@openlimiter/core 1.3.5 → 2.0.0

package/dist/activity/contract.js

@@ -0,0 +1,281 @@
+/** Local activity protocol. No collector, clock, storage or notification delivery. */
+export const ACTIVITY_EVENT_VERSION = 1;
+export const MAX_ACTIVITY_EVENT_BYTES = 8 * 1024;
+export const MAX_ACTIVITY_SPOOL_BYTES = 16 * 1024 * 1024;
+export const MAX_ACTIVITY_EVENT_AGE_MS = 24 * 60 * 60 * 1000;
+/** Proposed live cap, frozen for consumers of version 1. */
+export const MAX_LIVE_ACTIVITY_SESSIONS = 64;
+export const ACTIVITY_SESSION_RETIREMENT_MS = 24 * 60 * 60 * 1000;
+export const ACTIVITY_AGENTS = [
+    "claude_code", "codex", "muse", "gemini_cli", "cursor", "kimi", "grok", "antigravity"
+];
+export const ACTIVITY_STATES = ["busy", "waiting", "done", "idle", "unknown"];
+export const ACTIVITY_SOURCES = ["hook", "registry", "transcript", "rollout", "editor_state"];
+export const ACTIVITY_SIGNALS = [
+    "observation", "user_question", "claude_stop", "process_vanished", "session_ended"
+];
+/** Shared boundary primitives, deliberately independent of Node and browser state. */
+export function isContractObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+export function isContractInstant(value) {
+    if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u.test(value))
+        return false;
+    const ms = Date.parse(value);
+    return Number.isFinite(ms) && new Date(ms).toISOString() === value;
+}
+export function hasOnlyContractKeys(value, keys) {
+    return Object.keys(value).every((key) => keys.includes(key));
+}
+const identifier = (value) => typeof value === "string" && value["length"] > 0 && value["length"] <= 256 && !/[\u0000-\u001f\u007f]/u.test(value);
+const pid = (value) => Number.isSafeInteger(value) && value > 0;
+const member = (values, value) => typeof value === "string" && values.includes(value);
+/** Strict spool boundary. now is epoch milliseconds supplied by the consumer. */
+export function isActivityEvent(value, now, origin = "hook") {
+    if (!Number.isFinite(now) || !isContractObject(value))
+        return false;
+    if (!hasOnlyContractKeys(value, ["version", "eventId", "sessionId", "sequence", "agent", "accountAlias",
+        "observedAt", "state", "outcome", "source", "confidence", "process", "signal", "parentSessionId", "isSidechain"]))
+        return false;
+    try {
+        if (new TextEncoder().encode(JSON.stringify(value)).byteLength > MAX_ACTIVITY_EVENT_BYTES)
+            return false;
+    }
+    catch {
+        return false;
+    }
+    if (value["version"] !== ACTIVITY_EVENT_VERSION || !identifier(value["eventId"]) || !identifier(value["sessionId"]) ||
+        !Number.isSafeInteger(value["sequence"]) || value["sequence"] < 0 ||
+        !member(ACTIVITY_AGENTS, value["agent"]) || !member(ACTIVITY_STATES, value["state"]) ||
+        !member(ACTIVITY_SOURCES, value["source"]) || !member(["explicit", "inferred"], value["confidence"]) ||
+        !isContractInstant(value["observedAt"]))
+        return false;
+    const age = now - Date.parse(value["observedAt"]);
+    if (age < 0 || age > MAX_ACTIVITY_EVENT_AGE_MS)
+        return false;
+    if (origin === "hook" && value["source"] !== "hook")
+        return false;
+    if (value["accountAlias"] !== undefined && !identifier(value["accountAlias"]))
+        return false;
+    if (value["parentSessionId"] !== undefined && (!identifier(value["parentSessionId"]) || value["parentSessionId"] === value["sessionId"]))
+        return false;
+    if (value["isSidechain"] !== undefined && typeof value["isSidechain"] !== "boolean")
+        return false;
+    if (value["signal"] !== undefined && !member(ACTIVITY_SIGNALS, value["signal"]))
+        return false;
+    if (value["signal"] === "claude_stop" && value["agent"] !== "claude_code")
+        return false;
+    if (value["outcome"] !== undefined && !member(["cancelled", "failed"], value["outcome"]))
+        return false;
+    if (value["outcome"] !== undefined && value["state"] === "done")
+        return false;
+    if ((value["state"] === "done" || value["signal"] === "user_question" || value["signal"] === "claude_stop") && value["confidence"] !== "explicit")
+        return false;
+    if (value["process"] !== undefined) {
+        const process = value["process"];
+        if (!isContractObject(process) || !hasOnlyContractKeys(process, ["ppid", "pid", "startedAt"]))
+            return false;
