously within one tick.
+         * Retrying a replay's failed write does not: it `await`s a `setTimeout`, and
+         * without this queue a live frame arriving during that wait ran a SECOND,
+         * concurrent `handleFrame` -- pushing onto `this.history` right before the
+         * still-in-flight snapshot handler clobbered it with `this.history = window`,
+         * and dispatching that live event ahead of the gap it was meant to follow
+         * (review finding on #686). Chaining onto this instead makes every frame
+         * fully finish before the next one starts, socket-wide.
+         */
+        this.frameQueue = Promise.resolve();
+        this.config = config;
+    }
+    /** Queue a frame behind whatever is still being processed for this socket. */
+    enqueueFrame(text, fail, ready) {
+        this.frameQueue = this.frameQueue
+            // One frame's rejection must not wedge every frame queued behind it: a
+            // `.then` chained onto an already-rejected promise never runs its
+            // callback, so without this, `handleFrame` would silently stop being
+            // called for every later frame too.
+            .catch(() => { })
+            .then(() => this.handleFrame(text, fail, ready));
+    }
+    /**
+     * Connect, authenticate if asked to, and resolve once the snapshot has landed.
+     *
+     * Rejects rather than retrying: a first connection that cannot authenticate is
+     * a configuration problem, and retrying it forever would leave a daemon that
+     * looks alive and records nothing. Reconnection after a WORKING connection is
+     * a different case and is handled silently below.
+     */
+    connect() {
+        return new Promise((resolve, reject) => {
+            const ws = new WebSocket(this.config.endpoint);
+            this.ws = ws;
+            let settled = false;
+            const finish = (err) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                if (err)
+                    reject(err);
+                else
+                    resolve();
+            };
+            /**
+             * This attempt failed: report it AND drop the socket, always.
+             *
+             * These were two steps written at each call site, and one site forgot --
+             * a throw while answering the challenge rejected connect() and left the
+             * socket open. Reconnect is only scheduled from the close handler, so the
+             * observer then sat on a live socket with the handshake timer already
+             * cleared: no timeout, no retry, attached and recording nothing until the
+             * hub happened to hang up. Folding the close in makes the pair structural
+             * instead of something every future failure path has to remember.
+             *
+             * The close is NOT conditional on `settled`, because the stall is worst
+             * exactly when it is: a frame that fails after the handshake completed
+             * would otherwise leave the socket with nobody watching it at all.
+             */
+            const fail = (err) => {
+                finish(err);
+                ws.close();
+            };
+            const timer = setTimeout(() => {
+                fail(new Error(`hub at ${this.config.endpoint} did not complete the observer handshake in time`));
+            }, this.config.handshakeTimeoutMs ?? 10000);
+            ws.on("open", () => {
+                // publicJwkFor can throw on a malformed seed, and so, now, can a hello
+                // that fails ObserverHelloSchema. Both are unhandled-inside-an-event-
+                // handler otherwise: an uncaught exception, with connect() left to hang
+                // to its timeout and report the wrong cause.
+                try {
+                    ws.send(JSON.stringify(buildObserverHello(this.config.identity)));
+                }
+                catch (err) {
+                    fail(err instanceof Error ? err : new Error(String(err)));
+                }
+            });
+            ws.on("message", (raw) => {
+                this.enqueueFrame(raw.toString(), fail, finish);
+            });
+            ws.on("error", (err) => fail(err instanceof Error ? err : new Error(String(err))));
+            ws.on("close", (code, reason) => {
+                // Before the handshake completes, a close IS the failure: the hub rejects
+                // an unauthenticated or unprovable observer by closing.
+                finish(new Error(`hub closed the observer connection (${code}${reason.length ? `: ${reason.toString()}` : ""})`));
+                // Only if we had a working connection to lose.
+                if (this.hasConnected)
+                    this.scheduleReconnect();
+            });
+        });
+    }
+    async handleFrame(text, fail, ready) {
+        let msg;
+        try {
+            const parsed = JSON.parse(text);
+            if (typeof parsed !== "object" || parsed === null)
+                return;
+            msg = parsed;
+        }
+        catch {
+            return; // a frame we cannot parse is not a frame we can act on
+        }
+        const type = msg["type"];
+        if (type === "challenge") {
+            if (!this.config.identity)
+                return;
+            try {
+                const frame = await respondToObserverChallenge(this.config.identity, msg);
+                if (frame)
+                    this.ws?.send(frame);
+            }
+            catch (err) {
+                fail(err instanceof Error ? err : new Error(String(err)));
+            }
+            return;
+        }
+        if (type === "snapshot") {
+            const events = msg["events"];
+            // A hub without the event-history addition sends agents only. Treat that as
+            // an empty window rather than an error: the daemon still works, it simply
+            // cannot recover what it slept through, which is strictly better than
+            // refusing to start. An entry that does not match HubEventLikeSchema is
+            // dropped rather than cast through: "verified protocol events" ought to
+            // mean the shape was actually checked, not merely asserted at the type
+            // level over a socket nothing on the wire guarantees conforms.
