approval-md 0.0.1 → 0.2.0

package/dist/src/channels/render-queue.js

@@ -0,0 +1,564 @@
+/**
+ * `.approval/QUEUE.md` — the queue projection of SPEC.md §9.1.
+ *
+ * > **The queue** (`.approval/QUEUE.md`): a rendered, read-only markdown view of
+ * > pending requests (task, actions, declared effects, cost, TTL countdown) plus
+ * > the sampled-audit backlog. Regenerated on every relevant event. This is the
+ * > screenshot; it is never the truth.
+ *
+ * Three properties are the whole point of this module.
+ *
+ * **It is a pure function of (verified log, policy, `now`).** No ambient clock,
+ * no locale, no hostname, no environment, no random temp name in the bytes. The
+ * evaluation instant is a parameter — the same discipline `channels/tagging.ts`
+ * already keeps — so an identical log rendered at an identical `now` produces
+ * identical bytes, and a rendering can be reproduced later from the log alone.
+ * Every number here is formatted by hand with integer arithmetic for the same
+ * reason: `toLocaleString` would make the output depend on the machine.
+ *
+ * **It re-derives nothing.** Entries come from
+ * {@link buildPendingQueue}, which is the one place a {@link ChannelRequest} is
+ * built. So the class, the autonomy, the provenance, the budgets, the
+ * attestation and the TTL a reader sees in QUEUE.md are the same answers the
+ * gate itself would give — not a second implementation that could drift. This
+ * module's entire job is text.
+ *
+ * **It never writes the log.** {@link writeQueue} writes exactly one file, and
+ * it is `QUEUE.md`.
+ *
+ * ## Why this lives in `src/channels/`, not `src/core/`
+ *
+ * It consumes `channels/contract.ts`'s tagged requests through
+ * `channels/tagging.ts`. Putting it in `core/` would make core import channels,
+ * inverting the dependency the codebase is built on: core decides, channels
+ * display, and this file is display — a read-only markdown surface that collects
+ * no gesture and holds no authority. It sits beside `tagging.ts` and `batch.ts`
+ * because it is the third consumer of the same tagged data, and it deliberately
+ * does not implement {@link ../channels/contract.js Channel}: QUEUE.md notifies
+ * nobody and answers nothing.
+ *
+ * ## B3: computed vs claimed
+ *
+ * SPEC.md §9: "Every displayed field is one of two kinds and MUST be visibly
+ * distinguished". Here that is structural, not typographic: computed fields are
+ * rendered as `computed · <source>` lines under **Computed by the runtime**, and
+ * claimed fields under a separate **Claimed by `<actor>` (not verified)** block
+ * that names its author. A reader skimming the file cannot mistake an agent's
+ * cost estimate for a budget verdict, because they are not in the same list.
+ *
+ * ## The full payload is NOT in this file — flagged for human review
+ *
+ * SPEC.md §10.4 requires channels to present the full payload before collecting
+ * a decision. QUEUE.md collects no decision: it is a read-only summary, and the
+ * decision surfaces are the channels (`approval grant`, the web page, Telegram),
+ * each of which presents the bytes at decision time. Inlining payloads here
+ * would put every pending payload — recipients, bodies, argv — into a file that
+ * is regenerated on every event, checked into nothing, and read by anyone with
+ * the working directory, with no gesture ever collected from it. So the queue
+ * carries the **binding** (`payload_hash`) and points at the channels for the
+ * bytes, and the rendered header says exactly that to the human reading it.
+ *
+ * Which is a different statement from "the renderer cannot see the payload".
+ * Since APRV-28 it can: `channels/tagging.ts` reads the payload store beside the
+ * log (SPEC.md §6.2's "the payload itself is stored or referenced by the request
+ * so channels can display it"), so a request whose bytes were supplied at intake
+ * is *summarizable* here and appears in the pending section — which is why this
+ * file's pending count now agrees with the queue every channel shows, where
+ * before it silently disagreed. The bytes still do not appear in this file.
+ * Requests whose material nobody holds remain in {@link QueueRender.skipped},
+ * rendered in their own section with the reason, never silently dropped.
