@victframework/runtime 0.1.0

package/dist/authority.js

@@ -0,0 +1,170 @@
+import { VictRuntimeError } from './errors.js';
+/** The authority-name fields of a capability definition, in declaration order. */
+const AUTHORITY_FIELDS = [
+    'permissions',
+    'configuration',
+    'requiredConfiguration',
+    'secrets',
+    'requiredSecrets',
+];
+/**
+ * Validate and PIN the authority declarations of a capability definition:
+ * every entry must be a non-empty, non-whitespace string; duplicates are
+ * rejected. Returns fresh frozen copies — the caller's arrays are never
+ * retained by reference.
+ */
+export function pinAuthorityDeclarations(definition) {
+    const pinned = {};
+    for (const field of AUTHORITY_FIELDS) {
+        const raw = definition[field];
+        const names = new Set();
+        if (raw !== undefined) {
+            if (!Array.isArray(raw)) {
+                throw new VictRuntimeError('VICT_RUNTIME_INVALID_AUTHORITY', `Capability '${definition.id}' declares '${field}' that is not an array of names.`, { capabilityId: definition.id, field });
+            }
+            for (const entry of raw) {
+                if (typeof entry !== 'string' || entry.trim().length === 0) {
+                    throw new VictRuntimeError('VICT_RUNTIME_INVALID_AUTHORITY', `Capability '${definition.id}' declares an invalid '${field}' entry: every authority name must be a non-empty, non-whitespace string.`, { capabilityId: definition.id, field });
+                }
+                if (names.has(entry)) {
+                    throw new VictRuntimeError('VICT_RUNTIME_INVALID_AUTHORITY', `Capability '${definition.id}' declares '${entry}' more than once in '${field}'; duplicate authority names are rejected.`, { capabilityId: definition.id, field });
+                }
+                names.add(entry);
+            }
+        }
+        pinned[field] = Object.freeze([...(raw ?? [])]);
+    }
+    return {
+        permissions: Object.freeze(pinned.permissions ?? []),
+        configuration: Object.freeze(pinned.configuration ?? []),
+        requiredConfiguration: Object.freeze(pinned.requiredConfiguration ?? []),
+        secrets: Object.freeze(pinned.secrets ?? []),
+        requiredSecrets: Object.freeze(pinned.requiredSecrets ?? []),
+    };
+}
+/**
+ * Wrap a capability's invoke with the least-authority gate. The WRAPPED
+ * invoke is what the registry stores and what activations capture, so the
+ * gate is enforced identically by the sequential and the durable engines.
+ * The gate closes over the PINNED declaration snapshot and the runtime's
+ * grants — never over the caller's definition object.
+ */
+export function gateCapabilityInvoke(definition, authority = {}) {
+    const names = pinAuthorityDeclarations(definition);
+    const capabilityId = definition.id;
+    const invoke = definition.invoke;
+    const grants = new Set(authority.grants ?? []);
+    const configNames = new Set([...names.configuration, ...names.requiredConfiguration]);
+    const secretNames = new Set([...names.secrets, ...names.requiredSecrets]);
+    const unavailableConfiguration = (name, reason) => new VictRuntimeError('VICT_RUNTIME_CONFIGURATION_UNAVAILABLE', `Configuration '${name}' required by capability '${capabilityId}' is unavailable: ${reason}`, { capabilityId, configurationName: name });
+    const unavailableSecret = (name, reason) => new VictRuntimeError('VICT_RUNTIME_SECRET_UNAVAILABLE', `Secret '${name}' required by capability '${capabilityId}' is unavailable: ${reason}`, { capabilityId, secretName: name });
+    return async (input, context) => {
+        // ---- Per-invocation private caches (HIGH-04-D) ------------------------
+        // These caches and the resolvers below are declared INSIDE the
+        // invocation function: every invocation gets fresh private caches, so
+        // - required/optional values are re-resolved on the NEXT invocation
+        //   (rotation is observed);
+        // - a rejected provider promise dies with this invocation (a later
+        //   invocation retries the provider and can recover);
+        // - concurrent invocations never share cached values or promises.
+        // The `{ value }` wrapper keeps a resolved `undefined` distinguishable
+        // from 'not yet read'.
