@omnitype-code/journal 2.0.0

package/dist/daemon/journal.js

@@ -0,0 +1,370 @@
+/**
+ * Journal — the single writer.
+ *
+ * Responsibilities:
+ *  1. Accept events from adapters and the VSCode extension via UDS.
+ *  2. Assign monotonic seq, chain hash, HMAC-sign, fsync to segment.
+ *  3. Broadcast persisted events to subscribers (materializer, cloud shipper).
+ *  4. Maintain chain state in memory; persist head to chain/head.json atomically.
+ *
+ * Single-writer invariant: all appends go through this class.
+ * The UDS server (daemon.ts) serializes concurrent callers.
+ */
+import { mkdirSync, writeFileSync, readFileSync, renameSync, existsSync, appendFileSync, unlinkSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { hostname } from 'node:os';
+import { SegmentReader } from '../log/segment.js';
+import { ZERO_HASH, hashEvent, loadOrCreateInstallKey, newNonce, signEvent, verifyEventSig, } from '../crypto/chain.js';
+import { loadOrCreateInstallKeySecure } from '../security/keychain.js';
+import { SegmentWriter } from '../log/segment.js';
+import { Materializer } from '../materializer/db.js';
+export function resolvePaths(journalRoot) {
+    return {
+        root: journalRoot,
+        keysDir: join(journalRoot, 'keys'),
+        segmentsDir: join(journalRoot, 'segments'),
+        indexDir: join(journalRoot, 'index'),
+        snapshotsDir: join(journalRoot, 'snapshots'),
+        chainDir: join(journalRoot, 'chain'),
+        dbPath: join(journalRoot, '..', 'materialized.db'),
+    };
+}
+export class Journal {
+    installKey;
+    installInfo;
+    chainState;
+    writer;
+    mat;
+    listeners = new Set();
+    paths;
+    batch = [];
+    batchTimer = null;
+    BATCH_DELAY_MS = 5;
+    BATCH_MAX = 64;
+    hardened;
+    constructor(journalRoot, workspace, opts = {}) {
+        const paths = resolvePaths(journalRoot);
+        this.paths = paths;
+        this.hardened = opts.hardened ?? false;
+        for (const dir of [
+            paths.root,
+            paths.keysDir,
+            paths.segmentsDir,
+            paths.indexDir,
+            paths.snapshotsDir,
+            paths.chainDir,
+        ]) {
+            mkdirSync(dir, { recursive: true });
+        }
+        const installKeyPath = join(paths.keysDir, 'install.key');
+        if (this.hardened) {
+            // Hardened mode (org policy): the daemon is the sole key-holder. The key
+            // lives in the OS keychain (prompts the user once) and is NEVER mirrored to
+            // disk. Adapters connect without the key — the daemon brokers all signing.
+            // This is what makes the chain forgery-resistant at rest: a same-user
+            // process cannot read the key to rewrite history offline.
+            this.installKey = loadOrCreateInstallKeySecure(paths.keysDir);
+            // Remove any stale plaintext mirror left by a prior non-hardened run.
+            try {
+                if (existsSync(installKeyPath))
+                    unlinkSync(installKeyPath);
+            }
+            catch { /* best-effort */ }
+        }
+        else {
+            // Default (individual / non-hardened org): frictionless. Key on disk so
+            // local adapters can complete the key-based handshake with zero prompts.
