audit-tools 0.39.15 → 0.41.0

package/dist/shared/rolling/pausedState.d.ts

@@ -1,201 +0,0 @@
-/**
- * Rolling engine paused-state management (N-S09).
- *
- * Owns the `waiting_for_provider` resumable paused state that the rolling
- * engine enters when every eligible dispatch pool empties mid-run.
- *
- * Invariants enforced here:
- *   INV-S03 — settled dispatch-pool exclusions are never re-offered on
- *              re-discovery. `filterNewProviders` strips them from every
- *              re-discovery pass; `SettledExclusionSet` is never mutated.
- *   CE-003/CE-205 — no indefinite stall. After `LIVELOCK_PAUSE_LIMIT`
- *              consecutive pauses with zero net new capacity the engine
- *              transitions to `terminal/livelock` and yields the stranded
- *              subtree to the consumer-provided terminal handler (N-CE301).
- *   CP-NODE-3(a) — every transition OUT of `waiting_for_provider` (resume to
- *              `running`, or promotion to `terminal`) carries an EXPLICIT
- *              `clear_persisted_state: true` directive, rather than leaving
- *              the caller to infer "must clear" from `kind` alone. The
- *              consumer that derives `dispatch_capacity` from the mere
- *              PRESENCE of a persisted paused_state
- *              (audit-orchestrator-core, `src/audit/orchestrator/state.ts`)
- *              has no actionable obligation to clear it on its own, so an
- *              un-cleared paused_state would report top-level status
- *              "blocked" forever once capacity actually returns. This
- *              module PRODUCES the directive only, as a returned value —
- *              never as a filesystem write; the consumer (CP-NODE-6, the
- *              active-dispatch-state writer) owns applying it.
- *   CP-NODE-3(b) — `classifyProviderConstructionAttempt` classifies a
- *              SYNCHRONOUS provider-construction throw (a permanently
- *              misconfigured provider — missing required config, unknown
- *              provider name) as a TERMINAL configuration failure, never a
- *              retryable pause: incrementing `pause_count` or re-entering
- *              re-discovery on a construction failure would only busy-loop
- *              the same broken config. It classifies via the structured,
- *              non-retryable `ProviderLaunchOutcomeEnvelope`
- *              (`outcome: "construction_failed"`) that provider construction
- *              now throws — see `../providers/providerFactory.js`.
- *
- * This module is purely logic — zero runtime dependencies beyond Node
- * built-ins (the `ProviderLaunchOutcomeEnvelope` reference below is a
- * type-only import, erased at compile time — it adds no runtime dependency
- * on the providers layer). The consumer wires the terminal action after
- * receiving `{ kind: 'terminal', reason: 'livelock' | 'configuration', ... }`.
- */
-/**
- * Top-level lifecycle state of the rolling dispatch engine.
- *
- * - `running`              — an eligible pool has capacity; dispatch proceeding.
- * - `waiting_for_provider` — all eligible pools emptied mid-run; engine is
- *                            explicitly paused and resumable.
- * - `terminal`             — engine is done (complete, livelock, or handed
- *                            off to the consumer terminal handler).
- */
-export type RollingEngineLifecycleState = {
-    kind: "running";
-    /**
-     * CP-NODE-3(a): explicit directive — a persisted paused_state record
-     * (if any) MUST be cleared. Always `true` on this variant; see the
-     * module doc comment for why this must be explicit rather than
-     * inferred from `kind`.
-     */
-    clear_persisted_state: true;
-} | {
-    kind: "waiting_for_provider";
-    /** ISO timestamp when the engine entered the paused state. */
-    paused_at: string;
-    /** Number of consecutive pauses with no net new provider capacity. */
-    pause_count: number;
-    /** Node IDs that are stranded waiting for a provider. */
-    stranded_node_ids: string[];
-    /**
-     * CP-NODE-3(a): explicit directive companion. Never `true` on this
-     * variant — the engine is still paused, so any persisted paused_state
-     * record must be KEPT (updated with the new lifecycle), not cleared.
-     * Optional (rather than required) so external constructors of this
-     * persisted shape (the active-dispatch-state writer) that predate the
-     * directive keep typechecking unchanged; this module always sets it
-     * explicitly to `false` on every value it produces.
-     */
-    clear_persisted_state?: false;
-} | {
-    kind: "terminal";
-    reason: "livelock" | "consumer_terminal" | "complete" | "configuration";
-    stranded_node_ids: string[];
-    /**
-     * CP-NODE-3(a): explicit directive — a persisted paused_state record
-     * (if any) MUST be cleared; the run has left the resumable-pause cycle
-     * entirely (livelock, consumer terminal, completion, or a
-     * non-retryable configuration failure). Always `true` on this variant.
-     */
-    clear_persisted_state: true;
-};
-/**
- * Opaque set of provider identifiers already settled by dispatch. Carried across
- * re-discovery rounds; never cleared.
- *
- * Use a `ReadonlySet<string>` so callers cannot accidentally mutate it.
