pi-daddy 0.28.0 → 0.32.0

package/dist/governance/execution-retention.js

@@ -0,0 +1,317 @@
+import { createHash, randomUUID } from "node:crypto";
+import { mkdir, writeFile, rename } from "node:fs/promises";
+import { isAbsolute, join } from "node:path";
+import { buildExecutionRetentionManifest } from "./retention-contract.js";
+import { missingNativeSession, readNativeSession, } from "./native-session.js";
+export { buildExecutionRetentionManifest, parseExecutionRetentionManifest, RETENTION_SCHEMA, } from "./retention-contract.js";
+export { ENV_NATIVE_SESSION_ROOT, readNativeSession, parseNativeSessionBytes, } from "./native-session.js";
+import { ENV_EXECUTION_ARCHIVE } from "../kernel/env-names.js";
+export { ENV_EXECUTION_ARCHIVE } from "../kernel/env-names.js";
+import { isUnderPiProjectDir } from "../kernel/project-paths.js";
+/** Operator-owned archive boundary; never a model-facing parameter or an authority source. */
+export const RETENTION_VERSION = "2.0";
+const LIMIT = 1024 * 1024;
+const MAX_ACTIVE = 32;
+let active = 0;
+const digest = (bytes) => createHash("sha256").update(bytes).digest("hex");
+const drains = new WeakMap();
+/** Original live status only; drains admitted observations, not producer completeness or fsync. */
+export function drainExecutionRetention(status) {
+    const drain = drains.get(status);
+    if (!drain)
+        return Promise.reject(new TypeError("original live retention status required"));
+    return drain();
+}
+const missing = () => ({ status: "missing", path: null, sha256: null, bytes: null });
+/** Hash only an explicitly selected configuration. Callers must not pass environment/auth objects. */
+export const retentionConfigurationDigest = (configuration) => digest(JSON.stringify(configuration));
+/**
+ * A bounded, coalescing observation queue. No worker-control path awaits publication. A failed or stalled
+ * archive never changes required ledger/lease semantics. `flush` is exclusively for external archival at
+ * quiescence; it is NOT called by the spawner. Missing terminal publication means incomplete observation.
+ */
+export function beginExecutionRetention(identity, directory = process.env[ENV_EXECUTION_ARCHIVE]) {
+    const archiveId = randomUUID();
+    const valid = Boolean(directory && isAbsolute(directory) && !isUnderPiProjectDir(directory));
+    const admitted = valid && active < MAX_ACTIVE;
+    const root = admitted ? join(directory, archiveId) : null;
+    const manifestPath = root ? join(root, "manifest.json") : null;
+    let status = !directory ? "disabled" : admitted ? "pending" : "lost";
+    const manifest = {
+        version: RETENTION_VERSION,
+        archiveId,
+        identity: {
+            executionId: identity.executionId,
+            parentExecutionId: identity.parentExecutionId,
+            childId: identity.childId,
+            toolCallId: identity.toolCallId,
+            executor: identity.executor,
+            taskDigest: identity.taskDigest,
+            definitionDigest: identity.definitionDigest,
+            configurationDigest: identity.configurationDigest,
+            workspaceId: identity.workspaceId,
+        },
+        native: {
+            pid: null,
+            paneId: null,
+            agentName: null,
+            tabId: null,
+            sessionId: null,
+            sessionPath: null,
+            branchLeafId: null,
+        },
+        nativeSession: missingNativeSession(),
+        state: "running",
+        outcome: null,
+        content: {
+            stdout: missing(),
+            stderr: missing(),
+            paneSnapshot: missing(),
+            checkReceipt: missing(),
+            result: missing(),
+            session: missing(),
+        },
+        coverage: { complete: false, losses: ["native-session-content-unavailable", "active-branch-unknown"] },
+        acceptance: "not-assessed",
+    };
+    const buffers = new Map();
+    const written = new Set();
+    let total = 0;
+    let dirty = false;
+    let running;
+    let finished = false;
+    let released = false;
+    let nativeTask;
+    let nextNative;
+    let pinnedSessionId;
+    let pinnedFile;
+    const loss = (reason) => {
+        if (!manifest.coverage.losses.includes(reason))
+            manifest.coverage.losses.push(reason);
+    };
+    const release = () => {
+        if (admitted && !released) {
+            active--;
+            released = true;
+        }
+    };
+    if (admitted)
+        active++;
+    else if (directory)
+        loss("archive-unavailable-or-capacity-exceeded");
+    const publish = async () => {
+        try {
+            await mkdir(root, { recursive: true, mode: 0o700 });
+            while (dirty) {
+                dirty = false;
+                // Detached checkpoint: asynchronous I/O cannot mix later outcome/content into this generation.
