tracegrove 0.0.0-stage → 0.3.0

package/dist/core/gitSnapshot.js

@@ -0,0 +1,55 @@
+import { mkdirSync, rmSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { GitSourceResolution, GitSourceSnapshot, GitSnapshotSide, RefSchema, digestOfBytes, digestOfValue, freeze, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { GitRepository } from "../source/git.js";
+import { GIT_RESOLVER_REF } from "./gitSources.js";
+import { Conflict } from "./errors.js";
+import { writeGitSnapshotTree } from "../source/snapshotTree.js";
+import { verifyGitSnapshotCommit } from "../source/gitObjectProof.js";
+/** Materialize selected immutable source facts. Does not execute code, install dependencies or grant authority. */
+export async function materializeGitSnapshot(input, authorize) {
+    const resolution = GitSourceResolution.parse(input.resolution);
+    const repositoryRef = RefSchema.parse(input.repositoryRef);
+    const side = GitSnapshotSide.parse(input.side);
+    if (!verifySelfDigest(resolution) || !verifySelfDigest(resolution.matrix) || !sameScope(resolution.scope, resolution.matrix.scope))
+        throw new Conflict('source resolution integrity or scope mismatch');
+    const rows = resolution.matrix.repositories.filter(row => sameRef(row.repositoryRef, repositoryRef));
+    if (rows.length !== 1 || !rows[0].resolverRef || !sameRef(rows[0].resolverRef, GIT_RESOLVER_REF))
+        throw new Conflict('snapshot needs exactly one repository from the registered Git resolver');
+    await authorize(structuredClone(resolution.scope), structuredClone(repositoryRef));
+    const commit = side === 'base' ? rows[0].baseCommit : rows[0].headCommit;
+    const git = new GitRepository(input.root);
+    if (git.commit(commit) !== commit)
+        throw new Conflict('immutable snapshot commit changed');
+    const entries = git.snapshot(commit);
+    const binding = { resolutionRef: resolution.ref, repositoryRef, side, commit };
+    const snapshot = GitSourceSnapshot.parse(freeze({ schemaVersion: 'workflow.git-source-snapshot/v1',
+        ref: { id: `git-snapshot-${digestOfValue(binding).hex}`, revision: '1' }, scope: resolution.scope, ...binding,
+        files: entries.map(entry => ({ path: entry.path, mode: entry.mode, digest: digestOfBytes(entry.bytes), bytes: entry.bytes.length, objectId: entry.objectId })),
+        commitProof: git.commitProof(commit), }));
+    verifyGitSnapshotCommit(snapshot, entries);
+    // Check authorization again after object reads, before allocating a private output.
+    await authorize(structuredClone(resolution.scope), structuredClone(repositoryRef));
+    const output = resolve(input.output);
+    const sourceDir = join(output, 'source');
+    try {
+        mkdirSync(output, { mode: 0o700 });
+    }
+    catch (error) {
+        if (error.code === 'EEXIST')
+            throw new Conflict('snapshot output already exists; choose a new output directory');
+        throw error;
+    }
+    try {
+        writeGitSnapshotTree(entries, sourceDir);
+        const manifestPath = join(output, 'snapshot.json');
+        writeFileSync(manifestPath, `${JSON.stringify(snapshot, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
+        writeFileSync(join(output, 'resolution.json'), `${JSON.stringify(resolution)}\n`, { flag: 'wx', mode: 0o600 });
+        return { snapshot, sourceDir, manifestPath };
+    }
+    catch (error) {
+        rmSync(output, { recursive: true, force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=gitSnapshot.js.map

package/dist/core/gitSnapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitSnapshot.js","sourceRoot":"","sources":["../../src/core/gitSnapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtL,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAA+B,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAmG,EAAE,SAAiC;IACjL,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAAC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3G,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACxM,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;IACrG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,wEAAwE,CAAC,CAAC;IACjM,MAAM,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC;IAC3E,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,iCAA0C;QACzG,GAAG,EAAE,EAAE,EAAE,EAAE,gBAAgB,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,OAAO;QAC7G,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9J,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,GACrC,CAAC,CAAC,CAAC;IACJ,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,oFAAoF;IACpF,MAAM,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/E,IAAI,CAAC;QAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IAC3C,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,+DAA+D,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC3K,IAAI,CAAC;QACH,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACnD,aAAa,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/G,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACpF,CAAC"}

