pi-daddy 0.28.0 → 0.32.0

package/dist/governance/record.js

@@ -0,0 +1,259 @@
+/**
+ * One record envelope for every append-only store (ADR-0076 PR 3d).
+ *
+ * A line is `{ v, seq, prev, at, kind, id, body, digest }`: `prev` is the SHA-256 of the previous line's
+ * bytes (null for the first), `digest` the SHA-256 of the canonical JSON of the record without `digest`.
+ * Writes go under the existing file lock and read only the tail, so an append is O(tail), not O(file).
+ *
+ * Damage policy (operator decision, 2026-09-21): the reader returns every intact record before the first
+ * damaged line plus one marker naming that line; the writer refuses `LEDGER_DAMAGED` until `repairLedger`
+ * truncates the torn tail with the caller's explicit consent. Governance fails closed (no spawn goes
+ * unrecorded), history stays readable, repair is a deliberate act that shows what it drops.
+ *
+ * Stated limit: the WRITER inspects only the last line, so a record tampered in the middle of the file does not
+ * stop appends; it shows as damage on every READ (report, dashboard, timeline), and a repair there would drop
+ * every intact record after it. That is why repair previews by default and why the preview names records it
+ * would drop that still parse. Whole-file verification is the reader's job, not the writer's.
+ */
+import { createHash } from "node:crypto";
+import { randomUUID } from "node:crypto";
+import { appendFile, mkdir, open, readFile, stat, truncate } from "node:fs/promises";
+import { dirname } from "node:path";
+import { GovernanceRefusal, refusal } from "../kernel/refusals.js";
+import { withFileLock } from "./file-lock.js";
+export const RECORD_FORMAT = 1;
+export const RECORD_KINDS = [
+    "binding",
+    "capability",
+    "lifecycle",
+    "approval",
+    "lease",
+    "check",
+    "fact",
+    "work",
+    "control",
+    "experiment",
+    "activity",
+    "advice",
+];
+export const LEDGER_DAMAGED = "LEDGER_DAMAGED";
+/** Deterministic JSON: sorted object keys at every level, arrays in order. No `undefined` survives. */
+export function canonicalJson(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map((v) => canonicalJson(v === undefined ? null : v)).join(",")}]`;
+    const entries = Object.entries(value)
+        .filter(([, v]) => v !== undefined)
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`).join(",")}}`;
+}
+const sha256 = (text) => createHash("sha256").update(text, "utf8").digest("hex");
+export function recordDigest(record) {
+    const { digest: _drop, ...rest } = record;
+    return sha256(canonicalJson(rest));
+}
+const HEX64 = /^[0-9a-f]{64}$/;
+/** Damage reasons that mean "this is not a record file at all" rather than "a record file with a torn tail". */
+export const PRE_FORMAT_REASONS = new Set([
+    "unknown format version",
+    "not an object",
+    "invalid seq",
+    "invalid prev",
+    "invalid timestamp",
+    "unknown kind",
+    "invalid id",
+    "missing body",
+    "invalid digest",
+]);
+/** Parse one line; returns a reason string when it is not a well-formed record of this format. */
+function parseLine(line) {
+    let value;
+    try {
+        value = JSON.parse(line);
+    }
+    catch {
+        return { reason: "unterminated or unparsable line" };
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return { reason: "not an object" };
+    const r = value;
+    if (r.v !== RECORD_FORMAT)
+        return { reason: "unknown format version" };
+    if (typeof r.seq !== "number" || !Number.isInteger(r.seq) || r.seq < 1)
