instar 1.3.955 → 1.3.957

package/dist/core/CapabilityRegistry.d.ts

@@ -0,0 +1,66 @@
+export declare const CAPABILITY_REGISTRY_SCHEMA_VERSION = 1;
+export declare const MAX_ENTRIES_PER_MACHINE = 200;
+export declare const MAX_STRING_LENGTH = 256;
+export declare const MAX_SCHEMA_VERSION = 999;
+export declare const MAX_MACHINE_EPOCH = 9999999999;
+export declare const MAX_PROJECTION_SEQ = 9999999999;
+export declare const MAX_SCAN_STAMP_SECS = 9999999999;
+export declare const CAPABILITY_KINDS: readonly ["model"];
+export declare const PROBE_OUTCOMES: readonly ["positive", "negative", "unknown"];
+export declare const SCAN_STATES: readonly ["observed", "never-observed", "source-unavailable"];
+export declare const SOURCES: readonly ["local-doorways"];
+export declare const SOURCE_DETAILS: readonly ["doorway-scan", "doorway-manifest", "pool-observation"];
+export declare const EVIDENCE_CLASSES: readonly ["cli-present", "probe-answered", "manifest-only"];
+export type ProbeOutcome = (typeof PROBE_OUTCOMES)[number];
+export type ScanState = (typeof SCAN_STATES)[number];
+export type SourceDetail = (typeof SOURCE_DETAILS)[number];
+export type CapabilityStatus = 'available' | 'unavailable' | 'unknown' | 'stale' | 'conflict';
+export interface CapabilityEvidence {
+    doorwayScanAt?: string;
+    manifestVerifiedAt?: string;
+}
+export interface CapabilityEntry {
+    capabilityId: string;
+    capabilityKind: 'model';
+    doorwayId: string;
+    machineId: string;
+    probeOutcome: ProbeOutcome;
+    endpointRef: string;
+    observedAt: string;
+    receivedAt: string;
+    source: 'local-doorways';
+    sourceDetail: SourceDetail;
+    evidenceClass: (typeof EVIDENCE_CLASSES)[number];
+    evidence: CapabilityEvidence;
+}
+export interface CapabilityProjection {
+    schemaVersion: number;
+    machineId: string;
+    machineEpoch: number;
+    projectionSeq: number;
+    scanStampSecs: number;
+    scanState: ScanState;
+    truncated: boolean;
+    entries: CapabilityEntry[];
+}
+export declare function canonicalCapabilityId(doorwayId: unknown, modelId: unknown): string;
+export declare function validateProjection(raw: unknown): CapabilityProjection;
+export declare function canonicalDigest(projection: CapabilityProjection): string;
+export declare function deriveStatus(entries: CapabilityEntry[], now?: number, opts?: {
+    localStaleAfterMs?: number;
+    remoteTtlCeilingMs?: number;
+    lastConfirmedAt?: number;
+}): CapabilityStatus;
+export declare function readDoorwaySources(projectDir: string, stateDir: string, now?: string, machineId?: string): {
+    entries: CapabilityEntry[];
+    scanState: ScanState;
+    scanStampSecs: number;
+};
+export declare class CapabilityRegistryWriter {
+    private readonly filePath;
+    private readonly machineId;
+    constructor(filePath: string, machineId: string);
+    write(input: Omit<CapabilityProjection, 'machineId'>): CapabilityProjection;
+    read(): CapabilityProjection | null;
+}
+//# sourceMappingURL=CapabilityRegistry.d.ts.map

package/dist/core/CapabilityRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapabilityRegistry.d.ts","sourceRoot":"","sources":["../../src/core/CapabilityRegistry.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,iBAAiB,aAAgB,CAAC;AAC/C,eAAO,MAAM,kBAAkB,aAAgB,CAAC;AAChD,eAAO,MAAM,mBAAmB,aAAgB,CAAC;AAEjD,eAAO,MAAM,gBAAgB,oBAAqB,CAAC;AACnD,eAAO,MAAM,cAAc,8CAA+C,CAAC;AAC3E,eAAO,MAAM,WAAW,+DAAgE,CAAC;AACzF,eAAO,MAAM,OAAO,6BAA8B,CAAC;AACnD,eAAO,MAAM,cAAc,mEAAoE,CAAC;AAChG,eAAO,MAAM,gBAAgB,6DAA8D,CAAC;AAC5F,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AACrD,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9F,MAAM,WAAW,kBAAkB;IAAG,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE;AAC3F,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IACpF,YAAY,EAAE,YAAY,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IACxF,MAAM,EAAE,gBAAgB,CAAC;IAAC,YAAY,EAAE,YAAY,CAAC;IACrD,aAAa,EAAE,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAC;CAChF;AACD,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IACtF,aAAa,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,eAAe,EAAE,CAAC;CAC7F;AAiBD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAIlF;AAuBD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,CAerE;AAID,wBAAgB,eAAe,CAAC,UAAU,EAAE,oBAAoB,GAAG,MAAM,CAOxE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,GAAG,SAAa,EAAE,IAAI,GAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,gBAAgB,CAU7L;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,SAA2B,EAAE,SAAS,SAAU,GAAG;IAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CA6BzM;AAED,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAU,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAA5C,QAAQ,EAAE,MAAM,EAAmB,SAAS,EAAE,MAAM;IACjF,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,GAAG,oBAAoB;IAqB3E,IAAI,IAAI,oBAAoB,GAAG,IAAI;CAQpC"}

