@nklisch/pi-enhanced 0.1.0

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/create-node-recovery-adapters.js

@@ -0,0 +1,81 @@
+import { createHash } from "node:crypto";
+import { createContentStoreLayout } from "../filesystem/content-store-layout.js";
+import { createLocalRecoveryFilesystem } from "./local-recovery-filesystem.js";
+import { createSqliteTransitionJournal } from "./sqlite-transition-journal.js";
+import { createSqliteRevisionRetention } from "./sqlite-revision-retention.js";
+import { createProcessRevisionLeaseStore } from "./process-revision-leases.js";
+import { createRevisionArtifactStore } from "./revision-artifact-store.js";
+import { createLifecycleRecoveryService } from "../../application/recovery-service.js";
+import { createRevisionCollectionService } from "../../application/revision-collection-service.js";
+const nodeSha256 = (bytes) => new Uint8Array(createHash("sha256").update(bytes).digest());
+/** Composition root: adapter details remain private while application policy stays injectable. */
+export async function createNodeRecoveryAdapters(options) {
+    if (options === null || typeof options !== "object" || typeof options.hostRoot !== "string")
+        throw new TypeError("Node recovery adapters require a host root");
+    const filesystem = await createLocalRecoveryFilesystem(options);
+    const layout = await createContentStoreLayout(options.hostRoot);
+    const journals = new Map();
+    const transitions = (scope) => {
+        const key = JSON.stringify(scope);
+        const existing = journals.get(key);
+        if (existing !== undefined)
+            return existing;
+        const created = createSqliteTransitionJournal({ filesystem });
+        journals.set(key, created);
+        return created;
+    };
+    const prepare = (request, signal) => {
+        const record = "record" in request ? request.record : request;
+        return transitions(record.scope).prepare(request, signal);
+    };
+    const settle = (request, signal) => {
+        if (request.scope === undefined)
+            throw new TypeError("transition settlement requires explicit scope");
+        return transitions(request.scope).settle(request, signal);
+    };
+    const read = (request, signal) => transitions(request.scope).read(request, signal);
+    const list = (scope, signal) => transitions(scope).list(scope, signal);
+    const markRecoveryRequired = (request, signal) => transitions(request.scope).markRecoveryRequired(request, signal);
+    const markCollectionComplete = (request, signal) => transitions(request.scope).markCollectionComplete(request, signal);
+    const markCleanup = (request, signal) => transitions(request.scope).markCleanup(request, signal);
+    const ownerStatus = (scope, reference, signal) => transitions(scope).ownerStatus(scope, reference, signal);
+    const pruneTerminal = async (request, signal) => {
+        let pruned = 0;
+        for (const journal of journals.values())
+            pruned += await journal.pruneTerminal(request, signal);
+        return pruned;
+    };
+    const transitionStore = Object.freeze({ prepare, settle, read, list, markRecoveryRequired, markCleanup, markCollectionComplete, ownerStatus, pruneTerminal });
+    const [leases, retention] = await Promise.all([
+        createProcessRevisionLeaseStore(options),
+        createSqliteRevisionRetention(options),
+    ]);
+    const artifacts = createRevisionArtifactStore(layout, nodeSha256);
+    return Object.freeze({
+        transitions,
+        transitionStore,
+        leases,
+        retention,
+        artifacts,
+        createRecoveryService: (dependencies) => createLifecycleRecoveryService({ ...dependencies, transitions }),
+        createCollectionService: (dependencies) => createRevisionCollectionService({ ...dependencies, transitions, leases, retention, artifacts, sha256: nodeSha256 }),
+        async close() {
+            const errors = [];
+            try {
+                await leases.close();
+            }
+            catch (error) {
+                errors.push(error);
+            }
+            try {
+                await retention.close();
+            }
+            catch (error) {
+                errors.push(error);
+            }
+            if (errors.length > 0)
+                throw new AggregateError(errors, "recovery adapter cleanup failed");
+        },
+    });
+}
+//# sourceMappingURL=create-node-recovery-adapters.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/create-node-recovery-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-node-recovery-adapters.js","sourceRoot":"","sources":["../../../src/infrastructure/recovery/create-node-recovery-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAO3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,EAAE,+BAA+B,EAAuC,MAAM,kDAAkD,CAAC;AAExI,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAc,EAAE,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAkBlH,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAAmC;IAClF,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IAC/J,MAAM,UAAU,GAAG,MAAM,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC7D,MAAM,WAAW,GAAG,CAAC,KAAqB,EAA4B,EAAE;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,6BAA6B,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9D,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,OAAO,GAAwC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvE,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