synorch 0.2.0 → 0.4.0-beta.0

package/dist/harness/contracts/policy.js

@@ -0,0 +1,338 @@
+import { z } from "zod";
+import { agentRoleSchema, READ_ONLY_ROLES, timestampSchema } from "./common.js";
+import { digestSchema } from "./digest.js";
+import { approvalIdSchema, runIdSchema, taskIdSchema } from "./ids.js";
+import { CONTROL_PLANE_WRITE_PREFIX, isReservedWritePattern, isWholeWorkspacePattern, pathPatternSchema, } from "./paths.js";
+import { SANDBOX_ENFORCEMENT, toolEffectSchema, TOOL_EFFECTS } from "./tools.js";
+/**
+ * Policy is computed, never prompted: effective = platform ∩ user ∩ workspace ∩ role ∩ task scope
+ * ∩ sandbox capability ∩ approvals. Nothing in a model message, repository file or tool output is
+ * a policy source. The default mode is `autonomous` (ADR-08): the orchestrator is fully authorized
+ * inside the hard rails and no per-action prompt is shown; `ask` is the explicit stricter mode.
+ */
+export const POLICY_MODES = ["autonomous", "ask"];
+export const policyModeSchema = z.enum(POLICY_MODES);
+/** The conversation agent's write scope: the whole workspace; reserved paths and policy sources are still refused. */
+export const SESSION_WRITE_SCOPE = "**";
+export const DEFAULT_POLICY_MODE = "autonomous";
+/**
+ * Interactive permission modes (ADR-08 owner revision 2026-09-24), cycled with Shift+Tab like
+ * Claude Code: `ask` prompts for edits and commands; `auto` (the interactive default) runs edits and
+ * allowlisted/trusted commands and turns every allowlist refusal into a prompt; `full` prompts for
+ * nothing and allows everything in the workspace except the hard rails; `plan` is read-only.
+ * Absent on a policy means the pre-revision behaviour: default-deny without prompts (headless).
+ * Hard rails deny in every mode.
+ */
+export const PERMISSION_MODES = ["ask", "auto", "full", "plan"];
+export const permissionModeSchema = z.enum(PERMISSION_MODES);
+export const DEFAULT_PERMISSION_MODE = "auto";
+/** The policy mode a permission mode computes with: only `ask` prompts per effect. */
+export function policyModeForPermission(mode) {
+    return mode === "ask" ? "ask" : "autonomous";
+}
+/** Shift+Tab order: ask -> auto -> full -> plan -> ask. */
+export function nextPermissionMode(mode) {
+    return PERMISSION_MODES[(PERMISSION_MODES.indexOf(mode) + 1) % PERMISSION_MODES.length] ?? "auto";
+}
+/**
+ * Policy reason codes a permission mode may lift: an allowlist refusal, an untrusted workspace, an
+ * external write or a host outside the allowlist. `auto` turns a decision denied only by these into
+ * `ask`, `full` into `allow`; a hard rail or any other denial is never lifted.
+ */
+export const PERMISSION_LIFTABLE_CODES = ["exec-not-allowlisted", "workspace-untrusted", "external-write-not-allowlisted", "network-denied", "host-not-allowlisted"];
+export const POLICY_LAYERS = ["platform", "user", "workspace", "role", "task", "sandbox", "approval"];
+/**
+ * Hard rails. They are denials, not prompts, and no mode, grant, config or approval relaxes them.
+ */
+export const HARD_RAILS = [
+    "write-outside-scope",
+    "reserved-path-write",
+    "destructive-command",
+    "credential-access",
+    "secret-egress",
+    "policy-self-modification",
+    "foreign-credential-store",
+];
+export const hardRailSchema = z.enum(HARD_RAILS);
+/**
+ * How `exec` is confined. `full-sandbox`: an OS backend confines every child, so any
+ * non-destructive command may run. Without a full sandbox the gateway cannot stop a child from
+ * writing outside the scope, so exec is default-deny: only exact `verification_commands` and a
+ * vetted build/test allowlist run (`allowlist`, autonomous mode) or anything else asks (`ask`).
