@mmnto/totem 1.106.0 → 1.107.0

package/dist/qbd/correlation-id.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Query-before-derive (QBD) correlation IDs — the join key between a corpus
+ * query event and the derive-class action it grounded (mmnto-ai/totem#2510).
+ *
+ * ## Why a bespoke ID and not `correlation_id`
+ *
+ * `LedgerEvent.correlation_id` is ADR-014's orchestrator→MCP trace ID and is a
+ * plain UUID. #2510 is explicitly NOT chartered to build the ADR-014 telemetry
+ * stack, so this slice carries its own field (`qbd_correlation_id`) with its
+ * own format. A UUID carries no mint instant, and the mint instant is exactly
+ * what makes falsifier 2 (post-hoc correlation) mechanically checkable.
+ *
+ * ## Format
+ *
+ * `qbd1-<mintInstantMs base36>-<16 hex random>` — e.g.
+ * `qbd1-2h1s4kbqr-9f2c0a7e51d34b60`.
+ *
+ * The ID is **self-dating**: it embeds the wall-clock instant at which it was
+ * minted. That is the whole point. Validation (below) cross-checks the embedded
+ * instant against the timestamp of the row carrying the ID, which turns
+ * "IDs must be minted at event-write time" from a convention into a schema
+ * constraint (#2510 falsifier 2: "a backfilled ID is a schema violation, not a
+ * data point").
+ *
+ * ## What the validation actually catches — and what it does not
+ *
+ * Catches (mechanically, at parse time, for every reader and writer):
+ *  - a query row whose ID predates or postdates its own write instant beyond
+ *    `QBD_MINT_TOLERANCE_MS` — i.e. an ID minted anywhere other than at the
+ *    moment the row was written;
+ *  - a derive row carrying an ID minted *after* the derive happened (an ID that
+ *    did not exist when the derive ran cannot have grounded it);
+ *  - a derive row carrying an ID minted longer ago than the correlation window
+ *    (retroactively dressing an ancient query as this derive's grounding);
+ *  - `qbd_correlation_id` stamped on an event type that has no query→derive
+ *    semantics at all.
+ *
+ * On the tolerance: the checks are "beyond tolerance", NOT categorical. A
+ * mismatch inside `QBD_MINT_TOLERANCE_MS` passes in both directions, including
+ * a mint instant slightly in the future of its row. That window exists for
+ * clock granularity between two reads of the same clock, and it is small
+ * relative to the correlation window — but it is a real gap, and calling these
+ * checks categorical would overstate them.
+ *
+ * ## What this does NOT catch, stated precisely
+ *
+ * This is a per-row consistency check, so it cannot see relationships BETWEEN
+ * rows. Two attacks live in that gap:
+ *
+ *  1. **Backdated appends.** `mintQbdCorrelationId` takes its instant as an
+ *     argument and is public API, and the ledger is append-only — so coherent
+ *     query/derive pairs stamped in the past can simply be appended. No
+ *     whole-file rewrite is needed. Each row passes this check individually.
+ *     That attack is caught one layer up, by the append-only monotonicity check
+ *     in `compliance.ts`, which degrades a scan whose timestamps regress. That
+ *     check takes its reference from EVERY row in the file, not just QBD rows,
+ *     so an adopted ledger's existing history is the baseline.
+ *  2. **A coherent whole-file rewrite** — and its degenerate case, an EMPTY or
+ *     QBD-only ledger authored wholesale. With no prior history there is no
+ *     monotonicity reference to violate, so internally consistent fake rows
+ *     read clean. This is the same adversary as the rewrite: whoever authors
+ *     the entire file controls its whole timeline. Conceded scope for v1 —
+ *     nothing short of signing or an append-only server addresses it, and
+ *     neither is chartered here.
+ *
+ * The realistic threat — a script or agent attaching correlation IDs to rows
+ * already on disk — is caught here. The other two are named rather than
+ * claimed solved, per the #2510 discipline.
