run402 4.24.1 → 4.26.0

package/sdk/dist/node/gitvault-deploy.d.ts

@@ -0,0 +1,211 @@
+/**
+ * gitvault — push-gated deploy (protocol rev 40 §6.5; task 5.6).
+ *
+ * Every deploy has a commit, and artifacts build from it:
+ *   1. snapshot (§6.6) → the `gitvault_commit`, printed ALWAYS, never sent;
+ *   2. a fresh `capture_id` before BOTH lanes;
+ *   3. the deploy lane builds from an ISOLATED materialization of the snapshot
+ *      commit and produces the canonical plan digest (`apply_plan_sha256`,
+ *      null when the build fails before a plan exists) — concurrently, the
+ *      push lane prepares the publication;
+ *   4. the push's head carries `capture_binding {capture_id, apply_plan_sha256|null,
+ *      snapshot_oid_hmac}` — capture-the-attempt survives a failed build; no
+ *      token is mintable from a null digest;
+ *   5. with a digest and an admitted head, the capture receipt is exchanged
+ *      for an activation token, and the apply commit is submitted ONLY with it;
+ *   6. the outcome is one of the CLOSED five: `DEPLOYED_AND_VAULTED`,
+ *      `DEPLOY_BLOCKED_PUSH_FAILED`, `DEPLOY_FAILED_VAULTED`,
+ *      `DEPLOY_FAILED_UNVAULTED`, `DEPLOYED_UNVAULTED_OVERRIDE`.
+ *
+ * The push is never gated on deploy success. The unvaulted override
+ * (`allow_unvaulted`) is journaled crash-safely BEFORE the commit with the
+ * full §6.5 contents; any later invocation drains the journal by pushing the
+ * journaled snapshot and presenting the capture receipt to the
+ * override-completion route — equality on EVERY field or no clear.
+ */
+import type { GitvaultActivationToken, GitvaultCaptureReceipt, GitvaultHeadTarget } from "../namespaces/gitvault.types.js";
+import { GitvaultKeystore } from "./gitvault-keystore.js";
+import { GitvaultVault } from "./gitvault-publication.js";
+import { type GitvaultSnapshot, type GitvaultSnapshotOptions } from "./gitvault-snapshot.js";
+export declare const GITVAULT_DEPLOY_OUTCOMES: readonly ["DEPLOYED_AND_VAULTED", "DEPLOY_BLOCKED_PUSH_FAILED", "DEPLOY_FAILED_VAULTED", "DEPLOY_FAILED_UNVAULTED", "DEPLOYED_UNVAULTED_OVERRIDE"];
+export type GitvaultDeployOutcome = (typeof GITVAULT_DEPLOY_OUTCOMES)[number];
+/** A serializable error summary (never plaintext, never presigned URLs). */
+export interface GitvaultDeployError {
+    code: string;
+    message: string;
+    retryable: boolean;
+    details?: unknown;
+}
+export interface GitvaultDeployNextAction {
+    action: string;
+    /** Present when the action needs a capability the caller may lack. */
+    requires?: string;
+}
+interface GitvaultDeployResultBase {
+    outcome: GitvaultDeployOutcome;
+    /** The snapshot commit — ALWAYS present; the `gitvault_commit` line is derived from it. */
+    gitvault_commit: string;
+    gitvault_commit_line: string;
+    snapshot: GitvaultSnapshot;
+    capture_id: string;
+    snapshot_oid_hmac: string;
+    /** The canonical plan digest — null when the build failed before a plan existed. */
+    apply_plan_sha256: string | null;
+    operation_id: string | null;
+    next_actions: GitvaultDeployNextAction[];
+}
+export type GitvaultDeployResult = (GitvaultDeployResultBase & {
+    outcome: "DEPLOYED_AND_VAULTED";
+    generation: string;
+    head_sha256: string;
+    capture_receipt: GitvaultCaptureReceipt;
+    activation_token: GitvaultActivationToken;
+    commit: unknown;
+}) | (GitvaultDeployResultBase & {
+    outcome: "DEPLOY_BLOCKED_PUSH_FAILED";
+    push_error: GitvaultDeployError;
+    previous_release_keeps_serving: true;
+}) | (GitvaultDeployResultBase & {
+    outcome: "DEPLOY_FAILED_VAULTED";
+    generation: string;
+    head_sha256: string;
+    capture_receipt: GitvaultCaptureReceipt | null;
+    deploy_error: GitvaultDeployError;
+}) | (GitvaultDeployResultBase & {
+    outcome: "DEPLOY_FAILED_UNVAULTED";
+    push_error: GitvaultDeployError;
+    deploy_error: GitvaultDeployError;
+}) | (GitvaultDeployResultBase & {
+    outcome: "DEPLOYED_UNVAULTED_OVERRIDE";
+    push_error: GitvaultDeployError;
+    override_journal: GitvaultOverrideJournal;
+    commit: unknown;
+});
+export interface GitvaultDeployLanePlanInput {
+    /** The isolated materialization of the snapshot commit — build from THIS. */
+    materialized_dir: string;
+    capture_id: string;
+    snapshot_oid_hmac: string;
+}
+export interface GitvaultDeployLanePlan {
+    plan_id: string;
+    /** The apply operation the token is minted for (the gateway creates it at plan time under the vault gate). */
