@zhin.js/workroom 0.0.0 → 0.0.1

package/lib/data-governance/governed-payload-write-saga.js

@@ -0,0 +1,471 @@
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from './canonical-value.js';
+import { DurableFileStore } from './durable-file-store.js';
+/** Immutable, content-free intent index. It never stores payload bytes or key material. */
+export class FileGovernedPayloadWriteSagaRepository {
+    #store;
+    #ready;
+    constructor(directory) {
+        this.#store = new DurableFileStore(directory);
+    }
+    /** Proves the content-free journal is durably writable before payload bytes enter the Vault. */
+    async assertReady() {
+        await this.#ensureReady();
+    }
+    async begin(input) {
+        const canonical = exactIntent(input);
+        const intentId = createGovernedPayloadWriteIntentId(canonical);
+        const current = await this.read(intentId);
+        if (current) {
+            if (digest(pickIntent(current)) !== digest(canonical)) {
+                throw new Error('Governed Payload write intent identity conflict');
+            }
+            return current;
+        }
+        return await this.#append(intentId, -1, 'intent.created', canonical);
+    }
+    async recordVault(intentId, handle) {
+        return await this.#transition(intentId, 'intent', 'vault.written', { handle });
+    }
+    async recordAuthorityIndex(intentId, authorityIndexDigest) {
+        requiredDigest(authorityIndexDigest, 'authorityIndexDigest');
+        return await this.#transition(intentId, 'vault_written', 'authority.indexed', {
+            authorityIndexDigest,
+        });
+    }
+    async publish(intentId, publicationDigest) {
+        requiredDigest(publicationDigest, 'publicationDigest');
+        return await this.#transition(intentId, 'authority_indexed', 'header.published', {
+            publicationDigest,
+        });
+    }
+    async requirePurge(intentId, purgeReason) {
+        const current = await this.#require(intentId);
+        if (current.state === 'published') {
+            throw new Error('Published Governed Payload write cannot enter purge-required');
+        }
+        if (current.state === 'purge_required')
+            return current;
+        return await this.#append(intentId, current.sequence, 'purge.required', { purgeReason });
+    }
+    async recordPurgeAttempt(intentId, request) {
+        const current = await this.#require(intentId);
+        if (current.state !== 'purge_required' || current.purge?.status === 'confirmed') {
+            throw new Error('Governed Payload purge attempt is not allowed');
+        }
+        if (current.purge?.status === 'pending' || current.purge?.status === 'outcome_unknown') {
+            if (current.purge.requestDigest !== request.digest) {
+                throw new Error('Governed Payload purge attempt replay drift');
+            }
+            return current;
+        }
+        assertPurgeRequest(request, current);
+        return await this.#append(intentId, current.sequence, 'purge.attempted', {
+            generation: request.generation,
+            attempt: request.attempt,
+            fence: request.fence,
+            candidateDigest: request.candidateDigest,
+            requestDigest: request.digest,
+        });
+    }
+    async recordPurgeReceipt(intentId, receipt) {
+        const current = await this.#require(intentId);
+        if (current.state !== 'purge_required' || !current.purge
+            || current.purge.status === 'confirmed') {
+            throw new Error('Governed Payload purge receipt is not expected');
+        }
+        const canonical = assertPurgeReceipt(receipt, current.purge.requestDigest);
+        return await this.#append(intentId, current.sequence, 'purge.receipt', { receipt: canonical });
+    }
+    async read(intentId) {
+        await this.#ensureReady();
+        const prefix = `${fileId(intentId)}.`;
+        const names = (await readdir(this.#store.directory))
+            .filter(name => name.startsWith(prefix) && name.endsWith('.json'))
+            .sort();
+        if (names.length === 0)
+            return undefined;
+        const events = await Promise.all(names.map(async (name, index) => {
+            const match = /^[a-f\d]{64}\.(\d{12})\.json$/u.exec(name);
+            if (!match || Number(match[1]) !== index)
+                throw new Error('Governed Payload write saga sequence drift');
+            return parseEvent(JSON.parse(await readFile(join(this.#store.directory, name), 'utf8')));
+        }));
+        return replay(events);
+    }
+    async listUnpublished(projectId, publicationScope) {
+        await this.#ensureReady();
+        const names = (await readdir(this.#store.directory)).filter(name => name.endsWith('.000000000000.json'));
+        const snapshots = await Promise.all(names.map(async (name) => {
+            const first = parseEvent(JSON.parse(await readFile(join(this.#store.directory, name), 'utf8')));
+            return await this.#require(first.intentId);
+        }));
+        return deepFreeze(snapshots.filter(snapshot => snapshot.projectId === projectId
+            && snapshot.state !== 'published'
