@smthrs/control 0.0.0-stage → 1.0.0-rc.4

package/dist/cjs/ControlRuntime.d.ts

@@ -0,0 +1,635 @@
+/**
+ * Browser-safe port between the control plane and the execution engine, with a
+ * deterministic in-memory implementation.
+ *
+ * `layerMemory` is the deterministic one: it models the production fence and
+ * approval ordering seams but keeps everything in a `Map`, so nothing it
+ * decides survives the process. The durable adapter is
+ * {@link SqlControlRuntime}, and both are held to one shared contract suite —
+ * see `test/ControlContract.ts`.
+ *
+ * @since 0.1.0
+ */
+import type * as PersistedPlan from "@smthrs/plan/Plan";
+import { Context, Crypto, Effect, Fiber, Layer, Schema } from "effect";
+import * as ApprovalAuthority from "./ApprovalAuthority.ts";
+import type { ApprovalTarget, PlanInput } from "./Control.ts";
+import { AlreadyResolved, ClaimLost, type CodeDrift, EnvelopeMismatch, FlowNotFound, InvalidInput, PersistenceError, PlanDenied, PlanDigestMismatch, PlanNotFound, RunNotFound, type Unauthorized } from "./ControlError.ts";
+import type { Envelope, FlowId, GrantScope, IdempotencyKey, PlanCard, PlanDecision, PlanGraph, PlanNode, Principal, Receipt, RunId, RunStatus, RunSummary, SignalPayload } from "./ControlSchema.ts";
+/**
+ * Immutable ordering keys for a run page. Control launches precede engine runs.
+ *
+ * @category models
+ * @since 1.0.0
+ */
+export interface RunCursor {
+    readonly source: 0 | 1;
+    readonly sequence: number;
+    readonly createdAt: number;
+    readonly runId: RunId;
+}
+/**
+ * Durable summary filters, applied before projection and executor observation.
+ * `limit` must be an integer from 1 through 500. Reuse a cursor with the same filters.
+ *
+ * @category models
+ * @since 1.0.0
+ */
+export interface RunQuery {
+    readonly filters?: {
+        readonly flowId?: FlowId | undefined;
+        readonly status?: RunStatus | undefined;
+        readonly terminal?: boolean | undefined;
+        readonly parentRunId?: RunId | undefined;
+        readonly lineageId?: string | undefined;
+        /** Created at or after this epoch millisecond. */
+        readonly since?: number | undefined;
+        /** Created before this epoch millisecond. */
+        readonly until?: number | undefined;
+        /** Only these runs; an empty list selects none. */
+        readonly runIds?: ReadonlyArray<RunId> | undefined;
+        /**
+         * Only runs this plane launched for a principal with this `id`, and this
+         * `kind` when given. A run with no recorded launcher never matches.
+         */
+        readonly launchedBy?: {
+            readonly id: string;
+            readonly kind?: string | undefined;
+        } | undefined;
+    } | undefined;
+    /** Creation time first, newest or oldest; ties use the durable sequence. */
+    readonly order?: "newest" | "oldest" | undefined;
+    readonly cursor?: RunCursor | undefined;
+    readonly limit: number;
+}
+/**
+ * Whether `run` was launched by the principal `launcher` names: the same `id`,
+ * and the same `kind` when `launcher` gives one. A run with no recorded
+ * launcher never matches.
+ *
+ * @category predicates
+ * @since 1.0.0
+ */
+export declare const launchedByMatches: (run: Pick<RunSummary, "launchedBy">, launcher: {
+    readonly id: string;
+    readonly kind?: string | undefined;
+}) => boolean;
+/**
+ * A bounded page; the cursor names the last selected row, even if retention removed it.
+ *
+ * @category models
+ * @since 1.0.0
+ */
+export interface RunPage {
+    readonly items: ReadonlyArray<RunSummary>;
+    readonly nextCursor?: RunCursor | undefined;
+}
+/**
+ * One page of an inventory walk. `next` is the position to pass as `after`
+ * for the following page; it is absent on the last page. `through` is the
+ * highest position the walk covers: the first page pins it to the newest
+ * entry at that moment, and the caller passes it back unchanged so every
+ * later page stops there. A walk therefore ends even while new entries keep
+ * arriving; they sort after `through` and belong to the next walk.
+ *
+ * @category models
+ * @since 1.0.0
+ */
+export interface IdPage {
+    readonly ids: ReadonlyArray<string>;
+    readonly next?: number | undefined;
+    readonly through: number;
+}
+/**
+ * An inventory page request. Positions are the store's insertion-ordered row
+ * key, so each page is one indexed seek. `limit` must be an integer from 1
+ * through 500.
