codexgpt 1.0.0

package/dist/audit/lock.js

@@ -0,0 +1,195 @@
+import fs from "node:fs";
+import path from "node:path";
+import { randomBytes as nodeRandomBytes } from "node:crypto";
+import { z } from "zod";
+import { transactionStateDirectories } from "../transactions/stateRoot.js";
+import { classifyProcessLiveness } from "../transactions/workspaceLock.js";
+import { AuditError } from "./types.js";
+const auditLockOwnerV1Schema = z.object({
+    schemaVersion: z.literal(1),
+    lockToken: z.string().regex(/^auditlock_[a-f0-9]{32}$/),
+    instanceId: z.string().regex(/^instance_[a-f0-9]{32}$/),
+    pid: z.number().int().positive(),
+    createdAt: z.string().datetime({ offset: true })
+}).strict();
+const RELEASE_RETRY_DELAYS_MS = [1, 2, 4];
+const releaseRetrySignal = new Int32Array(new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT));
+function defaultReleaseRetryDelay(milliseconds) {
+    Atomics.wait(releaseRetrySignal, 0, 0, milliseconds);
+}
+function isTransientReleaseConflict(error) {
+    const code = error.code;
+    return code === "EPERM" || code === "EACCES" || code === "EBUSY";
+}
+function writeOwner(file, owner) {
+    let fd;
+    try {
+        fd = fs.openSync(file, "wx", 0o600);
+        fs.writeFileSync(fd, `${JSON.stringify(owner)}\n`, "utf8");
+        fs.fsyncSync(fd);
+    }
+    catch {
+        throw new AuditError("AUDIT_UNAVAILABLE", "Audit writer ownership could not be persisted.");
+    }
+    finally {
+        if (fd !== undefined)
+            fs.closeSync(fd);
+    }
+}
+function isDestinationExists(error) {
+    const code = error.code;
+    return code === "EEXIST" || code === "ENOTEMPTY" || code === "EPERM" || code === "EACCES";
+}
+export class AuditWriterLockHandle {
+    lockDirectory;
+    owner;
+    releaseRenameSync;
+    releaseRetryDelay;
+    released = false;
+    constructor(lockDirectory, owner, releaseRenameSync, releaseRetryDelay) {
+        this.lockDirectory = lockDirectory;
+        this.owner = owner;
+        this.releaseRenameSync = releaseRenameSync;
+        this.releaseRetryDelay = releaseRetryDelay;
+    }
+    assertOwnership() {
+        const ownerFile = path.join(this.lockDirectory, "owner.json");
+        let current;
+        try {
+            current = auditLockOwnerV1Schema.parse(JSON.parse(fs.readFileSync(ownerFile, "utf8")));
+        }
+        catch {
+            throw new AuditError("AUDIT_INTEGRITY_FAILURE", "Audit writer ownership is invalid.");
+        }
+        if (current.lockToken !== this.owner.lockToken ||
+            current.instanceId !== this.owner.instanceId ||
+            current.pid !== this.owner.pid) {
+            throw new AuditError("AUDIT_BUSY", "Audit writer lock ownership changed before release.");
+        }
+    }
+    release() {
+        if (this.released)
+            return;
+        const released = `${this.lockDirectory}.release-${this.owner.lockToken.slice(10, 26)}`;
+        for (let attempt = 0;; attempt += 1) {
+            this.assertOwnership();
+            try {
+                this.releaseRenameSync(this.lockDirectory, released);
+                break;
+            }
+            catch (error) {
+                const retryDelay = RELEASE_RETRY_DELAYS_MS[attempt];
+                if (!isTransientReleaseConflict(error) || retryDelay === undefined) {
+                    throw new AuditError("AUDIT_BUSY", "Audit writer lock could not be released safely.");
+                }
+                this.releaseRetryDelay(retryDelay);
+            }
+        }
+        fs.rmSync(released, { recursive: true, force: true });
+        this.released = true;
+    }
+}
+export class AuditWriterLock {
+    stateRoot;
+    registry;
+    randomBytes;
+    now;
+    kill;
+    releaseRenameSync;
+    releaseRetryDelay;
+    constructor(stateRoot, registry, dependencies = {}) {
+        this.stateRoot = stateRoot;
+        this.registry = registry;
+        this.randomBytes = dependencies.randomBytes ?? nodeRandomBytes;
+        this.now = dependencies.now ?? Date.now;
+        this.kill = dependencies.kill ?? process.kill.bind(process);
+        this.releaseRenameSync = dependencies.releaseRenameSync ?? fs.renameSync;
+        this.releaseRetryDelay = dependencies.releaseRetryDelay ?? defaultReleaseRetryDelay;
+    }
+    newOwner() {
+        const bytes = this.randomBytes(16);
+        if (!Buffer.isBuffer(bytes) || bytes.length !== 16) {
+            throw new AuditError("AUDIT_UNAVAILABLE", "Audit writer random source is invalid.");
+        }
+        return auditLockOwnerV1Schema.parse({
+            schemaVersion: 1,
+            lockToken: `auditlock_${bytes.toString("hex")}`,
+            instanceId: this.registry.record.instanceId,
