halfcycle 0.3.17 → 0.3.19

package/dist/build-record/sources.d.ts

@@ -1,10 +1,12 @@
 /**
  * Source loading + fail-loud validation for the Build-Record assembler.
  *
- * INV-001 (local by construction): every source is a LOCAL file or git output.
- * The guard-eval log is a phase-scoped JSONL file the runner wrote locally
- * (E2-T-03b) — never a hosted store call. This module imports only
- * @halfcycle/events (for the wire schema) and Node builtins.
+ * INV-001 (local by construction): every source is a LOCAL file. The guard-eval
+ * log is a phase-scoped JSONL file the runner wrote locally (E2-T-03b) and the
+ * close commit/date come from the phase's own close record — never a hosted
+ * store call, and since `phase-close-commit` never a live git call either. This
+ * module imports only @halfcycle/events (for the wire schema), Node builtins and
+ * its own package.
  *
  * INV-007: the guard-eval log is parsed through `guardEvalRunSchema` from
  * @halfcycle/events, so only the FiredGuard-safe fields survive. A line
@@ -14,8 +16,8 @@
  * Fail-loud (AC2): a missing required source throws `MissingSourceError` naming
  * the input. Nothing is blanked or invented.
  */
-import { type GuardEvalRun } from '@halfcycle/events';
-import type { BuildRecordSources, GitSource, NarratedSource, OrchestrationStateSource } from './types.js';
+import { type GuardEvalRun, type PhaseIdentity } from '@halfcycle/events';
+import type { BuildRecordSources, NarratedSource, OrchestrationStateSource, PhaseCloseSource } from './types.js';
 import { type SeedGuard } from './types.js';
 /** Thrown when a required source artefact is missing — fail loud, never blank. */
 export declare class MissingSourceError extends Error {
@@ -39,41 +41,70 @@ export declare class MissingSourceError extends Error {
  */
 export declare function projectSeedGuards(runs: GuardEvalRun[]): SeedGuard[];
 /**
- * Read + parse the phase-scoped guard-eval log file (`<logDir>/phase-<N>.jsonl`).
+ * Read + parse the phase-scoped guard-eval log file, whose name comes from
+ * `renderPhaseSegment` — the same renderer the writer uses, so the reader cannot
+ * drift from it by inspection. The identity is a name or a number; an unsafe one
+ * is refused by the renderer before any path is joined.
+ *
  * Every line is legacy-normalised (see `normalizeLegacyLine`) then validated
  * through the strict `guardEvalRunSchema` — a mixed-era log (pre-amendment lines
  * with no `runId`/`outcome`, plus new-era `evaluated`/failure/`unconfigured`
  * lines) assembles cleanly, while an undeclared field still rejects. Fails loud
  * when the log file is absent (a required source per the field→source map).
  */
-export declare function readGuardEvalLog(logDir: string, phaseId: number): GuardEvalRun[];
-/** Load the orchestration-state task map; fail loud if the file is absent. */
-export declare function readOrchestrationState(phasesDir: string, phaseId: number): OrchestrationStateSource;
+export declare function readGuardEvalLog(logDir: string, phaseId: PhaseIdentity): GuardEvalRun[];
 /**
- * Resolve the close commit + date from git HEAD. Never hand-typed.
- * `closeCommit` is the abbreviated HEAD sha; `closedDate` is HEAD's commit date
- * (YYYY-MM-DD). Fails loud if git is unavailable or the repo has no HEAD.
+ * Load the orchestration-state task map; fail loud if the file is absent.
+ * The filename is produced by `renderPhaseSegment`, so this reader and the
+ * Build-Record writer name a phase the same way by construction.
  */
-export declare function readGitClose(repoRoot: string): GitSource;
+export declare function readOrchestrationState(phasesDir: string, phaseId: PhaseIdentity): OrchestrationStateSource;
+/**
+ * Read what the phase's close recorded about the repository.
+ *
+ * THIS REPLACED A GIT CALL, and the replacement is the feature. The assembler
+ * used to run `git rev-parse --short HEAD` here, at ASSEMBLY time, so the commit
+ * and date a record named were a function of when someone happened to assemble
+ * it — close on Monday, assemble on Friday, and the record described Friday
+ * while claiming to describe the close. Nothing re-derives either value now.
+ *
+ * The filename comes from `closeRecordPath` — the same function the close-side
+ * writer calls, which builds it through the same renderer every other
+ * phase-scoped filename here goes through. Writer and reader cannot drift.
+ *
+ * AN ABSENT FILE IS ABSENCE, not a failure, and it is the one required-source
+ * reader here that does not fail loud. Closing a phase has never needed git, so
+ * a close that recorded nothing is legitimate — as is a close made before this
+ * file existed, whose commit is simply unrecoverable. Both read as `null` and
+ * the record says so. A PRESENT file that cannot be trusted still fails loud,
+ * because that is a broken input rather than an absent one.
+ */
+export declare function readPhaseClose(repoRoot: string, phaseId: PhaseIdentity): PhaseCloseSource;
 /**
  * Validate that a caller-supplied narrated bundle has every required field.
  * The narrated fields are lifted from prose artefacts (phase doc, acceptance
  * report, COE notes, ENGAGEMENT ledger) by the loader; this guard makes the
  * "missing source fails loud" contract hold for them too.
+ *
+ * It also refuses an unsafe `phase.id` (INV-023). That field is not merely data:
+ * it is copied into the assembled record and interpolated into the record's own
+ * output filename, so it is the one narrated field that decides where the record
+ * is written. It is validated here because this is where every route converges.
  */
 export declare function validateNarrated(narrated: NarratedSource): NarratedSource;
 /**
  * Assemble the complete `BuildRecordSources` bundle from a phase's local
  * artefacts. This is the local-by-construction (INV-001) loader: it reads the
- * orchestration state, the runner's local guard-eval log, git HEAD, and the
- * caller-lifted narrated + touched-invariants inputs. Every required source is
- * present or it throws.
+ * orchestration state, the runner's local guard-eval log, the phase's own close
+ * record, and the caller-lifted narrated + touched-invariants inputs. Every
+ * required source is present or it throws — with one deliberate exception named
+ * at `readPhaseClose`, whose absence is a legitimate answer rather than a gap.
  */
 export declare function loadSources(opts: {
     repoRoot: string;
     phasesDir: string;
     guardEvalLogDir: string;
-    phaseId: number;
+    phaseId: PhaseIdentity;
     narrated: NarratedSource;
     touchedInvariants: string[];
 }): BuildRecordSources;

