prismatica 0.2.0

package/dist/planning/schema.js

@@ -0,0 +1,296 @@
+/**
+ * The one document an agent may return, and the one document `start` /
+ * `discover --import` / `propose --import` will act on. Strict throughout: an
+ * unknown key is a rejection, not a field we ignore.
+ *
+ * Only fields the code below actually CONSUMES appear here. There is no
+ * "notes", no "confidence", no free-form extension point — anything the agent
+ * wants to say that does not map onto a record we write is not part of the
+ * contract between us.
+ *
+ * Two of these fields are explicitly ADVISORY and are labelled as such wherever
+ * they are shown: `assumptions` and `possibleConflicts`. Deterministic code can
+ * check that a proposal is complete, internally consistent, in-scope, and bound
+ * to a current snapshot. It cannot check whether the agent's semantic reading
+ * of the app is correct — so it never claims to. That judgement is the owner's,
+ * which is exactly why Start previews everything and writes nothing first.
+ *
+ * Every answer names its own PROTOCOL in a single `format` literal —
+ * `prismatica/start@1`, `prismatica/discover@1`, `prismatica/propose@1`. One
+ * literal does both jobs a version field and a kind field used to do
+ * separately: a document written against a future protocol is refused by the
+ * ordinary strict parse rather than half-understood, and a discovery answer
+ * cannot be imported where a plan belongs. The JSON Schema `context …` hands
+ * the agent is DERIVED from these very schemas, so what Prismatica asks for and
+ * what it accepts cannot drift.
+ */
+import { z } from 'zod';
+import { RECORD_ID_PATTERN } from '../ids.js';
+import { BUILDER_NAME_PATTERN, FlowMechanicsSchema, FlowPresentationSchema, FlowStatusSchema, FlowTruthSchema, } from '../records/types.js';
+import { PlanningSnapshotSchema } from './snapshot.js';
+/**
+ * An id proposed by an AGENT. Every record id becomes a filename under
+ * `.prismatica/`, so this is the point where an unconstrained string would
+ * become a path — `../../../src/pwned` is a valid `z.string().min(1)` and is
+ * not a valid record id. Constrained HERE, on untrusted output, and never on
+ * the record schemas in `records/types.ts`, which must keep parsing every
+ * record already written. `atlas/store.ts` independently enforces resolved-path
+ * containment at the write boundary, so neither layer is load-bearing alone.
+ *
+ * `z.toJSONSchema` carries `.regex()` through as `pattern`, so the schema the
+ * agent is HANDED states this rule too — ask and accept still cannot drift.
+ */
+const ProposedRecordIdSchema = z.string().min(1).max(100).regex(RECORD_ID_PATTERN);
+/**
+ * The three hand-off protocols. Each is a single LITERAL carried in the
+ * document's `format` field, and each names exactly one importing command:
+ *
+ *  - `prismatica/start@1`    → `prismatica start --import`
+ *  - `prismatica/discover@1` → `prismatica discover --import`  (→ main)
+ *  - `prismatica/propose@1`  → `prismatica propose --import`   (→ the lane)
+ *
+ * The `@1` is the version. It is bumped only when an existing field changes
+ * MEANING — a purely additive field does not need it, because every object here
+ * is strict and an older agent simply omits the new key. A document claiming
+ * `@2` is refused by the same parse that refuses a misspelled field, which is
+ * the point: "I do not understand this format" must fail closed.
+ *
+ * The last two share one object shape and differ only in that literal. That is
+ * deliberate: it is the same reading of the app either way, and the ONLY thing
+ * that separates them is where the records land — so the document has to state
+ * which command it was written for, and the command refuses anything else. It
+ * still does not CHOOSE its destination; the destination is fixed by the
+ * command, and a mismatched literal is a mis-paste caught at the boundary
+ * instead of proposals silently landing on the wrong branch.