+ */
+/**
+ * Correlation window: a derive-class action counts as grounded by a query only
+ * if that query was minted within this window before it.
+ *
+ * The VALUE is borrowed from ADR-029 § 2's two-hour session window so this
+ * slice does not invent a second time constant. The DECISION to treat that
+ * span as a grounding-validity window is this slice's own, not the ADR's —
+ * ADR-029 § 2 defines a session-GROUPING heuristic for the recall metric, which
+ * is a different question, and it should not be cited as authority for this
+ * choice. Owned here as a design call: a shorter window would be a strictly
+ * harder test of the same claim, and the value is pinned so the pre-registered
+ * threshold is evaluated against a fixed rule rather than a tunable one.
+ *
+ * Note that consume-on-use (see `record.ts`) does most of the real work: the
+ * window bounds how STALE a grounding may be, but a query grounds only one
+ * derive regardless, so a generous window cannot inflate the numerator.
+ */
+export declare const QBD_CORRELATION_WINDOW_MS: number;
+/**
+ * Tolerance for clock jitter between minting an ID and stamping the row's
+ * `timestamp`. These happen microseconds apart in the same function, so this is
+ * generous; it exists so a coarse clock or a slow filesystem never manufactures
+ * a spurious schema violation.
+ */
+export declare const QBD_MINT_TOLERANCE_MS = 2000;
+/** Why a correlation ID failed validation. Rendered verbatim in accounting. */
+export type QbdIdViolation = 'malformed-shape' | 'undecodable-mint-instant' | 'query-id-not-self-minted' | 'derive-id-minted-after-derive' | 'derive-id-older-than-window' | 'id-on-non-qbd-event';
+export interface QbdIdCheckResult {
+    ok: boolean;
+    /** Populated when `ok` is false. */
+    violation?: QbdIdViolation;
+    /** Human-readable detail for accounting output. */
+    detail?: string;
+}
+/**
+ * Mint a correlation ID stamped with `mintedAtMs`.
+ *
+ * Callers MUST pass the same instant they stamp on the event row — see
+ * `record.ts`, which derives both from one `Date.now()` read. Every writer path
+ * in this slice goes through that module precisely so the two cannot drift.
+ */
+export declare function mintQbdCorrelationId(mintedAtMs: number): string;
+/**
+ * Decode the mint instant embedded in a correlation ID.
+ * Returns `undefined` when the ID is not a well-formed QBD ID.
+ */
+export declare function decodeQbdMintInstant(id: string): number | undefined;
+/**
+ * The minted-at-write-time contract, enforced structurally.
+ *
+ * `eventType` is the ledger row's `type`; `eventMs` is `Date.parse(row.timestamp)`.
+ *
+ * - `corpus_query`: the ID must be minted at the row's own instant (± tolerance).
+ *   A query row is the ID's birth certificate; any other mint instant means the
+ *   ID was attached later.
+ * - `derive_action`: the ID must be minted at or before the derive (± tolerance)
+ *   and no earlier than one correlation window before it.
+ * - any other type: carrying the field at all is a violation.
+ */
+export declare function checkQbdCorrelationId(id: string, eventType: string, eventMs: number): QbdIdCheckResult;
+//# sourceMappingURL=correlation-id.d.ts.map

package/dist/qbd/correlation-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlation-id.d.ts","sourceRoot":"","sources":["../../src/qbd/correlation-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AAeH;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,yBAAyB,QAAqB,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAqB1C,+EAA+E;AAC/E,MAAM,MAAM,cAAc,GACtB,iBAAiB,GACjB,0BAA0B,GAC1B,0BAA0B,GAC1B,+BAA+B,GAC/B,6BAA6B,GAC7B,qBAAqB,CAAC;AAE1B,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,oCAAoC;IACpC,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAO/D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUnE;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAgElB"}

package/dist/qbd/correlation-id.js

@@ -0,0 +1,224 @@
+/**
+ * Query-before-derive (QBD) correlation IDs — the join key between a corpus
+ * query event and the derive-class action it grounded (mmnto-ai/totem#2510).
