elepha 0.1.0

package/dist/storage/backup.js

@@ -0,0 +1,46 @@
+// Backups of the DB file, written before any destructive operation
+// (purge, rekey). Two gaps closed here: backups inherited the process umask
+// (world-readable, same as the DB itself before the file-permissions fix),
+// and nothing ever pruned them - each is a full snapshot of exactly the data
+// the user asked to erase, so an unbounded pile of them undercuts
+// "revocation = deletion" as badly as skipping the delete would.
+import { chmodSync, copyFileSync, readdirSync, unlinkSync } from 'node:fs';
+import path from 'node:path';
+import { BACKUP_KEEP, PRIVATE_FILE_MODE } from '../config/constants.js';
+const BACKUP_MARKER = '.bak-';
+/** Checkpoints the live database, then copies it to a timestamped sibling, mode 0600. */
+export function writeBackup(db, dbPath) {
+    const backupPath = `${dbPath}${BACKUP_MARKER}${new Date().toISOString().replace(/[:.]/g, '-')}`;
+    const [checkpoint] = db.pragma('wal_checkpoint(TRUNCATE)');
+    if (checkpoint?.busy !== 0) {
+        throw new Error(`Backup aborted: WAL checkpoint did not complete (busy=${String(checkpoint?.busy)}); no backup was written.`);
+    }
+    copyFileSync(dbPath, backupPath);
+    chmodSync(backupPath, PRIVATE_FILE_MODE);
+    return backupPath;
+}
+/** Deletes every backup for dbPath except the `keep` most recent (by filename, which sorts chronologically for the ISO-derived suffix). Returns the paths deleted. */
+export function pruneBackups(dbPath, keep) {
+    const dir = path.dirname(dbPath);
+    const prefix = `${path.basename(dbPath)}${BACKUP_MARKER}`;
+    const backups = readdirSync(dir)
+        .filter((f) => f.startsWith(prefix))
+        .map((f) => path.join(dir, f))
+        .sort();
+    const toDelete = backups.length > keep ? backups.slice(0, backups.length - keep) : [];
+    for (const p of toDelete) {
+        unlinkSync(p);
+    }
+    return toDelete;
+}
+/** Writes a backup, retains the configured number of snapshots, and reports both actions. */
+export function backupDatabaseAndReport(db, dbPath, log = console.log) {
+    const backupPath = writeBackup(db, dbPath);
+    log(`\nBacked up ${dbPath} to ${backupPath}.`);
+    const pruned = pruneBackups(dbPath, BACKUP_KEEP);
+    if (pruned.length > 0) {
+        log(`Pruned ${pruned.length} older backup(s), keeping the ${BACKUP_KEEP} most recent.`);
+    }
+    return backupPath;
+}
+//# sourceMappingURL=backup.js.map

package/dist/storage/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/storage/backup.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,kEAAkE;AAClE,iEAAiE;AAEjE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAExE,MAAM,aAAa,GAAG,OAAO,CAAC;AAE9B,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,EAAqB,EAAE,MAAc;IAC7D,MAAM,UAAU,GAAG,GAAG,MAAM,GAAG,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAChG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAA8B,CAAC;IACxF,IAAI,UAAU,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yDAAyD,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAClI,CAAC;IACD,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjC,SAAS,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,sKAAsK;AACtK,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,aAAa,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;SAC7B,IAAI,EAAE,CAAC;IAEZ,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvB,UAAU,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,uBAAuB,CAAC,EAAqB,EAAE,MAAc,EAAE,GAAG,GAA8B,OAAO,CAAC,GAAG;IACvH,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3C,GAAG,CAAC,eAAe,MAAM,OAAO,UAAU,GAAG,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,GAAG,CAAC,UAAU,MAAM,CAAC,MAAM,iCAAiC,WAAW,eAAe,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/storage/candidate-validator.js

@@ -0,0 +1,77 @@
+import { SUPPORTED_TOOLS } from '../types/index.js';
+export const CANDIDATE_SEMANTIC_TABLES = ['sessions', 'memories', 'session_rollups', 'consent_roots'];
+const MAX_REPORTED_VIOLATIONS = 20;
+const RULES = {
+    sessions: {
+        jsonStringArrays: [{ column: 'trailing_files' }],
+        enums: [
+            { column: 'tool', values: SUPPORTED_TOOLS },
+            { column: 'surface', values: ['cli', 'desktop'], nullable: true },
+            { column: 'kind', values: ['main', 'subagent', 'fork', 'adjudicator'], nullable: true },
+        ],
+    },
+    memories: {
+        jsonStringArrays: [{ column: 'files_touched' }],
+        enums: [{ column: 'has_external_content', values: [0, 1] }],
+    },
+    session_rollups: {
+        jsonStringArrays: [{ column: 'files_touched' }],
+        enums: [