+            pid: this.registry.record.pid,
+            createdAt: new Date(this.now()).toISOString()
+        });
+    }
+    publishClaim(lockRoot, lockDirectory) {
+        const claimBytes = this.randomBytes(8);
+        if (!Buffer.isBuffer(claimBytes) || claimBytes.length !== 8) {
+            throw new AuditError("AUDIT_UNAVAILABLE", "Audit claim random source is invalid.");
+        }
+        const claimDirectory = path.join(lockRoot, `.writer.claim-${claimBytes.toString("hex")}`);
+        const owner = this.newOwner();
+        try {
+            fs.mkdirSync(claimDirectory, { mode: 0o700 });
+            writeOwner(path.join(claimDirectory, "owner.json"), owner);
+            try {
+                fs.renameSync(claimDirectory, lockDirectory);
+                return new AuditWriterLockHandle(lockDirectory, owner, this.releaseRenameSync, this.releaseRetryDelay);
+            }
+            catch (error) {
+                if (!isDestinationExists(error)) {
+                    throw new AuditError("AUDIT_UNAVAILABLE", "Audit writer claim could not be published.");
+                }
+                return null;
+            }
+        }
+        finally {
+            try {
+                fs.rmSync(claimDirectory, { recursive: true, force: true });
+            }
+            catch {
+                // A failed private-claim cleanup cannot change published lock ownership.
+            }
+        }
+    }
+    acquire() {
+        const lockRoot = transactionStateDirectories(this.stateRoot).auditLocks;
+        fs.mkdirSync(lockRoot, { recursive: true, mode: 0o700 });
+        const lockDirectory = path.join(lockRoot, "writer.lock");
+        for (let attempt = 0; attempt < 4; attempt += 1) {
+            const handle = this.publishClaim(lockRoot, lockDirectory);
+            if (handle)
+                return handle;
+            let owner;
+            try {
+                owner = auditLockOwnerV1Schema.parse(JSON.parse(fs.readFileSync(path.join(lockDirectory, "owner.json"), "utf8")));
+            }
+            catch (error) {
+                if (error.code === "ENOENT") {
+                    throw new AuditError("AUDIT_BUSY", "Audit writer ownership changed during acquisition.");
+                }
+                throw new AuditError("AUDIT_INTEGRITY_FAILURE", "Audit writer owner cannot be verified.");
+            }
+            const liveness = classifyProcessLiveness(owner.pid, this.kill);
+            if (liveness !== "dead") {
+                throw new AuditError("AUDIT_BUSY", "Audit writer is already active.");
+            }
+            if (!this.registry.isVerifiable(owner.instanceId, owner.pid)) {
+                throw new AuditError("AUDIT_BUSY", "Dead audit writer ownership cannot be verified.");
+            }
+            const quarantineBytes = this.randomBytes(8);
+            if (!Buffer.isBuffer(quarantineBytes) || quarantineBytes.length !== 8) {
+                throw new AuditError("AUDIT_UNAVAILABLE", "Audit lock recovery random source is invalid.");
+            }
+            const quarantine = `${lockDirectory}.recovery-${quarantineBytes.toString("hex")}`;
+            try {
+                fs.renameSync(lockDirectory, quarantine);
+            }
+            catch (error) {
+                const code = error.code;
+                if (code === "ENOENT" || isDestinationExists(error))
+                    continue;
+                throw new AuditError("AUDIT_BUSY", "Dead audit writer lock could not be quarantined safely.");
+            }
+        }
+        throw new AuditError("AUDIT_BUSY", "Audit writer lock remained contended.");
+    }
+}
+//# sourceMappingURL=lock.js.map

package/dist/audit/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/audit/lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAEL,uBAAuB,EACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC;IACvD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;IACvD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AAYZ,MAAM,uBAAuB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAU,CAAC;AACnD,MAAM,kBAAkB,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAE/F,SAAS,wBAAwB,CAAC,YAAoB;IACpD,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;IACnD,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAuB;IACvD,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3D,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,gDAAgD,CAAC,CAAC;IAC9F,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;IACnD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,CAAC;AAC5F,CAAC;AAED,MAAM,OAAO,qBAAqB;IAIrB;IACQ;IACA;IACA;IANX,QAAQ,GAAG,KAAK,CAAC;IAEzB,YACW,aAAqB,EACb,KAAuB,EACvB,iBAAgE,EAChE,iBAAiD;QAHzD,kBAAa,GAAb,aAAa,CAAQ;QACb,UAAK,GAAL,KAAK,CAAkB;QACvB,sBAAiB,GAAjB,iBAAiB,CAA+C;QAChE,sBAAiB,GAAjB,iBAAiB,CAAgC;IACjE,CAAC;IAEI,eAAe;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC9D,IAAI,OAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAE,oCAAoC,CAAC,CAAC;QACxF,CAAC;QACD,IACE,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS;YAC1C,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU;YAC5C,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAC9B,CAAC;YACD,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,qDAAqD,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,aAAa,YAAY,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QACvF,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;gBACrD,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACpD,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBACnE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,iDAAiD,CAAC,CAAC;gBACxF,CAAC;gBACD,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,eAAe;IAQP;IACA;IARF,WAAW,CAA2B;IACtC,GAAG,CAAe;IAClB,IAAI,CAAmC;IACvC,iBAAiB,CAAgD;IACjE,iBAAiB,CAAiC;IAEnE,YACmB,SAAiB,EACjB,QAAiC,EAClD,eAA4C,EAAE;QAF7B,cAAS,GAAT,SAAS,CAAQ;QACjB,aAAQ,GAAR,QAAQ,CAAyB;QAGlD,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC,WAAW,IAAI,eAAe,CAAC;QAC/D,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,iBAAiB,GAAG,YAAY,CAAC,iBAAiB,IAAI,EAAE,CAAC,UAAU,CAAC;QACzE,IAAI,CAAC,iBAAiB,GAAG,YAAY,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IACtF,CAAC;IAEO,QAAQ;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,wCAAwC,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,sBAAsB,CAAC,KAAK,CAAC;YAClC,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,aAAa,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAC/C,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU;YAC3C,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;YAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,QAAgB,EAAE,aAAqB;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,uCAAuC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;gBAC7C,OAAO,IAAI,qBAAqB,CAC9B,aAAa,EACb,KAAK,EACL,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,iBAAiB,CACvB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,4CAA4C,CAAC,CAAC;gBAC1F,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC;QACxE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEzD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC1D,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAE1B,IAAI,KAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAClC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAC5E,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvD,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,oDAAoD,CAAC,CAAC;gBAC3F,CAAC;gBACD,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAE,wCAAwC,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,iCAAiC,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,iDAAiD,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,+CAA+C,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,UAAU,GAAG,GAAG,aAAa,aAAa,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;gBACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC9D,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,yDAAyD,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,uCAAuC,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/dist/audit/queryTool.js

@@ -0,0 +1,120 @@
+import { createHash } from "node:crypto";
+import { canonicalJson } from "./canonicalJson.js";
+import { queryAuditEventsInputV2Schema, queryAuditEventsResultV2Schema, queryAuditEventsInputV3Schema, queryAuditEventsResultV3Schema, queryAuditEventsInputV4Schema, queryAuditEventsResultV4Schema } from "./schemas.js";
+import { AuditError } from "./types.js";
+export function auditQueryFilterDigest(input) {
+    const parsed = queryAuditEventsInputV2Schema.parse(input);
+    const sorted = (values) => values ? [...values].sort() : null;
+    return createHash("sha256").update(canonicalJson({
+        startTime: parsed.startTime ?? null,
+        endTime: parsed.endTime ?? null,
+        limit: parsed.limit ?? 50,
+        eventTypes: sorted(parsed.eventTypes),
+        toolNames: sorted(parsed.toolNames),
+        requestIds: sorted(parsed.requestIds),
+        changeSetIds: sorted(parsed.changeSetIds),
+        workspaceRefs: sorted(parsed.workspaceRefs),
+        statuses: sorted(parsed.statuses)
+    }), "utf8").digest("hex");
+}
+export function auditQueryFilterDigestV3(input) {
+    const parsed = queryAuditEventsInputV3Schema.parse(input);
+    const sorted = (values) => values ? [...values].sort() : null;
+    return createHash("sha256")
+        .update("audit-query-v3\0", "utf8")
