wyrm-mcp 6.18.0 → 6.18.1

package/dist/tool-manifest.json

@@ -1,6 +1,6 @@
 {
   "contract": "wyrm-cloud-memory-v1",
-  "version": "6.18.0",
+  "version": "6.18.1",
   "tools": [
     {
       "name": "wyrm_recall",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "wyrm-mcp",
-  "version": "6.18.0",
-  "description": "Wyrm — the memory layer that makes AI assistants remember, learn from failures, execute long-running goals, and federate across every session. MCP server that surfaces a curated working set of tools by default (the full surface is opt-in via WYRM_PROFILE=full), spanning persistent memory, counter-pattern blocking, OODA agent loop, knowledge graph, and cross-project memory. Works with Claude / Copilot / Cursor / Windsurf / Codex.",
+  "version": "6.18.1",
+  "description": "Local-first persistent memory for AI agents over MCP. Ground truths, negative learning (recorded failures block repeats), decision causality, hybrid recall, live memory streams — a structured SQLite memory on your machine, no cloud or LLM required. Claude / Copilot / Cursor / Windsurf / Codex.",
   "type": "module",
   "main": "dist/index.js",
   "bin": {
@@ -66,7 +66,13 @@
     "federation",
     "buddy-protocol",
     "skills",
-    "ghost-protocol"
+    "ghost-protocol",
+    "local-first",
+    "ai-memory",
+    "agent-memory",
+    "negative-learning",
+    "multi-agent",
+    "agent-fleet"
   ],
   "author": "Ghost Protocol (Pvt) Ltd <ryan@ghosts.lk>",
   "license": "AGPL-3.0-or-later",

package/dist/attribution.d.ts

@@ -1,51 +0,0 @@
-/**
- * Wyrm attribution read helpers (v7 F2, T008).
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- *
- * Migration 20 adds nullable `agent_id`/`run_id` attribution columns to 9
- * tables. Every row written before v7 — and any v7 row written outside a fleet
- * run — carries NULL attribution. Article VI: a v6.x DB must open under v7
- * with 100% of its rows, and that history must stay legibly attributed, so at
- * every READ SITE that surfaces attribution, NULL reads as actor='legacy'.
- *
- * Precedence when rendering "who did this" (the same order is documented in
- * migration 20 next to the events.agent_id column):
- *   1. agent_id     — machine identity (v7 fleet writes)
- *   2. actor        — display identity (the existing 6.x column on
- *                     events/audit_log; it is EXTENDED, never replaced)
- *   3. LEGACY_ACTOR — 'legacy' (neither set: a pre-v7 row)
- *
- * Wire paths (eventsForPush, ingestRemoteEvent, replication) intentionally do
- * NOT coalesce: NULL stays NULL in storage and on the wire so replication
- * round-trips are byte-faithful. 'legacy' is a READ-TIME presentation value
- * only — it is never written back to the database.
- */
-/** What NULL attribution reads as at attribution-surfacing read sites. */
-export declare const LEGACY_ACTOR = "legacy";
-/**
- * Read a display actor from a nullable actor column.
- * NULL/undefined/blank -> 'legacy'; anything else passes through trimmed.
- */
-export declare function readActor(actor?: string | null): string;
-/** The attribution fields migration 20 adds (all nullable). */
-export interface AttributedRow {
-    agent_id?: string | null;
-    run_id?: string | null;
-    /** Existing display-identity column on events/audit_log (6.x). */
-    actor?: string | null;
-}
-export interface ResolvedAttribution {
-    /** Display identity, never null: agent_id > actor > 'legacy'. */
-    actor: string;
-    agent_id: string | null;
-    run_id: string | null;
-}
-/**
- * Resolve the full attribution for one row using the documented precedence.
- * Use this at any read site that surfaces who/which-run produced a row
- * (failure_check verdicts, wyrm_stats view=failures, event displays).