+ */
+export const EXEC_CONFINEMENTS = ["full-sandbox", "allowlist", "ask"];
+export function execConfinementFor(enforcement, mode) {
+    if (enforcement === "full")
+        return "full-sandbox";
+    return mode === "ask" ? "ask" : "allowlist";
+}
+export const effectDecisionSchema = z.enum(["allow", "ask", "deny"]);
+const effectMatrixSchema = z.strictObject({
+    ...Object.fromEntries(TOOL_EFFECTS.map((effect) => [effect, effectDecisionSchema])),
+    // Added in K4.1: a policy recorded before it (an old `policy/snapshot`) reads as "no network".
+    "network-read": effectDecisionSchema.default("deny"),
+});
+export const effectivePolicySchema = z
+    .strictObject({
+    schema_version: z.literal(1),
+    policy_version: z.int().min(1),
+    mode: policyModeSchema,
+    role: agentRoleSchema,
+    /** Required for every role except `session`: conversation turns belong to no run (ADR-21 D1). */
+    run_id: runIdSchema.optional(),
+    task_id: taskIdSchema.optional(),
+    workspace_root: z.string().min(1),
+    write_scope: z.array(pathPatternSchema),
+    read_scope: z.array(pathPatternSchema).min(1),
+    forbidden: z.array(pathPatternSchema),
+    effects: effectMatrixSchema,
+    external_write_allowlist: z.array(z.string().min(1).max(500)),
+    network: z.strictObject({
+        mode: z.enum(["deny", "allowlist", "allow"]),
+        hosts: z.array(z.string().min(1).max(253)),
+    }),
+    sandbox: z.strictObject({ backend: z.string().min(1), enforcement: z.enum(SANDBOX_ENFORCEMENT) }),
+    require_full_sandbox: z.boolean(),
+    /** Optional only so `policy/snapshot` v1 events stay readable; `compute` always sets it (v2). */
+    exec_confinement: z.enum(EXEC_CONFINEMENTS).optional(),
+    /** Exact commands of the task's verification section; absent means `[]` (v2). */
+    verification_commands: z.array(z.string().min(1).max(2000)).max(64).optional(),
+    /**
+     * Whether the user trusted this workspace (user-scope `trust.json` or `--trust-workspace`);
+     * absent means untrusted (v3). Without a full sandbox, commands that run repository code
+     * (verification and build/test commands) need it.
+     */
+    workspace_trusted: z.boolean().optional(),
+    /**
+     * Dependency directories linked into the attempt worktree from the main tree (ADR-19). They are
+     * in `forbidden` too; while any exist, commands that install, add, remove or update
+     * dependencies are denied (`dependency-mutation-in-linked-worktree`). Absent means none.
+     */
+    dependency_links: z.array(pathPatternSchema).max(64).optional(),
+    /**
+     * Command prefixes the user allowed with `/allow` (ADR-21, orchestrator decision 1), word by
+     * word; `session` only. They extend the exec allowlist and still need workspace trust without a
+     * full sandbox; hard rails and destructive-command rules are never relaxed by them.
+     */
+    command_grants: z.array(z.string().min(1).max(500)).max(256).optional(),
+    /**
+     * The interactive permission mode (ADR-08 revision 2026-09-24). `session` carries any mode;
+     * a worker carries only `full` (the user ran with full access). Absent: default-deny, no prompts.
