[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_4517":4518,"_4519":59,"_4520":15,"_4521":15,"_4522":15,"_4523":15,"_4524":15,"_4525":15,"_4526":4527},"routes/s.$postId",{"_9":10,"_11":12,"_13":-7,"_14":15,"_16":15,"_17":-5,"_18":19},"kind","post_with_profile","postWithProfile",{"_20":21,"_22":23},"referrer","preferIntrinsicAspectRatioForOgImage",false,"enforceRenderedOgImg","ogImageVariantOverride","defaultOgDescription","ChatGPT helps you get answers, find inspiration, and be more productive.","post",{"_42":43,"_44":45,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":51,"_52":53,"_35":54,"_55":56,"_57":15},"profile",{"_24":25,"_26":25,"_27":28,"_29":-5,"_30":-5,"_31":32,"_33":15,"_34":-5,"_35":-5,"_36":-5,"_37":15,"_38":-5,"_39":-5,"_40":-5,"_41":15},"user_id","anonymous","username","profile_picture_url","https://cdn.openai.com/sora/images/profile_placeholder_v4.png","profile_picture_id","is_default_profile_picture","follower_count",0,"is_following","display_name","permalink","can_cameo","verified","character_count","owner_profile","social_context","follows_you","id","cd_6a4de4db4ad48191829322f46e775c46","posted_at",1783489755.292595,"text","og_title","og_description","og_image_variant","attachments",[65],"preview_image_url","https://ogimg.chatgpt.com/?postId=cd_6a4de4db4ad48191829322f46e775c46","https://chatgpt.com/s/cd_6a4de4db4ad48191829322f46e775c46","permissions",{"_58":59,"_60":15,"_61":15,"_62":59,"_63":64},"use_experimental_unfurl","can_read",true,"can_write","can_delete","can_remix","share_setting","public",{"_42":66,"_67":68,"_9":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":79,"_80":-5},"cd_6a4de4db4ad48191829322f46e775c46-attachment-0","tags",[],"codex","task",{"_42":4476,"_120":4477,"_307":4478,"_4479":59,"_83":84,"_4480":15,"_4481":4482,"_270":15,"_4483":4484,"_4485":-5,"_4486":4487},"current_user_turn",{"_93":319,"_42":85,"_97":319,"_3673":4462,"_3675":4463,"_3677":3678,"_133":-5,"_120":3679},"current_assistant_turn",{"_93":94,"_42":84,"_95":-5,"_96":-5,"_97":94,"_98":4094,"_100":4095,"_102":103,"_104":-5,"_105":4096,"_107":4097,"_109":4098,"_111":4099,"_113":114,"_115":-5,"_116":117,"_118":4100,"_120":121,"_122":-5,"_123":124,"_125":4101,"_127":128,"_129":130,"_131":-5,"_132":-5,"_133":85,"_134":4102,"_136":4103,"_138":-5,"_139":15,"_140":141,"_142":-5},"current_diff_task_turn",{"_93":94,"_42":84,"_95":-5,"_96":-5,"_97":94,"_98":3726,"_100":3727,"_102":103,"_104":-5,"_105":3728,"_107":3729,"_109":3730,"_111":3731,"_113":114,"_115":-5,"_116":117,"_118":3732,"_120":121,"_122":-5,"_123":124,"_125":3733,"_127":128,"_129":130,"_131":-5,"_132":-5,"_133":85,"_134":3734,"_136":3735,"_138":-5,"_139":15,"_140":141,"_142":-5},"turns",{"_81":82,"_83":84},"example_task_info","turn_mapping",{"_85":86,"_84":87},"current_turn_id","task_e_6a4de4d9d1ec83208696d90d7962d70b~assttrn_e_6a4de4dac2a483209e1c2462673a2351","task_e_6a4de4d9d1ec83208696d90d7962d70b~usertrn_e_6a4de4dabbc483208afa858b62e05a4f",{"_42":85,"_88":3671,"_90":3672,"_92":-5},{"_42":84,"_88":89,"_90":91,"_92":85},"turn",{"_93":94,"_42":84,"_95":-5,"_96":-5,"_97":94,"_98":99,"_100":101,"_102":103,"_104":-5,"_105":106,"_107":108,"_109":110,"_111":112,"_113":114,"_115":-5,"_116":117,"_118":119,"_120":121,"_122":-5,"_123":124,"_125":126,"_127":128,"_129":130,"_131":-5,"_132":-5,"_133":85,"_134":135,"_136":137,"_138":-5,"_139":15,"_140":141,"_142":-5},"children",[],"parent","type","assistant","sibling_turn_ids","attempt_placement","role","output_items",[914,915,916],"child_turns",[],"conversation_id","None","error","latest_event",{"_909":910,"_46":911,"_912":913},"worklog",{"_883":884},"app_server_events",{"_330":882},"thread_events",{"_330":331},"turn_status","completed","