@sentropic/h2a-runtime 0.98.5 → 0.98.7-rc.1

package/dist/gateway-host/live-declarations.js

@@ -0,0 +1,423 @@
+/**
+ * L6a (H) — durable local store for explicit live workspace declarations.
+ *
+ * DESIGN (LIVE §2, §12):
+ *  - The declaration store is LOCAL h2a state under the injected h2a root
+ *    (<root>/live/declarations.json), outside every observed worktree and
+ *    its git-dir/common-dir. It is authoritative independently of the live
+ *    projection: losing the projection never loses registrations, and the
+ *    store is never a projection-owned surface.
+ *  - Each record wraps the EXACT neutral WorkspaceDeclarationDto (flat
+ *    identity triangle declarationId/cloneId/worktreeId, tenant,
+ *    liveCapability, declarationRevision, flat product binding) plus the
+ *    full local CloneIdentityDto/WorktreeIdentityDto (host-local realpath,
+ *    git-dir and paths needed to operate; only the opaque ids cross to
+ *    sentropic). Every write is validated with the engram validators — the
+ *    runtime keeps no mirror of the contract, it imports the vendored
+ *    neutral contracts entry (../vendor/engram-live, see the
+ *    core live/contracts.ts header).
+ *  - Writes are atomic (0600, tmp+rename) through a token-owned staging
+ *    file; a corrupt store fails EXPLICITLY, it never silently
+ *    restarts empty (that would erase desired live registrations). A
+ *    pre-realignment (nested, `live-git-1`) store file is rejected
+ *    EXPLICITLY as unsupported — never silently migrated, never silently
+ *    read: L6a is not consumed yet, so no migration replay exists and the
+ *    operator removes the file to start fresh.
+ *  - Update is revision-guarded ATOMICALLY: the caller composes the next
+ *    record through the contract rules (declarationRevision + 1, immutable
+ *    identity triangle, binding renewal-or-preserved); the store verifies
+ *    the guard, the triangle, the binding monotonicity (first binding
+ *    exactly INITIAL_BINDING_REVISION, then strictly greater) and the
+ *    final DTOs, then re-verifies the durable revision and persists under
+ *    ONE exclusive lock. A stale writer is refused with the typed
+ *    LiveRevisionConflict, never clobbering; a declaration removed after
+ *    the read is never resurrected. Insert and remove hold the same lock,
+ *    so every read-check-write (including removals) is serialized.
+ */
+import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmdirSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { join } from "node:path";
+import { INITIAL_BINDING_REVISION, validateCloneIdentity, validateWorkspaceDeclaration, validateWorktreeIdentity, } from "../vendor/engram-live/contracts.js";
+export const LIVE_DECLARATION_KIND = "h2a-live-declaration";
+export const LIVE_DECLARATION_SCHEMA_VERSION = 1;
+/**
+ * Typed revision conflict: the durable declaration moved (or vanished)
+ * under a writer holding a stale base revision. The message keeps the
+ * `revision_conflict` marker; the name and the revision fields let callers
+ * branch on it without parsing text.
+ */
+export class LiveRevisionConflict extends Error {
+    declarationId;
+    expectedDeclarationRevision;
+    /** Current durable revision; undefined when the declaration is gone. */
+    actualDeclarationRevision;
+    constructor(declarationId, expectedDeclarationRevision, actualDeclarationRevision) {
+        super(actualDeclarationRevision === undefined
+            ? `revision_conflict: live declaration ${declarationId} was removed; stale writer held declaration revision ${expectedDeclarationRevision}`
+            : `revision_conflict: live declaration ${declarationId} is at declaration revision ` +
+                `${actualDeclarationRevision}, stale writer held ${expectedDeclarationRevision}`);
+        this.name = "LiveRevisionConflict";
+        this.declarationId = declarationId;
+        this.expectedDeclarationRevision = expectedDeclarationRevision;
+        this.actualDeclarationRevision = actualDeclarationRevision;
+    }
+}
+// ---------------------------------------------------------------------------
+// Exclusive store lock (synchronous, no dependency).
+// ---------------------------------------------------------------------------
+//
+// Every mutation (insert/update/remove) holds this lock from its read to
+// its persisted rename, so no stale revision can slip between the guard
+// check and the write — across processes as well as across store
+// instances. The lock is an atomically created directory; acquisition
+// retries briefly, recovers abandoned locks by age, then fails explicitly
+// (never silently proceeding unlocked). Re-entry by the SAME process only
+// bumps a counter: the pre-persist re-verification inside update() still
+// rejects a same-process interleaving, so re-entrancy never hides a
+// conflict. Each acquisition has a unique token directory: takeover removes
+// that generation, including its staged writes. Even a holder suspended
+// after its final fence check cannot rename a removed source into the store.
+// Reads stay lock-free: the tmp+rename persistence is atomic,
+// so readers always observe one whole committed file.