+        if (process["ppid"] !== undefined && !pid(process["ppid"]))
+            return false;
+        if (origin === "hook" && (process["ppid"] === undefined || process["pid"] !== undefined || process["startedAt"] !== undefined))
+            return false;
+        if ((process["pid"] === undefined) !== (process["startedAt"] === undefined))
+            return false;
+        if (process["pid"] !== undefined && (!pid(process["pid"]) || !isContractInstant(process["startedAt"])))
+            return false;
+        if (isContractInstant(process["startedAt"]) && process["startedAt"] > value["observedAt"])
+            return false;
+    }
+    return true;
+}
+/** Validate original byte size before parsing; reserialization alone misses whitespace padding. */
+export function readActivityEvent(serialized, now, origin = "hook") {
+    if (new TextEncoder().encode(serialized).byteLength > MAX_ACTIVITY_EVENT_BYTES)
+        throw new TypeError("activity: event too large");
+    let value;
+    try {
+        value = JSON.parse(serialized);
+    }
+    catch {
+        throw new TypeError("activity: invalid JSON");
+    }
+    if (!isActivityEvent(value, now, origin))
+        throw new TypeError("activity: invalid event");
+    return value;
+}
+/** Batch dedupe across sessions before applying per session sequence precedence. */
+export function dedupeActivityEvents(events) {
+    const ids = new Set();
+    const sequences = new Set();
+    return events.filter((event) => {
+        const key = JSON.stringify([event.sessionId, event.sequence]);
+        if (ids.has(event.eventId) || sequences.has(key))
+            return false;
+        ids.add(event.eventId);
+        sequences.add(key);
+        return true;
+    });
+}
+/**
+ * Call only with validated events. Sequence is monotonic for a session across sources.
+ * Suppressed observations still advance dedupe, but never weaken the winning evidence.
+ */
+export function nextSessionState(previous, event) {
+    if (previous !== null) {
+        if (previous.sessionId !== event.sessionId || previous.agent !== event.agent)
+            return { session: previous, notification: null, reason: "other_session" };
+        if (previous.seenEventIds.includes(event.eventId) || previous.sequence === event.sequence)
+            return { session: previous, notification: null, reason: "duplicate" };
+        if (event.sequence < previous.sequence || event.observedAt < previous.observedAt)
+            return { session: previous, notification: null, reason: "out_of_order" };
+    }
+    const base = previous ?? {
+        sessionId: event.sessionId, agent: event.agent, state: "unknown", confidence: "inferred",
+        firstObservedAt: event.observedAt, observedAt: event.observedAt, stateChangedAt: event.observedAt,
+        sequence: event.sequence, seenEventIds: [], awaitingInput: false,
+        ...(event.accountAlias === undefined ? {} : { accountAlias: event.accountAlias })
+    };
+    const session = {
+        ...base, sequence: event.sequence, seenEventIds: [...base.seenEventIds, event.eventId], observedAt: event.observedAt
+    };
+    // A sidechain observation attributed to a parent cannot change that parent's state.
+    if (event.isSidechain)
+        return { session, notification: null, reason: previous === null ? "baseline" : "child" };
+    const identityChanged = base.process?.pid !== undefined && event.process?.pid !== undefined &&
+        (base.process["pid"] !== event.process["pid"] || base.process["startedAt"] !== event.process["startedAt"]);
+    const vanished = event.signal === "process_vanished" || event.signal === "session_ended" || identityChanged;
+    if (!vanished && previous !== null && base.confidence === "explicit" && event.confidence === "inferred")
+        return { session, notification: null, reason: "lower_confidence" };
+    let state = event.state;
+    let awaitingInput = base.awaitingInput;
+    if (event.signal === "user_question") {
+        state = "waiting";
+        awaitingInput = true;
+    }
+    if (event.signal === "claude_stop" && awaitingInput)
+        state = "waiting";
+    if (state === "busy" && event.confidence === "explicit")
+        awaitingInput = false;
+    if (vanished) {
+        state = "unknown";
+        awaitingInput = false;
+    }
+    // A failure or cancellation is never a success, including defensive typed calls.