cancellation_requested_at","pull_request_status","externally_created","pull_request_data",{"_299":300,"_290":301,"_302":303,"_304":15,"_305":15,"_306":15,"_307":308,"_309":310,"_311":262,"_312":128,"_313":314,"_315":130,"_316":-5,"_317":-5,"_318":-5,"_319":320,"_321":322,"_323":324,"_325":326,"_327":328},"created_at",1783489754.760375,"internal_only_rollouts","environment_id","6a2d8f3b2444819182b5374e6e8dc8fb","environment",{"_42":124,"_189":190,"_191":192,"_193":15,"_194":195,"_196":197,"_198":199,"_200":-5,"_201":-5,"_202":15,"_203":204,"_205":195,"_206":195,"_207":208,"_209":210,"_211":212,"_213":-5,"_214":215,"_216":217,"_218":219,"_220":221,"_55":-5,"_120":222,"_223":224,"_225":226,"_227":228,"_229":15,"_230":15},"branch","claude/project-issues-review-arws0n","base_commit_sha","4177327552ded5f02296b310602c2d93608398c0","branch_name","direct_push_pushed_commit_sha","previous_turn_id","logs",{"_134":174},"proxy_events",[143,144,145,146,147,148],"debug_metadata","discarded","model_version","gpt-5.5","languages",{"_149":172,"_151":166,"_153":167,"_155":164,"_157":173,"_159":160,"_161":32,"_162":-5},{"_149":171,"_151":166,"_153":167,"_155":164,"_157":168,"_159":160,"_161":32,"_162":-5},{"_149":169,"_151":166,"_153":167,"_155":164,"_157":170,"_159":160,"_161":32,"_162":-5},{"_149":165,"_151":166,"_153":167,"_155":164,"_157":168,"_159":160,"_161":32,"_162":-5},{"_149":163,"_151":152,"_153":154,"_155":164,"_157":158,"_159":160,"_161":32,"_162":-5},{"_149":150,"_151":152,"_153":154,"_155":156,"_157":158,"_159":160,"_161":32,"_162":-5},"timestamp","2026-07-08T05:49:55.454833","decision","allow","reason","checks passed","method","GET","domain","chatgpt.com:18080","protocol","HTTP/1.1","size","path","2026-07-08T05:49:55.403364","CONNECT","2026-07-08T05:49:53.813281","block","internet is disabled","chatgpt.com:443","2026-07-08T05:49:53.740611","api.github.com:443","2026-07-08T05:49:53.705206","2026-07-08T05:49:53.631655","github.com:443",[175,176],{"_177":185,"_179":186},{"_177":178,"_179":180},"key",{"_181":182,"_93":183,"_120":184},"value","file_00000000e42c722fb9bac312b481a152","name","setup_autodetect","UserSetupScript","2026-07-08T05:49:35.664328",{"_181":187,"_93":183,"_120":188},"file_00000000cc9071f59f2c5667a415773b","auto_setup","2026-07-08T05:49:44.266137","machine_id","wham-public/wham-universal","label","PhysShell/Own.NET","is_pinned","description","","workspace_dir","/workspace","agent_network_access",{"_292":293,"_294":-5,"_295":-5,"_296":-5,"_297":-5,"_298":-5},"codex_github_direct","github_connector_id","enable_gitlab_webhooks","repos",[252],"setup","maintenance_setup","repo_map",{"_252":253},"env_vars",{"_234":235,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251},"secrets",{},"secrets_with_domains","task_count",211,"creator_id","user-0zKJQ76WcEA5JuOCwaeuyMdO","share_settings","workspace","share_targets",[],1781370683.711973,"auto_setup_settings",{"_233":59},"cache_settings",{"_231":59,"_232":195},"etag","\"05009a60-0000-0200-0000-6a4ba73e0000\"","enable_authtranslator","enable_docker_in_docker","post_setup_cache_enabled","cache_invalidation_key","use_auto_setup","CODEX_ENV_PYTHON_VERSION","3.12","CODEX_ENV_NODE_VERSION","20","CODEX_ENV_RUBY_VERSION","3.4.4","CODEX_ENV_RUST_VERSION","1.89.0","CODEX_ENV_GO_VERSION","1.24.3","CODEX_ENV_BUN_VERSION","1.2.14","CODEX_ENV_PHP_VERSION","8.4","CODEX_ENV_JAVA_VERSION","21","CODEX_ENV_SWIFT_VERSION","6.1","github-1268541171",{"_42":254,"_181":255,"_256":257,"_258":192,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":64,"_270":15,"_271":-5,"_272":-5,"_273":-5,"_274":-5,"_275":-5,"_276":-5,"_161":277,"_278":-5,"_55":279},"1268541171","Own.NET","owner",{"_284":285,"_42":286,"_93":287,"_288":289