instar 1.3.511 → 1.3.512

package/dist/monitoring/GuardLatchStore.d.ts

@@ -0,0 +1,134 @@
+/**
+ * GuardLatchStore — pool-visible kill-switch + marker latches for guarded
+ * autonomous authorities (green-pr-automerge-enforcement R9/R7).
+ *
+ * Two independent gate families decide whether the GreenPrAutoMerger may act:
+ *   - `rollback`        — set by POST /green-pr-automerge/rollback, cleared by
+ *                         POST /green-pr-automerge/enable (PIN-gated re-arm)
+ *   - `emergency-pause` — set by the MessageSentinel emergency stop, cleared by
+ *                         its own resume path
+ * BOTH must be open for a merge. A third family, `pool-armed`, is a posture
+ * MARKER (not a gate): its presence makes a lease holder whose local config is
+ * disabled grade `diverged-from-default` instead of healthy dark-default.
+ *
+ * Why a store and not a flag (round-2 finding): execution follows the lease, so
+ * a machine-LOCAL latch would silently resurrect the watcher on a lease move.
+ * Each transition is therefore written BOTH to a durable local file (authoritative
+ * for this machine's own writes, present regardless of the journal feature flag)
+ * AND to the replicated `guard-latch` coherence-journal kind, so a peer that
+ * takes the lease reads the same disabled state.
+ *
+ * ABSORBING disable (round-4): a `rollback` set always wins ordering conflicts
+ * regardless of epoch — "a stale-epoch standby's STOP can never be out-ordered
+ * by an earlier /enable from a higher epoch." This is achieved structurally, not
+ * by clock comparison: every `set` mints a FRESH globally-unique latchId
+ * (`<machineId>:<seq>`), and `/enable` clears ONLY the specific latchId(s) it
+ * names. A new STOP therefore introduces a latchId no prior enable could have
+ * named, so it can never be pre-cleared. Ordering within a single latchId is by
+ * (epoch, seq), NEVER wall-clock.
+ *
+ * arrive-disabled-on-unreadable (round-3): if the merged peer view cannot be
+ * read, `isMergeAllowed()` returns false — absence of evidence is not "armed."
+ */
+import type { CoherenceJournal, GuardLatchAction } from '../core/CoherenceJournal.js';
+/** A single latch transition (own or peer), as merged for resolution. */
+export interface GuardLatchEntry {
+    machine: string;
+    latchKind: string;
+    latchId: string;
+    action: GuardLatchAction;
+    epoch: number;
+    seq: number;
+    reason?: string;
+    ts?: string;
+}
+export type MergeGateReason = 'allowed' | 'rollback' | 'emergency-pause' | 'unreadable-peers';
+export interface MergeGateVerdict {
+    allowed: boolean;
+    reason: MergeGateReason;
+    /** Active latch ids per blocking family (for the status surface / audit). */
+    activeLatchIds: Record<string, string[]>;
+}
+/** Latch family names. */
+export declare const ROLLBACK_FAMILY = "rollback";
+export declare const EMERGENCY_PAUSE_FAMILY = "emergency-pause";
+export declare const POOL_ARMED_FAMILY = "pool-armed";
+/** The fixed, pool-shared latchId for the single pool-armed marker. */
+export declare const POOL_MARKER_ID = "pool";
+export interface GuardLatchStoreConfig {
+    /** Absolute path to the agent's `.instar/` directory. */
+    stateDir: string;
+    /** Stable id for THIS machine. */
+    machineId: string;
+    /** Replication writer (optional — single-machine installs pass none). */
+    journal?: Pick<CoherenceJournal, 'emitGuardLatch'>;
+    /** Current lease epoch (monotonic; stamped on every transition). */
+    leaseEpoch: () => number;
+    /**
+     * Merged peer view: the latest guard-latch transition per (machine, kind, id)
+     * from replicated peer streams. Throwing signals UNREADABLE → arrive-disabled.
+     * Single-machine installs pass `() => []`.
+     */
+    readPeerEntries?: () => GuardLatchEntry[];
+    now?: () => Date;
+    logger?: (msg: string) => void;
+}
+export declare class GuardLatchStore {
+    private readonly stateDir;
+    private readonly machineId;
+    private readonly journal?;
+    private readonly leaseEpoch;
+    private readonly readPeerEntries;
+    private readonly now;
+    private readonly logger?;
+    private local;
+    constructor(cfg: GuardLatchStoreConfig);
+    /**
+     * Set (mint) a latch in `latchKind`. Returns the fresh, globally-unique
+     * latchId. Use for the absorbing families (rollback, emergency-pause): every
+     * call introduces a NEW latchId that no prior clear could have named.
