{"messages":[{"content":"You are a constitutional council ranking individual git commits for ownership allocation.\n\nCompare these two commits. Decide which contributed more lasting value to the project.\n\nJudge substance, not spectacle:\n- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.\n- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.\n- Do not favor a side merely because its patch is longer or noisier.\n- Weight what the change does for the project, not the contributor's name.\n\nReturn ONLY a JSON object: {\"winner\": \"A\" or \"B\", \"ratio\": \"N:M\", \"explanation\": \"...\"}\nThe explanation must cite concrete differences in the patches (1-3 sentences).\n\nSide A — contributor: tommy-mor\nSide A — commit message:\n[06b48801] Implement extensible URL foundation (#145)\n\n* Implement extensible URL foundation\n\nCo-authored-by: tommy \n\n* Make query params non-identity by default\n\nCo-authored-by: tommy \n\n* Fix external href helper test scope\n\nCo-authored-by: tommy \n\n* Avoid broken external previews for blocked hosts\n\nCo-authored-by: tommy \n\n* Clarify external empty state copy\n\nCo-authored-by: tommy \n\n* Add on-demand GitHub external resolver\n\nCo-authored-by: tommy \n\n* Add fenced JSON bodies for GitHub resolver\n\nCo-authored-by: tommy \n\n---------\n\nCo-authored-by: Cursor Agent \n\nSide A — unified diff (full patch):\ndiff --git a/agents.md b/agents.md\nindex 59bd2174f4d2f972a45123fe10d408aa5881ee93..c66f33789441eea193b4354fce4c03b7fffdd639 100644\n--- a/agents.md\n+++ b/agents.md\n@@ -55,6 +55,7 @@ Strict **CSP** that blocks `eval` would break the current app. Other projects ma\n | Ingests, grants, rooms, identity tokens, agent binds, redactions, etc. | **JSONL** | Appended in `server/src/api/rpc.rs`, `server/src/api/auth.rs` (and related paths) before updating `ReducerState` |\n | **`RoomMintInvite` links** | **RAM only** | `AppState.invites` — not appended as `InviteMinted` today; **lost on restart** (`server/src/state.rs`, `server/src/api/rpc.rs`). Event types `InviteMinted` / `InviteRedeemed` exist for replay and a possible future persisted mint (`server/src/reducer.rs`). |\n | **OAuth / pending sessions** | **RAM only** | `AppState.pending_sessions` (`server/src/state.rs`, `server/src/api/auth.rs`) |\n+| **External resolver cooldowns** | **RAM only** | `AppState.resolver_runs` — debounce/rate-limit guard for on-demand resolver buttons. Resolver results themselves are durable synthetic `Ingest` events in `events.jsonl`. |\n | **Reducer projection** | **Derived** | Rebuilt from log on startup; not separately persisted |\n \n If you add a new ephemeral map or start persisting something that was RAM-only, **update this table and the code comments** (`server/src/state.rs` is a good anchor).\ndiff --git a/server/src/api/ui_html.rs b/server/src/api/ui_html.rs\nindex 7cbda3876451687aa7a55547fc06bbe86ac9d260..cd501ba6d4d656eabad03afed4583efdf885695d 100644\n--- a/server/src/api/ui_html.rs\n+++ b/server/src/api/ui_html.rs\n@@ -18,14 +18,15 @@ use crate::{\n rpc::{rpc_post_redact, rpc_post_with_bearer, rpc_room_delete},\n },\n canonical_path::canonicalize_tag,\n+ external_resolver::resolve_github_children,\n+ html::vote_compare_post_success_js,\n html::{\n- fragment_new_thread_slot, login_to_post_hint_markup,\n- parse_html_ui_from_form, room_members_section_markup, thread_feed_html,\n- thread_feed_html_for_room, thread_feed_region_markup, thread_ui_collapse_redacted_post,\n- thread_ui_expand_post_full, thread_ui_expand_redacted_post, ui_js_warn, user_can_post_room,\n- user_can_view_room, HtmlUiAction, JsBuilder, ThreadNav,\n+ fragment_new_thread_slot, login_to_post_hint_markup, parse_html_ui_from_form,\n+ room_members_section_markup, thread_feed_html, thread_feed_html_for_room,\n+ thread_feed_region_markup, thread_ui_collapse_redacted_post, thread_ui_expand_post_full,\n+ thread_ui_expand_redacted_post, ui_js_warn, user_can_post_room, user_can_view_room,\n+ HtmlUiAction, JsBuilder, ThreadNav,\n },\n- html::vote_compare_post_success_js,\n reducer::{scope_from_room_wire, ScopeId},\n state::AppState,\n };\n@@ -104,26 +105,35 @@ async fn dispatch_ui_action(\n )\n .into_response();\n }\n- match rpc_post_with_bearer(state, &session.bearer, room.clone(), thread_tag.clone(), text).await {\n- Ok(RpcResult::PostOk { .. }) => {\n- post_success_response(\n- state,\n- &room,\n- &thread_tag,\n- error_target.as_ref(),\n- form_id.as_ref(),\n- Some(session.username.as_str()),\n- )\n- .await\n- .into_response()\n- }\n+ match rpc_post_with_bearer(\n+ state,\n+ &session.bearer,\n+ room.clone(),\n+ thread_tag.clone(),\n+ text,\n+ )\n+ .await\n+ {\n+ Ok(RpcResult::PostOk { .. }) => post_success_response(\n+ state,\n+ &room,\n+ &thread_tag,\n+ error_target.as_ref(),\n+ form_id.as_ref(),\n+ Some(session.username.as_str()),\n+ )\n+ .await\n+ .into_response(),\n Ok(_) => form_js_error(\n error_target.as_ref(),\n \"unexpected response\",\n \"Post did not return PostOk.\",\n )\n .into_response(),\n- Err((msg, hint)) => form_js_error(error_target.as_ref(), &msg, hint.as_deref().unwrap_or(\"\")).into_response(),\n+ Err((msg, hint)) => {\n+ form_js_error(error_target.as_ref(), &msg, hint.as_deref().unwrap_or(\"\"))\n+ .into_response()\n+ }\n }\n }\n HtmlUiAction::CheckIngest {\n@@ -150,9 +160,19 @@ async fn dispatch_ui_action(\n return js_clear_errors(&form_error_target(error_target.as_ref())).into_response();\n }\n match rpc_check_with_bearer(state, &session.bearer, room, text.clone()).await {\n- Ok(RpcResult::CheckOk { .. }) => js_clear_errors(&form_error_target(error_target.as_ref())).into_response(),\n- Ok(_) => form_js_error(error_target.as_ref(), \"unexpected response\", \"Check did not return CheckOk.\").into_response(),\n- Err((msg, hint)) => form_js_error(error_target.as_ref(), &msg, hint.as_deref().unwrap_or(\"\")).into_response(),\n+ Ok(RpcResult::CheckOk { .. }) => {\n+ js_clear_errors(&form_error_target(error_target.as_ref())).into_response()\n+ }\n+ Ok(_) => form_js_error(\n+ error_target.as_ref(),\n+ \"unexpected response\",\n+ \"Check did not return CheckOk.\",\n+ )\n+ .into_response(),\n+ Err((msg, hint)) => {\n+ form_js_error(error_target.as_ref(), &msg, hint.as_deref().unwrap_or(\"\"))\n+ .into_response()\n+ }\n }\n }\n HtmlUiAction::VoteComparePost {\n@@ -167,7 +187,11 @@ async fn dispatch_ui_action(\n form_action,\n } => {\n if form_action != \"/ui\" {\n- return (StatusCode::BAD_REQUEST, \"invalid vote_compare_post form_action\").into_response();\n+ return (\n+ StatusCode::BAD_REQUEST,\n+ \"invalid vote_compare_post form_action\",\n+ )\n+ .into_response();\n }\n let Some(session) = session else {\n return js_redirect(\"/login\").into_response();\n@@ -195,23 +219,15 @@ async fn dispatch_ui_action(\n let left_id = match crate::path_types::ItemId::parse(left_item.trim()) {\n Some(i) => i.normalized_storage(),\n None => {\n- return form_js_error(\n- err_tgt.as_ref(),\n- \"bad item\",\n- \"Invalid left item path.\",\n- )\n- .into_response();\n+ return form_js_error(err_tgt.as_ref(), \"bad item\", \"Invalid left item path.\")\n+ .into_response();\n }\n };\n let right_id = match crate::path_types::ItemId::parse(right_item.trim()) {\n Some(i) => i.normalized_storage(),\n None => {\n- return form_js_error(\n- err_tgt.as_ref(),\n- \"bad item\",\n- \"Invalid right item path.\",\n- )\n- .into_response();\n+ return form_js_error(err_tgt.as_ref(), \"bad item\", \"Invalid right item path.\")\n+ .into_response();\n }\n };\n let mut rl = ratio_left.trim().parse::().unwrap_or(0).max(0);\n@@ -231,7 +247,15 @@ async fn dispatch_ui_action(\n right_id.as_str()\n );\n \n- match rpc_post_with_bearer(state, &session.bearer, room.clone(), thread_tag.clone(), text).await {\n+ match rpc_post_with_bearer(\n+ state,\n+ &session.bearer,\n+ room.clone(),\n+ thread_tag.clone(),\n+ text,\n+ )\n+ .await\n+ {\n Ok(RpcResult::PostOk {\n post_id,\n post_index,\n@@ -277,7 +301,10 @@ async fn dispatch_ui_action(\n \"Post did not return PostOk.\",\n )\n .into_response(),\n- Err((msg, hint)) => form_js_error(err_tgt.as_ref(), &msg, hint.as_deref().unwrap_or(\"\")).into_response(),\n+ Err((msg, hint)) => {\n+ form_js_error(err_tgt.as_ref(), &msg, hint.as_deref().unwrap_or(\"\"))\n+ .into_response()\n+ }\n }\n }\n HtmlUiAction::SetGardenPin {\n@@ -288,7 +315,11 @@ async fn dispatch_ui_action(\n form_action,\n } => {\n if form_action != \"/ui\" {\n- return (StatusCode::BAD_REQUEST, \"invalid set_garden_pin form_action\").into_response();\n+ return (\n+ StatusCode::BAD_REQUEST,\n+ \"invalid set_garden_pin form_action\",\n+ )\n+ .into_response();\n }\n let next_path = sanitize_garden_pin_next(&next);\n use crate::html::{encode_pin_cookie_value, GARDEN_PIN_COOKIE};\n@@ -301,7 +332,11 @@ async fn dispatch_ui_action(\n if room.is_empty() {\n return (StatusCode::BAD_REQUEST, \"missing room\").into_response();\n }\n- let Some(raw) = item_storage.as_ref().map(|s| s.trim().to_string()).filter(|s| !s.is_empty()) else {\n+ let Some(raw) = item_storage\n+ .as_ref()\n+ .map(|s| s.trim().to_string())\n+ .filter(|s| !s.is_empty())\n+ else {\n return (StatusCode::BAD_REQUEST, \"missing item\").into_response();\n };\n let Some(item) = ItemId::parse(&raw) else {\n@@ -309,16 +344,65 @@ async fn dispatch_ui_action(\n };\n let item = item.normalized_storage();\n let val = encode_pin_cookie_value(&room, item.as_str());\n- let cookie = format!(\"{GARDEN_PIN_COOKIE}={val}; Path=/; SameSite=Lax; Max-Age=7776000\");\n+ let cookie =\n+ format!(\"{GARDEN_PIN_COOKIE}={val}; Path=/; SameSite=Lax; Max-Age=7776000\");\n redirect_with_pin_cookie(&cookie, &next_path)\n }\n+ HtmlUiAction::ResolveExternal {\n+ room_wire,\n+ item_storage,\n+ mode,\n+ next,\n+ form_action,\n+ } => {\n+ if form_action != \"/ui\" {\n+ return (\n+ StatusCode::BAD_REQUEST,\n+ \"invalid resolve_external form_action\",\n+ )\n+ .into_response();\n+ }\n+ let Some(session) = session else {\n+ return js_redirect(\"/login\").into_response();\n+ };\n+ let room = room_wire.trim();\n+ if room.is_empty() {\n+ return ui_js_warn(\"missing room\").into_response();\n+ }\n+ let reduced = state.reduced.read().await;\n+ if matches!(scope_from_room_wire(room), ScopeId::Room(_)) {\n+ if !user_can_post_room(&reduced, room, &session.username) {\n+ drop(reduced);\n+ return ui_js_warn(\"forbidden\").into_response();\n+ }\n+ }\n+ drop(reduced);\n+\n+ let Some(item) = crate::path_types::ItemId::parse(item_storage.trim()) else {\n+ return ui_js_warn(\"bad item\").into_response();\n+ };\n+ let target = if mode.trim() == \"siblings\" {\n+ match item.parent() {\n+ Some(parent) => parent.normalized_storage(),\n+ None => return ui_js_warn(\"no parent to resolve siblings\").into_response(),\n+ }\n+ } else {\n+ item.normalized_storage()\n+ };\n+ match resolve_github_children(state, room, &target).await {\n+ Ok(_) => js_redirect(&sanitize_garden_pin_next(&next)).into_response(),\n+ Err(msg) => ui_js_warn(&msg).into_response(),\n+ }\n+ }\n HtmlUiAction::RedactPost { post_id } => {\n let Some(session) = session else {\n return js_redirect(\"/login\").into_response();\n };\n let h = headers_from_bearer(&session.bearer);\n match rpc_post_redact(state, &h, post_id).await {\n- Ok(RpcResult::RedactPostOk {}) => redact_success_response(state).await.into_response(),\n+ Ok(RpcResult::RedactPostOk {}) => {\n+ redact_success_response(state).await.into_response()\n+ }\n Ok(_) => (StatusCode::BAD_REQUEST, \"unexpected response\").into_response(),\n Err((msg, hint)) => {\n let detail = hint.as_deref().unwrap_or(\"\");\n@@ -326,7 +410,10 @@ async fn dispatch_ui_action(\n }\n }\n }\n- HtmlUiAction::SetRoomMembersExpanded { room_wire, expanded } => {\n+ HtmlUiAction::SetRoomMembersExpanded {\n+ room_wire,\n+ expanded,\n+ } => {\n let room_wire = room_wire.trim().to_string();\n if room_wire.is_empty() {\n return ui_js_warn(\"missing room\").into_response();\n@@ -365,7 +452,10 @@ async fn dispatch_ui_action(\n }\n }\n }\n- HtmlUiAction::SetNewThreadComposeExpanded { room_wire, expanded } => {\n+ HtmlUiAction::SetNewThreadComposeExpanded {\n+ room_wire,\n+ expanded,\n+ } => {\n let room_wire = room_wire.trim().to_string();\n if room_wire.is_empty() {\n return ui_js_warn(\"missing room\").into_response();\n@@ -614,7 +704,9 @@ async fn post_success_response(\n };\n builder\n })\n- .if_current_path_not_matches(&thread_location, |builder| builder.redirect(&thread_location));\n+ .if_current_path_not_matches(&thread_location, |builder| {\n+ builder.redirect(&thread_location)\n+ });\n \n builder.into_response()\n }\n@@ -625,4 +717,3 @@ async fn redact_success_response(state: &AppState) -> Response {\n .morph_selector(\"#thread-feed\", feed_markup)\n .into_response()\n }\n-\ndiff --git a/server/src/api/write_actor.rs b/server/src/api/write_actor.rs\nindex 700c3174b0e980d46ebf4aa94e8ffe2f8dedd723..3168956e7dce1cadf50c275904b550bf81500687 100644\n--- a/server/src/api/write_actor.rs\n+++ b/server/src/api/write_actor.rs\n@@ -54,7 +54,11 @@ fn content_for_room<'a>(reduced: &'a ReducerState, room: &str) -> &'a crate::red\n }\n \n async fn broadcast_web_refresh(state: &AppState, room_key: &str, thread_id: &str) {\n- let feed_id = if room_key == \"public\" { \"thread-feed\" } else { \"room-thread-feed\" };\n+ let feed_id = if room_key == \"public\" {\n+ \"thread-feed\"\n+ } else {\n+ \"room-thread-feed\"\n+ };\n let thread_url = if room_key == \"public\" {\n format!(\"/t/{thread_id}\")\n } else if let Some(seg) = room_route_segment(room_key) {\n@@ -86,7 +90,10 @@ async fn broadcast_web_refresh(state: &AppState, room_key: &str, thread_id: &str\n \"/\".to_string()\n }];\n path_prefixes.push(thread_url.clone());\n- let _ = state.js_tx.send(crate::state::JsSnippet { code: js, path_prefixes });\n+ let _ = state.js_tx.send(crate::state::JsSnippet {\n+ code: js,\n+ path_prefixes,\n+ });\n }\n \n fn compute_scope_rank_changes(\n@@ -104,7 +111,13 @@ fn compute_scope_rank_changes(\n for comp in &rankings.component_rankings {\n let total = comp.ranked.len();\n for (i, item) in comp.ranked.iter().enumerate() {\n- map.insert(item.item.clone(), Some(RankPosition { rank: i + 1, of: total }));\n+ map.insert(\n+ item.item.clone(),\n+ Some(RankPosition {\n+ rank: i + 1,\n+ of: total,\n+ }),\n+ );\n }\n }\n for item in &rankings.unranked_items {\n@@ -158,7 +171,11 @@ fn compute_scope_rank_changes(\n })\n }\n \n-async fn redeem_invite_grant(state: &AppState, invite_token: &str, grantee_username: &str) -> Result<(), String> {\n+async fn redeem_invite_grant(\n+ state: &AppState,\n+ invite_token: &str,\n+ grantee_username: &str,\n+) -> Result<(), String> {\n let now = now_ms();\n let ga = {\n let mut invites = state.invites.write().await;\n@@ -220,14 +237,14 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n let out = async {\n let mut reduced = state.reduced.write().await;\n \n- let principal =\n- verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n+ let principal = verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n \n let delegate: Option = match delegate_opt {\n None => None,\n Some(ref s) if s.trim().is_empty() => None,\n Some(s) => Some(\n- parse_agent(&s).map_err(|msg| (format!(\"invalid delegate format\"), Some(msg)))?,\n+ parse_agent(&s)\n+ .map_err(|msg| (format!(\"invalid delegate format\"), Some(msg)))?,\n ),\n };\n \n@@ -241,11 +258,12 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n ));\n }\n \n- let v = validate_ingest_document(&reduced, &text, &scope)\n- .map_err(|(st, m, h)| {\n+ let v = validate_ingest_document(&reduced, &text, &scope).map_err(\n+ |(st, m, h)| {\n let _ = st;\n (m, h)\n- })?;\n+ },\n+ )?;\n \n if is_private {\n use crate::events::ThreadCapability;\n@@ -276,7 +294,10 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n if let Some(ref d) = delegate {\n match reduced.agent_bindings.get(d) {\n Some(u) if u != &principal => {\n- return Err((\"delegate already bound to another user\".into(), None));\n+ return Err((\n+ \"delegate already bound to another user\".into(),\n+ None,\n+ ));\n }\n _ => {}\n }\n@@ -427,6 +448,80 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n let _ = reply.send(out);\n }\n \n+ WriteCmd::SystemIngest {\n+ room,\n+ thread_tag,\n+ text,\n+ principal,\n+ reply,\n+ } => {\n+ let out = async {\n+ let (room_key, thread_id) = normalize_room_and_thread(&room, &thread_tag);\n+ let scope = scope_from_room_wire(&room_key);\n+ let is_private = !matches!(scope, ScopeId::Public);\n+ let mut reduced = state.reduced.write().await;\n+ if is_private && !reduced.rooms.contains(&room_key) {\n+ return Err((\n+ \"unknown room\".into(),\n+ Some(format!(\"room `{}` does not exist\", room_key)),\n+ ));\n+ }\n+\n+ let v = validate_ingest_document(&reduced, &text, &scope).map_err(\n+ |(st, m, h)| {\n+ let _ = st;\n+ (m, h)\n+ },\n+ )?;\n+\n+ let new_post_id = uuid::Uuid::new_v4().to_string();\n+ let ingest_event = Event::Ingest(Ingest {\n+ ts: v.ts,\n+ id: new_post_id.clone(),\n+ raw: v.raw_text.clone(),\n+ principal: principal.clone(),\n+ delegate: None,\n+ room_id: room_key.clone(),\n+ thread_tag: thread_id.clone(),\n+ });\n+\n+ state\n+ .event_log\n+ .append(&ingest_event)\n+ .await\n+ .map_err(|e| (format!(\"{e}\"), None))?;\n+ reduced.apply_event(ingest_event);\n+ drop(reduced);\n+\n+ use crate::canonical_path::canonicalize_tag;\n+ let thread_tag_canon = canonicalize_tag(&thread_id);\n+ broadcast_web_refresh(&state, &room_key, &thread_tag_canon).await;\n+ let post_index = {\n+ let reduced = state.reduced.read().await;\n+ reduced.try_thread_post_index_chronological(\n+ &scope_from_room_wire(&room_key),\n+ &thread_tag_canon,\n+ &new_post_id,\n+ )\n+ };\n+\n+ Ok(RpcResult::PostOk {\n+ events_appended: 1,\n+ post_id: Some(new_post_id),\n+ post_index,\n+ ranking_changes: None,\n+ threads: vec![format!(\"#{}\", thread_id)],\n+ next: slug_types::NextMoves {\n+ pair: \"npx slugsocial public garden pair\".to_string(),\n+ rank: \"npx slugsocial public garden rank\".to_string(),\n+ web: ForumThreadUrl::from_room_tag(&room_key, &thread_id),\n+ },\n+ })\n+ }\n+ .await;\n+ let _ = reply.send(out);\n+ }\n+\n WriteCmd::Redact {\n post_id,\n bearer,\n@@ -434,8 +529,7 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n } => {\n let out = async {\n let mut reduced = state.reduced.write().await;\n- let principal =\n- verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n+ let principal = verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n let post_id = post_id.trim().to_string();\n let Some(ing) = reduced.ingests_by_id.get(&post_id).cloned() else {\n return Err((\"post not found\".into(), None));\n@@ -450,7 +544,11 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n let scope = scope_from_room_wire(&room_key);\n if matches!(scope, ScopeId::Room(_))\n && (!reduced.rooms.contains(&room_key)\n- || !reduced.user_has_cap(&room_key, &principal, crate::events::ThreadCapability::View))\n+ || !reduced.user_has_cap(\n+ &room_key,\n+ &principal,\n+ crate::events::ThreadCapability::View,\n+ ))\n {\n return Err((\"room not found\".into(), None));\n }\n@@ -484,14 +582,16 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n } => {\n let out = async {\n let mut reduced = state.reduced.write().await;\n- let principal =\n- verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n+ let principal = verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n let slug = slug.trim().to_lowercase();\n if slug.is_empty() || slug.len() > 64 {\n return Err((\"slug must be 1-64 characters\".into(), None));\n }\n if !slug.chars().all(|c| c.is_ascii_alphanumeric() || c == '-') {\n- return Err((\"slug must be lowercase alphanumeric with hyphens\".into(), None));\n+ return Err((\n+ \"slug must be lowercase alphanumeric with hyphens\".into(),\n+ None,\n+ ));\n }\n let short_id = loop {\n let id = gen_short_id();\n@@ -539,13 +639,16 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n let _ = reply.send(out);\n }\n \n- WriteCmd::RoomDelete { room, bearer, reply } => {\n+ WriteCmd::RoomDelete {\n+ room,\n+ bearer,\n+ reply,\n+ } => {\n let out = async {\n use crate::events::ThreadCapability;\n \n let mut reduced = state.reduced.write().await;\n- let principal =\n- verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n+ let principal = verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n let room = room.trim().to_string();\n if !reduced.rooms.contains(&room) {\n return Err((\"unknown room\".into(), None));\n@@ -589,15 +692,15 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n use crate::identity::parse_username;\n \n let mut reduced = state.reduced.write().await;\n- let principal =\n- verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n+ let principal = verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n if !reduced.user_has_cap(&room, &principal, ThreadCapability::Manage) {\n return Err((\"requires Manage capability\".into(), None));\n }\n if capabilities.is_empty() {\n return Err((\"capabilities must not be empty\".into(), None));\n }\n- let target = parse_username(&username).map_err(|msg| (\"invalid username\".into(), Some(msg)))?;\n+ let target = parse_username(&username)\n+ .map_err(|msg| (\"invalid username\".into(), Some(msg)))?;\n if !reduced.users_by_provider.values().any(|u| u == &target) {\n return Err((format!(\"user @{target} not found\"), None));\n }\n@@ -637,12 +740,12 @@ pub async fn writer_actor(mut rx: mpsc::Receiver, state: AppState) {\n use crate::identity::parse_username;\n \n let mut reduced = state.reduced.write().await;\n- let principal =\n- verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n+ let principal = verify_token(&reduced, &bearer).map_err(|(_, m)| (m, None))?;\n if !reduced.user_has_cap(&room, &principal, ThreadCapability::Manage) {\n return Err((\"requires Manage capability\".into(), None));\n }\n- let target = parse_username(&username).map_err(|msg| (\"invalid username\".into(), Some(msg)))?;\n+ let target = parse_username(&username)\n+ .map_err(|msg| (\"invalid username\".into(), Some(msg)))?;\n if !reduced.users_by_provider.values().any(|u| u == &target) {\n return Err((format!(\"user @{target} not found\"), None));\n }\ndiff --git a/server/src/dsl.rs b/server/src/dsl.rs\nindex def8b497c71567016a522648b9630d7038163e41..4203c2f59dd8825d7a91513c4023f3ccd37f1efc 100644\n--- a/server/src/dsl.rs\n+++ b/server/src/dsl.rs\n@@ -450,8 +450,8 @@ fn parse_block_prefixed_statement(\n }\n \n fn parse_item_definition_statement(stripped: &str, masker: &BlockMasker) -> Result {\n- let (item1, j) =\n- parse_item_name_at(stripped, 0).ok_or_else(|| DslError::Parse(\"invalid item name\".to_string()))?;\n+ let (item1, j) = parse_item_name_at(stripped, 0)\n+ .ok_or_else(|| DslError::Parse(\"invalid item name\".to_string()))?;\n let i = skip_ws(stripped, j);\n \n if i >= stripped.len() {\n@@ -632,6 +632,19 @@ mod tests {\n );\n }\n \n+ #[test]\n+ fn parse_item_with_fenced_json_body_preserves_braces() {\n+ let input = \"~/item/in/url ```json\\n{\\\"test\\\": true}\\n```\";\n+ let doc = parse_full(input).unwrap();\n+ assert_eq!(\n+ doc.statements,\n+ vec![Stmt::Item {\n+ title: \"~/item/in/url\".to_string(),\n+ body: Some(\"```json\\n{\\\"test\\\": true}\\n```\".to_string()),\n+ }]\n+ );\n+ }\n+\n #[test]\n fn parse_vote_ratio_and_symbols() {\n let d1 = parse_full(\"{because}\\n~/a 3:1 ~/b\").unwrap();\ndiff --git a/server/src/external_resolver.rs b/server/src/external_resolver.rs\nindex 13f06b922a685f110d269f7397da807cf8600fe1..8481f1fbff1c4265da182a225f539f97d6829002 100644\n--- a/server/src/external_resolver.rs\n+++ b/server/src/external_resolver.rs\n@@ -1,6 +1,26 @@\n use async_trait::async_trait;\n+use serde_json::Value;\n+use tokio::sync::oneshot;\n \n-use crate::path_types::ItemId;\n+use crate::{path_types::ItemId, state::AppState, write_cmd::WriteCmd};\n+\n+const GITHUB_SYSTEM_PRINCIPAL: &str = \"system:github-resolver\";\n+const GITHUB_RESOLVER_COOLDOWN_MS: i64 = 15_000;\n+\n+fn now_ms() -> i64 {\n+ use std::time::{SystemTime, UNIX_EPOCH};\n+ SystemTime::now()\n+ .duration_since(UNIX_EPOCH)\n+ .unwrap_or_default()\n+ .as_millis() as i64\n+}\n+\n+#[derive(Debug, Clone, PartialEq, Eq)]\n+pub struct ResolvedChild {\n+ pub url: String,\n+ pub title: String,\n+ pub body: Option,\n+}\n \n #[async_trait]\n pub trait ExternalResolver: Send + Sync {\n@@ -14,7 +34,290 @@ pub trait ExternalResolver: Send + Sync {\n async fn fetch_body(&self, item: &ItemId) -> Result;\n }\n \n-/// Placeholder until domain-specific resolvers exist.