+ *
+ * @category models
+ * @since 1.0.0
+ */
+export interface IdPageRequest {
+    readonly after?: number | undefined;
+    readonly through?: number | undefined;
+    readonly limit: number;
+}
+/**
+ * A durably admitted signal, bound at most once to one concrete wait token.
+ *
+ * @since 1.0.0
+ * @category models
+ */
+export interface SignalCommand {
+    readonly commandId: string;
+    readonly runId: RunId;
+    readonly signal: SignalPayload;
+    readonly token: string | null;
+    readonly state: "pending" | "delivered" | "rejected" | "terminal";
+    /**
+     * Who admitted the signal, stamped at admission. The executor checks it
+     * against `authorizeApproval` before the signal may complete a human wait,
+     * and a replay after restart reads it here because no caller is present.
+     * Absent on commands admitted before the column existed, which therefore
+     * cannot answer a human wait.
+     */
+    readonly principal?: Principal | undefined;
+}
+/**
+ * A stored-plan page request: plans oldest first, after the insertion position
+ * `after`, narrowed by flow and decision. `limit` must be an integer from 1
+ * through 500.
+ *
+ * @category models
+ * @since 1.0.0
+ */
+export interface PlanQuery {
+    readonly flowId?: FlowId | undefined;
+    readonly decision?: PlanDecision | undefined;
+    readonly after?: number | undefined;
+    readonly limit: number;
+}
+/**
+ * One page of stored plans. `next` is the insertion position a later page
+ * continues after, present while more plans may match.
+ *
+ * @category models
+ * @since 1.0.0
+ */
+export interface PlanPage {
+    readonly plans: ReadonlyArray<StoredPlan>;
+    readonly next?: number | undefined;
+}
+/**
+ * A decoded input and immutable plan stored before execution.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface StoredPlan {
+    readonly card: PlanCard;
+    readonly decodedInput: unknown;
+    readonly decision: PlanDecision;
+}
+/**
+ * The durable answer to an approval request. A decision is not inferred from
+ * the presence of a grant or from a boolean that also means denial.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export declare const ApprovalDecision: Schema.Union<readonly [Schema.Struct<{
+    readonly _tag: Schema.Literal<"Pending">;
+}>, Schema.Struct<{
+    readonly _tag: Schema.Literal<"Approved">;
+    readonly decisionPrincipal: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly kind: Schema.String;
+        readonly stampedAt: Schema.Number;
+    }>;
+    readonly decidedAt: Schema.Number;
+    readonly scope: Schema.Literals<readonly ["once", "run", "remembered"]>;
+}>, Schema.Struct<{
+    readonly _tag: Schema.Literal<"Denied">;
+    readonly decisionPrincipal: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly kind: Schema.String;
+        readonly stampedAt: Schema.Number;
+    }>;
+    readonly decidedAt: Schema.Number;
+}>]>;
+/**
+ * Durable approval state.
+ * @category models
+ * @since 1.0.0
+ */
+export type ApprovalDecision = typeof ApprovalDecision.Type;
+/**
+ * An identity and its explicit approval decision.
+ * @category models
+ * @since 1.0.0
+ */
+export type ApprovalToken = ApprovalDecision & {
+    readonly tokenId: string;
+    readonly target: ApprovalTarget;
+};
+declare const ApprovalPending_base: Schema.Class<ApprovalPending, Schema.TaggedStruct<"/control/ApprovalPending", {
+    readonly tokenId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * A gate that still needs a decision.
+ * @category errors
+ * @since 1.0.0
+ */
+export declare class ApprovalPending extends ApprovalPending_base {
+    get message(): string;
+}
+declare const ApprovalDenied_base: Schema.Class<ApprovalDenied, Schema.TaggedStruct<"/control/ApprovalDenied", {
+    readonly tokenId: Schema.String;
+    readonly decisionPrincipal: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly kind: Schema.String;
+        readonly stampedAt: Schema.Number;
+    }>;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * A gate that was denied, not merely resolved.
+ * @category errors
+ * @since 1.0.0
+ */
+export declare class ApprovalDenied extends ApprovalDenied_base {
+    get message(): string;
+}
+/**
+ * Opens only an explicitly approved gate. Callers may park on ApprovalPending;
+ * ApprovalDenied is terminal. This reads a runtime-issued token, not an
+ * authentication credential, and does not itself install permissions.