+ */
+export const START_FORMAT = 'prismatica/start@1';
+export const DISCOVER_FORMAT = 'prismatica/discover@1';
+export const PROPOSE_FORMAT = 'prismatica/propose@1';
+export const HANDOFF_FORMATS = [START_FORMAT, DISCOVER_FORMAT, PROPOSE_FORMAT];
+export const PROPOSAL_KINDS = ['existing-flow', 'new-flow', 'technical'];
+export const ProposalKindSchema = z.enum(PROPOSAL_KINDS);
+/** The delta body for an existing Flow — the same fields `delta new` takes. */
+export const ProposedDeltaSchema = z.strictObject({
+    step: z.number().int().min(1).optional(),
+    today: z.string().min(1),
+    instead: z.string().min(1),
+    keep: z.array(z.string().min(1)).default([]),
+    assumptions: z.array(z.string().min(1)).default([]),
+    showMe: z.string().min(1),
+});
+/**
+ * A genuinely new Flow, expressed as the EXISTING flow-proposal material —
+ * truth, mechanics, optional presentation — so `start` can hand it straight to
+ * the machinery `discover` already feeds. `status` is constrained to `planned`:
+ * a flow nobody has built yet is planned by definition, and nothing in this
+ * path may mark something `works`.
+ */
+export const ProposedPlannedFlowSchema = z.strictObject({
+    id: ProposedRecordIdSchema,
+    status: z.literal('planned'),
+    presentation: FlowPresentationSchema.optional(),
+    truth: FlowTruthSchema,
+    mechanics: FlowMechanicsSchema.default({
+        touchpoints: [],
+        routes: [],
+        components: [],
+        entities: [],
+        tests: [],
+    }),
+});
+export const ProposedAcceptanceCheckSchema = z.strictObject({
+    description: z.string().min(1),
+    /** A test file/id the check engine can trace, or `manual:OWNER`. */
+    test: z.string().min(1),
+});
+export const ProposedRiskSchema = z.strictObject({
+    touchesAuth: z.boolean(),
+    touchesPayments: z.boolean(),
+    touchesSavedData: z.boolean(),
+    copyOnly: z.boolean(),
+    rationale: z.string().min(1),
+});
+export const StartProposalSchema = z.strictObject({
+    format: z.literal(START_FORMAT),
+    /**
+     * The FINAL clarified request, in the owner's own words, as the planning
+     * conversation settled it.
+     *
+     * It lives in the document rather than on the command line because that is
+     * where the clarifying happened. `prismatica start` takes no positional
+     * request: repeating the original one-line description on import would record
+     * the words the owner opened with instead of the ones they agreed, and asking
+     * the owner to retype the agreed wording invites a third version of it. There
+     * is likewise no `questions` field any more — an unresolved question is
+     * resolved in the conversation, not by Prismatica re-asking at import time.
+     */
+    request: z.string().min(1),
+    /**
+     * Which agent will BUILD this. Explicitly resolved during planning and never
+     * inferred: whoever planned the change is not thereby its builder.
+     *
+     * Constrained by `BUILDER_NAME_PATTERN` for the same reason
+     * `ProposedRecordIdSchema` is constrained — the value is interpolated into
+     * copy-ready `prismatica open <builder> <id>` commands and rides a contract
+     * onto a pull request, and a bare identifier is the only shape that cannot
+     * carry shell syntax into a paste.
+     */
+    builder: z.string().regex(BUILDER_NAME_PATTERN),
+    /**
+     * The complete reading the plan was made against, echoed back verbatim.
+     *
+     * It is a STALENESS DETECTOR and nothing else. The import parses it
+     * structurally and recomputes its id from its own contents, which proves the
+     * echo is a real snapshot rather than a copied string; it then compares it
+     * with a reading taken FRESH, and the only thing that comparison produces is
+     * drift REASONS shown to the owner. Every decision input — which Flows exist,
+     * which ids are taken, the tier rules, the default tier — comes from the
+     * fresh reading. See `validateStartProposal`, which takes that snapshot as a
+     * parameter and never touches this field.