+        const configCache = new Map();
+        const secretCache = new Map();
+        /** Resolve a configuration name at most once per invocation. */
+        const resolveConfiguration = (name) => {
+            const cached = configCache.get(name);
+            if (cached !== undefined) {
+                return cached.value;
+            }
+            let value;
+            try {
+                value = authority.configuration?.get(name);
+            }
+            catch {
+                // Provider exceptions are sanitized into stable authority failures;
+                // the provider's message never propagates.
+                throw unavailableConfiguration(name, 'the configuration provider failed.');
+            }
+            configCache.set(name, { value });
+            return value;
+        };
+        /** Resolve a secret name at most once per invocation (promise-cached). */
+        const resolveSecret = (name) => {
+            const cached = secretCache.get(name);
+            if (cached !== undefined) {
+                return cached;
+            }
+            const pending = (async () => {
+                try {
+                    return await authority.secrets?.get(name);
+                }
+                catch {
+                    throw unavailableSecret(name, 'the secret provider failed.');
+                }
+            })();
+            secretCache.set(name, pending);
+            return pending;
+        };
+        // ---- Permission gate: fail BEFORE the handler runs -------------------
+        for (const permissionId of names.permissions) {
+            if (!grants.has(permissionId)) {
+                throw new VictRuntimeError('VICT_RUNTIME_PERMISSION_DENIED', `Permission '${permissionId}' required by capability '${capabilityId}' is not granted in this runtime; the handler was not invoked.`, { capabilityId, permissionId });
+            }
+        }
+        // ---- Eager required configuration/secret resolution ------------------
+        // The resolved values are kept in THIS invocation's private caches;
+        // the handler's scoped readers return the SAME checked values.
+        for (const name of names.requiredConfiguration) {
+            if (authority.configuration === undefined) {
+                throw unavailableConfiguration(name, 'no configuration provider is configured.');
+            }
+            const value = resolveConfiguration(name);
+            if (value === undefined) {
+                throw unavailableConfiguration(name, 'it is not provisioned.');
+            }
+        }
+        for (const name of names.requiredSecrets) {
+            if (authority.secrets === undefined) {
+                throw unavailableSecret(name, 'no secret port is configured.');
+            }
+            const value = await resolveSecret(name);
+            if (value === undefined) {
+                throw unavailableSecret(name, 'it is not provisioned.');
+            }
+        }
+        // ---- Scoped, name-checked, invocation-scoped readers ------------------
+        let config;
+        if (authority.configuration !== undefined && configNames.size > 0) {
+            config = {
+                get(name) {
+                    if (!configNames.has(name)) {
+                        throw unavailableConfiguration(name, `it is not declared by capability '${capabilityId}'; undeclared configuration is unavailable.`);
+                    }
+                    // Optional names resolve lazily ONCE per invocation and are then
+                    // cached for the remainder of THIS invocation only.
+                    return resolveConfiguration(name);
+                },
+            };
+        }
+        let secrets;
+        if (authority.secrets !== undefined && secretNames.size > 0) {
+            secrets = {
+                get(name) {
+                    if (!secretNames.has(name)) {
+                        return Promise.reject(unavailableSecret(name, `it is not declared by capability '${capabilityId}'; undeclared secrets are unavailable.`));
+                    }
+                    // Optional names resolve lazily ONCE per invocation and are then
+                    // cached for the remainder of THIS invocation only.
