instar 1.3.511 → 1.3.513

package/dist/monitoring/GreenPrAutoMerger.js

@@ -0,0 +1,393 @@
+/**
+ * GreenPrAutoMerger — the background watcher that merges a green, mergeable,
+ * non-held PR this agent authored, surviving session death (Phase 7 becomes
+ * machinery, not memory). green-pr-automerge-enforcement R1–R11.
+ *
+ * Layer 1 (the guarantee). Ticks run ONLY on the multi-machine lease holder;
+ * the first tick after acquiring the lease is OBSERVE-ONLY (warm-up: seed hold
+ * memory, build the snapshot, read peer latches). At most one merge attempt per
+ * tick, single-flight with a liveness guarantee that survives a server restart
+ * (the MergeRunner owns the durable in-flight record + orphan reap). Everything
+ * that decides "is this change good" already happened upstream; safe-merge
+ * re-verifies at act time. Tier-0 supervision — the only discretionary call is
+ * hold/candidate status and its failure direction is fail-toward-skip.
+ *
+ * All I/O is injected (deps) so every decision path is unit-testable without gh,
+ * real processes, or a real lease.
+ */
+import { EventEmitter } from 'node:events';
+import { classifyCandidate, holdReasonOf, selectOldest, debounceHoldRelease, applyOutcome, maybeRearm, episodeEligible, freshBreaker, feedBreaker, breakerBlocking, validateTimeoutInvariant, } from './greenPrLogic.js';
+const DEFAULTS = {
+    enabled: false,
+    dryRun: false,
+    tickIntervalMs: 600_000,
+    maxAttempts: 3,
+    maxRearmEpisodes: 3,
+    breakerThreshold: 3,
+    deadlineKillBreakerThreshold: 3,
+    busySkipBreakerThreshold: 3,
+    breakerCooldownMin: 60,
+    mergeTimeoutMs: 1_500_000,
+    mergeKillGraceMs: 60_000,
+    expectedGhLogin: '',
+    identityRecheckTicks: 6,
+    holdReleaseTicks: 2,
+    staleHoldDays: 7,
+    backoffBaseMs: 30_000,
+};
+export function freshState() {
+    return {
+        consecutiveWarmupOnlyTenures: 0,
+        breaker: freshBreaker(),
+        episodes: {},
+        holdMemory: {},
+        snapshot: { at: 0, entries: [] },
+    };
+}
+export class GreenPrAutoMerger extends EventEmitter {
+    deps;
+    cfg;
+    tickHandle = null;
+    inFlight = false;
+    tickCount = 0;
+    /** Resolved at boot: does the timeout invariant hold? */
+    invariantOk;
+    invariantReason;
+    constructor(deps, cfg) {
+        super();
+        this.deps = deps;
+        this.cfg = {
+            ...DEFAULTS,
+            ...cfg,
+            agentNamespace: cfg.agentNamespace,
+            repo: cfg.repo,
+            expectedGhLogin: cfg.expectedGhLogin ?? '',
+        };
+        const inv = validateTimeoutInvariant(this.cfg.busySkipBreakerThreshold, this.cfg.tickIntervalMs, this.cfg.mergeTimeoutMs, this.cfg.mergeKillGraceMs);
+        this.invariantOk = inv.ok;
+        this.invariantReason = inv.reason;
+    }
+    start() {
+        if (!this.cfg.enabled || this.tickHandle)
+            return;
+        if (!this.invariantOk) {
+            // Boot refusal must be LOUD (B24) — never start with an inverted invariant.
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'boot-refused-invariant', reason: this.invariantReason });
+            return;
+        }
+        // Warm-up + orphan reap happens on the first acting tick.
+        this.tickHandle = setInterval(() => { void this.tick(); }, this.cfg.tickIntervalMs);
+        if (typeof this.tickHandle.unref === 'function')
+            this.tickHandle.unref();
+    }
+    stop() {
+        if (this.tickHandle) {
+            clearInterval(this.tickHandle);
+            this.tickHandle = null;
+        }
+    }
+    snapshot() { return this.deps.loadState(); }
+    /**
+     * The /hold route's handler (R3): validate the PR is open + in this agent's
+     * namespace, then apply the marker via gh. Lease-INDEPENDENT — a hold
+     * originates wherever the session lives. Honest non-2xx on failure (a hold
+     * that silently failed to apply would be merged ~10 minutes later).