+const STORE_LOCK_DIRNAME = ".declarations.lock";
+const STORE_LOCK_TIMEOUT_MS = 5_000;
+const STORE_LOCK_STALE_MS = 10_000;
+const STORE_LOCK_POLL_MS = 5;
+/** Re-entry shares the SAME generation, never a successor's token. */
+const storeLocksHeld = new Map();
+const lockDirFor = (root) => join(root, "live", STORE_LOCK_DIRNAME);
+const sleepSync = (ms) => {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+};
+/** Remove only the observed generation; never recursively delete a successor. */
+function removeStoreLockGeneration(dir, token) {
+    rmSync(join(dir, token), { recursive: true, force: true });
+    try {
+        rmdirSync(dir);
+    }
+    catch (error) {
+        const code = error.code;
+        if (code !== "ENOENT" && code !== "ENOTEMPTY" && code !== "EEXIST")
+            throw error;
+    }
+}
+function acquireStoreLock(root) {
+    const dir = lockDirFor(root);
+    mkdirSync(join(root, "live"), { recursive: true });
+    const held = storeLocksHeld.get(dir);
+    if (held !== undefined) {
+        held.depth += 1;
+        return held;
+    }
+    const deadline = Date.now() + STORE_LOCK_TIMEOUT_MS;
+    for (;;) {
+        try {
+            mkdirSync(dir);
+            const lock = { token: randomUUID(), depth: 1 };
+            // No recursive mkdir: if takeover removed our parent in this window,
+            // acquisition must retry, never recreate a dispossessed generation.
+            mkdirSync(join(dir, lock.token));
+            storeLocksHeld.set(dir, lock);
+            return lock;
+        }
+        catch (error) {
+            const code = error.code;
+            if (code !== "EEXIST" && code !== "ENOENT")
+                throw error;
+        }
+        // Age permits takeover, but does NOT prove the holder stopped. Invalidate
+        // only the generation observed before the age check. A competing cleanup
+        // cannot erase a newly acquired token or its staged write.
+        try {
+            const tokens = readdirSync(dir);
+            if (Date.now() - statSync(dir).mtimeMs > STORE_LOCK_STALE_MS) {
+                for (const token of tokens)
+                    removeStoreLockGeneration(dir, token);
+                if (tokens.length === 0)
+                    rmdirSync(dir);
+            }
+        }
+        catch {
+            // The directory vanished under us; the next iteration retries.
+        }
+        if (Date.now() >= deadline) {
+            throw new Error(`live declarations store busy: cannot acquire lock at ${dir}`);
+        }
+        sleepSync(STORE_LOCK_POLL_MS);
+    }
+}
+function releaseStoreLock(root) {
+    const dir = lockDirFor(root);
+    const held = storeLocksHeld.get(dir);
+    if (held === undefined)
+        return;
+    if (held.depth > 1) {
+        held.depth -= 1;
+        return;
+    }
+    storeLocksHeld.delete(dir);
+    removeStoreLockGeneration(dir, held.token);
+}
+function withStoreLock(root, fn) {
+    const lock = acquireStoreLock(root);
+    try {
+        return fn(lock);
+    }
+    finally {
+        releaseStoreLock(root);
+    }
+}
+/** Structural validation of a record: envelope, triangle consistency, then the engram validators. */
+const validateRecord = (record) => {
+    if (record.kind !== LIVE_DECLARATION_KIND)
+        return "unexpected declaration kind";
+    if (record.schemaVersion !== LIVE_DECLARATION_SCHEMA_VERSION) {
+        return "unsupported declaration schema version";
+    }
+    const declaration = validateWorkspaceDeclaration(record.declaration);
+    if (!declaration.ok)
+        return `invalid declaration: ${declaration.errors.join("; ")}`;
+    if (record.clone.cloneId !== record.declaration.cloneId) {
+        return "clone/worktree attachment mismatch: clone.cloneId differs from declaration.cloneId";
+    }
+    if (record.worktree.cloneId !== record.declaration.cloneId) {
+        return "clone/worktree attachment mismatch: worktree.cloneId differs from declaration.cloneId";
+    }
+    if (record.worktree.worktreeId !== record.declaration.worktreeId) {
+        return "clone/worktree attachment mismatch: worktree.worktreeId differs from declaration.worktreeId";
+    }
+    const clone = validateCloneIdentity(record.clone);
+    if (!clone.ok)
+        return `invalid clone identity: ${clone.errors.join("; ")}`;
+    const worktree = validateWorktreeIdentity(record.worktree);
+    if (!worktree.ok)
+        return `invalid worktree identity: ${worktree.errors.join("; ")}`;
+    for (const field of ["createdAt", "activatedAt", "updatedAt"]) {
+        if (typeof record[field] !== "string" || record[field].length === 0) {
+            return `missing ${field}`;
+        }
+    }
+    return undefined;
+};
+const isRecord = (value) => {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const record = value;
+    if (record.kind !== LIVE_DECLARATION_KIND ||
+        record.schemaVersion !== LIVE_DECLARATION_SCHEMA_VERSION ||
+        typeof record.declaration !== "object" ||
+        record.declaration === null ||
+        typeof record.clone !== "object" ||
+        record.clone === null ||
+        typeof record.worktree !== "object" ||
+        record.worktree === null ||
+        typeof record.declaration.declarationId !== "string") {
+        return false;
+    }
+    return validateRecord(record) === undefined;
+};
+/** Pre-realignment entries (nested shape, top-level hostScope/revision, no neutral DTO) are never read as records. */
+const isLegacyRecord = (value) => {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const record = value;
+    return ("hostScope" in record ||
+        ("declarationId" in record && !("declaration" in record)));
+};
+/** Durable declarations live under the injected h2a root, never a worktree. */
+export function liveDeclarationsPath(root) {
+    return join(root, "live", "declarations.json");
+}
+const readStoreFile = (root) => {
+    const path = liveDeclarationsPath(root);
+    if (!existsSync(path)) {
+        return { kind: "h2a-live-declarations", version: 1, declarations: [] };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch (error) {
+        // Explicit failure: a corrupt declaration store must never be treated
+        // as an empty registry (LIVE §12: database loss must not erase live
+        // registrations; silent loss is worse).