+        .update(canonicalJson({
+        projectionVersion: 3,
+        startTime: parsed.startTime ?? null,
+        endTime: parsed.endTime ?? null,
+        limit: parsed.limit ?? 50,
+        eventTypes: sorted(parsed.eventTypes),
+        toolNames: sorted(parsed.toolNames),
+        requestIds: sorted(parsed.requestIds),
+        changeSetIds: sorted(parsed.changeSetIds),
+        workspaceRefs: sorted(parsed.workspaceRefs),
+        statuses: sorted(parsed.statuses)
+    }), "utf8")
+        .digest("hex");
+}
+export function auditQueryFilterDigestV4(input) {
+    const parsed = queryAuditEventsInputV4Schema.parse(input);
+    const sorted = (values) => values ? [...values].sort() : null;
+    return createHash("sha256")
+        .update("audit-query-v4\0", "utf8")
+        .update(canonicalJson({
+        projectionVersion: 4,
+        startTime: parsed.startTime ?? null,
+        endTime: parsed.endTime ?? null,
+        limit: parsed.limit ?? 50,
+        eventTypes: sorted(parsed.eventTypes),
+        toolNames: sorted(parsed.toolNames),
+        requestIds: sorted(parsed.requestIds),
+        repositoryIds: sorted(parsed.repositoryIds),
+        taskWorktreeIds: sorted(parsed.taskWorktreeIds),
+        resultCodes: sorted(parsed.resultCodes)
+    }), "utf8")
+        .digest("hex");
+}
+export function createAuditQueryHandler(store) {
+    return async (input) => {
+        const result = await store.query(input);
+        await store.recordQuery(result.filterDigest, result.records.length);
+        return result;
+    };
+}
+export function createAuditQueryHandlerV3(store) {
+    return async (input) => {
+        const result = await store.queryV3(input);
+        await store.recordQuery(result.filterDigest, result.records.length);
+        return result;
+    };
+}
+export function createAuditQueryHandlerV4(store) {
+    return async (input) => {
+        const result = await store.queryV4(input);
+        await store.recordQuery(result.filterDigest, result.records.length);
+        return result;
+    };
+}
+export async function queryAuditEventsV2(handler, input) {
+    const parsed = queryAuditEventsInputV2Schema.safeParse(input);
+    if (!parsed.success) {
+        throw new AuditError("AUDIT_RANGE_INVALID", "Audit query input is invalid.");
+    }
+    return queryAuditEventsResultV2Schema.parse(await handler(parsed.data));
+}
+export async function queryAuditEventsV3(handler, input) {
+    const parsed = queryAuditEventsInputV3Schema.safeParse(input);
+    if (!parsed.success) {
+        throw new AuditError("AUDIT_RANGE_INVALID", "Audit query input is invalid.");
+    }
+    return queryAuditEventsResultV3Schema.parse(await handler(parsed.data));
+}
+export async function queryAuditEventsV4(handler, input) {
+    const parsed = queryAuditEventsInputV4Schema.safeParse(input);
+    if (!parsed.success) {
+        throw new AuditError(input && typeof input === "object" && "cursor" in input
+            ? "AUDIT_CURSOR_INVALID"
+            : "AUDIT_RANGE_INVALID", "Audit query input is invalid.");
+    }
+    return queryAuditEventsResultV4Schema.parse(await handler(parsed.data));
+}
+export function createDirectAuditQueryAdapterV3(handler) {
+    return (input) => queryAuditEventsV3(handler, input);
+}
+export function createSupertoolAuditQueryAdapterV3(handler) {
+    return (input) => queryAuditEventsV3(handler, input);
+}
+export function createDirectAuditQueryAdapterV4(handler) {
+    return (input) => queryAuditEventsV4(handler, input);
+}
+export function createSupertoolAuditQueryAdapterV4(handler) {
+    return (input) => queryAuditEventsV4(handler, input);
+}
+export function createDirectAuditQueryAdapterV2(handler) {
+    return (input) => queryAuditEventsV2(handler, input);
+}
+export function createSupertoolAuditQueryAdapterV2(handler) {
+    return (input) => queryAuditEventsV2(handler, input);
+}
+//# sourceMappingURL=queryTool.js.map

package/dist/audit/queryTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queryTool.js","sourceRoot":"","sources":["../../src/audit/queryTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,8BAA8B,EAC/B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,UAAU,EAOX,MAAM,YAAY,CAAC;AAcpB,MAAM,UAAU,sBAAsB,CAAC,KAA8B;IACnE,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAmB,MAAuB,EAAc,EAAE,CACvE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAC/C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KAClC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAA8B;IACrE,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAmB,MAAuB,EAAc,EAAE,CACvE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC;SAClC,MAAM,CAAC,aAAa,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