+        return { reason: "invalid seq" };
+    if (!(r.prev === null || (typeof r.prev === "string" && HEX64.test(r.prev))))
+        return { reason: "invalid prev" };
+    if (typeof r.at !== "string" || Number.isNaN(Date.parse(r.at)))
+        return { reason: "invalid timestamp" };
+    if (typeof r.kind !== "string" || !RECORD_KINDS.includes(r.kind))
+        return { reason: "unknown kind" };
+    if (typeof r.id !== "string" || r.id.length === 0 || r.id.length > 128)
+        return { reason: "invalid id" };
+    if (!("body" in r))
+        return { reason: "missing body" };
+    if (typeof r.digest !== "string" || !HEX64.test(r.digest))
+        return { reason: "invalid digest" };
+    const record = r;
+    if (recordDigest(record) !== record.digest)
+        return { reason: "digest mismatch" };
+    return { record };
+}
+/** Read every intact record before the first damaged line. Never throws on content; damage is data. */
+export function readRecords(text) {
+    const records = [];
+    if (text.length === 0)
+        return { records, damage: null };
+    const terminated = text.endsWith("\n");
+    const lines = text.split("\n");
+    if (terminated)
+        lines.pop();
+    let prevLine = null;
+    for (let index = 0; index < lines.length; index += 1) {
+        const line = lines[index];
+        const lineNumber = index + 1;
+        const last = index === lines.length - 1;
+        if (last && !terminated)
+            return { records, damage: { line: lineNumber, reason: "unterminated or unparsable line" } };
+        const parsed = parseLine(line);
+        if ("reason" in parsed)
+            return { records, damage: { line: lineNumber, reason: parsed.reason } };
+        const { record } = parsed;
+        if (record.seq !== records.length + 1)
+            return { records, damage: { line: lineNumber, reason: "sequence gap" } };
+        const expectedPrev = prevLine === null ? null : sha256(prevLine);
+        if (record.prev !== expectedPrev)
+            return { records, damage: { line: lineNumber, reason: "prev hash mismatch" } };
+        records.push(record);
+        prevLine = line;
+    }
+    return { records, damage: null };
+}
+export async function readRecordsFile(path) {
+    try {
+        return readRecords(await readFile(path, "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return { records: [], damage: null };
+        throw error;
+    }
+}
+/** The last complete line and its sequence, reading only the file's tail. Damage is reported, not skipped. */
+async function tail(path) {
+    let size;
+    try {
+        size = (await stat(path)).size;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return { seq: 0, prevLine: null };
+        throw error;
+    }
+    if (size === 0)
+        return { seq: 0, prevLine: null };
+    const window = Math.min(size, 256 * 1024);
+    const handle = await open(path, "r");
+    try {
+        const buffer = Buffer.alloc(window);
+        await handle.read(buffer, 0, window, size - window);
+        const text = buffer.toString("utf8");
+        if (!text.endsWith("\n"))
+            return { damage: { line: -1, reason: "unterminated or unparsable line" } };
+        const body = text.slice(0, -1);
+        const cut = body.lastIndexOf("\n");
+        const lastLine = cut === -1 ? body : body.slice(cut + 1);
+        if (cut === -1 && window < size) {
+            // The last record is larger than the window: read the whole file once rather than call it damage.