+ *
+ * ## Why a bespoke ID and not `correlation_id`
+ *
+ * `LedgerEvent.correlation_id` is ADR-014's orchestrator→MCP trace ID and is a
+ * plain UUID. #2510 is explicitly NOT chartered to build the ADR-014 telemetry
+ * stack, so this slice carries its own field (`qbd_correlation_id`) with its
+ * own format. A UUID carries no mint instant, and the mint instant is exactly
+ * what makes falsifier 2 (post-hoc correlation) mechanically checkable.
+ *
+ * ## Format
+ *
+ * `qbd1-<mintInstantMs base36>-<16 hex random>` — e.g.
+ * `qbd1-2h1s4kbqr-9f2c0a7e51d34b60`.
+ *
+ * The ID is **self-dating**: it embeds the wall-clock instant at which it was
+ * minted. That is the whole point. Validation (below) cross-checks the embedded
+ * instant against the timestamp of the row carrying the ID, which turns
+ * "IDs must be minted at event-write time" from a convention into a schema
+ * constraint (#2510 falsifier 2: "a backfilled ID is a schema violation, not a
+ * data point").
+ *
+ * ## What the validation actually catches — and what it does not
+ *
+ * Catches (mechanically, at parse time, for every reader and writer):
+ *  - a query row whose ID predates or postdates its own write instant beyond
+ *    `QBD_MINT_TOLERANCE_MS` — i.e. an ID minted anywhere other than at the
+ *    moment the row was written;
+ *  - a derive row carrying an ID minted *after* the derive happened (an ID that
+ *    did not exist when the derive ran cannot have grounded it);
+ *  - a derive row carrying an ID minted longer ago than the correlation window
+ *    (retroactively dressing an ancient query as this derive's grounding);
+ *  - `qbd_correlation_id` stamped on an event type that has no query→derive
+ *    semantics at all.
+ *
+ * On the tolerance: the checks are "beyond tolerance", NOT categorical. A
+ * mismatch inside `QBD_MINT_TOLERANCE_MS` passes in both directions, including
+ * a mint instant slightly in the future of its row. That window exists for
+ * clock granularity between two reads of the same clock, and it is small
+ * relative to the correlation window — but it is a real gap, and calling these
+ * checks categorical would overstate them.
+ *
+ * ## What this does NOT catch, stated precisely
+ *
+ * This is a per-row consistency check, so it cannot see relationships BETWEEN
+ * rows. Two attacks live in that gap:
+ *
+ *  1. **Backdated appends.** `mintQbdCorrelationId` takes its instant as an
+ *     argument and is public API, and the ledger is append-only — so coherent
+ *     query/derive pairs stamped in the past can simply be appended. No
+ *     whole-file rewrite is needed. Each row passes this check individually.
+ *     That attack is caught one layer up, by the append-only monotonicity check
+ *     in `compliance.ts`, which degrades a scan whose timestamps regress. That
+ *     check takes its reference from EVERY row in the file, not just QBD rows,
+ *     so an adopted ledger's existing history is the baseline.
+ *  2. **A coherent whole-file rewrite** — and its degenerate case, an EMPTY or
+ *     QBD-only ledger authored wholesale. With no prior history there is no
+ *     monotonicity reference to violate, so internally consistent fake rows
+ *     read clean. This is the same adversary as the rewrite: whoever authors
+ *     the entire file controls its whole timeline. Conceded scope for v1 —
+ *     nothing short of signing or an append-only server addresses it, and
+ *     neither is chartered here.
+ *
+ * The realistic threat — a script or agent attaching correlation IDs to rows
+ * already on disk — is caught here. The other two are named rather than
+ * claimed solved, per the #2510 discipline.
