looply-cli 0.0.0-stage → 0.2.0

package/dist/session-observe-runtime.js

@@ -0,0 +1,317 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_WATCH_OPTIONS = void 0;
+exports.snapshot = snapshot;
+exports.diffSnapshots = diffSnapshots;
+exports.watchSession = watchSession;
+exports.reportObservation = reportObservation;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const core_1 = require("@looply/core");
+exports.DEFAULT_WATCH_OPTIONS = {
+    tickMs: 1_000,
+    maxEntries: 20_000,
+    maxDepth: 24,
+    maxHashBytes: 8 * 1024 * 1024,
+};
+/** Repository-relative, forward slashes, or null when it escapes the root. */
+function relativeTo(root, abs) {
+    const r = (0, node_path_1.relative)((0, node_path_1.resolve)(root), abs);
+    if (r === '')
+        return null;
+    if (r.startsWith('..'))
+        return null;
+    return r.split(node_path_1.sep).join('/');
+}
+/**
+ * One scope entry, walked.
+ *
+ * ⚠️ THE BUDGET IS SHARED ACROSS ENTRIES, not per entry. A per-entry budget
+ * would let a grant with ten scope entries walk ten times the ceiling, which is
+ * the ceiling not existing.
+ */
+function walkInto(root, prefix, opt, budget, out) {
+    const start = (0, node_path_1.resolve)(root, prefix);
+    const stack = [{ at: start, depth: 0 }];
+    while (stack.length > 0) {
+        const { at, depth } = stack.pop();
+        if (budget.left <= 0) {
+            out.unreadable.push(`${prefix} (walk stopped at ${opt.maxEntries} entries — the rest was not looked at)`);
+            return;
+        }
+        budget.left -= 1;
+        let st;
+        try {
+            st = (0, node_fs_1.lstatSync)(at);
+        }
+        catch {
+            // The scope entry itself missing is a different fact from a child that
+            // vanished mid-walk: the first is a grant naming something that is not
+            // there, the second is an ordinary race. Only the first is worth a line.
+            if (at === start)
+                out.unreadable.push(`${prefix} (could not be read)`);
+            continue;
+        }
+        if (st.isSymbolicLink()) {
+            const rel = relativeTo(root, at);
+            out.links.push(rel ?? at);
+            continue;
+        }
+        if (st.isDirectory()) {
+            if (depth >= opt.maxDepth) {
+                out.unreadable.push(`${relativeTo(root, at) ?? at} (deeper than ${opt.maxDepth} — not descended)`);
+                continue;
+            }
+            let children;
+            try {
+                children = (0, node_fs_1.readdirSync)(at);
+            }
+            catch {
+                out.unreadable.push(`${relativeTo(root, at) ?? at} (could not be listed)`);
+                continue;
+            }
+            for (const c of children)
+                stack.push({ at: (0, node_path_1.join)(at, c), depth: depth + 1 });
+            continue;
+        }
+        const rel = relativeTo(root, at);
+        if (rel === null) {
+            // Cannot happen through a normal walk from inside the root; recorded
+            // rather than dropped, because if it ever does the record must say so.
+            out.unreadable.push(`${at} (outside ${root} — not recorded)`);
+            continue;
+        }
+        out.files.set(rel, `${st.size}:${st.mtimeMs}:${contentStamp(at, st.size, budget, rel, out)}`);
+    }
+}
+/**
+ * The part of a stamp that actually detects an edit.
+ *
+ * ⚠️ A FILE PAST THE BUDGET IS NOT SKIPPED — it is stamped coarsely and said
+ * out loud. Skipping it would drop it from the snapshot entirely, which reads
+ * as "removed" on the next walk and then "appeared" on the one after: two
+ * fabricated events where there was no change at all.