,"_290":291},"repository_full_name","clone_url","https://github.com/PhysShell/Own.NET.git","default_branch","main","git_commits_url","https://api.github.com/repos/PhysShell/Own.NET/git/commits{/sha}","git_refs_url","https://api.github.com/repos/PhysShell/Own.NET/git/refs{/sha}","git_url","git://github.com/PhysShell/Own.NET.git","visibility","archived","allow_auto_merge","allow_merge_commit","allow_rebase_merge","allow_squash_merge","allow_update_branch","language",3555,"master_branch",{"_280":15,"_281":15,"_282":15,"_283":15},"admin","maintain","push","pull","login","PhysShell",45852143,"User","avatar_url","https://avatars.githubusercontent.com/u/45852143?v=4","url","https://api.github.com/users/PhysShell","mode","off","preset_allowlist","allowlist_domains","allowlist_rules","denylist_domains","safe_methods_only","number",177,"https://github.com/PhysShell/Own.NET/pull/177","state","open","merged","mergeable","draft","title","docs: interprocedural roadmap — staged path from D5 today to 'proper interprocedural'","body","Consolidates the scattered interprocedural state (d5 note's shipped\nslices, tech-debt register §3 prerequisite, deferred trackers #122/#146,\nthe arity residual of d5 §10 q2) into one sequenced roadmap:\n\n- stage 0: spec the verdict-determining bridge inference + golden facts\n (the P-022 hard prerequisite, unlocks everything else)\n- stage 1: observability first — OWN051 advisory + MOS summary dump\n- stage 2: arity/signature key on call ops (additive optional field,\n no OWNIR_VERSION bump) to stop conservative overload merging\n- stage 3: aliasOf:i through return + out/ref fresh (Dapper/Polly\n become oracle anchors with a recorded reason)\n- stage 4: publisher provenance (#146) on top of stage 3's skeletons\n- stage 5: exclusivity axis (#122) strictly on its consumer trigger\n- stage 6: Tier C annotations + pessimistic mode\n\nIncludes a definition of done, a dependency graph, on-record rejections\n(context sensitivity, IL decompilation, frontend inference), and a\nreading path into ownership.py/ownir.py for newcomers. Cross-linked\nfrom the d5 note's §10 open questions.\n\nCo-Authored-By: Claude \nClaude-Session: https://claude.ai/code/session_01LBmDyLWHqoQUGqiydSxroi\n\n\n## Summary by CodeRabbit\n\n* **New Features**\n * Added a `summaries` CLI command to print deterministic solved method ownership summaries from an OwnIR facts file.\n * Added a public `dump_summaries` API to emit summaries plus degradation/unresolved details.\n* **Diagnostics**\n * Introduced new advisory codes **OWN051** (unverified interprocedural ownership at call sites) and **OWN052** (interprocedural summary inference failures).\n* **Bug Fixes**\n * Improved release/consume precision by considering all normal-return paths.\n * Ensured deterministic summary output location and byte-identical JSON emission.\n* **Documentation**\n * Expanded interprocedural roadmap and added/updated the interprocedural inference specification, including deferred sequencing cross-references.\n* **Tests**\n * Updated conformance and regression checks for new advisories and deterministic summaries.\n","base","head","base_sha","5ea68daa526b3e814fee1c63cd2d4f93319c59ea","head_sha","merge_commit_sha","comments","diff","user",{"_284":285,"_181":285,"_329":-5,"_288":289,"_42":286},"commits",10,"changed_files",12,"additions",1727,"deletions",49,"email","events",[332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405],{"_155":856,"_407":857},{"_155":422,"_407":851},{"_155":846,"_407":847},{"_155":426,"_407":838},{"_155":426,"_407":831},{"_155":426,"_407":826},{"_155":441,"_407":816},{"_155":441,"_407":811},{"_155":426,"_407":805},{"_155":426,"_407":802},{"_155":441,"_407":794},{"_