9D,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,MAAM,MAAM,GAAuC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;QACtG,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,MAAM,IAAI,GAAkD,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnI,MAAM,IAAI,GAAkD,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvH,MAAM,oBAAoB,GAAkE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,oBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnL,MAAM,sBAAsB,GAAoE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,sBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzL,MAAM,WAAW,GAAyD,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxJ,MAAM,WAAW,GAAyD,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,WAAY,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAClK,MAAM,aAAa,GAA2D,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QACtG,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,MAAM,OAAO,CAAC,aAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjG,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,eAAe,GAA6B,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,sBAAsB,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IACxL,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,+BAA+B,CAAC,OAAO,CAAC;QACxC,6BAA6B,CAAC,OAAO,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW;QACX,eAAe;QACf,MAAM;QACN,SAAS;QACT,SAAS;QACT,qBAAqB,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,8BAA8B,CAAC,EAAE,GAAG,YAAY,EAAE,WAAW,EAAE,CAAC;QACzG,uBAAuB,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,+BAA+B,CAAC,EAAE,GAAG,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC9J,KAAK,CAAC,KAAK;YACT,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YACnE,IAAI,CAAC;gBAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YACtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QAC7F,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/local-recovery-filesystem.d.ts

@@ -0,0 +1,17 @@
+import { type ScopeReference } from "../../domain/state/scope.js";
+export type RecoveryFilesystem = Readonly<{
+    hostRoot: string;
+    recoveryRoot: string;
+    journalRoot: string;
+    journalDatabasePath(scope: ScopeReference): string;
+    rootIdentity: string;
+    verify(): Promise<void>;
+}>;
+declare function scopeDatabaseName(scope: ScopeReference): string;
+/** Bootstrap the recovery-owned roots without exposing a path codec to application code. */
+export declare function createLocalRecoveryFilesystem(options: Readonly<{
+    hostRoot: string;
+    verifyLocalFilesystem?: (root: string) => Promise<void>;
+}>): Promise<RecoveryFilesystem>;
+export declare function digestJournalBytes(bytes: Uint8Array): string;
+export { scopeDatabaseName };

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/local-recovery-filesystem.js

@@ -0,0 +1,84 @@
+import { chmod, lstat, realpath } from "node:fs/promises";
+import { isAbsolute, join, resolve } from "node:path";
+import { createHash, randomUUID } from "node:crypto";
+import { ScopeReferenceSchema } from "../../domain/state/scope.js";
+import { ensurePrivateLockRoot, verifyLocalFilesystemCapability, LOCAL_LOCK_DATABASE_MODE, LOCAL_LOCK_DIRECTORY_MODE } from "../state/local-lock-filesystem.js";
+function scopeDatabaseName(scope) {
+    const value = ScopeReferenceSchema.parse(scope);
+    return value.kind === "user" ? "user.sqlite" : `project-${encodeURIComponent(value.projectKey)}.sqlite`;
+}
+async function ensurePrivateDirectory(path) {
+    const root = await ensurePrivateLockRoot(path);
+    await chmod(root, LOCAL_LOCK_DIRECTORY_MODE);
+    return await realpath(root);
+}
+/** Bootstrap the recovery-owned roots without exposing a path codec to application code. */
+export async function createLocalRecoveryFilesystem(options) {
+    if (options === null || typeof options !== "object" || typeof options.hostRoot !== "string" || !isAbsolute(options.hostRoot))
+        throw new TypeError("recovery hostRoot must be absolute");
+    const hostRoot = resolve(options.hostRoot);
+    const recoveryRoot = await ensurePrivateDirectory(join(hostRoot, "recovery"));
+    const journalParent = await ensurePrivateDirectory(join(recoveryRoot, "journal"));
+    const journalRoot = await ensurePrivateDirectory(join(journalParent, "v1"));
+    const markerPath = join(recoveryRoot, ".recovery-root.identity");
+    let marker;
+    try {
+        const stats = await lstat(markerPath);
+        if (!stats.isFile() || stats.isSymbolicLink())
+            throw new Error("recovery identity marker is invalid");
+        marker = JSON.parse(await (await import("node:fs/promises")).readFile(markerPath, "utf8"));
+        if (marker.protocol !== "pi-plugin-host-recovery-root" || marker.version !== 1 || typeof marker.identity !== "string" || marker.identity.length === 0)
+            throw new Error("recovery identity marker is invalid");
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+        marker = { protocol: "pi-plugin-host-recovery-root", version: 1, identity: randomUUID() };
+        const temporary = `${markerPath}.${randomUUID()}.tmp`;
+        const { writeFile, link, unlink, readFile } = await import("node:fs/promises");
+        await writeFile(temporary, `${JSON.stringify(marker)}\n`, { flag: "wx", mode: LOCAL_LOCK_DATABASE_MODE });
+        try {
+            await link(temporary, markerPath);
+        }
+        catch (cause) {
+            if (cause.code !== "EEXIST")
+                throw cause;
+        }