package/dist/core/gitSources.d.ts

@@ -0,0 +1,29 @@
+import { GitSourceResolution, RevisionMatrix, type Ref, type Scope } from '../protocol/index.ts';
+import { SourceCitation, type SourceCitationPorts } from './source-citation.ts';
+export { GitSourceRequest, GitSourceResolution } from '../protocol/index.ts';
+export type GitSourceAuthorization = SourceCitationPorts['authorize'];
+export declare const GIT_RESOLVER_REF: Ref;
+/** Freeze complete local commit-pair source facts. No fetch, checkout, model, review or product verdict. */
+export declare function resolveGitSources(input: unknown, authorize: GitSourceAuthorization): Promise<GitSourceResolution>;
+/** Reopen selected immutable objects after restart. The trusted host owns repository mappings and authorization. */
+export declare class GitSourceReader implements SourceCitationPorts {
+    private readonly admission;
+    private readonly matrix;
+    private readonly bindings;
+    constructor(matrix: unknown, bindings: unknown, admission: GitSourceAuthorization);
+    authorize(scope: Scope, repositoryRef: Ref): Promise<void>;
+    readFile(scope: Scope, input: SourceCitation): Promise<{
+        repositoryRef: {
+            id: string;
+            revision: string;
+            digest: {
+                algorithm: "sha256";
+                hex: string;
+            };
+        };
+        resolvedCommit: string;
+        path: string;
+        bytes: Buffer<ArrayBufferLike>;
+    }>;
+    readDiff(scope: Scope, repository: RevisionMatrix['repositories'][number]): Promise<Uint8Array>;
+}