155":426,"_407":790},{"_155":426,"_407":787},{"_155":441,"_407":779},{"_155":426,"_407":775},{"_155":441,"_407":770},{"_155":426,"_407":764},{"_155":426,"_407":761},{"_155":426,"_407":758},{"_155":441,"_407":748},{"_155":426,"_407":745},{"_155":426,"_407":742},{"_155":426,"_407":739},{"_155":426,"_407":735},{"_155":441,"_407":725},{"_155":426,"_407":722},{"_155":426,"_407":719},{"_155":441,"_407":709},{"_155":441,"_407":704},{"_155":426,"_407":698},{"_155":426,"_407":695},{"_155":441,"_407":685},{"_155":426,"_407":681},{"_155":426,"_407":678},{"_155":441,"_407":668},{"_155":426,"_407":664},{"_155":426,"_407":661},{"_155":441,"_407":650},{"_155":426,"_407":646},{"_155":426,"_407":643},{"_155":441,"_407":628},{"_155":426,"_407":624},{"_155":426,"_407":621},{"_155":426,"_407":618},{"_155":441,"_407":606},{"_155":441,"_407":601},{"_155":426,"_407":595},{"_155":426,"_407":592},{"_155":426,"_407":589},{"_155":426,"_407":585},{"_155":426,"_407":581},{"_155":441,"_407":571},{"_155":426,"_407":568},{"_155":441,"_407":560},{"_155":426,"_407":556},{"_155":441,"_407":551},{"_155":426,"_407":547},{"_155":426,"_407":544},{"_155":441,"_407":536},{"_155":426,"_407":532},{"_155":426,"_407":528},{"_155":441,"_407":507},{"_155":426,"_407":503},{"_155":441,"_407":498},{"_155":426,"_407":494},{"_155":426,"_407":487},{"_155":441,"_407":468},{"_155":426,"_407":461},{"_155":441,"_407":456},{"_155":426,"_407":446},{"_155":441,"_407":442},{"_155":426,"_407":427},{"_155":422,"_407":423},{"_155":406,"_407":408},"turn/completed","params",{"_409":410,"_88":411},"threadId","019f4046-8f15-75a0-a194-7a2193f7daca",{"_412":413,"_414":415,"_104":-5,"_42":416,"_417":418,"_419":420,"_421":114},"completedAt",1783489872,"durationMs",78659,"019f4046-8fba-7b02-ad4f-d88622c03962","items",[],"startedAt",1783489793,"status","thread/status/changed",{"_421":424,"_409":410},{"_93":425},"idle","rawResponseItem/completed",{"_428":429,"_409":410,"_430":416},"item",{"_431":432,"_433":-5,"_42":-5,"_434":-5,"_435":436,"_97":94,"_93":437},"turnId","content",[438],"end_turn","internal_chat_message_metadata_passthrough","phase","final_answer","message",{"_46":439,"_93":440},"### Summary\n* Follow-up check found the PR was functionally passing, but the lint gate was not clean due to Ruff import/type-annotation findings.\n* Fixed the summaries CLI lint issue by moving `json` and OwnIR imports into the module import block and leaving `cmd_summaries` to call the already-imported helpers. 【F:ownlang/__main__.py†L41-L58】【F:ownlang/__main__.py†L318-L322】\n* Fixed the OwnIR type-annotation lint issue by using the postponed-annotation form directly for `Finding` in `to_module`. 【F:ownlang/ownir.py†L784-L787】\n* Committed the changes on the current branch: `3d21d4b fix: satisfy lint for summaries bridge`.\n* Created the required follow-up PR via `make_pr`.\n\n**Testing**\n* ✅ `python tests/test_ownir.py`\n* ✅ `python tests/run_tests.py`\n* ❌ `ruff check . && mypy` — initially failed on pre-existing lint findings in `ownlang/__main__.py` and `ownlang/ownir.py`; fixed in this follow-up.\n* ✅ `ruff check . --fix && mypy && python tests/test_ownir.py && python tests/run_tests.py`\n\nNote: the working tree still has an unrelated untracked file, `sandboy/Cargo.lock`, which I did not modify or include in the