@substrat-run/kernel 0.136.0 → 0.138.0

package/dist/system-switch-record.js

@@ -1,5 +1,9 @@
+import { liveTupleSql } from './permission-eval.js';
+import { PEER_SUBJECT_PREFIX, } from './system-switch.js';
 /** The record's table name, as the DDL below spells it. */
 export const SYSTEM_SWITCHES_TABLE = '_substrat_system_switches';
+/** The peer switch's record (#2029), as `PEER_SWITCHES_DDL` spells it. */
+const PEER_SWITCHES_TABLE = '_substrat_peer_switches';
 /**
  * The table. Interpolated into both adapters' directory DDL, so `lint:spine-ddl` sees the
  * one spelling on each side. No CHECK on `position`: the drift gate does not compare
@@ -25,35 +29,158 @@ export const SYSTEM_SWITCHES_DDL = `
   CREATE INDEX IF NOT EXISTS _substrat_system_switches_operation
     ON _substrat_system_switches (operation_id);
 `;
+/**
+ * The peer switch's record (#2029): `SYSTEM_SWITCHES_DDL`'s shape, keyed by the calling
+ * vertical's slug. No fleet read pages it yet, so it carries none of that read's indexes; every
+ * read here names (tenant, scope), the primary key's prefix.
+ */
+export const PEER_SWITCHES_DDL = `
+  CREATE TABLE IF NOT EXISTS _substrat_peer_switches (
+    tenant_id    TEXT NOT NULL,
+    scope_id     TEXT NOT NULL,
+    -- The calling vertical's slug, as the target's peers declaration names it.
+    vertical     TEXT NOT NULL,
+    position     TEXT NOT NULL,
+    actor        TEXT NOT NULL,
+    reason       TEXT NOT NULL,
+    operation_id TEXT NOT NULL,
+    switched_at  TEXT NOT NULL,
+    PRIMARY KEY (tenant_id, scope_id, vertical)
+  );
+`;
+/**
+ * Everything that differs between the two kinds, in one place: where each is recorded, how its
+ * switch calls and re-asserts are written to the admin log, and how a call that held nothing is
+ * refused. Every function below reads this table; none branches on the kind itself.
+ */
+const RECORDS = {
+    system: {
+        table: SYSTEM_SWITCHES_TABLE,
+        ddl: SYSTEM_SWITCHES_DDL,
+        key: 'module_id',
+        subjectPrefix: 'system:',
+        actions: ['revokeFromSystem', 'restoreToSystem'],
+        reassertAction: 'reassertSystemSwitch',
+        /** The payload fields naming the subject and its position (`moduleId` + `schedules`). */
+        payloadKey: 'moduleId',
+        positionField: 'schedules',
+        notFound: (scopeId, key, to) => `scope ${scopeId} holds no system grant for module '${key}' — nothing to switch ${to} ` +
+            `(check the module id: it is the module's manifest id, e.g. '@substrat-run/engine-absence')`,
+    },
+    peer: {
+        table: PEER_SWITCHES_TABLE,
+        ddl: PEER_SWITCHES_DDL,
+        key: 'vertical',
+        subjectPrefix: PEER_SUBJECT_PREFIX,
+        actions: ['revokeFromPeer', 'restoreToPeer'],
+        reassertAction: 'reassertPeerSwitch',
+        payloadKey: 'vertical',
+        positionField: 'calls',
+        notFound: (scopeId, key, to) => `scope ${scopeId} holds no grant for peer '${key}' — nothing to switch ${to} ` +
+            `(check the slug: it is the calling vertical's registry id, as the target's \`peers\` names it)`,
+    },
+};
+/** Every kind, for the passes that walk them all (a scope's reap, a directory restore). */
+export const SWITCH_KINDS = ['system', 'peer'];
+/** The admin-log action a switch call of this kind writes its intent and outcome rows under. */
+export const switchActionOf = (kind, to) => RECORDS[kind].actions[to === 'off' ? 0 : 1];
+/** The `not_found` a switch call that held nothing answers — one wording per kind, both adapters. */
+export const switchNotFoundMessage = (kind, scopeId, key, to) => RECORDS[kind].notFound(scopeId, key, to);
+/**
+ * #2045: the `conflict` a switch call answers when a newer call on the same subject got there first —
+ * its record write or its move was refused by the fence, and nothing of it was written.
+ */
+export const switchSupersededMessage = (kind, scopeId, key, to) => `a newer switch call on ${kind === 'system' ? `module '${key}'` : `peer '${key}'`} on scope ${scopeId} landed first, ` +
+    `so this one (${to}) switched nothing. Read the scope's switch status before retrying.`;
+/** The record table of one kind. */
+export const switchesTableOf = (kind) => RECORDS[kind].table;
+/**
+ * #2045: the subjects whose scope may not be where their record says. A WRITE-AHEAD intent
+ * (Codex r3): the switch call's record write marks its subject owed in the same directory write,
+ * BEFORE anything moves, and the mark is cleared only once the scope has confirmed a move under a
+ * fence at least the call's own (`clearSwitchOwed`). So every way a move can go wrong — it throws,
+ * its answer is lost, the RPC that would have cleared the mark fails, the caller dies — leaves the
+ * mark set, and the next re-assert moves the scope to its record, in EITHER direction, under the
+ * record's fence. Without a mark a re-assert keeps #1674's rule: a record never turns anything on.
+ *
+ * `operation_id` is the newest call that marked the subject. A confirmation under an older fence
+ * clears nothing, so a newer call's mark outlives an older call's success.
+ */
+export const SWITCH_OWED_DDL = `
+  CREATE TABLE IF NOT EXISTS _substrat_switch_owed (
+    tenant_id    TEXT NOT NULL,
+    scope_id     TEXT NOT NULL,
+    -- 'system' or 'peer', and the module id or the peer's slug.
+    kind         TEXT NOT NULL,
+    subject      TEXT NOT NULL,
+    -- The newest switch call that marked it: a ULID, so it orders by text.
