@sentropic/h2a-runtime 0.98.6 → 0.98.7-rc.1

package/dist/crash-log.js

@@ -0,0 +1,560 @@
+/**
+ * Crash logs: one documented, rotated, bounded JSONL log per component.
+ *
+ * Components:
+ * - `native-host` → the existing life journal
+ *   (`native-terminal/journal.ts`, `native-host.log`) — read-only here,
+ *   owned by the native host process. Documented, not duplicated.
+ * - `cli` → launcher/op failures (`native-host.ts` runOp/admission refusals).
+ * - `attach` → attach-client detach/give-up reasons (remote `attach.ts` and
+ *   the native `op.ts attach` bridge).
+ * - `mcp-server` → central MCP spawn/readiness failures (`central-mcp.ts`).
+ *
+ * Every row carries timestamp, component, version, pid, session/instance id
+ * when known, and a structured fatal record (uncaught exception, refusal with
+ * reason, child exit with code/signal). Files live under
+ * `${XDG_STATE_HOME:-$HOME/.local/state}/h2a/`, mode 0600, dir 0700, rotated
+ * at MAX_CRASH_LOG_BYTES (current + one `.1` generation, both read by
+ * `readRecentCrashLogs`). Structured rows never carry secrets in the clear:
+ * values are redacted before serialization (see `redactCrashText`, which
+ * stands on its own even when the secret is absent from the writer's
+ * environment). (The raw `mcp-central.log` server dump is verbatim child
+ * output and stays unredacted at rest; `h2a logs` redacts it on display.)
+ * Exit codes and signals are only ever observed values: either field is
+ * omitted when unknown, never defaulted. Appends take one lock attempt plus
+ * one provably-dead orphan reclaim (stale age AND dead owner PID); contention
+ * drops the row (counted via `getCrashLogDrops` and surfaced as a `dropped`
+ * row on the next successful append in the same process).
+ */
+import { randomUUID } from "node:crypto";
+import { chmodSync, closeSync, constants, fchmodSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, renameSync, statSync, unlinkSync, writeSync, } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join } from "node:path";
+export const CRASH_LOG_COMPONENTS = ["cli", "attach", "mcp-server"];
+export const NATIVE_HOST_LOG_COMPONENT = "native-host";
+export const MAX_CRASH_LOG_BYTES = 512 * 1024;
+const CRASH_LOG_FILES = {
+    cli: "cli.log",
+    attach: "attach.log",
+    "mcp-server": "mcp-server.log",
+};
+export function resolveCrashLogPath(component, env = process.env) {
+    const state = env["XDG_STATE_HOME"];
+    const base = state && isAbsolute(state)
+        ? join(state, "h2a")
+        : join(env["HOME"] || homedir(), ".local", "state", "h2a");
+    return join(base, CRASH_LOG_FILES[component]);
+}
+/** State dir shared by all crash logs (and the native host journal). */
+export function resolveCrashLogDir(env = process.env) {
+    const state = env["XDG_STATE_HOME"];
+    if (state && isAbsolute(state))
+        return join(state, "h2a");
+    return join(env["HOME"] || homedir(), ".local", "state", "h2a");
+}
+let cachedVersion;
+export function getCrashLogVersion() {
+    if (cachedVersion !== undefined)
+        return cachedVersion;
+    try {
+        const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+        cachedVersion = typeof pkg.version === "string" ? pkg.version : "unknown";
+    }
+    catch {
+        cachedVersion = "unknown";
+    }
+    return cachedVersion;
+}
+/** Test-only: reset the cached version. */
+export function resetCrashLogVersionForTests() {
+    cachedVersion = undefined;
+}
+const PATH_ENV_KEYS = new Set([
+    "HOME",
+    "PATH",
+    "PWD",
+    "OLDPWD",
+    "TMPDIR",
+    "NODE_PATH",
+    "TERM",
+    "LANG",
+    "XDG_RUNTIME_DIR",
+    "XDG_STATE_HOME",
+    "XDG_CONFIG_HOME",
+]);
+/**
+ * Redact secret values and credential patterns; never throws. Pattern
+ * redaction stands on its own: it must hold even when the secret value is
+ * absent from the writer's environment (tokens in child stderr, config JSON,
+ * CLI flags). Fail closed — an unrecognized `name=value` shape that names a
+ * credential is redacted, never passed through.