package/dist/core/CapabilityRegistry.js

@@ -0,0 +1,214 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { readDoorwayRegistry, scanStatePath } from './DoorwayRegistryReader.js';
+import { DegradationReporter } from '../monitoring/DegradationReporter.js';
+export const CAPABILITY_REGISTRY_SCHEMA_VERSION = 1;
+export const MAX_ENTRIES_PER_MACHINE = 200;
+export const MAX_STRING_LENGTH = 256;
+export const MAX_SCHEMA_VERSION = 999;
+export const MAX_MACHINE_EPOCH = 9_999_999_999;
+export const MAX_PROJECTION_SEQ = 9_999_999_999;
+export const MAX_SCAN_STAMP_SECS = 9_999_999_999;
+export const CAPABILITY_KINDS = ['model'];
+export const PROBE_OUTCOMES = ['positive', 'negative', 'unknown'];
+export const SCAN_STATES = ['observed', 'never-observed', 'source-unavailable'];
+export const SOURCES = ['local-doorways'];
+export const SOURCE_DETAILS = ['doorway-scan', 'doorway-manifest', 'pool-observation'];
+export const EVIDENCE_CLASSES = ['cli-present', 'probe-answered', 'manifest-only'];
+const int = (v, max, name) => {
+    if (!Number.isSafeInteger(v) || v < 0 || v > max)
+        throw new Error(`${name}-width`);
+    return v;
+};
+const str = (v, name) => {
+    if (typeof v !== 'string' || v.length === 0 || v.length > MAX_STRING_LENGTH)
+        throw new Error(`${name}-invalid`);
+    return v;
+};
+const iso = (v, name) => {
+    const s = str(v, name);
+    if (Number.isNaN(Date.parse(s)))
+        throw new Error(`${name}-timestamp`);
+    return s;
+};
+const oneOf = (v, values, name) => {
+    if (!values.includes(v))
+        throw new Error(`${name}-enum`);
+    return v;
+};
+export function canonicalCapabilityId(doorwayId, modelId) {
+    const d = str(doorwayId, 'doorwayId').toLowerCase();
+    const m = str(modelId, 'modelId').toLowerCase();
+    if (!/^[a-z0-9._-]+$/.test(d) || !/^[a-z0-9._-]+$/.test(m))
+        throw new Error('capability-id-invalid');
+    return `models:${d}/${m}`;
+}
+function validateEntry(raw, machineId) {
+    if (!raw || typeof raw !== 'object')
+        throw new Error('entry-invalid');
+    const r = raw;
+    if (r.machineId !== machineId)
+        throw new Error('origin-mismatch');
+    const capabilityId = str(r.capabilityId, 'capabilityId');
+    if (!/^models:[a-z0-9._-]+\/[a-z0-9._-]+$/.test(capabilityId))
+        throw new Error('capability-id-invalid');
+    const doorwayId = str(r.doorwayId, 'doorwayId').toLowerCase();
+    const endpointRef = str(r.endpointRef, 'endpointRef');
+    if (!new RegExp(`^mesh://${escapeRegExp(machineId)}/doorways$`).test(endpointRef))
+        throw new Error('endpoint-ref-invalid');
+    const evidence = r.evidence && typeof r.evidence === 'object' ? r.evidence : {};
+    if (Object.keys(evidence).some(k => !['doorwayScanAt', 'manifestVerifiedAt'].includes(k)))
+        throw new Error('evidence-keys');
+    return {
+        capabilityId, capabilityKind: oneOf(r.capabilityKind, CAPABILITY_KINDS, 'capabilityKind'), doorwayId,
+        machineId, probeOutcome: oneOf(r.probeOutcome, PROBE_OUTCOMES, 'probeOutcome'), endpointRef,
+        observedAt: iso(r.observedAt, 'observedAt'), receivedAt: iso(r.receivedAt, 'receivedAt'),
+        source: oneOf(r.source, SOURCES, 'source'), sourceDetail: oneOf(r.sourceDetail, SOURCE_DETAILS, 'sourceDetail'),
+        evidenceClass: oneOf(r.evidenceClass, EVIDENCE_CLASSES, 'evidenceClass'),
+        evidence: { ...(evidence.doorwayScanAt ? { doorwayScanAt: iso(evidence.doorwayScanAt, 'doorwayScanAt') } : {}), ...(evidence.manifestVerifiedAt ? { manifestVerifiedAt: iso(evidence.manifestVerifiedAt, 'manifestVerifiedAt') } : {}) },
+    };
+}
+export function validateProjection(raw) {
+    if (!raw || typeof raw !== 'object')
+        throw new Error('malformed');
+    const r = raw;
+    const machineId = str(r.machineId, 'machineId');
+    const schemaVersion = int(r.schemaVersion, MAX_SCHEMA_VERSION, 'schemaVersion');
+    if (schemaVersion > CAPABILITY_REGISTRY_SCHEMA_VERSION)
