instar 1.3.91 → 1.3.92

package/dist/core/SessionRouter.d.ts

@@ -0,0 +1,95 @@
+/**
+ * SessionRouter — the L4 inbound-message dispatch engine (Multi-Machine Session
+ * Pool §L4 "Message Routing to Owner" + "Ownership CAS at Dispatch"). For every
+ * inbound message the router resolves session ownership and dispatches:
+ *
+ *   1. Owned + owner alive + owner == self  → handle locally (no MeshRpc hop).
+ *   2. Owned + owner alive + owner != self  → forward via deliverMessage over MeshRpc
+ *      (signed, recipient-bound, idempotent on messageId; ACK before offset advance).
+ *   3. Owned + owner DEAD                    → owner-dead re-placement (re-place + claim).
+ *   4. Transient (placing/transferring)      → queue (ownership-contention).
+ *   5. Unowned (new)                         → PlacementExecutor.decide() → SYNCHRONOUS
+ *      CAS-claim → spawn on the winner (or, on CAS loss, forward to the winner / queue).
+ *
+ * Per-session ordering: messages for ONE sessionKey are dispatched strictly in
+ * inbound order, at-most-one-in-flight (a per-session promise chain). Different
+ * sessions dispatch concurrently. All I/O is injected so the dispatch logic itself
+ * is deterministic + unit-testable; the deliverMessage dep owns its own per-attempt
+ * timeout (it throws on timeout) — the router owns the retry/backoff/fallback loop.
+ */
+import type { PlacementExecutor, TopicPlacement } from './PlacementExecutor.js';
+import type { MachineCapacity } from './types.js';
+export interface OwnershipView {
+    owner: string | null;
+    epoch: number;
+    status: 'active' | 'placing' | 'transferring' | null;
+    target?: string;
+}
+export interface DeliverAck {
+    messageId: string;
+    accepted: 'queued' | 'duplicate' | 'stale-ownership';
+}
+export interface InboundMessage {
+    sessionKey: string;
+    messageId: string;
+    payload: unknown;
+    topicMetadata?: TopicPlacement;
+}
+export type RouteAction = 'handled-locally' | 'forwarded' | 'spawned' | 'queued' | 'duplicate' | 'owner-dead-replaced' | 'placement-blocked';
+export interface RouteOutcome {
+    action: RouteAction;
+    owner?: string | null;
+    detail?: string;
+    /** True once the inbound is durably accepted (ledger ACK or local handling) — the
+     * caller may advance the platform offset ONLY when this is true (§L4 ACK protocol). */
+    acked: boolean;
+}
+export interface SessionRouterConfig {
+    deliverMessageMaxRetries: number;
+    deliverMessageRetryBackoffStartMs: number;
+    deliverMessageRetryBackoffMaxMs: number;
+    /** Bound on stale-ownership re-resolution to avoid an unbounded chase. */
+    maxReResolveDepth: number;
+}
+export declare const DEFAULT_ROUTER_CONFIG: SessionRouterConfig;
+export interface SessionRouterDeps {
+    selfMachineId: string;
+    placement: PlacementExecutor;
+    machineRegistry: () => MachineCapacity[];
+    resolveOwnership: (sessionKey: string) => OwnershipView;
+    isMachineAlive: (machineId: string) => boolean;
+    /** SYNCHRONOUS per-session CAS-claim (the §L−1 single-ref fast-forward push). */
+    casClaimOwnership: (sessionKey: string, machineId: string, expectedEpoch: number) => {
+        ok: boolean;
+        epoch: number;
+    };
+    /** ONE deliverMessage attempt over MeshRpc; throws on transport error/timeout. */
+    deliverMessage: (target: string, env: {
+        sessionKey: string;
+        messageId: string;
+        payload: unknown;
+        ownershipEpoch: number;
+    }) => Promise<DeliverAck>;
+    /** Router == owner: process the message on this machine. */
+    handleLocally: (msg: InboundMessage) => Promise<void>;
+    /** Instruct the chosen machine to spawn/resume the session. */
+    spawnOnMachine: (machineId: string, msg: InboundMessage) => Promise<void>;
+    queueMessage: (msg: InboundMessage, reason: string) => void;
+    raiseAttention: (title: string, body: string) => void;
+    markOwnerSuspect?: (machineId: string) => void;
+    sleep: (ms: number) => Promise<void>;
+    log?: (line: string) => void;
+}
+export declare class SessionRouter {
+    private readonly deps;
+    private readonly cfg;
+    private readonly chains;
+    constructor(deps: SessionRouterDeps, cfg?: SessionRouterConfig);
+    /** Dispatch an inbound message; serialized per-session (in-order, one-in-flight). */
+    route(msg: InboundMessage): Promise<RouteOutcome>;
+    private backoff;
+    private dispatchOne;
+    private forwardToOwner;
+    private placeAndClaim;
+}
+//# sourceMappingURL=SessionRouter.d.ts.map

