create-principles-disciple 1.145.0 → 1.145.3

package/core/dist/runtime-v2/internalization/evidence-readiness.js

@@ -0,0 +1,335 @@
+/**
+ * PRI-981 (SPEC-PD-IAER-001 FR-01) — Evidence Readiness Gate (evidence-readiness.ts)
+ *
+ * Shared, side-effect-free judgment of whether an Artificer V2 execution has
+ * the Owner-labelled evidence it requires. Pure logic: this module imports
+ * node:crypto for the evidence content hash only (intent-hash.ts precedent)
+ * and performs NO I/O — the caller injects the assembly step.
+ *
+ * One judgment authority, one validator: the pack check REUSES
+ * `validateBehaviorExamplePack` (behavior-example-pack.ts) — this module must
+ * never grow a second, divergent pack validation.
+ *
+ * Err-prevention / contract IDs:
+ *   - ERR-069: an invalid pack fails the attempt LOUD — the gate reports
+ *     `invalid_evidence`, it never silently fabricates or drops evidence.
+ *   - rc-1/rc-2: the Owner selection and assembled pack are treated as
+ *     untrusted — structural guards only, no `as` bypass.
+ *   - rc-3: required selection fields fail explicitly (missingFields /
+ *     structured reason), never skipped silently.
+ *   - rc-4: `positiveToolCallIds` is validated element-by-element (safe
+ *     positive integers, uniqueness, 1..3), not just "is array".
+ *   - rc-5: `Object.hasOwn` over the `in` operator.
+ *   - rc-8: unknown failure details are serialized with a bounded preview.
+ *   - rc-9: every non-ready outcome carries a stable reasonCode and a
+ *     nextAction the Owner can act on.
+ *
+ * Reason codes (SPEC-PD-IAER-001 FR-04 stable IDs): `owner_behavior_examples_required`,
+ * `owner_behavior_examples_invalid`, `owner_behavior_examples_stale`,
+ * `owner_behavior_examples_scope_mismatch`. This pure gate reports `required`
+ * (nothing provided), `invalid` (provided but rejected), and — since B1
+ * (PRI-983) — `stale` / `scope_mismatch` when the assembler fails with the
+ * typed `OwnerEvidenceScopeError` (structural classification, never message
+ * sniffing): unresolvable pain/row references are `stale` (FR-03: cleaned
+ * trajectories must never be silently reused), cross-session selections are
+ * `scope_mismatch`. Plain errors stay `invalid` (A2 behavior unchanged).
+ * PRI-980 review P2-1 adds the §6.2 storage-fault family: the typed
+ * `evidence_source_error` kind → a distinct `evidence_source_error` verdict
+ * that is NOT an FR-04 owner-fault code.
+ *
+ * Channel authority: whether the target channel requires Owner evidence at
+ * all is DECLARED by the caller (`channelRequiresOwnerEvidence`) — this module
+ * does not guess channels (SPEC §4.2). A2 owns the authoritative wiring; this
+ * ticket provides the judgment only.
+ *
+ * Spec: docs/specs/SPEC-PD-IAER-001-v1.0.md §5 FR-01
+ */
+import { createHash } from 'node:crypto';
+import { validateBehaviorExamplePack } from './behavior-example-pack.js';
+// ── typed assembly-failure classification (B1, PRI-983) ────────────────────
+//
+// The plugin assembler previously failed evidence gaps with plain Errors, so
+// every assembly failure could only surface as `invalid_evidence` (A2
+// contract note). B1 adds a STRUCTURAL error classification — never message
+// sniffing — so resume can distinguish "trajectory cleaned/changed" (stale)
+// from "cross pain/session selection" (scope mismatch), the two stable FR-04
+// codes the recovery UX must separate.
+//
+// Cross-bundle note: the plugin bundle INLINES @principles/core (esbuild,
+// core not in `external`), so an `instanceof` check against this module's
+// class would fail across the pd-cli → plugin-bundle boundary. The stable
+// contract is therefore structural: the reserved error `name` plus a
+// validated `ownerEvidenceScopeKind` property (rc-5 hasOwn-style read, rc-1:
+// kind is validated, not trusted).