\n+#[derive(Clone)]\n+pub struct GitHubResolver {\n+ client: reqwest::Client,\n+ api_base_url: String,\n+ token: Option,\n+}\n+\n+impl GitHubResolver {\n+ pub fn from_env() -> Self {\n+ let api_base_url = std::env::var(\"SLUG_GITHUB_API_BASE_URL\")\n+ .ok()\n+ .filter(|s| !s.trim().is_empty())\n+ .unwrap_or_else(|| \"https://api.github.com\".to_string());\n+ let token = std::env::var(\"SLUG_GITHUB_TOKEN\")\n+ .ok()\n+ .filter(|s| !s.trim().is_empty());\n+ Self {\n+ client: reqwest::Client::new(),\n+ api_base_url: api_base_url.trim_end_matches('/').to_string(),\n+ token,\n+ }\n+ }\n+\n+ pub fn can_resolve_children(&self, item: &ItemId) -> bool {\n+ github_segments(item).is_some()\n+ }\n+\n+ pub async fn list_children(&self, item: &ItemId) -> Result, String> {\n+ let segments = github_segments(item).ok_or_else(|| \"not a GitHub URL\".to_string())?;\n+ match segments.as_slice() {\n+ [] => Ok(vec![]),\n+ [owner] => self.list_repos(owner).await,\n+ [owner, repo] => Ok(github_repo_sections(owner, repo)),\n+ [owner, repo, section] if section == \"issues\" => self.list_issues(owner, repo).await,\n+ [owner, repo, section] if section == \"pulls\" => self.list_pulls(owner, repo).await,\n+ _ => Ok(vec![]),\n+ }\n+ }\n+\n+ async fn get_json(&self, path: &str) -> Result {\n+ let url = format!(\"{}/{}\", self.api_base_url, path.trim_start_matches('/'));\n+ let mut req = self\n+ .client\n+ .get(url)\n+ .header(reqwest::header::USER_AGENT, \"slugsocial-github-resolver\");\n+ if let Some(token) = &self.token {\n+ req = req.bearer_auth(token);\n+ }\n+ let resp = req\n+ .send()\n+ .await\n+ .map_err(|e| format!(\"GitHub request failed: {e}\"))?;\n+ let status = resp.status();\n+ if !status.is_success() {\n+ return Err(format!(\"GitHub request returned {status}\"));\n+ }\n+ resp.json::()\n+ .await\n+ .map_err(|e| format!(\"GitHub response JSON failed: {e}\"))\n+ }\n+\n+ async fn list_repos(&self, owner: &str) -> Result, String> {\n+ let value = self\n+ .get_json(&format!(\n+ \"/users/{owner}/repos?per_page=100&sort=updated&type=owner\"\n+ ))\n+ .await?;\n+ let arr = value\n+ .as_array()\n+ .ok_or_else(|| \"GitHub repos response was not an array\".to_string())?;\n+ let mut out = Vec::new();\n+ for repo in arr {\n+ let name = repo\n+ .get(\"name\")\n+ .and_then(|v| v.as_str())\n+ .unwrap_or_default();\n+ if name.is_empty() {\n+ continue;\n+ }\n+ let full_name = repo\n+ .get(\"full_name\")\n+ .and_then(|v| v.as_str())\n+ .map(|s| s.to_ascii_lowercase())\n+ .unwrap_or_else(|| format!(\"{owner}/{name}\").to_ascii_lowercase());\n+ out.push(ResolvedChild {\n+ url: format!(\"https://github.com/{full_name}\"),\n+ title: full_name.clone(),\n+ body: Some(github_json_body(repo)),\n+ });\n+ }\n+ out.sort_by(|a, b| a.url.cmp(&b.url));\n+ Ok(out)\n+ }\n+\n+ async fn list_issues(&self, owner: &str, repo: &str) -> Result, String> {\n+ let value = self\n+ .get_json(&format!(\n+ \"/repos/{owner}/{repo}/issues?state=open&per_page=100\"\n+ ))\n+ .await?;\n+ let arr = value\n+ .as_array()\n+ .ok_or_else(|| \"GitHub issues response was not an array\".to_string())?;\n+ let mut out = Vec::new();\n+ for issue in arr {\n+ if issue.get(\"pull_request\").is_some() {\n+ continue;\n+ }\n+ let Some(number) = issue.get(\"number\").and_then(|v| v.as_i64()) else {\n+ continue;\n+ };\n+ let title = issue\n+ .get(\"title\")\n+ .and_then(|v| v.as_str())\n+ .unwrap_or(\"Untitled issue\");\n+ out.push(ResolvedChild {\n+ url: format!(\"https://github.com/{owner}/{repo}/issues/{number}\"),\n+ title: format!(\"#{number} {title}\"),\n+ body: Some(github_json_body(issue)),\n+ });\n+ }\n+ out.sort_by(|a, b| a.url.cmp(&b.url));\n+ Ok(out)\n+ }\n+\n+ async fn list_pulls(&self, owner: &str, repo: &str) -> Result, String> {\n+ let value = self\n+ .get_json(&format!(\n+ \"/repos/{owner}/{repo}/pulls?state=open&per_page=100\"\n+ ))\n+ .await?;\n+ let arr = value\n+ .as_array()\n+ .ok_or_else(|| \"GitHub pulls response was not an array\".to_string())?;\n+ let mut out = Vec::new();\n+ for pull in arr {\n+ let Some(number) = pull.get(\"number\").and_then(|v| v.as_i64()) else {\n+ continue;\n+ };\n+ let title = pull\n+ .get(\"title\")\n+ .and_then(|v| v.as_str())\n+ .unwrap_or(\"Untitled pull request\");\n+ out.push(ResolvedChild {\n+ url: format!(\"https://github.com/{owner}/{repo}/pulls/{number}\"),\n+ title: format!(\"#{number} {title}\"),\n+ body: Some(github_json_body(pull)),\n+ });\n+ }\n+ out.sort_by(|a, b| a.url.cmp(&b.url));\n+ Ok(out)\n+ }\n+}\n+\n+fn github_segments(item: &ItemId) -> Option> {\n+ let url = url::Url::parse(item.as_str()).ok()?;\n+ if url.host_str()?.eq_ignore_ascii_case(\"github.com\") {\n+ Some(\n+ url.path_segments()\n+ .map(|segments| {\n+ segments\n+ .filter(|s| !s.is_empty())\n+ .map(|s| s.to_ascii_lowercase())\n+ .collect::>()\n+ })\n+ .unwrap_or_default(),\n+ )\n+ } else {\n+ None\n+ }\n+}\n+\n+fn github_repo_sections(owner: &str, repo: &str) -> Vec {\n+ [\n+ (\"issues\", \"GitHub issues for this repository.\"),\n+ (\"pulls\", \"GitHub pull requests for this repository.\"),\n+ (\"commits\", \"GitHub commits for this repository.\"),\n+ (\"releases\", \"GitHub releases for this repository.\"),\n+ ]\n+ .into_iter()\n+ .map(|(section, body)| ResolvedChild {\n+ url: format!(\"https://github.com/{owner}/{repo}/{section}\"),\n+ title: section.to_string(),\n+ body: Some(body.to_string()),\n+ })\n+ .collect()\n+}\n+\n+fn resolver_thread_tag(item: &ItemId) -> String {\n+ let tail = item\n+ .display_path()\n+ .trim_start_matches(\"-/\")\n+ .replace('/', \":\")\n+ .replace('?', \":\");\n+ format!(\"import:{tail}\")\n+}\n+\n+fn sanitize_body(s: &str) -> String {\n+ s.replace('{', \"(\")\n+ .replace('}', \")\")\n+ .replace(\"```\", \"` ` `\")\n+ .chars()\n+ .take(4_000)\n+ .collect()\n+}\n+\n+fn github_json_body(value: &Value) -> String {\n+ let json = serde_json::to_string_pretty(value)\n+ .unwrap_or_else(|_| value.to_string())\n+ .replace(\"```\", \"` ` `\");\n+ format!(\"```json\\n{json}\\n```\")\n+}\n+\n+fn children_to_dsl(children: &[ResolvedChild]) -> String {\n+ let mut out = String::new();\n+ for child in children {\n+ let body = child\n+ .body\n+ .as_deref()\n+ .filter(|s| !s.trim().is_empty())\n+ .unwrap_or(child.title.as_str());\n+ if body.trim_start().starts_with(\"```\") {\n+ out.push_str(&format!(\"{} {}\\n\\n\", child.url, body.trim()));\n+ } else {\n+ out.push_str(&format!(\n+ \"{} {{\\n{}\\n}}\\n\\n\",\n+ child.url,\n+ sanitize_body(body)\n+ ));\n+ }\n+ }\n+ out\n+}\n+\n+pub async fn resolve_github_children(\n+ state: &AppState,\n+ room: &str,\n+ item: &ItemId,\n+) -> Result {\n+ if !state.github_resolver.can_resolve_children(item) {\n+ return Err(\"no GitHub resolver for this item\".to_string());\n+ }\n+\n+ let key = format!(\"github:{}:{}\", room.trim(), item.as_str());\n+ let now = now_ms();\n+ {\n+ let mut runs = state.resolver_runs.write().await;\n+ if let Some(last) = runs.get(&key) {\n+ let remaining = GITHUB_RESOLVER_COOLDOWN_MS - (now - *last);\n+ if remaining > 0 {\n+ return Err(format!(\n+ \"GitHub resolver cooldown: try again in {}s\",\n+ (remaining + 999) / 1000\n+ ));\n+ }\n+ }\n+ runs.insert(key, now);\n+ }\n+\n+ let children = state.github_resolver.list_children(item).await?;\n+ if children.is_empty() {\n+ return Ok(0);\n+ }\n+ let text = children_to_dsl(&children);\n+ let thread_tag = resolver_thread_tag(item);\n+ let (tx, rx) = oneshot::channel();\n+ state\n+ .write_tx\n+ .send(WriteCmd::SystemIngest {\n+ room: room.to_string(),\n+ thread_tag,\n+ text,\n+ principal: GITHUB_SYSTEM_PRINCIPAL.to_string(),\n+ reply: tx,\n+ })\n+ .await\n+ .map_err(|_| \"writer unavailable\".to_string())?;\n+ rx.await\n+ .map_err(|_| \"writer dropped\".to_string())?\n+ .map_err(|(msg, hint)| hint.map_or(msg.clone(), |h| format!(\"{msg}: {h}\")))?;\n+ Ok(children.len())\n+}\n+\n+/// Placeholder until other domain-specific resolvers exist.\n pub struct DefaultExternalResolver;\n \n #[async_trait]\n@@ -31,3 +334,51 @@ impl ExternalResolver for DefaultExternalResolver {\n Err(\"external fetch not implemented\".to_string())\n }\n }\n+\n+#[cfg(test)]\n+mod tests {\n+ use super::*;\n+\n+ #[test]\n+ fn github_segments_parse_normalized_url() {\n+ let item = ItemId::parse(\"https://github.com/Sortersocial/Slug/issues\").unwrap();\n+ assert_eq!(\n+ github_segments(&item),\n+ Some(vec![\n+ \"sortersocial\".to_string(),\n+ \"slug\".to_string(),\n+ \"issues\".to_string()\n+ ])\n+ );\n+ }\n+\n+ #[test]\n+ fn repo_sections_are_direct_children() {\n+ let sections = github_repo_sections(\"sortersocial\", \"slug\");\n+ let urls: Vec = sections.into_iter().map(|c| c.url).collect();\n+ assert!(urls.contains(&\"https://github.com/sortersocial/slug/issues\".to_string()));\n+ assert!(urls.contains(&\"https://github.com/sortersocial/slug/pulls\".to_string()));\n+ }\n+\n+ #[test]\n+ fn children_to_dsl_contains_item_bodies() {\n+ let dsl = children_to_dsl(&[ResolvedChild {\n+ url: \"https://github.com/o/r/issues/1\".into(),\n+ title: \"#1 title\".into(),\n+ body: Some(\"body with {braces}\".into()),\n+ }]);\n+ assert!(dsl.contains(\"https://github.com/o/r/issues/1\"));\n+ assert!(dsl.contains(\"body with (braces)\"));\n+ }\n+\n+ #[test]\n+ fn children_to_dsl_preserves_fenced_json_bodies() {\n+ let dsl = children_to_dsl(&[ResolvedChild {\n+ url: \"https://github.com/o/r/issues/1\".into(),\n+ title: \"#1 title\".into(),\n+ body: Some(\"```json\\n{\\\"test\\\": true}\\n```\".into()),\n+ }]);\n+ assert!(dsl.contains(\"https://github.com/o/r/issues/1 ```json\"));\n+ assert!(dsl.contains(\"{\\\"test\\\": true}\"));\n+ }\n+}\ndiff --git a/server/src/html/garden.rs b/server/src/html/garden.rs\nindex 4c03640334a524babe39c02289989739b1ad0ae9..b28271e0316738eae245855b24aeb76486860554 100644\n--- a/server/src/html/garden.rs\n+++ b/server/src/html/garden.rs\n@@ -9,18 +9,21 @@ use serde::Deserialize;\n use serde_json::json;\n use std::collections::HashSet;\n \n-use base64::{Engine as _, engine::general_purpose::URL_SAFE_NO_PAD as B64_ENGINE};\n+use base64::{engine::general_purpose::URL_SAFE_NO_PAD as B64_ENGINE, Engine as _};\n \n use crate::{\n api::optional_principal,\n canonical_path::{canonicalize_item, canonicalize_tag},\n- middleware::canonical_view_url,\n events::ThreadCapability,\n form_template::template_json_compact,\n- html::{JsBuilder, ui_action::UI_RPC_FIELD, user_can_post_room},\n+ html::{ui_action::UI_RPC_FIELD, user_can_post_room, HtmlUiAction, JsBuilder},\n+ middleware::canonical_view_url,\n path_types::ItemId,\n reducer::{ContentState, ReducerState, ScopeId},\n- scope_rank::{ChildrenRankings, build_children_rankings},\n+ scope_rank::{\n+ build_children_rankings, build_rankings_for_item_set, resolve_scope_recursive,\n+ ChildrenRankings,\n+ },\n state::AppState,\n timeago,\n };\n@@ -128,7 +131,11 @@ fn left_share_normalized(ratio_left: i32, ratio_right: i32) -> f64 {\n let l = ratio_left.max(0) as f64;\n let r = ratio_right.max(0) as f64;\n let sum = l + r;\n- if sum <= 0.0 { 0.5 } else { l / sum }\n+ if sum <= 0.0 {\n+ 0.5\n+ } else {\n+ l / sum\n+ }\n }\n \n /// Stronger preference for **`page_left` first**; ties **newer first**.\n@@ -864,6 +871,7 @@ struct ItemPageViewModel {\n /// False at the tilde ontology root (`~/`): sibling-rank footnote does not apply.\n item_has_parent: bool,\n child_rankings: ChildrenRankings,\n+ child_depth: usize,\n rank_history: Vec,\n /// Forum threads that mention or vote on this item.\n threads: Vec,\n@@ -1018,13 +1026,20 @@ fn build_item_page_view_model(\n reduced: &crate::reducer::ReducerState,\n scope: &ScopeId,\n item: &str,\n+ child_depth: usize,\n ) -> ItemPageViewModel {\n let content = content_for_garden_view(reduced, scope);\n let item_key = ItemId::parse(item)\n .unwrap_or_else(|| ItemId::parse(\"~/\").unwrap())\n .normalized_storage();\n let item_has_parent = item_key.parent().is_some();\n- let child_rankings = build_children_rankings(content, &item_key);\n+ let child_depth = child_depth.clamp(1, 5);\n+ let child_rankings = if child_depth > 1 {\n+ let items = resolve_scope_recursive(content, &[item_key.as_str().to_string()], child_depth);\n+ build_rankings_for_item_set(content, &items)\n+ } else {\n+ build_children_rankings(content, &item_key)\n+ };\n let sibling_nav = build_sibling_nav(reduced, scope, &item_key);\n \n let rank_history = build_rank_history(reduced, scope, item_key.as_str());\n@@ -1046,11 +1061,111 @@ fn build_item_page_view_model(\n sibling_nav,\n item_has_parent,\n child_rankings,\n+ child_depth,\n rank_history,\n threads,\n }\n }\n \n+fn child_depth_from_uri(uri: &Uri) -> usize {\n+ uri.query()\n+ .into_iter()\n+ .flat_map(|q| q.split('&'))\n+ .filter_map(|pair| pair.split_once('='))\n+ .find_map(|(k, v)| {\n+ if k == \"depth\" {\n+ v.parse::().ok()\n+ } else {\n+ None\n+ }\n+ })\n+ .unwrap_or(1)\n+ .clamp(1, 5)\n+}\n+\n+fn external_source_href(item: &str) -> String {\n+ let Ok(mut url) = url::Url::parse(item) else {\n+ return item.to_string();\n+ };\n+ let is_youtube = url\n+ .host_str()\n+ .map(|h| h.eq_ignore_ascii_case(\"www.youtube.com\"))\n+ .unwrap_or(false);\n+ if is_youtube {\n+ let segments: Vec = url\n+ .path_segments()\n+ .map(|s| s.map(|seg| seg.to_string()).collect())\n+ .unwrap_or_default();\n+ if segments.len() == 3 && segments[0] == \"watch\" && segments[1] == \"v\" {\n+ let id = segments[2].clone();\n+ url.set_path(\"/watch\");\n+ url.set_query(None);\n+ url.query_pairs_mut().append_pair(\"v\", &id);\n+ return url.to_string();\n+ }\n+ }\n+ item.to_string()\n+}\n+\n+fn external_frame_allowed(item: &str) -> bool {\n+ let Ok(url) = url::Url::parse(item) else {\n+ return false;\n+ };\n+ let host = url.host_str().unwrap_or_default();\n+ !matches!(host, \"github.com\" | \"www.github.com\")\n+}\n+\n+fn github_resolver_controls(item: &str, nav: &ThreadNav, next: &str) -> Option {\n+ let item_id = ItemId::parse(item)?.normalized_storage();\n+ let url = url::Url::parse(item_id.as_str()).ok()?;\n+ if !url\n+ .host_str()\n+ .map(|h| h.eq_ignore_ascii_case(\"github.com\"))\n+ .unwrap_or(false)\n+ {\n+ return None;\n+ }\n+ let children_rpc = template_json_compact(&HtmlUiAction::ResolveExternal {\n+ room_wire: nav.room_wire.clone(),\n+ item_storage: item_id.as_str().to_string(),\n+ mode: \"children\".to_string(),\n+ next: next.to_string(),\n+ form_action: \"/ui\".to_string(),\n+ })\n+ .ok()?;\n+ let siblings_rpc = item_id.parent().and_then(|_| {\n+ template_json_compact(&HtmlUiAction::ResolveExternal {\n+ room_wire: nav.room_wire.clone(),\n+ item_storage: item_id.as_str().to_string(),\n+ mode: \"siblings\".to_string(),\n+ next: next.to_string(),\n+ form_action: \"/ui\".to_string(),\n+ })\n+ .ok()\n+ });\n+\n+ Some(html! {\n+ section id=\"external-resolver-panel\" class=\"ont-tab-panel ont-external-resolver\" {\n+ h3 { \"GitHub resolver\" }\n+ p class=\"muted\" {\n+ \"Import GitHub neighbors on demand. Results are saved as system ingests.\"\n+ }\n+ div class=\"resolver-actions\" {\n+ form method=\"POST\" action=\"/ui\" {\n+ input type=\"hidden\" name=(UI_RPC_FIELD) value=(children_rpc);\n+ button type=\"submit\" data-testid=\"github-resolve-children\" { \"Load children from GitHub\" }\n+ }\n+ @if let Some(rpc) = siblings_rpc {\n+ form method=\"POST\" action=\"/ui\" {\n+ input type=\"hidden\" name=(UI_RPC_FIELD) value=(rpc);\n+ button type=\"submit\" data-testid=\"github-resolve-siblings\" { \"Load siblings from GitHub\" }\n+ }\n+ }\n+ }\n+ }\n+ })\n+}\n+\n async fn render_scope_view(\n state: AppState,\n browse: GardenBrowsePath,\n@@ -1061,11 +1176,14 @@ async fn render_scope_view(\n let scope = nav.scope();\n let pin_ref = pinned_item_from_jar(&jar);\n let reduced = state.reduced.read().await;\n- let model = build_item_page_view_model(&reduced, &scope, browse.item());\n+ let child_depth = child_depth_from_uri(&uri);\n+ let model = build_item_page_view_model(&reduced, &scope, browse.item(), child_depth);\n let scope_content = content_for_garden_view(&reduced, &scope);\n let thread_href = |tag: &str| nav.thread_url(tag);\n let external_empty_body = browse.is_external() && model.body.is_none();\n let cli_path_arg = item_display_path(&model.item);\n+ let external_href = external_source_href(&model.item);\n+ let external_can_embed = external_frame_allowed(&model.item);\n let (garden_room, garden_prefix) = garden_layout_meta(&nav);\n let next_for_pin = uri\n .path_and_query()\n@@ -1104,7 +1222,24 @@ async fn render_scope_view(\n div class=\"ont-item-content ont-external-empty\" {\n p { \"This is an external scope.\" }\n p class=\"muted\" {\n- button type=\"button\" disabled { \"Kick off an Agent Run to import and rank items\" }\n+ \"This scope has no imported body yet. Open the source page directly.\"\n+ }\n+ p {\n+ a href=(external_href.as_str()) target=\"_blank\" rel=\"noopener noreferrer\" {\n+ \"Open external URL\"\n+ }\n+ }\n+ @if external_can_embed {\n+ p class=\"muted\" { \"Best-effort embedded preview:\" }\n+ iframe\n+ class=\"ont-external-frame\"\n+ src=(external_href.as_str())\n+ sandbox=\"\"\n+ loading=\"lazy\"\n+ referrerpolicy=\"no-referrer\"\n+ style=\"width:100%;height:360px;border:1px solid currentColor;\" {}\n+ } @else {\n+ p class=\"muted\" { \"Embedded preview is unavailable for this host.\" }\n }\n }\n } @else {\n@@ -1112,6 +1247,10 @@ async fn render_scope_view(\n }\n }\n \n+ @if let Some(markup) = github_resolver_controls(&model.item, &nav, &next_for_pin) {\n+ (markup)\n+ }\n+\n @if !model.rank_history.is_empty() {\n details class=\"ont-rank-history\" {\n summary {\n@@ -1182,7 +1321,13 @@ async fn render_scope_view(\n }\n \n section class=\"ont-tab-panel ont-tab-panel-children\" {\n- h3 { \"ranked child groups\" }\n+ h3 {\n+ \"ranked child groups\"\n+ @if model.child_depth > 1 {\n+ \" \"\n+ span class=\"muted\" { (format!(\"(depth {})\", model.child_depth)) }\n+ }\n+ }\n @if model.child_rankings.component_rankings.is_empty() {\n p class=\"muted\" { \"no voted pairs yet in this scope\" }\n } @else {\n@@ -1415,7 +1560,7 @@ async fn vote_compare_inner(\n \n #[cfg(test)]\n mod tests {\n- use super::build_item_page_view_model;\n+ use super::{build_item_page_view_model, external_source_href};\n use crate::{\n events::{Event, Ingest},\n reducer::{ReducerState, ScopeId},\n@@ -1516,7 +1661,7 @@ mod tests {\n ~/topic/b {beta}\\n\",\n );\n \n- let model = build_item_page_view_model(&reduced, &ScopeId::Public, \"~/topic/a\");\n+ let model = build_item_page_view_model(&reduced, &ScopeId::Public, \"~/topic/a\", 1);\n assert_eq!(model.body.as_deref(), Some(\"alpha\"));\n assert!(model.sibling_nav.is_some());\n assert!(model.child_rankings.component_rankings.is_empty());\n@@ -1536,7 +1681,7 @@ mod tests {\n {a beats b}\\n ~/topic/a 2:1 ~/topic/b\\n\",\n );\n \n- let model = build_item_page_view_model(&reduced, &ScopeId::Public, \"~/topic/a\");\n+ let model = build_item_page_view_model(&reduced, &ScopeId::Public, \"~/topic/a\", 1);\n let nav = model.sibling_nav.expect(\"expected sibling nav\");\n assert_eq!(nav.groups.len(), 2);\n assert_eq!(nav.groups[0].links.len(), 2);\n@@ -1558,7 +1703,7 @@ mod tests {\n {a beats b}\\n ~/topic/a 2:1 ~/topic/b\\n\",\n );\n \n- let model = build_item_page_view_model(&reduced, &ScopeId::Public, \"~/topic/a\");\n+ let model = build_item_page_view_model(&reduced, &ScopeId::Public, \"~/topic/a\", 1);\n let nav = model.sibling_nav.expect(\"expected sibling nav\");\n assert_eq!(nav.groups.len(), 3);\n assert_eq!(nav.groups[0].links.len(), 2);\n@@ -1582,7 +1727,7 @@ mod tests {\n ~/topic/kid1/leaf {leaf}\\n\",\n );\n \n- let model = build_item_page_view_model(&reduced, &ScopeId::Public, \"~/topic\");\n+ let model = build_item_page_view_model(&reduced, &ScopeId::Public, \"~/topic\", 1);\n assert_eq!(model.child_rankings.component_rankings.len(), 1);\n assert_eq!(model.child_rankings.component_rankings[0].pairs, 1);\n let names: Vec<&str> = model.child_rankings.component_rankings[0]\n@@ -1625,6 +1770,7 @@ mod tests {\n &reduced,\n &ScopeId::Room(\"9ab12cd/my-room\".to_string()),\n root.as_str(),\n+ 1,\n );\n assert!(!model.item_has_parent);\n assert_eq!(model.child_rankings.unranked_items.len(), 2);\n@@ -1655,6 +1801,7 @@ mod tests {\n &reduced,\n &ScopeId::Room(\"9ab12cd/my-room\".to_string()),\n root.as_str(),\n+ 1,\n );\n assert_eq!(model.child_rankings.component_rankings.len(), 1);\n assert_eq!(model.child_rankings.component_rankings[0].pairs, 1);\n@@ -1680,11 +1827,56 @@ mod tests {\n \"@00000000-0000-0000-0000-000000000000:test:local/test\\n~/x {x}\\n\",\n );\n let model =\n- build_item_page_view_model(&reduced, &ScopeId::Public, \"https://slug.social/~/\");\n+ build_item_page_view_model(&reduced, &ScopeId::Public, \"https://slug.social/~/\", 1);\n assert_eq!(model.child_rankings.unranked_items.len(), 1);\n assert_eq!(\n model.child_rankings.unranked_items[0].as_str(),\n \"https://slug.social/~/x\"\n );\n }\n+\n+ #[test]\n+ fn item_page_model_depth_includes_descendants() {\n+ let mut reduced = ReducerState::default();\n+ apply_ingest(\n+ &mut reduced,\n+ 1,\n+ \"@00000000-0000-0000-0000-000000000000:test:local/test\\n\\\n+ ~/topic {root}\\n\\\n+ ~/topic/a {alpha}\\n\\\n+ ~/topic/a/leaf {leaf}\\n\\\n+ ~/topic/b {beta}\\n\",\n+ );\n+\n+ let model = build_item_page_view_model(&reduced, &ScopeId::Public, \"~/topic\", 2);\n+ let items: std::collections::HashSet<&str> = model\n+ .child_rankings\n+ .unranked_items\n+ .iter()\n+ .map(|u| u.as_str())\n+ .collect();\n+ assert!(items.contains(\"https://slug.social/~/topic/a\"));\n+ assert!(items.contains(\"https://slug.social/~/topic/a/leaf\"));\n+ assert!(items.contains(\"https://slug.social/~/topic/b\"));\n+ }\n+\n+ #[test]\n+ fn external_source_href_maps_youtube_path_identity_back_to_watch_url() {\n+ assert_eq!(\n+ external_source_href(\"https://www.youtube.com/watch/v/dQw4w9WgXcQ\"),\n+ \"https://www.youtube.com/watch?v=dQw4w9WgXcQ\"\n+ );\n+ assert_eq!(\n+ external_source_href(\"https://github.com/sortersocial/slug\"),\n+ \"https://github.com/sortersocial/slug\"\n+ );\n+ }\n+\n+ #[test]\n+ fn external_frame_allowed_skips_known_blocked_hosts() {\n+ assert!(!super::external_frame_allowed(\n+ \"https://github.com/sortersocial/slug\"\n+ ));\n+ assert!(super::external_frame_allowed(\"https://example.com/path\"));\n+ }\n }\ndiff --git a/server/src/html/ui_action.rs b/server/src/html/ui_action.rs\nindex 874fe729865c8b6179c94745221d8b79d625f642..8ab6f2924c3c66f826f38c487c48d6140eee4671 100644\n--- a/server/src/html/ui_action.rs\n+++ b/server/src/html/ui_action.rs\n@@ -66,10 +66,17 @@ pub enum HtmlUiAction {\n #[serde(default = \"default_ui_form_action\")]\n form_action: String,\n },\n- /// Author redacts own post via `POST /ui`.\n- RedactPost {\n- post_id: String,\n+ /// Resolve children or siblings for an external garden item.\n+ ResolveExternal {\n+ room_wire: String,\n+ item_storage: String,\n+ mode: String,\n+ next: String,\n+ #[serde(default = \"default_ui_form_action\")]\n+ form_action: String,\n },\n+ /// Author redacts own post via `POST /ui`.\n+ RedactPost { post_id: String },\n /// Morph `#room-members-section` — members list open or collapsed (server-rendered).\n SetRoomMembersExpanded {\n room_wire: String,\n@@ -77,9 +84,7 @@ pub enum HtmlUiAction {\n expanded: bool,\n },\n /// Delete the private room (Manage only); redirects to `/` on success.\n- DeleteRoom {\n- room: String,\n- },\n+ DeleteRoom { room: String },\n /// Morph `#new-thread-ui-slot` inner — compose open or collapsed (`room_wire: \"public\"` for home).\n SetNewThreadComposeExpanded {\n room_wire: String,\n@@ -117,13 +122,14 @@ pub enum HtmlUiParseError {\n }\n \n /// Parse `__rpc__` JSON, apply `$form` holes from the rest of the form map, deserialize.\n-pub fn parse_html_ui_from_form(form: &HashMap) -> Result {\n- let template = form\n- .get(UI_RPC_FIELD)\n- .ok_or(HtmlUiParseError::MissingRpc)?;\n+pub fn parse_html_ui_from_form(\n+ form: &HashMap,\n+) -> Result {\n+ let template = form.get(UI_RPC_FIELD).ok_or(HtmlUiParseError::MissingRpc)?;\n let mut hole_map = form.clone();\n hole_map.remove(UI_RPC_FIELD);\n- let v: Value = fill_template_from_form(template, &hole_map).map_err(HtmlUiParseError::Template)?;\n+ let v: Value =\n+ fill_template_from_form(template, &hole_map).map_err(HtmlUiParseError::Template)?;\n serde_json::from_value(v).map_err(HtmlUiParseError::Action)\n }\n \ndiff --git a/server/src/lib.rs b/server/src/lib.rs\nindex b902094653cf9319efd14e67b91436e269362441..84e94bbec144eae77de68482385941cd2c5845eb 100644\n--- a/server/src/lib.rs\n+++ b/server/src/lib.rs\n@@ -3,11 +3,11 @@ pub mod paths;\n pub mod api;\n pub mod canonical_path;\n pub mod dsl;\n+pub mod event_log;\n+pub mod events;\n pub mod external_resolver;\n pub mod form_template;\n pub mod html;\n-pub mod event_log;\n-pub mod events;\n pub mod identity;\n pub mod middleware;\n pub mod path_types;\n@@ -50,16 +50,18 @@ pub fn create_app_state(cfg: AppConfig) -> AppState {\n js_tx,\n write_tx,\n views,\n+ resolver_runs: Arc::new(RwLock::new(HashMap::new())),\n+ github_resolver: Arc::new(crate::external_resolver::GitHubResolver::from_env()),\n };\n- tokio::spawn(crate::api::write_actor::writer_actor(write_rx, state.clone()));\n+ tokio::spawn(crate::api::write_actor::writer_actor(\n+ write_rx,\n+ state.clone(),\n+ ));\n state\n }\n \n /// Spawn the serialized writer. Used by integration tests after seeding reducer state in-process.