+                const checkpoint = JSON.parse(JSON.stringify(manifest));
+                const contents = [...buffers];
+                for (const [kind, bytes] of contents) {
+                    const sha256 = digest(bytes);
+                    const name = `${kind}-${sha256}.bin`;
+                    if (!written.has(name)) {
+                        await writeFile(join(root, name), bytes, { flag: "wx", mode: 0o600 });
+                        written.add(name);
+                    }
+                    checkpoint.content[kind] = { status: "retained", path: name, sha256, bytes: bytes.length };
+                }
+                await writeFile(join(root, "manifest.pending"), JSON.stringify(buildExecutionRetentionManifest(checkpoint)) + "\n", { mode: 0o600 });
+                await rename(join(root, "manifest.pending"), manifestPath);
+                status = "retained";
+            }
+        }
+        catch {
+            status = "lost";
+            loss("archive-write-failed");
+            buffers.clear();
+            release();
+        }
+        finally {
+            running = undefined;
+            if (finished && !nativeTask) {
+                buffers.clear();
+                release();
+            }
+        }
+    };
+    const schedule = () => {
+        if (!admitted || status === "lost" || released)
+            return;
+        dirty = true;
+        status = "pending";
+        if (!running)
+            running = Promise.resolve().then(publish);
+    };
+    const observeSession = (reference) => {
+        if (finished || !admitted || released || status === "lost")
+            return;
+        if (nextNative && (nextNative.source !== reference.source || nextNative.value !== reference.value))
+            loss("native-session-reference-coalesced");
+        nextNative = {
+            source: reference.source,
+            value: reference.value,
+            ...(reference.manager ? { manager: reference.manager } : {}),
+        };
+        if (nativeTask)
+            return;
+        nativeTask = Promise.resolve()
+            .then(async () => {
+            while (nextNative) {
+                const current = nextNative;
+                nextNative = undefined;
+                const captured = current.source === "herdr-id"
+                    ? {
+                        observation: {
+                            ...missingNativeSession(),
+                            source: current.source,
+                            status: "missing",
+                            sessionId: current.value,
+                            reason: "native-session-path-unavailable",
+                        },
+                    }
+                    : await readNativeSession({
+                        path: current.value,
+                        source: current.source,
+                        manager: current.manager,
+                        expectedSessionId: pinnedSessionId,
+                        expectedFile: pinnedFile,
+                    });
+                if (captured.observation.sessionId && captured.fileIdentity)
+                    pinnedFile ??= captured.fileIdentity;
+                let observation = captured.observation;
+                if (pinnedSessionId && observation.sessionId && pinnedSessionId !== observation.sessionId) {
+                    observation = {
+                        ...missingNativeSession(),
+                        source: current.source,
+                        status: "changed",
+                        reason: "native-session-id-changed",
+                    };
+                }
+                if (observation.sessionId)
+                    pinnedSessionId ??= observation.sessionId;
+                manifest.nativeSession = { ...observation };
+                manifest.native.sessionId = observation.sessionId;
+                manifest.native.sessionPath = observation.sessionPath;
+                manifest.native.branchLeafId = observation.branchLeafId;
+                buffers.delete("session");
+                if (captured.bytes && observation === captured.observation)
+                    buffers.set("session", captured.bytes);
+                if (observation.reason)
+                    loss(observation.reason);
+                schedule();
+            }
+        })
+            .catch(() => {
+            loss("native-session-observation-failed");
+        })
+            .finally(() => {
+            nativeTask = undefined;
+            schedule();
+        });
+    };
+    const drain = async () => {
+        while (nativeTask || running) {
+            if (nativeTask)
+                await nativeTask;
+            if (running)
+                await running;
+        }
+        return { manifestPath, status };
+    };
+    schedule();