package/dist/core/SessionRouter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionRouter.d.ts","sourceRoot":"","sources":["../../src/core/SessionRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,cAAc,GAAG,IAAI,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,GAAG,WAAW,GAAG,iBAAiB,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,cAAc,CAAC;CAChC;AAED,MAAM,MAAM,WAAW,GACnB,iBAAiB,GACjB,WAAW,GACX,SAAS,GACT,QAAQ,GACR,WAAW,GACX,qBAAqB,GACrB,mBAAmB,CAAC;AAExB,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;2FACuF;IACvF,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,wBAAwB,EAAE,MAAM,CAAC;IACjC,iCAAiC,EAAE,MAAM,CAAC;IAC1C,+BAA+B,EAAE,MAAM,CAAC;IACxC,0EAA0E;IAC1E,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,qBAAqB,EAAE,mBAKnC,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,eAAe,EAAE,MAAM,eAAe,EAAE,CAAC;IACzC,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,aAAa,CAAC;IACxD,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,iFAAiF;IACjF,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACpH,kFAAkF;IAClF,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAClJ,4DAA4D;IAC5D,aAAa,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,+DAA+D;IAC/D,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,YAAY,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAsB;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;gBAElD,IAAI,EAAE,iBAAiB,EAAE,GAAG,GAAE,mBAA2C;IAKrF,qFAAqF;IACrF,KAAK,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAQjD,OAAO,CAAC,OAAO;YAID,WAAW;YAyBX,cAAc;YAuCd,aAAa;CA8C5B"}