+ */
+import { closeSync, mkdirSync, openSync, renameSync, unlinkSync, writeSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { MAX_PENDING, pendingCount } from "../core/intake-limits.js";
+import { loadPolicy, } from "../core/policy-load.js";
+import { payloadOf, readVerifiedRecords } from "../core/state.js";
+import { buildPendingQueue, } from "./tagging.js";
+/**
+ * The policy load options, resolved exactly as `channels/tagging.ts` resolves
+ * them, so the ceilings this file renders come from the same file the entries
+ * above them were tagged against.
+ */
+function loadOptionsOf(options) {
+    const policy = options.policy ?? {};
+    const load = {};
+    if (policy.file !== undefined)
+        load.file = policy.file;
+    else
+        load.dir = policy.dir ?? process.cwd();
+    if (options.schemaDir !== undefined)
+        load.schemaDir = options.schemaDir;
+    return load;
+}
+/**
+ * Why the renderer refused.
+ *
+ * The three log codes are `channels/tagging.ts`'s and `core/state.ts`'s,
+ * verbatim, so a corrupt log is reported as corruption by every layer with one
+ * vocabulary. `write-failed` is {@link writeQueue}'s alone — the renderer itself
+ * cannot fail for any other reason, because it is a pure function.
+ */
+export const RENDER_QUEUE_REFUSAL_CODES = [
+    "log-unreadable",
+    "log-torn-tail",
+    "log-corrupt",
+    "write-failed",
+];
+function refuse(code, message) {
+    return { ok: false, code, message };
+}
+// ---------------------------------------------------------------------------
+// Deterministic formatting primitives
+// ---------------------------------------------------------------------------
+/**
+ * Render a value inside a markdown code span, with anything that could break
+ * the line or the span neutralized.
+ *
+ * Claimed strings are attacker-controlled in the threat model that matters
+ * (SPEC.md §11: the party under oversight authors them), so a summary
+ * containing a newline, a backtick, or a markdown heading must not be able to
+ * restructure the file it is rendered into — a claimed field that could forge a
+ * `computed ·` line would defeat B3 by typography alone.
+ */
+function span(value) {
+    // Replacements are written as escapes so the substitutes themselves (U+23CE
+    // RETURN SYMBOL, U+FFFD REPLACEMENT CHARACTER, U+02CB MODIFIER GRAVE ACCENT)
+    // are unambiguous in a diff: each is a visible stand-in, never the character
+    // it replaces.
+    const flat = value
+        .replace(/\r\n?|\n/gu, "\u23ce ")
+        .replace(/\p{Cc}/gu, "\ufffd")
+        .replace(/`/gu, "\u02cb");
+    return flat.length === 0 ? "``" : `\`${flat}\``;
+}
+/** `null` renders as an explicit absence, never as an empty cell. */
+function optionalSpan(value) {
+    return value === null ? "_none_" : span(value);
+}
+/**
+ * A number, formatted without a locale.
+ *
+ * `JSON.stringify` of a finite number is the ECMAScript number-to-string
+ * algorithm: locale-independent, platform-independent, and the same function
+ * the log's canonical serialization already relies on.
+ */
+function num(value) {
+    return Number.isFinite(value) ? JSON.stringify(value) : "NaN";
+}
+/**
+ * A TTL remaining, as a countdown.
+ *
+ * Integer arithmetic only, largest non-zero unit first, seconds always present
+ * so the string never reads as more precise than it is. `0ms` is the boundary:
+ * a request whose TTL has fully elapsed is no longer `requested` and therefore
+ * is not in this file at all — see {@link renderQueue}'s section on expiry.
+ */
+function countdown(ms) {
+    if (ms === null)
+        return "_no TTL_ (the policy declares no `defaults.approval_ttl`)";
+    const total = Math.max(0, Math.floor(ms / 1000));
+    const hours = Math.floor(total / 3600);
+    const minutes = Math.floor((total % 3600) / 60);
+    const seconds = total % 60;
+    const parts = [];
+    if (hours > 0)
+        parts.push(`${String(hours)}h`);
+    if (hours > 0 || minutes > 0)
+        parts.push(`${String(minutes)}m`);
+    parts.push(`${String(seconds)}s`);
+    return `${parts.join(" ")} left`;
+}
+/**
+ * One budget verdict, in the evaluator's own vocabulary.
+ *
+ * `remaining` is headroom *after* admitting this action, exactly as
+ * `core/budgets.ts` defines it, so a failing verdict shows how far over the line
+ * the action is rather than a reassuring zero.