+            const whole = (await readFile(path, "utf8")).slice(0, -1);
+            const wholeCut = whole.lastIndexOf("\n");
+            const wholeLast = wholeCut === -1 ? whole : whole.slice(wholeCut + 1);
+            const parsedWhole = parseLine(wholeLast);
+            if ("reason" in parsedWhole)
+                return { damage: { line: -1, reason: parsedWhole.reason } };
+            return { seq: parsedWhole.record.seq, prevLine: wholeLast };
+        }
+        const parsed = parseLine(lastLine);
+        if ("reason" in parsed)
+            return { damage: { line: -1, reason: parsed.reason } };
+        return { seq: parsed.record.seq, prevLine: lastLine };
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** Append one record under the file lock. Refuses LEDGER_DAMAGED when the tail is torn or invalid. */
+export async function appendRecord(path, kind, body, options = {}) {
+    await mkdir(dirname(path), { recursive: true });
+    return withFileLock(path, "ledger", async () => {
+        const last = await tail(path);
+        if ("damage" in last) {
+            const where = last.damage.line === -1 ? "its last line" : `line ${last.damage.line}`;
+            const preFormat = PRE_FORMAT_REASONS.has(last.damage.reason);
+            throw new GovernanceRefusal(refusal(LEDGER_DAMAGED, preFormat
+                ? `ledger ${path} predates the record format (${last.damage.reason}); do NOT repair it — run ` +
+                    `\`pi-daddy ledger import ${path} <target>\` or point PI_DADDY_LEDGER at the imported project ledger`
+                : `ledger ${path} is damaged at ${where} (${last.damage.reason}); run ` +
+                    `\`pi-daddy ledger repair ${path}\` to preview the torn tail, then retry with --yes`, { path, reason: last.damage.reason, preFormat }));
+        }
+        const draft = {
+            v: RECORD_FORMAT,
+            seq: last.seq + 1,
+            prev: last.prevLine === null ? null : sha256(last.prevLine),
+            at: options.at ?? new Date().toISOString(),
+            kind,
+            id: options.id ?? randomUUID(),
+            body,
+            ...(options.imported ? { imported: options.imported } : {}),
+        };
+        // Digest the serialised round-trip, not the in-memory value: a body with `toJSON` (a Date, a class) would
+        // otherwise be written as one thing and digested as another, and the line would read back as damage.
+        const plain = JSON.parse(JSON.stringify(draft));
+        const record = { ...plain, digest: recordDigest(plain) };
+        await appendFile(path, `${JSON.stringify(record)}\n`, { encoding: "utf8", mode: 0o600 });
+        return record;
+    });
+}
+/**
+ * Drop everything from the first damaged line on. `apply: false` previews. The repair never rewrites an
+ * intact record and never invents one; it only truncates, and only after the caller decided to.
+ */
+export async function repairLedger(path, options) {
+    return withFileLock(path, "ledger repair", async () => {
+        let text;
+        try {
+            text = await readFile(path, "utf8");
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return { dropped: [], keptLines: 0, droppedParseable: 0, preFormat: false, missing: true };
+            throw error;
+        }
+        const read = readRecords(text);
+        if (read.damage === null)
+            return { dropped: [], keptLines: read.records.length, droppedParseable: 0, preFormat: false, missing: false };
+        const lines = text.split("\n");
+        if (text.endsWith("\n"))
+            lines.pop();
+        const dropped = lines.slice(read.damage.line - 1);
+        const droppedParseable = dropped.filter((line) => {
+            try {
+                const v = JSON.parse(line);
+                return !!v && typeof v === "object" && !Array.isArray(v);
+            }
+            catch {
+                return false;
+            }
+        }).length;
+        // A file whose FIRST line is not a record is a pre-format ledger. Repairing it would delete it whole; the
+        // only right action is to import it, so `apply` is refused here regardless of what the caller asked.
