wingfoil 0.2.1 → 0.3.0

package/dist/memory/audit.js

@@ -1,10 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONFIGURATION_SCOPES = exports.MEMORY_OPERATIONS = void 0;
 exports.isValidAttribution = isValidAttribution;
 exports.auditAttribution = auditAttribution;
 exports.parseCommitReason = parseCommitReason;
 exports.parseApprovalMetadata = parseApprovalMetadata;
+exports.parseMemoryOperation = parseMemoryOperation;
 exports.reconstructMemoryTransitions = reconstructMemoryTransitions;
+exports.parseBracketHops = parseBracketHops;
 exports.verifyTransitionConsistency = verifyTransitionConsistency;
 /**
  * Audit-trail verification & reconstruction (task-015-complete-audit-trail, REQ-SEC-02) — the
@@ -37,36 +40,43 @@ exports.verifyTransitionConsistency = verifyTransitionConsistency;
  * - "Recomputing an element's state at any historical commit ... agrees with the transition history
  *   derived from git log ... no drift" -> {@link verifyTransitionConsistency}.
  */
-const child_process_1 = require("child_process");
 const core_1 = require("../core");
 const validation_1 = require("../validation");
 const commit_message_1 = require("./commit-message");
 const history_1 = require("./history");
+const schema_1 = require("./schema");
+const state_machine_1 = require("./state-machine");
 const git_log_1 = require("./git-log");
 const storage_1 = require("../storage");
-const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@()]+$/;
-// The literal marker git itself appends to an author email when it falls back to a guessed identity
-// (user@hostname) and cannot determine a real domain — e.g. "root@buildhost.(none)". A commit
-// carrying this is not a deliberately-configured identity, so it counts as "unknown author".
-const GIT_GUESSED_DOMAIN_MARKER = '.(none)';
 /**
  * Whether `name`/`email` look like a real, deliberately-configured git identity rather than an
  * empty or git-guessed placeholder, as recorded on a *historical* commit. The base check — non-empty
  * `name` AND non-empty `email` — is NOT re-derived here: it delegates to
  * {@link isConfiguredIdentity} from `src/core/git-identity.ts`, the single source of truth also used
  * by `requireGitIdentity`'s write-time precondition (REQ-SEC-01). On top of that shared base, this
- * audit (REQ-SEC-02) layers two read-only augmentations that only make sense when inspecting
+ * audit (REQ-SEC-02) layers three read-only augmentations that only make sense when inspecting
  * *historical* commits rather than live config — `requireGitIdentity` has no need for either, because
  * it only ever looks at the identity a caller is about to write with:
  *
- *  - Rejects the `GIT_GUESSED_DOMAIN_MARKER` (`.(none)`): git appends this to an author email when it
+ *  - Rejects git's guessed-domain marker (`.(none)`): git appends this to an author email when it
  *    fell back to a guessed identity at commit time. `requireGitIdentity` now PREVENTS this going
  *    forward (task-014), but older history predating that guard can still carry it, so the read audit
  *    must flag it — it is a legacy-history concern, not part of the live write-time rule.
- *  - Rejects a non-empty-but-malformed email (`EMAIL_RE`): `requireGitIdentity` never needs this check
+ *  - Rejects a non-empty-but-malformed email (one `@`, a dotted domain, no whitespace, no parenthesis in
+ *    the top-level label): `requireGitIdentity` never needs this check
  *    because it only reads a git config value (itself always syntactically well-formed or absent);
  *    historical commit authors, however, can carry hand-edited or otherwise malformed values, so the
  *    audit validates the shape too.
+ *  - Rejects an email on an RFC 2606 reserved top-level domain (`.invalid`, `.example`, `.test`,
+ *    `.localhost`; task-132, `bug-153`): such an address names no mailbox, so a commit carrying it is
+ *    as unattributed as one carrying `.(none)`. Only the top-level label counts — `test.example.com`
+ *    is an ordinary domain. The write-time check does not apply this rule: test fixtures and scratch
+ *    repositories commit under these domains on purpose, and the audit is where they must show up.
+ *
+ * The three augmentations, with a blank-name check the base already covers, are
+ * {@link isAttributableIdentity} (`src/validation/identity.ts`, task-260, `bug-261`), the rule the
+ * `team.agents` schema applies too: after the base check this function adds nothing else, so an agent
+ * identity `dna.yaml` accepts is one this audit accepts.
  *
  * Pure predicate — no filesystem/git access.
