audit-tools 0.30.3 → 0.30.5

package/dist/audit/orchestrator/nextStep.js

@@ -1,5 +1,5 @@
 import { findFirstActionableObligation } from "audit-tools/shared";
-import { frictionCaptured, persistFrictionCapture, frictionCapturePath, } from "audit-tools/shared";
+import { decideFrictionTriage, } from "audit-tools/shared";
 import { EXECUTOR_REGISTRY } from "./executors.js";
 import { deriveAuditState } from "./state.js";
 /**
@@ -74,35 +74,17 @@ export function decideNextStep(bundle) {
     };
 }
 /**
- * Resolve (and, on first fire, satisfy) the terminal friction-capture close-out for
- * the audit half. This is the audit analog of remediate-code's friction gate in
- * `handleComplete`:
- *
- *  - DETERMINISTIC: keyed only off the on-disk record at `(artifactsDir, runId)` via
- *    the SINGLE shared helper — never host discretion or a bundle flag.
- *  - DEGRADE-CLEANLY: on first fire it persists a zero-friction record up front, so
- *    the close-out is immediately satisfiable and can NEVER block completion.
- *  - NEVER RE-LOOP: once a record exists, returns "captured" and the run proceeds —
- *    the close-out fires at most once per run.
- *  - PARITY: identical shape + persist helper to the remediate side (single-sourced
- *    in `audit-tools/shared`), so the two halves cannot drift.
- *  - NEVER couples to any repo's backlog doc — the record lives under the run's own
- *    artifacts dir.
- *
- * Returns "capture" the first time (the host should be prompted to optionally enrich
- * the persisted record), "captured" thereafter.
+ * The terminal friction-TRIAGE close-out for the audit half. Thin delegation to the
+ * single-sourced `decideFrictionTriage` (`audit-tools/shared`) so the triage shape,
+ * disposition vocabulary, blocking semantics, and close-out logic cannot drift from
+ * the remediate half. Drops the former false-green (an empty up-front record no
+ * longer satisfies): the close-out blocks ("dispose") until every captured
+ * mechanical event AND every surfaced agent-feedback reflection carries a
+ * disposition; an empty set (zero events AND zero reflections) is trivially
+ * "disposed". Keyed only off `(artifactsDir, runId)`; never coupled to any repo's
+ * backlog doc.
  */
 export async function decideAuditFrictionCloseout(artifactsDir, runId) {
-    const recordPath = frictionCapturePath(artifactsDir, runId);
-    if (await frictionCaptured(artifactsDir, runId)) {
-        return { action: "captured", recordPath };
-    }
-    await persistFrictionCapture({
-        artifactsDir,
-        runId,
-        tool: "audit-code",
-        frictions: [],
-    });
-    return { action: "capture", recordPath };
+    return decideFrictionTriage(artifactsDir, runId, "audit-code");
 }
 //# sourceMappingURL=nextStep.js.map