+    operation_id: string;
+    /** The canonical `apply_plan_canonical/v1` digest (opaque 32-byte commitment, hex). */
+    apply_plan_sha256: string;
+}
+export interface GitvaultDeployLaneCommitInput {
+    plan_id: string;
+    operation_id: string;
+    /** Present on the vaulted path. */
+    activation_token?: GitvaultActivationToken;
+    /** Present on the override path — requires `gitvault.override_unvaulted` server-side. */
+    allow_unvaulted?: {
+        reason: string;
+    };
+}
+/** The apply-v1 plan → commit pair, abstracted so the deploy logic is testable without a gateway. */
+export interface GitvaultDeployLane {
+    plan(input: GitvaultDeployLanePlanInput): Promise<GitvaultDeployLanePlan>;
+    commit(input: GitvaultDeployLaneCommitInput): Promise<unknown>;
+}
+export interface GitvaultOverrideJournal {
+    version: 1;
+    repo_id: string;
+    operation_id: string;
+    capture_id: string;
+    apply_plan_sha256: string;
+    snapshot: {
+        ref: string;
+        oid: string;
+        head_target: GitvaultHeadTarget;
+    };
+    snapshot_oid_hmac: string;
+    /** `pending` → committed unvaulted, not yet pushed; `published` → pushed, completion not yet accepted; `completed` → advisory cleared server-side. */
+    publication_state: "pending" | "published" | "completed";
+    generation: string | null;
+    head_sha256: string | null;
+    capture_receipt: GitvaultCaptureReceipt | null;
+    reason: string;
+    created_at: string;
+    updated_at: string;
+}
+export declare function overrideJournalDir(keystore: GitvaultKeystore): string;
+export declare function overrideJournalPath(keystore: GitvaultKeystore, operationId: string): string;
+export declare function writeOverrideJournal(keystore: GitvaultKeystore, journal: GitvaultOverrideJournal): void;
+export declare function readOverrideJournal(keystore: GitvaultKeystore, operationId: string): GitvaultOverrideJournal | null;
+/** Every override journal not yet `completed` — the doctor-visible advisory list. */
+export declare function listPendingOverrideJournals(keystore: GitvaultKeystore, repoId?: string): GitvaultOverrideJournal[];
+export interface GitvaultCaptureReceiptMatch {
+    equal: boolean;
+    mismatched_fields: string[];
+}
+/** Compare a capture receipt against an operation's journaled binding on EVERY field: repo, capture_id, plan digest, snapshot commitment, head hash. */
+export declare function matchCaptureReceipt(receipt: GitvaultCaptureReceipt, expected: {
+    repo_id: string;
+    capture_id: string;
+    apply_plan_sha256: string | null;
+    snapshot_oid_hmac: string;
+    head_sha256: string;
+}): GitvaultCaptureReceiptMatch;
+/**
+ * `authorization_epoch` is compared BYTEWISE against the epoch the client last
+ * saw installed (a DR gate mints a fresh one). Any difference — one nibble is
+ * enough — is `AUTHORIZATION_EPOCH_STALE`, never a retry under the old epoch.
+ */
+export declare function checkAuthorizationEpoch(tokenEpoch: string, installedEpoch: string): void;
+/** Verify a minted activation token binds exactly this deploy (before it is ever presented to a commit). */
+export declare function checkActivationTokenBinding(token: GitvaultActivationToken, expected: {
+    repo_id: string;
+    operation_id: string;
+    generation: string;
+    head_sha256: string;
+    capture_id: string;
+    apply_plan_sha256: string;
+    snapshot_oid_hmac: string;
+}): string[];
+export interface GitvaultDeployOptions {
+    vault: GitvaultVault;
+    lane: GitvaultDeployLane;
+    /** The work tree to snapshot. */
+    repo_dir: string;
+    snapshot?: Omit<GitvaultSnapshotOptions, "dir">;
+    /** The unvaulted override — requires `gitvault.override_unvaulted` server-side; refused otherwise. */
+    allow_unvaulted?: {
+        reason: string;
+    };
+    /** Test/replay hook: pin the capture id. */
+    capture_id?: string;
+    /** Where the isolated build dir is created (temp when omitted); always removed unless `keep_materialized`. */
+    materialize_dir?: string;
+    keep_materialized?: boolean;
+    now?: () => Date;
+    /** Called with the `gitvault_commit` line as soon as the snapshot exists — the CLI prints it. */
+    onCommitLine?: (line: string) => void;
+}
+/**
+ * Run the push-gated deploy. Throws ONLY for refusals that precede any lane
+ * (snapshot refusals such as `SNAPSHOT_CONFLICTED_INDEX`, unsupported
+ * repositories) and for `OVERRIDE_NOT_AUTHORIZED`; every other path resolves
+ * to one of the five outcomes.