- */
-export declare function resolveAttribution(row: AttributedRow): ResolvedAttribution;
-//# sourceMappingURL=attribution.d.ts.map

package/dist/attribution.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attribution.d.ts","sourceRoot":"","sources":["../src/attribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,YAAY,WAAW,CAAC;AAErC;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAGvD;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,mBAAmB,CAQ1E"}

package/dist/attribution.js

@@ -1,49 +0,0 @@
-/**
- * Wyrm attribution read helpers (v7 F2, T008).
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- *
- * Migration 20 adds nullable `agent_id`/`run_id` attribution columns to 9
- * tables. Every row written before v7 — and any v7 row written outside a fleet
- * run — carries NULL attribution. Article VI: a v6.x DB must open under v7
- * with 100% of its rows, and that history must stay legibly attributed, so at
- * every READ SITE that surfaces attribution, NULL reads as actor='legacy'.
- *
- * Precedence when rendering "who did this" (the same order is documented in
- * migration 20 next to the events.agent_id column):
- *   1. agent_id     — machine identity (v7 fleet writes)
- *   2. actor        — display identity (the existing 6.x column on
- *                     events/audit_log; it is EXTENDED, never replaced)
- *   3. LEGACY_ACTOR — 'legacy' (neither set: a pre-v7 row)
- *
- * Wire paths (eventsForPush, ingestRemoteEvent, replication) intentionally do
- * NOT coalesce: NULL stays NULL in storage and on the wire so replication
- * round-trips are byte-faithful. 'legacy' is a READ-TIME presentation value
- * only — it is never written back to the database.
- */
-/** What NULL attribution reads as at attribution-surfacing read sites. */
-export const LEGACY_ACTOR = 'legacy';
-/**
- * Read a display actor from a nullable actor column.
- * NULL/undefined/blank -> 'legacy'; anything else passes through trimmed.
- */
-export function readActor(actor) {
-    const a = typeof actor === 'string' ? actor.trim() : '';
-    return a !== '' ? a : LEGACY_ACTOR;
-}
-/**
- * Resolve the full attribution for one row using the documented precedence.
- * Use this at any read site that surfaces who/which-run produced a row
- * (failure_check verdicts, wyrm_stats view=failures, event displays).
- */
-export function resolveAttribution(row) {
-    const agentId = row.agent_id ?? null;
-    const runId = row.run_id ?? null;
-    return {
-        actor: agentId ?? readActor(row.actor),
-        agent_id: agentId,
-        run_id: runId,
-    };
-}
-//# sourceMappingURL=attribution.js.map

package/dist/attribution.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"attribution.js","sourceRoot":"","sources":["../src/attribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAErC;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;AACrC,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAkB;IACnD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;IACjC,OAAO;QACL,KAAK,EAAE,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QACtC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC"}

package/dist/daemon-write-endpoint.d.ts

@@ -1,112 +0,0 @@
-/**
- * Daemon-as-writer endpoint logic (v7 F2, T012) — the `POST /write` op surface.
- *
- * When a client process runs with WYRM_DAEMON_WRITES=1 (src/daemon-writer.ts),
- * its CANONICAL WRITES are routed over loopback HTTP to the running daemon
- * (http-fast), which executes them here against ITS database connection —
- * funneling a fleet's writes through one process instead of N contending ones.
- * Reads always stay local to the client.
- *
- * Extracted from http-fast.ts in the readonly-gate.ts style: DB-parameterized
- * and side-effect-free at module load, so the op surface is unit-testable
- * without booting the HTTP server.
- *
- * Article VII — minimal request surface, validated at the boundary:
- * - ONE endpoint, a CLOSED op allowlist (DAEMON_WRITE_OPS). Unknown ops are
- *   rejected; there is deliberately no generic "run this SQL/method" escape.
- * - Each op calls the SAME domain method the client's direct path would call
- *   (db.insertData / failures.record / truths.set / artifacts.add /
- *   db.addQuest), so row shapes are identical in both modes.
- * - `project_id` is a plain integer id: client and daemon share the same
- *   database file, so ids are stable across the loopback hop. Project-path
- *   resolution (a read) happens client-side.