package/dist/core/gitSources.js

@@ -0,0 +1,97 @@
+import { z } from 'zod';
+import { GitRepositoryBinding, GitSourceRequest, GitSourceResolution, RevisionMatrix, digestOfBytes, digestOfValue, freeze, refKey, sameDigest, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { GitRepository } from "../source/git.js";
+import { SourceCitation } from "./source-citation.js";
+import { Conflict } from "./errors.js";
+import { newId, nowIso } from "./clock.js";
+export { GitSourceRequest, GitSourceResolution } from "../protocol/index.js";
+export const GIT_RESOLVER_REF = { id: 'tracegrove.git-object-resolver', revision: '0.1.0',
+    digest: digestOfValue({ kind: 'git-commit-pair', version: 1, renames: false, externalDiff: false, textconv: false, lazyFetch: false }) };
+/** Freeze complete local commit-pair source facts. No fetch, checkout, model, review or product verdict. */
+export async function resolveGitSources(input, authorize) {
+    const request = GitSourceRequest.parse(input);
+    if (new Set(request.repositories.map(r => refKey(r.repositoryRef))).size !== request.repositories.length ||
+        new Set(request.repositories.map(r => r.repositoryRef.id)).size !== request.repositories.length)
+        throw new Conflict('duplicate source repository identity');
+    const payloads = new Map();
+    const changes = [];
+    const repositories = [];
+    let total = 0;
+    const capture = (id, bytes) => {
+        const ref = { id, revision: '1', digest: digestOfBytes(bytes) };
+        const key = refKey(ref);
+        if (!payloads.has(key)) {
+            total += bytes.length;
+            if (total > 32 * 1024 * 1024)
+                throw new Conflict('complete source resolution exceeds 32 MiB');
+            payloads.set(key, { ref, base64: bytes.toString('base64') });
+        }
+        return ref;
+    };
+    for (const selected of request.repositories) {
+        await authorize(structuredClone(request.scope), structuredClone(selected.repositoryRef));
+        const git = new GitRepository(selected.root);
+        const head = git.commit(selected.head);
+        const base = git.commit(selected.base);
+        const merge = git.mergeBase(base, head);
+        const changedFileRefs = [];
+        for (const change of git.changes(base, head)) {
+            if (changes.length >= 500)
+                throw new Conflict('complete multi-repository source resolution exceeds 500 changes');
+            const blob = (revision, id, mode) => mode === '000000' ? null : capture(`source-file-${digestOfValue({ repository: selected.repositoryRef, revision, path: change.path }).hex}`, git.blob(id));
+            const baseBlobRef = blob(base, change.oldId, change.oldMode);
+            const headBlobRef = blob(head, change.newId, change.newMode);
+            changes.push({ repositoryRef: selected.repositoryRef, path: change.path, status: change.status, baseBlobRef, headBlobRef });
+            changedFileRefs.push((headBlobRef ?? baseBlobRef));
+        }
+        const diffRef = capture(`source-diff-${digestOfValue({ repository: selected.repositoryRef, base, head }).hex}`, git.diff(base, head));
+        repositories.push({ repositoryRef: selected.repositoryRef, requestedRef: selected.head, requestedBaseRef: selected.base,
+            headCommit: head, baseCommit: base, mergeBaseCommit: merge.commit, mergeBaseAbsentReason: merge.reason,
+            diffRef, changedFileRefs, resolverRef: GIT_RESOLVER_REF });
+    }
+    const matrix = RevisionMatrix.parse(freeze({ schemaVersion: 'workflow.revisions/v1', ref: { id: newId('git-revisions'), revision: '1' },
+        scope: request.scope, repositories, resolvedAt: nowIso() }));
+    return GitSourceResolution.parse(freeze({ schemaVersion: 'workflow.git-source-resolution/v1', ref: { id: newId('git-source-resolution'), revision: '1' },
+        scope: request.scope, matrix, changes, payloads: [...payloads.values()] }));
+}
+/** Reopen selected immutable objects after restart. The trusted host owns repository mappings and authorization. */
+export class GitSourceReader {
+    admission;
+    matrix;
+    bindings;
+    constructor(matrix, bindings, admission) {
+        this.admission = admission;
+        this.matrix = RevisionMatrix.parse(matrix);
+        if (!verifySelfDigest(this.matrix))
+            throw new Conflict('source matrix digest mismatch');
+        const parsed = z.array(GitRepositoryBinding).min(1).max(32).parse(bindings);
+        this.bindings = new Map(parsed.map(binding => [refKey(binding.repositoryRef), binding]));
+        if (this.bindings.size !== parsed.length || this.matrix.repositories.some(repo => !this.bindings.has(refKey(repo.repositoryRef))))
+            throw new Conflict('source matrix repository binding is missing or duplicated');
+    }
+    async authorize(scope, repositoryRef) {
+        if (!sameScope(scope, this.matrix.scope) || !this.matrix.repositories.some(r => sameRef(r.repositoryRef, repositoryRef)))
+            throw new Conflict('source read scope or repository mismatch');
+        await this.admission(structuredClone(scope), structuredClone(repositoryRef));
+    }
+    async readFile(scope, input) {
+        const citation = SourceCitation.parse(input);
+        await this.authorize(scope, citation.repositoryRef);
+        const row = this.matrix.repositories.find(row => sameRef(row.repositoryRef, citation.repositoryRef));
+        if (![row.headCommit, row.baseCommit, row.mergeBaseCommit].includes(citation.resolvedCommit))
+            throw new Conflict('source citation is outside selected immutable revisions');
+        const bytes = new GitRepository(this.bindings.get(refKey(row.repositoryRef)).root).file(citation.resolvedCommit, citation.path);
+        return { repositoryRef: structuredClone(row.repositoryRef), resolvedCommit: citation.resolvedCommit, path: citation.path, bytes };
+    }
+    async readDiff(scope, repository) {
+        const row = this.matrix.repositories.find(row => sameRef(row.repositoryRef, repository.repositoryRef));
+        if (!row || !sameDigest(digestOfValue(row), digestOfValue(repository)))
+            throw new Conflict('source diff revision binding differs from the frozen matrix');
+        await this.authorize(scope, row.repositoryRef);
+        const bytes = new GitRepository(this.bindings.get(refKey(row.repositoryRef)).root).diff(row.baseCommit, row.headCommit);
+        if (!sameDigest(digestOfBytes(bytes), row.diffRef.digest))
+            throw new Conflict('full immutable source diff changed');
+        return bytes;
+    }
+}
+//# sourceMappingURL=gitSources.js.map