\n-pub fn spawn_writer_actor_for_test(\n- state: AppState,\n- rx: tokio::sync::mpsc::Receiver,\n-) {\n+pub fn spawn_writer_actor_for_test(state: AppState, rx: tokio::sync::mpsc::Receiver) {\n tokio::spawn(crate::api::write_actor::writer_actor(rx, state));\n }\n \n@@ -89,10 +91,7 @@ pub fn create_app(state: AppState) -> Router {\n .route(\"/-\", get(crate::html::external_garden_index))\n .route(\"/-/*path\", get(crate::html::external_ontology_path))\n .route(\"/r/:room_key/~\", get(crate::html::room_garden_index))\n- .route(\n- \"/r/:room_key/~/*path\",\n- get(crate::html::room_ontology_path),\n- )\n+ .route(\"/r/:room_key/~/*path\", get(crate::html::room_ontology_path))\n .route(\n \"/r/:room_key/-\",\n get(crate::html::room_external_garden_index),\ndiff --git a/server/src/state.rs b/server/src/state.rs\nindex 13831e868031edc19fda0f347376e0b17e8b99b7..8a80fed0a6bc7ae3516c76ab9d1e8592d7038ad1 100644\n--- a/server/src/state.rs\n+++ b/server/src/state.rs\n@@ -3,7 +3,10 @@ use std::sync::Arc;\n \n use tokio::sync::{broadcast, mpsc, RwLock};\n \n-use crate::{event_log::EventLog, events::ThreadCapability, reducer::ReducerState, write_cmd::WriteCmd};\n+use crate::{\n+ event_log::EventLog, events::ThreadCapability, external_resolver::GitHubResolver,\n+ reducer::ReducerState, write_cmd::WriteCmd,\n+};\n \n /// Ephemeral invite link (24h TTL, in-memory only; not written to the event log).\n #[derive(Debug, Clone)]\n@@ -24,7 +27,7 @@ pub struct PendingSession {\n pub provider_id: Option,\n /// When set, successful OAuth completion redeems this invite token and appends [`crate::events::GrantAdded`].\n pub redeem_invite: Option,\n- pub complete: Option<(String /*username*/, String /*bearer*/ )>,\n+ pub complete: Option<(String /*username*/, String /*bearer*/)>,\n }\n \n /// An SSE event broadcast to all live stream subscribers when an ingest occurs.\n@@ -68,6 +71,9 @@ pub struct AppState {\n /// All durable writes and reducer mutations are serialized through this channel.\n pub write_tx: mpsc::Sender,\n pub views: crate::views::ViewStore,\n+ /// Ephemeral resolver cooldowns keyed by `room + item`: not persisted; durable results are JSONL ingests.\n+ pub resolver_runs: Arc>>,\n+ pub github_resolver: Arc,\n }\n \n impl AppState {\n@@ -94,7 +100,8 @@ impl AppState {\n js_tx,\n write_tx,\n views,\n+ resolver_runs: Arc::new(RwLock::new(HashMap::new())),\n+ github_resolver: Arc::new(GitHubResolver::from_env()),\n }\n }\n }\n-\ndiff --git a/server/src/write_cmd.rs b/server/src/write_cmd.rs\nindex 494aaeadf7bb919768788e101c3c1ffa12da8503..094a1b80b64caa327af523dc36c618ea04551cdc 100644\n--- a/server/src/write_cmd.rs\n+++ b/server/src/write_cmd.rs\n@@ -14,6 +14,13 @@ pub enum WriteCmd {\n bearer: String,\n reply: oneshot::Sender,\n },\n+ SystemIngest {\n+ room: String,\n+ thread_tag: String,\n+ text: String,\n+ principal: String,\n+ reply: oneshot::Sender,\n+ },\n Redact {\n post_id: String,\n bearer: String,\ndiff --git a/test/browser_github_resolver.clj b/test/browser_github_resolver.clj\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..1d5b6f1c4575e67ec430e4ce7f02c1bca5a35775\n--- /dev/null\n+++ b/test/browser_github_resolver.clj\n@@ -0,0 +1,133 @@\n+(ns test.browser-github-resolver\n+ \"Playwright coverage for on-demand GitHub external resolver imports.\"\n+ (:require [babashka.fs :as fs]\n+ [cheshire.core :as json]\n+ [clojure.string :as str]\n+ [clojure.test :refer [deftest is]]\n+ [com.blockether.spel.core :as core]\n+ [com.blockether.spel.locator :as locator]\n+ [com.blockether.spel.page :as page]\n+ [org.httpkit.server :as http]\n+ [test.common :as common]\n+ [test.oauth :as oauth]))\n+\n+(defn- wait-for-text [pg selector expected timeout-ms]\n+ (let [deadline (+ (System/currentTimeMillis) timeout-ms)]\n+ (loop []\n+ (let [text (locator/text-content (page/locator pg selector))]\n+ (if (and (string? text) (str/includes? text expected))\n+ true\n+ (if (< (System/currentTimeMillis) deadline)\n+ (do (Thread/sleep 200) (recur))\n+ false))))))\n+\n+(defn- start-mock-github [port]\n+ (let [!paths (atom [])\n+ handler (fn [req]\n+ (swap! !paths conj (:uri req))\n+ (case (:uri req)\n+ \"/users/octo/repos\"\n+ {:status 200\n+ :headers {\"Content-Type\" \"application/json\"}\n+ :body (json/generate-string\n+ [{:name \"hello\"\n+ :full_name \"octo/hello\"\n+ :description \"Hello repo\"}\n+ {:name \"other\"\n+ :full_name \"octo/other\"\n+ :description \"Other repo\"}])}\n+\n+ \"/repos/octo/hello/issues\"\n+ {:status 200\n+ :headers {\"Content-Type\" \"application/json\"}\n+ :body (json/generate-string\n+ [{:number 42\n+ :title \"Seeded issue\"\n+ :body \"Already pasted\"}\n+ {:number 43\n+ :title \"Imported sibling\"\n+ :body \"Loaded from mock GitHub\"}\n+ {:number 99\n+ :title \"PR should be filtered\"\n+ :pull_request {}}])}\n+\n+ {:status 404 :body \"not found\"}))\n+ stop-fn (http/run-server handler {:port port})]\n+ {:stop-fn stop-fn :paths !paths}))\n+\n+(defn github-resolver-flow! []\n+ (println \"\\n━━━ browser GitHub resolver: on-demand children and siblings ━━━\\n\")\n+\n+ (common/letlocals\n+ (bind build (common/run-cargo-build-release! [\"slugsocial-server\"]))\n+ (is (zero? (:exit build)) \"cargo build succeeds\")\n+ (bind server-bin \"target/release/slugsocial-server\")\n+\n+ (bind tmp-dir (str (fs/create-temp-dir {:prefix \"slug-browser-github-resolver-\"})))\n+ (bind slug-port (common/pick-port))\n+ (bind google-port (common/pick-port))\n+ (bind github-port (common/pick-port))\n+ (bind base-url (str \"http://127.0.0.1:\" slug-port))\n+ (bind google-url (str \"http://127.0.0.1:\" google-port))\n+ (bind github-url (str \"http://127.0.0.1:\" github-port))\n+\n+ (bind !server (atom nil))\n+ (bind !google (atom nil))\n+ (bind !github (atom nil))\n+ (bind server-env (assoc (common/slug-server-env tmp-dir base-url google-url slug-port)\n+ \"SLUG_GITHUB_API_BASE_URL\" github-url))\n+ (try\n+ (reset! !google (oauth/start-mock-google google-port\n+ :google-users [\"google-user-alice\"]))\n+ (reset! !github (start-mock-github github-port))\n+ (reset! !server (common/start-server server-bin server-env))\n+ (is (common/wait-for-server base-url 10000) \"server responds to /healthz\")\n+\n+ (let [alice-token (oauth/fetch-bearer-token! base-url :username \"alice\")\n+ seed-resp (oauth/http-post-json\n+ (str base-url \"/api/v0/rpc\")\n+ [{\"Post\" {\"room\" \"public\"\n+ \"thread_tag\" \"github-resolver-seed\"\n+ \"text\" \"https://github.com/octo/hello/issues/42 {Seed pasted issue}\"\n+ \"return_rank_diff\" false}}]\n+ :headers {\"Authorization\" (str \"Bearer \" alice-token)})\n+ seed-json (json/parse-string (:body seed-resp) false)]\n+ (is (true? (get-in seed-json [\"results\" 0 \"ok\"])) \"seed pasted GitHub issue\")\n+\n+ (core/with-playwright [pw]\n+ (core/with-browser [browser (core/launch-chromium pw {:headless true :channel \"chrome\"})]\n+ (core/with-context [ctx (core/new-context browser)]\n+ (core/with-page [pg (core/new-page-from-context ctx)]\n+ (page/navigate pg (str base-url \"/login\"))\n+ (is (wait-for-text pg \"body\" \"@alice\" 15000) \"alice session after login\")\n+\n+ (page/navigate pg (str base-url \"/-/github.com/octo\"))\n+ (is (wait-for-text pg \"#external-resolver-panel\" \"GitHub resolver\" 15000)\n+ \"user page shows resolver panel\")\n+ (locator/click (page/locator pg \"[data-testid=\\\"github-resolve-children\\\"]\"))\n+ (is (wait-for-text pg \"body\" \"-/github.com/octo/other\" 15000)\n+ \"user resolver imports repos\")\n+\n+ (page/navigate pg (str base-url \"/-/github.com/octo/hello\"))\n+ (locator/click (page/locator pg \"[data-testid=\\\"github-resolve-children\\\"]\"))\n+ (is (wait-for-text pg \"body\" \"-/github.com/octo/hello/pulls\" 15000)\n+ \"repo resolver imports structural children\")\n+\n+ (page/navigate pg (str base-url \"/-/github.com/octo/hello/issues/42\"))\n+ (locator/click (page/locator pg \"[data-testid=\\\"github-resolve-siblings\\\"]\"))\n+ (page/navigate pg (str base-url \"/-/github.com/octo/hello/issues\"))\n+ (is (wait-for-text pg \"body\" \"-/github.com/octo/hello/issues/43\" 15000)\n+ \"issue sibling resolver imports issue siblings\")))))\n+\n+ (is (some #{\"/users/octo/repos\"} @(:paths @!github))\n+ \"mock GitHub saw user repos request\")\n+ (is (some #{\"/repos/octo/hello/issues\"} @(:paths @!github))\n+ \"mock GitHub saw repo issues request\"))\n+\n+ (finally\n+ (when-some [s @!server] (common/kill-server s))\n+ (when-some [g @!google] ((:stop-fn g)))\n+ (when-some [g @!github] ((:stop-fn g)))))))\n+\n+(deftest browser-github-resolver-test\n+ (github-resolver-flow!))\ndiff --git a/test/browser_ui_morph.clj b/test/browser_ui_morph.clj\nindex 1dad7eb142728e14f0fe1a77747c6f443192cd03..7740a44546de12731833f048a19c35af8c6f2d1e 100644\n--- a/test/browser_ui_morph.clj\n+++ b/test/browser_ui_morph.clj\n@@ -73,8 +73,8 @@\n (is (wait-for-text pg \"nav.breadcrumb\" \"repo\" 5000) \"breadcrumb includes path segment repo\")\n (is (wait-for-text pg \".ont-external-empty\" \"This is an external scope.\" 10000)\n \"external item shows empty-state copy\")\n- (is (wait-for-text pg \".ont-external-empty\" \"Kick off an Agent Run to import and rank items\" 5000)\n- \"external empty state shows disabled agent-run button label\")\n+ (is (wait-for-text pg \".ont-external-empty\" \"Open external URL\" 5000)\n+ \"external empty state links to source URL\")\n (page/navigate pg (str base-url \"/t/\" thread-tag))\n (is (wait-for-text pg \"#thread-feed-region\" \"[show full post]\" 15000)\n \"truncated card shows expand link\")\ndiff --git a/tests.edn b/tests.edn\nindex 103d38a1769a8f63754f08fb1e42a24c80ee37dc..5e2b0433a66c51806d08ef38d691259cfccd1fe0 100644\n--- a/tests.edn\n+++ b/tests.edn\n@@ -20,7 +20,8 @@\n \"^test\\\\.browser-public-garden$\"\n \"^test\\\\.browser-redact-thread-index$\"\n \"^test\\\\.browser-garden-pin$\"\n- \"^test\\\\.browser-vote-compare$\"]\n+ \"^test\\\\.browser-vote-compare$\"\n+ \"^test\\\\.browser-github-resolver$\"]\n :kaocha.filter/skip-meta [:skip]\n :parallel? false}]\n :plugins [:kaocha.plugin/junit-xml]\ndiff --git a/types/src/paths.rs b/types/src/paths.rs\nindex 8669f6872b9fa71d72a3f5c346945427bc00ac5a..791a44a0850b54b2e6baf16b47726bde507194c6 100644\n--- a/types/src/paths.rs\n+++ b/types/src/paths.rs\n@@ -361,13 +361,14 @@ mod tests {\n SLUG_TILDE_ONTOLOGY_ROOT.to_string()\n );\n assert_eq!(\n- ItemId::parse(\"https://slug.social/~/\")\n- .unwrap()\n- .as_str(),\n+ ItemId::parse(\"https://slug.social/~/\").unwrap().as_str(),\n SLUG_TILDE_ONTOLOGY_ROOT\n );\n let legacy = ItemId::opaque(\"https://slug.social/~/\".to_string());\n- assert_eq!(legacy.normalized_storage().as_str(), SLUG_TILDE_ONTOLOGY_ROOT);\n+ assert_eq!(\n+ legacy.normalized_storage().as_str(),\n+ SLUG_TILDE_ONTOLOGY_ROOT\n+ );\n }\n \n #[test]\n@@ -423,7 +424,8 @@ mod tests {\n #[test]\n fn garden_private_room_prefixes_ontology() {\n assert_eq!(\n- GardenItemUrl::from_storage_str(\"https://slug.social/~/topic/x\", \"9ab12cd/my-room\").as_str(),\n+ GardenItemUrl::from_storage_str(\"https://slug.social/~/topic/x\", \"9ab12cd/my-room\")\n+ .as_str(),\n \"https://slug.social/r/9ab12cdmy-room/~/topic/x\"\n );\n }\n@@ -465,11 +467,11 @@ mod tests {\n fn canonicalize_youtube_short_links() {\n assert_eq!(\n canonicalize_item(\"https://youtu.be/dQw4w9WgXcQ\"),\n- \"https://www.youtube.com/watch?v=dQw4w9WgXcQ\"\n+ \"https://youtu.be/dQw4w9WgXcQ\"\n );\n assert_eq!(\n canonicalize_item(\"-/youtu.be/dQw4w9WgXcQ\"),\n- \"https://www.youtube.com/watch?v=dQw4w9WgXcQ\"\n+ \"https://youtu.be/dQw4w9WgXcQ\"\n );\n }\n \n@@ -487,12 +489,29 @@ mod tests {\n }\n \n #[test]\n- fn item_id_parent_external_strips_last_segment() {\n- let c = ItemId::parse(\"https://spotify.com/track/1\").unwrap();\n+ fn canonicalize_external_url_strips_fragment_and_query_params() {\n+ assert_eq!(\n+ canonicalize_item(\"https://example.com/path?utm_source=newsletter&b=2#section\"),\n+ \"https://example.com/path\"\n+ );\n assert_eq!(\n- c.parent().unwrap().as_str(),\n- \"https://spotify.com/track\"\n+ canonicalize_item(\"-/example.com/path?FbClId=abc&a=1\"),\n+ \"https://example.com/path\"\n );\n+ }\n+\n+ #[test]\n+ fn canonicalize_github_external_url_normalizes_repo_identity() {\n+ assert_eq!(\n+ canonicalize_item(\"https://github.com/ORG/REPO.git?tab=issues&q=is%3Aopen\"),\n+ \"https://github.com/org/repo\"\n+ );\n+ }\n+\n+ #[test]\n+ fn item_id_parent_external_strips_last_segment() {\n+ let c = ItemId::parse(\"https://spotify.com/track/1\").unwrap();\n+ assert_eq!(c.parent().unwrap().as_str(), \"https://spotify.com/track\");\n assert_eq!(\n ItemId::parse(\"https://github.com/iss/1\")\n .unwrap()\n@@ -501,7 +520,10 @@ mod tests {\n .as_str(),\n \"https://github.com/iss\"\n );\n- assert!(ItemId::parse(\"https://github.com\").unwrap().parent().is_none());\n+ assert!(ItemId::parse(\"https://github.com\")\n+ .unwrap()\n+ .parent()\n+ .is_none());\n }\n \n #[test]\ndiff --git a/types/src/url_normalize.rs b/types/src/url_normalize.rs\nindex 999baa4f3367b632763b44ddc77b894451207c50..b655f4d834dd5a482aa1b5adad25b33461dbb76e 100644\n--- a/types/src/url_normalize.rs\n+++ b/types/src/url_normalize.rs\n@@ -1,7 +1,9 @@\n //! Normalization for external `http(s)://` item identity (not slug tilde ontology).\n //!\n //! Policy (intentional, extend here as new domains need treatment):\n-//! - Query pairs sorted lexicographically by **lowercased** key, then value.\n+//! - Query pairs are navigation/filter state by default and are stripped from identity.\n+//! - Known query-primary resources may canonicalize to path-based short links (YouTube `youtu.be/:id`).\n+//! - Fragments are stripped from identity.\n //! - YouTube family → stable `www.youtube.com` shapes where possible.\n \n use url::Url;\n@@ -23,8 +25,10 @@ pub fn normalize_http_identity_url(s: &str) -> Option {\n if !matches!(u.scheme(), \"http\" | \"https\") {\n return None;\n }\n+ u.set_fragment(None);\n rewrite_youtube(&mut u);\n- sort_query_pairs(&mut u);\n+ normalize_github(&mut u);\n+ u.set_query(None);\n Some(u.to_string())\n }\n \n@@ -45,23 +49,18 @@ fn rewrite_youtube(u: &mut Url) {\n \n match base.as_str() {\n \"youtu.be\" => {\n- let id = path.trim_start_matches('/').split('/').next().unwrap_or(\"\").to_string();\n+ let id = path\n+ .trim_start_matches('/')\n+ .split('/')\n+ .next()\n+ .unwrap_or(\"\")\n+ .to_string();\n if id.is_empty() {\n return;\n }\n- let saved: Vec<(String, String)> = u.query_pairs().into_owned().collect();\n- let Ok(mut out) = Url::parse(&format!(\"https://www.youtube.com/watch?v={id}\")) else {\n+ let Ok(out) = Url::parse(&format!(\"https://youtu.be/{id}\")) else {\n return;\n };\n- {\n- let mut q = out.query_pairs_mut();\n- for (k, v) in saved {\n- if k.eq_ignore_ascii_case(\"v\") {\n- continue;\n- }\n- q.append_pair(&k, &v);\n- }\n- }\n *u = out;\n }\n \"youtube.com\" | \"m.youtube.com\" => {\n@@ -80,20 +79,9 @@ fn rewrite_youtube(u: &mut Url) {\n if id.is_empty() {\n return;\n }\n- let saved: Vec<(String, String)> = u.query_pairs().into_owned().collect();\n- let Ok(mut out) = Url::parse(&format!(\"https://www.youtube.com/watch?v={id}\"))\n- else {\n+ let Ok(out) = Url::parse(&format!(\"https://youtu.be/{id}\")) else {\n return;\n };\n- {\n- let mut q = out.query_pairs_mut();\n- for (k, v) in saved {\n- if k.eq_ignore_ascii_case(\"v\") {\n- continue;\n- }\n- q.append_pair(&k, &v);\n- }\n- }\n *u = out;\n return;\n }\n@@ -109,25 +97,21 @@ fn rewrite_youtube(u: &mut Url) {\n if id.is_empty() {\n return;\n }\n- let saved: Vec<(String, String)> = u.query_pairs().into_owned().collect();\n- let Ok(mut out) = Url::parse(&format!(\"https://www.youtube.com/watch?v={id}\"))\n- else {\n+ let Ok(out) = Url::parse(&format!(\"https://youtu.be/{id}\")) else {\n return;\n };\n- {\n- let mut q = out.query_pairs_mut();\n- for (k, v) in saved {\n- if k.eq_ignore_ascii_case(\"v\") {\n- continue;\n- }\n- q.append_pair(&k, &v);\n- }\n- }\n *u = out;\n return;\n }\n if path.starts_with(\"/watch\") {\n let _ = u.set_host(Some(\"www.youtube.com\"));\n+ if let Some((_, id)) = u.query_pairs().find(|(k, _)| k.eq_ignore_ascii_case(\"v\")) {\n+ if !id.is_empty() {\n+ if let Ok(out) = Url::parse(&format!(\"https://youtu.be/{id}\")) {\n+ *u = out;\n+ }\n+ }\n+ }\n return;\n }\n if path.starts_with(\"/shorts/\") {\n@@ -142,17 +126,9 @@ fn rewrite_youtube(u: &mut Url) {\n if id.is_empty() {\n return;\n }\n- let saved: Vec<(String, String)> = u.query_pairs().into_owned().collect();\n- let Ok(mut out) = Url::parse(&format!(\"https://www.youtube.com/shorts/{id}\"))\n- else {\n+ let Ok(out) = Url::parse(&format!(\"https://www.youtube.com/shorts/{id}\")) else {\n return;\n };\n- {\n- let mut q = out.query_pairs_mut();\n- for (k, v) in saved {\n- q.append_pair(&k, &v);\n- }\n- }\n *u = out;\n return;\n }\n@@ -163,25 +139,32 @@ fn rewrite_youtube(u: &mut Url) {\n }\n }\n \n-fn sort_query_pairs(u: &mut Url) {\n- let pairs: Vec<(String, String)> = u.query_pairs().into_owned().collect();\n- if pairs.is_empty() {\n- u.set_query(None);\n+fn normalize_github(u: &mut Url) {\n+ let Some(host_raw) = u.host_str() else {\n+ return;\n+ };\n+ if host_raw.to_ascii_lowercase() != \"github.com\" {\n return;\n }\n- let mut pairs = pairs;\n- pairs.sort_by(|a, b| {\n- a.0.to_ascii_lowercase()\n- .cmp(&b.0.to_ascii_lowercase())\n- .then_with(|| a.1.cmp(&b.1))\n- });\n- u.set_query(None);\n- {\n- let mut q = u.query_pairs_mut();\n- for (k, v) in pairs {\n- q.append_pair(&k, &v);\n+\n+ let Some(segments) = u.path_segments() else {\n+ return;\n+ };\n+ let mut segments: Vec = segments\n+ .filter(|s| !s.is_empty())\n+ .map(|s| s.to_ascii_lowercase())\n+ .collect();\n+ if let Some(repo) = segments.get_mut(1) {\n+ if let Some(stripped) = repo.strip_suffix(\".git\") {\n+ *repo = stripped.to_string();\n }\n }\n+\n+ if segments.is_empty() {\n+ u.set_path(\"/\");\n+ } else {\n+ u.set_path(&format!(\"/{}\", segments.join(\"/\")));\n+ }\n }\n \n #[cfg(test)]\n@@ -192,19 +175,19 @@ mod tests {\n fn youtube_youtu_be_to_watch() {\n assert_eq!(\n normalize_http_identity_url(\"https://youtu.be/dQw4w9WgXcQ\").as_deref(),\n- Some(\"https://www.youtube.com/watch?v=dQw4w9WgXcQ\")\n+ Some(\"https://youtu.be/dQw4w9WgXcQ\")\n );\n }\n \n #[test]\n- fn youtube_watch_query_sorted() {\n+ fn youtube_watch_v_query_becomes_path_child() {\n assert_eq!(\n normalize_http_identity_url(\"https://youtube.com/watch?v=Z&a=1&b=2\").as_deref(),\n- Some(\"https://www.youtube.com/watch?a=1&b=2&v=Z\")\n+ Some(\"https://youtu.be/Z\")\n );\n assert_eq!(\n normalize_http_identity_url(\"https://youtube.com/watch?b=2&a=1&v=Z\").as_deref(),\n- Some(\"https://www.youtube.com/watch?a=1&b=2&v=Z\")\n+ Some(\"https://youtu.be/Z\")\n );\n }\n \n@@ -212,7 +195,7 @@ mod tests {\n fn youtube_embed_to_watch() {\n assert_eq!(\n normalize_http_identity_url(\"https://www.youtube.com/embed/dQw4w9WgXcQ\").as_deref(),\n- Some(\"https://www.youtube.com/watch?v=dQw4w9WgXcQ\")\n+ Some(\"https://youtu.be/dQw4w9WgXcQ\")\n );\n }\n \n@@ -225,10 +208,56 @@ mod tests {\n }\n \n #[test]\n- fn arbitrary_query_sorted() {\n+ fn arbitrary_query_is_stripped() {\n assert_eq!(\n normalize_http_identity_url(\"https://example.com/x?z=1&a=2\").as_deref(),\n- Some(\"https://example.com/x?a=2&z=1\")\n+ Some(\"https://example.com/x\")\n+ );\n+ }\n+\n+ #[test]\n+ fn fragment_is_stripped_from_identity() {\n+ assert_eq!(\n+ normalize_http_identity_url(\"https://example.com/path?b=2#a-section\").as_deref(),\n+ Some(\"https://example.com/path\")\n+ );\n+ }\n+\n+ #[test]\n+ fn all_generic_query_params_are_stripped() {\n+ assert_eq!(\n+ normalize_http_identity_url(\n+ \"https://example.com/x?z=1&utm_source=newsletter&FbClId=abc&ref=share&a=2\"\n+ )\n+ .as_deref(),\n+ Some(\"https://example.com/x\")\n+ );\n+ }\n+\n+ #[test]\n+ fn stripping_tracking_params_removes_empty_query() {\n+ assert_eq!(\n+ normalize_http_identity_url(\"https://example.com/x?utm_medium=email&si=share\")\n+ .as_deref(),\n+ Some(\"https://example.com/x\")\n+ );\n+ }\n+\n+ #[test]\n+ fn youtube_identity_query_is_promoted_before_query_cleanup() {\n+ assert_eq!(\n+ normalize_http_identity_url(\"https://youtu.be/dQw4w9WgXcQ?si=share&v=ignored&t=12\")\n+ .as_deref(),\n+ Some(\"https://youtu.be/dQw4w9WgXcQ\")\n+ );\n+ }\n+\n+ #[test]\n+ fn github_repo_suffix_and_noise_query_are_normalized() {\n+ assert_eq!(\n+ normalize_http_identity_url(\"https://github.com/ORG/REPO.git?tab=readme&q=is%3Aopen\")\n+ .as_deref(),\n+ Some(\"https://github.com/org/repo\")\n );\n }\n }\n@@ -324,7 +353,10 @@ mod url_identity_tests {\n fn empty_path_vs_slash_only_path_may_differ() {\n let root = Url::parse(\"https://example.com\").unwrap();\n let slash = Url::parse(\"https://example.com/\").unwrap();\n- assert_eq!(root, slash, \"root and trailing-slash-only merge for this parser\");\n+ assert_eq!(\n+ root, slash,\n+ \"root and trailing-slash-only merge for this parser\"\n+ );\n }\n \n #[test]\n@@ -353,6 +385,9 @@ mod url_identity_tests {\n \n let plus = Url::parse(\"https://example.com/?q=a+b\").unwrap();\n let encoded = Url::parse(\"https://example.com/?q=a%20b\").unwrap();\n- assert_ne!(plus, encoded, \"space as + vs %20 — different keys unless normalized\");\n+ assert_ne!(\n+ plus, encoded,\n+ \"space as + vs %20 — different keys unless normalized\"\n+ );\n }\n }\n\n\nSide B — contributor: tommy-mor\nSide B — commit message:\n[1efb7222] multi-repository git discovery\n\nMake contribution discovery deterministic across repository and branch DAGs, with replayable attribution and adversarial coverage.\n\nCo-authored-by: Cursor \n\nSide B — unified diff (full patch):\ndiff --git a/constitution.py b/constitution.py\nindex b535faad658c553b3b9046e2401333618e212150..4bee9f83663ab7fb36db95129b92b64b4ef57258 100644\n--- a/constitution.py\n+++ b/constitution.py\n@@ -6,7 +6,7 @@\n # \"uvicorn\",\n # \"httpx\",\n # \"tenacity\",\n-# \"evaleval>=0.2.6\",\n+# \"evaleval==0.2.7\",\n # \"authlib\",\n # \"itsdangerous\",\n # \"starlette\",\n@@ -29,7 +29,7 @@ from datetime import datetime, timezone\n from fastapi import FastAPI, Request, Response\n from fastapi.responses import PlainTextResponse, HTMLResponse\n from starlette.middleware.sessions import SessionMiddleware\n-import json, time, os, asyncio, httpx, pathlib\n+import json, time, os, asyncio, httpx, pathlib, subprocess, hashlib, re, fcntl\n import sympy as sp # type: ignore[reportMissingImports]\n from tenacity import retry, retry_if_exception, stop_after_attempt, wait_exponential\n from evaleval import (\n@@ -118,11 +118,35 @@ JSONL_PATH = pathlib.Path(os.environ.get(\"JSONL_PATH\", \"/data/ledger.jsonl\"))\n \n GITHUB_CLIENT_ID = os.environ.get(\"GITHUB_CLIENT_ID\", \"\")\n GITHUB_CLIENT_SECRET = os.environ.get(\"GITHUB_CLIENT_SECRET\", \"\")\n-REPO = os.environ.get(\"REPO\", \"tommy-mor/slug\")\n \n OPENROUTER_API_KEY = os.environ.get(\"OPENROUTER_API_KEY\", \"\")\n OPENROUTER_BASE_URL = os.environ.get(\"OPENROUTER_BASE_URL\", \"https://openrouter.ai\").rstrip(\"/\")\n-GITHUB_API_BASE_URL = os.environ.get(\"GITHUB_API_BASE_URL\", \"https://api.github.com\").rstrip(\"/\")\n+\n+# Repositories, branches, and contributor identities are constitutional inputs.\n+# A ref pattern matches a complete Git ref: * stays within one path component,\n+# while ** crosses slashes, so refs/heads/** includes branches on branches.\n+# Environment overrides exist for deterministic integration tests and deployments\n+# using the exact same source; their normalized values are committed to every\n+# discovery event.\n+DEFAULT_REPOSITORIES = [\n+ {\n+ \"id\": \"slug\",\n+ \"url\": \"https://github.com/tommy-mor/slug.git\",\n+ \"refs\": [\"refs/heads/**\"],\n+ },\n+]\n+DEFAULT_CONTRIBUTORS = {\n+ \"tommy-mor\": [\"thmorriss@gmail.com\"],\n+}\n+\n+REPOSITORIES = json.loads(\n+ os.environ.get(\"REPOSITORIES_JSON\", json.dumps(DEFAULT_REPOSITORIES))\n+)\n+CONTRIBUTORS = json.loads(\n+ os.environ.get(\"CONTRIBUTORS_JSON\", json.dumps(DEFAULT_CONTRIBUTORS))\n+)\n+GIT_MIRROR_DIR = pathlib.Path(os.environ.get(\"GIT_MIRROR_DIR\", \"/data/git\"))\n+GIT_TIMEOUT_SECONDS = int(os.environ.get(\"GIT_TIMEOUT_SECONDS\", \"120\"))\n \n # Council model IDs: slug.social garden rank under this parent (bodies = OpenRouter URLs), then top-up from OpenRouter list.