@semiont/core 0.5.23 → 0.5.25

package/dist/testing/axioms.d.ts

@@ -0,0 +1,180 @@
+import { Observable } from 'rxjs';
+import { StateUnit } from '@semiont/core';
+import * as fc from 'fast-check';
+import { FaultyTransport, FaultAction } from '@semiont/core/testing';
+
+/**
+ * Executable enforcement of the StateUnit pattern — the runtime twin of
+ * `packages/sdk/docs/STATE-UNITS.md` and the ledger in
+ * `.plans/STATE-UNIT-AXIOMS.md`. The `StateUnit` interface's own comment notes
+ * the pattern is convention; this file makes it executable.
+ *
+ * `assertStateUnitAxioms(spec)` runs every applicable axiom against a factory in
+ * one shot, throwing a labeled Error on the first violation (the axiom id is in
+ * the message). It is framework-agnostic on purpose — only `rxjs` + `fast-check`,
+ * no `vitest` — so it ships through `@semiont/core/testing` and any package's test
+ * runner can invoke it from a single `it(...)` per state unit. It lives in core
+ * (not sdk) so even packages below sdk (e.g. `http-transport`) can use it without
+ * a dependency cycle.
+ *
+ * Axioms (random-input dimension; fast-check):
+ *   A5        dispose() is idempotent and total (n ∈ [1,20] calls never throw)
+ *   A5b       post-dispose inertness — every public method is a no-op after dispose
+ *   A6        every pre-dispose subscriber (k ∈ [1,10]) sees `complete` on dispose
+ *   X3-runtime instance isolation — driving one instance never moves another's surfaces
+ * Structural assertions (single-shot):
+ *   A1        plain-object identity (no class instance)
+ *   X1        no raw Subject on the public surface
+ *   A7-passed disposing the unit must NOT dispose an injected dependency
+ *   A7-owned  disposing the unit MUST dispose its internally-constructed children
+ */
+
+/**
+ * A disposable stand-in for an injected dependency. Pass one as a unit's
+ * constructor arg, then list it in `setup().passedIn` so A7-passed can assert
+ * the unit never disposed it. Counts calls so A7-passed also holds under the
+ * repeated-dispose stress of A5.
+ */
+interface DisposeProbe extends StateUnit {
+    readonly disposeCount: number;
+}
+declare function disposeProbe(): DisposeProbe;
+type SetupResult<T extends StateUnit> = T | {
+    unit: T;
+    passedIn?: readonly DisposeProbe[];
+    teardown?: () => void;
+};
+interface StateUnitAxiomSpec<T extends StateUnit> {
+    /**
+     * Build a FRESH unit. Called many times (fast-check re-runs), so it must
+     * return an independent instance each call. Return the bare unit, or an object
+     * carrying the injected `passedIn` probes (A7-passed) and a `teardown` to
+     * release per-instance resources (e.g. a mock bus).
+     */
+    setup: () => SetupResult<T>;
+    /** Owned public Observables — Subjects the unit completes on dispose (A6, X3, post-dispose inertness). */
+    surfaces?: (unit: T) => readonly Observable<unknown>[];
+    /** Public input methods as zero-arg callers (A5b post-dispose, X3 drive). */
+    invocations?: (unit: T) => readonly (() => unknown)[];
+    /** Surfaces of internally-constructed children — must complete when the outer disposes (A7-owned). */
+    ownedChildSurfaces?: (unit: T) => readonly Observable<unknown>[];
+    /** fast-check run budget per property (default 30). */
+    numRuns?: number;
+}
+/**
+ * Run every applicable axiom against `spec`. Throws a labeled Error on the first
+ * violation. Axioms whose accessors are omitted are skipped (e.g. A7-passed
+ * runs only when `setup` returns `passedIn`; A6 only when `surfaces` is given).
+ */
+declare function assertStateUnitAxioms<T extends StateUnit>(spec: StateUnitAxiomSpec<T>): void;
+
+/**
+ * Executable enforcement of the liveness axioms — the runtime twin of
+ * `.plans/LIVENESS-AXIOMS.md`, and the composition-level sibling of
+ * `assertStateUnitAxioms` (state-unit-axioms.ts). Where the StateUnit axioms
+ * make *per-unit* wrongness mechanically detectable, these make *silence*
+ * detectable: every existing enforcement tier is safety (nothing wrong is
+ * delivered); these assert liveness (something is eventually delivered).
+ *
+ * Axioms (fault-schedule dimension; fast-check):
+ *   L1  Subscriber liveness — every output emits next|error within the bound,
+ *       under any fault schedule. Error is a permitted outcome; the forbidden
+ *       fourth state is pending-forever.
+ *   L2  Request settlement — every awaited path settles within the bound;
+ *       re-issues per logical request stay within the retry budget (B14: one);
+ *       a faulted request must be re-issued or surfaced, never swallowed.
+ *   L3  Delivery across lifecycle transitions — every event written to a live
+ *       connection reaches the output exactly once, wherever a client-initiated
+ *       transition (handover / reconnect / scope change) lands. Retirement is
+ *       by drain, never by abort (TRANSPORT-HTTP.md, Abort discipline).
+ *
+ * Framework-agnostic on purpose — only `rxjs` + `fast-check`, no `vitest` — so
+ * it ships through `@semiont/core/testing` and any package's test runner can
+ * invoke it. Deterministic virtual time: properties pass a small explicit
+ * `timeoutMs` to `busRequest`; no `Date.now`, no 30 s real waits.
+ */
+
+/** What one fresh run of the composition exposes to the axioms. */
+interface LivenessScenario {
+    /**
+     * Live-query-shaped outputs. The harness subscribes each one; every
+     * subscription must see `next` or `error` within the bound (L1).
+     */
+    outputs: readonly Observable<unknown>[];
+    /**
+     * Awaited paths. Each promise must settle — resolve or reject — within the
+     * bound (L2). Rejections are fine; pending-forever is the violation.
+     */
+    settlements?: readonly Promise<unknown>[];
+    teardown?: () => void;
+}
+interface LivenessAxiomSpec {
+    /** Build a FRESH composition wired to the given transport. Called per run. */
+    setup: (transport: FaultyTransport) => LivenessScenario | Promise<LivenessScenario>;
+    /**
+     * The timeoutMs the scenario passes to `busRequest` — the bound is derived
+     * from it: (timeoutMs × (1 + retryBudget) + Σdelays) × slackFactor.
+     */
+    timeoutMs: number;
+    /** Max sanctioned re-issues per logical request (B14 budget). Default 1. */
+    retryBudget?: number;
+    /** Override the generated fault schedules (teeth tests pin one). */
+    scheduleArb?: fc.Arbitrary<readonly FaultAction[]>;
+    /** Passed through to FaultyTransport (reply synthesis). */
+    makeResponse?: (operation: string, payload: Record<string, unknown>) => unknown;
+    /** fast-check run budget (default 25 — CI-fast; crank locally). */
+    numRuns?: number;
+    /** Real-scheduler jitter headroom on the bound (default 4×). */
+    slackFactor?: number;
+}
+/** The five wire behaviors, uniformly weighted; delays stay small (≤5 ms). */
+declare function arbFaultAction(): fc.Arbitrary<FaultAction>;
+declare function arbFaultSchedule(maxLength?: number): fc.Arbitrary<readonly FaultAction[]>;
+/**
+ * Run L1 + L2 against `spec` across generated fault schedules. Throws a
+ * labeled Error (`L1: …` / `L2: …`) on the first violation.
+ */
+declare function assertLivenessAxioms(spec: LivenessAxiomSpec): Promise<void>;
+/**
+ * A connection-stream-shaped subject: something that accepts writes to the
+ * live connection, can be told to transition (handover / reconnect / scope
+ * change), and exposes the subscriber-facing output. P3 adapts the real
+ * actor's mock-connection harness to this shape; the teeth tests drive
+ * reconstructed pre-fix doubles.
+ */
+interface DeliverySubject {
+    /** Write the event with this id to the currently-live connection. */
+    write: (eventId: string) => void;
+    /** Client-initiated lifecycle transition. */
+    transition: () => void | Promise<void>;
+    /** Subscriber-facing output; each emission is a delivered event id. */
+    output$: Observable<string>;
+    /**
+     * Drain pending asynchronous delivery at end of sequence (a live connection
+     * eventually flushes). Default: one macrotask tick.
+     */
+    settle?: () => Promise<void>;
+    teardown?: () => void;
+}
+type DeliveryOp = 'write' | 'transition';
+interface DeliveryAxiomSpec {
+    /** Build a FRESH subject. Called per run. */
+    setup: () => DeliverySubject;
+    /** Override the generated op sequences (teeth tests pin one). */
+    opsArb?: fc.Arbitrary<readonly DeliveryOp[]>;
+    /** Max generated sequence length (default 12). */
+    maxOps?: number;
+    /** fast-check run budget (default 50 — these runs are cheap). */
+    numRuns?: number;
+}
+declare function arbDeliveryOps(maxOps?: number): fc.Arbitrary<readonly DeliveryOp[]>;
+/**
+ * Run L3 against `spec` across generated write/transition interleavings.
+ * Throws a labeled Error (`L3: …`) on the first violation: an event written
+ * to a live connection delivered zero times (lost — retired by abort instead
+ * of drain) or more than once (duplicate).