+     */
+    snapshot: PlanningSnapshotSchema,
+    summary: z.string().min(1),
+    rationale: z.string().min(1),
+    kind: ProposalKindSchema,
+    /** Required for `existing-flow`; forbidden otherwise (checked in validate.ts). */
+    flowId: ProposedRecordIdSchema.optional(),
+    currentBehaviour: z.string().min(1),
+    desiredBehaviour: z.string().min(1),
+    mustNotChange: z.array(z.string().min(1)).default([]),
+    // ── Advisory only. Never used to widen scope or lower a tier. ──
+    assumptions: z.array(z.string().min(1)).default([]),
+    possibleConflicts: z.array(z.string().min(1)).default([]),
+    scope: z.strictObject({
+        allow: z.array(z.string().min(1)).min(1),
+        forbid: z.array(z.string().min(1)).default([]),
+    }),
+    exclusions: z.array(z.string().min(1)).default([]),
+    // `IntentSchema.checks` accepts 2–4, so two is the honest minimum here.
+    acceptance: z.array(ProposedAcceptanceCheckSchema).min(2),
+    risk: ProposedRiskSchema,
+    // There is deliberately no `issue` field. The GitHub issue is assembled by
+    // `start` from the fields above, so the text filed on a real repository under
+    // the owner's name is derived from the plan they just read — never a second,
+    // unvalidated description of the change that could quietly disagree with it.
+    delta: ProposedDeltaSchema.optional(),
+    plannedFlow: ProposedPlannedFlowSchema.optional(),
+    /**
+     * Rules the owner WANTS to hold once this is built. They stay contract
+     * constraints (non-goals and acceptance text) until the work exists and
+     * rediscovery finds them — a desired rule is never written as canonical truth.
+     */
+    desiredRules: z.array(z.string().min(1)).default([]),
+    /**
+     * Documentation the change must actually update, copied onto the contract's
+     * `docsDelta` so the check engine can require the files to have changed. The
+     * plan is where this belongs: whoever decided the change also knows which
+     * docs go stale if it lands, and a contract framed without it silently drops
+     * that requirement.
+     */
+    docsDelta: z.array(z.string().min(1)).default([]),
+});
+// ── The proposals answer (discovery, rediscovery, and in-lane proposing) ─────
+/**
+ * Discovery returns proposals against a snapshot it must echo back. A
+ * recognised `id` is an UPDATE to that flow, never a duplicate draft — which
+ * is why the agent states `proposalType` and we cross-check it against what
+ * actually exists rather than trusting the label.
+ */
+export const ProposedFlowSchema = z.strictObject({
+    id: ProposedRecordIdSchema,
+    proposalType: z.enum(['draft', 'update']),
+    reason: z.string().min(1),
+    status: FlowStatusSchema,
+    presentation: FlowPresentationSchema.optional(),
+    truth: FlowTruthSchema,
+    mechanics: FlowMechanicsSchema.default({
+        touchpoints: [],
+        routes: [],
+        components: [],
+        entities: [],
+        tests: [],
+    }),
+});
+export const ProposedRuleSchema = z.strictObject({
+    id: ProposedRecordIdSchema,
+    proposalType: z.enum(['draft', 'update']),
+    reason: z.string().min(1),
+    text: z.string().min(1),
+});
+/**
+ * Everything a proposals answer carries apart from the `format` literal that
+ * says which command it was written for. Spelled once and used twice, so the
+ * two protocols cannot drift into being two different documents.
+ */
+const proposalsAnswerFields = {
+    /**
+     * The complete reading the answer was made against, echoed back verbatim.
+     * Parsed structurally and id-recomputed exactly as `start`'s is, and used for
+     * exactly the same one thing: drift REASONS. It supplies no decision input.
+     */
+    snapshot: PlanningSnapshotSchema,
+    /**
+     * The exact commit the agent read. THIS is the hard binding, and it is
+     * deliberately the commit rather than the whole snapshot id.
+     *
+     * A Flow describes committed behaviour, and canonical Flows and `rules.md`
+     * are themselves committed records (Model B requires it), so `head` covers
+     * everything an answer here reconciles against. The snapshot id also digests
+     * the UNCOMMITTED tree and the pending-proposal set — and these commands
+     * WRITE proposals, so gating on it would mean every import invalidated its
+     * own answer: a run that failed on item three of five could never be retried,
+     * which is precisely the recovery `planProposals` exists to make safe. The
+     * echoed snapshot is still checked; a difference it finds is reported to the
+     * owner rather than refusing work that is safe to finish.