  */
@@ -75,9 +85,7 @@ function isValidAttribution(name, email) {
     const trimmedEmail = email.trim();
     if (!(0, core_1.isConfiguredIdentity)(trimmedName, trimmedEmail))
         return false;
-    if (trimmedEmail.includes(GIT_GUESSED_DOMAIN_MARKER))
-        return false;
-    return EMAIL_RE.test(trimmedEmail);
+    return (0, validation_1.isAttributableIdentity)(trimmedName, trimmedEmail);
 }
 const AUDIT_LOG_FIELDS = ['%H', '%an', '%ae', '%aI', '%s'];
 /**
@@ -86,20 +94,26 @@ const AUDIT_LOG_FIELDS = ['%H', '%an', '%ae', '%aI', '%s'];
  * REQ-SEC-02's "0 'unknown author'" fit criterion. `pathspecs` is sorted before being passed to git
  * so the invocation itself is deterministic regardless of caller-supplied order (REQ-SYS-07); a
  * commit touching more than one of the given pathspecs still appears exactly once (git's own log
- * de-duplicates by commit, not by path). Returns `[]` (never throws) when none of `pathspecs` has
- * any history, mirroring {@link getMemoryHistory}.
+ * de-duplicates by commit, not by path). Returns `[]` when none of `pathspecs` has any history,
+ * mirroring {@link getMemoryHistory}; a git read that fails throws `StorageError`
+ * `E_GIT_READ_FAILED` rather than passing for a clean, empty audit (task-142, `bug-072`).
  */
 function auditAttribution(root, pathspecs) {
     const sortedPathspecs = [...pathspecs].sort();
     const records = (0, git_log_1.walkGitLogFields)(root, AUDIT_LOG_FIELDS, sortedPathspecs);
-    return records.map(([sha = '', authorName = '', authorEmail = '', date = '', subject = '']) => ({
-        sha,
-        authorName,
-        authorEmail,
-        date,
-        subject,
-        valid: isValidAttribution(authorName, authorEmail),
-    }));
+    // `walkGitLogFields` returns records of exactly `AUDIT_LOG_FIELDS.length` entries, never fewer.
+    return records.map((record) => {
+        const authorName = record[1];
+        const authorEmail = record[2];
+        return {
+            sha: record[0],
+            authorName,
+            authorEmail,
+            date: record[3],
+            subject: record[4],
+            valid: isValidAttribution(authorName, authorEmail),
+        };
+    });
 }
 /**
  * The identity on an `Approver:` trailer line. Applied to that ONE line — located by
@@ -113,7 +127,7 @@ const APPROVER_LINE_RE = /^Approver:\s*(.+?)\s*<([^>]+)>\s*\(([^)]+)\)\s*$/;
  * `add`/`submit` body, which carries no trailer by convention), or carries a bare `Reason:` with no
  * value. Split out of {@link parseApprovalMetadata} by `task-049-memory-history` (P1.10) because the
  * two trailers do not always travel together: an APPROVAL-gate commit (`approve`/`reject`) must carry
- * both `Approver:` and `Reason:` (CLAUDE.md §5.1, P1.7), but a `deprecate` commit records a `Reason:`
+ * both `Approver:` and `Reason:` (AGENTS.md §5.1, P1.7), but a `deprecate` commit records a `Reason:`
  * with **no** `Approver:` line at all — deprecate is explicitly not an approval gate. Reading the
  * reason through `parseApprovalMetadata` would therefore drop every deprecate reason from the audit
  * trail it exists to surface.
@@ -134,7 +148,7 @@ function parseCommitReason(body) {
 }
 /**
  * Parse a commit body for the `Approver: Name <email> (role)` and `Reason: ...` trailers
- * (CLAUDE.md §5.1; REQ-SEC-02/REQ-SEC-04). Returns `null` when there is no `Approver:` trailer line —
+ * (AGENTS.md §5.1; REQ-SEC-02/REQ-SEC-04). Returns `null` when there is no `Approver:` trailer line —
  * e.g. for a plain `add`/`submit` body, or a `deprecate` one (not an approval gate), neither of which
  * records an approval at all. A caller that wants such a commit's reason wants
  * {@link parseCommitReason} instead.
@@ -153,72 +167,155 @@ function parseApprovalMetadata(body) {
     const approverMatch = approverLine === null ? null : APPROVER_LINE_RE.exec(approverLine);
     if (!approverMatch)
         return null;
-    const [, approverName = '', approverEmail = '', approverRole = ''] = approverMatch;
-    return { approverName, approverEmail, approverRole, reason: parseCommitReason(body) };
+    // The three groups of APPROVER_LINE_RE are not optional: a match always defines all of them.
+    return {
+        approverName: approverMatch[1],
+        approverEmail: approverMatch[2],
+        approverRole: approverMatch[3],
+        reason: parseCommitReason(body),
+    };
 }
-const OPERATION_RE = /^wf\([^)]+\):\s*(add|submit|approve|reject|deprecate)\b/;
+// --- Full transition reconstruction (`memory history`, P1.10) --------------------------------
+/**
+ * The closed, declared list of Memory operation verbs a `wf({type}): {verb} …` subject may carry
+ * (`dl-079` (A), `spec-008-cli-grammar` §2, `spec-003` verb table): the five CLI verbs, the three
+ * workflow verbs of practice (`start`, `finalize`, `sync`), `amend` (`dl-108`), `park` (`dl-110`),
+ * and `assign` (`element.set_release`, approver ruling 2026-10-01). No other verb is a Memory
+ * operation. Ordered as `spec-008` §2 lists them (REQ-SYS-07).