package/dist/core/SessionRouter.js

@@ -0,0 +1,151 @@
+/**
+ * SessionRouter — the L4 inbound-message dispatch engine (Multi-Machine Session
+ * Pool §L4 "Message Routing to Owner" + "Ownership CAS at Dispatch"). For every
+ * inbound message the router resolves session ownership and dispatches:
+ *
+ *   1. Owned + owner alive + owner == self  → handle locally (no MeshRpc hop).
+ *   2. Owned + owner alive + owner != self  → forward via deliverMessage over MeshRpc
+ *      (signed, recipient-bound, idempotent on messageId; ACK before offset advance).
+ *   3. Owned + owner DEAD                    → owner-dead re-placement (re-place + claim).
+ *   4. Transient (placing/transferring)      → queue (ownership-contention).
+ *   5. Unowned (new)                         → PlacementExecutor.decide() → SYNCHRONOUS
+ *      CAS-claim → spawn on the winner (or, on CAS loss, forward to the winner / queue).
+ *
+ * Per-session ordering: messages for ONE sessionKey are dispatched strictly in
+ * inbound order, at-most-one-in-flight (a per-session promise chain). Different
+ * sessions dispatch concurrently. All I/O is injected so the dispatch logic itself
+ * is deterministic + unit-testable; the deliverMessage dep owns its own per-attempt
+ * timeout (it throws on timeout) — the router owns the retry/backoff/fallback loop.
+ */
+export const DEFAULT_ROUTER_CONFIG = {
+    deliverMessageMaxRetries: 3,
+    deliverMessageRetryBackoffStartMs: 250,
+    deliverMessageRetryBackoffMaxMs: 2000,
+    maxReResolveDepth: 3,
+};
+export class SessionRouter {
+    deps;
+    cfg;
+    chains = new Map();
+    constructor(deps, cfg = DEFAULT_ROUTER_CONFIG) {
+        this.deps = deps;
+        this.cfg = cfg;
+    }
+    /** Dispatch an inbound message; serialized per-session (in-order, one-in-flight). */
+    route(msg) {
+        const prior = this.chains.get(msg.sessionKey) ?? Promise.resolve();
+        const next = prior.catch(() => undefined).then(() => this.dispatchOne(msg));
+        // Track the tail so the next message on this session waits for this one to settle.
+        this.chains.set(msg.sessionKey, next.then(() => undefined, () => undefined));
+        return next;
+    }
+    backoff(attempt) {
+        return Math.min(this.cfg.deliverMessageRetryBackoffStartMs * 2 ** attempt, this.cfg.deliverMessageRetryBackoffMaxMs);
+    }
+    async dispatchOne(msg) {
+        const own = this.deps.resolveOwnership(msg.sessionKey);
+        if (own.status === 'active' && own.owner) {
+            if (own.owner === this.deps.selfMachineId) {
+                await this.deps.handleLocally(msg);
+                return { action: 'handled-locally', owner: own.owner, acked: true };
+            }
+            if (this.deps.isMachineAlive(own.owner)) {
+                return this.forwardToOwner(msg, own.owner, own.epoch, 0);
+            }
+            // Owner is not alive → owner-dead re-placement (§L4 fallback).
+            this.deps.markOwnerSuspect?.(own.owner);
+            return this.placeAndClaim(msg, 'failover', true);
+        }
+        if (own.status === 'placing' || own.status === 'transferring') {
+            this.deps.queueMessage(msg, 'ownership-contention');
+            return { action: 'queued', detail: own.status, acked: false };
+        }
+        // Unowned → place + claim.
+        return this.placeAndClaim(msg, 'new', false);
+    }
+    async forwardToOwner(msg, owner, epoch, reResolveDepth) {
+        for (let attempt = 0; attempt <= this.cfg.deliverMessageMaxRetries; attempt++) {
+            try {
+                const ack = await this.deps.deliverMessage(owner, { sessionKey: msg.sessionKey, messageId: msg.messageId, payload: msg.payload, ownershipEpoch: epoch });
+                if (ack.accepted === 'duplicate')
+                    return { action: 'duplicate', owner, acked: true };
+                if (ack.accepted === 'queued')
+                    return { action: 'forwarded', owner, acked: true };
+                // stale-ownership → re-resolve (bounded) and route to the current owner.
+                if (reResolveDepth >= this.cfg.maxReResolveDepth) {
+                    return this.placeAndClaim(msg, 'failover', true);
+                }
+                const own2 = this.deps.resolveOwnership(msg.sessionKey);
+                if (own2.status === 'active' && own2.owner === this.deps.selfMachineId) {
+                    await this.deps.handleLocally(msg);
+                    return { action: 'handled-locally', owner: own2.owner, detail: 'after-stale', acked: true };
+                }
+                // Re-forward to the current owner when ownership is still active+alive AND
+                // something actually changed — a DIFFERENT owner, or the SAME owner whose
+                // epoch advanced (the stale-ownership ACK meant our epoch view was behind;
+                // re-deliver at the corrected epoch rather than needlessly re-placing). A
+                // same-owner/same-epoch stale ACK is spurious → fall through to re-place.
+                // Bounded by maxReResolveDepth. (2026-05-29 pre-merge review #7.)
+                if (own2.status === 'active' && own2.owner && this.deps.isMachineAlive(own2.owner) && (own2.owner !== owner || own2.epoch !== epoch)) {
+                    return this.forwardToOwner(msg, own2.owner, own2.epoch, reResolveDepth + 1);
+                }
+                // Ownership moved to a transient/dead state (or a spurious same-epoch stale) → re-place.
+                return this.placeAndClaim(msg, 'failover', true);
+            }
+            catch (err) {
+                this.deps.log?.(`deliverMessage attempt ${attempt} to ${owner} failed: ${String(err?.message ?? err)}`);
+                if (attempt < this.cfg.deliverMessageMaxRetries) {
+                    await this.deps.sleep(this.backoff(attempt));
+                    continue;
+                }
+            }
+        }
+        // Retries exhausted → owner is unreachable → owner-dead re-placement.
+        this.deps.markOwnerSuspect?.(owner);
+        return this.placeAndClaim(msg, 'failover', true);
+    }
+    async placeAndClaim(msg, reason, fromDead) {
+        const decision = this.deps.placement.decide({
+            sessionKey: msg.sessionKey,
+            topicMetadata: msg.topicMetadata ?? {},
+            machineRegistry: this.deps.machineRegistry(),
+            currentOwner: undefined,
+            reason,
+        });
+        if (decision.outcome === 'placement-blocked') {
+            this.deps.raiseAttention('Session placement blocked', `${msg.sessionKey}: ${decision.escalationReason ?? decision.reason}`);
+            this.deps.queueMessage(msg, `placement-blocked:${decision.escalationReason ?? decision.reason}`);
+            return { action: 'placement-blocked', detail: decision.escalationReason ?? decision.reason, acked: false };
+        }
+        if (decision.outcome === 'queued' || !decision.chosenMachine) {
+            this.deps.raiseAttention('No machine available for session', `${msg.sessionKey}: ${decision.escalationReason ?? decision.reason}`);
+            this.deps.queueMessage(msg, decision.escalationReason ?? 'no-capable-machine');
+            return { action: 'queued', detail: decision.escalationReason ?? decision.reason, acked: false };
+        }
+        // Synchronous CAS-claim (the dispatch BLOCKS on this — Invariant #2).
+        const pre = this.deps.resolveOwnership(msg.sessionKey);
+        const cas = this.deps.casClaimOwnership(msg.sessionKey, decision.chosenMachine, pre.epoch);
+        if (!cas.ok) {
+            // Contention — re-read; route to the confirmed winner or queue if transient.
+            const own2 = this.deps.resolveOwnership(msg.sessionKey);
+            if (own2.status === 'active' && own2.owner === this.deps.selfMachineId) {
+                await this.deps.handleLocally(msg);
+                return { action: 'handled-locally', owner: own2.owner, detail: 'cas-lost-self', acked: true };
+            }
+            if (own2.status === 'active' && own2.owner && this.deps.isMachineAlive(own2.owner)) {
+                return this.forwardToOwner(msg, own2.owner, own2.epoch, 0);
+            }
+            this.deps.queueMessage(msg, 'ownership-contention');
+            return { action: 'queued', detail: 'ownership-contention', acked: false };
+        }
+        // CAS won → spawn on the winner (or handle locally if that's us).
+        const action = fromDead ? 'owner-dead-replaced' : 'spawned';
+        if (decision.chosenMachine === this.deps.selfMachineId) {
+            await this.deps.handleLocally(msg);
+            return { action: fromDead ? 'owner-dead-replaced' : 'handled-locally', owner: decision.chosenMachine, detail: 'placed-self', acked: true };
+        }
+        await this.deps.spawnOnMachine(decision.chosenMachine, msg);
+        return { action, owner: decision.chosenMachine, acked: true };
+    }
+}
+//# sourceMappingURL=SessionRouter.js.map