- */
-export type SettledExclusionSet = ReadonlySet<string>;
-/**
- * Default number of consecutive `waiting_for_provider` pauses (with zero net
- * new capacity) after which the engine transitions to `terminal/livelock`.
- */
-export declare const LIVELOCK_PAUSE_LIMIT = 3;
-/**
- * Pure function: return only providers not present in `settled`.
- *
- * Guarantees that re-discovery never re-offers a settled
- * exclusion (INV-S03). The `settled` set is never mutated.
- *
- * @param discovered  Provider identifiers returned by the latest re-discovery pass.
- * @param settled     The accumulated exclusion set; immutable.
- * @returns           Only those identifiers not already in `settled`.
- */
-export declare function filterNewProviders(discovered: string[], settled: SettledExclusionSet): string[];
-/**
- * Pure predicate: returns `true` when the no-progress livelock condition is met.
- *
- * Livelock is triggered when:
- *   - `pauseCount >= limit` (at or beyond the configured threshold), AND
- *   - `netNewCapacity === 0`  (no genuinely-new providers arrived this round).
- *
- * @param pauseCount      Number of consecutive pauses recorded so far (inclusive of the current one).
- * @param netNewCapacity  Count of genuinely-new providers surfaced this round.
- * @param limit           Pause threshold; defaults to `LIVELOCK_PAUSE_LIMIT`.
- */
-export declare function checkLivelockGuard(pauseCount: number, netNewCapacity: number, limit?: number): boolean;
-/**
- * Options for `advancePausedState`.
- */
-export interface AdvancePausedStateOptions {
-    /** The current `waiting_for_provider` state. */
-    current: Extract<RollingEngineLifecycleState, {
-        kind: "waiting_for_provider";
-    }>;
-    /** Provider identifiers returned by the latest re-discovery probe. */
-    rediscoveredProviders: string[];
-    /** The accumulated settled-exclusion set (not mutated). */
-    settledExclusions: SettledExclusionSet;
-    /** Override for the livelock limit; defaults to `LIVELOCK_PAUSE_LIMIT`. */
-    livelockLimit?: number;
-}
-/**
- * Single transition function for the `waiting_for_provider` paused state.
- *
- * Decision tree:
- *   1. Call `filterNewProviders` to surface only genuinely-new providers
- *      (strips settled exclusions — INV-S03).
- *   2. If `genuinelyNew.length > 0` → return `{ kind: 'running',
- *      clear_persisted_state: true }` (CP-NODE-3(a): resume always carries
- *      the explicit clear directive).
- *   3. Else increment `pause_count` and call `checkLivelockGuard`.
- *      a. Livelock triggered → return `{ kind: 'terminal', reason:
- *         'livelock', clear_persisted_state: true, ... }` (terminal
- *         promotion always carries the explicit clear directive).
- *      b. Below limit → return updated `waiting_for_provider` with bumped
- *         `pause_count` and `clear_persisted_state: false`; `paused_at` and
- *         `stranded_node_ids` are preserved.
- *
- * This function never mutates its inputs.
- */
-export declare function advancePausedState(opts: AdvancePausedStateOptions): RollingEngineLifecycleState;
-/**
- * Classify a SYNCHRONOUS provider-construction attempt (CP-NODE-3(b)).
- *
- * Invokes `attemptConstruction` exactly once. A clean return means
- * construction succeeded — returns `null`, and the caller proceeds with the
- * ordinary `advancePausedState` pause/resume decision unchanged.
- *
- * A throw carrying CP-NODE-4's structured `ProviderLaunchOutcomeEnvelope`
- * (`.launchOutcome.outcome === "construction_failed"`, e.g. from
- * `ProviderConstructionError` — see `../providers/providerFactory.js`) is
- * classified here as a TERMINAL configuration failure and returned directly,
- * WITHOUT touching `pause_count` or re-discovery: this function takes no
- * `current` paused state and never calls `filterNewProviders` /
- * `checkLivelockGuard`, so a construction failure can never increment a
- * pause count or re-enter re-discovery, whether or not a pause was already
- * in progress. A permanently misconfigured provider (missing required
- * config, unrecognized provider name) cannot be fixed by waiting or
- * re-discovering — routing it through the ordinary retryable pause path
- * would only busy-loop the same broken config forever.
- *
- * A throw that does NOT carry a construction-failure envelope (an
- * unclassifiable error, or no `.launchOutcome` at all) propagates UNCHANGED
- * — this function only special-cases a positively-identified construction
- * failure; it never swallows an error it cannot classify.
- *
- * Still I/O-free: `attemptConstruction` is caller-injected (the actual
- * provider-construction call lives in the providers layer), so this module
- * gains no new runtime dependency — it only inspects the SHAPE of what
- * `attemptConstruction` throws.
- *
- * @param attemptConstruction  Zero-arg callback that performs (or simulates,
- *   in tests) a synchronous provider-construction attempt.
- * @param strandedNodeIds      Node IDs to carry onto the terminal state when
- *   classified as a construction failure.
- * @returns The terminal configuration-failure state, or `null` when
- *   construction succeeded (not a construction failure).