+            this.installKey = loadOrCreateInstallKey(paths.keysDir);
+            writeFileSync(installKeyPath, this.installKey, { mode: 0o600 });
+        }
+        this.installInfo = this.loadOrCreateInstallInfo(workspace);
+        this.installInfo.hardened = this.hardened;
+        this.chainState = this.loadChainHead();
+        this.writer = new SegmentWriter(paths.segmentsDir);
+        this.mat = new Materializer(paths.dbPath);
+        // Replay any events the materializer hasn't seen
+        const lastMat = this.mat.lastAppliedSeq;
+        if (lastMat < this.chainState.seq) {
+            this.replaySince(lastMat + 1);
+        }
+        // Emit daemon-start marker
+        this.appendSync({ kind: 'system', tool: 'omnitype-daemon', user: this.installInfo.user, host: this.installInfo.host, workspace }, { type: 'Marker', kind: 'daemon-start' }, 'T0', 'omnitype-daemon');
+    }
+    // ─── Public API ────────────────────────────────────────────────────────────
+    append(actor, body, tier, adapterId, sync = false) {
+        // Intra-batch chaining (Day 1 fix §2.2): new event chains to last pending event
+        // in the batch, not to the last *flushed* hash, so intra-batch order is provable.
+        const prevInBatch = this.batch.length > 0
+            ? hashEvent(this.batch[this.batch.length - 1])
+            : undefined;
+        const event = this.buildEvent(actor, body, tier, adapterId, prevInBatch);
+        if (sync) {
+            this.flushBatch([event]);
+            return event.seq;
+        }
+        this.batch.push(event);
+        if (this.batch.length >= this.BATCH_MAX) {
+            this.flushNow();
+        }
+        else if (!this.batchTimer) {
+            this.batchTimer = setTimeout(() => this.flushNow(), this.BATCH_DELAY_MS);
+        }
+        return event.seq;
+    }
+    appendSync(actor, body, tier, adapterId) {
+        return this.append(actor, body, tier, adapterId, true);
+    }
+    subscribe(listener) {
+        this.listeners.add(listener);
+        return () => this.listeners.delete(listener);
+    }
+    getChainHead() {
+        return { ...this.chainState };
+    }
+    getInstallInfo() {
+        return { ...this.installInfo };
+    }
+    getInstallKey() {
+        return this.installKey;
+    }
+    close() {
+        if (this.batchTimer)
+            clearTimeout(this.batchTimer);
+        this.flushNow();
+        this.writer.close();
+        this.mat.close();
+    }
+    // ─── Private ───────────────────────────────────────────────────────────────
+    buildEvent(actor, body, tier, adapterId, prevHashOverride) {
+        const seq = ++this.chainState.seq;
+        const header = {
+            v: 2,
+            seq,
+            ts: Date.now() * 1000, // µs
+            actor,
+            // Day 1 fix (§2.2): use override when chaining within a batch so every event
+            // in the batch chains to the previous event, not the batch-head's prev.
+            prev: prevHashOverride ?? this.chainState.lastHash,
+            nonce: newNonce(),
+            tier,
+            adapter_id: adapterId,
+        };
+        const sig = signEvent(this.installKey, header, body);
+        return { ...header, ...body, sig };
+    }
+    flushNow() {
+        if (this.batchTimer) {
+            clearTimeout(this.batchTimer);
+            this.batchTimer = null;
+        }
+        if (this.batch.length === 0)
+            return;
+        const toFlush = this.batch.splice(0);
+        this.flushBatch(toFlush);
+    }
+    flushBatch(events) {
+        this.writer.appendBatch(events);
+        const last = events[events.length - 1];
+        this.chainState.lastHash = hashEvent(last);
+        this.chainState.headTs = last.ts;
+        this.persistHead();
+        for (const event of events) {
+            this.mat.apply(event);
+            for (const listener of this.listeners) {
+                try {
+                    listener(event);
+                }
+                catch { /* listener errors don't crash the daemon */ }
+            }
+        }
+    }
+    persistHead() {
+        const head = {
+            seq: this.chainState.seq,
+            hash: this.chainState.lastHash,
+            ts: this.chainState.headTs,
+        };
+        const tmp = join(this.paths.chainDir, 'head.json.tmp');
+        writeFileSync(tmp, JSON.stringify(head, null, 2), 'utf-8');
+        renameSync(tmp, join(this.paths.chainDir, 'head.json'));
+    }
+    loadChainHead() {
+        // Day 1 fix (§2.4): Always verify head.json against segments. If head.json is
+        // missing, corrupt, or older than the last segment record, rebuild from segments.