package/dist/build-record/sources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../src/build-record/sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,KAAK,EACV,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,wBAAwB,EACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAE9D,kFAAkF;AAClF,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAI/C;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,SAAS,EAAE,CAwBnE;AAwED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CAoBhF;AAMD,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,wBAAwB,CAsB1B;AAMD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAqBxD;AAMD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc,CAoBzE;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,GAAG,kBAAkB,CAerB"}
+{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../src/build-record/sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,kBAAkB,EAClB,cAAc,EACd,wBAAwB,EACxB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAI9D,kFAAkF;AAClF,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAI/C;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,SAAS,EAAE,CAwBnE;AAwED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,YAAY,EAAE,CAoBvF;AAMD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,aAAa,GACrB,wBAAwB,CAsB1B;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,gBAAgB,CAyBzF;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc,CA2BzE;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,GAAG,kBAAkB,CAerB"}

package/dist/build-record/template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../src/build-record/template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAa,MAAM,YAAY,CAAC;AAe3D;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CA0EvE"}
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../src/build-record/template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAa,MAAM,YAAY,CAAC;AAsD3D;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAiFvE"}

package/dist/build-record/types.d.ts

@@ -12,7 +12,7 @@
  * `severity`, optional per-firing `explanation`). It is the ONLY guard-derived
  * shape in the record. There is no path from a `GuardRecord` to this file.
  */
-import type { FiredGuard, GuardEvalRun } from '@halfcycle/events';
+import type { FiredGuard, GuardEvalRun, PhaseIdentity } from '@halfcycle/events';
 /** The v1 format string — a single literal, one home. */
 export declare const BUILD_RECORD_FORMAT: "halfcycle-build-record/v1";
 /**
@@ -81,18 +81,40 @@ export interface Tasks {
     landed: number;
     cancelled: string[];
 }
-/** The v1 Build Record — the JSON companion. Field order matters for the seed. */
+/**
+ * The v1 Build Record — the JSON companion. Field order matters for the seed.
+ *
+ * `phase.id` is a `PhaseIdentity` — a name OR a number — because a phase is
+ * identified by whatever the client called it, and three of this repo's own
+ * phases are numbered while twenty-four are named. The widening is deliberately
+ * NOT a narrowing to `string`: `docs/build-records/phase-0.json` carries the
+ * JSON number `0`, the assembler copies the identity through untransformed, and
+ * `packages/bundle/test/build-record-phase0.test.ts` deep-equals the two. Under
+ * the union that conformance seed passes with no fixture edit; under `string`
+ * alone it would have needed a re-conform and a second operator approval.
+ *
+ * `closeCommit` and `closedDate` ADMIT ABSENCE, which is the v1 shape moving
+ * rather than a field being added. Both were required strings, on the premise
+ * that a record could always be given them because they were derived from git at
+ * assembly time. They are now captured at the close, and a client with no git
+ * closes successfully — so the pair has a legitimate "not recorded" state, and a
+ * required string could only have been satisfied by inventing one or by
+ * refusing to assemble the record at all. The conformance seed carries strings
+ * in both and is unaffected: widening a field admits the value it already held.
+ */
 export interface BuildRecordV1 {
     format: typeof BUILD_RECORD_FORMAT;
     engagement: string;
     engagementType: string;
     phase: {
-        id: number;
+        id: PhaseIdentity;
         name: string;
     };
     status: string;
-    closedDate: string;
-    closeCommit: string;
+    /** The date the phase closed, or null when the close recorded none. */
+    closedDate: string | null;
+    /** The commit the phase closed at, or null when the close recorded none. */
+    closeCommit: string | null;
     thesis: string;
     thesisHeld: boolean;
     delivered: Delivered;
@@ -106,7 +128,8 @@ export interface BuildRecordV1 {