+        throw new Error(`live declarations store unreadable at ${path}: ${error.message}`);
+    }
+    if (typeof parsed !== "object" ||
+        parsed === null ||
+        parsed.kind !== "h2a-live-declarations" ||
+        parsed.version !== 1 ||
+        !Array.isArray(parsed.declarations)) {
+        throw new Error(`live declarations store invalid at ${path}`);
+    }
+    const file = parsed;
+    for (const entry of file.declarations) {
+        if (isLegacyRecord(entry)) {
+            throw new Error(`live declarations store uses the pre-realignment L6a format at ${path}: ` +
+                `remove the file to start fresh (L6a is not consumed yet; no migration replay exists)`);
+        }
+        if (!isRecord(entry)) {
+            throw new Error(`live declarations store contains a malformed declaration at ${path}`);
+        }
+    }
+    return file;
+};
+/**
+ * A store instance is a thin read-through over the durable file: every
+ * operation re-reads, so two instances (or two processes) on the same root
+ * observe each other's committed writes.
+ */
+export function createLiveDeclarationStore(root) {
+    const load = () => readStoreFile(root).declarations;
+    const persist = (lock, expected, declarations, declarationId, expectedRevision) => {
+        const generation = join(lockDirFor(root), lock.token);
+        const tmp = join(generation, `${randomUUID()}.tmp`);
+        const conflict = () => new LiveRevisionConflict(declarationId, expectedRevision, load().find((record) => record.declaration.declarationId === declarationId)
+            ?.declaration.declarationRevision);
+        const file = {
+            kind: "h2a-live-declarations",
+            version: 1,
+            declarations: [...declarations],
+        };
+        try {
+            if (!existsSync(generation))
+                throw conflict();
+            // The source belongs to this unique token and cannot survive takeover.
+            // Never mkdir here: a dispossessed holder must not recreate its source.
+            writeFileSync(tmp, JSON.stringify(file, null, 2) + "\n", { mode: 0o600, flag: "wx" });
+            const fresh = load();
+            if (!existsSync(generation) || JSON.stringify(fresh) !== JSON.stringify(expected)) {
+                throw conflict();
+            }
+            // Atomic rename is the commit point. A suspension AFTER the checks
+            // above is fenced by takeover removing this generation's source file.
+            renameSync(tmp, liveDeclarationsPath(root));
+        }
+        catch (error) {
+            // Cleanup can unlink the source before removing its directory.
+            if (error.code === "ENOENT" || !existsSync(generation)) {
+                throw conflict();
+            }
+            throw error;
+        }
+        finally {
+            rmSync(tmp, { force: true });
+        }
+    };
+    return {
+        list() {
+            return [...load()].sort((a, b) => a.declaration.declarationId < b.declaration.declarationId
+                ? -1
+                : a.declaration.declarationId > b.declaration.declarationId
+                    ? 1
+                    : 0);
+        },
+        get(declarationId) {
+            return load().find((record) => record.declaration.declarationId === declarationId);
+        },
+        findByPath(path) {
+            return load().find((record) => record.declaration.authorizedRoots.includes(path));
+        },
+        insert(record) {
+            const problem = validateRecord(record);
+            if (problem !== undefined) {
+                throw new Error(`invalid live declaration record: ${problem}`);
+            }
+            withStoreLock(root, (lock) => {
+                const declarations = load();
+                if (declarations.some((existing) => existing.declaration.declarationId === record.declaration.declarationId)) {
+                    throw new Error(`live declaration already exists: ${record.declaration.declarationId}`);
+                }
+                persist(lock, declarations, [...declarations, record], record.declaration.declarationId, record.declaration.declarationRevision);
+            });
+        },
+        update(declarationId, expectedDeclarationRevision, mutate) {
+            return withStoreLock(root, (lock) => {
+                const declarations = load();
+                const index = declarations.findIndex((record) => record.declaration.declarationId === declarationId);
+                if (index === -1) {
+                    throw new Error(`unknown live declaration: ${declarationId}`);
+                }
+                const current = declarations[index];
+                if (current.declaration.declarationRevision !== expectedDeclarationRevision) {
+                    throw new LiveRevisionConflict(declarationId, expectedDeclarationRevision, current.declaration.declarationRevision);
+                }
+                const next = mutate(current);
+                if (next.declaration.declarationId !== declarationId) {
+                    throw new Error(`update must not change declarationId: ${declarationId}`);
+                }
+                if (next.declaration.declarationRevision !== expectedDeclarationRevision + 1) {
+                    throw new Error(`update must advance declarationRevision by exactly one: held ${expectedDeclarationRevision}`);
+                }
+                for (const field of [
+                    "tenant",
+                    "principal",
+                    "hostFingerprint",
+                    "cloneId",
+                    "worktreeId",
+                    "liveCapability",
+                ]) {
+                    if (next.declaration[field] !== current.declaration[field]) {
+                        throw new Error(`update must not change declaration identity field "${field}": ${declarationId}`);
+                    }
+                }
+                // Binding renewal-or-preserved: a workspace/issuer/revision change
+                // renews the binding (complete triplet, first binding exactly
+                // INITIAL_BINDING_REVISION, then strictly greater); any other
+                // mutation preserves it.