- */
-export declare function classifyProviderConstructionAttempt(attemptConstruction: () => void, strandedNodeIds: string[]): RollingEngineLifecycleState | null;
-//# sourceMappingURL=pausedState.d.ts.map

package/dist/shared/rolling/pausedState.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pausedState.d.ts","sourceRoot":"","sources":["../../../src/shared/rolling/pausedState.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAQH;;;;;;;;GAQG;AACH,MAAM,MAAM,2BAA2B,GACnC;IACE,IAAI,EAAE,SAAS,CAAC;IAChB;;;;;OAKG;IACH,qBAAqB,EAAE,IAAI,CAAC;CAC7B,GACD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,KAAK,CAAC;CAC/B,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,UAAU,GAAG,mBAAmB,GAAG,UAAU,GAAG,eAAe,CAAC;IACxE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,qBAAqB,EAAE,IAAI,CAAC;CAC7B,CAAC;AAEN;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;AAMtD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAMtC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAAE,EACpB,OAAO,EAAE,mBAAmB,GAC3B,MAAM,EAAE,CAEV;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,KAAK,GAAE,MAA6B,GACnC,OAAO,CAET;AAMD;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC,2BAA2B,EAAE;QAAE,IAAI,EAAE,sBAAsB,CAAA;KAAE,CAAC,CAAC;IAChF,sEAAsE;IACtE,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,2DAA2D;IAC3D,iBAAiB,EAAE,mBAAmB,CAAC;IACvC,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,yBAAyB,GAC9B,2BAA2B,CAoC7B;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,mCAAmC,CACjD,mBAAmB,EAAE,MAAM,IAAI,EAC/B,eAAe,EAAE,MAAM,EAAE,GACxB,2BAA2B,GAAG,IAAI,CAkBpC"}

package/dist/shared/rolling/pausedState.js

@@ -1,197 +0,0 @@
-/**
- * Rolling engine paused-state management (N-S09).
- *
- * Owns the `waiting_for_provider` resumable paused state that the rolling
- * engine enters when every eligible dispatch pool empties mid-run.
- *
- * Invariants enforced here:
- *   INV-S03 — settled dispatch-pool exclusions are never re-offered on
- *              re-discovery. `filterNewProviders` strips them from every
- *              re-discovery pass; `SettledExclusionSet` is never mutated.
- *   CE-003/CE-205 — no indefinite stall. After `LIVELOCK_PAUSE_LIMIT`
- *              consecutive pauses with zero net new capacity the engine
- *              transitions to `terminal/livelock` and yields the stranded
- *              subtree to the consumer-provided terminal handler (N-CE301).
- *   CP-NODE-3(a) — every transition OUT of `waiting_for_provider` (resume to
- *              `running`, or promotion to `terminal`) carries an EXPLICIT
- *              `clear_persisted_state: true` directive, rather than leaving
- *              the caller to infer "must clear" from `kind` alone. The
- *              consumer that derives `dispatch_capacity` from the mere
- *              PRESENCE of a persisted paused_state
- *              (audit-orchestrator-core, `src/audit/orchestrator/state.ts`)
- *              has no actionable obligation to clear it on its own, so an
- *              un-cleared paused_state would report top-level status
- *              "blocked" forever once capacity actually returns. This
- *              module PRODUCES the directive only, as a returned value —
- *              never as a filesystem write; the consumer (CP-NODE-6, the
- *              active-dispatch-state writer) owns applying it.
- *   CP-NODE-3(b) — `classifyProviderConstructionAttempt` classifies a
- *              SYNCHRONOUS provider-construction throw (a permanently
- *              misconfigured provider — missing required config, unknown
- *              provider name) as a TERMINAL configuration failure, never a
- *              retryable pause: incrementing `pause_count` or re-entering
- *              re-discovery on a construction failure would only busy-loop
- *              the same broken config. It classifies via the structured,
- *              non-retryable `ProviderLaunchOutcomeEnvelope`
- *              (`outcome: "construction_failed"`) that provider construction
- *              now throws — see `../providers/providerFactory.js`.
- *
- * This module is purely logic — zero runtime dependencies beyond Node
- * built-ins (the `ProviderLaunchOutcomeEnvelope` reference below is a
- * type-only import, erased at compile time — it adds no runtime dependency
- * on the providers layer). The consumer wires the terminal action after
- * receiving `{ kind: 'terminal', reason: 'livelock' | 'configuration', ... }`.
- */
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-/**
- * Default number of consecutive `waiting_for_provider` pauses (with zero net
- * new capacity) after which the engine transitions to `terminal/livelock`.
- */
-export const LIVELOCK_PAUSE_LIMIT = 3;
-// ---------------------------------------------------------------------------
-// filterNewProviders
-// ---------------------------------------------------------------------------
-/**
- * Pure function: return only providers not present in `settled`.
- *
- * Guarantees that re-discovery never re-offers a settled
- * exclusion (INV-S03). The `settled` set is never mutated.