commit.","output_text","item/completed",{"_428":443,"_409":410,"_430":416},{"_42":444,"_435":436,"_46":439,"_93":445},"msg_0fe8a768663ad02f016a4de54c63c8819892c4988fd332b83e","agentMessage",{"_428":447,"_409":410,"_430":416},{"_431":-5,"_448":449,"_42":-5,"_434":-5,"_450":451,"_93":452},"encrypted_content","gAAAAABqTeVMt0EURS8jd8yoUBK_JFq8j-3G6Tgc52IlP1oCamQLzmcTt0QPVDjPwA_LtdCV84UrOj3XOeh4jRxW9beZhnbnw7CJ_fewzY6S932qIPqHgA2rg76YNmAnAT8b2T7RV07hwsJNgSrIy2U8ZXx58x8M88ydZ2jDxUhsmkIraL9wEA9AxcftcSEN-lNjBS27bY6VM1lp7JyJr47AQexSqiDJc0K66madd_PmxnjnOEvER0Pq22_9b0J-O2i4uFbCX441YyMCFAbGLyB_a3hfcbiIRCyAggefHzbwtB_fSQ-2VbXIK_0GWH68BwTe2d8jD6bpikziyaEud3kaX7RS8YDSSOKjV_H6KG31gCO-YpX3RAjs3RiAqnCN-O8W3vYMmVLaikhYVInolwyExRIRvKQP36kwm9t0h07jOYSZyXPdysnLeVGNp1jji2zPOCqXvwvk6E6pTUZOe8sLDQJ0gNdm35ZXdtzlbmoUsCahpi2j57RXGt-_OFpoYbRkY1YZgzQSAeubMlUrFUtbczCv_4WVRNDi-Ju29t8WTEZFoYqfViF4ZcfGibfsE8MbEily-hwbXuCC23mUkK9pQt6Iq4dUjC2w8VMqRgBuujJiMsE2lRHjX27sz-ATBgnahDZmvMvbuaSbh1QrHaQqWPPLYIq-0Gcq_XlSvaSaILEoWQCjI0h3jr6iUynH1P2b0L9TnCnpkMGqzOxepauCZ691o01MckkFgqSsRKLDNBnl9iqoqghMmE2SfKQk4gNUFWiEeHRk_LPQ6Y-s8MPN_0GNJKu2llFDznc4bu6Rh_1wYDngaS3p4mUZJNKSMPv2UG4zIbGer4aS0IXjdI_DMfOQ60D84imTsVvTztzqvmVn2ZLNlk0WOWlg58RIOEyeoF8l5uyKNXeWMYGudNW61hZmzKH6po4o6xggRXQwGBnUOirPrGhQY8dGvcX9bLLCiCHyyqrCAB7LpR-YaFximvYrhwPwgP06QlQCNvZhJgudtWue4uAZ83FVIQqAc_r3G7Ta193b4CqTrPW-6xEg1fEuBsx4y1mtnzf2eAiIq5Zd2QfNjA-G_nqU52KafzcpApTQyiwklRY6YCXk6-xZ_JDJJKXyBNgGiLDrbXBtYydGU1d_0mw=","summary",[453],"reasoning",{"_46":454,"_93":455},"**Finalizing tracking instructions**\n\nI’m considering whether I need to mention untracked items, but maybe it’s more about keeping things concise. I want to ensure that I include the exact commands for tests prefixed properly. I'll also include the commit SHA and details about the PR being created since these are essential with the code changes involved. It’s all about clarity in how I document this process!","summary_text",{"_428":457,"_409":410,"_430":416},{"_431":458,"_42":459,"_450":460,"_93":452},[],"rs_0fe8a768663ad02f016a4de54a7b008198bcd98a628bd02ce0",[454],{"_428":462,"_409":410,"_430":416},{"_463":464,"_42":-5,"_434":-5,"_465":466,"_93":467},"call_id","call_d5FWazJ5H1hDesyB8AiMt1u9","output","Chunk ID: c3b271\nWall time: 0.0000 seconds\nProcess exited with code 0\nOriginal token count: 507\nOutput:\n 38\t\n 39\tfrom __future__ import annotations\n 40\t\n 41\timport json\n 42\timport re\n 43\timport sys\n 44\tfrom typing import TYPE_CHECKING\n 45\t\n 46\tif TYPE_CHECKING:\n 47\t from .cfg import Instr\n 48\t\n 49\tfrom .analysis import analyze\n 50\tfrom .buffers import validate_policies\n 51\tfrom .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures\n 52\tfrom .codegen import generate\n 53\tfrom .diagnostics import Diagnostic, Severity\n 54\tfrom .lexer import LexError\n 55\tfrom .lifetimes import check_lifetimes\n 56\tfrom .ownir import OwnIRError, dump_summaries, load\n 57\tfrom .parser import ParseError, parse\n 58\tfrom .report import build_report, render_report\n 59\t\n 60\t\n 310\t log for an OwnIR facts file as one deterministic JSON document on stdout\n 311\t (roadmap stage 1). The debugging answer to \"why did this call stay plain /\n 312\t consume / fresh?\" — and the frozen parity surface the Rust port of the\n 313\t inference layer is diffed against, so its output contract is byte-stable:\n 314\t sorted method keys, sorted extern log, fixed field order. Exit code is 0\n 315\t even when the solve degraded (the `degraded` field carries the reason —\n 316\t this surface reports state, it does not judge); 2 only for unreadable\n 317\t facts, like `ownir`.