+        const preFormat = read.records.length === 0 && PRE_FORMAT_REASONS.has(read.damage.reason);
+        if (options.apply && !preFormat) {
+            const keep = lines.slice(0, read.damage.line - 1);
+            const bytes = Buffer.byteLength(keep.length > 0 ? `${keep.join("\n")}\n` : "", "utf8");
+            await truncate(path, bytes);
+        }
+        return { dropped, keptLines: read.damage.line - 1, droppedParseable, preFormat, missing: false };
+    });
+}
+//# sourceMappingURL=record.js.map

package/dist/governance/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/governance/record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAU,CAAC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,SAAS;IACT,YAAY;IACZ,WAAW;IACX,UAAU;IACV,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,SAAS;IACT,YAAY;IACZ,UAAU;IACV,QAAQ;CACA,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAyB,CAAC;AAyBxD,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9G,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC9F,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEzF,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAiC,CAAC;IACrE,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAC/B,gHAAgH;AAChH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,wBAAwB;IACxB,eAAe;IACf,aAAa;IACb,cAAc;IACd,mBAAmB;IACnB,cAAc;IACd,YAAY;IACZ,cAAc;IACd,gBAAgB;CACjB,CAAC,CAAC;AAEH,kGAAkG;AAClG,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACpG,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACvE,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACzG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAChH,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACvG,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAE,YAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACxG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACtD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/F,MAAM,MAAM,GAAG,CAA8B,CAAC;IAC9C,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACjF,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,WAAW,CAAc,IAAY;IACnD,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,UAAU;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACxC,IAAI,IAAI,IAAI,CAAC,UAAU;YACrB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,iCAAiC,EAAE,EAAE,CAAC;QAC9F,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,QAAQ,IAAI,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAChG,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAC1B,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC;QAChH,MAAM,YAAY,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,CAAC;QACjH,OAAO,CAAC,IAAI,CAAC,MAA2B,CAAC,CAAC;QAC1C,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAc,IAAY;IAC7D,IAAI,CAAC;QACH,OAAO,WAAW,CAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7F,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,KAAK,UAAU,IAAI,CAAC,IAAY;IAC9B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC1F,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,iCAAiC,EAAE,EAAE,CAAC;QACrG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;YAChC,kGAAkG;YAClG,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACtE,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,QAAQ,IAAI,WAAW;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACzF,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,QAAQ,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/E,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAQD,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAAgB,EAChB,IAAO,EACP,UAAyB,EAAE;IAE3B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,OAAO,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACrF,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,cAAc,EACd,SAAS;gBACP,CAAC,CAAC,UAAU,IAAI,gCAAgC,IAAI,CAAC,MAAM,CAAC,MAAM,4BAA4B;oBAC1F,4BAA4B,IAAI,qEAAqE;gBACzG,CAAC,CAAC,UAAU,IAAI,kBAAkB,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,SAAS;oBACnE,4BAA4B,IAAI,oDAAoD,EAC1F,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAChD,CACF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAsC;YAC/C,CAAC,EAAE,aAAa;YAChB,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;YACjB,IAAI,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC3D,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC1C,IAAI;YACJ,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,UAAU,EAAE;YAC9B,IAAI;YACJ,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;QACF,0GAA0G;QAC1G,qGAAqG;QACrG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAsC,CAAC;QACrF,MAAM,MAAM,GAAsB,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAeD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,OAA2B;IAC1E,OAAO,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE;QACpD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBACpD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC7F,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;YACtB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAChH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAClD,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/C,IAAI,CAAC;gBACH,MAAM,CAAC,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC,MAAM,CAAC;QACV,0GAA0G;QAC1G,qGAAqG;QACrG,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACvF,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/governance/retention-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention-contract.d.ts","sourceRoot":"","sources":["../../src/governance/retention-contract.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAmB3E,eAAO,MAAM,uBAAuB,oFAO1B,CAAC;AACX,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyF3B,CAAC;AAUH,6FAA6F;AAC7F,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CA4D1F;AACD,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,CAUxF"}

