looply-cli 0.0.0-stage → 0.2.0

package/dist/sessions-cmd.js

@@ -0,0 +1,609 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXIT_UNMEASURABLE = exports.EXIT_REFUSED = exports.EXIT_USAGE = exports.MAX_DIRECT_WAIT_S = exports.EXIT_OK = exports.WATCH_EVENT_CAP = exports.MAX_WATCH_MINUTES = exports.DEFAULT_WATCH_MINUTES = exports.SESSIONS_USAGE = void 0;
+exports.sessionsCommand = sessionsCommand;
+exports.verdictExit = verdictExit;
+const core_1 = require("@looply/core");
+const session_store_1 = require("./session-store");
+/**
+ * `looply sessions` — F-14's consumer, and the documented handshake itself.
+ *
+ * 🔴 THE HANDSHAKE IS A FILE, NOT A TERMINAL. The charter forbids seizing one,
+ * so nothing here attaches to a terminal: a session that wants managing WRITES
+ * a claim and points looply at it. There is no path by which looply adopts a
+ * session that did not ask — which is also why the user's own unrelated
+ * sessions are untouched. Not an exclusion list; nothing can reach them.
+ *
+ *   looply sessions                     what this machine knows about
+ *   looply sessions --offer <file>      a session asks to be managed
+ *   looply sessions --ack <id>          the session acknowledges control
+ *   looply sessions --watch <id>        attach a bounded watcher to one
+ *   looply sessions --direct <id>       tell a controlled session to do one thing
+ *   looply sessions --checkpoint <id>   capture what a REFUSED session has done
+ *   looply sessions --observations <id> what earlier watches recorded
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * 🔴 THERE IS NO `--authorize`, AND ITS ABSENCE IS THE POINT.
+ *
+ * The first version of this had one, and `approval-architecture.spec.ts` was
+ * right to refuse it. Its rule is that the server is the authority, and a file
+ * this machine can write asserting somebody approved is a second answer nobody
+ * gave — the machine holds the filesystem. A local `--authorize` is exactly
+ * that: anyone with a shell could mint the human half of a two-party rule,
+ * offline, and this fold would read it as a person's decision.
+ *
+ * ⚠️ That guard matches on SUBSTRINGS, so it does not distinguish a violation
+ * from a docblock quoting one. Its forbidden tokens are paraphrased here rather
+ * than quoted, deliberately — the first draft of this comment tripped the guard
+ * with the guard's own words.
+ *
+ * So the authorization half has NO LOCAL SOURCE. `controlAuthorized` can only
+ * ever arrive from a server-issued grant, and `serverControl` is how this build
+ * asks for one.
+ *
+ * ⚠️ WHAT REMAINS UNFINISHED IS NARROWER THAN IT WAS, AND SAYING SO PRECISELY
+ * MATTERS — THE OLD WORDING HERE ("this build cannot obtain one yet") SURVIVED
+ * THE PACKET THAT MADE IT FALSE, which is how a finished feature goes on
+ * reading as a missing one. The grant exists, the routes exist, the machine
+ * reads them, and the fold refuses everything it should. The one missing actor
+ * is the session's own ADAPTER: `controlVerdict` accepts only an
+ * acknowledgement that came through it, nothing in the product sends one yet,
+ * and so `controlled` is unreachable end to end BY CONSTRUCTION rather than by
+ * oversight. Sessions top out at observe-only, which is where the charter says
+ * to start — and observe-only now does something: `--watch` attaches a bounded
+ * watcher.
+ */
+exports.SESSIONS_USAGE = [
+    'looply sessions                       every session that has asked to be managed, and where it stands',
+    'looply sessions --offer <file>        a session presents its claim through the adapter',
+    'looply sessions --ack <id>            record that the session acknowledges control',
+    'looply sessions --watch <id>          attach a bounded watcher to an adopted session',
+    'looply sessions --direct <id> --do <verb> [--arg k=v] [--wait <seconds, 1 to 600>]',
+    '                                      tell a CONTROLLED session to do one thing',
+    'looply sessions --checkpoint <id>     capture what a REFUSED session has done, honestly',
+    'looply sessions --observations <id>   what earlier watches recorded, and what they did not',
+    '        --for <minutes>               how long to watch, at most 480 (default 30)',
+    '',
+    'Control also needs an authorization, and there is deliberately no local way to give one:',
+    'the server is the authority for that, and this machine asks it. What is still missing is',
+    "the session's own adapter sending an acknowledgement, so sessions top out at observe-only",
+    '— which is where the charter says to start, and which --watch now makes mean something.',
+].join('\n');
+/**
+ * F42: THE QUESTION A CONTROLLED WATCH ASKS BEFORE EVERY WALK — re-asked, never
+ * remembered, the same rule `--direct` follows. `controlled` is the only yes;
+ * a refusal or an unmeasurable answer is a no; a server that cannot be asked at
+ * all (`null`, or no way to ask) is a rejection, which the runtime stops on too
+ * and ALSO names among the record's blind spots ("the server could not be
+ * asked"), so an unanswered question is distinguishable from a refusal.