+     */
+    head: z.string().min(1),
+    summary: z.string().min(1),
+    flows: z.array(ProposedFlowSchema).default([]),
+    rules: z.array(ProposedRuleSchema).default([]),
+    /**
+     * Flows in the snapshot the agent did NOT find in the code. Purely an owner
+     * review warning: absence is never deletion, never dismissal. Nothing in
+     * this list causes a write, and nothing about it can fail a run — it is
+     * ADVISORY, and the one honest reading of "I could not find this" is that
+     * the agent could not find it, not that it is gone.
+     */
+    notFound: z.array(z.strictObject({ id: ProposedRecordIdSchema, why: z.string().min(1) })).default([]),
+};
+/** The map of the app. `discover --import` materialises it on MAIN. */
+export const DiscoverAnswerSchema = z.strictObject({
+    format: z.literal(DISCOVER_FORMAT),
+    ...proposalsAnswerFields,
+});
+/** A proposal made while building. `propose --import` materialises it in the LANE. */
+export const ProposeAnswerSchema = z.strictObject({
+    format: z.literal(PROPOSE_FORMAT),
+    ...proposalsAnswerFields,
+});
+// ── JSON Schema handed to the agent ──────────────────────────────────────────
+/**
+ * Derived from the IMPORTER's own zod schemas, so the shape `context …` asks
+ * for and the shape `--import` accepts cannot drift apart. This is the whole
+ * reason the export lives next to the schema rather than in a hand-written
+ * prompt: a second, prose description of the same document is a copy that goes
+ * stale the week after it is written.
+ *
+ * It is a convenience for the agent, never a trust boundary. Every imported
+ * document is re-parsed against the zod schema locally, and that local parse
+ * is the only thing that decides.
+ */
+export function startAnswerJsonSchema() {
+    return z.toJSONSchema(StartProposalSchema, { io: 'input', unrepresentable: 'any' });
+}
+/**
+ * Both proposals protocols, so an agent can see that they differ in one literal
+ * and nothing else — and pick the one matching the command the owner will run.
+ */
+export function proposalsAnswerJsonSchema() {
+    return {
+        oneOf: [
+            z.toJSONSchema(DiscoverAnswerSchema, { io: 'input', unrepresentable: 'any' }),
+            z.toJSONSchema(ProposeAnswerSchema, { io: 'input', unrepresentable: 'any' }),
+        ],
+    };
+}
+//# sourceMappingURL=schema.js.map

package/dist/planning/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/planning/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AACjD,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AACvD,MAAM,CAAC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAErD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,cAAc,CAAU,CAAC;AAGxF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,eAAe,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,EAAE,EAAE,sBAAsB;IAC1B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC5B,YAAY,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC;QACrC,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,EAAE;QACV,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;KACV,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,oEAAoE;IACpE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAE/B;;;;;;;;;;;OAWG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1B;;;;;;;;;OASG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAE/C;;;;;;;;;;;OAWG;IACH,QAAQ,EAAE,sBAAsB;IAEhC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,kBAAkB;IACxB,kFAAkF;IAClF,MAAM,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAEzC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAErD,kEAAkE;IAClE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEzD,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC/C,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAElD,wEAAwE;IACxE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,IAAI,EAAE,kBAAkB;IAExB,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAE7E,KAAK,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IACjD;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEpD;;;;;;OAMG;IACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/C,EAAE,EAAE,sBAAsB;IAC1B,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,gBAAgB;IACxB,YAAY,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC;QACrC,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,EAAE;QACV,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;KACV,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/C,EAAE,EAAE,sBAAsB;IAC1B,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,qBAAqB,GAAG;IAC5B;;;;OAIG;IACH,QAAQ,EAAE,sBAAsB;IAChC;;;;;;;;;;;;;OAaG;IACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C;;;;;;OAMG;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7F,CAAC;AAEX,uEAAuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAClC,GAAG,qBAAqB;CACzB,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACjC,GAAG,qBAAqB;CACzB,CAAC,CAAC;AAUH,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,KAAK,EAAE;YACL,CAAC,CAAC,YAAY,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YAC7E,CAAC,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;SAC7E;KACF,CAAC;AACJ,CAAC"}

package/dist/planning/snapshot.js

@@ -0,0 +1,308 @@
+/**
+ * The read-only picture of the repository that a planning request is bound to.