- *
- * @param discovered  Provider identifiers returned by the latest re-discovery pass.
- * @param settled     The accumulated exclusion set; immutable.
- * @returns           Only those identifiers not already in `settled`.
- */
-export function filterNewProviders(discovered, settled) {
-    return discovered.filter((id) => !settled.has(id));
-}
-// ---------------------------------------------------------------------------
-// checkLivelockGuard
-// ---------------------------------------------------------------------------
-/**
- * Pure predicate: returns `true` when the no-progress livelock condition is met.
- *
- * Livelock is triggered when:
- *   - `pauseCount >= limit` (at or beyond the configured threshold), AND
- *   - `netNewCapacity === 0`  (no genuinely-new providers arrived this round).
- *
- * @param pauseCount      Number of consecutive pauses recorded so far (inclusive of the current one).
- * @param netNewCapacity  Count of genuinely-new providers surfaced this round.
- * @param limit           Pause threshold; defaults to `LIVELOCK_PAUSE_LIMIT`.
- */
-export function checkLivelockGuard(pauseCount, netNewCapacity, limit = LIVELOCK_PAUSE_LIMIT) {
-    return pauseCount >= limit && netNewCapacity === 0;
-}
-/**
- * Single transition function for the `waiting_for_provider` paused state.
- *
- * Decision tree:
- *   1. Call `filterNewProviders` to surface only genuinely-new providers
- *      (strips settled exclusions — INV-S03).
- *   2. If `genuinelyNew.length > 0` → return `{ kind: 'running',
- *      clear_persisted_state: true }` (CP-NODE-3(a): resume always carries
- *      the explicit clear directive).
- *   3. Else increment `pause_count` and call `checkLivelockGuard`.
- *      a. Livelock triggered → return `{ kind: 'terminal', reason:
- *         'livelock', clear_persisted_state: true, ... }` (terminal
- *         promotion always carries the explicit clear directive).
- *      b. Below limit → return updated `waiting_for_provider` with bumped
- *         `pause_count` and `clear_persisted_state: false`; `paused_at` and
- *         `stranded_node_ids` are preserved.
- *
- * This function never mutates its inputs.
- */
-export function advancePausedState(opts) {
-    const { current, rediscoveredProviders, settledExclusions, livelockLimit } = opts;
-    const genuinelyNew = filterNewProviders(rediscoveredProviders, settledExclusions);
-    // New capacity arrived — transition back to running. Resume always carries
-    // the explicit clear-persisted-state directive (CP-NODE-3(a)).
-    if (genuinelyNew.length > 0) {
-        return { kind: "running", clear_persisted_state: true };
-    }
-    // No new capacity — increment pause count and check for livelock.
-    const nextPauseCount = current.pause_count + 1;
-    const livelock = checkLivelockGuard(nextPauseCount, 0, livelockLimit);
-    if (livelock) {
-        // Terminal promotion always carries the explicit clear directive
-        // (CP-NODE-3(a)) — the run has left the resumable-pause cycle.
-        return {
-            kind: "terminal",
-            reason: "livelock",
-            stranded_node_ids: current.stranded_node_ids,
-            clear_persisted_state: true,
-        };
-    }
-    // Still waiting — bump pause count, preserve everything else. A
-    // continued-pause transition never carries the clear directive
-    // (CP-NODE-3(a)): the persisted record must be KEPT, not cleared.
-    return {
-        kind: "waiting_for_provider",
-        paused_at: current.paused_at,
-        pause_count: nextPauseCount,
-        stranded_node_ids: current.stranded_node_ids,
-        clear_persisted_state: false,
-    };
-}
-// ---------------------------------------------------------------------------
-// classifyProviderConstructionAttempt
-// ---------------------------------------------------------------------------
-/**
- * Classify a SYNCHRONOUS provider-construction attempt (CP-NODE-3(b)).
- *
- * Invokes `attemptConstruction` exactly once. A clean return means
- * construction succeeded — returns `null`, and the caller proceeds with the
- * ordinary `advancePausedState` pause/resume decision unchanged.
- *
- * A throw carrying CP-NODE-4's structured `ProviderLaunchOutcomeEnvelope`
- * (`.launchOutcome.outcome === "construction_failed"`, e.g. from
- * `ProviderConstructionError` — see `../providers/providerFactory.js`) is
- * classified here as a TERMINAL configuration failure and returned directly,
- * WITHOUT touching `pause_count` or re-discovery: this function takes no
- * `current` paused state and never calls `filterNewProviders` /
- * `checkLivelockGuard`, so a construction failure can never increment a
- * pause count or re-enter re-discovery, whether or not a pause was already
- * in progress. A permanently misconfigured provider (missing required
- * config, unrecognized provider name) cannot be fixed by waiting or
- * re-discovering — routing it through the ordinary retryable pause path
- * would only busy-loop the same broken config forever.
- *
- * A throw that does NOT carry a construction-failure envelope (an
- * unclassifiable error, or no `.launchOutcome` at all) propagates UNCHANGED
- * — this function only special-cases a positively-identified construction
- * failure; it never swallows an error it cannot classify.
