@mmnto/totem 1.118.0 → 1.119.0

package/dist/artifacts/admission.d.ts

@@ -56,13 +56,13 @@ export declare const AdmissionScopeSchema: z.ZodObject<{
     head: z.ZodNullable<z.ZodString>;
     selectorForm: z.ZodNullable<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
-    head: string | null;
     source: "explicit-range" | "staged" | "uncommitted" | "branch-vs-base" | "none";
+    head: string | null;
     base: string | null;
     selectorForm: string | null;
 }, {
-    head: string | null;
     source: "explicit-range" | "staged" | "uncommitted" | "branch-vs-base" | "none";
+    head: string | null;
     base: string | null;
     selectorForm: string | null;
 }>;
@@ -124,13 +124,13 @@ export declare const AdmissionRecordSchema: z.ZodObject<{
         head: z.ZodNullable<z.ZodString>;
         selectorForm: z.ZodNullable<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        head: string | null;
         source: "explicit-range" | "staged" | "uncommitted" | "branch-vs-base" | "none";
+        head: string | null;
         base: string | null;
         selectorForm: string | null;
     }, {
-        head: string | null;
         source: "explicit-range" | "staged" | "uncommitted" | "branch-vs-base" | "none";
+        head: string | null;
         base: string | null;
         selectorForm: string | null;
     }>;
@@ -149,29 +149,29 @@ export declare const AdmissionRecordSchema: z.ZodObject<{
     skippedFileCount: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
     createdAt: string;
-    reason: "no-diff" | "all-non-code" | "filtered-empty" | "all-generated";
-    schemaVersion: string;
-    inputHash: string;
     scope: {
-        head: string | null;
         source: "explicit-range" | "staged" | "uncommitted" | "branch-vs-base" | "none";
+        head: string | null;
         base: string | null;
         selectorForm: string | null;
     };
+    reason: "no-diff" | "all-non-code" | "filtered-empty" | "all-generated";
+    schemaVersion: string;
+    inputHash: string;
     disposition: "not-applicable";
     projectionPolicyHash: string;
     skippedFileCount: number;
 }, {
     createdAt: string;
-    reason: "no-diff" | "all-non-code" | "filtered-empty" | "all-generated";
-    schemaVersion: string;
-    inputHash: string;
     scope: {
-        head: string | null;
         source: "explicit-range" | "staged" | "uncommitted" | "branch-vs-base" | "none";
+        head: string | null;
         base: string | null;
         selectorForm: string | null;
     };
+    reason: "no-diff" | "all-non-code" | "filtered-empty" | "all-generated";
+    schemaVersion: string;
+    inputHash: string;
     disposition: "not-applicable";
     projectionPolicyHash: string;
     skippedFileCount: number;

package/dist/artifacts/verdict.d.ts

@@ -76,13 +76,13 @@ export declare const VerdictDiffScopeSchema: z.ZodDiscriminatedUnion<"source", [
     base: z.ZodString;
     head: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    head: string;
     source: "explicit-range";
+    head: string;
     diffHash: string;
     base: string;
 }, {
-    head: string;
     source: "explicit-range";
+    head: string;
     diffHash: string;
     base: string;
 }>, z.ZodObject<{
@@ -319,14 +319,14 @@ export declare const VerdictFindingSchema: z.ZodObject<{
     message: string;
     severity: "CRITICAL" | "WARN" | "INFO";
     confidence?: number | undefined;
-    file?: string | undefined;
     line?: number | undefined;
+    file?: string | undefined;
 }, {
     message: string;
     severity: "CRITICAL" | "WARN" | "INFO";
     confidence?: number | undefined;
-    file?: string | undefined;
     line?: number | undefined;
+    file?: string | undefined;
 }>;
 export type VerdictFinding = z.infer<typeof VerdictFindingSchema>;
 /**
@@ -522,13 +522,13 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
         base: z.ZodString;
         head: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        head: string;
         source: "explicit-range";
+        head: string;
         diffHash: string;
         base: string;
     }, {
-        head: string;
         source: "explicit-range";
+        head: string;
         diffHash: string;
         base: string;
     }>, z.ZodObject<{
@@ -704,14 +704,14 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
         message: string;
         severity: "CRITICAL" | "WARN" | "INFO";
         confidence?: number | undefined;
-        file?: string | undefined;
         line?: number | undefined;
+        file?: string | undefined;
     }, {
         message: string;
         severity: "CRITICAL" | "WARN" | "INFO";