+ */
+declare function assertExactlyOnceDelivery(spec: DeliveryAxiomSpec): Promise<void>;
+
+export { arbDeliveryOps, arbFaultAction, arbFaultSchedule, assertExactlyOnceDelivery, assertLivenessAxioms, assertStateUnitAxioms, disposeProbe };
+export type { DeliveryAxiomSpec, DeliveryOp, DeliverySubject, DisposeProbe, LivenessAxiomSpec, LivenessScenario, StateUnitAxiomSpec };

package/dist/testing/axioms.js

@@ -0,0 +1,365 @@
+import { FaultyTransport } from '../chunk-I3ZOWCTH.js';
+import '../chunk-FMFOBVTE.js';
+import * as fc2 from 'fast-check';
+import { Subject } from 'rxjs';
+
+function disposeProbe() {
+  let n = 0;
+  return {
+    dispose() {
+      n += 1;
+    },
+    get disposeCount() {
+      return n;
+    }
+  };
+}
+function normalize(r) {
+  if (r && typeof r === "object" && "unit" in r) {
+    return { unit: r.unit, passedIn: r.passedIn ?? [], teardown: r.teardown ?? (() => {
+    }) };
+  }
+  return { unit: r, passedIn: [], teardown: () => {
+  } };
+}
+function swallowAsync(value) {
+  if (value && typeof value === "object" && typeof value.then === "function") {
+    value.then(void 0, () => {
+    });
+  }
+}
+function assertStateUnitAxioms(spec) {
+  const numRuns = spec.numRuns ?? 30;
+  const fresh = () => normalize(spec.setup());
+  const run = (axiom, prop) => {
+    try {
+      fc2.assert(prop, { numRuns });
+    } catch (e) {
+      throw new Error(`${axiom}: ${e instanceof Error ? e.message : String(e)}`);
+    }
+  };
+  {
+    const { unit, teardown } = fresh();
+    const proto = Object.getPrototypeOf(unit);
+    if (proto !== Object.prototype && proto !== null) {
+      throw new Error("A1: state unit is not a plain object (has a class prototype)");
+    }
+    unit.dispose();
+    teardown();
+  }
+  {
+    const { unit, teardown } = fresh();
+    for (const [key, value] of Object.entries(unit)) {
+      if (value instanceof Subject && value.source === void 0) {
+        throw new Error(`X1: public field "${key}" is a raw Subject \u2014 expose it via .asObservable()`);
+      }
+    }
+    unit.dispose();
+    teardown();
+  }
+  {
+    const { unit, passedIn, teardown } = fresh();
+    unit.dispose();
+    passedIn.forEach((probe, i) => {
+      if (probe.disposeCount > 0) {
+        throw new Error(`A7-passed: the unit disposed injected dependency #${i} (it doesn't own it)`);
+      }
+    });
+    teardown();
+  }
+  run("A5", fc2.property(fc2.integer({ min: 1, max: 20 }), (n) => {
+    const { unit, passedIn, teardown } = fresh();
+    for (let i = 0; i < n; i++) unit.dispose();
+    passedIn.forEach((probe, i) => {
+      if (probe.disposeCount > 0) {
+        throw new Error(`injected dependency #${i} disposed under ${n} dispose() calls`);
+      }
+    });
+    teardown();
+  }));
+  if (spec.surfaces) {
+    const surfaces = spec.surfaces;
+    run("A6", fc2.property(fc2.integer({ min: 1, max: 10 }), (k) => {
+      const { unit, teardown } = fresh();
+      const completed = [];
+      const subs = surfaces(unit).flatMap(
+        (o) => Array.from({ length: k }, () => {
+          const idx = completed.push(false) - 1;
+          return o.subscribe({ complete: () => {
+            completed[idx] = true;
+          } });
+        })
+      );
+      unit.dispose();
+      completed.forEach((seen, idx) => {
+        if (!seen) throw new Error(`a subscriber did not see complete on dispose (k=${k}, sub #${idx})`);
+      });
+      subs.forEach((s) => s.unsubscribe());
+      teardown();
+    }));
+  }
+  if (spec.invocations) {
+    const invocations = spec.invocations;
+    run("A5b", fc2.property(fc2.array(fc2.nat(), { maxLength: 12 }), (seq) => {
+      const { unit, teardown } = fresh();
+      const callers = invocations(unit);
+      unit.dispose();
+      for (const raw of seq) {
+        if (callers.length === 0) break;
+        swallowAsync(callers[raw % callers.length]());
+      }
+      teardown();
+    }));
+  }
+  if (spec.surfaces && spec.invocations) {
+    const surfaces = spec.surfaces;
+    const invocations = spec.invocations;
+    run("X3-runtime", fc2.property(fc2.array(fc2.nat(), { minLength: 1, maxLength: 8 }), (seq) => {
+      const a = fresh();
+      const b = fresh();
+      const bSurfaces = surfaces(b.unit);
+      const bCounts = bSurfaces.map(() => 0);
+      const bSubs = bSurfaces.map((o, i) => o.subscribe(() => {
+        bCounts[i] += 1;
+      }));
+      const baseline = bCounts.slice();
+      const aCallers = invocations(a.unit);
+      for (const raw of seq) {
+        if (aCallers.length === 0) break;
+        swallowAsync(aCallers[raw % aCallers.length]());
+      }
+      bCounts.forEach((count, i) => {
+        if (count !== baseline[i]) {
+          throw new Error(`driving instance A perturbed instance B's surface #${i}`);
+        }
+      });
+      bSubs.forEach((s) => s.unsubscribe());
+      a.unit.dispose();
+      b.unit.dispose();
+      a.teardown();
+      b.teardown();
+    }));
+  }
+  if (spec.ownedChildSurfaces) {
+    const { unit, teardown } = fresh();
+    const childSurfaces = spec.ownedChildSurfaces(unit);
+    const completed = childSurfaces.map(() => false);
+    const subs = childSurfaces.map((o, i) => o.subscribe({ complete: () => {
+      completed[i] = true;
+    } }));
+    unit.dispose();
+    completed.forEach((seen, i) => {
+      if (!seen) throw new Error(`A7-owned: owned child surface #${i} did not complete on outer dispose`);
+    });
+    subs.forEach((s) => s.unsubscribe());
+    teardown();
+  }
+  if (spec.surfaces) {
+    const { unit, teardown } = fresh();
+    unit.dispose();
+    spec.surfaces(unit).forEach((o, i) => {
+      let nexts = 0;
+      let done = false;
+      o.subscribe({ next: () => {
+        nexts += 1;
+      }, complete: () => {
+        done = true;
+      } }).unsubscribe();
+      if (nexts > 0) throw new Error(`A5b/inert: owned surface #${i} emitted a value after dispose`);
+      if (!done) throw new Error(`A5b/inert: owned surface #${i} did not complete after dispose`);
+    });
+    teardown();
+  }
+}
+function arbFaultAction() {
+  return fc2.oneof(
+    fc2.constant({ kind: "deliver" }),
+    fc2.constant({ kind: "drop-reply" }),
+    fc2.integer({ min: 0, max: 5 }).map((ms) => ({ kind: "delay", ms })),
+    fc2.constant({ kind: "duplicate-reply" }),
+    fc2.constant({ kind: "reject-emit" })
+  );
+}
+function arbFaultSchedule(maxLength = 8) {
+  return fc2.array(arbFaultAction(), { minLength: 1, maxLength });
+}
+function describeSchedule(schedule) {
+  return schedule.map((a) => a.kind === "delay" ? `delay(${a.ms})` : a.kind).join(",");
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function runLabeled(fallback, slot, assertion) {
+  try {
+    await assertion();
+  } catch (e) {
+    const detail = e instanceof Error ? e.message : String(e);
+    if (slot.violation) throw new Error(`${slot.violation.message}
+${detail}`);
+    throw new Error(`${fallback}: ${detail}`);
+  }
+}
+function capturing(slot, block) {
+  try {
+    block();
+  } catch (e) {
+    slot.violation = e instanceof Error ? e : new Error(String(e));
+    throw e;
+  }
+}
+async function assertLivenessAxioms(spec) {
+  const retryBudget = spec.retryBudget ?? 1;
+  const slack = spec.slackFactor ?? 4;
+  const scheduleArb = spec.scheduleArb ?? arbFaultSchedule();
+  const slot = { violation: null };
+  await runLabeled(
+    "liveness",
+    slot,
+    () => fc2.assert(
+      fc2.asyncProperty(scheduleArb, async (schedule) => {
+        const delayTotal = schedule.reduce((n, a) => n + (a.kind === "delay" ? a.ms : 0), 0);