- * - Enum-ish fields (scope/severity/kind/...) are NOT re-validated here beyond
- *   type checks: the domain methods + the schema CHECK constraints are the
- *   single source of truth for value validation in BOTH modes — re-implementing
- *   the lists here would let the two paths drift. A CHECK/FK violation comes
- *   back to the client as the rejected `{e}` shape (see handleDaemonWrite's
- *   error mapping), never a generic 500 the client would have to treat as
- *   commit-state-unknown.
- *
- * Attribution (v7 F2 review fix): the caller's FULL envelope rides in the
- * request body as `actor: {agent_id, run_id}` — the `Wyrm-Actor` header
- * grammar (`agent_id[;run_id]`) cannot express a run-only envelope, so a
- * header-only hop silently dropped run attribution and let the DAEMON's own
- * env (http-fast's env-level resolution) stamp the caller's row — flipping
- * the T014 quarantine tier (a run-quarantined failure could land
- * project-wide, or an unattributed write could be quarantined to an
- * unrelated run). When the body carries `actor`, it is AUTHORITATIVE: the
- * write runs inside that exact envelope ('param' level), and both-null is an
- * EXPLICIT legacy envelope (columns stay NULL) — the daemon's env can never
- * bleed in. Bodies without `actor` (pre-fix clients) keep the ambient
- * header/env semantics.
- *
- * Idempotency (v7 F2 review fix): the client mints a ULID `write_id` per
- * logical write. Committed write_ids are remembered in an in-memory ledger
- * with TIME-BASED retention (DEDUP_TTL_MS — sized to the realistic caller
- * retry horizon: the instructed retry round-trips through an LLM agent whose
- * next turn is seconds to minutes away, NOT a protocol-bounded window); a
- * duplicate write_id inside the horizon REPLAYS the committed result instead
- * of re-executing — so the client's timeout re-send / instructed retry cannot
- * land a second row (the at-least-once duplicate the adversarial review
- * confirmed). The count cap (DEDUP_CAP) is a memory backstop only — under a
- * sustained fleet burst it, not time, may evict first. Documented residual
- * at-least-once windows: a daemon RESTART loses the ledger, and a retry
- * arriving past the retention horizon (TTL or backstop eviction) re-executes
- * — a VISIBLE fresh execution, never a silent stale replay.
- *
- * Privacy: ops write through the normal domain methods, so the Live Memory
- * surface is unchanged — failure events stay reference-only (is_shared=0).
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- */
-import type { WyrmDB } from './database.js';
-import type { MemoryArtifacts } from './memory-artifacts.js';
-import type { GroundTruths } from './intelligence.js';
-import type { FailurePatterns } from './failure-patterns.js';
-/**
- * The closed op allowlist — the four canonical write paths of spec FR-1
- * (data-lake insert, failure_record, truth_set, capture), where `capture`
- * decomposes into the three writes wyrm_capture can perform (quest_add /
- * truth_set / artifact_add). Anything else stays on the client's direct path.
- */
-export declare const DAEMON_WRITE_OPS: readonly ["data_insert", "failure_record", "truth_set", "artifact_add", "quest_add"];
-export type DaemonWriteOp = (typeof DAEMON_WRITE_OPS)[number];
-export declare function isDaemonWriteOp(value: unknown): value is DaemonWriteOp;
-export interface DaemonWriteDeps {
-    db: WyrmDB;
-    artifacts: MemoryArtifacts;
-    truths: GroundTruths;
-    failures: FailurePatterns;
-}
-export type DaemonWriteResult = {
-    ok: true;
-    op: DaemonWriteOp;
-    row: unknown;
-} | {
-    e: string;
-};
-export declare const DEDUP_TTL_MS: number;
-/** Test hook: clear the idempotency ledger between cases. */
-export declare function _resetDaemonWriteDedupForTests(): void;
-/** Test hook: age every ledger entry by `ms` (drives TTL eviction without a clock). */
-export declare function _ageDaemonWriteDedupForTests(ms: number): void;
-/**
- * Execute one allowlisted write op. Returns the written row on success or a
- * compact `{ e }` error (the house wire format for http-fast routes).