\"\"\"\n 318\t try:\n 319\t doc = dump_summaries(load(path))\n 320\t except OwnIRError as e:\n 321\t print(f\"{path}: error: {e}\", file=sys.stderr)\n 322\t return 2\n 780\t kind=\"pooled buffer\"),\n 781\t ]\n 782\t\n 783\t\n 784\tdef to_module(facts: dict[str, Any],\n 785\t notes: list[str] | None = None,\n 786\t advisories: list[Finding] | None = None,\n 787\t ) -> tuple[Module, dict[str, dict[str, Any]]]:\n 788\t \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source\n?? sandboy/Cargo.lock\n3d21d4b fix: satisfy lint for summaries bridge\n","function_call_output",{"_428":469,"_409":410,"_430":416},{"_470":471,"_472":473,"_474":475,"_476":477,"_414":32,"_478":32,"_42":464,"_479":480,"_481":482,"_421":114,"_93":483},"aggregatedOutput"," 38\t\n 39\tfrom __future__ import annotations\n 40\t\n 41\timport json\n 42\timport re\n 43\timport sys\n 44\tfrom typing import TYPE_CHECKING\n 45\t\n 46\tif TYPE_CHECKING:\n 47\t from .cfg import Instr\n 48\t\n 49\tfrom .analysis import analyze\n 50\tfrom .buffers import validate_policies\n 51\tfrom .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures\n 52\tfrom .codegen import generate\n 53\tfrom .diagnostics import Diagnostic, Severity\n 54\tfrom .lexer import LexError\n 55\tfrom .lifetimes import check_lifetimes\n 56\tfrom .ownir import OwnIRError, dump_summaries, load\n 57\tfrom .parser import ParseError, parse\n 58\tfrom .report import build_report, render_report\n 59\t\n 60\t\n 310\t log for an OwnIR facts file as one deterministic JSON document on stdout\n 311\t (roadmap stage 1). The debugging answer to \"why did this call stay plain /\n 312\t consume / fresh?\" — and the frozen parity surface the Rust port of the\n 313\t inference layer is diffed against, so its output contract is byte-stable:\n 314\t sorted method keys, sorted extern log, fixed field order. Exit code is 0\n 315\t even when the solve degraded (the `degraded` field carries the reason —\n 316\t this surface reports state, it does not judge); 2 only for unreadable\n 317\t facts, like `ownir`.\"\"\"\n 318\t try:\n 319\t doc = dump_summaries(load(path))\n 320\t except OwnIRError as e:\n 321\t print(f\"{path}: error: {e}\", file=sys.stderr)\n 322\t return 2\n 780\t kind=\"pooled buffer\"),\n 781\t ]\n 782\t\n 783\t\n 784\tdef to_module(facts: dict[str, Any],\n 785\t notes: list[str] | None = None,\n 786\t advisories: list[Finding] | None = None,\n 787\t ) -> tuple[Module, dict[str, dict[str, Any]]]:\n 788\t \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source\n?? sandboy/Cargo.lock\n3d21d4b fix: satisfy lint for summaries bridge\n","command","/bin/bash -lc \"nl -ba ownlang/__main__.py | sed -n '38,60p;310,322p' && nl -ba ownlang/ownir.py | sed -n '780,788p' && git status --short && git log --oneline -1\"","commandActions",[484],"cwd","/workspace/Own.NET","exitCode","processId","25976","source","unifiedExecStartup","commandExecution",{"_472":485,"_93":486},"nl -ba ownlang/__main__.py | sed -n '38,60p;310,322p' && nl -ba ownlang/ownir.py | sed -n '780,788p' && git status --short && git log --oneline -1","unknown",{"_428":488,"_409":410,"_430":416},{"_489":490,"_463":464,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"arguments","{\"cmd\":\"nl -ba ownlang/__main__.py | sed -n '38,60p;310,322p' && nl -ba ownlang/ownir.py | sed -n '780,788p' && git status --short && git log --oneline -1\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":4000}","exec_command","namespace","function_call",{"_428":495,"_409":410,"_430":416},{"_431":-5,"_448":496,"_42":-5,"_434":-5,"_450":497,"_93":452},"gAAAAABqTeVHcvb661Q4Ze0Oeni2PXWP3eVpf2_IZb_nFFlTiIKeDgSo3CTIGymHmYnmh7Q5n-l8MiRQiyj7UmMpDeaVvexQw6x4VTOUaGbYBxNFWB4vIHVzhGqWj-TXRVA-8_Won4EQdCHhAdq7NGLNtPpHHH1o8fRghthgq3F8HTzqrFhP1h8v7KfYTvAdYxIOYQvFahIn5KYd8J8-BUwMPrNipuZi9hDeodNhD_lOXbX1ospgzb9Yb9NWW01LqH1m0dz2jUJleBBe5n4He-qExnmjhDF_9GM77BxhfhjQ4C4LrWkVe0PZViKZl2nh1zvVHDiyNi0-GUSQbOCRwWKLZsKhUajl_g8A8-FNdwp_KlL--R12oEKG3efgl7t8KOLdygVM_jubbLs2tBfmJ7kwTvy1-SLZzyHnWrq4AYMJdZNShO_-Kb5qKdWvVI9G8FN7zIcJAVmyYPvl5No5-rttJGBMMbncFymGVcXaVzCyQ_e65necNNk-xz4DS7DZ9IsgdsNvFQkzX_lgOyVi8BeBB7r3oI1JJOAsBByEoYchUcCNmQaC3A-mh9CQnYJZKuJruFdDDqXYagI213E6m9Ie2OhqxJ0pgUlo8s0gR1aCnm8TqsXYPKeWJTJyciuWmRkZ98CDJz7s243A4qtjf-R8