package/dist/governance/retention-contract.js

@@ -0,0 +1,187 @@
+import { Compile } from "typebox/compile";
+import { parseRetentionJson } from "./retention-json.js";
+const string = (maxLength = 512) => ({
+    type: "string",
+    minLength: 1,
+    maxLength,
+    pattern: "^[^\\u0000-\\u001f\\u007f]+$",
+});
+const nullable = (schema) => ({ anyOf: [schema, { type: "null" }] });
+const literal = (value) => ({ const: value });
+const closed = (properties) => ({
+    type: "object",
+    properties,
+    required: Object.keys(properties),
+    additionalProperties: false,
+});
+const hash = { type: "string", pattern: "^[a-f0-9]{64}$" };
+const integer = { type: "integer", minimum: 0, maximum: Number.MAX_SAFE_INTEGER };
+const uuid = { type: "string", pattern: "^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$" };
+export const RETENTION_CONTENT_KINDS = [
+    "stdout",
+    "stderr",
+    "paneSnapshot",
+    "checkReceipt",
+    "result",
+    "session",
+];
+export const RETENTION_SCHEMA = freeze({
+    $schema: "https://json-schema.org/draft/2020-12/schema",
+    $id: "https://pi-daddy.local/contracts/execution-retention/v2/manifest.schema.json",
+    ...closed({
+        version: literal("2.0"),
+        archiveId: uuid,
+        identity: closed({
+            executionId: string(),
+            parentExecutionId: nullable(string()),
+            childId: string(),
+            toolCallId: nullable(string()),
+            executor: { enum: ["process", "herdr", "check"] },
+            taskDigest: nullable(hash),
+            definitionDigest: nullable(hash),
+            configurationDigest: hash,
+            workspaceId: nullable(string()),
+        }),
+        native: closed({
+            pid: nullable({ type: "integer", minimum: 1, maximum: Number.MAX_SAFE_INTEGER }),
+            paneId: nullable(string(4096)),
+            agentName: nullable(string(4096)),
+            tabId: nullable(string(4096)),
+            sessionId: nullable(uuid),
+            sessionPath: nullable(string(4096)),
+            branchLeafId: nullable(string(128)),
+        }),
+        nativeSession: closed({
+            source: { enum: [null, "herdr-id", "herdr-path", "pi-session-file", "pi-session-manager"] },
+            status: { enum: ["missing", "verified", "invalid", "changed", "truncated", "unsupported"] },
+            sessionId: nullable(uuid),
+            sessionPath: nullable(string(4096)),
+            parentSessionPath: nullable(string(4096)),
+            branchLeafId: nullable(string(128)),
+            branchState: { enum: ["unknown", "observed"] },
+            lastPersistedEntryId: nullable(string(128)),
+            sha256: nullable(hash),
+            reason: nullable(string()),
+        }),
+        state: { enum: ["running", "terminal"] },
+        outcome: nullable(closed({
+            code: nullable({ type: "integer", minimum: -2147483648, maximum: 2147483647 }),
+            signal: nullable(string(64)),
+            timedOut: { type: "boolean" },
+            aborted: { type: "boolean" },
+            truncated: { type: "boolean" },
+            failed: { type: "boolean" },
+        })),
+        content: closed(Object.fromEntries(RETENTION_CONTENT_KINDS.map((kind) => [
+            kind,
+            {
+                oneOf: [
+                    closed({ status: literal("missing"), path: literal(null), sha256: literal(null), bytes: literal(null) }),
+                    closed({
+                        status: literal("retained"),
+                        path: { type: "string", pattern: `^${kind}-[a-f0-9]{64}\\.bin$` },
+                        sha256: hash,
+                        bytes: { ...integer, maximum: 1024 * 1024 },
+                    }),
+                ],
+            },
+        ]))),
+        coverage: closed({
+            complete: literal(false),
+            losses: { type: "array", items: string(), maxItems: 64, uniqueItems: true },
+        }),
+        acceptance: literal("not-assessed"),
+    }),
+    allOf: [
+        {
+            if: { properties: { state: literal("running") } },
+            then: { properties: { outcome: literal(null) } },
+            else: { properties: { outcome: { type: "object" } } },
+        },
+        {
+            if: { properties: { nativeSession: { properties: { branchState: literal("unknown") } } } },
+            then: {
+                properties: {
+                    nativeSession: { properties: { branchLeafId: literal(null) } },
+                    native: { properties: { branchLeafId: literal(null) } },
+                },
+            },
+        },
+    ],
+});
+const validator = Compile(RETENTION_SCHEMA);
+function freeze(value) {
+    if (value && typeof value === "object") {
+        for (const child of Object.values(value))
+            freeze(child);
+        Object.freeze(value);
+    }
+    return value;
+}
+/** Closed, detached versioned wire builder; never authenticates the supplied observation. */
+export function buildExecutionRetentionManifest(value) {
+    // Reject non-JSON objects/accessors instead of invoking serialization hooks while collecting evidence.