+ */
+function contentStamp(abs, size, budget, rel, out) {
+    if (size > budget.hashBytesLeft) {
+        out.unreadable.push(`${rel} (tracked by size and timestamp only — the hash budget ran out, and a same-size edit inside one filesystem tick would not be seen)`);
+        return 'coarse';
+    }
+    try {
+        const h = (0, node_crypto_1.createHash)('sha1').update((0, node_fs_1.readFileSync)(abs)).digest('hex').slice(0, 16);
+        budget.hashBytesLeft -= size;
+        return h;
+    }
+    catch {
+        out.unreadable.push(`${rel} (could not be read to hash — tracked by size and timestamp only)`);
+        return 'coarse';
+    }
+}
+/** A snapshot of everything the grant's scope covers, right now. */
+function snapshot(root, scope, opt) {
+    const out = { files: new Map(), unreadable: [], links: [] };
+    const budget = { left: opt.maxEntries, hashBytesLeft: opt.maxHashBytes };
+    for (const prefix of scope)
+        walkInto(root, prefix, opt, budget, out);
+    return out;
+}
+/**
+ * What changed between two snapshots, as candidate events.
+ *
+ * ⚠️ `at` IS PASSED IN AND IS THE OBSERVER'S CLOCK. Using each file's mtime
+ * would hand a session the ability to place its own events before `coversFrom`
+ * and out of the record — it can write a file, so it can write a timestamp.
+ */
+function diffSnapshots(before, after, at) {
+    const events = [];
+    for (const [path, stamp] of after) {
+        const was = before.get(path);
+        if (was === undefined)
+            events.push({ at, kind: 'wrote', path, detail: 'appeared' });
+        else if (was !== stamp)
+            events.push({ at, kind: 'wrote', path, detail: 'changed' });
+    }
+    for (const path of before.keys()) {
+        if (!after.has(path))
+            events.push({ at, kind: 'wrote', path, detail: 'removed' });
+    }
+    return events.sort((a, b) => (a.path ?? '').localeCompare(b.path ?? ''));
+}
+/**
+ * Watch a session, inside every bound the grant sets, and return the record.
+ *
+ * 🔴 IT RETURNS AN `ObservationRecord` WHATEVER HAPPENS, including when it could
+ * not start. `attached: false` is the honest answer to "the baseline walk
+ * failed", and the fold turns that into `nothing-established` rather than into
+ * an empty, reassuring list.
+ */
+async function watchSession(window, opt, deps) {
+    const events = [];
+    const unreadable = new Set();
+    let predates = 0;
+    let outOfScope = 0;
+    let unjudgeable = 0;
+    /**
+     * 🔴 THE BASELINE. Its contents become the comparison and NEVER events. If
+     * this line ever grows an "and emit them too", every edit made before anybody
+     * asked is certified by the resulting record.
+     */
+    let previous;
+    try {
+        const base = snapshot(opt.root, window.scope, opt);
+        previous = base.files;
+        for (const u of base.unreadable)
+            unreadable.add(u);
+    }
+    catch (e) {
+        return {
+            sessionId: window.sessionId,
+            coversFrom: window.coversFrom,
+            coversTo: null,
+            events: [],
+            predates: 0,
+            outOfScope: 0,
+            unjudgeable: 0,
+            unreadable: [`${opt.root} (the baseline walk failed: ${e.message})`],
+            stop: null,
+            attached: false,
+        };
+    }
+    let lastRevision = deps.revision();
+    let stop = null;
+    let coversTo = null;
+    for (;;) {
+        const at = deps.now();
+        /**
+         * ⚠️ ASKED BEFORE WALKING, NOT AFTER. A tick that walked first would keep
+         * recording for one whole tick after a person revoked the grant — small in
+         * seconds, and exactly the window in which somebody revoking in a hurry
+         * cares.
+         */
+        let authorized;
+        try {
+            authorized = await deps.stillAuthorized();
+        }
+        catch {
+            /**
+             * 🔴 A SERVER THAT CANNOT BE ASKED IS NOT A GRANT THAT STILL HOLDS. The
+             * watch stops, and it stops as `revoked` rather than as some softer word,
+             * because continuing to observe on the strength of an unanswered question
+             * is observing without permission.