+            && snapshot.state !== 'purge_required'
+            && (publicationScope === undefined || snapshot.publicationScope === publicationScope)));
+    }
+    async listAuthorityIndexed(projectId) {
+        return deepFreeze((await this.listUnpublished(projectId))
+            .filter(snapshot => snapshot.state === 'authority_indexed'));
+    }
+    async listPurgeRequired(projectId) {
+        required(projectId, 'projectId');
+        await this.#ensureReady();
+        const names = (await readdir(this.#store.directory)).filter(name => name.endsWith('.000000000000.json'));
+        const snapshots = await Promise.all(names.map(async (name) => {
+            const first = parseEvent(JSON.parse(await readFile(join(this.#store.directory, name), 'utf8')));
+            return await this.#require(first.intentId);
+        }));
+        return deepFreeze(snapshots.filter(snapshot => snapshot.projectId === projectId
+            && snapshot.state === 'purge_required'
+            && snapshot.purge?.status !== 'confirmed'));
+    }
+    async #transition(intentId, expected, type, payload) {
+        const current = await this.#require(intentId);
+        if (current.state !== expected) {
+            const replayed = replayTransition(current, type, payload);
+            if (replayed)
+                return current;
+            throw new Error(`Governed Payload write saga transition conflict: ${current.state}`);
+        }
+        return await this.#append(intentId, current.sequence, type, payload);
+    }
+    async #append(intentId, expectedSequence, type, payload) {
+        await this.#ensureReady();
+        const sequence = expectedSequence + 1;
+        const body = deepFreeze({ version: 1, intentId, sequence, type, payload: structuredClone(payload) });
+        const event = deepFreeze({ ...body, digest: digest(body) });
+        const target = join(this.#store.directory, `${fileId(intentId)}.${String(sequence).padStart(12, '0')}.json`);
+        await this.#store.publishCreateOnly({
+            target,
+            content: canonicalWorkroomJson(event),
+            createdValue: event,
+            onConflict: async () => {
+                const winner = parseEvent(JSON.parse(await readFile(target, 'utf8')));
+                if (winner.digest !== event.digest)
+                    throw new Error('Governed Payload write saga CAS conflict');
+                return winner;
+            },
+        });
+        return await this.#require(intentId);
+    }
+    async #require(intentId) {
+        const value = await this.read(intentId);
+        if (!value)
+            throw new Error('Governed Payload write intent is unavailable');
+        return value;
+    }
+    async #ensureReady() {
+        this.#ready ??= this.#store.ensureDurableLeaf('Governed Payload write saga');
+        await this.#ready;
+    }
+}
+/** Generation-owned worker; confirmed receipts are terminal and never dispatched twice. */
+export class GovernedPayloadWritePurgeConsumer {
+    options;
+    constructor(options) {
+        this.options = options;
+        if (!Number.isSafeInteger(options.generation) || options.generation < 1) {
+            throw new Error('Governed Payload purge generation is invalid');
+        }
+    }
+    async processIntent(intentId, signal) {
+        signal.throwIfAborted();
+        let current = await this.options.repository.read(intentId);
+        if (!current || current.state !== 'purge_required' || current.purge?.status === 'confirmed') {
+            if (!current)
+                throw new Error('Governed Payload purge intent is unavailable');
+            return current;
+        }
+        let request;
+        let reconcile = false;
+        if (current.purge?.status === 'pending' || current.purge?.status === 'outcome_unknown') {
+            request = purgeRequestFromState(current);
+            reconcile = true;
+        }
+        else {
+            request = createPurgeRequest(current, this.options.generation);
+            current = await this.options.repository.recordPurgeAttempt(intentId, request);
+        }
+        try {
+            const receipt = reconcile
+                ? await this.options.provider.reconcile(request, current.purge?.receipt, signal)
+                : await this.options.provider.purge(request, signal);
+            return await this.options.repository.recordPurgeReceipt(intentId, receipt);
+        }
+        catch (error) {
+            if (signal.aborted)
+                throw signal.reason ?? error;
+            // The durable attempt remains pending. Restart must reconcile this exact
+            // attempt/fence and must never issue a second destructive call blindly.
+            return (await this.options.repository.read(intentId));
+        }
+    }
+    async drainProject(projectId, signal) {
+        const results = [];
+        for (const pending of await this.options.repository.listPurgeRequired(projectId)) {
+            results.push(await this.processIntent(pending.intentId, signal));
+        }
+        return deepFreeze(results);
+    }
+}
+/**
+ * Generation handoff worker for the lost-response window after header CAS.
