taskflow-core 0.2.0 → 0.2.1

package/dist/resources/leases.d.ts

@@ -0,0 +1,51 @@
+import { type PersistentCoordinatorOptions, type ProcessIdentity } from "./persistence.ts";
+import { type ExecutionOwner, type LeaseRequest, type ResourceAccess } from "./types.ts";
+export type { CanonicalLeaseKey, ExecutionOwner, LeaseRequest, ResourceAccess } from "./types.ts";
+export { canonicalLeaseKeysOverlap } from "./types.ts";
+export { CoordinatorAbortError, CoordinatorTimeoutError } from "./persistence.ts";
+interface PersistedLeaseRequest {
+    key: {
+        resourceDomainId: string;
+        canonicalPrefix: string;
+    };
+    access: ResourceAccess;
+}
+interface PersistedLeaseRecord extends ProcessIdentity {
+    leaseId: string;
+    leaseToken: string;
+    releaseMarkerToken: string;
+    owner: ExecutionOwner;
+    requests: PersistedLeaseRequest[];
+    acquiredAt: number;
+    expiresAt?: number;
+}
+export interface LeaseAcquireOptions {
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    /** Optional renewable deadline. Omit for process-lifetime ownership. */
+    leaseTtlMs?: number;
+}
+export interface LeaseHandle {
+    readonly leaseId: string;
+    readonly owner: ExecutionOwner;
+    readonly requests: readonly LeaseRequest[];
+    readonly acquiredAt: number;
+    readonly expiresAt?: number;
+    release(): Promise<void>;
+    renew(ttlMs: number): Promise<void>;
+}
+export interface LeaseCoordinatorOptions extends PersistentCoordinatorOptions {
+    registryId: string;
+}
+export declare class PersistentLeaseCoordinator {
+    #private;
+    readonly statePath: string;
+    readonly identity: ProcessIdentity;
+    readonly now: () => number;
+    readonly pollMs: number;
+    constructor(options: LeaseCoordinatorOptions);
+    acquire(requests: readonly LeaseRequest[], options?: LeaseAcquireOptions): Promise<LeaseHandle>;
+    recoverStale(): Promise<string[]>;
+    list(): Promise<Array<Omit<PersistedLeaseRecord, "leaseToken" | "releaseMarkerToken">>>;
+}
+//# sourceMappingURL=leases.d.ts.map

package/dist/resources/leases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leases.d.ts","sourceRoot":"","sources":["../../src/resources/leases.ts"],"names":[],"mappings":"AAGA,OAAO,EAUN,KAAK,4BAA4B,EACjC,KAAK,eAAe,EACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAON,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAClG,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAElF,UAAU,qBAAqB;IAC9B,GAAG,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,MAAM,EAAE,cAAc,CAAC;CACvB;AAED,UAAU,oBAAqB,SAAQ,eAAe;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,cAAc,CAAC;IACtB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAeD,MAAM,WAAW,mBAAmB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,uBAAwB,SAAQ,4BAA4B;IAC5E,UAAU,EAAE,MAAM,CAAC;CACnB;AAsDD,qBAAa,0BAA0B;;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAIxB,YAAY,OAAO,EAAE,uBAAuB,EAS3C;IAyHK,OAAO,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,WAAW,CAAC,CAyGxG;IAeK,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAQtC;IAEK,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,YAAY,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAQ5F;CACD"}

package/dist/resources/leases.js

@@ -0,0 +1,354 @@
+import * as crypto from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { CoordinatorAbortError, CoordinatorTimeoutError, PersistentFileMutex, defaultProcessIdentity, defaultProcessInspector, isPersistedOwnerStale, namespaceToken, readJsonFile, writeJsonAtomicDurable, } from "./persistence.js";
+import { canonicalLeaseKeysOverlap, canonicalPrefixContains, cloneExecutionOwner, compareLeaseKeys, normalizeLeaseKey, sameExecutionOwner, } from "./types.js";
+export { canonicalLeaseKeysOverlap } from "./types.js";
+export { CoordinatorAbortError, CoordinatorTimeoutError } from "./persistence.js";
+function accessRank(access) {
+    return access === "read-write" ? 1 : 0;
+}
+function normalizeRequests(requests) {
+    if (requests.length === 0)