package/dist/core/SessionRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionRouter.js","sourceRoot":"","sources":["../../src/core/SessionRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAkDH,MAAM,CAAC,MAAM,qBAAqB,GAAwB;IACxD,wBAAwB,EAAE,CAAC;IAC3B,iCAAiC,EAAE,GAAG;IACtC,+BAA+B,EAAE,IAAI;IACrC,iBAAiB,EAAE,CAAC;CACrB,CAAC;AAuBF,MAAM,OAAO,aAAa;IACP,IAAI,CAAoB;IACxB,GAAG,CAAsB;IACzB,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE9D,YAAY,IAAuB,EAAE,MAA2B,qBAAqB;QACnF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,GAAmB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,mFAAmF;QACnF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO,CAAC,OAAe;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,iCAAiC,GAAG,CAAC,IAAI,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACvH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAmB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEvD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACtE,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,+DAA+D;YAC/D,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAChE,CAAC;QAED,2BAA2B;QAC3B,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAmB,EAAE,KAAa,EAAE,KAAa,EAAE,cAAsB;QACpG,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9E,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;gBACzJ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW;oBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACrF,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;oBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAClF,yEAAyE;gBACzE,IAAI,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;oBACjD,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;gBACnD,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACxD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACvE,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;oBACnC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAC9F,CAAC;gBACD,2EAA2E;gBAC3E,0EAA0E;gBAC1E,2EAA2E;gBAC3E,0EAA0E;gBAC1E,0EAA0E;gBAC1E,kEAAkE;gBAClE,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;oBACrI,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC;gBAC9E,CAAC;gBACD,yFAAyF;gBACzF,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,0BAA0B,OAAO,OAAO,KAAK,YAAY,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnH,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;oBAChD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC7C,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QACD,sEAAsE;QACtE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAmB,EAAE,MAA0B,EAAE,QAAiB;QAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC1C,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;YACtC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;YAC5C,YAAY,EAAE,SAAS;YACvB,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,2BAA2B,EAAE,GAAG,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5H,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,qBAAqB,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACjG,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC7G,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,kCAAkC,EAAE,GAAG,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,CAAC;YAC/E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAClG,CAAC;QAED,sEAAsE;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,6EAA6E;YAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvE,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAChG,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnF,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC5E,CAAC;QAED,kEAAkE;QAClE,MAAM,MAAM,GAAgB,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACvD,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC7I,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC5D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;CACF"}

package/dist/core/StageAdvancer.d.ts

@@ -0,0 +1,47 @@
+/**
+ * StageAdvancer — the SOLE writer of `multiMachine.sessionPool.stage` and the
+ * mechanical rollout gate (Multi-Machine Session Pool §Rollout). A stage activates
+ * ONLY when the prior stage's Tier-3 E2E recorded `green` for the CURRENT commit;
+ * otherwise the advance is refused and audited. If a live stage later records `red`,
+ * the advancer mechanically REVERTS to the prior (safe) stage. Per "Structure >
+ * Willpower" the gate is code, not prose: no other path may flip the stage (enforced
+ * by a Config.ts write-guard that only honors writes carrying this module's token).
+ */
+import type { SessionPoolE2EResultStore } from './SessionPoolE2EResultStore.js';
+export declare const STAGES: readonly ["dark", "shadow", "live-transfer", "rebalance"];
+export type SessionPoolStage = (typeof STAGES)[number];
+export declare function stageIndex(stage: SessionPoolStage): number;
+export type AdvanceResult = {
+    ok: true;
+    stage: SessionPoolStage;
+} | {
+    ok: false;
+    reason: 'e2e-gate-not-passed' | 'already-at-or-past' | 'invalid-stage';
+    detail?: string;
+};
+export interface StageAdvancerDeps {
+    resultStore: SessionPoolE2EResultStore;
+    /** The commit the running build is on — the E2E result must match it. */
+    currentCommitSha: () => string;
+    /** Read the current configured stage. */
+    readStage: () => SessionPoolStage;
+    /** The ONLY stage-config write path. Config.ts must reject writes that don't come through here. */
+    writeStageConfig: (stage: SessionPoolStage) => void;
+    audit?: (event: string, detail: Record<string, unknown>) => void;
+}
+export declare class StageAdvancer {
+    private readonly d;
+    constructor(d: StageAdvancerDeps);
+    /**
+     * Advance to `targetStage`, gated on a matching `green` E2E for the PRIOR stage at
+     * the current commit. A missing/`red`/stale-commit/tampered prior result → refused.
+     */
+    advanceTo(targetStage: SessionPoolStage): AdvanceResult;
+    /**
+     * Reconcile on each cycle: if the CURRENT stage's latest E2E is `red` (regression),
+     * mechanically revert to the prior stage until a fresh `green` is recorded. Returns
+     * the stage after reconciliation.
+     */
+    reconcile(): SessionPoolStage;
+}
+//# sourceMappingURL=StageAdvancer.d.ts.map