+    return {
+        /** Read-only native API reference; never derive IDs from the locator or a displayed name. */
+        observeSession,
+        observeSessionManager(manager) {
+            try {
+                const value = manager.getSessionFile();
+                if (value)
+                    observeSession({ source: "pi-session-manager", value, manager });
+                else {
+                    loss("native-session-not-persisted");
+                    schedule();
+                }
+            }
+            catch {
+                loss("native-session-manager-unavailable");
+                schedule();
+            }
+        },
+        status: () => {
+            const value = { manifestPath, status };
+            drains.set(value, drain);
+            return value;
+        },
+        native(value) {
+            if (finished)
+                return;
+            for (const key of ["pid", "paneId", "agentName", "tabId"]) {
+                const item = value[key];
+                if (key === "pid") {
+                    if (typeof item === "number" && Number.isSafeInteger(item) && item > 0)
+                        manifest.native.pid = item;
+                }
+                else if (typeof item === "string" && item.length <= 4096)
+                    manifest.native[key] = item;
+            }
+            schedule();
+        },
+        capture(kind, bytes, replace = false) {
+            if (finished || !admitted || status === "lost")
+                return;
+            const indivisible = kind === "checkReceipt" || kind === "result";
+            if (indivisible)
+                replace = true;
+            const old = buffers.get(kind) ?? Buffer.alloc(0);
+            const available = indivisible ? LIMIT : LIMIT - total + (replace ? old.length : 0);
+            // Receipts and assembled results each have reserved capacity and are never partially published.
+            if (indivisible && bytes.length > available) {
+                loss(`${kind === "checkReceipt" ? "check-receipt" : kind}-not-retained-capacity`);
+                schedule();
+                return;
+            }
+            const kept = Buffer.from(bytes.subarray(0, Math.max(0, available)));
+            if (kept.length !== bytes.length)
+                loss(`${kind}-observation-dropped`);
+            if (kind === "paneSnapshot")
+                loss("pane-snapshot-not-full-transcript");
+            const next = replace ? kept : Buffer.concat([old, kept]);
+            if (!indivisible)
+                total += next.length - old.length;
+            buffers.set(kind, next);
+            schedule();
+        },
+        finish(outcome) {
+            if (finished)
+                return;
+            manifest.outcome = {
+                code: outcome.code,
+                signal: outcome.signal,
+                timedOut: outcome.timedOut,
+                aborted: outcome.aborted,
+                truncated: outcome.truncated,
+                failed: outcome.failed,
+            };
+            manifest.state = "terminal";
+            if (outcome.truncated)
+                loss("executor-output-truncated");
+            if (outcome.aborted || outcome.timedOut)
+                loss("execution-interrupted");
+            finished = true;
+            schedule();
+        },
+        /** Observation-only diagnostic; never establishes successful execution or accepted work. */
+        coverage: () => ({ complete: false, losses: [...manifest.coverage.losses] }),
+        flush: drain,
+    };
+}
+/** Public consumer check: neither a reference nor a wire status supplies the missing bytes. */
+export function verifyRetainedBytes(reference, bytes) {
+    if (reference.status !== "retained" || bytes === undefined)
+        return "missing";
+    if (reference.bytes !== bytes.byteLength || reference.sha256 !== digest(bytes))
+        return "mismatch";
+    return "retained";
+}
+//# sourceMappingURL=execution-retention.js.map

package/dist/governance/execution-retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-retention.js","sourceRoot":"","sources":["../../src/governance/execution-retention.