agentrinse 0.0.0

package/dist/core/artifact-executor.d.ts

@@ -0,0 +1,39 @@
+import { type Stats } from "node:fs";
+import type { ArtifactRemoveAction } from "../contracts/action.js";
+import { type Measurement } from "./measure.js";
+import { type MountBoundaryResult } from "./mount-boundaries.js";
+import { type ProcessOwnershipResult } from "./process-ownership.js";
+export type ArtifactExecutionOutcome = "skipped-stale" | "failed" | "rolled-back" | "partially-applied";
+export declare class ArtifactExecutionError extends Error {
+    readonly outcome: ArtifactExecutionOutcome;
+    readonly isolationPath?: string | undefined;
+    readonly name = "ArtifactExecutionError";
+    constructor(message: string, outcome: ArtifactExecutionOutcome, isolationPath?: string | undefined, options?: ErrorOptions & {
+        diagnosticCode?: string;
+    });
+    readonly diagnosticCode: string | undefined;
+}
+export type ArtifactExecutionResult = {
+    reclaimedBytes: number;
+    isolationPath: string;
+};
+export type ArtifactExecutorDependencies = {
+    id?: () => string;
+    inspect?: (path: string) => Promise<Stats>;
+    finalInspect?: (path: string) => Stats;
+    move?: (source: string, destination: string) => Promise<void>;
+    remove?: (path: string) => Promise<void>;
+    measure?: (path: string, options: {
+        maxEntries: number;
+    }) => Promise<Measurement>;
+    processProbe?: (path: string) => Promise<ProcessOwnershipResult>;
+    mountProbe?: (path: string) => Promise<MountBoundaryResult>;
+    maxEntries?: number;
+    authorization?: {
+        expiresAtMs: number;
+        now: () => Date;
+    };
+};
+export declare function artifactIsolationPath(action: ArtifactRemoveAction, id: string): string;
+export declare function executeArtifactRemove(action: ArtifactRemoveAction, dependencies?: ArtifactExecutorDependencies): Promise<ArtifactExecutionResult>;
+//# sourceMappingURL=artifact-executor.d.ts.map

package/dist/core/artifact-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-executor.d.ts","sourceRoot":"","sources":["../../src/core/artifact-executor.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAIxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAE7F,MAAM,MAAM,wBAAwB,GAChC,eAAe,GACf,QAAQ,GACR,aAAa,GACb,mBAAmB,CAAC;AAExB,qBAAa,sBAAuB,SAAQ,KAAK;IAK7C,QAAQ,CAAC,OAAO,EAAE,wBAAwB;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM;IALjC,SAAkB,IAAI,4BAA4B;IAElD,YACE,OAAO,EAAE,MAAM,EACN,OAAO,EAAE,wBAAwB,EACjC,aAAa,CAAC,EAAE,MAAM,YAAA,EAC/B,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,EAIrD;IAED,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAClF,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,GAAG,EAAE,MAAM,IAAI,CAAC;KACjB,CAAC;CACH,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEtF;AAoCD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,oBAAoB,EAC5B,YAAY,GAAE,4BAAiC,GAC9C,OAAO,CAAC,uBAAuB,CAAC,CAsQlC"}