+            { column: 'kind', values: ['primary', 'subagent'] },
+            { column: 'rollup_state', values: ['live', 'final'] },
+        ],
+    },
+    consent_roots: {
+        enums: [
+            { column: 'state', values: ['approved', 'denied', 'pending'] },
+            { column: 'source', values: ['discovery', 'cli', 'grandfathered'] },
+        ],
+    },
+};
+function isJsonStringArray(value) {
+    if (typeof value !== 'string') {
+        return false;
+    }
+    try {
+        const parsed = JSON.parse(value);
+        return Array.isArray(parsed) && parsed.every((item) => typeof item === 'string');
+    }
+    catch {
+        return false;
+    }
+}
+function selectedColumns(rules) {
+    return [...(rules.jsonStringArrays ?? []), ...(rules.enums ?? [])].map((rule) => `"${rule.column}"`);
+}
+/** Validates untrusted backup values without materializing candidate tables in memory. */
+export function validateCandidateSemantics(db, tables) {
+    const violations = [];
+    const addViolation = (violation) => {
+        if (violations.length < MAX_REPORTED_VIOLATIONS) {
+            violations.push(violation);
+            return false;
+        }
+        violations.push(`candidate: additional violations omitted after the first ${MAX_REPORTED_VIOLATIONS}`);
+        return true;
+    };
+    for (const table of tables) {
+        const rules = RULES[table];
+        const rows = db.prepare(`SELECT ${selectedColumns(rules).join(', ')} FROM "${table}"`).iterate();
+        for (const row of rows) {
+            for (const rule of rules.jsonStringArrays ?? []) {
+                if (!isJsonStringArray(row[rule.column]) && addViolation(`${table}.${rule.column}: must be a JSON array of strings`)) {
+                    return violations;
+                }
+            }
+            for (const rule of rules.enums ?? []) {
+                const value = row[rule.column];
+                const valid = (value === null && rule.nullable === true) || rule.values.includes(value);
+                if (!valid && addViolation(`${table}.${rule.column}: must be one of ${rule.values.join(', ')}`)) {
+                    return violations;
+                }
+            }
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=candidate-validator.js.map

package/dist/storage/candidate-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate-validator.js","sourceRoot":"","sources":["../../src/storage/candidate-validator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe,CAAU,CAAC;AAsB/G,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,MAAM,KAAK,GAA+C;IACtD,QAAQ,EAAE;QACN,gBAAgB,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAChD,KAAK,EAAE;YACH,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE;YAC3C,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;YACjE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC1F;KACJ;IACD,QAAQ,EAAE;QACN,gBAAgB,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAC/C,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;KAC9D;IACD,eAAe,EAAE;QACb,gBAAgB,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAC/C,KAAK,EAAE;YACH,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;YACnD,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;SACxD;KACJ;IACD,aAAa,EAAE;QACX,KAAK,EAAE;YACH,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE;YAC9D,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE;SACtE;KACJ;CACJ,CAAC;AAEF,SAAS,iBAAiB,CAAC,KAAe;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzG,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,0BAA0B,CAAC,EAAqB,EAAE,MAAyC;IACvG,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAW,EAAE;QAChD,IAAI,UAAU,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,4DAA4D,uBAAuB,EAAE,CAAC,CAAC;QACvG,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,OAAO,EAA4B,CAAC;QAC3H,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;gBAC9C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,YAAY,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,mCAAmC,CAAC,EAAE,CAAC;oBACnH,OAAO,UAAU,CAAC;gBACtB,CAAC;YACL,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC/B,MAAM,KAAK,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACxF,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,oBAAoB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC9F,OAAO,UAAU,CAAC;gBACtB,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/storage/consent-store.js

@@ -0,0 +1,198 @@
+// Consent roots are the ingestion boundary. They are deliberately separate
+// from project rows: a project row is historical capture, while consent is a
+// user decision that can cover a whole ProjectSet and later be withdrawn.