- *
- * Still I/O-free: `attemptConstruction` is caller-injected (the actual
- * provider-construction call lives in the providers layer), so this module
- * gains no new runtime dependency — it only inspects the SHAPE of what
- * `attemptConstruction` throws.
- *
- * @param attemptConstruction  Zero-arg callback that performs (or simulates,
- *   in tests) a synchronous provider-construction attempt.
- * @param strandedNodeIds      Node IDs to carry onto the terminal state when
- *   classified as a construction failure.
- * @returns The terminal configuration-failure state, or `null` when
- *   construction succeeded (not a construction failure).
- */
-export function classifyProviderConstructionAttempt(attemptConstruction, strandedNodeIds) {
-    try {
-        attemptConstruction();
-        return null;
-    }
-    catch (err) {
-        const envelope = err
-            ?.launchOutcome;
-        if (envelope?.outcome !== "construction_failed") {
-            // Not a classifiable construction failure — do not swallow it.
-            throw err;
-        }
-        return {
-            kind: "terminal",
-            reason: "configuration",
-            stranded_node_ids: [...strandedNodeIds],
-            clear_persisted_state: true,
-        };
-    }
-}
-//# sourceMappingURL=pausedState.js.map

package/dist/shared/rolling/pausedState.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pausedState.js","sourceRoot":"","sources":["../../../src/shared/rolling/pausedState.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAoEH,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAoB,EACpB,OAA4B;IAE5B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,cAAsB,EACtB,QAAgB,oBAAoB;IAEpC,OAAO,UAAU,IAAI,KAAK,IAAI,cAAc,KAAK,CAAC,CAAC;AACrD,CAAC;AAoBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAA+B;IAE/B,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAElF,MAAM,YAAY,GAAG,kBAAkB,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;IAElF,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,kEAAkE;IAClE,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,cAAc,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;IAEtE,IAAI,QAAQ,EAAE,CAAC;QACb,iEAAiE;QACjE,+DAA+D;QAC/D,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,UAAU;YAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,qBAAqB,EAAE,IAAI;SAC5B,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,+DAA+D;IAC/D,kEAAkE;IAClE,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,cAAc;QAC3B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,qBAAqB,EAAE,KAAK;KAC7B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,UAAU,mCAAmC,CACjD,mBAA+B,EAC/B,eAAyB;IAEzB,IAAI,CAAC;QACH,mBAAmB,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAI,GAA4E;YAC5F,EAAE,aAAa,CAAC;QAClB,IAAI,QAAQ,EAAE,OAAO,KAAK,qBAAqB,EAAE,CAAC;YAChD,+DAA+D;YAC/D,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,eAAe;YACvB,iBAAiB,EAAE,CAAC,GAAG,eAAe,CAAC;YACvC,qBAAqB,EAAE,IAAI;SAC5B,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/shared/types/attributionContract.d.ts

@@ -1,198 +0,0 @@
-import { z } from "zod";
-import { type Lens } from "./lens.js";
-import { type ResolvedProviderName } from "./sessionConfig.js";
-export type OpaqueModelId = string & {
-    readonly __opaqueModelId: unique symbol;
-};
-/** Brand a provider-owned model id without interpreting its contents. */
-export declare function asOpaqueModelId(value: string): OpaqueModelId;
-export declare const AttributionTripleSchema: z.ZodObject<{
-    provider: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodType<ResolvedProviderName, z.ZodTypeDef, ResolvedProviderName>]>>, "unknown" | "worker-command" | "subprocess-template" | "claude-code" | "claude-worker" | "codex" | "opencode" | "openai-compatible" | "vscode-task" | "antigravity" | "agy", "unknown" | ResolvedProviderName | undefined>;
-    model: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodEffects<z.ZodString, OpaqueModelId, string>]>>, "unknown" | OpaqueModelId, string | undefined>;
-    rank: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodEnum<["small", "standard", "deep"]>]>>, "unknown" | "small" | "standard" | "deep", "unknown" | "small" | "standard" | "deep" | undefined>;
-}, "strict", z.ZodTypeAny, {
-    model: "unknown" | OpaqueModelId;
-    provider: "unknown" | "worker-command" | "subprocess-template" | "claude-code" | "claude-worker" | "codex" | "opencode" | "openai-compatible" | "vscode-task" | "antigravity" | "agy";
-    rank: "unknown" | "small" | "standard" | "deep";