+ *
+ * A snapshot exists for one reason: an agent's answer is only meaningful about
+ * the tree it actually read. By hashing everything the agent was told, handing
+ * it the hash, requiring it back verbatim, and re-taking the snapshot before we
+ * write anything, "the repository moved under this plan" becomes a detectable
+ * fact instead of a hope. That is the whole mechanism — there is no attempt to
+ * lock the repo, and nothing here writes.
+ */
+import { createHash } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { z } from 'zod';
+import { listOpenChanges } from '../change.js';
+import { loadConfig } from '../config.js';
+import * as git from '../git.js';
+import { flowTitle } from '../atlas/presentation.js';
+import { computeRulesHash, computeTruthHash, listFlowProposals, listFlows, listRuleProposals, readRulesFile, } from '../atlas/store.js';
+import { readContract, stableStringify } from '../records/store.js';
+import { ModeSchema, RiskTierSchema, TierRuleSchema } from '../records/types.js';
+/**
+ * The snapshot as it travels back INSIDE an answer document.
+ *
+ * The hand-off carries the whole reading the agent was given, not merely its
+ * id, so an import can check the echo is a real snapshot rather than a string
+ * the agent made up: parse it structurally, then recompute its id from its own
+ * contents (`verifyHandoffSnapshot`) and compare with what it claims.
+ *
+ * IT IS NEVER A DECISION INPUT. Everything that decides anything — which Flows
+ * exist, which ids are taken, the tier rules, the default tier — is read from a
+ * snapshot taken FRESH at import time. `validateStartProposal` still takes a
+ * `PlanningSnapshot` parameter for exactly that reason, and it never reads the
+ * embedded one: the only thing the echo produces is drift REASONS, via
+ * `compareSnapshots`. Keeping those two jobs in separate functions is what
+ * stops an embedded snapshot becoming an authority by accident.
+ */
+export const PlanningSnapshotSchema = z.strictObject({
+    snapshotId: z.string().min(1),
+    takenAt: z.string().min(1),
+    repoRoot: z.string(),
+    appName: z.string(),
+    mode: ModeSchema,
+    head: z.string().min(1),
+    workingTree: z.array(z.strictObject({ path: z.string(), hash: z.string() })),
+    branch: z.string().nullable(),
+    flows: z.array(z.strictObject({
+        id: z.string(),
+        title: z.string(),
+        goal: z.string(),
+        status: z.string(),
+        truthHash: z.string(),
+        mechanicsHash: z.string(),
+        touchpoints: z.array(z.string()),
+    })),
+    rulesHash: z.string().nullable(),
+    rules: z.array(z.strictObject({ id: z.string(), text: z.string() })),
+    pending: z.array(z.strictObject({
+        id: z.string(),
+        kind: z.enum(['flow', 'rule']),
+        proposalType: z.enum(['draft', 'update']),
+        reason: z.string(),
+        contentHash: z.string(),
+    })),
+    openChanges: z.array(z.strictObject({ id: z.string(), title: z.string(), stage: z.string() })),
+    capabilities: z.array(z.string()),
+    tierRules: z.array(TierRuleSchema),
+    defaultTier: RiskTierSchema,
+    problems: z.array(z.string()),
+});
+/**
+ * Is this echoed snapshot internally consistent — does its id really digest its
+ * own contents? A `null` return means yes; a string is the reason it does not.
+ *
+ * This proves the echo was not assembled by hand, and nothing more. It says
+ * nothing about whether the tree still looks like that, which is
+ * `compareSnapshots`'s question and is answered against a FRESH reading.
+ *
+ * The digest deliberately covers less than the whole record (see
+ * `computeSnapshotId`) — but it covers exactly the fields `compareSnapshots`
+ * goes on to read: `head`, `workingTree`, `rulesHash`, the per-flow hashes and
+ * the pending set. So every field an echoed snapshot is USED for is one this
+ * check protects, and the descriptive remainder (`appName`, `takenAt`,
+ * `capabilities`, the tier rules) is read by nothing and decides nothing.