+        throw new Error('version-unsupported');
+    if (!Array.isArray(r.entries) || r.entries.length > MAX_ENTRIES_PER_MACHINE)
+        throw new Error('over-limit');
+    const p = {
+        schemaVersion, machineId, machineEpoch: int(r.machineEpoch, MAX_MACHINE_EPOCH, 'machineEpoch'),
+        projectionSeq: int(r.projectionSeq, MAX_PROJECTION_SEQ, 'projectionSeq'),
+        scanStampSecs: int(r.scanStampSecs, MAX_SCAN_STAMP_SECS, 'scanStampSecs'),
+        scanState: oneOf(r.scanState, SCAN_STATES, 'scanState'),
+        truncated: typeof r.truncated === 'boolean' ? r.truncated : (() => { throw new Error('truncated-invalid'); })(),
+        entries: r.entries.map(e => validateEntry(e, machineId)),
+    };
+    return p;
+}
+function escapeRegExp(s) { return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'); }
+function fact(e) { return { capabilityId: e.capabilityId, capabilityKind: e.capabilityKind, doorwayId: e.doorwayId, machineId: e.machineId, probeOutcome: e.probeOutcome, endpointRef: e.endpointRef, source: e.source, sourceDetail: e.sourceDetail, evidenceClass: e.evidenceClass }; }
+export function canonicalDigest(projection) {
+    const entries = [...projection.entries].sort((a, b) => `${a.doorwayId}\0${a.capabilityId}\0${a.sourceDetail}`.localeCompare(`${b.doorwayId}\0${b.capabilityId}\0${b.sourceDetail}`));
+    const serialized = JSON.stringify(entries.map(fact));
+    const hash = crypto.createHash('sha256').update(serialized).digest('hex').slice(0, 16);
+    const state = SCAN_STATES.indexOf(projection.scanState);
+    const digest = `cap1:${projection.schemaVersion}:${projection.machineEpoch}:${projection.projectionSeq}:${projection.truncated ? 1 : 0}:${state}:${projection.scanStampSecs}:${hash}`;
+    if (Buffer.byteLength(digest) > 64)
+        throw new Error('digest-width');
+    return digest;
+}
+export function deriveStatus(entries, now = Date.now(), opts = {}) {
+    if (!entries.length)
+        return 'unknown';
+    const byOutcome = new Set(entries.map(e => e.probeOutcome));
+    if (byOutcome.size > 1)
+        return 'conflict';
+    if (entries.every(e => e.evidenceClass === 'manifest-only'))
+        return 'unknown';
+    if (entries.some(e => e.probeOutcome === 'unknown'))
+        return 'unknown';
+    const observedStale = entries.some(e => now - Date.parse(e.observedAt) > (opts.localStaleAfterMs ?? 86_400_000));
+    const transportStale = opts.lastConfirmedAt !== undefined && now - opts.lastConfirmedAt > (opts.remoteTtlCeilingMs ?? 600_000);
+    if (transportStale || observedStale)
+        return 'stale';
+    return entries[0].probeOutcome === 'positive' ? 'available' : 'unavailable';
+}
+export function readDoorwaySources(projectDir, stateDir, now = new Date().toISOString(), machineId = 'local') {
+    const scanPath = scanStatePath(stateDir);
+    const scanExists = fs.existsSync(scanPath);
+    let scanReadable = false;
+    if (scanExists) {
+        try {
+            JSON.parse(fs.readFileSync(scanPath, 'utf8'));
+            scanReadable = true;
+        }
+        catch (error) {
+            DegradationReporter.getInstance().report({ feature: 'CapabilityRegistry.scanState', primary: 'Readable doorway scan-state', fallback: 'Source-unavailable projection state', reason: `scan-state parse failed: ${error instanceof Error ? error.message : String(error)}`, impact: 'Local doorway freshness is unavailable until the next successful scan.' });
+        }
+    }
+    const result = readDoorwayRegistry({ projectDir, stateDir });
+    if (result.status !== 'ok')
+        throw new Error(`doorway-registry-${result.status}`);
+    const { body } = result;
+    const scanState = !scanReadable && scanExists ? 'source-unavailable' : body.scanState === 'scanned' ? 'observed' : 'never-observed';
+    const scanStampSecs = body.lastScanAt ? Math.floor(Date.parse(body.lastScanAt) / 1000) : 0;
+    const entries = [];
+    for (const door of body.doorways) {