 }
 /**
  * Orchestration-state projection: task terminal states + engagement identity.
- * Loaded from `phase-<N>-orchestration-state.json` (Zone-B process artefact).
+ * Loaded from the phase-scoped orchestration-state file, whose name is produced
+ * by `renderPhaseSegment` and never spelled out here (Zone-B process artefact).
  * Terminal states: `merged`/`done` → landed; `cancelled` → cancelled.
  */
 export interface OrchestrationStateSource {
@@ -127,7 +150,7 @@ export interface NarratedSource {
     engagement: string;
     engagementType: string;
     phase: {
-        id: number;
+        id: PhaseIdentity;
         name: string;
     };
     status: string;
@@ -138,10 +161,24 @@ export interface NarratedSource {
     instruments: Instruments;
     deviations: string[];
 }
-/** Git source — HEAD at close. Never hand-typed. */
-export interface GitSource {
-    closeCommit: string;
-    closedDate: string;
+/**
+ * What the phase's close recorded about the repository.
+ *
+ * NOT resolved at assembly time, which is the change this type carries. Both
+ * values are captured when the phase closes and read back from the local close
+ * record (`close-record.ts`), so assembling the same phase twice returns the
+ * same document however much work has happened since.
+ *
+ * `null` on both is a close that recorded neither — a client with no git, no
+ * repository or no commit yet closes successfully and this reads as absence
+ * rather than as a blank or a value derived later. The pair moves together on
+ * both paths, so one is never null while the other is a string.
+ */
+export interface PhaseCloseSource {
+    /** The commit the repository was on when the phase closed, or null if none was recorded. */
+    closeCommit: string | null;
+    /** The date of that commit, or null if none was recorded. */
+    closedDate: string | null;
 }
 /**
  * The complete typed source bundle. Every required source is present or the
@@ -151,7 +188,7 @@ export interface GitSource {
 export interface BuildRecordSources {
     orchestration: OrchestrationStateSource;
     narrated: NarratedSource;
-    git: GitSource;
+    close: PhaseCloseSource;
     /** The runner's LOCAL guard-eval log for the phase (INV-007-safe wire records). */
     guardEvalRuns: GuardEvalRun[];
     /**

package/dist/build-record/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/build-record/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAElE,yDAAyD;AACzD,eAAO,MAAM,mBAAmB,EAAG,2BAAoC,CAAC;AAExE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,UAAU,GAAG,aAAa,CAAC,EAClE,kBAAkB,EAAE,OAAO,GAC1B,SAAS,CAOX;AAED,yFAAyF;AACzF,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,+BAA+B;AAC/B,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,qBAAqB,CAAC,EAAE,cAAc,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,0BAA0B,EAAE,MAAM,CAAC;IACnC,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,KAAK;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,mBAAmB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC;CACd;AAMD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,oDAAoD;AACpD,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,wBAAwB,CAAC;IACxC,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,EAAE,SAAS,CAAC;IACf,mFAAmF;IACnF,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B;;;OAGG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/build-record/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEjF,yDAAyD;AACzD,eAAO,MAAM,mBAAmB,EAAG,2BAAoC,CAAC;AAExE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,UAAU,GAAG,aAAa,CAAC,EAClE,kBAAkB,EAAE,OAAO,GAC1B,SAAS,CAOX;AAED,yFAAyF;AACzF,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,+BAA+B;AAC/B,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,qBAAqB,CAAC,EAAE,cAAc,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,0BAA0B,EAAE,MAAM,CAAC;IACnC,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,KAAK;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,mBAAmB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE;QAAE,EAAE,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4EAA4E;IAC5E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC;CACd;AAMD;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE;QAAE,EAAE,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4FAA4F;IAC5F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,6DAA6D;IAC7D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,wBAAwB,CAAC;IACxC,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,gBAAgB,CAAC;IACxB,mFAAmF;IACnF,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B;;;OAGG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B"}