+ * @category combinators
+ * @since 1.0.0
+ */
+export declare const requireApproved: (token: ApprovalToken) => Effect.Effect<Extract<ApprovalToken, {
+    readonly _tag: "Approved";
+}>, ApprovalPending | ApprovalDenied>;
+/**
+ * One bulk permission grant. The envelope is deliberately not split into
+ * individual capabilities at this boundary.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface BulkGrant {
+    readonly tokenId: string;
+    readonly envelope: Envelope;
+    readonly scope: GrantScope;
+    readonly installedAt: number;
+}
+/**
+ * Result of launching an approved plan.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export type LaunchResult = {
+    readonly _tag: "Started";
+    readonly receipt: Receipt;
+    readonly run: RunSummary;
+} | {
+    readonly _tag: "Parked";
+    readonly receipt: Receipt;
+};
+/**
+ * A plan card and whether this call is the one that created it.
+ *
+ * A plan under an idempotency key the runtime has already seen answers with the
+ * STORED card, which is what idempotency means. `Control.plan` needs to tell
+ * that apart from a first ask, because it journals `control.plan.created` and
+ * an unconditional entry appended one creation per retry: `Channels.ingest`
+ * passes a key on every webhook redelivery, so a watcher of the plan partition
+ * replayed N creations of one plan.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface PlanOutcome {
+    readonly card: PlanCard;
+    readonly created: boolean;
+}
+/**
+ * A stored idempotency-key outcome and the mutation fingerprint that produced
+ * it.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface MutationRecord {
+    readonly fingerprint: string;
+    readonly receipt: Receipt;
+}
+/**
+ * The outcome of claiming a run mutation's idempotency key before launch.
+ *
+ * `Claimed` is this call's mandate to launch: the key row was empty or did not
+ * exist, and it now names this call. `Raced` is the resolution the plan verb's
+ * key claim gives a loser — another mutation claimed the key first, and the
+ * receipt it settled is the answer this call must return instead of launching
+ * a second run.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export type RunKeyClaim = {
+    readonly _tag: "Claimed";
+} | {
+    readonly _tag: "Raced";
+    readonly receipt: Receipt;
+};
+/**
+ * Flow metadata used by the memory runtime's input-decoding hook.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface MemoryFlow {
+    readonly flowId: FlowId;
+    readonly description: string;
+    readonly deployClass: boolean;
+    readonly envelope: Envelope;
+    /** Executable source/metadata identity included in the approved card. */
+    readonly executionDigest?: string | undefined;
+    readonly decode?: ((input: unknown) => Effect.Effect<unknown, InvalidInput>) | undefined;
+    /**
+     * Projects the decoded input into the keyed node graph the card reports.
+     *
+     * Planning performs no I/O, so this is a pure function of the input: the
+     * host builds the graph (`@smthrs/core`'s `Graph.build`), keys it
+     * (`@smthrs/plan`'s compiler), and reports each node as `cached` or `run`
+     * against whatever step cache it holds.
+     */
+    readonly plan?: ((input: unknown, planId: string) => Effect.Effect<{
+        readonly plan: PersistedPlan.Plan;
+        readonly statuses?: Readonly<Record<string, PlanNode["status"]>> | undefined;
+        /** The built graph's labelled edges and declaration sites, reported outside the approval digest. */
+        readonly graph?: PlanGraph | undefined;
+    }, InvalidInput>) | undefined;
+}
+/**
+ * In-memory runtime configuration.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface MemoryOptions {
+    readonly flows?: ReadonlyArray<MemoryFlow> | undefined;
+    readonly now?: (() => number) | undefined;
+    readonly principal?: Omit<Principal, "stampedAt"> | undefined;
+    readonly approvalAuthority?: ApprovalAuthority.Service | undefined;
+    /** The engine version stamped on every run this runtime starts. */
+    readonly engineVersion?: string | undefined;
+}
+/**
+ * One run that has been told to resume, and the sequence of the request.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface PendingResume {
+    readonly runId: RunId;
+    readonly sequence: number;
+    /**
+     * When the delegation was recorded.
+     *
+     * A host reads it to tell a decision it has just been handed from one that
+     * has been standing unanswered: a run parked by a process that has since
+     * exited has nobody left to recognize its own park, so its delegation is
+     * taken up by whichever host can drive it once it has gone unanswered for
+     * `Ownership.heartbeatStaleAfter` (triage B-15).