+ * Missing verifiers are deliberately non-destructive: the durable intent stays visible.
+ */
+export class GovernedPayloadPublicationReconciler {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async drainProject(projectId, signal) {
+        const results = [];
+        for (const pending of await this.options.repository.listAuthorityIndexed(projectId)) {
+            signal.throwIfAborted();
+            if (!this.options.verifier) {
+                results.push(pending);
+                continue;
+            }
+            let verification;
+            try {
+                verification = await this.options.verifier.verify(pending, signal);
+            }
+            catch (error) {
+                if (signal.aborted)
+                    throw signal.reason ?? error;
+                results.push(pending);
+                continue;
+            }
+            if (verification.status === 'unknown') {
+                results.push(pending);
+                continue;
+            }
+            if (verification.status === 'exact') {
+                requiredDigest(verification.publicationDigest, 'publicationDigest');
+                results.push(await this.options.repository.publish(pending.intentId, verification.publicationDigest));
+                continue;
+            }
+            await this.options.repository.requirePurge(pending.intentId, 'restart_unpublished');
+            results.push(await this.options.purge.processIntent(pending.intentId, signal));
+        }
+        return deepFreeze(results);
+    }
+}
+export function createGovernedPayloadWriteIntentId(input) {
+    const canonical = exactIntent(input);
+    return `governed-payload-write:${digest({
+        projectId: canonical.projectId,
+        objectId: canonical.objectId,
+        payloadHash: canonical.payloadHash,
+        descriptorDigest: canonical.descriptorDigest,
+        sourceBindingDigest: canonical.sourceBindingDigest,
+        consumer: canonical.consumer,
+        publicationScope: canonical.publicationScope,
+    }).slice('sha256:'.length)}`;
+}
+function replay(events) {
+    const first = events[0];
+    if (!first || first.type !== 'intent.created' || first.sequence !== 0) {
+        throw new Error('Governed Payload write saga has no intent');
+    }
+    const intent = exactIntent(first.payload);
+    if (createGovernedPayloadWriteIntentId(intent) !== first.intentId)
+        throw new Error('Governed Payload write intent digest drift');
+    let state = 'intent';
+    let extension = {};
+    for (const [index, event] of events.entries()) {
+        if (event.intentId !== first.intentId || event.sequence !== index)
+            throw new Error('Governed Payload write saga binding drift');
+        if (index === 0)
+            continue;
+        if (event.type === 'vault.written' && state === 'intent' && isHandle(event.payload.handle)) {
+            state = 'vault_written';
+            extension = { ...extension, handle: event.payload.handle };
+            continue;
+        }
+        if (event.type === 'authority.indexed' && state === 'vault_written' && isDigest(event.payload.authorityIndexDigest)) {
+            state = 'authority_indexed';
+            extension = { ...extension, authorityIndexDigest: event.payload.authorityIndexDigest };
+            continue;
+        }
+        if (event.type === 'header.published' && state === 'authority_indexed' && isDigest(event.payload.publicationDigest)) {
+            state = 'published';
+            extension = { ...extension, publicationDigest: event.payload.publicationDigest };
+            continue;
+        }
+        if (event.type === 'purge.required' && state !== 'published'
+            && ['write_failed', 'cas_lost', 'restart_unpublished'].includes(String(event.payload.purgeReason))) {
+            state = 'purge_required';
+            extension = { ...extension, purgeReason: event.payload.purgeReason };
+            continue;
+        }
+        if (event.type === 'purge.attempted' && state === 'purge_required'
+            && (!extension.purge || extension.purge.status === 'failed')) {
+            const candidateDigest = snapshotDigest(intent, first.intentId, index - 1, state, extension);
+            extension = {
+                ...extension,
+                purge: parsePurgeAttempt(event.payload, candidateDigest, extension.purge),
+            };
+            continue;
+        }
+        if (event.type === 'purge.receipt' && state === 'purge_required'
+            && extension.purge && extension.purge.status !== 'confirmed') {
+            const receipt = assertPurgeReceipt(event.payload.receipt, extension.purge.requestDigest);
+            extension = {
+                ...extension,
+                purge: deepFreeze({ ...extension.purge, status: receipt.status, receipt }),
+            };
+            continue;
+        }
+        throw new Error('Governed Payload write saga transition drift');
+    }
+    const body = deepFreeze({
+        ...intent, version: 1, intentId: first.intentId, sequence: events.length - 1, state, ...extension,
+    });
+    return deepFreeze({ ...body, digest: digest(body) });
+}