package/dist/core/gitSources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitSources.js","sourceRoot":"","sources":["../../src/core/gitSources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAC5J,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAA4B,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,MAAM,CAAC,MAAM,gBAAgB,GAAQ,EAAE,EAAE,EAAE,gCAAgC,EAAE,QAAQ,EAAE,OAAO;IAC5F,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAE3I,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAc,EAAE,SAAiC;IACvF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,CAAC,MAAM;QACpG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,sCAAsC,CAAC,CAAC;IAChK,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;IACjE,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,YAAY,GAAmC,EAAE,CAAC;IACxD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,KAAa,EAAO,EAAE;QACjD,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YAAC,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YACrH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxH,MAAM,eAAe,GAAU,EAAE,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,iEAAiE,CAAC,CAAC;YACjH,MAAM,IAAI,GAAG,CAAC,QAAgB,EAAE,EAAU,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAC7F,eAAe,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACzH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAAC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3H,OAAO,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5H,eAAe,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,WAAW,CAAE,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACtI,YAAY,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YACrH,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,CAAC,MAAM;YACtG,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,uBAAuB,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACrI,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,mCAA4C,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,uBAAuB,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QAC/J,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,oHAAoH;AACpH,MAAM,OAAO,eAAe;IAGuC;IAFhD,MAAM,CAAiB;IACvB,QAAQ,CAAoD;IAC7E,YAAY,MAAe,EAAE,QAAiB,EAAmB,SAAiC;QAAjC,cAAS,GAAT,SAAS,CAAwB;QAChG,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,2DAA2D,CAAC,CAAC;IACrN,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,KAAY,EAAE,aAAkB;QAC9C,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,0CAA0C,CAAC,CAAC;QACzL,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAY,EAAE,KAAqB;QAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAClG,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAE,CAAC;QACtG,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QAC5K,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjI,OAAO,EAAE,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACpI,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAY,EAAE,UAAkD;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QACvG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,6DAA6D,CAAC,CAAC;QAC1J,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACzH,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,oCAAoC,CAAC,CAAC;QACpH,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/core/ledger.d.ts

@@ -0,0 +1,38 @@
+import { type JournalEntry } from './ledgerRecords.ts';
+export type { JournalEntry } from './ledgerRecords.ts';
+export type LockFile = {
+    writerId: string;
+    pid: number;
+    startedAt: string;
+    host: string;
+    endpoint: string | null;
+    tokenDigest: string | null;
+};
+export declare class LocalLedger {
+    readonly dir: string;
+    private readonly lockPath;
+    private readonly journalPath;
+    private readonly entries;
+    private readonly versions;
+    private readonly latest;
+    private seq;
+    private closed;
+    private writeFailed;
+    private readonly writerId;
+    readonly recovered: Array<{
+        aggregateId: string;
+        lastType: string;
+    }>;
+    private constructor();
+    static open(stateDir: string): LocalLedger;
+    private load;
+    private recoverInterrupted;
+    version(aggregateId: string): number;
+    current(aggregateId: string): JournalEntry | null;
+    history(aggregateId: string): JournalEntry[];
+    /** Atomic transition: fails with Conflict unless the aggregate is at `expectedVersion`. */
+    append(aggregateId: string, expectedVersion: number, type: string, data: Record<string, unknown>): JournalEntry;
+    publishController(endpoint: string, tokenDigest: string): void;
+    private ownedLock;
+    close(): void;
+}