- *
- * Error mapping by what the throw PROVES about the commit:
- * - SQLITE_CONSTRAINT family (CHECK/FK/UNIQUE/NOT NULL) → the rejected `{e}`
- *   shape carrying the real constraint message. Every op is a single
- *   statement or one IMMEDIATE transaction, so a constraint throw proves the
- *   rollback — the client safely fails direct and the local path surfaces
- *   the same deterministic error to the caller. Without this, a generic 500
- *   reads as commit-state-unknown and the same inputs re-violate forever.
- * - Everything else (SQLITE_BUSY → http-fast's structured 503; SQLITE_FULL,
- *   a post-commit throw, ...) propagates — the dispatcher catch owns
- *   transport mapping, and a non-constraint throw does NOT prove no commit,
- *   so it must never claim the rejected shape.
- */
-export declare function handleDaemonWrite(deps: DaemonWriteDeps, args: Record<string, unknown>): DaemonWriteResult;
-//# sourceMappingURL=daemon-write-endpoint.d.ts.map

package/dist/daemon-write-endpoint.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-write-endpoint.d.ts","sourceRoot":"","sources":["../src/daemon-write-endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,uBAAuB,CAAC;AACjF,OAAO,KAAK,EAAE,YAAY,EAAmB,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAiC,MAAM,uBAAuB,CAAC;AAS5F;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,sFAMnB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAEtE;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,eAAe,CAAC;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAsB9F,eAAO,MAAM,YAAY,QAAc,CAAC;AAIxC,6DAA6D;AAC7D,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED,uFAAuF;AACvF,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAE7D;AAyBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,iBAAiB,CAqDzG"}

package/dist/daemon-write-endpoint.js

@@ -1,290 +0,0 @@
-/**
- * Daemon-as-writer endpoint logic (v7 F2, T012) — the `POST /write` op surface.
- *
- * When a client process runs with WYRM_DAEMON_WRITES=1 (src/daemon-writer.ts),
- * its CANONICAL WRITES are routed over loopback HTTP to the running daemon
- * (http-fast), which executes them here against ITS database connection —
- * funneling a fleet's writes through one process instead of N contending ones.
- * Reads always stay local to the client.
- *
- * Extracted from http-fast.ts in the readonly-gate.ts style: DB-parameterized
- * and side-effect-free at module load, so the op surface is unit-testable
- * without booting the HTTP server.
- *
- * Article VII — minimal request surface, validated at the boundary:
- * - ONE endpoint, a CLOSED op allowlist (DAEMON_WRITE_OPS). Unknown ops are
- *   rejected; there is deliberately no generic "run this SQL/method" escape.
- * - Each op calls the SAME domain method the client's direct path would call
- *   (db.insertData / failures.record / truths.set / artifacts.add /
- *   db.addQuest), so row shapes are identical in both modes.
- * - `project_id` is a plain integer id: client and daemon share the same
- *   database file, so ids are stable across the loopback hop. Project-path
- *   resolution (a read) happens client-side.
- * - Enum-ish fields (scope/severity/kind/...) are NOT re-validated here beyond
- *   type checks: the domain methods + the schema CHECK constraints are the
- *   single source of truth for value validation in BOTH modes — re-implementing
- *   the lists here would let the two paths drift. A CHECK/FK violation comes
- *   back to the client as the rejected `{e}` shape (see handleDaemonWrite's
- *   error mapping), never a generic 500 the client would have to treat as
- *   commit-state-unknown.