+function createPurgeRequest(snapshot, generation) {
+    const attempt = (snapshot.purge?.attempt ?? 0) + 1;
+    const body = deepFreeze({
+        version: 1,
+        generation,
+        intentId: snapshot.intentId,
+        projectId: snapshot.projectId,
+        objectId: snapshot.objectId,
+        payloadHash: snapshot.payloadHash,
+        descriptorDigest: snapshot.descriptorDigest,
+        ...(snapshot.handle ? { handle: snapshot.handle } : {}),
+        reason: snapshot.purgeReason,
+        attempt,
+        fence: attempt,
+        candidateDigest: snapshot.digest,
+    });
+    return deepFreeze({ ...body, digest: digest(body) });
+}
+function purgeRequestFromState(snapshot) {
+    const purge = snapshot.purge;
+    const body = deepFreeze({
+        version: 1,
+        generation: purge.generation,
+        intentId: snapshot.intentId,
+        projectId: snapshot.projectId,
+        objectId: snapshot.objectId,
+        payloadHash: snapshot.payloadHash,
+        descriptorDigest: snapshot.descriptorDigest,
+        ...(snapshot.handle ? { handle: snapshot.handle } : {}),
+        reason: snapshot.purgeReason,
+        attempt: purge.attempt,
+        fence: purge.fence,
+        candidateDigest: purge.candidateDigest,
+    });
+    const request = deepFreeze({ ...body, digest: digest(body) });
+    if (request.digest !== purge.requestDigest)
+        throw new Error('Governed Payload purge request replay drift');
+    return request;
+}
+function assertPurgeRequest(request, snapshot) {
+    const expected = createPurgeRequest(snapshot, request.generation);
+    if (canonicalWorkroomJson(expected) !== canonicalWorkroomJson(request)) {
+        throw new Error('Governed Payload purge request binding drift');
+    }
+}
+function assertPurgeReceipt(value, requestDigest) {
+    if (!value || typeof value !== 'object')
+        throw new Error('Governed Payload purge receipt is invalid');
+    const receipt = value;
+    if (receipt.version !== 1 || receipt.requestDigest !== requestDigest
+        || !receipt.providerId || receipt.providerId.trim() !== receipt.providerId
+        || !['confirmed', 'failed', 'outcome_unknown'].includes(String(receipt.status))
+        || !Number.isSafeInteger(receipt.observedAt) || Number(receipt.observedAt) < 0
+        || !isDigest(receipt.digest)) {
+        throw new Error('Governed Payload purge receipt is invalid');
+    }
+    const { digest: supplied, ...body } = receipt;
+    if (supplied !== digest(body))
+        throw new Error('Governed Payload purge receipt digest drift');
+    return deepFreeze(structuredClone(receipt));
+}
+function parsePurgeAttempt(value, candidateDigest, previous) {
+    if (!Number.isSafeInteger(value.generation) || Number(value.generation) < 1
+        || !Number.isSafeInteger(value.attempt) || Number(value.attempt) < 1
+        || value.fence !== value.attempt
+        || value.candidateDigest !== candidateDigest
+        || !isDigest(value.requestDigest)
+        || Number(value.attempt) !== (previous?.attempt ?? 0) + 1) {
+        throw new Error('Governed Payload purge attempt drift');
+    }
+    return deepFreeze({
+        generation: Number(value.generation),
+        attempt: Number(value.attempt),
+        fence: Number(value.fence),
+        candidateDigest,
+        requestDigest: value.requestDigest,
+        status: 'pending',
+    });
+}
+function snapshotDigest(intent, intentId, sequence, state, extension) {
+    return digest({ ...intent, version: 1, intentId, sequence, state, ...extension });
+}
+function exactIntent(value) {
+    if (!value || typeof value !== 'object')
+        throw new Error('Governed Payload write intent is invalid');
+    const input = value;
+    for (const [field, candidate] of Object.entries({
+        operationId: input.operationId, projectId: input.projectId, objectId: input.objectId,
+    }))
+        required(candidate, field);
+    requiredDigest(input.payloadHash, 'payloadHash');
+    requiredDigest(input.descriptorDigest, 'descriptorDigest');
+    requiredDigest(input.sourceBindingDigest, 'sourceBindingDigest');
+    if (![
+        'authority_source', 'evidence_header', 'task_report_header', 'journal_header',
+    ].includes(String(input.consumer))) {
+        throw new Error('Governed Payload write consumer is invalid');
+    }
+    if (input.publicationScope !== undefined)
+        required(input.publicationScope, 'publicationScope');
+    return deepFreeze({
+        operationId: input.operationId, projectId: input.projectId, objectId: input.objectId,
+        payloadHash: input.payloadHash, descriptorDigest: input.descriptorDigest,
+        sourceBindingDigest: input.sourceBindingDigest, consumer: input.consumer,
+        ...(input.publicationScope ? { publicationScope: input.publicationScope } : {}),
+    });
+}
+function parseEvent(value) {
+    if (!value || typeof value !== 'object')
+        throw new Error('Governed Payload write saga event is invalid');
+    const event = value;
+    if (event.version !== 1 || !Number.isSafeInteger(event.sequence) || Number(event.sequence) < 0
+        || !event.payload || typeof event.payload !== 'object' || !isDigest(event.digest)) {