+ */
+export function redactCrashText(value) {
+    let result = value.slice(0, 4096);
+    try {
+        for (const [key, secret] of Object.entries(process.env)) {
+            if (!PATH_ENV_KEYS.has(key) && secret && secret.length >= 4) {
+                result = result.split(secret).join("[REDACTED]");
+            }
+        }
+    }
+    catch {
+        /* redaction best-effort */
+    }
+    // Fail closed over shapes, not an enumeration of names: dash/underscore
+    // cross in every motif, header names match quoted/JSON/`=` forms, values
+    // keep commas (passwords) but stop at `&`/`;`/whitespace (query chains).
+    return result
+        .replace(/-----BEGIN [^-]*PRIVATE KEY-----[\s\S]*?-----END [^-]*PRIVATE KEY-----/g, "[REDACTED]")
+        .replace(/\b(?:bearer|basic)\s+\S+/gi, "[REDACTED]")
+        .replace(/["']?(?:authorization|cookie|set-cookie)["']?\s*[:=]\s*("[^"\r\n]*"|'[^'\r\n]*'|[^\s;&"']+)/gi, "[REDACTED]")
+        .replace(/["']?[\w.-]*?(?:access[_-]?token|refresh[_-]?token|client[_-]?secret|id[_-]?token|auth[_-]?token|private[_-]?key|api[_-]?key|token|secret|passwd|passphrase|password|credential|pass|pwd|auth|session|key)["']?\s*[:=]\s*("[^"\r\n]*"|'[^'\r\n]*'|[^\s;&"']+)/gi, "[REDACTED]")
+        .replace(/(--?(?:access[_-]?token|refresh[_-]?token|client[_-]?secret|id[_-]?token|auth[_-]?token|private[_-]?key|api[_-]?key|token|secret|password|passwd|passphrase|pass|pwd|auth|session|credential|key))\b\s+("[^"\r\n]*"|'[^'\r\n]*'|[^\s"']+)/gi, "$1 [REDACTED]")
+        .replace(/:\/\/[^/\s]*@/g, "://[REDACTED]@");
+}
+const CRASH_SIGNAL_NUMBERS = {
+    1: "SIGHUP",
+    2: "SIGINT",
+    3: "SIGQUIT",
+    4: "SIGILL",
+    5: "SIGTRAP",
+    6: "SIGABRT",
+    7: "SIGBUS",
+    8: "SIGFPE",
+    9: "SIGKILL",
+    10: "SIGUSR1",
+    11: "SIGSEGV",
+    12: "SIGUSR2",
+    13: "SIGPIPE",
+    14: "SIGALRM",
+    15: "SIGTERM",
+    16: "SIGSTKFLT",
+    17: "SIGCHLD",
+    18: "SIGCONT",
+    19: "SIGSTOP",
+    20: "SIGTSTP",
+    21: "SIGTTIN",
+    22: "SIGTTOU",
+    23: "SIGURG",
+    24: "SIGXCPU",
+    25: "SIGXFSZ",
+    26: "SIGVTALRM",
+    27: "SIGPROF",
+    28: "SIGWINCH",
+    29: "SIGIO",
+    30: "SIGPWR",
+    31: "SIGSYS",
+};
+/**
+ * Normalize a signal (name, signo, or numeric string) to a log-safe name.
+ * Unknown names become `"unknown"`; unknown numbers become `"SIG<n>"` so the
+ * signo survives. `undefined` stays `undefined` — callers omit the field
+ * instead of inventing a signal.