+ */
+/*
+ * The three figures are printed exactly as the evaluator reports them: since
+ * APRV-121 they are decimal strings computed in integer micro-USD, so there is
+ * no number here to reformat and no locale that could change what a human sees.
+ */
+function budgetLine(verdict) {
+    const note = verdict.note === undefined ? "" : ` — ${span(verdict.note)}`;
+    return `${verdict.pass ? "pass" : "**FAIL**"} ${span(verdict.limit)} (${span(verdict.scope)}, ${span(verdict.window)}): consumed ${verdict.consumed}, requested ${verdict.requested}, remaining ${verdict.remaining}${note}`;
+}
+// ---------------------------------------------------------------------------
+// The tagged-field renderers (B3)
+// ---------------------------------------------------------------------------
+/** One computed line. `source` is always shown: the derivation is the warrant. */
+function computedLine(label, field, rendered) {
+    const source = field.kind === "computed" ? field.source : "unknown";
+    return `- **${label}** — computed · ${source}: ${rendered}`;
+}
+/** One claimed line. The author is always shown: the claim is theirs, not ours. */
+function claimedLine(label, field, rendered) {
+    const author = field.kind === "claimed" ? field.author : "unknown";
+    return `- **${label}** — claimed by ${span(author)}: ${rendered}`;
+}
+/**
+ * One pending request, as a markdown section.
+ *
+ * The order is deliberate: what the runtime computed first, what the agent
+ * claimed second, under its own heading. B3 is satisfied structurally — the two
+ * kinds are never adjacent lines in one list — and the claimed heading repeats
+ * the word "unverified" because a heading is what a skimming reader actually
+ * reads.
+ */
+function renderRequest(index, request) {
+    const lines = [];
+    const claimedAuthor = request.summary.kind === "claimed" ? request.summary.author : "unknown";
+    lines.push(`### ${String(index)}. ${span(request.action_key.value)}`);
+    lines.push("");
+    lines.push("**Computed by the runtime** (derived from the verified log, the attested policy, and the payload binding):");
+    lines.push("");
+    lines.push(computedLine("action key", request.action_key, span(request.action_key.value)));
+    lines.push(computedLine("task", request.task, optionalSpan(request.task.value)));
+    lines.push(computedLine("class", request.class, span(request.class.value)));
+    lines.push(computedLine("autonomy", request.autonomy, `${span(request.autonomy.value)} (provenance ${span(request.provenance.value)})`));
+    lines.push(computedLine("state", request.state, span(request.state.value)));
+    lines.push(computedLine("requested at", request.requested_ts, span(request.requested_ts.value)));
+    // APRV-106: the age and the deadline an answer has to beat, in one line.
+    lines.push(computedLine("waiting", request.waiting, request.waiting.value));
+    lines.push(computedLine("TTL remaining", request.ttl_remaining_ms, countdown(request.ttl_remaining_ms.value)));
+    lines.push(computedLine("payload hash", request.payload_hash, span(request.payload_hash.value)));
+    lines.push(computedLine("payload bytes", request.fullPayload, request.fullPayload.value === null
+        ? "_not held by this renderer_ — the channels present the bytes at decision time"
+        : "_not shown here_ — this file is a summary; the channels present the bytes at decision time"));
+    lines.push(computedLine("attestation", request.attestation, `${span(request.attestation.value.status)}`));
+    const verdicts = request.budgets.value;
+    lines.push(computedLine("budgets", request.budgets, verdicts.length === 0 ? "_no budgets in force_" : "").trimEnd());
+    for (const verdict of verdicts)
+        lines.push(`  - ${budgetLine(verdict)}`);
+    lines.push(computedLine("chain position", request.chain, `seq ${String(request.chain.value.seq)} ${span(request.chain.value.hash)} (head seq ${String(request.chain.value.head_seq)})`));
+    lines.push("");
+    lines.push(`**Claimed by ${span(claimedAuthor)} — UNVERIFIED** (the requesting party authored these; they may raise scrutiny, never lower it):`);
+    lines.push("");
+    lines.push(claimedLine("summary", request.summary, optionalSpan(request.summary.value)));
+    lines.push(claimedLine("est. cost (USD)", request.est_cost_usd, num(request.est_cost_usd.value)));
+    if (request.rationale !== undefined) {
+        lines.push(claimedLine("rationale", request.rationale, span(request.rationale.value)));
+    }
+    if (request.confidence !== undefined) {
+        lines.push(claimedLine("confidence", request.confidence, num(request.confidence.value)));
+    }
+    lines.push("");
+    return lines;
+}
+/**
+ * `audit.sampled` events with no later `audit.reviewed` for the same subject.