+        const d = door.probeStatus === 'never-scanned' ? null : door;
+        for (const model of door.topModels) {
+            if (!model.id)
+                continue;
+            const doorwayId = door.doorId;
+            const scannedAt = d?.lastScannedAt ?? now;
+            const capabilityId = canonicalCapabilityId(doorwayId, model.id);
+            const common = { capabilityId, capabilityKind: 'model', doorwayId, machineId, endpointRef: `mesh://${machineId}/doorways`, receivedAt: now, source: 'local-doorways', evidence: { ...(d?.lastScannedAt ? { doorwayScanAt: d.lastScannedAt } : {}) } };
+            entries.push({ ...common, probeOutcome: 'positive', observedAt: model.verifiedAt ?? now, sourceDetail: 'doorway-manifest', evidenceClass: 'manifest-only' });
+            if (d)
+                entries.push({ ...common, probeOutcome: d.probeStatus === 'ok' ? 'positive' : ['not-installed', 'http-4xx'].includes(d.probeStatus) ? 'negative' : 'unknown', observedAt: scannedAt, sourceDetail: 'doorway-scan', evidenceClass: d.probeStatus === 'ok' ? 'probe-answered' : 'cli-present' });
+        }
+    }
+    return { entries, scanState, scanStampSecs };
+}
+export class CapabilityRegistryWriter {
+    filePath;
+    machineId;
+    constructor(filePath, machineId) {
+        this.filePath = filePath;
+        this.machineId = machineId;
+    }
+    write(input) {
+        const previous = this.read();
+        let epoch = input.machineEpoch;
+        let seq = input.projectionSeq;
+        if (previous) {
+            epoch = Math.max(epoch, previous.machineEpoch);
+            seq = previous.machineEpoch === epoch ? previous.projectionSeq + 1 : seq;
+        }
+        const scanStampSecs = input.scanStampSecs;
+        if (seq >= MAX_PROJECTION_SEQ) {
+            epoch = Math.max(Math.floor(Date.now() / 1000), epoch + 1);
+            seq = 0;
+        }
+        const sorted = [...input.entries].sort((a, b) => `${a.doorwayId}\0${a.capabilityId}\0${a.sourceDetail}`.localeCompare(`${b.doorwayId}\0${b.capabilityId}\0${b.sourceDetail}`));
+        let truncated = input.truncated;
+        if (sorted.length > MAX_ENTRIES_PER_MACHINE) {
+            const kept = [];
+            let i = 0;
+            while (i < sorted.length && kept.length < MAX_ENTRIES_PER_MACHINE) {
+                const id = sorted[i].capabilityId;
+                const group = sorted.filter(e => e.capabilityId === id);
+                if (kept.length + group.length > MAX_ENTRIES_PER_MACHINE)
+                    break;
+                kept.push(...group);
+                i += group.length;
+            }
+            sorted.splice(0, sorted.length, ...kept);
+            truncated = true;
+        }
+        if (!previous)
+            epoch = Math.max(Math.floor(Date.now() / 1000), epoch);
+        const projection = validateProjection({ ...input, machineId: this.machineId, machineEpoch: epoch, projectionSeq: seq, scanStampSecs, truncated, entries: sorted });
+        const dir = path.dirname(this.filePath);
+        fs.mkdirSync(dir, { recursive: true });
+        const tmp = `${this.filePath}.tmp-${process.pid}`;
+        fs.writeFileSync(tmp, JSON.stringify(projection, null, 2));
+        fs.renameSync(tmp, this.filePath);
+        return projection;
+    }
+    read() {
+        if (!fs.existsSync(this.filePath))
+            return null;
+        try {
+            return validateProjection(JSON.parse(fs.readFileSync(this.filePath, 'utf8')));
+        }
+        catch (error) {
+            DegradationReporter.getInstance().report({ feature: 'CapabilityRegistry.projection', primary: 'Valid local capability projection', fallback: 'Fresh projection rebuild', reason: `projection read failed: ${error instanceof Error ? error.message : String(error)}`, impact: 'The registry will rebuild from current local doorway sources.' });
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=CapabilityRegistry.js.map