package/dist/core/artifact-executor.js

@@ -0,0 +1,200 @@
+import { randomUUID } from "node:crypto";
+import { lstatSync, rmSync } from "node:fs";
+import { lstat, rename } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { measurePath } from "./measure.js";
+import { findMountBoundaries } from "./mount-boundaries.js";
+import { findProcessesUsingPath } from "./process-ownership.js";
+export class ArtifactExecutionError extends Error {
+    outcome;
+    isolationPath;
+    name = "ArtifactExecutionError";
+    constructor(message, outcome, isolationPath, options) {
+        super(message, options);
+        this.outcome = outcome;
+        this.isolationPath = isolationPath;
+        this.diagnosticCode = options?.diagnosticCode;
+    }
+    diagnosticCode;
+}
+export function artifactIsolationPath(action, id) {
+    return join(dirname(action.target.path), `.agentrinse-${id}.tombstone`);
+}
+function isMissing(error) {
+    return (error instanceof Error && "code" in error && error.code === "ENOENT");
+}
+function matchesIdentity(stats, action) {
+    return matchesFilesystemObject(stats, action) && stats.mtimeMs === action.target.mtimeMs;
+}
+function matchesFilesystemObject(stats, action) {
+    return (stats.isDirectory() &&
+        !stats.isSymbolicLink() &&
+        stats.dev === action.target.device &&
+        stats.ino === action.target.inode);
+}
+async function pathExists(path, inspect) {
+    try {
+        await inspect(path);
+        return true;
+    }
+    catch (error) {
+        if (isMissing(error)) {
+            return false;
+        }
+        throw error;
+    }
+}
+export async function executeArtifactRemove(action, dependencies = {}) {
+    const inspect = dependencies.inspect ?? lstat;
+    const move = dependencies.move ?? rename;
+    const measure = dependencies.measure ?? measurePath;
+    const processProbe = dependencies.processProbe ?? findProcessesUsingPath;
+    const mountProbe = dependencies.mountProbe ?? findMountBoundaries;
+    const isolationPath = artifactIsolationPath(action, dependencies.id?.() ?? randomUUID());
+    if (await pathExists(isolationPath, inspect)) {
+        throw new ArtifactExecutionError(`refusing to overwrite existing isolation path ${isolationPath}`, "failed", isolationPath);
+    }
+    let before;
+    try {
+        before = await inspect(action.target.path);
+    }
+    catch (error) {
+        throw new ArtifactExecutionError("artifact disappeared before isolation", isMissing(error) ? "skipped-stale" : "failed", isolationPath, {
+            cause: error,
+            ...(isMissing(error) ? { diagnosticCode: "ARTIFACT_IDENTITY_CHANGED" } : {}),
+        });
+    }
+    if (!matchesIdentity(before, action)) {
+        throw new ArtifactExecutionError("artifact identity changed before isolation", "skipped-stale", isolationPath, { diagnosticCode: "ARTIFACT_IDENTITY_CHANGED" });
+    }
+    if (dependencies.authorization !== undefined &&
+        dependencies.authorization.now().getTime() >= dependencies.authorization.expiresAtMs) {
+        throw new ArtifactExecutionError("cleanup plan authorization expired before artifact isolation", "skipped-stale", isolationPath, { diagnosticCode: "PLAN_EXPIRED_DURING_APPLY" });
+    }
+    try {
+        await move(action.target.path, isolationPath);
+    }
+    catch (error) {
+        throw new ArtifactExecutionError("artifact could not be atomically isolated", isMissing(error) ? "skipped-stale" : "failed", isolationPath, {
+            cause: error,
+            ...(isMissing(error) ? { diagnosticCode: "ARTIFACT_IDENTITY_CHANGED" } : {}),
+        });
+    }
+    let isolated;
+    try {
+        isolated = await inspect(isolationPath);
+    }
+    catch (error) {
+        throw new ArtifactExecutionError(`isolated artifact cannot be inspected; recovery path: ${isolationPath}`, "partially-applied", isolationPath, { cause: error });
+    }
+    if (!matchesIdentity(isolated, action)) {
+        await rollbackBeforeRemoval("artifact identity changed during isolation", action, isolationPath, inspect, move);
+    }
+    try {
+        const measurement = await measure(isolationPath, {
+            maxEntries: dependencies.maxEntries ?? 100_000,
+        });
+        if (measurement.truncated ||
+            measurement.specialEntries > 0 ||
+            measurement.mountBoundaries > 0 ||
+            measurement.bytes !== action.target.measuredBytes ||
+            measurement.newestMtimeMs !== action.target.newestMtimeMs ||
+            measurement.fingerprint !== action.target.fingerprint) {
+            await rollbackBeforeRemoval("artifact contents changed during isolation", action, isolationPath, inspect, move);
+        }
+        const ownership = await processProbe(isolationPath);