+    operation_id TEXT NOT NULL,
+    PRIMARY KEY (tenant_id, scope_id, kind, subject)
+  );
+`;
+/** #2045: mark one subject's scope owed a re-assert, by this switch call. Never moves a mark backwards. */
+export function markSwitchOwed(db, kind, tenantId, scopeId, key, operationId) {
+    db.run(`INSERT INTO _substrat_switch_owed (tenant_id, scope_id, kind, subject, operation_id) VALUES (?, ?, ?, ?, ?)
+     ON CONFLICT (tenant_id, scope_id, kind, subject) DO UPDATE SET operation_id = excluded.operation_id
+      WHERE excluded.operation_id > _substrat_switch_owed.operation_id`, tenantId, scopeId, kind, key, operationId);
+}
+/** #2045: the subjects of one kind marked owed on one scope, each with the newest call that marked it. */
+export function switchesOwedOf(db, kind, tenantId, scopeId) {
+    const rows = db.all(`SELECT subject, operation_id FROM _substrat_switch_owed
+      WHERE tenant_id = ? AND scope_id = ? AND kind = ? ORDER BY subject`, tenantId, scopeId, kind);
+    return new Map(rows.map((r) => [String(r.subject), String(r.operation_id)]));
+}
+/**
+ * #2045: the scope confirmed a move of this subject under `fence` — its mark goes, unless a newer
+ * call has marked it since (a compare-and-set on the mark's operation id).
+ */
+export function clearSwitchOwed(db, kind, tenantId, scopeId, key, fence) {
+    db.run(`DELETE FROM _substrat_switch_owed
+      WHERE tenant_id = ? AND scope_id = ? AND kind = ? AND subject = ? AND operation_id <= ?`, tenantId, scopeId, kind, key, fence);
+}
+/**
+ * #2045: does any subject on this scope still owe a re-assert? While one does, the scope's
+ * reconcile receipt is not written (the control plane's `markScopeProvisioned`), so the sweep keeps
+ * reconciling it until a re-assert has settled every mark.
+ */
+export function scopeOwesSwitch(db, scopeId) {
+    return db.all(`SELECT 1 FROM _substrat_switch_owed WHERE scope_id = ? LIMIT 1`, scopeId).length > 0;
+}
+/** Each kind's DDL, for a pass that creates a table with its backfill. */
+export const switchesDdlOf = (kind) => RECORDS[kind].ddl;
 /**
  * The one-time backfill from the admin log: every switch moved before the record existed.
  * Without it, those are exactly the switches a wipe would still lose.
  *
- * It reads the admin-log shape `revokeFromSystem` / `restoreToSystem` have written since
- * #1666, two rows per call sharing `after.operationId`: an `intent` row carrying
- * `after.moduleId` and `after.reason`, then an outcome row whose `after.phase` is
- * `applied`, `refused` or `failed`. Only calls whose outcome is `applied` count, because a
- * refused call moved nothing and a failed one may not have. Of those, only the LATEST per
- * (tenant, scope, module) is taken, by the intent's ULID id. `at` is the intent's, the
- * same instant the status read's who/why join reports. A key whose calls include no
- * applied OFF gets no row, even when its latest applied call is an ON: a live
- * `restoreToSystem` of a module never switched off writes none either
- * (`recordSystemSwitchedOn`), and the backfill must not record what the live path would not.
+ * It reads the admin-log shape the switch calls have written since they existed
+ * (`revokeFromSystem` / `restoreToSystem` since #1666, `revokeFromPeer` / `restoreToPeer`
+ * since #1706), two rows per call sharing `after.operationId`: an `intent` row carrying the
+ * subject (`after.moduleId`, or `after.vertical` for a peer) and `after.reason`, then an
+ * outcome row whose `after.phase` is `applied`, `refused` or `failed`. Only calls whose
+ * outcome is `applied` count, because a refused call moved nothing and a failed one may not
+ * have. Of those, only the LATEST per (tenant, scope, subject) is taken, by the intent's ULID
+ * id. `at` is the intent's, the same instant the status read's who/why join reports. A key
+ * whose calls include no applied OFF gets no row, even when its latest applied call is an ON:
+ * history wrote no scope fence (#2045), so there is no fence for such a row to keep pace with,
+ * and an ON-only key needs no record to re-assert.
  *
  * `INSERT OR IGNORE`, so a row the switch wrote itself is never overwritten by history.
  * The adapters run it only on the construction that creates the table, so it runs once.
  */
-export const SYSTEM_SWITCHES_BACKFILL_SQL = `
+export function switchesBackfillSqlOf(kind) {
+    const { table, key, actions, payloadKey } = RECORDS[kind];
+    const [revoke, restore] = actions;
+    return `
   WITH applied AS (
     SELECT DISTINCT action, json_extract(after, '$.operationId') AS operation_id
       FROM _substrat_admin_log
-     WHERE action IN ('revokeFromSystem', 'restoreToSystem')
+     WHERE action IN ('${revoke}', '${restore}')
        AND json_extract(after, '$.phase') = 'applied'
   ),
   intents AS (
     SELECT i.id AS id, i.tenant_id AS tenant_id, i.scope_id AS scope_id,
-           json_extract(i.after, '$.moduleId') AS module_id,
-           CASE i.action WHEN 'revokeFromSystem' THEN 'off' ELSE 'on' END AS position,
+           json_extract(i.after, '$.${payloadKey}') AS subject_key,
+           CASE i.action WHEN '${revoke}' THEN 'off' ELSE 'on' END AS position,
            i.actor AS actor,
            json_extract(i.after, '$.reason') AS reason,
            json_extract(i.after, '$.operationId') AS operation_id,
@@ -61,35 +188,37 @@ export const SYSTEM_SWITCHES_BACKFILL_SQL = `
       FROM _substrat_admin_log i
       JOIN applied a
         ON a.action = i.action AND a.operation_id = json_extract(i.after, '$.operationId')
-     WHERE i.action IN ('revokeFromSystem', 'restoreToSystem')
+     WHERE i.action IN ('${revoke}', '${restore}')
        AND i.tenant_id IS NOT NULL AND i.scope_id IS NOT NULL
        AND json_extract(i.after, '$.phase') = 'intent'
-       AND json_extract(i.after, '$.moduleId') IS NOT NULL
+       AND json_extract(i.after, '$.${payloadKey}') IS NOT NULL
        AND json_extract(i.after, '$.reason') IS NOT NULL
   ),
   ranked AS (
     SELECT *,
-           ROW_NUMBER() OVER (PARTITION BY tenant_id, scope_id, module_id ORDER BY id DESC) AS latest,
-           MAX(position = 'off') OVER (PARTITION BY tenant_id, scope_id, module_id) AS ever_off
+           ROW_NUMBER() OVER (PARTITION BY tenant_id, scope_id, subject_key ORDER BY id DESC) AS latest,
+           MAX(position = 'off') OVER (PARTITION BY tenant_id, scope_id, subject_key) AS ever_off
       FROM intents
   )
-  INSERT OR IGNORE INTO _substrat_system_switches
-    (tenant_id, scope_id, module_id, position, actor, reason, operation_id, switched_at)
-  SELECT tenant_id, scope_id, module_id, position, actor, reason, operation_id, at
+  INSERT OR IGNORE INTO ${table}
+    (tenant_id, scope_id, ${key}, position, actor, reason, operation_id, switched_at)
+  SELECT tenant_id, scope_id, subject_key, position, actor, reason, operation_id, at
     FROM ranked
    WHERE latest = 1 AND ever_off = 1
 `;
+}
 /**
- * Does a dump carry the record table? A directory restore builds the table either way, and
- * backfills it from the dump's own admin log only when the dump did not (#1898). Compared
+ * Does a dump carry this kind's record table? A directory restore builds the table either way,
+ * and backfills it from the dump's own admin log only when the dump did not (#1898). Compared
  * without case, as SQLite resolves a table name.