+     */
+    readonly requestedAtMs: number;
+    /**
+     * The journal sequence of the operator's explicit `control.run.resume`
+     * this delegation carries, when it carries one.
+     *
+     * An approval or a wake is background intent. An operator's resume of a
+     * run a live host parked is handed to that host as a delegation too, and
+     * this is what tells the host the operator asked: it records the
+     * per-release retry permission under this sequence before it drives the
+     * run (#2982, #3342).
+     */
+    readonly consent?: number | undefined;
+}
+/**
+ * Execution-engine operations required by `ControlLive`.
+ *
+ * A production adapter must fence every owner-sensitive write, implement
+ * resume as join-or-claim, release claims on every waiting or terminal
+ * transition, and translate all conflicts into typed failures. For a new
+ * approval decision, authenticate the principal and call `authorizeApproval`
+ * before target reads or receipt replay. Then call `lookupApproval`,
+ * `resolveApproval` exactly once with an authority recheck, `installBulkGrant`
+ * only on approval, and journal the decision. Commit the decision, grant,
+ * journal entry, receipt, and any node resume delegation atomically. Resolution
+ * must not require an installed grant or a flushed journal decision.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface Service {
+    /** The owning host's policy, independent of authentication and attribution. */
+    readonly authorizeApproval: ApprovalAuthority.Service["authorize"];
+    readonly plan: (input: PlanInput) => Effect.Effect<PlanOutcome, FlowNotFound | InvalidInput | PersistenceError>;
+    readonly getPlan: (planId: string) => Effect.Effect<StoredPlan, PlanNotFound | PersistenceError>;
+    /** Plan ids in insertion order, one bounded page at a time. */
+    readonly pagePlanIds: (request: IdPageRequest) => Effect.Effect<IdPage, InvalidInput | PersistenceError>;
+    /** Stored plans in insertion order, narrowed by flow and decision, one bounded page at a time. */
+    readonly queryPlans: (request: PlanQuery) => Effect.Effect<PlanPage, InvalidInput | PersistenceError>;
+    readonly lookupApproval: (target: ApprovalTarget) => Effect.Effect<ApprovalToken, PlanDigestMismatch | EnvelopeMismatch | AlreadyResolved | PlanNotFound | RunNotFound | PersistenceError>;
+    /**
+     * Creates the durable token for one in-run approval request, or returns the
+     * existing one.
+     *
+     * Plan tokens are created by `plan`; nothing created tokens for `Node`
+     * targets, so an in-run request (a parked `ask`, a permission requirement)
+     * could never be decided through `approve`/`deny`. Registration is
+     * idempotent — the executor calls it on every parked attempt — and returns
+     * the token with its current tagged decision so a resumed attempt can read
+     * the decision instead of parking again. A registered target that
+     * disagrees with the stored digest or envelope is refused, exactly as
+     * `lookupApproval` refuses it.
+     */
+    readonly registerApproval: (target: Extract<ApprovalTarget, {
+        readonly _tag: "Node";
+    }>) => Effect.Effect<ApprovalToken, RunNotFound | PlanDigestMismatch | EnvelopeMismatch | PersistenceError>;
+    readonly installBulkGrant: (token: ApprovalToken, envelope: Envelope, scope: GrantScope) => Effect.Effect<void, PersistenceError>;
+    /** Records the decision exactly once. Approval scope defaults to once; the
+     * control boundary supplies the scope of the grant it installed. */
+    readonly resolveApproval: (token: ApprovalToken, decision: "approved" | "denied", principal: Principal, scope?: GrantScope | undefined) => Effect.Effect<void, AlreadyResolved | PersistenceError | Unauthorized>;
+    /**
+     * Starts an approved plan. `principal` is the identity that asked; its `id`
+     * and `kind` are recorded as the run's `launchedBy`, which decides which
+     * readers a restricted listing or watch shows the run to.
+     */
+    readonly launch: (planId: string, digest: string, envelope: Envelope, principal?: Principal | undefined, reservedRunId?: RunId | undefined) => Effect.Effect<LaunchResult, PlanNotFound | PlanDenied | PlanDigestMismatch | EnvelopeMismatch | ClaimLost | PersistenceError>;
+    readonly getRun: (runId: RunId) => Effect.Effect<RunSummary, RunNotFound | PersistenceError>;
+    /**
+     * Every durable run id in insertion order, one bounded page at a time, for
+     * recovery and journal partition discovery. Reads keys only; use queryRuns
+     * for summaries.