package/dist/core/ledger.js

@@ -0,0 +1,169 @@
+/**
+ * Local single-writer ProjectionLedger: a serialized append-only JSONL journal with
+ * expected-version CAS, guarded by a lock file naming the live controller process.
+ * It does not claim distributed fencing. A stale lock (dead pid) may be broken after
+ * recording a recovery event; a live lock refuses a second writer with a specific reason.
+ */
+import { appendFileSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { hostname } from 'node:os';
+import { randomUUID } from 'node:crypto';
+import { join } from 'node:path';
+import { Conflict } from "./errors.js";
+import { nowIso } from "./clock.js";
+import { JournalRecord, parseJournal } from "./ledgerRecords.js";
+import { syncPath } from "./fsDurability.js";
+function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === 'EPERM';
+    }
+}
+export class LocalLedger {
+    dir;
+    lockPath;
+    journalPath;
+    entries = [];
+    versions = new Map();
+    latest = new Map();
+    seq = 0;
+    closed = false;
+    writeFailed = false;
+    writerId = randomUUID();
+    recovered = [];
+    constructor(dir, lockPath, journalPath) {
+        this.dir = dir;
+        this.lockPath = lockPath;
+        this.journalPath = journalPath;
+    }
+    static open(stateDir) {
+        const dir = join(stateDir, 'ledger');
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        const lockPath = join(dir, 'lock.json');
+        const journalPath = join(dir, 'journal.jsonl');
+        const ledger = new LocalLedger(dir, lockPath, journalPath);
+        const guardPath = join(dir, 'acquire.lock');
+        let guard;
+        try {
+            guard = openSync(guardPath, 'wx', 0o600);
+        }
+        catch {
+            throw new Conflict(`ledger acquisition in progress at ${dir}; reconcile an abandoned acquire.lock before retrying`);
+        }
+        try {
+            let staleLock = null;
+            if (existsSync(lockPath)) {
+                const lock = JSON.parse(readFileSync(lockPath, 'utf8'));
+                if (lock.host !== hostname())
+                    throw new Conflict(`ledger ${dir} belongs to another host; local fencing cannot recover it`);
+                if (pidAlive(lock.pid)) {
+                    throw new Conflict(`ledger at ${dir} is held by live process ${lock.pid} (started ${lock.startedAt}); delegation endpoint ${lock.endpoint ?? 'not published'}`);
+                }
+                ledger.load();
+                staleLock = lock;
+                rmSync(lockPath);
+            }
+            else
+                ledger.load();
+            const lock = { writerId: ledger.writerId, pid: process.pid, startedAt: nowIso(), host: hostname(), endpoint: null, tokenDigest: null };
+            writeFileSync(lockPath, JSON.stringify(lock), { flag: 'wx', mode: 0o600 });
+            if (staleLock)
+                ledger.recoverInterrupted(staleLock);
+        }
+        catch (error) {
+            ledger.close();
+            throw error;
+        }
+        finally {
+            closeSync(guard);
+            rmSync(guardPath);
+        }
+        return ledger;
+    }
+    load() {
+        if (!existsSync(this.journalPath))
+            return;
+        const text = readFileSync(this.journalPath, 'utf8');
+        for (const entry of parseJournal(text)) {
+            this.entries.push(entry);
+            this.seq = Math.max(this.seq, entry.seq);
+            this.versions.set(entry.aggregateId, entry.version);
+            this.latest.set(entry.aggregateId, entry);
+        }
+    }
+    recoverInterrupted(staleLock) {
+        for (const [aggregateId, entry] of this.latest) {
+            if (!aggregateId.startsWith('execution:'))
+                continue;
+            if (['finalized', 'interrupted'].includes(entry.type))
+                continue;
+            this.recovered.push({ aggregateId, lastType: entry.type });
+            this.append(aggregateId, entry.version, 'interrupted', { reason: 'stale_lock_recovered', stalePid: staleLock.pid, previousState: entry.type });
+        }
+        this.append('ledger', this.version('ledger'), 'lock.recovered', { stalePid: staleLock.pid, startedAt: staleLock.startedAt, interrupted: this.recovered.length });
+    }
+    version(aggregateId) {
+        this.ownedLock();
+        return this.versions.get(aggregateId) ?? 0;
+    }
+    current(aggregateId) {
+        this.ownedLock();
+        return structuredClone(this.latest.get(aggregateId) ?? null);
+    }
+    history(aggregateId) {
+        this.ownedLock();
+        return structuredClone(this.entries.filter((entry) => entry.aggregateId === aggregateId));
+    }
+    /** Atomic transition: fails with Conflict unless the aggregate is at `expectedVersion`. */
+    append(aggregateId, expectedVersion, type, data) {
+        const current = this.version(aggregateId);
+        if (current !== expectedVersion) {
+            throw new Conflict(`${aggregateId}: expected version ${expectedVersion}, current ${current}`);
+        }
+        // Serialization and validation happen before any state/IO change. Cache exactly the bytes written.
+        const line = `${JSON.stringify({ seq: this.seq + 1, at: nowIso(), aggregateId, version: current + 1, type, data })}\n`;
+        const entry = JournalRecord.parse(JSON.parse(line));
+        try {
+            appendFileSync(this.journalPath, line, { mode: 0o600 });
+            syncPath(this.journalPath);
+            syncPath(this.dir); // Persist the directory entry too when this append created the journal.
+        }
+        catch (error) {
+            this.writeFailed = true;
+            throw error;
+        }
+        this.seq = entry.seq;
+        this.entries.push(entry);
+        this.versions.set(aggregateId, entry.version);
+        this.latest.set(aggregateId, entry);
+        return structuredClone(entry);
+    }
+    publishController(endpoint, tokenDigest) {
+        const lock = this.ownedLock();
+        writeFileSync(this.lockPath, JSON.stringify({ ...lock, endpoint, tokenDigest }), { mode: 0o600 });
+    }
+    ownedLock() {
+        if (this.closed)
+            throw new Conflict('ledger closed');
+        if (this.writeFailed)
+            throw new Conflict('ledger has an uncertain write; close and reconcile the persisted journal before continuing');
+        const lock = JSON.parse(readFileSync(this.lockPath, 'utf8'));
+        if (lock.writerId !== this.writerId)
+            throw new Conflict('ledger ownership lost');
+        return lock;
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        try {
+            const lock = JSON.parse(readFileSync(this.lockPath, 'utf8'));
+            if (lock.writerId === this.writerId)
+                rmSync(this.lockPath, { force: true });
+        }
+        catch { /* lock already gone */ }
+    }
+}
+//# sourceMappingURL=ledger.js.map