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,iBAAiB,GAIlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,EAC/B,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,uBAAuB,GAGxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1B,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,MAAM,MAAM,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAkDhG,MAAM,MAAM,GAAG,IAAI,OAAO,EAAmD,CAAC;AAC9E,mGAAmG;AACnG,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC,CAAC;IAC5F,OAAO,KAAK,EAAE,CAAC;AACjB,CAAC;AACD,MAAM,OAAO,GAAG,GAAoB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAEtG,sGAAsG;AACtG,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,aAAsB,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;AAEtH;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAA2B,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACjH,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,KAAK,IAAI,MAAM,GAAG,UAAU,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,IAAI,MAAM,GAA8B,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAChG,MAAM,QAAQ,GAA+B;QAC3C,OAAO,EAAE,iBAAiB;QAC1B,SAAS;QACT,QAAQ,EAAE;YACR,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;YAC3C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC;QACD,MAAM,EAAE;YACN,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;SACnB;QACD,aAAa,EAAE,oBAAoB,EAAE;QACrC,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACP,MAAM,EAAE,OAAO,EAAE;YACjB,MAAM,EAAE,OAAO,EAAE;YACjB,YAAY,EAAE,OAAO,EAAE;YACvB,YAAY,EAAE,OAAO,EAAE;YACvB,MAAM,EAAE,OAAO,EAAE;YACjB,OAAO,EAAE,OAAO,EAAE;SACnB;QACD,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,oCAAoC,EAAE,uBAAuB,CAAC,EAAE;QACtG,UAAU,EAAE,cAAc;KAC3B,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,OAAkC,CAAC;IACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAqC,CAAC;IAC1C,IAAI,UAMS,CAAC;IACd,IAAI,eAAmC,CAAC;IACxC,IAAI,UAAgD,CAAC;IACrD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE;QAC9B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC;YACT,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,QAAQ;QAAE,MAAM,EAAE,CAAC;SAClB,IAAI,SAAS;QAAE,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,OAAO,KAAK,EAAE,CAAC;gBACb,KAAK,GAAG,KAAK,CAAC;gBACd,+FAA+F;gBAC/F,MAAM,UAAU,GAA+B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACpF,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;gBAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC7B,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,MAAM,MAAM,CAAC;oBACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,MAAM,SAAS,CAAC,IAAI,CAAC,IAAK,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACvE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACpB,CAAC;oBACD,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7F,CAAC;gBACD,MAAM,SAAS,CACb,IAAI,CAAC,IAAK,EAAE,kBAAkB,CAAC,EAC/B,IAAI,CAAC,SAAS,CAAC,+BAA+B,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,EAClE,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;gBACF,MAAM,MAAM,CAAC,IAAI,CAAC,IAAK,EAAE,kBAAkB,CAAC,EAAE,YAAa,CAAC,CAAC;gBAC7D,MAAM,GAAG,UAAU,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,MAAM,CAAC;YAChB,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAC7B,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,SAAS,CAAC;YACpB,IAAI,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM,IAAI,QAAQ;YAAE,OAAO;QACvD,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,GAAG,SAAS,CAAC;QACnB,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,cAAc,GAAG,CAAC,SAAyC,EAAE,EAAE;QACnE,IAAI,QAAQ,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO;QACnE,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC;YAChG,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC7C,UAAU,GAAG;YACX,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC;QACF,IAAI,UAAU;YAAE,OAAO;QACvB,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE;aAC3B,IAAI,CAAC,KAAK,IAAI,EAAE;YACf,OAAO,UAAU,EAAE,CAAC;gBAClB,MAAM,OAAO,GAAG,UAAU,CAAC;gBAC3B,UAAU,GAAG,SAAS,CAAC;gBACvB,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,UAAU;oBAC3B,CAAC,CAAC;wBACE,WAAW,EAAE;4BACX,GAAG,oBAAoB,EAAE;4BACzB,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,MAAM,EAAE,SAAkB;4BAC1B,SAAS,EAAE,OAAO,CAAC,KAAK;4BACxB,MAAM,EAAE,iCAAiC;yBAC1C;qBACF;oBACH,CAAC,CAAC,MAAM,iBAAiB,CAAC;wBACtB,IAAI,EAAE,OAAO,CAAC,KAAK;wBACnB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,iBAAiB,EAAE,eAAe;wBAClC,YAAY,EAAE,UAAU;qBACzB,CAAC,CAAC;gBACT,IAAI,QAAQ,CAAC,WAAW,CAAC,SAAS,IAAI,QAAQ,CAAC,YAAY;oBAAE,UAAU,KAAK,QAAQ,CAAC,YAAY,CAAC;gBAClG,IAAI,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;gBACvC,IAAI,eAAe,IAAI,WAAW,CAAC,SAAS,IAAI,eAAe,KAAK,WAAW,CAAC,SAAS,EAAE,CAAC;oBAC1F,WAAW,GAAG;wBACZ,GAAG,oBAAoB,EAAE;wBACzB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,2BAA2B;qBACpC,CAAC;gBACJ,CAAC;gBACD,IAAI,WAAW,CAAC,SAAS;oBAAE,eAAe,KAAK,WAAW,CAAC,SAAS,CAAC;gBACrE,QAAQ,CAAC,aAAa,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;gBAC5C,QAAQ,CAAC,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;gBAClD,QAAQ,CAAC,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;gBACtD,QAAQ,CAAC,MAAM,CAAC,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;gBACxD,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC1B,IAAI,QAAQ,CAAC,KAAK,IAAI,WAAW,KAAK,QAAQ,CAAC,WAAW;oBAAE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACnG,IAAI,WAAW,CAAC,MAAM;oBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBACjD,QAAQ,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC5C,