open-multi-agent-kit 1.2.0 → 1.2.2

package/dist/core/verified-run/authority-events.js

@@ -0,0 +1,482 @@
+import { canonicalClaim, claimSetsConflict } from "../../coordination/resource.js";
+import { SETTLED_EFFECT_STATES, sequence, } from "../../coordination/types.js";
+import { parseNamespaceIdentity } from "./namespace-identity.js";
+import { VerifiedRunError } from "./storage.js";
+/** A restart that bumped the epoch but never finished reconciliation stays pending. */
+export function authorityPendingReconcile(state) {
+    return state.reconciledEpoch !== state.epoch;
+}
+function text(value) {
+    if (typeof value !== "string" || !/^[A-Za-z0-9_-]{1,128}$/.test(value))
+        throw new VerifiedRunError("integrity");
+    return value;
+}
+/** bootId:pid style writer labels — looser than `text` but still bounded and printable. */
+function writerLabel(value) {
+    if (typeof value !== "string" || !/^[A-Za-z0-9_.:-]{1,160}$/.test(value))
+        throw new VerifiedRunError("integrity");
+    return value;
+}
+function digest(value) {
+    const result = text(value);
+    if (!/^[a-f0-9]{64}$/.test(result))
+        throw new VerifiedRunError("integrity");
+    return result;
+}
+function integer(value) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)
+        throw new VerifiedRunError("integrity");
+    return value;
+}
+function seq(value) {
+    try {
+        return sequence(value);
+    }
+    catch {
+        throw new VerifiedRunError("integrity");
+    }
+}
+function nextSeq(value) {
+    return sequence(String(BigInt(value) + 1n));
+}
+function claim(raw) {
+    if (typeof raw !== "object" || raw === null)
+        throw new VerifiedRunError("integrity");
+    const value = Object.fromEntries(Object.entries(raw));
+    try {
+        return canonicalClaim(value);
+    }
+    catch {
+        throw new VerifiedRunError("integrity");
+    }
+}
+function claimList(raw, limit = 256) {
+    if (!Array.isArray(raw) || raw.length === 0 || raw.length > limit)
+        throw new VerifiedRunError("integrity");
+    return Object.freeze(raw.map(claim));
+}
+function token(raw) {
+    if (typeof raw !== "object" || raw === null)
+        throw new VerifiedRunError("integrity");
+    const value = Object.fromEntries(Object.entries(raw));
+    return Object.freeze({
+        authorityEpoch: seq(value.authorityEpoch),
+        grantSequence: seq(value.grantSequence),
+        sessionId: text(value.sessionId),
+        sessionIncarnation: seq(value.sessionIncarnation),
+        authorizationDeadline: integer(value.authorizationDeadline),
+    });
+}
+const GRANT_STATES = new Set([
+    "reserved",
+    "starting",
+    "running",
+    "terminating",
+    "quarantined",
+    "terminated",
+    "cancelled",
+]);
+function grantRecord(raw) {
+    if (typeof raw !== "object" || raw === null)
+        throw new VerifiedRunError("integrity");
+    const value = Object.fromEntries(Object.entries(raw));
+    if (typeof value.state !== "string" || !GRANT_STATES.has(value.state))
+        throw new VerifiedRunError("integrity");
+    if (typeof value.effectLive !== "boolean")
+        throw new VerifiedRunError("integrity");
+    if (SETTLED_EFFECT_STATES.has(value.state) && value.effectLive)
+        throw new VerifiedRunError("integrity");
+    if (value.state === "quarantined" && !value.effectLive)
+        throw new VerifiedRunError("integrity");
+    return Object.freeze({
+        token: token(value.token),
+        commandId: text(value.commandId),
+        intentDigest: digest(value.intentDigest),
+        claims: claimList(value.claims),
+        weight: integer(value.weight),
+        state: value.state,
+        effectLive: value.effectLive,
+        dispatchId: value.dispatchId === null ? null : text(value.dispatchId),
+        actualClaims: value.actualClaims === null ? null : claimList(value.actualClaims),
+        identity: value.identity === null ? null : parseNamespaceIdentity(value.identity),
+    });
+}
+function tombstone(raw) {
+    if (typeof raw !== "object" || raw === null)
+        throw new VerifiedRunError("integrity");
+    const value = Object.fromEntries(Object.entries(raw));
+    const retainedAtMs = integer(value.retainedAtMs);
+    const expiresAtMs = integer(value.expiresAtMs);
+    if (expiresAtMs <= retainedAtMs)
+        throw new VerifiedRunError("integrity");
+    return Object.freeze({
+        commandId: text(value.commandId),
+        grantSequence: seq(value.grantSequence),
+        resultDigest: digest(value.resultDigest),
+        retainedAtMs,
+        expiresAtMs,
+    });
+}
+function snapshotState(raw) {
+    if (typeof raw !== "object" || raw === null)
+        throw new VerifiedRunError("integrity");
+    const value = Object.fromEntries(Object.entries(raw));
+    if (!Array.isArray(value.incarnations) || !Array.isArray(value.grants) || !Array.isArray(value.tombstones))
+        throw new VerifiedRunError("integrity");
+    const grants = value.grants.map(grantRecord);
+    const tombstones = value.tombstones.map(tombstone);
+    const sequences = new Set(grants.map((grant) => grant.token.grantSequence));
+    if (sequences.size !== grants.length)
+        throw new VerifiedRunError("integrity");
+    // grant commandIds are unique among grants; tombstone commandIds among
+    // tombstones; a tombstone always references a retained grant (GC drops the
+    // expired tombstone+grant pair together).
+    if (new Set(grants.map((grant) => grant.commandId)).size !== grants.length)
+        throw new VerifiedRunError("integrity");
+    if (new Set(tombstones.map((stone) => stone.commandId)).size !== tombstones.length)
+        throw new VerifiedRunError("integrity");
+    for (const stone of tombstones)
+        if (!sequences.has(stone.grantSequence))
+            throw new VerifiedRunError("integrity");
+    return Object.freeze({
+        epoch: seq(value.epoch),
+        reconciledEpoch: value.reconciledEpoch === null ? null : seq(value.reconciledEpoch),
+        incarnations: Object.freeze(value.incarnations.map((entry) => {
+            if (typeof entry !== "object" || entry === null)
+                throw new VerifiedRunError("integrity");
+            const item = Object.fromEntries(Object.entries(entry));
+            return Object.freeze({ sessionId: text(item.sessionId), incarnation: seq(item.incarnation) });
+        })),
+        grantCounter: seq(value.grantCounter),
+        grants: Object.freeze(grants),
+        tombstones: Object.freeze(tombstones),
+    });
+}
+export function parseAuthorityEvent(raw) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw))
+        throw new VerifiedRunError("integrity");
+    const value = Object.fromEntries(Object.entries(raw));
+    switch (value.kind) {
+        case "authority-epoch-advanced": {
+            if (!Array.isArray(value.transitions) || value.transitions.length > 4096)
+                throw new VerifiedRunError("integrity");
+            const transitions = value.transitions.map((entry) => {
+                if (typeof entry !== "object" || entry === null)
+                    throw new VerifiedRunError("integrity");
+                const item = Object.fromEntries(Object.entries(entry));
+                if (item.outcome !== "cancelled" && item.outcome !== "quarantined")
+                    throw new VerifiedRunError("integrity");
+                return Object.freeze({ grantSequence: seq(item.grantSequence), outcome: item.outcome });
+            });
+            const seen = new Set(transitions.map((entry) => entry.grantSequence));
+            if (seen.size !== transitions.length)
+                throw new VerifiedRunError("integrity");
+            return {
+                kind: value.kind,
+                authorityEpoch: seq(value.authorityEpoch),
+                writerId: writerLabel(value.writerId),
+                transitions: Object.freeze(transitions),
+            };
+        }
+        case "authority-reconciled":
+            return { kind: value.kind, authorityEpoch: seq(value.authorityEpoch) };
+        case "session-registered":
+            return { kind: value.kind, sessionId: text(value.sessionId), incarnation: seq(value.incarnation) };
+        case "grant-reserved":
+            return { kind: value.kind, grant: grantRecord(value.grant) };
+        case "dispatch-intent":
+            return {
+                kind: value.kind,
+                grantSequence: seq(value.grantSequence),
+                authorityEpoch: seq(value.authorityEpoch),
+                dispatchId: text(value.dispatchId),
+            };
+        case "effect-started":
+            return {
+                kind: value.kind,
+                grantSequence: seq(value.grantSequence),
+                authorityEpoch: seq(value.authorityEpoch),
+                actualClaims: claimList(value.actualClaims),
+                ...(value.identity === undefined ? {} : { identity: parseNamespaceIdentity(value.identity) }),
+            };
+        case "cancel-requested":
+        case "authorization-expired": {
+            if (value.outcome !== "cancelled" && value.outcome !== "quarantined")
+                throw new VerifiedRunError("integrity");
+            return {
+                kind: value.kind,
+                grantSequence: seq(value.grantSequence),
+                authorityEpoch: seq(value.authorityEpoch),
+                outcome: value.outcome,
+            };
+        }
+        case "quarantined":
+            if (value.reason !== "restart")
+                throw new VerifiedRunError("integrity");
+            return {
+                kind: value.kind,
+                grantSequence: seq(value.grantSequence),
+                authorityEpoch: seq(value.authorityEpoch),
+                reason: value.reason,
+            };
+        case "termination-observed":
+            return {
+                kind: value.kind,
+                grantSequence: seq(value.grantSequence),
+                authorityEpoch: seq(value.authorityEpoch),
+            };
+        case "result-retained":
+            return {
+                kind: value.kind,
+                commandId: text(value.commandId),
+                grantSequence: seq(value.grantSequence),
+                resultDigest: digest(value.resultDigest),
+                retainedAtMs: integer(value.retainedAtMs),
+                expiresAtMs: integer(value.expiresAtMs),
+            };
+        case "authority-snapshot":
+            return {
+                kind: value.kind,
+                archivedThroughSequence: integer(value.archivedThroughSequence),
+                continuesHash: digest(value.continuesHash),
+                state: snapshotState(value.state),
+            };
+        default:
+            throw new VerifiedRunError("integrity");
+    }
+}
+function reduceAuthorityEvent(state, event) {
+    switch (event.kind) {
+        case "authority-epoch-advanced": {
+            // An epoch may only advance once the previous epoch reconciled. The
+            // transition set must cover every unsettled grant exactly once (S4).