+        throw new Error('Governed Payload write saga event is invalid');
+    }
+    const { digest: supplied, ...body } = event;
+    if (supplied !== digest(body))
+        throw new Error('Governed Payload write saga event digest drift');
+    return deepFreeze(structuredClone(event));
+}
+function pickIntent(value) {
+    return exactIntent(value);
+}
+function replayTransition(current, type, payload) {
+    return (type === 'vault.written' && current.handle !== undefined && digest(current.handle) === digest(payload.handle))
+        || (type === 'authority.indexed' && current.authorityIndexDigest === payload.authorityIndexDigest)
+        || (type === 'header.published' && current.publicationDigest === payload.publicationDigest);
+}
+function fileId(intentId) { return digest({ intentId }).slice('sha256:'.length); }
+function required(value, field) {
+    if (typeof value !== 'string' || !value || value.trim() !== value)
+        throw new Error(`${field} is invalid`);
+}
+function requiredDigest(value, field) {
+    if (!isDigest(value))
+        throw new Error(`${field} is invalid`);
+}
+function isDigest(value) { return typeof value === 'string' && /^sha256:[a-f\d]{64}$/u.test(value); }
+function isHandle(value) {
+    return !!value && typeof value === 'object' && value.version === 1
+        && typeof value.vaultObjectId === 'string';
+}
+//# sourceMappingURL=governed-payload-write-saga.js.map

package/lib/data-governance/governed-payload-write-saga.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-payload-write-saga.js","sourceRoot":"","sources":["../../src/data-governance/governed-payload-write-saga.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA6G3D,2FAA2F;AAC3F,MAAM,OAAO,sCAAsC;IACxC,MAAM,CAAmB;IAClC,MAAM,CAAiB;IAEvB,YAAY,SAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,gGAAgG;IAChG,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAsC;QAChD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,kCAAkC,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,MAAgC;QAEhC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,QAAgB,EAChB,oBAA4B;QAE5B,cAAc,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;QAC7D,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,EAAE,mBAAmB,EAAE;YAC5E,oBAAoB;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,iBAAyB;QAEzB,cAAc,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACvD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,mBAAmB,EAAE,kBAAkB,EAAE;YAC/E,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,WAA4D;QAE5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,gBAAgB;YAAE,OAAO,OAAO,CAAC;QACvD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,QAAgB,EAChB,OAAyC;QAEzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,KAAK,KAAK,gBAAgB,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACvF,IAAI,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,iBAAiB,EAAE;YACvE,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,aAAa,EAAE,OAAO,CAAC,MAAM;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,QAAgB,EAChB,OAAyC;QAEzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,KAAK,KAAK,gBAAgB,IAAI,CAAC,OAAO,CAAC,KAAK;eACnD,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3E,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtC,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACjD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aACjE,IAAI,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YAC/D,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACxG,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC,CAAC;QACJ,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,gBAAyB;QAEzB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACzG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACzD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAChG,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC,CAAC;QACJ,OAAO,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;eAC1E,QAAQ,CAAC,KAAK,KAAK,WAAW;eAC9B,QAAQ,CAAC,KAAK,KAAK,gBAAgB;eACnC,CAAC,gBAAgB,KAAK,SAAS,IAAI,QAAQ,CAAC,gBAAgB,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,SAAiB;QAEjB,OAAO,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;aACtD,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,mBAAmB,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACzG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACzD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAChG,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC,CAAC;QACJ,OAAO,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;eAC1E,QAAQ,CAAC,KAAK,KAAK,gBAAgB;eACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,QAAmC,EACnC,IAA2C,EAC3C,OAA0C;QAE1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,QAAQ;gBAAE,OAAO,OAAO,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,oDAAoD,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,gBAAwB,EACxB,IAA2C,EAC3C,OAAe;QAEf,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,gBAAgB,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,CAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9G,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7G,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAClC,MAAM;YACN,