package/dist/audit/orchestrator/nextStep.js.map

@@ -1 +1 @@
-{"version":3,"file":"nextStep.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAS9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AAEzE,MAAM,CAAC,MAAM,QAAQ,GAAa;IAChC,uBAAuB;IACvB,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,qBAAqB;IACrB,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,kCAAkC;IAClC,oCAAoC;IACpC,oBAAoB;IACpB,uBAAuB;IACvB,wBAAwB;IACxB,4BAA4B;IAC5B,mBAAmB;IACnB,6BAA6B;IAC7B,gFAAgF;IAChF,kFAAkF;IAClF,+EAA+E;IAC/E,yEAAyE;IACzE,mFAAmF;IACnF,8BAA8B;CAC/B,CAAC;AAEF,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAC5B,WAA8B;IAE9B,OAAO,6BAA6B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,WAAW;YACzB,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,gDAAgD;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,KAAK;YACL,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EACJ,KAAK,CAAC,MAAM,KAAK,UAAU;gBACzB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,6CAA6C;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CACtC,CAAC;IACF,OAAO;QACL,KAAK;QACL,mBAAmB,EAAE,IAAI,CAAC,EAAE;QAC5B,iBAAiB,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI;QACvC,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,mDAAmD,IAAI,CAAC,EAAE,GAAG;YAC/D,CAAC,CAAC,oCAAoC,IAAI,CAAC,EAAE,8IAA8I;KAC9L,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB,EACpB,KAAa;IAEb,MAAM,UAAU,GAAG,mBAAmB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,MAAM,gBAAgB,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,sBAAsB,CAAC;QAC3B,YAAY;QACZ,KAAK;QACL,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,EAAE;KACd,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"nextStep.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACL,oBAAoB,GAErB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAS9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AAEzE,MAAM,CAAC,MAAM,QAAQ,GAAa;IAChC,uBAAuB;IACvB,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,qBAAqB;IACrB,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,kCAAkC;IAClC,oCAAoC;IACpC,oBAAoB;IACpB,uBAAuB;IACvB,wBAAwB;IACxB,4BAA4B;IAC5B,mBAAmB;IACnB,6BAA6B;IAC7B,gFAAgF;IAChF,kFAAkF;IAClF,+EAA+E;IAC/E,yEAAyE;IACzE,mFAAmF;IACnF,8BAA8B;CAC/B,CAAC;AAEF,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAC5B,WAA8B;IAE9B,OAAO,6BAA6B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,WAAW;YACzB,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,gDAAgD;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,KAAK;YACL,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EACJ,KAAK,CAAC,MAAM,KAAK,UAAU;gBACzB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,6CAA6C;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CACtC,CAAC;IACF,OAAO;QACL,KAAK;QACL,mBAAmB,EAAE,IAAI,CAAC,EAAE;QAC5B,iBAAiB,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI;QACvC,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,mDAAmD,IAAI,CAAC,EAAE,GAAG;YAC/D,CAAC,CAAC,oCAAoC,IAAI,CAAC,EAAE,8IAA8I;KAC9L,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB,EACpB,KAAa;IAEb,OAAO,oBAAoB,CAAC,YAAY,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AACjE,CAAC"}