+        if (ownership.status !== "idle") {
+            await rollbackBeforeRemoval(ownership.status === "busy"
+                ? "a process acquired the artifact during isolation"
+                : "process ownership became unknown during isolation", action, isolationPath, inspect, move);
+        }
+        const mounts = await mountProbe(isolationPath);
+        if (mounts.status !== "clear") {
+            await rollbackBeforeRemoval(mounts.status === "blocked"
+                ? "artifact contains a mount boundary during isolation"
+                : "mount boundaries became unknown during isolation", action, isolationPath, inspect, move);
+        }
+    }
+    catch (error) {
+        if (error instanceof ArtifactExecutionError) {
+            throw error;
+        }
+        await rollbackBeforeRemoval("artifact could not be revalidated after isolation", action, isolationPath, inspect, move, error);
+    }
+    const finalMounts = await mountProbe(isolationPath).catch((error) => rollbackBeforeRemoval("mount boundaries could not be rechecked before removal", action, isolationPath, inspect, move, error));
+    if (finalMounts.status !== "clear") {
+        await rollbackBeforeRemoval(finalMounts.status === "blocked"
+            ? "artifact gained a mount boundary before removal"
+            : "mount boundaries became unknown before removal", action, isolationPath, inspect, move);
+    }
+    if (dependencies.authorization !== undefined &&
+        dependencies.authorization.now().getTime() >= dependencies.authorization.expiresAtMs) {
+        await rollbackBeforeRemoval("cleanup plan authorization expired during artifact isolation", action, isolationPath, inspect, move);
+    }
+    try {
+        const finalStats = (dependencies.finalInspect ?? lstatSync)(isolationPath);
+        if (!matchesFilesystemObject(finalStats, action)) {
+            throw new ArtifactExecutionError(`isolated artifact identity changed before removal; inspect ${isolationPath}`, "partially-applied", isolationPath);
+        }
+        if (finalStats.mtimeMs !== action.target.mtimeMs) {
+            await rollbackBeforeRemoval("artifact metadata changed before removal", action, isolationPath, inspect, move);
+        }
+        if (dependencies.remove === undefined) {
+            rmSync(isolationPath, {
+                recursive: true,
+                force: false,
+                maxRetries: 3,
+                retryDelay: 100,
+            });
+        }
+        else {
+            await dependencies.remove(isolationPath);
+        }
+    }
+    catch (error) {
+        if (error instanceof ArtifactExecutionError) {
+            throw error;
+        }
+        let recoveryPath = isolationPath;
+        try {
+            if (!(await pathExists(action.target.path, inspect)) &&
+                (await pathExists(isolationPath, inspect))) {
+                await move(isolationPath, action.target.path);
+                recoveryPath = action.target.path;
+            }
+        }
+        catch {
+            // The durable journal records the last known isolation path below.
+        }
+        throw new ArtifactExecutionError(`artifact removal failed after isolation; inspect recovery path ${recoveryPath}`, "partially-applied", recoveryPath, { cause: error });
+    }
+    try {
+        if ((await pathExists(action.target.path, inspect)) ||
+            (await pathExists(isolationPath, inspect))) {
+            throw new ArtifactExecutionError(`artifact removal postcondition failed; inspect ${isolationPath}`, "partially-applied", isolationPath);
+        }
+    }
+    catch (error) {
+        if (error instanceof ArtifactExecutionError) {
+            throw error;
+        }
+        throw new ArtifactExecutionError(`artifact removal completed but postconditions could not be verified; inspect ${isolationPath}`, "partially-applied", isolationPath, { cause: error });
+    }
+    return {
+        reclaimedBytes: action.target.measuredBytes,
+        isolationPath,
+    };
+}
+async function rollbackBeforeRemoval(reason, action, isolationPath, inspect, move, cause) {
+    try {
+        if (await pathExists(action.target.path, inspect)) {
+            throw new Error("original path reappeared before rollback");
+        }
+        await move(isolationPath, action.target.path);
+    }
+    catch (error) {
+        throw new ArtifactExecutionError(`${reason} and rollback failed; recovery path: ${isolationPath}`, "partially-applied", isolationPath, { cause: error });
+    }
+    throw new ArtifactExecutionError(`${reason}; original path restored`, "rolled-back", action.target.path, cause === undefined ? undefined : { cause });
+}
+//# sourceMappingURL=artifact-executor.js.map