+                const previous = current.declaration;
+                const candidate = next.declaration;
+                const workspaceChanged = candidate.serverWorkspaceId !== previous.serverWorkspaceId;
+                const issuerChanged = candidate.serverIssuer !== previous.serverIssuer;
+                const revisionTouched = candidate.bindingRevision !== previous.bindingRevision;
+                if (workspaceChanged || issuerChanged || revisionTouched) {
+                    if (candidate.serverWorkspaceId === undefined ||
+                        candidate.serverIssuer === undefined ||
+                        candidate.bindingRevision === undefined) {
+                        throw new Error(`update must carry the complete serverWorkspaceId + serverIssuer + bindingRevision triplet when the binding changes: ${declarationId}`);
+                    }
+                    if (previous.bindingRevision === undefined) {
+                        if (candidate.bindingRevision !== INITIAL_BINDING_REVISION) {
+                            throw new Error(`update must carry bindingRevision ${INITIAL_BINDING_REVISION} for the first product binding: ${declarationId}`);
+                        }
+                    }
+                    else if (candidate.bindingRevision <= previous.bindingRevision) {
+                        throw new Error(`update must carry a strictly increasing bindingRevision: ${declarationId}`);
+                    }
+                }
+                const problem = validateRecord(next);
+                if (problem !== undefined) {
+                    throw new Error(`invalid updated live declaration record: ${problem}`);
+                }
+                // Atomic compare-and-write under the same lock: re-read the durable
+                // file and refuse when the declaration moved (a concurrent writer
+                // committed inside mutate()) or vanished (an interleaved removal).
+                // The merge applies onto the FRESH list, so unrelated concurrent
+                // records are never dropped; a stale write never clobbers and a
+                // removed declaration never resurrects.
+                const fresh = load();
+                const refetch = fresh.find((record) => record.declaration.declarationId === declarationId);
+                if (refetch === undefined) {
+                    throw new LiveRevisionConflict(declarationId, expectedDeclarationRevision, undefined);
+                }
+                if (refetch.declaration.declarationRevision !== expectedDeclarationRevision) {
+                    throw new LiveRevisionConflict(declarationId, expectedDeclarationRevision, refetch.declaration.declarationRevision);
+                }
+                persist(lock, fresh, fresh.map((record) => record.declaration.declarationId === declarationId ? next : record), declarationId, expectedDeclarationRevision);
+                return next;
+            });
+        },
+        remove(declarationId) {
+            return withStoreLock(root, (lock) => {
+                const declarations = load();
+                const remaining = declarations.filter((record) => record.declaration.declarationId !== declarationId);
+                if (remaining.length === declarations.length)
+                    return false;
+                persist(lock, declarations, remaining, declarationId, declarations.find((record) => record.declaration.declarationId === declarationId)
+                    .declaration.declarationRevision);
+                return true;
+            });
+        },
+    };
+}
+//# sourceMappingURL=live-declarations.js.map

package/dist/gateway-host/live-declarations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-declarations.js","sourceRoot":"","sources":["../../src/gateway-host/live-declarations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,MAAM,EACN,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAO5C,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAC5D,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,aAAa,CAAS;IACtB,2BAA2B,CAAS;IAC7C,wEAAwE;IAC/D,yBAAyB,CAAqB;IAEvD,YACE,aAAqB,EACrB,2BAAmC,EACnC,yBAA6C;QAE7C,KAAK,CACH,yBAAyB,KAAK,SAAS;YACrC,CAAC,CAAC,uCAAuC,aAAa,wDAAwD,2BAA2B,EAAE;YAC3I,CAAC,CAAC,uCAAuC,aAAa,8BAA8B;gBAChF,GAAG,yBAAyB,uBAAuB,2BAA2B,EAAE,CACvF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,2BAA2B,GAAG,2BAA2B,CAAC;QAC/D,IAAI,CAAC,yBAAyB,GAAG,yBAAyB,CAAC;IAC7D,CAAC;CACF;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAC9E,