+     */
+    permission_mode: permissionModeSchema.optional(),
+    layers: z
+        .array(z.strictObject({ layer: z.enum(POLICY_LAYERS), source: z.string().min(1), digest: digestSchema }))
+        .min(1),
+})
+    .superRefine((policy, context) => {
+    if (policy.run_id === undefined && policy.role !== "session") {
+        context.addIssue({ code: "custom", path: ["run_id"], message: `${policy.role} policy belongs to a run` });
+    }
+    if (policy.command_grants !== undefined && policy.role !== "session") {
+        context.addIssue({ code: "custom", path: ["command_grants"], message: "command grants apply to the conversation agent only" });
+    }
+    if (policy.permission_mode !== undefined) {
+        if (policy.role !== "session" && policy.permission_mode !== "full" && policy.permission_mode !== "auto") {
+            context.addIssue({ code: "custom", path: ["permission_mode"], message: "only the conversation agent has interactive permission modes; workers carry auto or full only (ADR-08 revision 3)" });
+        }
+        if (policy.mode !== policyModeForPermission(policy.permission_mode)) {
+            context.addIssue({ code: "custom", path: ["mode"], message: `permission mode ${policy.permission_mode} computes in ${policyModeForPermission(policy.permission_mode)} mode` });
+        }
+        if (policy.permission_mode === "plan" && ["workspace-write", "exec", "external-write"].some((effect) => policy.effects[effect] !== "deny")) {
+            context.addIssue({ code: "custom", path: ["effects"], message: "plan mode is read-only" });
+        }
+    }
+    const readOnly = READ_ONLY_ROLES.includes(policy.role);
+    if (readOnly && (policy.write_scope.length > 0 || policy.effects["workspace-write"] !== "deny")) {
+        context.addIssue({ code: "custom", path: ["write_scope"], message: `${policy.role} is read-only` });
+    }
+    if (policy.role === "orchestrator") {
+        for (const [index, pattern] of policy.write_scope.entries()) {
+            if (!pattern.startsWith(CONTROL_PLANE_WRITE_PREFIX)) {
+                context.addIssue({
+                    code: "custom",
+                    path: ["write_scope", index],
+                    message: `the orchestrator writes only under ${CONTROL_PLANE_WRITE_PREFIX}`,
+                });
+            }
+        }
+    }
+    for (const [index, pattern] of policy.write_scope.entries()) {
+        // The conversation agent owns the workspace minus reserved paths (ADR-21 D3); reserved paths stay unwritable for everyone.
+        const whole = isWholeWorkspacePattern(pattern) && !(policy.role === "session" && pattern === SESSION_WRITE_SCOPE);
+        if (whole || isReservedWritePattern(pattern)) {
+            context.addIssue({ code: "custom", path: ["write_scope", index], message: "whole-workspace and reserved paths are never writable" });
+        }
+    }
+    if (policy.mode === "autonomous") {
+        for (const effect of TOOL_EFFECTS) {
+            if (policy.effects[effect] === "ask") {
+                context.addIssue({ code: "custom", path: ["effects", effect], message: "autonomous mode never prompts per action" });
+            }
+        }
+    }
+    const lifts = policy.permission_mode === "auto" || policy.permission_mode === "full";
+    if (policy.mode === "autonomous" && !lifts && policy.effects["external-write"] === "allow" && policy.external_write_allowlist.length === 0) {
+        context.addIssue({
+            code: "custom",
+            path: ["external_write_allowlist"],
+            message: "external writes are allowed autonomously only through a user allowlist",
+        });
+    }
+    if (policy.require_full_sandbox && policy.sandbox.enforcement !== "full") {
+        for (const effect of ["workspace-write", "exec"]) {
+            if (policy.effects[effect] !== "deny") {
+                context.addIssue({ code: "custom", path: ["effects", effect], message: "full sandbox is required but not available" });
+            }
+        }
+    }
+    if (policy.exec_confinement !== undefined && policy.exec_confinement !== execConfinementFor(policy.sandbox.enforcement, policy.mode)) {
+        context.addIssue({
+            code: "custom",
+            path: ["exec_confinement"],
+            message: `exec confinement must be ${execConfinementFor(policy.sandbox.enforcement, policy.mode)} for a ${policy.sandbox.enforcement} sandbox in ${policy.mode} mode`,
+        });
+    }
+    if (policy.network.mode !== "allowlist" && policy.network.hosts.length > 0) {
+        context.addIssue({ code: "custom", path: ["network", "hosts"], message: "hosts are only meaningful for allowlist mode" });
+    }
+});
+/** Why a requested path cannot be expressed as a workspace-relative `paths` entry. */
+export const PATH_ESCAPE_REASONS = [
+    "invalid-path",
+    "unc-or-device",
+    "outside-workspace",
+    "link-escape",
+    "dangling-link",
+    "hard-link",
+    "changed-after-decision",
+];
+/**
+ * A requested path that resolved outside the workspace (or could not be resolved safely). It keeps
+ * the audit trail complete: such an action is still normalized, evaluated and recorded in
+ * `tool/policy_decided`, and the PolicyEngine always denies it (`write-outside-scope` for writes).