+                    return resolveSecret(name);
+                },
+            };
+        }
+        return invoke(input, {
+            ...context,
+            ...(config !== undefined ? { config } : {}),
+            ...(secrets !== undefined ? { secrets } : {}),
+        });
+    };
+}
+//# sourceMappingURL=authority.js.map

package/dist/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../src/authority.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAsE/C,kFAAkF;AAClF,MAAM,gBAAgB,GAAG;IACvB,aAAa;IACb,eAAe;IACf,uBAAuB;IACvB,SAAS;IACT,iBAAiB;CACT,CAAC;AAIX;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAgC;IAEhC,MAAM,MAAM,GAAsC,EAAE,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAkC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,gBAAgB,CACxB,gCAAgC,EAChC,eAAe,UAAU,CAAC,EAAE,eAAe,KAAK,kCAAkC,EAClF,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,CACvC,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC3D,MAAM,IAAI,gBAAgB,CACxB,gCAAgC,EAChC,eAAe,UAAU,CAAC,EAAE,0BAA0B,KAAK,2EAA2E,EACtI,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,CACvC,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrB,MAAM,IAAI,gBAAgB,CACxB,gCAAgC,EAChC,eAAe,UAAU,CAAC,EAAE,eAAe,KAAK,wBAAwB,KAAK,4CAA4C,EACzH,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,CACvC,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QACpD,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;QACxD,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC;QACxE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAC5C,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAgC,EAChC,YAAiC,EAAE;IAEnC,MAAM,KAAK,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,UAAU,CAAC,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,aAAa,EAAE,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAE1E,MAAM,wBAAwB,GAAG,CAAC,IAAY,EAAE,MAAc,EAAoB,EAAE,CAClF,IAAI,gBAAgB,CAClB,wCAAwC,EACxC,kBAAkB,IAAI,6BAA6B,YAAY,qBAAqB,MAAM,EAAE,EAC5F,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAC1C,CAAC;IACJ,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,MAAc,EAAoB,EAAE,CAC3E,IAAI,gBAAgB,CAClB,iCAAiC,EACjC,WAAW,IAAI,6BAA6B,YAAY,qBAAqB,MAAM,EAAE,EACrF,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CACnC,CAAC;IAEJ,OAAO,KAAK,EAAE,KAAc,EAAE,OAA0B,EAAoB,EAAE;QAC5E,0EAA0E;QAC1E,+DAA+D;QAC/D,sEAAsE;QACtE,oEAAoE;QACpE,4BAA4B;QAC5B,mEAAmE;QACnE,sDAAsD;QACtD,kEAAkE;QAClE,uEAAuE;QACvE,uBAAuB;QACvB,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAC;QAEnE,gEAAgE;QAChE,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAW,EAAE;YACrD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC,KAAK,CAAC;YACtB,CAAC;YACD,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,2CAA2C;gBAC3C,MAAM,wBAAwB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;YAC7E,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QAEF,0EAA0E;QAC1E,MAAM,aAAa,GAAG,CAAC,IAAY,EAA+B,EAAE;YAClE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,KAAK,IAAiC,EAAE;gBACvD,IAAI,CAAC;oBACH,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,iBAAiB,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/B,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QAEF,yEAAyE;QACzE,KAAK,MAAM,YAAY,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,gBAAgB,CACxB,gCAAgC,EAChC,eAAe,YAAY,6BAA6B,YAAY,gEAAgE,EACpI,EAAE,YAAY,EAAE,YAAY,EAAE,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,+DAA+D;QAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAC/C,IAAI,SAAS,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,wBAAwB,CAAC,IAAI,EAAE,0CAA0C,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,wBAAwB,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACzC,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,iBAAiB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,IAAI,MAA0C,CAAC;QAC/C,IAAI,SAAS,CAAC,aAAa,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,GAAG;gBACP,GAAG,CAAC,IAAY;oBACd,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC3B,MAAM,wBAAwB,CAC5B,IAAI,EACJ,qCAAqC,YAAY,6CAA6C,CAC/F,CAAC;oBACJ,CAAC;oBACD,iEAAiE;oBACjE,oDAAoD;oBACpD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACpC,CAAC;aACF,CAAC;QACJ,CAAC;QACD,IAAI,OAA2C,CAAC;QAChD,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5D,OAAO,GAAG;gBACR,GAAG,CAAC,IAAY;oBACd,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC3B,OAAO,OAAO,CAAC,MAAM,CACnB,iBAAiB,CACf,IAAI,EACJ,qCAAqC,YAAY,wCAAwC,CAC1F,CACF,CAAC;oBACJ,CAAC;oBACD,iEAAiE;oBACjE,oDAAoD;oBACpD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;aACF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,KAAK,EAAE;YACnB,GAAG,OAAO;YACV,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/boundary-conformance.d.ts

@@ -0,0 +1,51 @@
+import type { ConformanceStores, ConformanceTestRunner } from './store-conformance.js';
+/**
+ * Adapter-neutral durable-boundary conformance suite.
+ *
+ * Proves the Stage 02 write-ahead invariant against ANY ExecutionStore
+ * backend, through the REAL production wiring: kernel events feed
+ * `DurableRunTracker`, the tracker's writes go through the store under
+ * test, and the kernel's `beforeInvoke` port is
+ * `tracker.awaitDurableBoundary()`. The suite wraps the store's writes in
+ * explicit FIFO gates so it can hold a write open and observe what the
+ * kernel does until the write commits: nothing.