package/dist/build-record/write.d.ts

@@ -2,8 +2,50 @@
  * Write-disciplined Build-Record writer.
  *
  * Blast radius: the writer touches ONLY `docs/build-records/` in the target
- * repo (same write-discipline as the bundle installer, E1-T-06). It refuses any
- * output directory that does not resolve under `docs/build-records/`.
+ * repo (same write-discipline as the bundle installer, E1-T-06), and now
+ * enforces it rather than claiming it (INV-023).
+ *
+ * THE RESIDUAL CHECK, AND WHY IT IS NOT DEFENCE IN DEPTH. The identity is
+ * validated where every caller converges (`validateNarrated`), but
+ * `assembleBuildRecord` and `writeBuildRecord` are exported individually too, so
+ * a library caller can compose them without entering `loadSources` at all. For
+ * that caller the assertion below is the ONLY guard.
+ *
+ * It asserts on the joined OUTPUT PATH, not on the output directory. The
+ * directory is a constant and the filename is the caller-influenced half, so a
+ * directory comparison guards the half that was never at risk — which is exactly
+ * how this function's previous check came to compare a value with itself and
+ * refuse nothing. The two operands here are genuinely different: `outDir` is
+ * derived from `repoRoot` and a constant and does not move when the record
+ * changes, while the candidate path is derived from `record.phase.id` and moves
+ * with every record.
+ *
+ * WHAT REFUSES FIRST CHANGED WHEN THE FILENAME MOVED TO THE RENDERER, and saying
+ * so is better than leaving a reader to discover it. The residual refusal for a
+ * library caller is now the `isValidPhaseIdentity` check in `writeBuildRecord`
+ * below, which throws `InvalidPhaseIdentityError` naming this module's allowed
+ * location — same error and same message a caller entering through
+ * `validateNarrated` gets. `assertInsideOutDir` still runs on every write, but it
+ * can no longer be the thing that fires on a hostile identity, because a hostile
+ * identity never reaches the join: the identity check refuses it and the renderer
+ * refuses it again.
+ *
+ * SO THE RESIDUAL GUARD IS UNREACHABLE FROM THIS PACKAGE, and that is measured
+ * rather than assumed: deleting both of its call sites leaves this package's
+ * whole suite green, and sixteen adversarial identities that pass the predicate
+ * were probed without one reaching it. What it still guards is real and it is
+ * CROSS-PACKAGE — the RENDERER'S OUTPUT. Every segment the renderer emits today
+ * is a plain basename, so an edit in `packages/events` that let a separator into
+ * one is the only way this can fire, and that edit is invisible from here. A
+ * guard whose subject lives in another package cannot be exercised by a
+ * behavioural test of this one, so it is exported and tested directly rather
+ * than left module-private, where nothing could reach it and nothing would
+ * notice its deletion.
+ *
+ * Refusal is ALL-OR-NOTHING because both paths are asserted BEFORE the first
+ * `writeFileSync` — and before the `mkdirSync`, so a refused record does not
+ * leave an empty directory behind either. There is no rollback and no two-phase
+ * commit; nothing here asks for one.
  *
  * The JSON is serialised with a stable 2-space indent + trailing newline; the
  * markdown data slots are projected from the same record object, so the pair
@@ -18,9 +60,24 @@ export interface WriteResult {
 }
 /** Serialise the record JSON deterministically (2-space indent + trailing NL). */
 export declare function serialiseRecordJson(record: BuildRecordV1): string;
+/**
+ * Assert that a joined output path is still a plain file directly inside
+ * `outDir`. `relative` is computed between two values that move independently —
+ * the allowed directory, and a candidate path built from the record — so this
+ * comparison can actually fail.
+ *
+ * EXPORTED SO IT CAN BE TESTED AT ALL. Its subject is a filename segment that
+ * grew a separator, which only an edit in another package can produce, so no
+ * behavioural test of this package can reach it — see the module header. It is
+ * called directly by `build-record-write-discipline.test.ts` with a candidate
+ * outside the directory, which is the only control that can tell this guard
+ * from a deleted one.
+ */
+export declare function assertInsideOutDir(outDir: string, candidate: string, identity: unknown): void;
 /**
  * Write the `.json` + `.md` pair for a phase into `docs/build-records/`.
- * Refuses to write outside that directory (write-discipline enforcement).
+ * Refuses — writing nothing at all — if the record's identity would put either
+ * file anywhere else.
  */
 export declare function writeBuildRecord(repoRoot: string, record: BuildRecordV1): WriteResult;
 //# sourceMappingURL=write.d.ts.map

package/dist/build-record/write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../src/build-record/write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhD,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB,QAAgC,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAEjE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,WAAW,CAerF"}
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../src/build-record/write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB,QAAgC,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAEjE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAM7F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,WAAW,CA2BrF"}