+             */
+            unreadable.add('the server could not be asked whether the grant still holds');
+            authorized = false;
+        }
+        stop = (0, core_1.stopFor)(window, { stillAuthorized: authorized, liveness: deps.liveness(), recorded: events.length, askedToStop: deps.askedToStop() }, at);
+        if (stop !== null) {
+            coversTo = at;
+            break;
+        }
+        let walked;
+        try {
+            walked = snapshot(opt.root, window.scope, opt);
+        }
+        catch (e) {
+            unreadable.add(`a walk of ${opt.root} threw (${e.message})`);
+            await deps.sleep(opt.tickMs);
+            continue;
+        }
+        for (const u of walked.unreadable)
+            unreadable.add(u);
+        const candidates = diffSnapshots(previous, walked.files, at);
+        previous = walked.files;
+        const revisionNow = deps.revision();
+        if (revisionNow !== null && revisionNow !== lastRevision) {
+            candidates.push({ at, kind: 'revision', path: '.', detail: `${lastRevision ?? 'unknown'} -> ${revisionNow}` });
+            lastRevision = revisionNow;
+        }
+        if (deps.liveness() === 'gone') {
+            candidates.push({ at, kind: 'exited', detail: `session ${window.sessionId} is gone` });
+        }
+        for (const candidate of candidates) {
+            /**
+             * 🔴 EVERY CANDIDATE GOES THROUGH THE FOLD. The runtime does not decide
+             * what belongs; it produces facts and the fold rules on them, which is
+             * why the rules are testable without a filesystem and why this loop
+             * cannot quietly acquire an exception.
+             */
+            const ruling = (0, core_1.ruleOnEvent)(window, candidate);
+            switch (ruling.kind) {
+                case 'record':
+                    if (events.length < window.cap)
+                        events.push(candidate);
+                    break;
+                case 'predates':
+                    predates += 1;
+                    break;
+                case 'out-of-scope':
+                    outOfScope += 1;
+                    break;
+                case 'unjudgeable':
+                    unjudgeable += 1;
+                    break;
+                case 'after-the-end':
+                    /**
+                     * ⚠️ UNREACHABLE FROM THIS LOOP, AND SAID SO RATHER THAN DRESSED UP.
+                     * Every candidate here carries the same `at` that `stopFor` was just
+                     * asked about, so a tick past the expiry has already broken out
+                     * above. The branch exists because the fold is shared and another
+                     * caller may feed it events it did not stamp itself — and because a
+                     * switch that silently fell through would be the place a real one
+                     * hid later.
+                     */
+                    break;
+            }
+        }
+        /**
+         * 🔴 ASKED AGAIN, WITH THE NEW COUNT, BEFORE SLEEPING. A watch that filled
+         * up mid-tick and then slept would go on discarding events for a full tick
+         * while `events.length < cap` silently refused them — the "dropping events
+         * quietly" the cap exists to prevent, one layer down. Re-asking the FOLD
+         * rather than constructing a `full` stop here keeps the decision in one
+         * place.
+         */
+        stop = (0, core_1.stopFor)(window, { stillAuthorized: authorized, liveness: deps.liveness(), recorded: events.length, askedToStop: deps.askedToStop() }, at);
+        if (stop !== null) {
+            coversTo = at;
+            break;
+        }
+        await deps.sleep(opt.tickMs);
+    }
+    return {
+        sessionId: window.sessionId,
+        coversFrom: window.coversFrom,
+        coversTo,
+        events,
+        predates,
+        outOfScope,
+        unjudgeable,
+        unreadable: [...unreadable],
+        stop,
+        attached: true,
+    };
+}
+/**
+ * The lines a person reads after a watch.
+ *
+ * ⚠️ THE COMPLETENESS IS ON ITS OWN LINE, ALWAYS, even when it is `complete`.
+ * A reader who has to infer from the absence of a warning that a record is
+ * whole is a reader who will one day infer it from the absence of a bug.