+ */
+export declare function runGitvaultDeploy(options: GitvaultDeployOptions): Promise<GitvaultDeployResult>;
+export interface GitvaultOverrideDrainReport {
+    completed: GitvaultOverrideJournal[];
+    /** Still pending, with the reason the drain could not complete them this time. */
+    remaining: Array<{
+        journal: GitvaultOverrideJournal;
+        error: GitvaultDeployError;
+    }>;
+}
+/**
+ * Drain every pending override journal for this vault: push the journaled
+ * snapshot (same capture binding), verify the receipt against EVERY journaled
+ * field + the read-back head hash, present it for completion. Partial matches
+ * never clear; the advisory persists until equality.
+ */
+export declare function drainOverrideJournals(vault: GitvaultVault, options?: {
+    now?: () => Date;
+}): Promise<GitvaultOverrideDrainReport>;
+export {};
+//# sourceMappingURL=gitvault-deploy.d.ts.map

package/sdk/dist/node/gitvault-deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitvault-deploy.d.ts","sourceRoot":"","sources":["../../src/node/gitvault-deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,OAAO,KAAK,EAAE,uBAAuB,EAA0B,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACnJ,OAAO,EAAE,gBAAgB,EAAyC,MAAM,wBAAwB,CAAC;AACjG,OAAO,EAAE,aAAa,EAAoE,MAAM,2BAA2B,CAAC;AAC5H,OAAO,EAAqG,KAAK,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAIhM,eAAO,MAAM,wBAAwB,oJAM3B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,wBAAwB;IAChC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,2FAA2F;IAC3F,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oFAAoF;IACpF,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAED,MAAM,MAAM,oBAAoB,GAC5B,CAAC,wBAAwB,GAAG;IAAE,OAAO,EAAE,sBAAsB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,sBAAsB,CAAC;IAAC,gBAAgB,EAAE,uBAAuB,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,GAC9M,CAAC,wBAAwB,GAAG;IAAE,OAAO,EAAE,4BAA4B,CAAC;IAAC,UAAU,EAAE,mBAAmB,CAAC;IAAC,8BAA8B,EAAE,IAAI,CAAA;CAAE,CAAC,GAC7I,CAAC,wBAAwB,GAAG;IAAE,OAAO,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,mBAAmB,CAAA;CAAE,CAAC,GAC7L,CAAC,wBAAwB,GAAG;IAAE,OAAO,EAAE,yBAAyB,CAAC;IAAC,UAAU,EAAE,mBAAmB,CAAC;IAAC,YAAY,EAAE,mBAAmB,CAAA;CAAE,CAAC,GACvI,CAAC,wBAAwB,GAAG;IAAE,OAAO,EAAE,6BAA6B,CAAC;IAAC,UAAU,EAAE,mBAAmB,CAAC;IAAC,gBAAgB,EAAE,uBAAuB,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAIzK,MAAM,WAAW,2BAA2B;IAC1C,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,8GAA8G;IAC9G,YAAY,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,yFAAyF;IACzF,eAAe,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CACtC;AAED,qGAAqG;AACrG,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChE;AAID,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,kBAAkB,CAAA;KAAE,CAAC;IACxE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sJAAsJ;IACtJ,iBAAiB,EAAE,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;IACzD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAErE;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAGvG;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAGnH;AAED,qFAAqF;AACrF,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAclH;AAID,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,wJAAwJ;AACxJ,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,2BAA2B,CAQrO;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAOxF;AAED,4GAA4G;AAC5G,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAQ5P;AAID,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,EAAE,kBAAkB,CAAC;IACzB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAChD,sGAAsG;IACtG,eAAe,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8GAA8G;IAC9G,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,iGAAiG;IACjG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAcD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAgHrG;AAID,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,uBAAuB,EAAE,CAAC;IACrC,kFAAkF;IAClF,SAAS,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,uBAAuB,CAAC;QAAC,KAAK,EAAE,mBAAmB,CAAA;KAAE,CAAC,CAAC;CACpF;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAAO,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA8B1I"}

package/sdk/dist/node/gitvault-deploy.js

@@ -0,0 +1,292 @@
+/**
+ * gitvault — push-gated deploy (protocol rev 40 §6.5; task 5.6).