+        const bound = (spec.timeoutMs * (1 + retryBudget) + delayTotal) * slack;
+        const transport = new FaultyTransport({
+          schedule,
+          ...spec.makeResponse ? { makeResponse: spec.makeResponse } : {}
+        });
+        const scenario = await spec.setup(transport);
+        const outputs = scenario.outputs;
+        const settlements = scenario.settlements ?? [];
+        const notified = outputs.map(() => false);
+        const settled = settlements.map(() => false);
+        let doneResolve = () => {
+        };
+        const allDone = new Promise((resolve) => {
+          doneResolve = resolve;
+        });
+        const check = () => {
+          if (notified.every(Boolean) && settled.every(Boolean)) doneResolve();
+        };
+        const subs = outputs.map(
+          (o, i) => o.subscribe({
+            next: () => {
+              notified[i] = true;
+              check();
+            },
+            error: () => {
+              notified[i] = true;
+              check();
+            }
+          })
+        );
+        settlements.forEach((p, i) => {
+          p.then(
+            () => {
+              settled[i] = true;
+              check();
+            },
+            () => {
+              settled[i] = true;
+              check();
+            }
+          );
+        });
+        check();
+        await Promise.race([allDone, sleep(bound)]);
+        try {
+          capturing(slot, () => {
+            settled.forEach((seen, i) => {
+              if (!seen) {
+                throw new Error(
+                  `L2: settlement #${i} did not settle within ${bound}ms under schedule \u27E8${describeSchedule(schedule)}\u27E9 \u2014 the forbidden fourth state`
+                );
+              }
+            });
+            const issues = /* @__PURE__ */ new Map();
+            for (const entry of transport.requestLog) {
+              const prior = issues.get(entry.retryKey) ?? { count: 0, lastFaulted: false };
+              issues.set(entry.retryKey, {
+                count: prior.count + 1,
+                lastFaulted: entry.action.kind === "drop-reply" || entry.action.kind === "reject-emit"
+              });
+            }
+            for (const [key, { count, lastFaulted }] of issues) {
+              if (count > 1 + retryBudget) {
+                throw new Error(
+                  `L2: request \u27E8${key}\u27E9 issued ${count} times \u2014 exceeds the retry budget (1 + ${retryBudget}) under schedule \u27E8${describeSchedule(schedule)}\u27E9`
+                );
+              }
+              if (lastFaulted && count <= retryBudget && outputs.length > 0 && !notified.some(Boolean)) {
+                throw new Error(
+                  `L2: faulted request \u27E8${key}\u27E9 was neither re-issued nor surfaced under schedule \u27E8${describeSchedule(schedule)}\u27E9 \u2014 rejection swallowed`
+                );
+              }
+            }
+            notified.forEach((seen, i) => {
+              if (!seen) {
+                throw new Error(
+                  `L1: output #${i} received no next/error within ${bound}ms under schedule \u27E8${describeSchedule(schedule)}\u27E9 \u2014 silently pending`
+                );
+              }
+            });
+          });
+        } finally {
+          subs.forEach((s) => s.unsubscribe());
+          scenario.teardown?.();
+          transport.dispose();
+        }
+      }),
+      { numRuns: spec.numRuns ?? 25 }
+    )
+  );
+}
+function arbDeliveryOps(maxOps = 12) {
+  return fc2.array(fc2.constantFrom("write", "transition"), { minLength: 1, maxLength: maxOps }).map((ops) => ops.includes("write") ? ops : [...ops, "write"]);
+}
+async function assertExactlyOnceDelivery(spec) {
+  const opsArb = spec.opsArb ?? arbDeliveryOps(spec.maxOps ?? 12);
+  const slot = { violation: null };
+  await runLabeled(
+    "L3",
+    slot,
+    () => fc2.assert(
+      fc2.asyncProperty(opsArb, async (ops) => {
+        const subject = spec.setup();
+        const delivered = [];
+        const sub = subject.output$.subscribe((id) => delivered.push(id));
+        const written = [];
+        try {
+          for (let i = 0; i < ops.length; i++) {
+            if (ops[i] === "write") {
+              const id = `e${i}`;
+              written.push(id);
+              subject.write(id);
+            } else {
+              await subject.transition();
+            }
+          }
+          await (subject.settle?.() ?? sleep(0));
+          capturing(slot, () => {
+            for (const id of written) {
+              const n = delivered.filter((d) => d === id).length;
+              if (n === 0) {
+                throw new Error(
+                  `L3: event \u27E8${id}\u27E9 delivered 0 times under \u27E8${ops.join(",")}\u27E9 \u2014 lost across a transition (retire by drain, never by abort)`
+                );
+              }
+              if (n > 1) {
+                throw new Error(
+                  `L3: event \u27E8${id}\u27E9 delivered ${n} times under \u27E8${ops.join(",")}\u27E9 \u2014 duplicate delivery`
+                );
+              }
+            }
+          });
+        } finally {
+          sub.unsubscribe();
+          subject.teardown?.();
+        }
+      }),
+      { numRuns: spec.numRuns ?? 50 }
+    )
+  );
+}
+
+export { arbDeliveryOps, arbFaultAction, arbFaultSchedule, assertExactlyOnceDelivery, assertLivenessAxioms, assertStateUnitAxioms, disposeProbe };
+//# sourceMappingURL=axioms.js.map
+//# sourceMappingURL=axioms.js.map

package/dist/testing/axioms.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/state-unit-axioms.ts","../../src/liveness-axioms.ts"],"names":["fc"],"mappings":";;;;;AAwCO,SAAS,YAAA,GAA6B;AAC3C,EAAA,IAAI,CAAA,GAAI,CAAA;AACR,EAAA,OAAO;AAAA,IACL,OAAA,GAAU;AAAE,MAAA,CAAA,IAAK,CAAA;AAAA,IAAG,CAAA;AAAA,IACpB,IAAI,YAAA,GAAe;AAAE,MAAA,OAAO,CAAA;AAAA,IAAG;AAAA,GACjC;AACF;AA8BA,SAAS,UAA+B,CAAA,EAAkC;AACxE,EAAA,IAAI,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,IAAY,UAAU,CAAA,EAAG;AAC7C,IAAA,OAAO,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,QAAA,EAAU,CAAA,CAAE,QAAA,IAAY,EAAC,EAAG,QAAA,EAAU,CAAA,CAAE,QAAA,KAAa,MAAM;AAAA,IAAC,CAAA,CAAA,EAAG;AAAA,EACxF;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,CAAA,EAAQ,UAAU,EAAC,EAAG,UAAU,MAAM;AAAA,EAAC,CAAA,EAAE;AAC1D;AAEA,SAAS,aAAa,KAAA,EAAsB;AAC1C,EAAA,IAAI,SAAS,OAAO,KAAA,KAAU,YAAY,OAAQ,KAAA,CAA6B,SAAS,UAAA,EAAY;AAClG,IAAC,KAAA,CAA2B,IAAA,CAAK,MAAA,EAAW,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EACtD;AACF;AAOO,SAAS,sBAA2C,IAAA,EAAmC;AAC5F,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,EAAA;AAChC,EAAA,MAAM,KAAA,GAAQ,MAAqB,SAAA,CAAU,IAAA,CAAK,OAAO,CAAA;AAKzD,EAAA,MAAM,GAAA,GAAM,CAAC,KAAA,EAAe,IAAA,KAAgD;AAC1E,IAAA,IAAI;AACF,MAAGA,GAAA,CAAA,MAAA,CAAO,IAAA,EAAM,EAAE,OAAA,EAAS,CAAA;AAAA,IAC7B,SAAS,CAAA,EAAG;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA,EAAA,EAAK,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IAC3E;AAAA,EACF,CAAA;AAGA,EAAA;AACE,IAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAS,GAAI,KAAA,EAAM;AACjC,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,cAAA,CAAe,IAAI,CAAA;AACxC,IAAA,IAAI,KAAA,KAAU,MAAA,CAAO,SAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AAChD,MAAA,MAAM,IAAI,MAAM,8DAA8D,CAAA;AAAA,IAChF;AACA,IAAA,IAAA,CAAK,OAAA,EAAQ;AACb,IAAA,QAAA,EAAS;AAAA,EACX;AAOA,EAAA;AACE,IAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAS,GAAI,KAAA,EAAM;AACjC,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC/C,MAAA,IAAI,KAAA,YAAiB,OAAA,IAAY,KAAA,CAA+B,MAAA,KAAW