+     */
+    set(latchKind: string, reason?: string): string;
+    /** Clear the SPECIFIC named latchId(s) in `latchKind` (the /enable semantics). */
+    clear(latchKind: string, latchIds: string[], reason?: string): void;
+    /** Set/clear a FIXED-id marker (pool-armed): last-(epoch,seq)-wins, not absorbing. */
+    setMarker(latchKind: string, latchId: string, on: boolean, reason?: string): void;
+    private record;
+    /**
+     * Resolve a family to the winning action per latchId across own + peers.
+     * Within one latchId, the highest (epoch, seq) transition wins. Distinct
+     * latchIds are independent — that is what makes `set` absorbing for the
+     * fresh-id families.
+     * @throws if the peer view is unreadable (caller maps to arrive-disabled).
+     */
+    resolveFamily(latchKind: string): Map<string, GuardLatchEntry>;
+    /** Active (currently-set) latch ids in a family. */
+    activeLatchIds(latchKind: string): string[];
+    /**
+     * The dual-latch gate (R9): both rollback and emergency-pause must be open.
+     * An unreadable peer view arrives DISABLED (absence of evidence ≠ armed).
+     */
+    isMergeAllowed(): MergeGateVerdict;
+    markPoolArmed(): void;
+    /** PIN-gated disarm: superseding entry, grades back to healthy dark-default. */
+    markPoolDisarmed(): void;
+    /**
+     * Is this pool deliberately armed (per the replicated marker)? Used by guard
+     * posture to grade a local-disabled + pool-armed machine `diverged-from-default`.
+     * Unreadable peers → false (we never INVENT a divergence alarm on a read error).
+     */
+    isPoolArmed(): boolean;
+    /** Snapshot for the status route + posture grading. Never throws. */
+    snapshot(): {
+        rollback: string[];
+        emergencyPause: string[];
+        poolArmed: boolean;
+        mergeAllowed: boolean;
+        reason: MergeGateReason;
+    };
+    private filePath;
+    private load;
+    private persist;
+    private log;
+}
+//# sourceMappingURL=GuardLatchStore.d.ts.map

package/dist/monitoring/GuardLatchStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GuardLatchStore.d.ts","sourceRoot":"","sources":["../../src/monitoring/GuardLatchStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEtF,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AAE9F,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,6EAA6E;IAC7E,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC1C;AAED,0BAA0B;AAC1B,eAAO,MAAM,eAAe,aAAa,CAAC;AAC1C,eAAO,MAAM,sBAAsB,oBAAoB,CAAC;AACxD,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAC9C,uEAAuE;AACvE,eAAO,MAAM,cAAc,SAAS,CAAC;AAiBrC,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,OAAO,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IACnD,oEAAoE;IACpE,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,eAAe,EAAE,CAAC;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA2C;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAe;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0B;IAC1D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwB;IAEhD,OAAO,CAAC,KAAK,CAAY;gBAEb,GAAG,EAAE,qBAAqB;IAatC;;;;OAIG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM;IAO/C,kFAAkF;IAClF,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAOnE,sFAAsF;IACtF,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAKjF,OAAO,CAAC,MAAM;IAiBd;;;;;;OAMG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC;IAiB9D,oDAAoD;IACpD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE;IAQ3C;;;OAGG;IACH,cAAc,IAAI,gBAAgB;IAqBlC,aAAa,IAAI,IAAI;IAIrB,gFAAgF;IAChF,gBAAgB,IAAI,IAAI;IAIxB;;;;OAIG;IACH,WAAW,IAAI,OAAO;IAWtB,qEAAqE;IACrE,QAAQ,IAAI;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,eAAe,CAAA;KAAE;IAmBhI,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,OAAO;IAgBf,OAAO,CAAC,GAAG;CAGZ"}

package/dist/monitoring/GuardLatchStore.js

@@ -0,0 +1,255 @@
+/**
+ * GuardLatchStore — pool-visible kill-switch + marker latches for guarded
+ * autonomous authorities (green-pr-automerge-enforcement R9/R7).