+ */
+function reportObservation(record, out) {
+    const c = (0, core_1.observationCompleteness)(record);
+    out(`watch: ${record.sessionId} — ${record.events.length} event(s) recorded`);
+    out(`  covers ${record.coversFrom} .. ${record.coversTo ?? '(never closed)'}`);
+    out(`  ${c.kind}: ${c.because}`);
+    if (record.predates > 0) {
+        out(`  ${record.predates} event(s) predate the watch — NOT certified by it`);
+    }
+    if (record.outOfScope > 0)
+        out(`  ${record.outOfScope} outside the granted scope, not recorded`);
+    if (record.unjudgeable > 0)
+        out(`  ${record.unjudgeable} could not be placed against the scope`);
+    for (const u of record.unreadable)
+        out(`  blind: ${u}`);
+}
+//# sourceMappingURL=session-observe-runtime.js.map

package/dist/session-observe-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-observe-runtime.js","sourceRoot":"","sources":["../src/session-observe-runtime.ts"],"names":[],"mappings":";;;AA0NA,4BAKC;AASD,sCAWC;AAUD,oCA2JC;AASD,8CAWC;AA5aD,6CAAyC;AACzC,qCAA+D;AAC/D,yCAAyD;AACzD,uCAQsB;AAwFT,QAAA,qBAAqB,GAA+B;IAC/D,MAAM,EAAE,KAAK;IACb,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;CAC9B,CAAC;AAaF,8EAA8E;AAC9E,SAAS,UAAU,CAAC,IAAY,EAAE,GAAW;IAC3C,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE;QAAG,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,CAAC,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CACf,IAAY,EACZ,MAAc,EACd,GAAiB,EACjB,MAA+C,EAC/C,GAAe;IAEf,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAyC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAE9E,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,EAAmC,CAAC;QACnE,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,qBAAqB,GAAG,CAAC,UAAU,wCAAwC,CAAC,CAAC;YAC1G,OAAO;QACT,CAAC;QACD,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QAEjB,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,EAAE,KAAK,KAAK;gBAAE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,sBAAsB,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QAED,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,IAAI,KAAK,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC1B,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,QAAQ,mBAAmB,CAAC,CAAC;gBACnG,SAAS;YACX,CAAC;YACD,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAA,qBAAW,EAAC,EAAE,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;gBAC3E,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAA,gBAAI,EAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,qEAAqE;YACrE,uEAAuE;YACvE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,IAAI,kBAAkB,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,IAAI,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,IAAY,EAAE,MAAiC,EAAE,GAAW,EAAE,GAAe;IAC9G,IAAI,IAAI,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;QAChC,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,GAAG,oIAAoI,CAC3I,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAA,wBAAU,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAA,sBAAY,EAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,mEAAmE,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAgB,QAAQ,CAAC,IAAY,EAAE,KAAwB,EAAE,GAAiB;IAChF,MAAM,GAAG,GAAe,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxE,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;IACzE,KAAK,MAAM,MAAM,IAAI,KAAK;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,MAAgB,EAAE,KAAe,EAAE,EAAU;IACzE,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;aAC/E,IAAI,GAAG,KAAK,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,YAAY,CAChC,MAAmB,EACnB,GAAiB,EACjB,IAAwB;IAExB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB;;;;OAIG;IACH,IAAI,QAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,CAAC;YACb,WAAW,EAAE,CAAC;YACd,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,+BAAgC,CAAW,CAAC,OAAO,GAAG,CAAC;YAC/E,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IACnC,IAAI,IAAI,GAAqB,IAAI,CAAC;IAClC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,SAAS,CAAC;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEtB;;;;;WAKG;QACH,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP;;;;;eAKG;YACH,UAAU,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;YAC9E,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;QAED,IAAI,GAAG,IAAA,cAAO,EAAC,MAAM,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjJ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,QAAQ,GAAG,EAAE,CAAC;YACd,MAAM;QACR,CAAC;QAED,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,UAAU,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,WAAY,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAErD,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7D,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;QAExB,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACzD,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,YAAY,IAAI,SAAS,OAAO,WAAW,EAAE,EAAE,CAAC,CAAC;YAC/G,YAAY,GAAG,WAAW,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,MAAM,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC;;;;;eAKG;YACH,MAAM,MAAM,GAAG,IAAA,kBAAW,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC9C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,QAAQ;oBACX,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG;wBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACvD,MAAM;gBACR,KAAK,UAAU;oBACb,QAAQ,IAAI,CAAC,CAAC;oBACd,MAAM;gBACR,KAAK,cAAc;oBACjB,UAAU,IAAI,CAAC,CAAC;oBAChB,MAAM;gBACR,KAAK,aAAa;oBAChB,WAAW,IAAI,CAAC,CAAC;oBACjB,MAAM;gBACR,KAAK,eAAe;oBAClB;;;;;;;;uBAQG;oBACH,MAAM;YACV,CAAC;QACH,CAAC;QAED;;;;;;;WAOG;QACH,IAAI,GAAG,IAAA,cAAO,EAAC,MAAM,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjJ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,QAAQ,GAAG,EAAE,CAAC;YACd,MAAM;QACR,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,UAAU;QACV,WAAW;QACX,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC;QAC3B,IAAI;QACJ,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,MAAyB,EAAE,GAA2B;IACtF,MAAM,CAAC,GAAG,IAAA,8BAAuB,EAAC,MAAM,CAAC,CAAC;IAC1C,GAAG,CAAC,UAAU,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,oBAAoB,CAAC,CAAC;IAC9E,GAAG,CAAC,YAAY,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,QAAQ,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,MAAM,CAAC,QAAQ,mDAAmD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC;QAAE,GAAG,CAAC,KAAK,MAAM,CAAC,UAAU,0CAA0C,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC;QAAE,GAAG,CAAC,KAAK,MAAM,CAAC,WAAW,wCAAwC,CAAC,CAAC;IACjG,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC"}

package/dist/session-store.d.ts

@@ -0,0 +1,98 @@
+import type { SessionAdoptionVerdict, SessionClaim } from '@looply/core';
+import type { LedgerFs } from './ledger-store';
+import { AppendOnlyStore } from './record-store';
+/**
+ * THE SESSION HANDSHAKE RECORDS — `.looply/state/sessions.jsonl`.