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,UAAU,GAAG,SAAS,CAAC;YACvB,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,IAA8B,EAAE;QACjD,OAAO,UAAU,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,UAAU;gBAAE,MAAM,UAAU,CAAC;YACjC,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC,CAAC;IACF,QAAQ,EAAE,CAAC;IACX,OAAO;QACL,6FAA6F;QAC7F,cAAc;QACd,qBAAqB,CAAC,OAA6B;YACjD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;gBACvC,IAAI,KAAK;oBAAE,cAAc,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;qBACvE,CAAC;oBACJ,IAAI,CAAC,8BAA8B,CAAC,CAAC;oBACrC,QAAQ,EAAE,CAAC;gBACb,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,oCAAoC,CAAC,CAAC;gBAC3C,QAAQ,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAoB,EAAE;YAC5B,MAAM,KAAK,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,KAAoG;YACzG,IAAI,QAAQ;gBAAE,OAAO;YACrB,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAU,EAAE,CAAC;gBACnE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;oBAClB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;wBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC;gBACrG,CAAC;qBAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI;oBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YAC1F,CAAC;YACD,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,OAAO,CACL,IAAsE,EACtE,KAAiB,EACjB,OAAO,GAAG,KAAK;YAEf,IAAI,QAAQ,IAAI,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO;YACvD,MAAM,WAAW,GAAG,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,QAAQ,CAAC;YACjE,IAAI,WAAW;gBAAE,OAAO,GAAG,IAAI,CAAC;YAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnF,gGAAgG;YAChG,IAAI,WAAW,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC5C,IAAI,CAAC,GAAG,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,CAAC;gBAClF,QAAQ,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;YACpE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;YACtE,IAAI,IAAI,KAAK,cAAc;gBAAE,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,WAAW;gBAAE,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxB,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,MAAM,CAAC,OAA2D;YAChE,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,CAAC,OAAO,GAAG;gBACjB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC;YACF,QAAQ,CAAC,KAAK,GAAG,UAAU,CAAC;YAC5B,IAAI,OAAO,CAAC,SAAS;gBAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ;gBAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACvE,QAAQ,GAAG,IAAI,CAAC;YAChB,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,4FAA4F;QAC5F,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAc,EAAE,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,KAAK,EAAE,KAAK;KACb,CAAC;AACJ,CAAC;AAGD,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CACjC,SAA0B,EAC1B,KAAkB;IAElB,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7E,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAClG,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/governance/file-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.d.ts","sourceRoot":"","sources":["../../src/governance/file-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,2GAA2G;AAC3G,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,qFAAqF;AACrF,eAAO,MAAM,aAAa,QAAS,CAAC;AAEpC;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,KAAK,EAAE,MAAM;CAI1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC;CAC7C;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACtB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,CAAC,CAAC,CA4EZ"}

package/dist/governance/file-lock.js

@@ -0,0 +1,205 @@
+/**
+ * One cross-process file lock, shared by producer ledgers and the approvals store.
+ *
+ * **Extracted rather than copied (R-49).** The ledger has had this lock since fan-out made a second writer
+ * possible; the approvals store had an unlocked read-modify-write, so session 1 could load, session 2 could
+ * revoke, and session 1's next save would **restore the revoked entry** — falsifying a property
+ * `approval-store.ts` documents in so many words. The mitigation already existed twenty lines away. A
+ * second implementation is how a fix comes to contain a smaller copy of the bug it fixed, which has happened
+ * twice in this package (R-38's preview, ADR-0022's republish path), so there is exactly one of these.
+ *
+ * **The two callers want opposite failure behaviour, and that is the caller's decision, not this module's.**
+ * A ledger write that cannot take the lock must fail the delegation closed — a child running with granted
+ * capabilities and no audit line is the thing the ledger exists to prevent. An approvals write that cannot
+ * take the lock must NOT fail the work: the human already said yes, and the store is a convenience cache
+ * (ADR-0020). So this throws `LockTimeoutError`, distinguishable from every other failure, and each caller
+ * decides what that means.