Lf52S-slOtP8d2JFf62EL8oIz96ASX4gHai2ubqTdS-lroOyBD7GISxy5lSB6ZCHx-tp5Cvo0SbvmXTWw3KLDv_ywLl8bydKY0L0ejy-YCycEZgARY97iUZ3o6_Vl1jpT_6avFJ8KP4-f7eZt8DWHtp99Eqj57hhtCZ8jMGbMUI8x_V9iu5EBb_q-9fZDGpRWuM1aKk6j6Ve5ux2ZvTydQ14rXfz8_P7-NLGX-F6ieMaU0ynR2ImyhQwzWwQ0tu5rriB_w-lT4T5Czy-o35z7yqJua5vCTjtEoRWQrdGewYKqVjkdB1-G7vyPBpW8M8BcCIxpYW09A==",[],{"_428":499,"_409":410,"_430":416},{"_431":500,"_42":501,"_450":502,"_93":452},[],"rs_0fe8a768663ad02f016a4de546b73881988477a3df2097ff97",[],{"_428":504,"_409":410,"_430":416},{"_463":505,"_42":-5,"_434":-5,"_465":506,"_93":467},"call_qnZu2oLSWr2HtirpTzXBcJ3X","Wall time: 0.0059 seconds\nOutput:\n{\"title\":\"fix: satisfy lint for interprocedural summaries bridge\",\"body\":\"## Summary\\n- Move the summaries CLI JSON and OwnIR imports to the module import block so Ruff's import-order check passes.\\n- Use the postponed-annotations form directly for the OwnIR `Finding` list annotation.\\n\\n## Testing\\n- `ruff check . --fix`\\n- `mypy`\\n- `python tests/test_ownir.py`\\n- `python tests/run_tests.py`\"}",{"_428":508,"_409":410,"_430":416},{"_509":-5,"_489":510,"_414":511,"_104":-5,"_42":505,"_512":-5,"_513":-5,"_514":515,"_516":517,"_421":114,"_518":517,"_93":519},"appContext",{"_307":524,"_309":525},5,"mcpAppResourceUri","pluginId","result",{"_520":-5,"_431":521,"_522":523},"server","make_pr","tool","mcpToolCall","_meta",[526],"structuredContent",{"_307":524,"_309":525},"fix: satisfy lint for interprocedural summaries bridge","## Summary\n- Move the summaries CLI JSON and OwnIR imports to the module import block so Ruff's import-order check passes.\n- Use the postponed-annotations form directly for the OwnIR `Finding` list annotation.\n\n## Testing\n- `ruff check . --fix`\n- `mypy`\n- `python tests/test_ownir.py`\n- `python tests/run_tests.py`",{"_93":46,"_46":527},"{\n \"title\": \"fix: satisfy lint for interprocedural summaries bridge\",\n \"body\": \"## Summary\\n- Move the summaries CLI JSON and OwnIR imports to the module import block so Ruff's import-order check passes.\\n- Use the postponed-annotations form directly for the OwnIR `Finding` list annotation.\\n\\n## Testing\\n- `ruff check . --fix`\\n- `mypy`\\n- `python tests/test_ownir.py`\\n- `python tests/run_tests.py`\"\n}",{"_428":529,"_409":410,"_430":416},{"_489":530,"_463":505,"_42":-5,"_434":-5,"_181":517,"_492":531,"_93":493},"{\"title\":\"fix: satisfy lint for interprocedural summaries bridge\",\"body\":\"## Summary\\n- Move the summaries CLI JSON and OwnIR imports to the module import block so Ruff's import-order check passes.\\n- Use the postponed-annotations form directly for the OwnIR `Finding` list annotation.\\n\\n## Testing\\n- `ruff check . --fix`\\n- `mypy`\\n- `python tests/test_ownir.py`\\n- `python tests/run_tests.py`\"}","mcp__make_pr__",{"_428":533,"_409":410,"_430":416},{"_463":534,"_42":-5,"_434":-5,"_465":535,"_93":467},"call_qq4LenUrN3SMHadNUoGA2reJ","Chunk ID: 59f9ce\nWall time: 0.0000 seconds\nProcess exited with code 0\nOriginal token count: 26\nOutput:\n[work 3d21d4b] fix: satisfy lint for summaries bridge\n 2 files changed, 3 insertions(+), 3 deletions(-)\n",{"_428":537,"_409":410,"_430":416},{"_470":538,"_472":539,"_474":540,"_476":477,"_414":32,"_478":32,"_42":534,"_479":541,"_481":482,"_421":114,"_93":483},"[work 3d21d4b] fix: satisfy lint for summaries bridge\n 2 files changed, 3 insertions(+), 3 deletions(-)\n","/bin/bash -lc 'git add ownlang/__main__.py ownlang/ownir.py && git commit -m \"fix: satisfy lint for summaries bridge\"'",[542],"4182",{"_472":543,"_93":486},"git add ownlang/__main__.py ownlang/ownir.py && git commit -m \"fix: satisfy lint for summaries bridge\"",{"_428":545,"_409":410,"_430":416},{"_489":546,"_463":534,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"git