+     */
+    async applyHold(pr, reason) {
+        const elig = await this.deps.holdEligible(pr);
+        if (!elig.ok)
+            return { ok: false, status: elig.status ?? 404, detail: elig.detail ?? 'PR not eligible for hold', pr };
+        try {
+            const applied = await this.deps.applyHoldMarker(pr, reason);
+            if (!applied)
+                return { ok: false, status: 502, detail: 'gh failed to apply the hold marker', pr };
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'hold-applied', pr });
+            return { ok: true, pr };
+        }
+        catch (e) { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+            return { ok: false, status: 502, detail: String(e?.message).slice(0, 200), pr };
+        }
+    }
+    /** The cron / manual-trigger entry point. Lease-gated; single-flight; warm-up. */
+    async tick(opts = {}) {
+        this.tickCount += 1;
+        const state = this.deps.loadState();
+        state.lastTickAt = this.deps.now();
+        // Lease gate (R10): ticks run only on the holder.
+        if (!safeBool(() => this.deps.holdsLease())) {
+            this.deps.saveState(state);
+            return { acted: false, reason: 'not-lease-holder' };
+        }
+        // Single-flight (R5): never overlap an in-flight attempt.
+        if (this.inFlight) {
+            state.breaker = feedBreaker(state.breaker, 'busy-skip', this.deps.now(), this.breakerCfg());
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'tick-skipped-busy' });
+            this.deps.saveState(state);
+            return { acted: false, reason: 'busy' };
+        }
+        // Dual-latch gate (R9): rollback / emergency-pause / unreadable → no merge.
+        const gate = this.deps.latches.isMergeAllowed();
+        if (!gate.allowed) {
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'tick-skipped-disabled', reason: gate.reason });
+            this.deps.saveState(state);
+            return { acted: false, reason: `disabled:${gate.reason}` };
+        }
+        // Breaker open within cooldown → skip.
+        if (breakerBlocking(state.breaker, this.deps.now(), this.cfg.breakerCooldownMin * 60_000)) {
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'tick-skipped-breaker-open' });
+            this.deps.saveState(state);
+            return { acted: false, reason: 'breaker-open' };
+        }
+        // Warm-up (R10): the first tick of a new lease tenure is OBSERVE-ONLY.
+        const epoch = safeNum(() => this.deps.leaseEpoch());
+        const isWarmup = state.lastActingEpoch !== epoch;
+        let candidates;
+        try {
+            candidates = await this.deps.listOpenPrs();
+            state.lastSuccessfulListAt = this.deps.now();
+            state.breaker = feedBreaker(state.breaker, 'reset', this.deps.now(), this.breakerCfg());
+        }
+        catch (e) { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+            // Tick-failed canary (L5(b)): a failed/unparseable list call feeds the breaker.
+            state.breaker = feedBreaker(state.breaker, 'tick-failed', this.deps.now(), this.breakerCfg());
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'tick-failed', class: 'list', detail: String(e?.message).slice(0, 200) });
+            this.deps.saveState(state);
+            return { acted: false, reason: 'list-failed' };
+        }
+        // Build the candidate set (cheap fields) + the Layer-2 snapshot.
+        const { eligible, snapshotEntries } = await this.gather(candidates, state);
+        state.snapshot = { at: this.deps.now(), entries: snapshotEntries };
+        if (isWarmup) {
+            // Seed hold memory + snapshot + reap any orphan; begin merges next tick.
+            await this.warmupReap(state);
+            state.lastActingEpoch = epoch;
+            state.consecutiveWarmupOnlyTenures += 1;
+            if (state.consecutiveWarmupOnlyTenures >= 3) {
+                await this.refreshAggregate(state, [`waiting:lease-flap — ${state.consecutiveWarmupOnlyTenures} consecutive warm-up-only tenures (running, seeing PRs, never permitted to act)`]);
+            }
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'tick-warm-up', candidates: eligible.length });
+            this.deps.saveState(state);
+            return { acted: false, reason: 'warm-up' };
+        }
+        state.lastActingEpoch = epoch;
+        state.consecutiveWarmupOnlyTenures = 0;
+        const target = selectOldest(eligible);
+        if (!target) {
+            this.deps.saveState(state);
+            return { acted: false, reason: 'no-candidate' };
+        }
+        // Act (Step 4 engine). dryRun observes only.