+ *
+ * Every deploy has a commit, and artifacts build from it:
+ *   1. snapshot (§6.6) → the `gitvault_commit`, printed ALWAYS, never sent;
+ *   2. a fresh `capture_id` before BOTH lanes;
+ *   3. the deploy lane builds from an ISOLATED materialization of the snapshot
+ *      commit and produces the canonical plan digest (`apply_plan_sha256`,
+ *      null when the build fails before a plan exists) — concurrently, the
+ *      push lane prepares the publication;
+ *   4. the push's head carries `capture_binding {capture_id, apply_plan_sha256|null,
+ *      snapshot_oid_hmac}` — capture-the-attempt survives a failed build; no
+ *      token is mintable from a null digest;
+ *   5. with a digest and an admitted head, the capture receipt is exchanged
+ *      for an activation token, and the apply commit is submitted ONLY with it;
+ *   6. the outcome is one of the CLOSED five: `DEPLOYED_AND_VAULTED`,
+ *      `DEPLOY_BLOCKED_PUSH_FAILED`, `DEPLOY_FAILED_VAULTED`,
+ *      `DEPLOY_FAILED_UNVAULTED`, `DEPLOYED_UNVAULTED_OVERRIDE`.
+ *
+ * The push is never gated on deploy success. The unvaulted override
+ * (`allow_unvaulted`) is journaled crash-safely BEFORE the commit with the
+ * full §6.5 contents; any later invocation drains the journal by pushing the
+ * journaled snapshot and presenting the capture receipt to the
+ * override-completion route — equality on EVERY field or no clear.
+ */
+import { existsSync, readdirSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { LocalError, isRun402Error } from "../errors.js";
+import { formatGitvaultTimestamp, hexToBytes, newHex32 } from "../namespaces/gitvault.crypto.js";
+import { readFileNoFollow, writeFileAtomic0600 } from "./gitvault-keystore.js";
+import { captureBinding, deployRefTransaction } from "./gitvault-publication.js";
+import { GITVAULT_DEPLOY_REF, captureSnapshot, gitvaultCommitLine, materializeSnapshot, snapshotCommitment } from "./gitvault-snapshot.js";
+// ─── Outcomes ────────────────────────────────────────────────────────────────
+export const GITVAULT_DEPLOY_OUTCOMES = [
+    "DEPLOYED_AND_VAULTED",
+    "DEPLOY_BLOCKED_PUSH_FAILED",
+    "DEPLOY_FAILED_VAULTED",
+    "DEPLOY_FAILED_UNVAULTED",
+    "DEPLOYED_UNVAULTED_OVERRIDE",
+];
+export function overrideJournalDir(keystore) {
+    return join(keystore.journalDir, "overrides");
+}
+export function overrideJournalPath(keystore, operationId) {
+    if (!/^[A-Za-z0-9_.-]{1,128}$/.test(operationId))
+        throw new LocalError("operation_id is not a safe file name", "resolving override journal path", { code: "GITVAULT_BAD_ID" });
+    return join(overrideJournalDir(keystore), `${operationId}.json`);
+}
+export function writeOverrideJournal(keystore, journal) {
+    writeFileAtomic0600(overrideJournalPath(keystore, journal.operation_id), JSON.stringify(journal, null, 2));
+    keystore.audit("journal_stage", journal.repo_id, { override_operation_id: journal.operation_id, publication_state: journal.publication_state });
+}
+export function readOverrideJournal(keystore, operationId) {
+    const text = readFileNoFollow(overrideJournalPath(keystore, operationId));
+    return text ? JSON.parse(text) : null;
+}
+/** Every override journal not yet `completed` — the doctor-visible advisory list. */
+export function listPendingOverrideJournals(keystore, repoId) {
+    const dir = overrideJournalDir(keystore);
+    if (!existsSync(dir))
+        return [];
+    const out = [];
+    for (const f of readdirSync(dir)) {
+        if (!f.endsWith(".json"))
+            continue;
+        const text = readFileNoFollow(join(dir, f));
+        if (!text)
+            continue;
+        const j = JSON.parse(text);
+        if (j.version !== 1 || j.publication_state === "completed")
+            continue;
+        if (repoId && j.repo_id !== repoId)
+            continue;
+        out.push(j);
+    }
+    return out;
+}
+/** Compare a capture receipt against an operation's journaled binding on EVERY field: repo, capture_id, plan digest, snapshot commitment, head hash. */
+export function matchCaptureReceipt(receipt, expected) {
+    const mismatched = [];
+    if (receipt.repo_id !== expected.repo_id)
+        mismatched.push("repo_id");
+    if (receipt.capture_id !== expected.capture_id)
+        mismatched.push("capture_id");
+    if (receipt.apply_plan_sha256 !== expected.apply_plan_sha256)
+        mismatched.push("apply_plan_sha256");
+    if (receipt.snapshot_oid_hmac !== expected.snapshot_oid_hmac)
+        mismatched.push("snapshot_oid_hmac");
+    if (receipt.head_sha256 !== expected.head_sha256)
+        mismatched.push("head_sha256");
+    return { equal: mismatched.length === 0, mismatched_fields: mismatched };
+}
+/**
+ * `authorization_epoch` is compared BYTEWISE against the epoch the client last
+ * saw installed (a DR gate mints a fresh one). Any difference — one nibble is
+ * enough — is `AUTHORIZATION_EPOCH_STALE`, never a retry under the old epoch.