+ */
+import * as crypto from 'node:crypto';
+// ─── Constants ──────────────────────────────────────────
+/** Format version prefix — bump if the encoding ever changes. */
+const QBD_ID_PREFIX = 'qbd1';
+/** Bytes of randomness in the ID suffix (16 hex chars). */
+const QBD_ID_RANDOM_BYTES = 8;
+/** Radix for the embedded mint instant. */
+const MINT_RADIX = 36;
+/**
+ * Correlation window: a derive-class action counts as grounded by a query only
+ * if that query was minted within this window before it.
+ *
+ * The VALUE is borrowed from ADR-029 § 2's two-hour session window so this
+ * slice does not invent a second time constant. The DECISION to treat that
+ * span as a grounding-validity window is this slice's own, not the ADR's —
+ * ADR-029 § 2 defines a session-GROUPING heuristic for the recall metric, which
+ * is a different question, and it should not be cited as authority for this
+ * choice. Owned here as a design call: a shorter window would be a strictly
+ * harder test of the same claim, and the value is pinned so the pre-registered
+ * threshold is evaluated against a fixed rule rather than a tunable one.
+ *
+ * Note that consume-on-use (see `record.ts`) does most of the real work: the
+ * window bounds how STALE a grounding may be, but a query grounds only one
+ * derive regardless, so a generous window cannot inflate the numerator.
+ */
+export const QBD_CORRELATION_WINDOW_MS = 2 * 60 * 60 * 1000;
+/**
+ * Tolerance for clock jitter between minting an ID and stamping the row's
+ * `timestamp`. These happen microseconds apart in the same function, so this is
+ * generous; it exists so a coarse clock or a slow filesystem never manufactures
+ * a spurious schema violation.
+ */
+export const QBD_MINT_TOLERANCE_MS = 2000;
+/** Structural shape of a QBD correlation ID. */
+const QBD_ID_PATTERN = /^qbd1-([0-9a-z]{1,11})-[0-9a-f]{16}$/;
+/**
+ * Largest instant a `Date` can represent (±8.64e15 ms). The ID pattern admits
+ * up to 11 base36 digits, i.e. ~1.3e17 — comfortably past this bound.
+ *
+ * That gap was a crash, not a cosmetic issue: an ID like
+ * `qbd1-zzzzzzzzzzz-<16 hex>` decoded to a finite, non-negative number, passed
+ * every guard, and then reached `new Date(mintedAtMs).toISOString()` in a
+ * violation-detail string, which throws `RangeError`. Those details are built
+ * inside `LedgerEventSchema`'s refinement, and Zod does NOT trap throws from
+ * refinements — so `safeParse` threw rather than returning a failure, and one
+ * forged line killed the entire scan. Reject the ID before any `Date` sees it.
+ */
+const MAX_TIME_VALUE_MS = 8.64e15;
+// ─── Mint ───────────────────────────────────────────────
+/**
+ * Mint a correlation ID stamped with `mintedAtMs`.
+ *
+ * Callers MUST pass the same instant they stamp on the event row — see
+ * `record.ts`, which derives both from one `Date.now()` read. Every writer path
+ * in this slice goes through that module precisely so the two cannot drift.
+ */
+export function mintQbdCorrelationId(mintedAtMs) {
+    if (!Number.isFinite(mintedAtMs) || mintedAtMs < 0 || mintedAtMs > MAX_TIME_VALUE_MS) {
+        throw new RangeError(`mintQbdCorrelationId: invalid mint instant ${String(mintedAtMs)}`);
+    }
+    const stamp = Math.floor(mintedAtMs).toString(MINT_RADIX);
+    const random = crypto.randomBytes(QBD_ID_RANDOM_BYTES).toString('hex');
+    return `${QBD_ID_PREFIX}-${stamp}-${random}`;
+}
+/**
+ * Decode the mint instant embedded in a correlation ID.
+ * Returns `undefined` when the ID is not a well-formed QBD ID.