+ */
+exports.MEMORY_OPERATIONS = [
+    'add',
+    'submit',
+    'approve',
+    'reject',
+    'deprecate',
+    'start',
+    'finalize',
+    'sync',
+    'amend',
+    'park',
+    'assign',
+];
+/**
+ * The `wf({scope})` scopes that record a change to **configuration**, not to a Memory element
+ * (`spec-008` §2): `wf(dna): set|add|update|remove …` (`dna` mutations), `wf(directive):
+ * create|assign|remove …` and `wf(workflow): create|remove …` (`spec-017` §7.7–7.8). Their verbs are
+ * not Memory operations even where the token coincides with one (`wf(dna): add <field>`), and their
+ * subjects carry no transition. No `memory.yaml` type may take one of these names: this list is the
+ * schema's {@link RESERVED_TYPE_NAMES} (`spec-001`, `bug-177`), which `MemoryYaml` refuses at load time,
+ * because a type that took one would have every commit of its own read as configuration.
+ */
+exports.CONFIGURATION_SCOPES = schema_1.RESERVED_TYPE_NAMES;
+/**
+ * A `wf({scope}): {token}` subject: the scope, and the verb token — everything after `: ` up to the
+ * first whitespace. Taking the whole token, rather than a declared verb followed by a word boundary,
+ * is what keeps a practised compound verb such as `start-fix` from reading as `start`.
+ */
+const WF_SUBJECT_RE = /^wf\(([^)]*)\):\s*(\S+)/;
+/**
+ * `assign`'s one canonical subject (`spec-008` §2): `wf({type}): assign release {version} to {id1},
+ * {id2}…`, with no bracket — the form the four practised `assign` commits already have. `assign` writes
+ * only the `release` field, so a subject that names anything else, or carries a bracket, is not one.
+ */
+const ASSIGN_SUBJECT_RE = /^wf\([^)]*\):\s*assign release \S+ to [^[\]\s][^[\]]*$/;
 /**
- * Read `historicalPath`'s frontmatter `status:` field as it existed at `sha` (`git show sha:path`),
- * without validating it against any type's Zod schema — this is a historical-snapshot read, not a
- * live document validation. Returns `null` if the path didn't exist at `sha`, has no frontmatter
- * block, or the frontmatter has no string `status` field.
+ * The Memory operation a commit subject declares, or `null` — for a subject outside the `wf()`
+ * grammar (`workflow: finalize …`, `agent: record …`, `docs(…): …`), a configuration scope
+ * ({@link CONFIGURATION_SCOPES}), or a verb outside {@link MEMORY_OPERATIONS}. The practised verbs the
+ * declared list leaves out (`start-fix`, `schedule`, `plan`, `enter-releasing`, `mark-released`,
+ * `deferred`, and the early verbless `wf(task): {id} [a → b]`), and an `assign` subject outside its
+ * canonical form, keep reading as `null`: the
+ * history is not rewritten, and the reader does not guess (`dl-035`, `dl-079`).
+ */
+function parseMemoryOperation(subject) {
+    const match = WF_SUBJECT_RE.exec(subject);
+    if (!match)
+        return null;
+    // Both groups always participate in a match of WF_SUBJECT_RE.
+    const scope = match[1];
+    const verb = match[2];
+    if (exports.CONFIGURATION_SCOPES.includes(scope))
+        return null;
+    if (verb === 'assign' && !ASSIGN_SUBJECT_RE.test(subject))
+        return null;
+    return exports.MEMORY_OPERATIONS.includes(verb) ? verb : null;
+}
+/**
+ * Parse a document's frontmatter `status:` field out of `raw` — its bytes at one revision, from
+ * {@link reconstructMemoryTransitions}' batched read — without validating it against any type's Zod
+ * schema: this is a historical-snapshot read, not a live document validation. Its `status` is `null`
+ * if the revision does not hold the path (`raw` is `null`), has no frontmatter block, or the
+ * frontmatter has no string `status` field. A frontmatter that does not parse is returned as
+ * `unreadable`, never thrown here (task-171, `bug-188`): one bad revision used to make the whole
+ * history unreadable.
  *
- * `historicalPath` is the path the element occupied **at that commit** — `MemoryHistoryEntry.path`,
- * produced by the same `--follow` walk that selected the commit — never the caller's current path.
- * Passing the current one was `bug-080-read-status-at-reads-the-current-path-at-pre-rename-commits`:
- * every commit older than a rename asked git for a path that tree does not contain, the read failed,
- * and the transition reported `null` states. `dl-080` — a read that gates an operation resolves at
- * `HEAD` — does not reach here: this read gates nothing, and its subject is by construction *other*
- * commits.