+/** Reserved error name for Owner evidence scope failures. Do not rename. */
+export const OWNER_EVIDENCE_SCOPE_ERROR_NAME = 'OwnerEvidenceScopeError';
+const SCOPE_MISMATCH_KINDS = new Set([
+    'pain_not_found',
+    'tool_call_not_found',
+    'session_mismatch',
+    'evidence_source_error',
+]);
+/** Map a structured SCOPE failure to its stable FR-04 reason code.
+ *  `evidence_source_error` must never enter here — it is not an owner-fault
+ *  code and is routed by the readiness gate before this helper. */
+function reasonCodeForScopeKind(kind) {
+    return kind === 'session_mismatch'
+        ? 'owner_behavior_examples_scope_mismatch'
+        : 'owner_behavior_examples_stale';
+}
+/** Build the typed error the plugin assembler throws for scope failures. */
+export function createOwnerEvidenceScopeError(kind, message) {
+    const error = new Error(message);
+    error.name = OWNER_EVIDENCE_SCOPE_ERROR_NAME;
+    Object.assign(error, { ownerEvidenceScopeKind: kind });
+    return error;
+}
+/** Structural guard (cross-bundle safe — see module comment above). */
+export function isOwnerEvidenceScopeError(value) {
+    if (!(value instanceof Error))
+        return false;
+    if (value.name !== OWNER_EVIDENCE_SCOPE_ERROR_NAME)
+        return false;
+    const kind = value.ownerEvidenceScopeKind;
+    return typeof kind === 'string' && SCOPE_MISMATCH_KINDS.has(kind);
+}
+// ── internal constants ─────────────────────────────────────────────────────
+const SELECTION_FIELD_NAMES = [
+    'sourcePainId',
+    'sourceNegativeToolCallId',
+    'positiveToolCallIds',
+    'ownerDesiredOutcome',
+];
+const MAX_POSITIVES = 3;
+/** rc-8: bounded previews for unknown failure details. */
+const MAX_DETAIL_LENGTH = 480;
+const MAX_VALIDATION_ERRORS = 8;
+/** `sha256:<64 lowercase hex chars>` — the only accepted contentDigest shape. */
+const CONTENT_DIGEST_PATTERN = /^sha256:[0-9a-f]{64}$/;
+// ── internal helpers ───────────────────────────────────────────────────────
+function isPlainObjectLike(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+    return typeof value === 'string' && value.trim().length > 0;
+}
+function isPositiveSafeInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value > 0;
+}
+/** rc-8: bounded, single-line serialization of an unknown error/detail. */
+function boundedDetail(value) {
+    let raw;
+    if (value instanceof Error) {
+        raw = value.message;
+    }
+    else if (typeof value === 'string') {
+        raw = value;
+    }
+    else {
+        try {
+            raw = JSON.stringify(value) ?? String(value);
+        }
+        catch {
+            raw = String(value);
+        }
+    }
+    const flat = raw.replace(/\s+/g, ' ').trim();
+    return flat.length > MAX_DETAIL_LENGTH
+        ? `${flat.slice(0, MAX_DETAIL_LENGTH)}…[truncated]`
+        : flat;
+}
+/**
+ * Structural validation of the Owner selection (rc-1..rc-5). Returns the list
+ * of field-level problems; an empty list means the selection is usable.
+ * Semantics deliberately mirror `validateOwnerSelection` in the plugin
+ * assembler (positive safe integers, 1..3 unique positives, non-empty text):
+ * a present-but-unusable selection is REJECTED, never repaired here.
+ *
+ * PRI-982: exported as the SINGLE shape authority for the persisted
+ * `pi_metadata.ownerEvidenceSelection` field — pitask-metadata parse reuses
+ * this validator so the persistence layer and the readiness gate can never
+ * diverge on what a usable selection is. Takes `unknown` (rc-1: the metadata
+ * parse reads it from a DB row) and rejects non-objects itself.