+        finally {
+            try {
+                await unlink(temporary);
+            }
+            catch { /* preserve first failure */ }
+        }
+        marker = JSON.parse(await readFile(markerPath, "utf8"));
+        if (marker.protocol !== "pi-plugin-host-recovery-root" || marker.version !== 1 || typeof marker.identity !== "string" || marker.identity.length === 0) {
+            throw new Error("recovery identity marker is invalid");
+        }
+    }
+    const verify = async () => {
+        const stats = await lstat(recoveryRoot);
+        if (!stats.isDirectory() || stats.isSymbolicLink())
+            throw new Error("recovery root identity changed");
+        const markerStats = await lstat(markerPath);
+        if (!markerStats.isFile() || markerStats.isSymbolicLink())
+            throw new Error("recovery identity marker changed");
+        const current = JSON.parse(await (await import("node:fs/promises")).readFile(markerPath, "utf8"));
+        if (current.protocol !== marker.protocol || current.version !== marker.version || current.identity !== marker.identity)
+            throw new Error("recovery identity marker changed");
+    };
+    await (options.verifyLocalFilesystem ?? verifyLocalFilesystemCapability)(recoveryRoot);
+    await verify();
+    return Object.freeze({
+        hostRoot,
+        recoveryRoot,
+        journalRoot,
+        journalDatabasePath: (scope) => join(journalRoot, scopeDatabaseName(scope)),
+        rootIdentity: marker.identity,
+        verify,
+    });
+}
+export function digestJournalBytes(bytes) {
+    return `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
+}
+export { scopeDatabaseName };
+//# sourceMappingURL=local-recovery-filesystem.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/local-recovery-filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-recovery-filesystem.js","sourceRoot":"","sources":["../../../src/infrastructure/recovery/local-recovery-filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAuB,MAAM,6BAA6B,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAWhK,SAAS,iBAAiB,CAAC,KAAqB;IAC9C,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;AAC1G,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY;IAChD,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;IAC7C,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAGlD;IACA,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACxL,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IACjE,IAAI,MAAkF,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACtG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAkB,CAAC;QAC5G,IAAI,MAAM,CAAC,QAAQ,KAAK,8BAA8B,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAChN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,GAAG,EAAE,QAAQ,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC;QAC1F,MAAM,SAAS,GAAG,GAAG,UAAU,IAAI,UAAU,EAAE,MAAM,CAAC;QACtD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC1G,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAkB,CAAC;QACzE,IAAI,MAAM,CAAC,QAAQ,KAAK,8BAA8B,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtJ,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtG,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,WAAW,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAkB,CAAC;QACnH,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9K,CAAC,CAAC;IACF,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,+BAA+B,CAAC,CAAC,YAAY,CAAC,CAAC;IACvF,MAAM,MAAM,EAAE,CAAC;IACf,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,YAAY;QACZ,WAAW;QACX,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3E,YAAY,EAAE,MAAM,CAAC,QAAQ;QAC7B,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/process-revision-leases.d.ts

@@ -0,0 +1,7 @@
+import { type RevisionLeaseStore } from "../../application/ports/revision-lease-store.js";
+export declare function createProcessRevisionLeaseStore(options: Readonly<{
+    hostRoot: string;
+    verifyLocalFilesystem?: (root: string) => Promise<void>;
+}>): Promise<RevisionLeaseStore & Readonly<{
+    close(): Promise<void>;
+}>>;

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/process-revision-leases.js

@@ -0,0 +1,97 @@
+import { randomUUID } from "node:crypto";
+import { join } from "node:path";
+import { ensurePrivateLockRoot, verifyLocalFilesystemCapability } from "../state/local-lock-filesystem.js";
+import { openIdentityBoundSqliteDatabase } from "../state/identity-bound-sqlite.js";
+import { RevisionLeaseCollectionSchema, RevisionLeaseSchema } from "../../application/ports/revision-lease-store.js";
+import { RetainedArtifactRefSchema } from "../../application/ports/revision-artifact-store.js";
+import { classifyProcessIdentity, readLinuxProcessStartToken } from "../process/process-identity.js";
+function json(value) { return JSON.stringify(value); }
+function abort(signal) { if (signal.aborted)
+    throw signal.reason; }
+export async function createProcessRevisionLeaseStore(options) {
+    const root = await ensurePrivateLockRoot(join(options.hostRoot, "recovery", "leases", "v1"));
+    await (options.verifyLocalFilesystem ?? verifyLocalFilesystemCapability)(root);
+    const handle = await openIdentityBoundSqliteDatabase({
+        root,
+        path: join(root, "leases.sqlite"),
+        signal: new AbortController().signal,
+        // Multiple Pi sessions legitimately acquire/release leases in this shared
+        // database; bounded waiting is required for those ordinary write windows.