+ *
+ * Invariants proven at every invocation boundary:
+ * - run creation must commit before the FIRST capability is invoked;
+ * - a node's `node.started` transition must commit before THAT node's
+ *   capability is invoked;
+ * - the preceding node-result batch must commit before the NEXT node's
+ *   capability is invoked;
+ * - a store rejection at any required boundary yields ZERO capability
+ *   invocations and surfaces the structured store error.
+ *
+ * Determinism: gates are deferred promises, and every await targets
+ * observable state (a write arriving at the gate, an invocation being
+ * recorded). There are no sleeps and no timing assumptions. Every
+ * capability records its invocation SYNCHRONOUSLY as its first statement,
+ * so no in-capability barrier can fake a pass.
+ */
+export interface BoundaryConformanceFactory {
+    /** Human-readable backend name used in test titles. */
+    readonly name: string;
+    /** Create a fresh, isolated store set backed by a disposable database. */
+    create(): Promise<ConformanceStores>;
+}
+export interface BoundaryGates {
+    /** Labels of writes waiting at the gate, oldest first. */
+    pendingLabels(): readonly string[];
+    /** Resolve the oldest pending write. */
+    releaseNext(): void;
+    /** Reject the oldest pending write with a structured store error. */
+    failNext(code?: string): void;
+    /** Resolves once a write whose label contains `fragment` is at the gate. */
+    waitForPending(fragment: string): Promise<void>;
+    /** Resolves once the recorded capability invocations reach `count`. */
+    waitForInvocations(count: number): Promise<void>;
+    /** Labels of writes that fully committed through the inner store, in order. */
+    readonly committed: readonly string[];
+    /** Capability ids whose bodies began, in invocation order. */
+    readonly invocations: readonly string[];
+}
+/** Build and run the durable-boundary suite against one backend factory. */
+export declare function runDurableBoundarySuite(runner: ConformanceTestRunner, factory: BoundaryConformanceFactory): void;

package/dist/boundary-conformance.js

@@ -0,0 +1,364 @@
+import { executeGraph } from '@victframework/kernel';
+import { compileGraph, canonicalSemanticForm, computeCapabilitySetVersion, } from '@victframework/kernel';
+import { VictStoreError } from './store-errors.js';
+import { ACTIVATION_MANIFEST_SCHEMA } from './store-types.js';
+import { DurableRunTracker } from './durable-run.js';
+import { toCanonicalJson } from './serialization.js';
+const RUN_ID = 'boundary-run';
+/**
+ * Wrap an ExecutionStore so every write blocks at an explicit gate until the
+ * test releases it. FIFO ordering is preserved; reads pass straight through.
+ */
+function gatedExecutionStore(inner, invocations) {
+    const waiting = [];
+    const committed = [];
+    const pendingWaiters = [];
+    let invocationWaiters = [];
+    const notifyPending = (label) => {
+        for (let index = 0; index < pendingWaiters.length;) {
+            const waiter = pendingWaiters[index];
+            if (label.includes(waiter.fragment)) {
+                waiter.resolve();
+                pendingWaiters.splice(index, 1);
+            }
+            else {
+                index += 1;
+            }
+        }
+    };
+    const gate = async (label, write) => {
+        await new Promise((resolve, reject) => {
+            waiting.push({ label, resolve, reject });
+            notifyPending(label);
+        });
+        const result = await write();
+        committed.push(label);
+        return result;
+    };
+    const writeLabel = (command) => {
+        const first = command.events[0];
+        const detail = command.events.length === 0
+            ? 'state-only'
+            : command.events
+                .map((event) => `${event.type}@${'nodeId' in event ? (event.nodeId ?? '-') : '-'}`)
+                .join('+');
+        return `commit:${command.runId}:${first?.seq ?? '-'}:${detail}`;
+    };
+    const gated = {
+        createRun: (command) => gate(`createRun:${command.runId}`, () => inner.createRun(command)),
+        commitTransition: (command) => gate(writeLabel(command), () => inner.commitTransition(command)),
+        getRun: (runId) => inner.getRun(runId),
+        listRuns: (query) => inner.listRuns(query),
+        listEvents: (runId, afterSeq) => inner.listEvents(runId, afterSeq),
+        recoverInterruptedRuns: (command) => inner.recoverInterruptedRuns(command),
+    };
+    return Object.assign(gated, {
+        pendingLabels: () => waiting.map((write) => write.label),
+        releaseNext: () => {
+            const write = waiting.shift();
+            if (write) {
+                write.resolve();
+            }
+        },
+        failNext: (code = 'VICT_STORE_UNAVAILABLE') => {
+            const write = waiting.shift();