- *
- * Attribution (v7 F2 review fix): the caller's FULL envelope rides in the
- * request body as `actor: {agent_id, run_id}` — the `Wyrm-Actor` header
- * grammar (`agent_id[;run_id]`) cannot express a run-only envelope, so a
- * header-only hop silently dropped run attribution and let the DAEMON's own
- * env (http-fast's env-level resolution) stamp the caller's row — flipping
- * the T014 quarantine tier (a run-quarantined failure could land
- * project-wide, or an unattributed write could be quarantined to an
- * unrelated run). When the body carries `actor`, it is AUTHORITATIVE: the
- * write runs inside that exact envelope ('param' level), and both-null is an
- * EXPLICIT legacy envelope (columns stay NULL) — the daemon's env can never
- * bleed in. Bodies without `actor` (pre-fix clients) keep the ambient
- * header/env semantics.
- *
- * Idempotency (v7 F2 review fix): the client mints a ULID `write_id` per
- * logical write. Committed write_ids are remembered in an in-memory ledger
- * with TIME-BASED retention (DEDUP_TTL_MS — sized to the realistic caller
- * retry horizon: the instructed retry round-trips through an LLM agent whose
- * next turn is seconds to minutes away, NOT a protocol-bounded window); a
- * duplicate write_id inside the horizon REPLAYS the committed result instead
- * of re-executing — so the client's timeout re-send / instructed retry cannot
- * land a second row (the at-least-once duplicate the adversarial review
- * confirmed). The count cap (DEDUP_CAP) is a memory backstop only — under a
- * sustained fleet burst it, not time, may evict first. Documented residual
- * at-least-once windows: a daemon RESTART loses the ledger, and a retry
- * arriving past the retention horizon (TTL or backstop eviction) re-executes
- * — a VISIBLE fresh execution, never a silent stale replay.
- *
- * Privacy: ops write through the normal domain methods, so the Live Memory
- * surface is unchanged — failure events stay reference-only (is_shared=0).
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- */
-import { isSqliteConstraintError } from './sqlite-busy.js';
-import { LEGACY_ENVELOPE, runWithActor, sanitizeActorId, } from './handlers/boundary.js';
-/**
- * The closed op allowlist — the four canonical write paths of spec FR-1
- * (data-lake insert, failure_record, truth_set, capture), where `capture`
- * decomposes into the three writes wyrm_capture can perform (quest_add /
- * truth_set / artifact_add). Anything else stays on the client's direct path.
- */
-export const DAEMON_WRITE_OPS = [
-    'data_insert',
-    'failure_record',
-    'truth_set',
-    'artifact_add',
-    'quest_add',
-];
-export function isDaemonWriteOp(value) {
-    return typeof value === 'string' && DAEMON_WRITE_OPS.includes(value);
-}
-/** Boundary check: a finite positive integer id (project ids are rowids). */
-function asProjectId(value) {
-    return typeof value === 'number' && Number.isInteger(value) && value > 0 ? value : null;
-}
-function asString(value) {
-    return typeof value === 'string' && value.length > 0 ? value : null;
-}
-// ── idempotency ledger (v7 F2 review fix) ───────────────────────────────────
-// write_id → the committed result, replayed on duplicate delivery. Retention
-// is TIME-based: the caller-level instructed retry round-trips through an LLM
-// agent (seconds to minutes — retry_after_ms is advice, not a bound), so a
-// count-FIFO sized to "seconds-scale" gets evicted from under a live retry by
-// any >cap fleet burst in that gap — re-executing a committed write_id, a
-// duplicate with no daemon crash. Entries live DEDUP_TTL_MS; expired entries
-// are swept on insert (insertion order is commit order, so they cluster at
-// the front). DEDUP_CAP remains only as a memory backstop ({ulid, small row}
-// entries are tiny). Only SUCCESSFUL (committed) results are remembered — a
-// rejected/thrown write left nothing behind, so re-executing it is correct.