+        if (this.cfg.dryRun) {
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'would-merge', pr: target.number, head: target.headRefOid });
+            this.deps.saveState(state);
+            return { acted: false, reason: 'dry-run' };
+        }
+        const acted = await this.act(target, state);
+        this.deps.saveState(state);
+        return { acted, reason: acted ? 'acted' : 'skipped' };
+    }
+    // ---- candidate gathering -----------------------------------------------
+    async gather(prs, state) {
+        const eligible = [];
+        const snapshotEntries = [];
+        const nowMs = this.deps.now();
+        for (const pr of prs) {
+            const verdict = classifyCandidate(pr, this.cfg.agentNamespace);
+            // Hold-release debounce (R3): a PR that WAS held resumes only after the
+            // marker is absent for holdReleaseTicks AND tickIntervalMs elapsed.
+            const heldNow = holdReasonOf(pr) !== null;
+            const deb = debounceHoldRelease(state.holdMemory[pr.number], heldNow, nowMs, this.cfg.holdReleaseTicks, this.cfg.tickIntervalMs);
+            if (deb.mem)
+                state.holdMemory[pr.number] = deb.mem;
+            else
+                delete state.holdMemory[pr.number];
+            if (!verdict.eligible) {
+                if (verdict.skip === 'held' && deb.transition === 'released') {
+                    this.deps.audit({ kind: 'green-pr-automerge', event: 'hold-released', pr: pr.number });
+                }
+                continue;
+            }
+            // verdict.eligible but the hold debounce may still hold it back this tick.
+            if (heldNow || !deb.resumeEligible)
+                continue;
+            // Protected-paths gate (enumerated to exhaustion).
+            let pp;
+            try {
+                pp = await this.deps.protectedPaths(pr);
+            }
+            catch { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+                pp = { touches: false, unverifiable: true };
+            }
+            if (pp.unverifiable) {
+                this.deps.audit({ kind: 'green-pr-automerge', event: 'waiting', class: 'protected-paths-unverifiable', pr: pr.number });
+                continue;
+            }
+            if (pp.touches) {
+                // Excluded from auto-merge; surfaced to the operator + included in the
+                // Layer-2 snapshot as the operator-routed variant (round-5/6).
+                snapshotEntries.push({ pr: pr.number, headRefName: pr.headRefName, headRefOid: pr.headRefOid, kind: 'protected-paths' });
+                await this.refreshAggregate(state, [`PR #${pr.number} is green but touches protected paths — it needs your manual review and merge`]);
+                continue;
+            }
+            eligible.push(pr);
+            snapshotEntries.push({ pr: pr.number, headRefName: pr.headRefName, headRefOid: pr.headRefOid, kind: 'mergeable' });
+        }
+        return { eligible, snapshotEntries };
+    }
+    // ---- act ----------------------------------------------------------------
+    async act(target, state) {
+        // Identity contract (R4): verify gh login matches expectedGhLogin (TTL cached).
+        const idOk = await this.identityOk(state);
+        if (idOk !== 'ok') {
+            this.deps.audit({ kind: 'green-pr-automerge', event: `skipped:${idOk}` });
+            return false;
+        }
+        // Episode ladder eligibility.
+        let ep = state.episodes[target.number];
+        if (ep && ep.headRefOid !== target.headRefOid) {
+            const re = maybeRearm(ep, target.headRefOid, this.ladderCfg());
+            if (re === null) {
+                this.deps.audit({ kind: 'green-pr-automerge', event: 'gave-up-rearm-exhausted', pr: target.number });
+                return false;
+            }
+            ep = re;
+            state.episodes[target.number] = ep;
+        }
+        if (!episodeEligible(ep, this.deps.now()))
+            return false;
+        // Contract probe BEFORE every attempt (round-3: mid-run checkout swap).
+        const probe = await this.deps.runner.probeContract();
+        if (!probe.ok) {
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'skipped:safe-merge-contract' });
+            return false;
+        }
+        // Re-fetch hold/state immediately before acting (R3 residual window bound).
+        const live = await this.deps.refetchPr(target.number);
+        if (!live) {
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'skipped:vanished', pr: target.number });
+            return false;
+        }
+        if (live.state !== 'OPEN') {
+            this.recordOutcome(state, target, live.state === 'MERGED' ? 'merged-by-other' : 'closed-by-other');
+            return false;
+        }
+        if (live.isDraft || holdReasonOf({ isDraft: live.isDraft, title: live.title, labels: live.labels })) {
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'skipped:held-on-refetch', pr: target.number });
+            return false;
+        }
+        if (live.headRefOid !== target.headRefOid) {
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'skipped:head-moved', pr: target.number });
+            return false;
+        }
+        // Single-flight + spawn (the MergeRunner owns the durable in-flight record).