+            if (write) {
+                write.reject(new VictStoreError(code, 'Injected durable-boundary failure.', {
+                    operation: 'boundary-conformance',
+                }));
+            }
+        },
+        waitForPending: (fragment) => new Promise((resolve) => {
+            if (waiting.some((write) => write.label.includes(fragment))) {
+                resolve();
+                return;
+            }
+            pendingWaiters.push({ fragment, resolve });
+        }),
+        waitForInvocations: (count) => {
+            return new Promise((resolve) => {
+                if (invocations.length >= count) {
+                    resolve();
+                    return;
+                }
+                invocationWaiters.push({ count, resolve });
+            });
+        },
+        /** Record that a capability body began (wakes invocation waiters). */
+        recordInvocation: (capabilityId) => {
+            invocations.push(capabilityId);
+            invocationWaiters = invocationWaiters.filter((waiter) => {
+                if (invocations.length >= waiter.count) {
+                    waiter.resolve();
+                    return false;
+                }
+                return true;
+            });
+        },
+        committed,
+        invocations,
+    });
+}
+const TWO_NODE_GRAPH = {
+    id: 'boundary-graph',
+    entry: 'a',
+    nodes: [
+        { id: 'a', capability: 'boundary.a' },
+        { id: 'b', capability: 'boundary.b' },
+    ],
+    edges: [{ from: 'a', to: 'b' }],
+};
+/** Compile through the same canonical path the runtime uses. */
+function compile(definition) {
+    const result = compileGraph({
+        definition,
+        capabilities: {
+            getCapabilityDescriptor: (capabilityId) => ({
+                id: capabilityId,
+                revision: '1',
+                effect: 'pure',
+            }),
+        },
+        contracts: { has: () => false, isCompatible: () => true, get: () => undefined },
+    });
+    if (!result.ok) {
+        throw new Error(`boundary fixture graph failed to compile: ${result.issues.length} issue(s)`);
+    }
+    return result.graph;
+}
+/**
+ * The exact manifest for the compiled graph's identities. The compiled
+ * capabilitySetVersion/activationVersion were computed by the kernel from
+ * the same bindings, so the store's identity validation accepts it.
+ */
+function manifestFor(graph) {
+    const bindings = graph.nodeIds.map((nodeId) => {
+        const node = graph.getNode(nodeId);
+        return {
+            capability: node.capability,
+            revision: '1',
+            effect: 'pure',
+            input: null,
+            output: null,
+        };
+    });
+    return {
+        manifestSchema: ACTIVATION_MANIFEST_SCHEMA,
+        graphId: graph.id,
+        graph: canonicalSemanticForm(graph.toDefinition()),
+        graphVersion: graph.graphVersion,
+        capabilitySetVersion: computeCapabilitySetVersion(bindings),
+        activationVersion: graph.activationVersion,
+        bindings,
+        contracts: [],
+    };
+}
+/**
+ * Execute the two-node graph through the exact production wiring:
+ * kernel → DurableRunTracker (onEvent + awaitDurableBoundary) → store.
+ */
+async function openScenario(factory) {
+    const stores = await factory.create();
+    const invocations = [];
+    const store = gatedExecutionStore(stores.execution, invocations);
+    const graph = compile(TWO_NODE_GRAPH);
+    // Publish the exact activation the run will reference: stores validate
+    // run identity against the published activation (adapter-neutral rule).
+    const manifest = manifestFor(graph);
+    await stores.catalog.publish({ manifest, canonicalManifest: toCanonicalJson(manifest) });
+    const tracker = new DurableRunTracker(store, {
+        runId: RUN_ID,
+        graphId: graph.id,
+        graphVersion: graph.graphVersion,
+        capabilitySetVersion: graph.capabilitySetVersion,
+        activationVersion: graph.activationVersion,
+        mode: 'normal',
+        retention: 'summary',
+        entryNodeId: graph.entryNodeId,
+    });
+    const execution = (async () => {
+        const output = await executeGraph({
+            graph,
+            input: { n: 1 },
+            mode: 'normal',
+            ports: {
+                descriptors: {
+                    getCapabilityDescriptor: (capabilityId) => ({
+                        id: capabilityId,
+                        revision: '1',
+                        effect: 'pure',
+                    }),
+                },
+                contracts: { has: () => false, isCompatible: () => true, get: () => undefined },
+                // Pin the kernel's run id to the tracker's run id — exactly what the
+                // runtime does; events and run rows must carry one run identity.