package/dist/core/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/core/ledger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1H,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAC;AAEpF,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AACxH,CAAC;AAED,MAAM,OAAO,WAAW;IAUO;IAA8B;IAAmC;IAT7E,OAAO,GAAmB,EAAE,CAAC;IAC7B,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAClD,GAAG,GAAG,CAAC,CAAC;IACR,MAAM,GAAG,KAAK,CAAC;IACf,WAAW,GAAG,KAAK,CAAC;IACX,QAAQ,GAAG,UAAU,EAAE,CAAC;IAChC,SAAS,GAAqD,EAAE,CAAC;IAE1E,YAA6B,GAAW,EAAmB,QAAgB,EAAmB,WAAmB;QAApF,QAAG,GAAH,GAAG,CAAQ;QAAmB,aAAQ,GAAR,QAAQ,CAAQ;QAAmB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAErH,MAAM,CAAC,IAAI,CAAC,QAAgB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC5C,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QACjD,MAAM,CAAC;YAAC,MAAM,IAAI,QAAQ,CAAC,qCAAqC,GAAG,uDAAuD,CAAC,CAAC;QAAC,CAAC;QAC9H,IAAI,CAAC;YACH,IAAI,SAAS,GAAoB,IAAI,CAAC;YACtC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAa,CAAC;gBACpE,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE;oBAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,2DAA2D,CAAC,CAAC;gBAC3H,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,QAAQ,CAAC,aAAa,GAAG,4BAA4B,IAAI,CAAC,GAAG,aAAa,IAAI,CAAC,SAAS,0BAA0B,IAAI,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC,CAAC;gBAClK,CAAC;gBACD,MAAM,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnB,CAAC;;gBAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,GAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACjJ,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,IAAI,SAAS;gBAAE,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO;QAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACpD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,SAAmB;QAC5C,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,SAAS;YACpD,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACnK,CAAC;IAED,OAAO,CAAC,WAAmB;QACzB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,CAAC,WAAmB;QACzB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,WAAmB;QACzB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,2FAA2F;IAC3F,MAAM,CAAC,WAAmB,EAAE,eAAuB,EAAE,IAAY,EAAE,IAA6B;QAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;YAChC,MAAM,IAAI,QAAQ,CAAC,GAAG,WAAW,sBAAsB,eAAe,aAAa,OAAO,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,mGAAmG;QACnG,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC;QACvH,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,wEAAwE;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACpC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,iBAAiB,CAAC,QAAgB,EAAE,WAAmB;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpG,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,QAAQ,CAAC,4FAA4F,CAAC,CAAC;QACvI,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAa,CAAC;QACzE,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAa,CAAC;YACzE,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/core/ledgerInspection.d.ts