+ */
+export function validateOwnerEvidenceSelectionShape(selection) {
+    const problems = [];
+    if (!isPlainObjectLike(selection)) {
+        return ['ownerSelection must be a plain object'];
+    }
+    if (!Object.hasOwn(selection, 'sourcePainId') || !isNonEmptyString(selection.sourcePainId)) {
+        problems.push('ownerSelection.sourcePainId must be a non-empty string');
+    }
+    if (!Object.hasOwn(selection, 'sourceNegativeToolCallId')
+        || !isPositiveSafeInteger(selection.sourceNegativeToolCallId)) {
+        problems.push('ownerSelection.sourceNegativeToolCallId must be a positive safe integer');
+    }
+    if (!Object.hasOwn(selection, 'positiveToolCallIds') || !Array.isArray(selection.positiveToolCallIds)) {
+        problems.push('ownerSelection.positiveToolCallIds must be an array');
+    }
+    else {
+        const ids = selection.positiveToolCallIds;
+        if (ids.length === 0 || ids.length > MAX_POSITIVES) {
+            problems.push(`ownerSelection.positiveToolCallIds must contain 1 to at most ${MAX_POSITIVES} IDs, got ${ids.length}`);
+        }
+        for (let i = 0; i < ids.length; i++) {
+            if (!isPositiveSafeInteger(ids[i])) {
+                problems.push(`ownerSelection.positiveToolCallIds[${i}] must be a positive safe integer`);
+            }
+        }
+        if (new Set(ids).size !== ids.length) {
+            problems.push('ownerSelection.positiveToolCallIds must be unique');
+        }
+    }
+    if (!Object.hasOwn(selection, 'ownerDesiredOutcome') || !isNonEmptyString(selection.ownerDesiredOutcome)) {
+        problems.push('ownerSelection.ownerDesiredOutcome must be a non-empty string');
+    }
+    // ── B1 (PRI-983 FR-03) persisted provenance fields — optional (ABSENT =
+    // legacy A2 record), but presence MUST be well-formed: a corrupted
+    // provenance field fails the whole selection here, which (via the
+    // pitask-metadata parse delegation) fails the whole metadata closed.
+    if (Object.hasOwn(selection, 'revision') && selection.revision !== undefined) {
+        if (typeof selection.revision !== 'number' || !Number.isSafeInteger(selection.revision) || selection.revision < 1) {
+            problems.push('ownerSelection.revision must be a positive safe integer when present');
+        }
+    }
+    if (Object.hasOwn(selection, 'contentDigest') && selection.contentDigest !== undefined) {
+        if (typeof selection.contentDigest !== 'string' || !CONTENT_DIGEST_PATTERN.test(selection.contentDigest)) {
+            problems.push('ownerSelection.contentDigest must match sha256:<64 hex> when present');
+        }
+    }
+    if (Object.hasOwn(selection, 'ownerOperation') && selection.ownerOperation !== undefined) {
+        if (!isNonEmptyString(selection.ownerOperation)) {
+            problems.push('ownerSelection.ownerOperation must be a non-empty string when present');
+        }
+    }
+    if (Object.hasOwn(selection, 'attachedAt') && selection.attachedAt !== undefined) {
+        if (!isNonEmptyString(selection.attachedAt)) {
+            problems.push('ownerSelection.attachedAt must be a non-empty ISO string when present');
+        }
+    }
+    return problems;
+}
+/** `sha256:<hex>` content digest over the pack's canonical JSON (rc-6: one hash convention). */
+export function computeBehaviorExamplePackDigest(pack) {
+    return `sha256:${createHash('sha256').update(JSON.stringify(pack), 'utf8').digest('hex')}`;
+}
+// ── public entry point ─────────────────────────────────────────────────────
+/**
+ * Pure evidence readiness judgment (FR-01). No I/O, no state — the caller
+ * injects the assembly step and declares channel applicability.
+ *
+ * Decision order:
+ *   1. channel does not require evidence → `not_applicable`;
+ *   2. no Owner selection → `owner_evidence_required` + missingFields;
+ *   3. selection present but structurally unusable → `invalid_evidence`
+ *      (assembler validateOwnerSelection semantics);
+ *   4. assembly throws / pre-assembled failure → `invalid_evidence` with the
+ *      bounded error detail (never swallowed);
+ *   5. assembled pack fails `validateBehaviorExamplePack` → `invalid_evidence`
+ *      (single validator authority);
+ *   6. otherwise → `ready` with the pack, its `sha256:<hex>` evidence hash,
+ *      and the source pain ID.