-}, {
-    model?: string | undefined;
-    provider?: "unknown" | ResolvedProviderName | undefined;
-    rank?: "unknown" | "small" | "standard" | "deep" | undefined;
-}>;
-export type AttributionTriple = z.infer<typeof AttributionTripleSchema>;
-type AttributionProvider = AttributionTriple["provider"];
-type AttributionModel = AttributionTriple["model"];
-type AttributionLens = Lens | "unknown";
-export declare const DRAWS: readonly ["audit", "remediate"];
-export type Draw = (typeof DRAWS)[number];
-export declare const VERDICT_STAGES: readonly ["dedup_or_review", "plan_review_gate", "terminal_outcome", "ingest_refused"];
-export type VerdictStage = (typeof VERDICT_STAGES)[number];
-export declare const VERDICT_DETAILS: {
-    readonly dedup_or_review: readonly ["dedup_survived", "dedup_absorbed", "review_confirmed", "review_refuted"];
-    readonly plan_review_gate: readonly ["approved", "declined"];
-    readonly terminal_outcome: ["resolved", "verified_no_change", "inappropriate", "ignored", "blocked"];
-    readonly ingest_refused: readonly ["schema_invalid", "coverage_mismatch", "affirmation_missing"];
-};
-type VerdictDetailByStage = {
-    [Stage in VerdictStage]: (typeof VERDICT_DETAILS)[Stage][number];
-};
-export type VerdictDetail = VerdictDetailByStage[VerdictStage];
-export declare const STAGE_OWNERSHIP: {
-    readonly dedup_or_review: ReadonlySet<"audit" | "remediate">;
-    readonly plan_review_gate: ReadonlySet<"audit" | "remediate">;
-    readonly terminal_outcome: ReadonlySet<"audit" | "remediate">;
-    readonly ingest_refused: ReadonlySet<"audit" | "remediate">;
-};
-export declare const AttributionProvenanceSchema: z.ZodEnum<["stamped", "legacy_unstamped"]>;
-export type AttributionProvenance = z.infer<typeof AttributionProvenanceSchema>;
-export type RowKind = "attempt" | "verdict";
-declare const DispatchAttemptOutcomeSchema: z.ZodEnum<["completed", "ingest_refused", "stranded", "provider_unavailable"]>;
-export type DispatchAttemptOutcome = z.infer<typeof DispatchAttemptOutcomeSchema>;
-export declare const DispatchAttemptRowSchema: z.ZodObject<{
-    lens: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodEnum<["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]>]>>, "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability", "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability" | undefined>;
-    draw: z.ZodEnum<["audit", "remediate"]>;
-    outcome: z.ZodEnum<["completed", "ingest_refused", "stranded", "provider_unavailable"]>;
-    findings_produced: z.ZodNumber;
-    provider: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodType<ResolvedProviderName, z.ZodTypeDef, ResolvedProviderName>]>>, "unknown" | "worker-command" | "subprocess-template" | "claude-code" | "claude-worker" | "codex" | "opencode" | "openai-compatible" | "vscode-task" | "antigravity" | "agy", "unknown" | ResolvedProviderName | undefined>;
-    model: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodEffects<z.ZodString, OpaqueModelId, string>]>>, "unknown" | OpaqueModelId, string | undefined>;
-    rank: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodEnum<["small", "standard", "deep"]>]>>, "unknown" | "small" | "standard" | "deep", "unknown" | "small" | "standard" | "deep" | undefined>;
-    row_kind: z.ZodLiteral<"attempt">;
-    /**
-     * Produced by `buildAttemptKey` (`audit-tools/shared`, single-sourced beside the
-     * other key derivations) over {packet task ids, bound pool id, emit-source
-     * discriminator}. Deterministic and replay-stable: nothing minted, nothing
-     * positional.
-     *
-     * ⚠ The originating contract specified this as hashing "the admission identity
-     * the admission-control seam already mints". No such identity exists — verified
-     * against source 2026-08-09 — and the nearest candidates all fail: `lease_id` is
-     * null on the unmetered default lane, `packet_id` is a position ordinal that
-     * renumbers on re-partition, and `newInstanceId` is random. `buildAttemptKey`'s
-     * docblock carries the full reasoning.
-     *
-     * ROW-SET INVARIANT: rows are expected to be UNIQUE per attempt_key. Two
-     * concurrent admissions of one packet to one pool under one emit-source are one
-     * logical attempt by design, so the producer dedupes on write rather than every
-     * consumer deduping on read — `deriveAggregates` is a pure fold and counts rows.
-     * No producer exists yet; whatever emits these rows must honour this.
