pi-radar 0.5.1 → 0.7.0

package/extension/generated-contracts.ts

@@ -11,7 +11,6 @@ export interface PresenceReportDeserialize {
   run?: string | null;
   session_id: string;
   source: string;
-  spawn_token?: string | null;
   subject_id?: string | null;
 }
 /**
@@ -54,7 +53,7 @@ export interface PresenceReportProcessIdentity {
   start_ticks: number;
   [k: string]: unknown;
 }
-export type PresenceAnswerStanding = "pending" | "granted" | "duplicate" | "released";
+export type PresenceAnswerStanding = "reserved" | "pending" | "granted" | "duplicate" | "released";
 
 /**
  * The small public receipt; session/location context stays inside Radar.
@@ -151,8 +150,7 @@ export interface HandoffSerialize {
  * generation identify the exact execution that took the action.
  */
 export interface HandoffIdentity {
-  execution_generation: number;
-  execution_id: string;
+  claim_id: string;
   registration_id: string;
   session_id: string;
   subject_id: string;
@@ -172,8 +170,7 @@ export interface HandoffReceiptSerialize {
  * generation identify the exact execution that took the action.
  */
 export interface HandoffIdentity {
-  execution_generation: number;
-  execution_id: string;
+  claim_id: string;
   registration_id: string;
   session_id: string;
   subject_id: string;
@@ -286,7 +283,7 @@ export type Freshness = "fresh" | "stale";
  * refused rather than silently dropped.
  */
 export type Report = Snapshot | AssignmentSnapshot | FactsSnapshot;
-export type Standing = "pending" | "granted" | "duplicate" | "released";
+export type Standing = "reserved" | "pending" | "granted" | "duplicate" | "released";
 /**
  * How a registration relates to the live panes.
  */
@@ -677,6 +674,11 @@ export interface RegistryAgent {
   facts: PublicChannelFacts | null;
   process: ProcessEvidence;
   registration: PublicRegistration;
+  /**
+   * Whether this process runs inside a Radar-established execution scope. A
+   * process started outside the managed launch path has none and is observed.
+   */
+  scoped?: boolean | null;
 }
 /**
  * A channel read for a reader that is not its writer: the same identity,
@@ -902,6 +904,7 @@ export interface RegistryLocation {
  */
 export interface ManagedSubject {
   child_close: ChildCloseTarget | null;
+  claim_id: string;
   identity_unresolved: boolean;
   metadata: ManagedMetadata;
   process: ProcessIdentity;
@@ -938,10 +941,10 @@ export interface ManagedMetadata {
 export interface SpawnBinding {
   child_incarnation: string | null;
   child_source: string | null;
+  claim_id: string | null;
   parent: string;
   request_id: string;
   state: SpawnState;
-  subject_id: string | null;
 }
 /**
  * What this machine knows about that process. Filled by the collector
@@ -1385,3 +1388,107 @@ export interface ObservationTooLarge {
   limit_bytes: number;
   revision: number;
 }
+/**
+ * Input accepted by `spawn.list`.
+ *
+ * A caller presents itself; the parent whose launches it reads is derived from
+ * the claim it holds. There is deliberately no parent parameter: naming another
+ * subject would let any client read its launches.
+ */
+export interface SpawnListParamsDeserialize {
+  after?: string | null;