+ * `requested` is the model's raw argument, bounded; it is evidence, never a scope.
+ */
+export const pathEscapeSchema = z.strictObject({
+    requested: z.string().max(1024),
+    access: z.enum(["read", "write"]),
+    reason: z.enum(PATH_ESCAPE_REASONS),
+});
+/** Decision reason codes the PolicyEngine uses for escapes (layer `platform`); writes also carry the rail. */
+export const PATH_ESCAPE_REASON_CODE = { read: "read-outside-workspace", write: "path-escape" };
+/** The canonical form of one requested action; its digest is what an approval binds to. */
+export const normalizedActionSchema = z.strictObject({
+    tool_name: z.string().min(1),
+    tool_version: z.string().min(1),
+    effect: toolEffectSchema,
+    role: agentRoleSchema,
+    task_id: taskIdSchema.optional(),
+    args_digest: digestSchema,
+    paths: z.array(z.strictObject({ path: pathPatternSchema, access: z.enum(["read", "write"]) })),
+    /** Paths that escape the workspace; present only when non-empty (`tool/policy_decided` v2). */
+    escapes: z.array(pathEscapeSchema).min(1).optional(),
+    command: z
+        .strictObject({ argv: z.array(z.string()).min(1), cwd: pathPatternSchema })
+        .optional(),
+    network_hosts: z.array(z.string().min(1).max(253)),
+    destructive: z.boolean(),
+    /** `network-read` actions (K4.1): a web search (no host) or a page fetch of `network_hosts` (`tool/policy_decided` v3). */
+    network_purpose: z.enum(["search", "fetch"]).optional(),
+    /** Secret-looking fragments found in an outbound URL or query; any entry is the `secret-egress` hard rail (v3). */
+    egress_findings: z.array(z.string().min(1).max(200)).min(1).max(16).optional(),
+});
+export const policyDecisionSchema = z
+    .strictObject({
+    decision: effectDecisionSchema,
+    action_digest: digestSchema,
+    policy_digest: digestSchema,
+    reasons: z
+        .array(z.strictObject({ code: z.string().min(1).max(64), layer: z.enum(POLICY_LAYERS), message: z.string().min(1).max(500) }))
+        .min(1),
+    rail: hardRailSchema.optional(),
+})
+    .superRefine((decision, context) => {
+    if (decision.rail !== undefined && decision.decision !== "deny") {
+        context.addIssue({ code: "custom", path: ["decision"], message: "a hard rail always denies" });
+    }
+});
+export const APPROVAL_SUBJECTS = ["plan", "action", "scope-expansion", "provider-change", "budget", "memory", "workspace-trust"];
+/**
+ * Subjects only a human may approve: a paid provider switch, a budget increase and trusting a
+ * workspace's code are never orchestrator-granted.