+            if (authorityPendingReconcile(state))
+                throw new VerifiedRunError("integrity");
+            const expected = nextSeq(state.epoch ?? sequence("0"));
+            if (event.authorityEpoch !== expected)
+                throw new VerifiedRunError("integrity");
+            const unsettled = new Set([...state.grants.values()]
+                .filter((grant) => !SETTLED_EFFECT_STATES.has(grant.state))
+                .map((grant) => grant.token.grantSequence));
+            for (const transition of event.transitions) {
+                const grant = state.grants.get(transition.grantSequence);
+                if (!grant || !unsettled.has(transition.grantSequence))
+                    throw new VerifiedRunError("integrity");
+                const outcome = grant.effectLive ? "quarantined" : "cancelled";
+                if (transition.outcome !== outcome)
+                    throw new VerifiedRunError("integrity");
+                state.grants.set(transition.grantSequence, { ...grant, state: transition.outcome });
+                unsettled.delete(transition.grantSequence);
+            }
+            if (unsettled.size !== 0)
+                throw new VerifiedRunError("integrity");
+            state.epoch = event.authorityEpoch;
+            break;
+        }
+        case "authority-reconciled": {
+            if (state.epoch === null || event.authorityEpoch !== state.epoch)
+                throw new VerifiedRunError("integrity");
+            if (!authorityPendingReconcile(state))
+                throw new VerifiedRunError("integrity");
+            for (const grant of state.grants.values())
+                if (!SETTLED_EFFECT_STATES.has(grant.state) && grant.state !== "quarantined")
+                    throw new VerifiedRunError("integrity");
+            state.reconciledEpoch = event.authorityEpoch;
+            break;
+        }
+        case "session-registered": {
+            const current = state.incarnations.get(event.sessionId);
+            const expected = current === undefined ? sequence("1") : nextSeq(current);
+            if (event.incarnation !== expected)
+                throw new VerifiedRunError("integrity");
+            state.incarnations.set(event.sessionId, event.incarnation);
+            break;
+        }
+        case "grant-reserved": {
+            const grant = event.grant;
+            if (authorityPendingReconcile(state) || state.epoch === null)
+                throw new VerifiedRunError("integrity");
+            if (grant.state !== "reserved" ||
+                grant.effectLive ||
+                grant.dispatchId !== null ||
+                grant.actualClaims !== null ||
+                grant.identity !== null ||
+                grant.token.authorityEpoch !== state.epoch ||
+                state.incarnations.get(grant.token.sessionId) !== grant.token.sessionIncarnation ||
+                grant.token.grantSequence !== nextSeq(state.grantCounter) ||
+                state.grants.has(grant.token.grantSequence) ||
+                state.tombstones.has(grant.commandId) ||
+                [...state.grants.values()].some((other) => other.commandId === grant.commandId) ||
+                [...state.grants.values()].some((other) => !SETTLED_EFFECT_STATES.has(other.state) && claimSetsConflict([...grant.claims], [...other.claims])))
+                throw new VerifiedRunError("integrity");
+            state.grants.set(grant.token.grantSequence, grant);
+            state.grantCounter = grant.token.grantSequence;
+            break;
+        }
+        case "dispatch-intent": {
+            const grant = state.grants.get(event.grantSequence);
+            if (!grant ||
+                grant.state !== "reserved" ||
+                grant.token.authorityEpoch !== event.authorityEpoch ||
+                event.authorityEpoch !== state.epoch ||
+                [...state.grants.values()].some((other) => other.dispatchId === event.dispatchId))
+                throw new VerifiedRunError("integrity");
+            // A committed intent may already have spawned: the effect is possibly
+            // live until a termination witness says otherwise (docs/04 uncertainty
+            // window), so effectLive is set here, not at effect-started.
+            state.grants.set(event.grantSequence, {
+                ...grant,
+                state: "starting",
+                effectLive: true,
+                dispatchId: event.dispatchId,
+            });
+            break;
+        }
+        case "effect-started": {
+            const grant = state.grants.get(event.grantSequence);
+            if (!grant || (grant.state !== "reserved" && grant.state !== "starting"))
+                throw new VerifiedRunError("integrity");
+            if (event.authorityEpoch !== state.epoch || grant.token.authorityEpoch !== event.authorityEpoch)
+                throw new VerifiedRunError("integrity");
+            if (event.identity !== undefined) {
+                for (const other of state.grants.values()) {
+                    if (other.token.grantSequence !== event.grantSequence &&
+                        !SETTLED_EFFECT_STATES.has(other.state) &&
+                        other.identity &&
+                        other.identity.namespace === event.identity.namespace &&
+                        other.identity.pid === event.identity.pid &&
+                        other.identity.startTicks === event.identity.startTicks &&
+                        other.identity.bootId === event.identity.bootId)
+                        throw new VerifiedRunError("integrity");
+                }
+            }
+            state.grants.set(event.grantSequence, {
+                ...grant,
+                state: "running",
+                effectLive: true,
+                actualClaims: event.actualClaims,
+                identity: event.identity ?? grant.identity,
+            });
+            break;
+        }
+        case "cancel-requested":
+        case "authorization-expired":
+        case "quarantined": {
+            const grant = state.grants.get(event.grantSequence);
+            if (!grant || SETTLED_EFFECT_STATES.has(grant.state))
+                throw new VerifiedRunError("integrity");
+            if (event.authorityEpoch !== state.epoch)
+                throw new VerifiedRunError("integrity");
+            if (event.kind === "quarantined") {
+                if (!grant.effectLive || grant.state === "quarantined")
+                    throw new VerifiedRunError("integrity");
+                state.grants.set(event.grantSequence, { ...grant, state: "quarantined" });
+            }
+            else {
+                const outcome = grant.effectLive ? "quarantined" : "cancelled";
+                if (event.outcome !== outcome)
+                    throw new VerifiedRunError("integrity");
+                state.grants.set(event.grantSequence, { ...grant, state: event.outcome });
+            }
+            break;
+        }
+        case "termination-observed": {
+            const grant = state.grants.get(event.grantSequence);
+            if (!grant || SETTLED_EFFECT_STATES.has(grant.state))
+                throw new VerifiedRunError("integrity");
+            state.grants.set(event.grantSequence, { ...grant, effectLive: false, state: "terminated" });
+            break;
+        }
+        case "result-retained": {
+            const grant = state.grants.get(event.grantSequence);
+            if (!grant || grant.commandId !== event.commandId)
+                throw new VerifiedRunError("integrity");
+            if (event.expiresAtMs <= event.retainedAtMs || state.tombstones.has(event.commandId))
+                throw new VerifiedRunError("integrity");
+            state.tombstones.set(event.commandId, Object.freeze({
+                commandId: event.commandId,
+                grantSequence: event.grantSequence,
+                resultDigest: event.resultDigest,
+                retainedAtMs: event.retainedAtMs,
+                expiresAtMs: event.expiresAtMs,
+            }));
+            break;
+        }
+        case "authority-snapshot":
+            // Snapshots are archive boundaries, not stream events; the loader seeds
+            // from them directly and rejects them mid-stream.