+ */
+export function verifyHandoffSnapshot(snapshot) {
+    const recomputed = computeSnapshotId(snapshot);
+    return recomputed === snapshot.snapshotId
+        ? null
+        : `it claims snapshot "${snapshot.snapshotId}" but its own contents digest to "${recomputed}" — export a fresh context rather than editing one`;
+}
+/**
+ * The snapshot id covers everything the agent is told AND everything a later
+ * write depends on: HEAD, every flow's truth hash, the rules hash, and the
+ * pending set. `takenAt` is deliberately excluded — two snapshots of an
+ * unchanged repo must produce the same id, or "did anything move?" would
+ * always answer yes.
+ */
+export function computeSnapshotId(snapshot) {
+    return createHash('sha256')
+        .update(stableStringify({
+        head: snapshot.head,
+        workingTree: snapshot.workingTree,
+        flows: snapshot.flows.map((flow) => ({
+            id: flow.id,
+            truthHash: flow.truthHash,
+            mechanicsHash: flow.mechanicsHash,
+            status: flow.status,
+        })),
+        rulesHash: snapshot.rulesHash,
+        // Content, not just identity: a pending proposal REWRITTEN in place
+        // keeps its id and type, and is exactly the drift worth catching.
+        pending: snapshot.pending.map((item) => ({
+            id: item.id,
+            kind: item.kind,
+            proposalType: item.proposalType,
+            contentHash: item.contentHash,
+        })),
+    }))
+        .digest('hex');
+}
+function hashOf(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+/**
+ * `path → sha256(content)` for every uncommitted path. Pure read: nothing here
+ * stages, stashes, or touches the tree.
+ *
+ * `dirtyEntries` (not `dirtyPaths`) is the source, for two reasons that are
+ * both correctness, not taste. It runs `--untracked-files=all`, so a brand-new
+ * untracked DIRECTORY is enumerated as its individual files rather than
+ * collapsing to one directory entry whose contents would then be invisible —
+ * an edit inside a new directory has to move the snapshot id. And it keeps the
+ * porcelain change type, so a DELETED path is recorded as deleted rather than
+ * being indistinguishable from a file we merely failed to read.
+ *
+ * Content is hashed as raw BYTES. Reading as UTF-8 would mangle a binary into
+ * the replacement character and let genuinely different files hash alike.
+ *
+ * A path that still cannot be read (a permission error, a race against an
+ * external write) is recorded with the `unreadable` marker instead of dropped:
+ * silently omitting it would make an unreadable file look like an unchanged
+ * one, which is the one direction this must never be wrong in. `discover
+ * --refresh` rechecks this snapshot and then writes proposals directly, so it
+ * is a real binding on the working tree, not merely a planning-window courtesy.
+ */
+async function hashWorkingTree(repoRoot) {
+    const entries = await git.dirtyEntries(repoRoot);
+    return entries
+        .map((entry) => {
+        if (entry.change === 'deleted') {
+            return { path: entry.path, hash: 'deleted' };
+        }
+        try {
+            const file = path.join(repoRoot, entry.path);
+            return { path: entry.path, hash: hashOf(fs.readFileSync(file)) };
+        }
+        catch {
+            return { path: entry.path, hash: 'unreadable' };
+        }
+    })
+        .sort((a, b) => a.path.localeCompare(b.path));
+}
+export async function takeSnapshot(cwd, now = new Date()) {
+    const repoRoot = await git.mainRepoRoot(cwd);
+    const config = loadConfig(repoRoot);
+    const head = (await git.hasCommits(repoRoot)) ? await git.revParse(repoRoot, 'HEAD') : 'no-commits';
+    const workingTree = await hashWorkingTree(repoRoot);
+    const branch = await git.currentBranch(repoRoot);
+    const { flows, problems: flowProblems } = listFlows(repoRoot);
+    const { proposals: flowProposals, problems: flowProposalProblems } = listFlowProposals(repoRoot);
+    const { proposals: ruleProposals, problems: ruleProposalProblems } = listRuleProposals(repoRoot);
+    const rulesFile = readRulesFile(repoRoot).data;
+    // Each open change's records live in its own lane (Model B), so the contract
+    // is read from that lane's home, never from main's.