+ *
+ * Two independent gate families decide whether the GreenPrAutoMerger may act:
+ *   - `rollback`        — set by POST /green-pr-automerge/rollback, cleared by
+ *                         POST /green-pr-automerge/enable (PIN-gated re-arm)
+ *   - `emergency-pause` — set by the MessageSentinel emergency stop, cleared by
+ *                         its own resume path
+ * BOTH must be open for a merge. A third family, `pool-armed`, is a posture
+ * MARKER (not a gate): its presence makes a lease holder whose local config is
+ * disabled grade `diverged-from-default` instead of healthy dark-default.
+ *
+ * Why a store and not a flag (round-2 finding): execution follows the lease, so
+ * a machine-LOCAL latch would silently resurrect the watcher on a lease move.
+ * Each transition is therefore written BOTH to a durable local file (authoritative
+ * for this machine's own writes, present regardless of the journal feature flag)
+ * AND to the replicated `guard-latch` coherence-journal kind, so a peer that
+ * takes the lease reads the same disabled state.
+ *
+ * ABSORBING disable (round-4): a `rollback` set always wins ordering conflicts
+ * regardless of epoch — "a stale-epoch standby's STOP can never be out-ordered
+ * by an earlier /enable from a higher epoch." This is achieved structurally, not
+ * by clock comparison: every `set` mints a FRESH globally-unique latchId
+ * (`<machineId>:<seq>`), and `/enable` clears ONLY the specific latchId(s) it
+ * names. A new STOP therefore introduces a latchId no prior enable could have
+ * named, so it can never be pre-cleared. Ordering within a single latchId is by
+ * (epoch, seq), NEVER wall-clock.
+ *
+ * arrive-disabled-on-unreadable (round-3): if the merged peer view cannot be
+ * read, `isMergeAllowed()` returns false — absence of evidence is not "armed."
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+/** Latch family names. */
+export const ROLLBACK_FAMILY = 'rollback';
+export const EMERGENCY_PAUSE_FAMILY = 'emergency-pause';
+export const POOL_ARMED_FAMILY = 'pool-armed';
+/** The fixed, pool-shared latchId for the single pool-armed marker. */
+export const POOL_MARKER_ID = 'pool';
+export class GuardLatchStore {
+    stateDir;
+    machineId;
+    journal;
+    leaseEpoch;
+    readPeerEntries;
+    now;
+    logger;
+    local;
+    constructor(cfg) {
+        this.stateDir = cfg.stateDir;
+        this.machineId = cfg.machineId;
+        this.journal = cfg.journal;
+        this.leaseEpoch = cfg.leaseEpoch;
+        this.readPeerEntries = cfg.readPeerEntries ?? (() => []);
+        this.now = cfg.now ?? (() => new Date());
+        this.logger = cfg.logger;
+        this.local = this.load();
+    }
+    // ---- mutation -----------------------------------------------------------
+    /**
+     * Set (mint) a latch in `latchKind`. Returns the fresh, globally-unique
+     * latchId. Use for the absorbing families (rollback, emergency-pause): every
+     * call introduces a NEW latchId that no prior clear could have named.
+     */
+    set(latchKind, reason) {
+        const seq = ++this.local.ownSeq;
+        const latchId = `${this.machineId}:${seq}`;
+        this.record(latchKind, latchId, 'set', seq, reason);
+        return latchId;
+    }
+    /** Clear the SPECIFIC named latchId(s) in `latchKind` (the /enable semantics). */
+    clear(latchKind, latchIds, reason) {
+        for (const latchId of latchIds) {
+            const seq = ++this.local.ownSeq;
+            this.record(latchKind, latchId, 'clear', seq, reason);
+        }
+    }
+    /** Set/clear a FIXED-id marker (pool-armed): last-(epoch,seq)-wins, not absorbing. */
+    setMarker(latchKind, latchId, on, reason) {
+        const seq = ++this.local.ownSeq;
+        this.record(latchKind, latchId, on ? 'set' : 'clear', seq, reason);
+    }
+    record(latchKind, latchId, action, seq, reason) {
+        const epoch = safeEpoch(this.leaseEpoch);
+        const ts = this.now().toISOString();
+        const fam = this.local.transitions[latchKind] ?? (this.local.transitions[latchKind] = {});
+        fam[latchId] = { action, epoch, seq, ...(reason ? { reason: reason.slice(0, 80) } : {}), ts };
+        // Durable local write FIRST (safety never waits on the journal/network).