+ */
+export function checkAuthorizationEpoch(tokenEpoch, installedEpoch) {
+    if (tokenEpoch === installedEpoch)
+        return;
+    throw new LocalError(`authorization_epoch ${tokenEpoch} is not the installed epoch ${installedEpoch}; the authorization was issued under a superseded epoch`, "checking authorization epoch", { code: "AUTHORIZATION_EPOCH_STALE", details: { token_authorization_epoch: tokenEpoch, installed_authorization_epoch: installedEpoch }, next_actions: [{ action: "re-request authorization under the current epoch (redeploy)" }] });
+}
+/** Verify a minted activation token binds exactly this deploy (before it is ever presented to a commit). */
+export function checkActivationTokenBinding(token, expected) {
+    const problems = [];
+    if (token.object_kind !== "activation_token" || !/^ct_[0-9a-f]{32}$/.test(token.object_id))
+        problems.push("object_id");
+    for (const k of ["repo_id", "operation_id", "generation", "head_sha256", "capture_id", "apply_plan_sha256", "snapshot_oid_hmac"]) {
+        if (token[k] !== expected[k])
+            problems.push(k);
+    }
+    if (!/^[0-9a-f]{32}$/.test(token.authorization_epoch))
+        problems.push("authorization_epoch");
+    return problems;
+}
+function summarize(e) {
+    if (isRun402Error(e)) {
+        const err = e;
+        return { code: err.code ?? "UNKNOWN", message: err.message, retryable: Boolean(err.retryable), ...(err.details !== undefined ? { details: err.details } : {}) };
+    }
+    return { code: "UNKNOWN", message: e instanceof Error ? e.message : String(e), retryable: false };
+}
+function code(e) {
+    return isRun402Error(e) ? e.code : undefined;
+}
+/**
+ * Run the push-gated deploy. Throws ONLY for refusals that precede any lane
+ * (snapshot refusals such as `SNAPSHOT_CONFLICTED_INDEX`, unsupported
+ * repositories) and for `OVERRIDE_NOT_AUTHORIZED`; every other path resolves
+ * to one of the five outcomes.
+ */
+export async function runGitvaultDeploy(options) {
+    const { vault, lane } = options;
+    const now = options.now ?? (() => new Date());
+    const repo = vault.repoFile();
+    const kRepo = hexToBytes(repo.k_repo_hex);
+    // 1. snapshot — refusals propagate; nothing has been sent anywhere.
+    const snapshot = await captureSnapshot({ dir: options.repo_dir, ...(options.snapshot ?? {}) });
+    const commitLine = gitvaultCommitLine(snapshot);
+    options.onCommitLine?.(commitLine);
+    // 2. fresh capture id before both lanes; the keyed snapshot commitment (the platform never sees the oid).
+    const captureId = options.capture_id ?? newHex32();
+    const snapshotOidHmac = snapshotCommitment(kRepo, vault.repoId, repo.epoch, snapshot.oid);
+    const base = (fields) => ({
+        outcome: "DEPLOY_FAILED_UNVAULTED", gitvault_commit: snapshot.oid, gitvault_commit_line: commitLine, snapshot, capture_id: captureId, snapshot_oid_hmac: snapshotOidHmac,
+        apply_plan_sha256: null, operation_id: null, next_actions: [], ...fields,
+    });
+    // 3. isolated materialization — the deploy lane builds from the commit, never the work tree.
+    const materialized = await materializeSnapshot(options.repo_dir, snapshot.oid, options.materialize_dir);
+    let plan = null;
+    let planError = null;
+    const planPromise = (async () => {
+        try {
+            plan = await lane.plan({ materialized_dir: materialized, capture_id: captureId, snapshot_oid_hmac: snapshotOidHmac });
+        }
+        catch (e) {
+            planError = e;
+        }
+    })();
+    // 4. push lane — concurrently; the head's binding is resolved at sign time from whatever the plan lane produced.