+        this.inFlight = true;
+        let result;
+        try {
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'merge-attempted', pr: target.number, head: target.headRefOid });
+            result = await this.deps.runner.run({ pr: target.number, headRefOid: target.headRefOid, repo: this.cfg.repo });
+        }
+        catch (e) { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+            result = { outcome: `error:runner-${String(e?.message).slice(0, 40)}`, confirmedMerged: false };
+        }
+        finally {
+            this.inFlight = false;
+        }
+        if (result.deadlineKilled) {
+            state.breaker = feedBreaker(state.breaker, 'deadline-kill', this.deps.now(), this.breakerCfg());
+        }
+        // B10: classify "merged" ONLY on independent confirmation.
+        const outcome = result.outcome === 'merged' && !result.confirmedMerged ? 'error:merge-unconfirmed' : result.outcome;
+        this.recordOutcome(state, target, outcome);
+        return outcome === 'merged';
+    }
+    recordOutcome(state, target, outcome) {
+        const ep = state.episodes[target.number] ?? { pr: target.number, headRefOid: target.headRefOid, attempts: 0, rearmEpisodes: 0, state: 'active' };
+        const folded = applyOutcome(ep, outcome, this.deps.now(), this.ladderCfg());
+        state.episodes[target.number] = folded.ep;
+        if (folded.feedsBreaker) {
+            // Per-PR ladder failures do NOT feed the global breaker directly (that is
+            // for tick/deadline/busy classes); they advance the per-PR ladder only.
+        }
+        this.deps.audit({ kind: 'green-pr-automerge', event: outcome, pr: target.number });
+        if (outcome === 'merged') {
+            // Reap the episode on success.
+            delete state.episodes[target.number];
+        }
+        else if (folded.ep.state === 'gave-up' && outcome !== 'merged-by-other' && outcome !== 'closed-by-other') {
+            void this.refreshAggregate(state, [`PR #${target.number} could not be auto-merged after ${folded.ep.attempts} attempts (${outcome}) — needs a look`]);
+        }
+        else if (outcome === 'closed-by-other') {
+            void this.refreshAggregate(state, [`PR #${target.number} was closed without merging — discarded work`]);
+        }
+    }
+    // ---- identity (R4) ------------------------------------------------------
+    async identityOk(state) {
+        if (!this.cfg.expectedGhLogin)
+            return 'identity-unconfigured';
+        const ttlMs = this.cfg.identityRecheckTicks * this.cfg.tickIntervalMs;
+        const cached = state.identity;
+        const fresh = cached && (this.deps.now() - cached.resolvedAt) < ttlMs;
+        let login = fresh ? cached.login : null;
+        if (!fresh) {
+            login = await this.deps.resolveGhLogin();
+            state.identity = { login, resolvedAt: this.deps.now() };
+        }
+        if (login === null)
+            return 'identity-unresolved';
+        if (login !== this.cfg.expectedGhLogin)
+            return 'identity-mismatch';
+        return 'ok';
+    }
+    // ---- warm-up orphan reap (R5) ------------------------------------------
+    async warmupReap(state) {
+        try {
+            const r = await this.deps.runner.reapOrphan();
+            if (r.reaped)
+                this.deps.audit({ kind: 'green-pr-automerge', event: 'orphan-reaped', outcome: r.outcome });
+        }
+        catch (e) { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+            this.deps.audit({ kind: 'green-pr-automerge', event: 'orphan-reap-incomplete', detail: String(e?.message).slice(0, 120) });
+        }
+    }
+    // ---- aggregated attention (P17) ----------------------------------------
+    async refreshAggregate(state, addLines) {
+        const lines = new Set([...(state.attentionLines ?? []), ...addLines]);
+        state.attentionLines = [...lines].slice(-50);
+        try {
+            await this.deps.postAttentionAggregate(state.attentionLines);
+        }
+        catch { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */ /* attention delivery failure is non-fatal to the tick */ }
+    }
+    // ---- runtime control (R9, via GuardLatchStore wired at boot) ------------
+    // rollback / enable / pool-disarm are driven through the routes against the
+    // GuardLatchStore directly; the watcher only READS the gate each tick.