+ */
+import { open, readFile, rm, stat } from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+/** How long to wait for another writer to finish before giving up. Short: failing closed beats hanging. */
+export const LOCK_TIMEOUT_MS = 2000;
+/** A lock older than this is treated as abandoned by a killed process and broken. */
+export const STALE_LOCK_MS = 10_000;
+/**
+ * Raised only when the wait ran out. Its own type so a caller can tell "somebody else is writing" from
+ * "this filesystem rejected the write", which want different messages and, for the approvals store,
+ * different outcomes.
+ */
+export class LockTimeoutError extends Error {
+    constructor(label) {
+        super(`${label} is locked by another writer (waited ${LOCK_TIMEOUT_MS}ms)`);
+        this.name = "LockTimeoutError";
+    }
+}
+function lockPolicy(options) {
+    if (options === undefined)
+        return "age";
+    const invalid = () => {
+        throw new TypeError("invalid file lock options");
+    };
+    if (options === null ||
+        typeof options !== "object" ||
+        Array.isArray(options) ||
+        ![Object.prototype, null].includes(Object.getPrototypeOf(options)))
+        return invalid();
+    const keys = Reflect.ownKeys(options);
+    if (keys.some((key) => key !== "staleRecovery"))
+        return invalid();
+    if (!keys.length)
+        return "age";
+    const field = Object.getOwnPropertyDescriptor(options, "staleRecovery");
+    if (!Object.hasOwn(field, "value") || !field.enumerable || !["age", "disabled"].includes(field.value))
+        return invalid();
+    return field.value;
+}
+/**
+ * Run `work` while holding an exclusive lock beside `path`.
+ * Explicit disabled recovery never reclaims by age/liveness. V4 selects it internally; an orphan
+ * requires separately authorized quiescent recovery, not a timer or automatic operator action.
+ * The age-based behavior described below remains the default for legacy callers.
+ *
+ * **Why a lock at all.** `O_APPEND` is atomic for one write to a regular file on a POSIX filesystem, and the
+ * guarantee does **not** hold on drvfs (`/mnt/c` under WSL2) or NFS — which is exactly where this project
+ * runs. The approvals store never had the guarantee anyway: read-modify-write is not one write.
+ *
+ * **A lock introduces its own failure mode and it is handled deliberately.** A process killed while holding
+ * the lock would otherwise block every future write forever, so a lock older than `STALE_LOCK_MS` is broken.
+ * Every delete proves ownership first (`removeIfOurs`) — see the token comment in the loop for the two
+ * mutual-exclusion breaks that came from not doing so, both reproduced across real OS processes.
+ *
+ * **What staleness actually measures, stated because it is not what it sounds like.** `STALE_LOCK_MS`
+ * compares the lock's mtime to now; it never checks whether the owner is alive. So *any* 10s stall of the
+ * holder hands the lock on — a `SIGSTOP`, a laptop suspend, swap thrash, a debugger breakpoint, a long GC
+ * pause. Measured on this project's own filesystems, no realistic `work()` comes near it: one ledger append
+ * is 0.1ms on ext4 and 21ms on drvfs, and a 10,000-entry `saveApproval` is 30ms / 97ms. Sixteen-way
+ * contention raises *waiters'* time, never the holder's — max hold measured at 49ms. So the threshold is
+ * two orders of magnitude clear of normal operation and is not guarded against abnormal suspension.
+ *
+ * The timeout is short *on purpose*: work refused because a file was busy is recoverable and loud, while
+ * work that hangs waiting for a lock is neither.
+ */
+export async function withFileLock(path, label, work, options) {
+    const staleRecovery = lockPolicy(options); // Detached once, before I/O or any wait.
+    const lockPath = `${path}.lock`;
+    const deadline = Date.now() + LOCK_TIMEOUT_MS;
+    for (;;) {
+        // **A token, and the reason mutual exclusion depends on it (R-67).** `rm(path)` deletes whatever is at
+        // the path *now*, not the lock this process created — so the previous version broke its own invariant
+        // two ways, both reproduced across real OS processes:
+        //
+        //  - the stale-break `stat` and `rm` are two awaits, so a process descheduled between them could delete
+        //    a LIVE lock another waiter had just created, and then succeed at its own create: two holders;
+        //  - worse, the `finally` removed the lock unconditionally. A holder whose lock had been broken out
+        //    from under it still freed the NEW owner's lock on the way out — and the damage then propagated to
+        //    processes that raced nothing and observed nothing wrong, which is how one break became a chain.