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,iEAAiE;AACjE,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,oEAAoE;AACpE,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,8DAA8D;AAC9D,sDAAsD;AAEtD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAO7B,sEAAsE;AACtE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAqB,CAAC;AAEpD,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAEpF,MAAM,SAAS,GAAG,CAAC,EAAU,EAAQ,EAAE;IACrC,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,iFAAiF;AACjF,SAAS,yBAAyB,CAAC,GAAW,EAAE,KAAa;IAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC;IACpD,SAAS,CAAC;QACR,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC/C,qEAAqE;YACrE,oEAAoE;YACpE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAC1D,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,2DAA2D;QAC3D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,mBAAmB,EAAE,CAAC;gBAC7D,KAAK,MAAM,KAAK,IAAI,MAAM;oBAAE,yBAAyB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC/B,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa,CAAI,IAAY,EAAE,EAA0B;IAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAuBD,qGAAqG;AACrG,MAAM,cAAc,GAAG,CAAC,MAA6B,EAAsB,EAAE;IAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB;QAAE,OAAO,6BAA6B,CAAC;IAChF,IAAI,MAAM,CAAC,aAAa,KAAK,+BAA+B,EAAE,CAAC;QAC7D,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,MAAM,WAAW,GAAG,4BAA4B,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrE,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,wBAAwB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACpF,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACxD,OAAO,oFAAoF,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC3D,OAAO,uFAAuF,CAAC;IACjG,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACjE,OAAO,6FAA6F,CAAC;IACvG,CAAC;IACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,2BAA2B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,8BAA8B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACpF,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAU,EAAE,CAAC;QACvE,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,OAAO,WAAW,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAkC,EAAE;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAuC,CAAC;IACvD,IACE,MAAM,CAAC,IAAI,KAAK,qBAAqB;QACrC,MAAM,CAAC,aAAa,KAAK,+BAA+B;QACxD,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,MAAM,CAAC,WAAW,KAAK,IAAI;QAC3B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,MAAM,CAAC,KAAK,KAAK,IAAI;QACrB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,KAAK,IAAI;QACxB,OAAO,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,QAAQ,EACpD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,cAAc,CAAC,MAA+B,CAAC,KAAK,SAAS,CAAC;AACvE,CAAC,CAAC;AAEF,sHAAsH;AACtH,MAAM,cAAc,GAAG,CAAC,KAAc,EAAW,EAAE;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CACL,WAAW,IAAI,MAAM;QACrB,CAAC,eAAe,IAAI,MAAM,IAAI,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,IAAY,EAAwB,EAAE;IAC3D,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,CAC7E,CAAC;IACJ,CAAC;IACD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACd,MAAwC,CAAC,IAAI,KAAK,uBAAuB;QACzE,MAAwC,CAAC,OAAO,KAAK,CAAC;QACvD,CAAC,KAAK,CAAC,OAAO,CAAE,MAAwC,CAAC,YAAY,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,MAA8B,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,kEAAkE,IAAI,IAAI;gBACxE,sFAAsF,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,+DAA+D,IAAI,EAAE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AA0BF;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,MAAM,IAAI,GAAG,GAA4B,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC;IAC7E,MAAM,OAAO,GAAG,CACd,IAAe,EACf,QAA0C,EAC1C,YAA8C,EAC9C,aAAqB,EACrB,gBAAwB,EAClB,EAAE;QACR,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,GAAyB,EAAE,CAAC,IAAI,oBAAoB,CACnE,aAAa,EACb,gBAAgB,EAChB,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAAC;YACzE,EAAE,WAAW,CAAC,mBAAmB,CACpC,CAAC;QACF,MAAM,IAAI,GAAyB;YACjC,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;SAChC,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,MAAM,QAAQ,EAAE,CAAC;YAC9C,uEAAuE;YACvE,wEAAwE;YACxE,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClF,MAAM,QAAQ,EAAE,CAAC;YACnB,CAAC;YACD,mEAAmE;YACnE,sEAAsE;YACtE,UAAU,CAAC,GAAG,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,+DAA+D;YAC/D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClF,MAAM,QAAQ,EAAE,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,IAAI;YACF,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,WAAW,CAAC,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,aAAa;gBACvD,CAAC,CAAC,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,aAAa;oBACzD,CAAC,CAAC,CAAC;oBACH,CAAC,CAAC,CAAC,CACR,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,aAAa;YACf,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC;QACrF,CAAC;QACD,UAAU,CAAC,IAAI;YACb,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,CAAC,MAAM;YACX,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC3B,MAAM,YAAY,GAAG,IAAI,EAAE,CAAC;gBAC5B,IACE,YAAY,CAAC,IAAI,CACf,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,KAAK,MAAM,CAAC,WAAW,CAAC,aAAa,CACtF,EACD,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,oCAAoC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CACvE,CAAC;gBACJ,CAAC;gBACD,OAAO,CACL,IAAI,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,EAAE,MAAM,CAAC,EAC7C,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,mBAAmB,CACzE,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,aAAa,EAAE,2BAA2B,EAAE,MAAM;YACvD,OAAO,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBAClC,MAAM,YAAY,GAAG,IAAI,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAClC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAC/D,CAAC;gBACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,aAAa,EAAE,CAAC,CAAC;gBAChE,CAAC;gBACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAE,CAAC;gBACrC,IAAI,OAAO,CAAC,WAAW,CAAC,mBAAmB,KAAK,2BAA2B,EAAE,CAAC;oBAC5E,MAAM,IAAI,oBAAoB,CAC5B,aAAa,EACb,2BAA2B,EAC3B,OAAO,CAAC,WAAW,CAAC,mBAAmB,CACxC,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7B,IAAI,IAAI,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,yCAAyC,aAAa,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBACD,IAAI,IAAI,CAAC,WAAW,CAAC,mBAAmB,KAAK,2BAA2B,GAAG,CAAC,EAAE,CAAC;oBAC7E,MAAM,IAAI,KAAK,CACb,gEAAgE,2BAA2B,EAAE,CAC9F,CAAC;gBACJ,CAAC;gBACD,KACE,MAAM,KAAK,IAAI;oBACb,QAAQ;oBACR,WAAW;oBACX,iBAAiB;oBACjB,SAAS;oBACT,YAAY;oBACZ,gBAAgB;iBACR,EACV,CAAC;oBACD,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3D,MAAM,IAAI,KAAK,CACb,sDAAsD,KAAK,MAAM,aAAa,EAAE,CACjF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,mEAAmE;gBACnE,8DAA8D;gBAC9D,8DAA8D;gBAC9D,yBAAyB;gBACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;gBACrC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC;gBACnC,MAAM,gBAAgB,GAAG,SAAS,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB,CAAC;gBACpF,MAAM,aAAa,GAAG,SAAS,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC;gBACvE,MAAM,eAAe,GAAG,SAAS,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe,CAAC;gBAC/E,IAAI,gBAAgB,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;oBACzD,IACE,SAAS,CAAC,iBAAiB,KAAK,SAAS;wBACzC,SAAS,CAAC,YAAY,KAAK,SAAS;wBACpC,SAAS,CAAC,eAAe,KAAK,SAAS,EACvC,CAAC;wBACD,MAAM,IAAI,KAAK,CACb,uHAAuH,aAAa,EAAE,CACvI,CAAC;oBACJ,CAAC;oBACD,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;wBAC3C,IAAI,SAAS,CAAC,eAAe,KAAK,wBAAwB,EAAE,CAAC;4BAC3D,MAAM,IAAI,KAAK,CACb,qCAAqC,wBAAwB,mCAAmC,aAAa,EAAE,CAChH,CAAC;wBACJ,CAAC;oBACH,CAAC;yBAAM,IAAI,SAAS,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;wBACjE,MAAM,IAAI,KAAK,CACb,4DAA4D,aAAa,EAAE,CAC5E,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC;gBACzE,CAAC;gBACD,oEAAoE;gBACpE,kEAAkE;gBAClE,mEAAmE;gBACnE,iEAAiE;gBACjE,gEAAgE;gBAChE,wCAAwC;gBACxC,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAC/D,CAAC;gBACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,IAAI,oBAAoB,CAC5B,aAAa,EACb,2BAA2B,EAC3B,SAAS,CACV,CAAC;gBACJ,CAAC;gBACD,IAAI,OAAO,CAAC,WAAW,CAAC,mBAAmB,KAAK,2BAA2B,EAAE,CAAC;oBAC5E,MAAM,IAAI,oBAAoB,CAC5B,aAAa,EACb,2BAA2B,EAC3B,OAAO,CAAC,WAAW,CAAC,mBAAmB,CACxC,CAAC;gBACJ,CAAC;gBACD,OAAO,CACL,IAAI,EACJ,KAAK,EACL,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACnB,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CACnE,EACD,aAAa,EACb,2BAA2B,CAC5B,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,aAAa;YAClB,OAAO,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBAClC,MAAM,YAAY,GAAG,IAAI,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CACnC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAC/D,CAAC;gBACF,IAAI,SAAS,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC;gBAC3D,OAAO,CACL,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAC5C,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAAE;qBAC/E,WAAW,CAAC,mBAAmB,CACnC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway-host/live-registration.d.ts

@@ -0,0 +1,162 @@
+import { NON_ACTIVATING_LIFECYCLE_KINDS } from "../vendor/engram-live/contracts.js";
+import type { DeclarationRevocationDto, IdentityUncertaintyState, NonActivatingLifecycleKind, OidAlgorithm, RevocationReason } from "../vendor/engram-live/contracts.js";