\n SLUG_SOCIAL_BASE_URL = os.environ.get(\"SLUG_SOCIAL_BASE_URL\", \"https://slug.social\").rstrip(\"/\")\n@@ -146,6 +170,7 @@ class Emission:\n distributions: dict # author -> amount str\n ranking: dict # author -> score str\n models_used: list\n+ discovery_snapshot_id: str = \"\" # empty only for pre-discovery ledger history\n \n \n @event\n@@ -163,6 +188,20 @@ class Redemption:\n amount: str\n \n \n+@event\n+class GitDiscovery:\n+ schema_version: int\n+ epoch: int\n+ snapshot_id: str\n+ timestamp_ms: int\n+ config_digest: str\n+ initial_snapshot: bool\n+ configuration: dict\n+ repositories: list\n+ observations: list\n+ commits: list\n+\n+\n store = JsonlStore(JSONL_PATH)\n \n \n@@ -532,44 +571,426 @@ Side B — unified diffs (full patches):\n return json.loads(content)\n \n \n-def _github_headers():\n- h = {\"Accept\": \"application/vnd.github+json\"}\n- tok = os.environ.get(\"GITHUB_TOKEN\", \"\")\n- if tok:\n- h[\"Authorization\"] = f\"Bearer {tok}\"\n- return h\n+# ===========================================================================\n+# §4b. GIT DISCOVERY — immutable reachability snapshots across repositories\n+# ===========================================================================\n+#\n+# Git timestamps cannot prove when a branch first reached a commit. The first\n+# snapshot therefore bootstraps history by committer time at GENESIS_MS. Every\n+# later snapshot uses the stronger rule: a commit enters exactly once, when it\n+# first becomes reachable from the union of configured refs.\n+#\n+# OIDs are deduplicated globally, then equivalent cherry-picks are deduplicated\n+# by Git's stable patch identity. Merges and empty commits are graph structure,\n+# not separately priced contributions. Discovery is all-or-nothing: if any\n+# repository cannot be mirrored and verified, no snapshot is appended.\n+\n+GIT_DISCOVERY_SCHEMA_VERSION = 1\n+PATCH_IDENTITY_VERSION = \"git-patch-id-stable-v1\"\n+_DISCOVERY_LOCK = asyncio.Lock()\n+\n+\n+def _normalized_discovery_config() -> dict:\n+ repositories = []\n+ seen_ids = set()\n+ for raw in REPOSITORIES:\n+ repo_id = str(raw.get(\"id\", \"\"))\n+ url = str(raw.get(\"url\", \"\"))\n+ refs = sorted(set(str(x) for x in raw.get(\"refs\", [])))\n+ if not re.fullmatch(r\"[A-Za-z0-9._-]+\", repo_id):\n+ raise ValueError(f\"invalid repository id: {repo_id!r}\")\n+ if repo_id in seen_ids:\n+ raise ValueError(f\"duplicate repository id: {repo_id}\")\n+ if not url or not refs or any(not r.startswith(\"refs/\") for r in refs):\n+ raise ValueError(f\"repository {repo_id} requires a URL and full ref patterns\")\n+ seen_ids.add(repo_id)\n+ repositories.append({\"id\": repo_id, \"url\": url, \"refs\": refs})\n+\n+ email_to_contributor = {}\n+ contributors = {}\n+ for contributor, emails in sorted(CONTRIBUTORS.items()):\n+ contributor = str(contributor)\n+ normalized = sorted(set(str(e).strip().lower() for e in emails))\n+ if not contributor or not normalized:\n+ raise ValueError(\"contributors require an id and at least one email\")\n+ for email in normalized:\n+ if email in email_to_contributor:\n+ raise ValueError(f\"email belongs to multiple contributors: {email}\")\n+ email_to_contributor[email] = contributor\n+ contributors[contributor] = normalized\n+\n+ repositories.sort(key=lambda r: r[\"id\"])\n+ return {\"repositories\": repositories, \"contributors\": contributors}\n+\n+\n+def _config_digest(config: dict) -> str:\n+ encoded = json.dumps(config, sort_keys=True, separators=(\",\", \":\")).encode()\n+ return hashlib.sha256(encoded).hexdigest()\n+\n+\n+def _ref_pattern_regex(pattern: str) -> re.Pattern:\n+ out = \"\"\n+ i = 0\n+ while i < len(pattern):\n+ if pattern[i:i + 2] == \"**\":\n+ out += \".*\"\n+ i += 2\n+ elif pattern[i] == \"*\":\n+ out += \"[^/]*\"\n+ i += 1\n+ elif pattern[i] == \"?\":\n+ out += \"[^/]\"\n+ i += 1\n+ else:\n+ out += re.escape(pattern[i])\n+ i += 1\n+ return re.compile(f\"^{out}$\")\n+\n+\n+def _git(repo: pathlib.Path | None, *args: str, input_bytes: bytes | None = None) -> bytes:\n+ command = [\n+ \"git\",\n+ \"--no-replace-objects\",\n+ \"-c\", \"core.quotepath=true\",\n+ \"-c\", \"core.attributesFile=/dev/null\",\n+ \"-c\", \"diff.external=\",\n+ \"-c\", \"diff.renames=false\",\n+ \"-c\", \"diff.algorithm=myers\",\n+ \"-c\", \"diff.context=3\",\n+ ]\n+ if repo is not None:\n+ command += [\"-C\", str(repo)]\n+ command += list(args)\n+ try:\n+ result = subprocess.run(\n+ command,\n+ input=input_bytes,\n+ stdout=subprocess.PIPE,\n+ stderr=subprocess.PIPE,\n+ env={\n+ **os.environ,\n+ \"GIT_CONFIG_NOSYSTEM\": \"1\",\n+ \"GIT_CONFIG_GLOBAL\": os.devnull,\n+ \"GIT_NO_REPLACE_OBJECTS\": \"1\",\n+ \"LC_ALL\": \"C\",\n+ \"TZ\": \"UTC\",\n+ },\n+ timeout=GIT_TIMEOUT_SECONDS,\n+ check=False,\n+ )\n+ except subprocess.TimeoutExpired as exc:\n+ raise RuntimeError(f\"git command timed out: {args[0]}\") from exc\n+ if result.returncode:\n+ error = result.stderr.decode(\"utf-8\", \"replace\").strip()\n+ raise RuntimeError(f\"git {args[0]} failed: {error}\")\n+ return result.stdout\n+\n+\n+def _ensure_mirror(repo: dict) -> pathlib.Path:\n+ GIT_MIRROR_DIR.mkdir(parents=True, exist_ok=True)\n+ mirror = GIT_MIRROR_DIR / f\"{repo['id']}.git\"\n+ if not mirror.exists():\n+ _git(None, \"clone\", \"--mirror\", \"--\", repo[\"url\"], str(mirror))\n+ else:\n+ actual_url = _git(mirror, \"remote\", \"get-url\", \"origin\").decode().strip()\n+ if actual_url != repo[\"url\"]:\n+ raise RuntimeError(\n+ f\"mirror URL mismatch for {repo['id']}: {actual_url!r}\"\n+ )\n+ _git(mirror, \"fetch\", \"--prune\", \"origin\", \"+refs/*:refs/*\")\n+ _git(mirror, \"fsck\", \"--connectivity-only\", \"--no-dangling\")\n+ return mirror\n+\n+\n+def _matching_refs(mirror: pathlib.Path, patterns: list[str]) -> list[dict]:\n+ regexes = [_ref_pattern_regex(p) for p in patterns]\n+ lines = _git(\n+ mirror, \"for-each-ref\", \"--format=%(refname)%00%(objectname)\"\n+ ).decode(\"utf-8\", \"replace\").splitlines()\n+ selected = []\n+ for line in lines:\n+ if not line:\n+ continue\n+ ref_name, direct_oid = line.split(\"\\x00\", 1)\n+ if not any(r.fullmatch(ref_name) for r in regexes):\n+ continue\n+ commit_oid = _git(\n+ mirror, \"rev-parse\", \"--verify\", f\"{ref_name}^{{commit}}\"\n+ ).decode().strip()\n+ selected.append({\n+ \"name\": ref_name,\n+ \"direct_oid\": direct_oid,\n+ \"commit_oid\": commit_oid,\n+ })\n+ if not selected:\n+ raise RuntimeError(f\"no refs matched patterns {patterns!r}\")\n+ return sorted(selected, key=lambda r: r[\"name\"])\n+\n+\n+def _commit_metadata(mirror: pathlib.Path, oid: str) -> dict:\n+ raw = _git(\n+ mirror,\n+ \"show\",\n+ \"-s\",\n+ \"--format=%H%x00%T%x00%P%x00%an%x00%ae%x00%at%x00%cn%x00%ce%x00%ct%x00%B\",\n+ oid,\n+ ).decode(\"utf-8\", \"replace\")\n+ fields = raw.split(\"\\x00\", 9)\n+ if len(fields) != 10:\n+ raise RuntimeError(f\"could not parse commit metadata for {oid}\")\n+ return {\n+ \"oid\": fields[0],\n+ \"tree_oid\": fields[1],\n+ \"parent_oids\": fields[2].split() if fields[2] else [],\n+ \"author_name\": fields[3],\n+ \"author_email\": fields[4].strip().lower(),\n+ \"author_timestamp_ms\": int(fields[5]) * 1000,\n+ \"committer_name\": fields[6],\n+ \"committer_email\": fields[7].strip().lower(),\n+ \"committer_timestamp_ms\": int(fields[8]) * 1000,\n+ \"message\": fields[9].rstrip(\"\\n\"),\n+ }\n \n \n-def unified_diff_from_commit_payload(payload: dict) -> str:\n- parts = []\n- for f in payload.get(\"files\") or []:\n- name = f.get(\"filename\", \"?\")\n- patch = f.get(\"patch\")\n- if patch:\n- parts.append(f\"--- {name}\\n{patch}\")\n- else:\n- parts.append(f\"--- {name}\\n[no textual patch: binary, submodule, or too large]\\n\")\n- return \"\\n\\n\".join(parts) if parts else \"[no files in API response]\"\n+def _commit_patch(mirror: pathlib.Path, metadata: dict) -> tuple[str, str | None]:\n+ parents = metadata[\"parent_oids\"]\n+ if len(parents) > 1:\n+ return \"\", None\n+ if parents:\n+ args = (\"diff\", \"--patch\", \"--binary\", \"--full-index\", \"--no-renames\",\n+ \"--no-ext-diff\", \"--no-textconv\", \"--src-prefix=a/\",\n+ \"--dst-prefix=b/\", parents[0], metadata[\"oid\"], \"--\")\n+ else:\n+ args = (\"diff-tree\", \"--root\", \"--patch\", \"--binary\", \"--full-index\",\n+ \"--no-renames\", \"--no-ext-diff\", \"--no-textconv\",\n+ \"--src-prefix=a/\", \"--dst-prefix=b/\", \"--no-commit-id\",\n+ metadata[\"oid\"], \"--\")\n+ patch_bytes = _git(mirror, *args)\n+ if not patch_bytes.strip():\n+ return \"\", None\n+ # Run patch-id outside the repository so SHA-1 and SHA-256 repositories use\n+ # the same canonical patch hash algorithm.\n+ patch_id_out = _git(\n+ None, \"patch-id\", \"--stable\", input_bytes=patch_bytes\n+ ).decode().strip()\n+ if patch_id_out:\n+ stable_id = patch_id_out.split()[0]\n+ else:\n+ stable_id = hashlib.sha256(patch_bytes).hexdigest()\n+ return patch_bytes.decode(\"utf-8\", \"replace\"), f\"{PATCH_IDENTITY_VERSION}:{stable_id}\"\n+\n+\n+def _replayed_discovery_state(events: list) -> tuple[set[str], dict[str, str]]:\n+ seen_oids = set()\n+ seen_patches = {}\n+ for event_ in events:\n+ if not isinstance(event_, GitDiscovery):\n+ continue\n+ for observation in event_.observations:\n+ seen_oids.add(observation[\"oid\"])\n+ patch_identity = observation.get(\"patch_identity\")\n+ canonical_oid = observation.get(\"canonical_patch_oid\")\n+ if patch_identity and canonical_oid:\n+ seen_patches.setdefault(patch_identity, canonical_oid)\n+ return seen_oids, seen_patches\n+\n+\n+def _build_discovery(epoch_n: int, boundary_ms: int, events: list) -> GitDiscovery:\n+ config = _normalized_discovery_config()\n+ digest = _config_digest(config)\n+ prior_discoveries = [e for e in events if isinstance(e, GitDiscovery)]\n+ initial = not prior_discoveries\n+ seen_oids, seen_patches = _replayed_discovery_state(events)\n+ email_to_contributor = {\n+ email: contributor\n+ for contributor, emails in config[\"contributors\"].items()\n+ for email in emails\n+ }\n \n+ repository_rows = []\n+ locations: dict[str, list[tuple[str, str, pathlib.Path, str]]] = {}\n+ for repo in config[\"repositories\"]:\n+ mirror = _ensure_mirror(repo)\n+ object_format = _git(\n+ mirror, \"rev-parse\", \"--show-object-format\"\n+ ).decode().strip()\n+ refs = _matching_refs(mirror, repo[\"refs\"])\n+ repo_reachable = set()\n+ for ref in refs:\n+ oids = _git(mirror, \"rev-list\", ref[\"commit_oid\"]).decode().splitlines()\n+ for oid in oids:\n+ qualified = f\"{object_format}:{oid}\"\n+ repo_reachable.add(qualified)\n+ locations.setdefault(qualified, []).append(\n+ (repo[\"id\"], ref[\"name\"], mirror, oid)\n+ )\n+ repository_rows.append({\n+ \"id\": repo[\"id\"],\n+ \"url\": repo[\"url\"],\n+ \"object_format\": object_format,\n+ \"refs\": refs,\n+ \"reachable_commit_count\": len(repo_reachable),\n+ \"reachable_set_sha256\": hashlib.sha256(\n+ \"\\n\".join(sorted(repo_reachable)).encode()\n+ ).hexdigest(),\n+ })\n \n-async def fetch_commits_since(since_ms):\n- since_iso = datetime.fromtimestamp(since_ms / 1000, tz=timezone.utc).isoformat()\n- async with httpx.AsyncClient() as client:\n- resp = await client.get(\n- f\"{GITHUB_API_BASE_URL}/repos/{REPO}/commits\",\n- params={\"since\": since_iso, \"per_page\": 100},\n- headers=_github_headers(),\n+ new_oids = sorted(set(locations) - seen_oids)\n+ pending = []\n+ for qualified_oid in new_oids:\n+ source_rows = sorted({\n+ (repo_id, ref_name) for repo_id, ref_name, _, _ in locations[qualified_oid]\n+ })\n+ canonical_location = min(\n+ locations[qualified_oid], key=lambda x: (x[0], x[1])\n )\n- return resp.json()\n-\n+ object_hashes = {\n+ hashlib.sha256(_git(m, \"cat-file\", \"commit\", raw_oid)).hexdigest()\n+ for _, _, m, raw_oid in locations[qualified_oid]\n+ }\n+ if len(object_hashes) != 1:\n+ raise RuntimeError(f\"conflicting Git objects share OID {qualified_oid}\")\n+ _, _, mirror, oid = canonical_location\n+ metadata = _commit_metadata(mirror, oid)\n+ patch, patch_identity = _commit_patch(mirror, metadata)\n+ pending.append({\n+ **metadata,\n+ \"oid\": qualified_oid,\n+ \"commit_object_sha256\": next(iter(object_hashes)),\n+ \"tree_oid\": f\"{qualified_oid.split(':', 1)[0]}:{metadata['tree_oid']}\",\n+ \"parent_oids\": [\n+ f\"{qualified_oid.split(':', 1)[0]}:{p}\"\n+ for p in metadata[\"parent_oids\"]\n+ ],\n+ \"patch\": patch,\n+ \"patch_sha256\": hashlib.sha256(patch.encode()).hexdigest() if patch else None,\n+ \"patch_identity_version\": PATCH_IDENTITY_VERSION,\n+ \"patch_identity\": patch_identity,\n+ \"first_sources\": [\n+ {\"repository_id\": repo_id, \"ref_name\": ref_name}\n+ for repo_id, ref_name in source_rows\n+ ],\n+ \"contributor\": email_to_contributor.get(metadata[\"author_email\"]),\n+ })\n \n-async def fetch_commit_unified_diff(client: httpx.AsyncClient, sha: str) -> str:\n- resp = await client.get(\n- f\"{GITHUB_API_BASE_URL}/repos/{REPO}/commits/{sha}\",\n- headers=_github_headers(),\n+ # Select patch representatives independently of repository/ref iteration order.\n+ # Every observed patch consumes its identity, even when it predates genesis or\n+ # has no registered contributor: copying already-observed work later must not\n+ # turn it into a newly payable contribution.\n+ pending.sort(key=lambda c: (c[\"committer_timestamp_ms\"], c[\"oid\"]))\n+ observations = []\n+ commits = []\n+ for commit in pending:\n+ reason = None\n+ canonical_patch_oid = None\n+ patch_identity = commit[\"patch_identity\"]\n+ duplicate_patch = False\n+ if patch_identity:\n+ if patch_identity in seen_patches:\n+ canonical_patch_oid = seen_patches[patch_identity]\n+ duplicate_patch = True\n+ else:\n+ canonical_patch_oid = commit[\"oid\"]\n+ seen_patches[patch_identity] = canonical_patch_oid\n+\n+ if initial and commit[\"committer_timestamp_ms\"] < GENESIS_MS:\n+ reason = \"before_genesis\"\n+ elif len(commit[\"parent_oids\"]) > 1:\n+ reason = \"merge_commit\"\n+ elif not patch_identity:\n+ reason = \"empty_commit\"\n+ elif duplicate_patch:\n+ reason = \"duplicate_patch\"\n+ else:\n+ if commit[\"contributor\"] is None:\n+ reason = \"unknown_contributor\"\n+\n+ eligible = reason is None\n+ observation = {\n+ \"oid\": commit[\"oid\"],\n+ \"first_sources\": commit[\"first_sources\"],\n+ \"committer_timestamp_ms\": commit[\"committer_timestamp_ms\"],\n+ \"patch_identity\": patch_identity,\n+ \"canonical_patch_oid\": canonical_patch_oid,\n+ \"eligible\": eligible,\n+ \"exclusion_reason\": reason,\n+ }\n+ observations.append(observation)\n+ if eligible:\n+ commits.append(commit)\n+\n+ snapshot_material = {\n+ \"schema_version\": GIT_DISCOVERY_SCHEMA_VERSION,\n+ \"epoch\": epoch_n,\n+ \"timestamp_ms\": boundary_ms,\n+ \"config_digest\": digest,\n+ \"repositories\": repository_rows,\n+ \"observations\": observations,\n+ }\n+ snapshot_id = hashlib.sha256(\n+ json.dumps(snapshot_material, sort_keys=True, separators=(\",\", \":\")).encode()\n+ ).hexdigest()\n+ return GitDiscovery(\n+ schema_version=GIT_DISCOVERY_SCHEMA_VERSION,\n+ epoch=epoch_n,\n+ snapshot_id=snapshot_id,\n+ timestamp_ms=boundary_ms,\n+ config_digest=digest,\n+ initial_snapshot=initial,\n+ configuration=config,\n+ repositories=repository_rows,\n+ observations=observations,\n+ commits=commits,\n )\n- resp.raise_for_status()\n- return unified_diff_from_commit_payload(resp.json())\n+\n+\n+def _acquire_discovery_file_lock():\n+ GIT_MIRROR_DIR.mkdir(parents=True, exist_ok=True)\n+ lock_file = (GIT_MIRROR_DIR / \".discovery.lock\").open(\"a+b\")\n+ fcntl.flock(lock_file.fileno(), fcntl.LOCK_EX)\n+ return lock_file\n+\n+\n+def _release_discovery_file_lock(lock_file) -> None:\n+ fcntl.flock(lock_file.fileno(), fcntl.LOCK_UN)\n+ lock_file.close()\n+\n+\n+async def discover_repositories(epoch_n: int, boundary_ms: int) -> GitDiscovery:\n+ async with _DISCOVERY_LOCK:\n+ lock_file = await asyncio.to_thread(_acquire_discovery_file_lock)\n+ try:\n+ events = store.read()\n+ existing = next(\n+ (\n+ e for e in events\n+ if isinstance(e, GitDiscovery) and e.epoch == epoch_n\n+ ),\n+ None,\n+ )\n+ if existing:\n+ return existing\n+ candidate = await asyncio.to_thread(\n+ _build_discovery, epoch_n, boundary_ms, events\n+ )\n+\n+ def append_if_new(current_events):\n+ if any(\n+ isinstance(e, GitDiscovery) and e.epoch == epoch_n\n+ for e in current_events\n+ ):\n+ return None\n+ return candidate\n+\n+ appended = await store.atomic(append_if_new)\n+ if appended:\n+ return appended\n+ return next(\n+ e for e in store.read()\n+ if isinstance(e, GitDiscovery) and e.epoch == epoch_n\n+ )\n+ finally:\n+ await asyncio.to_thread(_release_discovery_file_lock, lock_file)\n \n \n SSE_CLIENTS = []\n@@ -581,28 +1002,27 @@ async def broadcast_js(js: str):\n await queue.put(js)\n \n \n-async def rank_commits(since_ms):\n- commits = await fetch_commits_since(since_ms)\n+async def rank_commits(commits: list[dict]):\n if not commits:\n- return {}\n-\n- async with httpx.AsyncClient() as gh:\n- commit_diffs = await asyncio.gather(*[fetch_commit_unified_diff(gh, c[\"sha\"]) for c in commits])\n+ return {}, []\n \n models = await fetch_top_models(n=3)\n+ contributors = sorted(set(c[\"contributor\"] for c in commits))\n+ if len(contributors) > 1 and not models:\n+ raise RuntimeError(\"no council models available for contributor ranking\")\n await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n [\"div.log-council\", f\"Council: {', '.join(models)} — {len(commits)} commits\"]\n ]))\n \n- authors = list(set(c[\"commit\"][\"author\"][\"name\"] for c in commits))\n+ authors = contributors\n author_idx = {a: i for i, a in enumerate(authors)}\n \n author_commits = {a: [] for a in authors}\n- for c, diff_text in zip(commits, commit_diffs, strict=True):\n- author_commits[c[\"commit\"][\"author\"][\"name\"]].append({\n- \"message\": c[\"commit\"][\"message\"],\n- \"sha\": c[\"sha\"][:8],\n- \"diff\": diff_text,\n+ for c in sorted(commits, key=lambda row: row[\"oid\"]):\n+ author_commits[c[\"contributor\"]].append({\n+ \"message\": c[\"message\"],\n+ \"sha\": c[\"oid\"].split(\":\", 1)[1][:8],\n+ \"diff\": c[\"patch\"],\n })\n \n # TODO do we want ot coagulate the commits into a single block? or rank the many commits\n@@ -622,9 +1042,14 @@ async def rank_commits(since_ms):\n for model in models:\n try:\n result = await llm_pairwise_compare(model, author_side_for_llm(a1), author_side_for_llm(a2))\n+ if result[\"winner\"] not in {\"A\", \"B\"}:\n+ raise ValueError(\"winner must be A or B\")\n w, l = (i, j) if result[\"winner\"] == \"A\" else (j, i)\n ratio = result[\"ratio\"].split(\":\")\n- results.append((w, l, float(ratio[0]), float(ratio[1])))\n+ winner_weight, loser_weight = float(ratio[0]), float(ratio[1])\n+ if winner_weight <= 0 or loser_weight <= 0:\n+ raise ValueError(\"ratio weights must be positive\")\n+ results.append((w, l, winner_weight, loser_weight))\n await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n [\"div.log-vote\",\n [\"span.model\", model], \" — \",\n@@ -637,6 +1062,7 @@ async def rank_commits(since_ms):\n await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n [\"div.log-error\", f\"⚠ {model}: {e}\"]\n ]))\n+ raise RuntimeError(f\"council model failed: {model}\") from e\n return results\n \n async def progress_fn(ev):\n@@ -651,7 +1077,8 @@ async def rank_commits(since_ms):\n pairs = await pairwise_rank(len(authors), compare_fn, progress_fn)\n \n if not pairs:\n- return {authors[0]: Decimal(\"1\")} if authors else {}\n+ ranking = {authors[0]: Decimal(\"1\")} if authors else {}\n+ return ranking, models\n \n scores = rank_centrality(pairs)\n ranking = {authors[i]: Decimal(str(scores[i])) for i in range(len(authors))}\n@@ -662,7 +1089,7 @@ async def rank_commits(since_ms):\n *[[\"span.rank-entry\", f\"{a} {float(s):.3f} \"] for a, s in ranking_rows],\n ]\n ]))\n- return ranking\n+ return ranking, models\n \n \n # ===========================================================================\n@@ -681,35 +1108,48 @@ async def run_emission(epoch_n, boundary_ms):\n [\"div.log-start\", f\"⚡ Epoch {epoch_n} emission started\"]\n ]))\n \n- pool = pool_remaining(store.read())\n- emission = pool * DECAY_RATE\n- await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n- [\"div.log-amount\",\n- f\"Pool {pool:.4f} → emit {emission:.4f} → {pool - emission:.4f}\"]\n- ]))\n-\n- prev_boundary_ms = epoch_boundary(epoch_n - 1) if epoch_n > 0 else GENESIS_MS\n- ranking = await rank_commits(prev_boundary_ms)\n+ discovery = await discover_repositories(epoch_n, boundary_ms)\n+ ranking, models = await rank_commits(discovery.commits)\n \n def make_emission(events):\n if epoch_n in {e.epoch for e in events if isinstance(e, Emission)}:\n return None\n pool_now = pool_remaining(events)\n- emission_now = pool_now * DECAY_RATE\n+ emission_now = pool_now * DECAY_RATE if ranking else Decimal(\"0\")\n+ normalized_ranking = {}\n+ distributions = {}\n+ if ranking:\n+ score_total = sum(ranking.values())\n+ normalized_ranking = {\n+ contributor: score / score_total\n+ for contributor, score in sorted(ranking.items())\n+ }\n+ contributors = list(normalized_ranking)\n+ allocated = Decimal(\"0\")\n+ for contributor in contributors[:-1]:\n+ amount = emission_now * normalized_ranking[contributor]\n+ distributions[contributor] = amount\n+ allocated += amount\n+ distributions[contributors[-1]] = emission_now - allocated\n return Emission(\n epoch=epoch_n,\n timestamp_ms=boundary_ms,\n+ discovery_snapshot_id=discovery.snapshot_id,\n pool_before=str(pool_now),\n total_emitted=str(emission_now),\n pool_after=str(pool_now - emission_now),\n decay_rate=str(DECAY_RATE),\n- distributions={a: str(emission_now * s) for a, s in ranking.items()},\n- ranking={a: str(s) for a, s in ranking.items()},\n- models_used=[],\n+ distributions={a: str(amount) for a, amount in distributions.items()},\n+ ranking={a: str(s) for a, s in normalized_ranking.items()},\n+ models_used=models,\n )\n \n entry = await store.atomic(make_emission)\n if entry:\n+ await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n+ [\"div.log-amount\",\n+ f\"Pool {entry.pool_before} → emit {entry.total_emitted} → {entry.pool_after}\"]\n+ ]))\n await broadcast_js(exec_event(Three[Selector(\"#emission-log\")][PREPEND][\n [\"div.log-complete\",\n [\"b\", f\"✓ Epoch {entry.epoch} complete — emitted {entry.total_emitted} SLUG\"]]\n@@ -815,20 +1255,40 @@ async def get_contributor(github_username: str):\n \n @app.get(\"/api/halvening\")\n async def get_halvening():\n- half_life = sp.Rational(str(HALF_LIFE_YEARS))\n- boundary = genesis_ms\n- elapsed = sp.Integer(0)\n- epoch_years = sp.Rational(1, 12)\n- for e in range(300):\n- epoch_dur = tropical_epoch_ms(boundary)\n- if elapsed + epoch_years >= half_life:\n- fraction = (half_life - elapsed) / epoch_years\n- jubilee_ms = round_sympy_ms(boundary + fraction * epoch_dur)\n- dt = datetime.fromtimestamp(jubilee_ms / 1000, tz=timezone.utc)\n- return {\"jubilee_ms\": jubilee_ms, \"jubilee_utc\": dt.isoformat(),\n- \"epoch\": e + float(fraction), \"half_life_years\": str(HALF_LIFE_YEARS)}\n- elapsed += epoch_years\n- boundary += epoch_dur\n+ # Iterating symbolic rationals recursively causes expression-size explosion\n+ # after hundreds of epochs. Fifty-digit Decimal arithmetic is far beyond the\n+ # millisecond precision exposed by this endpoint and remains deterministic.\n+ boundary = Decimal(GENESIS_MS)\n+ j2000 = Decimal(946728000000)\n+ century = Decimal(36525 * 86400 * 1000)\n+ day = Decimal(86400000)\n+\n+ def decimal_epoch_ms(at_ms: Decimal) -> Decimal:\n+ T = (at_ms - j2000) / century\n+ days = (\n+ Decimal(\"365.2421896698\")\n+ + Decimal(\"-6.15359e-6\") * T\n+ + Decimal(\"-7.29e-10\") * T**2\n+ + Decimal(\"2.64e-10\") * T**3\n+ )\n+ return days * day / Decimal(12)\n+\n+ total_epochs = HALF_LIFE_YEARS * Decimal(12)\n+ whole_epochs = int(total_epochs)\n+ fraction = total_epochs - whole_epochs\n+ for _ in range(whole_epochs):\n+ boundary += decimal_epoch_ms(boundary)\n+ jubilee_ms = int(\n+ (boundary + fraction * decimal_epoch_ms(boundary))\n+ .to_integral_value(rounding=\"ROUND_HALF_UP\")\n+ )\n+ dt = datetime.fromtimestamp(jubilee_ms / 1000, tz=timezone.utc)\n+ return {\n+ \"jubilee_ms\": jubilee_ms,\n+ \"jubilee_utc\": dt.isoformat(),\n+ \"epoch\": float(total_epochs),\n+ \"half_life_years\": str(HALF_LIFE_YEARS),\n+ }\n \n \n @app.post(\"/test/emit\")\ndiff --git a/pyproject.toml b/pyproject.toml\nindex 46f0b6fd922995045008a5e935c5178e9519ac7c..65092f570614a9a5473fea04150a9871d5e0490c 100644\n--- a/pyproject.toml\n+++ b/pyproject.toml\n@@ -3,7 +3,7 @@ name = \"slug-constitution\"\n version = \"0.1.0\"\n requires-python = \">=3.11\"\n dependencies = [\n- \"evaleval>=0.2.6\",\n+ \"evaleval==0.2.7\",\n \"numpy\",\n \"httpx\",\n \"fastapi\",\n@@ -12,6 +12,10 @@ dependencies = [\n \"starlette\",\n \"itsdangerous\",\n \"pytest\",\n+ \"hypothesis\",\n+ \"sympy\",\n+ \"authlib\",\n+ \"python-multipart\",\n ]\n \n [tool.pytest.ini_options]\ndiff --git a/tests/integration.clj b/tests/integration.clj\nindex fdc0931e937bcf5f0e1bea8c5b8c632ec99eab17..0d34e3b237b4037a28f5e99350e8d447455665de 100644\n--- a/tests/integration.clj\n+++ b/tests/integration.clj\n@@ -1,7 +1,7 @@\n #!