+        this.persist();
+        // Then replicate (best-effort; non-blocking inside the journal).
+        try {
+            this.journal?.emitGuardLatch({ latchKind, latchId, action, epoch, seq, ...(reason ? { reason: reason.slice(0, 80) } : {}) });
+        }
+        catch (e) { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+            this.log(`guard-latch journal emit failed (swallowed): ${e?.message}`);
+        }
+    }
+    // ---- resolution ---------------------------------------------------------
+    /**
+     * Resolve a family to the winning action per latchId across own + peers.
+     * Within one latchId, the highest (epoch, seq) transition wins. Distinct
+     * latchIds are independent — that is what makes `set` absorbing for the
+     * fresh-id families.
+     * @throws if the peer view is unreadable (caller maps to arrive-disabled).
+     */
+    resolveFamily(latchKind) {
+        const winners = new Map();
+        const consider = (e) => {
+            if (e.latchKind !== latchKind)
+                return;
+            const cur = winners.get(e.latchId);
+            if (!cur || dominates(e, cur))
+                winners.set(e.latchId, e);
+        };
+        // Own transitions.
+        const ownFam = this.local.transitions[latchKind] ?? {};
+        for (const [latchId, t] of Object.entries(ownFam)) {
+            consider({ machine: this.machineId, latchKind, latchId, action: t.action, epoch: t.epoch, seq: t.seq, reason: t.reason, ts: t.ts });
+        }
+        // Peer transitions (throws → unreadable).
+        for (const e of this.readPeerEntries())
+            consider(e);
+        return winners;
+    }
+    /** Active (currently-set) latch ids in a family. */
+    activeLatchIds(latchKind) {
+        const out = [];
+        for (const [latchId, e] of this.resolveFamily(latchKind)) {
+            if (e.action === 'set')
+                out.push(latchId);
+        }
+        return out;
+    }
+    /**
+     * The dual-latch gate (R9): both rollback and emergency-pause must be open.
+     * An unreadable peer view arrives DISABLED (absence of evidence ≠ armed).
+     */
+    isMergeAllowed() {
+        let rollback;
+        let pause;
+        try {
+            rollback = this.activeLatchIds(ROLLBACK_FAMILY);
+            pause = this.activeLatchIds(EMERGENCY_PAUSE_FAMILY);
+        }
+        catch (e) { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+            this.log(`guard-latch peer view unreadable — arriving DISABLED: ${e?.message}`);
+            return { allowed: false, reason: 'unreadable-peers', activeLatchIds: {} };
+        }
+        if (rollback.length > 0) {
+            return { allowed: false, reason: 'rollback', activeLatchIds: { [ROLLBACK_FAMILY]: rollback } };
+        }
+        if (pause.length > 0) {
+            return { allowed: false, reason: 'emergency-pause', activeLatchIds: { [EMERGENCY_PAUSE_FAMILY]: pause } };
+        }
+        return { allowed: true, reason: 'allowed', activeLatchIds: {} };
+    }
+    // ---- pool-armed marker (R7) --------------------------------------------
+    markPoolArmed() {
+        this.setMarker(POOL_ARMED_FAMILY, POOL_MARKER_ID, true, 'armed');
+    }
+    /** PIN-gated disarm: superseding entry, grades back to healthy dark-default. */
+    markPoolDisarmed() {
+        this.setMarker(POOL_ARMED_FAMILY, POOL_MARKER_ID, false, 'disarmed');
+    }
+    /**
+     * Is this pool deliberately armed (per the replicated marker)? Used by guard
+     * posture to grade a local-disabled + pool-armed machine `diverged-from-default`.
+     * Unreadable peers → false (we never INVENT a divergence alarm on a read error).