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC;YACrC,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK,IAAI,EAAE;gBACrB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBACtE,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAChG,OAAO,MAAM,CAAC;YAChB,CAAC;SACF,CAAC,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,6BAA6B,CAAC,CAAC;QAC7E,MAAM,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;CACF;AAED,2FAA2F;AAC3F,MAAM,OAAO,iCAAiC;IACvB;IAArB,YAAqB,OAInB;QAJmB,YAAO,GAAP,OAAO,CAI1B;QACA,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,MAAmB;QACvD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,gBAAgB,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;YAC5F,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9E,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,OAAyC,CAAC;QAC9C,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACvF,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YACzC,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC/D,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,SAAS;gBACvB,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;gBAChF,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;YACjD,yEAAyE;YACzE,wEAAwE;YACxE,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAE,CAAC;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,SAAiB,EACjB,MAAmB;QAEnB,MAAM,OAAO,GAAuC,EAAE,CAAC;QACvD,KAAK,MAAM,OAAO,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjF,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,oCAAoC;IAC1B;IAArB,YAAqB,OAInB;QAJmB,YAAO,GAAP,OAAO,CAI1B;IAAG,CAAC;IAEN,KAAK,CAAC,YAAY,CAChB,SAAiB,EACjB,MAAmB;QAEnB,MAAM,OAAO,GAAuC,EAAE,CAAC;QACvD,KAAK,MAAM,OAAO,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YACpF,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,IAAI,YAAoD,CAAC;YACzD,IAAI,CAAC;gBACH,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACpC,cAAc,CAAC,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAChD,OAAO,CAAC,QAAQ,EAChB,YAAY,CAAC,iBAAiB,CAC/B,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YACpF,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAsC;IACvF,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,0BAA0B,MAAM,CAAC;QACtC,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;QAClD,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;KAC7C,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,MAAM,CAAC,MAAgD;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,kCAAkC,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACjI,IAAI,KAAK,GAA8B,QAAQ,CAAC;IAChD,IAAI,SAAS,GACwC,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAChI,IAAI,KAAK,KAAK,CAAC;YAAE,SAAS;QAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3F,KAAK,GAAG,eAAe,CAAC;YAAC,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,SAAS;QAChG,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,KAAK,eAAe,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACpH,KAAK,GAAG,mBAAmB,CAAC;YAAC,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAAC,SAAS;QAChI,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,KAAK,mBAAmB,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpH,KAAK,GAAG,WAAW,CAAC;YAAC,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAAC,SAAS;QAClH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,KAAK,WAAW;eACvD,CAAC,cAAc,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACrG,KAAK,GAAG,gBAAgB,CAAC;YAAC,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAA8D,EAAE,CAAC;YAAC,SAAS;QAC9J,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,KAAK,gBAAgB;eAC7D,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YAC5F,SAAS,GAAG;gBACV,GAAG,SAAS;gBACZ,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC;aAC1E,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,KAAK,gBAAgB;eAC3D,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/D,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACzF,SAAS,GAAG;gBACV,GAAG,SAAS;gBACZ,KAAK,EAAE,UAAU,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;aAC3E,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,GAAG,MAAM,EAAE,OAAO,EAAE,CAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,SAAS;KAC3G,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,kBAAkB,CACzB,QAA0C,EAC1C,UAAkB;IAElB,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,OAAO,EAAE,CAAU;QACnB,UAAU;QACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,EAAE,QAAQ,CAAC,WAAY;QAC7B,OAAO;QACP,KAAK,EAAE,OAAO;QACd,eAAe,EAAE,QAAQ,CAAC,MAAM;KACjC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAA0C;IAE1C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAM,CAAC;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,OAAO,EAAE,CAAU;QACnB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,EAAE,QAAQ,CAAC,WAAY;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC3G,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAyC,EACzC,QAA0C;IAE1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,aAAqB;IAErB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACtG,MAAM,OAAO,GAAG,KAAkD,CAAC;IACnE,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,aAAa,KAAK,aAAa;WAC/D,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,UAAU;WACvE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;WAC5E,