  */
-export function dumpCarriesSystemSwitches(names) {
-    return names.some((n) => n.toLowerCase() === SYSTEM_SWITCHES_TABLE);
+export function dumpCarriesSwitches(names, kind) {
+    const table = RECORDS[kind].table;
+    return names.some((n) => n.toLowerCase() === table);
 }
-/** "Does the record table exist yet?" — asked BEFORE the DDL, so the backfill runs once. */
-export function systemSwitchesTableExists(db) {
-    return (db.all(`SELECT 1 AS present FROM sqlite_master WHERE type = 'table' AND name = ?`, SYSTEM_SWITCHES_TABLE)
+/** "Does this kind's record table exist yet?" — asked BEFORE the DDL, so the backfill runs once. */
+export function switchesTableExists(db, kind) {
+    return (db.all(`SELECT 1 AS present FROM sqlite_master WHERE type = 'table' AND name = ?`, RECORDS[kind].table)
         .length > 0);
 }
 const positionOf = (v) => (v === 'on' ? 'on' : 'off');
@@ -143,10 +272,14 @@ export function listSystemSwitchRecords(db, filter = {}) {
     }
     return db.all(sql, ...params).map(rowOf);
 }
-/** One scope's record rows by module — what the per-scope status read joins as `recorded`. */
-export function systemSwitchRecordsOf(db, tenantId, scopeId) {
-    const rows = db.all(`SELECT module_id, position FROM _substrat_system_switches WHERE tenant_id = ? AND scope_id = ?`, tenantId, scopeId);
-    return new Map(rows.map((r) => [String(r.module_id), positionOf(r.position)]));
+/**
+ * One scope's record rows of one kind, by subject (module id or peer slug) — what the per-scope
+ * status read joins as `recorded`, and what a re-assert reverts a stale carry against.
+ */
+export function switchRecordsOf(db, kind, tenantId, scopeId) {
+    const { table, key } = RECORDS[kind];
+    const rows = db.all(`SELECT ${key} AS k, position FROM ${table} WHERE tenant_id = ? AND scope_id = ?`, tenantId, scopeId);
+    return new Map(rows.map((r) => [String(r.k), positionOf(r.position)]));
 }
 /**
  * The per-scope status read's rows with the record joined on. Each module the scope
@@ -163,12 +296,12 @@ export function withRecorded(states, recorded) {
     }
     return rows.sort((a, b) => (a.moduleId < b.moduleId ? -1 : a.moduleId > b.moduleId ? 1 : 0));
 }
-/** The modules a reconcile must re-assert OFF on this scope. */
-export function switchedOffModulesOf(db, tenantId, scopeId) {
+/** The subjects of one kind (module ids, or peer slugs) a reconcile must re-assert OFF on this scope. */
+export function switchedOffOf(db, kind, tenantId, scopeId) {
+    const { table, key } = RECORDS[kind];
     return db
-        .all(`SELECT module_id FROM _substrat_system_switches
-        WHERE tenant_id = ? AND scope_id = ? AND position = 'off' ORDER BY module_id`, tenantId, scopeId)
-        .map((r) => String(r.module_id));
+        .all(`SELECT ${key} AS k FROM ${table} WHERE tenant_id = ? AND scope_id = ? AND position = 'off' ORDER BY ${key}`, tenantId, scopeId)
+        .map((r) => String(r.k));
 }
 /**
  * The scopes of one tenant the record holds a module OFF on — what a tenant-level
@@ -184,22 +317,75 @@ export function scopesSwitchedOffFor(db, tenantId, moduleId) {
         .map((r) => String(r.scope_id));
 }
 /**
- * The `reassertSystemSwitch` audit rows (less their `operationId`) for the in-unit moves:
- * those that changed something, on a module the directory records `off` for this scope.
+ * Does the tenant hold a live TENANT-level grant for this subject (#1823, and #2030 for a peer)?
+ * Asked of the directory, where the tenant tuple lives, and handed to the switch as
+ * `tenantHeld`: a subject whose only authority on a scope is a tenant-level grant has nothing
+ * in the scope's storage for the switch to find, and must still be switchable there. One
+ * statement on both adapters' directories; the same "live" the evaluator judges a grant by
+ * (unrevoked, unexpired at `now`).