+     */
+    isPoolArmed() {
+        try {
+            const winner = this.resolveFamily(POOL_ARMED_FAMILY).get(POOL_MARKER_ID);
+            return winner?.action === 'set';
+        }
+        catch { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+            return false;
+        }
+    }
+    // ---- status -------------------------------------------------------------
+    /** Snapshot for the status route + posture grading. Never throws. */
+    snapshot() {
+        const verdict = this.isMergeAllowed();
+        let rollback = [];
+        let pause = [];
+        try {
+            rollback = this.activeLatchIds(ROLLBACK_FAMILY);
+            pause = this.activeLatchIds(EMERGENCY_PAUSE_FAMILY);
+        }
+        catch { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */ /* unreadable — leave empty; verdict already reflects it */ }
+        return {
+            rollback,
+            emergencyPause: pause,
+            poolArmed: this.isPoolArmed(),
+            mergeAllowed: verdict.allowed,
+            reason: verdict.reason,
+        };
+    }
+    // ---- durable local file -------------------------------------------------
+    filePath() {
+        return path.join(this.stateDir, 'state', 'green-pr-automerge-latches.json');
+    }
+    load() {
+        const fresh = { machineId: this.machineId, ownSeq: 0, transitions: {} };
+        try {
+            const raw = fs.readFileSync(this.filePath(), 'utf-8');
+            const obj = JSON.parse(raw);
+            if (obj && typeof obj.ownSeq === 'number' && obj.transitions && typeof obj.transitions === 'object') {
+                return { machineId: this.machineId, ownSeq: obj.ownSeq, transitions: obj.transitions };
+            }
+        }
+        catch (e) { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+            if (e?.code !== 'ENOENT') {
+                this.log(`guard-latch local file unreadable, starting fresh: ${e?.message}`);
+            }
+        }
+        return fresh;
+    }
+    persist() {
+        const p = this.filePath();
+        const dir = path.dirname(p);
+        try {
+            if (!fs.existsSync(dir))
+                fs.mkdirSync(dir, { recursive: true });
+            const tmp = p + '.tmp';
+            fs.writeFileSync(tmp, JSON.stringify(this.local, null, 2), { mode: 0o600 });
+            fs.renameSync(tmp, p);
+        }
+        catch (e) { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+            // A failed durable write is a SAFETY problem for a STOP (the latch might
+            // not survive a restart). We surface it loudly but do not throw into the
+            // route — the journal emit + the in-memory state still gate this process.
+            this.log(`guard-latch durable write FAILED: ${e?.message}`);
+        }
+    }
+    log(msg) {
+        this.logger?.(`[guard-latch] ${msg}`);
+    }
+}
+/** (epoch, seq) lexicographic domination — NEVER wall-clock. */
+function dominates(a, b) {
+    if (a.epoch !== b.epoch)
+        return a.epoch > b.epoch;
+    return a.seq > b.seq;
+}
+function safeEpoch(fn) {
+    try {
+        const e = fn();
+        return Number.isFinite(e) ? e : 0;
+    }
+    catch { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+        return 0;
+    }
+}
+//# sourceMappingURL=GuardLatchStore.js.map

package/dist/monitoring/GuardLatchStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GuardLatchStore.js","sourceRoot":"","sources":["../../src/monitoring/GuardLatchStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA0B7B,0BAA0B;AAC1B,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AACxD,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAC9C,uEAAuE;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAoCrC,MAAM,OAAO,eAAe;IACT,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,OAAO,CAA4C;IACnD,UAAU,CAAe;IACzB,eAAe,CAA0B;IACzC,GAAG,CAAa;IAChB,MAAM,CAAyB;IAExC,KAAK,CAAY;IAEzB,YAAY,GAA0B;QACpC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,4EAA4E;IAE5E;;;;OAIG;IACH,GAAG,CAAC,SAAiB,EAAE,MAAe;QACpC,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,SAAiB,EAAE,QAAkB,EAAE,MAAe;QAC1D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,SAAS,CAAC,SAAiB,EAAE,OAAe,EAAE,EAAW,EAAE,MAAe;QACxE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAEO,MAAM,CAAC,SAAiB,EAAE,OAAe,EAAE,MAAwB,EAAE,GAAW,EAAE,MAAe;QACvG,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1F,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9F,yEAAyE;QACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,iEAAiE;QACjE,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/H,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,6HAA6H;YACzI,IAAI,CAAC,GAAG,CAAC,gDAAiD,CAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E;;;;;;OAMG;IACH,aAAa,CAAC,SAAiB;QAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;QACnD,MAAM,QAAQ,GAAG,CAAC,CAAkB,EAAE,EAAE;YACtC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO;YACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC;QACF,mBAAmB;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtI,CAAC;QACD,0CAA0C;QAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE;YAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,oDAAoD;IACpD,cAAc,CAAC,SAAiB;QAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,IAAI,QAAkB,CAAC;QACvB,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAChD,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,6HAA6H;YACzI,IAAI,CAAC,GAAG,CAAC,yDAA0D,CAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5G,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,2EAA2E;IAE3E,aAAa;QACX,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,gFAAgF;IAChF,gBAAgB;QACd,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACH,WAAW;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACzE,OAAO,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC,CAAC,6HAA6H;YACrI,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E,qEAAqE;IACrE,QAAQ;QACN,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,IAAI,QAAQ,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAChD,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC,CAAC,6HAA6H,CAAC,2DAA2D,CAAC,CAAC;QACrM,OAAO;YACL,QAAQ;YACR,cAAc,EAAE,KAAK;YACrB,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE;YAC7B,YAAY,EAAE,OAAO,CAAC,OAAO;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;IACJ,CAAC;IAED,4EAA4E;IAEpE,QAAQ;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAC9E,CAAC;IAEO,IAAI;QACV,MAAM,KAAK,GAAc,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACnF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;YAClD,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACpG,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAuC,EAAE,CAAC;YACrH,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,6HAA6H;YACzI,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpD,IAAI,CAAC,GAAG,CAAC,sDAAuD,CAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,OAAO;QACb,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC;YACvB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5E,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,6HAA6H;YACzI,yEAAyE;YACzE,yEAAyE;YACzE,0EAA0E;YAC1E,IAAI,CAAC,GAAG,CAAC,qCAAsC,CAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAEO,GAAG,CAAC,GAAW;QACrB,IAAI,CAAC,MAAM,EAAE,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;IACxC,CAAC;CACF;AAED,gEAAgE;AAChE,SAAS,SAAS,CAAC,CAAkB,EAAE,CAAkB;IACvD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;AACvB,CAAC;AAED,SAAS,SAAS,CAAC,EAAgB;IACjC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC,CAAC,6HAA6H;QACrI,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/monitoring/MergeRunner.d.ts

@@ -0,0 +1,126 @@
+/**
+ * MergeRunner — the act-path engine for the GreenPrAutoMerger (Step 4 of
+ * green-pr-automerge-enforcement §3.1/R5). Owns everything that touches a real
+ * process:
+ *
+ *  - probeContract(): runs `safe-merge --capabilities`, pins the script's
+ *    content hash + absolute path for the attempt (round-3 mid-run-swap defense),
+ *    and re-verifies that hash IMMEDIATELY before exec (round-5: the spawn runs
+ *    the verified bytes).
+ *  - run(): writes a DURABLE two-phase in-flight record BEFORE the spawn (intent
+ *    first, pid/pgid patched in after), spawns safe-merge in its OWN process
+ *    group, hard-kills the group at mergeTimeoutMs + grace, parses the classified
+ *    `safe-merge-result:` line, and confirms a `merged` outcome INDEPENDENTLY
+ *    (B10). The record is cleared on classification.
+ *  - reapOrphan(): at boot/warm-up, reaps a surviving orphan from a crash —
+ *    verifies the recorded pid/pgid identity via a unique attempt token before
+ *    signalling (pid-reuse safe), handles the dead-leader/live-group corner
+ *    (orphan-reap-incomplete), and re-verifies PR state via gh. A pid-less
+ *    in-flight record is treated as attempt-of-unknown-outcome (re-verify,
+ *    never assume not-spawned).
+ *
+ * The guarantee survives the server's own death: the watcher's merges trigger
+ * releases → auto-update restarts, so a restart mid-attempt is a NORMAL
+ * condition. The durable record + own-process-group + shutdown group-kill +
+ * warm-up reap close the double-attempt / wedged-orphan classes.
+ *
+ * All process + fs + gh I/O is behind injected seams so the runner is testable
+ * without spawning anything.
+ *
+ * RULE 3.1 RATIONALE
+ *   Criticality: high — this code drives an autonomous merge to main.
+ *   Frequency:   per-merge-attempt (at most one per ~10-minute tick).
+ *   Stability:   stable — parses safe-merge's OWN structured contract line
+ *                (`safe-merge-result: {...}`), not human gh output; and
+ *                `gh ... --json` structured responses, never regex over prose.
+ *   Fallback:    every parse failure is caught and resolves to a NON-merged
+ *                outcome (fail-toward-skip); a `merged` outcome is never trusted
+ *                without an INDEPENDENT `gh pr view` confirmation (B10).
+ *   Verdict:     deterministic; the act-time authority is safe-merge, which
+ *                re-verifies, so a misread here can only refuse, never over-merge.