+import { type LiveDeclarationRecord } from "./live-declarations.js";
+export declare function normalizeRootCommits(shas: ReadonlyArray<string>): string;
+export declare function computeDurableWorkspaceId(rootCommitSHA: string, worktreeRelPath: string): string;
+export interface LiveWorkspaceProbe {
+    /** Authorized root: resolved real path of the observed worktree. */
+    readonly worktreeRealpath: string;
+    /** Resolved git-dir (`.git/worktrees/<name>` for a linked worktree). */
+    readonly gitDir: string;
+    /** Resolved common-dir real path, shared by linked worktrees. */
+    readonly commonDirRealpath: string;
+    /** "" for the main worktree, else the linked-worktree name. */
+    readonly worktreeName: string;
+    /** Repository object format; undefined when Git cannot report it. */
+    readonly oidAlgorithm?: OidAlgorithm;
+    /** Normalized root commits; undefined when history is missing. */
+    readonly rootCommits?: string;
+    /** Preserved public `ws:` fingerprint; absent with missing_history. */
+    readonly workspaceFingerprint?: string;
+    /** Project fingerprint (empty main-worktree component); may be absent. */
+    readonly projectFingerprint?: string;
+    /** A `shallow` graft file exists in the common dir. */
+    readonly shallow: boolean;
+    /** Explicit identity/coverage uncertainty labels, never silent. */
+    readonly identityUncertainty: readonly IdentityUncertaintyState[];
+}
+/**
+ * Probe a worktree's live identity with read-only Git plumbing. Every
+ * invocation disables optional locks (`--no-optional-locks`, LIVE §7) and
+ * never writes to the observed worktree, its index or its refs. Returns
+ * undefined when the path is not a Git worktree; missing (unborn HEAD) or
+ * shallow history is a successful probe with explicit uncertainty.
+ */
+export declare function probeLiveWorkspace(cwd: string): LiveWorkspaceProbe | undefined;
+/**
+ * Classify a host lifecycle event against live declarations. Bind, upload,
+ * code-workspace creation and session open/end never activate or remove a
+ * declaration: the only outcome is "no-activation-change". Unknown kinds
+ * are refused. Pinned to NON_ACTIVATING_LIFECYCLE_KINDS, never a copy.
+ */
+export declare function classifyLifecycleEvent(kind: NonActivatingLifecycleKind): "no-activation-change";
+export type LiveOperation = "activate" | "list" | "status" | "resolve" | "remove" | "remove-clone" | "rebind" | "replay";
+export interface LiveAuthorizationRequest {
+    readonly operation: LiveOperation;
+    /** Stable local scope `local:<host-owner-id>`; never a sentropic tenant. */
+    readonly tenant: string;
+    readonly path?: string;
+    readonly declarationId?: string;
+    readonly hostFingerprint?: string;
+}
+export interface LiveAuthorizationDecision {
+    readonly ok: boolean;
+    readonly reason?: string;
+    readonly principal?: string;
+}
+export interface LiveAuthority {
+    authorize(request: LiveAuthorizationRequest): LiveAuthorizationDecision;
+}
+/**
+ * Default authority until L7a: deny everything explicitly. Local identity
+ * verification is L7a work; until it exists, no declaration API is usable,
+ * and denial is an error — never a successful empty result (A01).
+ */
+export declare const unverifiedLocalLiveAuthority: LiveAuthority;
+export interface LiveWorkScope {
+    readonly declarationId: string;
+    readonly cloneId: string;
+}
+/**
+ * Cancellation/purge seam. Removal stops scheduled (delayed) work and
+ * requests a purge of PRIVATE local snapshots and derived indexes only;
+ * authorized committed history is never deleted by live (LIVE §10).
+ */
+export interface LiveWorkController {
+    cancelScheduledWork(scope: LiveWorkScope): boolean;
+    requestPrivatePurge(scope: LiveWorkScope): boolean;
+    hasInFlightWork(scope: LiveWorkScope): boolean;
+}
+export declare const inertLiveWorkController: LiveWorkController;
+export declare class LiveAccessRefused extends Error {
+    readonly operation: LiveOperation;
+    readonly reason: string;
+    constructor(operation: LiveOperation, reason: string);
+}
+export interface LiveRegistrationOptions {
+    /** Durable h2a root (outside every observed worktree); injected, never a worktree. */
+    readonly root: string;
+    /**
+     * Stable local scope `local:<host-owner-id>`; defaults to the OS owner.
+     * PROVISIONAL until L7a supplies the verified owner scope — never a
+     * sentropic tenant inferred from a workspace id.