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;WAC3E,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC9C,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC9F,OAAO,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,CAAqC,CAAC;AAClF,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAwC,EACxC,eAAuB,EACvB,QAAoD;IAEpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;WACtE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;WACjE,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO;WAC7B,KAAK,CAAC,eAAe,KAAK,eAAe;WACzC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;WAC9B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,UAAU,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,eAAe;QACf,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,MAAM,EAAE,SAAkB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CACrB,MAAuC,EACvC,QAAgB,EAChB,QAAgB,EAChB,KAAgC,EAChC,SACkD;IAElD,OAAO,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,KAAiD,CAAC;IAChE,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QAC9C,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACrF,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/B,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACjD,cAAc,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC3D,cAAc,CAAC,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,gBAAgB;KAC9E,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC/F,OAAO,UAAU,CAAC;QAChB,WAAW,EAAE,KAAK,CAAC,WAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAS;QACvF,WAAW,EAAE,KAAK,CAAC,WAAY,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAiB;QAC1E,mBAAmB,EAAE,KAAK,CAAC,mBAAoB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAS;QAC1E,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACzG,MAAM,KAAK,GAAG,KAA+C,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;WACzF,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAC5C,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACjG,OAAO,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAkC,CAAC;AAC7E,CAAC;AAED,SAAS,UAAU,CAAC,KAAuC;IACzD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAyC,EACzC,IAA2C,EAC3C,OAA0C;IAE1C,OAAO,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;WACjH,CAAC,IAAI,KAAK,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,KAAK,OAAO,CAAC,oBAAoB,CAAC;WAC/F,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB,IAAY,OAAO,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAClG,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;AAC5G,CAAC;AACD,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;AAC/D,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,IAAqB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/H,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAA2C,CAAC,OAAO,KAAK,CAAC;WACpG,OAAQ,KAA2C,CAAC,aAAa,KAAK,QAAQ,CAAC;AACtF,CAAC"}

package/lib/data-governance/payload-hold-overdue-projection.d.ts

@@ -0,0 +1,57 @@
+import { type PayloadLifecycleKernelClockPort } from './payload-lifecycle.js';
+export interface PayloadRetentionHoldProjectionState {
+    readonly projectId: string;
+    readonly objectId: string;
+    readonly stateSequence: number;
+    readonly stateDigest: string;
+    readonly holds: Readonly<Record<string, Readonly<{
+        id: string;
+        ownerPrincipalId: string;
+        reasonCode: 'legal_hold' | 'investigation' | 'regulatory_preservation';
+        placedAt: number;
+        reviewAt: number;
+        review?: Readonly<{
+            reviewedAt: number;
+        }>;
+        release?: Readonly<{
+            releasedBy: string;
+            releasedAt: number;
+        }>;
+    }>>>;
+}
+/** Trusted lifecycle reader; it must verify Journal governance proofs before returning state. */
+export interface PayloadRetentionHoldOverdueProjectionSourcePort {
+    listObjectIds(projectId: string): Promise<readonly string[]>;
+    read(projectId: string, objectId: string): Promise<PayloadRetentionHoldProjectionState>;
+}
+export interface PayloadRetentionHoldOverdueSnapshot {
+    readonly version: 1;
+    readonly projectId: string;
+    readonly clockRevision: number;
+    readonly observedAt: number;
+    readonly overdue: readonly Readonly<{
+        objectId: string;
+        stateSequence: number;
+        stateDigest: string;
+        holdId: string;
+        ownerPrincipalId: string;
+        reasonCode: 'legal_hold' | 'investigation' | 'regulatory_preservation';
+        placedAt: number;
+        reviewAt: number;
+        overdueBy: number;
+    }>[];
+    readonly digest: string;
+}
+/** Content-free operational projection. It cannot mutate accepted Project State. */
+export declare class PayloadRetentionHoldOverdueProjection {
+    readonly options: Readonly<{
+        source: PayloadRetentionHoldOverdueProjectionSourcePort;
+        clock: PayloadLifecycleKernelClockPort;
+    }>;
+    constructor(options: Readonly<{
+        source: PayloadRetentionHoldOverdueProjectionSourcePort;
+        clock: PayloadLifecycleKernelClockPort;
+    }>);
+    project(projectId: string, signal: AbortSignal): Promise<PayloadRetentionHoldOverdueSnapshot>;
+}
+//# sourceMappingURL=payload-hold-overdue-projection.d.ts.map