+ *
+ * 🔴 FOUR KINDS OF WRITE-ONCE LINE, because every one of them is a thing that
+ * HAPPENED and not a field to be updated. The same reasoning as
+ * `compatible-sets.ts`: a store whose records supersede each other can say what
+ * is currently believed but not what occurred, and for adoption what occurred
+ * is the entire evidentiary record — *when* a person authorized control, *when*
+ * the session acknowledged, *what* was measured at the moment of each decision.
+ *
+ *   offered     a session presented a claim through the adapter. One per
+ *               handshake, because a session may present again after fixing
+ *               whatever got it refused.
+ *   decided     what looply answered that handshake. One per handshake.
+ *   authorized  a PERSON authorized control of this session. One per session.
+ *               🔴 NO LOCAL COMMAND WRITES THIS, and that is deliberate.
+ *               `approval-architecture.spec.ts` holds the rule: the server is
+ *               the authority, and a file this machine could write saying
+ *               somebody approved would be a second answer nobody gave. The
+ *               kind exists because it is the shape a server-issued grant will
+ *               take; until that path exists, a session tops out at
+ *               observe-only.
+ *   acked       the SESSION acknowledged the control handshake. One per session.
+ *
+ * ⚠️ THE LAST TWO ARE SEPARATE LINES ON PURPOSE. Control needs both halves and
+ * they arrive from different parties at different moments; collapsing them into
+ * one "controlled: true" would destroy the only evidence that the session
+ * cooperated rather than was seized.
+ */
+export type SessionRecord = {
+    readonly id: string;
+    readonly kind: 'offered';
+    readonly sessionId: string;
+    readonly at: string;
+    readonly claim: SessionClaim;
+} | {
+    readonly id: string;
+    readonly kind: 'decided';
+    readonly sessionId: string;
+    readonly at: string;
+    readonly handshakeId: string;
+    readonly verdict: SessionAdoptionVerdict;
+} | {
+    readonly id: string;
+    readonly kind: 'authorized';
+    readonly sessionId: string;
+    readonly at: string;
+    readonly by: string;
+} | {
+    readonly id: string;
+    readonly kind: 'acked';
+    readonly sessionId: string;
+    readonly at: string;
+};
+export declare const decidedId: (handshakeId: string) => string;
+export declare const authorizedId: (sessionId: string) => string;
+export declare const ackedId: (sessionId: string) => string;
+export declare class SessionStore extends AppendOnlyStore<SessionRecord> {
+    constructor(stateDir: string, fs: LedgerFs);
+}
+export declare function isSessionRecord(v: unknown): v is SessionRecord;
+/** What is true about one session, folded out of its lines. */
+export interface SessionStanding {
+    readonly sessionId: string;
+    /** The most recent decision, or null if it has only ever offered. */
+    readonly verdict: SessionAdoptionVerdict | null;
+    readonly decidedAt: string | null;
+    readonly authorized: boolean;
+    readonly acked: boolean;
+    readonly handshakes: number;
+}
+/**
+ * ⚠️ THE LATEST DECISION WINS, AND THE EARLIER ONES STAY ON RECORD. A session
+ * refused at 10:00 for being on the wrong sha and observed at 10:05 after
+ * moving is one session with two handshakes, and the refusal is not erased by
+ * the acceptance — it is why anybody would trust the acceptance.