/usr/bin/env bb\n (ns test.integration\n \"Integration tests for constitution.py.\n- Starts the server, mocks OpenRouter + GitHub APIs, seeds a JSONL,\n+ Starts the server, mocks OpenRouter, creates local Git remotes, seeds a JSONL,\n verifies API endpoints, SSE stream, and replay determinism.\"\n (:require [babashka.process :as p]\n [clojure.string :as str]\n@@ -96,6 +96,47 @@\n (throw (ex-info \"bad HTTP status\" {:code code :body body})))\n (json/parse-string body true))))\n \n+(defn- command!\n+ [argv opts]\n+ (let [r @(p/process argv (merge {:out :string :err :string} opts))]\n+ (when-not (zero? (:exit r))\n+ (throw (ex-info (str \"command failed: \" (pr-str argv) \"\\n\" (:err r))\n+ {:argv argv :result r})))\n+ (str/trim (:out r))))\n+\n+(defn- git!\n+ [dir & args]\n+ (let [base-env (into {} (System/getenv))\n+ env (merge base-env\n+ {\"GIT_CONFIG_NOSYSTEM\" \"1\"\n+ \"GIT_AUTHOR_NAME\" \"Integration\"\n+ \"GIT_AUTHOR_EMAIL\" \"integration@example.test\"\n+ \"GIT_COMMITTER_NAME\" \"Integration\"\n+ \"GIT_COMMITTER_EMAIL\" \"integration@example.test\"})]\n+ (command! (into [\"git\" \"-C\" dir] args) {:env env})))\n+\n+(defn- make-git-repository!\n+ [tmp-dir id contributor email filename]\n+ (let [remote (str tmp-dir \"/\" id \".git\")\n+ work (str tmp-dir \"/\" id \"-work\")]\n+ (command! [\"git\" \"init\" \"--bare\" remote] {})\n+ (command! [\"git\" \"init\" \"-b\" \"main\" work] {})\n+ (git! work \"config\" \"user.name\" contributor)\n+ (git! work \"config\" \"user.email\" email)\n+ (spit (str work \"/\" filename) (str contributor \" contribution\\n\"))\n+ (git! work \"add\" \"--\" filename)\n+ (let [env (merge (into {} (System/getenv))\n+ {\"GIT_CONFIG_NOSYSTEM\" \"1\"\n+ \"GIT_AUTHOR_NAME\" contributor\n+ \"GIT_AUTHOR_EMAIL\" email\n+ \"GIT_COMMITTER_NAME\" contributor\n+ \"GIT_COMMITTER_EMAIL\" email})]\n+ (command! [\"git\" \"-C\" work \"commit\" \"-m\" (str \"contribution by \" contributor)]\n+ {:env env}))\n+ (git! work \"remote\" \"add\" \"origin\" remote)\n+ (git! work \"push\" \"origin\" \"main\")\n+ {:id id :url remote :refs [\"refs/heads/**\"]}))\n+\n ;; ---------------------------------------------------------------------------\n ;; mock OpenRouter server\n ;; ---------------------------------------------------------------------------\n@@ -199,6 +240,7 @@\n (let [entry {:type \"emission\"\n :epoch 0\n :timestamp_ms 1700000000000\n+ :discovery_snapshot_id \"seeded-discovery\"\n :pool_before \"175824\"\n :total_emitted \"572.1423838308\"\n :pool_after \"175251.857616169\"\n@@ -239,8 +281,8 @@\n (str/trim (second m)))))\n \n (defn- test-live-slug-model-council! [root]\n- (if (= \"1\" (System/getenv \"SKIP_LIVE_SLUG_SOCIAL\"))\n- (println \"\\n━━━ live slug.social checks skipped (SKIP_LIVE_SLUG_SOCIAL=1) ━━━\\n\")\n+ (if-not (= \"1\" (System/getenv \"RUN_LIVE_SLUG_SOCIAL\"))\n+ (println \"\\n━━━ live slug.social checks skipped (set RUN_LIVE_SLUG_SOCIAL=1) ━━━\\n\")\n (letlocals\n (println \"\\n━━━ live slug.social: /api/v0 + fetch_top_models ━━━\\n\")\n (bind rank-url (str slug-live-base \"/api/v0/rank?parent=\"\n@@ -307,7 +349,7 @@\n (when (str/starts-with? line \"data:\")\n (let [raw (str/trim (subs line 5))]\n (when-not (str/blank? raw)\n- (swap! events conj (json/parse-string raw true)))))\n+ (swap! events conj raw))))\n (recur))\n nil)))\n (finally\n@@ -329,7 +371,6 @@\n (bind jsonl-path (str tmp-dir \"/ledger.jsonl\"))\n (bind server-port (pick-port))\n (bind or-port (pick-port)) ; openrouter mock\n- (bind gh-port (pick-port)) ; github mock\n (bind base-url (str \"http://127.0.0.1:\" server-port))\n \n ;; genesis ~1 month ago so we're at epoch 1+\n@@ -337,38 +378,47 @@\n \n (bind root (project-root))\n (test-live-slug-model-council! root)\n+ (bind repo-a (make-git-repository! tmp-dir \"repo-a\" \"alice\"\n+ \"alice@example.test\" \"alice.txt\"))\n+ (bind repo-b (make-git-repository! tmp-dir \"repo-b\" \"bob\"\n+ \"bob@example.test\" \"bob.txt\"))\n+ (bind repositories-json\n+ (json/generate-string\n+ [(update repo-a :refs vec) (update repo-b :refs vec)]))\n+ (bind contributors-json\n+ (json/generate-string\n+ {\"alice\" [\"alice@example.test\"]\n+ \"bob\" [\"bob@example.test\"]}))\n (bind server-env\n {\"SESSION_SECRET\" \"test-secret\"\n \"GENESIS_MS\" genesis-ms\n \"JSONL_PATH\" jsonl-path\n+ \"GIT_MIRROR_DIR\" (str tmp-dir \"/mirrors\")\n+ \"REPOSITORIES_JSON\" repositories-json\n+ \"CONTRIBUTORS_JSON\" contributors-json\n \"OPENROUTER_API_KEY\" \"mock-key\"\n \"GITHUB_CLIENT_ID\" \"mock-gh-id\"\n \"GITHUB_CLIENT_SECRET\" \"mock-gh-secret\"\n- \"GITHUB_TOKEN\" \"mock-gh-token\"\n- \"REPO\" \"tommy-mor/slug\"\n \"PORT\" (str server-port)\n \"DISABLE_EPOCH_LOOP\" \"1\"\n \"ALLOW_TEST_TRIGGERS\" \"1\"\n \"OPENROUTER_BASE_URL\" (str \"http://127.0.0.1:\" or-port)\n- \"GITHUB_API_BASE_URL\" (str \"http://127.0.0.1:\" gh-port)\n \"SLUG_MODEL_RANK_PARENT\" \"\"\n \"PATH\" (get (into {} (System/getenv)) \"PATH\" \"\")})\n \n (bind !server (atom nil))\n (bind !server2 (atom nil))\n (bind !or-mock (atom nil))\n- (bind !gh-mock (atom nil))\n \n (try\n (letlocals\n- ;; 1. start mock servers\n- (println \"starting mock OpenRouter and GitHub API servers…\")\n+ ;; 1. start mock model server; Git discovery uses local bare remotes\n+ (println \"starting mock OpenRouter server and local Git remotes…\")\n (bind or-mock (start-mock-openrouter or-port))\n (reset! !or-mock or-mock)\n- (bind gh-mock (start-mock-github gh-port))\n- (reset! !gh-mock gh-mock)\n (assert! (some? (:stop-fn or-mock)) \"mock OpenRouter started\")\n- (assert! (some? (:stop-fn gh-mock)) \"mock GitHub started\")\n+ (assert! (fs/exists? (:url repo-a)) \"first bare Git remote exists\")\n+ (assert! (fs/exists? (:url repo-b)) \"second bare Git remote exists\")\n \n ;; 2. seed ledger so pool_remaining has history to read\n (seed-ledger jsonl-path)\n@@ -422,7 +472,8 @@\n (println \"\\nchecking /sse initial event…\")\n (bind sse-events (read-sse-events (str base-url \"/sse\") 1 5000))\n (assert! (= 1 (count sse-events)) \"received 1 SSE event\")\n- (assert! (int? (:epoch (first sse-events))) \"initial SSE event has epoch\")\n+ (assert! (not (str/blank? (first sse-events)))\n+ \"initial SSE event contains executable audit data\")\n \n ;; 10. POST /test/emit — full ranking pipeline hits mocks\n (println \"\\ntriggering /test/emit (epoch 1)…\")\n@@ -430,16 +481,25 @@\n (assert! (= \"emission\" (:type emit-resp)) \"emit response type is emission\")\n (assert! (= 1 (:epoch emit-resp)) \"emit is epoch 1 after seeded epoch 0\")\n (assert! (pos? (count (:distributions emit-resp))) \"emit has distributions\")\n+ (assert! (string? (:discovery_snapshot_id emit-resp))\n+ \"emission records discovery snapshot\")\n+ (assert! (= 3 (count (:models_used emit-resp)))\n+ \"emission records all council models\")\n \n (bind or-state @(:state or-mock))\n- (bind gh-state @(:state gh-mock))\n (assert! (pos? (:model-requests or-state)) \"OpenRouter /models was called\")\n (assert! (>= (:compare-requests or-state) 3) \"at least 3 pairwise LLM calls (2 authors × 3 models)\")\n- (assert! (pos? (:commit-list-requests gh-state)) \"GitHub commits list was called\")\n- (assert! (>= (:commit-detail-requests gh-state) 2) \"GitHub per-SHA fetches for each commit\")\n \n (bind ledger2 (get-json base-url \"/api/ledger\"))\n- (assert! (= 2 (count ledger2)) \"ledger has 2 entries after emit\")\n+ (assert! (= 3 (count ledger2))\n+ \"ledger has seed, discovery, and emission entries\")\n+ (bind discovery-entry (second ledger2))\n+ (assert! (= \"gitdiscovery\" (:type discovery-entry))\n+ \"discovery is persisted before emission\")\n+ (assert! (= 2 (count (:repositories discovery-entry)))\n+ \"discovery records both repositories\")\n+ (assert! (= 2 (count (:commits discovery-entry)))\n+ \"discovery admits one contribution from each repository\")\n (bind rank-after (get-json base-url \"/api/ranking\"))\n (assert! (= 1 (:epoch rank-after)) \"latest ranking is epoch 1\")\n \n@@ -458,7 +518,8 @@\n \"restarted server responds to /api/epoch\")\n \n (bind replayed-ledger (get-json base-url \"/api/ledger\"))\n- (assert! (= 2 (count replayed-ledger)) \"ledger still has 2 entries after replay\")\n+ (assert! (= 3 (count replayed-ledger))\n+ \"ledger still has 3 entries after replay\")\n (bind replayed-rank (get-json base-url \"/api/ranking\"))\n (assert! (= (get-in rank-after [:ranking :alice])\n (get-in replayed-rank [:ranking :alice]))\n@@ -473,7 +534,6 @@\n (.destroyForcibly (:proc s))\n (deref s))\n (when-some [m @!or-mock] ((:stop-fn m)))\n- (when-some [m @!gh-mock] ((:stop-fn m)))\n (fs/delete-tree tmp-dir)))\n \n (let [{:keys [pass fail]} @counts]\ndiff --git a/tests/test_git_discovery.py b/tests/test_git_discovery.py\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..0dd31bc42a19bc8c59842dc61f193c595c474659\n--- /dev/null\n+++ b/tests/test_git_discovery.py\n@@ -0,0 +1,467 @@\n+\"\"\"Real-Git tests for the constitutional multi-repository discovery rules.\"\"\"\n+\n+from __future__ import annotations\n+\n+import asyncio\n+import hashlib\n+import os\n+import subprocess\n+from pathlib import Path\n+from types import SimpleNamespace\n+\n+import pytest\n+\n+import constitution as c\n+\n+\n+def git(repo: Path | None, *args: str, env: dict | None = None) -> str:\n+ command = [\"git\"]\n+ if repo is not None:\n+ command += [\"-C\", str(repo)]\n+ command += list(args)\n+ merged_env = os.environ.copy()\n+ merged_env.update({\n+ \"GIT_CONFIG_NOSYSTEM\": \"1\",\n+ \"GIT_AUTHOR_NAME\": \"Test Author\",\n+ \"GIT_AUTHOR_EMAIL\": \"author@example.test\",\n+ \"GIT_COMMITTER_NAME\": \"Test Committer\",\n+ \"GIT_COMMITTER_EMAIL\": \"author@example.test\",\n+ })\n+ if env:\n+ merged_env.update(env)\n+ result = subprocess.run(\n+ command,\n+ env=merged_env,\n+ text=True,\n+ input=\"\",\n+ stdout=subprocess.PIPE,\n+ stderr=subprocess.PIPE,\n+ check=False,\n+ )\n+ assert result.returncode == 0, result.stderr\n+ return result.stdout.strip()\n+\n+\n+def make_remote(tmp_path: Path, name: str) -> tuple[Path, Path]:\n+ remote = tmp_path / f\"{name}.git\"\n+ work = tmp_path / f\"{name}-work\"\n+ git(None, \"init\", \"--bare\", str(remote))\n+ git(None, \"init\", \"-b\", \"main\", str(work))\n+ git(work, \"config\", \"user.name\", \"Test Author\")\n+ git(work, \"config\", \"user.email\", \"author@example.test\")\n+ git(work, \"remote\", \"add\", \"origin\", str(remote))\n+ return remote, work\n+\n+\n+def commit_file(\n+ work: Path,\n+ name: str,\n+ content: str | bytes,\n+ message: str,\n+ timestamp: int,\n+ *,\n+ email: str = \"author@example.test\",\n+) -> str:\n+ path = work / name\n+ path.parent.mkdir(parents=True, exist_ok=True)\n+ if isinstance(content, bytes):\n+ path.write_bytes(content)\n+ else:\n+ path.write_text(content)\n+ git(work, \"add\", \"--\", name)\n+ date = f\"@{timestamp} +0000\"\n+ return git(\n+ work,\n+ \"commit\",\n+ \"-m\",\n+ message,\n+ env={\n+ \"GIT_AUTHOR_EMAIL\": email,\n+ \"GIT_COMMITTER_EMAIL\": email,\n+ \"GIT_AUTHOR_DATE\": date,\n+ \"GIT_COMMITTER_DATE\": date,\n+ },\n+ ) and git(work, \"rev-parse\", \"HEAD\")\n+\n+\n+def push(work: Path, *refs: str) -> None:\n+ git(work, \"push\", \"--force\", \"origin\", *refs)\n+\n+\n+@pytest.fixture\n+def discovery_config(tmp_path, monkeypatch):\n+ monkeypatch.setattr(c, \"GIT_MIRROR_DIR\", tmp_path / \"mirrors\")\n+ monkeypatch.setattr(c, \"GENESIS_MS\", 1_000_000)\n+ monkeypatch.setattr(c, \"CONTRIBUTORS\", {\n+ \"alice\": [\"author@example.test\"],\n+ \"bob\": [\"bob@example.test\"],\n+ })\n+ return tmp_path\n+\n+\n+def configure(monkeypatch, repositories):\n+ monkeypatch.setattr(c, \"REPOSITORIES\", repositories)\n+\n+\n+def test_ref_patterns_distinguish_nested_branches():\n+ shallow = c._ref_pattern_regex(\"refs/heads/*\")\n+ recursive = c._ref_pattern_regex(\"refs/heads/**\")\n+ assert shallow.fullmatch(\"refs/heads/main\")\n+ assert not shallow.fullmatch(\"refs/heads/team/topic\")\n+ assert recursive.fullmatch(\"refs/heads/team/topic\")\n+\n+\n+def test_manifest_order_does_not_change_digest(monkeypatch):\n+ repos = [\n+ {\"id\": \"b\", \"url\": \"/b\", \"refs\": [\"refs/heads/z\", \"refs/heads/a\"]},\n+ {\"id\": \"a\", \"url\": \"/a\", \"refs\": [\"refs/heads/**\"]},\n+ ]\n+ configure(monkeypatch, repos)\n+ monkeypatch.setattr(c, \"CONTRIBUTORS\", {\"alice\": [\"A@EXAMPLE.TEST\"]})\n+ first = c._config_digest(c._normalized_discovery_config())\n+ configure(monkeypatch, list(reversed(repos)))\n+ second = c._config_digest(c._normalized_discovery_config())\n+ assert first == second\n+\n+\n+@pytest.mark.parametrize(\n+ \"repositories\",\n+ [\n+ [{\"id\": \"../escape\", \"url\": \"/x\", \"refs\": [\"refs/heads/main\"]}],\n+ [{\"id\": \"x\", \"url\": \"\", \"refs\": [\"refs/heads/main\"]}],\n+ [{\"id\": \"x\", \"url\": \"/x\", \"refs\": []}],\n+ [\n+ {\"id\": \"x\", \"url\": \"/x\", \"refs\": [\"refs/heads/main\"]},\n+ {\"id\": \"x\", \"url\": \"/y\", \"refs\": [\"refs/heads/main\"]},\n+ ],\n+ ],\n+)\n+def test_invalid_manifests_fail(repositories, monkeypatch):\n+ configure(monkeypatch, repositories)\n+ monkeypatch.setattr(c, \"CONTRIBUTORS\", {\"alice\": [\"a@example.test\"]})\n+ with pytest.raises(ValueError):\n+ c._normalized_discovery_config()\n+\n+\n+def test_bootstrap_genesis_nested_refs_and_exclusions(discovery_config, monkeypatch):\n+ remote, work = make_remote(discovery_config, \"one\")\n+ old_oid = commit_file(work, \"old.txt\", \"old\", \"before genesis\", 999)\n+ new_oid = commit_file(work, \"new.txt\", \"new\", \"after genesis\", 1001)\n+ git(work, \"branch\", \"team/topic\")\n+ push(work, \"main\", \"team/topic\")\n+ configure(monkeypatch, [{\n+ \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/**\"],\n+ }])\n+\n+ event = c._build_discovery(0, c.GENESIS_MS, [])\n+ observations = {row[\"oid\"].split(\":\", 1)[1]: row for row in event.observations}\n+ assert observations[old_oid][\"exclusion_reason\"] == \"before_genesis\"\n+ assert observations[new_oid][\"eligible\"]\n+ assert {source[\"ref_name\"] for source in observations[new_oid][\"first_sources\"]} == {\n+ \"refs/heads/main\", \"refs/heads/team/topic\",\n+ }\n+ assert event.commits[0][\"contributor\"] == \"alice\"\n+\n+\n+def test_first_reachable_ignores_old_timestamp_after_bootstrap(\n+ discovery_config, monkeypatch\n+):\n+ remote, work = make_remote(discovery_config, \"one\")\n+ commit_file(work, \"base.txt\", \"base\", \"base\", 1001)\n+ push(work, \"main\")\n+ configure(monkeypatch, [{\n+ \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+ }])\n+ first = c._build_discovery(0, c.GENESIS_MS, [])\n+\n+ git(work, \"checkout\", \"-b\", \"hidden\")\n+ old_dated_oid = commit_file(work, \"late.txt\", \"late\", \"old dated\", 500)\n+ git(work, \"checkout\", \"main\")\n+ git(work, \"merge\", \"--ff-only\", \"hidden\")\n+ push(work, \"main\")\n+\n+ second = c._build_discovery(1, c.GENESIS_MS + 1, [first])\n+ row = next(\n+ row for row in second.observations\n+ if row[\"oid\"].endswith(old_dated_oid)\n+ )\n+ assert row[\"eligible\"]\n+\n+\n+def test_force_push_removal_and_reintroduction_never_reattributes(\n+ discovery_config, monkeypatch\n+):\n+ remote, work = make_remote(discovery_config, \"one\")\n+ base = commit_file(work, \"base.txt\", \"base\", \"base\", 1001)\n+ extra = commit_file(work, \"extra.txt\", \"extra\", \"extra\", 1002)\n+ push(work, \"main\")\n+ configure(monkeypatch, [{\n+ \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+ }])\n+ first = c._build_discovery(0, c.GENESIS_MS, [])\n+\n+ git(work, \"reset\", \"--hard\", base)\n+ push(work, \"main\")\n+ second = c._build_discovery(1, c.GENESIS_MS + 1, [first])\n+ assert second.observations == []\n+\n+ git(work, \"reset\", \"--hard\", extra)\n+ push(work, \"main\")\n+ third = c._build_discovery(2, c.GENESIS_MS + 2, [first, second])\n+ assert third.observations == []\n+\n+\n+def test_global_oid_and_cherry_pick_patch_dedup(discovery_config, monkeypatch):\n+ remote_a, work_a = make_remote(discovery_config, \"a\")\n+ commit_file(work_a, \"base.txt\", \"base\", \"base\", 1001)\n+ shared = commit_file(work_a, \"feature.txt\", \"feature\\n\", \"feature\", 1002)\n+ push(work_a, \"main\")\n+\n+ remote_b = discovery_config / \"b.git\"\n+ git(None, \"clone\", \"--bare\", str(remote_a), str(remote_b))\n+ work_b = discovery_config / \"b-work\"\n+ git(None, \"clone\", str(remote_b), str(work_b))\n+ git(work_b, \"config\", \"user.name\", \"Bob\")\n+ git(work_b, \"config\", \"user.email\", \"bob@example.test\")\n+\n+ configure(monkeypatch, [\n+ {\"id\": \"a\", \"url\": str(remote_a), \"refs\": [\"refs/heads/main\"]},\n+ {\"id\": \"b\", \"url\": str(remote_b), \"refs\": [\"refs/heads/main\"]},\n+ ])\n+ first = c._build_discovery(0, c.GENESIS_MS, [])\n+ shared_rows = [r for r in first.observations if r[\"oid\"].endswith(shared)]\n+ assert len(shared_rows) == 1\n+ assert len(shared_rows[0][\"first_sources\"]) == 2\n+\n+ git(work_b, \"checkout\", \"-b\", \"copy\", f\"{shared}^\")\n+ git(\n+ work_b,\n+ \"cherry-pick\",\n+ shared,\n+ env={\n+ \"GIT_COMMITTER_NAME\": \"Bob\",\n+ \"GIT_COMMITTER_EMAIL\": \"bob@example.test\",\n+ \"GIT_COMMITTER_DATE\": \"@1003 +0000\",\n+ },\n+ )\n+ copied = git(work_b, \"rev-parse\", \"HEAD\")\n+ git(work_b, \"branch\", \"-f\", \"main\", copied)\n+ push(work_b, \"main\")\n+\n+ second = c._build_discovery(1, c.GENESIS_MS + 1, [first])\n+ copied_row = next(r for r in second.observations if r[\"oid\"].endswith(copied))\n+ assert copied_row[\"exclusion_reason\"] == \"duplicate_patch\"\n+ assert copied_row[\"canonical_patch_oid\"].endswith(shared)\n+ assert second.commits == []\n+\n+\n+def test_merge_empty_unknown_and_binary_are_explicit(discovery_config, monkeypatch):\n+ remote, work = make_remote(discovery_config, \"one\")\n+ commit_file(work, \"base.txt\", \"base\", \"base\", 1001)\n+ git(work, \"checkout\", \"-b\", \"feature\")\n+ commit_file(work, \"binary.bin\", b\"\\x00\\x01\\xff\", \"binary\", 1002)\n+ git(work, \"checkout\", \"main\")\n+ commit_file(work, \"main.txt\", \"main\", \"main\", 1003)\n+ git(\n+ work,\n+ \"merge\",\n+ \"--no-ff\",\n+ \"feature\",\n+ \"-m\",\n+ \"merge\",\n+ env={\"GIT_AUTHOR_DATE\": \"@1004 +0000\", \"GIT_COMMITTER_DATE\": \"@1004 +0000\"},\n+ )\n+ git(\n+ work,\n+ \"commit\",\n+ \"--allow-empty\",\n+ \"-m\",\n+ \"empty\",\n+ env={\"GIT_AUTHOR_DATE\": \"@1005 +0000\", \"GIT_COMMITTER_DATE\": \"@1005 +0000\"},\n+ )\n+ commit_file(\n+ work, \"unknown.txt\", \"unknown\", \"unknown\", 1006,\n+ email=\"unknown@example.test\",\n+ )\n+ push(work, \"main\")\n+ configure(monkeypatch, [{\n+ \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+ }])\n+\n+ event = c._build_discovery(0, c.GENESIS_MS, [])\n+ reasons = {row[\"exclusion_reason\"] for row in event.observations}\n+ assert {\"merge_commit\", \"empty_commit\", \"unknown_contributor\"} <= reasons\n+ binary = next(row for row in event.commits if row[\"message\"] == \"binary\")\n+ assert binary[\"patch_identity\"]\n+ assert binary[\"patch_sha256\"] == hashlib.sha256(\n+ binary[\"patch\"].encode()\n+ ).hexdigest()\n+\n+\n+def test_repository_failure_does_not_return_partial_snapshot(\n+ discovery_config, monkeypatch\n+):\n+ remote, work = make_remote(discovery_config, \"good\")\n+ commit_file(work, \"file.txt\", \"ok\", \"ok\", 1001)\n+ push(work, \"main\")\n+ configure(monkeypatch, [\n+ {\"id\": \"good\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"]},\n+ {\n+ \"id\": \"missing\",\n+ \"url\": str(discovery_config / \"missing.git\"),\n+ \"refs\": [\"refs/heads/main\"],\n+ },\n+ ])\n+ with pytest.raises(RuntimeError):\n+ c._build_discovery(0, c.GENESIS_MS, [])\n+\n+\n+def test_git_replace_refs_cannot_falsify_discovered_commit(\n+ discovery_config, monkeypatch\n+):\n+ remote, work = make_remote(discovery_config, \"one\")\n+ original = commit_file(work, \"file.txt\", \"original\", \"original\", 1001)\n+ replacement = commit_file(work, \"file.txt\", \"replacement\", \"replacement\", 1002)\n+ git(work, \"replace\", original, replacement)\n+ git(work, \"reset\", \"--hard\", original)\n+ push(work, \"main\", f\"refs/replace/{original}\")\n+ configure(monkeypatch, [{\n+ \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+ }])\n+\n+ event = c._build_discovery(0, c.GENESIS_MS, [])\n+ discovered = next(row for row in event.commits if row[\"oid\"].endswith(original))\n+ assert discovered[\"message\"] == \"original\"\n+ assert \"original\" in discovered[\"patch\"]\n+ assert \"replacement\" not in discovered[\"patch\"]\n+\n+\n+def test_replay_is_idempotent_and_path_independent(discovery_config, monkeypatch):\n+ remote, work = make_remote(discovery_config, \"one\")\n+ commit_file(work, \"file.txt\", \"ok\", \"ok\", 1001)\n+ push(work, \"main\")\n+ configure(monkeypatch, [{\n+ \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+ }])\n+ first = c._build_discovery(0, c.GENESIS_MS, [])\n+ second = c._build_discovery(1, c.GENESIS_MS + 1, [first])\n+ assert second.observations == []\n+ assert second.commits == []\n+ assert first.repositories[0][\"reachable_set_sha256\"] == (\n+ second.repositories[0][\"reachable_set_sha256\"]\n+ )\n+\n+\n+def test_git_timeout_is_reported_without_partial_result(monkeypatch, tmp_path):\n+ def timeout(*_args, **_kwargs):\n+ raise subprocess.TimeoutExpired([\"git\", \"fetch\"], 1)\n+\n+ monkeypatch.setattr(c.subprocess, \"run\", timeout)\n+ with pytest.raises(RuntimeError, match=\"timed out\"):\n+ c._git(tmp_path, \"fetch\")\n+\n+\n+def test_concurrent_same_epoch_discovery_appends_once(\n+ discovery_config, monkeypatch\n+):\n+ remote, work = make_remote(discovery_config, \"one\")\n+ commit_file(work, \"file.txt\", \"ok\", \"ok\", 1001)\n+ push(work, \"main\")\n+ configure(monkeypatch, [{\n+ \"id\": \"one\", \"url\": str(remote), \"refs\": [\"refs/heads/main\"],\n+ }])\n+ ledger_path = discovery_config / \"ledger.jsonl\"\n+ monkeypatch.setattr(c, \"store\", c.JsonlStore(ledger_path))\n+\n+ async def run_both():\n+ return await asyncio.gather(\n+ c.discover_repositories(0, c.GENESIS_MS),\n+ c.discover_repositories(0, c.GENESIS_MS),\n+ )\n+\n+ left, right = asyncio.run(run_both())\n+ assert left.snapshot_id == right.snapshot_id\n+ discoveries = [\n+ event for event in c.store.read() if isinstance(event, c.GitDiscovery)\n+ ]\n+ assert len(discoveries) == 1\n+\n+\n+def test_empty_epoch_records_zero_emission_without_burning_pool(\n+ discovery_config, monkeypatch\n+):\n+ monkeypatch.setattr(c, \"store\", c.JsonlStore(discovery_config / \"ledger.jsonl\"))\n+\n+ async def discover(_epoch, _boundary):\n+ return SimpleNamespace(commits=[], snapshot_id=\"empty-snapshot\")\n+\n+ async def rank(_commits):\n+ return {}, []\n+\n+ monkeypatch.setattr(c, \"discover_repositories\", discover)\n+ monkeypatch.setattr(c, \"rank_commits\", rank)\n+ entry = asyncio.run(c.run_emission(0, c.GENESIS_MS))\n+ assert c.Decimal(entry.total_emitted) == 0\n+ assert entry.pool_before == entry.pool_after\n+ assert entry.distributions == {}\n+\n+\n+def test_emission_distribution_sums_exactly_to_total(\n+ discovery_config, monkeypatch\n+):\n+ monkeypatch.setattr(c, \"store\", c.JsonlStore(discovery_config / \"ledger.jsonl\"))\n+\n+ async def discover(_epoch, _boundary):\n+ return SimpleNamespace(commits=[{\"x\": 1}], snapshot_id=\"ranked-snapshot\")\n+\n+ async def rank(_commits):\n+ return {\n+ \"alice\": c.Decimal(\"0.33333333333333333333333333333333333333333333333333\"),\n+ \"bob\": c.Decimal(\"0.66666666666666666666666666666666666666666666666667\"),\n+ }, [\"model\"]\n+\n+ monkeypatch.setattr(c, \"discover_repositories\", discover)\n+ monkeypatch.setattr(c, \"rank_commits\", rank)\n+ entry = asyncio.run(c.run_emission(0, c.GENESIS_MS))\n+ distributed = sum(c.Decimal(x) for x in entry.distributions.values())\n+ assert distributed == c.Decimal(entry.total_emitted)\n+ assert entry.discovery_snapshot_id == \"ranked-snapshot\"\n+\n+\n+def test_single_contributor_ranking_is_total_and_uses_no_pairwise_votes(\n+ monkeypatch,\n+):\n+ async def models(n=3):\n+ return []\n+\n+ monkeypatch.setattr(c, \"fetch_top_models\", models)\n+ ranking, used = asyncio.run(c.rank_commits([{\n+ \"contributor\": \"alice\",\n+ \"oid\": \"sha1:\" + \"a\" * 40,\n+ \"message\": \"one contribution\",\n+ \"patch\": \"patch\",\n+ }]))\n+ assert ranking == {\"alice\": c.Decimal(\"1\")}\n+ assert used == []\n+\n+\n+def test_any_council_failure_aborts_ranking(monkeypatch):\n+ async def models(n=3):\n+ return [\"broken\"]\n+\n+ async def compare(*_args):\n+ raise RuntimeError(\"model unavailable\")\n+\n+ monkeypatch.setattr(c, \"fetch_top_models\", models)\n+ monkeypatch.setattr(c, \"llm_pairwise_compare\", compare)\n+ commits = [\n+ {\n+ \"contributor\": contributor,\n+ \"oid\": \"sha1:\" + char * 40,\n+ \"message\": contributor,\n+ \"patch\": \"patch\",\n+ }\n+ for contributor, char in [(\"alice\", \"a\"), (\"bob\", \"b\")]\n+ ]\n+ with pytest.raises(RuntimeError, match=\"council model failed\"):\n+ asyncio.run(c.rank_commits(commits))\ndiff --git a/tests/test_git_discovery_stateful.py b/tests/test_git_discovery_stateful.py\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..e41041fdbc84fff441c85422c23eaa3df53b094b\n--- /dev/null\n+++ b/tests/test_git_discovery_stateful.py\n@@ -0,0 +1,161 @@\n+\"\"\"State-machine checks for discovery under changing real Git refs.