+    let published = null;
+    let pushError = null;
+    const pushPromise = (async () => {
+        try {
+            const current = await vault.materialize();
+            published = await vault.push({
+                transaction: deployRefTransaction(current.refs, snapshot.oid),
+                head_target: snapshot.head,
+                protocol_refs: "allow",
+                capture_binding: async () => {
+                    await planPromise; // the digest (or its absence) must be known before the head is signed
+                    return captureBinding(captureId, plan ? plan.apply_plan_sha256 : null, snapshotOidHmac);
+                },
+            });
+        }
+        catch (e) {
+            pushError = e;
+        }
+    })();
+    await Promise.all([planPromise, pushPromise]);
+    if (!options.keep_materialized)
+        rmSync(materialized, { recursive: true, force: true });
+    const planned = plan;
+    const pub = published;
+    const common = base({ apply_plan_sha256: planned?.apply_plan_sha256 ?? null, operation_id: planned?.operation_id ?? null });
+    // 5. outcomes
+    if (!pub) {
+        const push_error = summarize(pushError);
+        if (!planned) {
+            return { ...common, outcome: "DEPLOY_FAILED_UNVAULTED", push_error, deploy_error: summarize(planError), next_actions: [{ action: "fix the build, then redeploy" }, { action: "retry the push (run402 gitvault push)" }] };
+        }
+        if (options.allow_unvaulted) {
+            // journal BEFORE the commit so a crash leaves the advisory + the exact snapshot to resume
+            const journal = {
+                version: 1, repo_id: vault.repoId, operation_id: planned.operation_id, capture_id: captureId, apply_plan_sha256: planned.apply_plan_sha256,
+                snapshot: { ref: GITVAULT_DEPLOY_REF, oid: snapshot.oid, head_target: snapshot.head }, snapshot_oid_hmac: snapshotOidHmac,
+                publication_state: "pending", generation: null, head_sha256: null, capture_receipt: null, reason: options.allow_unvaulted.reason,
+                created_at: formatGitvaultTimestamp(now()), updated_at: formatGitvaultTimestamp(now()),
+            };
+            writeOverrideJournal(vault.keystore, journal);
+            let commit;
+            try {
+                commit = await lane.commit({ plan_id: planned.plan_id, operation_id: planned.operation_id, allow_unvaulted: options.allow_unvaulted });
+            }
+            catch (e) {
+                if (code(e) === "OVERRIDE_NOT_AUTHORIZED") {
+                    rmSync(overrideJournalPath(vault.keystore, planned.operation_id), { force: true }); // nothing activated; no advisory to drain
+                    throw e;
+                }
+                return { ...common, outcome: "DEPLOY_FAILED_UNVAULTED", push_error, deploy_error: summarize(e), next_actions: [{ action: "retry the push (run402 gitvault push) — the override journal is kept and will drain" }, { action: "retry the deploy" }] };
+            }
+            return { ...common, outcome: "DEPLOYED_UNVAULTED_OVERRIDE", push_error, override_journal: journal, commit, next_actions: [{ action: "run any run402 CLI command later: the override journal drains by pushing this exact snapshot and presenting its capture receipt for completion" }] };
+        }
+        return {
+            ...common, outcome: "DEPLOY_BLOCKED_PUSH_FAILED", push_error, previous_release_keeps_serving: true,
+            next_actions: [
+                { action: "retry the deploy (the vault push is retried; the previous release keeps serving)" },
+                { action: "deploy with allow_unvaulted to activate without a vaulted capture (journaled, completed later)", requires: "gitvault.override_unvaulted" },
+            ],
+        };
+    }
+    const vaulted = { generation: pub.generation, head_sha256: pub.head_sha256, capture_receipt: pub.capture_receipt };
+    if (!planned) {
+        return { ...common, outcome: "DEPLOY_FAILED_VAULTED", ...vaulted, deploy_error: summarize(planError), next_actions: [{ action: "fix the build, then redeploy (the attempted tree is in the vault at generation " + pub.generation + ")" }] };
+    }
+    if (!pub.capture_receipt) {
+        return { ...common, outcome: "DEPLOY_FAILED_VAULTED", ...vaulted, deploy_error: { code: "GITVAULT_CAPTURE_RECEIPT_MISSING", message: "admission returned no capture receipt for a head carrying a capture binding; no activation token can be exchanged", retryable: true }, next_actions: [{ action: "retry the deploy" }] };
+    }
+    let token;
+    try {
+        token = await vault.transport.exchangeActivationToken({ repo_id: vault.repoId, operation_id: planned.operation_id, capture_receipt: pub.capture_receipt });
+        const problems = checkActivationTokenBinding(token, { repo_id: vault.repoId, operation_id: planned.operation_id, generation: pub.generation, head_sha256: pub.head_sha256, capture_id: captureId, apply_plan_sha256: planned.apply_plan_sha256, snapshot_oid_hmac: snapshotOidHmac });
+        if (problems.length > 0)
+            throw new LocalError(`the minted activation token does not bind this deploy (${problems.join(", ")}); refusing to present it`, "checking activation token", { code: "GITVAULT_TOKEN_BINDING_MISMATCH", details: { problems } });
+        // the mint validates the receipt's epoch against the installed one, so a minted token's epoch
+        // must equal the receipt's — a difference means the epoch moved under us.