+ */
+export function crashSignalName(value) {
+    if (value === undefined)
+        return undefined;
+    const text = typeof value === "number" ? String(value) : value.trim();
+    if (/^\d+$/.test(text)) {
+        const signo = Number.parseInt(text, 10);
+        if (Number.isSafeInteger(signo))
+            return CRASH_SIGNAL_NUMBERS[signo] ?? `SIG${signo}`;
+    }
+    if (typeof value === "string" && /^[A-Z][A-Z0-9_]{1,15}$/.test(value))
+        return value;
+    return "unknown";
+}
+function sanitizeField(value) {
+    if (value === undefined)
+        return undefined;
+    const clean = redactCrashText(value).slice(0, 1024);
+    return clean.length > 0 ? clean : undefined;
+}
+function sanitizeEvent(event) {
+    const known = [
+        "start",
+        "uncaughtException",
+        "unhandledRejection",
+        "startupError",
+        "refusal",
+        "childExit",
+        "sessionExit",
+        "signal",
+        "stop",
+        "exit",
+        "dropped",
+    ];
+    return known.includes(event) ? event : "exit";
+}
+function sanitizeSignal(signal) {
+    return crashSignalName(signal);
+}
+export function toCrashLogRow(component, entry) {
+    const row = {
+        timestamp: new Date().toISOString(),
+        component,
+        version: getCrashLogVersion(),
+        pid: process.pid,
+        event: sanitizeEvent(entry.event),
+    };
+    const sessionId = sanitizeField(entry.sessionId);
+    const instanceId = sanitizeField(entry.instanceId);
+    const reason = sanitizeField(entry.reason);
+    const detail = sanitizeField(entry.detail);
+    const signal = sanitizeSignal(entry.signal);
+    return {
+        ...row,
+        ...(sessionId ? { sessionId } : {}),
+        ...(instanceId ? { instanceId } : {}),
+        ...(reason ? { reason } : {}),
+        ...(detail ? { detail } : {}),
+        ...(Number.isSafeInteger(entry.exitCode) ? { exitCode: entry.exitCode } : {}),
+        ...(signal ? { signal } : {}),
+    };
+}
+function privateFile(fd) {
+    const info = fstatSync(fd);
+    if (!info.isFile() ||
+        info.nlink !== 1 ||
+        (typeof process.getuid === "function" && info.uid !== process.getuid())) {
+        throw new Error("unsafe crash log file");
+    }
+    fchmodSync(fd, 0o600);
+}
+function writeAll(fd, text) {
+    const bytes = Buffer.from(text);
+    for (let offset = 0; offset < bytes.length;) {
+        const written = writeSync(fd, bytes, offset, bytes.length - offset);
+        if (written <= 0)
+            throw new Error("crash log write made no progress");
+        offset += written;
+    }
+}
+/**
+ * A lock older than this was left by a dead writer: its owner can never come
+ * back to release it, so the next writer reclaims it instead of letting the
+ * component's log go silent forever. A live lock still drops (returns false).
+ */
+export const CRASH_LOG_LOCK_STALE_MS = 10_000;
+let droppedCrashLogs = 0;
+const pendingCrashLogDrops = new Map();
+function dropCrashLog(logPath, count = 1) {
+    droppedCrashLogs += count;
+    pendingCrashLogDrops.set(logPath, (pendingCrashLogDrops.get(logPath) ?? 0) + count);
+}
+/** Process-lifetime count of crash-log rows dropped instead of appended. */
+export function getCrashLogDrops() {
+    return droppedCrashLogs;
+}
+function acquireCrashLogLock(lockPath, token) {
+    try {
+        const fd = openSync(lockPath, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 0o600);
+        writeAll(fd, token);
+        return fd;
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+    }
+    // Contended. Reclaim only a provably-dead orphan: age alone never proves
+    // death (a live writer blocked in the filesystem never refreshes its
+    // mtime), so the owner PID in the lock token must be dead too. A live lock,
+    // an unreadable token, or a lock that changed under us drops the row
+    // instead of blocking the fatal path.
+    try {
+        const ageMs = Date.now() - statSync(lockPath).mtimeMs;
+        if (!Number.isFinite(ageMs) || ageMs < CRASH_LOG_LOCK_STALE_MS)
+            return undefined;
+        let owner = NaN;
+        try {
+            owner = Number.parseInt(String(readFileSync(lockPath, "utf8")).split(":")[0] ?? "", 10);
+        }
+        catch {
+            return undefined;
+        }
+        if (!Number.isSafeInteger(owner) || owner <= 0)
+            return undefined;
+        try {
+            process.kill(owner, 0);
+            return undefined;
+        }
+        catch (error) {
+            // ESRCH = no such process (reclaimable); anything else (EPERM = alive
+            // but unowned, or an exotic failure) keeps the lock.
+            if (error.code !== "ESRCH")
+                return undefined;
+        }
+        // Re-verify after the liveness probe: a fresh lock that appeared under us
+        // (or a token swap) aborts the reclaim instead of unlinking live state.