+ * The path read is the one the element occupied **at that revision** — `MemoryHistoryEntry.path` for
+ * the commit, `MemoryHistoryEntry.parentPath` for its first parent, both produced by the same
+ * `--follow` walk that selected the commit — never the caller's current path. Passing the current one
+ * was `bug-080-read-status-at-reads-the-current-path-at-pre-rename-commits`: every commit older than a
+ * rename asked git for a path that tree does not contain, the read failed, and the transition reported
+ * `null` states. `dl-080` — a read that gates an operation resolves at `HEAD` — does not reach here:
+ * this read gates nothing, and its subject is by construction *other* commits.
  *
- * The explicit `stdio` is `bug-071-read-status-at-leaks-git-stderr`, and it is not made redundant by
- * the paragraph above. `execFileSync` hands the child this process's own stderr by default, so on
- * the failure that remains legitimate — a commit where the document genuinely does not exist, before
- * its creation or after a deletion — git's `fatal: path ... does not exist in '<sha>'` went straight
- * to the operator's terminal while the command reported success. Capturing it into a pipe this
- * process owns (and discarding it, the failure being handled right here) is what keeps a genuine
- * `fatal:` distinguishable from a routine one — that line is how `bug-050`'s forged history
- * announced itself.
+ * The bytes come from `readRevisionPaths` (`src/storage`, one `git cat-file --batch` for the whole
+ * history, `task-278`), so git's stderr lands in a pipe this process owns rather than on the
+ * operator's terminal (`bug-071-read-status-at-leaks-git-stderr`). A revision that does not hold the
+ * path answers `null`: that is the legitimate case — a commit before the element's creation or after a
+ * deletion, the parent of a root commit — and git answers `missing` for it as for an object it cannot
+ * read, so this read cannot tell the two apart, and does not try (`bug-097`). What catches a broken
+ * walk is the walk itself: `getMemoryHistory` throws when its own `git log` fails, and
+ * `dropPreCreationAncestry` when the creation probe and the walk disagree (`task-089`). A batch that
+ * cannot run throws `StorageError` `E_GIT_READ_FAILED`.
  */
-function readStatusAt(root, sha, historicalPath) {
-    let raw;
+function parseStatus(raw, label) {
+    if (raw === null)
+        return { status: null };
+    const { frontmatter } = (0, storage_1.splitFrontmatter)(raw);
+    if (!frontmatter)
+        return { status: null };
+    let parsed;
     try {
-        raw = (0, child_process_1.execFileSync)('git', ['-C', root, 'show', `${sha}:${historicalPath}`], {
-            encoding: 'utf-8',
-            stdio: ['ignore', 'pipe', 'pipe'],
-        });
+        parsed = (0, validation_1.parseYaml)(frontmatter, label);
     }
-    catch {
-        return null;
+    catch (error) {
+        // task-171 (`bug-188`): the caller decides what an unreadable revision means — a history entry
+        // with no state, or (for the consistency check) a refusal. `parseYaml` throws only
+        // `ValidationError.yamlParse`.
+        return { status: null, unreadable: error };
     }
-    const { frontmatter } = (0, storage_1.splitFrontmatter)(raw);
-    if (!frontmatter)
-        return null;
-    const parsed = (0, validation_1.parseYaml)(frontmatter, `${historicalPath}@${sha}`);
     if (parsed === null || typeof parsed !== 'object')
-        return null;
+        return { status: null };
     const status = parsed.status;
-    return typeof status === 'string' ? status : null;
+    return { status: typeof status === 'string' ? status : null };
 }
 /**
  * Reconstruct every transition `relativePath` went through, oldest first, entirely from git log
- * (`getMemoryHistory`) plus a frontmatter read at each commit (`git show`) — no separate log file
- * (ADR-007). This is the derivation `wingfoil memory history` (P1.10) renders — `src/core`'s
+ * (`getMemoryHistory`) plus a frontmatter read at each commit and at its first parent (one `git
+ * cat-file --batch`) — no separate log file (ADR-007). This is the derivation `wingfoil memory history` (P1.10) renders — `src/core`'s
  * `memoryHistory` operation (`task-049-memory-history`) renames and string-formats these fields into
  * its own entry shape, deriving no further state of its own; this function is the reconstruction
  * itself, not that command's output formatting.
  *
  * **Renames are followed on both halves of the derivation**, which is the correction
  * `task-097-memory-history-reads-each-commit-at-its-historical-path` made. `getMemoryHistory` always
- * walked with `git log --follow`, so it *found* the commits preceding a rename; `readStatusAt` then
- * read each of them at the CURRENT path, which those trees do not contain, so all of them reported
- * `null` states (`bug-080-…`). The walk now carries the path each commit actually used
+ * walked with `git log --follow`, so it *found* the commits preceding a rename; the read then read
+ * each of them at the CURRENT path, which those trees do not contain, so all of them reported `null`
+ * states (`bug-080-…`). The walk now carries the path each commit actually used
  * (`MemoryHistoryEntry.path`, from `--follow --name-status`) and this function reads at that path —
  * the walk is the source of truth for "where was this file at this commit", and the read no longer
  * guesses.