+ */
+export function assessEvidenceReadiness(input) {
+    // 1. Caller-declared channel authority. Fail closed: anything but an
+    //    explicit `false` counts as requiring evidence.
+    if (input.channelRequiresOwnerEvidence === false) {
+        return { status: 'not_applicable' };
+    }
+    // 2. Owner selection presence (rc-3: missing fields reported explicitly).
+    const selection = input.ownerSelection;
+    if (selection === undefined || selection === null) {
+        return {
+            status: 'owner_evidence_required',
+            reasonCode: 'owner_behavior_examples_required',
+            missingFields: SELECTION_FIELD_NAMES,
+            nextAction: 'Owner must provide the labelled behaviour examples (sourcePainId, sourceNegativeToolCallId, positiveToolCallIds 1..3 unique, ownerDesiredOutcome) via the evidence recovery entry (SPEC-PD-IAER-001 FR-06) before this task can run.',
+        };
+    }
+    // 3. Selection shape (untrusted — rc-1..rc-5; assembler-aligned rejection).
+    const selectionProblems = validateOwnerEvidenceSelectionShape(selection);
+    if (selectionProblems.length > 0) {
+        return {
+            status: 'invalid_evidence',
+            reasonCode: 'owner_behavior_examples_invalid',
+            detail: boundedDetail(selectionProblems.join('; ')),
+            nextAction: 'Owner must resubmit a complete, valid evidence selection (positive safe integer tool-call IDs, 1..3 unique positives, non-empty outcome).',
+        };
+    }
+    // 4. Assembly — callback (throws captured) or pre-computed outcome.
+    let assemblyError;
+    let pack;
+    if (input.assemblePack !== undefined) {
+        try {
+            pack = input.assemblePack();
+        }
+        catch (error) {
+            assemblyError = error;
+        }
+    }
+    else if (input.assemblyResult !== undefined) {
+        if (input.assemblyResult.ok) {
+            ({ pack } = input.assemblyResult);
+        }
+        else {
+            assemblyError = input.assemblyResult.error;
+        }
+    }
+    if (pack === undefined) {
+        // B1: structured scope classification first (typed error, never message
+        // sniffing). pain/row unresolvable → stale (FR-03: cleaned trajectory must
+        // not be silently reused); cross-session selection → scope mismatch
+        // (SPEC FR-04). PRI-980 review P2-1: a typed evidence_source_error (the
+        // assembler's trajectory-store I/O failure) is routed to the §6.2
+        // storage-fault family — task-side routing must keep the task
+        // wake-eligible, never write an owner-fault reason. Plain errors stay
+        // `invalid` (A2 behavior unchanged).
+        if (isOwnerEvidenceScopeError(assemblyError)) {
+            if (assemblyError.ownerEvidenceScopeKind === 'evidence_source_error') {
+                return {
+                    status: 'evidence_source_error',
+                    reason: 'evidence_source_error',
+                    detail: boundedDetail(assemblyError.message),
+                    nextAction: 'The evidence source itself failed (trajectory store I/O); this is NOT an Owner evidence fault. The task stays wake-eligible and the next cycle retries assembly at zero model cost; if it persists, inspect the trajectory store for this workspace (pd runtime internalization integrity --json).',
+                };
+            }
+            const reasonCode = reasonCodeForScopeKind(assemblyError.ownerEvidenceScopeKind);
+            return {
+                status: 'invalid_evidence',
+                reasonCode,
+                detail: boundedDetail(`${assemblyError.ownerEvidenceScopeKind}: ${assemblyError.message}`),
+                nextAction: reasonCode === 'owner_behavior_examples_stale'
+                    ? 'Trajectory evidence is missing or has changed; Owner must re-attach fresh examples (pd runtime internalization evidence attach --confirm) before this task can resume.'
+                    : 'Owner must select tool calls that belong to the referenced pain session (cross pain/session selections are refused), then re-attach.',
+            };
+        }
+        return {
+            status: 'invalid_evidence',
+            reasonCode: 'owner_behavior_examples_invalid',
+            detail: boundedDetail(assemblyError),
+            nextAction: 'Evidence assembly failed; Owner must re-select examples that still exist in the pain lineage, then retry (do not blindly retry the task).',
+        };
+    }
+    // 5. Single pack-validation authority (reuse, never a second validator).