+        busyTimeoutMs: 30_000,
+        initialize(database) {
+            database.exec("PRAGMA journal_mode = DELETE; PRAGMA synchronous = FULL; PRAGMA foreign_keys = ON; PRAGMA trusted_schema = OFF; CREATE TABLE revision_leases (lease_id TEXT PRIMARY KEY NOT NULL, session_id TEXT NOT NULL, artifacts_json TEXT NOT NULL, acquired_at INTEGER NOT NULL, owner_pid INTEGER NOT NULL, owner_start_token TEXT NOT NULL, owner_nonce TEXT NOT NULL) STRICT;");
+        },
+        validate(database) {
+            const rows = database.prepare("SELECT name, type FROM sqlite_master WHERE name NOT LIKE 'sqlite_%' ORDER BY name").all();
+            if (JSON.stringify(rows) !== JSON.stringify([{ name: "revision_leases", type: "table" }]))
+                throw new Error("revision lease schema is invalid");
+        },
+    });
+    const database = handle.database;
+    const owned = new WeakMap();
+    const issue = (row) => {
+        const value = RevisionLeaseSchema.parse({ leaseId: row.lease_id, sessionId: row.session_id, artifacts: JSON.parse(row.artifacts_json), acquiredAt: row.acquired_at });
+        owned.set(value, { leaseId: row.lease_id, nonce: "local" });
+        return value;
+    };
+    const store = {
+        async acquire(request, signal) {
+            abort(signal);
+            handle.assertIdentity();
+            const token = readLinuxProcessStartToken(process.pid);
+            if (token === undefined)
+                throw new Error("revision lease process identity unavailable");
+            const leaseId = randomUUID();
+            const artifacts = request.artifacts.map((ref) => RetainedArtifactRefSchema.parse(ref));
+            database.prepare("INSERT INTO revision_leases(lease_id, session_id, artifacts_json, acquired_at, owner_pid, owner_start_token, owner_nonce) VALUES (?, ?, ?, ?, ?, ?, ?)").run(leaseId, request.sessionId, json(artifacts), request.at, process.pid, token, randomUUID());
+            return issue({ lease_id: leaseId, session_id: request.sessionId, artifacts_json: json(artifacts), acquired_at: request.at });
+        },
+        async replace(lease, artifacts, at, signal) {
+            abort(signal);
+            handle.assertIdentity();
+            const owner = owned.get(lease);
+            if (owner === undefined)
+                throw new Error("revision lease capability is not owned");
+            const value = RevisionLeaseSchema.parse(lease);
+            const parsed = artifacts.map((ref) => RetainedArtifactRefSchema.parse(ref));
+            database.prepare("UPDATE revision_leases SET artifacts_json = ?, acquired_at = ? WHERE lease_id = ?").run(json(parsed), at, value.leaseId);
+            return issue({ lease_id: value.leaseId, session_id: value.sessionId, artifacts_json: json(parsed), acquired_at: at });
+        },
+        async release(lease, _at, signal) {
+            abort(signal);
+            handle.assertIdentity();
+            if (owned.get(lease) === undefined)
+                throw new Error("revision lease capability is not owned");
+            const value = RevisionLeaseSchema.parse(lease);
+            database.prepare("DELETE FROM revision_leases WHERE lease_id = ?").run(value.leaseId);
+        },
+        async list(signal) {
+            abort(signal);
+            handle.assertIdentity();
+            const rows = database.prepare("SELECT * FROM revision_leases ORDER BY lease_id").all();
+            const leases = [];
+            const owners = [];
+            for (const row of rows) {
+                try {
+                    leases.push(issue(row));
+                    owners.push({ leaseId: row.lease_id, status: classifyProcessIdentity({ pid: row.owner_pid, startToken: row.owner_start_token }) });
+                }
+                catch {
+                    return { complete: false, leases: [], owners: [] };
+                }
+            }
+            return RevisionLeaseCollectionSchema.parse({ complete: true, leases, owners });
+        },
+    };
+    let closed = false;
+    return Object.freeze({
+        ...store,
+        async close() {
+            if (closed)
+                return;
+            closed = true;
+            handle.close();
+        },
+    });
+}
+//# sourceMappingURL=process-revision-leases.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/process-revision-leases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-revision-leases.js","sourceRoot":"","sources":["../../../src/infrastructure/recovery/process-revision-leases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AAC3G,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAA6E,MAAM,iDAAiD,CAAC;AAChM,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAErG,SAAS,IAAI,CAAC,KAAc,IAAY,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvE,SAAS,KAAK,CAAC,MAAmB,IAAU,IAAI,MAAM,CAAC,OAAO;IAAE,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAEtF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,OAAgG;IACpJ,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7F,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,+BAA+B,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