+        try {
+            const freshAgeMs = Date.now() - statSync(lockPath).mtimeMs;
+            if (!Number.isFinite(freshAgeMs) || freshAgeMs < CRASH_LOG_LOCK_STALE_MS)
+                return undefined;
+            if (String(readFileSync(lockPath, "utf8")).split(":")[0] !== String(owner))
+                return undefined;
+        }
+        catch {
+            return undefined;
+        }
+        unlinkSync(lockPath);
+        const fd = openSync(lockPath, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 0o600);
+        writeAll(fd, token);
+        return fd;
+    }
+    catch {
+        return undefined;
+    }
+}
+function ensurePrivateCrashLogDir(dir) {
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    let directory = lstatSync(dir);
+    // Self-heal a pre-existing group/other-readable state dir we own (tighter
+    // is strictly safer); anything else stays a counted drop, never a repair
+    // of somebody else's directory.
+    if (directory.isDirectory() &&
+        (typeof process.getuid !== "function" || directory.uid === process.getuid()) &&
+        (directory.mode & 0o077) !== 0) {
+        try {
+            chmodSync(dir, 0o700);
+        }
+        catch {
+            /* fall through to the safety check below */
+        }
+        directory = lstatSync(dir);
+    }
+    if (!directory.isDirectory() ||
+        (typeof process.getuid === "function" &&
+            directory.uid !== process.getuid()) ||
+        (directory.mode & 0o077) !== 0) {
+        throw new Error("unsafe crash log directory");
+    }
+}
+/**
+ * Best-effort bounded append. One lock attempt plus one stale-orphan reclaim,
+ * no wait: contention drops the row (returns false, counted and surfaced as a
+ * `dropped` row on the next successful append) instead of blocking the fatal
+ * path it documents. Never throws.
+ */
+export function appendCrashLog(component, entry, logPath = resolveCrashLogPath(component)) {
+    let lockFd;
+    const lockPath = `${logPath}.lock`;
+    const token = `${process.pid}:${randomUUID()}`;
+    try {
+        const text = `${JSON.stringify(toCrashLogRow(component, entry))}\n`;
+        ensurePrivateCrashLogDir(dirname(logPath));
+        lockFd = acquireCrashLogLock(lockPath, token);
+        if (lockFd === undefined)
+            throw new Error("crash log lock contended");
+        try {
+            const fd = openSync(logPath, constants.O_WRONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+            try {
+                privateFile(fd);
+                if (fstatSync(fd).size >= MAX_CRASH_LOG_BYTES) {
+                    try {
+                        unlinkSync(`${logPath}.1`);
+                    }
+                    catch (error) {
+                        if (error.code !== "ENOENT")
+                            throw error;
+                    }
+                    renameSync(logPath, `${logPath}.1`);
+                }
+            }
+            finally {
+                closeSync(fd);
+            }
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        const fd = openSync(logPath, constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT | constants.O_NOFOLLOW | constants.O_NONBLOCK, 0o600);
+        try {
+            privateFile(fd);
+            // One write for receipt + row, receipt cleared only after it lands: a
+            // failed replay keeps the earlier drops instead of losing them.
+            const missed = pendingCrashLogDrops.get(logPath) ?? 0;
+            const receipt = missed > 0
+                ? `${JSON.stringify(toCrashLogRow(component, { event: "dropped", detail: `${missed} crash-log rows dropped (lock contention or unsafe state)` }))}\n`
+                : "";
+            writeAll(fd, `${receipt}${text}`);
+            if (missed > 0)
+                pendingCrashLogDrops.delete(logPath);
+        }
+        finally {
+            closeSync(fd);
+        }
+        return true;
+    }
+    catch {
+        dropCrashLog(logPath);
+        return false;
+    }
+    finally {
+        if (lockFd !== undefined) {
+            try {
+                const owned = fstatSync(lockFd);
+                const current = lstatSync(lockPath);
+                if (owned.dev === current.dev &&
+                    owned.ino === current.ino &&
+                    readFileSync(lockPath, "utf8") === token) {
+                    unlinkSync(lockPath);
+                }
+            }
+            catch {
+                /* Never remove an unproven lock incarnation. */
+            }
+            try {
+                closeSync(lockFd);
+            }
+            catch {
+                /* Crash-log failures never escape. */