+                ids: { runId: () => RUN_ID },
+                onEvent: (event) => {
+                    tracker.onEvent(event);
+                },
+                // The exact boundary the runtime installs.
+                beforeInvoke: () => tracker.awaitDurableBoundary(),
+                policy: { authorize: () => ({ allowed: true, useDouble: false }) },
+                capabilities: {
+                    invoke: async (capabilityId) => {
+                        // FIRST statement: a synchronous, observable side effect. If the
+                        // kernel ever invoked before the durable write committed, this
+                        // would record it — no in-capability barrier can mask that.
+                        store.recordInvocation(capabilityId);
+                        return { ok: true, value: { from: capabilityId } };
+                    },
+                },
+            },
+        });
+        await tracker.finish(output);
+    })();
+    execution.catch(() => undefined); // rejections are observed through `execution`
+    return { gates: store, execution, stores };
+}
+/** Build and run the durable-boundary suite against one backend factory. */
+export function runDurableBoundarySuite(runner, factory) {
+    const { test, expect } = runner;
+    test(`[${factory.name}] an unresolved createRun blocks the first capability invocation`, async () => {
+        const scenario = await openScenario(factory);
+        try {
+            // Run creation reached the store but stays gated.
+            await scenario.gates.waitForPending('createRun');
+            // The kernel awaits the durable boundary; nothing has been invoked.
+            expect(scenario.gates.invocations).toEqual([]);
+        }
+        finally {
+            await settle(scenario);
+        }
+    });
+    test(`[${factory.name}] an unresolved node.started commit blocks that node's capability`, async () => {
+        const scenario = await openScenario(factory);
+        try {
+            await scenario.gates.waitForPending('createRun');
+            scenario.gates.releaseNext();
+            // Node a's node.started write is durable-in-flight.
+            await scenario.gates.waitForPending('node.started@a');
+            expect(scenario.gates.invocations).toEqual([]);
+        }
+        finally {
+            await settle(scenario);
+        }
+    });
+    test(`[${factory.name}] resolving the node-start commit invokes the capability exactly once`, async () => {
+        const scenario = await openScenario(factory);
+        try {
+            await scenario.gates.waitForPending('createRun');
+            scenario.gates.releaseNext();
+            await scenario.gates.waitForPending('node.started@a');
+            scenario.gates.releaseNext();
+            await scenario.gates.waitForInvocations(1);
+            expect(scenario.gates.invocations).toEqual(['boundary.a']);
+            // Release the remaining durable writes as execution produces them;
+            // node b then runs — exactly once more.
+            await scenario.gates.waitForPending('node.completed@a');
+            scenario.gates.releaseNext();
+            await scenario.gates.waitForPending('node.started@b');
+            scenario.gates.releaseNext();
+            await scenario.gates.waitForInvocations(2);
+            expect(scenario.gates.invocations).toEqual(['boundary.a', 'boundary.b']);
+        }
+        finally {
+            await settle(scenario);
+        }
+    });
+    test(`[${factory.name}] a rejected createRun invokes no capability and fails structured`, async () => {
+        const scenario = await openScenario(factory);
+        try {
+            await scenario.gates.waitForPending('createRun');
+            scenario.gates.failNext('VICT_STORE_UNAVAILABLE');
+            await expect(scenario.execution).rejects.toMatchObject({ code: 'VICT_STORE_UNAVAILABLE' });
+            expect(scenario.gates.invocations).toEqual([]);
+        }
+        finally {
+            await settleSilently(scenario);
+        }
+    });
+    test(`[${factory.name}] a rejected node-start transition invokes no capability`, async () => {
+        const scenario = await openScenario(factory);
+        try {
+            await scenario.gates.waitForPending('createRun');
+            scenario.gates.releaseNext();
+            await scenario.gates.waitForPending('node.started@a');
+            scenario.gates.failNext('VICT_STORE_BUSY');
+            await expect(scenario.execution).rejects.toMatchObject({ code: 'VICT_STORE_BUSY' });
+            expect(scenario.gates.invocations).toEqual([]);
+        }
+        finally {
+            await settleSilently(scenario);
+        }
+    });
+    test(`[${factory.name}] the second capability waits for the first result batch and its own node.started`, async () => {
+        const scenario = await openScenario(factory);
+        try {
+            // FIFO write order: createRun, a:node.started, a:result batch,
+            // b:node.started, b:result+terminal.