+        // This prevents silent seq=0 collision when head.json is zeroed/deleted.
+        try {
+            const headPath = join(this.paths.chainDir, 'head.json');
+            if (existsSync(headPath)) {
+                const h = JSON.parse(readFileSync(headPath, 'utf-8'));
+                if (typeof h.seq === 'number' && h.seq >= 0 && typeof h.hash === 'string') {
+                    const fromSegment = this.scanSegmentHead();
+                    // Trust head.json only if it is at least as recent as the segment tail
+                    if (!fromSegment || h.seq >= fromSegment.seq) {
+                        return { seq: h.seq, lastHash: h.hash, headTs: h.ts };
+                    }
+                    // head.json is stale — rebuild from segments
+                    console.error('[omnitype-daemon] head.json is stale; rebuilding from segment scan');
+                    return fromSegment;
+                }
+            }
+        }
+        catch { /* fall through to segment scan */ }
+        const fromSegment = this.scanSegmentHead();
+        if (fromSegment) {
+            console.error('[omnitype-daemon] head.json missing/corrupt; rebuilt from segments');
+            return fromSegment;
+        }
+        return { seq: -1, lastHash: ZERO_HASH, headTs: 0 };
+    }
+    /** Scan all segments and return the head state from the last event. */
+    scanSegmentHead() {
+        let last = null;
+        try {
+            for (const event of SegmentReader.readAll(this.paths.segmentsDir)) {
+                last = { seq: event.seq, lastHash: hashEvent(event), headTs: event.ts };
+            }
+        }
+        catch { /* ignore read errors */ }
+        return last;
+    }
+    replaySince(fromSeq) {
+        // Verify HMAC sig + prev-hash continuity before applying.
+        // Tampered events are REJECTED (not applied) and recorded to chain/tamper.log.
+        // This protects the materialized DB from accepting forged history at startup.
+        let prevHash = ZERO_HASH;
+        let prevSeq = -1;
+        let tamperCount = 0;
+        for (const event of SegmentReader.readAll(this.paths.segmentsDir)) {
+            const evt = event;
+            const sigOk = verifyEventSig(this.installKey, evt);
+            if (!sigOk) {
+                this.recordTamper(evt.seq, 'hmac_failure');
+                tamperCount++;
+                continue; // do NOT apply
+            }
+            if (prevSeq >= 0 && event.prev !== prevHash) {
+                this.recordTamper(evt.seq, `prev_mismatch:expected=${prevHash.slice(0, 16)},got=${event.prev.slice(0, 16)}`);
+                tamperCount++;
+                // Resync chain pointer to this event so we can keep validating subsequent
+                // events (one bad event shouldn't cascade and reject the rest).
+                prevHash = hashEvent(evt);
+                prevSeq = event.seq;
+                continue; // do NOT apply
+            }
+            prevHash = hashEvent(evt);
+            prevSeq = event.seq;
+            if (event.seq >= fromSeq) {
+                this.mat.apply(evt);
+            }
+        }
+        if (tamperCount > 0) {
+            console.error(`[omnitype-daemon] replay: ${tamperCount} tampered event(s) rejected — see chain/tamper.log`);
+        }
+    }
+    recordTamper(seq, reason) {
+        try {
+            mkdirSync(this.paths.chainDir, { recursive: true });
+            appendFileSync(join(this.paths.chainDir, 'tamper.log'), JSON.stringify({ seq, reason, at: Date.now() }) + '\n', 'utf-8');
+        }
+        catch { /* best effort */ }
+    }
+    loadOrCreateInstallInfo(workspace) {
+        const infoPath = join(this.paths.root, 'install.json');
+        if (existsSync(infoPath)) {
+            try {
+                return JSON.parse(readFileSync(infoPath, 'utf-8'));
+            }
+            catch { /* recreate */ }
+        }
+        const info = {
+            install_id: randomBytes(16).toString('hex'),
+            user: process.env['USER'] ?? process.env['USERNAME'] ?? 'unknown',
+            host: hostname(),
+            workspace,
+            created_at: Date.now() * 1000,
+            protocol_version: '2.0',
+        };
+        writeFileSync(infoPath, JSON.stringify(info, null, 2), { encoding: 'utf-8', mode: 0o600 });
+        return info;
+    }
+    // ─── Adapter registration (Day 2: UDS handshake, Day 6: CapabilityClaim) ──
+    /**
+     * Called by DaemonServer when an adapter authenticates over UDS.