+        throw new Error("At least one lease request is required");
+    const normalized = requests.map((request) => ({
+        key: normalizeLeaseKey(request.key),
+        access: request.access,
+        owner: cloneExecutionOwner(request.owner),
+    }));
+    const owner = normalized[0].owner;
+    if (!normalized.every((request) => sameExecutionOwner(request.owner, owner))) {
+        throw new Error("Atomic multi-key acquisition requires one identical execution owner");
+    }
+    for (const request of normalized) {
+        if (request.access !== "read-only" && request.access !== "read-write") {
+            throw new Error(`Unsupported lease access: ${String(request.access)}`);
+        }
+    }
+    const deduped = new Map();
+    for (const request of normalized) {
+        const id = `${request.key.resourceDomainId}\0${request.key.canonicalPrefix}`;
+        const prior = deduped.get(id);
+        if (!prior || accessRank(request.access) > accessRank(prior.access))
+            deduped.set(id, request);
+    }
+    return [...deduped.values()].sort((a, b) => compareLeaseKeys(a.key, b.key) || accessRank(a.access) - accessRank(b.access));
+}
+function canReenter(existing, requested) {
+    const lineage = sameExecutionOwner(existing.owner, requested.owner) ||
+        (requested.owner.runId === existing.owner.runId && requested.owner.ancestry.includes(existing.owner.attemptId));
+    if (!lineage)
+        return false;
+    return existing.requests.some((held) => held.key.resourceDomainId === requested.key.resourceDomainId &&
+        canonicalPrefixContains(held.key.canonicalPrefix, requested.key.canonicalPrefix) &&
+        accessRank(requested.access) <= accessRank(held.access));
+}
+function requestsConflict(existing, requested) {
+    for (const next of requested) {
+        for (const held of existing.requests) {
+            if (!canonicalLeaseKeysOverlap(held.key, next.key))
+                continue;
+            if (held.access === "read-only" && next.access === "read-only")
+                continue;
+            if (canReenter(existing, next))
+                continue;
+            return true;
+        }
+    }
+    return false;
+}
+export class PersistentLeaseCoordinator {
+    statePath;
+    identity;
+    now;
+    pollMs;
+    #mutex;
+    #inspectProcess;
+    constructor(options) {
+        if (!options.registryId)
+            throw new Error("registryId is required for the persistent lease namespace");
+        const token = namespaceToken(options.registryId);
+        this.statePath = path.join(options.directory, `leases-${token}.json`);
+        this.identity = options.processIdentity ?? defaultProcessIdentity();
+        this.#inspectProcess = options.inspectProcess ?? defaultProcessInspector;
+        this.now = options.now ?? Date.now;
+        this.pollMs = options.pollMs ?? 20;
+        this.#mutex = new PersistentFileMutex(path.join(options.directory, `leases-${token}.lock`), options);
+    }
+    #read() {
+        const state = readJsonFile(this.statePath, { version: 1, leases: [] });
+        if (state.version !== 1 || !Array.isArray(state.leases))
+            throw new Error(`Invalid lease state: ${this.statePath}`);
+        return state;
+    }
+    #releaseMarkerPath(record) {
+        if (!/^[0-9a-f-]{36}$/i.test(record.leaseId) || !/^[0-9a-f]{48}$/.test(record.releaseMarkerToken)) {
+            throw new Error("Invalid persisted lease release marker identity");
+        }
+        return path.join(path.dirname(this.statePath), `lease-release-${record.leaseId}-${record.releaseMarkerToken}.json`);
+    }
+    #releaseMarkerBody(record, state) {
+        return {
+            version: 1,
+            leaseId: record.leaseId,
+            releaseMarkerToken: record.releaseMarkerToken,
+            leaseTokenSha256: crypto.createHash("sha256").update(record.leaseToken).digest("hex"),
+            state,
+        };
+    }
+    #validateReleaseMarker(value, record) {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw new Error("Invalid lease release marker");