+ */
+export const HUMAN_ONLY_APPROVAL_SUBJECTS = ["provider-change", "budget", "workspace-trust"];
+export const approvalRequestSchema = z.strictObject({
+    approval_id: approvalIdSchema,
+    /** Absent for a conversation turn outside any run (ADR-21). */
+    run_id: runIdSchema.optional(),
+    task_id: taskIdSchema.optional(),
+    subject_kind: z.enum(APPROVAL_SUBJECTS),
+    subject_digest: digestSchema,
+    summary: z.string().min(1).max(2000),
+    effect: toolEffectSchema.optional(),
+    scope: z.enum(["once", "plan", "session"]),
+    /** The command an `action` approval would run (argv, redacted); the prompt offers "always allow <prefix>" from it. */
+    command: z.array(z.string().max(2000)).min(1).max(256).optional(),
+    /** The web hosts a `network-read` action would reach; the prompt offers "always allow <host>" (`approval/requested` v2). */
+    hosts: z.array(z.string().min(1).max(253)).min(1).max(16).optional(),
+    /** Why the policy asks and what allowing does (UX-03 action card). */
+    details: z.strictObject({ why: z.string().min(1).max(1000), consequence: z.string().min(1).max(1000) }).optional(),
+    requested_at: timestampSchema,
+    expires_at: timestampSchema.optional(),
+});
+export const APPROVAL_OUTCOMES = ["allowed-once", "allowed-for-scope", "rejected", "cancelled", "unavailable", "expired"];
+export const ALLOWING_OUTCOMES = ["allowed-once", "allowed-for-scope"];
+export const approvalDecisionSchema = z
+    .strictObject({
+    approval_id: approvalIdSchema,
+    subject_kind: z.enum(APPROVAL_SUBJECTS),
+    subject_digest: digestSchema,
+    outcome: z.enum(APPROVAL_OUTCOMES),
+    decided_by: z.enum(["user", "orchestrator", "session", "config", "broker"]),
+    mode: policyModeSchema,
+    decided_at: timestampSchema,
+    reason: z.string().max(1000).optional(),
+})
+    .superRefine((decision, context) => {
+    const allows = ALLOWING_OUTCOMES.includes(decision.outcome);
+    if (decision.decided_by === "orchestrator" || decision.decided_by === "session") {
+        if (decision.mode !== "autonomous") {
+            context.addIssue({ code: "custom", path: ["decided_by"], message: `the ${decision.decided_by} agent approves only in autonomous mode` });
+        }
+        if (allows && HUMAN_ONLY_APPROVAL_SUBJECTS.includes(decision.subject_kind)) {
+            context.addIssue({ code: "custom", path: ["subject_kind"], message: `${decision.subject_kind} requires a human decision` });
+        }
+    }
+    if (decision.decided_by === "broker" && allows) {
+        context.addIssue({ code: "custom", path: ["outcome"], message: "a broker-generated outcome can only refuse (unavailable/expired/cancelled)" });
+    }
+    if ((decision.outcome === "unavailable" || decision.outcome === "expired") && decision.decided_by !== "broker") {
+        context.addIssue({ code: "custom", path: ["decided_by"], message: `${decision.outcome} is produced by the broker` });
+    }
+});
+/**
+ * Workspace trust (SEC-N1). Without a full OS sandbox the harness cannot confine code a build or
+ * test command runs, so such commands need the user to trust the workspace once. Trust lives only
+ * in the user scope (`<synorch home>/trust.json`), keyed by the canonical workspace root and a
+ * repository identity; nothing in the repository can grant it. `flag` is `--trust-workspace`,
+ * valid for one run and never persisted; `session` is the prompt's "Trust for this session only",
+ * valid for the current runtime and never persisted.
+ */
+export const TRUST_GRANT_SOURCES = ["prompt", "command"];
+export const TRUST_USE_SOURCES = ["store", "flag", "session"];
+/** The policy reason code for a code-executing command in an untrusted workspace. */
+export const WORKSPACE_UNTRUSTED_CODE = "workspace-untrusted";
+/**
+ * What trusting a workspace means, shown by the prompt, `syn trust` and the docs. It names both
+ * halves of the risk: the repository's own tests/build scripts and any code the AI writes during
+ * the session run unconfined, and can reach files outside the workspace, credentials included.