package/dist/close-phase.d.ts

@@ -34,12 +34,25 @@
  * parses with. It never imports the control service.
  */
 import { type AcceptanceOutcome, type PhaseCloseDecision } from '@halfcycle/events';
-import type { RepoCredential } from './open-phase.js';
+import { type PhaseStampFailure, type RepoCredential } from './open-phase.js';
+import { type CloseRecordOutcome } from './build-record/close-record.js';
 /** What `POST /engagements/:id/accept` returns on 200 (the fields the CLI reports). */
 export interface ClosedPhase {
     engagementId: string;
     /** The lifecycle status after the close — `closed`. */
     status: string;
+    /**
+     * Set when the phase closed but this machine's record of it could not be
+     * cleared. `null` on every ordinary success. Until it is cleared, work on this
+     * machine is still filed under a phase that is no longer open.
+     */
+    stampFailure: PhaseStampFailure | null;
+    /**
+     * Whether the commit this phase closed at was written down on this machine,
+     * and where. When it was not, this says why, and the phase's Build Record will
+     * say the commit and the close date were not recorded.
+     */
+    closeRecord: CloseRecordOutcome;
 }
 /**
  * A refusal from the control plane, carried as an error the CLI can print whole.
@@ -105,10 +118,16 @@ export declare class ClosePhaseRefused extends Error {
  *                for the same reason `openPhase` requires its entry decision: there
  *                is no argument-less way to move the phase axis, so an unattributed
  *                close is unreachable from any caller that compiles.
+ * @param repoRoot the repository whose commit this close is being recorded against.
+ *                Optional so that a caller with no repository in hand — a test
+ *                harness, a future non-repo surface — is not forced to invent one;
+ *                omitting it records no commit rather than silently resolving the
+ *                process's working directory, which would write a stranger's HEAD
+ *                into this phase's record.
  *
  * @throws ClosePhaseRefused on a 4xx the plane explained, so the CLI prints the
  *         plane's own sentence and exits non-zero.
  * @throws Error on transport failure or a body that is not the expected shape.
  */
-export declare function closePhase(credential: RepoCredential, phase: string, outcome: AcceptanceOutcome, close: PhaseCloseDecision): Promise<ClosedPhase>;
+export declare function closePhase(credential: RepoCredential, phase: string, outcome: AcceptanceOutcome, close: PhaseCloseDecision, home?: string, repoRoot?: string): Promise<ClosedPhase>;
 //# sourceMappingURL=close-phase.d.ts.map

package/dist/close-phase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"close-phase.d.ts","sourceRoot":"","sources":["../src/close-phase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;aAExB,MAAM,EAAE,MAAM;IAE9B;;;;;OAKG;aACa,OAAO,CAAC,EAAE,MAAM;IAChC;;;;;;;;;;OAUG;aACa,IAAI,CAAC,EAAE,MAAM;gBApBb,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;IACf;;;;;OAKG;IACa,OAAO,CAAC,EAAE,MAAM,YAAA;IAChC;;;;;;;;;;OAUG;IACa,IAAI,CAAC,EAAE,MAAM,YAAA;CAKhC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,WAAW,CAAC,CA8DtB"}
+{"version":3,"file":"close-phase.d.ts","sourceRoot":"","sources":["../src/close-phase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAmB,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAoB,KAAK,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAE3F,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACvC;;;;OAIG;IACH,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;aAExB,MAAM,EAAE,MAAM;IAE9B;;;;;OAKG;aACa,OAAO,CAAC,EAAE,MAAM;IAChC;;;;;;;;;;OAUG;aACa,IAAI,CAAC,EAAE,MAAM;gBApBb,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;IACf;;;;;OAKG;IACa,OAAO,CAAC,EAAE,MAAM,YAAA;IAChC;;;;;;;;;;OAUG;IACa,IAAI,CAAC,EAAE,MAAM,YAAA;CAKhC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,kBAAkB,EACzB,IAAI,CAAC,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC,CAwFtB"}