+ */
+export function tenantHoldsGrant(db, kind, tenantId, key, now) {
+    const row = db.all(`SELECT EXISTS (SELECT 1 FROM _substrat_tenant_tuples
+       WHERE tenant_id = ? AND subject = ? AND object = ? AND substr(relation, 1, 8) = 'granted:'
+         AND ${liveTupleSql()}) AS held`, tenantId, `${RECORDS[kind].subjectPrefix}${key}`, `tenant:${tenantId}`, now)[0];
+    return Number(row?.held) === 1;
+}
+/** Of `keys`, those the tenant holds a live tenant-level grant for (`tenantHoldsGrant`), in order. */
+export function tenantHeldOf(db, kind, tenantId, keys, now) {
+    return keys.filter((key) => tenantHoldsGrant(db, kind, tenantId, key, now));
+}
+/** The subject an in-unit report names, if it is of this kind. */
+export const reportKeyOf = (kind, report) => report[RECORDS[kind].payloadKey];
+/**
+ * The fields an audit row names its subject and position with — the shape each kind's switch
+ * calls have always written (`moduleId` + `schedules`, `vertical` + `calls`).
+ */
+export function switchAuditSubject(kind, key, position) {
+    const { payloadKey, positionField } = RECORDS[kind];
+    return { [payloadKey]: key, [positionField]: position };
+}
+/** The admin-log action a re-assert of this kind writes its rows under. */
+export const reassertActionOf = (kind) => RECORDS[kind].reassertAction;
+/** One re-assert answer entry: the subject by its kind's field, and what the move did. */
+export const reassertEntry = (kind, key, outcome) => ({ [RECORDS[kind].payloadKey]: key, held: outcome.held, changed: outcome.changed });
+/**
+ * #2045: the audit row (less its `operationId`) for a re-assert's ON that moved something — a
+ * record of ON beside a scope that was off, converged to the record under its fence.
+ */
+export const reassertOnRow = (kind, key, permissions) => ({
+    ...switchAuditSubject(kind, key, 'on'),
+    phase: 'applied',
+    changed: true,
+    permissions: [...permissions],
+});
+/** The audit row (less its `operationId`) for a re-assert's own OFF that moved something — both adapters. */
+export const reassertOffRow = (kind, key, permissions) => ({
+    ...switchAuditSubject(kind, key, 'off'),
+    phase: 'applied',
+    changed: true,
+    permissions: [...permissions],
+});
+/**
+ * The re-assert's audit rows (less their `operationId`) for the in-unit moves of one kind:
+ * those that changed something, on a subject the directory records `off` for this scope.
  * That filter is the point. The report comes from the deployment, and an audit row naming
- * a module the record never switched off would be the deployment writing the platform's
- * log. One row per module, first report wins. Built here so both adapters write one shape.
+ * a subject the record never switched off would be the deployment writing the platform's
+ * log. One row per subject, first report wins. Built here so both adapters write one shape.
  */
-export function inUnitMovesToAudit(recordedOff, applied) {
+export function inUnitMovesToAudit(kind, recordedOff, applied, 
+/** Subjects this re-assert's stale-carry pass switched back on: their in-unit move is not credited. */
+reverted = new Set()) {
     const off = new Set(recordedOff);
     const moves = new Map();
     for (const a of applied ?? []) {
-        if (a.changed && off.has(a.moduleId) && !moves.has(a.moduleId))
-            moves.set(a.moduleId, [...a.permissions]);
+        const key = reportKeyOf(kind, a);
+        if (key === undefined || reverted.has(key))
+            continue;
+        if (a.changed && off.has(key) && !moves.has(key))
+            moves.set(key, [...a.permissions]);
     }
-    return [...moves].map(([moduleId, permissions]) => ({
-        moduleId,
-        schedules: 'off',
+    return [...moves].map(([key, permissions]) => ({
+        ...switchAuditSubject(kind, key, 'off'),
         phase: 'applied',
         changed: true,
         permissions,
@@ -208,25 +394,26 @@ export function inUnitMovesToAudit(recordedOff, applied) {
 }
 /**
  * The in-unit moves a STALE carry made, which the re-assert must undo (#1742 review): the
- * deployment switched a module off because the list it was handed said so, but by the time
- * the re-assert reads the record, an operator's `restoreToSystem` has moved it to `on`. The
- * list was read before the call and the ON landed in between. Left alone, the scope would
- * stay off while the record says on, and no later pass would put it back.
+ * deployment switched a subject off because the list it was handed said so, but by the time
+ * the re-assert reads the record, an operator's restore has moved it to `on`. The list was
+ * read before the call and the ON landed in between. Left alone, the scope would stay off
+ * while the record says on, and no later pass would put it back.
  *
- * Only a module the record now holds `on`, so a revert only ever re-applies an operator's
- * own ON. It never turns on a module whose record is `off` or missing, and so a report from
+ * Only a subject the record now holds `on`, so a revert only ever re-applies an operator's
+ * own ON. It never turns on a subject whose record is `off` or missing, and so a report from
  * the deployment can never switch on anything the platform has not already restored.
  */
-export function staleCarryReverts(recorded, applied) {
-    return [
-        ...new Set((applied ?? []).filter((a) => a.changed && recorded.get(a.moduleId) === 'on').map((a) => a.moduleId)),
-    ];
+export function staleCarryReverts(kind, recorded, applied) {
+    const keys = (applied ?? []).flatMap((a) => {
+        const key = reportKeyOf(kind, a);
+        return key !== undefined && a.changed && recorded.get(key) === 'on' ? [key] : [];
+    });
+    return [...new Set(keys)];
 }
 /** The audit row (less its `operationId`) for one stale-carry revert — both adapters write this shape. */
-export function staleCarryRevertRow(moduleId, outcome) {
+export function staleCarryRevertRow(kind, key, outcome) {
     return {
-        moduleId,
-        schedules: 'on',
+        ...switchAuditSubject(kind, key, 'on'),
         phase: 'applied',
         changed: outcome.changed,
         permissions: [...outcome.permissions],
@@ -237,40 +424,19 @@ export function staleCarryRevertRow(moduleId, outcome) {
  * Overwrite one existing row's position and provenance — ON's write, and its undo. With
  * `ifOperationId`, only while the row is still the one that operation wrote (a CAS).