+  limit?: number | null;
+  registration_id?: string | null;
+}
+/**
+ * What a completed request did.
+ */
+export type SpawnListPageSerializeRequestOutcome = "completed" | "refused" | "unknown";
+/**
+ * What a spawn topology read can say about a child's process exit.
+ */
+export type SpawnListPageSerializePublicSpawnExitObservation =
+  | {
+      state: "unknown";
+    }
+  | {
+      code: number | null;
+      observed_at: string;
+      signal: number | null;
+      state: "exited";
+    };
+/**
+ * Freshness is independent of process identity or completion.
+ */
+export type SpawnListPageSerializeFreshness = "fresh" | "stale";
+/**
+ * The state of one edge in the recorded topology: the strongest statement a
+ * read can make about it, and nothing beyond the records and this read's own
+ * evidence.
+ */
+export type SpawnListPageSerializeSpawnState = "unbound" | "bound" | "unresolved";
+
+/**
+ * One page of spawn edges. `next` names the request id the page ended on.
+ */
+export interface SpawnListPageSerialize {
+  next?: string | null;
+  spawns: SpawnListPageSerializePublicSpawnTopology[];
+}
+/**
+ * One edge as a topology read reports it: the stored facts, plus the two things
+ * a read derives instead of inferring.
+ */
+export interface SpawnListPageSerializePublicSpawnTopology {
+  bound?: SpawnListPageSerializeBoundChild | null;
+  claim_id?: string | null;
+  created: SpawnListPageSerializeRequestOutcome;
+  exit_observation?: SpawnListPageSerializePublicSpawnExitObservation | null;
+  /**
+   * Freshness of the recorded location against this read's evidence, in the
+   * registry's one freshness vocabulary: `fresh` when the backend reports the
+   * location now, `stale` when it does not — which is never evidence that the
+   * child stopped. Absent when the edge recorded no location, because there is
+   * nothing to verify.
+   */
+  freshness?: SpawnListPageSerializeFreshness | null;
+  launched: SpawnListPageSerializeRequestOutcome;
+  location?: SpawnListPageSerializeRegistryLocation | null;
+  parent: string;
+  parent_session_id?: string | null;
+  parent_subject_id?: string | null;
+  recorded_at: string;
+  request_id: string;
+  state: SpawnListPageSerializeSpawnState;
+  version: number;
+}
+/**
+ * The child a token bound: the registering incarnation's own registry identity.
+ */
+export interface SpawnListPageSerializeBoundChild {
+  /**
+   * When the edge bound to this incarnation.
+   */
+  bound_at: string;
+  incarnation: string;
+  /**
+   * Exact registry identity returned to the registering child. Absent in legacy records.
+   */
+  registration_id?: string | null;
+  source: string;
+}
+/**
+ * Where an agent's incarnation lives on one backend, in that backend's own
+ * coordinates.
+ *
+ * The backend name is free-form so a source Radar does not ship yet is
+ * preserved rather than rejected; the rest are the coordinates as reported, and
+ * each is optional because a backend need not name every level.
+ */
+export interface SpawnListPageSerializeRegistryLocation {
+  backend: string;
+  instance?: string | null;
+  pane?: string | null;
+  tab?: string | null;
+  workspace?: string | null;
+}