package/dist/core/CapabilityRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapabilityRegistry.js","sourceRoot":"","sources":["../../src/core/CapabilityRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAE3E,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAC/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,CAAU,CAAC;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAC3E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,gBAAgB,EAAE,oBAAoB,CAAU,CAAC;AACzF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,gBAAgB,CAAU,CAAC;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,CAAU,CAAC;AAChG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,gBAAgB,EAAE,eAAe,CAAU,CAAC;AAkB5F,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,GAAW,EAAE,IAAY,EAAU,EAAE;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAK,CAAY,GAAG,CAAC,IAAK,CAAY,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;IAC3G,OAAO,CAAW,CAAC;AACrB,CAAC,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,IAAY,EAAU,EAAE;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;IAChH,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,IAAY,EAAU,EAAE;IAC/C,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC;IAAC,OAAO,CAAC,CAAC;AAC1G,CAAC,CAAC;AACF,MAAM,KAAK,GAAG,CAA8B,CAAU,EAAE,MAAS,EAAE,IAAY,EAAa,EAAE;IAC5F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IAAC,OAAO,CAAc,CAAC;AAC5F,CAAC,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,SAAkB,EAAE,OAAgB;IACxE,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAAC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACrG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrG,OAAO,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,SAAiB;IACpD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACxG,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,MAAM,CAAC,WAAW,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC3H,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC5H,OAAO;QACL,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,SAAS;QACpG,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,WAAW;QAC3F,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC;QACxF,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC;QAC/G,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,eAAe,CAAC;QACxE,QAAQ,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KACzO,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,GAA8B,CAAC;IAC5G,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAChF,IAAI,aAAa,GAAG,kCAAkC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,uBAAuB;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3G,MAAM,CAAC,GAAyB;QAC9B,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,cAAc,CAAC;QAC9F,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,kBAAkB,EAAE,eAAe,CAAC;QACxE,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,mBAAmB,EAAE,eAAe,CAAC;QACzE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC;QACvD,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QAC/G,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;KACzD,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,CAAS,IAAY,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAC7F,SAAS,IAAI,CAAC,CAAkB,IAA6B,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;AACnU,MAAM,UAAU,eAAe,CAAC,UAAgC;IAC9D,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACrL,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,QAAQ,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,YAAY,IAAI,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,UAAU,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;IACtL,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAAC,OAAO,MAAM,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAA0B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,OAA8F,EAAE;IACzK,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5D,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9E,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,UAAU,CAAC,CAAC,CAAC;IACjH,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,CAAC,eAAe,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,CAAC,CAAC;IAC/H,IAAI,cAAc,IAAI,aAAa;QAAE,OAAO,OAAO,CAAC;IACpD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,QAAgB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,GAAG,OAAO;IAC1H,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,YAAY,GAAG,IAAI,CAAC;QAAC,CAAC;QAC3E,OAAO,KAAK,EAAE,CAAC;YACb,mBAAmB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,OAAO,EAAE,6BAA6B,EAAE,QAAQ,EAAE,qCAAqC,EAAE,MAAM,EAAE,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,wEAAwE,EAAE,CAAC,CAAC;QACjW,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IACxB,MAAM,SAAS,GAAc,CAAC,YAAY,IAAI,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC/I,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,SAAS;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;YAC9B,MAAM,SAAS,GAAG,CAAC,EAAE,aAAa,IAAI,GAAG,CAAC;YAC1C,MAAM,YAAY,GAAG,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,cAAc,EAAE,OAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,SAAS,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAyB,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACxQ,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;YAC7J,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACxS,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,OAAO,wBAAwB;IACN;IAAmC;IAAhE,YAA6B,QAAgB,EAAmB,SAAiB;QAApD,aAAQ,GAAR,QAAQ,CAAQ;QAAmB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IACrF,KAAK,CAAC,KAA8C;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,IAAI,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;QAAC,IAAI,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC;QAC5F,IAAI,QAAQ,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;YAAC,GAAG,GAAG,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAAC,CAAC;QAC3I,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC1C,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAAC,GAAG,GAAG,CAAC,CAAC;QAAC,CAAC;QACvG,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC/K,IAAI,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAChC,IAAI,MAAM,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAsB,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;gBAClE,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;gBAAC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;gBAC3F,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,uBAAuB;oBAAE,MAAM;gBAChE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;gBAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC;YACzC,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,kBAAkB,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACnK,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;QACnI,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,UAAU,CAAC;IACnH,CAAC;IACD,IAAI;QACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,CAAC;YAAC,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACtF,OAAO,KAAK,EAAE,CAAC;YACb,mBAAmB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,OAAO,EAAE,mCAAmC,EAAE,QAAQ,EAAE,0BAA0B,EAAE,MAAM,EAAE,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAC,CAAC;YACjV,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.955",
+  "version": "1.3.957",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/scripts/generate-spec-contract.mjs