+ *
+ * Matching is on `action_key` when both records carry one, and on `task`
+ * otherwise — the two identifiers the event schema gives these types. A review
+ * must come *after* its sample in the chain: an earlier `audit.reviewed` is a
+ * review of an earlier sample, and treating it as covering this one would
+ * silently empty the backlog, which is exactly the failure a sampled-audit
+ * backlog exists to prevent.
+ *
+ * The sampler that fills this section is `core/audit.ts`, driven by the daemon
+ * (APRV-40). It runs only when the operator's HMAC secret is configured, so an
+ * empty backlog is genuinely ambiguous — everything reviewed, or nothing
+ * sampled — and the empty state is rendered as an honest statement of that
+ * ambiguity, never as "all reviewed". `approval audit list` resolves it.
+ */
+function auditBacklog(records) {
+    const subjectOf = (record) => {
+        const payload = payloadOf(record);
+        const key = typeof record.action_key === "string"
+            ? record.action_key
+            : typeof payload["action_key"] === "string"
+                ? payload["action_key"]
+                : null;
+        const task = typeof record.task === "string"
+            ? record.task
+            : typeof payload["task"] === "string"
+                ? payload["task"]
+                : null;
+        return { key, task };
+    };
+    const backlog = [];
+    for (const record of records) {
+        if (record.event !== "audit.sampled")
+            continue;
+        const subject = subjectOf(record);
+        const reviewed = records.some((other) => {
+            if (other.event !== "audit.reviewed" || other.seq <= record.seq)
+                return false;
+            const theirs = subjectOf(other);
+            if (subject.key !== null && theirs.key !== null)
+                return subject.key === theirs.key;
+            if (subject.task !== null && theirs.task !== null)
+                return subject.task === theirs.task;
+            return false;
+        });
+        if (reviewed)
+            continue;
+        backlog.push({
+            seq: record.seq,
+            ts: record.ts,
+            actor: record.actor,
+            task: subject.task,
+            actionKey: subject.key,
+        });
+    }
+    return backlog;
+}
+// ---------------------------------------------------------------------------
+// renderQueue
+// ---------------------------------------------------------------------------
+const HEADER = [
+    "<!--",
+    "  GENERATED FILE — DO NOT EDIT.",
+    "",
+    "  This is `.approval/QUEUE.md`, the queue projection of SPEC.md §9.1: a",
+    "  rendered, READ-ONLY markdown view of pending requests plus the sampled-audit",
+    "  backlog, regenerated WHOLE on every relevant event. \"This is the screenshot;",
+    "  it is never the truth.\"",
+    "",
+    "  The truth is `.approval/log/events.jsonl`, the append-only hash-chained event",
+    "  log. Editing this file changes nothing, authorizes nothing, and will be",
+    "  overwritten by the next `approval render`. To approve or reject something,",
+    "  use a decision surface: `approval grant|reject <action-key>`, or a channel.",
+    "-->",
+].join("\n");
+function headerSection(now, head) {
+    return [
+        HEADER,
+        "",
+        "# Approval queue (generated — read only)",
+        "",
+        `> **Do not edit this file.** It is a projection of the append-only log, regenerated whole by \`approval render\`. The log is the truth (SPEC.md §9.1); this is the screenshot.`,
+        "",
+        `- **Evaluated at** (the \`now\` handed to the renderer, not an ambient clock): ${span(now)}`,
+        `- **Derived from log head**: ${head === null ? "_empty log_" : `seq ${String(head.seq)} ${span(head.hash)}`}`,
+        "- **Full payloads are not in this file.** The queue is a summary surface and collects no decision. It carries the content binding (`payload_hash`) only; the full payload is presented by the decision channels before a decision is collected, as SPEC.md §10.4 requires.",
+        "",
+    ];
+}
+/**
+ * Render the queue.
+ *
+ * Deterministic in the strong sense: for a fixed log, policy and `now`, the
+ * returned string is byte-identical across processes and machines. Nothing here
+ * reads a clock, a locale, an environment variable, or a hostname.
+ *
+ * Expiry is not this module's judgment: `channels/tagging.ts` derives state
+ * through `core/state.ts` with the policy TTL and the same `now`, so a request
+ * whose TTL has elapsed is `expired`, not `requested`, and never reaches the
+ * pending section. The countdown a reader sees therefore never reaches zero on
+ * a listed entry.