  *
+ * **`fromState` is read in the commit's first parent** (`task-278`, `bug-308`), at the path that parent
+ * used (`MemoryHistoryEntry.parentPath`: a rename's source; `null` for a creation, which reads no
+ * parent), never taken from the walk's previous entry. The walk is ordered by commit date, not by
+ * ancestry: an `amend` on `main` made while the same element was started on a task branch is walked
+ * after the branch's `start`, so the previous entry made it read `in-progress → backlog` although its
+ * parent and its own revision both hold `backlog` — and the governance check failed it (`d818c0dd`).
+ * A merge commit, which `git log --follow` does not list in that shape, would be judged against its
+ * first parent too. On a linear history the two readings agree.
+ *
  * This was never the hypothetical the TSDoc here used to call "a documented edge case, not a live
- * defect": `docs/self/docs/04_memory/planning/v1/*` became `planning/rl-v1/*` in a single commit,
+ * defect": the Memory folder's `planning/v1/*` became `planning/rl-v1/*` in a single commit,
  * moving five `release` elements at once, precisely BECAUSE the `release` type's `path` pattern
  * interpolates a component — the release-line id — that itself changed. Any edit to a `path`
  * pattern, or to an id one interpolates, renames documents.
@@ -226,62 +323,135 @@ function readStatusAt(root, sha, historicalPath) {
  * `toState` is still `null` where a commit in the walk genuinely has no document to read — before
  * the element's creation, or after a deletion. That is a legitimate answer, distinct from the defect
  * above, and it no longer arrives with a `fatal:` on the operator's stderr (`bug-071`; see
- * {@link readStatusAt}).
+ * {@link parseStatus}).
  */
-function reconstructMemoryTransitions(root, relativePath) {
+function reconstructMemoryTransitions(root, relativePath, options = {}) {
+    const strict = options.strict === true;
     const history = (0, history_1.getMemoryHistory)(root, relativePath); // oldest first already
+    // Each commit is read twice — at itself, and at its first parent where the document was before it
+    // (`task-278`, `bug-308`) — all in one batch. A creation has no parent read: its `fromState` is null.
+    const requests = [];
+    for (const entry of history) {
+        requests.push({ rev: entry.sha, path: entry.path });
+        if (entry.parentPath !== null)
+            requests.push({ rev: `${entry.sha}^1`, path: entry.parentPath });
+    }
+    // One answer per request, in request order (`readRevisionPaths`).
+    const raws = (0, storage_1.readRevisionPaths)(root, requests);
     const transitions = [];
-    let previousState = null;
+    let next = 0;
     for (const entry of history) {
-        const toState = readStatusAt(root, entry.sha, entry.path);
-        const operationMatch = OPERATION_RE.exec(entry.subject);
+        const read = parseStatus(raws[next++], `${entry.path}@${entry.sha}`);
+        const before = entry.parentPath === null ? { status: null } : parseStatus(raws[next++], `${entry.parentPath}@${entry.sha}^1`);
+        // Strict: neither the commit's revision nor its parent's may go unread (task-171, `bug-188`).
+        const strictFailure = read.unreadable ?? before.unreadable;
+        if (strict && strictFailure !== undefined)
+            throw strictFailure;
+        const unreadable = read.unreadable?.issues[0]?.message ?? read.unreadable?.message;
         transitions.push({
             sha: entry.sha,
             authorName: entry.authorName,
             authorEmail: entry.authorEmail,
             date: entry.date,
             subject: entry.subject,
-            operation: operationMatch?.[1] ?? null,
-            fromState: previousState,
-            toState,
+            operation: parseMemoryOperation(entry.subject),
+            fromState: before.status,
+            toState: read.status,
             approval: parseApprovalMetadata(entry.body),
             reason: parseCommitReason(entry.body),
+            wingfoil: (0, commit_message_1.parseVersionTrailer)(entry.body),
+            ...(unreadable !== undefined ? { unreadable: unreadable.split('\n')[0].trim() } : {}),
         });
-        previousState = toState;
     }
     return transitions;
 }
-// Matches the `[old-state → new-state]` bracket CLAUDE.md §5.1 mandates on approve/reject/deprecate
-// subjects (the arrow is the U+2192 character used throughout CLAUDE.md/the memory templates).
-const BRACKET_RE = /\[([^[\]→]+?)\s*→\s*([^[\]]+?)\]\s*$/;
+// The trailing `[…]` bracket of a subject — the transition bracket `spec-008` §2 declares, written at
+// the end of the subject. Its content is split into states by {@link BRACKET_ARROW_RE}.