+        checkAuthorizationEpoch(token.authorization_epoch, pub.capture_receipt.authorization_epoch);
+    }
+    catch (e) {
+        return { ...common, outcome: "DEPLOY_FAILED_VAULTED", ...vaulted, deploy_error: summarize(e), next_actions: [{ action: code(e) === "AUTHORIZATION_EPOCH_STALE" ? "re-request authorization under the current epoch (redeploy)" : "retry the deploy" }] };
+    }
+    let commit;
+    try {
+        commit = await lane.commit({ plan_id: planned.plan_id, operation_id: planned.operation_id, activation_token: token });
+    }
+    catch (e) {
+        return { ...common, outcome: "DEPLOY_FAILED_VAULTED", ...vaulted, deploy_error: summarize(e), next_actions: [{ action: "inspect the apply operation, fix, redeploy (the attempted tree is vaulted)" }] };
+    }
+    return { ...common, outcome: "DEPLOYED_AND_VAULTED", ...vaulted, capture_receipt: pub.capture_receipt, activation_token: token, commit, next_actions: [] };
+}
+/**
+ * Drain every pending override journal for this vault: push the journaled
+ * snapshot (same capture binding), verify the receipt against EVERY journaled
+ * field + the read-back head hash, present it for completion. Partial matches
+ * never clear; the advisory persists until equality.
+ */
+export async function drainOverrideJournals(vault, options = {}) {
+    const now = options.now ?? (() => new Date());
+    const report = { completed: [], remaining: [] };
+    for (const journal of listPendingOverrideJournals(vault.keystore, vault.repoId)) {
+        try {
+            let j = journal;
+            if (j.publication_state === "pending") {
+                const current = await vault.materialize();
+                const pub = await vault.push({
+                    transaction: deployRefTransaction(current.refs, j.snapshot.oid),
+                    head_target: j.snapshot.head_target,
+                    protocol_refs: "allow",
+                    capture_binding: captureBinding(j.capture_id, j.apply_plan_sha256, j.snapshot_oid_hmac),
+                });
+                j = { ...j, publication_state: "published", generation: pub.generation, head_sha256: pub.head_sha256, capture_receipt: pub.capture_receipt, updated_at: formatGitvaultTimestamp(now()) };
+                writeOverrideJournal(vault.keystore, j);
+            }
+            if (!j.capture_receipt || !j.head_sha256)
+                throw new LocalError("the journaled publication has no capture receipt to present", "draining override journal", { code: "GITVAULT_CAPTURE_RECEIPT_MISSING" });
+            const match = matchCaptureReceipt(j.capture_receipt, { repo_id: j.repo_id, capture_id: j.capture_id, apply_plan_sha256: j.apply_plan_sha256, snapshot_oid_hmac: j.snapshot_oid_hmac, head_sha256: j.head_sha256 });
+            if (!match.equal)
+                throw new LocalError(`the capture receipt does not match the journaled operation on ${match.mismatched_fields.join(", ")}; the advisory persists`, "draining override journal", { code: "GITVAULT_OVERRIDE_COMPLETION_MISMATCH", details: match });
+            const res = await vault.transport.submitOverrideCompletion({ repo_id: j.repo_id, operation_id: j.operation_id, capture_receipt: j.capture_receipt });
+            if (!res.cleared)
+                throw new LocalError("the platform did not clear the override advisory", "draining override journal", { code: "GITVAULT_OVERRIDE_COMPLETION_REFUSED" });
+            j = { ...j, publication_state: "completed", updated_at: formatGitvaultTimestamp(now()) };
+            writeOverrideJournal(vault.keystore, j);
+            report.completed.push(j);
+        }
+        catch (e) {
+            report.remaining.push({ journal, error: summarize(e) });
+        }
+    }
+    return report;
+}
+//# sourceMappingURL=gitvault-deploy.js.map

package/sdk/dist/node/gitvault-deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitvault-deploy.js","sourceRoot":"","sources":["../../src/node/gitvault-deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAEjG,OAAO,EAAoB,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACjG,OAAO,EAAiB,cAAc,EAAE,oBAAoB,EAA8B,MAAM,2BAA2B,CAAC;AAC5H,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAuD,MAAM,wBAAwB,CAAC;AAEhM,gFAAgF;AAEhF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,sBAAsB;IACtB,4BAA4B;IAC5B,uBAAuB;IACvB,yBAAyB;IACzB,6BAA6B;CACrB,CAAC;AA0FX,MAAM,UAAU,kBAAkB,CAAC,QAA0B;IAC3D,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA0B,EAAE,WAAmB;IACjF,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,EAAE,iCAAiC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/K,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA0B,EAAE,OAAgC;IAC/F,mBAAmB,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3G,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,OAAO,CAAC,YAAY,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAClJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA0B,EAAE,WAAmB;IACjF,MAAM,IAAI,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,2BAA2B,CAAC,QAA0B,EAAE,MAAe;IACrF,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QACtD,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,iBAAiB,KAAK,WAAW;YAAE,SAAS;QACrE,IAAI,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,SAAS;QAC7C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,wJAAwJ;AACxJ,MAAM,UAAU,mBAAmB,CAAC,OAA+B,EAAE,QAAmI;IACtM,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;QAAE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;QAAE,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnG,IAAI,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;QAAE,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnG,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;QAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,cAAsB;IAChF,IAAI,UAAU,KAAK,cAAc;QAAE,OAAO;IAC1C,MAAM,IAAI,UAAU,CAClB,uBAAuB,UAAU,+BAA+B,cAAc,yDAAyD,EACvI,8BAA8B,EAC9B,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,yBAAyB,EAAE,UAAU,EAAE,6BAA6B,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC,EAAE,CACpO