KAClC,CAAC,EAAE,MAAM,CAAC;SACV,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAmB,MAAuB,EAAc,EAAE,CACvE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC;SAClC,MAAM,CAAC,aAAa,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3C,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;QAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;KACxC,CAAC,EAAE,MAAM,CAAC;SACV,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAA2B;IACjE,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAA2B;IACnE,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAA2B;IACnE,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA4B,EAC5B,KAAc;IAEd,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,8BAA8B,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA4B,EAC5B,KAAc;IAEd,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,8BAA8B,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA4B,EAC5B,KAAc;IAEd,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAClB,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK;YACrD,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,qBAAqB,EACzB,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,8BAA8B,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,OAA4B;IAE5B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAA4B;IAE5B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,OAA4B;IAE5B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAA4B;IAE5B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,OAA4B;IAE5B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAA4B;IAE5B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC"}

package/dist/audit/runtime.js

@@ -0,0 +1,48 @@
+import { randomUUID } from "node:crypto";
+import { executionAuditEventV2Schema } from "./schemas.js";
+export class PersistentAuditRuntimeV2 {
+    store;
+    now;
+    eventId;
+    constructor(store, options = {}) {
+        this.store = store;
+        this.now = options.now ?? Date.now;
+        this.eventId = options.eventId ?? (() => `event_${randomUUID().replaceAll("-", "")}`);
+    }
+    async persistAuthorization(context) {
+        await this.store.append(context.authorizationEvent);
+    }
+    async persistExecution(context, input) {
+        const authorization = context.authorizationEvent;
+        const event = executionAuditEventV2Schema.parse({
+            schemaVersion: 2,
+            eventId: this.eventId(),
+            eventType: "execution",
+            timestamp: new Date(this.now()).toISOString(),
+            requestId: authorization.requestId,
+            authorizationEventId: authorization.eventId,
+            decisionId: authorization.decisionId,
+            credentialRef: authorization.credentialRef,
+            transportSessionId: authorization.transportSessionId,
+            toolName: authorization.toolName,
+            canonicalAction: authorization.canonicalAction,
+            workspaceId: authorization.workspaceId,
+            workspaceRef: authorization.workspaceRef,
+            policyRevision: authorization.policyRevision,
+            status: input.status,
+            resultCode: input.resultCode,
+            durationMs: input.durationMs,
+            exitCode: input.exitCode,
+            boundedByteCounts: input.boundedByteCounts,
+            changeSetId: input.changeSetId,
+            revertsChangeSetId: input.revertsChangeSetId ?? null,
+            operationCount: input.operationCount,
+            mutationKinds: input.mutationKinds,
+            recoveryRequired: input.recoveryRequired,
+            ...(input.semanticFacts ? { semanticFacts: input.semanticFacts } : {})
+        });
+        await this.store.append(event);
+        return { eventId: event.eventId, timestamp: event.timestamp };
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/audit/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/audit/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAc3D,MAAM,OAAO,wBAAwB;IAKhB;IAJF,GAAG,CAAe;IAClB,OAAO,CAAe;IAEvC,YACmB,KAA2B,EAC5C,UAAyC,EAAE;QAD1B,UAAK,GAAL,KAAK,CAAsB;QAG5C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAoC;QAC7D,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,OAAoC,EACpC,KAA4B;QAE5B,MAAM,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;QACjD,MAAM,KAAK,GAA0B,2BAA2B,CAAC,KAAK,CAAC;YACrE,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,SAAS,EAAE,WAAW;YACtB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC7C,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,oBAAoB,EAAE,aAAa,CAAC,OAAO;YAC3C,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,aAAa,EAAE,aAAa,CAAC,aAAa;YAC1C,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;YACpD,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAChE,CAAC;CACF"}