;QACnD,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QACjC,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;QACpC,0EAA0E;QAC1E,0EAA0E;QAC1E,aAAa,EAAE,MAAM;QACrB,UAAU,CAAC,QAAQ;YACjB,QAAQ,CAAC,IAAI,CAAC,yWAAyW,CAAC,CAAC;QAC3X,CAAC;QACD,QAAQ,CAAC,QAAQ;YACf,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC,GAAG,EAA2C,CAAC;YAClK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjJ,CAAC;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,OAAO,EAA8C,CAAC;IACxE,MAAM,KAAK,GAAG,CAAC,GAA0F,EAAiB,EAAE;QAC1H,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACtK,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,KAAK,GAAuB;QAChC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM;YAC3B,KAAK,CAAC,MAAM,CAAC,CAAC;YACd,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAAC,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC/I,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACvF,QAAQ,CAAC,OAAO,CAAC,wJAAwJ,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAC1Q,OAAO,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM;YACxC,KAAK,CAAC,MAAM,CAAC,CAAC;YACd,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACnH,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5E,QAAQ,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3I,OAAO,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM;YAC9B,KAAK,CAAC,MAAM,CAAC,CAAC;YACd,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC9F,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/C,QAAQ,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,KAAK,CAAC,MAAM,CAAC,CAAC;YACd,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,EAAgJ,CAAC;YACrO,MAAM,MAAM,GAAoB,EAAE,CAAC;YACnC,MAAM,MAAM,GAAiF,EAAE,CAAC;YAChG,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBACpK,MAAM,CAAC;oBAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAAC,CAAC;YAC/D,CAAC;YACD,OAAO,6BAA6B,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,CAAC;KACF,CAAC;IACF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,KAAK;QACR,KAAK,CAAC,KAAK;YACT,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/recovery-artifact-scanner.d.ts

@@ -0,0 +1,3 @@
+import type { ContentStoreLayout } from "../filesystem/content-store-layout.js";
+import type { RecoveryArtifactsPort } from "../../application/ports/recovery-artifacts.js";
+export declare function createRecoveryArtifactScanner(layout: ContentStoreLayout): RecoveryArtifactsPort;

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/recovery-artifact-scanner.js

@@ -0,0 +1,83 @@
+import { lstat, readdir, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { assertLayoutRoot } from "../filesystem/content-store-layout.js";
+import { removePreparedTree } from "../filesystem/prepared-tree-cleanup.js";
+import { classifyProcessIdentity } from "../process/process-identity.js";
+function parseSidecar(input) {
+    if (input === null || typeof input !== "object" || Array.isArray(input))
+        throw new Error("owner sidecar is invalid");
+    const value = input;
+    if (Object.keys(value).length !== 6 || value.protocol !== "pi-plugin-host-staging-owner" || value.version !== 1 || typeof value.pid !== "number" || !Number.isSafeInteger(value.pid) || value.pid <= 0 || typeof value.startToken !== "string" || !/^\d+$/.test(value.startToken) || typeof value.nonce !== "string" || !/^[0-9a-f]{32}$/.test(value.nonce) || typeof value.createdAt !== "number" || !Number.isSafeInteger(value.createdAt) || value.createdAt < 0)
+        throw new Error("owner sidecar is invalid");
+    return value;
+}
+export function createRecoveryArtifactScanner(layout) {
+    const capabilities = new WeakMap();
+    async function scanRoot(root, parent, kind) {
+        await assertLayoutRoot(layout, kind === "staging" ? "stagingRoot" : "projectionStagingRoot", "scanRecoveryArtifacts");
+        const result = [];
+        let names;
+        try {
+            names = await readdir(root);
+        }
+        catch {
+            return result;
+        }
+        for (const name of names.sort()) {
+            if (!/^[0-9a-f]{32}$/.test(name))
+                continue;
+            const path = join(root, name);
+            const sidecarPath = `${path}.owner`;
+            try {
+                const stat = await lstat(path);
+                const sidecar = parseSidecar(JSON.parse(await readFile(sidecarPath, "utf8")));
+                if (!stat.isDirectory() || stat.isSymbolicLink())
+                    continue;
+                const status = classifyProcessIdentity({ pid: sidecar.pid, startToken: sidecar.startToken });
+                const capability = Object.freeze({});
+                const candidate = Object.freeze({ kind, key: name, owner: status, createdAt: sidecar.createdAt, capability });
+                capabilities.set(capability, { candidate, root: path, identity: { dev: stat.dev, ino: stat.ino }, parent, sidecar });
+                result.push(candidate);
+            }
+            catch {
+                // Missing or malformed ownership evidence is intentionally invisible to
+                // deletion; the caller's complete scan still reports it as incomplete.