+const TRAILING_BRACKET_RE = /\[([^[\]]*)\]\s*$/;
+// The arrows a bracket's states are separated by: the canonical U+2192, which `./commit-message.ts`
+// writes, and the ASCII `->`, read as its equivalent because hand-written history carries it
+// (`bug-137`). Surrounding whitespace belongs to the arrow.
+const BRACKET_ARROW_RE = /\s*(?:→|->)\s*/;
+// A subject in the Memory commit grammar (`wf({type}): …`) that contains any bracket character — the
+// set of subjects whose trailing bracket must either parse as a transition or be reported as
+// unparseable.
+const WF_SUBJECT_WITH_BRACKET_RE = /^wf\([^)]*\):.*[[\]]/;
+/**
+ * The hops a subject's trailing bracket names, in order — one for `[a → b]`, more for a chain
+ * (`[a → b → c]`, `spec-008` §2: `sync` may chain) — or `null` when there is no trailing bracket, or
+ * it is not a transition: fewer than two states, or an empty one anywhere. Never an empty array.
+ * Exported for the governance check (`scripts/check-governance.cjs`, `task-167`), which judges a
+ * single hop against the machine where {@link verifyTransitionConsistency} judges only a chain's.
+ */
+function parseBracketHops(subject) {
+    const match = TRAILING_BRACKET_RE.exec(subject);
+    if (!match)
+        return null;
+    // The group always participates in a match of TRAILING_BRACKET_RE.
+    const states = match[1].split(BRACKET_ARROW_RE).map((state) => state.trim());
+    if (states.length < 2 || states.some((state) => state === ''))
+        return null;
+    return states.slice(1).map((to, index) => ({ from: states[index], to }));
+}
 /**
- * Cross-check, for every transition that carries a `[old → new]` bracket in its subject (`approve`/
- * `reject`/`deprecate`, per CLAUDE.md §5.1 — a plain `add`/`submit` subject has no bracket and is
- * skipped), that the bracket's declared states agree with the states independently derived from the
- * document's own frontmatter at that commit ({@link reconstructMemoryTransitions}). Returns `[]` when
- * every bracketed transition agrees — REQ-SEC-02/REQ-STATE-02's "no drift between the two views";
- * any entry in the returned array is a genuine inconsistency (e.g. a hand-edited commit message that
- * doesn't match what was actually written to disk).
+ * Cross-check, for every transition that carries a `[old → new]` bracket in its subject, that the
+ * bracket's declared states agree with the states independently derived from the document's own
+ * frontmatter at that commit ({@link reconstructMemoryTransitions}). A plain `add`/`submit` subject has
+ * no bracket and is skipped; so is every subject of a configuration scope
+ * ({@link CONFIGURATION_SCOPES}), which records no Memory transition.
+ *
+ * The bracket is read in either arrow form, `→` or `->`, with the same result, and may **chain**
+ * states (`spec-008` §2, `dl-079` (A)): `[a → b → c]` is declared from `a`, to `c` — the only two states
+ * the frontmatter can confirm — and, when `machine` (the element type's state machine, resolved by the
+ * caller from `memory.yaml`, REQ-STATE-08) is given, every hop of the chain must be an edge of it
+ * ({@link isMachineEdge}), or it is an {@link IllegalHop}. Without `machine` the hops cannot be judged
+ * and are not: the endpoints are still checked. A single-hop bracket's edge is not re-judged here — it
+ * is the write-time engine's to refuse (REQ-STATE-01), and `amend`'s `[s → s]` is a declared self-loop
+ * no machine contains.
+ *
+ * A `wf(…)` subject that carries a bracket readable in neither form is reported as an
+ * {@link UnparseableTransition} instead of being passed over; a subject outside the `wf(…)` grammar
+ * that merely quotes a bracket in prose is not. Returns `[]` when every bracketed transition was parsed
+ * and agrees — REQ-SEC-02/REQ-STATE-02's "no drift between the two views"; any entry is either a
+ * genuine inconsistency (e.g. a hand-edited commit message that doesn't match what was actually written
+ * to disk), a chain through a non-edge, or a bracket the check could not read.
  */
-function verifyTransitionConsistency(root, relativePath) {
-    const transitions = reconstructMemoryTransitions(root, relativePath);
-    const mismatches = [];
+function verifyTransitionConsistency(root, relativePath, machine) {
+    // Strict: a revision whose frontmatter does not parse is thrown, never passed (task-171, `bug-188`).