+    const validation = validateBehaviorExamplePack(pack);
+    if (!validation.valid) {
+        const errors = validation.errors.slice(0, MAX_VALIDATION_ERRORS);
+        const truncated = validation.errors.length > errors.length
+            ? ` …[+${validation.errors.length - errors.length} more]`
+            : '';
+        return {
+            status: 'invalid_evidence',
+            reasonCode: 'owner_behavior_examples_invalid',
+            detail: boundedDetail(`${errors.join('; ')}${truncated}`),
+            nextAction: 'Owner-provided evidence failed the BehaviorExamplePack contract; Owner must correct the labelled examples and resubmit.',
+        };
+    }
+    // 6. Ready.
+    return {
+        status: 'ready',
+        pack,
+        evidenceHash: computeBehaviorExamplePackDigest(pack),
+        sourcePainId: selection.sourcePainId,
+    };
+}
+//# sourceMappingURL=evidence-readiness.js.map

package/core/dist/runtime-v2/internalization/evidence-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-readiness.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/evidence-readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,2BAA2B,EAA4B,MAAM,4BAA4B,CAAC;AAiDnG,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,uCAAuC;AACvC,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,qEAAqE;AACrE,6EAA6E;AAC7E,mCAAmC;AAEnC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,yBAAyB,CAAC;AA0BzE,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,gBAAgB;IAChB,qBAAqB;IACrB,kBAAkB;IAClB,uBAAuB;CACxB,CAAC,CAAC;AAEH;;mEAEmE;AACnE,SAAS,sBAAsB,CAAC,IAAoC;IAClE,OAAO,IAAI,KAAK,kBAAkB;QAChC,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,+BAA+B,CAAC;AACtC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,6BAA6B,CAC3C,IAAoC,EACpC,OAAe;IAEf,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC7C,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,uEAAuE;AACvE,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAK,KAA4B,CAAC,IAAI,KAAK,+BAA+B;QAAE,OAAO,KAAK,CAAC;IACzF,MAAM,IAAI,GAAI,KAA8C,CAAC,sBAAsB,CAAC;IACpF,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AA0ED,8EAA8E;AAE9E,MAAM,qBAAqB,GAAsB;IAC/C,cAAc;IACd,0BAA0B;IAC1B,qBAAqB;IACrB,qBAAqB;CACtB,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,iFAAiF;AACjF,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAEvD,8EAA8E;AAE9E,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,GAAW,CAAC;IAChB,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,GAAG,GAAG,KAAK,CAAC;IACd,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,OAAO,IAAI,CAAC,MAAM,GAAG,iBAAiB;QACpC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,cAAc;QACnD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mCAAmC,CAAC,SAAkB;IACpE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3F,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC;WACpD,CAAC,qBAAqB,CAAC,SAAS,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtG,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,SAAS,CAAC,mBAAmB,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,gEAAgE,aAAa,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,mCAAmC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzG,QAAQ,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IACjF,CAAC;IAED,yEAAyE;IACzE,mEAAmE;IACnE,kEAAkE;IAClE,qEAAqE;IACrE,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC7E,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YAClH,QAAQ,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,IAAI,SAAS,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACvF,IAAI,OAAO,SAAS,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YACzG,QAAQ,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gCAAgC,CAAC,IAAyB;IACxE,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAA6B;IACnE,qEAAqE;IACrE,oDAAoD;IACpD,IAAI,KAAK,CAAC,4BAA4B,KAAK,KAAK,EAAE,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACtC,CAAC;IAED,0EAA0E;IAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC;IACvC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,yBAAyB;YACjC,UAAU,EAAE,kCAAkC;YAC9C,aAAa,EAAE,qBAAqB;YACpC,UAAU,EAAE,sOAAsO;SACnP,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,mCAAmC,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,UAAU,EAAE,iCAAiC;YAC7C,MAAM,EAAE,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,UAAU,EAAE,2IAA2I;SACxJ,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,IAAI,aAAsB,CAAC;IAC3B,IAAI,IAAqC,CAAC;IAC1C,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YAC5B,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,wEAAwE;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,wEAAwE;QACxE,kEAAkE;QAClE,8DAA8D;QAC9D,sEAAsE;QACtE,qCAAqC;QACrC,IAAI,yBAAyB,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7C,IAAI,aAAa,CAAC,sBAAsB,KAAK,uBAAuB,EAAE,CAAC;gBACrE,OAAO;oBACL,MAAM,EAAE,uBAAuB;oBAC/B,MAAM,EAAE,uBAAuB;oBAC/B,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC;oBAC5C,UAAU,EAAE,oSAAoS;iBACjT,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;YAChF,OAAO;gBACL,MAAM,EAAE,kBAAkB;gBAC1B,UAAU;gBACV,MAAM,EAAE,aAAa,CAAC,GAAG,aAAa,CAAC,sBAAsB,KAAK,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC1F,UAAU,EAAE,UAAU,KAAK,+BAA+B;oBACxD,CAAC,CAAC,wKAAwK;oBAC1K,CAAC,CAAC,sIAAsI;aAC3I,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,UAAU,EAAE,iCAAiC;YAC7C,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC;YACpC,UAAU,EAAE,2IAA2I;SACxJ,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;YACxD,CAAC,CAAC,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,QAAQ;YACzD,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,UAAU,EAAE,iCAAiC;YAC7C,MAAM,EAAE,aAAa,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;YACzD,UAAU,EAAE,yHAAyH;SACtI,CAAC;IACJ,CAAC;IAED,YAAY;IACZ,OAAO;QACL,MAAM,EAAE,OAAO;QACf,IAAI;QACJ,YAAY,EAAE,gCAAgC,CAAC,IAAI,CAAC;QACpD,YAAY,EAAE,SAAS,CAAC,YAAY;KACrC,CAAC;AACJ,CAAC"}

package/core/dist/runtime-v2/internalization/owner-evidence-recovery.d.ts

@@ -0,0 +1,190 @@
+/**
+ * owner-evidence-recovery.ts — Owner evidence attach/resume (B1, PRI-983).
+ *
+ * SPEC-PD-IAER-001 FR-03 (persist the Owner's evidence selection with
+ * revision/digest/provenance) and FR-06 (query → attach → atomic resume).
+ * This module is the ONE recovery sequence for evidence-waiting tasks;
+ * both CLI entries (`pd runtime internalization evidence attach|resume|list`)
+ * and any future Console face drive it — no logic is duplicated at the
+ * callers (same rule owner-retry.ts established for the NHR out-edge).
+ *
+ * Composition with existing authorities (P2/P4 — nothing new is invented):
+ *   - selection shape + readiness judgment: evidence-readiness.ts (A2);
+ *   - persisted location: `pi_metadata.ownerEvidenceSelection` inside
+ *     diagnosticJson (A2 field; B1 adds the provenance fields INSIDE the
+ *     selection object — pitask-metadata carries the object opaquely, the
+ *     shared shape authority validates the extended shape, ABSENT = legacy);
+ *   - the resume state transition itself: `ownerRetryNeedsHumanReviewTask`
+ *     (owner-retry.ts), called with the new optional CAS precondition —
+ *     the single recovery authority is reused, never copied;
+ *   - digest authority: `computeBehaviorExamplePackDigest` (same bytes the
+ *     readiness verdict hashes);
+ *   - audit: `.state/recovery_actions.jsonl` append family
+ *     (appendOwnerEvidenceAction);
+ *   - telemetry: `artificer_owner_evidence_attached` /
+ *     `artificer_owner_evidence_resumed` (FR-08, bounded payloads, rc-8),
+ *     both carrying the unified FR-08 run-correlation block (PRI-984,
+ *     artificer-run-correlation.ts); persistentRunId is semantically absent —
+ *     recovery runs against an NHR task / a pending requeue where no run row
+ *     exists yet.
+ *
+ * Contract decisions pinned here:
+ *   - attach NEVER unblocks: the task stays `needs_human_review`; only the
+ *     explicit `resume` authority reset returns it to pending (FR-06 6/7).
+ *   - resume re-assembles and compares digests: a mismatch refuses with
+ *     `owner_behavior_examples_stale` — a silently stale evidence reference
+ *     can never re-enter the model (FR-03).