+            throw new VerifiedRunError("integrity");
+        default: {
+            const exhaustive = event;
+            throw new VerifiedRunError(String(exhaustive));
+        }
+    }
+}
+/** Deterministic replay over a seeded (post-snapshot) state. */
+export function projectAuthority(events, seed) {
+    const state = seed
+        ? {
+            epoch: seed.epoch,
+            reconciledEpoch: seed.reconciledEpoch,
+            incarnations: new Map(seed.incarnations.map((entry) => [entry.sessionId, entry.incarnation])),
+            grantCounter: seed.grantCounter,
+            grants: new Map(seed.grants.map((grant) => [grant.token.grantSequence, grant])),
+            tombstones: new Map(seed.tombstones.map((stone) => [stone.commandId, stone])),
+        }
+        : {
+            epoch: null,
+            reconciledEpoch: null,
+            incarnations: new Map(),
+            grantCounter: sequence("0"),
+            grants: new Map(),
+            tombstones: new Map(),
+        };
+    for (const event of events)
+        reduceAuthorityEvent(state, event);
+    return Object.freeze({
+        epoch: state.epoch,
+        reconciledEpoch: state.reconciledEpoch,
+        incarnations: state.incarnations,
+        grantCounter: state.grantCounter,
+        grants: state.grants,
+        tombstones: state.tombstones,
+    });
+}
+/** Grants still holding claims — quarantined included (broker parity). */
+export function activeAuthorityGrants(state) {
+    return [...state.grants.values()].filter((grant) => !SETTLED_EFFECT_STATES.has(grant.state));
+}
+/** Apply additional events to an existing projection (commit-time validation replay). */
+export function applyAuthorityEvents(base, events) {
+    const state = {
+        epoch: base.epoch,
+        reconciledEpoch: base.reconciledEpoch,
+        incarnations: new Map(base.incarnations),
+        grantCounter: base.grantCounter,
+        grants: new Map(base.grants),
+        tombstones: new Map(base.tombstones),
+    };
+    for (const event of events)
+        reduceAuthorityEvent(state, event);
+    return Object.freeze({
+        epoch: state.epoch,
+        reconciledEpoch: state.reconciledEpoch,
+        incarnations: state.incarnations,
+        grantCounter: state.grantCounter,
+        grants: state.grants,
+        tombstones: state.tombstones,
+    });
+}
+export function snapshotFromProjection(state) {
+    if (state.epoch === null)
+        throw new VerifiedRunError("integrity");
+    return Object.freeze({
+        epoch: state.epoch,
+        reconciledEpoch: state.reconciledEpoch,
+        incarnations: Object.freeze([...state.incarnations.entries()].map(([sessionId, incarnation]) => Object.freeze({ sessionId, incarnation }))),
+        grantCounter: state.grantCounter,
+        grants: Object.freeze([...state.grants.values()]),
+        tombstones: Object.freeze([...state.tombstones.values()]),
+    });
+}
+//# sourceMappingURL=authority-events.js.map

package/dist/core/verified-run/authority-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-events.js","sourceRoot":"","sources":["../../../src/core/verified-run/authority-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAA2B,MAAM,gCAAgC,CAAC;AAC5G,OAAO,EAIN,qBAAqB,EAErB,QAAQ,GACR,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAkIhD,uFAAuF;AACvF,MAAM,UAAU,yBAAyB,CAAC,KAA0B,EAAW;IAC9E,OAAO,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,KAAK,CAAC;AAAA,CAC7C;AAED,SAAS,IAAI,CAAC,KAAc,EAAU;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAChH,OAAO,KAAK,CAAC;AAAA,CACb;AAED,6FAA2F;AAC3F,SAAS,WAAW,CAAC,KAAc,EAAU;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClH,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,MAAM,CAAC,KAAc,EAAU;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,OAAO,CAAC,KAAc,EAAU;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpH,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,GAAG,CAAC,KAAc,EAAY;IACtC,IAAI,CAAC;QACJ,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;AAAA,CACD;AAED,SAAS,OAAO,CAAC,KAAe,EAAY;IAC3C,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAAA,CAC5C;AAED,SAAS,KAAK,CAAC,GAAY,EAAiB;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrF,MAAM,KAAK,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC;QACJ,OAAO,cAAc,CAAC,KAAsC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;AAAA,CACD;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,KAAK,GAAG,GAAG,EAA4B;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3G,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACrC;AAED,SAAS,KAAK,CAAC,GAAY,EAAc;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrF,MAAM,KAAK,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;QACzC,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;QACvC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,kBAAkB,EAAE,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACjD,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC;KAC3D,CAAC,CAAC;AAAA,CACH;AAED,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IACjD,UAAU;IACV,UAAU;IACV,SAAS;IACT,aAAa;IACb,aAAa;IACb,YAAY;IACZ,WAAW;CACX,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,GAAY,EAAwB;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrF,MAAM,KAAK,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/G,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACnF,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAoB,CAAC,IAAI,KAAK,CAAC,UAAU;QAC5E,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QACzB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACxC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/B,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,KAAK,EAAE,KAAK,CAAC,KAAoB;QACjC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACrE,YAAY,EAAE,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC;QAChF,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC;KACjF,CAAC,CAAC;AAAA,CACH;AAED,SAAS,SAAS,CAAC,GAAY,EAAsB;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrF,MAAM,KAAK,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,WAAW,IAAI,YAAY;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;QACvC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACxC,YAAY;QACZ,WAAW;KACX,CAAC,CAAC;AAAA,CACH;AAED,SAAS,aAAa,CAAC,GAAY,EAA0B;IAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrF,MAAM,KAAK,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QACzG,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5E,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC9E,uEAAuE;IACvE,2EAA2E;IAC3E,0CAA0C;IAC1C,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpH,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;QACjF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,UAAU;QAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACjH,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QACvB,eAAe,EAAE,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;QACnF,YAAY,EAAE,MAAM,CAAC,MAAM,CAC1B,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC;YAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzF,MAAM,IAAI,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAAA,CAC9F,CAAC,CACF;QACD,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;QACrC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;KACrC,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAkB;IACjE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3G,MAAM,KAAK,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,0BAA0B,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI;gBACvE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC;gBAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBACzF,MAAM,IAAI,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChF,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,IAAI,IAAI,CAAC,OAAO,KAAK,aAAa;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAC5G,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAAA,CACxF,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;YACtE,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC9E,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;gBACzC