package/extension/radar-client.ts

@@ -11,6 +11,8 @@ import type {
 	HandoffSerialize,
 	ManagedLaunchMetadataDeserialize,
 	SpawnExitObservationSerialize,
+	SpawnListParamsDeserialize,
+	SpawnListPageSerialize,
 } from "./generated-contracts.ts";
 
 /**
@@ -31,16 +33,15 @@ import type {
  */
 export const RADAR_PROTOCOL_VERSION = 2;
 /**
- * The minimum daemon wire revision this client understands. Revision 4 is where
- * Pi presence and exact session release arrived; a revision-3 daemon would pass
- * this handshake and then refuse every presence report, leaving a Pi session
- * silently unmanaged instead of telling the operator to restart the daemon.
+ * Revision 5 names attempts by claim_id and requires exact-claim controls.
+ * Earlier daemons expose different identity fields; require a coordinated update.
  */
-export const RADAR_MINIMUM_REVISION = 4;
+export const RADAR_MINIMUM_REVISION = 6;
 /** Public daemon contracts this client may preflight. */
 export const RADAR_REGISTRY_CONTRACT = "registry.v1";
 export const RADAR_REGISTRY_FACTS_CONTRACT = "registry.facts.v1";
 export const RADAR_SPAWN_CONTRACT = "spawn.v1";
+export const RADAR_SPAWN_LIST_CONTRACT = "spawn.list.v1";
 export const RADAR_SPAWN_CLOSE_CONTRACT = "spawn.close.v1";
 export const RADAR_SPAWN_LAUNCH_CONTEXT_CONTRACT = "spawn.launch_context.v1";
 export const RADAR_EVENTS_CONTRACT = "events.v1";
@@ -516,7 +517,7 @@ function decodePresenceAnswer(value: unknown): RadarResult<RadarPresenceAnswer>
 	if (
 		!isUuid(registrationId) ||
 		!isUuid(claimId) ||
-		!["pending", "granted", "duplicate", "released"].includes(String(standing)) ||
+		!["reserved", "pending", "granted", "duplicate", "released"].includes(String(standing)) ||
 		(subjectId !== undefined && !isUuid(subjectId)) ||
 		(standing === "granted" && !isUuid(subjectId))
 	)
@@ -563,7 +564,6 @@ function handoffAt(value: unknown): HandoffSerialize | undefined {
 	const version = numberAt(value, "version");
 	const id = stringAt(value, "id");
 	const sender = recordAt(value, "sender");
-	const senderGeneration = numberAt(sender, "execution_generation");
 	const target = stringAt(value, "recipient_subject_id");
 	const summary = stringAt(value, "summary");
 	const content = stringAt(value, "content");
@@ -574,8 +574,7 @@ function handoffAt(value: unknown): HandoffSerialize | undefined {
 	if (
 		version !== 1 || !isUuid(id) || !isUuid(stringAt(sender, "registration_id")) ||
 		!isUuid(stringAt(sender, "session_id")) || !isUuid(stringAt(sender, "subject_id")) ||
-		!isUuid(stringAt(sender, "execution_id")) || !Number.isSafeInteger(senderGeneration) ||
-		(senderGeneration ?? 0) < 1 || !isUuid(target) || summary === undefined || content === undefined ||
+		!isUuid(stringAt(sender, "claim_id")) || !isUuid(target) || summary === undefined || content === undefined ||
 		published === undefined || !Number.isSafeInteger(published) || published < 0 ||
 		(correlation !== undefined && correlation !== null &&
 			(typeof correlation !== "string" || correlation.length === 0 ||
@@ -588,13 +587,11 @@ function handoffReceiptAt(value: unknown): HandoffReceiptSerialize | undefined {
 	const version = numberAt(value, "version");
 	const handoffId = stringAt(value, "handoff_id");
 	const recipient = recordAt(value, "recipient");
-	const generation = numberAt(recipient, "execution_generation");
 	const received = numberAt(value, "received_at_unix_ms");
 	if (
 		version !== 1 || !isUuid(handoffId) || !isUuid(stringAt(recipient, "registration_id")) ||
 		!isUuid(stringAt(recipient, "session_id")) || !isUuid(stringAt(recipient, "subject_id")) ||
-		!isUuid(stringAt(recipient, "execution_id")) || !Number.isSafeInteger(generation) ||
-		(generation ?? 0) < 1 || received === undefined || !Number.isSafeInteger(received) || received < 0
+		!isUuid(stringAt(recipient, "claim_id")) || received === undefined || !Number.isSafeInteger(received) || received < 0
 	) return undefined;
 	return value as HandoffReceiptSerialize;
 }
@@ -748,7 +745,7 @@ function unresolvedOperation(requestId: string, detail: string): RadarResult<nev
 	};
 }
 