+     * Emits CapabilityClaim + AdapterInstalled events into the journal.
+     */
+    registerAdapter(adapterId, capabilities, manifestSigVerified, runtimeMode) {
+        const actor = {
+            kind: 'system',
+            tool: 'omnitype-daemon',
+            user: this.installInfo.user,
+            host: this.installInfo.host,
+            workspace: this.installInfo.workspace,
+        };
+        // CapabilityClaim — tier observability (§3.3, §8.2)
+        this.appendSync(actor, {
+            type: 'CapabilityClaim',
+            adapter_id: adapterId,
+            capabilities,
+            tier_breakdown: this.computeTierBreakdown(capabilities),
+        }, 'T0', 'omnitype-daemon');
+        // AdapterInstalled
+        this.appendSync(actor, {
+            type: 'AdapterInstalled',
+            adapter_id: adapterId,
+            trust_circle: 3, // default; overridden by manifest when PKI verified
+            declared_capabilities: Object.keys(capabilities),
+            manifest_sig_verified: manifestSigVerified,
+            runtime_mode: runtimeMode,
+        }, 'T0', 'omnitype-daemon');
+    }
+    /**
+     * Emits a TierShift event when an adapter is downgraded at runtime.
+     * Called by the adapter loader when a capability becomes degraded. (Day 6: §3.3)
+     */
+    emitTierShift(adapterId, fromTier, toTier, reason, capability) {
+        const actor = {
+            kind: 'system',
+            tool: 'omnitype-daemon',
+            user: this.installInfo.user,
+            host: this.installInfo.host,
+            workspace: this.installInfo.workspace,
+        };
+        this.appendSync(actor, {
+            type: 'TierShift',
+            adapter_id: adapterId,
+            from_tier: fromTier,
+            to_tier: toTier,
+            reason,
+            ...(capability ? { capability } : {}),
+        }, 'T0', 'omnitype-daemon');
+    }
+    computeTierBreakdown(capabilities) {
+        const breakdown = {};
+        if (capabilities['integrity.in_process'] === 'available')
+            breakdown['integrity.in_process'] = 40;
+        if (capabilities['integrity.signed_events'] === 'available')
+            breakdown['integrity.signed_events'] = 30;
+        if (capabilities['operation.editOp.exact'] === 'available')
+            breakdown['operation.editOp.exact'] = 15;
+        if (capabilities['attest.process_ancestry'] === 'available')
+            breakdown['attest.process_ancestry'] = 10;
+        if (capabilities['hook.preToolUse'] === 'available')
+            breakdown['hook.preToolUse'] = 5;
+        return breakdown;
+    }
+    // ─── Materializer accessors (for IPC) ────────────────────────────────────
+    getSpans(path, minTier) {
+        return this.mat.getSpans(path, minTier);
+    }
+    getAttributionSummary(path) {
+        return this.mat.getAttributionSummary(path);
+    }
+    getConcurrencyConflicts(path) {
+        return this.mat.getConcurrencyConflicts(path);
+    }
+    getHighestTierAttestations(path) {
+        return this.mat.getHighestTierAttestations(path);
+    }
+}
+//# sourceMappingURL=journal.js.map

package/dist/daemon/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../src/daemon/journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAUlD,OAAO,EACL,SAAS,EACT,SAAS,EACT,sBAAsB,EACtB,QAAQ,EACR,SAAS,EACT,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAYrD,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;QAClC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC;QAC1C,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;QACpC,YAAY,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;QAC5C,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;QACpC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,iBAAiB,CAAC;KACnD,CAAC;AACJ,CAAC;AAUD,