+     */
+    readonly tenant?: string;
+    /** Authority seam; defaults to {@link unverifiedLocalLiveAuthority} (L7a completes verification). */
+    readonly authority?: LiveAuthority;
+    /** Work-control seam; defaults to {@link inertLiveWorkController}. */
+    readonly workController?: LiveWorkController;
+    /** Injectable clock for deterministic timestamps. */
+    readonly now?: () => string;
+}
+export interface ActivateLiveRequest {
+    readonly path: string;
+}
+export interface RemoveLiveRequest {
+    readonly path: string;
+    /** Mandatory: every revocation names its reason (contract DTO). */
+    readonly reason: RevocationReason;
+}
+export interface RemoveCloneLiveRequest {
+    readonly cloneId: string;
+    /** Mandatory: every revocation names its reason (contract DTO). */
+    readonly reason: RevocationReason;
+}
+export interface RebindLiveRequest {
+    readonly path: string;
+    readonly sentropicWorkspaceId: string;
+    readonly issuer: string;
+}
+export interface RemoveLiveResult {
+    readonly removed: boolean;
+    readonly canceledWork: boolean;
+    readonly purgeRequested: boolean;
+    /** The contract revocation, present exactly when a declaration was removed. */
+    readonly revocation?: DeclarationRevocationDto;
+}
+export interface RemoveCloneLiveResult {
+    /** Number of declarations revoked. */
+    readonly removed: number;
+    /** One contract revocation per revoked declaration, in declarationId order. */
+    readonly revocations: readonly DeclarationRevocationDto[];
+    readonly canceledWork: boolean;
+    readonly purgeRequested: boolean;
+}
+export interface ResolvedLivePath {
+    readonly declaration: LiveDeclarationRecord;
+    readonly relativePath: string;
+}
+export interface LiveRegistration {
+    readonly authority: LiveAuthority;
+    probe(cwd: string): LiveWorkspaceProbe | undefined;
+    /** Explicit activation, once per worktree; idempotent re-activation replays the existing declaration. */
+    activate(request: ActivateLiveRequest): {
+        declaration: LiveDeclarationRecord;
+        created: boolean;
+    };
+    list(): readonly LiveDeclarationRecord[];
+    status(path: string): LiveDeclarationRecord | undefined;
+    /** Path-resolution seam: the declaration covering `path`, with its relative path. */
+    resolvePath(path: string): ResolvedLivePath | undefined;
+    /** Stop work, cancel delayed jobs, revoke the declaration with its reason, request a private purge, then unregister. */
+    remove(request: RemoveLiveRequest): RemoveLiveResult;
+    /** Withdraw a whole clone: revoke EACH of its declarations, one revocation each. */
+    removeClone(request: RemoveCloneLiveRequest): RemoveCloneLiveResult;
+    /** Server/issuer-bound product live intent; requires fresh revalidation, bumps the binding revision. */
+    rebind(request: RebindLiveRequest): LiveDeclarationRecord;
+    /** Host-startup replay of durable declarations, without renewed activation. */
+    replay(): readonly LiveDeclarationRecord[];
+}
+export declare function createLiveRegistration(options: LiveRegistrationOptions): LiveRegistration;
+export { NON_ACTIVATING_LIFECYCLE_KINDS };
+//# sourceMappingURL=live-registration.d.ts.map

package/dist/gateway-host/live-registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-registration.d.ts","sourceRoot":"","sources":["../../src/gateway-host/live-registration.ts"],"names":[],"mappings":"AA4CA,OAAO,EAGL,8BAA8B,EAM/B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAEV,wBAAwB,EACxB,wBAAwB,EACxB,0BAA0B,EAC1B,YAAY,EACZ,gBAAgB,EAGjB,MAAM,oCAAoC,CAAC;AAO5C,OAAO,EAIL,KAAK,qBAAqB,EAE3B,MAAM,wBAAwB,CAAC;AAUhC,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,MAAM,CAIxE;AAED,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,GACtB,MAAM,CAKR;AAMD,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,mBAAmB,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACnE;AAeD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAkG9E;AAMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,0BAA0B,GAAG,sBAAsB,CAK/F;AAMD,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,MAAM,GACN,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,cAAc,GACd,QAAQ,GACR,QAAQ,CAAC;AAEb,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,OAAO,EAAE,wBAAwB,GAAG,yBAAyB,CAAC;CACzE;AAED;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,EAAE,aAE1C,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC;IACnD,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC;IACnD,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC;CAChD;AAED,eAAO,MAAM,uBAAuB,EAAE,kBAIrC,CAAC;AAEF,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,SAAS,EAAE,aAAa;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBADd,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,MAAM;CAK1B;AAED,MAAM,WAAW,uBAAuB;IACtC,sFAAsF;IACtF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qGAAqG;IACrG,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;IACnC,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;IAC7C,qDAAqD;IACrD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,wBAAwB,CAAC;CAChD;AAED,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC1D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IACnD,yGAAyG;IACzG,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG;QAAE,WAAW,EAAE,qBAAqB,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACjG,IAAI,IAAI,SAAS,qBAAqB,EAAE,CAAC;IACzC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAAC;IACxD,qFAAqF;IACrF,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAC;IACxD,wHAAwH;IACxH,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CAAC;IACrD,oFAAoF;IACpF,WAAW,CAAC,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,CAAC;IACpE,wGAAwG;IACxG,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,qBAAqB,CAAC;IAC1D,+EAA+E;IAC/E,MAAM,IAAI,SAAS,qBAAqB,EAAE,CAAC;CAC5C;AAOD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,gBAAgB,CAgQlB;AAID,OAAO,EAAE,8BAA8B,EAAE,CAAC"}