-export const RADAR_SPAWN_TOKEN_ENV = "PI_RADAR_SPAWN_TOKEN";
+export const RADAR_REGISTRATION_ENV = "PI_RADAR_REGISTRATION_ID";
 const RADAR_MANAGED_IDENTITY_ENV = new Set([
 	"PI_RADAR_MANAGED_SUBJECT_ID",
 	"PI_RADAR_MANAGED_LAUNCH_ID",
@@ -978,8 +975,8 @@ function spawnRequestShape(request: {
 	const env = Object.entries(request.env ?? {});
 	if (env.length > 256) return "spawn env names more than 256 entries";
 	for (const [name, value] of env) {
-		if (name === RADAR_SPAWN_TOKEN_ENV)
-			return `spawn env cannot set the reserved ${RADAR_SPAWN_TOKEN_ENV}`;
+		if (name === RADAR_REGISTRATION_ENV)
+			return `spawn env cannot set the reserved ${RADAR_REGISTRATION_ENV}`;
 		if (RADAR_MANAGED_IDENTITY_ENV.has(name))
 			return `spawn env cannot set Radar-issued identity variable ${name}`;
 		if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || /\p{Cc}/u.test(value))
@@ -1104,6 +1101,8 @@ export type RadarClient = {
 		env?: Record<string, string>;
 		managed?: RadarManagedLaunchMetadata;
 	}): Promise<RadarResult<RadarSpawnEdge>>;
+	/** List launches owned by this client's registered process. */
+	spawnList(request: Pick<SpawnListParamsDeserialize, "after" | "limit">): Promise<RadarResult<SpawnListPageSerialize>>;
 	spawnGet(request_id: string): Promise<RadarResult<RadarSpawnTopology>>;
 	/** The registered child's process verdict, read from its immutable claim. */
 	agentGet(registration_id: string): Promise<RadarResult<RadarAgentProcess>>;
@@ -1447,6 +1446,7 @@ export function createRadarClient(options: RadarClientOptions = {}): RadarClient
 			};
 		return answer;
 	};
+	let processRegistrationId: string | undefined;
 	let handshake: Promise<RadarResult<RadarHandshake>> | undefined;
 	const negotiated = async (): Promise<RadarResult<RadarHandshake>> => {
 		handshake ??= probe();
@@ -1552,6 +1552,7 @@ export function createRadarClient(options: RadarClientOptions = {}): RadarClient
 				const record = (answer.value as { registration?: unknown }).registration;
 				const agentId = stringAt(record, "registration_id");
 				if (!isUuid(agentId)) return protocol("registration reply carries no registration_id");
+				processRegistrationId = agentId;
 				return { ok: true, value: { registration_id: agentId } };
 			});
 		},
@@ -1705,6 +1706,32 @@ export function createRadarClient(options: RadarClientOptions = {}): RadarClient
 				},
 			);
 		},
+		async spawnList(request) {
+			const registrationId = processRegistrationId;
+			if (registrationId === undefined)
+				return { ok: false, code: "refused", message: "spawn.list requires this client's process registration" };
+			return withContract(RADAR_SPAWN_LIST_CONTRACT, async () => {
+				const params: SpawnListParamsDeserialize = {
+					registration_id: registrationId,
+					...(request.after !== undefined ? { after: request.after } : {}),
+					...(request.limit !== undefined ? { limit: request.limit } : {}),
+				};
+				const answer = await call("spawn.list", { ...params });
+				if (answer.ok === false) return answer;
+				const spawns = recordAt(answer.value, "spawns");
+				const next = recordAt(answer.value, "next");
+				if (!Array.isArray(spawns) || (next != null && !isUuid(next)))
+					return protocol("spawn.list reply carries no valid page");
+				for (const spawn of spawns) {
+					const decoded = spawnTopology(spawn);
+					if (decoded.ok === false) return decoded;
+					if (typeof recordAt(spawn, "version") !== "number" || typeof recordAt(spawn, "recorded_at") !== "string" ||
+						!["unbound", "bound", "unresolved"].includes(String(recordAt(spawn, "state"))))
+						return protocol("spawn.list reply carries an incomplete topology");
+				}
+				return { ok: true, value: answer.value as SpawnListPageSerialize };
+			});
+		},
 		async spawnGet(requestId) {
 			if (!isUuid(requestId))
 				return {

package/extension/radar-execution.ts

@@ -51,10 +51,10 @@ export type RadarExecutionOptions = {
 	 */
 	location?: () => Promise<RadarLocationResolution>;
 	/**
-	 * A daemon-spawned child's one-use launch token, captured before this process
-	 * could observe anything else. It travels with the registration request only.
+	 * Registration allocated by Radar before this process launched. Normally
+	 * captured from the launch environment by the process-local publication.
 	 */
-	spawnToken?: string;
+	launchRegistrationId?: string;
 	/** Only a real fixed managed assignment is part of immutable registration. */
 	managedBinding?: { key: string; run: string; owner: string; label: string };
 	/**
@@ -207,8 +207,8 @@ export function createRadarExecutionAdapter(
 				? { location: options.location }
 				: {}),
 			...(managed !== undefined ? { binding: managed } : {}),
-			...(options.spawnToken !== undefined
-				? { spawnToken: options.spawnToken }
+			...(options.launchRegistrationId !== undefined
+				? { launchRegistrationId: options.launchRegistrationId }
 				: {}),
 		});
 	} catch {

package/extension/radar-publication.ts

@@ -269,6 +269,7 @@ export function createPublicationStore(root: string): PublicationStore {
  */
 export type RadarProcessSlot = {
 	incarnation?: string;
+	launchRegistrationId?: string;
 	publications: Map<string, RadarPublication>;
 };
 