+ */
+function controlStillHolds(deps, sessionId) {
+    return async () => {
+        const answer = (await deps.serverControl?.(sessionId)) ?? null;
+        if (answer === null)
+            throw new Error(`the server could not be asked whether control of ${sessionId} still holds`);
+        return answer.kind === 'controlled';
+    };
+}
+exports.DEFAULT_WATCH_MINUTES = 30;
+exports.MAX_WATCH_MINUTES = 8 * 60;
+/** Events one watch may record before it stops and reports itself truncated. */
+exports.WATCH_EVENT_CAP = 5_000;
+exports.EXIT_OK = 0;
+/**
+ * F41: THE LONGEST `--direct --wait` MAY ASK FOR, in seconds. The default wait stays short (bin.ts), because
+ * an unbounded wait is this process hanging on the cooperation of the thing it directs; but a session whose
+ * adapter runs a real provider turn answers in tens of seconds, not ten, and without a way to wait for it every
+ * permitted direction read as "no answer yet". MEASURED for LIVE-3. Asked for explicitly, and bounded.
+ */
+exports.MAX_DIRECT_WAIT_S = 600;
+exports.EXIT_USAGE = 2;
+exports.EXIT_REFUSED = 3;
+/** Nothing was established. Distinct from refused, and a script must not read it as either. */
+exports.EXIT_UNMEASURABLE = 4;
+async function sessionsCommand(argv, deps) {
+    /** Arguments first, before anything is read or written — the R2-G-1 lesson. */
+    const verbs = ['--offer', '--ack', '--watch', '--direct', '--checkpoint', '--observations'].filter((v) => argv.includes(v));
+    if (verbs.length > 1) {
+        deps.err(`looply sessions: ${verbs.join(' and ')} are different things to do. Pick one.\n\n${exports.SESSIONS_USAGE}`);
+        return exports.EXIT_USAGE;
+    }
+    /**
+     * ⚠️ `--authorize` IS NAMED HERE ON PURPOSE. Somebody will try it — the flag
+     * existed, and the two-party rule invites it. A bare "no idea what that
+     * means" would read as an oversight; this says it was removed and why.
+     */
+    if (argv.includes('--authorize')) {
+        deps.err('looply sessions: there is no --authorize, deliberately. Authorizing control is the server\'s to give — ' +
+            'a machine that could grant it offline would be granting itself authority. Sessions stay observe-only here.');
+        return exports.EXIT_USAGE;
+    }
+    const unknown = [];
+    for (let i = 0; i < argv.length; i += 1) {
+        const a = argv[i];
+        if (a === '--offer' ||
+            a === '--ack' ||
+            a === '--watch' ||
+            a === '--for' ||
+            a === '--direct' ||
+            a === '--do' ||
+            a === '--arg' ||
+            a === '--wait' ||
+            a === '--checkpoint' ||
+            a === '--observations') {
+            i += 1;
+            continue;
+        }
+        unknown.push(a);
+    }
+    if (unknown.length > 0) {
+        deps.err(`looply sessions: ${unknown.join(', ')} — no idea what that means.\n\n${exports.SESSIONS_USAGE}`);
+        return exports.EXIT_USAGE;
+    }
+    const valueOf = (flag) => {
+        const i = argv.indexOf(flag);
+        if (i < 0)
+            return null;
+        const v = argv[i + 1];
+        return v === undefined || v.startsWith('--') ? null : v;
+    };
+    for (const flag of verbs) {
+        if (valueOf(flag) === null) {
+            deps.err(`looply sessions ${flag}: ${flag === '--offer' ? 'which claim file?' : 'which session?'}\n\n${exports.SESSIONS_USAGE}`);
+            return exports.EXIT_USAGE;
+        }
+    }
+    const records = await deps.records();
+    /** The session acknowledges. Recorded, and nothing else happens. */
+    const ackAt = valueOf('--ack');
+    if (ackAt !== null) {
+        const standing = (0, session_store_1.standingOf)(records, ackAt);
+        /**
+         * ⚠️ A SESSION THAT HAS NEVER PRESENTED CANNOT ACKNOWLEDGE. Otherwise a
+         * typo'd id writes a standing record for a session that later appears and
+         * finds half its consent already waiting.
+         */
+        if (standing === null) {
+            deps.err(`looply sessions --ack: ${ackAt} has never asked to be managed`);
+            return exports.EXIT_REFUSED;
+        }
+        if (standing.acked) {
+            deps.out(`sessions: ${ackAt} has already acknowledged — nothing to do`);
+            return exports.EXIT_OK;
+        }
+        await deps.append({ id: (0, session_store_1.ackedId)(ackAt), kind: 'acked', sessionId: ackAt, at: deps.now() });
+        deps.out(`sessions: recorded — ${ackAt} acknowledged`);
+        deps.out('  this does not adopt anything, and it is not the authorization half.');
+        return exports.EXIT_OK;
+    }
+    /**
+     * Attach a bounded watcher to a session this machine already adopted.
+     *
+     * 🔴 IT COVERS FROM NOW, NOT FROM THE ADOPTION, AND THE DIFFERENCE IS THE
+     * WHOLE POINT OF `coversFrom` ONE LEVEL UP. A session adopted at 12:00 and
+     * watched at 12:30 was not watched for half an hour. Reusing the verdict's
+     * moment here would produce a record claiming to cover a window in which
+     * nothing observed — the same "certify the past" defect the fold refuses per
+     * event, reintroduced wholesale by a single convenient assignment. The
+     * adoption's moment is PRINTED beside it precisely so the gap is visible
+     * rather than hidden.