         confidence?: number | undefined;
-        file?: string | undefined;
         line?: number | undefined;
+        file?: string | undefined;
     }>, "many">;
     /** A SINGLE top-level panel-diversity summary (classifyDiversity output) — present only with a panel; NEVER mirrored per finding. */
     diversity: z.ZodOptional<z.ZodObject<{
@@ -806,8 +806,8 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     createdAt: string;
     diffScope: {
-        head: string;
         source: "explicit-range";
+        head: string;
         diffHash: string;
         base: string;
     } | {
@@ -850,8 +850,8 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
         message: string;
         severity: "CRITICAL" | "WARN" | "INFO";
         confidence?: number | undefined;
-        file?: string | undefined;
         line?: number | undefined;
+        file?: string | undefined;
     }[];
     attemptedLaneCount: number;
     completedLaneCount: number;
@@ -887,8 +887,8 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
 }, {
     createdAt: string;
     diffScope: {
-        head: string;
         source: "explicit-range";
+        head: string;
         diffHash: string;
         base: string;
     } | {
@@ -931,8 +931,8 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
         message: string;
         severity: "CRITICAL" | "WARN" | "INFO";
         confidence?: number | undefined;
-        file?: string | undefined;
         line?: number | undefined;
+        file?: string | undefined;
     }[];
     attemptedLaneCount: number;
     completedLaneCount: number;
@@ -968,8 +968,8 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
 }>, {
     createdAt: string;
     diffScope: {
-        head: string;
         source: "explicit-range";
+        head: string;
         diffHash: string;
         base: string;
     } | {
@@ -1012,8 +1012,8 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
         message: string;
         severity: "CRITICAL" | "WARN" | "INFO";
         confidence?: number | undefined;
-        file?: string | undefined;
         line?: number | undefined;
+        file?: string | undefined;
     }[];
     attemptedLaneCount: number;
     completedLaneCount: number;
@@ -1049,8 +1049,8 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
 }, {
     createdAt: string;
     diffScope: {
-        head: string;
         source: "explicit-range";
+        head: string;
         diffHash: string;
         base: string;
     } | {
@@ -1093,8 +1093,8 @@ export declare const VerdictArtifactSchema: z.ZodEffects<z.ZodObject<{
         message: string;
         severity: "CRITICAL" | "WARN" | "INFO";
         confidence?: number | undefined;
-        file?: string | undefined;
         line?: number | undefined;
+        file?: string | undefined;
     }[];
     attemptedLaneCount: number;
     completedLaneCount: number;

package/dist/compile-manifest.d.ts

@@ -6,6 +6,18 @@ export declare const CompileManifestSchema: z.ZodObject<{
     output_hash: z.ZodString;
     rule_count: z.ZodNumber;
     compile_worker_fingerprint: z.ZodOptional<z.ZodString>;
+    /**
+     * Prop 310 § Design 1 — the aggregate attestation over the RECORD file class
+     * (`<totemDir>/rules/**\/*.rule.yaml`), computed by `generateRecordsHash`.
+     *
+     * OPTIONAL, per the slice-3 OQ-3 ruling: absence is legal IFF zero record files
+     * exist on disk (the state every pre-Prop-310 manifest is in), so no shipped
+     * manifest needs a hand-edit and downstream manifests keep verifying. The first
+     * record landing forces attestation — `verify-manifest` hard-FAILS on records
+     * present with no `records_hash` ("unattested file class"), and hard-FAILS on a
+     * mismatch. Neither ever takes the freeze WARN-downgrade, which is input-hash-only.
+     */
+    records_hash: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     model: string;
     compiled_at: string;
@@ -13,6 +25,7 @@ export declare const CompileManifestSchema: z.ZodObject<{
     output_hash: string;
     rule_count: number;
     compile_worker_fingerprint?: string | undefined;
+    records_hash?: string | undefined;
 }, {
     model: string;
     compiled_at: string;
@@ -20,6 +33,7 @@ export declare const CompileManifestSchema: z.ZodObject<{
     output_hash: string;
     rule_count: number;
     compile_worker_fingerprint?: string | undefined;
+    records_hash?: string | undefined;
 }>;
 export type CompileManifest = z.infer<typeof CompileManifestSchema>;
 /**
@@ -40,6 +54,81 @@ export type CompileManifest = z.infer<typeof CompileManifestSchema>;
  * so the default no-arg form is byte-for-byte unchanged.