+ *   - FR-06 budget semantics: the authority reset zeroes attemptCount. That
+ *     is an EXPLICIT, `--confirm`-gated, digest-verified, audited operator
+ *     action — not the forbidden "background silently clears history
+ *     attemptCount": previousAttemptCount is recorded in the audit record
+ *     and the run history / humanReviewContext stay in place (nothing is
+ *     deleted; T05 asserts run rows are preserved).
+ *   - concurrency (T06): the reset runs as ONE conditional UPDATE
+ *     (`updateTaskIfDiagnosticJsonUnchanged` via the CAS option). Two
+ *     concurrent resumes → at most one `resumed`; the loser gets a
+ *     structured `conflict` refusal with zero mutation.
+ *   - authorization expression (notes §8 reality): confirm-level command +
+ *     explicit decidedBy label + append-only audit + revision/digest
+ *     provenance. No new authentication mechanism is invented here.
+ *
+ * rc-1/rc-2: the stored selection arrives from parsed diagnosticJson and is
+ * re-validated by the shared shape authority before any use. rc-3: required
+ * preconditions fail loudly with stable reasons + nextAction (rc-9). rc-8:
+ * telemetry payloads carry bounded references only.
+ *
+ * Spec: docs/specs/SPEC-PD-IAER-001-v1.0.md §5 FR-03, FR-06, §6.1-§6.3
+ */
+import type { StoreEventEmitter } from '../store/event-emitter.js';
+import type { RuntimeStateManager } from '../store/runtime-state-manager.js';
+import { type OwnerEvidenceReasonCode, type OwnerEvidenceSelection } from './evidence-readiness.js';
+import { type BehaviorEvidencePort } from './consumer-evidence-preflight.js';
+/**
+ * FR-04: a task is "waiting for Owner evidence" iff it sits in
+ * needs_human_review with one of the four stable reason codes in its
+ * humanReviewContext. Other NHR tasks (verdict reviews etc.) are NOT
+ * evidence-waiting and are never touched by this module.
+ */
+export declare const EVIDENCE_WAIT_REASON_CODES: ReadonlySet<string>;
+export interface EvidenceWaitingTaskSummary {
+    readonly taskId: string;
+    readonly channel: string;
+    /** The attached selection's pain id; null while nothing is attached. */
+    readonly painId: string | null;
+    readonly reasonCode: string;
+    readonly missingFields: readonly string[];
+    readonly nextAction: string;
+    readonly attemptCount: number;
+    readonly maxAttempts: number;
+    /** Attach revision of the stored selection; 0 = nothing attached. */
+    readonly evidenceRevision: number;
+}
+export declare function listEvidenceWaitingTasks(stateManager: RuntimeStateManager): Promise<EvidenceWaitingTaskSummary[]>;
+export interface AttachOwnerEvidenceInput {
+    readonly taskId: string;
+    /** The Owner-provided selection (base contract fields only). */
+    readonly selection: Pick<OwnerEvidenceSelection, 'sourcePainId' | 'sourceNegativeToolCallId' | 'positiveToolCallIds' | 'ownerDesiredOutcome'>;
+    /** Operator label (`--decidedBy`); recorded in provenance + audit. */
+    readonly decidedBy?: string;
+    readonly mode: 'dry_run' | 'confirm';
+    /** Injected assembly (production: BehaviorExamplePackAssembler port). */
+    readonly assemble: BehaviorEvidencePort;
+    /** Workspace root — audit log location. */
+    readonly workspaceDir: string;
+    readonly eventEmitter: StoreEventEmitter;
+    /** Session label for telemetry (e.g. 'pd-cli:evidence'). */
+    readonly owner: string;
+}
+export type OwnerEvidenceAttachOutcome = {
+    readonly status: 'dry_run';
+    readonly taskId: string;
+    /** The selection summary that WOULD be persisted (not written). */
+    readonly wouldPersist: {
+        readonly revision: number;
+        readonly contentDigest: string;
+        readonly ownerOperation: string;
+        readonly attachedAt: string;
+    };
+    readonly painId: string;
+    readonly nextAction: string;
+} | {
+    readonly status: 'attached';
+    readonly taskId: string;
+    readonly revision: number;
+    readonly contentDigest: string;
+    readonly ownerOperation: string;
+    readonly attachedAt: string;
+    /** false = attach landed but the task still blocks (always — attach never unblocks). */
+    readonly taskStillNeedsHumanReview: true;
+    readonly nextAction: string;
+} | {
+    readonly status: 'refused';
+    readonly taskId: string;
+    /** Stable reason: FR-04 code or a structural refusal id. */
+    readonly reason: string;
+    readonly detail?: string;
+    readonly missingFields?: readonly string[];
+    readonly nextAction: string;
+} | {
+    readonly status: 'conflict';
+    readonly taskId: string;
+    readonly nextAction: string;
+};
+/**
+ * FR-03/FR-06 3-6: assemble + validate the Owner selection, then persist it
+ * (with revision/contentDigest/ownerOperation/attachedAt) into
+ * `pi_metadata.ownerEvidenceSelection` via the narrow diagnosticJson CAS.