+ */
+export function decodeQbdMintInstant(id) {
+    const match = QBD_ID_PATTERN.exec(id);
+    if (match === null)
+        return undefined;
+    const decoded = parseInt(match[1], MINT_RADIX);
+    // The upper bound is load-bearing, not defensive: past it, every downstream
+    // `new Date(...)` throws. Returning `undefined` routes such an ID to
+    // `undecodable-mint-instant`, which is counted and degrades the read — a data
+    // point rather than a crash.
+    if (!Number.isFinite(decoded) || decoded < 0 || decoded > MAX_TIME_VALUE_MS)
+        return undefined;
+    return decoded;
+}
+// ─── Validate (the anti-backfill contract) ──────────────
+/**
+ * The minted-at-write-time contract, enforced structurally.
+ *
+ * `eventType` is the ledger row's `type`; `eventMs` is `Date.parse(row.timestamp)`.
+ *
+ * - `corpus_query`: the ID must be minted at the row's own instant (± tolerance).
+ *   A query row is the ID's birth certificate; any other mint instant means the
+ *   ID was attached later.
+ * - `derive_action`: the ID must be minted at or before the derive (± tolerance)
+ *   and no earlier than one correlation window before it.
+ * - any other type: carrying the field at all is a violation.
+ */
+export function checkQbdCorrelationId(id, eventType, eventMs) {
+    // Self-contained on its own argument: callers inside this package already
+    // validate `eventMs`, but this is public API and the detail strings below
+    // feed it straight to `new Date(...)`. An unusable instant is a violation to
+    // report, never a throw to leak out of a validation function.
+    if (!Number.isFinite(eventMs) || Math.abs(eventMs) > MAX_TIME_VALUE_MS) {
+        return {
+            ok: false,
+            violation: 'undecodable-mint-instant',
+            detail: `event timestamp ${String(eventMs)} is not a usable instant`,
+        };
+    }
+    if (QBD_ID_PATTERN.exec(id) === null) {
+        return {
+            ok: false,
+            violation: 'malformed-shape',
+            detail: `'${id}' is not a qbd1-<base36 instant>-<16 hex> correlation ID`,
+        };
+    }
+    const mintedAtMs = decodeQbdMintInstant(id);
+    if (mintedAtMs === undefined) {
+        return {
+            ok: false,
+            violation: 'undecodable-mint-instant',
+            detail: `'${id}' has no readable mint instant`,
+        };
+    }
+    if (eventType === 'corpus_query') {
+        if (Math.abs(eventMs - mintedAtMs) > QBD_MINT_TOLERANCE_MS) {
+            return {
+                ok: false,
+                violation: 'query-id-not-self-minted',
+                detail: `query row stamped ${new Date(eventMs).toISOString()} carries an ID minted ${new Date(mintedAtMs).toISOString()} — a query event's ID is minted as the row is written, so this ID was attached after the fact`,
+            };
+        }
+        return { ok: true };
+    }
+    if (eventType === 'derive_action') {
+        if (mintedAtMs - eventMs > QBD_MINT_TOLERANCE_MS) {
+            return {
+                ok: false,
+                violation: 'derive-id-minted-after-derive',
+                detail: `derive row stamped ${new Date(eventMs).toISOString()} carries an ID minted ${new Date(mintedAtMs).toISOString()} — a query that had not happened yet cannot have grounded this derive`,
+            };
+        }
+        if (eventMs - mintedAtMs > QBD_CORRELATION_WINDOW_MS) {
+            return {
+                ok: false,
+                violation: 'derive-id-older-than-window',
+                detail: `derive row stamped ${new Date(eventMs).toISOString()} carries an ID minted ${new Date(mintedAtMs).toISOString()}, older than the ${QBD_CORRELATION_WINDOW_MS}ms correlation window`,
+            };
+        }
+        return { ok: true };
+    }
+    return {
+        ok: false,
+        violation: 'id-on-non-qbd-event',
+        detail: `event type '${eventType}' has no query→derive semantics but carries a qbd_correlation_id`,
+    };
+}
+//# sourceMappingURL=correlation-id.js.map