+            await scenario.gates.waitForPending('createRun');
+            scenario.gates.releaseNext();
+            await scenario.gates.waitForPending('node.started@a');
+            scenario.gates.releaseNext();
+            await scenario.gates.waitForInvocations(1);
+            expect(scenario.gates.invocations).toEqual(['boundary.a']);
+            // a's result batch is now gated — b must not start.
+            await scenario.gates.waitForPending('node.completed@a');
+            expect(scenario.gates.invocations).toEqual(['boundary.a']);
+            scenario.gates.releaseNext(); // commit a's result batch
+            await scenario.gates.waitForPending('node.started@b');
+            // b's intent is enqueued but not durable — still exactly one invocation.
+            expect(scenario.gates.invocations).toEqual(['boundary.a']);
+            scenario.gates.releaseNext(); // commit b's node.started
+            await scenario.gates.waitForInvocations(2);
+            expect(scenario.gates.invocations).toEqual(['boundary.a', 'boundary.b']);
+            // Causal order: a's result batch committed before b's node.started
+            // committed — and b ran only afterwards.
+            const committed = scenario.gates.committed;
+            const batchIndex = committed.findIndex((label) => label.includes('node.completed@a'));
+            const bStartIndex = committed.findIndex((label) => label.includes('node.started@b'));
+            expect(batchIndex >= 0).toBe(true);
+            expect(bStartIndex > batchIndex).toBe(true);
+        }
+        finally {
+            await settle(scenario);
+        }
+    });
+}
+/* ------------------------------------------------------------------ */
+/* Scenario settlement                                                 */
+/* ------------------------------------------------------------------ */
+/** Release everything still pending and let the run settle successfully. */
+async function settle(scenario) {
+    await releaseUntilSettled(scenario);
+    await scenario.execution;
+    await scenario.stores.dispose();
+}
+/** Release everything still pending after an expected rejection. */
+async function settleSilently(scenario) {
+    await releaseUntilSettled(scenario);
+    await scenario.execution.catch(() => undefined);
+    await scenario.stores.dispose();
+}
+/**
+ * Release gated writes until the execution settles: each release can let
+ * execution produce the next gated write, so the loop yields and re-checks
+ * until the run promise resolves or rejects. Terminates because the write
+ * sequence of a finite graph is finite.
+ */
+async function releaseUntilSettled(scenario) {
+    let settled = false;
+    const done = scenario.execution.then(() => {
+        settled = true;
+    }, () => {
+        settled = true;
+    });
+    while (!settled) {
+        if (scenario.gates.pendingLabels().length > 0) {
+            scenario.gates.releaseNext();
+        }
+        await new Promise((resolve) => setImmediate(resolve));
+    }
+    await done;
+}
+//# sourceMappingURL=boundary-conformance.js.map

package/dist/boundary-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary-conformance.js","sourceRoot":"","sources":["../src/boundary-conformance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAMrD,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAiErD,MAAM,MAAM,GAAG,cAAc,CAAC;AAE9B;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,KAAqB,EACrB,WAAqB;IAErB,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAqD,EAAE,CAAC;IAC5E,IAAI,iBAAiB,GAAkD,EAAE,CAAC;IAE1E,MAAM,aAAa,GAAG,CAAC,KAAa,EAAQ,EAAE;QAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC;YACnD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAA8C,CAAC;YAClF,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAK,KAAa,EAAE,KAAuB,EAAc,EAAE;QAC3E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,OAGnB,EAAU,EAAE;QACX,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YACzB,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,OAAO,CAAC,MAAM;iBACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;iBAClF,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,UAAU,OAAO,CAAC,KAAK,IAAI,KAAK,EAAE,GAAG,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;IAClE,CAAC,CAAC;IAEF,MAAM,KAAK,GAAmB;QAC5B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1F,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/F,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;QACtC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1C,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC;QAClE,sBAAsB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC;KAC3E,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;QAC1B,aAAa,EAAE,GAAsB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;QAC3E,WAAW,EAAE,GAAS,EAAE;YACtB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QACD,QAAQ,EAAE,CAAC,OAAuB,wBAAwB,EAAQ,EAAE;YAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,MAAM,CACV,IAAI,cAAc,CAAC,IAAI,EAAE,oCAAoC,EAAE;oBAC7D,SAAS,EAAE,sBAAsB;iBAClC,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,cAAc,EAAE,CAAC,QAAgB,EAAiB,EAAE,CAClD,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAC5D,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,cAAc,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC;QACJ,kBAAkB,EAAE,CAAC,KAAa,EAAiB,EAAE;YACnD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,IAAI,WAAW,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;oBAChC,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,sEAAsE;QACtE,gBAAgB,EAAE,CAAC,YAAoB,EAAQ,EAAE;YAC/C,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