+        const marker = value;
+        const expected = this.#releaseMarkerBody(record, marker.state);
+        if (marker.version !== 1 || (marker.state !== "held" && marker.state !== "done") ||
+            marker.leaseId !== expected.leaseId || marker.releaseMarkerToken !== expected.releaseMarkerToken ||
+            marker.leaseTokenSha256 !== expected.leaseTokenSha256 ||
+            Object.keys(marker).length !== 5) {
+            throw new Error("Invalid lease release marker");
+        }
+        return marker;
+    }
+    #readReleaseMarker(record) {
+        const markerPath = this.#releaseMarkerPath(record);
+        const noFollow = typeof fs.constants.O_NOFOLLOW === "number" ? fs.constants.O_NOFOLLOW : 0;
+        let fd;
+        try {
+            fd = fs.openSync(markerPath, fs.constants.O_RDONLY | noFollow);
+            const stat = fs.fstatSync(fd);
+            if (!stat.isFile() || stat.size > 4096)
+                throw new Error("Invalid lease release marker file");
+            return this.#validateReleaseMarker(JSON.parse(fs.readFileSync(fd, "utf8")), record);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return undefined;
+            throw error;
+        }
+        finally {
+            if (fd !== undefined)
+                fs.closeSync(fd);
+        }
+    }
+    #createReleaseMarker(record) {
+        writeJsonAtomicDurable(this.#releaseMarkerPath(record), this.#releaseMarkerBody(record, "held"));
+    }
+    #markReleaseMarkerDone(record) {
+        const markerPath = this.#releaseMarkerPath(record);
+        const noFollow = typeof fs.constants.O_NOFOLLOW === "number" ? fs.constants.O_NOFOLLOW : 0;
+        let fd;
+        try {
+            fd = fs.openSync(markerPath, fs.constants.O_RDWR | noFollow);
+            const currentRaw = fs.readFileSync(fd, "utf8");
+            const current = this.#validateReleaseMarker(JSON.parse(currentRaw), record);
+            if (current.state === "done")
+                return true;
+            const terminal = Buffer.from(JSON.stringify({ ...current, state: "done" }));
+            if (terminal.byteLength !== Buffer.byteLength(currentRaw))
+                throw new Error("Lease release marker size changed");
+            let offset = 0;
+            while (offset < terminal.byteLength) {
+                offset += fs.writeSync(fd, terminal, offset, terminal.byteLength - offset, offset);
+            }
+            fs.fsyncSync(fd);
+            return true;
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return false;
+            throw error;
+        }
+        finally {
+            if (fd !== undefined)
+                fs.closeSync(fd);
+        }
+    }
+    #cleanupReleaseMarkers(records) {
+        for (const record of records) {
+            try {
+                fs.unlinkSync(this.#releaseMarkerPath(record));
+            }
+            catch (error) {
+                if (error.code !== "ENOENT") {
+                    // The state no longer references the marker. An orphan is inert and
+                    // can be removed by ordinary control-directory maintenance.
+                }
+            }
+        }
+    }
+    #isStale(record) {
+        const expiredOrDead = () => (record.expiresAt !== undefined && record.expiresAt <= this.now()) ||
+            isPersistedOwnerStale(record, this.identity, this.#inspectProcess);
+        try {
+            return this.#readReleaseMarker(record)?.state === "done" || expiredOrDead();
+        }
+        catch {
+            // Marker corruption cannot authorize recovery while the owner may still be
+            // active. Once independently expired or dead, the immutable lease identity
+            // is sufficient to prune this record and its exact marker path.
+            if (expiredOrDead())
+                return true;
+            // Preserve a possibly-live lease as active. Conflict checks will still block
+            // overlapping access, while unrelated resource scopes remain available.