package/lib/data-governance/payload-hold-overdue-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-hold-overdue-projection.d.ts","sourceRoot":"","sources":["../../src/data-governance/payload-hold-overdue-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,wBAAwB,CAAC;AAQhC,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC/C,EAAE,EAAE,MAAM,CAAC;QACX,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,YAAY,GAAG,eAAe,GAAG,yBAAyB,CAAC;QACvE,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,QAAQ,CAAC;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,EAAE,QAAQ,CAAC;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAChE,CAAC,CAAC,CAAC,CAAC;CACN;AAED,iGAAiG;AACjG,MAAM,WAAW,+CAA+C;IAC9D,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,QAAQ,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,YAAY,GAAG,eAAe,GAAG,yBAAyB,CAAC;QACvE,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,EAAE,CAAC;IACL,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,oFAAoF;AACpF,qBAAa,qCAAqC;IACpC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,MAAM,EAAE,+CAA+C,CAAC;QACxD,KAAK,EAAE,+BAA+B,CAAC;KACxC,CAAC;gBAHmB,OAAO,EAAE,QAAQ,CAAC;QACrC,MAAM,EAAE,+CAA+C,CAAC;QACxD,KAAK,EAAE,+BAA+B,CAAC;KACxC,CAAC;IAEI,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,mCAAmC,CAAC;CAgDpG"}

package/lib/data-governance/payload-hold-overdue-projection.js

@@ -0,0 +1,80 @@
+import { createPayloadLifecycleClockSnapshot, } from './payload-lifecycle.js';
+import { canonicalWorkroomJson, compareCanonicalWorkroomText, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from './canonical-value.js';
+/** Content-free operational projection. It cannot mutate accepted Project State. */
+export class PayloadRetentionHoldOverdueProjection {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async project(projectId, signal) {
+        signal.throwIfAborted();
+        const project = required(projectId, 'Project id');
+        const rawClock = await this.options.clock.read({
+            operationId: `payload-hold-overdue-projection:${project}`,
+            projectId: project,
+            objectId: 'payload-hold-overdue-projection',
+            purpose: 'retention',
+        });
+        if (!rawClock)
+            throw new Error('Payload Hold overdue Kernel clock authority is unavailable');
+        const clock = createPayloadLifecycleClockSnapshot(rawClock);
+        if (canonicalWorkroomJson(clock) !== canonicalWorkroomJson(rawClock)) {
+            throw new Error('Payload Hold overdue Kernel clock authority drift');
+        }
+        const overdue = [];
+        const objectIds = [...await this.options.source.listObjectIds(project)].sort();
+        if (new Set(objectIds).size !== objectIds.length) {
+            throw new Error('Payload Hold overdue object source contains duplicates');
+        }
+        for (const objectId of objectIds) {
+            signal.throwIfAborted();
+            const state = await this.options.source.read(project, objectId);
+            assertState(state, project, objectId);
+            for (const hold of Object.values(state.holds).sort((left, right) => compareCanonicalWorkroomText(left.id, right.id))) {
+                if (hold.release || hold.review || clock.now <= hold.reviewAt)
+                    continue;
+                overdue.push(deepFreeze({
+                    objectId,
+                    stateSequence: state.stateSequence,
+                    stateDigest: state.stateDigest,
+                    holdId: hold.id,
+                    ownerPrincipalId: hold.ownerPrincipalId,
+                    reasonCode: hold.reasonCode,
+                    placedAt: hold.placedAt,
+                    reviewAt: hold.reviewAt,
+                    overdueBy: clock.now - hold.reviewAt,
+                }));
+            }
+        }
+        const body = deepFreeze({
+            version: 1,
+            projectId: project,
+            clockRevision: clock.revision,
+            observedAt: clock.now,
+            overdue: deepFreeze(overdue),
+        });
+        return deepFreeze({ ...body, digest: digest(body) });
+    }
+}
+function assertState(state, projectId, objectId) {
+    if (state.projectId !== projectId || state.objectId !== objectId
+        || !Number.isSafeInteger(state.stateSequence) || state.stateSequence < -1
+        || !/^sha256:[a-f\d]{64}$/u.test(state.stateDigest)) {
+        throw new Error('Payload Hold overdue trusted state binding drift');
+    }
+    for (const [holdId, hold] of Object.entries(state.holds)) {
+        if (holdId !== hold.id || !hold.ownerPrincipalId.trim()
+            || !['legal_hold', 'investigation', 'regulatory_preservation'].includes(hold.reasonCode)
+            || !Number.isSafeInteger(hold.placedAt) || !Number.isSafeInteger(hold.reviewAt)
+            || hold.reviewAt <= hold.placedAt) {
+            throw new Error('Payload Hold overdue trusted Hold state is invalid');
+        }
+    }
+}
+function required(value, label) {
+    if (typeof value !== 'string' || value.trim() !== value || value.length === 0) {
+        throw new Error(`${label} is invalid`);
+    }
+    return value;
+}
+//# sourceMappingURL=payload-hold-overdue-projection.js.map