package/dist/qbd/correlation-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlation-id.js","sourceRoot":"","sources":["../../src/qbd/correlation-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,2DAA2D;AAE3D,iEAAiE;AACjE,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B,2DAA2D;AAC3D,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,2CAA2C;AAC3C,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAE1C,gDAAgD;AAChD,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAE9D;;;;;;;;;;;GAWG;AACH,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAqBlC,2DAA2D;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACrF,MAAM,IAAI,UAAU,CAAC,8CAA8C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,GAAG,aAAa,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,UAAU,CAAC,CAAC;IAChD,4EAA4E;IAC5E,qEAAqE;IACrE,8EAA8E;IAC9E,6BAA6B;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,iBAAiB;QAAE,OAAO,SAAS,CAAC;IAC9F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2DAA2D;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAU,EACV,SAAiB,EACjB,OAAe;IAEf,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,8DAA8D;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,iBAAiB,EAAE,CAAC;QACvE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,0BAA0B;YACrC,MAAM,EAAE,mBAAmB,MAAM,CAAC,OAAO,CAAC,0BAA0B;SACrE,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,iBAAiB;YAC5B,MAAM,EAAE,IAAI,EAAE,0DAA0D;SACzE,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,0BAA0B;YACrC,MAAM,EAAE,IAAI,EAAE,gCAAgC;SAC/C,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,qBAAqB,EAAE,CAAC;YAC3D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,SAAS,EAAE,0BAA0B;gBACrC,MAAM,EAAE,qBAAqB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,yBAAyB,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,+FAA+F;aACvN,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;QAClC,IAAI,UAAU,GAAG,OAAO,GAAG,qBAAqB,EAAE,CAAC;YACjD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,SAAS,EAAE,+BAA+B;gBAC1C,MAAM,EAAE,sBAAsB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,yBAAyB,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,uEAAuE;aAChM,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,GAAG,UAAU,GAAG,yBAAyB,EAAE,CAAC;YACrD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,SAAS,EAAE,6BAA6B;gBACxC,MAAM,EAAE,sBAAsB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,yBAAyB,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,oBAAoB,yBAAyB,uBAAuB;aAC7L,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,SAAS,EAAE,qBAAqB;QAChC,MAAM,EAAE,eAAe,SAAS,kEAAkE;KACnG,CAAC;AACJ,CAAC"}

package/dist/qbd/correlation-id.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=correlation-id.test.d.ts.map

package/dist/qbd/correlation-id.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlation-id.test.d.ts","sourceRoot":"","sources":["../../src/qbd/correlation-id.test.ts"],"names":[],"mappings":""}

package/dist/qbd/correlation-id.test.js

@@ -0,0 +1,136 @@
+import { describe, expect, it } from 'vitest';
+import { LedgerEventSchema } from '../ledger.js';
+import { checkQbdCorrelationId, decodeQbdMintInstant, mintQbdCorrelationId, QBD_CORRELATION_WINDOW_MS, QBD_MINT_TOLERANCE_MS, } from './correlation-id.js';
+const T0 = Date.parse('2026-07-28T12:00:00.000Z');
+describe('mintQbdCorrelationId', () => {
+    it('embeds the mint instant so the ID is self-dating', () => {
+        const id = mintQbdCorrelationId(T0);
+        expect(decodeQbdMintInstant(id)).toBe(T0);
+    });
+    it('is unique across calls at the same instant', () => {
+        const a = mintQbdCorrelationId(T0);
+        const b = mintQbdCorrelationId(T0);
+        expect(a).not.toBe(b);
+        expect(decodeQbdMintInstant(a)).toBe(decodeQbdMintInstant(b));
+    });
+    it('rejects a nonsense mint instant rather than emitting a bad ID', () => {
+        expect(() => mintQbdCorrelationId(Number.NaN)).toThrow(RangeError);
+        expect(() => mintQbdCorrelationId(-1)).toThrow(RangeError);
+    });
+    it('returns undefined decoding a non-QBD string', () => {
+        expect(decodeQbdMintInstant('not-an-id')).toBeUndefined();
+        expect(decodeQbdMintInstant('550e8400-e29b-41d4-a716-446655440000')).toBeUndefined();
+    });
+    it('returns undefined for an instant past the max Date value', () => {
+        // The ID pattern admits 11 base36 digits (~1.3e17), well past 8.64e15.