+import { canonicalizeExisting, isRefusedProjectRoot, isWithin, normalizeForCompare, samePath } from '../config/paths.js';
+import { ProjectResolver } from './project-resolver.js';
+import { newUlid } from './ulid.js';
+export const CONSENT_GRANDFATHERED_AT_KEY = 'consent_grandfathered_at';
+function storedPathKey(rootPath) {
+    const normalized = normalizeForCompare(rootPath);
+    return normalized.length > 1 ? normalized.replace(/\/+$/, '') : normalized;
+}
+function prefersConsentRow(candidate, incumbent) {
+    const cs = candidate.source === 'cli' ? 1 : 0;
+    const is = incumbent.source === 'cli' ? 1 : 0;
+    if (cs !== is) {
+        return cs > is;
+    }
+    const ct = Date.parse(candidate.decided_at) || 0;
+    const it = Date.parse(incumbent.decided_at) || 0;
+    if (ct !== it) {
+        return ct > it;
+    }
+    return candidate.ulid > incumbent.ulid;
+}
+function canonicalPath(projectPath) {
+    return canonicalizeExisting(projectPath);
+}
+/**
+ * First-open migration for pre-consent databases. It is intentionally
+ * additive: existing memories are evidence captured before consent existed,
+ * so grandfathering never deletes or rewrites them.
+ */
+export function grandfatherConsentRoots(db) {
+    const inserted = [];
+    const grandfather = db.transaction(() => {
+        const marker = db.prepare('SELECT 1 FROM meta WHERE key = ?').get(CONSENT_GRANDFATHERED_AT_KEY);
+        if (marker !== undefined) {
+            return;
+        }
+        const roots = new ProjectResolver(db)
+            .list()
+            .map((set) => set.gitRoot ?? set.paths[0])
+            .filter((root) => root !== undefined)
+            .map(canonicalPath);
+        const distinctRoots = [...new Map(roots.map((root) => [normalizeForCompare(root), root])).values()];
+        const now = new Date().toISOString();
+        const insert = db.prepare(`INSERT INTO consent_roots (ulid, path, state, decided_at, source)
+             VALUES (@ulid, @path, @state, @decided_at, 'grandfathered')`);
+        for (const root of distinctRoots) {
+            const state = isRefusedProjectRoot(root) ? 'denied' : 'approved';
+            const row = { ulid: newUlid(), path: root, state, decided_at: now, source: 'grandfathered' };
+            insert.run(row);
+            inserted.push(row);
+        }
+        db.prepare('INSERT INTO meta (key, value) VALUES (?, ?)').run(CONSENT_GRANDFATHERED_AT_KEY, now);
+    });
+    grandfather.immediate();
+    return inserted;
+}
+export function canonicalizeConsentRoots(db) {
+    const columns = new Set(db.pragma('table_info(consent_roots)').map((column) => column.name));
+    if (!['ulid', 'path', 'state', 'decided_at', 'source'].every((column) => columns.has(column))) {
+        return;
+    }
+    const rows = db.prepare('SELECT ulid, path, state, decided_at, source FROM consent_roots').all();
+    if (rows.length === 0) {
+        return;
+    }
+    const groups = new Map();
+    for (const root of rows) {
+        const key = storedPathKey(root.path);
+        const group = groups.get(key) ?? [];
+        group.push(root);
+        groups.set(key, group);
+    }
+    const deleteRoot = db.prepare('DELETE FROM consent_roots WHERE ulid = ?');
+    db.transaction(() => {
+        for (const group of groups.values()) {
+            const winner = group.reduce((incumbent, candidate) => (prefersConsentRow(candidate, incumbent) ? candidate : incumbent));
+            for (const candidate of group) {
+                if (candidate.ulid !== winner.ulid) {
+                    deleteRoot.run(candidate.ulid);
+                }
+            }
+        }
+    })();
+}
+export class ConsentStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    countApproved() {
+        return this.db.prepare("SELECT COUNT(*) AS count FROM consent_roots WHERE state = 'approved'").get().count;
+    }
+    list(state) {
+        return (state === undefined
+            ? this.db.prepare('SELECT ulid, path, state, decided_at, source FROM consent_roots ORDER BY path').all()
+            : this.db
+                .prepare('SELECT ulid, path, state, decided_at, source FROM consent_roots WHERE state = ? ORDER BY path')
+                .all(state));
+    }
+    remove(ulid) {
+        return this.db.prepare('DELETE FROM consent_roots WHERE ulid = ?').run(ulid).changes > 0;
+    }