package/dist/core/StageAdvancer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StageAdvancer.d.ts","sourceRoot":"","sources":["../../src/core/StageAdvancer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAEhF,eAAO,MAAM,MAAM,2DAA4D,CAAC;AAChF,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,wBAAgB,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAE1D;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3G,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,yBAAyB,CAAC;IACvC,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,MAAM,CAAC;IAC/B,yCAAyC;IACzC,SAAS,EAAE,MAAM,gBAAgB,CAAC;IAClC,mGAAmG;IACnG,gBAAgB,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACpD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAClE;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,iBAAiB;IAEjD;;;OAGG;IACH,SAAS,CAAC,WAAW,EAAE,gBAAgB,GAAG,aAAa;IAwBvD;;;;OAIG;IACH,SAAS,IAAI,gBAAgB;CAiB9B"}

package/dist/core/StageAdvancer.js

@@ -0,0 +1,70 @@
+/**
+ * StageAdvancer — the SOLE writer of `multiMachine.sessionPool.stage` and the
+ * mechanical rollout gate (Multi-Machine Session Pool §Rollout). A stage activates
+ * ONLY when the prior stage's Tier-3 E2E recorded `green` for the CURRENT commit;
+ * otherwise the advance is refused and audited. If a live stage later records `red`,
+ * the advancer mechanically REVERTS to the prior (safe) stage. Per "Structure >
+ * Willpower" the gate is code, not prose: no other path may flip the stage (enforced
+ * by a Config.ts write-guard that only honors writes carrying this module's token).
+ */
+export const STAGES = ['dark', 'shadow', 'live-transfer', 'rebalance'];
+export function stageIndex(stage) {
+    return STAGES.indexOf(stage);
+}
+export class StageAdvancer {
+    d;
+    constructor(d) {
+        this.d = d;
+    }
+    /**
+     * Advance to `targetStage`, gated on a matching `green` E2E for the PRIOR stage at
+     * the current commit. A missing/`red`/stale-commit/tampered prior result → refused.
+     */
+    advanceTo(targetStage) {
+        const targetIdx = stageIndex(targetStage);
+        if (targetIdx < 0)
+            return { ok: false, reason: 'invalid-stage', detail: String(targetStage) };
+        const current = this.d.readStage();
+        if (stageIndex(current) >= targetIdx) {
+            return { ok: false, reason: 'already-at-or-past', detail: `current=${current}` };
+        }
+        // 'dark' (index 0) is the floor — there is no prior stage to gate on; you never
+        // "advance to dark", you revert to it. So any real advance targets index ≥ 1.
+        const priorStageIdx = targetIdx - 1;
+        const prior = this.d.resultStore.getLatestForStage(priorStageIdx);
+        const sha = this.d.currentCommitSha();
+        const gateOk = !!prior && prior.result === 'green' && prior.commitSha === sha && this.d.resultStore.verify(prior);
+        if (!gateOk) {
+            const detail = !prior ? 'no-result' : prior.result !== 'green' ? `result=${prior.result}` : prior.commitSha !== sha ? 'stale-commit' : 'bad-signature';
+            this.d.audit?.('stage-advance-refused', { targetStage, priorStage: STAGES[priorStageIdx], reason: 'e2e-gate-not-passed', detail, commitSha: sha });
+            return { ok: false, reason: 'e2e-gate-not-passed', detail };
+        }
+        this.d.writeStageConfig(targetStage);
+        this.d.audit?.('stage-advanced', { from: current, to: targetStage, commitSha: sha, evidenceRef: prior.evidenceRef });
+        return { ok: true, stage: targetStage };
+    }
+    /**
+     * Reconcile on each cycle: if the CURRENT stage's latest E2E is `red` (regression),
+     * mechanically revert to the prior stage until a fresh `green` is recorded. Returns
+     * the stage after reconciliation.
+     */
+    reconcile() {
+        const current = this.d.readStage();
+        const idx = stageIndex(current);
+        if (idx <= 0)
+            return current; // 'dark' is the floor — nothing to revert to
+        const latest = this.d.resultStore.getLatestForStage(idx);
+        // Only revert on a red for the CURRENT commit — a stale red from a prior commit
+        // is not a regression of the running build and must not trigger a revert.
+        // (2026-05-29 pre-merge review.)
+        const regressed = !!latest && latest.result === 'red' && latest.commitSha === this.d.currentCommitSha() && this.d.resultStore.verify(latest);
+        if (regressed) {
+            const reverted = STAGES[idx - 1];
+            this.d.writeStageConfig(reverted);
+            this.d.audit?.('stage-reverted', { from: current, to: reverted, reason: 'e2e-red', evidenceRef: latest.evidenceRef });
+            return reverted;
+        }
+        return current;
+    }
+}
+//# sourceMappingURL=StageAdvancer.js.map