+            }
+        }
+    }
+}
+/** Read and parse one crash log; corrupt lines are skipped, never thrown. */
+export function readCrashLog(component, logPath = resolveCrashLogPath(component)) {
+    try {
+        if (!lstatSync(logPath).isFile())
+            return [];
+        return readFileSync(logPath, "utf8")
+            .split("\n")
+            .filter(Boolean)
+            .flatMap((line) => {
+            try {
+                const row = JSON.parse(line);
+                if (typeof row !== "object" || row === null)
+                    return [];
+                return [row];
+            }
+            catch {
+                return [];
+            }
+        });
+    }
+    catch {
+        return [];
+    }
+}
+/** Last `lines` rows across components, oldest first, rotations included. */
+export function readRecentCrashLogs(components = CRASH_LOG_COMPONENTS, lines = 50, env = process.env) {
+    const rows = components.flatMap((component) => {
+        const primary = resolveCrashLogPath(component, env);
+        return [...readCrashLog(component, `${primary}.1`), ...readCrashLog(component, primary)];
+    });
+    rows.sort((a, b) => (a.timestamp < b.timestamp ? -1 : a.timestamp > b.timestamp ? 1 : 0));
+    return rows.slice(Math.max(0, rows.length - Math.max(1, lines)));
+}
+/** Max chars of `detail`/`error` shown on one human `h2a logs` line. */
+export const CRASH_LOG_HUMAN_DETAIL_MAX = 300;
+function singleLine(text, max = CRASH_LOG_HUMAN_DETAIL_MAX) {
+    const flat = text.replace(/[\r\n]+/g, " ").trim();
+    return flat.length > max ? `${flat.slice(0, max)}…` : flat;
+}
+/**
+ * One human `h2a logs` line: what (event/reason/code/kind/errno), when
+ * (timestamp), where (component/session/pid/generation), why
+ * (detail/error, single-line and bounded). Detail is safe to show: rows are
+ * redacted before serialization.
+ */
+export function formatCrashLogHumanRow(record) {
+    const parts = [
+        String(record["timestamp"] ?? "unknown"),
+        String(record["component"] ?? "?"),
+        String(record["event"] ?? "?"),
+    ];
+    for (const key of ["sessionId", "instanceId", "reason", "exitCode", "signal", "cause", "code", "kind", "errno", "generation", "version", "pid"]) {
+        if (record[key] !== undefined)
+            parts.push(`${key}=${String(record[key])}`);
+    }
+    if (typeof record["detail"] === "string" && record["detail"].length > 0) {
+        parts.push(`detail=${singleLine(record["detail"])}`);
+    }
+    if (typeof record["error"] === "string" && record["error"].length > 0) {
+        parts.push(`error=${singleLine(record["error"])}`);
+    }
+    return parts.join(" ");
+}
+/** Max bytes scanned from the end of a raw log for the viewer. */
+export const CRASH_LOG_TAIL_MAX_BYTES = 256 * 1024;
+/**
+ * Last `maxLines` of a text file for the viewer; missing/unreadable → [].
+ * Scans a bounded window from the end with positional reads — a multi-MB
+ * server dump is never loaded whole. Lines past the window are dropped whole
+ * (the leading, possibly partial, line is never shown truncated).
+ */
+export function readFileTailLines(path, maxLines) {
+    let fd;
+    try {
+        fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        if (!fstatSync(fd).isFile())
+            return [];
+        const size = fstatSync(fd).size;
+        if (size === 0)
+            return [];
+        const want = Math.min(size, CRASH_LOG_TAIL_MAX_BYTES);
+        const start = size - want;
+        const buffer = Buffer.alloc(want);
+        let bytesRead = 0;
+        while (bytesRead < want) {
+            const read = readSync(fd, buffer, bytesRead, want - bytesRead, start + bytesRead);
+            if (read <= 0)
+                break;
+            bytesRead += read;
+        }
+        const lines = buffer.subarray(0, bytesRead).toString("utf8").split("\n");
+        while (lines.length > 0 && lines[lines.length - 1] === "")
+            lines.pop();
+        if (start > 0)
+            lines.shift();
+        return lines.slice(Math.max(0, lines.length - Math.max(1, maxLines)));
+    }
+    catch {
+        return [];
+    }
+    finally {
+        if (fd !== undefined) {
+            try {
+                closeSync(fd);
+            }
+            catch {
+                /* A tail read never escapes. */
+            }
+        }
+    }
+}
+/**
+ * Passive fatal-path witness for short-lived launcher-side processes (the CLI
+ * launcher, the op child). `uncaughtExceptionMonitor` observes without
+ * altering Node's default crash/exit behavior: it only leaves a row behind in
+ * `component`.log so `h2a logs` can explain the crash. Never throws.