+    let nodes = 0;
+    const inspect = (x, depth) => {
+        if (++nodes > 4096 || depth > 16)
+            throw new TypeError("retention manifest exceeds bounds");
+        if (x === null ||
+            typeof x === "string" ||
+            typeof x === "boolean" ||
+            (typeof x === "number" && Number.isSafeInteger(x)))
+            return;
+        if (!x ||
+            typeof x !== "object" ||
+            (!Array.isArray(x) && Object.getPrototypeOf(x) !== Object.prototype && Object.getPrototypeOf(x) !== null))
+            throw new TypeError("retention manifest must be JSON data");
+        if (Array.isArray(x) &&
+            (Object.getPrototypeOf(x) !== Array.prototype ||
+                x.length > 256 ||
+                Reflect.ownKeys(x).length !== x.length + 1 ||
+                Array.from({ length: x.length }, (_, i) => String(i)).some((key) => !Object.hasOwn(x, key))))
+            throw new TypeError("retention arrays must be dense plain JSON arrays");
+        for (const key of Reflect.ownKeys(x)) {
+            if (Array.isArray(x) && key === "length")
+                continue;
+            const d = Object.getOwnPropertyDescriptor(x, key);
+            if (typeof key !== "string" || !d.enumerable || !("value" in d))
+                throw new TypeError("retention manifest must be plain JSON data");
+            inspect(d.value, depth + 1);
+        }
+    };
+    inspect(value, 0);
+    if (!validator.Check(value))
+        throw new TypeError("invalid execution-retention 2.0 manifest");
+    const m = JSON.parse(JSON.stringify(value));
+    if (m.native.sessionId !== m.nativeSession.sessionId ||
+        m.native.sessionPath !== m.nativeSession.sessionPath ||
+        m.native.branchLeafId !== m.nativeSession.branchLeafId) {
+        throw new TypeError("native session projection mismatch");
+    }
+    for (const kind of RETENTION_CONTENT_KINDS) {
+        const ref = m.content[kind];
+        if (ref.status === "retained" && ref.path !== `${kind}-${ref.sha256}.bin`)
+            throw new TypeError("retention content identity mismatch");
+    }
+    if (m.nativeSession.branchState === "observed" &&
+        (m.nativeSession.source !== "pi-session-manager" || m.nativeSession.status !== "verified"))
+        throw new TypeError("unverified active native branch");
+    if (m.nativeSession.status === "verified" &&
+        (!m.nativeSession.sessionId || !m.nativeSession.sha256 || m.content.session.sha256 !== m.nativeSession.sha256))
+        throw new TypeError("verified native session requires retained bytes");
+    return freeze(m);
+}
+export function parseExecutionRetentionManifest(text) {
+    if (Buffer.byteLength(text) > 64 * 1024)
+        throw new TypeError("retention manifest exceeds bounds");
+    // Manifest numbers are integers; use the existing exact-token parser before lossy Number conversion.