+ */
+export const WORKSPACE_TRUST_NOTICE = "In a trusted workspace, its tests and build scripts, and any code the AI writes during the session, run with your user permissions. They can read and change files outside the workspace, including your Synorch credentials, because Synorch's sandbox on this platform is not full.";
+/** The choices the workspace-trust prompt offers, in order; the first is pre-selected. */
+export const WORKSPACE_TRUST_CHOICES = [
+    { outcome: "rejected", label: "Not now", key: "n" },
+    { outcome: "allowed-once", label: "Trust for this session only", key: "s" },
+    { outcome: "allowed-for-scope", label: "Trust this workspace", key: "t" },
+];
+//# sourceMappingURL=policy.js.map

package/dist/harness/contracts/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/harness/contracts/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAkB,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,YAAY,EAA+C,MAAM,YAAY,CAAC;AAE9H;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,KAAK,CAAU,CAAC;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAErD,sHAAsH;AACtH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC,MAAM,CAAC,MAAM,mBAAmB,GAAe,YAAY,CAAC;AAE5D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,uBAAuB,GAAmB,MAAM,CAAC;AAE9D,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAAC,IAAoB;IAC1D,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/C,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,OAAO,gBAAgB,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,gCAAgC,EAAE,gBAAgB,EAAE,sBAAsB,CAAU,CAAC;AAE9K,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAE/G;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,qBAAqB;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,eAAe;IACf,0BAA0B;IAC1B,0BAA0B;CAClB,CAAC;AACX,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAGjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,CAAU,CAAC;AAG/E,MAAM,UAAU,kBAAkB,CAAC,WAA+B,EAAE,IAAgB;IAClF,IAAI,WAAW,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC;IAClD,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAGrE,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IACxC,GAAI,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAEjF;IACF,+FAA+F;IAC/F,cAAc,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,YAAY,CAAC;IACZ,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5B,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,eAAe;IACrB,iGAAiG;IACjG,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACrC,OAAO,EAAE,kBAAkB;IAC3B,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KAC3C,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;IACjG,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE;IACjC,iGAAiG;IACjG,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IACtD,iFAAiF;IACjF,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9E;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/D;;;;OAIG;IACH,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvE;;;OAGG;IACH,eAAe,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;SACxG,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;YACxG,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,mHAAmH,EAAE,CAAC,CAAC;QAChM,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAuB,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,MAAM,CAAC,eAAe,gBAAgB,uBAAuB,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACjL,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,IAAK,CAAC,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,CAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;YACtJ,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAI,eAAwC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;QAChG,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBACpD,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC;oBAC5B,OAAO,EAAE,sCAAsC,0BAA0B,EAAE;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,2HAA2H;QAC3H,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,mBAAmB,CAAC,CAAC;QAClH,IAAI,KAAK,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC,CAAC;QACvI,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;gBACrC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;YACvH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,KAAK,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC;IACrF,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,OAAO,IAAI,MAAM,CAAC,wBAAwB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3I,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,0BAA0B,CAAC;YAClC,OAAO,EAAE,wEAAwE;SAClF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACzE,KAAK,MAAM,MAAM,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAU,EAAE,CAAC;YAC1D,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;gBACtC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;YACzH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,KAAK,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACrI,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,kBAAkB,CAAC;YAC1B,OAAO,EAAE,4BAA4B,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,OAAO,CAAC,WAAW,eAAe,MAAM,CAAC,IAAI,OAAO;SACtK,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,cAAc;IACd,eAAe;IACf,mBAAmB;IACnB,aAAa;IACb,eAAe;IACf,WAAW;IACX,wBAAwB;CAChB,CAAC;AAGX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;CACpC,CAAC,CAAC;AAGH,8GAA8G;AAC9G,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,aAAa,EAAW,CAAC;AAEzG,2FAA2F;AAC3F,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,gBAAgB;IACxB,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,YAAY;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,+FAA+F;IAC/F,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,OAAO,EAAE,CAAC;SACP,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