+    breakerCfg() {
+        return {
+            busySkipBreakerThreshold: this.cfg.busySkipBreakerThreshold,
+            deadlineKillBreakerThreshold: this.cfg.deadlineKillBreakerThreshold,
+            breakerThreshold: this.cfg.breakerThreshold,
+            breakerCooldownMs: this.cfg.breakerCooldownMin * 60_000,
+        };
+    }
+    ladderCfg() {
+        return { maxAttempts: this.cfg.maxAttempts, maxRearmEpisodes: this.cfg.maxRearmEpisodes, backoffBaseMs: this.cfg.backoffBaseMs };
+    }
+}
+function safeBool(fn) {
+    try {
+        return !!fn();
+    }
+    catch { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+        return false;
+    }
+}
+function safeNum(fn) {
+    try {
+        const n = fn();
+        return Number.isFinite(n) ? n : 0;
+    }
+    catch { /* @silent-fallback-ok: green-pr-automerge fail-safe — skip/refuse, never over-merge; safe-merge is the act-time authority */
+        return 0;
+    }
+}
+//# sourceMappingURL=GreenPrAutoMerger.js.map

package/dist/monitoring/GreenPrAutoMerger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GreenPrAutoMerger.js","sourceRoot":"","sources":["../../src/monitoring/GreenPrAutoMerger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAKL,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,YAAY,EACZ,WAAW,EACX,eAAe,EACf,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAwH3B,MAAM,QAAQ,GAAG;IACf,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,KAAK;IACb,cAAc,EAAE,OAAO;IACvB,WAAW,EAAE,CAAC;IACd,gBAAgB,EAAE,CAAC;IACnB,gBAAgB,EAAE,CAAC;IACnB,4BAA4B,EAAE,CAAC;IAC/B,wBAAwB,EAAE,CAAC;IAC3B,kBAAkB,EAAE,EAAE;IACtB,cAAc,EAAE,SAAS;IACzB,gBAAgB,EAAE,MAAM;IACxB,eAAe,EAAE,EAAE;IACnB,oBAAoB,EAAE,CAAC;IACvB,gBAAgB,EAAE,CAAC;IACnB,aAAa,EAAE,CAAC;IAChB,aAAa,EAAE,MAAM;CACtB,CAAC;AAEF,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,4BAA4B,EAAE,CAAC;QAC/B,OAAO,EAAE,YAAY,EAAE;QACvB,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IAU9B;IATF,GAAG,CAAiB;IAC7B,UAAU,GAA0C,IAAI,CAAC;IACzD,QAAQ,GAAG,KAAK,CAAC;IACjB,SAAS,GAAG,CAAC,CAAC;IACtB,yDAAyD;IAChD,WAAW,CAAU;IACrB,eAAe,CAAU;IAElC,YACmB,IAA2B,EAC5C,GAA4B;QAE5B,KAAK,EAAE,CAAC;QAHS,SAAI,GAAJ,IAAI,CAAuB;QAI5C,IAAI,CAAC,GAAG,GAAG;YACT,GAAG,QAAQ;YACX,GAAG,GAAG;YACN,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,EAAE;SACzB,CAAC;QACpB,MAAM,GAAG,GAAG,wBAAwB,CAClC,IAAI,CAAC,GAAG,CAAC,wBAAwB,EACjC,IAAI,CAAC,GAAG,CAAC,cAAc,EACvB,IAAI,CAAC,GAAG,CAAC,cAAc,EACvB,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAC1B,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC;IACpC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,4EAA4E;YAC5E,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QACD,0DAA0D;QAC1D,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACpF,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAAC,CAAC;IAClF,CAAC;IAED,QAAQ,KAAmB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAE1D;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,MAAc;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,0BAA0B,EAAE,EAAE,EAAE,CAAC;QACtH,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,oCAAoC,EAAE,EAAE,EAAE,CAAC;YAClG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,6HAA6H;YACzI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,IAAI,CAAC,OAA6B,EAAE;QACxC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAEnC,kDAAkD;QAClD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACtD,CAAC;QAED,0DAA0D;QAC1D,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC1C,CAAC;QAED,4EAA4E;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACrG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7D,CAAC;QAED,uCAAuC;QACvC,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC;YAC1F,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClD,CAAC;QAED,uEAAuE;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC;QAEjD,IAAI,UAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7C,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,6HAA6H;YACzI,gFAAgF;YAChF,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1I,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACjD,CAAC;QAED,iEAAiE;QACjE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3E,KAAK,CAAC,QAAQ,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QAEnE,IAAI,QAAQ,EAAE,CAAC;YACb,yEAAyE;YACzE,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC7B,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC;YAC9B,KAAK,CAAC,4BAA4B,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,wBAAwB,KAAK,CAAC,4BAA4B,iFAAiF,CAAC,CAAC,CAAC;YACpL,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC;QAC9B,KAAK,CAAC,4BAA4B,GAAG,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClD,CAAC;QAED,6CAA6C;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAClH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACxD,CAAC;IAED,2EAA2E;IAEnE,KAAK,CAAC,MAAM,CAAC,GAAgB,EAAE,KAAmB;QACxD,MAAM,QAAQ,GAAgB,EAAE,CAAC;QACjC,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAE9B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC/D,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACjI,IAAI,GAAG,CAAC,GAAG;gBAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC;;gBAAM,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAE5F,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBAC7D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzF,CAAC;gBACD,SAAS;YACX,CAAC;YACD,2EAA2E;YAC3E,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc;gBAAE,SAAS;YAE7C,mDAAmD;YACnD,IAAI,EAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC,CAAC,6HAA6H;gBACrI,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YAC9C,CAAC;YACD,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;gBACpB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;gBACxH,SAAS;YACX,CAAC;YACD,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;gBACf,uEAAuE;gBACvE,+DAA+D;gBAC/D,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBACzH,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,+EAA+E,CAAC,CAAC,CAAC;gBACtI,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClB,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACrH,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;IACvC,CAAC;IAED,4EAA4E;IAEpE,KAAK,CAAC,GAAG,CAAC,MAAiB,EAAE,KAAmB;QACtD,gFAAgF;QAChF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,8BAA8B;QAC9B,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/D,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrG,OAAO,KAAK,CAAC;YACf,CAAC;YACD,EAAE,GAAG,EAAE,CAAC;YACR,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAExD,wEAAwE;QACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACtF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,4EAA4E;QAC5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC3H,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAChJ,IAAI,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACpG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACrG,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAChG,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6EAA6E;QAC7E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACtH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACjH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,6HAA6H;YACzI,MAAM,GAAG,EAAE,OAAO,EAAE,gBAAgB,MAAM,CAAE,CAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC7G,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAClG,CAAC;QAED,2DAA2D;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACpH,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,OAAO,KAAK,QAAQ,CAAC;IAC9B,CAAC;IAEO,aAAa,CAAC,KAAmB,EAAE,MAAiB,EAAE,OAAe;QAC3E,MAAM,EAAE,GAAY,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC1J,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5E,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,0EAA0E;YAC1E,wEAAwE;QAC1E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,+BAA+B;YAC/B,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,iBAAiB,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAC3G,KAAK,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,OAAO,MAAM,CAAC,MAAM,mCAAmC,MAAM,CAAC,EAAE,CAAC,QAAQ,cAAc,OAAO,kBAAkB,CAAC,CAAC,CAAC;QACxJ,CAAC;aAAM,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;YACzC,KAAK,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,OAAO,MAAM,CAAC,MAAM,8CAA8C,CAAC,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,4EAA4E;IAEpE,KAAK,CAAC,UAAU,CAAC,KAAmB;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe;YAAE,OAAO,uBAAuB,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;QACtE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;QACtE,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzC,KAAK,CAAC,QAAQ,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1D,CAAC;QACD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,qBAAqB,CAAC;QACjD,IAAI,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,eAAe;YAAE,OAAO,mBAAmB,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2EAA2E;IAEnE,KAAK,CAAC,UAAU,CAAC,KAAmB;QAC1C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC9C,IAAI,CAAC,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5G,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,6HAA6H;YACzI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACxI,CAAC;IACH,CAAC;IAED,2EAA2E;IAEnE,KAAK,CAAC,gBAAgB,CAAC,KAAmB,EAAE,QAAkB;QACpE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,cAAc,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC,CAAC,6HAA6H,CAAC,yDAAyD,CAAC,CAAC;IACrM,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IAE/D,UAAU;QAChB,OAAO;YACL,wBAAwB,EAAE,IAAI,CAAC,GAAG,CAAC,wBAAwB;YAC3D,4BAA4B,EAAE,IAAI,CAAC,GAAG,CAAC,4BAA4B;YACnE,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAC3C,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM;SACxD,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;IACnI,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,EAAiB;IACjC,IAAI,CAAC;QAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,6HAA6H;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC9K,CAAC;AACD,SAAS,OAAO,CAAC,EAAgB;IAC/B,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;QAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,6HAA6H;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;AAC9M,CAAC"}

package/dist/monitoring/GuardLatchStore.d.ts

@@ -0,0 +1,134 @@
+/**
+ * GuardLatchStore — pool-visible kill-switch + marker latches for guarded
+ * autonomous authorities (green-pr-automerge-enforcement R9/R7).