+     */
+    const watchAt = valueOf('--watch');
+    if (watchAt !== null) {
+        const standing = (0, session_store_1.standingOf)(records, watchAt);
+        if (standing === null) {
+            deps.err(`looply sessions --watch: ${watchAt} has never asked to be managed`);
+            return exports.EXIT_REFUSED;
+        }
+        const verdict = standing.verdict;
+        if (verdict === null) {
+            deps.err(`looply sessions --watch: ${watchAt} has presented but was never decided — offer it first`);
+            return exports.EXIT_REFUSED;
+        }
+        /**
+         * ⚠️ A REFUSED OR UNMEASURABLE SESSION IS NOT WATCHED, and the refusal
+         * says which it was. Watching one would be the fake label by another route:
+         * a record exists, it has a session id on it, and nothing ever established
+         * that this machine may observe that session at all.
+         */
+        if (verdict.kind !== 'observe-only' && verdict.kind !== 'controlled') {
+            deps.err(`looply sessions --watch: ${watchAt} is ${verdict.kind} — ${verdict.because}. ` +
+                'A session this machine did not adopt is not one it may watch.');
+            return verdictExit(verdict);
+        }
+        const claim = (0, session_store_1.latestClaimOf)(records, watchAt);
+        if (claim === null) {
+            deps.err(`looply sessions --watch: ${watchAt} has a decision but no claim on record — nothing says what to watch`);
+            return exports.EXIT_UNMEASURABLE;
+        }
+        /**
+         * ⚠️ A CEILING A FLAG CANNOT RAISE, and the clamp is SAID rather than
+         * applied quietly: somebody who asked for a day and silently got eight
+         * hours would read the resulting record as covering the day.
+         */
+        const askedFor = valueOf('--for');
+        let minutes = exports.DEFAULT_WATCH_MINUTES;
+        if (askedFor !== null) {
+            const n = Number(askedFor);
+            if (!Number.isInteger(n) || n <= 0) {
+                deps.err(`looply sessions --for: ${askedFor} is not a positive whole number of minutes`);
+                return exports.EXIT_USAGE;
+            }
+            minutes = Math.min(n, exports.MAX_WATCH_MINUTES);
+            if (minutes !== n)
+                deps.out(`  note: ${n} minutes is over the ${exports.MAX_WATCH_MINUTES}-minute ceiling; watching for ${minutes}`);
+        }
+        if (deps.watch === undefined) {
+            deps.err(`looply sessions --watch: this build has no watcher, so nothing was established about ${watchAt}. ` +
+                'It is not being reported as a quiet session.');
+            return exports.EXIT_UNMEASURABLE;
+        }
+        const from = deps.now();
+        const window = {
+            sessionId: watchAt,
+            coversFrom: from,
+            until: new Date(Date.parse(from) + minutes * 60_000).toISOString(),
+            /**
+             * 🔴 THE SCOPE IS THE CLAIM'S, AND THAT IS SAFE ONLY BECAUSE OF WHERE
+             * THIS CODE SITS. `sessionAdoptionVerdict` already refused any claim
+             * asking for a path outside `measured.scopeAllowed`, and this line is
+             * reached only for a session it accepted. Read anywhere else, a claim's
+             * scope is a session describing its own reach.
+             */
+            scope: claim.scope,
+            cap: exports.WATCH_EVENT_CAP,
+        };
+        deps.out(`sessions: watching ${watchAt} for up to ${minutes} minute(s)`);
+        deps.out(`  adopted at ${verdict.coversFrom} — this watch covers from ${from}, and NOT the gap between them`);
+        /**
+         * 🔴 THE OPEN RECORD GOES DOWN BEFORE THE WATCH STARTS. If this process is
+         * killed mid-watch — which is how a long watch usually ends — the store
+         * holds a record saying it was never closed, instead of holding nothing and
+         * letting nothing be read as "never watched".
+         */
+        await deps.recordObservation?.(openObservation(watchAt, from));
+        const record = await deps.watch(window, {
+            workspace: claim.workspace,
+            pid: claim.pid,
+            ...(verdict.kind === 'controlled' ? { stillAuthorized: controlStillHolds(deps, watchAt) } : {}),
+        });
+        await deps.recordObservation?.(record);
+        reportWatch(deps, record);
+        if (deps.recordObservation === undefined) {
+            deps.out('  not kept: this build has nowhere to store an observation, so this record ends with the process.');
+        }
+        return exports.EXIT_OK;
+    }
+    /**
+     * Direct a session this machine holds control of.
+     *
+     * 🔴 CONTROL IS RE-ASKED HERE, NOT REMEMBERED. A verdict computed when the
+     * session was adopted says nothing about whether a person has since withdrawn
+     * the grant, and the charter's "stop on valid revocation" is only real if
+     * somebody asks again before each direction.
+     */
+    /**
+     * Capture what a session looply could NOT adopt has actually done.
+     *
+     * 🔴 THE OFFER EXISTED AND NOTHING PERFORMED IT. Every refusal has carried
+     * `offer: 'checkpoint-and-start-a-managed-run'` since adoption was written,
+     * and the offer was a string: the person who read the refusal was told to do
+     * something the product could not do. Not a false claim — a true one with
+     * nothing behind it.