+            }
+        }
+        return result;
+    }
+    async function scan(signal) {
+        if (signal.aborted)
+            throw signal.reason;
+        const candidates = [
+            ...await scanRoot(layout.stagingRoot, layout.rootCapabilities.stagingRoot, "staging"),
+            ...await scanRoot(layout.projectionStagingRoot, layout.rootCapabilities.projectionStagingRoot, "projection-staging"),
+        ].sort((left, right) => left.kind.localeCompare(right.kind) || left.key.localeCompare(right.key));
+        return { complete: true, candidates };
+    }
+    async function remove(candidate, signal) {
+        if (signal.aborted)
+            throw signal.reason;
+        const record = candidate !== null && typeof candidate === "object" ? capabilities.get(candidate.capability) : undefined;
+        if (record === undefined || record.candidate !== candidate)
+            throw new Error("recovery artifact capability is not owned by this scanner");
+        if (candidate.owner !== "dead")
+            throw new Error("recovery artifact owner is not proven dead");
+        const current = await lstat(record.root).catch((error) => { if (error.code === "ENOENT")
+            return undefined; throw error; });
+        if (current === undefined)
+            return "already-absent";
+        if (!current.isDirectory() || current.isSymbolicLink() || current.dev !== record.identity.dev || current.ino !== record.identity.ino)
+            throw new Error("recovery artifact identity changed");
+        const sidecar = parseSidecar(JSON.parse(await readFile(`${record.root}.owner`, "utf8")));
+        if (sidecar.pid !== record.sidecar.pid || sidecar.startToken !== record.sidecar.startToken || sidecar.nonce !== record.sidecar.nonce || classifyProcessIdentity({ pid: sidecar.pid, startToken: sidecar.startToken }) !== "dead")
+            throw new Error("recovery artifact ownership changed");
+        await assertLayoutRoot(layout, record.candidate.kind === "staging" ? "stagingRoot" : "projectionStagingRoot", "removeRecoveryArtifact");
+        const result = await removePreparedTree(record.root, record.identity, record.parent);
+        await import("node:fs/promises").then(({ unlink }) => unlink(`${record.root}.owner`).catch((error) => { if (error.code !== "ENOENT")
+            throw error; }));
+        return result;
+    }
+    return Object.freeze({ scan, remove });
+}
+//# sourceMappingURL=recovery-artifact-scanner.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/recovery-artifact-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-artifact-scanner.js","sourceRoot":"","sources":["../../../src/infrastructure/recovery/recovery-artifact-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAA6B,MAAM,wCAAwC,CAAC;AACvG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAMzE,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACrH,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,8BAA8B,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACjf,OAAO,KAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAA0B;IACtE,MAAM,YAAY,GAAG,IAAI,OAAO,EAAuB,CAAC;IAExD,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,MAAsB,EAAE,IAAsC;QAClG,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;QACtH,MAAM,MAAM,GAAgC,EAAE,CAAC;QAC/C,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,MAAM,WAAW,GAAG,GAAG,IAAI,QAAQ,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC9E,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;oBAAE,SAAS;gBAC3D,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC7F,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACrC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC9G,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBACrH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;gBACxE,uEAAuE;YACzE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,MAAmB;QACrC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,UAAU,GAAG;YACjB,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,SAAS,CAAC;YACrF,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;SACrH,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAClG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,SAAoC,EAAE,MAAmB;QAC7E,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxH,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACzI,IAAI,SAAS,CAAC,KAAK,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtJ,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,gBAAgB,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,QAAQ,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5L,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,uBAAuB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzR,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;QACxI,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrF,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1L,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/revision-artifact-store.d.ts

@@ -0,0 +1,3 @@
+import type { ContentStoreLayout } from "../filesystem/content-store-layout.js";
+import type { RevisionArtifactStore } from "../../application/ports/revision-artifact-store.js";
+export declare function createRevisionArtifactStore(layout: ContentStoreLayout, sha256: (bytes: Uint8Array) => Uint8Array): RevisionArtifactStore;

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/revision-artifact-store.js

@@ -0,0 +1,178 @@
+import { lstat, readdir, unlink } from "node:fs/promises";
+import { basename, join } from "node:path";
+import { assertLayoutRoot } from "../filesystem/content-store-layout.js";
+import { inspectPublishedRevision } from "../filesystem/immutable-content-store.js";
+import { inspectPublishedProjection } from "../filesystem/runtime-root-store.js";
+import { removePreparedTree } from "../filesystem/prepared-tree-cleanup.js";
+import { ContentStoreIdentitySchema, MarketplaceStoreKeySchema, PluginStoreKeySchema } from "../../domain/content-store.js";
+import { ProjectionRootRefSchema } from "../../domain/state/references.js";
+export function createRevisionArtifactStore(layout, sha256) {
+    const owned = new WeakMap();
+    async function scanStore(root, parent, kind) {
+        await assertLayoutRoot(layout, kind === "plugin" ? "pluginStoreRoot" : "marketplaceStoreRoot", "scanRevisionArtifacts");
+        const artifacts = [];
+        const names = (await readdir(root)).sort();
+        const referencedPayloads = new Set();
+        let complete = true;
+        for (const name of names) {
+            if (!/^[0-9a-f]{64}$/.test(name))
+                continue;
+            const publication = join(root, name);
+            try {
+                const publicationStat = await lstat(publication);
+                if ((!publicationStat.isDirectory() && !publicationStat.isFile()) || publicationStat.isSymbolicLink()) {
+                    complete = false;
+                    continue;
+                }
+                const inspected = await inspectPublishedRevision(publication, sha256);
+                const payloadStat = await lstat(inspected.root);
+                if (!payloadStat.isDirectory() || payloadStat.isSymbolicLink()) {
+                    complete = false;
+                    continue;
+                }
+                const identity = ContentStoreIdentitySchema.parse(inspected.identity);
+                if (identity.kind !== kind) {
+                    complete = false;
+                    continue;
+                }
+                const reference = kind === "plugin"
+                    ? identity.kind === "plugin" ? { kind: "plugin", key: PluginStoreKeySchema.parse(identity.key) } : undefined
+                    : identity.kind === "marketplace" ? { kind: "marketplace", key: MarketplaceStoreKeySchema.parse(identity.key) } : undefined;
+                if (reference === undefined) {
+                    complete = false;
+                    continue;
+                }
+                if (inspected.root !== publication)
+                    referencedPayloads.add(basename(inspected.root));
+                const capability = Object.freeze({});
+                const candidate = Object.freeze({ kind, key: name, reference, capability });
+                owned.set(capability, {
+                    candidate,
+                    publication,
+                    publicationIdentity: { dev: publicationStat.dev, ino: publicationStat.ino },
+                    payload: inspected.root,
+                    payloadIdentity: { dev: payloadStat.dev, ino: payloadStat.ino },
+                    parent,
+                });
+                artifacts.push(candidate);
+            }
+            catch {
+                complete = false;
+            }
+        }
+        for (const name of names) {
+            if (name.startsWith(".payload-") && referencedPayloads.has(name))
+                continue;
+            if (/^[0-9a-f]{64}$/.test(name))
+                continue;
+            // Hidden, unreferenced payloads can be crash residue or an in-flight
+            // publication. They are never exposed as revisions and conservatively
+            // make this collection scan incomplete until recovery proves ownership.