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACrC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;aACvC,CAAC;QACH,CAAC;QACD,KAAK,sBAAsB;YAC1B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QACxE,KAAK,oBAAoB;YACxB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACpG,KAAK,gBAAgB;YACpB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,KAAK,iBAAiB;YACrB,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBACvC,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;gBACzC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;aAClC,CAAC;QACH,KAAK,gBAAgB;YACpB,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBACvC,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;gBACzC,YAAY,EAAE,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC;gBAC3C,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC7F,CAAC;QACH,KAAK,kBAAkB,CAAC;QACxB,KAAK,uBAAuB,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,aAAa;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC9G,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBACvC,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;gBACzC,OAAO,EAAE,KAAK,CAAC,OAAO;aACtB,CAAC;QACH,CAAC;QACD,KAAK,aAAa;YACjB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACxE,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBACvC,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;gBACzC,MAAM,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC;QACH,KAAK,sBAAsB;YAC1B,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBACvC,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;aACzC,CAAC;QACH,KAAK,iBAAiB;YACrB,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBAChC,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBACvC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;gBACxC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;gBACzC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;aACvC,CAAC;QACH,KAAK,oBAAoB;YACxB,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,uBAAuB,EAAE,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC;gBAC/D,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC1C,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;aACjC,CAAC;QACH;YACC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;AAAA,CACD;AAED,SAAS,oBAAoB,CAAC,KAAiC,EAAE,KAAqB,EAAQ;IAC7F,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,0BAA0B,EAAE,CAAC;YACjC,oEAAoE;YACpE,qEAAqE;YACrE,IAAI,yBAAyB,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACvD,IAAI,KAAK,CAAC,cAAc,KAAK,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC/E,MAAM,SAAS,GAAG,IAAI,GAAG,CACxB,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;iBACxB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;iBAC1D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAC3C,CAAC;YACF,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACzD,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAChG,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC/D,IAAI,UAAU,CAAC,OAAO,KAAK,OAAO;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAC5E,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpF,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAClE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC;YACnC,MAAM;QACP,CAAC;QACD,KAAK,sBAAsB,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC1G,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC/E,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;gBACxC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa;oBAC3E,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC1C,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC;YAC7C,MAAM;QACP,CAAC;QACD,KAAK,oBAAoB,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1E,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC5E,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3D,MAAM;QACP,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,IAAI,yBAAyB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACtG,IACC,KAAK,CAAC,KAAK,KAAK,UAAU;gBAC1B,KAAK,CAAC,UAAU;gBAChB,KAAK,CAAC,UAAU,KAAK,IAAI;gBACzB,KAAK,CAAC,YAAY,KAAK,IAAI;gBAC3B,KAAK,CAAC,QAAQ,KAAK,IAAI;gBACvB,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,KAAK;gBAC1C,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,kBAAkB;gBAChF,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;gBACzD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC3C,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;gBACrC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;gBAC/E,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC9B,CAAC,KAAK,EAAE,EAAE,CACT,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CACnG;gBAED,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACnD,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;YAC/C,MAAM;QACP,CAAC;QACD,KAAK,iBAAiB,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACpD,IACC,CAAC,KAAK;gBACN,KAAK,CAAC,KAAK,KAAK,UAAU;gBAC1B,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;gBACnD,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,KAAK;gBACpC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC;gBAEjF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzC,sEAAsE;YACtE,uEAAuE;YACvE,6DAA6D;YAC7D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE;gBACrC,GAAG,KAAK;gBACR,KAAK,EAAE,UAAU;gBACjB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC5B,CAAC,CAAC;YACH,MAAM;QACP,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC;gBACvE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;gBAC9F,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAClC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC3C,IACC,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;wBACjD,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;wBACvC,KAAK,CAAC,QAAQ;wBACd,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS;wBACrD,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,KAAK,CAAC,QAAQ,CAAC,GAAG;wBACzC,KAAK,CAAC,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,CAAC,UAAU;wBACvD,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;wBAE/C,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAC1C,CAAC;YACF,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE;gBACrC,GAAG,KAAK;gBACR,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ;aAC1C,CAAC,CAAC;YACH,MAAM;QACP,CAAC;QACD,KAAK,kBAAkB,CAAC;QACxB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,aAAa,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC9F,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAClF,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAClC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAChG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACP,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC/D,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBACvE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM;QACP,CAAC;QACD,KAAK,sBAAsB,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC9F,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAC5F,MAAM;QACP,CAAC;QACD,KAAK,iBAAiB,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC3F,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;gBACnF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzC,KAAK,CAAC,UAAU,CAAC,GAAG,CACnB,KAAK,CAAC,SAAS,EACf,MAAM,CAAC,MAAM,CAAC;gBACb,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;aAC9B,CAAC,CACF,CAAC;YACF,MAAM;QACP,CAAC;QACD,KAAK,oBAAoB;YACxB,wEAAwE;YACxE,kDAAkD;YAClD,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,SAAS,CAAC;YACT,MAAM,UAAU,GAAU,KAAK,CAAC;YAChC,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;AAAA,CACD;AAED,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAC/B,MAAiC,EACjC,IAA6B,EACP;IACtB,MAAM,KAAK,GAA+B,IAAI;QAC7C,CAAC,CAAC;YACA,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,YAAY,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YAC7F,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/E,UAAU,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;SAC7E;QACF,CAAC,CAAC;YACA,KAAK,EAAE,IAAI;YACX,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI,GAAG,EAAE;YACvB,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC;YAC3B,MAAM,EAAE,IAAI,GAAG,EAAE;YACjB,UAAU,EAAE,IAAI,GAAG,EAAE;SACrB,CAAC;IACJ,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC5B,CAAC,CAAC;AAAA,CACH;AAED,4EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,KAA0B,EAAmC;IAClG,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAC7F;AAED,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CACnC,IAAyB,EACzB,MAAiC,EACX;IACtB,MAAM,KAAK,GAA+B;QACzC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;QACxC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,UAAU,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;KACpC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC5B,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA0B,EAA0B;IAC1F,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,MAAM,CAAC,MAAM,CAC1B,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,CAC9G;QACD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;KACzD,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { canonicalClaim, claimSetsConflict, type ResourceClaimInput } from \"../../coordination/resource.ts\";\nimport {\n\ttype EffectState,\n\ttype GrantToken,\n\ttype ResourceClaim,\n\tSETTLED_EFFECT_STATES,\n\ttype Sequence,\n\tsequence,\n} from \"../../coordination/types.ts\";\nimport type { NamespaceIdentity } from \"./namespace-identity.ts\";\nimport { parseNamespaceIdentity } from \"./namespace-identity.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\n/**\n * Durable authority event contract (WP03).\n *\n * Mirrors `schemas/supervisor-event.schema.json` plus the review-required\n * extensions: `authority-epoch-advanced` (S4), `authorization-expired` (S5),\n * `session-registered` (S2), `result-retained` (S3 tombstone), and\n * `authority-snapshot` (GC archive boundary, §7). Quarantine reasons are\n * carried on the transition event that caused them — `cancel-requested` /\n * `authorization-expired` / `authority-epoch-advanced` transitions — so a\n * replay can distinguish cancel from expiry from restart (S5).\n */\n\nexport interface AuthorityEpochTransition {\n\treadonly grantSequence: Sequence;\n\treadonly outcome: \"cancelled\" | \"quarantined\";\n}\n\nexport interface AuthorityGrantRecord {\n\treadonly token: GrantToken;\n\t/** Idempotency key supplied by the caller; unique across grants and tombstones. */\n\treadonly commandId: string;\n\treadonly intentDigest: string;\n\t/** Reserved claims (S6: distinct from `actualClaims` bound at effect-started). */\n\treadonly claims: readonly ResourceClaim[];\n\treadonly weight: number;\n\treadonly state: EffectState;\n\treadonly effectLive: boolean;\n\treadonly dispatchId: string | null;\n\treadonly actualClaims: readonly ResourceClaim[] | null;\n\treadonly identity: NamespaceIdentity | null;\n}\n\nexport interface AuthorityTombstone {\n\treadonly commandId: string;\n\treadonly grantSequence: Sequence;\n\treadonly resultDigest: string;\n\treadonly retainedAtMs: number;\n\treadonly expiresAtMs: number;\n}\n\nexport interface AuthoritySnapshotState {\n\treadonly epoch: Sequence;\n\treadonly reconciledEpoch: Sequence | null;\n\treadonly incarnations: readonly { readonly sessionId: string; readonly incarnation: Sequence }[];\n\treadonly grantCounter: Sequence;\n\treadonly grants: readonly AuthorityGrantRecord[];\n\treadonly tombstones: readonly AuthorityTombstone[];\n}\n\nexport type AuthorityEvent =\n\t| {\n\t\t\treadonly kind: \"authority-epoch-advanced\";\n\t\t\treadonly authorityEpoch: Sequence;\n\t\t\treadonly writerId: string;\n\t\t\treadonly transitions: readonly AuthorityEpochTransition[];\n\t  }\n\t| { readonly kind: \"authority-reconciled\"; readonly authorityEpoch: Sequence }\n\t| { readonly kind: \"session-registered\"; readonly sessionId: string; readonly incarnation: Sequence }\n\t| { readonly kind: \"grant-reserved\"; readonly grant: AuthorityGrantRecord }\n\t| {\n\t\t\treadonly kind: \"dispatch-intent\";\n\t\t\treadonly grantSequence: Sequence;\n\t\t\treadonly authorityEpoch: Sequence;\n\t\t\treadonly dispatchId: string;\n\t  }\n\t| {\n\t\t\treadonly kind: \"effect-started\";\n\t\t\treadonly grantSequence: Sequence;\n\t\t\treadonly authorityEpoch: Sequence;\n\t\t\treadonly actualClaims: readonly ResourceClaim[];\n\t\t\treadonly identity?: NamespaceIdentity;\n\t  }\n\t| {\n\t\t\treadonly kind: \"cancel-requested\";\n\t\t\treadonly grantSequence: Sequence;\n\t\t\treadonly authorityEpoch: Sequence;\n\t\t\treadonly outcome: \"cancelled\" | \"quarantined\";\n\t  }\n\t| {\n\t\t\treadonly kind: \"authorization-expired\";\n\t\t\treadonly grantSequence: Sequence;\n\t\t\treadonly authorityEpoch: Sequence;\n\t\t\treadonly outcome: \"cancelled\" | \"quarantined\";\n\t  }\n\t| {\n\t\t\treadonly kind: \"quarantined\";\n\t\t\treadonly grantSequence: Sequence;\n\t\t\treadonly authorityEpoch: Sequence;\n\t\t\treadonly reason: \"restart\";\n\t  }\n\t| {\n\t\t\treadonly kind: \"termination-observed\";\n\t\t\treadonly grantSequence: Sequence;\n\t\t\treadonly authorityEpoch: Sequence;\n\t  }\n\t| {\n\t\t\treadonly kind: \"result-retained\";\n\t\t\treadonly commandId: string;\n\t\t\treadonly grantSequence: Sequence;\n\t\t\treadonly resultDigest: string;\n\t\t\treadonly retainedAtMs: number;\n\t\t\treadonly expiresAtMs: number;\n\t  }\n\t| {\n\t\t\treadonly kind: \"authority-snapshot\";\n\t\t\treadonly archivedThroughSequence: number;\n\t\t\treadonly continuesHash: string;\n\t\t\treadonly state: AuthoritySnapshotState;\n\t  };\n\nexport interface AuthorityProjection {\n\treadonly epoch: Sequence | null;\n\treadonly reconciledEpoch: Sequence | null;\n\treadonly incarnations: ReadonlyMap<string, Sequence>;\n\treadonly grantCounter: Sequence;\n\treadonly grants: ReadonlyMap<Sequence, AuthorityGrantRecord>;\n\treadonly tombstones: ReadonlyMap<string, AuthorityTombstone>;\n}\n\ninterface MutableAuthorityProjection {\n\tepoch: Sequence | null;\n\treconciledEpoch: Sequence | null;\n\tincarnations: Map<string, Sequence>;\n\tgrantCounter: Sequence;\n\tgrants: Map<Sequence, AuthorityGrantRecord>;\n\ttombstones: Map<string, AuthorityTombstone>;\n}\n\n/** A restart that bumped the epoch but never finished reconciliation stays pending. */\nexport function authorityPendingReconcile(state: AuthorityProjection): boolean {\n\treturn state.reconciledEpoch !== state.epoch;\n}\n\nfunction text(value: unknown): string {\n\tif (typeof value !== \"string\" || !/^[A-Za-z0-9_-]{1,128}$/.test(value)) throw new VerifiedRunError(\"integrity\");\n\treturn value;\n}\n\n/** bootId:pid style writer labels — looser than `text` but still bounded and printable. */\nfunction writerLabel(value: unknown): string {\n\tif (typeof value !== \"string\" || !/^[A-Za-z0-9_.:-]{1,160}$/.test(value)) throw new VerifiedRunError(\"integrity\");\n\treturn value;\n}\n\nfunction digest(value: unknown): string {\n\tconst result = text(value);\n\tif (!/^[a-f0-9]{64}$/.test(result)) throw new VerifiedRunError(\"integrity\");\n\treturn result;\n}\n\nfunction integer(value: unknown): number {\n\tif (typeof value !== \"number\" || !Number.isSafeInteger(value) || value < 0) throw new VerifiedRunError(\"integrity\");\n\treturn value;\n}\n\nfunction seq(value: unknown): Sequence {\n\ttry {\n\t\treturn sequence(value);\n\t} catch {\n\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n}\n\nfunction nextSeq(value: Sequence): Sequence {\n\treturn sequence(String(BigInt(value) + 1n));\n}\n\nfunction claim(raw: unknown): ResourceClaim {\n\tif (typeof raw !== \"object\" || raw === null) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\ttry {\n\t\treturn canonicalClaim(value as unknown as ResourceClaimInput);\n\t} catch {\n\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n}\n\nfunction claimList(raw: unknown, limit = 256): readonly ResourceClaim[] {\n\tif (!Array.isArray(raw) || raw.length === 0 || raw.length > limit) throw new VerifiedRunError(\"integrity\");\n\treturn Object.freeze(raw.map(claim));\n}\n\nfunction token(raw: unknown): GrantToken {\n\tif (typeof raw !