+     */
+    /**
+     * What earlier watches recorded.
+     *
+     * 🔴 NOTHING ON FILE HAS THREE MEANINGS — never watched, watched and the
+     * records retained away, and watched by a process that was killed — and the
+     * store distinguishes all three. A build with nowhere to store them is a
+     * fourth, and it says so rather than answering "never watched".
+     */
+    const observationsAt = valueOf('--observations');
+    if (observationsAt !== null) {
+        if (deps.observations === undefined) {
+            deps.err(`looply sessions --observations: this build has nowhere to store an observation, so nothing is on file for ${observationsAt}. ` +
+                'That is not the same as a session that was never watched.');
+            return exports.EXIT_UNMEASURABLE;
+        }
+        for (const line of await deps.observations(observationsAt))
+            deps.out(line);
+        return exports.EXIT_OK;
+    }
+    const checkpointAt = valueOf('--checkpoint');
+    if (checkpointAt !== null) {
+        const standing = (0, session_store_1.standingOf)(records, checkpointAt);
+        if (standing === null) {
+            deps.err(`looply sessions --checkpoint: ${checkpointAt} has never asked to be managed`);
+            return exports.EXIT_REFUSED;
+        }
+        if (standing.verdict === null) {
+            deps.err(`looply sessions --checkpoint: ${checkpointAt} has presented but was never decided — offer it first`);
+            return exports.EXIT_REFUSED;
+        }
+        const claim = (0, session_store_1.latestClaimOf)(records, checkpointAt);
+        if (claim === null) {
+            deps.err(`looply sessions --checkpoint: ${checkpointAt} has a decision but no claim on record — nothing says what to capture`);
+            return exports.EXIT_UNMEASURABLE;
+        }
+        if (deps.measureWorkspace === undefined || deps.writeCheckpoint === undefined) {
+            deps.err(`looply sessions --checkpoint: this build cannot capture a workspace, so nothing was established about ${checkpointAt}. ` +
+                'It is not being reported as a session with nothing to capture.');
+            return exports.EXIT_UNMEASURABLE;
+        }
+        const measured = await deps.measureWorkspace(claim.workspace, checkpointAt, claim.pid);
+        const verdict = (0, core_1.checkpointVerdict)(standing.verdict, claim.workspace, measured, deps.now());
+        if (verdict.kind === 'refused') {
+            deps.err(`looply sessions --checkpoint: ${verdict.because}`);
+            return exports.EXIT_REFUSED;
+        }
+        if (verdict.kind === 'unmeasurable') {
+            deps.err(`looply sessions --checkpoint: ${verdict.because}. Nothing was captured.`);
+            return exports.EXIT_UNMEASURABLE;
+        }
+        for (const line of await deps.writeCheckpoint(verdict.checkpoint))
+            deps.out(line);
+        return exports.EXIT_OK;
+    }
+    const directAt = valueOf('--direct');
+    if (directAt !== null) {
+        const verb = valueOf('--do');
+        if (verb === null) {
+            deps.err("looply sessions --direct: --do <verb> says what to do, and it must be one of the grant's scope.");
+            return exports.EXIT_USAGE;
+        }
+        /**
+         * ⚠️ ARGUMENTS ARE `k=v` AND ARE NEVER INTERPRETED HERE. What they mean is
+         * the adapter's contract; a CLI that parsed them would be inventing a
+         * capability model nobody granted.
+         */
+        const args = {};
+        for (let i = 0; i < argv.length; i += 1) {
+            if (argv[i] !== '--arg')
+                continue;
+            const pair = argv[i + 1];
+            if (pair === undefined || !pair.includes('=')) {
+                deps.err(`looply sessions --arg: ${pair ?? '(nothing)'} is not k=v`);
+                return exports.EXIT_USAGE;
+            }
+            const eq = pair.indexOf('=');
+            args[pair.slice(0, eq)] = pair.slice(eq + 1);
+        }
+        // F41: an explicit wait for the answer, whole seconds, bounded; absent, the build's short default.
+        const waitAt = valueOf('--wait');
+        let waitMs;
+        if (waitAt !== null) {
+            const seconds = Number(waitAt);
+            if (!Number.isInteger(seconds) || seconds < 1 || seconds > exports.MAX_DIRECT_WAIT_S) {
+                deps.err(`looply sessions --wait: ${waitAt} is not a whole number of seconds from 1 to ${exports.MAX_DIRECT_WAIT_S}`);
+                return exports.EXIT_USAGE;
+            }
+            waitMs = seconds * 1000;
+        }
+        const context = (await deps.directionContext?.(directAt)) ?? null;
+        const at = deps.now();
+        const instruction = {
+            id: deps.newHandshakeId(),
+            /**
+             * ⚠️ THE GRANT ID COMES FROM THE VERDICT, and an empty one when there
+             * is no verdict is deliberate: `mayDirect` answers `unmeasurable` before
+             * it ever looks at the id, so an empty string never reaches a comparison
+             * that could accidentally match.