+    let value;
+    try {
+        value = parseRetentionJson(text);
+    }
+    catch {
+        throw new TypeError("invalid retention JSON");
+    }
+    return buildExecutionRetentionManifest(value);
+}
+//# sourceMappingURL=retention-contract.js.map

package/dist/governance/retention-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention-contract.js","sourceRoot":"","sources":["../../src/governance/retention-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,MAAM,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,CAAC;IACZ,SAAS;IACT,OAAO,EAAE,8BAA8B;CACxC,CAAC,CAAC;AACH,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AAC7E,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACvD,MAAM,MAAM,GAAG,CAAC,UAAkC,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,EAAE,QAAQ;IACd,UAAU;IACV,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;IACjC,oBAAoB,EAAE,KAAK;CAC5B,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC3D,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;AAClF,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;AAC1F,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,cAAc;IACd,QAAQ;IACR,SAAS;CACD,CAAC;AACX,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;IACrC,OAAO,EAAE,8CAA8C;IACvD,GAAG,EAAE,8EAA8E;IACnF,GAAG,MAAM,CAAC;QACR,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;QACvB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,MAAM,CAAC;YACf,WAAW,EAAE,MAAM,EAAE;YACrB,iBAAiB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE;YACjB,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9B,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;YACjD,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC;YAC1B,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC;YAChC,mBAAmB,EAAE,IAAI;YACzB,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;SAChC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC;YACb,GAAG,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAChF,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7B,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC;YACzB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SACpC,CAAC;QACF,aAAa,EAAE,MAAM,CAAC;YACpB,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,EAAE;YAC3F,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE;YAC3F,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC;YACzB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;YAC9C,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC;YACtB,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;SAC3B,CAAC;QACF,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;QACxC,OAAO,EAAE,QAAQ,CACf,MAAM,CAAC;YACL,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;YAC9E,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC5B,CAAC,CACH;QACD,OAAO,EAAE,MAAM,CACb,MAAM,CAAC,WAAW,CAChB,uBAAuB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI;YACJ;gBACE,KAAK,EAAE;oBACL,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxG,MAAM,CAAC;wBACL,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC;wBAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,IAAI,sBAAsB,EAAE;wBACjE,MAAM,EAAE,IAAI;wBACZ,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,IAAI,EAAE;qBAC5C,CAAC;iBACH;aACF;SACF,CAAC,CACH,CACF;QACD,QAAQ,EAAE,MAAM,CAAC;YACf,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;YACxB,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;SAC5E,CAAC;QACF,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC;KACpC,CAAC;IACF,KAAK,EAAE;QACL;YACE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE;YACjD,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE;YAChD,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;SACtD;QACD;YACE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE;YAC1F,IAAI,EAAE;gBACJ,UAAU,EAAE;oBACV,aAAa,EAAE,EAAE,UAAU,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE;oBAC9D,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE;iBACxD;aACF;SACF;KACF;CACF,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC5C,SAAS,MAAM,CAAI,KAAQ;IACzB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,uGAAuG;IACvG,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,KAAa,EAAQ,EAAE;QAClD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC3F,IACE,CAAC,KAAK,IAAI;YACV,OAAO,CAAC,KAAK,QAAQ;YACrB,OAAO,CAAC,KAAK,SAAS;YACtB,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAElD,OAAO;QACT,IACE,CAAC,CAAC;YACF,OAAO,CAAC,KAAK,QAAQ;YACrB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;YAEzG,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC9D,IACE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAChB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,SAAS;gBAC3C,CAAC,CAAC,MAAM,GAAG,GAAG;gBACd,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;gBAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAE9F,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC1E,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,QAAQ;gBAAE,SAAS;YACnD,MAAM,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC,EAAE,GAAG,CAAE,CAAC;YACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;gBAC7D,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;YACpE,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAC7F,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAA+B,CAAC;IAC1E,IACE,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,aAAa,CAAC,SAAS;QAChD,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,CAAC,CAAC,aAAa,CAAC,WAAW;QACpD,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,aAAa,CAAC,YAAY,EACtD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,GAAG,CAAC,MAAM,MAAM;YACvE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC/D,CAAC;IACD,IACE,CAAC,CAAC,aAAa,CAAC,WAAW,KAAK,UAAU;QAC1C,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,oBAAoB,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,UAAU,CAAC;QAE1F,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,IACE,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,UAAU;QACrC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;QAE9G,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AACD,MAAM,UAAU,+BAA+B,CAAC,IAAY;IAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAClG,qGAAqG;IACrG,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC"}