+    const transitions = reconstructMemoryTransitions(root, relativePath, { strict: true });
+    const findings = [];
     for (const transition of transitions) {
-        const match = BRACKET_RE.exec(transition.subject);
-        if (!match)
+        const { sha, subject } = transition;
+        const scope = WF_SUBJECT_RE.exec(subject)?.[1];
+        if (scope !== undefined && exports.CONFIGURATION_SCOPES.includes(scope))
+            continue;
+        const hops = parseBracketHops(subject);
+        if (!hops) {
+            if (WF_SUBJECT_WITH_BRACKET_RE.test(subject)) {
+                findings.push({ kind: 'unparseable', sha, subject });
+            }
             continue;
-        const [, declaredFromRaw = '', declaredToRaw = ''] = match;
-        const declaredFrom = declaredFromRaw.trim();
-        const declaredTo = declaredToRaw.trim();
+        }
+        // parseBracketHops never returns an empty array.
+        const declaredFrom = hops[0].from;
+        const declaredTo = hops[hops.length - 1].to;
         if (declaredFrom !== transition.fromState || declaredTo !== transition.toState) {
-            mismatches.push({
-                sha: transition.sha,
-                subject: transition.subject,
+            findings.push({
+                kind: 'mismatch',
+                sha,
+                subject,
                 declared: { from: declaredFrom, to: declaredTo },
                 derived: { from: transition.fromState, to: transition.toState },
             });
         }
+        if (machine && hops.length > 1) {
+            for (const hop of hops) {
+                if (!(0, state_machine_1.isMachineEdge)(machine, hop.from, hop.to)) {
+                    findings.push({ kind: 'illegal-hop', sha, subject, hop: { from: hop.from, to: hop.to } });
+                }
+            }
+        }
     }
-    return mismatches;
+    return findings;
 }
 //# sourceMappingURL=audit.js.map

package/dist/memory/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/memory/audit.ts"],"names":[],"mappings":";;AAkFA,gDAMC;AAaD,4CAYC;AA+CD,8CAEC;AAkBD,sDAOC;AA4GD,oEAuBC;AAyBD,kEAuBC;AA9WD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,iDAA6C;AAE7C,kCAA+C;AAC/C,8CAA0C;AAE1C,qDAA8E;AAC9E,uCAA6C;AAC7C,uCAA6C;AAC7C,wCAA8C;AAgB9C,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAChD,oGAAoG;AACpG,8FAA8F;AAC9F,6FAA6F;AAC7F,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,kBAAkB,CAAC,IAAY,EAAE,KAAa;IAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,IAAA,2BAAoB,EAAC,WAAW,EAAE,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,YAAY,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAAC,IAAY,EAAE,SAA4B;IACzE,MAAM,eAAe,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAA,0BAAgB,EAAC,IAAI,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;IAE1E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,EAAE,UAAU,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9F,GAAG;QACH,UAAU;QACV,WAAW;QACX,IAAI;QACJ,OAAO;QACP,KAAK,EAAE,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC;KACnD,CAAC,CAAC,CAAC;AACN,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAA,iCAAgB,EAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,qBAAqB,CAAC,IAAY;IAChD,MAAM,YAAY,GAAG,IAAA,yCAAwB,EAAC,IAAI,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzF,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,CAAC,EAAE,YAAY,GAAG,EAAE,EAAE,aAAa,GAAG,EAAE,EAAE,YAAY,GAAG,EAAE,CAAC,GAAG,aAAa,CAAC;IACnF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;AACxF,CAAC;AAOD,MAAM,YAAY,GAAG,yDAAyD,CAAC;AA6B/E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,GAAW,EAAE,cAAsB;IACrE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,cAAc,EAAE,CAAC,EAAE;YAC1E,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,GAAG,IAAA,0BAAgB,EAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,MAAM,GAAG,IAAA,sBAAS,EAAC,WAAW,EAAE,GAAG,cAAc,IAAI,GAAG,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE/D,MAAM,MAAM,GAAI,MAAkC,CAAC,MAAM,CAAC;IAC1D,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,4BAA4B,CAAC,IAAY,EAAE,YAAoB;IAC7E,MAAM,OAAO,GAAG,IAAA,0BAAgB,EAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,uBAAuB;IAE7E,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAG,cAAc,EAAE,CAAC,CAAC,CAAiC,IAAI,IAAI;YACvE,SAAS,EAAE,aAAa;YACxB,OAAO;YACP,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC;YAC3C,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC;SACtC,CAAC,CAAC;QACH,aAAa,GAAG,OAAO,CAAC;IAC1B,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAYD,oGAAoG;AACpG,+FAA+F;AAC/F,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAE1D;;;;;;;;GAQG;AACH,SAAgB,2BAA2B,CAAC,IAAY,EAAE,YAAoB;IAC5E,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACrE,MAAM,UAAU,GAA0B,EAAE,CAAC;IAE7C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,eAAe,GAAG,EAAE,EAAE,aAAa,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QAC3D,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;QAExC,IAAI,YAAY,KAAK,UAAU,CAAC,SAAS,IAAI,UAAU,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/E,UAAU,CAAC,IAAI,CAAC;gBACd,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE;gBAChD,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,UAAU,CAAC,OAAO,EAAE;