  */
 export declare function generateInputHash(lessonsDir: string, repoCwd?: string): string;
+/** `.totem`-relative directory the Prop 310 rule records live in (§ Design 1). */
+export declare const RECORDS_DIR_REL = "rules";
+/** The double extension § Design 1 rules: `*.rule.yaml`, never a bare `*.yaml`. */
+export declare const RECORD_FILE_SUFFIX = ".rule.yaml";
+/**
+ * The `records_hash` of an EMPTY record set — sha256 over nothing, the value
+ * `generateRecordsHash` returns when `<totemDir>/rules/` is absent or holds no
+ * `*.rule.yaml`. COMPUTED, never a transcribed literal: a hand-copied digest is a
+ * mirror that can be typo'd, and this constant is what the OQ-3 "records: none"
+ * verdict and the cross-platform stability test both bind to.
+ */
+export declare const EMPTY_RECORDS_HASH: string;
+/**
+ * Enumerate the record files under `rulesDir`, sorted, '/'-separated, restricted
+ * to the git-tracked set when `repoCwd` resolves inside a repo (the same
+ * producer/consumer symmetry `generateInputHash` documents). Returns `[]` when the
+ * directory does not exist — an absent record class is the pre-Prop-310 state, not
+ * an error, which is the one place this differs from the lesson class.
+ *
+ * GIT-TRACKED, not "on disk": inside a repo an UNTRACKED `*.rule.yaml` is neither
+ * hashed nor counted, exactly as an untracked lesson is not. That is what keeps a
+ * draft record from diverging the attestation and blocking an unrelated push — and
+ * it is why every surface that reports on this class says "git-tracked" rather
+ * than "on disk". Outside a repo (or when git is unavailable) the restriction
+ * degrades to the plain fs walk, so the no-`repoCwd` form stays pure.
+ *
+ * Prefer `listRecordFilesUnder(totemDir, repoCwd)` at call sites that hold a
+ * `.totem` dir: it single-homes the `rules/` join with `attestRecordsHash`.
+ */
+export declare function listRecordFiles(rulesDir: string, repoCwd?: string): string[];
+/**
+ * Generate the deterministic sha256 attestation over the Prop 310 record file
+ * class — the same rolling `${relPath}\n${lfContent}\n` method `generateInputHash`
+ * uses over lessons, so the two attestations are path-AND-content sensitive in
+ * exactly the same way: one edited byte, one added, removed, or renamed record all
+ * move it. Absent directory ⇒ `EMPTY_RECORDS_HASH`.
+ */
+export declare function generateRecordsHash(rulesDir: string, repoCwd?: string): string;
+/**
+ * The ONE call every `writeCompileManifest` caller makes to attest the record
+ * class, given the `.totem` directory. Single-homed so six writer sites cannot
+ * disagree about where records live or how they are hashed (Tenet 20).
+ */
+export declare function attestRecordsHash(totemDir: string, repoCwd?: string): string;
+/**
+ * The record files the attestation covers, given the `.totem` dir — the READ-side
+ * twin of `attestRecordsHash`, over exactly the same directory and exactly the
+ * same tracked-set restriction.
+ *
+ * `verify-manifest` and `compile --refresh-manifest` need the COUNT, not the hash,
+ * to decide the OQ-3 verdict ("absent `records_hash` is OK iff zero records"), and
+ * they must be asking about the same set the writer hashed. Deciding it by
+ * comparing against `EMPTY_RECORDS_HASH` would infer a file count from a digest;
+ * re-deriving the directory at each call site would give the two surfaces two
+ * chances to disagree.
+ */
+export declare function listRecordFilesUnder(totemDir: string, repoCwd?: string): string[];
+/**
+ * The OQ-3 freshness predicate: is a manifest's `records_hash` still an honest
+ * statement about the record class on disk?