+            complete = false;
+        }
+        return { artifacts, complete };
+    }
+    async function scanProjections() {
+        await assertLayoutRoot(layout, "generatedRoot", "scanRevisionArtifacts");
+        const artifacts = [];
+        const names = (await readdir(layout.generatedRoot)).sort();
+        const referencedPayloads = new Set();
+        let complete = true;
+        for (const name of names) {
+            if (!/^[0-9a-f]{64}$/.test(name))
+                continue;
+            const path = join(layout.generatedRoot, name);
+            try {
+                const publicationStat = await lstat(path);
+                if ((!publicationStat.isDirectory() && !publicationStat.isFile()) || publicationStat.isSymbolicLink()) {
+                    complete = false;
+                    continue;
+                }
+                const inspected = await inspectPublishedProjection(path, sha256);
+                const payloadStat = await lstat(inspected.root);
+                if (!payloadStat.isDirectory() || payloadStat.isSymbolicLink()) {
+                    complete = false;
+                    continue;
+                }
+                const reference = { kind: "projection", reference: ProjectionRootRefSchema.parse(inspected.metadata.projectionRef) };
+                if (inspected.root !== path)
+                    referencedPayloads.add(basename(inspected.root));
+                const capability = Object.freeze({});
+                const candidate = Object.freeze({ kind: "projection", key: name, reference, capability });
+                owned.set(capability, {
+                    candidate,
+                    publication: path,
+                    publicationIdentity: { dev: publicationStat.dev, ino: publicationStat.ino },
+                    payload: inspected.root,
+                    payloadIdentity: { dev: payloadStat.dev, ino: payloadStat.ino },
+                    parent: layout.rootCapabilities.generatedRoot,
+                });
+                artifacts.push(candidate);
+            }
+            catch {
+                complete = false;
+            }
+        }
+        for (const name of names) {
+            if (name === ".staging" || /^[0-9a-f]{64}$/.test(name) || name.startsWith(".payload-") && referencedPayloads.has(name))
+                continue;
+            complete = false;
+        }
+        return { artifacts, complete };
+    }
+    async function scan(signal) {
+        if (signal.aborted)
+            throw signal.reason;
+        const marketplace = await scanStore(layout.marketplaceStoreRoot, layout.rootCapabilities.marketplaceStoreRoot, "marketplace");
+        const plugin = await scanStore(layout.pluginStoreRoot, layout.rootCapabilities.pluginStoreRoot, "plugin");
+        const projections = await scanProjections();
+        return {
+            complete: marketplace.complete && plugin.complete && projections.complete,
+            artifacts: [...marketplace.artifacts, ...plugin.artifacts, ...projections.artifacts]
+                .sort((a, b) => a.kind.localeCompare(b.kind) || a.key.localeCompare(b.key)),
+        };
+    }
+    async function remove(candidate, signal) {
+        if (signal.aborted)
+            throw signal.reason;
+        const record = owned.get(candidate.capability);
+        if (record === undefined || record.candidate !== candidate)
+            throw new Error("revision artifact capability is not owned");
+        const current = await lstat(record.publication).catch((error) => {
+            if (error.code === "ENOENT")
+                return undefined;
+            throw error;
+        });
+        if (current === undefined)
+            return "already-absent";
+        if (current.isSymbolicLink() || current.dev !== record.publicationIdentity.dev || current.ino !== record.publicationIdentity.ino) {
+            throw new Error("revision artifact identity changed");
+        }
+        await assertLayoutRoot(layout, record.candidate.kind === "plugin" ? "pluginStoreRoot" : record.candidate.kind === "marketplace" ? "marketplaceStoreRoot" : "generatedRoot", "removeRevisionArtifact");
+        if (record.candidate.kind === "projection") {
+            const inspected = await inspectPublishedProjection(record.publication, sha256);
+            if (inspected.root !== record.payload)
+                throw new Error("revision artifact identity changed");
+            const payloadStat = await lstat(record.payload);
+            if (!payloadStat.isDirectory() || payloadStat.isSymbolicLink() || payloadStat.dev !== record.payloadIdentity.dev || payloadStat.ino !== record.payloadIdentity.ino) {
+                throw new Error("revision artifact payload identity changed");
+            }
+            if (record.publication !== record.payload)
+                await unlink(record.publication);
+            return removePreparedTree(record.payload, record.payloadIdentity, record.parent);
+        }
+        const inspected = await inspectPublishedRevision(record.publication, sha256);
+        if (record.candidate.reference.kind === "projection" || inspected.identity.key !== record.candidate.reference.key || inspected.root !== record.payload) {
+            throw new Error("revision artifact identity changed");
+        }
+        const payloadStat = await lstat(record.payload);
+        if (!payloadStat.isDirectory() || payloadStat.isSymbolicLink() || payloadStat.dev !== record.payloadIdentity.dev || payloadStat.ino !== record.payloadIdentity.ino) {
+            throw new Error("revision artifact payload identity changed");
+        }
+        if (record.publication !== record.payload)
+            await unlink(record.publication);