+ */
+export function installCrashHandlers(component) {
+    process.on("uncaughtExceptionMonitor", (error, origin) => {
+        try {
+            appendCrashLog(component, {
+                event: origin === "unhandledRejection" ? "unhandledRejection" : "uncaughtException",
+                detail: error instanceof Error ? error.message : String(error),
+            });
+        }
+        catch {
+            /* A witness never breaks the fatal path it documents. */
+        }
+    });
+}
+let cliWitnessInstalled = false;
+/**
+ * Idempotent CLI fatal-path witness. The owner binary (core `bin.ts`) reaches
+ * the runtime through lazy `dispatchRuntime()` → `main()`, never with the
+ * runtime file as `argv[1]` — so an `isEntryPoint()` gate alone never fires
+ * on the real path. Installing here covers every dispatch; the once-guard
+ * keeps repeated `main()` calls (and tests) to a single listener.
+ */
+export function installCliWitnessOnce() {
+    if (cliWitnessInstalled)
+        return;
+    cliWitnessInstalled = true;
+    installCrashHandlers("cli");
+}
+//# sourceMappingURL=crash-log.js.map

package/dist/crash-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-log.js","sourceRoot":"","sources":["../src/crash-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAU,CAAC;AAE7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,aAAsB,CAAC;AAGhE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC;AAgD9C,MAAM,eAAe,GAAsC;IACzD,GAAG,EAAE,SAAS;IACd,MAAM,EAAE,YAAY;IACpB,YAAY,EAAE,gBAAgB;CAC/B,CAAC;AAEF,MAAM,UAAU,mBAAmB,CACjC,SAA4B,EAC5B,MAAoD,OAAO,CAAC,GAAG;IAE/D,MAAM,KAAK,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACpC,MAAM,IAAI,GACR,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QACxB,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAChC,MAAoD,OAAO,CAAC,GAAG;IAE/D,MAAM,KAAK,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACpC,IAAI,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,IAAI,aAAiC,CAAC;AACtC,MAAM,UAAU,kBAAkB;IAChC,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACzC,CAAC;QAC3B,aAAa,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,SAAS,CAAC;IAC5B,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,4BAA4B;IAC1C,aAAa,GAAG,SAAS,CAAC;AAC5B,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM;IACN,MAAM;IACN,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,MAAM;IACN,MAAM;IACN,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;CAClB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC5D,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,OAAO,MAAM;SACV,OAAO,CAAC,yEAAyE,EAAE,YAAY,CAAC;SAChG,OAAO,CAAC,4BAA4B,EAAE,YAAY,CAAC;SACnD,OAAO,CAAC,+FAA+F,EAAE,YAAY,CAAC;SACtH,OAAO,CACN,iQAAiQ,EACjQ,YAAY,CACb;SACA,OAAO,CACN,6OAA6O,EAC7O,eAAe,CAChB;SACA,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,oBAAoB,GAA2B;IACnD,CAAC,EAAE,QAAQ;IACX,CAAC,EAAE,QAAQ;IACX,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,QAAQ;IACX,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,QAAQ;IACX,CAAC,EAAE,QAAQ;IACX,CAAC,EAAE,SAAS;IACZ,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,WAAW;IACf,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,WAAW;IACf,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,UAAU;IACd,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,QAAQ;CACb,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAkC;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACtE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,MAAM,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB;IACzC,MAAM,KAAK,GAA6B;QACtC,OAAO;QACP,mBAAmB;QACnB,oBAAoB;QACpB,cAAc;QACd,SAAS;QACT,WAAW;QACX,aAAa;QACb,QAAQ;QACR,MAAM;QACN,MAAM;QACN,SAAS;KACV,CAAC;IACF,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,MAAmC;IACzD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,SAA4B,EAC5B,KAAoB;IAEpB,MAAM,GAAG,GAAgB;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS;QACT,OAAO,EAAE,kBAAkB,EAAE;QAC7B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;KAClC,CAAC;IACF,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO;QACL,GAAG,GAAG;QACN,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3B,IACE,CAAC,IAAI,CAAC,MAAM,EAAE;QACd,IAAI,CAAC,KAAK,KAAK,CAAC;QAChB,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EACvE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU,EAAE,IAAY;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAI,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;QACpE,IAAI,OAAO,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtE,MAAM,IAAI,OAAO,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,IAAI,gBAAgB,GAAG,CAAC,CAAC;AACzB,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEvD,SAAS,YAAY,CAAC,OAAe,EAAE,KAAK,GAAG,CAAC;IAC9C,gBAAgB,IAAI,KAAK,CAAC;IAC1B,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB,EAAE,KAAa;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CACjB,QAAQ,EACR,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAChF,KAAK,CACN,CAAC;QACF,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACpB,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,yEAAyE;IACzE,qEAAqE;IACrE,4EAA4E;IAC5E,qEAAqE;IACrE,sCAAsC;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,uBAAuB;YAAE,OAAO,SAAS,CAAC;QACjF,IAAI,KAAK,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACjE,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sEAAsE;YACtE,qDAAqD;YACrD,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAC;QAC1E,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,uBAAuB;gBAAE,OAAO,SAAS,CAAC;YAC3F,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,QAAQ,CACjB,QAAQ,EACR,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAChF,KAAK,CACN,CAAC;QACF,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACpB,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAW;IAC3C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,0EAA0E;IAC1E,yEAAyE;IACzE,gCAAgC;IAChC,IACE,SAAS,CAAC,WAAW,EAAE;QACvB,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5E,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAC9B,CAAC;QACD,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;QACD,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD,IACE,CAAC,SAAS,CAAC,WAAW,EAAE;QACxB,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;YACnC,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACrC,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA4B,EAC5B,KAAoB,EACpB,UAAkB,mBAAmB,CAAC,SAAS,CAAC;IAEhD,IAAI,MAA0B,CAAC;IAC/B,MAAM,QAAQ,GAAG,GAAG,OAAO,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC;QACpE,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CACjB,OAAO,EACP,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CACjE,CAAC;YACF,IAAI,CAAC;gBACH,WAAW,CAAC,EAAE,CAAC,CAAC;gBAChB,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,mBAAmB,EAAE,CAAC;oBAC9C,IAAI,CAAC;wBACH,UAAU,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;4BAAE,MAAM,KAAK,CAAC;oBACtE,CAAC;oBACD,UAAU,CAAC,OAAO,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CACjB,OAAO,EACP,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,EACzG,KAAK,CACN,CAAC;QACF,IAAI,CAAC;YACH,WAAW,CAAC,EAAE,CAAC,CAAC;YAChB,sEAAsE;YACtE,gEAAgE;YAChE,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,OAAO,GACX,MAAM,GAAG,CAAC;gBACR,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,2DAA2D,EAAE,CAAC,CAAC,IAAI;gBACrJ,CAAC,CAAC,EAAE,CAAC;YACT,QAAQ,CAAC,EAAE,EAAE,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;YAClC,IAAI,MAAM,GAAG,CAAC;gBAAE,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACpC,IACE,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;oBACzB,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;oBACzB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,KAAK,EACxC,CAAC;oBACD,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;YACD,IAAI,CAAC;gBACH,SAAS,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAC1B,SAA4B,EAC5B,UAAkB,mBAAmB,CAAC,SAAS,CAAC;IAEhD,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,CAAC;QAC5C,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC;aACjC,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC;aACf,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;gBAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;oBAAE,OAAO,EAAE,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CACjC,aAA2C,oBAAoB,EAC/D,KAAK,GAAG,EAAE,EACV,MAAoD,OAAO,CAAC,GAAG;IAE/D,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,YAAY,CAAC,SAAS,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C,SAAS,UAAU,CAAC,IAAY,EAAE,GAAG,GAAG,0BAA0B;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IACpE,MAAM,KAAK,GAAG;QACZ,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;KAC/B,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;QAChJ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,QAAgB;IAC9D,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;QAChC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,OAAO,SAAS,GAAG,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,SAAS,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC;YAClF,IAAI,IAAI,IAAI,CAAC;gBAAE,MAAM;YACrB,SAAS,IAAI,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACvE,IAAI,KAAK,GAAG,CAAC;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAA4B;IAC/D,OAAO,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,KAAc,EAAE,MAAc,EAAE,EAAE;QACxE,IAAI,CAAC;YACH,cAAc,CAAC,SAAS,EAAE;gBACxB,KAAK,EAAE,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB;gBACnF,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,mBAAmB,GAAG,KAAK,CAAC;AAChC;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,mBAAmB;QAAE,OAAO;IAChC,mBAAmB,GAAG,IAAI,CAAC;IAC3B,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/gateway-host/live-declarations.d.ts

@@ -0,0 +1,58 @@
+import type { CloneIdentityDto, WorkspaceDeclarationDto, WorktreeIdentityDto } from "../vendor/engram-live/contracts.js";
+export declare const LIVE_DECLARATION_KIND = "h2a-live-declaration";
+export declare const LIVE_DECLARATION_SCHEMA_VERSION = 1;
+/**
+ * Typed revision conflict: the durable declaration moved (or vanished)
+ * under a writer holding a stale base revision. The message keeps the
+ * `revision_conflict` marker; the name and the revision fields let callers
+ * branch on it without parsing text.