-     */
-    attempt_key: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    lens: "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability";
-    outcome: "completed" | "ingest_refused" | "stranded" | "provider_unavailable";
-    model: "unknown" | OpaqueModelId;
-    provider: "unknown" | "worker-command" | "subprocess-template" | "claude-code" | "claude-worker" | "codex" | "opencode" | "openai-compatible" | "vscode-task" | "antigravity" | "agy";
-    rank: "unknown" | "small" | "standard" | "deep";
-    row_kind: "attempt";
-    attempt_key: string;
-    draw: "audit" | "remediate";
-    findings_produced: number;
-}, {
-    outcome: "completed" | "ingest_refused" | "stranded" | "provider_unavailable";
-    row_kind: "attempt";
-    attempt_key: string;
-    draw: "audit" | "remediate";
-    findings_produced: number;
-    lens?: "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability" | undefined;
-    model?: string | undefined;
-    provider?: "unknown" | ResolvedProviderName | undefined;
-    rank?: "unknown" | "small" | "standard" | "deep" | undefined;
-}>;
-export type DispatchAttemptRow = z.infer<typeof DispatchAttemptRowSchema>;
-export declare const FindingVerdictRowSchema: z.ZodEffects<z.ZodObject<{
-    attribution_provenance: z.ZodEnum<["stamped", "legacy_unstamped"]>;
-    provider: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodType<ResolvedProviderName, z.ZodTypeDef, ResolvedProviderName>]>>, "unknown" | "worker-command" | "subprocess-template" | "claude-code" | "claude-worker" | "codex" | "opencode" | "openai-compatible" | "vscode-task" | "antigravity" | "agy", "unknown" | ResolvedProviderName | undefined>;
-    model: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodEffects<z.ZodString, OpaqueModelId, string>]>>, "unknown" | OpaqueModelId, string | undefined>;
-    rank: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodEnum<["small", "standard", "deep"]>]>>, "unknown" | "small" | "standard" | "deep", "unknown" | "small" | "standard" | "deep" | undefined>;
-    row_kind: z.ZodLiteral<"verdict">;
-    item_id: z.ZodString;
-    stage: z.ZodEnum<["dedup_or_review", "plan_review_gate", "terminal_outcome", "ingest_refused"]>;
-    detail: z.ZodUnion<[z.ZodEnum<["dedup_survived", "dedup_absorbed", "review_confirmed", "review_refuted"]>, z.ZodEnum<["approved", "declined"]>, z.ZodEnum<["resolved", "verified_no_change", "inappropriate", "ignored", "blocked"]>, z.ZodEnum<["schema_invalid", "coverage_mismatch", "affirmation_missing"]>]>;
-    draw: z.ZodEnum<["audit", "remediate"]>;
-    lens: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"unknown">, z.ZodEnum<["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]>]>>, "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability", "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability" | undefined>;
-    attempt_ref: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    lens: "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability";
-    model: "unknown" | OpaqueModelId;
-    provider: "unknown" | "worker-command" | "subprocess-template" | "claude-code" | "claude-worker" | "codex" | "opencode" | "openai-compatible" | "vscode-task" | "antigravity" | "agy";
-    rank: "unknown" | "small" | "standard" | "deep";
-    row_kind: "verdict";
-    draw: "audit" | "remediate";
-    item_id: string;
-    stage: "dedup_or_review" | "plan_review_gate" | "terminal_outcome" | "ingest_refused";
-    detail: "blocked" | "resolved" | "verified_no_change" | "inappropriate" | "ignored" | "declined" | "dedup_survived" | "dedup_absorbed" | "review_confirmed" | "review_refuted" | "approved" | "schema_invalid" | "coverage_mismatch" | "affirmation_missing";
-    attempt_ref: string;
-    attribution_provenance: "stamped" | "legacy_unstamped";
-}, {
-    row_kind: "verdict";
-    draw: "audit" | "remediate";
-    item_id: string;
-    stage: "dedup_or_review" | "plan_review_gate" | "terminal_outcome" | "ingest_refused";
-    detail: "blocked" | "resolved" | "verified_no_change" | "inappropriate" | "ignored" | "declined" | "dedup_survived" | "dedup_absorbed" | "review_confirmed" | "review_refuted" | "approved" | "schema_invalid" | "coverage_mismatch" | "affirmation_missing";
-    attempt_ref: string;
-    attribution_provenance: "stamped" | "legacy_unstamped";
-    lens?: "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability" | undefined;
-    model?: string | undefined;
-    provider?: "unknown" | ResolvedProviderName | undefined;
-    rank?: "unknown" | "small" | "standard" | "deep" | undefined;
-}>, {
-    lens: "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability";
-    model: "unknown" | OpaqueModelId;
-    provider: "unknown" | "worker-command" | "subprocess-template" | "claude-code" | "claude-worker" | "codex" | "opencode" | "openai-compatible" | "vscode-task" | "antigravity" | "agy";
-    rank: "unknown" | "small" | "standard" | "deep";
-    row_kind: "verdict";
-    draw: "audit" | "remediate";
-    item_id: string;
-    stage: "dedup_or_review" | "plan_review_gate" | "terminal_outcome" | "ingest_refused";
-    detail: "blocked" | "resolved" | "verified_no_change" | "inappropriate" | "ignored" | "declined" | "dedup_survived" | "dedup_absorbed" | "review_confirmed" | "review_refuted" | "approved" | "schema_invalid" | "coverage_mismatch" | "affirmation_missing";
-    attempt_ref: string;
-    attribution_provenance: "stamped" | "legacy_unstamped";
-}, {
-    row_kind: "verdict";
-    draw: "audit" | "remediate";
-    item_id: string;