-export const DEDUP_TTL_MS = 10 * 60_000;
-const DEDUP_CAP = 4096;
-const committedWrites = new Map();
-/** Test hook: clear the idempotency ledger between cases. */
-export function _resetDaemonWriteDedupForTests() {
-    committedWrites.clear();
-}
-/** Test hook: age every ledger entry by `ms` (drives TTL eviction without a clock). */
-export function _ageDaemonWriteDedupForTests(ms) {
-    for (const entry of committedWrites.values())
-        entry.committedAt -= ms;
-}
-function rememberCommitted(writeId, result) {
-    const now = Date.now();
-    // Age sweep first: retention is the TTL; the count cap below is only the
-    // memory backstop. committedAt is non-decreasing in insertion order, so the
-    // sweep stops at the first fresh entry.
-    for (const [id, entry] of committedWrites) {
-        if (now - entry.committedAt < DEDUP_TTL_MS)
-            break;
-        committedWrites.delete(id);
-    }
-    if (!committedWrites.has(writeId) && committedWrites.size >= DEDUP_CAP) {
-        const oldest = committedWrites.keys().next().value;
-        if (oldest !== undefined)
-            committedWrites.delete(oldest);
-    }
-    committedWrites.set(writeId, { result, committedAt: now });
-}
-/** Boundary check for the client-minted idempotency key (a 26-char ULID; the
- * bound mirrors sanitizeActorId's 64-char ceiling). Absent/invalid → no dedup
- * (the pre-fix client shape). */
-function asWriteId(value) {
-    return typeof value === 'string' && value.length > 0 && value.length <= 64 ? value : null;
-}
-/**
- * Execute one allowlisted write op. Returns the written row on success or a
- * compact `{ e }` error (the house wire format for http-fast routes).
- *
- * Error mapping by what the throw PROVES about the commit:
- * - SQLITE_CONSTRAINT family (CHECK/FK/UNIQUE/NOT NULL) → the rejected `{e}`
- *   shape carrying the real constraint message. Every op is a single
- *   statement or one IMMEDIATE transaction, so a constraint throw proves the
- *   rollback — the client safely fails direct and the local path surfaces
- *   the same deterministic error to the caller. Without this, a generic 500
- *   reads as commit-state-unknown and the same inputs re-violate forever.
- * - Everything else (SQLITE_BUSY → http-fast's structured 503; SQLITE_FULL,
- *   a post-commit throw, ...) propagates — the dispatcher catch owns
- *   transport mapping, and a non-constraint throw does NOT prove no commit,
- *   so it must never claim the rejected shape.
- */
-export function handleDaemonWrite(deps, args) {
-    const op = args.op;
-    if (!isDaemonWriteOp(op))
-        return { e: 'unknown op' };
-    const input = (args.input ?? {});
-    const projectId = asProjectId(args.project_id);
-    // Idempotent replay: this write_id already committed — the response was
-    // lost in flight. Hand back the SAME row; never execute twice. No age check
-    // on read: an old committed result is still the truth (the TTL governs
-    // memory retention, not correctness).
-    const writeId = asWriteId(args.write_id);
-    if (writeId !== null) {
-        const replay = committedWrites.get(writeId);
-        if (replay !== undefined)
-            return replay.result;
-    }
-    // Body-supplied attribution is authoritative for the forwarded write (see
-    // the module header): sanitize at the boundary, run the op inside that
-    // exact envelope. Both-null → the EXPLICIT legacy envelope (NULL columns) —
-    // never the daemon's own env. No `actor` field at all → pre-fix client:
-    // keep the ambient (header/env) semantics unchanged.
-    let result;
-    try {
-        const actorRaw = args.actor;
-        if (actorRaw !== undefined && actorRaw !== null && typeof actorRaw === 'object') {
-            const a = actorRaw;
-            const agent = sanitizeActorId(a.agent_id);
-            const run = sanitizeActorId(a.run_id);
-            const envelope = agent === null && run === null
-                ? LEGACY_ENVELOPE
-                : { agent_id: agent, run_id: run, source: 'param' };
-            result = runWithActor(envelope, () => executeDaemonOp(deps, op, projectId, args.project_id, input));
-        }
-        else {
-            result = executeDaemonOp(deps, op, projectId, args.project_id, input);
-        }
-    }
-    catch (err) {
-        // Deterministic domain rejection — provably rolled back (see the function
-        // doc). Carry the real message so the caller's direct-path retry of the
-        // same inputs reproduces a NAMED error, not a mystery 500.