+            const window = Array.isArray(events) ? events.filter(isHubEventLike) : [];
+            if (Array.isArray(events) && window.length !== events.length) {
+                console.error(`[orchestrator] dropped ${events.length - window.length} malformed event(s) from the hub's snapshot`);
+            }
+            // REPLACE, on a reconnect as much as a first connect. The snapshot IS the
+            // hub's recent ring, and in-process `getRecentEvents` returns that same
+            // ring -- so mirroring it is what keeps this implementation faithful to the
+            // one it substitutes for. Appending instead duplicated every event the ring
+            // still held, drifted this view away from the hub's, and grew without the
+            // hub's size bound on a long-lived daemon.
+            //
+            // Events the client saw live that have since aged out of the ring are
+            // dropped, which is correct: they have aged out of the answer the question
+            // is asking.
+            if (this.hasConnected) {
+                // A RECONNECT. The daemon reconciles only at boot, so events from the
+                // gap would otherwise sit in history and never reach the ledger. Replay
+                // them through the handlers exactly as if they had arrived live.
+                //
+                // Safe to replay events already seen: journal ids are content-derived
+                // and verdicts are keyed on (repo, pr, sha, reviewer), so a duplicate
+                // collapses instead of double-counting. That idempotency is precisely
+                // what makes recovery a replay rather than a diff.
+                // Dispatch BEFORE replacing, so a handler that reads getRecentEvents
+                // sees the window it is being told about rather than the previous one.
+                //
+                // Retried, unlike a live dispatch below: a live event that a handler
+                // fails to write will still sit in the hub's ring and reach this same
+                // replay path at the NEXT reconnect, but reconcile only runs at boot,
+                // so a replay failure has no later chance -- without a retry here, the
+                // one recovery a reconnect exists to perform becomes a logged no-op.
+                for (const event of window)
+                    await this.dispatchReplayed(event);
+            }
+            this.history = window;
+            this.hasConnected = true;
+            this.backoffMs = 500; // a completed handshake resets the backoff
+            ready();
+            return;
+        }
+        // Anything else with a `type` is meant to be a hub event.
+        if (typeof type === "string") {
+            if (!isHubEventLike(msg)) {
+                console.error(`[orchestrator] dropped a malformed "${type}" frame from the hub`);
+                return;
+            }
+            this.history.push(msg);
+            if (this.history.length > MAX_LIVE_HISTORY) {
+                this.history = this.history.slice(-MAX_LIVE_HISTORY);
+            }
+            this.dispatch(msg);
+        }
+    }
+    /**
+     * Hand one event to every handler, once.
+     *
+     * Shared by live delivery and reconnect replay (through {@link
+     * dispatchReplayed}) so the two cannot diverge -- a replay that skipped a
+     * handler would recover the journal and not the ticket status, which reads
+     * as the reactor having run and disagreed. Returns whether every handler
+     * succeeded, so a caller that can retry (replay) knows whether it needs to.
+     *
+     * This is now the ONLY place a handler's failure is caught. The handlers
+     * themselves (`registerJournalWriter`, `registerReviewReactor`) deliberately
+     * do not swallow their own write errors -- a handler that always reports
+     * success by catching internally makes `allOk` a lie, which is what made
+     * `dispatchReplayed`'s retry dead code against the real handlers even though
+     * it worked against a mock that threw directly.
+     */
+    dispatch(event) {
+        let allOk = true;
+        for (const h of [...this.handlers]) {
+            try {
+                h(event);
+            }
+            catch (err) {
+                allOk = false;
+                // One bad handler must not cost the others their event, nor the socket.
+                console.error(`[orchestrator] observer handler failed on ${event.type}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        return allOk;
+    }
+    /**
+     * Dispatch one event from a reconnect's gap replay, retrying instead of
+     * letting a write failure disappear it.