package/dist/confirm-identity.d.ts

@@ -187,6 +187,31 @@ export declare function accountLabel(identity: AccountIdentity | undefined, stor
  * confirm an account nobody read.
  */
 export declare function readDecision(answer: string): IdentityDecision;
+/**
+ * How to act as a DIFFERENT account on the NEXT run of this CLI — three forms, and
+ * every one of them is EXECUTABLE FROM THE STATE THIS PRINTS IN
+ * (`solo-project-ownership`).
+ *
+ * WHY THIS IS NOT COMPOSED AT THE CALL SITE THAT NEEDS IT. The not-this-account join
+ * refusal (`own-engagement.ts`) fires AFTER `confirmActingIdentity` has already run
+ * for this install — the reader has already passed the identity prompt above (or
+ * skipped it, on an arm that does not ask) and this account is the one that just got
+ * refused. "Sign in as the owner" alone is a remedy that cannot be executed from
+ * where it would be printed; what CAN be executed is what to do on the run after this
+ * one, and that is exactly the three forms this module already uses elsewhere to let
+ * a person switch identity: answer "s" when the prompt above appears again, set
+ * `HALFCYCLE_TOKEN` for the account that owns the project (it wins over anything
+ * saved), or remove this machine's saved sign-in so the next run asks fresh.
+ *
+ * ONE HOME, so a caller outside this module states the same fact rather than
+ * retyping it — the paraphrase defect this repository has already paid for on the
+ * plane's own side of this feature (a control written against a retyped copy of a
+ * message agrees with itself and with nothing).
+ *
+ * `home` is the per-user store's directory, exactly as `accountStorePath` takes it —
+ * `undefined` defaults to `os.homedir()`.
+ */
+export declare function identitySwitchRemedy(home?: string): string;
 /**
  * Name the account this run is about to act as, and — when a person is there to answer
  * — let them stop it or sign in as somebody else.

package/dist/confirm-identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"confirm-identity.d.ts","sourceRoot":"","sources":["../src/confirm-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkGG;AAGH,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAInF,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAKtG,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAErE,6FAA6F;AAC7F,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oFAAoF;IACpF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAiBtC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,UAAQ,GACd,MAAM,CASR;AA+BD;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAK7D;AAyJD;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,kBAAkB,EAC9B,GAAG,EAAE,UAAU,EACf,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAuD7B"}
+{"version":3,"file":"confirm-identity.d.ts","sourceRoot":"","sources":["../src/confirm-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkGG;AAGH,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAInF,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAKtG,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAErE,6FAA6F;AAC7F,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oFAAoF;IACpF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAiBtC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,UAAQ,GACd,MAAM,CASR;AA+BD;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAK7D;AAyJD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,kBAAkB,EAC9B,GAAG,EAAE,UAAU,EACf,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAuD7B"}

package/dist/create-engagement.d.ts

@@ -150,13 +150,41 @@ export declare class CreateEngagementRefused extends Error {
     readonly serverMessage: string;
     /** The `error` discriminant, when the envelope carried one. */
     readonly errorCode: string | undefined;
+    /**
+     * The refusal body's `reason` field, forwarded verbatim when the plane
+     * declared one — today, only the join route's not-this-account arm
+     * (`notThisAccountRefusalSchema`, T-05). `undefined` on every other
+     * refusal this class carries, including every create refusal, whose
+     * shape declares no such field at all.
+     *
+     * CARRIED HERE, INTERPRETED AT THE CALL SITE. This class is shared by
+     * both `createEngagement` and `joinEngagement`, and `reason`'s one
+     * meaning belongs to join. Branching on it lives where the two
+     * declared shapes are told apart — `own-engagement.ts`'s
+     * `isNotThisAccountRefusal` — not in this shared wiring.
+     */
+    readonly reason: string | undefined;
     constructor(
     /** The HTTP status control answered with. */
     status: number, 
     /** Control's own client-safe sentence, forwarded verbatim. */
     serverMessage: string, 
     /** The `error` discriminant, when the envelope carried one. */
-    errorCode: string | undefined, message: string);
+    errorCode: string | undefined, 
+    /**
+     * The refusal body's `reason` field, forwarded verbatim when the plane
+     * declared one — today, only the join route's not-this-account arm
+     * (`notThisAccountRefusalSchema`, T-05). `undefined` on every other
+     * refusal this class carries, including every create refusal, whose
+     * shape declares no such field at all.
+     *
+     * CARRIED HERE, INTERPRETED AT THE CALL SITE. This class is shared by
+     * both `createEngagement` and `joinEngagement`, and `reason`'s one
+     * meaning belongs to join. Branching on it lives where the two
+     * declared shapes are told apart — `own-engagement.ts`'s
+     * `isNotThisAccountRefusal` — not in this shared wiring.
+     */
+    reason: string | undefined, message: string);
     /**
      * Is this a refusal of the CALLER's credential — the arm signing in again can fix?
      *

package/dist/create-engagement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-engagement.d.ts","sourceRoot":"","sources":["../src/create-engagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AAIH;;oCAEoC;AACpC,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,6CAA6C;aAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;aAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;aAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;;IAL7C,6CAA6C;IAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;IAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;IAC/C,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7C,OAAO,EAAE,MAAM;IAMjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,WAAW,IAAI,OAAO,CAGzB;CACF;AA4DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAU5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAW5B"}
+{"version":3,"file":"create-engagement.d.ts","sourceRoot":"","sources":["../src/create-engagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AAIH;;oCAEoC;AACpC,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,6CAA6C;aAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;aAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;aAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;aACa,MAAM,EAAE,MAAM,GAAG,SAAS;;IAnB1C,6CAA6C;IAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;IAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;IAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;IACa,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM;IAMjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,WAAW,IAAI,OAAO,CAGzB;CACF;AA4ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAU5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAW5B"}