+    if (event.outcome !== undefined && state === "done")
+        state = "unknown";
+    if (state === "done" && event.confidence !== "explicit")
+        state = "unknown";
+    if (state !== "waiting")
+        awaitingInput = false;
+    session.state = state;
+    session.confidence = vanished ? "inferred" : event.confidence;
+    session.awaitingInput = awaitingInput;
+    if (state !== base.state)
+        session.stateChangedAt = event.observedAt;
+    delete session.outcome;
+    if (event.outcome !== undefined)
+        session.outcome = event.outcome;
+    delete session.endedAt;
+    if (vanished || state === "done" || event.outcome !== undefined)
+        session.endedAt = base.state === state && base.outcome === event.outcome ? base.endedAt ?? event.observedAt : event.observedAt;
+    if (event.process !== undefined && !identityChanged)
+        session.process = {
+            ...(base.process?.pid === undefined ? {} : { pid: base.process.pid, startedAt: base.process.startedAt }),
+            ...(event.process["ppid"] === undefined ? {} : { ppid: event.process["ppid"] }),
+            ...(event.process["pid"] === undefined ? {} : { pid: event.process["pid"], startedAt: event.process["startedAt"] })
+        };
+    if (identityChanged)
+        delete session.process;
+    const notification = previous !== null && base.state !== state && event.outcome === undefined &&
+        session.confidence === "explicit" ? state === "waiting" ? "agent_waiting" : state === "done" ? "agent_done" : null : null;
+    return { session, notification, reason: previous === null ? "baseline" : "applied" };
+}
+/** Retirement uses the state/ending time, so repeated idle polls cannot keep it alive. */
+export function shouldRetireActivitySession(session, now) {
+    const since = session.endedAt ?? (session.state === "idle" ? session.stateChangedAt : undefined);
+    return since !== undefined && Number.isFinite(now) && now - Date.parse(since) >= ACTIVITY_SESSION_RETIREMENT_MS;
+}
+// SHA-256 over a domain separated, length delimited identity. Pure and usable in every lane.
+// This is a stable pseudonym, not a secret or an authorization token.
+function opaqueSessionId(agent, sessionId) {
+    const bytes = new TextEncoder().encode(JSON.stringify(["openlimiter.activity.v1", agent, sessionId]));
+    const words = new Uint32Array(Math.ceil((bytes.length + 9) / 64) * 16);
+    bytes.forEach((byte, index) => { words[index >>> 2] = words[index >>> 2] | byte << (24 - (index % 4) * 8); });
+    words[bytes.length >>> 2] = words[bytes.length >>> 2] | 0x80 << (24 - (bytes.length % 4) * 8);
+    words[words.length - 1] = bytes.length * 8;
+    const k = [
+        0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+        0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+        0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+        0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+        0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+        0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+        0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+        0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
+    ];
+    const h = [0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19];
+    const rotate = (n, shift) => n >>> shift | n << (32 - shift);
+    for (let offset = 0; offset < words.length; offset += 16) {
+        const w = new Uint32Array(64);
+        for (let i = 0; i < 64; i++) {
+            const x = w[i - 15] ?? 0, y = w[i - 2] ?? 0;
+            w[i] = i < 16 ? words[offset + i] : w[i - 16] + (rotate(x, 7) ^ rotate(x, 18) ^ x >>> 3) + w[i - 7] + (rotate(y, 17) ^ rotate(y, 19) ^ y >>> 10);
+        }
+        let [a, b, c, d, e, f, g, j] = h;
+        for (let i = 0; i < 64; i++) {
+            const t1 = (j + (rotate(e, 6) ^ rotate(e, 11) ^ rotate(e, 25)) + ((e & f) ^ (~e & g)) + k[i] + w[i]) | 0;
+            const t2 = ((rotate(a, 2) ^ rotate(a, 13) ^ rotate(a, 22)) + ((a & b) ^ (a & c) ^ (b & c))) | 0;
+            j = g;
+            g = f;
+            f = e;
+            e = (d + t1) | 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (t1 + t2) | 0;
+        }
+        [a, b, c, d, e, f, g, j].forEach((value, i) => { h[i] = (h[i] + value) >>> 0; });
+    }
+    return h.map((value) => value["toString"](16).padStart(8, "0")).join("");
+}
+function isProjectedActivityRecord(value, display) {
+    if (!isContractObject(value) || !hasOnlyContractKeys(value, ["sessionId", "agent", "state", "confidence", "firstObservedAt",
+        "observedAt", "stateChangedAt", "userProjectLabel", ...(display ? ["outcome"] : [])]))
+        return false;
+    if (typeof value["sessionId"] !== "string" || !/^[a-f0-9]{64}$/u.test(value["sessionId"]) ||
+        !member(ACTIVITY_AGENTS, value["agent"]) || !member(ACTIVITY_STATES, value["state"]) ||