+        // Decoding must refuse rather than hand a poison number downstream, where
+        // every `new Date(...)` would throw.
+        expect(decodeQbdMintInstant(`qbd1-zzzzzzzzzzz-${'a'.repeat(16)}`)).toBeUndefined();
+    });
+    it('refuses to MINT an instant past the max Date value', () => {
+        expect(() => mintQbdCorrelationId(8.64e15 + 1)).toThrow(RangeError);
+    });
+});
+describe('checkQbdCorrelationId — the minted-at-write-time contract', () => {
+    it('accepts a query ID minted at its own row instant', () => {
+        const id = mintQbdCorrelationId(T0);
+        expect(checkQbdCorrelationId(id, 'corpus_query', T0).ok).toBe(true);
+    });
+    it('REJECTS a query row whose ID was minted earlier — the backfill shape', () => {
+        // The falsifier-2 case: an ID minted at some past moment, attached later to
+        // a query row that was already on disk.
+        const id = mintQbdCorrelationId(T0 - 60_000);
+        const result = checkQbdCorrelationId(id, 'corpus_query', T0);
+        expect(result.ok).toBe(false);
+        expect(result.violation).toBe('query-id-not-self-minted');
+    });
+    it('accepts a derive ID minted earlier, inside the correlation window', () => {
+        const id = mintQbdCorrelationId(T0 - 60_000);
+        expect(checkQbdCorrelationId(id, 'derive_action', T0).ok).toBe(true);
+    });
+    it('REJECTS a derive ID minted after the derive it claims to have grounded', () => {
+        const id = mintQbdCorrelationId(T0 + 60_000);
+        const result = checkQbdCorrelationId(id, 'derive_action', T0);
+        expect(result.ok).toBe(false);
+        expect(result.violation).toBe('derive-id-minted-after-derive');
+    });
+    it('REJECTS a derive ID older than the correlation window', () => {
+        const id = mintQbdCorrelationId(T0 - QBD_CORRELATION_WINDOW_MS - 1000);
+        const result = checkQbdCorrelationId(id, 'derive_action', T0);
+        expect(result.ok).toBe(false);
+        expect(result.violation).toBe('derive-id-older-than-window');
+    });
+    it('tolerates sub-tolerance clock jitter on a query row', () => {
+        const id = mintQbdCorrelationId(T0 - (QBD_MINT_TOLERANCE_MS - 1));
+        expect(checkQbdCorrelationId(id, 'corpus_query', T0).ok).toBe(true);
+    });
+    it('reports an out-of-range ID as undecodable rather than throwing', () => {
+        const result = checkQbdCorrelationId(`qbd1-zzzzzzzzzzz-${'a'.repeat(16)}`, 'derive_action', T0);
+        expect(result.ok).toBe(false);
+        expect(result.violation).toBe('undecodable-mint-instant');
+    });
+    it('reports an unusable EVENT timestamp rather than throwing (public API)', () => {
+        const id = mintQbdCorrelationId(T0);
+        expect(checkQbdCorrelationId(id, 'derive_action', Number.NaN).ok).toBe(false);
+        expect(checkQbdCorrelationId(id, 'derive_action', Number.POSITIVE_INFINITY).ok).toBe(false);
+    });
+    it('REJECTS a malformed ID', () => {
+        const result = checkQbdCorrelationId('qbd1-nope', 'corpus_query', T0);
+        expect(result.ok).toBe(false);
+        expect(result.violation).toBe('malformed-shape');
+    });
+    it('REJECTS the field on an event type with no query→derive semantics', () => {
+        const id = mintQbdCorrelationId(T0);
+        const result = checkQbdCorrelationId(id, 'mcp_call', T0);
+        expect(result.ok).toBe(false);
+        expect(result.violation).toBe('id-on-non-qbd-event');
+    });
+});
+describe('LedgerEventSchema enforces the contract at the schema layer', () => {
+    const baseRow = {
+        timestamp: new Date(T0).toISOString(),
+        type: 'derive_action',
+        activity_name: 'spec',
+        source: 'lint',
+        justification: '',
+    };
+    it('parses a contract-valid correlated derive row', () => {
+        const row = { ...baseRow, qbd_correlation_id: mintQbdCorrelationId(T0 - 60_000) };
+        expect(LedgerEventSchema.safeParse(row).success).toBe(true);
+    });
+    it('parses an UNcorrelated derive row — it is a data point, not an error', () => {
+        // Falsifier 1: a derive with no query behind it must survive parsing so it
+        // can land in the denominator.