,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,2BAA2B,CAAC,KAA8B,EAAE,QAAsK;IAChP,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,WAAW,KAAK,kBAAkB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvH,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,CAAU,EAAE,CAAC;QAC1I,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC5F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAsBD,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,CAA+E,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClK,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,IAAI,CAAC,CAAU;IACtB,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA8B;IACpE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE1C,oEAAoE;IACpE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;IACnC,0GAA0G;IAC1G,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,EAAE,CAAC;IACnD,MAAM,eAAe,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,CAAC,MAAyC,EAA4B,EAAE,CAAC,CAAC;QACrF,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,QAAQ,CAAC,GAAG,EAAE,oBAAoB,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe;QACxK,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,MAAM;KACzE,CAAC,CAAC;IAEH,6FAA6F;IAC7F,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxG,IAAI,IAAI,GAAkC,IAAI,CAAC;IAC/C,IAAI,SAAS,GAAY,IAAI,CAAC;IAC9B,MAAM,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;QAC9B,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9H,OAAO,CAAC,EAAE,CAAC;YAAC,SAAS,GAAG,CAAC,CAAC;QAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC;IAEL,iHAAiH;IACjH,IAAI,SAAS,GAAiC,IAAI,CAAC;IACnD,IAAI,SAAS,GAAY,IAAI,CAAC;IAC9B,MAAM,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1C,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;gBAC3B,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC;gBAC7D,WAAW,EAAE,QAAQ,CAAC,IAAI;gBAC1B,aAAa,EAAE,OAAO;gBACtB,eAAe,EAAE,KAAK,IAAqC,EAAE;oBAC3D,MAAM,WAAW,CAAC,CAAC,sEAAsE;oBACzF,OAAO,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAE,IAA+B,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBACtH,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,SAAS,GAAG,CAAC,CAAC;QAAC,CAAC;IAChC,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvF,MAAM,OAAO,GAAG,IAAqC,CAAC;IACtD,MAAM,GAAG,GAAG,SAAyC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,IAAI,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;IAE5H,cAAc;IACd,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,EAAE,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC,EAAE,CAAC;QAC5N,CAAC;QACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,0FAA0F;YAC1F,MAAM,OAAO,GAA4B;gBACvC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC1I,QAAQ,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,eAAe;gBACzH,iBAAiB,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,MAAM;gBAChI,UAAU,EAAE,uBAAuB,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,uBAAuB,CAAC,GAAG,EAAE,CAAC;aACvF,CAAC;YACF,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;YACzI,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,yBAAyB,EAAE,CAAC;oBAC1C,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,0CAA0C;oBAC9H,MAAM,CAAC,CAAC;gBACV,CAAC;gBACD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,qFAAqF,EAAE,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;YACtP,CAAC;YACD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,6BAA6B,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,gJAAgJ,EAAE,CAAC,EAAE,CAAC;QAC5R,CAAC;QACD,OAAO;YACL,GAAG,MAAM,EAAE,OAAO,EAAE,4BAA4B,EAAE,UAAU,EAAE,8BAA8B,EAAE,IAAI;YAClG,YAAY,EAAE;gBACZ,EAAE,MAAM,EAAE,kFAAkF,EAAE;gBAC9F,EAAE,MAAM,EAAE,gGAAgG,EAAE,QAAQ,EAAE,6BAA6B,EAAE;aACtJ;SACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC;IACnH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,iFAAiF,GAAG,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;IAC/O,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QACzB,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,kCAAkC,EAAE,OAAO,EAAE,mHAAmH,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;IAChU,CAAC;IACD,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3J,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC;QACtR,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,0DAA0D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzP,8FAA8F;QAC9F,0EAA0E;QAC1E,uBAAuB,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,2BAA2B,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC;IAC3P,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IACxH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC,EAAE,CAAC;IAC3M,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AAC7J,CAAC;AAUD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAoB,EAAE,UAAgC,EAAE;IAClG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAgC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC7E,KAAK,MAAM,OAAO,IAAI,2BAA2B,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,OAAO,CAAC;YAChB,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;oBAC3B,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAC/D,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW;oBACnC,aAAa,EAAE,OAAO;oBACtB,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,CAAC;iBACxF,CAAC,CAAC;gBACH,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,UAAU,EAAE,uBAAuB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;gBACzL,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,WAAW;gBAAE,MAAM,IAAI,UAAU,CAAC,6DAA6D,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACzM,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACnN,IAAI,CAAC,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,UAAU,CAAC,iEAAiE,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACrQ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACrJ,IAAI,CAAC,GAAG,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,kDAAkD,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC1K,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,uBAAuB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACzF,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}