+ */
+export declare function standingOf(records: readonly SessionRecord[], sessionId: string): SessionStanding | null;
+/**
+ * The most recent claim a session presented, or null if it never has.
+ *
+ * ⚠️ THE LATEST ONE, NOT THE FIRST. A session that re-presented after moving
+ * to a new revision has a newer scope and a newer workspace, and a watcher
+ * bounded by the FIRST claim would be bounded by paths that are no longer the
+ * ones the project agreed to.
+ *
+ * 🔴 AND IT IS STILL NOT EVIDENCE. A claim is what the session ASSERTS;
+ * `sessionAdoptionVerdict` is what compared it against the tree. This is only
+ * ever read for a session whose latest verdict already accepted it — which is
+ * why the scope here is a scope the project's own configuration allowed.
+ */
+export declare function latestClaimOf(records: readonly SessionRecord[], sessionId: string): SessionClaim | null;
+/** Every session that has ever presented, newest handshake first. */
+export declare function sessionsKnown(records: readonly SessionRecord[]): string[];
+//# sourceMappingURL=session-store.d.ts.map

package/dist/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../src/session-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,MAAM,aAAa,GACrB;IACE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;CAC1C,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1H;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAErG,eAAO,MAAM,SAAS,GAAI,aAAa,MAAM,KAAG,MAAkC,CAAC;AACnF,eAAO,MAAM,YAAY,GAAI,WAAW,MAAM,KAAG,MAAmC,CAAC;AACrF,eAAO,MAAM,OAAO,GAAI,WAAW,MAAM,KAAG,MAA8B,CAAC;AAE3E,qBAAa,YAAa,SAAQ,eAAe,CAAC,aAAa,CAAC;gBAClD,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ;CAG3C;AAWD,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,aAAa,CAgB9D;AAED,+DAA+D;AAC/D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAmBvG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAWvG;AAED,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,EAAE,CAOzE"}

package/dist/session-store.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionStore = exports.ackedId = exports.authorizedId = exports.decidedId = void 0;
+exports.isSessionRecord = isSessionRecord;
+exports.standingOf = standingOf;
+exports.latestClaimOf = latestClaimOf;
+exports.sessionsKnown = sessionsKnown;
+const record_store_1 = require("./record-store");
+const decidedId = (handshakeId) => `${handshakeId}:decided`;
+exports.decidedId = decidedId;
+const authorizedId = (sessionId) => `${sessionId}:authorized`;
+exports.authorizedId = authorizedId;
+const ackedId = (sessionId) => `${sessionId}:acked`;
+exports.ackedId = ackedId;
+class SessionStore extends record_store_1.AppendOnlyStore {
+    constructor(stateDir, fs) {
+        super(stateDir, 'sessions.jsonl', isSessionRecord, fs);
+    }
+}
+exports.SessionStore = SessionStore;
+function isClaim(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const o = v;
+    const strings = ['sessionId', 'adapter', 'adapterVersion', 'repo', 'workspace', 'host', 'sourceSha', 'budgetOwner'];
+    if (!strings.every((k) => typeof o[k] === 'string'))
+        return false;
+    if (typeof o['pid'] !== 'number' || !Number.isInteger(o['pid']))
+        return false;
+    return Array.isArray(o['scope']) && o['scope'].every((s) => typeof s === 'string');
+}
+function isSessionRecord(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const o = v;
+    if (typeof o['id'] !== 'string' || typeof o['sessionId'] !== 'string' || typeof o['at'] !== 'string')
+        return false;
+    switch (o['kind']) {
+        case 'offered':
+            return isClaim(o['claim']);
+        case 'decided':
+            return typeof o['handshakeId'] === 'string' && typeof o['verdict'] === 'object' && o['verdict'] !== null;
+        case 'authorized':
+            return typeof o['by'] === 'string';
+        case 'acked':
+            return true;
+        default:
+            return false;
+    }
+}
+/**
+ * ⚠️ THE LATEST DECISION WINS, AND THE EARLIER ONES STAY ON RECORD. A session
+ * refused at 10:00 for being on the wrong sha and observed at 10:05 after
+ * moving is one session with two handshakes, and the refusal is not erased by
+ * the acceptance — it is why anybody would trust the acceptance.