,MAAA,EAAW;AACpF,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,GAAG,CAAA,uDAAA,CAAoD,CAAA;AAAA,MAC9F;AAAA,IACF;AACA,IAAA,IAAA,CAAK,OAAA,EAAQ;AACb,IAAA,QAAA,EAAS;AAAA,EACX;AAGA,EAAA;AACE,IAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,QAAA,KAAa,KAAA,EAAM;AAC3C,IAAA,IAAA,CAAK,OAAA,EAAQ;AACb,IAAA,QAAA,CAAS,OAAA,CAAQ,CAAC,KAAA,EAAO,CAAA,KAAM;AAC7B,MAAA,IAAI,KAAA,CAAM,eAAe,CAAA,EAAG;AAC1B,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kDAAA,EAAqD,CAAC,CAAA,oBAAA,CAAsB,CAAA;AAAA,MAC9F;AAAA,IACF,CAAC,CAAA;AACD,IAAA,QAAA,EAAS;AAAA,EACX;AAGA,EAAA,GAAA,CAAI,IAAA,EAASA,GAAA,CAAA,QAAA,CAAYA,GAAA,CAAA,OAAA,CAAQ,EAAE,GAAA,EAAK,CAAA,EAAG,GAAA,EAAK,EAAA,EAAI,CAAA,EAAG,CAAC,CAAA,KAAM;AAC5D,IAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,QAAA,KAAa,KAAA,EAAM;AAC3C,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,OAAU,OAAA,EAAQ;AACzC,IAAA,QAAA,CAAS,OAAA,CAAQ,CAAC,KAAA,EAAO,CAAA,KAAM;AAC7B,MAAA,IAAI,KAAA,CAAM,eAAe,CAAA,EAAG;AAC1B,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,qBAAA,EAAwB,CAAC,CAAA,gBAAA,EAAmB,CAAC,CAAA,gBAAA,CAAkB,CAAA;AAAA,MACjF;AAAA,IACF,CAAC,CAAA;AACD,IAAA,QAAA,EAAS;AAAA,EACX,CAAC,CAAC,CAAA;AAGF,EAAA,IAAI,KAAK,QAAA,EAAU;AACjB,IAAA,MAAM,WAAW,IAAA,CAAK,QAAA;AACtB,IAAA,GAAA,CAAI,IAAA,EAASA,GAAA,CAAA,QAAA,CAAYA,GAAA,CAAA,OAAA,CAAQ,EAAE,GAAA,EAAK,CAAA,EAAG,GAAA,EAAK,EAAA,EAAI,CAAA,EAAG,CAAC,CAAA,KAAM;AAC5D,MAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAS,GAAI,KAAA,EAAM;AACjC,MAAA,MAAM,YAAuB,EAAC;AAC9B,MAAA,MAAM,IAAA,GAAO,QAAA,CAAS,IAAI,CAAA,CAAE,OAAA;AAAA,QAAQ,CAAC,MACnC,KAAA,CAAM,IAAA,CAAK,EAAE,MAAA,EAAQ,CAAA,IAAK,MAAM;AAC9B,UAAA,MAAM,GAAA,GAAM,SAAA,CAAU,IAAA,CAAK,KAAK,CAAA,GAAI,CAAA;AACpC,UAAA,OAAO,CAAA,CAAE,SAAA,CAAU,EAAE,QAAA,EAAU,MAAM;AAAE,YAAA,SAAA,CAAU,GAAG,CAAA,GAAI,IAAA;AAAA,UAAM,GAAG,CAAA;AAAA,QACnE,CAAC;AAAA,OACH;AACA,MAAA,IAAA,CAAK,OAAA,EAAQ;AACb,MAAA,SAAA,CAAU,OAAA,CAAQ,CAAC,IAAA,EAAM,GAAA,KAAQ;AAC/B,QAAA,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,CAAA,gDAAA,EAAmD,CAAC,CAAA,OAAA,EAAU,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,MACjG,CAAC,CAAA;AACD,MAAA,IAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AACnC,MAAA,QAAA,EAAS;AAAA,IACX,CAAC,CAAC,CAAA;AAAA,EACJ;AAGA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,MAAM,cAAc,IAAA,CAAK,WAAA;AACzB,IAAA,GAAA,CAAI,KAAA,EAAUA,GAAA,CAAA,QAAA,CAAYA,GAAA,CAAA,KAAA,CAASA,GAAA,CAAA,GAAA,EAAI,EAAG,EAAE,SAAA,EAAW,EAAA,EAAI,CAAA,EAAG,CAAC,GAAA,KAAQ;AACrE,MAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAS,GAAI,KAAA,EAAM;AACjC,MAAA,MAAM,OAAA,GAAU,YAAY,IAAI,CAAA;AAChC,MAAA,IAAA,CAAK,OAAA,EAAQ;AACb,MAAA,KAAA,MAAW,OAAO,GAAA,EAAK;AACrB,QAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AAC1B,QAAA,YAAA,CAAa,OAAA,CAAQ,GAAA,GAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAAA,MAC9C;AACA,MAAA,QAAA,EAAS;AAAA,IACX,CAAC,CAAC,CAAA;AAAA,EACJ;AAGA,EAAA,IAAI,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,WAAA,EAAa;AACrC,IAAA,MAAM,WAAW,IAAA,CAAK,QAAA;AACtB,IAAA,MAAM,cAAc,IAAA,CAAK,WAAA;AACzB,IAAA,GAAA,CAAI,YAAA,EAAiBA,GAAA,CAAA,QAAA,CAAYA,GAAA,CAAA,KAAA,CAASA,GAAA,CAAA,GAAA,EAAI,EAAG,EAAE,SAAA,EAAW,CAAA,EAAG,SAAA,EAAW,CAAA,EAAG,CAAA,EAAG,CAAC,GAAA,KAAQ;AACzF,MAAA,MAAM,IAAI,KAAA,EAAM;AAChB,MAAA,MAAM,IAAI,KAAA,EAAM;AAChB,MAAA,MAAM,SAAA,GAAY,QAAA,CAAS,CAAA,CAAE,IAAI,CAAA;AACjC,MAAA,MAAM,OAAA,GAAU,SAAA,CAAU,GAAA,CAAI,MAAM,CAAC,CAAA;AACrC,MAAA,MAAM,KAAA,GAAQ,UAAU,GAAA,CAAI,CAAC,GAAG,CAAA,KAAM,CAAA,CAAE,UAAU,MAAM;AAAE,QAAA,OAAA,CAAQ,CAAC,CAAA,IAAK,CAAA;AAAA,MAAG,CAAC,CAAC,CAAA;AAC7E,MAAA,MAAM,QAAA,GAAW,QAAQ,KAAA,EAAM;AAC/B,MAAA,MAAM,QAAA,GAAW,WAAA,CAAY,CAAA,CAAE,IAAI,CAAA;AACnC,MAAA,KAAA,MAAW,OAAO,GAAA,EAAK;AACrB,QAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AAC3B,QAAA,YAAA,CAAa,QAAA,CAAS,GAAA,GAAM,QAAA,CAAS,MAAM,GAAG,CAAA;AAAA,MAChD;AACA,MAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,CAAA,KAAM;AAC5B,QAAA,IAAI,KAAA,KAAU,QAAA,CAAS,CAAC,CAAA,EAAG;AACzB,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mDAAA,EAAsD,CAAC,CAAA,CAAE,CAAA;AAAA,QAC3E;AAAA,MACF,CAAC,CAAA;AACD,MAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AACpC,MAAA,CAAA,CAAE,KAAK,OAAA,EAAQ;AACf,MAAA,CAAA,CAAE,KAAK,OAAA,EAAQ;AACf,MAAA,CAAA,CAAE,QAAA,EAAS;AACX,MAAA,CAAA,CAAE,QAAA,EAAS;AAAA,IACb,CAAC,CAAC,CAAA;AAAA,EACJ;AAGA,EAAA,IAAI,KAAK,kBAAA,EAAoB;AAC3B,IAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAS,GAAI,KAAA,EAAM;AACjC,IAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,kBAAA,CAAmB,IAAI,CAAA;AAClD,IAAA,MAAM,SAAA,GAAY,aAAA,CAAc,GAAA,CAAI,MAAM,KAAK,CAAA;AAC/C,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,GAAA,CAAI,CAAC,CAAA,EAAG,MAAM,CAAA,CAAE,SAAA,CAAU,EAAE,QAAA,EAAU,MAAM;AAAE,MAAA,SAAA,CAAU,CAAC,CAAA,GAAI,IAAA;AAAA,IAAM,CAAA,EAAG,CAAC,CAAA;AAClG,IAAA,IAAA,CAAK,OAAA,EAAQ;AACb,IAAA,SAAA,CAAU,OAAA,CAAQ,CAAC,IAAA,EAAM,CAAA,KAAM;AAC7B,MAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,CAAC,CAAA,kCAAA,CAAoC,CAAA;AAAA,IACpG,CAAC,CAAA;AACD,IAAA,IAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AACnC,IAAA,QAAA,EAAS;AAAA,EACX;AAGA,EAAA,IAAI,KAAK,QAAA,EAAU;AACjB,IAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAS,GAAI,KAAA,EAAM;AACjC,IAAA,IAAA,CAAK,OAAA,EAAQ;AACb,IAAA,IAAA,CAAK,SAAS,IAAI,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAG,CAAA,KAAM;AACpC,MAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,MAAA,IAAI,IAAA,GAAO,KAAA;AACX,MAAA,CAAA,CAAE,SAAA,CAAU,EAAE,IAAA,EAAM,MAAM;AAAE,QAAA,KAAA,IAAS,CAAA;AAAA,MAAG,CAAA,EAAG,UAAU,MAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAA,MAAM,CAAA,EAAG,CAAA,CAAE,WAAA,EAAY;AAC3F,MAAA,IAAI,QAAQ,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,CAAC,CAAA,8BAAA,CAAgC,CAAA;AAC7F,MAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,CAAC,CAAA,+BAAA,CAAiC,CAAA;AAAA,IAC5F,CAAC,CAAA;AACD,IAAA,QAAA,EAAS;AAAA,EACX;AACF;ACxLO,SAAS,cAAA,GAA4C;AAC1D,EAAA,OAAU,GAAA,CAAA,KAAA;AAAA,IACL,GAAA,CAAA,QAAA,CAAsB,EAAE,IAAA,EAAM,SAAA,EAAW,CAAA;AAAA,IACzC,GAAA,CAAA,QAAA,CAAsB,EAAE,IAAA,EAAM,YAAA,EAAc,CAAA;AAAA,IAC5C,GAAA,CAAA,OAAA,CAAQ,EAAE,GAAA,EAAK,CAAA,EAAG,KAAK,CAAA,EAAG,CAAA,CAAE,GAAA,CAAI,CAAC,EAAA,MAAqB,EAAE,IAAA,EAAM,OAAA,EAAS,IAAG,CAAE,CAAA;AAAA,IAC5E,GAAA,CAAA,QAAA,CAAsB,EAAE,IAAA,EAAM,iBAAA,EAAmB,CAAA;AAAA,IACjD,GAAA,CAAA,QAAA,CAAsB,EAAE,IAAA,EAAM,aAAA,EAAe;AAAA,GAClD;AACF;AAEO,SAAS,gBAAA,CAAiB,YAAY,CAAA,EAAyC;AACpF,EAAA,OAAU,UAAM,cAAA,EAAe,EAAG,EAAE,SAAA,EAAW,CAAA,EAAG,WAAW,CAAA;AAC/D;AAEA,SAAS,iBAAiB,QAAA,EAA0C;AAClE,EAAA,OAAO,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAO,EAAE,IAAA,KAAS,OAAA,GAAU,CAAA,MAAA,EAAS,CAAA,CAAE,EAAE,CAAA,CAAA,CAAA,GAAM,CAAA,CAAE,IAAK,CAAA,CAAE,KAAK,GAAG,CAAA;AACvF;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AASA,eAAe,UAAA,CACb,QAAA,EACA,IAAA,EACA,SAAA,EACe;AACf,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,EAAU;AAAA,EAClB,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,SAAS,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,OAAO,CAAC,CAAA;AACxD,IAAA,IAAI,IAAA,CAAK,WAAW,MAAM,IAAI,MAAM,CAAA,EAAG,IAAA,CAAK,UAAU,OAAO;AAAA,EAAK,MAAM,CAAA,CAAE,CAAA;AAC1E,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA,EAAA,EAAK,MAAM,CAAA,CAAE,CAAA;AAAA,EAC1C;AACF;AAGA,SAAS,SAAA,CAAU,MAAmC,KAAA,EAAyB;AAC7E,EAAA,IAAI;AACF,IAAA,KAAA,EAAM;AAAA,EACR,SAAS,CAAA,EAAG;AACV,IAAA,IAAA,CAAK,SAAA,GAAY,aAAa,KAAA,GAAQ,CAAA,GAAI,IAAI,KAAA,CAAM,MAAA,CAAO,CAAC,CAAC,CAAA;AAC7D,IAAA,MAAM,CAAA;AAAA,EACR;AACF;AAMA,eAAsB,qBAAqB,IAAA,EAAwC;AACjF,EAAA,MAAM,WAAA,GAAc,KAAK,WAAA,IAAe,CAAA;AACxC,EAAA,MAAM,KAAA,GAAQ,KAAK,WAAA,IAAe,CAAA;AAClC,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,WAAA,IAAe,gBAAA,EAAiB;AAEzD,EAAA,MAAM,IAAA,GAAO,EAAE,SAAA,EAAW,IAAA,EAAqB;AAC/C,EAAA,MAAM,UAAA;AAAA,IAAW,UAAA;AAAA,IAAY,IAAA;AAAA,IAAM,MAC9B,GAAA,CAAA,MAAA;AAAA,MACE,GAAA,CAAA,aAAA,CAAc,WAAA,EAAa,OAAO,QAAA,KAAa;AAChD,QAAA,MAAM,UAAA,GAAa,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,IAAK,CAAA,CAAE,IAAA,KAAS,OAAA,GAAU,CAAA,CAAE,EAAA,GAAK,IAAI,CAAC,CAAA;AACnF,QAAA,MAAM,KAAA,GAAA,CAAS,IAAA,CAAK,SAAA,IAAa,CAAA,GAAI,eAAe,UAAA,IAAc,KAAA;AAClE,QAAA,MAAM,SAAA,GAAY,IAAI,eAAA,CAAgB;AAAA,UACpC,QAAA;AAAA,UACA,GAAI,KAAK,YAAA,GAAe,EAAE,cAAc,IAAA,CAAK,YAAA,KAAiB;AAAC,SAChE,CAAA;AACD,QAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAC3C,QAAA,MAAM,UAAU,QAAA,CAAS,OAAA;AACzB,QAAA,MAAM,WAAA,GAAc,QAAA,CAAS,WAAA,IAAe,EAAC;AAI7C,QAAA,MAAM,QAAA,GAAsB,OAAA,CAAQ,GAAA,CAAI,MAAM,KAAK,CAAA;AACnD,QAAA,MAAM,OAAA,GAAqB,WAAA,CAAY,GAAA,CAAI,MAAM,KAAK,CAAA;AACtD,QAAA,IAAI,cAA0B,MAAM;AAAA,QAAC,CAAA;AACrC,QAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY;AAAE,UAAA,WAAA,GAAc,OAAA;AAAA,QAAS,CAAC,CAAA;AACzE,QAAA,MAAM,QAAQ,MAAY;AACxB,UAAA,IAAI,QAAA,CAAS,MAAM,OAAO,CAAA,IAAK,QAAQ,KAAA,CAAM,OAAO,GAAG,WAAA,EAAY;AAAA,QACrE,CAAA;AACA,QAAA,MAAM,OAAuB,OAAA,CAAQ,GAAA;AAAA,UAAI,CAAC,CAAA,EAAG,CAAA,KAC3C,CAAA,CAAE,SAAA,CAAU;AAAA,YACV,MAAM,MAAM;AAAE,cAAA,QAAA,CAAS,CAAC,CAAA,GAAI,IAAA;AAAM,cAAA,KAAA,EAAM;AAAA,YAAG,CAAA;AAAA,YAC3C,OAAO,MAAM;AAAE,cAAA,QAAA,CAAS,CAAC,CAAA,GAAI,IAAA;AAAM,cAAA,KAAA,EAAM;AAAA,YAAG;AAAA,WAC7C;AAAA,SACH;AACA,QAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,KAAM;AAC5B,UAAA,CAAA,CAAE,IAAA;AAAA,YAAK,MAAM;AAAE,cAAA,OAAA,CAAQ,CAAC,CAAA,GAAI,IAAA;AAAM,cAAA,KAAA,EAAM;AAAA,YAAG,CAAA;AAAA,YACpC,MAAM;AAAE,cAAA,OAAA,CAAQ,CAAC,CAAA,GAAI,IAAA;AAAM,cAAA,KAAA,EAAM;AAAA,YAAG;AAAA,WAAC;AAAA,QAC9C,CAAC,CAAA;AACD,QAAA,KAAA,EAAM;AAGN,QAAA,MAAM,QAAQ,IAAA,CAAK,CAAC,SAAS,KAAA,CAAM,KAAK,CAAC,CAAC,CAAA;AAE1C,QAAA,IAAI;AAKF,UAAA,SAAA,CAAU,MAAM,MAAM;AAEpB,YAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,IAAA,EAAM,CAAA,KAAM;AAC3B,cAAA,IAAI,CAAC,IAAA,EAAM;AACT,gBAAA,MAAM,IAAI,KAAA;AAAA,kBACR,mBAAmB,CAAC,CAAA,uBAAA,EAA0B,KAAK,CAAA,wBAAA,EAChC,gBAAA,CAAiB,QAAQ,CAAC,CAAA,wCAAA;AAAA,iBAC/C;AAAA,cACF;AAAA,YACF,CAAC,CAAA;AAGD,YAAA,MAAM,MAAA,uBAAa,GAAA,EAAqD;AACxE,YAAA,KAAA,MAAW,KAAA,IAAS,UAAU,UAAA,EAAY;AACxC,cAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,KAAA,CAAM,QAAQ,KAAK,EAAE,KAAA,EAAO,CAAA,EAAG,WAAA,EAAa,KAAA,EAAM;AAC3E,cAAA,MAAA,CAAO,GAAA,CAAI,MAAM,QAAA,EAAU;AAAA,gBACzB,KAAA,EAAO,MAAM,KAAA,GAAQ,CAAA;AAAA,gBACrB,aAAa,KAAA,CAAM,MAAA,CAAO,SAAS,YAAA,IAAgB,KAAA,CAAM,OAAO,IAAA,KAAS;AAAA,eAC1E,CAAA;AAAA,YACH;AACA,YAAA,KAAA,MAAW,CAAC,GAAA,EAAK,EAAE,OAAO,WAAA,EAAa,KAAK,MAAA,EAAQ;AAClD,cAAA,IAAI,KAAA,GAAQ,IAAI,WAAA,EAAa;AAC3B,gBAAA,MAAM,IAAI,KAAA;AAAA,kBACR,CAAA,kBAAA,EAAgB,GAAG,CAAA,cAAA,EAAY,KAAK,+CAC5B,WAAW,CAAA,uBAAA,EAAqB,gBAAA,CAAiB,QAAQ,CAAC,CAAA,MAAA;AAAA,iBACpE;AAAA,cACF;AAKA,cAAA,IAAI,WAAA,IAAe,KAAA,IAAS,WAAA,IAAe,OAAA,CAAQ,MAAA,GAAS,KAAK,CAAC,QAAA,CAAS,IAAA,CAAK,OAAO,CAAA,EAAG;AACxF,gBAAA,MAAM,IAAI,KAAA;AAAA,kBACR,CAAA,0BAAA,EAAwB,GAAG,CAAA,+DAAA,EACR,gBAAA,CAAiB,QAAQ,CAAC,CAAA,iCAAA;AAAA,iBAC/C;AAAA,cACF;AAAA,YACF;AAGA,YAAA,QAAA,CAAS,OAAA,CAAQ,CAAC,IAAA,EAAM,CAAA,KAAM;AAC5B,cAAA,IAAI,CAAC,IAAA,EAAM;AACT,gBAAA,MAAM,IAAI,KAAA;AAAA,kBACR,eAAe,CAAC,CAAA,+BAAA,EAAkC,KAAK,CAAA,wBAAA,EACpC,gBAAA,CAAiB,QAAQ,CAAC,CAAA,8BAAA;AAAA,iBAC/C;AAAA,cACF;AAAA,YACF,CAAC,CAAA;AAAA,UACH,CAAC,CAAA;AAAA,QACH,CAAA,SAAE;AACA,UAAA,IAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AACnC,UAAA,QAAA,CAAS,QAAA,IAAW;AACpB,UAAA,SAAA,CAAU,OAAA,EAAQ;AAAA,QACpB;AAAA,MACF,CAAC,CAAA;AAAA,MACD,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,IAAW,EAAA;AAAG;AAChC,GACF;AACF;AAuCO,SAAS,cAAA,CAAe,SAAS,EAAA,EAAyC;AAC/E,EAAA,OACG,GAAA,CAAA,KAAA,CAAS,GAAA,CAAA,YAAA,CAAyB,OAAA,EAAS,YAAY,CAAA,EAAG,EAAE,SAAA,EAAW,CAAA,EAAG,SAAA,EAAW,MAAA,EAAQ,CAAA,CAE7F,IAAI,CAAC,GAAA,KAAS,GAAA,CAAI,QAAA,CAAS,OAAO,CAAA,GAAI,MAAO,CAAC,GAAG,GAAA,EAAK,OAAO,CAAY,CAAA;AAC9E;AAQA,eAAsB,0BAA0B,IAAA,EAAwC;AACtF,EAAA,MAAM,SAAS,IAAA,CAAK,MAAA,IAAU,cAAA,CAAe,IAAA,CAAK,UAAU,EAAE,CAAA;AAE9D,EAAA,MAAM,IAAA,GAAO,EAAE,SAAA,EAAW,IAAA,EAAqB;AAC/C,EAAA,MAAM,UAAA;AAAA,IAAW,IAAA;AAAA,IAAM,IAAA;AAAA,IAAM,MACxB,GAAA,CAAA,MAAA;AAAA,MACE,GAAA,CAAA,aAAA,CAAc,MAAA,EAAQ,OAAO,GAAA,KAAQ;AACtC,QAAA,MAAM,OAAA,GAAU,KAAK,KAAA,EAAM;AAC3B,QAAA,MAAM,YAAsB,EAAC;AAC7B,QAAA,MAAM,GAAA,GAAM,QAAQ,OAAA,CAAQ,SAAA,CAAU,CAAC,EAAA,KAAO,SAAA,CAAU,IAAA,CAAK,EAAE,CAAC,CAAA;AAChE,QAAA,MAAM,UAAoB,EAAC;AAC3B,QAAA,IAAI;AACF,UAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,QAAQ,CAAA,EAAA,EAAK;AACnC,YAAA,IAAI,GAAA,CAAI,CAAC,CAAA,KAAM,OAAA,EAAS;AACtB,cAAA,MAAM,EAAA,GAAK,IAAI,CAAC,CAAA,CAAA;AAChB,cAAA,OAAA,CAAQ,KAAK,EAAE,CAAA;AACf,cAAA,OAAA,CAAQ,MAAM,EAAE,CAAA;AAAA,YAClB,CAAA,MAAO;AACL,cAAA,MAAM,QAAQ,UAAA,EAAW;AAAA,YAC3B;AAAA,UAGF;AACA,UAAA,OAAO,OAAA,CAAQ,MAAA,IAAS,IAAK,KAAA,CAAM,CAAC,CAAA,CAAA;AAEpC,UAAA,SAAA,CAAU,MAAM,MAAM;AACpB,YAAA,KAAA,MAAW,MAAM,OAAA,EAAS;AACxB,cAAA,MAAM,IAAI,SAAA,CAAU,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,KAAM,EAAE,CAAA,CAAE,MAAA;AAC5C,cAAA,IAAI,MAAM,CAAA,EAAG;AACX,gBAAA,MAAM,IAAI,KAAA;AAAA,kBACR,mBAAc,EAAE,CAAA,qCAAA,EAA8B,GAAA,CAAI,IAAA,CAAK,GAAG,CAAC,CAAA,wEAAA;AAAA,iBAE7D;AAAA,cACF;AACA,cAAA,IAAI,IAAI,CAAA,EAAG;AACT,gBAAA,MAAM,IAAI,KAAA;AAAA,kBACR,CAAA,gBAAA,EAAc,EAAE,CAAA,iBAAA,EAAe,CAAC,sBAAiB,GAAA,CAAI,IAAA,CAAK,GAAG,CAAC,CAAA,gCAAA;AAAA,iBAChE;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC,CAAA;AAAA,QACH,CAAA,SAAE;AACA,UAAA,GAAA,CAAI,WAAA,EAAY;AAChB,UAAA,OAAA,CAAQ,QAAA,IAAW;AAAA,QACrB;AAAA,MACF,CAAC,CAAA;AAAA,MACD,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,IAAW,EAAA;AAAG;AAChC,GACF;AACF","file":"axioms.js","sourcesContent":["/**\n * Executable enforcement of the StateUnit pattern — the runtime twin of\n * `packages/sdk/docs/STATE-UNITS.md` and the ledger in\n * `.plans/STATE-UNIT-AXIOMS.md`. The `StateUnit` interface's own comment notes\n * the pattern is convention; this file makes it executable.\n *\n * `assertStateUnitAxioms(spec)` runs every applicable axiom against a factory in\n * one shot, throwing a labeled Error on the first violation (the axiom id is in\n * the message). It is framework-agnostic on purpose — only `rxjs` + `fast-check`,\n * no `vitest` — so it ships through `@semiont/core/testing` and any package's test\n * runner can invoke it from a single `it(...)` per state unit. It lives in core\n * (not sdk) so even packages below sdk (e.g. `http-transport`) can use it without\n * a dependency cycle.\n *\n * Axioms (random-input dimension; fast-check):\n *   A5        dispose() is idempotent and total (n ∈ [1,20] calls never throw)\n *   A5b       post-dispose inertness — every public method is a no-op after dispose\n *   A6        every pre-dispose subscriber (k ∈ [1,10]) sees `complete` on dispose\n *   X3-runtime instance isolation — driving one instance never moves another's surfaces\n * Structural assertions (single-shot):\n *   A1        plain-object identity (no class instance)\n *   X1        no raw Subject on the public surface\n *   A7-passed disposing the unit must NOT dispose an injected dependency\n *   A7-owned  disposing the unit MUST dispose its internally-constructed children\n */\n\nimport * as fc from 'fast-check';\nimport { Subject, type Observable } from 'rxjs';\nimport type { StateUnit } from './state-unit';\n\n/**\n * A disposable stand-in for an injected dependency. Pass one as a unit's\n * constructor arg, then list it in `setup().passedIn` so A7-passed can assert\n * the unit never disposed it. Counts calls so A7-passed also holds under the\n * repeated-dispose stress of A5.