package/dist/engagement-credential.d.ts

@@ -101,6 +101,23 @@ export declare const PIN_ENGAGEMENT_ID_FIELD = "engagementId";
 export declare function engagementStateDir(engagementId: string, home?: string): string;
 /** `~/.halfcycle/engagements/<id>/env` — the owner-only per-engagement env file. */
 export declare function engagementEnvPath(engagementId: string, home?: string): string;
+/**
+ * `~/.halfcycle/engagements/<id>/not-this-account` — see
+ * `NOT_THIS_ACCOUNT_MARKER_FILENAME` above for why this is a third file rather than
+ * a field on either of the other two.
+ */
+export declare function notThisAccountMarkerPath(engagementId: string, home?: string): string;
+/**
+ * Record that THIS MACHINE, as the account that just asked, was told the
+ * engagement belongs to somebody else — the write `install()` makes instead of a
+ * credential when the join route's not-this-account arm is what it met.
+ *
+ * Owner-only, same posture as the credential file it sits beside (phase decision
+ * 6) — it is a fact about this machine and this account, not a secret, but the
+ * posture is uniform across everything in this directory rather than decided file
+ * by file.
+ */
+export declare function writeNotThisAccountMarker(engagementId: string, home?: string): void;
 /**
  * The three variables the generated guard hook requires — **the bundle's one home
  * for those names.** Anything in this package that needs to name them (the write
@@ -181,6 +198,25 @@ export declare const GUARD_COVERAGE_REQUIRED_KEYS: ("GUARD_SERVICE_TOKEN" | "GUA
  */
 export declare const ENGAGEMENT_ENV_KEYS: readonly ["HALFCYCLE_SERVICE_URL", "HALFCYCLE_MCP_URL", "HALFCYCLE_TOKEN", "HALFCYCLE_ENGAGEMENT_ID", "GUARD_SERVICE_URL", "GUARD_SERVICE_TOKEN", "GUARD_ENGAGEMENT_ID", "CONTROL_TELEMETRY_URL"];
 export type EngagementEnvKey = (typeof ENGAGEMENT_ENV_KEYS)[number];
+/**
+ * The phase stamp — the one key in this file that is NOT a credential, named once
+ * here so the two verbs that move it (`open-phase.ts`, `close-phase.ts`) and this
+ * writer agree on the spelling.
+ *
+ * **Deliberately absent from `ENGAGEMENT_ENV_KEYS` above**, and that is the whole
+ * reason `reconcileEnvText`/`writeEngagementEnv` take a `keys` argument. It is not
+ * a secret, it is not written by the installer, and an install must not blank it:
+ * a re-install re-writes the eight credential keys and this key's line has to
+ * survive that untouched, which it does precisely because it is not in the list.
+ * The runner reads it out of this file (via the wrapper that sources it) to stamp
+ * the phase on every evaluation.
+ *
+ * `packages/mac-workspace-provider` writes the same name into the same file for a
+ * Studio-managed engagement (its own whole-file writer, INV-001-unreachable from
+ * here). Nothing is shared: this is the Connect writer, and the two topologies
+ * never run against one engagement.
+ */
+export declare const PHASE_STAMP_ENV_KEY = "HALFCYCLE_PHASE";
 /**
  * Parse `KEY=value` lines. **PARSES, NEVER SOURCES** — a credential store is not
  * code, and `.` would execute whatever the file happens to contain. An optional
@@ -231,8 +267,31 @@ export declare function parseEnvText(raw: string): Record<string, string>;
  * install, not preserved as a foreign writer's key. A Studio-written value for it is
  * legitimately overwritten on the next Connect install; only `CONTROL_TELEMETRY_TOKEN`
  * is still genuinely foreign.
+ *
+ * **A `null` VALUE REMOVES THE KEY'S LINE. An absent one still writes `KEY=''`.**
+ * The two are different requests and this function had no way to make the first
+ * one: `values[k] ?? ''` mapped both to the empty string, so the only reachable
+ * way to "unset" a key was to write it blank. Blank is not absent to any reader of
+ * this file — the shell that SOURCES it sets the variable to the empty string, and
+ * the Build-Record write predicate refuses an empty phase identity, so a phase
+ * stamp cleared by blanking would fire a refusal on the ordinary project-scope
+ * return. `open-phase --none` and `close-phase` therefore pass `null` and the
+ * assignment leaves the file wherever it sat, `export ` prefix and all. Nothing is
+ * appended for a removed key.
+ *
+ * **The header block is appended AT MOST ONCE per file**, and that follows from the
+ * same pair of verbs: `HALFCYCLE_PHASE` leaves on every close and comes back on
+ * every open, so a header emitted with each re-appearance would grow the file by a
+ * comment block per phase. A file that already carries the header gets the new
+ * lines under the one it has.
+ *
+ * **Appended lines go BEFORE the file's final newline, not after a blank one.** The
+ * append used to land after the trailing empty element of the split, which put a
+ * blank line above the new block — invisible when a key is written once and never
+ * removed, and one blank line per phase once a key comes and goes. The
+ * pre-existing text is still an untouched prefix either way.
  */
-export declare function reconcileEnvText(existing: string | null, values: Record<string, string>, keys?: readonly string[]): string;