@@ -0,0 +1,136 @@
+#!/usr/bin/env node
+/**
+ * Generate a spec's IMPLEMENTATION CONTRACT — the normative sections only,
+ * with the review history stripped out.
+ *
+ * Why this exists (outbound-gate-advisory-override rounds 22/23/24): a spec that
+ * records its own review honestly accumulates change logs describing designs that
+ * were REVERSED. Both external reviewers independently named the same risk — an
+ * implementer cargo-culting a retired term out of a change log — and the same
+ * fix: publish the contract separately from the history.
+ *
+ * The rule is deliberately dumb and mechanical: everything up to the first
+ * history heading is the contract; everything from there on is history. A
+ * generator that had to understand the document would drift like the document.
+ *
+ * Usage:
+ *   node scripts/generate-spec-contract.mjs --spec docs/specs/<slug>.md
+ *   node scripts/generate-spec-contract.mjs --spec <path> --check   # CI: fail if stale
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+
+/** A heading that begins the review-history half. Matched case-insensitively. */
+const HISTORY_HEADING_RE = /^##\s+(?:\d+\.\s+)?(?:Round-\d+\b[^\n]*?(?:change log|hand-check|consistency sweep)|Appendix\b)/i;
+
+/** Headings that are contract even though they sort after a history heading. */
+const ALWAYS_CONTRACT_RE = /^##\s+(?:\d+\.\s+)?(?:Decision points touched|Open questions|Frontloaded Decisions|Dependencies|Honest limits|Multi-machine posture|What this does not do)/i;
+
+/**
+ * Inline review annotations inside NORMATIVE prose — "(round-12, codex — ...)",
+ * "*(Round-25, codex: ...)*". They are provenance, not contract. Both external
+ * reviewers named them as the reason §§0-11 still read as history (rounds 24/25).
+ * Stripped from the generated contract; untouched in the source spec, where they
+ * are the record of why a decision is what it is.
+ *
+ * Deliberately conservative: only fully-delimited groups are removed, so a
+ * malformed annotation is left visible rather than silently eating prose.
+ */
+const INLINE_ANNOTATION_RES = [
+  // *( Round-N ... )* — a complete italic aside
+  /\*\((?:round|rounds)[- ]\d+[^()*]*\)\*/gi,
+  // ( round-N, reviewer — ... ) — a complete parenthetical with no nesting
+  /\s*\((?:round|rounds)[- ]\d+[^()]*\)/gi,
+  // — round-N, codex …  (an em-dash aside running to the end of a sentence)
+  /\s+—\s+(?:round|rounds)[- ]\d+,[^.;]*(?=[.;])/gi,
+];
+
+export function stripInlineAnnotations(text) {
+  let out = text;
+  for (const re of INLINE_ANNOTATION_RES) out = out.replace(re, '');
+  // Collapse the double spaces a removal can leave mid-sentence.
+  return out.replace(/[ \t]{2,}/g, ' ').replace(/ +([.,;:])/g, '$1');
+}
+
+export function splitContract(markdown) {
+  const lines = markdown.split('\n');
+  const kept = [];
+  let inHistory = false;
+  let droppedSections = 0;
+  for (const line of lines) {
+    if (/^##\s/.test(line)) {
+      if (HISTORY_HEADING_RE.test(line) && !ALWAYS_CONTRACT_RE.test(line)) {
+        if (!inHistory) inHistory = true;
+        droppedSections++;
+        continue;
+      }
+      // A non-history H2 ends a history run (sections are not strictly ordered).
+      inHistory = false;
+    }
+    if (!inHistory) kept.push(line);
+  }
+  const body = stripInlineAnnotations(kept.join('\n')).replace(/\n{4,}/g, '\n\n\n');
+  return { contract: body, droppedSections };
+}
+
+/** The banner that makes the generated file unmistakable and un-editable-by-hand. */
+function banner(specRel) {
+  return [
+    '<!-- GENERATED FILE — DO NOT EDIT.',
+    `     Source: ${specRel}`,
+    '     Regenerate: node scripts/generate-spec-contract.mjs --spec ' + specRel,
+    '     This is the IMPLEMENTATION CONTRACT: the normative design only.',
+    '     Review history (change logs, retired designs, reversed decisions) is',
+    '     deliberately absent — read the source spec for how the design got here.',
+    '-->',
+    '',
+  ].join('\n');
+}
+
+function main() {
+  const args = process.argv.slice(2);
+  const specIdx = args.indexOf('--spec');
+  if (specIdx === -1 || !args[specIdx + 1]) {
+    console.error('usage: generate-spec-contract.mjs --spec <path> [--check]');
+    process.exit(2);
+  }
+  const specPath = path.resolve(args[specIdx + 1]);
+  const check = args.includes('--check');
+  const specRel = path.relative(process.cwd(), specPath);
+
+  const markdown = fs.readFileSync(specPath, 'utf8');
+  const { contract, droppedSections } = splitContract(markdown);
+  const output = banner(specRel) + contract;
+
+  const slug = path.basename(specPath, '.md');
+  const outPath = path.join(path.dirname(specPath), 'generated', `${slug}.contract.md`);
+
+  if (check) {
+    if (!fs.existsSync(outPath)) {
+      console.error(`STALE: ${path.relative(process.cwd(), outPath)} does not exist. Run without --check.`);
+      process.exit(1);
+    }
+    const existing = fs.readFileSync(outPath, 'utf8');
+    if (existing !== output) {
+      console.error(
+        `STALE: ${path.relative(process.cwd(), outPath)} does not match ${specRel}.\n` +
+          'The contract is generated — regenerate it rather than editing it.',
+      );
+      process.exit(1);
+    }
+    console.log(`OK: contract is current (${droppedSections} history sections excluded).`);
+    return;
+  }
+
+  fs.mkdirSync(path.dirname(outPath), { recursive: true });
+  fs.writeFileSync(outPath, output, 'utf8');
+  const pct = Math.round((1 - output.length / markdown.length) * 100);
+  console.log(
+    `wrote ${path.relative(process.cwd(), outPath)} — ${droppedSections} history sections excluded, ${pct}% smaller.`,
+  );
+}
+
+if (import.meta.url === `file://${process.argv[1]}` || process.argv[1]?.endsWith('generate-spec-contract.mjs')) {
+  main();
+}