+    /** An approved root covers itself and its descendants, case-insensitively on macOS. */
+    isConsented(projectPath) {
+        return this.consentState(projectPath) === 'approved';
+    }
+    isRevoked(projectPath) {
+        return this.consentState(projectPath) === 'denied';
+    }
+    isRevokedProjectSet(projectPaths) {
+        return (!projectPaths.some((projectPath) => this.isConsented(projectPath)) &&
+            projectPaths.some((projectPath) => this.isRevoked(projectPath)));
+    }
+    consentState(projectPath) {
+        return this.explicitConsentDecision(projectPath)?.state ?? 'pending';
+    }
+    explicitConsentDecision(projectPath) {
+        const canonicalProjectPath = canonicalPath(projectPath);
+        return this.list()
+            .filter((root) => root.state !== 'pending' && isWithin(root.path, canonicalProjectPath))
+            .reduce((closest, candidate) => {
+            if (closest === undefined) {
+                return candidate;
+            }
+            const candidateLength = storedPathKey(candidate.path).length;
+            const closestLength = storedPathKey(closest.path).length;
+            if (candidateLength > closestLength) {
+                return candidate;
+            }
+            // Equal depth means duplicate rows for one physical root, so the newest explicit decision must win.
+            if (candidateLength === closestLength && prefersConsentRow(candidate, closest)) {
+                return candidate;
+            }
+            return closest;
+        }, undefined);
+    }
+    /** Records an unseen root once; a pending decision must be visible, never a quiet drop. */
+    recordPending(projectPath) {
+        const canonical = canonicalPath(projectPath);
+        const current = this.list().find((root) => samePath(root.path, canonical));
+        if (current) {
+            return current;
+        }
+        const row = {
+            ulid: newUlid(),
+            path: canonical,
+            state: 'pending',
+            decided_at: new Date().toISOString(),
+            source: 'discovery',
+        };
+        this.db
+            .prepare('INSERT INTO consent_roots (ulid, path, state, decided_at, source) VALUES (@ulid, @path, @state, @decided_at, @source)')
+            .run(row);
+        return row;
+    }
+    /** Returns the effective capture-off state, recording only grantable unseen roots as pending. */
+    captureOffNudge(projectPath) {
+        const decision = this.explicitConsentDecision(projectPath);
+        if (decision?.state === 'approved') {
+            return undefined;
+        }
+        if (decision) {
+            return decision;
+        }
+        return isRefusedProjectRoot(projectPath) ? 'refused' : this.recordPending(projectPath);
+    }
+    grant(projectPath) {
+        const canonical = canonicalPath(projectPath);
+        if (isRefusedProjectRoot(projectPath) || isRefusedProjectRoot(canonical)) {
+            throw new Error(`${canonical} is a refused project root and cannot be granted.`);
+        }
+        return this.setState(projectPath, 'approved', 'cli');
+    }
+    revoke(projectPath) {
+        return this.setState(projectPath, 'denied', 'cli');
+    }
+    setState(projectPath, state, source) {
+        const canonical = canonicalPath(projectPath);
+        const existing = this.list().find((root) => samePath(root.path, canonical));
+        const row = {
+            ulid: existing?.ulid ?? newUlid(),
+            path: existing?.path ?? canonical,
+            state,
+            decided_at: new Date().toISOString(),
+            source,
+        };
+        this.db
+            .prepare(`INSERT INTO consent_roots (ulid, path, state, decided_at, source)
+                 VALUES (@ulid, @path, @state, @decided_at, @source)
+                 ON CONFLICT(path) DO UPDATE SET state = excluded.state, decided_at = excluded.decided_at, source = excluded.source`)
+            .run(row);
+        return row;
+    }
+}
+//# sourceMappingURL=consent-store.js.map