package/dist/audit/orchestrator/resultBaseline.d.ts

@@ -0,0 +1,136 @@
+/**
+ * O2 ↔ F1 residual-risk fix for judge-accepted CE-011: element-staleness for an
+ * already-ingested logical result must compare a FRESHLY-COMPUTED current
+ * `contentKey` (derived from the LIVE `task_content_signature` at advance time)
+ * against a prior BASELINE `contentKey` — and that baseline must live OUTSIDE the
+ * immutable per-record ledger instance.
+ *
+ * Why not read the contentKey off the ledger record? The append-only ledger
+ * (INV-O2-1) keys records on `idempotency_key`, which is signature-STABLE: a
+ * benign content edit (C1 → C2) does NOT move it, so idempotent re-ingest of the
+ * already-ingested result stays a no-op (no duplicate record is appended). If
+ * staleness ALSO read its prior contentKey from that same immutable record, the
+ * record would still carry C1 and a benign edit could never fire staleness — the
+ * exact CE-011 residual hole. So the baseline contentKey is persisted in a
+ * SEPARATE store (`artifact_metadata.result_baselines`, keyed by
+ * `idempotency_key`) that the staleness gate updates as the live signature moves,
+ * while the ledger record itself is never mutated. Append-only ledger invariants
+ * are therefore untouched.
+ *
+ * The comparison driver is the seam's `contentKey` (signature-SENSITIVE), so:
+ *   live C2 != baseline C1  ⟹  staleness FIRES,
+ * while the seam's signature-STABLE `idempotencyKey` keeps idempotent re-ingest a
+ * no-op. The two are reconciled by construction (see src/shared/contentKey.ts).
+ */
+import { type ResultEmitSource } from "audit-tools/shared";
+import { type ArtifactMetadataManifest } from "../types/artifactMetadata.js";
+/**
+ * The baseline store — the per-logical-result contentKey snapshot, keyed by the
+ * signature-STABLE `idempotency_key`. Persisted in `artifact_metadata` OUTSIDE
+ * the per-record ledger, so updating a baseline never mutates an immutable ledger
+ * record (INV-O2-1 untouched).
+ */
+export type ResultBaselineStore = Record<string, string>;
+/** The live coordinate + signature needed to freshly compute the current keys. */
+export interface LiveResultKeyInput {
+    unit_id: string;
+    lens: string;
+    pass_id: string;
+    /** Tool-owned emit source (base | deepening | steward | redispatch). */
+    source: ResultEmitSource;
+    /** Required when `source === 'redispatch'`. */
+    attempt?: number;
+    /**
+     * The LIVE task-content signature derived from the current task content at
+     * advance time — NEVER a value read off a stored ledger record.
+     */
+    task_content_signature: string;
+}
+/**
+ * Freshly derive the {idempotency_key, content_key} pair for a live result from
+ * the seam — both computed from the live `task_content_signature` at advance
+ * time. `idempotency_key` is the baseline-store key (signature-STABLE);
+ * `content_key` is the staleness driver (signature-SENSITIVE).
+ */
+export declare function deriveLiveResultKeys(input: LiveResultKeyInput): {
+    idempotency_key: string;
+    content_key: string;
+};
+/**
+ * Is the already-ingested logical result stale, given its LIVE keys? Stale iff a
+ * baseline exists for the idempotency_key AND the freshly-computed live
+ * content_key differs from it. A result with no recorded baseline is NOT stale —
+ * it has simply never been compared (the first ingest establishes the baseline).
+ *
+ * The caller supplies live keys via `deriveLiveResultKeys` (freshly computed from
+ * the live signature) — this function NEVER reads a contentKey off a ledger
+ * record.
+ */
+export declare function isResultStaleAgainstBaseline(baselines: ResultBaselineStore | undefined, liveKeys: {
+    idempotency_key: string;
+    content_key: string;
+}): boolean;
+/**
+ * Return an updated baseline store with this logical result's baseline set to its
+ * live content_key. Pure: returns a new object, never mutates the input — so a
+ * caller persists the result through the normal artifact_metadata write path.
+ * Idempotent: recording the same content_key again yields an equal store.
+ */
+export declare function recordResultBaseline(baselines: ResultBaselineStore | undefined, liveKeys: {
+    idempotency_key: string;
+    content_key: string;
+}): ResultBaselineStore;
+/**
+ * The FULL per-result staleness coordinate (F1). The grouping fields
+ * {unit_id, lens, pass_id} (and even with task_id) are NON-UNIQUE per pass —
+ * base vs deepening/steward, or an O3 stage-3 re-dispatch reuse the same
+ * coordinate — so the `result_content_discriminator` (tool-owned,
+ * buildResultContentDiscriminator) MUST be part of the key (CE-009). It is
+ * carried here as `source` (+ `attempt` for re-dispatch); a caller that cannot
+ * supply the discriminating source is handled by the fail-safe path below.
+ */
+export interface ElementCoordinate {
+    unit_id: string;
+    lens: string;
+    pass_id: string;
+    task_id?: string;
+    /**
+     * Tool-owned emit source feeding the discriminator. OMITTED ⇒ the coordinate
+     * is under-discriminated and the element fails safe to stale (CE-009) — it is
+     * NEVER silently keyed at the non-unique grouping granularity.
+     */
+    source?: ResultEmitSource;
+    /** Required when `source === 'redispatch'`. */
+    attempt?: number;
+    /** LIVE task-content signature derived at advance time (never off a record). */
+    task_content_signature: string;
+}
+export type ElementVerdict = 'skipped' | 're-derive';
+/**
+ * Per-element (per discriminated-result-coordinate) staleness verdict (F1). The
+ * driver is the CONSUMED contentKey seam (FC-002 tool-owned signatures) over the
+ * DISCRIMINATED coordinate — never the bare grouping/identity_key, and never a
+ * parallel hashing of element identity here.
+ *
+ * Fail-safe to `re-derive` (CE-009 / fail-safe staleness) when:
+ *  - the coordinate lacks a discriminating `source` (under-discriminated), OR
+ *  - the live keys cannot be derived (e.g. a missing/empty signature throws in
+ *    the seam), OR
+ *  - the freshly-computed live content_key differs from the persisted baseline.
+ *
+ * `skipped` ONLY when a baseline exists for the idempotency_key AND the live
+ * content_key equals it (unchanged element ⇒ skipped by construction). An
+ * element with no recorded baseline is `re-derive` (first compare establishes it
+ * — never a false skip).
+ */
+export declare function perElementStalenessVerdict(baselines: ResultBaselineStore | undefined, coordinate: ElementCoordinate): ElementVerdict;
+/**
+ * Metadata-migration fail-safe (CE-007). An on-disk manifest is recognized as
+ * F1-current ONLY when it carries `metadata_schema_version >= METADATA_SCHEMA_VERSION`.
+ * An absent/older tag (a pre-F1, whole-artifact-only manifest) is NOT recognized,
+ * so its still-matching whole-artifact hashes must NEVER be trusted to skip a
+ * changed element — every element is treated as stale (all re-derived). Pure
+ * predicate; never throws.
+ */
+export declare function isMetadataManifestCurrent(manifest: ArtifactMetadataManifest | undefined): boolean;
+//# sourceMappingURL=resultBaseline.d.ts.map