+             */
+            grantId: context?.control?.kind === 'controlled' ? context.control.grantId : '',
+            verb,
+            args,
+            at,
+        };
+        const ruling = (0, core_1.mayDirect)(instruction, {
+            control: context?.control ?? null,
+            scope: context?.scope ?? [],
+            expiresAt: context?.expiresAt ?? at,
+            at,
+        });
+        deps.out(`sessions: ${(0, core_1.describeDirection)(ruling)}`);
+        if (ruling.kind === 'stopped' || ruling.kind === 'refused')
+            return exports.EXIT_REFUSED;
+        if (ruling.kind === 'unmeasurable')
+            return exports.EXIT_UNMEASURABLE;
+        if (deps.direct === undefined) {
+            deps.err(`looply sessions --direct: this build has no channel to ${directAt}, so nothing was sent. ` +
+                'It is not being reported as an instruction the session ignored.');
+            return exports.EXIT_UNMEASURABLE;
+        }
+        const result = await deps.direct(directAt, ruling.instruction, waitMs);
+        if (result === null) {
+            /**
+             * 🔴 SILENCE IS NOT A FAILURE, AND IT GETS ITS OWN EXIT CODE. An
+             * instruction that was sent and not answered is a different thing from one
+             * the session refused, and a script that retried the first and gave up on
+             * the second would have them exactly backwards.
+             */
+            deps.out(`  no answer yet from ${directAt} — the instruction was sent, and nothing has come back`);
+            return exports.EXIT_UNMEASURABLE;
+        }
+        deps.out(`  ${result.outcome}: ${result.detail === '' ? '(no detail)' : result.detail}`);
+        /**
+         * ⚠️ A `done` IS THE SESSION'S CLAIM, NOT THIS MACHINE'S FINDING. What
+         * actually happened is the watcher's to say, and saying so here is cheaper
+         * than somebody later reading an exit code as proof.
+         */
+        if (result.outcome === 'done') {
+            deps.out('  that is what the session says it did; `--watch` is what this machine saw.');
+        }
+        return result.outcome === 'done' ? exports.EXIT_OK : exports.EXIT_REFUSED;
+    }
+    const offerAt = valueOf('--offer');
+    if (offerAt !== null) {
+        const claim = await deps.readClaim(offerAt);
+        if (claim === null) {
+            deps.err(`looply sessions --offer: ${offerAt} could not be read as a session claim`);
+            return exports.EXIT_USAGE;
+        }
+        /**
+         * 🔴 CONSENT IS READ FROM THE RECORD, NOT FROM THE CLAIM. A session that
+         * could assert its own consent would be granting itself a power, and the
+         * whole point of the two-party rule is that it cannot.
+         *
+         * 🔴 AND THE AUTHORIZATION HALF IS THE SERVER'S, NOT THIS FILE'S. It used
+         * to come from `standing.authorized` — a line in a file on the machine the
+         * grant would authorize. Nothing ever set it, because `--authorize` was
+         * removed for exactly this reason, so the hole was inert rather than open;
+         * it is now closed by construction. A local record cannot say a person
+         * authorized anything.
+         */
+        const standing = (0, session_store_1.standingOf)(records, claim.sessionId);
+        const fromServer = (await deps.serverControl?.(claim.sessionId)) ?? null;
+        /**
+         * ⚠️ BOTH HALVES COME FROM ONE ANSWER, because they are no longer
+         * independent. `controlVerdict` says `controlled` only when a live
+         * server-issued grant AND the session's own adapter acknowledgement agree on
+         * the handshake, session, workspace, repository and scope. Anything less is
+         * not "authorized but unacknowledged" — it is not authorization.
+         */
+        const consented = {
+            authorized: fromServer?.kind === 'controlled',
+            acked: fromServer?.kind === 'controlled',
+        };
+        const measured = await deps.measure(claim, consented);
+        const handshakeId = deps.newHandshakeId();
+        const at = deps.now();
+        const verdict = (0, core_1.sessionAdoptionVerdict)(claim, measured, at);
+        /**
+         * 🔴 SAID OUT LOUD, WHICHEVER WAY IT WENT. A session that tops out at
+         * observe-only reads as a limitation of the product unless the reason is on
+         * the screen — and the reason is usually specific: no grant, a revoked one,
+         * an acknowledgement that came from a person rather than the session.
+         * Silence here is what made "control has no path" look like a missing
+         * feature rather than a missing authorization.
+         */
+        if (fromServer === null) {
+            // The REASON is printed by `serverControl` itself, which knows which of
+            // unpaired / unregistered / unreachable it was. Naming a cause here too
+            // meant printing a guess one line under the fact.
+            deps.out('  control : nothing was established, so it may not direct anything');
+        }
+        else if (fromServer.kind !== 'controlled') {
+            deps.out(`  control : ${fromServer.because}`);
+        }
+        else {
+            deps.out(`  control : authorized — ${fromServer.because}`);
+        }
+        // The local record is still what `--ack` writes and what the listing shows;
+        // it is bookkeeping about what this machine has seen, and it decides nothing.