+ *
+ * Two independent gate families decide whether the GreenPrAutoMerger may act:
+ *   - `rollback`        — set by POST /green-pr-automerge/rollback, cleared by
+ *                         POST /green-pr-automerge/enable (PIN-gated re-arm)
+ *   - `emergency-pause` — set by the MessageSentinel emergency stop, cleared by
+ *                         its own resume path
+ * BOTH must be open for a merge. A third family, `pool-armed`, is a posture
+ * MARKER (not a gate): its presence makes a lease holder whose local config is
+ * disabled grade `diverged-from-default` instead of healthy dark-default.
+ *
+ * Why a store and not a flag (round-2 finding): execution follows the lease, so
+ * a machine-LOCAL latch would silently resurrect the watcher on a lease move.
+ * Each transition is therefore written BOTH to a durable local file (authoritative
+ * for this machine's own writes, present regardless of the journal feature flag)
+ * AND to the replicated `guard-latch` coherence-journal kind, so a peer that
+ * takes the lease reads the same disabled state.
+ *
+ * ABSORBING disable (round-4): a `rollback` set always wins ordering conflicts
+ * regardless of epoch — "a stale-epoch standby's STOP can never be out-ordered
+ * by an earlier /enable from a higher epoch." This is achieved structurally, not
+ * by clock comparison: every `set` mints a FRESH globally-unique latchId
+ * (`<machineId>:<seq>`), and `/enable` clears ONLY the specific latchId(s) it
+ * names. A new STOP therefore introduces a latchId no prior enable could have
+ * named, so it can never be pre-cleared. Ordering within a single latchId is by
+ * (epoch, seq), NEVER wall-clock.
+ *
+ * arrive-disabled-on-unreadable (round-3): if the merged peer view cannot be
+ * read, `isMergeAllowed()` returns false — absence of evidence is not "armed."
+ */
+import type { CoherenceJournal, GuardLatchAction } from '../core/CoherenceJournal.js';
+/** A single latch transition (own or peer), as merged for resolution. */
+export interface GuardLatchEntry {
+    machine: string;
+    latchKind: string;
+    latchId: string;
+    action: GuardLatchAction;
+    epoch: number;
+    seq: number;
+    reason?: string;
+    ts?: string;
+}
+export type MergeGateReason = 'allowed' | 'rollback' | 'emergency-pause' | 'unreadable-peers';
+export interface MergeGateVerdict {
+    allowed: boolean;
+    reason: MergeGateReason;
+    /** Active latch ids per blocking family (for the status surface / audit). */
+    activeLatchIds: Record<string, string[]>;
+}
+/** Latch family names. */
+export declare const ROLLBACK_FAMILY = "rollback";
+export declare const EMERGENCY_PAUSE_FAMILY = "emergency-pause";
+export declare const POOL_ARMED_FAMILY = "pool-armed";
+/** The fixed, pool-shared latchId for the single pool-armed marker. */
+export declare const POOL_MARKER_ID = "pool";
+export interface GuardLatchStoreConfig {
+    /** Absolute path to the agent's `.instar/` directory. */
+    stateDir: string;
+    /** Stable id for THIS machine. */
+    machineId: string;
+    /** Replication writer (optional — single-machine installs pass none). */
+    journal?: Pick<CoherenceJournal, 'emitGuardLatch'>;
+    /** Current lease epoch (monotonic; stamped on every transition). */
+    leaseEpoch: () => number;
+    /**
+     * Merged peer view: the latest guard-latch transition per (machine, kind, id)
+     * from replicated peer streams. Throwing signals UNREADABLE → arrive-disabled.
+     * Single-machine installs pass `() => []`.