MAAM,OAAO,OAAO;IACV,UAAU,CAAS;IACnB,WAAW,CAAc;IACzB,UAAU,CAAa;IACvB,MAAM,CAAgB;IACtB,GAAG,CAAe;IAClB,SAAS,GAAuB,IAAI,GAAG,EAAE,CAAC;IAC1C,KAAK,CAAe;IACpB,KAAK,GAAmB,EAAE,CAAC;IAC3B,UAAU,GAAyC,IAAI,CAAC;IAC/C,cAAc,GAAG,CAAC,CAAC;IACnB,SAAS,GAAG,EAAE,CAAC;IACvB,QAAQ,CAAU;IAE3B,YAAY,WAAmB,EAAE,SAAiB,EAAE,OAA+B,EAAE;QACnF,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QAEvC,KAAK,MAAM,GAAG,IAAI;YAChB,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,QAAQ;SACf,EAAE,CAAC;YACF,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,yEAAyE;YACzE,4EAA4E;YAC5E,2EAA2E;YAC3E,sEAAsE;YACtE,0DAA0D;YAC1D,IAAI,CAAC,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,sEAAsE;YACtE,IAAI,CAAC;gBAAC,IAAI,UAAU,CAAC,cAAc,CAAC;oBAAE,UAAU,CAAC,cAAc,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACjG,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,yEAAyE;YACzE,IAAI,CAAC,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE1C,iDAAiD;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;QACxC,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,UAAU,CACb,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,EAChH,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,EACxC,IAAI,EACJ,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,8EAA8E;IAE9E,MAAM,CACJ,KAAY,EACZ,IAAe,EACf,IAAU,EACV,SAAiB,EACjB,IAAI,GAAG,KAAK;QAEZ,gFAAgF;QAChF,kFAAkF;QAClF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACzE,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC;IACnB,CAAC;IAED,UAAU,CAAC,KAAY,EAAE,IAAe,EAAE,IAAU,EAAE,SAAiB;QACrE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,SAAS,CAAC,QAAuB;QAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,YAAY;QACV,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,cAAc;QACZ,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,UAAU;YAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,8EAA8E;IAEtE,UAAU,CAChB,KAAY,EACZ,IAAe,EACf,IAAU,EACV,SAAiB,EACjB,gBAA0B;QAE1B,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAClC,MAAM,MAAM,GAA6B;YACvC,CAAC,EAAE,CAAC;YACJ,GAAG;YACH,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK;YAC5B,KAAK;YACL,6EAA6E;YAC7E,wEAAwE;YACxE,IAAI,EAAE,gBAAgB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ;YAClD,KAAK,EAAE,QAAQ,EAAE;YACjB,IAAI;YACJ,UAAU,EAAE,SAAS;SACtB,CAAC;QACF,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,EAAkB,CAAC;IACrD,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAEO,UAAU,CAAC,MAAsB;QACvC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC;oBAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,MAAM,IAAI,GAAG;YACX,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG;YACxB,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;YAC9B,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SAC3B,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1D,CAAC;IAEO,aAAa;QACnB,8EAA8E;QAC9E,kFAAkF;QAClF,yEAAyE;QACzE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACxD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAInD,CAAC;gBACF,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC3C,uEAAuE;oBACvE,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,CAAC;wBAC7C,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;oBACxD,CAAC;oBACD,6CAA6C;oBAC7C,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;oBACpF,OAAO,WAAW,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;QAE9C,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;YACpF,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,uEAAuE;IAC/D,eAAe;QACrB,IAAI,IAAI,GAAsB,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClE,IAAI,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAmD,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YACxH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CAAC,OAAe;QACjC,0DAA0D;QAC1D,+EAA+E;QAC/E,8EAA8E;QAC9E,IAAI,QAAQ,GAAY,SAAS,CAAC