  */
-function setRecordRow(db, key, row, ifOperationId) {
-    db.run(`UPDATE _substrat_system_switches
+function setRecordRow(db, at, row, ifOperationId) {
+    const { table, key } = RECORDS[at.kind];
+    db.run(`UPDATE ${table}
         SET position = ?, actor = ?, reason = ?, operation_id = ?, switched_at = ?
-      WHERE tenant_id = ? AND scope_id = ? AND module_id = ?` +
-        (ifOperationId === undefined ? '' : ' AND operation_id = ?'), row.position, row.actor, row.reason, row.operationId, row.at, key.tenantId, key.scopeId, key.moduleId, ...(ifOperationId === undefined ? [] : [ifOperationId]));
-}
-/**
- * OFF's write, made AFTER the scope's switch held. An upsert: a repeat OFF refreshes the
- * actor, reason and time, as the status read reports the latest reason. Never made for a
- * call that held nothing, because a row saying `off` for a module the scope never ran
- * would switch it off on the day it is installed (the kernel's `held` check, for the same
- * reason).
- */
-export function recordSystemSwitchedOff(db, row) {
-    db.run(`INSERT INTO _substrat_system_switches
-       (tenant_id, scope_id, module_id, position, actor, reason, operation_id, switched_at)
-     VALUES (?, ?, ?, 'off', ?, ?, ?, ?)
-     ON CONFLICT (tenant_id, scope_id, module_id) DO UPDATE SET
-       position = 'off', actor = excluded.actor, reason = excluded.reason,
-       operation_id = excluded.operation_id, switched_at = excluded.switched_at`, row.tenantId, row.scopeId, row.moduleId, row.actor, row.reason, row.operationId, row.at);
+      WHERE tenant_id = ? AND scope_id = ? AND ${key} = ?` + (ifOperationId === undefined ? '' : ' AND operation_id = ?'), row.position, row.actor, row.reason, row.operationId, row.at, at.tenantId, at.scopeId, at.key, ...(ifOperationId === undefined ? [] : [ifOperationId]));
 }
-/**
- * ON's write, made BEFORE the scope's switch moves, and only to a row that exists. Before,
- * because the other order fails unsafely: a scope switched on whose record write then
- * failed would still read `off`, and the next reconcile would switch the operator's
- * restore back off. This order fails toward a record of `on` beside a live marker, which
- * the marker wins. Answers the row as it was, for `restoreSystemSwitchRecord`.
- */
-export function recordSystemSwitchedOn(db, row) {
-    const prior = db.all(`SELECT position, actor, reason, operation_id, switched_at FROM _substrat_system_switches
-      WHERE tenant_id = ? AND scope_id = ? AND module_id = ?`, row.tenantId, row.scopeId, row.moduleId)[0];
+/** The row as it stands now, or null — what a write answers so its undo can put it back. */
+function priorOf(db, at) {
+    const { table, key } = RECORDS[at.kind];
+    const prior = db.all(`SELECT position, actor, reason, operation_id, switched_at FROM ${table}
+      WHERE tenant_id = ? AND scope_id = ? AND ${key} = ?`, at.tenantId, at.scopeId, at.key)[0];
     if (!prior)
         return null;
-    setRecordRow(db, row, { position: 'on', actor: row.actor, reason: row.reason, operationId: row.operationId, at: row.at });
     return {
         position: positionOf(prior.position),
         actor: String(prior.actor),
@@ -280,21 +446,107 @@ export function recordSystemSwitchedOn(db, row) {
     };
 }
 /**
- * Put a row back as `recordSystemSwitchedOn` found it — the ON that wrote it threw, or held
- * nothing. A compare-and-set on the ON's own `operationId`: if another switch call has
- * written the row since (a concurrent OFF), the row is left as that call wrote it, so an
- * ON's undo can never clobber a newer position.
+ * #2045: the record's half of the switch fence (`SWITCH_FENCES_DDL`). A write from a call OLDER than
+ * the one the row holds writes nothing: a newer call has already recorded its position, and the
+ * scope will refuse this call's move for the same reason. Both writes answer the prior row, and the
+ * caller reads this off it, with the same test (`recordWriteSuperseded`).
+ */
+const supersededBy = (prior, row) => prior !== null && prior.operationId > row.operationId;
+/** #2045: did this record write find a newer call's row, and so write nothing? */
+export const recordWriteSuperseded = supersededBy;
+/**
+ * #2045: the operation id each of one scope's record rows of one kind holds, by subject — the fence a
+ * re-assert or a carry moves the scope with, so a scope moved since by a newer call stays as that
+ * call put it.
+ */
+export function switchFencesOf(db, kind, tenantId, scopeId) {
+    const { table, key } = RECORDS[kind];
+    const rows = db.all(`SELECT ${key} AS k, operation_id FROM ${table} WHERE tenant_id = ? AND scope_id = ?`, tenantId, scopeId);
+    return new Map(rows.map((r) => [String(r.k), String(r.operation_id)]));
+}
+/**
+ * #2045: each record row's position AND operation id, by subject, in ONE read. A caller that moves
+ * the scope to a row's position under the row's fence must take both from the same instant: read
+ * apart, a row that moves between them pairs one call's position with another call's fence (an OFF
+ * carried under the ON's fence applies, since the scope holds that very fence), and a row the undo
+ * deleted between them is moved with no fence at all, which the scope applies unconditionally.
  */
-export function restoreSystemSwitchRecord(db, on, prior) {
-    if (prior)
-        setRecordRow(db, on, prior, on.operationId);
+export function switchRecordStatesOf(db, kind, tenantId, scopeId) {
+    const { table, key } = RECORDS[kind];
+    const rows = db.all(`SELECT ${key} AS k, position, operation_id FROM ${table} WHERE tenant_id = ? AND scope_id = ? ORDER BY ${key}`, tenantId, scopeId);
+    return new Map(rows.map((r) => [String(r.k), { position: positionOf(r.position), fence: String(r.operation_id) }]));
+}
+/** #2045: the tuple subject a record key names (`system:<m>`, `vertical:<v>`) — how a carry keys its fences. */
+export const switchSubjectOf = (kind, key) => `${RECORDS[kind].subjectPrefix}${key}`;
+/**
+ * OFF's write, made BEFORE the scope's switch moves (#1823), and undone by
+ * `restoreSwitchRecord` when the move throws or holds nothing. An upsert: a repeat OFF
+ * refreshes the actor, reason and time, as the status read reports the latest reason.