+ *
+ * TRUE when the field is ABSENT and zero git-tracked records exist (the
+ * pre-Prop-310 state the ruling keeps legal), or when it is PRESENT and equals
+ * the current attestation. FALSE otherwise — which is exactly the pair of
+ * conditions `verify-manifest` hard-FAILs on ("unattested file class" and
+ * "records hash mismatch").
+ *
+ * Single-homed because THREE surfaces have to agree about it: the verifier, the
+ * `--refresh-manifest` no-LLM path, and the ordinary compile no-op path. Two of
+ * them re-deriving the rule independently is how a writer comes to think a
+ * manifest is fresh that the verifier then rejects — the exact divergence bot
+ * round 1 found (B-1), where a record-only change left the no-op path convinced
+ * nothing needed rewriting.
+ */
+export declare function isRecordsAttestationFresh(existingRecordsHash: string | undefined, totemDir: string, repoCwd?: string): boolean;
 /**
  * Recursively shape an object tree so every nested record's keys are sorted
  * lexicographically and `undefined` properties are dropped. Pure data

package/dist/compile-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compile-manifest.d.ts","sourceRoot":"","sources":["../src/compile-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;EAUhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AA8BpE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CA8B9E;AAmDD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAUxD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAyB1E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAuC5D;AAMD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,IAAI,CAW1F;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,CA6BzE"}
+{"version":3,"file":"compile-manifest.d.ts","sourceRoot":"","sources":["../src/compile-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,qBAAqB;;;;;;;IAUhC;;;;;;;;;;OAUG;;;;;;;;;;;;;;;;;;EAEH,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAgGpE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAS9E;AAID,kFAAkF;AAClF,eAAO,MAAM,eAAe,UAAU,CAAC;AAEvC,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,QAA4C,CAAC;AAE5E;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAO5E;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ9E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5E;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CACvC,mBAAmB,EAAE,MAAM,GAAG,SAAS,EACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAKT;AAmDD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAUxD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAyB1E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAuC5D;AAMD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,IAAI,CAW1F;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,CA6BzE"}

package/dist/compile-manifest.js

@@ -16,29 +16,95 @@ export const CompileManifestSchema = z.object({
     // Optional for backward-compat with pre-#1937 manifests; only the anthropic
     // provider populates it in Phase 1. Per Proposal 278 § Action 3.
     compile_worker_fingerprint: z.string().optional(),
+    /**
+     * Prop 310 § Design 1 — the aggregate attestation over the RECORD file class
+     * (`<totemDir>/rules/**\/*.rule.yaml`), computed by `generateRecordsHash`.
+     *
+     * OPTIONAL, per the slice-3 OQ-3 ruling: absence is legal IFF zero record files
+     * exist on disk (the state every pre-Prop-310 manifest is in), so no shipped
+     * manifest needs a hand-edit and downstream manifests keep verifying. The first
+     * record landing forces attestation — `verify-manifest` hard-FAILS on records
+     * present with no `records_hash` ("unattested file class"), and hard-FAILS on a
+     * mismatch. Neither ever takes the freeze WARN-downgrade, which is input-hash-only.
+     */
+    records_hash: z.string().optional(),
 });
 // ─── Hashing ─────────────────────────────────────────
 /**
- * Walk a directory recursively and collect all `.md` file paths
- * relative to `baseDir`, sorted alphabetically.
+ * Walk a directory recursively and collect every file path ending in `suffix`,
+ * relative to `baseDir`, '/'-separated. UNSORTED (callers sort).
+ *
+ * Generalised from the `.md`-only walk by Prop 310 slice 3 so the record file
+ * class (`*.rule.yaml`) is attested by the SAME collector the lesson class uses —
+ * a second walk would be the mirror that silently drifts on the next fix. The
+ * missing-directory throw is the lesson class's contract and is kept exactly:
+ * `collectMdFiles` is the thin wrapper below, so `generateInputHash` is unchanged.