== \"object\" || raw === null) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\treturn Object.freeze({\n\t\tauthorityEpoch: seq(value.authorityEpoch),\n\t\tgrantSequence: seq(value.grantSequence),\n\t\tsessionId: text(value.sessionId),\n\t\tsessionIncarnation: seq(value.sessionIncarnation),\n\t\tauthorizationDeadline: integer(value.authorizationDeadline),\n\t});\n}\n\nconst GRANT_STATES: ReadonlySet<string> = new Set([\n\t\"reserved\",\n\t\"starting\",\n\t\"running\",\n\t\"terminating\",\n\t\"quarantined\",\n\t\"terminated\",\n\t\"cancelled\",\n]);\n\nfunction grantRecord(raw: unknown): AuthorityGrantRecord {\n\tif (typeof raw !== \"object\" || raw === null) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\tif (typeof value.state !== \"string\" || !GRANT_STATES.has(value.state)) throw new VerifiedRunError(\"integrity\");\n\tif (typeof value.effectLive !== \"boolean\") throw new VerifiedRunError(\"integrity\");\n\tif (SETTLED_EFFECT_STATES.has(value.state as EffectState) && value.effectLive)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tif (value.state === \"quarantined\" && !value.effectLive) throw new VerifiedRunError(\"integrity\");\n\treturn Object.freeze({\n\t\ttoken: token(value.token),\n\t\tcommandId: text(value.commandId),\n\t\tintentDigest: digest(value.intentDigest),\n\t\tclaims: claimList(value.claims),\n\t\tweight: integer(value.weight),\n\t\tstate: value.state as EffectState,\n\t\teffectLive: value.effectLive,\n\t\tdispatchId: value.dispatchId === null ? null : text(value.dispatchId),\n\t\tactualClaims: value.actualClaims === null ? null : claimList(value.actualClaims),\n\t\tidentity: value.identity === null ? null : parseNamespaceIdentity(value.identity),\n\t});\n}\n\nfunction tombstone(raw: unknown): AuthorityTombstone {\n\tif (typeof raw !== \"object\" || raw === null) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\tconst retainedAtMs = integer(value.retainedAtMs);\n\tconst expiresAtMs = integer(value.expiresAtMs);\n\tif (expiresAtMs <= retainedAtMs) throw new VerifiedRunError(\"integrity\");\n\treturn Object.freeze({\n\t\tcommandId: text(value.commandId),\n\t\tgrantSequence: seq(value.grantSequence),\n\t\tresultDigest: digest(value.resultDigest),\n\t\tretainedAtMs,\n\t\texpiresAtMs,\n\t});\n}\n\nfunction snapshotState(raw: unknown): AuthoritySnapshotState {\n\tif (typeof raw !== \"object\" || raw === null) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\tif (!Array.isArray(value.incarnations) || !Array.isArray(value.grants) || !Array.isArray(value.tombstones))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst grants = value.grants.map(grantRecord);\n\tconst tombstones = value.tombstones.map(tombstone);\n\tconst sequences = new Set(grants.map((grant) => grant.token.grantSequence));\n\tif (sequences.size !== grants.length) throw new VerifiedRunError(\"integrity\");\n\t// grant commandIds are unique among grants; tombstone commandIds among\n\t// tombstones; a tombstone always references a retained grant (GC drops the\n\t// expired tombstone+grant pair together).\n\tif (new Set(grants.map((grant) => grant.commandId)).size !== grants.length) throw new VerifiedRunError(\"integrity\");\n\tif (new Set(tombstones.map((stone) => stone.commandId)).size !== tombstones.length)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tfor (const stone of tombstones) if (!sequences.has(stone.grantSequence)) throw new VerifiedRunError(\"integrity\");\n\treturn Object.freeze({\n\t\tepoch: seq(value.epoch),\n\t\treconciledEpoch: value.reconciledEpoch === null ? null : seq(value.reconciledEpoch),\n\t\tincarnations: Object.freeze(\n\t\t\tvalue.incarnations.map((entry: unknown) => {\n\t\t\t\tif (typeof entry !== \"object\" || entry === null) throw new VerifiedRunError(\"integrity\");\n\t\t\t\tconst item: Record<string, unknown> = Object.fromEntries(Object.entries(entry));\n\t\t\t\treturn Object.freeze({ sessionId: text(item.sessionId), incarnation: seq(item.incarnation) });\n\t\t\t}),\n\t\t),\n\t\tgrantCounter: seq(value.grantCounter),\n\t\tgrants: Object.freeze(grants),\n\t\ttombstones: Object.freeze(tombstones),\n\t});\n}\n\nexport function parseAuthorityEvent(raw: unknown): AuthorityEvent {\n\tif (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\tswitch (value.kind) {\n\t\tcase \"authority-epoch-advanced\": {\n\t\t\tif (!Array.isArray(value.transitions) || value.transitions.length > 4096)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tconst transitions = value.transitions.map((entry: unknown) => {\n\t\t\t\tif (typeof entry !== \"object\" || entry === null) throw new VerifiedRunError(\"integrity\");\n\t\t\t\tconst item: Record<string, unknown> = Object.fromEntries(Object.entries(entry));\n\t\t\t\tif (item.outcome !== \"cancelled\" && item.outcome !== \"quarantined\") throw new VerifiedRunError(\"integrity\");\n\t\t\t\treturn Object.freeze({ grantSequence: seq(item.grantSequence), outcome: item.outcome });\n\t\t\t});\n\t\t\tconst seen = new Set(transitions.map((entry) => entry.grantSequence));\n\t\t\tif (seen.size !== transitions.length) throw new VerifiedRunError(\"integrity\");\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tauthorityEpoch: seq(value.authorityEpoch),\n\t\t\t\twriterId: writerLabel(value.writerId),\n\t\t\t\ttransitions: Object.freeze(transitions),\n\t\t\t};\n\t\t}\n\t\tcase \"authority-reconciled\":\n\t\t\treturn { kind: value.kind, authorityEpoch: seq(value.authorityEpoch) };\n\t\tcase \"session-registered\":\n\t\t\treturn { kind: value.kind, sessionId: text(value.sessionId), incarnation: seq(value.incarnation) };\n\t\tcase \"grant-reserved\":\n\t\t\treturn { kind: value.kind, grant: grantRecord(value.grant) };\n\t\tcase \"dispatch-intent\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tgrantSequence: seq(value.grantSequence),\n\t\t\t\tauthorityEpoch: seq(value.authorityEpoch),\n\t\t\t\tdispatchId: text(value.dispatchId),\n\t\t\t};\n\t\tcase \"effect-started\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tgrantSequence: seq(value.grantSequence),\n\t\t\t\tauthorityEpoch: seq(value.authorityEpoch),\n\t\t\t\tactualClaims: claimList(value.actualClaims),\n\t\t\t\t...(value.identity === undefined ? {} : { identity: parseNamespaceIdentity(value.identity) }),\n\t\t\t};\n\t\tcase \"cancel-requested\":\n\t\tcase \"authorization-expired\": {\n\t\t\tif (value.outcome !== \"cancelled\" && value.outcome !== \"quarantined\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tgrantSequence: seq(value.grantSequence),\n\t\t\t\tauthorityEpoch: seq(value.authorityEpoch),\n\t\t\t\toutcome: value.outcome,\n\t\t\t};\n\t\t}\n\t\tcase \"quarantined\":\n\t\t\tif (value.reason !== \"restart\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tgrantSequence: seq(value.grantSequence),\n\t\t\t\tauthorityEpoch: seq(value.authorityEpoch),\n\t\t\t\treason: value.reason,\n\t\t\t};\n\t\tcase \"termination-observed\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tgrantSequence: seq(value.grantSequence),\n\t\t\t\tauthorityEpoch: seq(value.authorityEpoch),\n\t\t\t};\n\t\tcase \"result-retained\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tcommandId: text(value.commandId),\n\t\t\t\tgrantSequence: seq(value.grantSequence),\n\t\t\t\tresultDigest: digest(value.resultDigest),\n\t\t\t\tretainedAtMs: integer(value.retainedAtMs),\n\t\t\t\texpiresAtMs: integer(value.expiresAtMs),\n\t\t\t};\n\t\tcase \"authority-snapshot\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tarchivedThroughSequence: integer(value.archivedThroughSequence),\n\t\t\t\tcontinuesHash: digest(value.continuesHash),\n\t\t\t\tstate: snapshotState(value.state),\n\t\t\t};\n\t\tdefault:\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n}\n\nfunction reduceAuthorityEvent(state: MutableAuthorityProjection, event: AuthorityEvent): void {\n\tswitch (event.kind) {\n\t\tcase \"authority-epoch-advanced\": {\n\t\t\t// An epoch may only advance once the previous epoch reconciled. The\n\t\t\t// transition set must cover every unsettled grant exactly once (S4).\n\t\t\tif (authorityPendingReconcile(state)) throw new VerifiedRunError(\"integrity\");\n\t\t\tconst expected = nextSeq(state.epoch ?? sequence(\"0\"));\n\t\t\tif (event.authorityEpoch !