+     */
+    readonly pageRunIds: (request: IdPageRequest) => Effect.Effect<IdPage, InvalidInput | PersistenceError>;
+    readonly queryRuns: (request: RunQuery) => Effect.Effect<RunPage, InvalidInput | PersistenceError>;
+    readonly listFlows: Effect.Effect<ReadonlyArray<{
+        readonly flowId: FlowId;
+        readonly description: string;
+    }>, PersistenceError>;
+    readonly deliverSignal: (runId: RunId, signal: SignalPayload) => Effect.Effect<void, RunNotFound | PersistenceError>;
+    readonly admitSignal: (commandId: string, runId: RunId, signal: SignalPayload, principal?: Principal | undefined) => Effect.Effect<void, RunNotFound | PersistenceError>;
+    readonly signalCommand: (commandId: string) => Effect.Effect<SignalCommand | undefined, PersistenceError>;
+    readonly pendingSignals: Effect.Effect<ReadonlyArray<SignalCommand>, PersistenceError>;
+    readonly bindSignal: (commandId: string, token: string) => Effect.Effect<string | null, PersistenceError>;
+    readonly settleSignal: (commandId: string, state: "delivered" | "rejected" | "terminal") => Effect.Effect<void, PersistenceError>;
+    readonly deliveredSignals: (runId: RunId) => Effect.Effect<ReadonlyArray<SignalPayload>, RunNotFound | PersistenceError>;
+    /**
+     * Records, durably, that this run has been told to resume.
+     *
+     * The record is the delegation. A decision on an in-run approval can be
+     * taken by any process holding the control database, and only the process
+     * hosting the execution can act on it, so the intent has to outlive the call
+     * that made it: an in-process event bus reaches one process, and a journal
+     * entry is per run and needs a reader that already knows which run to read.
+     * The returned sequence is the cursor {@link Service.clearResume} checks, so
+     * a resume requested while one is being taken up is not lost with it.
+     *
+     * A terminal run is refused with `InvalidInput`: no host will ever take the
+     * delegation up, and recording it would leave an orphaned row every host's
+     * `pendingResumes` poll filters but nothing ever clears.
+     *
+     * `consent` is the journal sequence of an operator's explicit resume (see
+     * {@link PendingResume.consent}). A later delegation without one keeps the
+     * consent no host has taken up yet.
+     */
+    readonly requestResume: (runId: RunId, options?: {
+        readonly consent?: number | undefined;
+    } | undefined) => Effect.Effect<number, RunNotFound | InvalidInput | PersistenceError>;
+    /**
+     * Every outstanding resume delegation for a run that is not terminal.
+     *
+     * This is what a host polls. A settled run's delegation is not reported: no
+     * host will ever take it up, and reporting it forever would make an
+     * unbounded backlog out of a run that is finished.
+     */
+    readonly pendingResumes: Effect.Effect<ReadonlyArray<PendingResume>, PersistenceError>;
+    /**
+     * Clears a delegation a host has taken up, if it is still the one it read.
+     *
+     * The sequence check is what makes the clear safe: a resume requested
+     * between the read and the clear has a higher sequence and survives, so the
+     * host takes it up on its next tick instead of losing it.
+     */
+    readonly clearResume: (runId: RunId, sequence: number) => Effect.Effect<void, PersistenceError>;
+    readonly registerFiber: (runId: RunId, fiber: Fiber.Fiber<unknown, unknown>) => Effect.Effect<void, RunNotFound | PersistenceError>;
+    /**
+     * Interrupts and awaits the local fiber with no caller-held mutation locks.
+     * `settle` wraps only the subsequent fenced status reconciliation, allowing
+     * ControlLive to commit its terminal event in the same transaction.
+     */
+    readonly interrupt: (runId: RunId, settle?: (effect: Effect.Effect<RunSummary, RunNotFound | ClaimLost | PersistenceError>) => Effect.Effect<RunSummary, RunNotFound | ClaimLost | PersistenceError>) => Effect.Effect<RunSummary, RunNotFound | ClaimLost | PersistenceError>;
+    /**
+     * Joins an owned run or claims a suspended run or expired dead-owner run.
+     *
+     * `scope: "launched"` restricts claims to runs this plane launched, including
+     * dead-owner takeovers. An unindexed run is refused with `ClaimLost`; a run
+     * already owned by this process is joined without changing its state.
+     * Both `Control.resume` and `Control.run` with a Resume input, plus steer
+     * wakes, pass it to preserve an engine-created run's continuation and fence.