+        //
+        // Writing a unique token and re-reading it before every delete makes both inexpressible: this process
+        // only ever removes a file it can prove is its own. The docstring used to claim "whichever wins the
+        // exclusive create proceeds, which is correct because only one can" — true of the create and false of
+        // the delete, which is what made it convincing.
+        const token = `${process.pid}:${randomUUID()}`;
+        let handle;
+        try {
+            handle = await open(lockPath, "wx");
+            await handle.writeFile(`${token}\n`, "utf8");
+        }
+        catch (error) {
+            // The handle may exist even though the WRITE failed (ENOSPC, EDQUOT, EFBIG). The old code jumped
+            // straight here and rethrew, so the already-created lock file was left on disk and its descriptor
+            // leaked to GC — an orphan that blocks every writer for a full STALE_LOCK_MS and feeds the EMFILE
+            // path below. Close and remove before doing anything else; `ours` is safe because we just made it.
+            if (handle) {
+                await handle.close().catch(() => undefined);
+                await removeIfOurs(lockPath, token);
+                handle = undefined;
+            }
+            const code = error.code;
+            if (code !== "EEXIST")
+                throw error;
+            // Someone else holds it. Break it only if it is old enough to be abandoned — and only the exact file
+            // we judged, so a lock created in the gap survives.
+            if (staleRecovery === "age")
+                try {
+                    const held = await stat(lockPath);
+                    if (Date.now() - held.mtimeMs > STALE_LOCK_MS) {
+                        const abandoned = await readFile(lockPath, "utf8").catch(() => undefined);
+                        if (abandoned !== undefined)
+                            await removeIfOurs(lockPath, abandoned.trim());
+                    }
+                }
+                catch {
+                    /* it vanished between the check and the stat — the next attempt will simply take it */
+                }
+            if (Date.now() >= deadline)
+                throw new LockTimeoutError(label);
+            await new Promise((r) => setTimeout(r, 25));
+            continue;
+        }
+        let bodyFailed = false;
+        try {
+            return await work();
+        }
+        catch (error) {
+            bodyFailed = true;
+            throw error;
+        }
+        finally {
+            if (staleRecovery === "disabled") {
+                try {
+                    await releaseDisabledLock(handle, lockPath, token);
+                }
+                catch (error) {
+                    if (!bodyFailed)
+                        throw error;
+                } // Preserve even a falsy primary rejection.
+            }
+            else {
+                await handle.close().catch(() => undefined);
+                // Legacy age policy remains best effort; never remove a demonstrably different token.
+                await removeIfOurs(lockPath, token);
+            }
+        }
+    }
+}
+/** Disabled ownership cannot silently manufacture an indefinite orphan after a successful body.
+ * Try token-checked removal even if close failed; report the first failure after both attempts.
+ * Appended bytes are not rolled back, and a primary body error takes precedence at the caller. */
+async function releaseDisabledLock(handle, lockPath, token) {
+    let failure = null;
+    try {
+        await handle.close();
+    }
+    catch (error) {
+        failure = { error };
+    }
+    try {
+        await removeIfOurs(lockPath, token, true);
+    }
+    catch (error) {
+        failure ??= { error };
+    }
+    if (failure)
+        throw failure.error;
+}
+/**
+ * Delete the lock only if it still holds `token`.
+ *
+ * Read-then-delete is itself two operations, so this is not atomic either — but it narrows the window from
+ * "the whole of `work()`" to "between a read and an unlink", and it removes the *systematic* break entirely:
+ * a process can no longer delete a lock it demonstrably never owned.
+ */
+async function removeIfOurs(lockPath, token, strict = false) {
+    try {
+        const held = await readFile(lockPath, "utf8");
+        if (held.trim() !== token)
+            return;
+        await rm(lockPath, { force: true });
+    }
+    catch (error) {
+        if (strict)
+            throw error; // No ownership inference or force-delete after a failed read.