+ */
+import type { MergeAttempt, MergeRunResult, MergeRunner } from './GreenPrAutoMerger.js';
+/** A spawned child's observable result (seam over child_process). */
+export interface SpawnOutcome {
+    stdout: string;
+    stderr: string;
+    status: number | null;
+    signal: string | null;
+    /** Whether the deadline timer fired and the group was killed. */
+    deadlineKilled: boolean;
+    pid: number | null;
+}
+export interface SpawnArgs {
+    command: string;
+    args: string[];
+    env: NodeJS.ProcessEnv;
+    deadlineMs: number;
+    /** Called once the child has a pid, so the runner can patch the durable record. */
+    onPid?: (pid: number) => void;
+}
+export interface MergeRunnerConfig {
+    stateDir: string;
+    repo: string;
+    /** Absolute path to scripts/safe-merge.mjs. */
+    safeMergePath: string;
+    mergeTimeoutMs: number;
+    mergeKillGraceMs: number;
+    expectedContractVersion: number;
+    /** node executable (default process.execPath). */
+    nodePath?: string;
+}
+export interface MergeRunnerDeps {
+    /** Spawn a child in its OWN process group; resolve when it exits or is killed. */
+    spawn?: (a: SpawnArgs) => Promise<SpawnOutcome>;
+    /** Independent merge confirmation (gh pr view --json state,mergedAt). */
+    confirmMerged: (pr: number, repo: string) => Promise<boolean>;
+    /** Re-verify a PR's live state (for orphan reap). 'MERGED'|'CLOSED'|'OPEN'|'UNKNOWN'. */
+    prState: (pr: number, repo: string) => Promise<string>;
+    /** Is a process group still alive? (process.kill(pgid, 0) wrapper.) */
+    isAlive?: (pid: number) => boolean;
+    /** Kill a process group (SIGKILL the negative pid). */
+    killGroup?: (pgid: number) => void;
+    now?: () => number;
+    logger?: (msg: string) => void;
+}
+/** The durable in-flight record (state/green-pr-automerge-inflight.json). */
+export interface InFlightRecord {
+    pr: number;
+    headRefOid: string;
+    repo: string;
+    attemptToken: string;
+    startedAt: number;
+    /** Patched in AFTER the spawn (phase 2). Null until then. */
+    pid: number | null;
+    pgid: number | null;
+}
+export declare class DefaultMergeRunner implements MergeRunner {
+    private readonly cfg;
+    private readonly deps;
+    private readonly now;
+    /** Pinned per-attempt: the probed script's hash + path. */
+    private pinnedHash;
+    constructor(cfg: MergeRunnerConfig, deps: MergeRunnerDeps);
+    probeContract(): Promise<{
+        ok: boolean;
+        version?: number;
+    }>;
+    private hashScript;
+    run(attempt: MergeAttempt): Promise<MergeRunResult>;
+    reapOrphan(): Promise<{
+        reaped: boolean;
+        outcome?: string;
+    }>;
+    private reverifyAndClear;
+    /** Best-effort identity check: does the live pid's argv carry our token? */
+    private verifyAttemptToken;
+    private inFlightPath;
+    private writeInFlight;
+    private readInFlight;
+    private clearInFlight;
+    private spawn;
+    private log;
+}
+/** Parse safe-merge's classified `safe-merge-result: {...}` line from stdout. */
+export declare function parseResultLine(stdout: string): string | null;
+//# sourceMappingURL=MergeRunner.d.ts.map

package/dist/monitoring/MergeRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MergeRunner.d.ts","sourceRoot":"","sources":["../../src/monitoring/MergeRunner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAQH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAExF,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,iEAAiE;IACjE,cAAc,EAAE,OAAO,CAAC;IACxB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,uBAAuB,EAAE,MAAM,CAAC;IAChC,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAChD,yEAAyE;IACzE,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,yFAAyF;IACzF,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,uDAAuD;IACvD,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,qBAAa,kBAAmB,YAAW,WAAW;IACpD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,2DAA2D;IAC3D,OAAO,CAAC,UAAU,CAAuB;gBAE7B,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,eAAe;IAQnD,aAAa,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAoBjE,OAAO,CAAC,UAAU;IAWZ,GAAG,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IAqDnD,UAAU,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;YA6BpD,gBAAgB;IAU9B,4EAA4E;IAC5E,OAAO,CAAC,kBAAkB;IAa1B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,GAAG;CAGZ;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS7D"}