+ *
+ * The verified read happens twice — once here for the head and the audit
+ * records, once inside {@link buildPendingQueue} — which is a deliberate trade:
+ * a second walk of the chain costs a few milliseconds on a rendering path, and
+ * the alternative is widening the tagger's public result to carry records it
+ * has no other reason to expose.
+ */
+export function renderQueue(logPath, options, now) {
+    const read = readVerifiedRecords(logPath, options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir });
+    if (!read.ok)
+        return refuse(read.code, read.message);
+    const queue = buildPendingQueue(logPath, options, now);
+    if (!queue.ok) {
+        // Only the three log codes can reach here: every other tagger refusal is
+        // per-request and lands in `skipped`.
+        const code = isLogCode(queue.code)
+            ? queue.code
+            : "log-corrupt";
+        return refuse(code, queue.message);
+    }
+    const backlog = auditBacklog(read.records);
+    const lines = [...headerSection(now, read.head)];
+    lines.push("## Pending requests awaiting a human decision");
+    lines.push("");
+    if (queue.requests.length === 0) {
+        lines.push("_Nothing is awaiting a decision._ No action key has a live `approval.requested` at this instant.");
+        lines.push("");
+    }
+    else {
+        lines.push(`${String(queue.requests.length)} request(s), oldest first (log order).`);
+        lines.push("");
+        for (const [index, request] of queue.requests.entries()) {
+            lines.push(...renderRequest(index + 1, request));
+        }
+    }
+    lines.push(...renderIntakeLimits(read.records, loadPolicy(loadOptionsOf(options)), now));
+    lines.push(...renderSkipped(queue.skipped));
+    lines.push(...renderAudit(backlog));
+    lines.push(...footer(read.head, logPath));
+    return {
+        ok: true,
+        markdown: `${lines.join("\n")}\n`,
+        head: read.head,
+        pending: queue.requests.length,
+        skipped: queue.skipped.length,
+        auditBacklog: backlog.length,
+    };
+}
+/**
+ * Is this tagger refusal one of the whole-log codes?
+ *
+ * The tagger's other codes are per-request and land in `skipped`; only these
+ * three can refuse an entire render, and they are passed through verbatim so a
+ * corrupt log is reported as corruption by every layer with one vocabulary.
+ */
+function isLogCode(code) {
+    return code === "log-unreadable" || code === "log-torn-tail" || code === "log-corrupt";
+}
+function renderSkipped(skipped) {
+    const lines = ["## Live requests this render could not summarize", ""];
+    if (skipped.length === 0) {
+        lines.push("_None._ Every live request above is rendered in full.");
+        lines.push("");
+        return lines;
+    }
+    lines.push("These action keys have a live `approval.requested` that the renderer could not tag. They are listed rather than dropped: a request missing from a queue is a request nobody will answer.");
+    lines.push("");
+    for (const entry of skipped) {
+        lines.push(`- ${span(entry.action_key)} — \`${entry.code}\`: ${span(entry.message)}`);
+    }
+    lines.push("");
+    return lines;
+}
+/**
+ * The request-volume ceilings in force, and how close the queue is to them
+ * (SPEC.md §5.2, APRV-173).
+ *
+ * Rendered only when the policy declares at least one `max_pending`, so a
+ * policy that declares none produces exactly the file it produced before this
+ * section existed. That is not cosmetic: a heading reading "no ceiling is
+ * declared" on every queue in the world would train a reader to skip the one
+ * place this file says a request was turned away.
+ *
+ * Why it belongs here at all. A refused intake appends nothing (see
+ * `core/gate.ts`), so a `queue-full` refusal is invisible in the log by design.
+ * What IS visible is the standing condition that produced it, and this is where
+ * a human reads it: the queue is at its ceiling, so requests are being refused
+ * until it drains. Every figure is computed by `core/intake-limits.ts` — the
+ * same function the gate refuses from, never a second count.
+ *
+ * The rate limit has no row. It is per origin over a rolling hour, so its
+ * pressure is a fact about a requester rather than about this queue, and a
+ * number here would be a number for whichever origin the renderer happened to
+ * pick.