+        !member(["explicit", "inferred"], value["confidence"]) || !isContractInstant(value["firstObservedAt"]) ||
+        !isContractInstant(value["observedAt"]) || !isContractInstant(value["stateChangedAt"]))
+        return false;
+    if (value["firstObservedAt"] > value["stateChangedAt"] || value["stateChangedAt"] > value["observedAt"])
+        return false;
+    if (value["state"] === "done" && value["confidence"] !== "explicit")
+        return false;
+    if (value["userProjectLabel"] !== undefined && !identifier(value["userProjectLabel"]))
+        return false;
+    return value["outcome"] === undefined || (display && member(["cancelled", "failed"], value["outcome"]) && value["state"] !== "done");
+}
+export function isActivityUploadRecord(value) {
+    return isProjectedActivityRecord(value, false);
+}
+export function isActivityDisplayRecord(value) {
+    return isProjectedActivityRecord(value, true);
+}
+/** An explicit allowlist. Never spread a session, event, alias or process into either record. */
+export function toUploadRecord(session) {
+    const record = {
+        sessionId: opaqueSessionId(session.agent, session.sessionId), agent: session.agent,
+        state: session.state, confidence: session.confidence, firstObservedAt: session.firstObservedAt,
+        observedAt: session.observedAt, stateChangedAt: session.stateChangedAt
+    };
+    if (session.userProjectLabel !== undefined) {
+        if (!identifier(session.userProjectLabel))
+            throw new TypeError("activity: invalid user project label");
+        record.userProjectLabel = session.userProjectLabel;
+    }
+    return record;
+}
+export function toDisplayRecord(session) {
+    return { ...toUploadRecord(session), ...(session.outcome === undefined ? {} : { outcome: session.outcome }) };
+}
+//# sourceMappingURL=contract.js.map

package/dist/activity/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/activity/contract.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa;CAC7E,CAAC;AACX,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,CAAU,CAAC;AACvG,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe;CAC1E,CAAC;AAsCX,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7G,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACrE,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAA8B,EAAE,IAAuB;IACzF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AACD,MAAM,UAAU,GAAG,CAAC,KAAc,EAAmB,EAAE,CACrD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtH,MAAM,GAAG,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CAAC;AACtG,MAAM,MAAM,GAAG,CAAC,MAAyB,EAAE,KAAc,EAAW,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEtD,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,GAAW,EAAE,SAA6B,MAAM;IAC9F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc;QACrG,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClI,IAAI,CAAC;QACH,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,wBAAwB;YAAE,OAAO,KAAK,CAAC;IAC1G,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACzB,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,sBAAsB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjH,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAK,KAAK,CAAC,UAAU,CAAY,GAAG,CAAC;QAC7E,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpF,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACpG,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAClD,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,yBAAyB;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,KAAK,CAAC,WAAW,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvJ,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAClG,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9F,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IACxF,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvG,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,eAAe,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAChK,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5G,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACzE,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7I,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1F,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrH,IAAI,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;IAC1G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,GAAW,EAAE,SAA6B,MAAM;IACpG,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,GAAG,wBAAwB;QAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACjI,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAAC,CAAC;IAChG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AA0BD,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,MAAgC;IACnE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvB,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgC,EAAE,KAAoB;IACrF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;YAC1E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAC5E,IAAI,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