+ */
+export declare class LiveRevisionConflict extends Error {
+    readonly declarationId: string;
+    readonly expectedDeclarationRevision: number;
+    /** Current durable revision; undefined when the declaration is gone. */
+    readonly actualDeclarationRevision: number | undefined;
+    constructor(declarationId: string, expectedDeclarationRevision: number, actualDeclarationRevision: number | undefined);
+}
+export interface LiveDeclarationRecord {
+    readonly kind: typeof LIVE_DECLARATION_KIND;
+    readonly schemaVersion: typeof LIVE_DECLARATION_SCHEMA_VERSION;
+    /** The exact neutral DTO; validated with validateWorkspaceDeclaration on every write. */
+    readonly declaration: WorkspaceDeclarationDto;
+    /** Full local clone identity (commonDirRealpath stays host-local; only cloneId is shared). */
+    readonly clone: CloneIdentityDto;
+    /** Full local worktree identity. */
+    readonly worktree: WorktreeIdentityDto;
+    readonly createdAt: string;
+    /** Activation timestamp; replay after restart never renews it. */
+    readonly activatedAt: string;
+    readonly updatedAt: string;
+}
+/** Durable declarations live under the injected h2a root, never a worktree. */
+export declare function liveDeclarationsPath(root: string): string;
+export interface LiveDeclarationStore {
+    /** All durable declarations, deterministically ordered. */
+    list(): readonly LiveDeclarationRecord[];
+    get(declarationId: string): LiveDeclarationRecord | undefined;
+    /** First declaration whose authorized root covers `path`. */
+    findByPath(path: string): LiveDeclarationRecord | undefined;
+    insert(record: LiveDeclarationRecord): void;
+    /**
+     * Revision-guarded mutation: re-reads the durable store, refuses a stale
+     * `expectedDeclarationRevision` with `revision_conflict`, verifies the
+     * composed next record (declarationRevision exactly + 1, immutable
+     * identity triangle, binding renewal-or-preserved with first binding
+     * exactly INITIAL_BINDING_REVISION then strictly greater, valid DTOs)
+     * and persists atomically. The callback returns the fully composed next
+     * record; the store owns the guard, never silent arithmetic.
+     */
+    update(declarationId: string, expectedDeclarationRevision: number, mutate: (record: LiveDeclarationRecord) => LiveDeclarationRecord): LiveDeclarationRecord;
+    remove(declarationId: string): boolean;
+}
+/**
+ * A store instance is a thin read-through over the durable file: every
+ * operation re-reads, so two instances (or two processes) on the same root
+ * observe each other's committed writes.
+ */
+export declare function createLiveDeclarationStore(root: string): LiveDeclarationStore;
+//# sourceMappingURL=live-declarations.d.ts.map

package/dist/gateway-host/live-declarations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-declarations.d.ts","sourceRoot":"","sources":["../../src/gateway-host/live-declarations.ts"],"names":[],"mappings":"AAwDA,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACpB,MAAM,oCAAoC,CAAC;AAE5C,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAC5D,eAAO,MAAM,+BAA+B,IAAI,CAAC;AAEjD;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,wEAAwE;IACxE,QAAQ,CAAC,yBAAyB,EAAE,MAAM,GAAG,SAAS,CAAC;gBAGrD,aAAa,EAAE,MAAM,EACrB,2BAA2B,EAAE,MAAM,EACnC,yBAAyB,EAAE,MAAM,GAAG,SAAS;CAahD;AAgHD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,OAAO,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,OAAO,+BAA+B,CAAC;IAC/D,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAC;IAC9C,8FAA8F;IAC9F,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAkED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AA4CD,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,IAAI,IAAI,SAAS,qBAAqB,EAAE,CAAC;IACzC,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAAC;IAC9D,6DAA6D;IAC7D,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAAC;IAC5D,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC5C;;;;;;;;OAQG;IACH,MAAM,CACJ,aAAa,EAAE,MAAM,EACrB,2BAA2B,EAAE,MAAM,EACnC,MAAM,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,qBAAqB,GAC/D,qBAAqB,CAAC;IACzB,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;CACxC;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAmN7E"}