+ */
+function renderIntakeLimits(records, load, now) {
+    if (!load.ok)
+        return [];
+    const rows = [];
+    const classes = load.policy.classes ?? {};
+    const ttlMs = load.durations.approvalTtlMs;
+    for (const pattern of Object.keys(classes).sort()) {
+        const declared = classes[pattern]?.limits?.[MAX_PENDING];
+        if (declared === undefined)
+            continue;
+        rows.push(row(MAX_PENDING, pattern, pendingCount(records, pattern, now, ttlMs), declared));
+    }
+    const budgets = load.policy.budgets ?? {};
+    for (const scopeName of Object.keys(budgets).sort()) {
+        const declared = budgets[scopeName]?.[MAX_PENDING];
+        if (declared === undefined)
+            continue;
+        rows.push(row(`${scopeName}.${MAX_PENDING}`, "every class", pendingCount(records, null, now, ttlMs), declared));
+    }
+    if (rows.length === 0)
+        return [];
+    return [
+        "## Request-volume ceilings",
+        "",
+        "SPEC.md §5.2 caps how many requests may await a decision at once. A request that would cross a ceiling is refused `queue-full` at intake, and a refused request appears nowhere: nothing is appended for it, here or in the log. These figures are computed by the same code the gate refuses from.",
+        "",
+        "| ceiling | scope | pending | limit | headroom |",
+        "|---|---|---|---|---|",
+        ...rows,
+        "",
+    ];
+}
+/** One ceiling's row: computed counts, never a claimed one. */
+function row(limit, scope, pending, declared) {
+    const headroom = declared - pending;
+    const state = headroom > 0
+        ? `${num(headroom)} more`
+        : "**full** — intake is refusing `queue-full` until it drains";
+    return `| ${span(limit)} | ${span(scope)} | ${num(pending)} | ${num(declared)} | ${state} |`;
+}
+function renderAudit(backlog) {
+    const lines = ["## Sampled-audit backlog", ""];
+    if (backlog.length === 0) {
+        lines.push("_Empty._ No `audit.sampled` event in this log is waiting for an `audit.reviewed`. Note what this does and does not say. The daemon samples supervised executions (SPEC.md §5.2) only when the operator's HMAC secret is configured, so an empty backlog means either **everything sampled has been reviewed** or **nothing was sampled**, and this file cannot tell you which. Run `approval audit list` for the answer: it reports whether sampling is running, and why not when it is not.");
+        lines.push("");
+        return lines;
+    }
+    lines.push(`${String(backlog.length)} sampled action(s) with no later \`audit.reviewed\`, oldest first.`);
+    lines.push("");
+    for (const item of backlog) {
+        lines.push(`- seq ${String(item.seq)} — computed · log: sampled at ${span(item.ts)} by ${span(item.actor)}, task ${optionalSpan(item.task)}, action ${optionalSpan(item.actionKey)}`);
+    }
+    lines.push("");
+    return lines;
+}
+function footer(head, logPath) {
+    return [
+        "---",
+        "",
+        `Rendered from ${span(logPath)} at log head ${head === null ? "_empty log_" : `seq ${String(head.seq)}, hash ${span(head.hash)}`}. Every fact above is reproducible from that log: re-running \`approval render\` against the same head with the same evaluation instant produces this file byte for byte. If this file disagrees with the log, the log is right.`,
+    ];
+}
+// ---------------------------------------------------------------------------
+// writeQueue
+// ---------------------------------------------------------------------------
+/** Distinguishes concurrent renders' temp files within one process. */
+let tempCounter = 0;
+/**
+ * Render and write `.approval/QUEUE.md` atomically.
+ *
+ * Temp file in the destination directory, `fsync`, then `rename` — a reader
+ * either sees the previous complete rendering or the new one, never a half-
+ * written queue. The temp name is the only non-deterministic byte anywhere in
+ * this module and it never reaches the file's contents; it is removed on every
+ * failure path, so a failed render leaves no debris beside the queue.
+ *
+ * Writes this one file and nothing else. In particular it does not touch the
+ * log: the log is opened read-only by the verified read and is not reopened
+ * here.