+     *
+     * All handlers together, every attempt, not just the ones that failed: safe
+     * because journal ids are content-derived and verdicts are keyed on their
+     * subject, so re-dispatching an event a handler already wrote collapses
+     * rather than double-applying. SQLite's own `busy_timeout` already absorbs a
+     * same-instant lock collision between two writers; this covers whatever
+     * survives that -- a slower disk, any other transient failure -- during the
+     * one window where a dropped write has no later chance to be recovered.
+     */
+    async dispatchReplayed(event) {
+        for (let attempt = 1; attempt <= REPLAY_RETRY_ATTEMPTS; attempt++) {
+            if (this.dispatch(event))
+                return;
+            if (attempt < REPLAY_RETRY_ATTEMPTS) {
+                await sleep(REPLAY_RETRY_DELAY_MS * attempt);
+            }
+        }
+        console.error(`[orchestrator] gave up recovering a replayed "${event.type}" event after ` +
+            `${REPLAY_RETRY_ATTEMPTS} attempts`);
+    }
+    /**
+     * Schedule the next attempt.
+     *
+     * The timer is deliberately NOT unref'd, and that is the whole point. While
+     * reconnecting there is no socket, and in `kya-os orchestrator daemon` the
+     * socket is the only handle keeping the process alive -- the liveness beat is
+     * unref'd and the command holds no stdin. An unref'd timer here therefore let
+     * the process exit during the exact window it was supposed to be recovering
+     * in: a hub restart quietly killed the daemon, with no error and no exit
+     * message. This timer stands in for the socket, so it has to hold the loop
+     * exactly as the socket does.
+     *
+     * The rule the two now share: the observer owns the daemon's liveness while
+     * it is attached or trying to be, and everything else (the beat, the signal
+     * handlers) is incidental and stays unref'd.
+     */
+    scheduleReconnect() {
+        if (this.closedByUs || this.reconnectTimer)
+            return;
+        const delay = this.backoffMs;
+        this.backoffMs = Math.min(delay * 2, this.config.maxBackoffMs ?? 30000);
+        this.reconnectTimer = setTimeout(() => {
+            this.reconnectTimer = undefined;
+            if (this.closedByUs)
+                return;
+            // Reconnect failures are logged, not thrown: nothing is awaiting this, and
+            // an unhandled rejection would take the daemon down over a hub restart.
+            this.connect().catch((err) => {
+                console.error(`[orchestrator] hub reconnect failed: ${err instanceof Error ? err.message : String(err)}`);
+            });
+        }, delay);
+    }
+    /**
+     * Is a reconnect scheduled -- i.e. is this observer still holding the process
+     * open on purpose? Distinguishes a cancelled timer from a merely neutered one,
+     * which is invisible from the outside and is the difference between a stopped
+     * daemon exiting and hanging.
+     */
+    hasPendingReconnect() {
+        return this.reconnectTimer !== undefined;
+    }
+    onEvent(handler) {
+        this.handlers.push(handler);
+        return () => {
+            this.handlers = this.handlers.filter((h) => h !== handler);
+        };
+    }
+    getRecentEvents(limit) {
+        return limit === undefined ? [...this.history] : this.history.slice(-limit);
+    }
+    /** Stop observing. Idempotent, and suppresses the reconnect. */
+    close() {
+        this.closedByUs = true;
+        // CANCEL the pending reconnect, do not just make its callback do nothing.
+        // Now that the timer holds the event loop open on purpose, a neutered one
+        // still keeps a stopped daemon (and any test suite) running to its deadline.