;QAClC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;QACjB,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,GAAG,GAAG,KAAmD,CAAC;YAEhE,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;gBAC3C,WAAW,EAAE,CAAC;gBACd,SAAS,CAAC,eAAe;YAC3B,CAAC;YAED,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,0BAA0B,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC7G,WAAW,EAAE,CAAC;gBACd,0EAA0E;gBAC1E,gEAAgE;gBAChE,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC1B,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;gBACpB,SAAS,CAAC,eAAe;YAC3B,CAAC;YAED,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;YAEpB,IAAI,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,6BAA6B,WAAW,oDAAoD,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,GAAW,EAAE,MAAc;QAC9C,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,cAAc,CACZ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,EACtD,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;IAEO,uBAAuB,CAAC,SAAiB;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACvD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAgB,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,GAAgB;YACxB,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC3C,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;YACjE,IAAI,EAAE,QAAQ,EAAE;YAChB,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;YAC7B,gBAAgB,EAAE,KAAK;SACxB,CAAC;QACF,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,eAAe,CACb,SAAiB,EACjB,YAAsE,EACtE,mBAA4B,EAC5B,WAAoE;QAEpE,MAAM,KAAK,GAAU;YACnB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAC3B,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAC3B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS;SACtC,CAAC;QAEF,oDAAoD;QACpD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE;YACrB,IAAI,EAAE,iBAAiB;YACvB,UAAU,EAAE,SAAS;YACrB,YAAY;YACZ,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC;SACxD,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAE5B,mBAAmB;QACnB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE;YACrB,IAAI,EAAE,kBAAkB;YACxB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,CAAC,EAAE,oDAAoD;YACrE,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;YAChD,qBAAqB,EAAE,mBAAmB;YAC1C,YAAY,EAAE,WAAW;SAC1B,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,SAAiB,EAAE,QAAc,EAAE,MAAY,EAAE,MAAc,EAAE,UAAmB;QAChG,MAAM,KAAK,GAAU;YACnB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAC3B,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAC3B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS;SACtC,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE;YACrB,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,MAAM;YACf,MAAM;YACN,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC9B,CAAC;IAEO,oBAAoB,CAAC,YAAoC;QAC/D,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,IAAI,YAAY,CAAC,sBAAsB,CAAC,KAAK,WAAW;YAAE,SAAS,CAAC,sBAAsB,CAAC,GAAG,EAAE,CAAC;QACjG,IAAI,YAAY,CAAC,yBAAyB,CAAC,KAAK,WAAW;YAAE,SAAS,CAAC,yBAAyB,CAAC,GAAG,EAAE,CAAC;QACvG,IAAI,YAAY,CAAC,wBAAwB,CAAC,KAAK,WAAW;YAAE,SAAS,CAAC,wBAAwB,CAAC,GAAG,EAAE,CAAC;QACrG,IAAI,YAAY,CAAC,yBAAyB,CAAC,KAAK,WAAW;YAAE,SAAS,CAAC,yBAAyB,CAAC,GAAG,EAAE,CAAC;QACvG,IAAI,YAAY,CAAC,iBAAiB,CAAC,KAAK,WAAW;YAAE,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACtF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,4EAA4E;IAE5E,QAAQ,CAAC,IAAY,EAAE,OAAc;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,qBAAqB,CAAC,IAAY;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,uBAAuB,CAAC,IAAa;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,0BAA0B,CAAC,IAAY;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/daemon/server.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Unix Domain Socket server.
+ *
+ * Protocol: newline-delimited JSON over UDS (or named pipe on Windows).