package/dist/core/artifact-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-executor.js","sourceRoot":"","sources":["../../src/core/artifact-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAc,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAoB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAA4B,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAA+B,MAAM,wBAAwB,CAAC;AAQ7F,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAKpC,OAAO;IACP,aAAa;IALN,IAAI,GAAG,wBAAwB,CAAC;IAElD,YACE,OAAe,EACN,OAAiC,EACjC,aAAsB,EAC/B,OAAoD;QAEpD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;uBAJf,OAAO;6BACP,aAAa;QAItB,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,CAAC;IAChD,CAAC;IAEQ,cAAc,CAAqB;CAC7C;AAuBD,MAAM,UAAU,qBAAqB,CAAC,MAA4B,EAAE,EAAU;IAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAY,EAAE,MAA4B;IACjE,OAAO,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;AAC3F,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAY,EAAE,MAA4B;IACzE,OAAO,CACL,KAAK,CAAC,WAAW,EAAE;QACnB,CAAC,KAAK,CAAC,cAAc,EAAE;QACvB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM;QAClC,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAClC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,OAAyC;IAEzC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAA4B,EAC5B,YAAY,GAAiC,EAAE;IAE/C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,KAAK,CAAC;IAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,MAAM,CAAC;IACzC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,WAAW,CAAC;IACpD,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACzE,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAClE,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC,CAAC;IAEzF,IAAI,MAAM,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,sBAAsB,CAC9B,iDAAiD,aAAa,EAAE,EAChE,QAAQ,EACR,aAAa,CACd,CAAC;IACJ,CAAC;IAED,IAAI,MAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,sBAAsB,CAC9B,uCAAuC,EACvC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAC7C,aAAa,EACb;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,sBAAsB,CAC9B,4CAA4C,EAC5C,eAAe,EACf,aAAa,EACb,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAChD,CAAC;IACJ,CAAC;IAED,IACE,YAAY,CAAC,aAAa,KAAK,SAAS;QACxC,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,YAAY,CAAC,aAAa,CAAC,WAAW,EACpF,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,8DAA8D,EAC9D,eAAe,EACf,aAAa,EACb,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,sBAAsB,CAC9B,2CAA2C,EAC3C,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAC7C,aAAa,EACb;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CACF,CAAC;IACJ,CAAC;IAED,IAAI,QAAe,CAAC;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,sBAAsB,CAC9B,yDAAyD,aAAa,EAAE,EACxE,mBAAmB,EACnB,aAAa,EACb,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,qBAAqB,CACzB,4CAA4C,EAC5C,MAAM,EACN,aAAa,EACb,OAAO,EACP,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;YAC/C,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,OAAO;SAC/C,CAAC,CAAC;QACH,IACE,WAAW,CAAC,SAAS;YACrB,WAAW,CAAC,cAAc,GAAG,CAAC;YAC9B,WAAW,CAAC,eAAe,GAAG,CAAC;YAC/B,WAAW,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa;YACjD,WAAW,CAAC,aAAa,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa;YACzD,WAAW,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EACrD,CAAC;YACD,MAAM,qBAAqB,CACzB,4CAA4C,EAC5C,MAAM,EACN,aAAa,EACb,OAAO,EACP,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,qBAAqB,CACzB,SAAS,CAAC,MAAM,KAAK,MAAM;gBACzB,CAAC,CAAC,kDAAkD;gBACpD,CAAC,CAAC,mDAAmD,EACvD,MAAM,EACN,aAAa,EACb,OAAO,EACP,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,qBAAqB,CACzB,MAAM,CAAC,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,qDAAqD;gBACvD,CAAC,CAAC,kDAAkD,EACtD,MAAM,EACN,aAAa,EACb,OAAO,EACP,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,qBAAqB,CACzB,mDAAmD,EACnD,MAAM,EACN,aAAa,EACb,OAAO,EACP,IAAI,EACJ,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAC3E,qBAAqB,CACnB,wDAAwD,EACxD,MAAM,EACN,aAAa,EACb,OAAO,EACP,IAAI,EACJ,KAAK,CACN,CACF,CAAC;IACF,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,MAAM,qBAAqB,CACzB,WAAW,CAAC,MAAM,KAAK,SAAS;YAC9B,CAAC,CAAC,iDAAiD;YACnD,CAAC,CAAC,gDAAgD,EACpD,MAAM,EACN,aAAa,EACb,OAAO,EACP,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IACE,YAAY,CAAC,aAAa,KAAK,SAAS;QACxC,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,YAAY,CAAC,aAAa,CAAC,WAAW,EACpF,CAAC;QACD,MAAM,qBAAqB,CACzB,8DAA8D,EAC9D,MAAM,EACN,aAAa,EACb,OAAO,EACP,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,CAAC,YAAY,CAAC,YAAY,IAAI,SAAS,CAAC,CAAC,aAAa,CAAC,CAAC;QAC3E,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,sBAAsB,CAC9B,8DAA8D,aAAa,EAAE,EAC7E,mBAAmB,EACnB,aAAa,CACd,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjD,MAAM,qBAAqB,CACzB,0CAA0C,EAC1C,MAAM,EACN,aAAa,EACb,OAAO,EACP,IAAI,CACL,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,aAAa,EAAE;gBACpB,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,YAAY,GAAG,aAAa,CAAC;QACjC,IAAI,CAAC;YACH,IACE,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAChD,CAAC,MAAM,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,EAC1C,CAAC;gBACD,MAAM,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9C,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,kEAAkE,YAAY,EAAE,EAChF,mBAAmB,EACnB,YAAY,EACZ,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,IACE,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC,MAAM,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,EAC1C,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,kDAAkD,aAAa,EAAE,EACjE,mBAAmB,EACnB,aAAa,CACd,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,gFAAgF,aAAa,EAAE,EAC/F,mBAAmB,EACnB,aAAa,EACb,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa;QAC3C,aAAa;KACd,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,MAAc,EACd,MAA4B,EAC5B,aAAqB,EACrB,OAAyC,EACzC,IAA4D,EAC5D,KAAe;IAEf,IAAI,CAAC;QACH,IAAI,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,sBAAsB,CAC9B,GAAG,MAAM,wCAAwC,aAAa,EAAE,EAChE,mBAAmB,EACnB,aAAa,EACb,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,sBAAsB,CAC9B,GAAG,MAAM,0BAA0B,EACnC,aAAa,EACb,MAAM,CAAC,MAAM,CAAC,IAAI,EAClB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAC5C,CAAC;AACJ,CAAC"}