+ */
+export function writeQueue(logPath, queuePath, options, now) {
+    const rendered = renderQueue(logPath, options, now);
+    if (!rendered.ok)
+        return rendered;
+    const directory = dirname(queuePath);
+    tempCounter += 1;
+    const temp = join(directory, `.${queuePath.split(/[\\/]/u).pop() ?? "QUEUE.md"}.tmp-${String(process.pid)}-${String(tempCounter)}`);
+    const bytes = Buffer.byteLength(rendered.markdown, "utf8");
+    try {
+        mkdirSync(directory, { recursive: true });
+        const handle = openSync(temp, "wx");
+        try {
+            writeSync(handle, rendered.markdown, 0, "utf8");
+        }
+        finally {
+            closeSync(handle);
+        }
+        renameSync(temp, queuePath);
+    }
+    catch (cause) {
+        try {
+            unlinkSync(temp);
+        }
+        catch {
+            // The temp file may never have been created; nothing to clean up.
+        }
+        return refuse("write-failed", `queue ${queuePath} could not be written: ${cause instanceof Error ? cause.message : String(cause)}. Nothing was written and the log was not touched.`);
+    }
+    return {
+        ok: true,
+        path: queuePath,
+        bytes,
+        head: rendered.head,
+        pending: rendered.pending,
+        skipped: rendered.skipped,
+        auditBacklog: rendered.auditBacklog,
+    };
+}
+//# sourceMappingURL=render-queue.js.map

package/dist/src/channels/render-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-queue.js","sourceRoot":"","sources":["../../../src/channels/render-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAErE,OAAO,EACL,UAAU,GAGX,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAElE,OAAO,EACL,iBAAiB,GAIlB,MAAM,cAAc,CAAC;AAatB;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAA2B;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;;QAClD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,cAAc;CACN,CAAC;AAoCX,SAAS,MAAM,CAAC,IAA4B,EAAE,OAAe;IAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,SAAS,IAAI,CAAC,KAAa;IACzB,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,eAAe;IACf,MAAM,IAAI,GAAG,KAAK;SACf,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC;SAChC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC;SAC7B,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC;AAClD,CAAC;AAED,qEAAqE;AACrE,SAAS,YAAY,CAAC,KAAoB;IACxC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,EAAiB;IAClC,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,2DAA2D,CAAC;IACpF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH;;;;GAIG;AACH,SAAS,UAAU,CAAC,OAAsB;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1E,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAC1E,OAAO,CAAC,KAAK,CACd,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,OAAO,CAAC,QAAQ,eACvD,OAAO,CAAC,SACV,eAAe,OAAO,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,kFAAkF;AAClF,SAAS,YAAY,CAAC,KAAa,EAAE,KAA2B,EAAE,QAAgB;IAChF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,OAAO,OAAO,KAAK,mBAAmB,MAAM,KAAK,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW,CAAC,KAAa,EAAE,KAA2B,EAAE,QAAgB;IAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,OAAO,OAAO,KAAK,mBAAmB,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,OAAuB;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,aAAa,GACjB,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,4GAA4G,CAAC,CAAC;IACzH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3F,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjF,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CACR,YAAY,CACV,UAAU,EACV,OAAO,CAAC,QAAQ,EAChB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CACjF,CACF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjG,yEAAyE;IACzE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CACR,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CACnG,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjG,KAAK,CAAC,IAAI,CACR,YAAY,CACV,eAAe,EACf,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,WAAW,CAAC,KAAK,KAAK,IAAI;QAChC,CAAC,CAAC,+EAA+E;QACjF,CAAC,CAAC,4FAA4F,CACjG,CACF,CAAC;IACF,KAAK,CAAC,IAAI,CACR,YAAY,CACV,aAAa,EACb,OAAO,CAAC,WAAW,EACnB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAC5C,CACF,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,KAAK,CAAC,IAAI,CACR,YAAY,CACV,SAAS,EACT,OAAO,CAAC,OAAO,EACf,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,CACrD,CAAC,OAAO,EAAE,CACZ,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CACR,YAAY,CACV,gBAAgB,EAChB,OAAO,CAAC,KAAK,EACb,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAC1F,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAC7B,GAAG,CACL,CACF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,aAAa,CAAC,iGAAiG,CAAC,CAAC;IACjJ,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CACR,WAAW,CAAC,iBAAiB,