\n */\nexport interface DisposeProbe extends StateUnit {\n  readonly disposeCount: number;\n}\n\nexport function disposeProbe(): DisposeProbe {\n  let n = 0;\n  return {\n    dispose() { n += 1; },\n    get disposeCount() { return n; },\n  };\n}\n\ntype SetupResult<T extends StateUnit> =\n  | T\n  | { unit: T; passedIn?: readonly DisposeProbe[]; teardown?: () => void };\n\nexport interface StateUnitAxiomSpec<T extends StateUnit> {\n  /**\n   * Build a FRESH unit. Called many times (fast-check re-runs), so it must\n   * return an independent instance each call. Return the bare unit, or an object\n   * carrying the injected `passedIn` probes (A7-passed) and a `teardown` to\n   * release per-instance resources (e.g. a mock bus).\n   */\n  setup: () => SetupResult<T>;\n  /** Owned public Observables — Subjects the unit completes on dispose (A6, X3, post-dispose inertness). */\n  surfaces?: (unit: T) => readonly Observable<unknown>[];\n  /** Public input methods as zero-arg callers (A5b post-dispose, X3 drive). */\n  invocations?: (unit: T) => readonly (() => unknown)[];\n  /** Surfaces of internally-constructed children — must complete when the outer disposes (A7-owned). */\n  ownedChildSurfaces?: (unit: T) => readonly Observable<unknown>[];\n  /** fast-check run budget per property (default 30). */\n  numRuns?: number;\n}\n\ninterface Normalized<T extends StateUnit> {\n  unit: T;\n  passedIn: readonly DisposeProbe[];\n  teardown: () => void;\n}\n\nfunction normalize<T extends StateUnit>(r: SetupResult<T>): Normalized<T> {\n  if (r && typeof r === 'object' && 'unit' in r) {\n    return { unit: r.unit, passedIn: r.passedIn ?? [], teardown: r.teardown ?? (() => {}) };\n  }\n  return { unit: r as T, passedIn: [], teardown: () => {} };\n}\n\nfunction swallowAsync(value: unknown): void {\n  if (value && typeof value === 'object' && typeof (value as { then?: unknown }).then === 'function') {\n    (value as Promise<unknown>).then(undefined, () => {});\n  }\n}\n\n/**\n * Run every applicable axiom against `spec`. Throws a labeled Error on the first\n * violation. Axioms whose accessors are omitted are skipped (e.g. A7-passed\n * runs only when `setup` returns `passedIn`; A6 only when `surfaces` is given).\n */\nexport function assertStateUnitAxioms<T extends StateUnit>(spec: StateUnitAxiomSpec<T>): void {\n  const numRuns = spec.numRuns ?? 30;\n  const fresh = (): Normalized<T> => normalize(spec.setup());\n\n  // fast-check's default falsification message is just \"Property failed after N\n  // tests {seed}\" — it drops the thrown axiom id. Prepend the axiom so a real\n  // failure names itself; the seed/shrink detail is preserved.\n  const run = (axiom: string, prop: Parameters<typeof fc.assert>[0]): void => {\n    try {\n      fc.assert(prop, { numRuns });\n    } catch (e) {\n      throw new Error(`${axiom}: ${e instanceof Error ? e.message : String(e)}`);\n    }\n  };\n\n  // A1 — plain-object identity (no class instance).\n  {\n    const { unit, teardown } = fresh();\n    const proto = Object.getPrototypeOf(unit);\n    if (proto !== Object.prototype && proto !== null) {\n      throw new Error('A1: state unit is not a plain object (has a class prototype)');\n    }\n    unit.dispose();\n    teardown();\n  }\n\n  // X1 — no raw *origin* Subject on the public surface (expose `.asObservable()`).\n  // Flag only origin Subjects — `new Subject` / `new BehaviorSubject`, the unit's own\n  // state, where `.source` is undefined. Derived `AnonymousSubject`s from `Subject.lift`\n  // (`shareReplay().pipe(...)`) carry a `.source` and are inert sinks (`.next()` does\n  // nothing useful) — idiomatic, not the forgotten-internal-Subject smell — so exclude them.\n  {\n    const { unit, teardown } = fresh();\n    for (const [key, value] of Object.entries(unit)) {\n      if (value instanceof Subject && (value as { source?: unknown }).source === undefined) {\n        throw new Error(`X1: public field \"${key}\" is a raw Subject — expose it via .asObservable()`);\n      }\n    }\n    unit.dispose();\n    teardown();\n  }\n\n  // A7-passed — disposing the unit must NOT dispose an injected dependency.\n  {\n    const { unit, passedIn, teardown } = fresh();\n    unit.dispose();\n    passedIn.forEach((probe, i) => {\n      if (probe.disposeCount > 0) {\n        throw new Error(`A7-passed: the unit disposed injected dependency #${i} (it doesn't own it)`);\n      }\n    });\n    teardown();\n  }\n\n  // A5 — dispose() idempotent & total: n calls never throw; injected deps stay untouched.\n  run('A5', fc.property(fc.integer({ min: 1, max: 20 }), (n) => {\n    const { unit, passedIn, teardown } = fresh();\n    for (let i = 0; i < n; i++) unit.dispose();\n    passedIn.forEach((probe, i) => {\n      if (probe.disposeCount > 0) {\n        throw new Error(`injected dependency #${i} disposed under ${n} dispose() calls`);\n      }\n    });\n    teardown();\n  }));\n\n  // A6 — k pre-dispose subscribers on each owned surface all see `complete` on dispose.\n  if (spec.surfaces) {\n    const surfaces = spec.surfaces;\n    run('A6', fc.property(fc.integer({ min: 1, max: 10 }), (k) => {\n      const { unit, teardown } = fresh();\n      const completed: boolean[] = [];\n      const subs = surfaces(unit).flatMap((o) =>\n        Array.from({ length: k }, () => {\n          const idx = completed.push(false) - 1;\n          return o.subscribe({ complete: () => { completed[idx] = true; } });\n        }),\n      );\n      unit.dispose();\n      completed.forEach((seen, idx) => {\n        if (!seen) throw new Error(`a subscriber did not see complete on dispose (k=${k}, sub #${idx})`);\n      });\n      subs.forEach((s) => s.unsubscribe());\n      teardown();\n    }));\n  }\n\n  // A5b — post-dispose inertness: every public method is a no-op (no throw) after dispose.\n  if (spec.invocations) {\n    const invocations = spec.invocations;\n    run('A5b', fc.property(fc.array(fc.nat(), { maxLength: 12 }), (seq) => {\n      const { unit, teardown } = fresh();\n      const callers = invocations(unit);\n      unit.dispose();\n      for (const raw of seq) {\n        if (callers.length === 0) break;\n        swallowAsync(callers[raw % callers.length]());\n      }\n      teardown();\n    }));\n  }\n\n  // X3-runtime — instance isolation: driving instance A never moves instance B's surfaces.\n  if (spec.surfaces && spec.invocations) {\n    const surfaces = spec.surfaces;\n    const invocations = spec.invocations;\n    run('X3-runtime', fc.property(fc.array(fc.nat(), { minLength: 1, maxLength: 8 }), (seq) => {\n      const a = fresh();\n      const b = fresh();\n      const bSurfaces = surfaces(b.unit);\n      const bCounts = bSurfaces.map(() => 0);\n      const bSubs = bSurfaces.map((o, i) => o.subscribe(() => { bCounts[i] += 1; }));\n      const baseline = bCounts.slice(); // initial replay captured synchronously above\n      const aCallers = invocations(a.unit);\n      for (const raw of seq) {\n        if (aCallers.length === 0) break;\n        swallowAsync(aCallers[raw % aCallers.length]());\n      }\n      bCounts.forEach((count, i) => {\n        if (count !== baseline[i]) {\n          throw new Error(`driving instance A perturbed instance B's surface #${i}`);\n        }\n      });\n      bSubs.forEach((s) => s.unsubscribe());\n      a.unit.dispose();\n      b.unit.dispose();\n      a.teardown();\n      b.teardown();\n    }));\n  }\n\n  // A7-owned — internally-constructed children are disposed (their surfaces complete) on outer dispose.