+        return removePreparedTree(record.payload, record.payloadIdentity, record.parent);
+    }
+    return Object.freeze({ scan, remove });
+}
+//# sourceMappingURL=revision-artifact-store.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/recovery/revision-artifact-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-artifact-store.js","sourceRoot":"","sources":["../../../src/infrastructure/recovery/revision-artifact-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAA6B,MAAM,wCAAwC,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC5H,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAY3E,MAAM,UAAU,2BAA2B,CAAC,MAA0B,EAAE,MAAyC;IAC/G,MAAM,KAAK,GAAG,IAAI,OAAO,EAAuB,CAAC;IAEjD,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,MAAsB,EAAE,IAA8B;QAC3F,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;QACxH,MAAM,SAAS,GAAgC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7C,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;gBACjD,IAAI,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,IAAI,eAAe,CAAC,cAAc,EAAE,EAAE,CAAC;oBAAC,QAAQ,GAAG,KAAK,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACtI,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACtE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,WAAW,CAAC,cAAc,EAAE,EAAE,CAAC;oBAAC,QAAQ,GAAG,KAAK,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC/F,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACtE,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;oBAAC,QAAQ,GAAG,KAAK,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC3D,MAAM,SAAS,GAAG,IAAI,KAAK,QAAQ;oBACjC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,GAAG,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;oBACrH,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAsB,EAAE,GAAG,EAAE,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvI,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAAC,QAAQ,GAAG,KAAK,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC5D,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW;oBAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACrC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5E,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE;oBACpB,SAAS;oBACT,WAAW;oBACX,mBAAmB,EAAE,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE;oBAC3E,OAAO,EAAE,SAAS,CAAC,IAAI;oBACvB,eAAe,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE;oBAC/D,MAAM;iBACP,CAAC,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBAAC,QAAQ,GAAG,KAAK,CAAC;YAAC,CAAC;QAC/B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3E,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC1C,qEAAqE;YACrE,sEAAsE;YACtE,wEAAwE;YACxE,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,UAAU,eAAe;QAC5B,MAAM,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,uBAAuB,CAAC,CAAC;QACzE,MAAM,SAAS,GAAgC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7C,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,IAAI,eAAe,CAAC,cAAc,EAAE,EAAE,CAAC;oBAAC,QAAQ,GAAG,KAAK,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACtI,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACjE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,WAAW,CAAC,cAAc,EAAE,EAAE,CAAC;oBAAC,QAAQ,GAAG,KAAK,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC/F,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,YAAqB,EAAE,SAAS,EAAE,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9H,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;oBAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACrC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;gBACnG,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE;oBACpB,SAAS;oBACT,WAAW,EAAE,IAAI;oBACjB,mBAAmB,EAAE,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE;oBAC3E,OAAO,EAAE,SAAS,CAAC,IAAI;oBACvB,eAAe,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE;oBAC/D,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa;iBAC9C,CAAC,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBAAC,QAAQ,GAAG,KAAK,CAAC;YAAC,CAAC;QAC/B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,UAAU,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjI,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,MAAmB;QACrC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;QAC9H,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QAC1G,MAAM,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;QAC5C,OAAO;YACL,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ;YACzE,SAAS,EAAE,CAAC,GAAG,WAAW,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC;iBACjF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,SAAoC,EAAE,MAAmB;QAC7E,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACzH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACzE,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,gBAAgB,CAAC;QACnD,IAAI,OAAO,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,mBAAmB,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC;YACjI,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;QACtM,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC/E,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC7F,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,WAAW,CAAC,cAAc,EAAE,IAAI,WAAW,CAAC,GAAG,KAAK,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,KAAK,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC;gBACnK,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC5E,OAAO,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YACvJ,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,WAAW,CAAC,cAAc,EAAE,IAAI,WAAW,CAAC,GAAG,KAAK,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,KAAK,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC;YACnK,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5E,OAAO,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC"}