package/dist/core/artifact-revalidation.d.ts

@@ -0,0 +1,22 @@
+import type { AgentRinseConfig } from "../config/schema.js";
+import type { ArtifactRemoveAction } from "../contracts/action.js";
+import type { Diagnostic } from "../contracts/diagnostic.js";
+import { measurePath, type Measurement } from "./measure.js";
+import { type MountBoundaryResult } from "./mount-boundaries.js";
+import { type ProcessOwnershipResult } from "./process-ownership.js";
+export type ArtifactRevalidationResult = {
+    status: "valid";
+    measurement: Measurement;
+} | {
+    status: "stale";
+    diagnostic: Diagnostic;
+};
+export type ArtifactRevalidationDependencies = {
+    cwd?: string;
+    now?: () => Date;
+    measure?: typeof measurePath;
+    processProbe?: (path: string) => Promise<ProcessOwnershipResult>;
+    mountProbe?: (path: string) => Promise<MountBoundaryResult>;
+};
+export declare function revalidateArtifactRemove(action: ArtifactRemoveAction, home: string, config: AgentRinseConfig, dependencies?: ArtifactRevalidationDependencies): Promise<ArtifactRevalidationResult>;
+//# sourceMappingURL=artifact-revalidation.d.ts.map

package/dist/core/artifact-revalidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-revalidation.d.ts","sourceRoot":"","sources":["../../src/core/artifact-revalidation.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAG7F,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,GAC7C;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC;AAEhD,MAAM,MAAM,gCAAgC,GAAG;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,WAAW,CAAC;IAC7B,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC7D,CAAC;AA0BF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,gBAAgB,EACxB,YAAY,GAAE,gCAAqC,GAClD,OAAO,CAAC,0BAA0B,CAAC,CAgKrC"}

package/dist/core/artifact-revalidation.js

@@ -0,0 +1,113 @@
+import { lstat, realpath } from "node:fs/promises";
+import { isAbsolute, join, resolve } from "node:path";
+import { measurePath } from "./measure.js";
+import { findMountBoundaries } from "./mount-boundaries.js";
+import { findProcessesUsingPath } from "./process-ownership.js";
+import { isPathInside } from "./safety.js";
+function stale(action, code, message) {
+    return {
+        status: "stale",
+        diagnostic: {
+            severity: "warning",
+            code,
+            message,
+            adapter: action.adapter,
+            resourceId: action.resourceId,
+        },
+    };
+}
+function isConfigured(action, config) {
+    const targetRoot = resolve(action.target.projectRoot);
+    return config.artifacts.projects.some((project) => resolve(project.root) === targetRoot && project.names.includes(action.target.name));
+}
+export async function revalidateArtifactRemove(action, home, config, dependencies = {}) {
+    const projectRoot = resolve(action.target.projectRoot);
+    const targetPath = resolve(action.target.path);
+    const expectedPath = resolve(join(projectRoot, action.target.name));
+    if (!isAbsolute(action.target.projectRoot) ||
+        !isAbsolute(action.target.path) ||
+        targetPath !== expectedPath ||
+        !isPathInside(home, projectRoot) ||
+        !isPathInside(projectRoot, targetPath) ||
+        !isConfigured(action, config)) {
+        return stale(action, "ARTIFACT_SCOPE_CHANGED", "artifact path is no longer within the exact configured cleanup scope");
+    }
+    const cwd = resolve(dependencies.cwd ?? process.cwd());
+    if (isPathInside(targetPath, cwd)) {
+        return stale(action, "ARTIFACT_OWNS_CWD", "artifact is the current working directory or one of its ancestors");
+    }
+    try {
+        const [homeStats, projectStats, targetStats] = await Promise.all([
+            lstat(resolve(home)),
+            lstat(projectRoot),
+            lstat(targetPath),
+        ]);
+        if (!homeStats.isDirectory() ||
+            homeStats.isSymbolicLink() ||
+            !projectStats.isDirectory() ||
+            projectStats.isSymbolicLink() ||
+            !targetStats.isDirectory() ||
+            targetStats.isSymbolicLink() ||
+            projectStats.dev !== targetStats.dev) {
+            return stale(action, "ARTIFACT_TYPE_CHANGED", "home, project root, and artifact must remain real directories");
+        }
+        const [homeReal, projectReal, targetReal, cwdReal] = await Promise.all([
+            realpath(resolve(home)),
+            realpath(projectRoot),
+            realpath(targetPath),
+            realpath(cwd),
+        ]);
+        if (homeReal !== resolve(home) ||
+            projectReal !== projectRoot ||
+            targetReal !== targetPath ||
+            !isPathInside(homeReal, projectReal) ||
+            targetReal !== resolve(join(projectReal, action.target.name))) {
+            return stale(action, "ARTIFACT_REALPATH_CHANGED", "artifact realpath no longer matches its planned project root");
+        }
+        if (isPathInside(targetReal, cwdReal)) {
+            return stale(action, "ARTIFACT_OWNS_CWD", "artifact is the physical current working directory or one of its ancestors");
+        }
+        if (targetStats.dev !== action.target.device ||
+            targetStats.ino !== action.target.inode ||
+            targetStats.mtimeMs !== action.target.mtimeMs) {
+            return stale(action, "ARTIFACT_IDENTITY_CHANGED", "artifact filesystem identity changed after planning");
+        }
+        const mounts = await (dependencies.mountProbe ?? findMountBoundaries)(targetPath);
+        if (mounts.status !== "clear") {
+            return stale(action, mounts.status === "blocked"
+                ? "ARTIFACT_MOUNT_BOUNDARY"
+                : "ARTIFACT_MOUNT_INSPECTION_UNKNOWN", mounts.status === "blocked"
+                ? "artifact contains a filesystem mount boundary"
+                : "filesystem mount boundaries could not be proven absent");
+        }
+        const measurement = await (dependencies.measure ?? measurePath)(targetPath, {
+            maxEntries: config.audit.maxEntries,
+        });
+        if (measurement.truncated ||
+            measurement.bytes !== action.target.measuredBytes ||
+            measurement.newestMtimeMs !== action.target.newestMtimeMs ||
+            measurement.fingerprint !== action.target.fingerprint ||
+            measurement.mountBoundaries > 0) {
+            return stale(action, "ARTIFACT_CONTENT_CHANGED", "artifact contents changed or could not be measured completely");
+        }
+        if (measurement.specialEntries > 0) {
+            return stale(action, "ARTIFACT_SPECIAL_ENTRY", "artifact contains a socket, pipe, device, or another unsupported filesystem entry");
+        }
+        const ageMs = (dependencies.now?.() ?? new Date()).getTime() - measurement.newestMtimeMs;
+        if (measurement.bytes < config.artifacts.minBytes ||
+            ageMs < config.artifacts.minAgeMinutes * 60_000) {
+            return stale(action, "ARTIFACT_POLICY_CHANGED", "artifact no longer meets the configured size and age retention policy");
+        }
+        const ownership = await (dependencies.processProbe ?? findProcessesUsingPath)(targetPath);
+        if (ownership.status !== "idle") {
+            return stale(action, ownership.status === "busy" ? "ARTIFACT_PROCESS_ACTIVE" : "ARTIFACT_PROCESS_UNKNOWN", ownership.status === "busy"
+                ? "a same-user process currently owns the artifact"
+                : "process ownership could not be proven idle");
+        }
+        return { status: "valid", measurement };
+    }
+    catch (error) {
+        return stale(action, "ARTIFACT_REVALIDATION_FAILED", error instanceof Error ? error.message : String(error));
+    }
+}
+//# sourceMappingURL=artifact-revalidation.js.map