+     * `scope: "any"` (also the default) is a trusted low-level runtime
+     * capability for hosts that can drive the claimed execution. Node approval
+     * uses `requestResume` delegation instead of claiming here.
+     */
+    readonly resume: (runId: RunId, options?: {
+        readonly scope?: "launched" | "any" | undefined;
+    } | undefined) => Effect.Effect<RunSummary, RunNotFound | ClaimLost | PersistenceError>;
+    /**
+     * `resume`, recording the flow's current execution digest and this
+     * runtime's engine version on the claimed run: the operator allowed it to
+     * resume on changed code, so later checks compare against that code. A flow
+     * that no longer exists, or that this host cannot run, has no code to adopt,
+     * so this fails `CodeDrift` before the claim and the run stays where it was.
+     */
+    readonly resumeAdopting: (runId: RunId, options?: {
+        readonly scope?: "launched" | "any" | undefined;
+    } | undefined) => Effect.Effect<RunSummary, RunNotFound | ClaimLost | CodeDrift | PersistenceError>;
+    /**
+     * The drift between the code the run recorded and the code that would
+     * resume it, or `undefined` when there is none. Every path that re-drives a
+     * parked run asks this before it claims or delegates; recovery paths that
+     * only settle a run do not.
+     */
+    readonly codeDrift: (runId: RunId) => Effect.Effect<CodeDrift | undefined, RunNotFound | PersistenceError>;
+    /**
+     * The code identity the run executes under: its own recorded digest and
+     * engine version, or, for a row that recorded none (a trampoline round, or a
+     * fork or child the engine wrote), those of its nearest same-flow ancestor.
+     * `codeDrift` checks this identity, so an executor that enters the identity
+     * read here runs exactly the code the check admitted.
+     */
+    readonly recordedCode: (runId: RunId) => Effect.Effect<Pick<RunSummary, "executionDigest" | "engineVersion">, RunNotFound | PersistenceError>;
+    readonly claimFence: (runId: RunId) => Effect.Effect<string, RunNotFound | ClaimLost | PersistenceError>;
+    /**
+     * Releases a launch the configured executor declined without changing its
+     * public `accepted` status.
+     *
+     * The run remains available to an external executor, but the launching
+     * process no longer appears to drive it. The presented fence is spent by
+     * the release and cannot authorize a later write.
+     */
+    readonly releasePending: (runId: RunId, fence: string) => Effect.Effect<RunSummary, RunNotFound | ClaimLost | PersistenceError>;
+    readonly writeStatus: (runId: RunId, fence: string, status: RunStatus) => Effect.Effect<RunSummary, RunNotFound | ClaimLost | PersistenceError>;
+    readonly stampPrincipal: (submitted?: Principal | undefined) => Effect.Effect<Principal, PersistenceError>;
+    readonly lookupMutation: (key: IdempotencyKey, fingerprint: string) => Effect.Effect<Receipt | undefined, PersistenceError>;
+    readonly recordMutation: (key: IdempotencyKey, fingerprint: string, receipt: Receipt) => Effect.Effect<void, PersistenceError>;
+    /**
+     * Claims a run mutation's idempotency key before any launch side effect.
+     *
+     * This is the run verb's half of the race `control_plan_keys` closes for
+     * plans: a bare `lookupMutation`/`recordMutation` pair leaves two processes
+     * that both missed the lookup free to both launch, and the loser's run row
+     * outlives the `recordMutation` refusal that follows. The claim must run
+     * FIRST, inside the same write transaction the mutation later records its
+     * receipt in, so the loser's insert conflicts on the winner's committed key
+     * row before a run row, a claim, or a journal entry exists — and the winner's
+     * receipt, committed in that same transaction, is already there to read.
+     *
+     * `Raced` carries the winner's recorded receipt verbatim, which is the
+     * convergence the plan verb gives a losing planner (`created: false` with
+     * the stored card). A key claimed under another fingerprint is refused with
+     * `InvalidInput`, the same refusal `plan` gives a colliding key. A key row
+     * whose winner never recorded — possible only when the claim and the record
+     * were not one transaction — is a `PersistenceError`, because there is no
+     * honest receipt to answer with.
+     */
+    readonly claimRunKey: (key: IdempotencyKey, fingerprint: string) => Effect.Effect<RunKeyClaim, InvalidInput | PersistenceError>;
+    /**
+     * Releases a claim {@link Service.claimRunKey} took, without a receipt.