package/dist/storage/consent-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-store.js","sourceRoot":"","sources":["../../src/storage/consent-store.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAG1E,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACzH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AAUvE,SAAS,aAAa,CAAC,QAAgB;IACnC,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/E,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAsB,EAAE,SAAsB;IACrE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB;IACtC,OAAO,oBAAoB,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAY;IAChD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAChG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC;aAChC,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACzC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACpD,GAAG,CAAC,aAAa,CAAC,CAAC;QACxB,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACrB;yEAC6D,CAChE,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAiB,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;YAC/E,MAAM,GAAG,GAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YAC1G,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IACH,WAAW,CAAC,SAAS,EAAE,CAAC;IAExB,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAY;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAE,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAA6B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC5F,OAAO;IACX,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,EAAmB,CAAC;IAClH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;IAC1E,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YACzH,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;gBAC5B,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,MAAM,OAAO,YAAY;IACQ,EAAE;IAA/B,YAA6B,EAAY;kBAAZ,EAAE;IAAa,CAAC;IAE7C,aAAa;QACT,OAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAC;IACtI,CAAC;IAED,IAAI,CAAC,KAAoB;QACrB,OAAO,CACH,KAAK,KAAK,SAAS;YACf,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAC,GAAG,EAAE;YACxG,CAAC,CAAC,IAAI,CAAC,EAAE;iBACF,OAAO,CAAC,+FAA+F,CAAC;iBACxG,GAAG,CAAC,KAAK,CAAC,CACP,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IAC7F,CAAC;IAED,uFAAuF;IACvF,WAAW,CAAC,WAAmB;QAC3B,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,UAAU,CAAC;IACzD,CAAC;IAED,SAAS,CAAC,WAAmB;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC;IACvD,CAAC;IAED,mBAAmB,CAAC,YAA+B;QAC/C,OAAO,CACH,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAClE,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAClE,CAAC;IACN,CAAC;IAED,YAAY,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC;IACzE,CAAC;IAEO,uBAAuB,CAAC,WAAmB;QAC/C,MAAM,oBAAoB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,IAAI,EAAE;aACb,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;aACvF,MAAM,CAA0B,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE;YACpD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,eAAe,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAC7D,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACzD,IAAI,eAAe,GAAG,aAAa,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,oGAAoG;YACpG,IAAI,eAAe,KAAK,aAAa,IAAI,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC7E,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,OAAO,CAAC;QACnB,CAAC,EAAE,SAAS,CAAC,CAAC;IACtB,CAAC;IAED,2FAA2F;IAC3F,aAAa,CAAC,WAAmB;QAC7B,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAgB;YACrB,IAAI,EAAE,OAAO,EAAE;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,MAAM,EAAE,WAAW;SACtB,CAAC;QACF,IAAI,CAAC,EAAE;aACF,OAAO,CACJ,uHAAuH,CAC1H;aACA,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,GAAG,CAAC;IACf,CAAC;IAED,iGAAiG;IACjG,eAAe,CAAC,WAAmB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC;QACpB,CAAC;QACD,OAAO,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,WAAmB;QACrB,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,oBAAoB,CAAC,WAAW,CAAC,IAAI,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,mDAAmD,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,WAAmB;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAEO,QAAQ,CAAC,WAAmB,EAAE,KAAmB,EAAE,MAAa;QACpE,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAgB;YACrB,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,EAAE;YACjC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,SAAS;YACjC,KAAK;YACL,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,MAAM;SACT,CAAC;QACF,IAAI,CAAC,EAAE;aACF,OAAO,CACJ;;oIAEoH,CACvH;aACA,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,GAAG,CAAC;IACf,CAAC;CACJ"}

package/dist/storage/custom-title-backfill.js

@@ -0,0 +1,68 @@
+// Backfill Claude Code's standalone custom-title UI event into
+// sessions.custom_title. It never parses or rewrites turns, memories, rollups,
+// rendered output, or rendered_chars.