package/dist/audit/orchestrator/resultBaseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultBaseline.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/resultBaseline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEzD,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,MAAM,EAAE,gBAAgB,CAAC;IACzB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG;IAC/D,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,CAkBA;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,mBAAmB,GAAG,SAAS,EAC1C,QAAQ,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAIT;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,mBAAmB,GAAG,SAAS,EAC1C,QAAQ,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACzD,mBAAmB,CAKrB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,CAAC;AAErD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,mBAAmB,GAAG,SAAS,EAC1C,UAAU,EAAE,iBAAiB,GAC5B,cAAc,CAuBhB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,wBAAwB,GAAG,SAAS,GAC7C,OAAO,CAKT"}

package/dist/audit/orchestrator/resultBaseline.js

@@ -0,0 +1,138 @@
+/**
+ * O2 ↔ F1 residual-risk fix for judge-accepted CE-011: element-staleness for an
+ * already-ingested logical result must compare a FRESHLY-COMPUTED current
+ * `contentKey` (derived from the LIVE `task_content_signature` at advance time)
+ * against a prior BASELINE `contentKey` — and that baseline must live OUTSIDE the
+ * immutable per-record ledger instance.
+ *
+ * Why not read the contentKey off the ledger record? The append-only ledger
+ * (INV-O2-1) keys records on `idempotency_key`, which is signature-STABLE: a
+ * benign content edit (C1 → C2) does NOT move it, so idempotent re-ingest of the
+ * already-ingested result stays a no-op (no duplicate record is appended). If
+ * staleness ALSO read its prior contentKey from that same immutable record, the
+ * record would still carry C1 and a benign edit could never fire staleness — the
+ * exact CE-011 residual hole. So the baseline contentKey is persisted in a
+ * SEPARATE store (`artifact_metadata.result_baselines`, keyed by
+ * `idempotency_key`) that the staleness gate updates as the live signature moves,
+ * while the ledger record itself is never mutated. Append-only ledger invariants
+ * are therefore untouched.
+ *
+ * The comparison driver is the seam's `contentKey` (signature-SENSITIVE), so:
+ *   live C2 != baseline C1  ⟹  staleness FIRES,
+ * while the seam's signature-STABLE `idempotencyKey` keeps idempotent re-ingest a
+ * no-op. The two are reconciled by construction (see src/shared/contentKey.ts).
+ */
+import { buildResultContentDiscriminator, contentKey, idempotencyKey, } from "audit-tools/shared";
+import { METADATA_SCHEMA_VERSION, } from "../types/artifactMetadata.js";
+/**
+ * Freshly derive the {idempotency_key, content_key} pair for a live result from
+ * the seam — both computed from the live `task_content_signature` at advance
+ * time. `idempotency_key` is the baseline-store key (signature-STABLE);
+ * `content_key` is the staleness driver (signature-SENSITIVE).
+ */
+export function deriveLiveResultKeys(input) {
+    const discriminator = buildResultContentDiscriminator({
+        source: input.source,
+        attempt: input.attempt,
+    });
+    const coordinate = {
+        unit_id: input.unit_id,
+        lens: input.lens,
+        pass_id: input.pass_id,
+        result_content_discriminator: discriminator,
+    };
+    return {
+        idempotency_key: idempotencyKey(coordinate),
+        content_key: contentKey({
+            ...coordinate,
+            task_content_signature: input.task_content_signature,
+        }),
+    };
+}
+/**
+ * Is the already-ingested logical result stale, given its LIVE keys? Stale iff a
+ * baseline exists for the idempotency_key AND the freshly-computed live