package/dist/core/artifact-revalidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-revalidation.js","sourceRoot":"","sources":["../../src/core/artifact-revalidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKtD,OAAO,EAAE,WAAW,EAAoB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAA4B,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAA+B,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAc3C,SAAS,KAAK,CACZ,MAA4B,EAC5B,IAAY,EACZ,OAAe;IAEf,OAAO;QACL,MAAM,EAAE,OAAO;QACf,UAAU,EAAE;YACV,QAAQ,EAAE,SAAS;YACnB,IAAI;YACJ,OAAO;YACP,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAA4B,EAAE,MAAwB;IAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CACnC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAChG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAA4B,EAC5B,IAAY,EACZ,MAAwB,EACxB,YAAY,GAAqC,EAAE;IAEnD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAEpE,IACE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACtC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC/B,UAAU,KAAK,YAAY;QAC3B,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC;QAChC,CAAC,YAAY,CAAC,WAAW,EAAE,UAAU,CAAC;QACtC,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,CAAC;QACD,OAAO,KAAK,CACV,MAAM,EACN,wBAAwB,EACxB,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,IAAI,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CACV,MAAM,EACN,mBAAmB,EACnB,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpB,KAAK,CAAC,WAAW,CAAC;YAClB,KAAK,CAAC,UAAU,CAAC;SAClB,CAAC,CAAC;QACH,IACE,CAAC,SAAS,CAAC,WAAW,EAAE;YACxB,SAAS,CAAC,cAAc,EAAE;YAC1B,CAAC,YAAY,CAAC,WAAW,EAAE;YAC3B,YAAY,CAAC,cAAc,EAAE;YAC7B,CAAC,WAAW,CAAC,WAAW,EAAE;YAC1B,WAAW,CAAC,cAAc,EAAE;YAC5B,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,GAAG,EACpC,CAAC;YACD,OAAO,KAAK,CACV,MAAM,EACN,uBAAuB,EACvB,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvB,QAAQ,CAAC,WAAW,CAAC;YACrB,QAAQ,CAAC,UAAU,CAAC;YACpB,QAAQ,CAAC,GAAG,CAAC;SACd,CAAC,CAAC;QACH,IACE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC;YAC1B,WAAW,KAAK,WAAW;YAC3B,UAAU,KAAK,UAAU;YACzB,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC;YACpC,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAC7D,CAAC;YACD,OAAO,KAAK,CACV,MAAM,EACN,2BAA2B,EAC3B,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CACV,MAAM,EACN,mBAAmB,EACnB,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,IACE,WAAW,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM;YACxC,WAAW,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK;YACvC,WAAW,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAC7C,CAAC;YACD,OAAO,KAAK,CACV,MAAM,EACN,2BAA2B,EAC3B,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC,UAAU,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,KAAK,CACV,MAAM,EACN,MAAM,CAAC,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,yBAAyB;gBAC3B,CAAC,CAAC,mCAAmC,EACvC,MAAM,CAAC,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,wDAAwD,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,UAAU,EAAE;YAC1E,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;SACpC,CAAC,CAAC;QACH,IACE,WAAW,CAAC,SAAS;YACrB,WAAW,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa;YACjD,WAAW,CAAC,aAAa,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa;YACzD,WAAW,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW;YACrD,WAAW,CAAC,eAAe,GAAG,CAAC,EAC/B,CAAC;YACD,OAAO,KAAK,CACV,MAAM,EACN,0BAA0B,EAC1B,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CACV,MAAM,EACN,wBAAwB,EACxB,mFAAmF,CACpF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,aAAa,CAAC;QACzF,IACE,WAAW,CAAC,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ;YAC7C,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,aAAa,GAAG,MAAM,EAC/C,CAAC;YACD,OAAO,KAAK,CACV,MAAM,EACN,yBAAyB,EACzB,uEAAuE,CACxE,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,IAAI,sBAAsB,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1F,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,KAAK,CACV,MAAM,EACN,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,0BAA0B,EACpF,SAAS,CAAC,MAAM,KAAK,MAAM;gBACzB,CAAC,CAAC,iDAAiD;gBACnD,CAAC,CAAC,4CAA4C,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,CACV,MAAM,EACN,8BAA8B,EAC9B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/audit.d.ts