package/dist/core/StageAdvancer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StageAdvancer.js","sourceRoot":"","sources":["../../src/core/StageAdvancer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,CAAU,CAAC;AAGhF,MAAM,UAAU,UAAU,CAAC,KAAuB;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAiBD,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,CAAoB;QAApB,MAAC,GAAD,CAAC,CAAmB;IAAG,CAAC;IAErD;;;OAGG;IACH,SAAS,CAAC,WAA6B;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,SAAS,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;YACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,WAAW,OAAO,EAAE,EAAE,CAAC;QACnF,CAAC;QACD,gFAAgF;QAChF,8EAA8E;QAC9E,MAAM,aAAa,GAAG,SAAS,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACtC,MAAM,MAAM,GACV,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;YACvJ,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,uBAAuB,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YACnJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACrH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,SAAS;QACP,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,CAAC,6CAA6C;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACzD,gFAAgF;QAChF,0EAA0E;QAC1E,iCAAiC;QACjC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7I,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACtH,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/core/TransferByNickname.d.ts

@@ -0,0 +1,51 @@
+/**
+ * TransferByNickname — the pure planner behind the headline "move this to
+ * <nickname>" mid-conversation swap (Multi-Machine Session Pool §L4 "Topic
+ * Placement Updates" + §L5). It turns a recognized NicknameCommand into a gated,
+ * validated TransferPlan: resolve the nickname → machineId, enforce the rate limit,
+ * the confirmation gate (offline target / mid-reply), and the already-there no-op.
+ * Per "Structure > Willpower" a transfer is high-impact, so this is NOT free-text
+ * inference — it operates on an ALREADY-recognized command + the registry state,
+ * and an unknown/ambiguous nickname is REJECTED (listing valid nicknames), never
+ * silently mis-routed.
+ */
+import type { NicknameCommand } from './NicknameCommand.js';
+export interface TransferByNicknameState {
+    /** Resolve a nickname → machineId (case-insensitive exact match), or null if unknown. */
+    resolveNickname: (nickname: string) => string | null;
+    /** The full set of valid nicknames (returned on an unknown-nickname rejection). */
+    validNicknames: () => string[];
+    isOnline: (machineId: string) => boolean;
+    currentOwnerOf: (sessionKey: string) => string | null;
+    /** Is the session mid-reply (a turn in flight)? Confirmation is required to interrupt it. */
+    isMidReply: (sessionKey: string) => boolean;
+    /** When the topic last had a placement update (for the rate limit), or null. */
+    lastPlacementUpdateAt: (sessionKey: string) => number | null;
+    now: () => number;
+    /** Minimum ms between placement updates per topic. Default 10000. */
+    minUpdateIntervalMs?: number;
+}
+export type TransferPlanAction = 'transfer' | 'noop' | 'confirm-required' | 'reject';
+export interface TransferPlan {
+    action: TransferPlanAction;
+    sessionKey: string;
+    /** Resolved target machine (present for transfer / confirm-required / noop). */
+    targetMachine?: string;
+    /** Set the topic's preferredMachine + pinned:true (a hard pin — §L4). */
+    setPin?: boolean;
+    /** Human-facing confirmation prompt (action === 'confirm-required'). */
+    confirmationPrompt?: string;
+    /** Rejection reason (action === 'reject'). */
+    rejectReason?: 'unknown-machine-nickname' | 'rate-limited';
+    /** On unknown-nickname: the valid nicknames to surface to the user. */
+    validNicknames?: string[];
+    detail?: string;
+}
+/**
+ * Plan a transfer-by-nickname. Pure over (command, state). Both "move this to
+ * <nick>" and "run this on <nick>" set a hard pin (pinned:true) per §L4; the only
+ * intent difference is cosmetic. Confirmation is required when the target is offline,
+ * or when it differs from the current owner AND the session is mid-reply (§L4 line 456).
+ */
+export declare function planTransferByNickname(command: NicknameCommand, state: TransferByNicknameState, sessionKey: string): TransferPlan;
+//# sourceMappingURL=TransferByNickname.d.ts.map

package/dist/core/TransferByNickname.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TransferByNickname.d.ts","sourceRoot":"","sources":["../../src/core/TransferByNickname.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,WAAW,uBAAuB;IACtC,yFAAyF;IACzF,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACrD,mFAAmF;IACnF,cAAc,EAAE,MAAM,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACtD,6FAA6F;IAC7F,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,gFAAgF;IAChF,qBAAqB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC7D,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,MAAM,GAAG,kBAAkB,GAAG,QAAQ,CAAC;AAErF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8CAA8C;IAC9C,YAAY,CAAC,EAAE,0BAA0B,GAAG,cAAc,CAAC;IAC3D,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,CAmCjI"}