@@ -280,7 +281,13 @@ export function radarProcessSlot(): RadarProcessSlot {
 	const host = globalThis as typeof globalThis & {
 		[PROCESS_SLOT]?: RadarProcessSlot;
 	};
-	return (host[PROCESS_SLOT] ??= createRadarProcessSlot());
+	if (!host[PROCESS_SLOT]) {
+		const slot = createRadarProcessSlot();
+		slot.launchRegistrationId = process.env.PI_RADAR_REGISTRATION_ID;
+		delete process.env.PI_RADAR_REGISTRATION_ID;
+		host[PROCESS_SLOT] = slot;
+	}
+	return host[PROCESS_SLOT];
 }
 
 /** The process incarnation, created on first use and kept for the process. */
@@ -1151,7 +1158,7 @@ export type RadarPublicationOptions = {
 	/** Set on a managed child: the sidecar its owner correlates the subject with. */
 	binding?: { key: string; run: string; owner: string; label: string };
 	/** A daemon-spawned child's one-use launch token; sent privately, never stored in the process record. */
-	spawnToken?: string;
+	launchRegistrationId?: string;
 	leaseMs?: number;
 	heartbeatMs?: number;
 };
@@ -1226,8 +1233,8 @@ function createRadarPublicationInner(
 	const store = options.store ?? createPublicationStore(dataRoot);
 	const scheduler = options.scheduler ?? systemScheduler;
 	const client = options.client;
-	const spawnToken = options.spawnToken;
 	const slot = options.slot ?? radarProcessSlot();
+	const launchRegistrationId = options.launchRegistrationId ?? slot.launchRegistrationId;
 	const incarnation = options.incarnation ?? radarProcessIncarnation(slot);
 
 	const cacheKey = `${
@@ -1416,7 +1423,7 @@ function createRadarPublicationInner(
 			const { location: _initialLocation, ...identity } = record.registration;
 			return { ...identity,
 				...(location?.state === "resolved" ? { location: location.location } : {}),
-				...(spawnToken ? { spawn_token: spawnToken } : {}),
+				...(launchRegistrationId ? { registration_id: launchRegistrationId } : {}),
 			};
 		},
 		heartbeatMs: options.heartbeatMs ?? RADAR_HEARTBEAT_MS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-radar",
-  "version": "0.5.1",
+  "version": "0.7.0",
   "type": "module",
   "description": "Radar daemon client, communication, publication, execution, location, launch and inspection surface for Pi extensions.",
   "license": "Apache-2.0",

package/schema/public/v1/handoff-receipt.deserialize.schema.json

@@ -4,13 +4,7 @@
       "additionalProperties": false,
       "description": "The current managed Pi execution that published or received a handoff.\n`subject_id` is stable across verified successors; `execution_id` and\ngeneration identify the exact execution that took the action.",
       "properties": {
-        "execution_generation": {
-          "format": "uint32",
-          "maximum": 4294967295,
-          "minimum": 1,
-          "type": "integer"
-        },
-        "execution_id": {
+        "claim_id": {
           "type": "string"
         },
         "registration_id": {
@@ -27,8 +21,7 @@
         "registration_id",
         "session_id",
         "subject_id",
-        "execution_id",
-        "execution_generation"
+        "claim_id"
       ],
       "type": "object"
     }

package/schema/public/v1/handoff-receipt.serialize.schema.json

@@ -4,13 +4,7 @@
       "additionalProperties": false,
       "description": "The current managed Pi execution that published or received a handoff.\n`subject_id` is stable across verified successors; `execution_id` and\ngeneration identify the exact execution that took the action.",
       "properties": {
-        "execution_generation": {
-          "format": "uint32",
-          "maximum": 4294967295,
-          "minimum": 1,
-          "type": "integer"
-        },
-        "execution_id": {
+        "claim_id": {
           "type": "string"
         },
         "registration_id": {
@@ -27,8 +21,7 @@
         "registration_id",
         "session_id",
         "subject_id",
-        "execution_id",
-        "execution_generation"
+        "claim_id"
       ],
       "type": "object"
     }