@@ -0,0 +1,12 @@
+import type { AgentRinseConfig } from "../config/schema.js";
+import type { AuditAdapter } from "../contracts/adapter.js";
+import { type AuditReport } from "../contracts/report.js";
+export type RunAuditOptions = {
+    home: string;
+    config: AgentRinseConfig;
+    adapters: AuditAdapter[];
+    now?: () => Date;
+    signal?: AbortSignal;
+};
+export declare function runAudit(options: RunAuditOptions): Promise<AuditReport>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/core/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/core/audit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAgB,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAG7E,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAwC7E"}

package/dist/core/audit.js

@@ -0,0 +1,41 @@
+import { randomUUID } from "node:crypto";
+import { auditReportSchema } from "../contracts/report.js";
+import { assertAuditRoot } from "./safety.js";
+export async function runAudit(options) {
+    const clock = options.now ?? (() => new Date());
+    const startedAt = clock();
+    const home = await assertAuditRoot(options.home);
+    const context = {
+        home,
+        now: startedAt,
+        auditId: randomUUID(),
+        ...(options.signal === undefined ? {} : { signal: options.signal }),
+    };
+    const probes = [];
+    const findings = [];
+    const diagnostics = [];
+    for (const adapter of options.adapters) {
+        options.signal?.throwIfAborted();
+        const probe = await adapter.probe(context);
+        probes.push(probe);
+        diagnostics.push(...probe.diagnostics);
+        const collection = await adapter.collect(context, probe);
+        diagnostics.push(...collection.diagnostics);
+        for (const resource of collection.resources) {
+            findings.push(await adapter.classify(context, resource));
+        }
+    }
+    probes.sort((left, right) => left.adapter.localeCompare(right.adapter));
+    findings.sort((left, right) => left.resource.id.localeCompare(right.resource.id));
+    return auditReportSchema.parse({
+        schemaVersion: 1,
+        auditId: context.auditId,
+        startedAt: startedAt.toISOString(),
+        completedAt: clock().toISOString(),
+        home,
+        probes,
+        findings,
+        diagnostics,
+    });
+}
+//# sourceMappingURL=audit.js.map

package/dist/core/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/core/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,iBAAiB,EAAoB,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAU9C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,OAAO,GAAiB;QAC5B,IAAI;QACJ,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,UAAU,EAAE;QACrB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,MAAM,WAAW,GAAG,EAAE,CAAC;IAEvB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzD,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QAC5C,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAElF,OAAO,iBAAiB,CAAC,KAAK,CAAC;QAC7B,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;QAClC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE;QAClC,IAAI;QACJ,MAAM;QACN,QAAQ;QACR,WAAW;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/core/digest.d.ts

@@ -0,0 +1,7 @@
+export type JsonValue = null | boolean | number | string | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export declare function canonicalJson(value: JsonValue): string;
+export declare function sha256(value: JsonValue | string): string;
+export declare function sha256Json(value: unknown): string;
+//# sourceMappingURL=digest.d.ts.map

package/dist/core/digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.d.ts","sourceRoot":"","sources":["../../src/core/digest.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GACjB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAatD;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,CAGxD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD"}