YACvF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACxE,IAAI,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU;YAC9E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAoB,QAAQ,IAAI;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU;QACxF,eAAe,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,UAAU;QACjG,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK;QAChE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;KAClF,CAAC;IACF,MAAM,OAAO,GAAoB;QAC/B,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;KACrH,CAAC;IACF,oFAAoF;IACpF,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAChH,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS;QACzF,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7G,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,kBAAkB,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe,IAAI,eAAe,CAAC;IAC5G,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU;QACrG,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAErE,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IACxB,IAAI,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAAC,KAAK,GAAG,SAAS,CAAC;QAAC,aAAa,GAAG,IAAI,CAAC;IAAC,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,aAAa;QAAE,KAAK,GAAG,SAAS,CAAC;IACvE,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU;QAAE,aAAa,GAAG,KAAK,CAAC;IAC/E,IAAI,QAAQ,EAAE,CAAC;QAAC,KAAK,GAAG,SAAS,CAAC;QAAC,aAAa,GAAG,KAAK,CAAC;IAAC,CAAC;IAC3D,iFAAiF;IACjF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;QAAE,KAAK,GAAG,SAAS,CAAC;IACvE,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU;QAAE,KAAK,GAAG,SAAS,CAAC;IAC3E,IAAI,KAAK,KAAK,SAAS;QAAE,aAAa,GAAG,KAAK,CAAC;IAC/C,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IACtB,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC9D,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;IACtC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC;IACpE,OAAO,OAAO,CAAC,OAAO,CAAC;IACvB,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACjE,OAAO,OAAO,CAAC,OAAO,CAAC;IACvB,IAAI,QAAQ,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAC7D,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IACjI,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,eAAe;QAAE,OAAO,CAAC,OAAO,GAAG;YACrE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAU,EAAE,CAAC;YACzG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAE,EAAE,CAAC;SACrH,CAAC;IACF,IAAI,eAAe;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,MAAM,YAAY,GAAG,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3F,OAAO,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5H,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACvF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,2BAA2B,CAAC,OAAwB,EAAE,GAAW;IAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjG,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,8BAA8B,CAAC;AAClH,CAAC;AAED,6FAA6F;AAC7F,sEAAsE;AACtE,SAAS,eAAe,CAAC,KAAoB,EAAE,SAAiB;IAC9D,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,yBAAyB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,CAAE,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAE,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/F,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG;QACR,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU;QACvF,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU;QACvF,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU;QACvF,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU;QACvF,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU;QACvF,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU;QACvF,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU;QACvF,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU;KACxF,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,KAAa,EAAU,EAAE,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IACrF,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,EAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAClJ,CAAC;QACD,IAAI,CAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,CAAC,GAAG,CAA8D,CAAC;QACvF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,EAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC;YACx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xD,CAAC;QACD,CAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC3E,CAAC;AAcD,SAAS,yBAAyB,CAAC,KAAc,EAAE,OAAgB;IACjE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB;QACzH,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtG,IAAI,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvF,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpF,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACtG,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvG,IAAI,KAAK,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACtH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,KAAK,CAAC,kBAAkB,CAAC,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpG,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC;AACvI,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,cAAc,CAAC,OAAwB;IACrD,MAAM,MAAM,GAAyB;QACnC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;QAClF,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe;QAC9F,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc;KACvE,CAAC;IACF,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;QACvG,MAAM,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,OAAwB;IACtD,OAAO,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;AAChH,CAAC"}