+        void standing;
+        await deps.append({ id: handshakeId, kind: 'offered', sessionId: claim.sessionId, at, claim });
+        await deps.append({ id: (0, session_store_1.decidedId)(handshakeId), kind: 'decided', sessionId: claim.sessionId, at, handshakeId, verdict });
+        report(deps, verdict);
+        return verdictExit(verdict);
+    }
+    /** Bare: what this machine knows. */
+    const known = (0, session_store_1.sessionsKnown)(records);
+    if (known.length === 0) {
+        deps.out('sessions: no session has asked to be managed.');
+        deps.out('  `looply sessions --offer <file>` is how one asks.');
+        return exports.EXIT_OK;
+    }
+    deps.out(`sessions: ${known.length} known`);
+    for (const id of known) {
+        const s = (0, session_store_1.standingOf)(records, id);
+        if (s === null)
+            continue;
+        const kind = s.verdict === null ? 'never decided' : s.verdict.kind;
+        const consent = `${s.authorized ? 'authorized' : 'not authorized'}, ${s.acked ? 'acknowledged' : 'not acknowledged'}`;
+        deps.out(`  ${id.padEnd(20)} ${kind.padEnd(14)} ${String(s.handshakes).padStart(2)} handshake(s)   ${consent}`);
+        /**
+         * ⚠️ `coversFrom` IS PRINTED BESIDE A MANAGED SESSION, always. It is the
+         * answer to "what does this cover", and the charter's "do not certify
+         * earlier unobserved actions" is only real if a person can see the line.
+         */
+        if (s.verdict !== null && (s.verdict.kind === 'observe-only' || s.verdict.kind === 'controlled')) {
+            deps.out(`  ${' '.repeat(20)} covers from ${s.verdict.coversFrom} — nothing before it`);
+        }
+    }
+    return exports.EXIT_OK;
+}
+/**
+ * What the watch saw.
+ *
+ * 🔴 THE COMPLETENESS IS A LINE OF ITS OWN, ALWAYS, EVEN WHEN IT IS
+ * `complete`. A reader who has to infer wholeness from the absence of a warning
+ * is a reader who will one day infer it from the absence of a bug — and the
+ * line that matters most is the quiet one, where a record with no events has to
+ * say whether the session did nothing or the watcher saw nothing.
+ */
+/**
+ * ⚠️ `attached: true` AND `stop: null` ARE BOTH TRUE AT THE MOMENT THIS IS
+ * WRITTEN, and if the process dies they stay true forever — which is exactly
+ * what a later reader should be told.
+ */
+function openObservation(sessionId, coversFrom) {
+    return {
+        sessionId,
+        coversFrom,
+        coversTo: null,
+        events: [],
+        predates: 0,
+        outOfScope: 0,
+        unjudgeable: 0,
+        unreadable: [],
+        stop: null,
+        attached: true,
+    };
+}
+function reportWatch(deps, record) {
+    deps.out(`  ${record.events.length} event(s) recorded, covering to ${record.coversTo ?? '(never closed)'}`);
+    const c = (0, core_1.observationCompleteness)(record);
+    deps.out(`  ${c.kind}: ${c.because}`);
+    if (record.predates > 0)
+        deps.out(`  ${record.predates} predate this watch and are NOT certified by it`);
+    if (record.outOfScope > 0)
+        deps.out(`  ${record.outOfScope} outside the granted scope, not recorded`);
+    if (record.unjudgeable > 0)
+        deps.out(`  ${record.unjudgeable} could not be placed against the scope`);
+    for (const blind of record.unreadable)
+        deps.out(`  blind: ${blind}`);
+    for (const e of record.events)
+        deps.out(`    ${e.at}  ${e.kind.padEnd(8)} ${e.path ?? ''} ${e.detail}`);
+}
+function report(deps, verdict) {
+    const said = (0, core_1.describeSessionAdoption)(verdict);
+    if (verdict.kind === 'controlled') {
+        deps.out(`sessions: ${verdict.sessionId} is under management — covers from ${verdict.coversFrom}, nothing before it`);
+        return;
+    }
+    if (said === null)
+        return;
+    if (verdict.kind === 'observe-only') {
+        deps.out(`sessions: ${said}`);
+        deps.out(`  covers from ${verdict.coversFrom} — nothing before it`);
+        return;
+    }
+    deps.err(`looply sessions: ${said}`);
+    /**
+     * 🔴 THE OFFER NAMES THE COMMAND THAT PERFORMS IT. `describeSessionAdoption`
+     * ends with "checkpoint what it has done and start a managed run from there",
+     * which for as long as nothing could checkpoint was an instruction to do
+     * something by hand. It is a command now, so it is printed as one.
+     */
+    const offer = (0, core_1.checkpointOffer)(verdict);
+    if (offer !== null)
+        deps.err(`  ${offer}`);
+}
+/**
+ * ⚠️ FOUR EXIT CODES, NOT THREE. `unmeasurable` gets its own, because a script
+ * that retried a refusal would be wrong and a script that ignored an
+ * unmeasurable would be worse — they are different instructions to the caller.