\n  if (spec.ownedChildSurfaces) {\n    const { unit, teardown } = fresh();\n    const childSurfaces = spec.ownedChildSurfaces(unit);\n    const completed = childSurfaces.map(() => false);\n    const subs = childSurfaces.map((o, i) => o.subscribe({ complete: () => { completed[i] = true; } }));\n    unit.dispose();\n    completed.forEach((seen, i) => {\n      if (!seen) throw new Error(`A7-owned: owned child surface #${i} did not complete on outer dispose`);\n    });\n    subs.forEach((s) => s.unsubscribe());\n    teardown();\n  }\n\n  // Post-dispose surface inertness: a NEW subscription after dispose completes with no `next`.\n  if (spec.surfaces) {\n    const { unit, teardown } = fresh();\n    unit.dispose();\n    spec.surfaces(unit).forEach((o, i) => {\n      let nexts = 0;\n      let done = false;\n      o.subscribe({ next: () => { nexts += 1; }, complete: () => { done = true; } }).unsubscribe();\n      if (nexts > 0) throw new Error(`A5b/inert: owned surface #${i} emitted a value after dispose`);\n      if (!done) throw new Error(`A5b/inert: owned surface #${i} did not complete after dispose`);\n    });\n    teardown();\n  }\n}\n","/**\n * Executable enforcement of the liveness axioms — the runtime twin of\n * `.plans/LIVENESS-AXIOMS.md`, and the composition-level sibling of\n * `assertStateUnitAxioms` (state-unit-axioms.ts). Where the StateUnit axioms\n * make *per-unit* wrongness mechanically detectable, these make *silence*\n * detectable: every existing enforcement tier is safety (nothing wrong is\n * delivered); these assert liveness (something is eventually delivered).\n *\n * Axioms (fault-schedule dimension; fast-check):\n *   L1  Subscriber liveness — every output emits next|error within the bound,\n *       under any fault schedule. Error is a permitted outcome; the forbidden\n *       fourth state is pending-forever.\n *   L2  Request settlement — every awaited path settles within the bound;\n *       re-issues per logical request stay within the retry budget (B14: one);\n *       a faulted request must be re-issued or surfaced, never swallowed.\n *   L3  Delivery across lifecycle transitions — every event written to a live\n *       connection reaches the output exactly once, wherever a client-initiated\n *       transition (handover / reconnect / scope change) lands. Retirement is\n *       by drain, never by abort (TRANSPORT-HTTP.md, Abort discipline).\n *\n * Framework-agnostic on purpose — only `rxjs` + `fast-check`, no `vitest` — so\n * it ships through `@semiont/core/testing` and any package's test runner can\n * invoke it. Deterministic virtual time: properties pass a small explicit\n * `timeoutMs` to `busRequest`; no `Date.now`, no 30 s real waits.\n */\n\nimport * as fc from 'fast-check';\nimport type { Observable, Subscription } from 'rxjs';\nimport { FaultyTransport, type FaultAction } from './faulty-transport';\n\n// ── L1/L2: liveness over a composition on FaultyTransport ────────────────\n\n/** What one fresh run of the composition exposes to the axioms. */\nexport interface LivenessScenario {\n  /**\n   * Live-query-shaped outputs. The harness subscribes each one; every\n   * subscription must see `next` or `error` within the bound (L1).\n   */\n  outputs: readonly Observable<unknown>[];\n  /**\n   * Awaited paths. Each promise must settle — resolve or reject — within the\n   * bound (L2). Rejections are fine; pending-forever is the violation.\n   */\n  settlements?: readonly Promise<unknown>[];\n  teardown?: () => void;\n}\n\nexport interface LivenessAxiomSpec {\n  /** Build a FRESH composition wired to the given transport. Called per run. */\n  setup: (transport: FaultyTransport) => LivenessScenario | Promise<LivenessScenario>;\n  /**\n   * The timeoutMs the scenario passes to `busRequest` — the bound is derived\n   * from it: (timeoutMs × (1 + retryBudget) + Σdelays) × slackFactor.\n   */\n  timeoutMs: number;\n  /** Max sanctioned re-issues per logical request (B14 budget). Default 1. */\n  retryBudget?: number;\n  /** Override the generated fault schedules (teeth tests pin one). */\n  scheduleArb?: fc.Arbitrary<readonly FaultAction[]>;\n  /** Passed through to FaultyTransport (reply synthesis). */\n  makeResponse?: (operation: string, payload: Record<string, unknown>) => unknown;\n  /** fast-check run budget (default 25 — CI-fast; crank locally). */\n  numRuns?: number;\n  /** Real-scheduler jitter headroom on the bound (default 4×). */\n  slackFactor?: number;\n}\n\n/** The five wire behaviors, uniformly weighted; delays stay small (≤5 ms). */\nexport function arbFaultAction(): fc.Arbitrary<FaultAction> {\n  return fc.oneof(\n    fc.constant<FaultAction>({ kind: 'deliver' }),\n    fc.constant<FaultAction>({ kind: 'drop-reply' }),\n    fc.integer({ min: 0, max: 5 }).map((ms): FaultAction => ({ kind: 'delay', ms })),\n    fc.constant<FaultAction>({ kind: 'duplicate-reply' }),\n    fc.constant<FaultAction>({ kind: 'reject-emit' }),\n  );\n}\n\nexport function arbFaultSchedule(maxLength = 8): fc.Arbitrary<readonly FaultAction[]> {\n  return fc.array(arbFaultAction(), { minLength: 1, maxLength });\n}\n\nfunction describeSchedule(schedule: readonly FaultAction[]): string {\n  return schedule.map((a) => (a.kind === 'delay' ? `delay(${a.ms})` : a.kind)).join(',');\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/**\n * Sibling of state-unit-axioms' `run`, adapted for properties that check more\n * than one axiom: fast-check's falsification message carries the seed and\n * counterexample but not the thrown axiom id (fc v4 moves the inner error to\n * `cause`), so the property captures its own labeled violation into `slot`\n * and the wrapper re-throws with the axiom id leading and fc's detail after.\n */\nasync function runLabeled(\n  fallback: string,\n  slot: { violation: Error | null },\n  assertion: () => Promise<void>,\n): Promise<void> {\n  try {\n    await assertion();\n  } catch (e) {\n    const detail = e instanceof Error ? e.message : String(e);\n    if (slot.violation) throw new Error(`${slot.violation.message}\\n${detail}`);\n    throw new Error(`${fallback}: ${detail}`);\n  }\n}\n\n/** Wrap a check block so its labeled throw lands in `slot` before falsifying. */\nfunction capturing(slot: { violation: Error | null }, block: () => void): void {\n  try {\n    block();\n  } catch (e) {\n    slot.violation = e instanceof Error ? e : new Error(String(e));\n    throw e;\n  }\n}\n\n/**\n * Run L1 + L2 against `spec` across generated fault schedules. Throws a\n * labeled Error (`L1: …` / `L2: …`) on the first violation.\n */\nexport async function assertLivenessAxioms(spec: LivenessAxiomSpec): Promise<void> {\n  const retryBudget = spec.retryBudget ?? 1;\n  const slack = spec.slackFactor ?? 4;\n  const scheduleArb = spec.scheduleArb ?? arbFaultSchedule();\n\n  const slot = { violation: null as Error | null };\n  await runLabeled('liveness', slot, () =>\n    fc.assert(\n      fc.asyncProperty(scheduleArb, async (schedule) => {\n        const delayTotal = schedule.reduce((n, a) => n + (a.kind === 'delay' ? a.ms : 0), 0);\n        const bound = (spec.timeoutMs * (1 + retryBudget) + delayTotal) * slack;\n        const transport = new FaultyTransport({\n          schedule,\n          ...(spec.makeResponse ? { makeResponse: spec.makeResponse } : {}),\n        });\n        const scenario = await spec.setup(transport);\n        const outputs = scenario.outputs;\n        const settlements = scenario.settlements ?? [];\n\n        // Subscribe every output (that's what makes a live query live) and\n        // track notifications; track settlement of every awaited path.