@@ -0,0 +1,18 @@
+import { type LedgerReadView } from './ledgerRecords.ts';
+export declare const LEDGER_INSPECTION_LIMITS: {
+    readonly journalBytes: number;
+    readonly lockBytes: 8192;
+    readonly records: 100000;
+};
+export declare class LedgerInspectionError extends Error {
+    readonly code: 'ledger_snapshot_unavailable' | 'ledger_snapshot_changed' | 'ledger_snapshot_invalid';
+    constructor(code: 'ledger_snapshot_unavailable' | 'ledger_snapshot_changed' | 'ledger_snapshot_invalid');
+}
+export declare function inspectLedger(stateDir: string): LedgerReadView & {
+    head: {
+        sequence: number;
+        digest: string;
+    };
+    writerLock: 'present' | 'absent';
+    assertUnchanged(): void;
+};

package/dist/core/ledgerInspection.js

@@ -0,0 +1,66 @@
+/** Read an existing local checkpoint without opening the writer, creating locks or recovering it. */
+import { lstatSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { digestOfBytes } from "../protocol/index.js";
+import { requireRealDirectory } from "./atomicFiles.js";
+import { readBoundedFile } from "./boundedFile.js";
+import { parseJournal } from "./ledgerRecords.js";
+export const LEDGER_INSPECTION_LIMITS = { journalBytes: 16 * 1024 * 1024, lockBytes: 8192, records: 100000 };
+export class LedgerInspectionError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+    }
+}
+export function inspectLedger(stateDir) {
+    const dir = join(resolve(stateDir), 'ledger');
+    const journal = join(dir, 'journal.jsonl');
+    const lock = join(dir, 'lock.json');
+    const fingerprint = () => { requireRealDirectory(dir); const stat = lstatSync(dir); return `${stat.dev}:${stat.ino}`; };
+    const lockDigest = () => {
+        try {
+            return digestOfBytes(readBoundedFile(lock, LEDGER_INSPECTION_LIMITS.lockBytes)).hex;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        }
+    };
+    let directory;
+    let lockBefore;
+    let bytes;
+    try {
+        directory = fingerprint();
+        lockBefore = lockDigest();
+        bytes = readBoundedFile(journal, LEDGER_INSPECTION_LIMITS.journalBytes);
+    }
+    catch {
+        throw new LedgerInspectionError('ledger_snapshot_unavailable');
+    }
+    const digest = digestOfBytes(bytes).hex;
+    const assertUnchanged = () => {
+        try {
+            if (fingerprint() !== directory || lockDigest() !== lockBefore || digestOfBytes(readBoundedFile(journal, LEDGER_INSPECTION_LIMITS.journalBytes)).hex !== digest)
+                throw new Error('changed');
+        }
+        catch {
+            throw new LedgerInspectionError('ledger_snapshot_changed');
+        }
+    };
+    assertUnchanged();
+    let entries;
+    try {
+        entries = parseJournal(new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes), LEDGER_INSPECTION_LIMITS.records);
+    }
+    catch {
+        throw new LedgerInspectionError('ledger_snapshot_invalid');
+    }
+    return {
+        head: { sequence: entries.at(-1)?.seq ?? 0, digest }, writerLock: lockBefore === null ? 'absent' : 'present',
+        current(id) { return structuredClone(entries.filter(entry => entry.aggregateId === id).at(-1) ?? null); },
+        history(id) { return structuredClone(entries.filter(entry => entry.aggregateId === id)); }, assertUnchanged,
+    };
+}
+//# sourceMappingURL=ledgerInspection.js.map