+ */
+function verdictExit(v) {
+    switch (v.kind) {
+        case 'observe-only':
+        case 'controlled':
+            return exports.EXIT_OK;
+        case 'refused':
+            return exports.EXIT_REFUSED;
+        case 'unmeasurable':
+            return exports.EXIT_UNMEASURABLE;
+    }
+}
+//# sourceMappingURL=sessions-cmd.js.map

package/dist/sessions-cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions-cmd.js","sourceRoot":"","sources":["../src/sessions-cmd.ts"],"names":[],"mappings":";;;AAyPA,0CA2cC;AAsED,kCAUC;AApxBD,uCAoBsB;AACtB,mDAAmH;AAEnH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEU,QAAA,cAAc,GAAG;IAC5B,uGAAuG;IACvG,wFAAwF;IACxF,oFAAoF;IACpF,sFAAsF;IACtF,oFAAoF;IACpF,iFAAiF;IACjF,yFAAyF;IACzF,4FAA4F;IAC5F,mFAAmF;IACnF,EAAE;IACF,0FAA0F;IAC1F,0FAA0F;IAC1F,2FAA2F;IAC3F,yFAAyF;CAC1F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AA0Cb;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,IAAkB,EAAE,SAAiB;IAC9D,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC;QAC/D,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,SAAS,cAAc,CAAC,CAAC;QAClH,OAAO,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC;AAEY,QAAA,qBAAqB,GAAG,EAAE,CAAC;AAC3B,QAAA,iBAAiB,GAAG,CAAC,GAAG,EAAE,CAAC;AACxC,gFAAgF;AACnE,QAAA,eAAe,GAAG,KAAK,CAAC;AAExB,QAAA,OAAO,GAAG,CAAC,CAAC;AACzB;;;;;GAKG;AACU,QAAA,iBAAiB,GAAG,GAAG,CAAC;AACxB,QAAA,UAAU,GAAG,CAAC,CAAC;AACf,QAAA,YAAY,GAAG,CAAC,CAAC;AAC9B,+FAA+F;AAClF,QAAA,iBAAiB,GAAG,CAAC,CAAC;AAwF5B,KAAK,UAAU,eAAe,CAAC,IAAuB,EAAE,IAAkB;IAC/E,+EAA+E;IAC/E,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACvG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CACjB,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,6CAA6C,sBAAc,EAAE,CAAC,CAAC;QAC/G,OAAO,kBAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG,CACN,yGAAyG;YACvG,4GAA4G,CAC/G,CAAC;QACF,OAAO,kBAAU,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC5B,IACE,CAAC,KAAK,SAAS;YACf,CAAC,KAAK,OAAO;YACb,CAAC,KAAK,SAAS;YACf,CAAC,KAAK,OAAO;YACb,CAAC,KAAK,UAAU;YAChB,CAAC,KAAK,MAAM;YACZ,CAAC,KAAK,OAAO;YACb,CAAC,KAAK,QAAQ;YACd,CAAC,KAAK,cAAc;YACpB,CAAC,KAAK,gBAAgB,EACtB,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,sBAAc,EAAE,CAAC,CAAC;QACnG,OAAO,kBAAU,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAiB,EAAE;QAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtB,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,KAAK,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,OAAO,sBAAc,EAAE,CAAC,CAAC;YACzH,OAAO,kBAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IAErC,oEAAoE;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,IAAA,0BAAU,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C;;;;WAIG;QACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,0BAA0B,KAAK,gCAAgC,CAAC,CAAC;YAC1E,OAAO,oBAAY,CAAC;QACtB,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,2CAA2C,CAAC,CAAC;YACxE,OAAO,eAAO,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAA,uBAAO,EAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,CAAC,wBAAwB,KAAK,eAAe,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;QAClF,OAAO,eAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAA,0BAAU,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,4BAA4B,OAAO,gCAAgC,CAAC,CAAC;YAC9E,OAAO,oBAAY,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,4BAA4B,OAAO,uDAAuD,CAAC,CAAC;YACrG,OAAO,oBAAY,CAAC;QACtB,CAAC;QACD;;;;;WAKG;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACrE,IAAI,CAAC,GAAG,CACN,4BAA4B,OAAO,OAAO,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,OAAO,IAAI;gBAC7E,+DAA+D,CAClE,CAAC;YACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,6BAAa,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,4BAA4B,OAAO,qEAAqE,CAAC,CAAC;YACnH,OAAO,yBAAiB,CAAC;QAC3B,CAAC;QAED;;;;WAIG;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,OAAO,GAAG,6BAAqB,CAAC;QACpC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,GAAG,CAAC,0BAA0B,QAAQ,4CAA4C,CAAC,CAAC;gBACzF,OAAO,kBAAU,CAAC;YACpB,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAiB,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,wBAAwB,yBAAiB,iCAAiC,OAAO,EAAE,CAAC,CAAC;QAC/H,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CACN,wFAAwF,OAAO,IAAI;gBACjG,8CAA8C,CACjD,CAAC;YACF,OAAO,yBAAiB,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxB,MAAM,MAAM,GAAgB;YAC1B,SAAS,EAAE,OAAO;YAClB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;YAClE;;;;;;eAMG;YACH,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,uBAAe;SACrB,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,sBAAsB,OAAO,cAAc,OAAO,YAAY,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,UAAU,6BAA6B,IAAI,gCAAgC,CAAC,CAAC;QAE9G;;;;;WAKG;QACH,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChG,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC;QACvC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,mGAAmG,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,eAAO,CAAC;IACjB,CAAC;IAED;;;;;;;OAOG;IACH;;;;;;;;OAQG;IACH;;;;;;;OAOG;IACH,MAAM,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CACN,6GAA6G,cAAc,IAAI;gBAC7H,2DAA2D,CAC9D,CAAC;YACF,OAAO,yBAAiB,CAAC;QAC3B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO,eAAO,CAAC;IACjB,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAA,0BAAU,EAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,iCAAiC,YAAY,gCAAgC,CAAC,CAAC;YACxF,OAAO,oBAAY,CAAC;QACtB,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,iCAAiC,YAAY,uDAAuD,CAAC,CAAC;YAC/G,OAAO,oBAAY,CAAC;QACtB,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,6BAAa,EAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,iCAAiC,YAAY,uEAAuE,CAAC,CAAC;YAC/H,OAAO,yBAAiB,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC9E,IAAI,CAAC,GAAG,CACN,yGAAyG,YAAY,IAAI;gBACvH,gEAAgE,CACnE,CAAC;YACF,OAAO,yBAAiB,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,IAAA,wBAAiB,EAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3F,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,iCAAiC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,OAAO,oBAAY,CAAC;QACtB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,iCAAiC,OAAO,CAAC,OAAO,yBAAyB,CAAC,CAAC;YACpF,OAAO,yBAAiB,CAAC;QAC3B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClF,OAAO,eAAO,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,GAAG,CAAC,iGAAiG,CAAC,CAAC;YAC5G,OAAO,kBAAU,CAAC;QACpB,CAAC;QAED;;;;WAIG;QACH,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO;gBAAE,SAAS;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,WAAW,aAAa,CAAC,CAAC;gBACrE,OAAO,kBAAU,CAAC;YACpB,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,mGAAmG;QACnG,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,MAA0B,CAAC;QAC/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,yBAAiB,EAAE,CAAC;gBAC7E,IAAI,CAAC,GAAG,CAAC,2BAA2B,MAAM,+CAA+C,yBAAiB,EAAE,CAAC,CAAC;gBAC9G,OAAO,kBAAU,CAAC;YACpB,CAAC;YACD,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;QAC1B,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,WAAW,GAAgB;YAC/B,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE;YACzB;;;;;eAKG;YACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAC/E,IAAI;YACJ,IAAI;YACJ,EAAE;SACH,CAAC;QAEF,MAAM,MAAM,GAAoB,IAAA,gBAAS,EAAC,WAAW,EAAE;YACrD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;YACjC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YAC3B,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE;YACnC,EAAE;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,aAAa,IAAA,wBAAiB,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,oBAAY,CAAC;QAChF,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO,yBAAiB,CAAC;QAE7D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CACN,0DAA0D,QAAQ,yBAAyB;gBACzF,iEAAiE,CACpE,CAAC;YACF,OAAO,yBAAiB,CAAC;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB;;;;;eAKG;YACH,IAAI,CAAC,GAAG,CAAC,wBAAwB,QAAQ,wDAAwD,CAAC,CAAC;YACnG,OAAO,yBAAiB,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF;;;;WAIG;QACH,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,eAAO,CAAC,CAAC,CAAC,oBAAY,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,4BAA4B,OAAO,uCAAuC,CAAC,CAAC;YACrF,OAAO,kBAAU,CAAC;QACpB,CAAC;QAED;;;;;;;;;;;WAWG;QACH,MAAM,QAAQ,GAAG,IAAA,0BAAU,EAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC;QACzE;;;;;;WAMG;QACH,MAAM,SAAS,GAAG;YAChB,UAAU,EAAE,UAAU,EAAE,IAAI,KAAK,YAAY;YAC7C,KAAK,EAAE,UAAU,EAAE,IAAI,KAAK,YAAY;SACzC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAEtD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,IAAA,6BAAsB,EAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE5D;;;;;;;WAOG;QACH,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,wEAAwE;YACxE,wEAAwE;YACxE,kDAAkD;YAClD,IAAI,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,4BAA4B,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,4EAA4E;QAC5E,8EAA8E;QAC9E,KAAK,QAAQ,CAAC;QAEd,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAA,yBAAS,EAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAEzH,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtB,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,qCAAqC;IACrC,MAAM,KAAK,GAAG,IAAA,6BAAa,EAAC,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAChE,OAAO,eAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAA,0BAAU,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACnE,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;QACtH,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAChH;;;;WAIG;QACH,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;YACjG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,UAAU,sBAAsB,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,OAAO,eAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAiB,EAAE,UAAkB;IAC5D,OAAO;QACL,SAAS;QACT,UAAU;QACV,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,CAAC;QACX,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAkB,EAAE,MAAyB;IAChE,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,mCAAmC,MAAM,CAAC,QAAQ,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC5G,MAAM,CAAC,GAAG,IAAA,8BAAuB,EAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,QAAQ,iDAAiD,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,UAAU,0CAA0C,CAAC,CAAC;IACtG,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,WAAW,wCAAwC,CAAC,CAAC;IACtG,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU;QAAE,IAAI,CAAC,GAAG,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,MAAM,CAAC,IAAkB,EAAE,OAA+B;IACjE,MAAM,IAAI,GAAG,IAAA,8BAAuB,EAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,SAAS,sCAAsC,OAAO,CAAC,UAAU,qBAAqB,CAAC,CAAC;QACtH,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO;IAC1B,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,UAAU,sBAAsB,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACrC;;;;;OAKG;IACH,MAAM,KAAK,GAAG,IAAA,sBAAe,EAAC,OAAO,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,IAAI;QAAE,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,CAAyB;IACnD,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY;YACf,OAAO,eAAO,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,oBAAY,CAAC;QACtB,KAAK,cAAc;YACjB,OAAO,yBAAiB,CAAC;IAC7B,CAAC;AACH,CAAC"}