+     *
+     * Exactly one path needs it: a launch that answered `Parked` created no run
+     * and records no receipt, so the claim must be withdrawn inside the same
+     * transaction or the key would stay held forever by a mutation that settled
+     * nothing. Every other outcome either records a receipt (the claim's whole
+     * point) or fails and rolls the claim back with its transaction.
+     */
+    readonly releaseRunKey: (key: IdempotencyKey) => Effect.Effect<void, PersistenceError>;
+    readonly grants: Effect.Effect<ReadonlyArray<BulkGrant>, PersistenceError>;
+}
+declare const ControlRuntime_base: Context.ServiceClass<ControlRuntime, "/control/ControlRuntime", Service>;
+/**
+ * Service key for the execution-engine port.
+ *
+ * @category services
+ * @since 0.1.0
+ */
+export declare class ControlRuntime extends ControlRuntime_base {
+}
+/**
+ * Constructs a runtime service from an implementation record.
+ *
+ * @category constructors
+ * @since 0.1.0
+ */
+export declare const make: (implementation: Service) => Service;
+/**
+ * Refuses an id page size outside 1 through 500, the `queryRuns` bound.
+ *
+ * @category validation
+ * @since 1.0.0
+ */
+export declare const idPageLimit: (limit: number) => Effect.Effect<void, InvalidInput>;
+/**
+ * Deterministic in-memory runtime. It models the production fence and approval
+ * ordering seams but intentionally does not claim durable process survival;
+ * see `control-runtime-engine-integration`.
+ *
+ * @category layers
+ * @since 0.1.0
+ */
+export declare const layerMemory: (options?: MemoryOptions) => Layer.Layer<ControlRuntime, never, Crypto.Crypto>;
+export {};
+//# sourceMappingURL=ControlRuntime.d.ts.map

package/dist/cjs/ControlRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ControlRuntime.d.ts","sourceRoot":"","sources":["../../src/ControlRuntime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,KAAK,aAAa,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC9E,OAAO,KAAK,iBAAiB,MAAM,wBAAwB,CAAA;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EACL,eAAe,EACf,SAAS,EACT,KAAK,SAAS,EACd,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EACV,QAAQ,EACR,MAAM,EACN,UAAU,EACV,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,SAAS,EACT,OAAO,EACP,KAAK,EACL,SAAS,EACT,UAAU,EACV,aAAa,EACd,MAAM,oBAAoB,CAAA;AAiB3B;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;QACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;QACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACvC,kDAAkD;QAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACnC,6CAA6C;QAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACnC,mDAAmD;QACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;QAClD;;;WAGG;QACH,QAAQ,CAAC,UAAU,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAC9F,GAAG,SAAS,CAAA;IACb,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAA;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAC5B,KAAK,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EACnC,UAAU;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,KACpE,OAEqE,CAAA;AAExE;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CAC5C;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAA;IACjE;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;CAChC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;IAa3B,CAAA;AAEF;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAA;AAE3D;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAChC,CAAA;;;;AAED;;;;GAIG;AACH,qBAAa,eAAgB,SAAQ,oBAEnC;IACA,IAAa,OAAO,IAAI,MAAM,CAE7B;CACF;;;;;;;;;AAED;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,mBAGlC;IACA,IAAa,OAAO,IAAI,MAAM,CAE7B;CACF;AAED;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAC1B,OAAO,aAAa,KACnB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,EAAE,eAAe,GAAG,cAAc,CAKK,CAAA;AAE7G;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB;IACA,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;CACzB,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B,CAAA;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAA;AAEzD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,GAAG,SAAS,CAAA;IACxF;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,CAAC,EACV,CAAC,CACD,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,MAAM,KACX,MAAM,CAAC,MAAM,CAAC;QACjB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAA;QACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;QAC5E,oGAAoG;QACpG,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;KACvC,EAAE,YAAY,CAAC,CAAC,GACf,SAAS,CAAA;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,SAAS,CAAA;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,SAAS,CAAA;IAC7D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC,OAAO,GAAG,SAAS,CAAA;IAClE,mEAAmE;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,OAAO;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAClE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,GAAG,YAAY,GAAG,gBAAgB,CAAC,CAAA;IAC/G,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,GAAG,gBAAgB,CAAC,CAAA;IAChG,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,EAAE,CACpB,OAAO,EAAE,aAAa,KACnB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAAC,CAAA;IAC3D,kGAAkG;IAClG,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,GAAG,gBAAgB,CAAC,CAAA;IACrG,QAAQ,CAAC,cAAc,EAAE