+export declare function reconcileEnvText(existing: string | null, values: Record<string, string | null | undefined>, keys?: readonly string[]): string;
 /**
  * Read this engagement's machine-level credential, or `null` when this machine
  * holds none for it.
@@ -254,8 +313,22 @@ export type EnvWriteOutcome = 'written' | 'skipped';
  * The mode is re-applied on the skipped path too — a store that already existed at
  * the wrong mode is exactly the case `writeFileSync`'s `mode` option cannot fix,
  * and a re-install is the natural moment to repair it.
+ *
+ * **`keys` NARROWS WHAT THIS CALL OWNS, and it is why the phase stamp does not need
+ * a writer of its own.** Left off, this writes the eight credential keys, which is
+ * the installer's call and is unchanged. Passed a subset, it touches exactly those
+ * keys and copies every other line — ours and anyone else's — through untouched, so
+ * a caller that owns ONE key writes that key without re-implementing the
+ * read/merge/write/chmod sequence around it. That re-implementation is the failure
+ * this parameter exists to remove: a second writer that forgot `0o600` would loosen
+ * the credential file and pass every test that only checked which keys survived.
+ * A value of `null` deletes its key's line (see `reconcileEnvText`).
+ *
+ * The directory is created only when there is something to write. A removal-only
+ * call against a machine holding no store for this engagement leaves the disk
+ * alone rather than creating an empty file under a fresh directory.
  */
-export declare function writeEngagementEnv(engagementId: string, values: Record<string, string>, home?: string): EnvWriteOutcome;
+export declare function writeEngagementEnv(engagementId: string, values: Record<string, string | null | undefined>, home?: string, keys?: readonly string[]): EnvWriteOutcome;
 /**
  * The shell function both generated consumers embed to find this file.
  *
@@ -291,6 +364,16 @@ export declare function writeEngagementEnv(engagementId: string, values: Record<
  * `$HALFCYCLE_ENV_PROBLEM` names which step failed — `no-pin`, `no-id`, `no-home`,
  * `no-credential` — so each caller says the true thing for its own surface instead
  * of printing one sentence for four different situations.
+ *
+ * **HALFCYCLE_ENV_NOT_THIS_ACCOUNT IS SET ON THE `no-credential` FAILURE PATH TOO
+ * (T-02b, `solo-project-ownership`) — that is the state it exists to distinguish.**
+ * The marker check sits right after `$HOME` is confirmed and right before the
+ * credential file is tested, because `$hc_id` is known by then regardless of
+ * whether a credential exists — a not-this-account refusal is exactly a
+ * `no-credential` outcome with a reason attached, never a fourth
+ * `HALFCYCLE_ENV_PROBLEM` value: the credential is equally absent either way, and
+ * every existing reader of that variable stays correct without being taught a new
+ * case.
  */
 export declare function engagementResolutionShell(): string;
 //# sourceMappingURL=engagement-credential.d.ts.map

package/dist/engagement-credential.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engagement-credential.d.ts","sourceRoot":"","sources":["../src/engagement-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAiBH;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AAEtD,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7E;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,cAAc,8EAIjB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,4BAA4B,mDAExC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mBAAmB,mMAOtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAmEpE;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUhE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,IAAI,GAAE,SAAS,MAAM,EAAwB,GAC5C,MAAM,CA8BR;AAMD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,GACZ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAM/B;AAED,8DAA8D;AAC9D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,IAAI,CAAC,EAAE,MAAM,GACZ,eAAe,CAkBjB;AA4BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CA0ClD"}
+{"version":3,"file":"engagement-credential.d.ts","sourceRoot":"","sources":["../src/engagement-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAiBH;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AAEtD,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7E;AAyBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAMnF;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,cAAc,8EAIjB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,4BAA4B,mDAExC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mBAAmB,mMAOtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAmErD;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUhE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EACjD,IAAI,GAAE,SAAS,MAAM,EAAwB,GAC5C,MAAM,CAwDR;AAMD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,GACZ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAM/B;AAED,8DAA8D;AAC9D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EACjD,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,GAAE,SAAS,MAAM,EAAwB,GAC5C,eAAe,CAoBjB;AA4BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CA8ClD"}