package/dist/governance/retention-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention-json.d.ts","sourceRoot":"","sources":["../../src/governance/retention-json.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,OAAO,CAsB9E"}

package/dist/governance/retention-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention-json.js","sourceRoot":"","sources":["../../src/governance/retention-json.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAQ,GAAG,EAAE,GAAG,IAAI;IACnE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAgE,EAAE,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EAAE,CAAC;QACvF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EACpB,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;gBAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,KAAK,GAAG,EAAE,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;aAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;aAClD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,GAAG,EAAE,MAAM;gBAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAW,CAAC;YACxC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC9E,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClB,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC;QAClB,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/D,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/governance/workspace-lease.d.ts

@@ -0,0 +1,40 @@
+import { type LeaseReleaseOutcome, type WorkspaceLease } from "./lease-record.ts";
+export type { LeaseReleaseOutcome, WorkspaceLease } from "./lease-record.ts";
+import type { ValidatedWorkspace, WorkspaceAccess } from "../kernel/workspace.ts";
+export { ENV_WORKSPACE_LEASE_DIR } from "../kernel/env-names.ts";
+export declare function defaultWorkspaceLeaseDir(env?: NodeJS.ProcessEnv): string;
+/**
+ * The ledger outcome for a release. Exported because call sites had their own copies and the check runner's
+ * asserted `released` unconditionally — reproducing in the evidence path the exact defect this union was
+ * added to expose (R-100/R-103).
+ *
+ * **It is NOT the only definition, and saying so here was wrong.** `extensions/workspace-runtime.ts` keeps a
+ * private copy with no `not-held` arm, and it is the one the whole delegation path uses — so releasing a
+ * *read* lease on a delegated child is still recorded `released`, a handover the kernel never performed.
+ * Measured; open as R-141; the sentence claiming a single definition survived two review passes because
+ * `test/workspace.test.ts` pins the `not-held` arm on THIS function, which no delegation path calls.
+ */
+export declare function leaseReleaseLedgerOutcome(outcome: LeaseReleaseOutcome | "retained", reason: string): "timeout" | "released" | "released-unrecorded" | "lost" | "retained" | "uncontended";
+/**
+ * `acquired` must mean the kernel actually excluded somebody. A read lease takes no lock (R-105), and an
+ * unreadable predecessor record is not proof of a crash (R-100) — so neither may be reported as one.
+ */
+export declare function leaseAcquisitionOutcome(access: "read" | "write", recovered: boolean | "unknown"): "acquired" | "uncontended" | "recovered";
+export declare function acquireWorkspaceLease(input: {
+    workspace: ValidatedWorkspace;
+    access: WorkspaceAccess;
+    leaseDir: string;
+    ownerId: string;
+    signal?: AbortSignal;
+    flockCommand?: string;
+    acquisitionTimeoutMs?: number;
+    /**
+     * Bound on how long ONE `herdr tab close` attempt may take before it counts as failed (R-146). A hung
+     * herdr is not a failed herdr: without this the attempt never returns and the retry bound below is
+     * unreachable.
+     */
+    herdrCloseTimeoutMs?: number;
+    /** Bound on the helper's `herdr tab close` retries before it releases the lock anyway (R-102). */
+    herdrCloseAttempts?: number;
+}): Promise<WorkspaceLease>;
+//# sourceMappingURL=workspace-lease.d.ts.map

package/dist/governance/workspace-lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-lease.d.ts","sourceRoot":"","sources":["../../src/governance/workspace-lease.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAK7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAGlF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAErF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,mBAAmB,GAAG,UAAU,EACzC,MAAM,EAAE,MAAM,GACb,SAAS,GAAG,UAAU,GAAG,qBAAqB,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,CAQtF;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,GAAG,OAAO,EACxB,SAAS,EAAE,OAAO,GAAG,SAAS,GAC7B,UAAU,GAAG,aAAa,GAAG,WAAW,CAG1C;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,SAAS,EAAE,kBAAkB,CAAC;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kGAAkG;IAClG,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,cAAc,CAAC,CAgW1B"}