+            return false;
+        }
+    }
+    #prune(state) {
+        const stale = state.leases.filter((record) => this.#isStale(record));
+        if (stale.length > 0) {
+            const ids = new Set(stale.map((record) => record.leaseId));
+            state.leases = state.leases.filter((record) => !ids.has(record.leaseId));
+        }
+        return stale;
+    }
+    async acquire(requests, options = {}) {
+        const normalized = normalizeRequests(requests);
+        if (options.leaseTtlMs !== undefined && (!Number.isFinite(options.leaseTtlMs) || options.leaseTtlMs <= 0)) {
+            throw new Error("leaseTtlMs must be positive");
+        }
+        const timeoutMs = options.timeoutMs ?? 10_000;
+        const deadline = this.now() + timeoutMs;
+        while (true) {
+            if (options.signal?.aborted)
+                throw new CoordinatorAbortError();
+            let created;
+            await this.#mutex.runExclusive(() => {
+                const state = this.#read();
+                const stale = this.#prune(state);
+                if (!state.leases.some((record) => requestsConflict(record, normalized))) {
+                    created = {
+                        ...this.identity,
+                        leaseId: crypto.randomUUID(),
+                        leaseToken: crypto.randomBytes(24).toString("hex"),
+                        releaseMarkerToken: crypto.randomBytes(24).toString("hex"),
+                        owner: cloneExecutionOwner(normalized[0].owner),
+                        requests: normalized.map(({ key, access }) => ({ key, access })),
+                        acquiredAt: this.now(),
+                        ...(options.leaseTtlMs === undefined ? {} : { expiresAt: this.now() + options.leaseTtlMs }),
+                    };
+                    this.#createReleaseMarker(created);
+                    state.leases.push(created);
+                }
+                try {
+                    if (stale.length > 0 || created)
+                        writeJsonAtomicDurable(this.statePath, state);
+                }
+                catch (error) {
+                    if (created)
+                        this.#cleanupReleaseMarkers([created]);
+                    throw error;
+                }
+                this.#cleanupReleaseMarkers(stale);
+            }, { timeoutMs: Math.max(1, deadline - this.now()), signal: options.signal });
+            if (created) {
+                const record = created;
+                let released = false;
+                let releasePromise;
+                const release = async () => {
+                    if (released)
+                        return;
+                    if (releasePromise)
+                        return releasePromise;
+                    let terminal = false;
+                    try {
+                        terminal = this.#markReleaseMarkerDone(record);
+                    }
+                    catch { /* exact state removal may still succeed */ }
+                    releasePromise = this.#remove(record)
+                        .then(() => {
+                        released = true;
+                    })
+                        .catch((error) => {
+                        if (terminal) {
+                            released = true;
+                            console.warn(`[taskflow] lease cleanup deferred for ${record.leaseId} (critical section durably released)`);
+                            return;
+                        }
+                        throw error;
+                    })
+                        .finally(() => {
+                        if (!released)
+                            releasePromise = undefined;
+                    });
+                    return releasePromise;
+                };
+                const renew = async (ttlMs) => {
+                    if (released)
+                        throw new Error(`Lease ${record.leaseId} is already released`);
+                    if (!Number.isFinite(ttlMs) || ttlMs <= 0)
+                        throw new Error("ttlMs must be positive");
+                    await this.#mutex.runExclusive(() => {
+                        const state = this.#read();
+                        const current = state.leases.find((lease) => lease.leaseId === record.leaseId && lease.leaseToken === record.leaseToken);
+                        if (!current || this.#isStale(current))
+                            throw new Error(`Lease ${record.leaseId} is no longer active`);
+                        current.expiresAt = this.now() + ttlMs;
+                        record.expiresAt = current.expiresAt;
+                        writeJsonAtomicDurable(this.statePath, state);
+                    });
+                };
+                // The acquisition signal cancels only a waiter. Once granted, the lease
+                // protects the actual writer until its invoke promise settles or the owner
+                // process dies; abort alone is not proof that mutation has stopped.