;SAC1E,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,2HAA2H;IAC3H,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD,mHAAmH;IACnH,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/E,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,YAAY,CAAC;IACZ,QAAQ,EAAE,oBAAoB;IAC9B,aAAa,EAAE,YAAY;IAC3B,aAAa,EAAE,YAAY;IAC3B,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SAC7H,GAAG,CAAC,CAAC,CAAC;IACT,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACjG,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAU,CAAC;AAC1I;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,CAAU,CAAC;AAEtG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IAClD,WAAW,EAAE,gBAAgB;IAC7B,+DAA+D;IAC/D,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE;IAChC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,YAAY;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACpC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1C,sHAAsH;IACtH,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjE,4HAA4H;IAC5H,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpE,sEAAsE;IACtE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClH,YAAY,EAAE,eAAe;IAC7B,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,CAAU,CAAC;AACnI,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAU,CAAC;AAEhF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,YAAY,CAAC;IACZ,WAAW,EAAE,gBAAgB;IAC7B,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,YAAY;IAC5B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3E,IAAI,EAAE,gBAAgB;IACtB,UAAU,EAAE,eAAe;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACjC,MAAM,MAAM,GAAI,iBAAuC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,QAAQ,CAAC,UAAU,KAAK,cAAc,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAChF,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,QAAQ,CAAC,UAAU,yCAAyC,EAAE,CAAC,CAAC;QAC3I,CAAC;QACD,IAAI,MAAM,IAAK,4BAAkD,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAClG,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,YAAY,4BAA4B,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC/C,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,4EAA4E,EAAE,CAAC,CAAC;IACjJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,aAAa,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/G,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,4BAA4B,EAAE,CAAC,CAAC;IACvH,CAAC;AACH,CAAC,CAAC,CAAC;AAqCL;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAU,CAAC;AAElE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAevE,qFAAqF;AACrF,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC,uRAAuR,CAAC;AAE1R,0FAA0F;AAC1F,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE;IACnD,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,6BAA6B,EAAE,GAAG,EAAE,GAAG,EAAE;IAC3E,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,sBAAsB,EAAE,GAAG,EAAE,GAAG,EAAE;CACjE,CAAC"}

package/dist/harness/contracts/projection.d.ts

@@ -0,0 +1,111 @@
+import type { BlobRef } from "./common.ts";
+import type { SessionEventOf } from "./events.ts";
+import type { AttemptId, RequestId, RunId, SessionId, TaskId, ToolCallId, TurnId } from "./ids.ts";
+import type { ModelMessage } from "./model.ts";
+import type { PolicyMode } from "./policy.ts";
+import type { ApprovalState, AttemptState, PlanState, RunState, StepState, TaskState, ToolCallState } from "./state.ts";
+/**
+ * Read models over the session event log. Core owns the projector and crash recovery; the CLI,
+ * orchestration and `syn show` consume these shapes. A projection is always derived, never stored.
+ */
+export type ProjectionIssueCode = "unsupported-event" | "invalid-event" | "seq-gap" | "unknown-entity" | "duplicate-entity" | "state-mismatch" | "illegal-transition";
+export interface ProjectionIssue {
+    readonly seq: number | undefined;
+    readonly code: ProjectionIssueCode;
+    readonly message: string;
+}
+export interface ProjectedEntity<S extends string> {
+    readonly id: string;
+    readonly state: S;
+    readonly updatedSeq: number;
+    readonly runId: RunId | undefined;
+    readonly taskId: TaskId | undefined;
+    readonly attemptId: AttemptId | undefined;
+}
+export interface ProjectedRun extends ProjectedEntity<RunState> {
+    readonly goal: string;
+    readonly policyMode: PolicyMode;
+}
+export interface ProjectedToolCall extends ProjectedEntity<ToolCallState> {
+    readonly toolName: string;
+    readonly providerCallId: string;
+    readonly requestId: RequestId | undefined;
+}
+export interface ProjectedApproval extends ProjectedEntity<ApprovalState> {
+    readonly subjectKind: SessionEventOf<"approval/decided">["data"]["decision"]["subject_kind"];
+    readonly subjectDigest: SessionEventOf<"approval/decided">["data"]["decision"]["subject_digest"];
+}
+export interface ProjectedStep extends ProjectedEntity<StepState> {
+    readonly turnId: TurnId;
+    readonly requestId: RequestId;
+}
+export interface ProjectedTurn {
+    readonly turnId: TurnId;
+    readonly open: boolean;
+    readonly startedSeq: number;
+    readonly runId: RunId | undefined;
+    readonly taskId: TaskId | undefined;
+    readonly attemptId: AttemptId | undefined;
+}
+export interface ProjectedMessage {
+    readonly seq: number;
+    readonly role: "user" | "assistant" | "tool";
+    readonly requestId: RequestId | undefined;
+    readonly message: ModelMessage | undefined;
+    readonly blob: BlobRef | undefined;
+}
+/**
+ * State derived from the event log. `status` is `corrupt` when the log breaks framing or a state
+ * machine (the projection stops there rather than guessing) and `unsupported` when a newer writer
+ * produced an event this version cannot read; either way the session is not writable.