+    const openChanges = (await listOpenChanges(repoRoot)).map((change) => {
+        try {
+            const contract = readContract(change.home, change.id).data;
+            return { id: change.id, title: contract.title, stage: contract.stage };
+        }
+        catch {
+            return { id: change.id, title: change.id, stage: 'unreadable' };
+        }
+    });
+    const capabilities = Object.entries(config.checks)
+        .filter(([, toggle]) => toggle.enabled)
+        .map(([name]) => name);
+    const base = {
+        repoRoot,
+        appName: config.app.name,
+        mode: config.mode,
+        head,
+        workingTree,
+        branch,
+        flows: flows
+            .map((flow) => ({
+            id: flow.id,
+            title: flowTitle(flow.id, flow.presentation),
+            goal: flow.truth.goal,
+            status: flow.status,
+            // Recomputed, not read from `approval.hash`: this must describe the
+            // truth on disk right now, including truth that was tampered with.
+            truthHash: computeTruthHash(flow.truth),
+            mechanicsHash: hashOf(stableStringify(flow.mechanics)),
+            touchpoints: flow.mechanics.touchpoints,
+        }))
+            .sort((a, b) => a.id.localeCompare(b.id)),
+        rulesHash: rulesFile ? computeRulesHash(rulesFile.rules) : null,
+        rules: (rulesFile?.rules ?? []).map((rule) => ({ id: rule.id, text: rule.text })),
+        pending: [
+            ...flowProposals.map((proposal) => ({
+                id: proposal.id,
+                kind: 'flow',
+                proposalType: proposal.proposalType,
+                reason: proposal.reason,
+                contentHash: hashOf(stableStringify(proposal)),
+            })),
+            ...ruleProposals.map((proposal) => ({
+                id: proposal.id,
+                kind: 'rule',
+                proposalType: proposal.proposalType,
+                reason: proposal.reason,
+                contentHash: hashOf(stableStringify(proposal)),
+            })),
+        ].sort((a, b) => `${a.kind}:${a.id}`.localeCompare(`${b.kind}:${b.id}`)),
+        openChanges,
+        capabilities,
+        tierRules: config.tierRules,
+        defaultTier: config.defaultTier,
+        problems: [...flowProblems, ...flowProposalProblems, ...ruleProposalProblems].map((problem) => `${problem.kind} ${problem.id}: ${problem.error}`),
+    };
+    return { ...base, snapshotId: computeSnapshotId(base), takenAt: now.toISOString() };
+}
+/**
+ * Compares a snapshot against one taken now. Called immediately before any
+ * durable write and again before an approval is applied — the two moments where
+ * acting on a stale reading would actually cause harm.
+ */
+export function compareSnapshots(before, now) {
+    const reasons = [];
+    if (before.head !== now.head) {
+        reasons.push(`the repository moved from ${before.head.slice(0, 8)} to ${now.head.slice(0, 8)}`);
+    }
+    if (before.rulesHash !== now.rulesHash) {
+        reasons.push('the app rules changed');
+    }
+    // The uncommitted tree is part of what the agent read, so it is part of what
+    // the plan is bound to. Named individually up to a point, then counted —
+    // a hundred reasons is not more honest than "97 more".