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/memory/audit.ts"],"names":[],"mappings":";;;AAuFA,gDAKC;AAcD,4CAiBC;AA+CD,8CAEC;AAkBD,sDAYC;AA8DD,oDASC;AAkJD,oEA2CC;AAuED,4CAOC;AAyBD,kEA6CC;AAlmBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,kCAA+C;AAC/C,8CAAmF;AAEnF,qDAAmG;AACnG,uCAA6C;AAC7C,qCAAkE;AAClE,mDAAgD;AAChD,uCAA6C;AAC7C,wCAAoF;AAgBpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,SAAgB,kBAAkB,CAAC,IAAY,EAAE,KAAa;IAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,IAAA,2BAAoB,EAAC,WAAW,EAAE,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAA,mCAAsB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAE3D;;;;;;;;;GASG;AACH,SAAgB,gBAAgB,CAAC,IAAY,EAAE,SAA4B;IACzE,MAAM,eAAe,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAA,0BAAgB,EAAC,IAAI,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;IAE1E,gGAAgG;IAChG,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAC/B,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,CAAC,CAAE;YACf,UAAU;YACV,WAAW;YACX,IAAI,EAAE,MAAM,CAAC,CAAC,CAAE;YAChB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAE;YACnB,KAAK,EAAE,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC;SACnD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAA,iCAAgB,EAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,qBAAqB,CAAC,IAAY;IAChD,MAAM,YAAY,GAAG,IAAA,yCAAwB,EAAC,IAAI,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzF,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEhC,6FAA6F;IAC7F,OAAO;QACL,YAAY,EAAE,aAAa,CAAC,CAAC,CAAE;QAC/B,aAAa,EAAE,aAAa,CAAC,CAAC,CAAE;QAChC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAE;QAC/B,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,gGAAgG;AAEhG;;;;;;GAMG;AACU,QAAA,iBAAiB,GAAG;IAC/B,KAAK;IACL,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,WAAW;IACX,OAAO;IACP,UAAU;IACV,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;CACA,CAAC;AAKX;;;;;;;;GAQG;AACU,QAAA,oBAAoB,GAAsB,4BAAmB,CAAC;AAE3E;;;;GAIG;AACH,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,wDAAwD,CAAC;AAEnF;;;;;;;;GAQG;AACH,SAAgB,oBAAoB,CAAC,OAAe;IAClD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,8DAA8D;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACvB,IAAI,4BAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,OAAQ,yBAAuC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAwB,CAAC,CAAC,CAAC,IAAI,CAAC;AACpG,CAAC;AA2CD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAS,WAAW,CAAC,GAAkB,EAAE,KAAa;IACpD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAE1C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAA,0BAAgB,EAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,sBAAS,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+FAA+F;QAC/F,mFAAmF;QACnF,+BAA+B;QAC/B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAwB,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAE3E,MAAM,MAAM,GAAI,MAAkC,CAAC,MAAM,CAAC;IAC1D,OAAO,EAAE,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChE,CAAC;AAoBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,SAAgB,4BAA4B,CAC1C,IAAY,EACZ,YAAoB,EACpB,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,IAAA,0BAAgB,EAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,uBAAuB;IAE7E,kGAAkG;IAClG,sGAAsG;IACtG,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,kEAAkE;IAClE,MAAM,IAAI,GAAG,IAAA,2BAAiB,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE/C,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAkB,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAkB,EAAE,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/I,8FAA8F;QAC9F,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;QAC3D,IAAI,MAAM,IAAI,aAAa,KAAK,SAAS;YAAE,MAAM,aAAa,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;QACnF,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9C,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,OAAO,EAAE,IAAI,CAAC,MAAM;YACpB,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC;YAC3C,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC;YACrC,QAAQ,EAAE,IAAA,oCAAmB,EAAC,KAAK,CAAC,IAAI,CAAC;YACzC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AA4CD,sGAAsG;AACtG,wFAAwF;AACxF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEhD,oGAAoG;AACpG,6FAA6F;AAC7F,4DAA4D;AAC5D,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAE1C,qGAAqG;AACrG,6FAA6F;AAC7F,eAAe;AACf,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AAQ1D;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,mEAAmE;IACnE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,2BAA2B,CACzC,IAAY,EACZ,YAAoB,EACpB,OAAsB;IAEtB,qGAAqG;IACrG,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;QACpC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,4BAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAE1E,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,SAAS;QACX,CAAC;QAED,iDAAiD;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC;QAC7C,IAAI,YAAY,KAAK,UAAU,CAAC,SAAS,IAAI,UAAU,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,UAAU;gBAChB,GAAG;gBACH,OAAO;gBACP,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE;gBAChD,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,UAAU,CAAC,OAAO,EAAE;aAChE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAA,6BAAa,EAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}