  */
-function collectMdFiles(baseDir, currentDir = baseDir) {
-    if (!fs.existsSync(baseDir)) {
-        throw new TotemParseError(`Lessons directory not found: ${baseDir}`, 'Run "totem sync" or create .totem/lessons/ with lesson files.');
-    }
+function collectFilesWithSuffix(baseDir, suffix, currentDir = baseDir) {
     const entries = fs.readdirSync(currentDir, { withFileTypes: true });
     const results = [];
     for (const entry of entries) {
         const fullPath = path.join(currentDir, entry.name);
         if (entry.isDirectory()) {
-            results.push(...collectMdFiles(baseDir, fullPath));
+            results.push(...collectFilesWithSuffix(baseDir, suffix, fullPath));
         }
-        else if (entry.isFile() && entry.name.endsWith('.md')) {
+        else if (entry.isFile() && entry.name.endsWith(suffix)) {
             results.push(path.relative(baseDir, fullPath).replace(/\\/g, '/'));
         }
     }
     return results;
 }
+/**
+ * Walk a directory recursively and collect all `.md` file paths
+ * relative to `baseDir`, sorted alphabetically.
+ */
+function collectMdFiles(baseDir) {
+    if (!fs.existsSync(baseDir)) {
+        throw new TotemParseError(`Lessons directory not found: ${baseDir}`, 'Run "totem sync" or create .totem/lessons/ with lesson files.');
+    }
+    return collectFilesWithSuffix(baseDir, '.md');
+}
+/**
+ * Restrict a collected relative-path list to the git-tracked subset when
+ * `repoCwd` resolves inside a git repository; outside one (or when git is
+ * unavailable) the list passes through unchanged.
+ *
+ * Single-homed across both hashed file classes so lessons and records can never
+ * disagree about what "tracked" means (see `generateInputHash`'s own note for
+ * why tracked-only is the producer/consumer-symmetric answer).
+ */
+function restrictToTracked(files, baseDir, repoCwd) {
+    if (repoCwd === undefined)
+        return files;
+    const tracked = listTrackedFilesUnder(repoCwd, baseDir);
+    if (tracked === null)
+        return files;
+    // Both collectors and `listTrackedFilesUnder` emit '/'-separated paths, so the
+    // membership test already agrees cross-platform. Normalize the comparison key
+    // anyway so this filter never silently depends on a distant function preserving
+    // that invariant — a no-op on forward-slash input.
+    return files.filter((relPath) => tracked.has(relPath.replace(/\\/g, '/')));
+}
+/**
+ * Roll a deterministic sha256 over `${relPath}\n${lfContent}\n` for each file, in
+ * the given order. The one hashing method both attested file classes use.
+ */
+function rollingContentHash(baseDir, files, onReadError) {
+    const hash = crypto.createHash('sha256');
+    for (const relPath of files) {
+        try {
+            const content = fs.readFileSync(path.join(baseDir, relPath), 'utf-8').replace(/\r\n/g, '\n');
+            hash.update(`${relPath}\n${content}\n`);
+        }
+        catch (err) {
+            // `throw`n, not merely called: `onReadError` returns `never`, and writing the
+            // throw here keeps this catch visibly non-swallowing (Tenet 4) instead of
+            // hiding the rethrow behind a callback.
+            throw onReadError(relPath, err);
+        }
+    }
+    return hash.digest('hex');
+}
 /**
  * Generate a deterministic SHA-256 hash of `.md` lesson files in a directory.
  *
@@ -57,30 +123,113 @@ function collectMdFiles(baseDir, currentDir = baseDir) {
  * so the default no-arg form is byte-for-byte unchanged.
  */
 export function generateInputHash(lessonsDir, repoCwd) {
-    let files = collectMdFiles(lessonsDir).sort();
-    if (repoCwd !== undefined) {
-        const tracked = listTrackedFilesUnder(repoCwd, lessonsDir);
-        if (tracked !== null) {
-            // collectMdFiles and listTrackedFilesUnder both emit '/'-separated paths,
-            // so the membership test already agrees cross-platform. Normalize the
-            // comparison key anyway so this filter never silently depends on a distant
-            // function preserving that invariant — a no-op on forward-slash input.