package/dist/core/ledgerInspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledgerInspection.js","sourceRoot":"","sources":["../../src/core/ledgerInspection.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAuB,MAAM,oBAAoB,CAAC;AAEvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAW,CAAC;AACtH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACzB;IAArB,YAAqB,IAA2F;QAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QAA3G,SAAI,GAAJ,IAAI,CAAuF;IAAiB,CAAC;CACnI;AACD,MAAM,UAAU,aAAa,CAAC,QAAgB;IAG5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,GAAG,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,CAAC;YAAC,OAAO,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;QAAC,CAAC;QAC5F,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACrG,CAAC,CAAC;IACF,IAAI,SAAiB,CAAC;IAAC,IAAI,UAAyB,CAAC;IAAC,IAAI,KAAa,CAAC;IACxE,IAAI,CAAC;QAAC,SAAS,GAAG,WAAW,EAAE,CAAC;QAAC,UAAU,GAAG,UAAU,EAAE,CAAC;QAAC,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAAC,CAAC;IACtI,MAAM,CAAC;QAAC,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,CAAC,CAAC;IAAC,CAAC;IACzE,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;IACxC,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,IAAI,CAAC;YACH,IAAI,WAAW,EAAE,KAAK,SAAS,IAAI,UAAU,EAAE,KAAK,UAAU,IAAI,aAAa,CAAC,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM;gBAC7J,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAAC,CAAC;IACzE,CAAC,CAAC;IACF,eAAe,EAAE,CAAC;IAClB,IAAI,OAAwC,CAAC;IAC7C,IAAI,CAAC;QAAC,OAAO,GAAG,YAAY,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC3I,MAAM,CAAC;QAAC,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;IAAC,CAAC;IACrE,OAAO;QACL,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC5G,OAAO,CAAC,EAAE,IAAI,OAAO,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QACzG,OAAO,CAAC,EAAE,IAAI,OAAO,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe;KAC5G,CAAC;AACJ,CAAC"}

package/dist/core/ledgerRecords.d.ts

@@ -0,0 +1,23 @@
+/** One journal parser shared by the exclusive writer and read-only inspection. */
+import { z } from 'zod';
+export type JournalEntry = {
+    seq: number;
+    at: string;
+    aggregateId: string;
+    version: number;
+    type: string;
+    data: Record<string, unknown>;
+};
+export type LedgerReadView = {
+    current(aggregateId: string): JournalEntry | null;
+    history(aggregateId: string): JournalEntry[];
+};
+export declare const JournalRecord: z.ZodObject<{
+    seq: z.ZodNumber;
+    at: z.ZodString;
+    aggregateId: z.ZodString;
+    version: z.ZodNumber;
+    type: z.ZodString;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strict>;
+export declare function parseJournal(text: string, maxRecords?: number): JournalEntry[];

package/dist/core/ledgerRecords.js

@@ -0,0 +1,29 @@
+/** One journal parser shared by the exclusive writer and read-only inspection. */
+import { z } from 'zod';
+import { Conflict } from "./errors.js";
+export const JournalRecord = z.object({ seq: z.number().int().positive().safe(), at: z.string().datetime({ offset: true }),
+    aggregateId: z.string().min(1).max(512), version: z.number().int().positive().safe(), type: z.string().min(1).max(256),
+    data: z.record(z.string(), z.unknown()) }).strict();
+export function parseJournal(text, maxRecords = Number.MAX_SAFE_INTEGER) {
+    if (text && !text.endsWith('\n'))
+        throw new Conflict('unterminated ledger record; reconcile the journal before writing');
+    const entries = [];
+    const versions = new Map();
+    let start = 0;
+    while (start < text.length) {
+        const end = text.indexOf('\n', start);
+        const line = text.slice(start, end);
+        start = end + 1;
+        if (!line.trim().length)
+            continue;
+        if (entries.length >= maxRecords)
+            throw new Conflict('ledger record limit exceeded');
+        const entry = JournalRecord.parse(JSON.parse(line));
+        if (entry.seq !== entries.length + 1 || entry.version !== (versions.get(entry.aggregateId) ?? 0) + 1)
+            throw new Conflict(`corrupt journal at sequence ${entry.seq}: non-contiguous sequence or aggregate version`);
+        entries.push(entry);
+        versions.set(entry.aggregateId, entry.version);
+    }
+    return entries;
+}
+//# sourceMappingURL=ledgerRecords.js.map

package/dist/core/ledgerRecords.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledgerRecords.js","sourceRoot":"","sources":["../../src/core/ledgerRecords.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIvC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtH,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEtD,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,UAAU,GAAG,MAAM,CAAC,gBAAgB;IAC7E,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,kEAAkE,CAAC,CAAC;IACzH,MAAM,OAAO,GAAmB,EAAE,CAAC;IAAC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;QAC5F,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM;YAAE,SAAS;QAClC,IAAI,OAAO,CAAC,MAAM,IAAI,UAAU;YAAE,MAAM,IAAI,QAAQ,CAAC,8BAA8B,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;YAClG,MAAM,IAAI,QAAQ,CAAC,+BAA+B,KAAK,CAAC,GAAG,gDAAgD,CAAC,CAAC;QAC/G,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}