+ * Answers the row as it was.
+ *
+ * Before, because the other order left a window: between the scope moving and this write, a
+ * tenant-level `grantToSystem` read no `off` row and was accepted (#1743's refusal reads this
+ * table, in the unit that writes the tenant tuple). Written first, there is no instant at
+ * which the scope is off and the record is not. This order fails toward a record of `off`
+ * beside a scope still on, until the undo runs — the direction OFF wins anyway, and the one a
+ * kill switch should fail in. Still never LEFT behind for a call that held nothing: a row
+ * saying `off` for a subject the scope never had would switch it off on the day it is
+ * installed (the kernel's `held` check, for the same reason).
+ */
+export function recordSwitchedOff(db, row) {
+    return writeRecord(db, row, 'off');
+}
+/** Both writes' upsert: the row as this call's position, unless a newer call's row is there (#2045). */
+function writeRecord(db, row, position) {
+    const { table, key } = RECORDS[row.kind];
+    const prior = priorOf(db, row);
+    if (supersededBy(prior, row))
+        return prior;
+    db.run(`INSERT INTO ${table}
+       (tenant_id, scope_id, ${key}, position, actor, reason, operation_id, switched_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+     ON CONFLICT (tenant_id, scope_id, ${key}) DO UPDATE SET
+       position = excluded.position, actor = excluded.actor, reason = excluded.reason,
+       operation_id = excluded.operation_id, switched_at = excluded.switched_at`, row.tenantId, row.scopeId, row.key, position, row.actor, row.reason, row.operationId, row.at);
+    return prior;
+}
+/**
+ * ON's write, made BEFORE the scope's switch moves. Before, because the other order fails
+ * unsafely: a scope switched on whose record write then failed would still read `off`, and the
+ * next reconcile would switch the operator's restore back off. Answers the row as it was, for
+ * `restoreSwitchRecord`.
+ *
+ * #2045: an upsert, like OFF's. An ON with no row before it writes one, because its move stores
+ * its id in the scope's fence: without a row carrying the same id, an OLDER OFF arriving after
+ * it would find no row to be refused by, record itself, and leave the directory behind the scope
+ * (Codex r2). The directory's fence is never behind the scope's. An ON that holds nothing still
+ * leaves no row: its undo removes the one it wrote.
+ */
+export function recordSwitchedOn(db, row) {
+    return writeRecord(db, row, 'on');
+}
+/**
+ * Put a row back as `recordSwitchedOn` or `recordSwitchedOff` found it — the call that wrote
+ * it threw, or held nothing. A row that did not exist is removed again. A compare-and-set on
+ * the call's own `operationId`: if another switch call has written the row since, the row is
+ * left as that call wrote it, so an undo can never clobber a newer position.
+ */
+export function restoreSwitchRecord(db, call, prior) {
+    if (prior) {
+        setRecordRow(db, call, prior, call.operationId);
+        return;
+    }
+    const { table, key } = RECORDS[call.kind];
+    db.run(`DELETE FROM ${table} WHERE tenant_id = ? AND scope_id = ? AND ${key} = ? AND operation_id = ?`, call.tenantId, call.scopeId, call.key, call.operationId);
 }
 /**
- * Forget one scope's switch records — the scope's directory row is going too (a reaped
- * preview or fork, a reaped scope). Without this the fleet read keeps listing a switch on
+ * Forget one scope's switch records, of every kind — the scope's directory row is going too (a
+ * reaped preview or fork, a reaped scope). Without this the fleet read keeps listing a switch on
  * a scope that no longer exists. The admin log keeps the history, as it keeps the scope's.
  */
-export function forgetSystemSwitchesOf(db, scopeId) {
-    db.run(`DELETE FROM _substrat_system_switches WHERE scope_id = ?`, scopeId);
+export function forgetSwitchesOf(db, scopeId) {
+    for (const kind of SWITCH_KINDS)
+        db.run(`DELETE FROM ${RECORDS[kind].table} WHERE scope_id = ?`, scopeId);
+    db.run(`DELETE FROM _substrat_switch_owed WHERE scope_id = ?`, scopeId);
 }
 //# sourceMappingURL=system-switch-record.js.map

package/dist/system-switch-record.js.map

@@ -1 +1 @@
-{"version":3,"file":"system-switch-record.js","sourceRoot":"","sources":["../src/system-switch-record.ts"],"names":[],"mappings":"AA6BA,2DAA2D;AAC3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AAEjE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;CAmBlC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmC3C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAwB;IAChE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,qBAAqB,CAAC,CAAC;AACtE,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB,CAAC,EAAa;IACrD,OAAO,CACL,EAAE,CAAC,GAAG,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;SACtG,MAAM,GAAG,CAAC,CACd,CAAC;AACJ,CAAC;AA2BD,MAAM,UAAU,GAAG,CAAC,CAAU,EAAgB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAE7E,MAAM,OAAO,GAAG;gCACgB,CAAC;AAEjC,MAAM,KAAK,GAAG,CAAC,CAA0B,EAAyB,EAAE,CAAC,CAAC;IACpE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxD,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;IACnC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;CAC1B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAa,EAAE,MAAM,GAA6B,EAAE;IAC1F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,CAAC,GAAW,EAAE,CAAqB,EAAE,EAAE;QAChD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IACF,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,GAAG,GACL,UAAU,OAAO,iFAAiF;QAClG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,4BAA4B,KAAK,EAAE,CAAC;IACtC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,IAAI,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,qBAAqB,CACnC,EAAa,EACb,QAAgB,EAChB,OAAe;IAEf,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB,gGAAgG,EAChG,QAAQ,EACR,OAAO,CACR,CAAC;IACF