package/dist/activity/spool.d.ts

@@ -0,0 +1,20 @@
+import { type ActivityEvent } from "./contract.js";
+export interface ActivitySpoolOptions {
+    /** The existing OpenLimiter state root, never a value from a hook payload. */
+    directory: string;
+    now?: number;
+    signal?: AbortSignal;
+    /** Monotonic deadline for synchronous filesystem work; timers cannot interrupt it. */
+    deadline?: number;
+    /** Windows must establish and verify an inheritable owner ACL before writing. */
+    protectWindowsDirectory?: (directory: string) => Promise<void>;
+}
+export declare function prepareActivitySpool(options: ActivitySpoolOptions): Promise<string>;
+/** A global spool lock serializes size accounting and sequence allocation. */
+export declare function writeActivityEvent(event: ActivityEvent, options: ActivitySpoolOptions): Promise<ActivityEvent>;
+/** Read only. Invalid, stale, partial and hostile records are counted and skipped. */
+export declare function readActivitySpool(directory: string, now?: number): {
+    events: ActivityEvent[];
+    skipped: number;
+};
+//# sourceMappingURL=spool.d.ts.map

package/dist/activity/spool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool.d.ts","sourceRoot":"","sources":["../../src/activity/spool.ts"],"names":[],"mappings":"AAOA,OAAO,EAEwC,KAAK,aAAa,EAChE,MAAM,eAAe,CAAC;AASvB,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChE;AAyED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAwCzF;AAED,8EAA8E;AAC9E,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CA0DpH;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG;IAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiCnH"}

package/dist/activity/spool.js

@@ -0,0 +1,305 @@
+import { randomUUID } from "node:crypto";
+import { chmodSync, closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readdirSync, readSync, realpathSync, renameSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { isActivityEvent, MAX_ACTIVITY_EVENT_AGE_MS, MAX_ACTIVITY_EVENT_BYTES, MAX_ACTIVITY_SPOOL_BYTES, readActivityEvent } from "./contract.js";
+const EVENT_NAME = /^(\d{16})-([a-f0-9-]{36})\.json$/u;
+const TEMP_NAME = /^\.[a-f0-9-]{36}\.tmp$/u;
+const MAX_ENTRIES = 65_536;
+/* A healthy writer holds the lock for milliseconds; a hook killed mid write
+   (Ctrl+C in the agent) strands it, so recover well before the event age. */
+const STALE_WRITER_LOCK_MS = 10_000;
+function code(error) {
+    return error.code;
+}
+function checkpoint(options) {
+    options.signal?.throwIfAborted();
+    if (options.deadline !== undefined && performance.now() >= options.deadline)
+        throw new Error("activity: deadline");
+}
+/** The root is already canonical. Refuse links in the owned subtree. */
+function directories(target, create) {
+    if (!path.isAbsolute(target))
+        throw new Error("activity: absolute state root required");
+    let current = path.dirname(target);
+    const root = lstatSync(current);
+    if (!root.isDirectory() || root.isSymbolicLink())
+        throw new Error("activity: unsafe directory");
+    let created = false;
+    for (const segment of target.slice(current.length).split(path.sep).filter(Boolean)) {
+        if (segment === "." || segment === "..")
+            throw new Error("activity: path escape");
+        current = path.join(current, segment);
+        let info;
+        try {
+            info = lstatSync(current);
+        }
+        catch (error) {
+            if (!create || code(error) !== "ENOENT")
+                throw error;
+            try {
+                mkdirSync(current, { mode: 0o700 });
+                if (current === target)
+                    created = true;
+            }
+            catch (error) {
+                if (code(error) !== "EEXIST")
+                    throw error;
+            }
+            info = lstatSync(current);
+        }
+        if (!info.isDirectory() || info.isSymbolicLink())
+            throw new Error("activity: unsafe directory");
+    }
+    return created;
+}
+function spoolPath(root, create = false) {
+    if (!path.isAbsolute(root) || root.split(/[\\/]/u).includes(".."))
+        throw new Error("activity: path escape");
+    if (create)
+        mkdirSync(root, { recursive: true, mode: 0o700 });
+    // System roots may contain aliases (macOS /var, Windows junctions). Resolve
+    // only the supplied state root, never activity or any of its entries.