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-25T08:30:40.747Z",
-  "instarVersion": "1.3.955",
+  "generatedAt": "2026-07-25T09:37:20.372Z",
+  "instarVersion": "1.3.957",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {

package/upgrades/{1.3.955.md → 1.3.956.md}

@@ -5,6 +5,10 @@
 
 ## What Changed
 
+Added the dark, local-only capability-registry schema, validation funnel,
+doorway/manifest and scan-state adapters, deterministic digest serializer,
+status derivation, and atomic self-projection writer.
+
 The outbound tone gate's representation rules (B1–B14, B20–B21) now return an
 overridable **nudge** instead of a terminal block: the message comes back to the
 agent with the rule, a `decisionRef`, and both ways forward. The agent either
@@ -25,6 +29,9 @@ says so (`advisoryUnavailable`) rather than loosening for nothing.
 
 ## What to Tell Your User
 
+This increment is intentionally unmounted: no route, peer traffic, mesh verb,
+heartbeat emission, or routing consumer was added.
+
 ⚗️ **Experimental, and off unless you turn it on.** Most outbound checks become
 suggestions your agent can overrule — provided it writes down why, which is the
 whole point: those written reasons are what finally make it possible to measure
@@ -41,6 +48,10 @@ looser behaviour without the accountability that justifies it.
 
 ## Summary of New Capabilities
 
+- Bounded v6 projection envelope with closed enums and width clamps.
+- Real local doorway manifest and scan-state source adapters.
+- Deterministic fact digest, conflict-aware status matrix, and atomic writer.
+
 - Representation rules resolve as overridable nudges carrying a `decisionRef`,
   with the override reason required and recorded.
 - Compliance is credited **server-side** when a revised message follows a nudge —

package/upgrades/1.3.957.md

@@ -0,0 +1,54 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Added `scripts/generate-spec-contract.mjs` — a build-time generator that emits
+`docs/specs/generated/<slug>.contract.md` from a spec: the normative sections
+only, with review-history sections and inline round-annotations stripped.
+
+**Why.** A spec that honestly records its review accumulates change logs
+describing designs that were later *reversed*. On
+`outbound-gate-advisory-override` (33 review rounds), both external reviewers —
+`codex-cli:gpt-5.5` and `gemini-cli:gemini-3.1-pro-preview` — independently
+identified the same risk and proposed the same fix: an implementer reading the
+document top-to-bottom can follow a retired design, so publish the contract
+separately from the history.
+
+`--check` fails the build when the committed contract does not match a fresh
+generation, so the history cannot drift back into the contract over time.
+
+The transform is deliberately mechanical — heading shapes mark history,
+everything else is contract. A generator that had to *understand* the document
+would drift out of step with it exactly as the document drifted out of step with
+itself.
+
+No runtime surface: no `src/` change, nothing installed to agent homes, no hook,
+job or template references it. Nothing at runtime reads a spec.
+
+## What to Tell Your User
+
+None — internal change (no user-facing surface).
+
+## Summary of New Capabilities
+
+None — internal change (no user-facing surface).
+
+## Evidence
+
+- Generated against the real 2,700-line spec: **36 history sections excluded,
+  37% smaller output**.
+- `--check` verified in both directions: exits 0 on a current contract, exits 1
+  with a regenerate message on a stale one.
+- A regex leak was found and fixed during verification — `## 24. Round-11
+  external change log` was initially retained, because the heading text between
+  `Round-11` and `change log` was not matched. Caught by inspecting the generated
+  headings rather than trusting the run.
+- Determinism confirmed by construction: no timestamps, no randomness, no
+  environment reads beyond the input path — which is what makes `--check` usable
+  in CI at all.
+- Side-effects review: `upgrades/side-effects/spec-contract-generator.md`
+  (Tier 1; no decision point, no blocking authority, rollback is deleting two
+  files).

package/upgrades/side-effects/capability-registry-increment-0.md

@@ -0,0 +1,7 @@
+# Side-effects review: capability registry Increment 0
+
+- Adds only a reusable core schema/reader/writer and unit fixtures.
+- The durable file is unreferenced and local-only; no route or mesh surface is mounted.
+- Remote ingest, heartbeat, freshness confirmation, and pool projection remain deferred.
+- Review follow-up aligns scanStampSecs/scanState with the canonical doorway reader and keeps the writer local-only.
+- Degradation reporting now makes corrupt local state explicit and recoverable.