-            files = files.filter((relPath) => tracked.has(relPath.replace(/\\/g, '/')));
-        }
-    }
-    const hash = crypto.createHash('sha256');
-    for (const relPath of files) {
-        try {
-            const content = fs
-                .readFileSync(path.join(lessonsDir, relPath), 'utf-8')
-                .replace(/\r\n/g, '\n');
-            hash.update(`${relPath}\n${content}\n`);
-        }
-        catch (err) {
-            throw new TotemParseError(`Cannot read lesson file ${relPath}: ${getErrorMessage(err)}`, 'Ensure all lesson files in .totem/lessons/ are readable.', err);
-        }
+    const files = restrictToTracked(collectMdFiles(lessonsDir).sort(), lessonsDir, repoCwd);
+    return rollingContentHash(lessonsDir, files, (relPath, err) => {
+        throw new TotemParseError(`Cannot read lesson file ${relPath}: ${getErrorMessage(err)}`, 'Ensure all lesson files in .totem/lessons/ are readable.', err);
+    });
+}
+// ─── Prop 310 § Design 1 — the RECORD file class ─────────────────────────────
+/** `.totem`-relative directory the Prop 310 rule records live in (§ Design 1). */
+export const RECORDS_DIR_REL = 'rules';
+/** The double extension § Design 1 rules: `*.rule.yaml`, never a bare `*.yaml`. */
+export const RECORD_FILE_SUFFIX = '.rule.yaml';
+/**
+ * The `records_hash` of an EMPTY record set — sha256 over nothing, the value
+ * `generateRecordsHash` returns when `<totemDir>/rules/` is absent or holds no
+ * `*.rule.yaml`. COMPUTED, never a transcribed literal: a hand-copied digest is a
+ * mirror that can be typo'd, and this constant is what the OQ-3 "records: none"
+ * verdict and the cross-platform stability test both bind to.
+ */
+export const EMPTY_RECORDS_HASH = crypto.createHash('sha256').digest('hex');
+/**
+ * Enumerate the record files under `rulesDir`, sorted, '/'-separated, restricted
+ * to the git-tracked set when `repoCwd` resolves inside a repo (the same
+ * producer/consumer symmetry `generateInputHash` documents). Returns `[]` when the
+ * directory does not exist — an absent record class is the pre-Prop-310 state, not
+ * an error, which is the one place this differs from the lesson class.
+ *
+ * GIT-TRACKED, not "on disk": inside a repo an UNTRACKED `*.rule.yaml` is neither
+ * hashed nor counted, exactly as an untracked lesson is not. That is what keeps a
+ * draft record from diverging the attestation and blocking an unrelated push — and
+ * it is why every surface that reports on this class says "git-tracked" rather
+ * than "on disk". Outside a repo (or when git is unavailable) the restriction
+ * degrades to the plain fs walk, so the no-`repoCwd` form stays pure.
+ *
+ * Prefer `listRecordFilesUnder(totemDir, repoCwd)` at call sites that hold a
+ * `.totem` dir: it single-homes the `rules/` join with `attestRecordsHash`.
+ */
+export function listRecordFiles(rulesDir, repoCwd) {
+    if (!fs.existsSync(rulesDir))
+        return [];
+    return restrictToTracked(collectFilesWithSuffix(rulesDir, RECORD_FILE_SUFFIX).sort(), rulesDir, repoCwd);
+}
+/**
+ * Generate the deterministic sha256 attestation over the Prop 310 record file
+ * class — the same rolling `${relPath}\n${lfContent}\n` method `generateInputHash`
+ * uses over lessons, so the two attestations are path-AND-content sensitive in
+ * exactly the same way: one edited byte, one added, removed, or renamed record all
+ * move it. Absent directory ⇒ `EMPTY_RECORDS_HASH`.
+ */
+export function generateRecordsHash(rulesDir, repoCwd) {
+    return rollingContentHash(rulesDir, listRecordFiles(rulesDir, repoCwd), (relPath, err) => {
+        throw new TotemParseError(`Cannot read rule record ${relPath}: ${getErrorMessage(err)}`, `Ensure all record files in ${RECORDS_DIR_REL}/ are readable.`, err);
+    });
+}
+/**
+ * The ONE call every `writeCompileManifest` caller makes to attest the record
+ * class, given the `.totem` directory. Single-homed so six writer sites cannot
+ * disagree about where records live or how they are hashed (Tenet 20).
+ */
+export function attestRecordsHash(totemDir, repoCwd) {
+    return generateRecordsHash(recordsDirOf(totemDir), repoCwd);
+}
+/**
+ * The record directory for a `.totem` dir — the ONE home of the
+ * `join(totemDir, RECORDS_DIR_REL)` join. Kept private on purpose: callers ask
+ * `attestRecordsHash` for the hash and `listRecordFilesUnder` for the file set, so
+ * neither the writer nor the verifier re-derives the path and they cannot drift
+ * apart about where records live (Tenet 20).