/B,iBAAiB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;gBACtD,IAAI,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACvC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QACD,SAAS;QACT,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,cAAc,GAA+B;IACjD,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,GAAG;IACV,KAAK,EAAE;QACL,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE;QACrC,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE;KACtC;IACD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;CAChC,CAAC;AAEF,gEAAgE;AAChE,SAAS,OAAO,CAAC,UAAsC;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,UAAU;QACV,YAAY,EAAE;YACZ,uBAAuB,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC1C,EAAE,EAAE,YAAY;gBAChB,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,MAAe;aACxB,CAAC;SACH;QACD,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;KAChF,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAoB;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAA2B,CAAC;QAC7D,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,MAAe;YACvB,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,cAAc,EAAE,0BAA0B;QAC1C,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAClD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,oBAAoB,EAAE,2BAA2B,CAAC,QAAQ,CAAC;QAC3D,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,QAAQ;QACR,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY,CAAC,OAAmC;IAC7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;IACtC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACtC,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAEzF,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,KAAK,EAAE;QAC3C,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,CAAC,KAAK,IAAmB,EAAE;QAC3C,MAAM,MAAM,GAAoB,MAAM,YAAY,CAAC;YACjD,KAAK;YACL,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE;gBACL,WAAW,EAAE;oBACX,uBAAuB,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;wBAC1C,EAAE,EAAE,YAAY;wBAChB,QAAQ,EAAE,GAAG;wBACb,MAAM,EAAE,MAAe;qBACxB,CAAC;iBACH;gBACD,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;gBAC/E,qEAAqE;gBACrE,iEAAiE;gBACjE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAW,EAAE,CAAC,MAAM,EAAE;gBACpC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACjB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACzB,CAAC;gBACD,2CAA2C;gBAC3C,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,EAAE;gBAClD,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;gBAClE,YAAY,EAAE;oBACZ,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;wBAC7B,iEAAiE;wBACjE,+DAA+D;wBAC/D,4DAA4D;wBAC5D,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;wBACrC,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC;oBAC9D,CAAC;iBACF;aACF;SACF,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,EAAE,CAAC;IACL,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,8CAA8C;IAChF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CACrC,MAA6B,EAC7B,OAAmC;IAEnC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAEhC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,kDAAkD;YAClD,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACjD,oEAAoE;YACpE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACjD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7B,oDAAoD;YACpD,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;YACtD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACjD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;YACtD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3D,mEAAmE;YACnE,wCAAwC;YACxC,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;YACxD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;YACtD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;QAC3E,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACjD,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;YAClD,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC3F,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,0DAA0D,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACjD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;YACtD,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACpF,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACnH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,+DAA+D;YAC/D,qCAAqC;YACrC,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACjD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;YACtD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3D,oDAAoD;YACpD,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;YACxD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,0BAA0B;YACxD,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;YACtD,yEAAyE;YACzE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,0BAA0B;YACxD,MAAM,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;YACzE,mEAAmE;YACnE,yCAAyC;YACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;YAC3C,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACtF,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACrF,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,4EAA4E;AAC5E,KAAK,UAAU,MAAM,CAAC,QAAkB;IACtC,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,CAAC,SAAS,CAAC;IACzB,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,cAAc,CAAC,QAAkB;IAC9C,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAAC,QAAkB;IACnD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAClC,GAAG,EAAE;QACH,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,EACD,GAAG,EAAE;QACH,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CACF,CAAC;IACF,OAAO,CAAC,OAAO,EAAE,CAAC;QAChB,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,CAAC;AACb,CAAC"}