-        if (isSqliteConstraintError(err)) {
-            return { e: err instanceof Error ? err.message : String(err) };
-        }
-        // BUSY (the structured 503 contract) and anything that might have
-        // committed stay on the throw path — never claim "no commit" for them.
-        throw err;
-    }
-    // Remember only COMMITTED outcomes (post-commit by construction: the domain
-    // method returned synchronously above).
-    if (writeId !== null && 'ok' in result && result.ok === true) {
-        rememberCommitted(writeId, result);
-    }
-    return result;
-}
-function executeDaemonOp(deps, op, projectId, rawProjectId, input) {
-    switch (op) {
-        case 'data_insert': {
-            if (projectId === null)
-                return { e: 'project_id required' };
-            const category = asString(input.category);
-            const key = asString(input.key);
-            const value = asString(input.value);
-            if (!category || !key || !value)
-                return { e: 'category, key, value required' };
-            // value arrives client-prepared (sanitized + maybeEncrypt'ed): the
-            // encryption key stays in the CLIENT process (Article VII — the daemon
-            // never needs WYRM_ENCRYPTION_KEY to serve writes).
-            const row = deps.db.insertData(projectId, category, key, value, input.metadata);
-            return { ok: true, op, row };
-        }
-        case 'failure_record': {
-            // project_id may be null here: global (cross-project) failures are legal.
-            if (rawProjectId != null && projectId === null)
-                return { e: 'project_id must be an integer' };
-            const target = asString(input.target);
-            const description = asString(input.description);
-            const scope = asString(input.scope);
-            if (!scope || !target || !description)
-                return { e: 'scope, target, description required' };
-            const row = deps.failures.record({
-                project_id: projectId,
-                scope: scope,
-                target,
-                description,
-                why_failed: typeof input.why_failed === 'string' ? input.why_failed : undefined,
-                severity: typeof input.severity === 'string' ? input.severity : undefined,
-            });
-            return { ok: true, op, row };
-        }
-        case 'truth_set': {
-            if (projectId === null)
-                return { e: 'project_id required' };
-            const category = asString(input.category);
-            const key = asString(input.key);
-            const value = asString(input.value);
-            if (!category || !key || !value)
-                return { e: 'category, key, value required' };
-            const row = deps.truths.set(projectId, {
-                category, key, value,
-                rationale: typeof input.rationale === 'string' ? input.rationale : undefined,
-                source: typeof input.source === 'string' ? input.source : undefined,
-                confidence: typeof input.confidence === 'number' ? input.confidence : undefined,
-                ttl_days: typeof input.ttl_days === 'number' ? input.ttl_days : undefined,
-            });
-            return { ok: true, op, row };
-        }
-        case 'artifact_add': {
-            if (projectId === null)
-                return { e: 'project_id required' };
-            const kind = asString(input.kind);
-            const problem = asString(input.problem);
-            if (!kind || !problem)
-                return { e: 'kind, problem required' };
-            const row = deps.artifacts.add(projectId, {
-                kind, problem,
-                constraints: typeof input.constraints === 'string' ? input.constraints : undefined,
-                validatedFix: typeof input.validatedFix === 'string' ? input.validatedFix : undefined,
-                whyItWorked: typeof input.whyItWorked === 'string' ? input.whyItWorked : undefined,
-                outcome: typeof input.outcome === 'string' ? input.outcome : undefined,
-                sourceSessionId: typeof input.sourceSessionId === 'number' ? input.sourceSessionId : undefined,
-                tags: Array.isArray(input.tags) ? input.tags.filter((t) => typeof t === 'string') : undefined,
-                confidence: typeof input.confidence === 'number' ? input.confidence : undefined,
-                createdBy: typeof input.createdBy === 'string' ? input.createdBy : undefined,
-                needsReview: typeof input.needsReview === 'number' ? input.needsReview : undefined,
-            });
-            return { ok: true, op, row };
-        }
-        case 'quest_add': {
-            if (projectId === null)
-                return { e: 'project_id required' };
-            const title = asString(input.title);
-            if (!title)
-                return { e: 'title required' };