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CACtF,CAAC;IACF,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC;AACf,CAAC;AAeD;;;;;;;;;;;;;;;GAeG;AACH,SAAS,YAAY,CAAC,OAAsB;IAC1C,MAAM,SAAS,GAAG,CAAC,MAAmB,EAA+C,EAAE;QACrF,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,GAAG,GACP,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,MAAM,CAAC,UAAU;YACnB,CAAC,CAAC,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,QAAQ;gBACzC,CAAC,CAAE,OAAO,CAAC,YAAY,CAAY;gBACnC,CAAC,CAAC,IAAI,CAAC;QACb,MAAM,IAAI,GACR,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,QAAQ;gBACnC,CAAC,CAAE,OAAO,CAAC,MAAM,CAAY;gBAC7B,CAAC,CAAC,IAAI,CAAC;QACb,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,eAAe;YAAE,SAAS;QAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,IAAI,KAAK,CAAC,KAAK,KAAK,gBAAgB,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YAC9E,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI;gBAAE,OAAO,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC;YACnF,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;YACvF,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,SAAS;QACvB,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,MAAM,GAAG;IACb,MAAM;IACN,iCAAiC;IACjC,EAAE;IACF,yEAAyE;IACzE,gFAAgF;IAChF,iFAAiF;IACjF,4BAA4B;IAC5B,EAAE;IACF,iFAAiF;IACjF,2EAA2E;IAC3E,8EAA8E;IAC9E,+EAA+E;IAC/E,KAAK;CACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,aAAa,CAAC,GAAW,EAAE,IAAoB;IACtD,OAAO;QACL,MAAM;QACN,EAAE;QACF,0CAA0C;QAC1C,EAAE;QACF,gLAAgL;QAChL,EAAE;QACF,kFAAkF,IAAI,CAAC,GAAG,CAAC,EAAE;QAC7F,gCACE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5E,EAAE;QACF,4QAA4Q;QAC5Q,EAAE;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,OAA2B,EAC3B,GAAW;IAEX,MAAM,IAAI,GAAG,mBAAmB,CAC9B,OAAO,EACP,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,yEAAyE;QACzE,sCAAsC;QACtC,MAAM,IAAI,GAA2B,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YACxD,CAAC,CAAE,KAAK,CAAC,IAA+B;YACxC,CAAC,CAAC,aAAa,CAAC;QAClB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAa,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3D,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;QAC/G,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,wCAAwC,CACzE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAE1C,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC7B,YAAY,EAAE,OAAO,CAAC,MAAM;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAA2B;IAC5C,OAAO,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,aAAa,CAAC;AACzF,CAAC;AAED,SAAS,aAAa,CAAC,OAAyB;IAC9C,MAAM,KAAK,GAAG,CAAC,kDAAkD,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CACR,0LAA0L,CAC3L,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,kBAAkB,CACzB,OAAsB,EACtB,IAAsB,EACtB,GAAW;IAEX,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS;QACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1C,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS;QACrC,IAAI,CAAC,IAAI,CACP,GAAG,CACD,GAAG,SAAS,IAAI,WAAW,EAAE,EAC7B,aAAa,EACb,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,EACvC,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO;QACL,4BAA4B;QAC5B,EAAE;QACF,qSAAqS;QACrS,EAAE;QACF,kDAAkD;QAClD,uBAAuB;QACvB,GAAG,IAAI;QACP,EAAE;KACH,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,OAAe,EAAE,QAAgB;IAC1E,MAAM,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IACpC,MAAM,KAAK,GACT,QAAQ,GAAG,CAAC;QACV,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO;QACzB,CAAC,CAAC,4DAA4D,CAAC;IACnE,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC;AAC/F,CAAC;AAED,SAAS,WAAW,CAAC,OAAoB;IACvC,MAAM,KAAK,GAAG,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,8dAA8d,CAC/d,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oEAAoE,CAC9F,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iCAAiC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,CAChF,IAAI,CAAC,KAAK,CACX,UAAU,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAC7E,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,IAAoB,EAAE,OAAe;IACnD,OAAO;QACL,KAAK;QACL,EAAE;QACF,iBAAiB,IAAI,CAAC,OAAO,CAAC,gBAC5B,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAClF,kOAAkO;KACnO,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,uEAAuE;AACvE,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,SAAiB,EACjB,OAA2B,EAC3B,GAAW;IAEX,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAElC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,WAAW,IAAI,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,IAAI,CACf,SAAS,EACT,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,QAAQ,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CACtG,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QACD,OAAO,MAAM,CACX,cAAc,EACd,SAAS,SAAS,0BAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,SAAS;QACf,KAAK;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY,EAAE,QAAQ,CAAC,YAAY;KACpC,CAAC;AACJ,CAAC"}