+    return path.join(realpathSync(root), "activity");
+}
+function same(left, right) {
+    return left.dev === right.dev && left.ino === right.ino;
+}
+function regular(info) {
+    return info.isFile() && !info.isSymbolicLink() && info.nlink === 1 &&
+        (process.platform === "win32" ||
+            (info.uid === process.getuid?.() && (info.mode & 0o077) === 0));
+}
+function readFile(file, info, now) {
+    if (!regular(info) || info.size > MAX_ACTIVITY_EVENT_BYTES)
+        throw new Error("activity: unsafe file");
+    const fd = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+    try {
+        const opened = fstatSync(fd);
+        if (!same(info, opened) || !regular(opened) || opened.size > MAX_ACTIVITY_EVENT_BYTES)
+            throw new Error("activity: changed file");
+        const bytes = Buffer.alloc(MAX_ACTIVITY_EVENT_BYTES + 1);
+        let length = 0;
+        while (length < bytes.length) {
+            const count = readSync(fd, bytes, length, bytes.length - length, null);
+            if (count === 0)
+                break;
+            length += count;
+        }
+        if (length > MAX_ACTIVITY_EVENT_BYTES)
+            throw new Error("activity: oversized file");
+        const serialized = new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, length));
+        const event = readActivityEvent(serialized, now, "desktop");
+        if (event.source === "hook" && !isActivityEvent(event, now, "hook"))
+            throw new Error("activity: invalid hook process");
+        return event;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export async function prepareActivitySpool(options) {
+    checkpoint(options);
+    const directory = spoolPath(options.directory, true);
+    const created = directories(directory, true);
+    const before = lstatSync(directory);
+    if (process.platform === "win32") {
+        const stamp = path.join(directory, ".acl-verified");
+        let verified = false;
+        try {
+            const info = lstatSync(stamp);
+            verified = regular(info) && info.size <= MAX_ACTIVITY_EVENT_BYTES &&
+                (options.now ?? Date.now()) - info.mtimeMs <= MAX_ACTIVITY_EVENT_AGE_MS;
+        }
+        catch (error) {
+            if (code(error) !== "ENOENT")
+                throw error;
+        }
+        if (created || !verified) {
+            if (!options.protectWindowsDirectory)
+                throw new Error("activity: Windows ACL helper required");
+            await options.protectWindowsDirectory(directory);
+            checkpoint(options);
+            directories(directory, false);
+            if (!same(before, lstatSync(directory)))
+                throw new Error("activity: changed directory");
+            const temporary = path.join(directory, "." + randomUUID() + ".tmp");
+            try {
+                const fd = openSync(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 0o600);
+                try {
+                    writeFileSync(fd, "");
+                }
+                finally {
+                    closeSync(fd);
+                }
+                // Replace only the stamp itself. Never traverse a planted directory or link.
+                try {
+                    const info = lstatSync(stamp);
+                    if (info.isDirectory() && !info.isSymbolicLink())
+                        rmdirSync(stamp);
+                    else if (!regular(info))
+                        unlinkSync(stamp);
+                }
+                catch (error) {
+                    if (code(error) !== "ENOENT")
+                        throw error;
+                }
+                renameSync(temporary, stamp);
+            }
+            finally {
+                try {
+                    unlinkSync(temporary);
+                }
+                catch { /* Published or failed stamp. */ }
+            }
+        }
+    }
+    else {
+        if (before.uid !== process.getuid?.())
+            throw new Error("activity: wrong directory owner");
+        chmodSync(directory, 0o700);
+    }
+    checkpoint(options);
+    directories(directory, false);
+    if (!same(before, lstatSync(directory)))
+        throw new Error("activity: changed directory");
+    return directory;
+}
+/** A global spool lock serializes size accounting and sequence allocation. */
+export async function writeActivityEvent(event, options) {
+    const now = options.now ?? Date.now();
+    if (!isActivityEvent(event, now, event.source === "hook" ? "hook" : "desktop"))
+        throw new Error("activity: invalid event");
+    const directory = await prepareActivitySpool(options);
+    const lock = path.join(directory, ".writer");
+    const deadline = performance.now() + 40;
+    while (true) {
+        checkpoint(options);
+        try {
+            mkdirSync(lock, { mode: 0o700 });
+            break;
+        }
+        catch (error) {
+            if (code(error) !== "EEXIST" || performance.now() >= deadline)
+                throw error;
+            const info = lstatSync(lock);
+            if (!info.isDirectory() || info.isSymbolicLink())
+                throw new Error("activity: unsafe lock");
+            // Only an empty abandoned lock can be recovered. Never recurse into it.