+ */
+function standingOf(records, sessionId) {
+    const mine = records.filter((r) => r.sessionId === sessionId);
+    if (mine.length === 0)
+        return null;
+    let verdict = null;
+    let decidedAt = null;
+    let authorized = false;
+    let acked = false;
+    let handshakes = 0;
+    for (const r of mine) {
+        if (r.kind === 'offered')
+            handshakes += 1;
+        else if (r.kind === 'authorized')
+            authorized = true;
+        else if (r.kind === 'acked')
+            acked = true;
+        else if (r.kind === 'decided' && (decidedAt === null || r.at >= decidedAt)) {
+            verdict = r.verdict;
+            decidedAt = r.at;
+        }
+    }
+    return { sessionId, verdict, decidedAt, authorized, acked, handshakes };
+}
+/**
+ * The most recent claim a session presented, or null if it never has.
+ *
+ * ⚠️ THE LATEST ONE, NOT THE FIRST. A session that re-presented after moving
+ * to a new revision has a newer scope and a newer workspace, and a watcher
+ * bounded by the FIRST claim would be bounded by paths that are no longer the
+ * ones the project agreed to.
+ *
+ * 🔴 AND IT IS STILL NOT EVIDENCE. A claim is what the session ASSERTS;
+ * `sessionAdoptionVerdict` is what compared it against the tree. This is only
+ * ever read for a session whose latest verdict already accepted it — which is
+ * why the scope here is a scope the project's own configuration allowed.
+ */
+function latestClaimOf(records, sessionId) {
+    let claim = null;
+    let at = null;
+    for (const r of records) {
+        if (r.kind !== 'offered' || r.sessionId !== sessionId)
+            continue;
+        if (at === null || r.at >= at) {
+            claim = r.claim;
+            at = r.at;
+        }
+    }
+    return claim;
+}
+/** Every session that has ever presented, newest handshake first. */
+function sessionsKnown(records) {
+    const seen = new Map();
+    for (const r of records) {
+        const prev = seen.get(r.sessionId);
+        if (prev === undefined || r.at > prev)
+            seen.set(r.sessionId, r.at);
+    }
+    return [...seen.entries()].sort((a, b) => (a[1] < b[1] ? 1 : a[1] > b[1] ? -1 : 0)).map(([id]) => id);
+}
+//# sourceMappingURL=session-store.js.map

package/dist/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../src/session-store.ts"],"names":[],"mappings":";;;AAwEA,0CAgBC;AAmBD,gCAmBC;AAeD,sCAWC;AAGD,sCAOC;AAhKD,iDAAiD;AAmD1C,MAAM,SAAS,GAAG,CAAC,WAAmB,EAAU,EAAE,CAAC,GAAG,WAAW,UAAU,CAAC;AAAtE,QAAA,SAAS,aAA6D;AAC5E,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAU,EAAE,CAAC,GAAG,SAAS,aAAa,CAAC;AAAxE,QAAA,YAAY,gBAA4D;AAC9E,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAU,EAAE,CAAC,GAAG,SAAS,QAAQ,CAAC;AAA9D,QAAA,OAAO,WAAuD;AAE3E,MAAa,YAAa,SAAQ,8BAA8B;IAC9D,YAAY,QAAgB,EAAE,EAAY;QACxC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;CACF;AAJD,oCAIC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IACpH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED,SAAgB,eAAe,CAAC,CAAU;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnH,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7B,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;QAC3G,KAAK,YAAY;YACf,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC;QACrC,KAAK,OAAO;YACV,OAAO,IAAI,CAAC;QACd;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAaD;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,OAAiC,EAAE,SAAiB;IAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,OAAO,GAAkC,IAAI,CAAC;IAClD,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,UAAU,IAAI,CAAC,CAAC;aACrC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;YAAE,UAAU,GAAG,IAAI,CAAC;aAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,KAAK,GAAG,IAAI,CAAC;aACrC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,IAAI,SAAS,CAAC,EAAE,CAAC;YAC3E,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACpB,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,aAAa,CAAC,OAAiC,EAAE,SAAiB;IAChF,IAAI,KAAK,GAAwB,IAAI,CAAC;IACtC,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,SAAS;QAChE,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YAC9B,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YAChB,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qEAAqE;AACrE,SAAgB,aAAa,CAAC,OAAiC;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC"}