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,MAA8D,EAC9D,QAAmC;IAEnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,oBAAoB,CAAC,EAAa,EAAE,QAAgB,EAAE,OAAe;IACnF,OAAO,EAAE;SACN,GAAG,CACF;qFAC+E,EAC/E,QAAQ,EACR,OAAO,CACR;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAa,EAAE,QAAgB,EAAE,QAAgB;IACpF,OAAO,EAAE;SACN,GAAG,CACF;qFAC+E,EAC/E,QAAQ,EACR,QAAQ,CACT;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpC,CAAC;AAoCD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAA8B,EAC9B,OAAqD;IASrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,QAAQ;QACR,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,IAAI;QACb,WAAW;QACX,MAAM,EAAE,IAAI;KACb,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAA2C,EAC3C,OAAqD;IAErD,OAAO;QACL,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;KACjH,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,OAA6D;IAE7D,OAAO;QACL,QAAQ;QACR,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QACrC,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CACnB,EAAa,EACb,GAA4D,EAC5D,GAAyC,EACzC,aAAsB;IAEtB,EAAE,CAAC,GAAG,CACJ;;6DAEyD;QACvD,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,EAC9D,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CACxD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAa,EAAE,GAA4B;IACjF,EAAE,CAAC,GAAG,CACJ;;;;;gFAK4E,EAC5E,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,EAAE,CACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAa,EAAE,GAA4B;IAChF,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAClB;6DACyD,EACzD,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,QAAQ,CACb,CAAC,CAAC,CAAC,CAAC;IACL,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1H,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACvC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAa,EACb,EAAgF,EAChF,KAA8B;IAE9B,IAAI,KAAK;QAAE,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAa,EAAE,OAAe;IACnE,EAAE,CAAC,GAAG,CAAC,0DAA0D,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"system-switch-record.js","sourceRoot":"","sources":["../src/system-switch-record.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,mBAAmB,GAKpB,MAAM,oBAAoB,CAAC;AAI5B,2DAA2D;AAC3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AACjE,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;CAmBlC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;CAahC,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,GAAG;IACd,MAAM,EAAE;QACN,KAAK,EAAE,qBAAqB;QAC5B,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,WAAW;QAChB,aAAa,EAAE,SAAS;QACxB,OAAO,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;QAChD,cAAc,EAAE,sBAAsB;QACtC,yFAAyF;QACzF,UAAU,EAAE,UAAU;QACtB,aAAa,EAAE,WAAW;QAC1B,QAAQ,EAAE,CAAC,OAAe,EAAE,GAAW,EAAE,EAAU,EAAE,EAAE,CACrD,SAAS,OAAO,sCAAsC,GAAG,yBAAyB,EAAE,GAAG;YACvF,4FAA4F;KAC/F;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,UAAU;QACf,aAAa,EAAE,mBAAmB;QAClC,OAAO,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;QAC5C,cAAc,EAAE,oBAAoB;QACpC,UAAU,EAAE,UAAU;QACtB,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,CAAC,OAAe,EAAE,GAAW,EAAE,EAAU,EAAE,EAAE,CACrD,SAAS,OAAO,6BAA6B,GAAG,yBAAyB,EAAE,GAAG;YAC9E,gGAAgG;KACnG;CACO,CAAC;AAEX,2FAA2F;AAC3F,MAAM,CAAC,MAAM,YAAY,GAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAEtE,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAgB,EAAE,EAAgB,EAAmD,EAAE,CACpH,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9C,qGAAqG;AACrG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,IAAgB,EAAE,OAAe,EAAE,GAAW,EAAE,EAAgB,EAAU,EAAE,CAChH,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;AAE3C;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAgB,EAAE,OAAe,EAAE,GAAW,EAAE,EAAgB,EAAU,EAAE,CAClH,0BAA0B,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,aAAa,OAAO,iBAAiB;IACtH,gBAAgB,EAAE,qEAAqE,CAAC;AAE1F,oCAAoC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAgB,EAAU,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;CAW9B,CAAC;AAEF,2GAA2G;AAC3G,MAAM,UAAU,cAAc,CAC5B,EAAa,EACb,IAAgB,EAChB,QAAgB,EAChB,OAAe,EACf,GAAW,EACX,WAAmB;IAEnB,EAAE,CAAC,GAAG,CACJ;;uEAEmE,EACnE,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,GAAG,EACH,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,EAAa,EAAE,IAAgB,EAAE,QAAgB,EAAE,OAAe;IAC/F,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB;yEACqE,EACrE,QAAQ,EACR,OAAO,EACP,IAAI,CACL,CAAC;IACF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAa,EACb,IAAgB,EAChB,QAAgB,EAChB,OAAe,EACf,GAAW,EACX,KAAa;IAEb,EAAE,CAAC,GAAG,CACJ;8FAC0F,EAC1F,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,GAAG,EACH,KAAK,CACN,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,EAAa,EAAE,OAAe;IAC5D,OAAO,EAAE,CAAC,GAAG,CAAC,gEAAgE,EAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACtG,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAgB,EAAU,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;AAE7E;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAgB;IACpD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAClC,OAAO;;;;yBAIgB,MAAM,OAAO,OAAO;;;;;sCAKP,UAAU;iCACf,MAAM;;;;;;;;2BAQZ,MAAM,OAAO,OAAO;;;sCAGT,UAAU;;;;;;;;;0BAStB,KAAK;4BACH,GAAG;;;;CAI9B,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAwB,EAAE,IAAgB;IAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,EAAa,EAAE,IAAgB;IACjE,OAAO,CACL,EAAE,CAAC,GAAG,CAAC,0EAA0E,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;SACpG,MAAM,GAAG,CAAC,CACd,CAAC;AACJ,CAAC;AA2BD,MAAM,UAAU,GAAG,CAAC,CAAU,EAAgB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAE7E,MAAM,OAAO,GAAG;gCACgB,CAAC;AAEjC,MAAM,KAAK,GAAG,CAAC,CAA0B,EAAyB,EAAE,CAAC,CAAC;IACpE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxD,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;IACnC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;CAC1B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAa,EAAE,MAAM,GAA6B,EAAE;IAC1F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,CAAC,GAAW,EAAE,CAAqB,EAAE,EAAE