package/upgrades/side-effects/spec-contract-generator.md

@@ -0,0 +1,126 @@
+# Side-effects review — spec contract generator
+
+**Change:** adds `scripts/generate-spec-contract.mjs`, a build-time generator that
+produces `docs/specs/generated/<slug>.contract.md` from a spec: the normative
+sections only, with review history and inline round-annotations stripped.
+
+**Tier:** 1 (declared). New standalone dev-tooling script; no runtime surface, no
+`src/` change, no decision point. Signal-only in the strongest sense — it emits a
+derived document and can refuse a stale check; it gates no agent behavior.
+
+**Why it exists:** on the `outbound-gate-advisory-override` spec, both external
+reviewers (codex-cli, gemini-cli) independently identified the same risk across
+several rounds — a spec that honestly records 33 rounds of review accumulates
+change logs describing designs that were later **reversed**, and an implementer
+reading top-to-bottom can follow a retired design. Both proposed the same fix:
+publish the contract separately from the history.
+
+---
+
+## 1. Over-block — what legitimate inputs does this reject that it shouldn't?
+
+The generator's only refusal is `--check` failing when the committed contract does
+not byte-match a fresh generation. That is the intended behavior (CI staleness
+gate), and it is refusable-by-regeneration, not by argument.
+
+**Real over-block risk identified:** the history-heading regex could classify a
+*normative* section as history if someone titles one `## Round-trip validation` or
+similar. Mitigated by requiring both a `Round-N` prefix **and** one of
+`change log` / `hand-check` / `consistency sweep`, plus an `ALWAYS_CONTRACT_RE`
+allowlist for the known normative section names. A false positive drops a section
+from the generated contract — visible immediately as a missing section, not
+silent.
+
+## 2. Under-block — what does it still miss?
+
+- **Narrative history inside normative prose.** The generator strips history
+  *sections* and *inline annotations*; it cannot strip a paragraph of normative
+  prose that happens to narrate how a decision evolved. Those remain in the
+  contract. Partially addressed by the spec's own §0.2 "current design overview";
+  fully addressing it would require judgment the generator deliberately does not
+  have.
+- **It does not verify the contract is CORRECT** — only that it is current. A
+  spec that is internally contradictory generates a contract that is equally
+  contradictory. The separate spec lint (required by the outbound spec) is what
+  addresses that; this is not it.
+
+## 3. Level-of-abstraction fit
+
+Correct layer: it is a build-time document transform, alongside the other
+`scripts/*.mjs` spec tooling (`write-convergence-tag.mjs`,
+`eli16-overview-check.mjs`, `publish-spec-review.mjs`). It does not belong in
+`src/` — nothing at runtime reads a spec.
+
+**Should a higher layer own it?** `/spec-converge` could invoke it automatically
+on convergence. Deliberately not wired that way in this change: the generator
+should prove itself as a standalone tool first, and auto-invocation is a change to
+the skill's contract, not to this script. Not deferred-and-forgotten — it is
+simply not part of this change's scope, and the script is useful without it.
+
+## 4. Signal vs authority compliance
+
+**Compliant, trivially.** The script holds no authority over agent behavior. Its
+one enforcement surface (`--check` exiting non-zero) is a build-time staleness
+assertion on a *derived artifact*, with a deterministic remedy (regenerate). It
+makes no judgment, consults no model, and gates no message, session, or action.
+
+## 5. Interactions
+
+- **Shadows nothing.** No existing script generates or validates a spec contract.
+- **Shadowed by nothing.** It reads a spec and writes a derived file under
+  `docs/specs/generated/`, a path nothing else writes.
+- **No double-fire, no race.** Single-shot CLI; no daemon, no watcher, no
+  scheduling.
+- **Adjacent tooling unaffected:** `write-convergence-tag.mjs` and
+  `eli16-overview-check.mjs` read the *source* spec; this writes only the
+  generated copy. `hashSpecReviewableBody` (used for cross-model delta-gating)
+  also reads the source, so generated files never affect review gating.
+
+## 6. External surfaces
+
+- **Other agents / users:** none. Dev tooling in the instar repo; not installed to
+  agent homes, not referenced by any hook, job, or template.
+- **Timing / runtime conditions:** none — pure file in, file out.
+- **New file paths introduced:** `docs/specs/generated/`. Additive; no existing
+  path changes meaning.
+
+## 7. Multi-machine posture (Cross-Machine Coherence)
+
+**Machine-local BY DESIGN, and trivially so:** the script runs in a developer's
+checkout and writes a file into that checkout, which is then committed and
+distributed by git like any other source file. There is no runtime state, no
+per-machine store, no notice, and no generated URL. Running it on two machines
+against the same spec produces byte-identical output (the transform is pure and
+deterministic — no timestamps, no randomness, no environment reads beyond the
+input path).
+
+That determinism is what makes the `--check` mode usable in CI at all, and it is
+asserted by the mode's existence: if the transform were machine-sensitive, CI
+would fail against a contract generated on a developer's machine.
+
+## 8. Rollback cost
+
+**Near zero.** Delete the script and the generated directory; nothing depends on
+either. No release, no migration, no agent-state repair. If the `--check` mode
+turns out to be a nuisance in CI, it can be dropped independently of the
+generator (the generator is useful without the check; the check is not useful
+without the generator).
+
+---
+
+## Verification performed
+
+- Generated against the real 2,700-line spec: 36 history sections excluded, 37%
+  smaller output.
+- `--check` verified in both directions: passes on a current contract, fails with
+  a clear message on a stale one.
+- Regex leak found and fixed during verification (`## 24. Round-11 external
+  change log` was initially retained because the heading text between `Round-11`
+  and `change log` was not matched) — caught by inspecting the generated
+  headings rather than trusting the run.
+
+## Second pass
+
+**Not required.** The change touches no block/allow decision, no session
+lifecycle, no coherence gate, and nothing named sentinel/guard/gate/watchdog. It
+is a standalone document transform.