,CACvB,MAAM,EAAE,cAAc,KACnB,MAAM,CAAC,MAAM,CAChB,aAAa,EACb,kBAAkB,GAAG,gBAAgB,GAAG,eAAe,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,CACxG,CAAA;IACD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,gBAAgB,EAAE,CACzB,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,KACvD,MAAM,CAAC,MAAM,CAChB,aAAa,EACb,WAAW,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,CACvE,CAAA;IACD,QAAQ,CAAC,gBAAgB,EAAE,CACzB,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,UAAU,KACd,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IAC1C;wEACoE;IACpE,QAAQ,CAAC,eAAe,EAAE,CACxB,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,UAAU,GAAG,QAAQ,EAC/B,SAAS,EAAE,SAAS,EACpB,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,KAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,gBAAgB,GAAG,YAAY,CAAC,CAAA;IAC3E;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,EACjC,aAAa,CAAC,EAAE,KAAK,GAAG,SAAS,KAC9B,MAAM,CAAC,MAAM,CAChB,YAAY,EACZ,YAAY,GAAG,UAAU,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,CACjG,CAAA;IACD,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,GAAG,gBAAgB,CAAC,CAAA;IAC5F;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,CACnB,OAAO,EAAE,aAAa,KACnB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAAC,CAAA;IAC3D,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,GAAG,gBAAgB,CAAC,CAAA;IAClG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAC/B,aAAa,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,EACxE,gBAAgB,CACjB,CAAA;IACD,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAAC,CAAA;IACpH,QAAQ,CAAC,WAAW,EAAE,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,aAAa,EACrB,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,KAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAAC,CAAA;IACxD,QAAQ,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,SAAS,EAAE,gBAAgB,CAAC,CAAA;IACzG,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACtF,QAAQ,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,gBAAgB,CAAC,CAAA;IACzG,QAAQ,CAAC,YAAY,EAAE,CACrB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,UAAU,KACzC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,CACzB,KAAK,EAAE,KAAK,KACT,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,gBAAgB,CAAC,CAAA;IAChF;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,aAAa,EAAE,CACtB,KAAK,EAAE,KAAK,EACZ,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,KAC5D,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,gBAAgB,CAAC,CAAA;IACzE;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACtF;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IAC/F,QAAQ,CAAC,aAAa,EAAE,CACtB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAAC,CAAA;IACxD;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,CACP,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,GAAG,SAAS,GAAG,gBAAgB,CAAC,KAC1E,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,GAAG,SAAS,GAAG,gBAAgB,CAAC,KACvE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,GAAG,SAAS,GAAG,gBAAgB,CAAC,CAAA;IAC1E;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,KAAK,EACZ,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAA;KAChD,GAAG,SAAS,KACV,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,GAAG,SAAS,GAAG,gBAAgB,CAAC,CAAA;IAC1E;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,EAAE,CACvB,KAAK,EAAE,KAAK,EACZ,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,KACtE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAC,CAAA;IACtF;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS,EAAE,WAAW,GAAG,gBAAgB,CAAC,CAAA;IAC1G;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,KAAK,KACT,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,GAAG,eAAe,CAAC,EAAE,WAAW,GAAG,gBAAgB,CAAC,CAAA;IACzG,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,gBAAgB,CAAC,CAAA;IACxG;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,EAAE,CACvB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,KACV,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,GAAG,SAAS,GAAG,gBAAgB,CAAC,CAAA;IAC1E,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,SAAS,KACd,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,GAAG,SAAS,GAAG,gBAAgB,CAAC,CAAA;IAC1E,QAAQ,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC1G,QAAQ,CAAC,cAAc,EAAE,CACvB,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,KAChB,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,EAAE,gBAAgB,CAAC,CAAA;IACzD,QAAQ,CAAC,cAAc,EAAE,CACvB,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,OAAO,KACb,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IAC1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,WAAW,EAAE,CACpB,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,KAChB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,GAAG,gBAAgB,CAAC,CAAA;IAChE;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IACtF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,CAAA;CAC3E;;AAED;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,mBAEnC;CAAG;AAEJ;;;;;GAKG;AACH,eAAO,MAAM,IAAI,GAAI,gBAAgB,OAAO,KAAG,OAA4C,CAAA;AAE3F;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,OAAO,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAGiB,CAAA;AAiF7F;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW,GAAI,UAAS,aAAkB,KAAG,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAiuBvG,CAAA"}