-    stage: "dedup_or_review" | "plan_review_gate" | "terminal_outcome" | "ingest_refused";
-    detail: "blocked" | "resolved" | "verified_no_change" | "inappropriate" | "ignored" | "declined" | "dedup_survived" | "dedup_absorbed" | "review_confirmed" | "review_refuted" | "approved" | "schema_invalid" | "coverage_mismatch" | "affirmation_missing";
-    attempt_ref: string;
-    attribution_provenance: "stamped" | "legacy_unstamped";
-    lens?: "unknown" | "correctness" | "architecture" | "maintainability" | "security" | "reliability" | "performance" | "data_integrity" | "tests" | "operability" | "config_deployment" | "observability" | undefined;
-    model?: string | undefined;
-    provider?: "unknown" | ResolvedProviderName | undefined;
-    rank?: "unknown" | "small" | "standard" | "deep" | undefined;
-}>;
-export type FindingVerdictRow = z.infer<typeof FindingVerdictRowSchema>;
-export declare function isLegalDetail(stage: string, draw: string, detail: string): detail is VerdictDetail;
-export type DetailClassification = "accepted" | "rejected" | "excluded";
-/** Classify a legal stage/detail pair for its within-stage acceptance rate. */
-export declare function classifyDetail(stage: VerdictStage, detail: VerdictDetail): DetailClassification;
-/** Attempt-level reach population. */
-export interface ReachPopulation {
-    readonly population: "attempt";
-    readonly attempts_admitted: number;
-    readonly attempts_by_outcome: Readonly<Partial<Record<DispatchAttemptOutcome, number>>>;
-    readonly findings_produced: number;
-}
-/** One stage's verdict population and acceptance partition. */
-export interface VerdictStagePopulation {
-    readonly details: Readonly<Partial<Record<VerdictDetail, number>>>;
-    readonly accepted: number;
-    readonly rejected: number;
-    readonly excluded: number;
-    readonly acceptance_rate: number | null;
-}
-/** Verdict-level population, deliberately distinct from ReachPopulation. */
-export interface VerdictPopulation {
-    readonly population: "verdict";
-    readonly stages: Readonly<Partial<Record<VerdictStage, VerdictStagePopulation>>>;
-}
-type ProviderModelLensIndex<Population> = Partial<Record<AttributionProvider, Partial<Record<AttributionModel, Partial<Record<AttributionLens, Population>>>>>>;
-export type ReachAggregate = ProviderModelLensIndex<ReachPopulation>;
-export type VerdictAggregate = ProviderModelLensIndex<VerdictPopulation>;
-export interface DispatchEffectivenessAggregates {
-    readonly reach: ReachAggregate;
-    readonly verdicts: VerdictAggregate;
-}
-/** Derive provider/model/lens reach and verdict populations from stable rows. */
-export declare function deriveAggregates(rows: readonly (DispatchAttemptRow | FindingVerdictRow)[]): DispatchEffectivenessAggregates;
-export {};
-//# sourceMappingURL=attributionContract.d.ts.map

package/dist/shared/types/attributionContract.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attributionContract.d.ts","sourceRoot":"","sources":["../../../src/shared/types/attributionContract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAc,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAKlD,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAM5B,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG;IACnC,QAAQ,CAAC,eAAe,EAAE,OAAO,MAAM,CAAC;CACzC,CAAC;AAEF,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAE5D;AAkCD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;EAMzB,CAAC;AACZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,KAAK,mBAAmB,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;AACzD,KAAK,gBAAgB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACnD,KAAK,eAAe,GAAG,IAAI,GAAG,SAAS,CAAC;AAExC,eAAO,MAAM,KAAK,iCAAkC,CAAC;AACrD,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C,eAAO,MAAM,cAAc,wFAKjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,eAAO,MAAM,eAAe;;;;;CAclB,CAAC;AAEX,KAAK,oBAAoB,GAAG;KACzB,KAAK,IAAI,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;CACjE,CAAC;AACF,MAAM,MAAM,aAAa,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;AAM/D,eAAO,MAAM,eAAe;;;;;CAKgC,CAAC;AAE7D,eAAO,MAAM,2BAA2B,4CAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CACzC,OAAO,2BAA2B,CACnC,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAe5C,QAAA,MAAM,4BAA4B,gFAKhC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAC;AAEF,eAAO,MAAM,wBAAwB;;;;;;;;;IAGjC;;;;;;;;;;;;;;;;;;OAkBG;;;;;;;;;;;;;;;;;;;;;;EAQI,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBhC,CAAC;AACL,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AASxE,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM,IAAI,aAAa,CAQzB;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;AA6DxE,+EAA+E;AAC/E,wBAAgB,cAAc,CAC5B,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,aAAa,GACpB,oBAAoB,CAsBtB;AAED,sCAAsC;AACtC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CACpC,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC,CAChD,CAAC;IACF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED,+DAA+D;AAC/D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CACvB,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC,CACtD,CAAC;CACH;AAED,KAAK,sBAAsB,CAAC,UAAU,IAAI,OAAO,CAC/C,MAAM,CACJ,mBAAmB,EACnB,OAAO,CACL,MAAM,CACJ,gBAAgB,EAChB,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAC7C,CACF,CACF,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;AACrE,MAAM,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;AAEzE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC;AAuLD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,SAAS,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,EAAE,GACxD,+BAA+B,CAqBjC"}