\n        const notified: boolean[] = outputs.map(() => false);\n        const settled: boolean[] = settlements.map(() => false);\n        let doneResolve: () => void = () => {};\n        const allDone = new Promise<void>((resolve) => { doneResolve = resolve; });\n        const check = (): void => {\n          if (notified.every(Boolean) && settled.every(Boolean)) doneResolve();\n        };\n        const subs: Subscription[] = outputs.map((o, i) =>\n          o.subscribe({\n            next: () => { notified[i] = true; check(); },\n            error: () => { notified[i] = true; check(); },\n          }),\n        );\n        settlements.forEach((p, i) => {\n          p.then(() => { settled[i] = true; check(); },\n                 () => { settled[i] = true; check(); });\n        });\n        check();\n\n        // Wait for full liveness or the bound, whichever first.\n        await Promise.race([allDone, sleep(bound)]);\n\n        try {\n          // L2 first: when it applies it names the mechanism (swallow, budget,\n          // unsettled await); L1 below is the broader every-output net. All-\n          // outputs-silent is a subset of any-output-silent, so checking L1\n          // first would shadow the sharper L2 diagnoses entirely.\n          capturing(slot, () => {\n            // L2 — settlement: every awaited path settled.\n            settled.forEach((seen, i) => {\n              if (!seen) {\n                throw new Error(\n                  `L2: settlement #${i} did not settle within ${bound}ms ` +\n                  `under schedule ⟨${describeSchedule(schedule)}⟩ — the forbidden fourth state`,\n                );\n              }\n            });\n\n            // L2 — retry accounting over the transport's request log.\n            const issues = new Map<string, { count: number; lastFaulted: boolean }>();\n            for (const entry of transport.requestLog) {\n              const prior = issues.get(entry.retryKey) ?? { count: 0, lastFaulted: false };\n              issues.set(entry.retryKey, {\n                count: prior.count + 1,\n                lastFaulted: entry.action.kind === 'drop-reply' || entry.action.kind === 'reject-emit',\n              });\n            }\n            for (const [key, { count, lastFaulted }] of issues) {\n              if (count > 1 + retryBudget) {\n                throw new Error(\n                  `L2: request ⟨${key}⟩ issued ${count} times — exceeds the retry budget ` +\n                  `(1 + ${retryBudget}) under schedule ⟨${describeSchedule(schedule)}⟩`,\n                );\n              }\n              // Swallow detection: the final issue of a logical request was\n              // faulted, the composition had retry budget left but didn't use\n              // it, and no output surfaced anything — the rejection went into\n              // a void (the pre-B14 `catch(() => {})`).\n              if (lastFaulted && count <= retryBudget && outputs.length > 0 && !notified.some(Boolean)) {\n                throw new Error(\n                  `L2: faulted request ⟨${key}⟩ was neither re-issued nor surfaced ` +\n                  `under schedule ⟨${describeSchedule(schedule)}⟩ — rejection swallowed`,\n                );\n              }\n            }\n\n            // L1 — every subscription saw next|error; pending-forever is the bug.\n            notified.forEach((seen, i) => {\n              if (!seen) {\n                throw new Error(\n                  `L1: output #${i} received no next/error within ${bound}ms ` +\n                  `under schedule ⟨${describeSchedule(schedule)}⟩ — silently pending`,\n                );\n              }\n            });\n          });\n        } finally {\n          subs.forEach((s) => s.unsubscribe());\n          scenario.teardown?.();\n          transport.dispose();\n        }\n      }),\n      { numRuns: spec.numRuns ?? 25 },\n    ),\n  );\n}\n\n// ── L3: exactly-once delivery across client-initiated transitions ────────\n\n/**\n * A connection-stream-shaped subject: something that accepts writes to the\n * live connection, can be told to transition (handover / reconnect / scope\n * change), and exposes the subscriber-facing output. P3 adapts the real\n * actor's mock-connection harness to this shape; the teeth tests drive\n * reconstructed pre-fix doubles.\n */\nexport interface DeliverySubject {\n  /** Write the event with this id to the currently-live connection. */\n  write: (eventId: string) => void;\n  /** Client-initiated lifecycle transition. */\n  transition: () => void | Promise<void>;\n  /** Subscriber-facing output; each emission is a delivered event id. */\n  output$: Observable<string>;\n  /**\n   * Drain pending asynchronous delivery at end of sequence (a live connection\n   * eventually flushes). Default: one macrotask tick.\n   */\n  settle?: () => Promise<void>;\n  teardown?: () => void;\n}\n\nexport type DeliveryOp = 'write' | 'transition';\n\nexport interface DeliveryAxiomSpec {\n  /** Build a FRESH subject. Called per run. */\n  setup: () => DeliverySubject;\n  /** Override the generated op sequences (teeth tests pin one). */\n  opsArb?: fc.Arbitrary<readonly DeliveryOp[]>;\n  /** Max generated sequence length (default 12). */\n  maxOps?: number;\n  /** fast-check run budget (default 50 — these runs are cheap). */\n  numRuns?: number;\n}\n\nexport function arbDeliveryOps(maxOps = 12): fc.Arbitrary<readonly DeliveryOp[]> {\n  return fc\n    .array(fc.constantFrom<DeliveryOp>('write', 'transition'), { minLength: 1, maxLength: maxOps })\n    // A sequence with no write asserts nothing — always exercise delivery.\n    .map((ops) => (ops.includes('write') ? ops : ([...ops, 'write'] as const)));\n}\n\n/**\n * Run L3 against `spec` across generated write/transition interleavings.\n * Throws a labeled Error (`L3: …`) on the first violation: an event written\n * to a live connection delivered zero times (lost — retired by abort instead\n * of drain) or more than once (duplicate).\n */\nexport async function assertExactlyOnceDelivery(spec: DeliveryAxiomSpec): Promise<void> {\n  const opsArb = spec.opsArb ?? arbDeliveryOps(spec.maxOps ?? 12);\n\n  const slot = { violation: null as Error | null };\n  await runLabeled('L3', slot, () =>\n    fc.assert(\n      fc.asyncProperty(opsArb, async (ops) => {\n        const subject = spec.setup();\n        const delivered: string[] = [];\n        const sub = subject.output$.subscribe((id) => delivered.push(id));\n        const written: string[] = [];\n        try {\n          for (let i = 0; i < ops.length; i++) {\n            if (ops[i] === 'write') {\n              const id = `e${i}`;\n              written.push(id);\n              subject.write(id);\n            } else {\n              await subject.transition();\n            }\n            // Deliberately no settling between ops: the interesting races are\n            // transitions landing before a write's asynchronous delivery.\n          }\n          await (subject.settle?.() ?? sleep(0));\n\n          capturing(slot, () => {\n            for (const id of written) {\n              const n = delivered.filter((d) => d === id).length;\n              if (n === 0) {\n                throw new Error(\n                  `L3: event ⟨${id}⟩ delivered 0 times under ⟨${ops.join(',')}⟩ — ` +\n                  `lost across a transition (retire by drain, never by abort)`,\n                );\n              }\n              if (n > 1) {\n                throw new Error(\n                  `L3: event ⟨${id}⟩ delivered ${n} times under ⟨${ops.join(',')}⟩ — duplicate delivery`,\n                );\n              }\n            }\n          });\n        } finally {\n          sub.unsubscribe();\n          subject.teardown?.();\n        }\n      }),\n      { numRuns: spec.numRuns ?? 50 },\n    ),\n  );\n}\n"]}