== expected) throw new VerifiedRunError(\"integrity\");\n\t\t\tconst unsettled = new Set(\n\t\t\t\t[...state.grants.values()]\n\t\t\t\t\t.filter((grant) => !SETTLED_EFFECT_STATES.has(grant.state))\n\t\t\t\t\t.map((grant) => grant.token.grantSequence),\n\t\t\t);\n\t\t\tfor (const transition of event.transitions) {\n\t\t\t\tconst grant = state.grants.get(transition.grantSequence);\n\t\t\t\tif (!grant || !unsettled.has(transition.grantSequence)) throw new VerifiedRunError(\"integrity\");\n\t\t\t\tconst outcome = grant.effectLive ? \"quarantined\" : \"cancelled\";\n\t\t\t\tif (transition.outcome !== outcome) throw new VerifiedRunError(\"integrity\");\n\t\t\t\tstate.grants.set(transition.grantSequence, { ...grant, state: transition.outcome });\n\t\t\t\tunsettled.delete(transition.grantSequence);\n\t\t\t}\n\t\t\tif (unsettled.size !== 0) throw new VerifiedRunError(\"integrity\");\n\t\t\tstate.epoch = event.authorityEpoch;\n\t\t\tbreak;\n\t\t}\n\t\tcase \"authority-reconciled\": {\n\t\t\tif (state.epoch === null || event.authorityEpoch !== state.epoch) throw new VerifiedRunError(\"integrity\");\n\t\t\tif (!authorityPendingReconcile(state)) throw new VerifiedRunError(\"integrity\");\n\t\t\tfor (const grant of state.grants.values())\n\t\t\t\tif (!SETTLED_EFFECT_STATES.has(grant.state) && grant.state !== \"quarantined\")\n\t\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tstate.reconciledEpoch = event.authorityEpoch;\n\t\t\tbreak;\n\t\t}\n\t\tcase \"session-registered\": {\n\t\t\tconst current = state.incarnations.get(event.sessionId);\n\t\t\tconst expected = current === undefined ? sequence(\"1\") : nextSeq(current);\n\t\t\tif (event.incarnation !== expected) throw new VerifiedRunError(\"integrity\");\n\t\t\tstate.incarnations.set(event.sessionId, event.incarnation);\n\t\t\tbreak;\n\t\t}\n\t\tcase \"grant-reserved\": {\n\t\t\tconst grant = event.grant;\n\t\t\tif (authorityPendingReconcile(state) || state.epoch === null) throw new VerifiedRunError(\"integrity\");\n\t\t\tif (\n\t\t\t\tgrant.state !== \"reserved\" ||\n\t\t\t\tgrant.effectLive ||\n\t\t\t\tgrant.dispatchId !== null ||\n\t\t\t\tgrant.actualClaims !== null ||\n\t\t\t\tgrant.identity !== null ||\n\t\t\t\tgrant.token.authorityEpoch !== state.epoch ||\n\t\t\t\tstate.incarnations.get(grant.token.sessionId) !== grant.token.sessionIncarnation ||\n\t\t\t\tgrant.token.grantSequence !== nextSeq(state.grantCounter) ||\n\t\t\t\tstate.grants.has(grant.token.grantSequence) ||\n\t\t\t\tstate.tombstones.has(grant.commandId) ||\n\t\t\t\t[...state.grants.values()].some((other) => other.commandId === grant.commandId) ||\n\t\t\t\t[...state.grants.values()].some(\n\t\t\t\t\t(other) =>\n\t\t\t\t\t\t!SETTLED_EFFECT_STATES.has(other.state) && claimSetsConflict([...grant.claims], [...other.claims]),\n\t\t\t\t)\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tstate.grants.set(grant.token.grantSequence, grant);\n\t\t\tstate.grantCounter = grant.token.grantSequence;\n\t\t\tbreak;\n\t\t}\n\t\tcase \"dispatch-intent\": {\n\t\t\tconst grant = state.grants.get(event.grantSequence);\n\t\t\tif (\n\t\t\t\t!grant ||\n\t\t\t\tgrant.state !== \"reserved\" ||\n\t\t\t\tgrant.token.authorityEpoch !== event.authorityEpoch ||\n\t\t\t\tevent.authorityEpoch !== state.epoch ||\n\t\t\t\t[...state.grants.values()].some((other) => other.dispatchId === event.dispatchId)\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\t// A committed intent may already have spawned: the effect is possibly\n\t\t\t// live until a termination witness says otherwise (docs/04 uncertainty\n\t\t\t// window), so effectLive is set here, not at effect-started.\n\t\t\tstate.grants.set(event.grantSequence, {\n\t\t\t\t...grant,\n\t\t\t\tstate: \"starting\",\n\t\t\t\teffectLive: true,\n\t\t\t\tdispatchId: event.dispatchId,\n\t\t\t});\n\t\t\tbreak;\n\t\t}\n\t\tcase \"effect-started\": {\n\t\t\tconst grant = state.grants.get(event.grantSequence);\n\t\t\tif (!grant || (grant.state !== \"reserved\" && grant.state !== \"starting\"))\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tif (event.authorityEpoch !== state.epoch || grant.token.authorityEpoch !== event.authorityEpoch)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tif (event.identity !== undefined) {\n\t\t\t\tfor (const other of state.grants.values()) {\n\t\t\t\t\tif (\n\t\t\t\t\t\tother.token.grantSequence !== event.grantSequence &&\n\t\t\t\t\t\t!SETTLED_EFFECT_STATES.has(other.state) &&\n\t\t\t\t\t\tother.identity &&\n\t\t\t\t\t\tother.identity.namespace === event.identity.namespace &&\n\t\t\t\t\t\tother.identity.pid === event.identity.pid &&\n\t\t\t\t\t\tother.identity.startTicks === event.identity.startTicks &&\n\t\t\t\t\t\tother.identity.bootId === event.identity.bootId\n\t\t\t\t\t)\n\t\t\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\t\t}\n\t\t\t}\n\t\t\tstate.grants.set(event.grantSequence, {\n\t\t\t\t...grant,\n\t\t\t\tstate: \"running\",\n\t\t\t\teffectLive: true,\n\t\t\t\tactualClaims: event.actualClaims,\n\t\t\t\tidentity: event.identity ?? grant.identity,\n\t\t\t});\n\t\t\tbreak;\n\t\t}\n\t\tcase \"cancel-requested\":\n\t\tcase \"authorization-expired\":\n\t\tcase \"quarantined\": {\n\t\t\tconst grant = state.grants.get(event.grantSequence);\n\t\t\tif (!grant || SETTLED_EFFECT_STATES.has(grant.state)) throw new VerifiedRunError(\"integrity\");\n\t\t\tif (event.authorityEpoch !== state.epoch) throw new VerifiedRunError(\"integrity\");\n\t\t\tif (event.kind === \"quarantined\") {\n\t\t\t\tif (!grant.effectLive || grant.state === \"quarantined\") throw new VerifiedRunError(\"integrity\");\n\t\t\t\tstate.grants.set(event.grantSequence, { ...grant, state: \"quarantined\" });\n\t\t\t} else {\n\t\t\t\tconst outcome = grant.effectLive ? \"quarantined\" : \"cancelled\";\n\t\t\t\tif (event.outcome !== outcome) throw new VerifiedRunError(\"integrity\");\n\t\t\t\tstate.grants.set(event.grantSequence, { ...grant, state: event.outcome });\n\t\t\t}\n\t\t\tbreak;\n\t\t}\n\t\tcase \"termination-observed\": {\n\t\t\tconst grant = state.grants.get(event.grantSequence);\n\t\t\tif (!grant || SETTLED_EFFECT_STATES.has(grant.state)) throw new VerifiedRunError(\"integrity\");\n\t\t\tstate.grants.set(event.grantSequence, { ...grant, effectLive: false, state: \"terminated\" });\n\t\t\tbreak;\n\t\t}\n\t\tcase \"result-retained\": {\n\t\t\tconst grant = state.grants.get(event.grantSequence);\n\t\t\tif (!grant || grant.commandId !== event.commandId) throw new VerifiedRunError(\"integrity\");\n\t\t\tif (event.expiresAtMs <= event.retainedAtMs || state.tombstones.has(event.commandId))\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tstate.tombstones.set(\n\t\t\t\tevent.commandId,\n\t\t\t\tObject.freeze({\n\t\t\t\t\tcommandId: event.commandId,\n\t\t\t\t\tgrantSequence: event.grantSequence,\n\t\t\t\t\tresultDigest: event.resultDigest,\n\t\t\t\t\tretainedAtMs: event.retainedAtMs,\n\t\t\t\t\texpiresAtMs: event.expiresAtMs,\n\t\t\t\t}),\n\t\t\t);\n\t\t\tbreak;\n\t\t}\n\t\tcase \"authority-snapshot\":\n\t\t\t// Snapshots are archive boundaries, not stream events; the loader seeds\n\t\t\t// from them directly and rejects them mid-stream.