+ * Each message: { type, id, payload }
+ * Each response: { type: "reply", id, ok, payload? }
+ *
+ * Message types the daemon accepts:
+ *   append       — write one event to the journal
+ *   append_batch — write multiple events in one flush
+ *   query_spans  — read materialized spans for a file
+ *   query_file   — read file state
+ *   query_health — get chain head + stats
+ *   subscribe    — register for live event push (streaming mode)
+ */
+import { Journal } from './journal.js';
+import type { Actor, EventBody, Tier } from '../schema/events.js';
+export interface DaemonMessage {
+    type: string;
+    id: string;
+    payload: unknown;
+}
+export interface DaemonReply {
+    type: 'reply';
+    id: string;
+    ok: boolean;
+    payload?: unknown;
+    error?: string;
+}
+export declare function getSocketPath(journalRoot: string): string;
+export declare class DaemonServer {
+    private server;
+    private journal;
+    private subscribers;
+    private installKey;
+    private hardened;
+    private connState;
+    constructor(journal: Journal, socketPath: string, installKey: Buffer, hardened?: boolean);
+    private handleConnection;
+    private handleMessage;
+    private dispatch;
+    private send;
+    close(): Promise<void>;
+}
+export declare class JournalClient {
+    private socketPath;
+    private socket;
+    private pending;
+    private buf;
+    private idCounter;
+    constructor(socketPath: string);
+    connect(): Promise<void>;
+    /**
+     * Authenticate with the daemon using the per-adapter subkey. (Day 2: §1.1)
+     * Must be called after connect() and before any append calls.
+     * installKey is the 32-byte install key; adapterId is this adapter's ID.
+     */
+    authenticate(installKey: Buffer, adapterId: string, opts?: {
+        capabilities?: Record<string, 'available' | 'degraded' | 'unavailable'>;
+        manifestSigVerified?: boolean;
+        runtimeMode?: 'co-process' | 'in-process' | 'out-of-process' | 'hook';
+    }): Promise<void>;
+    send<T = unknown>(type: string, payload: unknown): Promise<T>;
+    append(actor: Actor, body: EventBody, tier: Tier, adapterId: string, sync?: boolean): Promise<{
+        seq: number;
+    }>;
+    appendBatch(events: Array<{
+        actor: Actor;
+        body: EventBody;
+        tier: Tier;
+    }>, adapterId: string): Promise<{
+        seqs: number[];
+    }>;
+    querySpans(path: string, minTier?: Tier): Promise<{
+        spans: import("../schema/events.js").Span[];
+    }>;
+    health(): Promise<{
+        head: {
+            seq: number;
+            lastHash: string;
+            headTs: number;
+        };
+        install: import("../schema/events.js").InstallInfo;
+    }>;
+    disconnect(): void;
+    /** Check if the daemon is running without connecting. */
+    static isRunning(socketPath: string): Promise<boolean>;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/daemon/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/daemon/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAElE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAKzD;AASD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAU;IAE1B,OAAO,CAAC,SAAS,CAAsC;gBAE3C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,UAAQ;IA4BtF,OAAO,CAAC,gBAAgB;IA0BxB,OAAO,CAAC,aAAa;IAuBrB,OAAO,CAAC,QAAQ;IAsIhB,OAAO,CAAC,IAAI;IAIZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAGvB;AAID,qBAAa,aAAa;IAMZ,OAAO,CAAC,UAAU;IAL9B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,OAAO,CAAoF;IACnG,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,SAAS,CAAK;gBAEF,UAAU,EAAE,MAAM;IAEhC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAoC9B;;;;OAIG;IACG,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;QACJ,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC,CAAC;QACxE,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,WAAW,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,gBAAgB,GAAG,MAAM,CAAC;KAClE,GACL,OAAO,CAAC,IAAI,CAAC;IAgBV,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAW7D,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,UAAQ,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAI5G,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,SAAS,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAIzH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI;eACjB,OAAO,qBAAqB,EAAE,IAAI,EAAE;;IAG1D,MAAM;cACe;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE;iBAAW,OAAO,qBAAqB,EAAE,WAAW;;IAGhI,UAAU,IAAI,IAAI;IAKlB,yDAAyD;WAC5C,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAa7D"}