+ * content_key differs from it. A result with no recorded baseline is NOT stale —
+ * it has simply never been compared (the first ingest establishes the baseline).
+ *
+ * The caller supplies live keys via `deriveLiveResultKeys` (freshly computed from
+ * the live signature) — this function NEVER reads a contentKey off a ledger
+ * record.
+ */
+export function isResultStaleAgainstBaseline(baselines, liveKeys) {
+    const baseline = baselines?.[liveKeys.idempotency_key];
+    if (baseline === undefined)
+        return false;
+    return baseline !== liveKeys.content_key;
+}
+/**
+ * Return an updated baseline store with this logical result's baseline set to its
+ * live content_key. Pure: returns a new object, never mutates the input — so a
+ * caller persists the result through the normal artifact_metadata write path.
+ * Idempotent: recording the same content_key again yields an equal store.
+ */
+export function recordResultBaseline(baselines, liveKeys) {
+    return {
+        ...(baselines ?? {}),
+        [liveKeys.idempotency_key]: liveKeys.content_key,
+    };
+}
+/**
+ * Per-element (per discriminated-result-coordinate) staleness verdict (F1). The
+ * driver is the CONSUMED contentKey seam (FC-002 tool-owned signatures) over the
+ * DISCRIMINATED coordinate — never the bare grouping/identity_key, and never a
+ * parallel hashing of element identity here.
+ *
+ * Fail-safe to `re-derive` (CE-009 / fail-safe staleness) when:
+ *  - the coordinate lacks a discriminating `source` (under-discriminated), OR
+ *  - the live keys cannot be derived (e.g. a missing/empty signature throws in
+ *    the seam), OR
+ *  - the freshly-computed live content_key differs from the persisted baseline.
+ *
+ * `skipped` ONLY when a baseline exists for the idempotency_key AND the live
+ * content_key equals it (unchanged element ⇒ skipped by construction). An
+ * element with no recorded baseline is `re-derive` (first compare establishes it
+ * — never a false skip).
+ */
+export function perElementStalenessVerdict(baselines, coordinate) {
+    if (coordinate.source === undefined) {
+        // Under-discriminated coordinate (CE-009): refuse to compare at the
+        // non-unique grouping granularity — fail safe to re-derive.
+        return 're-derive';
+    }
+    let liveKeys;
+    try {
+        liveKeys = deriveLiveResultKeys({
+            unit_id: coordinate.unit_id,
+            lens: coordinate.lens,
+            pass_id: coordinate.pass_id,
+            source: coordinate.source,
+            attempt: coordinate.attempt,
+            task_content_signature: coordinate.task_content_signature,
+        });
+    }
+    catch {
+        // Uncomparable element state (missing/unreadable signature) ⇒ fail safe.
+        return 're-derive';
+    }
+    const baseline = baselines?.[liveKeys.idempotency_key];
+    if (baseline === undefined)
+        return 're-derive';
+    return baseline === liveKeys.content_key ? 'skipped' : 're-derive';
+}
+/**
+ * Metadata-migration fail-safe (CE-007). An on-disk manifest is recognized as
+ * F1-current ONLY when it carries `metadata_schema_version >= METADATA_SCHEMA_VERSION`.
+ * An absent/older tag (a pre-F1, whole-artifact-only manifest) is NOT recognized,
+ * so its still-matching whole-artifact hashes must NEVER be trusted to skip a
+ * changed element — every element is treated as stale (all re-derived). Pure
+ * predicate; never throws.
+ */
+export function isMetadataManifestCurrent(manifest) {
+    if (!manifest || typeof manifest !== 'object')
+        return false;
+    const version = manifest
+        .metadata_schema_version;
+    return typeof version === 'number' && version >= METADATA_SCHEMA_VERSION;
+}
+//# sourceMappingURL=resultBaseline.js.map