\"\"\"\n+\n+from __future__ import annotations\n+\n+import os\n+import shutil\n+import subprocess\n+import tempfile\n+from pathlib import Path\n+\n+from hypothesis import settings\n+from hypothesis.stateful import (\n+ RuleBasedStateMachine,\n+ invariant,\n+ precondition,\n+ rule,\n+)\n+\n+import constitution as c\n+\n+\n+def git(repo: Path | None, *args: str, timestamp: int | None = None) -> str:\n+ command = [\"git\"]\n+ if repo is not None:\n+ command += [\"-C\", str(repo)]\n+ command += list(args)\n+ env = os.environ.copy()\n+ env.update({\n+ \"GIT_CONFIG_NOSYSTEM\": \"1\",\n+ \"GIT_AUTHOR_NAME\": \"State Machine\",\n+ \"GIT_AUTHOR_EMAIL\": \"state@example.test\",\n+ \"GIT_COMMITTER_NAME\": \"State Machine\",\n+ \"GIT_COMMITTER_EMAIL\": \"state@example.test\",\n+ })\n+ if timestamp is not None:\n+ env[\"GIT_AUTHOR_DATE\"] = f\"@{timestamp} +0000\"\n+ env[\"GIT_COMMITTER_DATE\"] = f\"@{timestamp} +0000\"\n+ result = subprocess.run(\n+ command,\n+ text=True,\n+ stdout=subprocess.PIPE,\n+ stderr=subprocess.PIPE,\n+ env=env,\n+ check=False,\n+ )\n+ if result.returncode:\n+ raise AssertionError(result.stderr)\n+ return result.stdout.strip()\n+\n+\n+class GitDiscoveryMachine(RuleBasedStateMachine):\n+ def __init__(self):\n+ super().__init__()\n+ self.root = Path(tempfile.mkdtemp(prefix=\"constitution-stateful-\"))\n+ self.remote = self.root / \"remote.git\"\n+ self.work = self.root / \"work\"\n+ git(None, \"init\", \"--bare\", str(self.remote))\n+ git(None, \"init\", \"-b\", \"main\", str(self.work))\n+ git(self.work, \"config\", \"user.name\", \"State Machine\")\n+ git(self.work, \"config\", \"user.email\", \"state@example.test\")\n+ git(self.work, \"remote\", \"add\", \"origin\", str(self.remote))\n+\n+ self.original = (\n+ c.REPOSITORIES, c.CONTRIBUTORS, c.GIT_MIRROR_DIR, c.GENESIS_MS,\n+ )\n+ c.REPOSITORIES = [{\n+ \"id\": \"state\",\n+ \"url\": str(self.remote),\n+ \"refs\": [\"refs/heads/main\"],\n+ }]\n+ c.CONTRIBUTORS = {\"state\": [\"state@example.test\"]}\n+ c.GIT_MIRROR_DIR = self.root / \"mirrors\"\n+ c.GENESIS_MS = 1_000_000\n+\n+ self.counter = 0\n+ self.events = []\n+ self.removed_tip: str | None = None\n+ self._commit_and_push()\n+\n+ def teardown(self):\n+ (\n+ c.REPOSITORIES, c.CONTRIBUTORS, c.GIT_MIRROR_DIR, c.GENESIS_MS,\n+ ) = self.original\n+ shutil.rmtree(self.root, ignore_errors=True)\n+\n+ def _commit_and_push(self):\n+ self.counter += 1\n+ path = self.work / f\"file-{self.counter}.txt\"\n+ path.write_text(f\"value {self.counter}\\n\")\n+ git(self.work, \"add\", \"--\", path.name)\n+ git(\n+ self.work,\n+ \"commit\",\n+ \"-m\",\n+ f\"commit {self.counter}\",\n+ timestamp=1000 + self.counter,\n+ )\n+ git(self.work, \"push\", \"--force\", \"origin\", \"main\")\n+\n+ @rule()\n+ def advance_branch(self):\n+ if self.removed_tip is None:\n+ self._commit_and_push()\n+\n+ @rule()\n+ def scan(self):\n+ event = c._build_discovery(\n+ len(self.events), c.GENESIS_MS + len(self.events), self.events\n+ )\n+ self.events.append(event)\n+\n+ @precondition(lambda self: self.removed_tip is None)\n+ @rule()\n+ def force_push_back(self):\n+ if self.counter < 2:\n+ return\n+ self.removed_tip = git(self.work, \"rev-parse\", \"HEAD\")\n+ git(self.work, \"reset\", \"--hard\", \"HEAD^\")\n+ git(self.work, \"push\", \"--force\", \"origin\", \"main\")\n+\n+ @precondition(lambda self: self.removed_tip is not None)\n+ @rule()\n+ def restore_force_pushed_tip(self):\n+ git(self.work, \"reset\", \"--hard\", self.removed_tip)\n+ git(self.work, \"push\", \"--force\", \"origin\", \"main\")\n+ self.removed_tip = None\n+\n+ @invariant()\n+ def observations_are_monotonic_and_unique(self):\n+ observed = [\n+ row[\"oid\"]\n+ for event in self.events\n+ for row in event.observations\n+ ]\n+ assert len(observed) == len(set(observed))\n+\n+ @invariant()\n+ def patch_classes_are_ranked_at_most_once(self):\n+ patch_ids = [\n+ commit[\"patch_identity\"]\n+ for event in self.events\n+ for commit in event.commits\n+ ]\n+ assert len(patch_ids) == len(set(patch_ids))\n+\n+ @invariant()\n+ def replay_matches_accumulated_state(self):\n+ seen_oids, seen_patches = c._replayed_discovery_state(self.events)\n+ expected_oids = {\n+ row[\"oid\"] for event in self.events for row in event.observations\n+ }\n+ assert seen_oids == expected_oids\n+ assert all(oid in seen_oids for oid in seen_patches.values())\n+\n+\n+TestGitDiscoveryStateMachine = GitDiscoveryMachine.TestCase\n+TestGitDiscoveryStateMachine.settings = settings(\n+ max_examples=8,\n+ stateful_step_count=12,\n+ deadline=None,\n+)\ndiff --git a/uv.lock b/uv.lock\nindex 9cf3e067adf2f39d9eb160631c3a4b3c237ec26a..bab8e115a73870fd236bd46a1bf773b44fb5d3ee 100644\n--- a/uv.lock\n+++ b/uv.lock\n@@ -33,6 +33,19 @@ wheels = [\n { url = \"https://files.pythonhosted.org/packages/da/42/e921fccf5015463e32a3cf6ee7f980a6ed0f395ceeaa45060b61d86486c2/anyio-4.13.0-py3-none-any.whl\", hash = \"sha256:08b310f9e24a9594186fd75b4f73f4a4152069e3853f1ed8bfbf58369f4ad708\", size = 114353, upload-time = \"2026-03-24T12:59:08.246Z\" },\n ]\n \n+[[package]]\n+name = \"authlib\"\n+version = \"1.7.2\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+ { name = \"cryptography\" },\n+ { name = \"joserfc\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/36/98/7d93f30d029643c0275dbc0bd6d5a6f670661ee6c9a94d93af7ab4887600/authlib-1.7.2.tar.gz\", hash = \"sha256:2cea25fefcd4e7173bdf1372c0afc265c8034b23a8cd5dcb6a9164b826c64231\", size = 176511, upload-time = \"2026-05-06T08:10:23.116Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/fb/95/adcb68e20c34162e9135f370d6e31737719c2b6f94bc953fe7ed1f10fe21/authlib-1.7.2-py2.py3-none-any.whl\", hash = \"sha256:3e1faedc9d87e7d56a164eca3ccb6ace0d61b94abe83e92242f8dc8bba9b4a9f\", size = 259548, upload-time = \"2026-05-06T08:10:21.436Z\" },\n+]\n+\n [[package]]\n name = \"certifi\"\n version = \"2026.2.25\"\n@@ -42,6 +55,104 @@ wheels = [\n { url = \"https://files.pythonhosted.org/packages/9a/3c/c17fb3ca2d9c3acff52e30b309f538586f9f5b9c9cf454f3845fc9af4881/certifi-2026.2.25-py3-none-any.whl\", hash = \"sha256:027692e4402ad994f1c42e52a4997a9763c646b73e4096e4d5d6db8af1d6f0fa\", size = 153684, upload-time = \"2026-02-25T02:54:15.766Z\" },\n ]\n \n+[[package]]\n+name = \"cffi\"\n+version = \"2.1.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+ { name = \"pycparser\", marker = \"implementation_name != 'PyPy'\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/57/5f/ff100cae70ebe9d8df1c01a00e510e45d9adb5c1fdda84791b199141de97/cffi-2.1.0.tar.gz\", hash = \"sha256:efc1cdd798b1aaf39b4610bba7aad28c9bea9b910f25c784ccf9ec1fa719d1f9\", size = 531036, upload-time = \"2026-07-06T21:34:30.382Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/d3/67/85c89a59ba36a671e79638f44d466749f08179266a57e4f2ffdf92174072/cffi-2.1.0-cp311-cp311-macosx_10_15_x86_64.whl\", hash = \"sha256:02cb7ff33ded4f1532476731f89ede53e2e488a8e6205515a82144246ffa7dcc\", size = 183845, upload-time = \"2026-07-06T21:32:26.32Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/ea/dd/e3b0baa2d3d6a857ac72b7efbf18e32e487c9cdafcc13049ad765495b15e/cffi-2.1.0-cp311-cp311-macosx_11_0_arm64.whl\", hash = \"sha256:f5bce581e6b8c235e566a14768a943b172ada3ed73537bb0c0be1edee312d4e7\", size = 184186, upload-time = \"2026-07-06T21:32:28.025Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/65/68/9f3ef890cf3c6ab97bd531c5677f67613d302165d16f8142b2811782a614/cffi-2.1.0-cp311-cp311-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl\", hash = \"sha256:30b65779d598c370374fefabf138d456fd6f3216bfa7bedfab1ba82025b0cd93\", size = 211892, upload-time = \"2026-07-06T21:32:29.565Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/22/d7/1a74539db16d8bfd839ff1515948948efbb162e574650fd3d846896eea95/cffi-2.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:88023dfe18799507b73f1dbb0d14326a17465de1bc9c9c7655c22845e9ddc3a2\", size = 218793, upload-time = \"2026-07-06T21:32:30.951Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/ec/d1/9a5b7169499e8e8d8e636de70b97ac7c9447104d2ff1a2cd94790cea5162/cffi-2.1.0-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:0a96b74cda968eebbad56d973efe5098974f0a9fb323865bf99ea1fd24e3e64c\", size = 205737, upload-time = \"2026-07-06T21:32:32.216Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/ba/b0/e131a9c41f10607926278453d9596163594fe1c4ebc46efe3b5e5b34eb84/cffi-2.1.0-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:a5781494d4d400a3f47f8f1da94b324f6e6b440a53387774002890a2a2f4b50f\", size = 204909, upload-time = \"2026-07-06T21:32:33.655Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/fb/d2/4398416cd699b35167947c6e22aca52c47e69ad5695073c9f1f2c52e04aa/cffi-2.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:aa7a1b53a2a4452ada2d1b5dade9960b2522f1e61293a811a077439e39029565\", size = 217883, upload-time = \"2026-07-06T21:32:35.173Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a2/a5/d4fe77b589e5e82d43ebc809bf2e6474afe8e48e32ea050b9357645b6471/cffi-2.1.0-cp311-cp311-musllinux_1_2_aarch64.whl\", hash = \"sha256:9d8272c0e483b024e1b9ad029821470ed8ec65631dbd90217469da0e7cd89f1c\", size = 221251, upload-time = \"2026-07-06T21:32:36.527Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/22/f0/a2fc43084c0433caf7f461bccc013e28f848d04ee1c5ed7fce71423cf4d9/cffi-2.1.0-cp311-cp311-musllinux_1_2_i686.whl\", hash = \"sha256:7762faa47e8ff7eb80bd261d9a7d8eea2d8baa69de5e95b70c1f338bbe712f02\", size = 214250, upload-time = \"2026-07-06T21:32:37.852Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/04/8c/b925975448cf20634a9fbd5efceb807219db452653648d2897c0989cab2d/cffi-2.1.0-cp311-cp311-musllinux_1_2_x86_64.whl\", hash = \"sha256:89095c1968b4ba8285840e131bf2891b09ae137fe2146905acae0354fbce1b5e\", size = 219441, upload-time = \"2026-07-06T21:32:39.146Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/eb/da/5c4918a2d61d86fa927d716cb3d8e4626ef8dc8f605a599d32f33897f59a/cffi-2.1.0-cp311-cp311-win32.whl\", hash = \"sha256:64c753a0f87a256020004f37a1c8c02c480e725f910f0b2a0f3f07debd1b2479\", size = 174496, upload-time = \"2026-07-06T21:32:40.467Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/f9/c8/6c2de1d55cf35ef8b92885d5ef280790f0fb9634d87ea1cc315176aecd61/cffi-2.1.0-cp311-cp311-win_amd64.whl\", hash = \"sha256:4f26194e3d95e06501b942642855aed4f953d55e95d7d01b7c4483db3ecff458\", size = 185113, upload-time = \"2026-07-06T21:32:41.761Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/9e/4e/e8d7cb5783f1841a3c8fb3a7735838d7484d08ec08c9f984b14cac1ac0e9/cffi-2.1.0-cp311-cp311-win_arm64.whl\", hash = \"sha256:35aaea0c7ee0e58a5cd8c2fd1a48fdf7ece0d2699b7ecdda08194e9ce5dd9b3d\", size = 179927, upload-time = \"2026-07-06T21:32:42.961Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/1e/85/990925db5df586ec90beb97529c853497e7f85ba0234830447faf41c3057/cffi-2.1.0-cp312-cp312-macosx_10_15_x86_64.whl\", hash = \"sha256:df2b82571a1b30f58a87bf4e5a9e78d2b1eff6c6ce8fd3aa3757221f93f0863f\", size = 184829, upload-time = \"2026-07-06T21:32:44.324Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/4b/92/e7bb136ad6b5352603732cf907ef862ca103f20f2031c1735a46300c20c9/cffi-2.1.0-cp312-cp312-macosx_11_0_arm64.whl\", hash = \"sha256:78474632761faa0fb96f30b1c928c84ebcf68713cbb80d15bab09dfe61640fde\", size = 184728, upload-time = \"2026-07-06T21:32:45.683Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/c3/c0/d1ec30ffb370f748f2fb54425972bfef9871e0132e82fb589c46b6676049/cffi-2.1.0-cp312-cp312-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl\", hash = \"sha256:5972433ad71a9e46516584ef60a0fda12d9dc459938d1539c3ddecf9bdc1368d\", size = 214815, upload-time = \"2026-07-06T21:32:48.557Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/1b/dc/5620cf930688be01f2d673804291de757a934c90b946dbdc3d84130c2ea4/cffi-2.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:b6422532152adf4e59b110cb2808cee7a033800952f5c036b4af047ee43199e7\", size = 222429, upload-time = \"2026-07-06T21:32:49.848Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/4b/a4/77b53abbf7a1e0beb9637edbef2a94d15f9c822f591e85d439ffd91519a6/cffi-2.1.0-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:46b1c8db8f6122420f32d02fffb924c2fe9bc772d228c7c711748fff56aabb2b\", size = 210315, upload-time = \"2026-07-06T21:32:51.221Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/58/0c/f528df19cc94b675087324d4760d9e6d5bfae97d6217aa4fac43de4f5fcc/cffi-2.1.0-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:d9fafc5aa2e2a39aaf7f8cc0c1f044a9b07fca12e558dca53a3cc5c654ad67a7\", size = 208859, upload-time = \"2026-07-06T21:32:52.512Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/62/f2/c9522a81c32132799a1972c39f5c5f8b4c8b9f00488a23feaa6c06f07741/cffi-2.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:1e9f50d192a3e525b15a75ab5114e442d83d657b7ec29182a991bc9a88fd3a66\", size = 221844, upload-time = \"2026-07-06T21:32:53.704Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/6e/28/bd53988b9833e8f8ad539d26f4c07a6b3f6bcb1e9e02e7ca038250b3428d/cffi-2.1.0-cp312-cp312-musllinux_1_2_aarch64.whl\", hash = \"sha256:98fff996e983a36d3aa2eca83af40c5821202e7e6f32d13ae94e3d2286f10cfe\", size = 225287, upload-time = \"2026-07-06T21:32:54.907Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/79/99/0d0fd37f055224085f42bbb2c022d002e17dde4a97972822327b07d84101/cffi-2.1.0-cp312-cp312-musllinux_1_2_x86_64.whl\", hash = \"sha256:379de10ce1ba048b1448599d1b37b24caee16309d1ac98d3982fc997f768700b\", size = 223681, upload-time = \"2026-07-06T21:32:56.329Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/b0/80/c138990aa2a70b1a269f6e06348729836d733d6f970867943f61d367f8cc/cffi-2.1.0-cp312-cp312-win32.whl\", hash = \"sha256:9b8f0f26ca4e7513c534d351eca551947d053fac438f2a04ac96d882909b0d3a\", size = 175269, upload-time = \"2026-07-06T21:32:57.777Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a8/eb/f636456ff21a83fc13c032b58cc5dde061691546ac79efa284b2989b7982/cffi-2.1.0-cp312-cp312-win_amd64.whl\", hash = \"sha256:c97f080ea627e2863524c5af3836e2270b5f5dfff1f104392b959f8df0c5d384\", size = 185881, upload-time = \"2026-07-06T21:32:59.253Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/dd/2c/400ea43e721727dca8a65c4521390e9196757caba4a45643acb2b63271b8/cffi-2.1.0-cp312-cp312-win_arm64.whl\", hash = \"sha256:6d194185eabd279f1c05ebe3504265ddfc5ad2b58d0714f7db9f01da592e9eb6\", size = 180088, upload-time = \"2026-07-06T21:33:02.278Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/96/88/a996879e2eeccb815f6e3a5967b12a308257412acec882039d386bd2aa7b/cffi-2.1.0-cp313-cp313-ios_13_0_arm64_iphoneos.whl\", hash = \"sha256:10537b1df4967ca26d21e5072d7d54188354483b91dc75058968d3f0cf13fbda\", size = 194331, upload-time = \"2026-07-06T21:33:03.697Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/58/85/7ae00d5c8dd6266f4e944c3db630f3c5c9a98b61d469c714d848b1d8138a/cffi-2.1.0-cp313-cp313-ios_13_0_arm64_iphonesimulator.whl\", hash = \"sha256:a95b05f9baf29b91171b3a8bd2020b028835243e7b0ff6bb23e2a3c228518b1b\", size = 196966, upload-time = \"2026-07-06T21:33:05.353Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/8c/e9/45c3a76ad8d43ad9261f4c95436da61128d3ca545d72b9612c0ab5be0b1c/cffi-2.1.0-cp313-cp313-macosx_10_15_x86_64.whl\", hash = \"sha256:15faec4adfff450819f3aee0e2e02c812de6edb88203aa58807955db2003472a\", size = 184795, upload-time = \"2026-07-06T21:33:06.699Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/84/4c/82f132cb4418ee6d953d982b19191e87e2a6372c8a4ce36e50b69d6ade4a/cffi-2.1.0-cp313-cp313-macosx_11_0_arm64.whl\", hash = \"sha256:716ff8ec22f20b4d988b12884086bcef0fc99737043e503f7a3935a6be99b1ea\", size = 184746, upload-time = \"2026-07-06T21:33:08.071Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a0/1c/4ed5a0e5bdca6cbc275556de3328dd1b76fd0c11cc13c88fe66d1d8715f2/cffi-2.1.0-cp313-cp313-manylinux1_i686.manylinux2014_i686.manylinux_2_17_i686.manylinux_2_5_i686.whl\", hash = \"sha256:63960549e4f8dc41e31accb97b975abaecfc44c03e396c093a6436763c2ea7db\", size = 214747, upload-time = \"2026-07-06T21:33:09.671Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/3a/a6/e879bb68cc23a2bc9ba8f4b7d8019f0c2694bad2ab6c4a3701d429439f58/cffi-2.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:ff067a8d8d880e7809e4ac88eb009bb848870115317b306666502ccad30b147f\", size = 222392, upload-time = \"2026-07-06T21:33:10.896Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/88/f6/01890cfd63c08f8eb96a8319b0443690197d240a8bd6346048cf7bde9190/cffi-2.1.0-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:3b926723c13eba9f81d2ef3820d63aeceec3b2d4639906047bf675cb8a7a500d\", size = 210285, upload-time = \"2026-07-06T21:33:12.251Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a6/cf/2b684132056f438567b61e19d690dd31cd0921ace051e0a458be6074369e/cffi-2.1.0-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:47ff3a8bfd8cb9da1af7524b965127095055654c177fcfc7578debcb015eecd0\", size = 208801, upload-time = \"2026-07-06T21:33:13.617Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/6f/08/f2e7d62c460faae0926f2d6e423694aa409ced3bc1fe2927a0a6e5f05416/cffi-2.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:799416bae98336e400981ff6e532d67d5c709cfb30afb79865a1315f94b0e224\", size = 221808, upload-time = \"2026-07-06T21:33:15.466Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/38/37/04f54b8e63a02f3d908332c9effbf8c366167c6f733ed8a3d4f79b7e2a1e/cffi-2.1.0-cp313-cp313-musllinux_1_2_aarch64.whl\", hash = \"sha256:961be50688f7fba2fa65f63712d3b9b341a22311f5253460ce933f52f0de1c8c\", size = 225241, upload-time = \"2026-07-06T21:33:16.869Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a9/d6/c72eecca433cd3e681c65ed313ab4835d9d4a379704d0f628a6a05f51c2e/cffi-2.1.0-cp313-cp313-musllinux_1_2_x86_64.whl\", hash = \"sha256:bf5c6cf48238b0eb4c086978c492ad1cbc22373fc5b2d7353b3a598ce6db887a\", size = 223588, upload-time = \"2026-07-06T21:33:18.239Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/c6/4b/e706f67279140f92939da3475ad610df18bfd52d50f14953a8e5fede71d5/cffi-2.1.0-cp313-cp313-win32.whl\", hash = \"sha256:db3eb7d46527159a878ec3460e9d40615bc25ba337d477db681aea6e4f05c5d2\", size = 175248, upload-time = \"2026-07-06T21:33:19.799Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/5a/47/59eb7975cb0e4ef0afa764ea945b29a5bb4537a9f771cb7d6c8a5dd74c95/cffi-2.1.0-cp313-cp313-win_amd64.whl\", hash = \"sha256:8e74a6135550c4748af665b1b1118b6aab33b1fc6a16f9aff630af107c3b4512\", size = 185717, upload-time = \"2026-07-06T21:33:21.47Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/5a/af/34fee85c48f8d94efc8597bc09470c9dd274c145f1c12e0fbc6ab6d38d74/cffi-2.1.0-cp313-cp313-win_arm64.whl\", hash = \"sha256:2282cd5e38aa8accd03e99d1256af8411c84cdbee6a89d841b563fdbd1f3e50f\", size = 180114, upload-time = \"2026-07-06T21:33:22.515Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d8/f0/81478e482afa03f6d18dc8f2afb5edc45b3080853b634b5ed91961be0998/cffi-2.1.0-cp314-cp314-ios_13_0_arm64_iphoneos.whl\", hash = \"sha256:d2117334c3af3bdcb9a88522b844a2bdb5efdc4f71c6c822df55486ae1c3347a\", size = 194142, upload-time = \"2026-07-06T21:33:23.657Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/7d/95/8de304305cd9204974b0ca051b86d307cafca13aa575a0ef1b44d92c0d8c/cffi-2.1.0-cp314-cp314-ios_13_0_arm64_iphonesimulator.whl\", hash = \"sha256:702c436735fbe99d59ada02a1f65cfc0d31c0ee8b7290912f8fbc5cd1e4b16c3\", size = 196819, upload-time = \"2026-07-06T21:33:25.007Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/20/71/7c8372d30e42415602ed9f268f7cfd66f1b855fed881ecd168bcb45dbc0b/cffi-2.1.0-cp314-cp314-macosx_10_15_x86_64.whl\", hash = \"sha256:1ff3456eab0d889592d1936d6125bbfbc7ae4d3354a700f8bd80450a66445d4d\", size = 184965, upload-time = \"2026-07-06T21:33:26.605Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d6/5c/584e626835f0375c928176c04137c96927165cb8733cdb3150ec04e5ee5e/cffi-2.1.0-cp314-cp314-macosx_11_0_arm64.whl\", hash = \"sha256:c4165821e131d6d4ca444347c2b694e2311bcfa3fe5a861cc72968f28867beac\", size = 184952, upload-time = \"2026-07-06T21:33:27.823Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/2e/d2/065fcae1c73979fac8e054462478d0ff8a29c40cdc2ed7ea5676a061df53/cffi-2.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:276f20fffd7b396e12516ba8edf9509210ac248cbbc5acbc39cd512f9f59ebe6\", size = 222353, upload-time = \"2026-07-06T21:33:29.178Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/ed/a5/e8bbb1ce5b3ac2f53ad6a10bde44318a5a8d99d4f4a000d44a6e39aeb3e4/cffi-2.1.0-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:7d5980a3433d4b71a5e120f9dd551403d7824e31e2e67124fe2769c404c06913\", size = 210051, upload-time = \"2026-07-06T21:33:30.534Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/28/ed/c127d3ac36e899c965e3361357c3befacd6578c03f40125183e41c3b219e/cffi-2.1.0-cp314-cp314-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:6ca4919c6e4f89aa99c42510b42cf54596892c00b3f9077f6bdd1505e24b9c8d\", size = 208630, upload-time = \"2026-07-06T21:33:31.753Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/cc/d7/97d3136f81db489ec8d1d67748c110d6c994268fd7528014aa9f2b085e4e/cffi-2.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:d53d10f7da99ae46f7373b9150393e9c5eab9b224909982b43832668de4779f5\", size = 221593, upload-time = \"2026-07-06T21:33:33.044Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d3/27/93195977168ee63aed233a1a0993a2178798654d1f4bddcdd321d6fd3b21/cffi-2.1.0-cp314-cp314-musllinux_1_2_aarch64.whl\", hash = \"sha256:c351efb95e832a853a29361675f33a7ce53de1a109cd73fd47af0712213aa4ce\", size = 225146, upload-time = \"2026-07-06T21:33:34.224Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/b3/c1/6dbd291ee2ae5a50a034aa057207081f545923bbf15dad4511e985aafff5/cffi-2.1.0-cp314-cp314-musllinux_1_2_x86_64.whl\", hash = \"sha256:dbf7c7a88e2bac086f06d14577332760bdeecc42bdec8ac4077f6260557d9326\", size = 223240, upload-time = \"2026-07-06T21:33:35.57Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/0f/6f/ade5ce9863a57992a6ea3d0d10d7e29b8749fc127204b3d493d667b2815f/cffi-2.1.0-cp314-cp314-win32.whl\", hash = \"sha256:1854b724d00f6654c742097d5387569021be12d3a0f770eae1df8f8acfcc6acd\", size = 177723, upload-time = \"2026-07-06T21:33:51.626Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/41/de/92b9eeed4ae4a21d6fd9b2a2c8505cbed573299902ea73981cc13f7ff62c/cffi-2.1.0-cp314-cp314-win_amd64.whl\", hash = \"sha256:1b96bfe2c4bd825681b7d311ad6d9b7280a091f43e8f63da5729638083cd3bfb\", size = 187937, upload-time = \"2026-07-06T21:33:53.403Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/2e/1a/cc6ae6c2913a03aab8898eee57963cf1035b8df5872ed8b9115fcc7e2be8/cffi-2.1.0-cp314-cp314-win_arm64.whl\", hash = \"sha256:7d28dff1db6764108bc30788d85d61c876beff416d9a49cb9dd7c5a9f34f5804\", size = 183001, upload-time = \"2026-07-06T21:33:54.74Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/14/f0/134c00ce0779ec86dea2aa1aac69339c2741a8045072676763512363a2ea/cffi-2.1.0-cp314-cp314t-macosx_10_15_x86_64.whl\", hash = \"sha256:7ea6b3e2c4250ff1de21c630fe72d0f63eb95c2c32ffbf64a358cf4a8836d714\", size = 188538, upload-time = \"2026-07-06T21:33:36.792Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/50/d8/3b86aba791cb610d24e8a3e1b2cd529e71fa15096b04e4d4e360049d4a4c/cffi-2.1.0-cp314-cp314t-macosx_11_0_arm64.whl\", hash = \"sha256:6af371f3767faeffc6ac1ef57cdfd25844403e9d3f476c5537caee499de96376\", size = 188230, upload-time = \"2026-07-06T21:33:38.011Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/14/d0/117dcd9209255ad8571fbc8c92ef32593a1d294dcec91ddc4e4db50606f2/cffi-2.