+        if (this.reconnectTimer) {
+            clearTimeout(this.reconnectTimer);
+            this.reconnectTimer = undefined;
+        }
+        this.ws?.close();
+        this.ws = undefined;
+    }
+}
+//# sourceMappingURL=hub-observer.js.map

package/dist/orchestrator/hub-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-observer.js","sourceRoot":"","sources":["../../src/orchestrator/hub-observer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,GAEnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAuC,MAAM,aAAa,CAAC;AAoBtF;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC9D,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;QACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAClE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAChF,sEAAsE;QACtE,sEAAsE;QACtE,4EAA4E;QAC5E,uBAAuB;QACvB,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QACtE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,QAA0B;IACrD,MAAM,GAAG,GAAG,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA2B;IAC5D,OAAO,mBAAmB,CAAC,KAAK,CAAC;QAC/B,IAAI,EAAE,SAAS;QACf,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC,CAAC;AACL,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAA0B,EAC1B,KAAa;IAEb,MAAM,GAAG,GAAG,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,OAAO,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;SAC1B,kBAAkB,CAAC;QAClB,GAAG,EAAE,eAAe;QACpB,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,QAAQ;QAC5B,GAAG,EAAE,eAAe;KACrB,CAAC;SACD,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAA0B,EAC1B,YAAqB;IAErB,MAAM,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACjE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAElF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,IAAK,CAAC;AAE/B,kEAAkE;AAClE,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACrD,CAAC;AAED,iGAAiG;AACjG,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/F,MAAM,OAAO,WAAW;IAkCtB,YAAY,MAAyB;QA/B7B,aAAQ,GAAyC,EAAE,CAAC;QACpD,YAAO,GAAmB,EAAE,CAAC;QAC7B,eAAU,GAAG,KAAK,CAAC;QACnB,cAAS,GAAG,GAAG,CAAC;QACxB;;;;;;;;WAQG;QACK,iBAAY,GAAG,KAAK,CAAC;QAG7B;;;;;;;;;;;;WAYG;QACK,eAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QAGpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,8EAA8E;IACtE,YAAY,CAAC,IAAY,EAAE,IAA0B,EAAE,KAAiB;QAC9E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;YAC/B,uEAAuE;YACvE,kEAAkE;YAClE,qEAAqE;YACrE,oCAAoC;aACnC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;aACf,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;OAOG;IACH,OAAO;QACL,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;YACb,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAQ,EAAE;gBACnC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,EAAE,CAAC;YACjB,CAAC,CAAC;YACF;;;;;;;;;;;;;;eAcG;YACH,MAAM,IAAI,GAAG,CAAC,GAAU,EAAQ,EAAE;gBAChC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CACF,IAAI,KAAK,CACP,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,kDAAkD,CACjF,CACF,CAAC;YACJ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,KAAM,CAAC,CAAC;YAE7C,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACjB,uEAAuE;gBACvE,sEAAsE;gBACtE,wEAAwE;gBACxE,6CAA6C;gBAC7C,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACpE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEnF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAC9B,0EAA0E;gBAC1E,wDAAwD;gBACxD,MAAM,CACJ,IAAI,KAAK,CACP,uCAAuC,IAAI,GACzC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAC7C,GAAG,CACJ,CACF,CAAC;gBACF,+CAA+C;gBAC/C,IAAI,IAAI,CAAC,YAAY;oBAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAClD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,IAA0B,EAC1B,KAAiB;QAEjB,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO;YAC1D,GAAG,GAAG,MAAiC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,uDAAuD;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QAEzB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,OAAO;YAClC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC1E,IAAI,KAAK;oBAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7B,4EAA4E;YAC5E,0EAA0E;YAC1E,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,uEAAuE;YACvE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC7D,OAAO,CAAC,KAAK,CACX,0BAA0B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,6CAA6C,CACrG,CAAC;YACJ,CAAC;YAED,0EAA0E;YAC1E,wEAAwE;YACxE,4EAA4E;YAC5E,4EAA4E;YAC5E,0EAA0E;YAC1E,2CAA2C;YAC3C,EAAE;YACF,sEAAsE;YACtE,2EAA2E;YAC3E,aAAa;YACb,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,sEAAsE;gBACtE,wEAAwE;gBACxE,iEAAiE;gBACjE,EAAE;gBACF,sEAAsE;gBACtE,sEAAsE;gBACtE,sEAAsE;gBACtE,mDAAmD;gBACnD,qEAAqE;gBACrE,uEAAuE;gBACvE,EAAE;gBACF,qEAAqE;gBACrE,sEAAsE;gBACtE,sEAAsE;gBACtE,uEAAuE;gBACvE,qEAAqE;gBACrE,KAAK,MAAM,KAAK,IAAI,MAAM;oBAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YAEtB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,2CAA2C;YACjE,KAAK,EAAE,CAAC;YACR,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CAAC,uCAAuC,IAAI,sBAAsB,CAAC,CAAC;gBACjF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,QAAQ,CAAC,KAAmB;QAClC,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,CAAC,CAAC,KAAK,CAAC,CAAC;YACX,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,GAAG,KAAK,CAAC;gBACd,wEAAwE;gBACxE,OAAO,CAAC,KAAK,CACX,6CAA6C,KAAK,CAAC,IAAI,KACrD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,gBAAgB,CAAC,KAAmB;QAChD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,qBAAqB,EAAE,OAAO,EAAE,EAAE,CAAC;YAClE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO;YACjC,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC,qBAAqB,GAAG,OAAO,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,KAAK,CACX,iDAAiD,KAAK,CAAC,IAAI,gBAAgB;YACzE,GAAG,qBAAqB,WAAW,CACtC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,iBAAiB;QACvB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,KAAM,CAAC,CAAC;QACzE,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU;gBAAE,OAAO;YAC5B,2EAA2E;YAC3E,wEAAwE;YACxE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACpC,OAAO,CAAC,KAAK,CACX,wCACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED;;;;;OAKG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC;IAC3C,CAAC;IAED,OAAO,CAAC,OAAsC;QAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;QAC7D,CAAC,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,KAAc;QAC5B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED,gEAAgE;IAChE,KAAK;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC;IACtB,CAAC;CACF"}

package/dist/orchestrator/journal-writer.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Journal writer (ORC-W1 PR-2).