+     */
+    readPeerEntries?: () => GuardLatchEntry[];
+    now?: () => Date;
+    logger?: (msg: string) => void;
+}
+export declare class GuardLatchStore {
+    private readonly stateDir;
+    private readonly machineId;
+    private readonly journal?;
+    private readonly leaseEpoch;
+    private readonly readPeerEntries;
+    private readonly now;
+    private readonly logger?;
+    private local;
+    constructor(cfg: GuardLatchStoreConfig);
+    /**
+     * Set (mint) a latch in `latchKind`. Returns the fresh, globally-unique
+     * latchId. Use for the absorbing families (rollback, emergency-pause): every
+     * call introduces a NEW latchId that no prior clear could have named.
+     */
+    set(latchKind: string, reason?: string): string;
+    /** Clear the SPECIFIC named latchId(s) in `latchKind` (the /enable semantics). */
+    clear(latchKind: string, latchIds: string[], reason?: string): void;
+    /** Set/clear a FIXED-id marker (pool-armed): last-(epoch,seq)-wins, not absorbing. */
+    setMarker(latchKind: string, latchId: string, on: boolean, reason?: string): void;
+    private record;
+    /**
+     * Resolve a family to the winning action per latchId across own + peers.
+     * Within one latchId, the highest (epoch, seq) transition wins. Distinct
+     * latchIds are independent — that is what makes `set` absorbing for the
+     * fresh-id families.
+     * @throws if the peer view is unreadable (caller maps to arrive-disabled).
+     */
+    resolveFamily(latchKind: string): Map<string, GuardLatchEntry>;
+    /** Active (currently-set) latch ids in a family. */
+    activeLatchIds(latchKind: string): string[];
+    /**
+     * The dual-latch gate (R9): both rollback and emergency-pause must be open.
+     * An unreadable peer view arrives DISABLED (absence of evidence ≠ armed).
+     */
+    isMergeAllowed(): MergeGateVerdict;
+    markPoolArmed(): void;
+    /** PIN-gated disarm: superseding entry, grades back to healthy dark-default. */
+    markPoolDisarmed(): void;
+    /**
+     * Is this pool deliberately armed (per the replicated marker)? Used by guard
+     * posture to grade a local-disabled + pool-armed machine `diverged-from-default`.
+     * Unreadable peers → false (we never INVENT a divergence alarm on a read error).
+     */
+    isPoolArmed(): boolean;
+    /** Snapshot for the status route + posture grading. Never throws. */
+    snapshot(): {
+        rollback: string[];
+        emergencyPause: string[];
+        poolArmed: boolean;
+        mergeAllowed: boolean;
+        reason: MergeGateReason;
+    };
+    private filePath;
+    private load;
+    private persist;
+    private log;
+}
+//# sourceMappingURL=GuardLatchStore.d.ts.map

package/dist/monitoring/GuardLatchStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GuardLatchStore.d.ts","sourceRoot":"","sources":["../../src/monitoring/GuardLatchStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEtF,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AAE9F,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,6EAA6E;IAC7E,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC1C;AAED,0BAA0B;AAC1B,eAAO,MAAM,eAAe,aAAa,CAAC;AAC1C,eAAO,MAAM,sBAAsB,oBAAoB,CAAC;AACxD,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAC9C,uEAAuE;AACvE,eAAO,MAAM,cAAc,SAAS,CAAC;AAiBrC,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,OAAO,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IACnD,oEAAoE;IACpE,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,eAAe,EAAE,CAAC;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA2C;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAe;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0B;IAC1D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwB;IAEhD,OAAO,CAAC,KAAK,CAAY;gBAEb,GAAG,EAAE,qBAAqB;IAatC;;;;OAIG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM;IAO/C,kFAAkF;IAClF,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAOnE,sFAAsF;IACtF,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAKjF,OAAO,CAAC,MAAM;IAiBd;;;;;;OAMG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC;IAiB9D,oDAAoD;IACpD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE;IAQ3C;;;OAGG;IACH,cAAc,IAAI,gBAAgB;IAqBlC,aAAa,IAAI,IAAI;IAIrB,gFAAgF;IAChF,gBAAgB,IAAI,IAAI;IAIxB;;;;OAIG;IACH,WAAW,IAAI,OAAO;IAWtB,qEAAqE;IACrE,QAAQ,IAAI;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,eAAe,CAAA;KAAE;IAmBhI,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,OAAO;IAgBf,OAAO,CAAC,GAAG;CAGZ"}