package/dist/core/TransferByNickname.js

@@ -0,0 +1,50 @@
+/**
+ * TransferByNickname — the pure planner behind the headline "move this to
+ * <nickname>" mid-conversation swap (Multi-Machine Session Pool §L4 "Topic
+ * Placement Updates" + §L5). It turns a recognized NicknameCommand into a gated,
+ * validated TransferPlan: resolve the nickname → machineId, enforce the rate limit,
+ * the confirmation gate (offline target / mid-reply), and the already-there no-op.
+ * Per "Structure > Willpower" a transfer is high-impact, so this is NOT free-text
+ * inference — it operates on an ALREADY-recognized command + the registry state,
+ * and an unknown/ambiguous nickname is REJECTED (listing valid nicknames), never
+ * silently mis-routed.
+ */
+const DEFAULT_MIN_UPDATE_INTERVAL_MS = 10000;
+/**
+ * Plan a transfer-by-nickname. Pure over (command, state). Both "move this to
+ * <nick>" and "run this on <nick>" set a hard pin (pinned:true) per §L4; the only
+ * intent difference is cosmetic. Confirmation is required when the target is offline,
+ * or when it differs from the current owner AND the session is mid-reply (§L4 line 456).
+ */
+export function planTransferByNickname(command, state, sessionKey) {
+    const target = state.resolveNickname(command.nickname);
+    if (!target) {
+        return { action: 'reject', sessionKey, rejectReason: 'unknown-machine-nickname', validNicknames: state.validNicknames(), detail: command.nickname };
+    }
+    // Rate limit — at most one placement update per topic per interval (defeats rapid-fire transfers).
+    const minInterval = state.minUpdateIntervalMs ?? DEFAULT_MIN_UPDATE_INTERVAL_MS;
+    const last = state.lastPlacementUpdateAt(sessionKey);
+    if (last != null && state.now() - last < minInterval) {
+        return { action: 'reject', sessionKey, targetMachine: target, rejectReason: 'rate-limited' };
+    }
+    const owner = state.currentOwnerOf(sessionKey);
+    // Already on the target → no transfer needed (still applies the pin if requested).
+    if (owner === target) {
+        return { action: 'noop', sessionKey, targetMachine: target, setPin: true, detail: 'already-on-target' };
+    }
+    // Confirmation gate (§L4): offline target, OR a different owner while mid-reply.
+    if (!state.isOnline(target)) {
+        return {
+            action: 'confirm-required', sessionKey, targetMachine: target, setPin: true,
+            confirmationPrompt: `${command.nickname} is offline right now. Move this conversation there anyway? It'll pick up like a fresh-session catch-up once it's back.`,
+        };
+    }
+    if (owner != null && owner !== target && state.isMidReply(sessionKey)) {
+        return {
+            action: 'confirm-required', sessionKey, targetMachine: target, setPin: true,
+            confirmationPrompt: `Move this to ${command.nickname}? I'm mid-reply — it'll be like a fresh-session catch-up on the other machine.`,
+        };
+    }
+    return { action: 'transfer', sessionKey, targetMachine: target, setPin: true };
+}
+//# sourceMappingURL=TransferByNickname.js.map

package/dist/core/TransferByNickname.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TransferByNickname.js","sourceRoot":"","sources":["../../src/core/TransferByNickname.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAsCH,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAwB,EAAE,KAA8B,EAAE,UAAkB;IACjH,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,0BAA0B,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IACtJ,CAAC;IAED,mGAAmG;IACnG,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,IAAI,8BAA8B,CAAC;IAChF,MAAM,IAAI,GAAG,KAAK,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC;QACrD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAE/C,mFAAmF;IACnF,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC1G,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI;YAC3E,kBAAkB,EAAE,GAAG,OAAO,CAAC,QAAQ,yHAAyH;SACjK,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,OAAO;YACL,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI;YAC3E,kBAAkB,EAAE,gBAAgB,OAAO,CAAC,QAAQ,gFAAgF;SACrI,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACjF,CAAC"}