+        expect(LedgerEventSchema.safeParse(baseRow).success).toBe(true);
+    });
+    it('REJECTS a backfilled ID — a schema violation, not a data point', () => {
+        const row = { ...baseRow, qbd_correlation_id: mintQbdCorrelationId(T0 + 60_000) };
+        const result = LedgerEventSchema.safeParse(row);
+        expect(result.success).toBe(false);
+        if (!result.success) {
+            expect(result.error.issues[0]?.message).toContain('derive-id-minted-after-derive');
+        }
+    });
+    it('REJECTS a correlation ID stapled onto an unrelated event type', () => {
+        const row = {
+            timestamp: new Date(T0).toISOString(),
+            type: 'mcp_call',
+            source: 'bot',
+            justification: '',
+            qbd_correlation_id: mintQbdCorrelationId(T0),
+        };
+        expect(LedgerEventSchema.safeParse(row).success).toBe(false);
+    });
+    it('leaves pre-existing event types untouched', () => {
+        const legacy = {
+            timestamp: new Date(T0).toISOString(),
+            type: 'suppress',
+            ruleId: 'abc123',
+            file: 'packages/core/src/logger.ts',
+            source: 'lint',
+            justification: 'logger module',
+        };
+        expect(LedgerEventSchema.safeParse(legacy).success).toBe(true);
+    });
+});
+//# sourceMappingURL=correlation-id.test.js.map

package/dist/qbd/correlation-id.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlation-id.test.js","sourceRoot":"","sources":["../../src/qbd/correlation-id.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAElD,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1D,MAAM,CAAC,oBAAoB,CAAC,sCAAsC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,uEAAuE;QACvE,0EAA0E;QAC1E,qCAAqC;QACrC,MAAM,CAAC,oBAAoB,CAAC,oBAAoB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACzE,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,4EAA4E;QAC5E,wCAAwC;QACxC,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,GAAG,yBAAyB,GAAG,IAAI,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,GAAG,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,qBAAqB,CAAC,oBAAoB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,MAAM,OAAO,GAAG;QACd,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;QACrC,IAAI,EAAE,eAAwB;QAC9B,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,MAAe;QACvB,aAAa,EAAE,EAAE;KAClB,CAAC;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QAClF,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,2EAA2E;QAC3E,+BAA+B;QAC/B,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QAClF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACrF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;YACrC,IAAI,EAAE,UAAmB;YACzB,MAAM,EAAE,KAAc;YACtB,aAAa,EAAE,EAAE;YACjB,kBAAkB,EAAE,oBAAoB,CAAC,EAAE,CAAC;SAC7C,CAAC;QACF,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;YACrC,IAAI,EAAE,UAAmB;YACzB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,6BAA6B;YACnC,MAAM,EAAE,MAAe;YACvB,aAAa,EAAE,eAAe;SAC/B,CAAC;QACF,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}