+    const beforeTree = new Map(before.workingTree.map((entry) => [entry.path, entry.hash]));
+    const nowTree = new Map(now.workingTree.map((entry) => [entry.path, entry.hash]));
+    const treeChanges = [];
+    for (const [file, hash] of nowTree) {
+        const previous = beforeTree.get(file);
+        if (previous === undefined) {
+            treeChanges.push(`"${file}" was edited`);
+        }
+        else if (previous !== hash) {
+            treeChanges.push(`"${file}" changed`);
+        }
+    }
+    for (const file of beforeTree.keys()) {
+        if (!nowTree.has(file)) {
+            treeChanges.push(`"${file}" was committed or reverted`);
+        }
+    }
+    if (treeChanges.length > 0) {
+        const shown = treeChanges.slice(0, 3);
+        const extra = treeChanges.length - shown.length;
+        reasons.push(`uncommitted work moved (${shown.join('; ')}${extra > 0 ? `; and ${extra} more` : ''})`);
+    }
+    const beforeFlows = new Map(before.flows.map((flow) => [flow.id, `${flow.truthHash}:${flow.mechanicsHash}`]));
+    const nowFlows = new Map(now.flows.map((flow) => [flow.id, `${flow.truthHash}:${flow.mechanicsHash}`]));
+    for (const [id, hash] of nowFlows) {
+        const previous = beforeFlows.get(id);
+        if (previous === undefined) {
+            reasons.push(`Flow "${id}" was added`);
+        }
+        else if (previous !== hash) {
+            reasons.push(`Flow "${id}" changed`);
+        }
+    }
+    for (const id of beforeFlows.keys()) {
+        if (!nowFlows.has(id)) {
+            reasons.push(`Flow "${id}" is gone`);
+        }
+    }
+    const beforePending = new Map(before.pending.map((item) => [`${item.kind}:${item.id}`, item.contentHash]));
+    const nowPending = new Map(now.pending.map((item) => [`${item.kind}:${item.id}`, item.contentHash]));
+    for (const [key, hash] of nowPending) {
+        const previous = beforePending.get(key);
+        if (previous === undefined) {
+            reasons.push(`a new pending proposal appeared (${key})`);
+        }
+        else if (previous !== hash) {
+            // The id and type are unchanged but the CONTENT is not — the case a
+            // set-membership check could never see.
+            reasons.push(`a pending proposal was rewritten (${key})`);
+        }
+    }
+    for (const key of beforePending.keys()) {
+        if (!nowPending.has(key)) {
+            reasons.push(`a pending proposal was resolved (${key})`);
+        }
+    }
+    return { moved: reasons.length > 0 || before.snapshotId !== now.snapshotId, reasons };
+}
+//# sourceMappingURL=snapshot.js.map

package/dist/planning/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/planning/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,iBAAiB,EACjB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAoEjF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,CACZ,CAAC,CAAC,YAAY,CAAC;QACb,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC,CACH;IACD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,YAAY,CAAC;QACb,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;KACxB,CAAC,CACH;IACD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9F,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAClC,WAAW,EAAE,cAAc;IAC3B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAA0B;IAC9D,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,UAAU,KAAK,QAAQ,CAAC,UAAU;QACvC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,uBAAuB,QAAQ,CAAC,UAAU,qCAAqC,UAAU,oDAAoD,CAAC;AACpJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA0D;IAC1F,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CACL,eAAe,CAAC;QACd,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,oEAAoE;QACpE,kEAAkE;QAClE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;KACJ,CAAC,CACH;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,OAAwB;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC7C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAClD,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,MAAY,IAAI,IAAI,EAAE;IACpE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEpC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACpG,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEjD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjG,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAE/C,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,WAAW,GAAG,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAe,EAAE,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;SAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAEzB,MAAM,IAAI,GAAqD;QAC7D,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI;QACJ,WAAW;QACX,MAAM;QACN,KAAK,EAAE,KAAK;aACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACd,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC;YAC5C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,oEAAoE;YACpE,mEAAmE;YACnE,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;YACvC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtD,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW;SACxC,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3C,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/D,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,OAAO,EAAE;YACP,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAClC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,MAAe;gBACrB,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,WAAW,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;aAC/C,CAAC,CAAC;YACH,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAClC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,MAAe;gBACrB,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,WAAW,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;aAC/C,CAAC,CAAC;SACJ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,WAAW;QACX,YAAY;QACZ,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,oBAAoB,EAAE,GAAG,oBAAoB,CAAC,CAAC,GAAG,CAC/E,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,EAAE,CAC/D;KACF,CAAC;IAEF,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;AACtF,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAwB,EAAE,GAAqB;IAC9E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACxC,CAAC;IACD,6EAA6E;IAC7E,yEAAyE;IACzE,uDAAuD;IACvD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,6BAA6B,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAChD,OAAO,CAAC,IAAI,CACV,2BAA2B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC3G,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACrG,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,oCAAoC,GAAG,GAAG,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7B,oEAAoE;YACpE,wCAAwC;YACxC,OAAO,CAAC,IAAI,CAAC,qCAAqC,GAAG,GAAG,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,oCAAoC,GAAG,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;AACxF,CAAC"}