package/dist/audit/orchestrator/resultBaseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultBaseline.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/resultBaseline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EACL,+BAA+B,EAC/B,UAAU,EACV,cAAc,GAEf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,uBAAuB,GAExB,MAAM,8BAA8B,CAAC;AA0BtC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAyB;IAI5D,MAAM,aAAa,GAAG,+BAA+B,CAAC;QACpD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,4BAA4B,EAAE,aAAa;KAC5C,CAAC;IACF,OAAO;QACL,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC;QAC3C,WAAW,EAAE,UAAU,CAAC;YACtB,GAAG,UAAU;YACb,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;SACrD,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAA0C,EAC1C,QAA0D;IAE1D,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,QAAQ,KAAK,QAAQ,CAAC,WAAW,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAA0C,EAC1C,QAA0D;IAE1D,OAAO;QACL,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;QACpB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,WAAW;KACjD,CAAC;AACJ,CAAC;AA8BD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAA0C,EAC1C,UAA6B;IAE7B,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpC,oEAAoE;QACpE,4DAA4D;QAC5D,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,QAA0D,CAAC;IAC/D,IAAI,CAAC;QACH,QAAQ,GAAG,oBAAoB,CAAC;YAC9B,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;SAC1D,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC/C,OAAO,QAAQ,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAA8C;IAE9C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,OAAO,GAAI,QAAkD;SAChE,uBAAuB,CAAC;IAC3B,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,uBAAuB,CAAC;AAC3E,CAAC"}

package/dist/audit/orchestrator/staleness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"staleness.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/staleness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AA0BzD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,CAqGzE"}
+{"version":3,"file":"staleness.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/staleness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AA4BzD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,CA6HzE"}

package/dist/audit/orchestrator/staleness.js

@@ -1,6 +1,7 @@
 import { getArtifactValue } from "../io/artifacts.js";
-import { ARTIFACT_DEPENDENTS_MAP, ARTIFACT_DEPENDS_ON_MAP, } from "./dependencyMap.js";
+import { ALL_DAG_ARTIFACTS, ARTIFACT_DEPENDENTS_MAP, ARTIFACT_DEPENDS_ON_MAP, } from "./dependencyMap.js";
 import { present } from "./artifactMetadata.js";
+import { isMetadataManifestCurrent } from "./resultBaseline.js";
 import { hashArtifactValue, stableStringify, } from "./artifactFreshness.js";
 function computeContentHash(artifactName, bundle) {
     const value = getArtifactValue(bundle, artifactName);
@@ -14,6 +15,29 @@ const ARTIFACT_DEPENDENCIES_MAP = ARTIFACT_DEPENDS_ON_MAP;
 export function computeStaleArtifacts(bundle) {
     const stale = new Set();
     const metadata = bundle.artifact_metadata;
+    // Metadata-migration fail-safe (CE-007): an old-shape (pre-F1) manifest —
+    // present but absent/older `metadata_schema_version`, or that would not decode
+    // to the F1 shape — must NOT be trusted to skip work off its still-matching
+    // whole-artifact hashes. Degrade to ALL-STALE (every present DAG artifact),
+    // never false-skip and never throw on a shape mismatch. A genuinely-absent
+    // manifest stays "nothing to compare ⇒ nothing stale" (handled below).
+    if (metadata && !isMetadataManifestCurrent(metadata)) {
+        for (const artifactName of ALL_DAG_ARTIFACTS) {
+            if (artifactName === "artifact_metadata.json")
+                continue;
+            if (present(bundle, artifactName))
+                stale.add(artifactName);
+        }
+        if (stale.size > 0) {
+            process.stderr.write(JSON.stringify({
+                kind: "staleness",
+                stale_artifacts: [...stale].sort(),
+                reason: "metadata_schema_version_migration",
+                ts: new Date().toISOString(),
+            }) + "\n");
+        }
+        return stale;
+    }
     if (metadata) {
         for (const [artifactName, entry] of Object.entries(metadata.artifacts)) {
             if (!present(bundle, artifactName))