+                if (options.signal?.aborted) {
+                    await release();
+                    throw new CoordinatorAbortError();
+                }
+                return {
+                    leaseId: record.leaseId,
+                    owner: cloneExecutionOwner(record.owner),
+                    requests: normalized,
+                    acquiredAt: record.acquiredAt,
+                    get expiresAt() { return record.expiresAt; },
+                    release,
+                    renew,
+                };
+            }
+            if (this.now() >= deadline) {
+                throw new CoordinatorTimeoutError(`Lease timeout after ${timeoutMs}ms for ${normalized.length} resource scope(s)`);
+            }
+            await new Promise((resolve, reject) => {
+                const timer = setTimeout(resolve, Math.min(this.pollMs, Math.max(1, deadline - this.now())));
+                const onAbort = () => {
+                    clearTimeout(timer);
+                    reject(new CoordinatorAbortError());
+                };
+                options.signal?.addEventListener("abort", onAbort, { once: true });
+                if (options.signal)
+                    setTimeout(() => options.signal?.removeEventListener("abort", onAbort), this.pollMs + 1).unref?.();
+            });
+        }
+    }
+    async #remove(record) {
+        await this.#mutex.runExclusive(() => {
+            const state = this.#read();
+            const next = state.leases.filter((lease) => lease.leaseId !== record.leaseId || lease.leaseToken !== record.leaseToken);
+            if (next.length !== state.leases.length) {
+                state.leases = next;
+                writeJsonAtomicDurable(this.statePath, state);
+            }
+            this.#cleanupReleaseMarkers([record]);
+        });
+    }
+    async recoverStale() {
+        return this.#mutex.runExclusive(() => {
+            const state = this.#read();
+            const stale = this.#prune(state);
+            if (stale.length > 0)
+                writeJsonAtomicDurable(this.statePath, state);
+            this.#cleanupReleaseMarkers(stale);
+            return stale.map((record) => record.leaseId);
+        });
+    }
+    async list() {
+        return this.#mutex.runExclusive(() => {
+            const state = this.#read();
+            const stale = this.#prune(state);
+            if (stale.length > 0)
+                writeJsonAtomicDurable(this.statePath, state);
+            this.#cleanupReleaseMarkers(stale);
+            return state.leases.map(({ leaseToken: _secret, releaseMarkerToken: _marker, ...record }) => structuredClone(record));
+        });
+    }
+}
+//# sourceMappingURL=leases.js.map

package/dist/resources/leases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leases.js","sourceRoot":"","sources":["../../src/resources/leases.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACN,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,sBAAsB,GAGtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GAIlB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAmDlF,SAAS,UAAU,CAAC,MAAsB;IACzC,OAAO,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAiC;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7C,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;QACnC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC;KACzC,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACxF,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1C,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,UAAU,CAAC,QAA8B,EAAE,SAAuB;IAC1E,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;QAClE,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACjH,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,GAAG,CAAC,gBAAgB;QAC5D,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC;QAChF,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA8B,EAAE,SAAkC;IAC3F,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;gBAAE,SAAS;YACzE,IAAI,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAAE,SAAS;YACzC,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,OAAO,0BAA0B;IAC7B,SAAS,CAAS;IAClB,QAAQ,CAAkB;IAC1B,GAAG,CAAe;IAClB,MAAM,CAAS;IACf,MAAM,CAAsB;IAC5B,eAAe,CAA8D;IAEtF,YAAY,OAAgC;QAC3C,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACtG,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,sBAAsB,EAAE,CAAC;QACpE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAAC;QACzE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACtG,CAAC;IAED,KAAK;QACJ,MAAM,KAAK,GAAG,YAAY,CAAsB,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACnH,OAAO,KAAK,CAAC;IACd,CAAC;IAED,kBAAkB,CAAC,MAAoE;QACtF,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnG,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,iBAAiB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,kBAAkB,OAAO,CAAC,CAAC;IACrH,CAAC;IAED,kBAAkB,CAAC,MAA4B,EAAE,KAAsB;QACtE,OAAO;YACN,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACrF,KAAK;SACL,CAAC;IACH,CAAC;IAED,sBAAsB,CAAC,KAAc,