package/dist/core/digest.js

@@ -0,0 +1,21 @@
+import { createHash } from "node:crypto";
+export function canonicalJson(value) {
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map((item) => canonicalJson(item)).join(",")}]`;
+    }
+    const entries = Object.entries(value).sort(([left], [right]) => left.localeCompare(right));
+    return `{${entries
+        .map(([key, item]) => `${JSON.stringify(key)}:${canonicalJson(item)}`)
+        .join(",")}}`;
+}
+export function sha256(value) {
+    const input = typeof value === "string" ? value : canonicalJson(value);
+    return createHash("sha256").update(input).digest("hex");
+}
+export function sha256Json(value) {
+    return sha256(JSON.parse(JSON.stringify(value)));
+}
+//# sourceMappingURL=digest.js.map

package/dist/core/digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../src/core/digest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUzC,MAAM,UAAU,aAAa,CAAC,KAAgB;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3F,OAAO,IAAI,OAAO;SACf,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;SACrE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAyB;IAC9C,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAc,CAAC,CAAC;AAChE,CAAC"}

package/dist/core/measure.d.ts

@@ -0,0 +1,16 @@
+export type Measurement = {
+    bytes: number;
+    entries: number;
+    symlinksSkipped: number;
+    specialEntries: number;
+    truncated: boolean;
+    newestMtimeMs: number;
+    fingerprint: string;
+    mountBoundaries: number;
+};
+export type MeasureOptions = {
+    maxEntries: number;
+    signal?: AbortSignal;
+};
+export declare function measurePath(root: string, options: MeasureOptions): Promise<Measurement>;
+//# sourceMappingURL=measure.d.ts.map

package/dist/core/measure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"measure.d.ts","sourceRoot":"","sources":["../../src/core/measure.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CAqF7F"}

package/dist/core/measure.js

@@ -0,0 +1,79 @@
+import { createHash } from "node:crypto";
+import { lstat, opendir, readlink } from "node:fs/promises";
+import { join, relative } from "node:path";
+export async function measurePath(root, options) {
+    const result = {
+        bytes: 0,
+        entries: 0,
+        symlinksSkipped: 0,
+        specialEntries: 0,
+        truncated: false,
+        newestMtimeMs: 0,
+        fingerprint: "",
+        mountBoundaries: 0,
+    };
+    const pending = [root];
+    const fingerprint = createHash("sha256");
+    let rootDevice;
+    while (pending.length > 0) {
+        options.signal?.throwIfAborted();
+        const path = pending.pop();
+        if (path === undefined) {
+            break;
+        }
+        if (result.entries >= options.maxEntries) {
+            result.truncated = true;
+            break;
+        }
+        const stats = await lstat(path);
+        rootDevice ??= stats.dev;
+        result.entries += 1;
+        result.newestMtimeMs = Math.max(result.newestMtimeMs, stats.mtimeMs);
+        const identity = {
+            path: relative(root, path),
+            device: stats.dev,
+            inode: stats.ino,
+            mode: stats.mode,
+            size: stats.size,
+            mtimeMs: stats.mtimeMs,
+            ...(path === root ? {} : { ctimeMs: stats.ctimeMs }),
+            type: stats.isSymbolicLink()
+                ? "symlink"
+                : stats.isDirectory()
+                    ? "directory"
+                    : stats.isFile()
+                        ? "file"
+                        : "special",
+            ...(stats.isSymbolicLink() ? { link: await readlink(path) } : {}),
+        };
+        fingerprint.update(`${JSON.stringify(identity)}\n`);
+        if (path !== root && stats.dev !== rootDevice) {
+            result.mountBoundaries += 1;
+            continue;
+        }
+        if (stats.isSymbolicLink()) {
+            result.symlinksSkipped += 1;
+            continue;
+        }
+        if (stats.isFile()) {
+            result.bytes += stats.size;
+            continue;
+        }
+        if (!stats.isDirectory()) {
+            result.specialEntries += 1;
+            continue;
+        }
+        const directory = await opendir(path);
+        const names = [];
+        for await (const entry of directory) {
+            names.push(entry.name);
+        }
+        names.sort((left, right) => right.localeCompare(left));
+        for (const name of names) {
+            pending.push(join(path, name));
+        }
+    }
+    result.fingerprint = fingerprint.digest("hex");
+    return result;
+}
+//# sourceMappingURL=measure.js.map

package/dist/core/measure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"measure.js","sourceRoot":"","sources":["../../src/core/measure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAkB3C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAuB;IACrE,MAAM,MAAM,GAAgB;QAC1B,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;QACV,eAAe,EAAE,CAAC;QAClB,cAAc,EAAE,CAAC;QACjB,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,CAAC;KACnB,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,UAA8B,CAAC;IAEnC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM;QACR,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACzC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,MAAM;QACR,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,UAAU,KAAK,KAAK,CAAC,GAAG,CAAC;QACzB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACpB,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;YAC1B,MAAM,EAAE,KAAK,CAAC,GAAG;YACjB,KAAK,EAAE,KAAK,CAAC,GAAG;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACpD,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE;gBAC1B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;oBACnB,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE;wBACd,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,SAAS;YACjB,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;QACF,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEpD,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9C,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC"}