+ */
+export interface SessionProjection {
+    readonly status: "ok" | "unsupported" | "corrupt";
+    readonly writable: boolean;
+    readonly issues: readonly ProjectionIssue[];
+    readonly tornTail: {
+        readonly segment: number;
+        readonly bytes: number;
+    } | undefined;
+    readonly lastSeq: number;
+    /** Highest seq whose effect is reflected in the maps below. */
+    readonly appliedSeq: number;
+    readonly lastEventAt: string | undefined;
+    readonly opened: SessionEventOf<"session/opened">["data"] | undefined;
+    readonly runs: ReadonlyMap<string, ProjectedRun>;
+    readonly plans: ReadonlyMap<string, ProjectedEntity<PlanState>>;
+    readonly tasks: ReadonlyMap<string, ProjectedEntity<TaskState>>;
+    readonly attempts: ReadonlyMap<string, ProjectedEntity<AttemptState>>;
+    readonly toolCalls: ReadonlyMap<string, ProjectedToolCall>;
+    readonly approvals: ReadonlyMap<string, ProjectedApproval>;
+    readonly steps: ReadonlyMap<string, ProjectedStep>;
+    readonly turns: ReadonlyMap<string, ProjectedTurn>;
+    readonly messages: readonly ProjectedMessage[];
+    readonly lastCompaction: SessionEventOf<"context/compacted"> | undefined;
+}
+export type RecoveredMachine = SessionEventOf<"session/resumed">["data"]["recovered"][number]["machine"];
+export interface RecoveredEntity {
+    readonly machine: RecoveredMachine;
+    readonly id: string;
+    readonly from: string;
+    readonly to: string;
+}
+/** What crash recovery closed; the same facts are recorded in `session/resumed` and its closing events. */
+export interface RecoveryReport {
+    readonly sessionId: SessionId;
+    readonly previousLastSeq: number;
+    /** Seq of the `session/resumed` event this recovery wrote. */
+    readonly resumedSeq: number;
+    readonly recovered: readonly RecoveredEntity[];
+    /** Calls that may have run: recorded as `tool/interrupted {outcome: unknown}` and never re-executed. */
+    readonly interruptedToolCalls: readonly ToolCallId[];
+    /** Calls that never started executing: closed as `cancelled`. */
+    readonly cancelledToolCalls: readonly ToolCallId[];
+    /** Torn final line the writer moved aside when it opened the session (also in `session/resumed.torn_tail`). */
+    readonly tornTail: {
+        readonly segment: number;
+        readonly bytes: number;
+        readonly file: string | undefined;
+    } | undefined;
+}
+//# sourceMappingURL=projection.d.ts.map

package/dist/harness/contracts/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../src/harness/contracts/projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACnG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAExH;;;GAGG;AAEH,MAAM,MAAM,mBAAmB,GAC3B,mBAAmB,GACnB,eAAe,GACf,SAAS,GACT,gBAAgB,GAChB,kBAAkB,GAClB,gBAAgB,GAChB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,MAAM;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,YAAa,SAAQ,eAAe,CAAC,QAAQ,CAAC;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,iBAAkB,SAAQ,eAAe,CAAC,aAAa,CAAC;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAkB,SAAQ,eAAe,CAAC,aAAa,CAAC;IACvE,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,cAAc,CAAC,CAAC;IAC7F,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,CAAC;CAClG;AAED,MAAM,WAAW,aAAc,SAAQ,eAAe,CAAC,SAAS,CAAC;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,aAAa,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACpF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACtE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;CAC1E;AAED,MAAM,MAAM,gBAAgB,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;AAEzG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,2GAA2G;AAC3G,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,wGAAwG;IACxG,QAAQ,CAAC,oBAAoB,EAAE,SAAS,UAAU,EAAE,CAAC;IACrD,iEAAiE;IACjE,QAAQ,CAAC,kBAAkB,EAAE,SAAS,UAAU,EAAE,CAAC;IACnD,+GAA+G;IAC/G,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;CACxH"}

package/dist/harness/contracts/projection.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=projection.js.map

package/dist/harness/contracts/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../src/harness/contracts/projection.ts"],"names":[],"mappings":""}