package/schema/public/v1/handoff.deserialize.schema.json

@@ -4,13 +4,7 @@
       "additionalProperties": false,
       "description": "The current managed Pi execution that published or received a handoff.\n`subject_id` is stable across verified successors; `execution_id` and\ngeneration identify the exact execution that took the action.",
       "properties": {
-        "execution_generation": {
-          "format": "uint32",
-          "maximum": 4294967295,
-          "minimum": 1,
-          "type": "integer"
-        },
-        "execution_id": {
+        "claim_id": {
           "type": "string"
         },
         "registration_id": {
@@ -27,8 +21,7 @@
         "registration_id",
         "session_id",
         "subject_id",
-        "execution_id",
-        "execution_generation"
+        "claim_id"
       ],
       "type": "object"
     }

package/schema/public/v1/handoff.serialize.schema.json

@@ -4,13 +4,7 @@
       "additionalProperties": false,
       "description": "The current managed Pi execution that published or received a handoff.\n`subject_id` is stable across verified successors; `execution_id` and\ngeneration identify the exact execution that took the action.",
       "properties": {
-        "execution_generation": {
-          "format": "uint32",
-          "maximum": 4294967295,
-          "minimum": 1,
-          "type": "integer"
-        },
-        "execution_id": {
+        "claim_id": {
           "type": "string"
         },
         "registration_id": {
@@ -27,8 +21,7 @@
         "registration_id",
         "session_id",
         "subject_id",
-        "execution_id",
-        "execution_generation"
+        "claim_id"
       ],
       "type": "object"
     }

package/schema/public/v1/observation-get-response.deserialize.schema.json

@@ -1037,6 +1037,9 @@
             }
           ]
         },
+        "claim_id": {
+          "type": "string"
+        },
         "identity_unresolved": {
           "type": "boolean"
         },
@@ -1067,6 +1070,7 @@
       },
       "required": [
         "subject_id",
+        "claim_id",
         "process",
         "identity_unresolved",
         "metadata",
@@ -2094,6 +2098,13 @@
         },
         "registration": {
           "$ref": "#/$defs/PublicRegistration"
+        },
+        "scoped": {
+          "description": "Whether this process runs inside a Radar-established execution scope. A\nprocess started outside the managed launch path has none and is observed.",
+          "type": [
+            "boolean",
+            "null"
+          ]
         }
       },
       "required": [
@@ -2375,6 +2386,12 @@
             "null"
           ]
         },
+        "claim_id": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
         "parent": {
           "type": "string"
         },
@@ -2383,12 +2400,6 @@
         },
         "state": {
           "$ref": "#/$defs/SpawnState"
-        },
-        "subject_id": {
-          "type": [
-            "string",
-            "null"
-          ]
         }
       },
       "required": [
@@ -2420,6 +2431,7 @@
     },
     "Standing": {
       "enum": [
+        "reserved",
         "pending",
         "granted",
         "duplicate",

package/schema/public/v1/observation-get-response.serialize.schema.json

@@ -1096,6 +1096,9 @@
             }
           ]
         },
+        "claim_id": {
+          "type": "string"
+        },
         "identity_unresolved": {
           "type": "boolean"
         },
@@ -1126,6 +1129,7 @@
       },
       "required": [
         "subject_id",
+        "claim_id",
         "process",
         "identity_unresolved",
         "metadata",
@@ -2197,6 +2201,13 @@
         },
         "registration": {
           "$ref": "#/$defs/PublicRegistration"
+        },
+        "scoped": {
+          "description": "Whether this process runs inside a Radar-established execution scope. A\nprocess started outside the managed launch path has none and is observed.",
+          "type": [
+            "boolean",
+            "null"
+          ]
         }
       },
       "required": [
@@ -2491,6 +2502,12 @@
             "null"
           ]
         },
+        "claim_id": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
         "parent": {
           "type": "string"
         },
@@ -2499,18 +2516,12 @@
         },
         "state": {
           "$ref": "#/$defs/SpawnState"
-        },
-        "subject_id": {
-          "type": [
-            "string",
-            "null"
-          ]
         }
       },
       "required": [
         "parent",
         "request_id",
-        "subject_id",
+        "claim_id",
         "child_source",
         "child_incarnation",
         "state"
@@ -2539,6 +2550,7 @@
     },
     "Standing": {
       "enum": [
+        "reserved",
         "pending",
         "granted",
         "duplicate",