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:eb4e8997a49aa2c08a3e43c9045d224448b8941d88e7ac163c7d383e560cbf98\", size = 223899, upload-time = \"2026-07-06T21:33:39.514Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/b6/3d/f20f8b886b254e3ad10e15cd4186d3aed49f3e6a35ab37aab9f8f25f7c03/cffi-2.1.0-cp314-cp314t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:bf01d8c84cbea96b944c73b22182e6c7c432b3475632b8111dbfdc95ddad6e13\", size = 211652, upload-time = \"2026-07-06T21:33:40.851Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/28/3b/fad54de07260b93ddeef4b96d0131d57ea900675df1d410ae1deee52d7a6/cffi-2.1.0-cp314-cp314t-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:33eb1ad83ebe8f313e0df035c406227d55a79456704a863fad9842136af5ad7d\", size = 210755, upload-time = \"2026-07-06T21:33:42.183Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/cc/82/3d5c705acb7abbba9bbd7d79b8e62e0f25b6120eb7ae6ac49f1b721722fe/cffi-2.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:ac0f1a2d0cfa7eea3f2aaf006ab6e70e8feeb16b75d65b7e5939982ca2f11056\", size = 223933, upload-time = \"2026-07-06T21:33:43.603Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/6c/d0/47e338384ab6b1004241002fa616301020cea4fc95f283506565d252f276/cffi-2.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl\", hash = \"sha256:c16914df9fb7f500e440e6875fa23ff5e0b31db01fa9c06af98d59a91f0dc2e4\", size = 226749, upload-time = \"2026-07-06T21:33:45.046Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/70/25/65bd5b58ea4bfdfc15cde02cb5365f89ef8ab8b2adfb8fe5c4bd4233382f/cffi-2.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl\", hash = \"sha256:5ecbd0499275d57506d397eebe1981cee87b47fcd9ef5c22cab7ed7644a39a94\", size = 225703, upload-time = \"2026-07-06T21:33:46.374Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/dc/78/aa01ac599a8a4322533d45a1f9bc93b338276d2d59dabbe7c6d92a775c81/cffi-2.1.0-cp314-cp314t-win32.whl\", hash = \"sha256:7d034dcffa09e9a46c93fa3a3be402096cb5354ac6e41ab8e5cc9cd8b642ad76\", size = 182857, upload-time = \"2026-07-06T21:33:47.696Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/b9/26/d00496b22de4d4228f32dde94ad996f350c8aad676d63bcca0743c8dea4d/cffi-2.1.0-cp314-cp314t-win_amd64.whl\", hash = \"sha256:0582a58f3051372229ca8e7f5f589f9e5632678208d8636fea3676711fdf7fe5\", size = 194065, upload-time = \"2026-07-06T21:33:48.953Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d5/dd/0c7dbf815a579ff005008a2d815a55d6bb047c349eef536d9dc53d3f0a8d/cffi-2.1.0-cp314-cp314t-win_arm64.whl\", hash = \"sha256:510aeeeac94811b138077451da1fb18b308a5feab47dd2b603af55804155e1c8\", size = 186404, upload-time = \"2026-07-06T21:33:50.309Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/55/c7/8c8c50cb11c6750051daf12164098a9a6f027ac4356967fd4d800a07f242/cffi-2.1.0-cp315-cp315-ios_13_0_arm64_iphoneos.whl\", hash = \"sha256:2e9dabb9abcb7ad15938c7196ad5c1718a4e6d33cc79b4c0209bdb64c4a54a5c\", size = 194121, upload-time = \"2026-07-06T21:33:56.109Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/99/e2/67680bf19a6b60d2bb7ff83baefa2a4c3d2d7dc0f3277034b802e1fc504c/cffi-2.1.0-cp315-cp315-ios_13_0_arm64_iphonesimulator.whl\", hash = \"sha256:37f525a7e7e50c017fdebe58b787be310ad59357ae43a053943a6e1a6c526001\", size = 196820, upload-time = \"2026-07-06T21:33:57.288Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/ed/da/4bbe583a3b3a5c8c60892124fe17f3fa3656523faf0d3484eae90f091853/cffi-2.1.0-cp315-cp315-macosx_10_15_x86_64.whl\", hash = \"sha256:95f2954c2c9473d892eca6e0409f3568b37ab62a8eedb122461f73cc273476e3\", size = 184936, upload-time = \"2026-07-06T21:33:58.765Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/e5/4b/1f4c36ab273980d7aa75bb126ea4f8971f24a96108acad3a0a084028c57b/cffi-2.1.0-cp315-cp315-macosx_11_0_arm64.whl\", hash = \"sha256:cdf2448aab5f661c9315308ec8b93f4e8a1a67a3c733f8631067a2b67d5913dc\", size = 185045, upload-time = \"2026-07-06T21:34:00.085Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/ef/c3/ad299dc38f3583f8d916b299f028af418a9ec98bc695fcbebeae7420691c/cffi-2.1.0-cp315-cp315-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:90bec57cf82089383bd06a605b3eb8daebf7e5a668520beaf6e327a83a947699\", size = 222342, upload-time = \"2026-07-06T21:34:01.814Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/eb/d8/df4543cc087245044ed02ef3ad8e0a26619d0075ac7a77a12dc81177851b/cffi-2.1.0-cp315-cp315-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:6274dcb2d15cef48daa73ed1be5a40d501d74dccd0cd6db364776d12cb6ba022\", size = 210073, upload-time = \"2026-07-06T21:34:03.255Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/2c/0e/fac738d73728c6cea2a88a2883dca54892496cbba88a1dc1f2909cb8a6f5/cffi-2.1.0-cp315-cp315-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:2b71d409cccee78310ab5dec549aed052aaea483346e282c7b02362596e01bb0\", size = 208551, upload-time = \"2026-07-06T21:34:04.433Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/e6/3f/0b04a700dd64f465c93020253a793a82c9b4dff9961f48facd0df945d9b8/cffi-2.1.0-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:7d3538f9c0e50670f4deb93dbb696576e60590369cae2faf7de681e597a8a1f1\", size = 221649, upload-time = \"2026-07-06T21:34:06.157Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/5d/7c/b7379a5704c79eda57ce075869ba70a0368d1c850f803b3c0d078d39dcaf/cffi-2.1.0-cp315-cp315-musllinux_1_2_aarch64.whl\", hash = \"sha256:8f9ec95b8a043d3dfbc74d9abc6f7baf524dd27a8dc160b0a32ff9cdab650c28\", size = 225203, upload-time = \"2026-07-06T21:34:07.489Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/5a/02/d5e6c43ea85c41bda2a184a3418f195fe7cf602967a8d2b94e085b83deef/cffi-2.1.0-cp315-cp315-musllinux_1_2_x86_64.whl\", hash = \"sha256:af5e2915d41fe6c961694d7bfdc8562942638200f3ce2765dfb8b745cf997629\", size = 223263, upload-time = \"2026-07-06T21:34:08.712Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/2c/d8/772b8259bf75749adffb1c546828978381fb516f60cf701f6c83daf60c85/cffi-2.1.0-cp315-cp315-win32.whl\", hash = \"sha256:0a42c688d19fca6e095a53c6a6e2295a5b050a8b289f109adab02a9e61a25de6\", size = 177696, upload-time = \"2026-07-06T21:34:26.355Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/2f/dd/afa2191fc6d57fedd26e5844a2fe2fcc0bbfa00961bbaa5a41e4921e7cca/cffi-2.1.0-cp315-cp315-win_amd64.whl\", hash = \"sha256:bccbbb5ee76a61f9d99b5bf3846a51d7fca4b6a732fe46f89295610edaf41853\", size = 187914, upload-time = \"2026-07-06T21:34:27.58Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/05/ef/6cd4f8c671517162379dc79cfae5aea9106bc38abb89628d5c16adf6a838/cffi-2.1.0-cp315-cp315-win_arm64.whl\", hash = \"sha256:8d35c139744adb3e727cd51b1a18324bbe44b8bd41bf8322bca4d41289f48eda\", size = 183004, upload-time = \"2026-07-06T21:34:28.905Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/11/b6/12fc55092817a5faa26fb8c40c7f9d662e11a46ee248c137aafc42517d92/cffi-2.1.0-cp315-cp315t-macosx_10_15_x86_64.whl\", hash = \"sha256:f9912624a0c0b834b7520d7769b3644453aabc0a7e1c839da7359f050750e9bc\", size = 188378, upload-time = \"2026-07-06T21:34:09.926Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/8d/2e/cdac88979f295fde5daa69622c7d2111e56e7ceb94f211357fbe452339e4/cffi-2.1.0-cp315-cp315t-macosx_11_0_arm64.whl\", hash = \"sha256:df92f2aba50eb4d96718b68ef76f2e57a57b54f2fa62333496d16c6d585a85ca\", size = 188319, upload-time = \"2026-07-06T21:34:11.101Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/e0/27/1d0b408497e41a74795af122d7b603c418c5fed0171450f899afd04e594f/cffi-2.1.0-cp315-cp315t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:0520e1f4c35f44e209cbbb421b67eec42e6a157f59444dfb6058874ff3610e5d\", size = 223904, upload-time = \"2026-07-06T21:34:12.606Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/8b/31/e115c985105dd7ffb32444505f18ceb874bb42d992af05d5dced7ecf1980/cffi-2.1.0-cp315-cp315t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl\", hash = \"sha256:3681e031db29958a7502f5c0c9d6bbc4c36cb20f7b104086fa642d1799631ff8\", size = 211554, upload-time = \"2026-07-06T21:34:13.987Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/5a/67/9e6e09409336d9e515c58367e7cfcf4f89df06ad25252675595a58eb59d5/cffi-2.1.0-cp315-cp315t-manylinux2014_s390x.manylinux_2_17_s390x.whl\", hash = \"sha256:762f99479dcb369f60ab9017ad4ab97a36a1dd7c1ee5a3b15db0f4b8659120cd\", size = 210795, upload-time = \"2026-07-06T21:34:15.972Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/19/e5/d3cc82a4a0be7902af279c04181ad038449c096734464a5ae1de3e1401bd/cffi-2.1.0-cp315-cp315t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:0611e7ebf90573a535ebdc33ae9da222d037853983e13359f580fab781ca017f\", size = 223843, upload-time = \"2026-07-06T21:34:17.509Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/b9/65/b434abc97ce7cecc2c640fde160507c0ecc7e21544b483ba3325d2e2ea17/cffi-2.1.0-cp315-cp315t-musllinux_1_2_aarch64.whl\", hash = \"sha256:86cf8755a791f72c85dc287128cc62d4f24d392e3f1e15837245623f4a33cccc\", size = 226773, upload-time = \"2026-07-06T21:34:19.05Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/b5/9f/d4dc66ca651eb1145a133314cda721abf13cfac3d28c4a0402263ae6ad75/cffi-2.1.0-cp315-cp315t-musllinux_1_2_x86_64.whl\", hash = \"sha256:ba00f661f8ba35d075c937174e27c2c421cec3942fd2e0ea3e66996757c0fdd9\", size = 225719, upload-time = \"2026-07-06T21:34:20.576Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/68/5a/e536c528bc8057496c360c0978559a2dc45653f89dd6151078aa7d8fca1a/cffi-2.1.0-cp315-cp315t-win32.whl\", hash = \"sha256:cb96698e3c7413d906ce83f8ffd245ec1bd94707541f299d0ce4d6b0193e982b\", size = 182760, upload-time = \"2026-07-06T21:34:22.059Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d3/0b/0ffe8b82d3875bced5fa1e7986a7a46b748262a40ab7f60b475eb9fb1bb3/cffi-2.1.0-cp315-cp315t-win_amd64.whl\", hash = \"sha256:f146d154428a2523f9cc7936c02353c2459b8f6cf07d3cd1ee1c0a611109c5d5\", size = 193769, upload-time = \"2026-07-06T21:34:23.589Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a0/17/1073b53b68c9b5ca6914adf5f8bf55aacc2d3be102418c90700160ea8605/cffi-2.1.0-cp315-cp315t-win_arm64.whl\", hash = \"sha256:cbb7640ce37159548d2147b5b8c241f962143d4c71231431820783f4dc78f210\", size = 186405, upload-time = \"2026-07-06T21:34:24.857Z\" },\n+]\n+\n [[package]]\n name = \"click\"\n version = \"8.3.1\"\n@@ -63,6 +174,62 @@ wheels = [\n { url = \"https://files.pythonhosted.org/packages/d1/d6/3965ed04c63042e047cb6a3e6ed1a63a35087b6a609aa3a15ed8ac56c221/colorama-0.4.6-py2.py3-none-any.whl\", hash = \"sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6\", size = 25335, upload-time = \"2022-10-25T02:36:20.889Z\" },\n ]\n \n+[[package]]\n+name = \"cryptography\"\n+version = \"49.0.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+ { name = \"cffi\", marker = \"platform_python_implementation != 'PyPy'\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/1f/99/d1c90d6041656cc6ee229dc99cd67fd0cd5aec3c5f7d72fffc27cc750054/cryptography-49.0.0.tar.gz\", hash = \"sha256:f89660a348f4f78a92366240a61404e337586ef7f5909a2fef59ca88ef505493\", size = 854345, upload-time = \"2026-06-12T20:02:30.512Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/9b/22/adf66990e63584a68dfb50c24f48a125c07b1699899381c8151e63ed458c/cryptography-49.0.0-cp311-abi3-macosx_11_0_arm64.whl\", hash = \"sha256:966fe0e9c67490071f14c0d2b1cb2dfb3023c5ce39457343931415f08382f2db\", size = 4032100, upload-time = \"2026-06-12T20:02:32.143Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/09/41/3797cfaf69cae04a13ee78ebd83f0678d9c02b4779d21ce24445326f1a69/cryptography-49.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:36d1709f992593689b45bda411498d62c6e365f2ca00b84657d4dadd24de16db\", size = 4692978, upload-time = \"2026-06-12T20:01:21.305Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/e6/8b/43011f7ebe515a8aa20d61f290a326cd890c2e738e16e59eaff8d9c3a412/cryptography-49.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:0e959b578856a3924bc0cbb710fc12c387b9412a951389f3ca61704a9e25f325\", size = 4716422, upload-time = \"2026-06-12T20:01:48.566Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/4a/91/01ce7303a4579e6d3a6abef01bd322848e9ea7a219adcabc5048b9033571/cryptography-49.0.0-cp311-abi3-manylinux_2_28_aarch64.whl\", hash = \"sha256:53ecee2e23f7169b6117e99fc8a944e5e50f79e69758a83b52a00cb98ab2b2d2\", size = 4700503, upload-time = \"2026-06-12T20:02:47.091Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/62/99/a2c95cf8293f07491e9e27c20cc4dcd18176d944e674679adeb1d0173fd6/cryptography-49.0.0-cp311-abi3-manylinux_2_28_ppc64le.whl\", hash = \"sha256:2eda353d8a27bcbcaa4cbed18994a74ab4d19a2ca897db188ea269ab9b71419b\", size = 5309779, upload-time = \"2026-06-12T20:02:08.987Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/20/2c/0622f20ff02b2ef32558733443805dc82fd4c275be01b2d19d14676f3a1b/cryptography-49.0.0-cp311-abi3-manylinux_2_28_x86_64.whl\", hash = \"sha256:2afe9051da7ae7bd5905da5a949280c7d2bb75682e188f650a9d0f2756b834c6\", size = 4749683, upload-time = \"2026-06-12T20:02:03.335Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a3/5b/c5246635d5fd3b64e0d45ae10e99fd32fe9676a79915ccfe5a61ba9af1a5/cryptography-49.0.0-cp311-abi3-manylinux_2_31_armv7l.whl\", hash = \"sha256:0b82e28ee398a386f0807bba7884d30f25218855690f45115831bcce5d90822c\", size = 4337874, upload-time = \"2026-06-12T20:02:54.323Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/6d/88/05563c7fe2e914e87d1a536d06fe83e66b4e1d95cb593e05aea375531da8/cryptography-49.0.0-cp311-abi3-manylinux_2_34_aarch64.whl\", hash = \"sha256:ccac2bfebc306b862133e3bb71f3f6ee8bb525240089b2d952e4144b3a6d5da7\", size = 4700283, upload-time = \"2026-06-12T20:01:34.822Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/c4/b6/d7696e4e890d6ae1469935164c9e5215c557671cb78d6e3f458ccceaa632/cryptography-49.0.0-cp311-abi3-manylinux_2_34_ppc64le.whl\", hash = \"sha256:d0527ce944105f257f605a827d6ebead966c752038b6e8656abb9c5edee6fc68\", size = 5265844, upload-time = \"2026-06-12T20:01:24.09Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a9/3c/f3ad17eecc1a57b0ba236dc01f90e783c51f4a2f35f64777cc4f47a184b2/cryptography-49.0.0-cp311-abi3-manylinux_2_34_x86_64.whl\", hash = \"sha256:cbc77da8c523d5abd028635ba850a6966fcee2c82e2bf65a41d1d8afe0f98be9\", size = 4749290, upload-time = \"2026-06-12T20:01:30.848Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/4f/01/339573cf1023163a400b0b5d16f6d507de413b9f60be6fd1b77feeaf6737/cryptography-49.0.0-cp311-abi3-musllinux_1_2_aarch64.whl\", hash = \"sha256:b87e65d263b3e5d3bb92a57e2a6638e2f31110fa7aa890c7b2dbba42248d0a3f\", size = 4834612, upload-time = \"2026-06-12T20:01:29.246Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/71/fd/577302e213a1be9468f92d1afef66fcf1ef83d516819d9992ca547f592bd/cryptography-49.0.0-cp311-abi3-musllinux_1_2_x86_64.whl\", hash = \"sha256:66ec79c3904820572d7e987abdf304281f141d37ad9a489b8e97066e7b9b6459\", size = 4980804, upload-time = \"2026-06-12T20:01:42.853Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/1f/09/f42b1d190c5ba75f72062a387f8030d1d75f6ab035788f1d9c4b01de6525/cryptography-49.0.0-cp311-abi3-win_amd64.whl\", hash = \"sha256:e5dfc1e64de5677cec922ffa8da89c546d0415bf6efdf081842e5d44c84e1f0e\", size = 3810026, upload-time = \"2026-06-12T20:02:39.262Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/ec/9e/db72b3ae7fc9cfad53e630e56c6ae83b9b6ff0bf3718ffb8012d20b3aabf/cryptography-49.0.0-cp314-cp314t-macosx_11_0_arm64.whl\", hash = \"sha256:73a205dce83953d131a4aa1e0fd917a2fd1c5b1eef251e9d7152efefcbf5caf7\", size = 4013892, upload-time = \"2026-06-12T20:02:10.735Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/86/12/c48a424f38db03027be9f7ed5c7dc5de9933dbee992865f98b13727a009d/cryptography-49.0.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:196ecd6a36e4e9aa10270393bb98d8df88fccee0bf1e5128b91ae4eb4375896d\", size = 4678835, upload-time = \"2026-06-12T20:02:48.743Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/68/28/8a3ad4653662c93fc44dc4e5d8fd374c25c42e07b34bbfbadf49cf57a5a8/cryptography-49.0.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:7abcee80084cda3f7691f3eb1ce480d8df49cec637b429aa35986c1de71738aa\", size = 4697239, upload-time = \"2026-06-12T20:02:56.03Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a8/b2/2193fc74f81aee4f9b62733133b73b5176718932ed8f2e4b03fa040480a6/cryptography-49.0.0-cp314-cp314t-manylinux_2_28_aarch64.whl\", hash = \"sha256:4ae387c9cb68ea569ca17e490d66d8142b81c3cc814bf179974b7d146e490bbb\", size = 4685593, upload-time = \"2026-06-12T20:02:50.666Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/47/f1/1d3eaa243bfc5de4a187b22aa8c048b3e4980bfbe830ac46e6bac2e66947/cryptography-49.0.0-cp314-cp314t-manylinux_2_28_ppc64le.whl\", hash = \"sha256:f37d847238971164fdbc68ade6f6574aecc9c0af714190e2083429ff68f4ce9d\", size = 5289961, upload-time = \"2026-06-12T20:01:46.468Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/58/39/2d51306721330c486495853eda1c567880ff036de15a14c4b74f399934af/cryptography-49.0.0-cp314-cp314t-manylinux_2_28_x86_64.whl\", hash = \"sha256:c2bc30226390d60ea19d9f82b19db005fe0452154a23c1c410c12ea801e43561\", size = 4731145, upload-time = \"2026-06-12T20:02:16.832Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/17/50/983e838c7fd0d87fd8c969bcdd328edaf5f756e38df5281637424c155873/cryptography-49.0.0-cp314-cp314t-manylinux_2_31_armv7l.whl\", hash = \"sha256:07cab27cc7b7e0fd28e5e26bb9eeedde5c135c868b46de4a27845abe94af6122\", size = 4321719, upload-time = \"2026-06-12T20:02:52.611Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a7/f5/8f571d7e27c55bce9f76f026143bcb1e040a4233149ecca0bea5fa5dd5f7/cryptography-49.0.0-cp314-cp314t-manylinux_2_34_aarch64.whl\", hash = \"sha256:b20133d204d2bb56ba047642199603876c872026ca53e79c35b83772ab2cc505\", size = 4685209, upload-time = \"2026-06-12T20:02:07.282Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/e7/84/0e27016a6fc5a0886f797018b26aa42f40c09a82332bff77822a451deaaa/cryptography-49.0.0-cp314-cp314t-manylinux_2_34_ppc64le.whl\", hash = \"sha256:b970c6da94d5bb18629db453d14f2a1300f6bf59b61e9b82377931ef95504866\", size = 5246285, upload-time = \"2026-06-12T20:01:32.439Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/11/2d/5e1fb307cb5931881516b464c98774b3f2c36b5d4bb9a2830253cf553cad/cryptography-49.0.0-cp314-cp314t-manylinux_2_34_x86_64.whl\", hash = \"sha256:d8ecde755e2e91bf773fc94e8c9d730cd7f2007004cb492263a794ec3899a1c8\", size = 4730441, upload-time = \"2026-06-12T20:02:01.469Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/e4/c0/bff5a02ee731d207d6a1ed51732549d8c53d2bc8da1d10ec6f2844201d68/cryptography-49.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl\", hash = \"sha256:e3fb64c420688e5319ae25113a354015abbd8dffbfbc41781a1ea66fc7622ac3\", size = 4815869, upload-time = \"2026-06-12T20:01:36.574Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/b9/26/814681d14248d95d73d5c3eea0c39a94eb8302df966f670a2c60de90974b/cryptography-49.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl\", hash = \"sha256:32703d93296f5c1f4b53349ad3a250c2cae0fdecd3a3dd5d47e616d8d616af27\", size = 4960948, upload-time = \"2026-06-12T20:02:18.688Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/4c/fe/93ecac273d3738939d023612ad12cca9a3740a5345d69fda04134c43fd96/cryptography-49.0.0-cp314-cp314t-win_amd64.whl\", hash = \"sha256:33cd0565932807baddb67b96dbee92f2c374b5c89dee09fd74079aeb8c8dba61\", size = 3799153, upload-time = \"2026-06-12T20:01:39.059Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/19/2a/5bb823f5bedcf80718cea7fbc95ec5515cca3769633c4b01a32be7f30e7c/cryptography-49.0.0-cp39-abi3-macosx_11_0_arm64.whl\", hash = \"sha256:ec5e529fb80935c94fe7b729f9972b50e351a0e6b50aa294fd5cabb109fcc29a\", size = 4025947, upload-time = \"2026-06-12T20:01:25.745Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/3d/df/40577043ca124e17012f408ddddaeb213b856336ac82ddb3bc915f39e29f/cryptography-49.0.0-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl\", hash = \"sha256:f78ff2c9ed8dc2d036b0f4d640e22522213d047c1b14e61205a7e55c80a494d4\", size = 4692429, upload-time = \"2026-06-12T20:01:53.628Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/2c/99/2d13299eb3dd27b02dcfaafcc91d6b5cb3329f7cbd6d8f51921acd566c1a/cryptography-49.0.0-cp39-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\", hash = \"sha256:35b151772baff2c74cba7fa290ceaff4c3b11c0c881eb93eb5dbc05a7cfbba18\", size = 4700968, upload-time = \"2026-06-12T20:02:45.383Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a5/4d/9c0cd02f95e2602dd5e563da149ee0830abef3537be8b34dc56281ebe27a/cryptography-49.0.0-cp39-abi3-manylinux_2_28_aarch64.whl\", hash = \"sha256:0f21641cf4b30fca7aee061ced0ec7ad7b073518088b7c9969a297c0ae796c69\", size = 4697758, upload-time = \"2026-06-12T20:01:41.13Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/24/01/186c825898477d77e2324d5360fefe622ff1d8d1963ec0554e2cada8ec77/cryptography-49.0.0-cp39-abi3-manylinux_2_28_ppc64le.whl\", hash = \"sha256:9e82dcc8e56052715fb18b2429e3bca4823b1629136a2084fc45a9a5cecb9b64\", size = 5298863, upload-time = \"2026-06-12T20:02:24.579Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/b8/7b/62cbbab75d0659865bf0273790031544a0b16c8072d258f9428dcd8190dc/cryptography-49.0.0-cp39-abi3-manylinux_2_28_x86_64.whl\", hash = \"sha256:6f2debedf9ca60cf1d5bd466475638af5130f89965605cd818484d19987d3a21\", size = 4735983, upload-time = \"2026-06-12T20:01:50.14Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/6c/72/3e798c064bc39e471008075d0f9bc9daf77a80879c092e4a8e170c585ed4/cryptography-49.0.0-cp39-abi3-manylinux_2_31_armv7l.whl\", hash = \"sha256:8c25ceb16df5b9435f3f6a9829204985b0e0cbee3b48aacd432c7d2c850b44d9\", size = 4334173, upload-time = \"2026-06-12T20:01:44.743Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/f0/ee/6fca21d1ac73e06f8bef71940abfd4d2f6472b4bca284d770f32bd4086f6/cryptography-49.0.0-cp39-abi3-manylinux_2_34_aarch64.whl\", hash = \"sha256:28d8b15e6275f12c8a207dc309dfa957903c927d08d0cc937ee3f63f200693cc\", size = 4697298, upload-time = \"2026-06-12T20:02:20.918Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/67/d0/a5fcd3515f0bae49a7b6d0413cc1bdccdcc1fc0047037a0d480642cdc5d6/cryptography-49.0.0-cp39-abi3-manylinux_2_34_ppc64le.whl\", hash = \"sha256:6fc361c34fb6aac015ce19435876635e5c6d21db31998b0920f675f131e043b8\", size = 5254338, upload-time = \"2026-06-12T20:02:22.737Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a0/84/84fe36f19caf857d61cb7fc9c63035a47ffabd84ea12d1d393148efa3615/cryptography-49.0.0-cp39-abi3-manylinux_2_34_x86_64.whl\", hash = \"sha256:2400ef9c9e2299a25614eb1dea3db54a69b1349efd043bfac9c67630d136df36\", size = 4735650, upload-time = \"2026-06-12T20:02:41.389Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/6c/a0/db537264e234f7273a73ec020873d6d6b39dfd8a53db78b550ca8320440e/cryptography-49.0.0-cp39-abi3-musllinux_1_2_aarch64.whl\", hash = \"sha256:67e1d20ad9ef3a563c59ef22e7a8a0b8210bd26604369ea4a30a7c66aefe504e\", size = 4834820, upload-time = \"2026-06-12T20:01:51.847Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/93/77/8df9eb486495979bccecd1062e2eaf435250e84437040295b57d09048b0b/cryptography-49.0.0-cp39-abi3-musllinux_1_2_x86_64.whl\", hash = \"sha256:42b0684e0e40cf26122427802486f6d93aea593612603a94fbf260c7eb1e9c1b\", size = 4967968, upload-time = \"2026-06-12T20:02:12.524Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/c2/e6/f60198ea8d9dfa15fff9ed4ca02ce362f6eadd9ba757dcc50634c4257b63/cryptography-49.0.0-cp39-abi3-win_amd64.whl\", hash = \"sha256:026ac7423e6fa66872d3bf889be5974507da3944f866f704fa200eadacd00001\", size = 3785547, upload-time = \"2026-06-12T20:02:26.847Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/63/d3/4a83af35d65e3fad632c926fad684c193ea4398569ccb0bbbc7fe8f5dc9a/cryptography-49.0.