+import { isReadableProviderSource } from '../config/paths.js';
+import { applyBackfill, planBackfill } from './backfill-runner.js';
+const deriver = {
+    load(db) {
+        return {
+            sessions: db.prepare('SELECT id, tool, native_id, source_path, custom_title FROM sessions').all(),
+            state: undefined,
+        };
+    },
+    async derive({ adapters, session }) {
+        if (!isReadableProviderSource(session.tool, session.source_path)) {
+            return {
+                sessionId: session.id,
+                nativeId: session.native_id,
+                tool: session.tool,
+                sourcePath: session.source_path,
+                before: session.custom_title,
+                after: session.custom_title,
+                transcriptMissing: true,
+            };
+        }
+        let title;
+        try {
+            title = (await adapters[session.tool].readCustomTitle?.(session.source_path))?.customTitle;
+        }
+        catch {
+            return {
+                sessionId: session.id,
+                nativeId: session.native_id,
+                tool: session.tool,
+                sourcePath: session.source_path,
+                before: session.custom_title,
+                after: session.custom_title,
+                transcriptMissing: true,
+            };
+        }
+        const after = title ?? null;
+        if (session.custom_title === after) {
+            return undefined;
+        }
+        return {
+            sessionId: session.id,
+            nativeId: session.native_id,
+            tool: session.tool,
+            sourcePath: session.source_path,
+            before: session.custom_title,
+            after,
+            transcriptMissing: false,
+        };
+    },
+    shouldWrite: (change) => !change.transcriptMissing,
+    write(db, change) {
+        db.prepare('UPDATE sessions SET custom_title = ? WHERE id = ?').run(change.after, change.sessionId);
+        return {};
+    },
+};
+/** Reports the exact rows a custom-title backfill would touch, without writing. */
+export async function planCustomTitleBackfill(db, adapters) {
+    return planBackfill(db, adapters, deriver);
+}
+/** Applies only planned custom_title changes in one transaction. */
+export async function applyCustomTitleBackfill(db, adapters) {
+    return applyBackfill(db, adapters, deriver);
+}
+//# sourceMappingURL=custom-title-backfill.js.map

package/dist/storage/custom-title-backfill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-title-backfill.js","sourceRoot":"","sources":["../../src/storage/custom-title-backfill.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,+EAA+E;AAC/E,sCAAsC;AAGtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAwB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AA0BzF,MAAM,OAAO,GAAoD;IAC7D,IAAI,CAAC,EAAE;QACH,OAAO;YACH,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,EAAmB;YAClH,KAAK,EAAE,SAAS;SACnB,CAAC;IACN,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;QAC9B,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,OAAO;gBACH,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,WAAW;gBAC/B,MAAM,EAAE,OAAO,CAAC,YAAY;gBAC5B,KAAK,EAAE,OAAO,CAAC,YAAY;gBAC3B,iBAAiB,EAAE,IAAI;aAC1B,CAAC;QACN,CAAC;QAED,IAAI,KAAyB,CAAC;QAC9B,IAAI,CAAC;YACD,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;gBACH,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,WAAW;gBAC/B,MAAM,EAAE,OAAO,CAAC,YAAY;gBAC5B,KAAK,EAAE,OAAO,CAAC,YAAY;gBAC3B,iBAAiB,EAAE,IAAI;aAC1B,CAAC;QACN,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC;QAC5B,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO;YACH,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,MAAM,EAAE,OAAO,CAAC,YAAY;YAC5B,KAAK;YACL,iBAAiB,EAAE,KAAK;SAC3B,CAAC;IACN,CAAC;IACD,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,iBAAiB;IAClD,KAAK,CAAC,EAAE,EAAE,MAAM;QACZ,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACpG,OAAO,EAAE,CAAC;IACd,CAAC;CACJ,CAAC;AAEF,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAAY,EAAE,QAA0C;IAClG,OAAO,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAAY,EAAE,QAA0C;IACnG,OAAO,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC"}