+ *
+ * Turns hub events into ledger rows. This is the piece that makes the journal
+ * evidence rather than narration: rows land because a verified protocol event
+ * arrived, not because a model chose to record one.
+ *
+ * @module orchestrator/journal-writer
+ */
+import type { Ledger } from "./db/index.js";
+import type { EventSource, HubEventLike } from "./events.js";
+/**
+ * Pull a task id out of an event's untyped `data` bag.
+ *
+ * `data` is `Record<string, unknown>` on the wire, so this narrows rather than
+ * casting. Anything that is not a non-empty string is treated as absent, which
+ * is the honest reading: a malformed taskId must not be used to look up a
+ * ticket and silently attach an observation to the wrong one.
+ */
+export declare function taskIdOf(event: HubEventLike): string | null;
+/**
+ * Persist one event.
+ *
+ * Correlates to a ticket through `dispatches` when the event names a task this
+ * orchestrator dispatched. When it does not, the row is still written with a
+ * null ticket, because an uncorrelated observation is worth more than no
+ * observation and guessing at a ticket would be worse than either.
+ *
+ * Returns true when the row was new (false means it was a replay).
+ */
+export declare function writeEvent(db: Ledger, event: HubEventLike): boolean;
+/** The PR a review event is about, or null if it does not name one completely. */
+export interface ReviewSubject {
+    repo: string;
+    prNumber: number;
+    headSha: string;
+}
+/**
+ * Read a review event's subject out of its untyped `data` bag.
+ *
+ * All three fields or nothing. A verdict missing part of its subject cannot be
+ * attributed, and attributing it to the wrong ticket is worse than leaving the
+ * row uncorrelated.
+ */
+export declare function reviewSubjectOf(event: HubEventLike): ReviewSubject | null;
+/**
+ * Resolve the ticket an event concerns: task id first, pull request second.
+ *
+ * Task id is exact where present. PR correlation is the fallback and the ONLY
+ * option for `pr_quorum_reached`, which carries no task id -- so before this
+ * existed every quorum event journalled with a null ticket, and the Review lens
+ * could show that something reached quorum but never which ticket it was for.
+ */
+export declare function ticketIdForEvent(db: Ledger, event: HubEventLike): string | null;
+/**
+ * Subscribe to the hub and journal everything it emits.
+ *
+ * Returns the unsubscribe, matching the hub's own `onEvent` contract, so the
+ * daemon can detach cleanly on shutdown instead of leaking a handler that
+ * writes to a closed database.
+ *
+ * Deliberately does NOT catch a write failure here. Every real dispatcher
+ * this attaches to -- the hub's own emit loop, `HubObserver.dispatch()` --
+ * already isolates one handler's failure from its siblings and from itself,
+ * so catching AGAIN in here just hides the failure from that dispatcher: a
+ * reconnect's replay retries a write only if it can tell the write failed,
+ * and a handler that always reports success by swallowing its own errors
+ * makes that retry permanently dead code (review finding on #686).
+ */
+export declare function registerJournalWriter(db: Ledger, hub: EventSource): () => void;
+/**
+ * Replay the hub's recent-event window into the journal.
+ *
+ * Called once on boot so a daemon restart recovers what it slept through.
+ * Idempotent by construction: journal ids are derived from event content, so
+ * an event already recorded live is ignored rather than duplicated. Returns
+ * how many rows were genuinely new.
+ */
+export declare function reconcileRecentEvents(db: Ledger, hub: EventSource, limit?: number): number;
+//# sourceMappingURL=journal-writer.d.ts.map

package/dist/orchestrator/journal-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal-writer.d.ts","sourceRoot":"","sources":["../../src/orchestrator/journal-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAG5C,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE7D;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAG3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAEnE;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,GAAG,IAAI,CAWzE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAQ/E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,MAAM,IAAI,CAI9E;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,SAAK,GAAG,MAAM,CAMtF"}