\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\tdefault: {\n\t\t\tconst exhaustive: never = event;\n\t\t\tthrow new VerifiedRunError(String(exhaustive));\n\t\t}\n\t}\n}\n\n/** Deterministic replay over a seeded (post-snapshot) state. */\nexport function projectAuthority(\n\tevents: readonly AuthorityEvent[],\n\tseed?: AuthoritySnapshotState,\n): AuthorityProjection {\n\tconst state: MutableAuthorityProjection = seed\n\t\t? {\n\t\t\t\tepoch: seed.epoch,\n\t\t\t\treconciledEpoch: seed.reconciledEpoch,\n\t\t\t\tincarnations: new Map(seed.incarnations.map((entry) => [entry.sessionId, entry.incarnation])),\n\t\t\t\tgrantCounter: seed.grantCounter,\n\t\t\t\tgrants: new Map(seed.grants.map((grant) => [grant.token.grantSequence, grant])),\n\t\t\t\ttombstones: new Map(seed.tombstones.map((stone) => [stone.commandId, stone])),\n\t\t\t}\n\t\t: {\n\t\t\t\tepoch: null,\n\t\t\t\treconciledEpoch: null,\n\t\t\t\tincarnations: new Map(),\n\t\t\t\tgrantCounter: sequence(\"0\"),\n\t\t\t\tgrants: new Map(),\n\t\t\t\ttombstones: new Map(),\n\t\t\t};\n\tfor (const event of events) reduceAuthorityEvent(state, event);\n\treturn Object.freeze({\n\t\tepoch: state.epoch,\n\t\treconciledEpoch: state.reconciledEpoch,\n\t\tincarnations: state.incarnations,\n\t\tgrantCounter: state.grantCounter,\n\t\tgrants: state.grants,\n\t\ttombstones: state.tombstones,\n\t});\n}\n\n/** Grants still holding claims — quarantined included (broker parity). */\nexport function activeAuthorityGrants(state: AuthorityProjection): readonly AuthorityGrantRecord[] {\n\treturn [...state.grants.values()].filter((grant) => !SETTLED_EFFECT_STATES.has(grant.state));\n}\n\n/** Apply additional events to an existing projection (commit-time validation replay). */\nexport function applyAuthorityEvents(\n\tbase: AuthorityProjection,\n\tevents: readonly AuthorityEvent[],\n): AuthorityProjection {\n\tconst state: MutableAuthorityProjection = {\n\t\tepoch: base.epoch,\n\t\treconciledEpoch: base.reconciledEpoch,\n\t\tincarnations: new Map(base.incarnations),\n\t\tgrantCounter: base.grantCounter,\n\t\tgrants: new Map(base.grants),\n\t\ttombstones: new Map(base.tombstones),\n\t};\n\tfor (const event of events) reduceAuthorityEvent(state, event);\n\treturn Object.freeze({\n\t\tepoch: state.epoch,\n\t\treconciledEpoch: state.reconciledEpoch,\n\t\tincarnations: state.incarnations,\n\t\tgrantCounter: state.grantCounter,\n\t\tgrants: state.grants,\n\t\ttombstones: state.tombstones,\n\t});\n}\n\nexport function snapshotFromProjection(state: AuthorityProjection): AuthoritySnapshotState {\n\tif (state.epoch === null) throw new VerifiedRunError(\"integrity\");\n\treturn Object.freeze({\n\t\tepoch: state.epoch,\n\t\treconciledEpoch: state.reconciledEpoch,\n\t\tincarnations: Object.freeze(\n\t\t\t[...state.incarnations.entries()].map(([sessionId, incarnation]) => Object.freeze({ sessionId, incarnation })),\n\t\t),\n\t\tgrantCounter: state.grantCounter,\n\t\tgrants: Object.freeze([...state.grants.values()]),\n\t\ttombstones: Object.freeze([...state.tombstones.values()]),\n\t});\n}\n"]}

package/dist/core/verified-run/authority-journal.d.ts

@@ -0,0 +1,27 @@
+import { type AuthorityEvent, type AuthorityProjection } from "./authority-events.ts";
+export declare const GENESIS_PREVIOUS: string;
+export interface AuthorityRecord {
+    readonly version: 1;
+    readonly seq: number;
+    readonly previous: string;
+    readonly event: AuthorityEvent;
+    readonly hash: string;
+}
+export interface ParsedAuthority {
+    readonly lastSeq: number;
+    readonly lastHash: string;
+    readonly records: readonly AuthorityRecord[];
+    readonly events: readonly AuthorityEvent[];
+    readonly state: AuthorityProjection;
+    /** Private copy; reuse requires byte equality, not just mtime, size or inode. */
+    readonly bytes: Buffer;
+    readonly replay: {
+        readonly parsedRecords: number;
+        readonly reusedPrefixRecords: number;
+    };
+}
+export declare function materializeRecord(seq: number, previous: string, event: AuthorityEvent): AuthorityRecord;
+export declare function recordLine(record: AuthorityRecord): string;
+/** Inode/head fencing is checked by the owner before offering a prefix. */
+export declare function parseCommitted(bytes: Buffer, prefix?: ParsedAuthority): ParsedAuthority;
+//# sourceMappingURL=authority-journal.d.ts.map

package/dist/core/verified-run/authority-journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-journal.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/authority-journal.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,KAAK,cAAc,EACnB,KAAK,mBAAmB,EAKxB,MAAM,uBAAuB,CAAC;AAG/B,eAAO,MAAM,gBAAgB,QAAiB,CAAC;AAC/C,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,iFAAiF;IACjF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1F;AACD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,eAAe,CAGvG;AACD,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAE1D;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,eAAe,CA6DvF","sourcesContent":["import { canonicalJson } from \"../run-journal.ts\";\nimport { AuthorityStoreError } from \"./authority-errors.ts\";\nimport {\n\ttype AuthorityEvent,\n\ttype AuthorityProjection,\n\ttype AuthoritySnapshotState,\n\tapplyAuthorityEvents,\n\tparseAuthorityEvent,\n\tprojectAuthority,\n} from \"./authority-events.ts\";\nimport { digestObject } from \"./storage.ts\";\n\nexport const GENESIS_PREVIOUS = \"0\".repeat(64);\nexport interface AuthorityRecord {\n\treadonly version: 1;\n\treadonly seq: number;\n\treadonly previous: string;\n\treadonly event: AuthorityEvent;\n\treadonly hash: string;\n}\nexport interface ParsedAuthority {\n\treadonly lastSeq: number;\n\treadonly lastHash: string;\n\treadonly records: readonly AuthorityRecord[];\n\treadonly events: readonly AuthorityEvent[];\n\treadonly state: AuthorityProjection;\n\t/** Private copy; reuse requires byte equality, not just mtime, size or inode. */\n\treadonly bytes: Buffer;\n\treadonly replay: { readonly parsedRecords: number; readonly reusedPrefixRecords: number };\n}\nexport function materializeRecord(seq: number, previous: string, event: AuthorityEvent): AuthorityRecord {\n\tconst material = { version: 1 as const, seq, previous, event };\n\treturn Object.freeze({ ...material, hash: digestObject(material) });\n}\nexport function recordLine(record: AuthorityRecord): string {\n\treturn `${canonicalJson(record)}\\n`;\n}\n\n/** Inode/head fencing is checked by the owner before offering a prefix. */\nexport function parseCommitted(bytes: Buffer, prefix?: ParsedAuthority): ParsedAuthority {\n\tif (prefix && (bytes.length < prefix.bytes.length || !prefix.bytes.equals(bytes.subarray(0, prefix.bytes.length))))\n\t\tprefix = undefined;\n\tif (prefix && bytes.length === prefix.bytes.length)\n\t\treturn { ...prefix, replay: { parsedRecords: 0, reusedPrefixRecords: prefix.records.length } };\n\tif (!bytes.length)\n\t\treturn {\n\t\t\tlastSeq: 0,\n\t\t\tlastHash: GENESIS_PREVIOUS,\n\t\t\trecords: Object.freeze([]),\n\t\t\tevents: Object.freeze([]),\n\t\t\tstate: projectAuthority([]),\n\t\t\tbytes: Buffer.alloc(0),\n\t\t\treplay: { parsedRecords: 0, reusedPrefixRecords: 0 },\n\t\t};\n\tif (bytes.at(-1) !== 10) throw new AuthorityStoreError(\"corrupt\");\n\tlet text: string;\n\ttry {\n\t\ttext = new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes.subarray(prefix?.bytes.length ?? 0));\n\t} catch {\n\t\tthrow new AuthorityStoreError(\"corrupt\");\n\t}\n\tconst lines = text.slice(0, -1).split(\"\\n\");\n\tlet seed: AuthoritySnapshotState | undefined;\n\tlet previous = prefix?.lastHash ?? GENESIS_PREVIOUS;\n\tlet expectedSeq = (prefix?.lastSeq ?? 0) + 1;\n\tlet lastSeq = prefix?.lastSeq ?? 0;\n\tconst events: AuthorityEvent[] = [];\n\tconst records: AuthorityRecord[] = [];\n\tfor (const [index, line] of lines.entries()) {\n\t\tlet raw: unknown;\n\t\ttry {\n\t\t\traw = JSON.parse(line);\n\t\t} catch {\n\t\t\tthrow new AuthorityStoreError(\"corrupt\");\n\t\t}\n\t\tif (typeof raw !== \"object\" || raw === null || !(\"event\" in raw)) throw new AuthorityStoreError(\"corrupt\");\n\t\tconst event = parseAuthorityEvent(raw.event);\n\t\tconst record =\n\t\t\tevent.kind === \"authority-snapshot\"\n\t\t\t\t? materializeRecord(event.archivedThroughSequence + 1, event.continuesHash, event)\n\t\t\t\t: materializeRecord(expectedSeq, previous, event);\n\t\tif (canonicalJson(raw) !== canonicalJson(record)) throw new AuthorityStoreError(\"corrupt\");\n\t\tif (event.kind === \"authority-snapshot\") {\n\t\t\tif (index !== 0 || (prefix && prefix.records.length > 0)) throw new AuthorityStoreError(\"corrupt\");\n\t\t\tseed = event.state;\n\t\t} else events.push(event);\n\t\trecords.push(record);\n\t\tprevious = record.hash;\n\t\tlastSeq = record.seq;\n\t\texpectedSeq = record.seq + 1;\n\t}\n\treturn {\n\t\tlastSeq,\n\t\tlastHash: previous,\n\t\trecords: Object.freeze(prefix ? [...prefix.records, ...records] : records),\n\t\tevents: Object.freeze(prefix ? [...prefix.events, ...events] : events),\n\t\tstate: prefix && !seed ? applyAuthorityEvents(prefix.state, events) : projectAuthority(events, seed),\n\t\tbytes: Buffer.from(bytes),\n\t\treplay: { parsedRecords: records.length, reusedPrefixRecords: prefix?.records.length ?? 0 },\n\t};\n}\n"]}