+        /* Legacy: already gone, or unreadable — this process must not force removal. */
+    }
+}
+//# sourceMappingURL=file-lock.js.map

package/dist/governance/file-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.js","sourceRoot":"","sources":["../../src/governance/file-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,2GAA2G;AAC3G,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,qFAAqF;AACrF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAEpC;;;;GAIG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,KAAa;QACvB,KAAK,CAAC,GAAG,KAAK,wCAAwC,eAAe,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAKD,SAAS,UAAU,CAAC,OAAoC;IACtD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,OAAO,GAAG,GAAU,EAAE;QAC1B,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,IACE,OAAO,KAAK,IAAI;QAChB,OAAO,OAAO,KAAK,QAAQ;QAC3B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACtB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAElE,OAAO,OAAO,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,eAAe,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,eAAe,CAAE,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QACnG,OAAO,OAAO,EAAE,CAAC;IACnB,OAAO,KAAK,CAAC,KAAK,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,KAAa,EACb,IAAsB,EACtB,OAAyB;IAEzB,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,yCAAyC;IACpF,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;IAE9C,SAAS,CAAC;QACR,uGAAuG;QACvG,sGAAsG;QACtG,sDAAsD;QACtD,EAAE;QACF,wGAAwG;QACxG,mGAAmG;QACnG,oGAAoG;QACpG,uGAAuG;QACvG,qGAAqG;QACrG,EAAE;QACF,sGAAsG;QACtG,oGAAoG;QACpG,sGAAsG;QACtG,gDAAgD;QAChD,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;QAC/C,IAAI,MAAoD,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iGAAiG;YACjG,kGAAkG;YAClG,kGAAkG;YAClG,mGAAmG;YACnG,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC5C,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACpC,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;YAC/C,IAAI,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YAEnC,qGAAqG;YACrG,oDAAoD;YACpD,IAAI,aAAa,KAAK,KAAK;gBACzB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAClC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,aAAa,EAAE,CAAC;wBAC9C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;wBAC1E,IAAI,SAAS,KAAK,SAAS;4BAAE,MAAM,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC9E,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,uFAAuF;gBACzF,CAAC;YAEH,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QAED,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,UAAU;wBAAE,MAAM,KAAK,CAAC;gBAC/B,CAAC,CAAC,2CAA2C;YAC/C,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC5C,sFAAsF;gBACtF,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;kGAEkG;AAClG,KAAK,UAAU,mBAAmB,CAChC,MAAwC,EACxC,QAAgB,EAChB,KAAa;IAEb,IAAI,OAAO,GAA8B,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,KAAa,EAAE,MAAM,GAAG,KAAK;IACzE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK;YAAE,OAAO;QAClC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM;YAAE,MAAM,KAAK,CAAC,CAAC,8DAA8D;QACvF,gFAAgF;IAClF,CAAC;AACH,CAAC"}

package/dist/governance/finalization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalization.d.ts","sourceRoot":"","sources":["../../src/governance/finalization.ts"],"names":[],"mappings":"AAAA,UAAU,SAAS;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAMD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAiCpH;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAEjG"}

package/dist/governance/finalization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalization.js","sourceRoot":"","sources":["../../src/governance/finalization.ts"],"names":[],"mappings":"AAKA,MAAM,gBAAgB,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC;AAI7D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAI,SAA2B,EAAE,UAAgC;IACtG,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,OAAgB,CAAC;IACrB,IAAI,MAAqB,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,GAAG,IAAI,CAAC;QACtB,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAA6C,EAAE,CAAC;IAC9D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1E,MAAM,OAAO,CAAC;IAChB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,cAAc,CACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EACxC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,MAAW,CAAC;AACrB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,SAAsC;IACtF,OAAO,KAAK,YAAY,KAAK,IAAK,KAA6B,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;AAC9G,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAgB,EAChB,QAA0D;IAE1D,IAAI,OAAO,YAAY,KAAK,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAA8B,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,gBAAgB,EAAE;gBAC9C,YAAY,EAAE,IAAI;gBAClB,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aAC/D,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,GAAG;gBACf,MAAM,CAAC,OAAO;gBACd,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,oGAAoG;QACtG,CAAC;IACH,CAAC;IACD,OAAO,IAAI,cAAc,CACvB,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EACtD,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EACxG,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;AACJ,CAAC"}