+ */
+function recordsDirOf(totemDir) {
+    return path.join(totemDir, RECORDS_DIR_REL);
+}
+/**
+ * The record files the attestation covers, given the `.totem` dir — the READ-side
+ * twin of `attestRecordsHash`, over exactly the same directory and exactly the
+ * same tracked-set restriction.
+ *
+ * `verify-manifest` and `compile --refresh-manifest` need the COUNT, not the hash,
+ * to decide the OQ-3 verdict ("absent `records_hash` is OK iff zero records"), and
+ * they must be asking about the same set the writer hashed. Deciding it by
+ * comparing against `EMPTY_RECORDS_HASH` would infer a file count from a digest;
+ * re-deriving the directory at each call site would give the two surfaces two
+ * chances to disagree.
+ */
+export function listRecordFilesUnder(totemDir, repoCwd) {
+    return listRecordFiles(recordsDirOf(totemDir), repoCwd);
+}
+/**
+ * The OQ-3 freshness predicate: is a manifest's `records_hash` still an honest
+ * statement about the record class on disk?
+ *
+ * TRUE when the field is ABSENT and zero git-tracked records exist (the
+ * pre-Prop-310 state the ruling keeps legal), or when it is PRESENT and equals
+ * the current attestation. FALSE otherwise — which is exactly the pair of
+ * conditions `verify-manifest` hard-FAILs on ("unattested file class" and
+ * "records hash mismatch").
+ *
+ * Single-homed because THREE surfaces have to agree about it: the verifier, the
+ * `--refresh-manifest` no-LLM path, and the ordinary compile no-op path. Two of
+ * them re-deriving the rule independently is how a writer comes to think a
+ * manifest is fresh that the verifier then rejects — the exact divergence bot
+ * round 1 found (B-1), where a record-only change left the no-op path convinced
+ * nothing needed rewriting.
+ */
+export function isRecordsAttestationFresh(existingRecordsHash, totemDir, repoCwd) {
+    if (existingRecordsHash === undefined) {
+        return listRecordFilesUnder(totemDir, repoCwd).length === 0;
     }
-    return hash.digest('hex');
+    return existingRecordsHash === attestRecordsHash(totemDir, repoCwd);
 }
 /**
  * Deterministic JSON stringify. Walks the input tree and sorts every

package/dist/compile-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"compile-manifest.js","sourceRoot":"","sources":["../src/compile-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,wDAAwD;AAExD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,sEAAsE;IACtE,4EAA4E;IAC5E,iEAAiE;IACjE,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAIH,wDAAwD;AAExD;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,aAAqB,OAAO;IACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CACvB,gCAAgC,OAAO,EAAE,EACzC,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,OAAgB;IACpE,IAAI,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,0EAA0E;YAC1E,sEAAsE;YACtE,2EAA2E;YAC3E,uEAAuE;YACvE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEzC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE;iBACf,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC;iBACrD,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACvB,2BAA2B,OAAO,KAAK,eAAe,CAAC,GAAG,CAAC,EAAE,EAC7D,0DAA0D,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH;;;;;GAKG;AACH,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,iBAAiB,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,SAAS;QACtC,GAAG,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,MAAe;IAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACvB,mDAAmD,EACnD,6MAA6M,CAC9M,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACtC,IAAI,EAAE,CAAC;IACV,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,OAAO,GAAG,GAAG,CAAC;QAClB,gEAAgE;QAChE,8DAA8D;QAC9D,6DAA6D;QAC7D,+DAA+D;QAC/D,wDAAwD;QACxD,8DAA8D;QAC9D,+DAA+D;QAC/D,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,2DAA2D;gBAC3D,iBAAiB;YACnB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CACvB,+BAA+B,SAAS,YAAY,EACpD,sDAAsD,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,+BAA+B,eAAe,CAAC,GAAG,CAAC,EAAE,EACrD,8BAA8B,SAAS,GAAG,EAC1C,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wDAAwD;AAExD,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAoB,EAAE,QAAyB;IAClF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACtD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,kCAAkC,eAAe,CAAC,GAAG,CAAC,EAAE,EACxD,+BAA+B,YAAY,GAAG,EAC9C,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC;YAAE,MAAM,GAAG,CAAC;QACjD,iDAAiD;QACjD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,eAAe,CACvB,+BAA+B,YAAY,EAAE,EAC7C,+CAA+C,EAC/C,GAAG,CAAC,KAAK,CACV,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,eAAe,CACvB,qCAAqC,YAAY,EAAE,EACnD,yDAAyD,EACzD,GAAG,CAAC,KAAK,CACV,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,eAAe,CACvB,oCAAoC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAC/E,wEAAwE,EACxE,GAAG,CAAC,KAAK,CACV,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"compile-manifest.js","sourceRoot":"","sources":["../src/compile-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,wDAAwD;AAExD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,sEAAsE;IACtE,4EAA4E;IAC5E,iEAAiE;IACjE,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD;;;;;;;;;;OAUG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH,wDAAwD;AAExD;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAC7B,OAAe,EACf,MAAc,EACd,aAAqB,OAAO;IAE5B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CACvB,gCAAgC,OAAO,EAAE,EACzC,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CACxB,KAAe,EACf,OAAe,EACf,OAA2B;IAE3B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnC,+EAA+E;IAC/E,8EAA8E;IAC9E,gFAAgF;IAChF,mDAAmD;IACnD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACzB,OAAe,EACf,KAAwB,EACxB,WAAqD;IAErD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC7F,IAAI,CAAC,MAAM,CAAC,GAAG,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8EAA8E;YAC9E,0EAA0E;YAC1E,wCAAwC;YACxC,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,OAAgB;IACpE,MAAM,KAAK,GAAG,iBAAiB,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACxF,OAAO,kBAAkB,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,IAAI,eAAe,CACvB,2BAA2B,OAAO,KAAK,eAAe,CAAC,GAAG,CAAC,EAAE,EAC7D,0DAA0D,EAC1D,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEvC,mFAAmF;AACnF,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAgB;IAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,OAAO,iBAAiB,CACtB,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,IAAI,EAAE,EAC3D,QAAQ,EACR,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,OAAgB;IACpE,OAAO,kBAAkB,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;QACvF,MAAM,IAAI,eAAe,CACvB,2BAA2B,OAAO,KAAK,eAAe,CAAC,GAAG,CAAC,EAAE,EAC7D,8BAA8B,eAAe,iBAAiB,EAC9D,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAgB;IAClE,OAAO,mBAAmB,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,OAAgB;IACrE,OAAO,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,yBAAyB,CACvC,mBAAuC,EACvC,QAAgB,EAChB,OAAgB;IAEhB,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,mBAAmB,KAAK,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH;;;;;GAKG;AACH,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,iBAAiB,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,SAAS;QACtC,GAAG,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,MAAe;IAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACvB,mDAAmD,EACnD,6MAA6M,CAC9M,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACtC,IAAI,EAAE,CAAC;IACV,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,OAAO,GAAG,GAAG,CAAC;QAClB,gEAAgE;QAChE,8DAA8D;QAC9D,6DAA6D;QAC7D,+DAA+D;QAC/D,wDAAwD;QACxD,8DAA8D;QAC9D,+DAA+D;QAC/D,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,2DAA2D;gBAC3D,iBAAiB;YACnB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CACvB,+BAA+B,SAAS,YAAY,EACpD,sDAAsD,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,+BAA+B,eAAe,CAAC,GAAG,CAAC,EAAE,EACrD,8BAA8B,SAAS,GAAG,EAC1C,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wDAAwD;AAExD,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAoB,EAAE,QAAyB;IAClF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACtD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,kCAAkC,eAAe,CAAC,GAAG,CAAC,EAAE,EACxD,+BAA+B,YAAY,GAAG,EAC9C,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC;YAAE,MAAM,GAAG,CAAC;QACjD,iDAAiD;QACjD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,eAAe,CACvB,+BAA+B,YAAY,EAAE,EAC7C,+CAA+C,EAC/C,GAAG,CAAC,KAAK,CACV,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,eAAe,CACvB,qCAAqC,YAAY,EAAE,EACnD,yDAAyD,EACzD,GAAG,CAAC,KAAK,CACV,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,eAAe,CACvB,oCAAoC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAC/E,wEAAwE,EACxE,GAAG,CAAC,KAAK,CACV,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}