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl\", hash = \"sha256:fc1e275c2f1d97b1a6450b8b0ea3ebfa6e087a611c2b26cb2404d48588abab7b\", size = 3993685, upload-time = \"2026-06-12T20:02:14.883Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d6/a7/f9dac0ab7f80368c56993a7bf638ef9935f825c91902798481fac0898138/cryptography-49.0.0-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl\", hash = \"sha256:c83782480a4a9da4d0feb51950131ba32e12e70813848b3343f6e18c28a66838\", size = 4676239, upload-time = \"2026-06-12T20:02:28.793Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d7/70/2ba3769dd0ae167e2f33dfa9592d45db6ff9a61d62ca1a5b3d1bdd09068f/cryptography-49.0.0-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl\", hash = \"sha256:b39efa323140595abd3ecca8529d321ae50f55f3aa3ba9cc81ea56a6011953d5\", size = 4715584, upload-time = \"2026-06-12T20:01:27.495Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/94/64/2923570ac1c0bd3a737aa366ac3abbbbde273042308b8cde95e2364a6e6a/cryptography-49.0.0-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl\", hash = \"sha256:b47db11c2c3525083296069b98ac5221907455e989ae0c2e3008bde851921615\", size = 4675885, upload-time = \"2026-06-12T20:01:55.49Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/ab/f8/614dc7e051418cfe53d55173c1e24c6b0085e89996fe90508c2fdf769aef/cryptography-49.0.0-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl\", hash = \"sha256:084ef1af862eb07ec46d25f68689f2102a9fc0e05ce7b80f14f5fe51e4eef0f6\", size = 4715449, upload-time = \"2026-06-12T20:02:05.469Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/aa/50/a9caea39ad19c431c1a3f8a31114df65b260cdfe67786b6c7e7c040c4c44/cryptography-49.0.0-pp311-pypy311_pp73-win_amd64.whl\", hash = \"sha256:be9fcb48a55f023493482827d4f459bd263cc20efde64f204b97c123201850c6\", size = 3783731, upload-time = \"2026-06-12T20:02:43.319Z\" },\n+]\n+\n [[package]]\n name = \"evaleval\"\n version = \"0.2.7\"\n@@ -125,6 +292,67 @@ wheels = [\n { url = \"https://files.pythonhosted.org/packages/2a/39/e50c7c3a983047577ee07d2a9e53faf5a69493943ec3f6a384bdc792deb2/httpx-0.28.1-py3-none-any.whl\", hash = \"sha256:d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad\", size = 73517, upload-time = \"2024-12-06T15:37:21.509Z\" },\n ]\n \n+[[package]]\n+name = \"hypothesis\"\n+version = \"6.156.7\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+ { name = \"sortedcontainers\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/39/a8/654d7533861cfdc291e55d5c335fdff2958dfd4833f7ff17c17de063b036/hypothesis-6.156.7.tar.gz\", hash = \"sha256:a646061075d13ebeb763eeafe3a68604483678b2c0eed90dde2ab8ff21abb62a\", size = 476259, upload-time = \"2026-07-18T12:16:31.862Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/e6/d5/d52b00c6b7a059695beb1a68cfb76f9e9b50cbc3655278a671243d447961/hypothesis-6.156.7-cp310-abi3-macosx_10_12_x86_64.whl\", hash = \"sha256:cb227db6ab96667b44ace873cb5d6e9b1819c362d5ad30267ec3f279be6059dd\", size = 748085, upload-time = \"2026-07-18T12:15:39.252Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/c2/0e/7d9408e51862774b8ea09da12d3159efd0d4e33d27416e3139de40f26383/hypothesis-6.156.7-cp310-abi3-macosx_11_0_arm64.whl\", hash = \"sha256:8706f34f3c6d84db5d5a857920da27412e598a134a935070f2466f1cd32cf598\", size = 742726, upload-time = \"2026-07-18T12:15:28.506Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/72/9f/12584e813b8e1d807344b02976a98808cc9a41fe2c64aedf1d86b0ed8dd2/hypothesis-6.156.7-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:ac49a158abcad440513b463b7a1e8471a0ff2c3c31f8f01a61aae1e9dac19756\", size = 1070224, upload-time = \"2026-07-18T12:16:04.786Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/74/7d/036e0ba919c592d375ca82fc452c9f1a7bd0a32092fabf4e0849c18fc206/hypothesis-6.156.7-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:aec915de6c6ee5adaa05a22602d1ed521e1b187e6b23d416741a0aa9dea75923\", size = 1121701, upload-time = \"2026-07-18T12:15:24.003Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/de/5c/bec7b48fc78c3683ee01e9111262a6871a9a8c571d9a2698d5646cba63a4/hypothesis-6.156.7-cp310-abi3-manylinux_2_5_i686.manylinux1_i686.whl\", hash = \"sha256:317b828b52fb42184541c56c501b14f19cdf478e5cc27f0ff327b08ceb8048bc\", size = 1111143, upload-time = \"2026-07-18T12:15:15.496Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/76/b1/23803fd70851bf10eeb1b1ad747b813a94ff1ff479721870658a2fef366d/hypothesis-6.156.7-cp310-abi3-musllinux_1_2_aarch64.whl\", hash = \"sha256:8f1d9b2b80a961745e8603983e43c79721bd1e08c7b11e59782fbe5d999f2e9e\", size = 1244920, upload-time = \"2026-07-18T12:16:12.689Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/09/01/6c2826eb077cb2815e4b6b53261650af959f94a0fd7019ea5681bcf0bc07/hypothesis-6.156.7-cp310-abi3-musllinux_1_2_x86_64.whl\", hash = \"sha256:90709a411250637a4a3e7e025f5c5934ce26000566b0a9c257311972185f1574\", size = 1288673, upload-time = \"2026-07-18T12:15:14.093Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d4/e2/1acf3718536ed6ed96bdb8d034dcb28c8370be2382c954e7dd143cf2b298/hypothesis-6.156.7-cp310-abi3-win32.whl\", hash = \"sha256:6a5ddbb137b56829b743420865788947a333289b2809cbb5cc3396f22f497ae0\", size = 635183, upload-time = \"2026-07-18T12:15:41.851Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/13/dc/8fb902c649444357b5732a316dbb7f7b6cee65440e469db45578d60d7ae7/hypothesis-6.156.7-cp310-abi3-win_amd64.whl\", hash = \"sha256:84d876ca599d8b5131b218050708750c848e5c0513210423e49f3518035eda3f\", size = 640977, upload-time = \"2026-07-18T12:15:25.168Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a7/6b/b97e666503ff04af8d8a4bebac26c685f05b70394f0466d71a648ab3719b/hypothesis-6.156.7-cp311-cp311-macosx_10_12_x86_64.whl\", hash = \"sha256:b486272b3fbef0adea2f2b9f929642f7aaa454447a39bb988bb404372537cbff\", size = 748550, upload-time = \"2026-07-18T12:15:57.109Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/db/3a/574b8476607e6dbdbde56e1732c3b73fa63486babbd9676f677d6d2e7fea/hypothesis-6.156.7-cp311-cp311-macosx_11_0_arm64.whl\", hash = \"sha256:cf115f228cfefe7651a66fd25d601783b11366aaa336d826a6820f5d4a111967\", size = 743341, upload-time = \"2026-07-18T12:16:09.45Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/21/c2/55d18d5fd99254307b776f340390930ba5548c9e41999aa6c5a4f7a76a28/hypothesis-6.156.7-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:e373bfbeccd0b4ea181e1076ca31b6252f70d95fd735e867959074d5d9638eaa\", size = 1070864, upload-time = \"2026-07-18T12:15:33.683Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/cd/07/4170c3000ba06b6d3fd0e4434d49ce69044dcc161038ee36010018fb9d9e/hypothesis-6.156.7-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:f5efbc419e7b2774a5c66e7349851a58a69bc56138ee70d543ec1d4833aa8883\", size = 1122080, upload-time = \"2026-07-18T12:16:25.889Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/f3/d5/fff0db43896163f9a8a115e942c60f2d07fe75fb8d339ed42aec83dfcffb/hypothesis-6.156.7-cp311-cp311-musllinux_1_2_aarch64.whl\", hash = \"sha256:080439d4930600742e4f7878929e71a3c4f0e31f4ac99812d675ed95086a221b\", size = 1245772, upload-time = \"2026-07-18T12:16:07.801Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/8d/96/d449714acd4a4cad5590d74f4644f2a1c163b8055eebbe6a6278400fdaab/hypothesis-6.156.7-cp311-cp311-musllinux_1_2_x86_64.whl\", hash = \"sha256:43e2aef269045af0531f4facd0b93f1c7c6d50147ce69a9b0a8b0285b0f13638\", size = 1289045, upload-time = \"2026-07-18T12:16:30.36Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/69/80/3872f8fbe9b2035b7a44c0911cc52b40bed75388e99b5c298077b75c00b1/hypothesis-6.156.7-cp311-cp311-win_amd64.whl\", hash = \"sha256:f9b1679aa75ab8452767cd8af1a91de0b8615b2057134079f78628faf9f49bfb\", size = 640786, upload-time = \"2026-07-18T12:15:17.963Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/10/46/65e5ec7694b88af0e4b79cd0972ef4bc9b6b1ef4e5a7de98c45cc63a19f0/hypothesis-6.156.7-cp312-cp312-macosx_10_12_x86_64.whl\", hash = \"sha256:a8ec2634571c1048d6c69a620aacae0a43533ea2fe36aff52a0d27720f2f8017\", size = 748950, upload-time = \"2026-07-18T12:15:44.372Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/21/59/f00a5e5a7504d6c999042d0ea98b4fb4c7fa45523379b5c1233f667b1425/hypothesis-6.156.7-cp312-cp312-macosx_11_0_arm64.whl\", hash = \"sha256:3f122fc5db966d4f66b61c37c8e69ed38290891dc11aee4ca0ac1ac07d31cc6b\", size = 741468, upload-time = \"2026-07-18T12:15:08.797Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/42/d7/649c22c1ac2d273293b91977a10adb40ad59663bf23496a4c224eb5d150b/hypothesis-6.156.7-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:aa2e4958fd25622303824b023721f4199110473cf34e29d331db255568ee9931\", size = 1069808, upload-time = \"2026-07-18T12:15:40.644Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/f5/bf/d8053ff8f0d9506098ba5373543be4f84eba14543f506281bbc2d5da481f/hypothesis-6.156.7-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:9841c485148830f2f4755923b4ef3648c42792bf9d8896b3a530d6d7b7999eef\", size = 1121058, upload-time = \"2026-07-18T12:16:28.879Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/a6/62/fa89af5dd25a181cdc9bf5c6dd706ced8b2bf886f6537151c06a25b65a0e/hypothesis-6.156.7-cp312-cp312-musllinux_1_2_aarch64.whl\", hash = \"sha256:b3fdcba3697df6981c4d9916b1cb03229cb92235db27e410447db5fe564b9598\", size = 1244097, upload-time = \"2026-07-18T12:15:30.95Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/e1/63/c95a954fbd6c2059141be356afbefda6a7a7955f104d0d3cdc6a2b5415ac/hypothesis-6.156.7-cp312-cp312-musllinux_1_2_x86_64.whl\", hash = \"sha256:7fd38f6879808194d1e196b26d0f335fb9fd717ce3fe3ab2ab79562d7d22cd17\", size = 1287646, upload-time = \"2026-07-18T12:16:15.853Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/39/ff/db93ab090e7a05fda97900f4290a3cab67e777bce47ca5d3cf59a68f02bc/hypothesis-6.156.7-cp312-cp312-win_amd64.whl\", hash = \"sha256:6bd58e06628863212ecb46c80546ba6bb6ab8d018b6d3f5cf3ad0ed639c5a3cd\", size = 638291, upload-time = \"2026-07-18T12:15:58.44Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/57/c7/80313bf239c6431f05b5e98cf6d4241cd6d1f570e4f0953a09ba0e034a5c/hypothesis-6.156.7-cp313-cp313-macosx_10_12_x86_64.whl\", hash = \"sha256:bc0688c17802bad5dc77c5d56f2d2f57bdcde52350f1858bd44f156608d29311\", size = 749321, upload-time = \"2026-07-18T12:15:46.929Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/97/60/54693423e0b0df8005532fa0f70daa31ef023e2d974acb465e87e520cf0e/hypothesis-6.156.7-cp313-cp313-macosx_11_0_arm64.whl\", hash = \"sha256:dd3aa1bc6994ffd9b7c484dc6ecdd07455dabaa171cc1665b3541309c2203721\", size = 741778, upload-time = \"2026-07-18T12:15:48.359Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/10/5b/6090f8f47d2a5d95ee7863bccc71f448a58001ad4b556fa47f8ec588018f/hypothesis-6.156.7-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:160c74f54576e566922055730c578c61b421069f5aeec21fbe3759284071aed6\", size = 1070014, upload-time = \"2026-07-18T12:15:53.958Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/78/0f/7d46320495f9ddb42ea0e99652a49c118a4c289a46ce2e72ea729e056a8c/hypothesis-6.156.7-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:e8b52ac55d0a8e09254840f81787a3a727f771cb7af46dd854139b438ab4d7e1\", size = 1121225, upload-time = \"2026-07-18T12:16:20.907Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/1f/99/7dfbed6ee39b8899197c8dd68adbc364a0d6594d07a3bf14880cbf25ba31/hypothesis-6.156.7-cp313-cp313-musllinux_1_2_aarch64.whl\", hash = \"sha256:ad5f3250ed768b2b98088d3fd3c902fadb4edf2282ed1751e18e712b55fbd060\", size = 1244459, upload-time = \"2026-07-18T12:16:22.613Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/f6/63/3d2ce8803616bc4528e253a744477ca8ba61e6c5ae9ce0bfb751a16d3892/hypothesis-6.156.7-cp313-cp313-musllinux_1_2_x86_64.whl\", hash = \"sha256:79c90a535ca3910af614b568a487545b4ce20ee3ddcdd3c25a27628e355e9470\", size = 1287988, upload-time = \"2026-07-18T12:16:14.248Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/3c/92/d8454244f55ad18b0392cc44e982111b8595348ff7c704db07f65a8df28e/hypothesis-6.156.7-cp313-cp313-win_amd64.whl\", hash = \"sha256:5f7b92b8aa2803881e9aed3511cb2fb88e1aa9dc615dd1e4ce68d51a5035e86b\", size = 638511, upload-time = \"2026-07-18T12:15:45.728Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/ca/09/cf6e1eef6d56abd2b87551bcbe926e1ddf2f099b98bd8f0aa31e4cecd8a3/hypothesis-6.156.7-cp314-cp314-macosx_10_12_x86_64.whl\", hash = \"sha256:9c3ef9b0370e393617266d645a574fbebcbd25ead0c9058a17e2278790f7bdf7\", size = 749397, upload-time = \"2026-07-18T12:15:51.213Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/5e/f4/a451d9220635f4f6c9de7d28247ec2ca8cc8162abf4cbcc8785831e0b058/hypothesis-6.156.7-cp314-cp314-macosx_11_0_arm64.whl\", hash = \"sha256:ecec3ab386f1f4f4d8607dcecc9e3ff6924a9c8cf2d8f5f5dcde37d99fae08d2\", size = 741909, upload-time = \"2026-07-18T12:16:27.361Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/87/cd/40e3c78289619fc65412b2fb2bb43efd61c87cd97d29b4b397f365b20fbb/hypothesis-6.156.7-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:24e09a82fb80166a9e92a8579537fae2858946dcf364de21bbb6fa529d5b4848\", size = 1070292, upload-time = \"2026-07-18T12:16:01.482Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/6b/1b/ad83da2595b71d078f252d034aa49c396fcdd94a15a4535407fe106f0629/hypothesis-6.156.7-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:c9e3d6120bb4069e63b555b1b3e6eac6ef662acfb3146cd2579bc226c9c92aee\", size = 1121520, upload-time = \"2026-07-18T12:15:16.638Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d0/d6/318524efa95ac9868a7589dce676c5241b56d2c6ad39b0b6e2a6d0669eff/hypothesis-6.156.7-cp314-cp314-musllinux_1_2_aarch64.whl\", hash = \"sha256:992b3c8424e9d8daf27107bbb14fb194f9155edcea28f0c6efd66b007fe7cfa3\", size = 1244807, upload-time = \"2026-07-18T12:15:35.541Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/10/da/8225a4e51c2ba06152cf5e89566cb5d1eef7c16132cfe134774355677d22/hypothesis-6.156.7-cp314-cp314-musllinux_1_2_x86_64.whl\", hash = \"sha256:783033b5d398272b332705306612fd6280b23ba7fa818221cf68c08604a3a532\", size = 1288261, upload-time = \"2026-07-18T12:15:49.82Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/51/6d/1722c49b2eaf728c08591e3b1a7c77a06664e8227acda5a23e323fa47969/hypothesis-6.156.7-cp314-cp314-pyemscripten_2026_0_wasm32.whl\", hash = \"sha256:d780b494c9caa06cb17b69fa87af688fc9944203d7fa050d41fba2db370bf03a\", size = 586675, upload-time = \"2026-07-18T12:16:24.252Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/d3/d5/ec1da06da07ee1fe7fc2ca31fdc9f94653f02b684485fb0972e330e80a5f/hypothesis-6.156.7-cp314-cp314-win_amd64.whl\", hash = \"sha256:a612ed61dc2341d42f282caca98787e85534613381ba0d9cc2829858d293985d\", size = 638331, upload-time = \"2026-07-18T12:16:19.062Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/f0/f7/d0c4fdc42d1c70c76ebeaf51295fedb1401457bd4bfef033d76a22594c8d/hypothesis-6.156.7-cp314-cp314t-macosx_10_12_x86_64.whl\", hash = \"sha256:847a07059a1029ae64c5fd1480737d3615326424cfe91c89e47e4ea3a0b543e7\", size = 747280, upload-time = \"2026-07-18T12:16:03.41Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/61/c1/15fd29960f31ec95cc7300f21e74f0a54a68e0c118ca5822e817929ef70b/hypothesis-6.156.7-cp314-cp314t-macosx_11_0_arm64.whl\", hash = \"sha256:b933f54a8176d5f0e7fdf73ff933154ec5551ec0996081ae01bec75ecea1ef26\", size = 740552, upload-time = \"2026-07-18T12:15:43.098Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/14/0e/22564a3e479850c86fcf835eaea8551da1f79e5f687fe1f84b7c24c40bfa/hypothesis-6.156.7-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:540933cdb53d0d08ee3fd47af3d78ed6b785db434afe12f08dc9f4b56400c5c9\", size = 1069465, upload-time = \"2026-07-18T12:15:32.314Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/7b/e0/add146dfd54d4b8616053823da30385f4c959a80903f9b6825fc39a8a687/hypothesis-6.156.7-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:53f53c665a82e75da49a78e33a353dd654afa96176d7c396ea59c3574c0ed3f6\", size = 1120529, upload-time = \"2026-07-18T12:15:22.766Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/12/33/4d9d4c57933b98df397a6a0d5f3700c2389358580d780661cfccbd43c836/hypothesis-6.156.7-cp314-cp314t-musllinux_1_2_aarch64.whl\", hash = \"sha256:a33a1e82149916c4662811e48870aa0dab45ecca0dd5a76e6bae39067e6f4cff\", size = 1243233, upload-time = \"2026-07-18T12:15:29.65Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/47/b6/c476ba0ba65e8640e38ce3971d0a63d492d612ab3fcc724a5662395f89b6/hypothesis-6.156.7-cp314-cp314t-musllinux_1_2_x86_64.whl\", hash = \"sha256:96553167deab92c5d02d3854d865ae8e66850491eedda45f8306e88fe906e03f\", size = 1287045, upload-time = \"2026-07-18T12:16:11.136Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/de/75/43e4dec9ccd56ed665f9dd3e78398453e16b41dac33ed56ea2efa92e3024/hypothesis-6.156.7-cp314-cp314t-win_amd64.whl\", hash = \"sha256:7884cea7ebe616690f976eae26cd7562dbda6030602ba32e0666681f3134d37a\", size = 638419, upload-time = \"2026-07-18T12:15:36.804Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/4e/91/8932195b775d9c558dc0841b6ee25f774484ffed8f61bdb0552187cd1e81/hypothesis-6.156.7-pp311-pypy311_pp73-macosx_10_12_x86_64.whl\", hash = \"sha256:bfd514af542ca7b7a6c6f1ecaf825f074996a712e14a29382b83b9233981ba34\", size = 749266, upload-time = \"2026-07-18T12:15:52.523Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/6d/d5/a69882dc126c01f04c68bb1d2b7c24e972959f2b363de4c4db32d6b1bc7b/hypothesis-6.156.7-pp311-pypy311_pp73-macosx_11_0_arm64.whl\", hash = \"sha256:f8542dccbad2592c7e6eabfa8957987bc65b6b51862df63bbc6ef75e36734287\", size = 743982, upload-time = \"2026-07-18T12:15:38.052Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/00/5d/2937c75a015564e75ca2ea8ab287f82bdf5f954ff523cd1c35c27315d0e9/hypothesis-6.156.7-pp311-pypy311_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl\", hash = \"sha256:72e964b04ec22b2273e0646b47686682f0df5a81c122c48da8acac2e0d17b8da\", size = 1071135, upload-time = \"2026-07-18T12:15:11.819Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/7c/a9/f49de6cd6d154683c3d5e5daf89eae8a1ebee394021fe7a20515bc1293bf/hypothesis-6.156.7-pp311-pypy311_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl\", hash = \"sha256:4d97075ab6d97dd62e940cb75f26bc6a23a3e3376324dd754df506bcfbafcab6\", size = 1122685, upload-time = \"2026-07-18T12:16:17.345Z\" },\n+ { url = \"https://files.pythonhosted.org/packages/21/6f/cfc4a6ca25c086f3622d21ef5d334de3633d5b8692a3165e16b12686ebb3/hypothesis-6.156.7-pp311-pypy311_pp73-win_amd64.whl\", hash = \"sha256:cfd381e3d32a5e85fda2038a06fcfafea953e53217ca2d4b090ca576eab70c38\", size = 641377, upload-time = \"2026-07-18T12:15:19.719Z\" },\n+]\n+\n [[package]]\n name = \"idna\"\n version = \"3.11\"\n@@ -152,6 +380,27 @@ wheels = [\n { url = \"https://files.pythonhosted.org/packages/04/96/92447566d16df59b2a776c0fb82dbc4d9e07cd95062562af01e408583fc4/itsdangerous-2.2.0-py3-none-any.whl\", hash = \"sha256:c6242fc49e35958c8b15141343aa660db5fc54d4f13a1db01a3f5891b98700ef\", size = 16234, upload-time = \"2024-04-16T21:28:14.499Z\" },\n ]\n \n+[[package]]\n+name = \"joserfc\"\n+version = \"1.7.3\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+ { name = \"cryptography\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/d4/c6/b1cac0280f8efc57626ea8804866b37099f23cae11b1485a42b213245e31/joserfc-1.7.3.tar.gz\", hash = \"sha256:116955c2587139dba20621fd0bd7fc9255fa960c9fe7f43c43ebef2e801dcfcf\", size = 233821, upload-time = \"2026-07-08T12:41:42.66Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/7d/f5/650b59d1b74f5befb7a7a7e7d7c92a26b94256df3541e2b4914152cd177a/joserfc-1.7.3-py3-none-any.whl\", hash = \"sha256:7c39f3f2c943dbc03122747fa8ebbd8e156e54904cf25651b452f4d2634a6075\", size = 70982, upload-time = \"2026-07-08T12:41:41.521Z\" },\n+]\n+\n+[[package]]\n+name = \"mpmath\"\n+version = \"1.3.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+sdist = { url = \"https://files.pythonhosted.org/packages/e0/47/dd32fa426cc72114383ac549964eecb20ecfd886d1e5ccf5340b55b02f57/mpmath-1.3.0.tar.gz\", hash = \"sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f\", size = 508106, upload-time = \"2023-03-07T16:47:11.061Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/43/e3/7d92a15f894aa0c9c4b49b8ee9ac9850d6e63b03c9c32c0367a13ae62209/mpmath-1.3.0-py3-none-any.whl\", hash = \"sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c\", size = 536198, upload-time = \"2023-03-07T16:47:09.197Z\" },\n+]\n+\n [[package]]\n name = \"numpy\"\n version = \"2.4.3\"\n@@ -249,6 +498,15 @@ wheels = [\n { url = \"https://files.pythonhosted.org/packages/54/20/4d324d65cc6d9205fabedc306948156824eb9f0ee1633355a8f7ec5c66bf/pluggy-1.6.0-py3-none-any.whl\", hash = \"sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746\", size = 20538, upload-time = \"2025-05-15T12:30:06.134Z\" },\n ]\n \n+[[package]]\n+name = \"pycparser\"\n+version = \"3.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+sdist = { url = \"https://files.pythonhosted.org/packages/1b/7d/92392ff7815c21062bea51aa7b87d45576f649f16458d78b7cf94b9ab2e6/pycparser-3.0.tar.gz\", hash = \"sha256:600f49d217304a5902ac3c37e1281c9fe94e4d0489de643a9504c5cdfdfc6b29\", size = 103492, upload-time = \"2026-01-21T14:26:51.89Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/0c/c3/44f3fbbfa403ea2a7c779186dc20772604442dde72947e7d01069cbe98e3/pycparser-3.0-py3-none-any.whl\", hash = \"sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992\", size = 48172, upload-time = \"2026-01-21T14:26:50.693Z\" },\n+]\n+\n [[package]]\n name = \"pydantic\"\n version = \"2.12.5\"\n@@ -386,35 +644,61 @@ wheels = [\n { url = \"https://files.pythonhosted.org/packages/3b/ab/b3226f0bd7cdcf710fbede2b3548584366da3b19b5021e74f5bde2a8fa3f/pytest-9.0.2-py3-none-any.whl\", hash = \"sha256:711ffd45bf766d5264d487b917733b453d917afd2b0ad65223959f59089f875b\", size = 374801, upload-time = \"2025-12-06T21:30:49.154Z\" },\n ]\n \n+[[package]]\n+name = \"python-multipart\"\n+version = \"0.0.32\"\n+source = { registry = \"https://pypi.org/simple\" }\n+sdist = { url = \"https://files.pythonhosted.org/packages/5b/42/55c32bb9b12693c092ad250a0e82edb5b31ddeda6eb772de5f308b3804ad/python_multipart-0.0.32.tar.gz\", hash = \"sha256:be54b7f3fa167bb83e4fcd936b887b708f4e57fe75911c02aebf53efaf8d938e\", size = 46881, upload-time = \"2026-06-04T16:18:58.647Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/e1/04/e8135ebd1ad02c56ec633277529b2602ff99ff634be76cdba5744cf554fd/python_multipart-0.0.32-py3-none-any.whl\", hash = \"sha256:ff6d3f776f16878c894e52e107296ffc890e913c611b1a4ec6c44e2821fe2e23\", size = 30042, upload-time = \"2026-06-04T16:18:57.319Z\" },\n+]\n+\n [[package]]\n name = \"slug-constitution\"\n version = \"0.1.0\"\n source = { virtual = \".\" }\n dependencies = [\n+ { name = \"authlib\" },\n { name = \"evaleval\" },\n { name = \"fastapi\" },\n { name = \"httpx\" },\n+ { name = \"hypothesis\" },\n { name = \"itsdangerous\" },\n { name = \"numpy\" },\n { name = \"pytest\" },\n+ { name = \"python-multipart\" },\n { name = \"starlette\" },\n+ { name = \"sympy\" },\n { name = \"tenacity\" },\n { name = \"uvicorn\" },\n ]\n \n [package.metadata]\n requires-dist = [\n- { name = \"evaleval\", specifier = \">=0.2.6\" },\n+ { name = \"authlib\" },\n+ { name = \"evaleval\", specifier = \"==0.2.7\" },\n { name = \"fastapi\" },\n { name = \"httpx\" },\n+ { name = \"hypothesis\" },\n { name = \"itsdangerous\" },\n { name = \"numpy\" },\n { name = \"pytest\" },\n+ { name = \"python-multipart\" },\n { name = \"starlette\" },\n+ { name = \"sympy\" },\n { name = \"tenacity\" },\n { name = \"uvicorn\" },\n ]\n \n+[[package]]\n+name = \"sortedcontainers\"\n+version = \"2.4.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+sdist = { url = \"https://files.pythonhosted.org/packages/e8/c4/ba2f8066cceb6f23394729afe52f3bf7adec04bf9ed2c820b39e19299111/sortedcontainers-2.4.0.tar.gz\", hash = \"sha256:25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88\", size = 30594, upload-time = \"2021-05-16T22:03:42.897Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/32/46/9cb0e58b2deb7f82b84065f37f3bffeb12413f947f9388e4cac22c4621ce/sortedcontainers-2.4.0-py2.py3-none-any.whl\", hash = \"sha256:a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0\", size = 29575, upload-time = \"2021-05-16T22:03:41.177Z\" },\n+]\n+\n [[package]]\n name = \"starlette\"\n version = \"1.0.0\"\n@@ -428,6 +712,18 @@ wheels = [\n { url = \"https://files.pythonhosted.org/packages/0b/c9/584bc9651441b4ba60cc4d557d8a547b5aff901af35bda3a4ee30c819b82/starlette-1.0.0-py3-none-any.whl\", hash = \"sha256:d3ec55e0bb321692d275455ddfd3df75fff145d009685eb40dc91fc66b03d38b\", size = 72651, upload-time = \"2026-03-22T18:29:45.111Z\" },\n ]\n \n+[[package]]\n+name = \"sympy\"\n+version = \"1.14.0\"\n+source = { registry = \"https://pypi.org/simple\" }\n+dependencies = [\n+ { name = \"mpmath\" },\n+]\n+sdist = { url = \"https://files.pythonhosted.org/packages/83/d3/803453b36afefb7c2bb238361cd4ae6125a569b4db67cd9e79846ba2d68c/sympy-1.14.0.tar.gz\", hash = \"sha256:d3d3fe8df1e5a0b42f0e7bdf50541697dbe7d23746e894990c030e2b05e72517\", size = 7793921, upload-time = \"2025-04-27T18:05:01.611Z\" }\n+wheels = [\n+ { url = \"https://files.pythonhosted.org/packages/a2/09/77d55d46fd61b4a135c444fc97158ef34a095e5681d0a6c10b75bf356191/sympy-1.14.0-py3-none-any.whl\", hash = \"sha256:e091cc3e99d2141a0ba2847328f5479b05d94a6635cb96148ccb3f34671bd8f5\", size = 6299353, upload-time = \"2025-04-27T18:04:59.103Z\" },\n+]\n+\n [[package]]\n name = \"tenacity\"\n version = \"9.1.4\"\n","role":"user"}],"model":"~x-ai/grok-latest"}