+            if (now - info.mtimeMs > STALE_WRITER_LOCK_MS) {
+                rmdirSync(lock);
+                continue;
+            }
+            await new Promise((resolve) => setTimeout(resolve, 2));
+        }
+    }
+    let temporary;
+    try {
+        directories(directory, false);
+        let total = 0;
+        let sequence = Math.max(event.sequence, now * 1_000);
+        const entries = readdirSync(directory);
+        if (entries.length > MAX_ENTRIES)
+            throw new Error("activity: too many entries");
+        for (const name of entries) {
+            checkpoint(options);
+            if (name === ".writer")
+                continue;
+            const file = path.join(directory, name);
+            const info = lstatSync(file);
+            if (!regular(info))
+                throw new Error("activity: unsafe spool entry");
+            const match = EVENT_NAME.exec(name);
+            const owned = match !== null || TEMP_NAME.test(name);
+            if (owned && now - info.mtimeMs > MAX_ACTIVITY_EVENT_AGE_MS) {
+                unlinkSync(file);
+                continue;
+            }
+            if (info.size > MAX_ACTIVITY_EVENT_BYTES)
+                throw new Error("activity: oversized spool entry");
+            /* Names and times only: parsing every record here made each write O(n)
+               reads and dropped hooks once a busy day filled the spool. A record
+               whose observedAt is stale is refused by the reader and removed by
+               the age cleanup above. */
+            total += info.size;
+            if (match !== null)
+                sequence = Math.max(sequence, Number(match[1]) + 1);
+        }
+        const stored = { ...event, sequence };
+        if (!isActivityEvent(stored, now, event.source === "hook" ? "hook" : "desktop"))
+            throw new Error("activity: invalid sequence");
+        const bytes = Buffer.from(JSON.stringify(stored));
+        if (bytes.length > MAX_ACTIVITY_EVENT_BYTES || total + bytes.length > MAX_ACTIVITY_SPOOL_BYTES)
+            throw new Error("activity: spool full");
+        const id = randomUUID();
+        temporary = path.join(directory, "." + id + ".tmp");
+        const fd = openSync(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 0o600);
+        try {
+            writeFileSync(fd, bytes);
+        }
+        finally {
+            closeSync(fd);
+        }
+        checkpoint(options);
+        directories(directory, false);
+        renameSync(temporary, path.join(directory, String(sequence).padStart(16, "0") + "-" + id + ".json"));
+        temporary = undefined;
+        return stored;
+    }
+    finally {
+        if (temporary !== undefined) {
+            try {
+                unlinkSync(temporary);
+            }
+            catch { /* Failed writes never publish. */ }
+        }
+        rmdirSync(lock);
+    }
+}
+/** Read only. Invalid, stale, partial and hostile records are counted and skipped. */
+export function readActivitySpool(directory, now = Date.now()) {
+    const events = [];
+    let skipped = 0;
+    try {
+        const spool = spoolPath(directory);
+        directories(spool, false);
+        const info = lstatSync(spool);
+        if (process.platform !== "win32" && (info.uid !== process.getuid?.() || (info.mode & 0o077) !== 0))
+            throw new Error("activity: unsafe directory");
+        const names = readdirSync(spool);
+        let total = 0;
+        for (const [index, name] of names.entries()) {
+            if (name === ".acl-verified" && process.platform === "win32") {
+                const stamp = lstatSync(path.join(spool, name));
+                if (!regular(stamp) || stamp.size > MAX_ACTIVITY_EVENT_BYTES)
+                    skipped += 1;
+                continue;
+            }
+            if (name === ".writer") {
+                const lock = lstatSync(path.join(spool, name));
+                if (!lock.isDirectory() || lock.isSymbolicLink())
+                    skipped += 1;
+                continue;
+            }
+            try {
+                if (index >= MAX_ENTRIES || !EVENT_NAME.test(name))
+                    throw new Error("activity: unexpected name");
+                const file = path.join(spool, name);
+                const info = lstatSync(file);
+                total += info.size;
+                if (total > MAX_ACTIVITY_SPOOL_BYTES)
+                    throw new Error("activity: read cap");
+                events.push(readFile(file, info, now));
+            }
+            catch {
+                skipped += 1;
+            }
+        }
+    }
+    catch (error) {
+        if (code(error) !== "ENOENT")
+            skipped += 1;
+    }
+    events.sort((left, right) => left.sequence - right.sequence || left.observedAt.localeCompare(right.observedAt) || left.eventId.localeCompare(right.eventId));
+    return { events, skipped };
+}
+//# sourceMappingURL=spool.js.map