-            const row = deps.db.addQuest(projectId, title, typeof input.description === 'string' ? input.description : undefined, (typeof input.priority === 'string' ? input.priority : 'medium'), typeof input.tags === 'string' ? input.tags : undefined);
-            return { ok: true, op, row };
-        }
-    }
-}
-//# sourceMappingURL=daemon-write-endpoint.js.map

package/dist/daemon-write-endpoint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-write-endpoint.js","sourceRoot":"","sources":["../src/daemon-write-endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAMH,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,YAAY,EACZ,eAAe,GAEhB,MAAM,wBAAwB,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,aAAa;IACb,gBAAgB;IAChB,WAAW;IACX,cAAc;IACd,WAAW;CACH,CAAC;AAIX,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,gBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AAWD,6EAA6E;AAC7E,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,CAAC;AACxC,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,eAAe,GAAG,IAAI,GAAG,EAA8D,CAAC;AAE9F,6DAA6D;AAC7D,MAAM,UAAU,8BAA8B;IAC5C,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,4BAA4B,CAAC,EAAU;IACrD,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAAyB;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,yEAAyE;IACzE,4EAA4E;IAC5E,wCAAwC;IACxC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;QAC1C,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,GAAG,YAAY;YAAE,MAAM;QAClD,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IACD,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;iCAEiC;AACjC,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5F,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAqB,EAAE,IAA6B;IACpF,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IAC5D,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE/C,wEAAwE;IACxE,4EAA4E;IAC5E,uEAAuE;IACvE,sCAAsC;IACtC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACjD,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,wEAAwE;IACxE,qDAAqD;IACrD,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChF,MAAM,CAAC,GAAG,QAAmC,CAAC;YAC9C,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAkB,KAAK,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;gBAC5D,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACtD,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QACtG,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,wEAAwE;QACxE,2DAA2D;QAC3D,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,CAAC;QACD,kEAAkE;QAClE,uEAAuE;QACvE,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,4EAA4E;IAC5E,wCAAwC;IACxC,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QAC7D,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,IAAqB,EACrB,EAAiB,EACjB,SAAwB,EACxB,YAAqB,EACrB,KAA8B;IAE9B,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,CAAC,EAAE,+BAA+B,EAAE,CAAC;YAC/E,mEAAmE;YACnE,uEAAuE;YACvE,oDAAoD;YACpD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAC5B,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAC/B,KAAK,CAAC,QAA+C,CACtD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAC/B,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,0EAA0E;YAC1E,IAAI,YAAY,IAAI,IAAI,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,EAAE,+BAA+B,EAAE,CAAC;YAC9F,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;gBAAE,OAAO,EAAE,CAAC,EAAE,qCAAqC,EAAE,CAAC;YAC3F,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC/B,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,KAAqB;gBAC5B,MAAM;gBACN,WAAW;gBACX,UAAU,EAAE,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAC/E,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,QAA4B,CAAC,CAAC,CAAC,SAAS;aAC/F,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAC/B,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,CAAC,EAAE,+BAA+B,EAAE,CAAC;YAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;gBACrC,QAAQ,EAAE,GAAG,EAAE,KAAK;gBACpB,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBAC5E,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACnE,UAAU,EAAE,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAC/E,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACvD,CAAC,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAC/B,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE;gBACxC,IAAI,EAAE,OAAO;gBACb,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBAClF,YAAY,EAAE,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;gBACrF,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBAClF,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBACtE,eAAe,EAAE,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;gBAC9F,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC1G,UAAU,EAAE,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAC/E,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBAC5E,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;aAC7D,CAAC,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAC/B,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAC1B,SAAS,EACT,KAAK,EACL,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EACrE,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAA2C,EAC1G,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC"}