+ * Dry-run assembles and reports without writing ANY state (cli-5); failures
+ * refuse with the stable FR-04 reason codes and zero mutation.
+ */
+export declare function attachOwnerEvidence(stateManager: RuntimeStateManager, input: AttachOwnerEvidenceInput): Promise<OwnerEvidenceAttachOutcome>;
+export interface ResumeOwnerEvidenceInput {
+    readonly taskId: string;
+    readonly decidedBy?: string;
+    readonly mode: 'dry_run' | 'confirm';
+    readonly assemble: BehaviorEvidencePort;
+    readonly workspaceDir: string;
+    readonly eventEmitter: StoreEventEmitter;
+    readonly owner: string;
+}
+export type OwnerEvidenceResumeOutcome = {
+    readonly status: 'dry_run';
+    readonly taskId: string;
+    readonly reasonCode: OwnerEvidenceReasonCode | 'owner_behavior_examples_verified';
+    readonly previousAttemptCount: number;
+    readonly revision: number;
+    readonly contentDigest: string;
+    readonly painId: string;
+    readonly nextAction: string;
+} | {
+    readonly status: 'resumed';
+    readonly taskId: string;
+    readonly previousStatus: 'needs_human_review';
+    readonly newStatus: 'pending';
+    readonly previousAttemptCount: number;
+    readonly revision: number;
+    readonly contentDigest: string;
+    readonly nextAction: string;
+} | {
+    readonly status: 'refused';
+    readonly taskId: string;
+    readonly reason: string;
+    readonly detail?: string;
+    readonly nextAction: string;
+} | {
+    readonly status: 'conflict';
+    readonly taskId: string;
+    readonly nextAction: string;
+};
+/**
+ * FR-06 7/8: digest-verified, atomic, single-authority recovery.
+ *
+ * Sequence: NHR + evidence-code gate → stored selection present → re-assemble
+ * through the shared readiness judgment → digest comparison (mismatch ⇒
+ * `owner_behavior_examples_stale`, missing digest ⇒ `invalid`) → ONE
+ * conditional authority reset via `ownerRetryNeedsHumanReviewTask` (CAS
+ * option; loser gets `conflict`). Run history / audit records are never
+ * deleted; the attempt budget reset is explicit and audited (see header).
+ */
+export declare function resumeOwnerEvidenceTask(stateManager: RuntimeStateManager, input: ResumeOwnerEvidenceInput): Promise<OwnerEvidenceResumeOutcome>;
+//# sourceMappingURL=owner-evidence-recovery.d.ts.map

package/core/dist/runtime-v2/internalization/owner-evidence-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-evidence-recovery.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/owner-evidence-recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAS7E,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAmC,KAAK,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAO9G;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAKzD,CAAC;AAyBH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAmBD,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,mBAAmB,GAChC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAwBvC;AAID,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,sBAAsB,EAAE,cAAc,GAAG,0BAA0B,GAAG,qBAAqB,GAAG,qBAAqB,CAAC,CAAC;IAC9I,sEAAsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IACrC,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,2CAA2C;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,yBAAyB,EAAE,IAAI,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AA4DN;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,mBAAmB,EACjC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,0BAA0B,CAAC,CA6KrC;AAID,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,uBAAuB,GAAG,kCAAkC,CAAC;IAClF,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEN;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,mBAAmB,EACjC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,0BAA0B,CAAC,CA2LrC"}