EAAE,MAA4B;QAClE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACjH,MAAM,MAAM,GAAG,KAAoC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC;YAC/E,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB;YAChG,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;YACrD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,kBAAkB,CAAC,MAA4B;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,IAAI,EAAsB,CAAC;QAC3B,IAAI,CAAC;YACJ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC7F,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAY,EAAE,MAAM,CAAC,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACzE,MAAM,KAAK,CAAC;QACb,CAAC;gBAAS,CAAC;YACV,IAAI,EAAE,KAAK,SAAS;gBAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;IAED,oBAAoB,CAAC,MAA4B;QAChD,sBAAsB,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,sBAAsB,CAAC,MAA4B;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,IAAI,EAAsB,CAAC;QAC3B,IAAI,CAAC;YACJ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,EAAE,MAAM,CAAC,CAAC;YACvF,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAwC,CAAC,CAAC,CAAC;YAClH,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAChH,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACrC,MAAM,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACpF,CAAC;YACD,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACrE,MAAM,KAAK,CAAC;QACb,CAAC;gBAAS,CAAC;YACV,IAAI,EAAE,KAAK,SAAS;gBAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;IAED,sBAAsB,CAAC,OAAwC;QAC9D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACtE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACxD,oEAAoE;oBACpE,4DAA4D;gBAC7D,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED,QAAQ,CAAC,MAA4B;QACpC,MAAM,aAAa,GAAG,GAAG,EAAE,CAC1B,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAClE,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,MAAM,IAAI,aAAa,EAAE,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACR,2EAA2E;YAC3E,2EAA2E;YAC3E,gEAAgE;YAChE,IAAI,aAAa,EAAE;gBAAE,OAAO,IAAI,CAAC;YACjC,6EAA6E;YAC7E,wEAAwE;YACxE,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAED,MAAM,CAAC,KAA0B;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAiC,EAAE,OAAO,GAAwB,EAAE;QACjF,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3G,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,OAAO,IAAI,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;YAC/D,IAAI,OAAyC,CAAC;YAC9C,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;gBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;oBAC1E,OAAO,GAAG;wBACT,GAAG,IAAI,CAAC,QAAQ;wBAChB,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;wBAC5B,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAClD,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAC1D,KAAK,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;wBAC/C,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;wBAChE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;wBACtB,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;qBAC3F,CAAC;oBACF,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;oBACnC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;gBACD,IAAI,CAAC;oBACJ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO;wBAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAChF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,OAAO;wBAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;oBACpD,MAAM,KAAK,CAAC;gBACb,CAAC;gBACD,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAE9E,IAAI,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,OAAO,CAAC;gBACvB,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,IAAI,cAAyC,CAAC;gBAC9C,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;oBAC1B,IAAI,QAAQ;wBAAE,OAAO;oBACrB,IAAI,cAAc;wBAAE,OAAO,cAAc,CAAC;oBAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;oBACrB,IAAI,CAAC;wBAAC,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;oBAC7G,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;yBACnC,IAAI,CAAC,GAAG,EAAE;wBACV,QAAQ,GAAG,IAAI,CAAC;oBACjB,CAAC,CAAC;yBACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;wBACzB,IAAI,QAAQ,EAAE,CAAC;4BACd,QAAQ,GAAG,IAAI,CAAC;4BAChB,OAAO,CAAC,IAAI,CAAC,yCAAyC,MAAM,CAAC,OAAO,sCAAsC,CAAC,CAAC;4BAC5G,OAAO;wBACR,CAAC;wBACD,MAAM,KAAK,CAAC;oBACb,CAAC,CAAC;yBACD,OAAO,CAAC,GAAG,EAAE;wBACb,IAAI,CAAC,QAAQ;4BAAE,cAAc,GAAG,SAAS,CAAC;oBAC3C,CAAC,CAAC,CAAC;oBACJ,OAAO,cAAc,CAAC;gBACvB,CAAC,CAAC;gBACF,MAAM,KAAK,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;oBACrC,IAAI,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;oBAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;oBACrF,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;wBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;wBAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;wBACzH,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,SAAS,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;wBACvG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;wBACvC,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;wBACrC,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBAC/C,CAAC,CAAC,CAAC;gBACJ,CAAC,CAAC;gBACF,wEAAwE;gBACxE,2EAA2E;gBAC3E,oEAAoE;gBACpE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBAC7B,MAAM,OAAO,EAAE,CAAC;oBAChB,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACnC,CAAC;gBACD,OAAO;oBACN,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,KAAK,EAAE,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC;oBACxC,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,IAAI,SAAS,KAAK,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC5C,OAAO;oBACP,KAAK;iBACL,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,uBAAuB,CAAC,uBAAuB,SAAS,UAAU,UAAU,CAAC,MAAM,oBAAoB,CAAC,CAAC;YACpH,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7F,MAAM,OAAO,GAAG,GAAG,EAAE;oBACpB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC;gBACrC,CAAC,CAAC;gBACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnE,IAAI,OAAO,CAAC,MAAM;oBAAE,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACxH,CAAC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAA4B;QACzC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpE,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpE,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACvH,CAAC,CAAC,CAAC;IACJ,CAAC;CACD"}

package/dist/resources/permits.d.ts

@@ -0,0 +1,52 @@
+import { type PersistentCoordinatorOptions } from "./persistence.ts";
+import { type CanonicalLeaseKey, type ExecutionOwner } from "./types.ts";
+export type PermitState = "issued" | "active" | "settled" | "expired";
+export interface MutationPermit {
+    readonly permitId: string;
+    readonly intentId: string;
+    readonly journalEpoch: number;
+    readonly owner: ExecutionOwner;
+    readonly issuedAt: string;
+    readonly expiresAt: string;
+    readonly nonce: string;
+    readonly scopes: readonly CanonicalLeaseKey[];
+}
+export interface DurablePendingIntent {
+    intentId: string;
+    intentSequence: number;
+    journalEpoch: number;
+    owner: ExecutionOwner;
+    scopes: readonly CanonicalLeaseKey[];
+}
+export interface PermitRegistryOptions extends PersistentCoordinatorOptions {
+    journalEpoch: number;
+}
+export interface PermitActivation {
+    owner: ExecutionOwner;
+    pendingIntents: readonly DurablePendingIntent[];
+}
+export declare class PermitValidationError extends Error {
+    readonly code = "TFWS_PERMIT_INVALID";
+    constructor(message: string);
+}
+/** Runtime-only brand check for SandboxPlan sealing. Serialized/reconstructed
+ * lookalikes deliberately fail even when every public field is identical. */
+export declare function isIssuedMutationPermit(value: unknown): value is MutationPermit;
+export declare class MutationPermitRegistry {
+    #private;
+    readonly statePath: string;
+    readonly journalEpoch: number;
+    readonly now: () => number;
+    constructor(options: PermitRegistryOptions);
+    /** Internal durability-plane hook. Call only after the matching intent WAL
+     * record has been appended and fsynced. JournalManager is the public issuer. */
+    issueForDurableIntent(intent: DurablePendingIntent, ttlMs: number): Promise<MutationPermit>;
+    /** Atomically activate every permit in a sealed execution plan exactly once. */
+    activateMany(permits: readonly MutationPermit[], activation: PermitActivation): Promise<void>;
+    assertIntentActive(intentId: string, owner: ExecutionOwner): Promise<void>;
+    assertActive(permit: MutationPermit, owner: ExecutionOwner): Promise<void>;
+    settleIntent(intentId: string): Promise<void>;
+    stateOf(permitId: string): Promise<PermitState | undefined>;
+    invalidateOlderEpochs(): Promise<number>;
+}
+//# sourceMappingURL=permits.d.ts.map

package/dist/resources/permits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permits.d.ts","sourceRoot":"","sources":["../../src/resources/permits.ts"],"names":[],"mappings":"AAEA,OAAO,EAIN,KAAK,4BAA4B,EACjC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAKN,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACrC;AAiBD,MAAM,WAAW,qBAAsB,SAAQ,4BAA4B;IAC1E,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,cAAc,CAAC;IACtB,cAAc,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAChD;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,yBAAyB;IACtC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AAID;6EAC6E;AAC7E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAE9E;AA8CD,qBAAa,sBAAsB;;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAG3B,YAAY,OAAO,EAAE,qBAAqB,EAQzC;IA0BD;oFACgF;IAC1E,qBAAqB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA6BhG;IAED,gFAAgF;IAC1E,YAAY,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,EAAE,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BlG;IAEK,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ/E;IAEK,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAY/E;IAEK,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAalD;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAMhE;IAEK,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAc7C;CACD"}