;QAChD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IACF,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,GAAG,GACL,UAAU,OAAO,iFAAiF;QAClG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,4BAA4B,KAAK,EAAE,CAAC;IACtC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,IAAI,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAa,EACb,IAAgB,EAChB,QAAgB,EAChB,OAAe;IAEf,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,wBAAwB,KAAK,uCAAuC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1H,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,MAA8D,EAC9D,QAAmC;IAEnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,aAAa,CAAC,EAAa,EAAE,IAAgB,EAAE,QAAgB,EAAE,OAAe;IAC9F,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,EAAE;SACN,GAAG,CACF,UAAU,GAAG,cAAc,KAAK,uEAAuE,GAAG,EAAE,EAC5G,QAAQ,EACR,OAAO,CACR;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAa,EAAE,QAAgB,EAAE,QAAgB;IACpF,OAAO,EAAE;SACN,GAAG,CACF;qFAC+E,EAC/E,QAAQ,EACR,QAAQ,CACT;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAa,EAAE,IAAgB,EAAE,QAAgB,EAAE,GAAW,EAAE,GAAW;IAC1G,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAChB;;eAEW,YAAY,EAAE,WAAW,EACpC,QAAQ,EACR,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,GAAG,EAAE,EACtC,UAAU,QAAQ,EAAE,EACpB,GAAG,CACJ,CAAC,CAAC,CAAiC,CAAC;IACrC,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,YAAY,CAAC,EAAa,EAAE,IAAgB,EAAE,QAAgB,EAAE,IAAuB,EAAE,GAAW;IAClH,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC9E,CAAC;AA2CD,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAgB,EAAE,MAAoB,EAAsB,EAAE,CACxF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC;AAEnC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAgB,EAChB,GAAW,EACX,QAAsB;IAEtB,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,QAAQ,EAA2C,CAAC;AACnG,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAgB,EAAkD,EAAE,CACnG,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC;AAE/B,0FAA0F;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,IAAgB,EAChB,GAAW,EACX,OAA4C,EACtB,EAAE,CACxB,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAoC,CAAC;AAEzH;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAgB,EAAE,GAAW,EAAE,WAA8B,EAAE,EAAE,CAAC,CAAC;IAC/F,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC;IACtC,KAAK,EAAE,SAAkB;IACzB,OAAO,EAAE,IAAa;IACtB,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;CAC9B,CAAC,CAAC;AAEH,6GAA6G;AAC7G,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAgB,EAAE,GAAW,EAAE,WAA8B,EAAE,EAAE,CAAC,CAAC;IAChG,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC;IACvC,KAAK,EAAE,SAAkB;IACzB,OAAO,EAAE,IAAa;IACtB,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;CAC9B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAgB,EAChB,WAA8B,EAC9B,OAAqD;AACrD,uGAAuG;AACvG,QAAQ,GAAwB,IAAI,GAAG,EAAE;IAEzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACrD,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC;QACvC,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,IAAI;QACb,WAAW;QACX,MAAM,EAAE,IAAI;KACb,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAgB,EAChB,QAA2C,EAC3C,OAAqD;IAErD,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,mBAAmB,CACjC,IAAgB,EAChB,GAAW,EACX,OAA6D;IAE7D,OAAO;QACL,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC;QACtC,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QACrC,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,EAAa,EAAE,EAAa,EAAE,GAAmC,EAAE,aAAsB;IAC7G,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACxC,EAAE,CAAC,GAAG,CACJ,UAAU,KAAK;;iDAE8B,GAAG,MAAM,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,EACrH,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,EAAE,EACN,EAAE,CAAC,QAAQ,EACX,EAAE,CAAC,OAAO,EACV,EAAE,CAAC,GAAG,EACN,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAS,OAAO,CAAC,EAAa,EAAE,EAAa;IAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAClB,kEAAkE,KAAK;iDAC1B,GAAG,MAAM,EACtD,EAAE,CAAC,QAAQ,EACX,EAAE,CAAC,OAAO,EACV,EAAE,CAAC,GAAG,CACP,CAAC,CAAC,CAAC,CAAC;IACL,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACvC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,KAAwB,EAAE,GAA2C,EAAW,EAAE,CACtG,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;AAExD,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,EAAa,EAAE,IAAgB,EAAE,QAAgB,EAAE,OAAe;IAC/F,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,4BAA4B,KAAK,uCAAuC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9H,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAa,EACb,IAAgB,EAChB,QAAgB,EAChB,OAAe;IAEf,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB,UAAU,GAAG,sCAAsC,KAAK,kDAAkD,GAAG,EAAE,EAC/G,QAAQ,EACR,OAAO,CACR,CAAC;IACF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACtH,CAAC;AAED,gHAAgH;AAChH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAgB,EAAE,GAAW,EAAU,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;AAEjH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAa,EAAE,GAAsB;IACrE,OAAO,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,wGAAwG;AACxG,SAAS,WAAW,CAAC,EAAa,EAAE,GAAsB,EAAE,QAAsB;IAChF,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,EAAE,CAAC,GAAG,CACJ,eAAe,KAAK;+BACO,GAAG;;yCAEO,GAAG;;gFAEoC,EAC5E,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,GAAG,EACP,QAAQ,EACR,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,EAAE,CACP,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAa,EAAE,GAAsB;IACpE,OAAO,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAa,EACb,IAAyC,EACzC,KAAwB;IAExB,IAAI,KAAK,EAAE,CAAC;QACV,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,EAAE,CAAC,GAAG,CACJ,eAAe,KAAK,6CAA6C,GAAG,2BAA2B,EAC/F,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,WAAW,CACjB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAa,EAAE,OAAe;IAC7D,KAAK,MAAM,IAAI,IAAI,YAAY;QAAE,EAAE,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAC1G,EAAE,CAAC,GAAG,CAAC,sDAAsD,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC"}