package/dist/core/TransferOrchestrator.d.ts

@@ -0,0 +1,113 @@
+/**
+ * TransferOrchestrator — drives a planned session handoff through the §L3/§L5
+ * ordered sequence: active(S) → transferring(e+1) → [drain, flush ledger, target
+ * pulls+verifies] → active(T, e+2) → S-release. Claim-before-release, fenced by
+ * (status, epoch): there is no double-run (only one machine is `active` at the top
+ * epoch) and no no-owner gap (`transferring` still names S as the draining owner).
+ *
+ * The orchestrator enforces the two §L5 timing contracts:
+ *  - Drain bound (`transferDrainTimeoutMs`): a long reply/tool-call must NOT block a
+ *    transfer; on timeout the source abandons its partial output (NOT emitted).
+ *  - Output exclusion (`transferOutputCutoffMs`): T holds its CONTINUATION until the
+ *    cutoff has elapsed since the `transferring` write, so S's drain window and T's
+ *    emission window are disjoint by construction — exactly one continuation per turn.
+ *
+ * All I/O (CAS, drain, ledger flush, mesh transfer, claim, clock) is injected so the
+ * sequence + timing logic is deterministic and unit-testable; the real wiring (real
+ * SessionMigrator drain, real git ledger flush, real mesh client) lands in Track H.
+ */
+export type LedgerEntryStatus = 'reply_committed' | 'cursor_advanced' | 'in_flight';
+export interface LedgerSnapshot {
+    sessionKey: string;
+    generatedAt: number;
+    entries: Array<{
+        messageId: string;
+        status: LedgerEntryStatus;
+        replyMarker?: string;
+        updatedAt: number;
+    }>;
+    snapshotSha256: string;
+}
+/**
+ * Verify a ledger snapshot at the transfer handoff (§L5): the SHA256 must match the
+ * SyncManifest-covered value AND every entry must be terminal (nothing `in_flight`).
+ * An `in_flight` entry means a turn was still processing at flush time — the target
+ * must NOT resume from it (it waits for a terminal re-flush, or treats it as the
+ * interrupted-drain case on failover). Pure.
+ */
+export declare function verifyLedgerSnapshot(snapshot: LedgerSnapshot, expectedSha256: string, computeSha256: (s: LedgerSnapshot) => string): {
+    ok: true;
+} | {
+    ok: false;
+    reason: 'sha-mismatch' | 'in-flight-entry';
+};
+export interface TransferRequest {
+    sessionKey: string;
+    source: string;
+    target: string;
+    reason: 'pin' | 'rebalance' | 'failover';
+    /** Whether the source machine is alive (planned transfer) or gone (failover). */
+    sourceAlive: boolean;
+    /** The ownership epoch the orchestrator observed before starting. */
+    baseEpoch: number;
+}
+export interface TransferOrchestratorConfig {
+    transferDrainTimeoutMs: number;
+    transferOutputCutoffMs: number;
+}
+export declare const DEFAULT_TRANSFER_CONFIG: TransferOrchestratorConfig;
+export interface TransferOrchestratorDeps {
+    /** CAS the record source→transferring(epoch+1). */
+    casToTransferring: (sessionKey: string, target: string, expectedEpoch: number) => {
+        ok: boolean;
+        epoch: number;
+    };
+    /** Quiesce + drain the in-flight reply on the source, bounded by timeoutMs. */
+    drain: (sessionKey: string, timeoutMs: number) => Promise<{
+        drained: boolean;
+        abandonedPartial: boolean;
+    }>;
+    /** Source flushes its ledger snapshot synchronously (returns the snapshot + its ref). */
+    flushLedger: (sessionKey: string) => Promise<{
+        snapshot: LedgerSnapshot;
+        ledgerSnapshotRef: string;
+        syncManifestRef: string;
+    }>;
+    /** Send the transfer MeshRpc to the target; the target pulls + verifies the snapshot. */
+    sendTransferRpc: (target: string, refs: {
+        sessionKey: string;
+        ledgerSnapshotRef: string;
+        syncManifestRef: string;
+    }) => Promise<{
+        ok: boolean;
+        verified: boolean;
+        reason?: string;
+    }>;
+    /** Target CASes itself to active(owner=T, epoch+2). */
+    targetClaim: (sessionKey: string, expectedEpoch: number) => {
+        ok: boolean;
+        epoch: number;
+    };
+    /** Cleanup: source releases (NOT a precondition for T's claim — runs after). */
+    releaseSource: (sessionKey: string) => void;
+    /** Raise a deduped Attention item on sync corruption / unrecoverable handoff. */
+    raiseAttention?: (title: string, body: string) => void;
+    now: () => number;
+    sleep: (ms: number) => Promise<void>;
+    log?: (line: string) => void;
+}
+export type TransferStatus = 'transferred' | 'aborted-cas-lost' | 'sync-corrupted' | 'target-claim-failed';
+export interface TransferOutcome {
+    ok: boolean;
+    status: TransferStatus;
+    drainAbandoned?: boolean;
+    finalEpoch?: number;
+    detail?: string;
+}
+export declare class TransferOrchestrator {
+    private readonly deps;
+    private readonly cfg;
+    constructor(deps: TransferOrchestratorDeps, cfg?: TransferOrchestratorConfig);
+    transfer(req: TransferRequest): Promise<TransferOutcome>;
+}
+//# sourceMappingURL=TransferOrchestrator.d.ts.map

package/dist/core/TransferOrchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TransferOrchestrator.d.ts","sourceRoot":"","sources":["../../src/core/TransferOrchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,WAAW,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,iBAAiB,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1G,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,CAAC,CAAC,EAAE,cAAc,KAAK,MAAM,GAC3C;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAAA;CAAE,CAQ1E;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,KAAK,GAAG,WAAW,GAAG,UAAU,CAAC;IACzC,iFAAiF;IACjF,WAAW,EAAE,OAAO,CAAC;IACrB,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,eAAO,MAAM,uBAAuB,EAAE,0BAGrC,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACvC,mDAAmD;IACnD,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACjH,+EAA+E;IAC/E,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC3G,yFAAyF;IACzF,WAAW,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,EAAE,cAAc,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/H,yFAAyF;IACzF,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpL,uDAAuD;IACvD,WAAW,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3F,gFAAgF;IAChF,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,iFAAiF;IACjF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,kBAAkB,GAClB,gBAAgB,GAChB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,cAAc,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2B;IAChD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;gBACrC,IAAI,EAAE,wBAAwB,EAAE,GAAG,GAAE,0BAAoD;IAK/F,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;CAoC/D"}