package/dist/audit/orchestrator/staleness.js.map

@@ -1 +1 @@
-{"version":3,"file":"staleness.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/staleness.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,SAAS,kBAAkB,CACzB,YAAoB,EACpB,MAAsB;IAEtB,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,MAAM,yBAAyB,GAC7B,uBAAuB,CAAC;AAE1B,MAAM,UAAU,qBAAqB,CAAC,MAAsB;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAE1C,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;gBAAE,SAAS;YAC7C,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;iBAC9E,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,KAAK,wBAAwB,CAAC;iBACvE,IAAI,EAAE,CAAC;YACV,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5E,IACE,eAAe,CAAC,oBAAoB,CAAC;gBACrC,eAAe,CAAC,oBAAoB,CAAC,EACrC,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,OAAO,CAC7D,KAAK,CAAC,oBAAoB,CAC3B,EAAE,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;oBACrC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;wBACzB,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM;oBACR,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;gBAC3D,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,IAAI,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;wBAC5D,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM;oBACR,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC/D,IACE,CAAC,WAAW;oBACZ,eAAe,CAAC,YAAY,KAAK,WAAW;oBAC5C,eAAe,CAAC,QAAQ,KAAK,gBAAgB,EAC7C,CAAC;oBACD,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,OAAO;gBAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,uBAAuB,CACxB,EAAE,CAAC;YACF,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,IAAI,QAAQ,KAAK,uBAAuB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC/B,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;oBACxC,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;oBACjE,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACrD,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,uBAAuB,CACxB,EAAE,CAAC;YACF,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC1D,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACtB,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,WAAW;YACjB,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;YAClC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"staleness.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/staleness.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,SAAS,kBAAkB,CACzB,YAAoB,EACpB,MAAsB;IAEtB,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,MAAM,yBAAyB,GAC7B,uBAAuB,CAAC;AAE1B,MAAM,UAAU,qBAAqB,CAAC,MAAsB;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAE1C,0EAA0E;IAC1E,+EAA+E;IAC/E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,QAAQ,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,KAAK,MAAM,YAAY,IAAI,iBAAiB,EAAE,CAAC;YAC7C,IAAI,YAAY,KAAK,wBAAwB;gBAAE,SAAS;YACxD,IAAI,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;gBAClC,MAAM,EAAE,mCAAmC;gBAC3C,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,GAAG,IAAI,CACV,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;gBAAE,SAAS;YAC7C,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;iBAC9E,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,KAAK,wBAAwB,CAAC;iBACvE,IAAI,EAAE,CAAC;YACV,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5E,IACE,eAAe,CAAC,oBAAoB,CAAC;gBACrC,eAAe,CAAC,oBAAoB,CAAC,EACrC,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,OAAO,CAC7D,KAAK,CAAC,oBAAoB,CAC3B,EAAE,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;oBACrC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;wBACzB,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM;oBACR,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;gBAC3D,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,IAAI,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;wBAC5D,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM;oBACR,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC/D,IACE,CAAC,WAAW;oBACZ,eAAe,CAAC,YAAY,KAAK,WAAW;oBAC5C,eAAe,CAAC,QAAQ,KAAK,gBAAgB,EAC7C,CAAC;oBACD,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,OAAO;gBAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,uBAAuB,CACxB,EAAE,CAAC;YACF,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,IAAI,QAAQ,KAAK,uBAAuB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC/B,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;oBACxC,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;oBACjE,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACrD,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,uBAAuB,CACxB,EAAE,CAAC;YACF,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC1D,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACtB,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,WAAW;YACjB,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;YAClC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}