add ownlang/__main__.py ownlang/ownir.py && git commit -m \\\"fix: satisfy lint for summaries bridge\\\"\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":6000}",{"_428":548,"_409":410,"_430":416},{"_431":-5,"_448":549,"_42":-5,"_434":-5,"_450":550,"_93":452},"gAAAAABqTeVAlo6wCUQlFEYJkaTlasZoseZBsZdKI0SLZcUQUfDZe_XqiqblhbKZKwrPS74ln5yTOVxa28giKubdu9YiZBmXxjsBRJ_vHzpiLWz-p000kkcMywnGnGSNpiMhfs1IGdMZsu0nadv95J6FMcjKYSPEqxsJDZQnUakmBm_4EaW9jFQsoYJcB5kZUfC6kWR4p9-pIiKRzl9m4hDInAQuJFrMpTzwSZH40juFdpPD7oT4aOaPi_cN50Z8R2rXZb8GNfp7iP17Ge-kCeaKI9sUwAJrZV-ldpiKElOY3a7fyvqGOIlCafjf7MeU-xCDvlNUNDtG_Mq_XfYhmaK28EBKXKcnpbfSbFzUhZfeHxN5x0R7cNviBDmnsCf3UmJ3fGZqMHQfNif530faKk2pUl10k5fMYGPKOT8QA_XxdzHFf0c14G4Fq3G_tnWGhjj1y2uignb5kksrC0aKE41fnVOEUNzocufFmTtjqDCcIFA3kfOqANt-WNkwt8a_1gRvvDQCQEm-FuPU3kj34fSXk--CVQkCnx1g2DrZevwL1j6q2PTb3pKH7H_umrnRH9TzaS9NSh3g7zYiqX-VnR1PWGM6R0uamgDN2qe8uv8TbCcspQ-0LImK5AnYru3KzNl47Ce3mQMlfn_X07GZhNlLYKSGN0VI15ut3JMsVDFIFchkNahfW_ss1eKfHtDHrYlgBbefJYd211B0C420RJN5TsYU2Md6PaV_6A7E4_TKL-YJJj2geuPi0EJp45zlKb1hrBDYZQyMtuki3YfWejJPk27bpM4fAIiVoV8OsRtmiEqv_eS7Yx7k9Sj6wHUMD0Ho9vnOky2IZ-Y44fqG25kBZ7cZyxQF1pX4kNVJyThL8iWPxlL890YWerVDRKofp2XiiFwgx-lSEZDsfAgqZx2x7QFRxNgAaPLI7B21fV5Hj8qV2UK9jET37J6BOeJ0klRNBRx6wqez_sEuK8-MAllTaonjwOrkgFmp4FDPTEVQ_9690nn63GA-g0EO1vDNIcYkIlF5hBFt",[],{"_428":552,"_409":410,"_430":416},{"_431":553,"_42":554,"_450":555,"_93":452},[],"rs_0fe8a768663ad02f016a4de53fdf708198835e00b4d38313ec",[],{"_428":557,"_409":410,"_430":416},{"_463":558,"_42":-5,"_434":-5,"_465":559,"_93":467},"call_VcUc2iKVoeNIUPTHGxHqOEcw","Chunk ID: 1eeff7\nWall time: 0.0000 seconds\nProcess exited with code 0\nOriginal token count: 432\nOutput:\ndiff --git a/ownlang/__main__.py b/ownlang/__main__.py\nindex 1dcc4ce..5d9b2e2 100644\n--- a/ownlang/__main__.py\n+++ b/ownlang/__main__.py\n@@ -38,6 +38,7 @@ Exit code is non-zero if any error-level diagnostic was produced.\n \n from __future__ import annotations\n \n+import json\n import re\n import sys\n from typing import TYPE_CHECKING\n@@ -52,6 +53,7 @@ from .codegen import generate\n from .diagnostics import Diagnostic, Severity\n from .lexer import LexError\n from .lifetimes import check_lifetimes\n+from .ownir import OwnIRError, dump_summaries, load\n from .parser import ParseError, parse\n from .report import build_report, render_report\n \n@@ -313,8 +315,6 @@ def cmd_summaries(path: str) -> int:\n even when the solve degraded (the `degraded` field carries the reason —\n this surface reports state, it does not judge); 2 only for unreadable\n facts, like `ownir`.\"\"\"\n- import json\n- from .ownir import OwnIRError, dump_summaries, load\n try:\n doc = dump_summaries(load(path))\n except OwnIRError as e:\ndiff --git a/ownlang/ownir.py b/ownlang/ownir.py\nindex ce4f42d..84e3948 100644\n--- a/ownlang/ownir.py\n+++ b/ownlang/ownir.py\n@@ -783,7 +783,7 @@ def _prelude_resources() -> list[ResourceDecl]:\n \n def to_module(facts: dict[str, Any],\n notes: list[str] | None = None,\n- advisories: list[\"Finding\"] | None = None,\n+ advisories: list[Finding] | None = None,\n ) -> tuple[Module, dict[str, dict[str, Any]]]:\n \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source\n text and no re-parse (P-016 B0a; the round-trip `to_own` + `parse` has existed\n M ownlang/__main__.py\n M ownlang/ownir.py\n?? sandboy/Cargo.lock\n",{"_428":561,"_409":410,"_430":416},{"_470":562,"_472":563,"_474":564,"_476":477,"_414":32,"_478":32,"_42":558,"_479":565,"_481":482,"_421":114,"_93":483},"diff --git a/ownlang/__main__.py b/ownlang/__main__.py\nindex 1dcc4ce..5d9b2e2 100644\n--- a/ownlang/__main__.py\n+++ b/ownlang/__main__.py\n@@ -38,6 +38,7 @@ Exit code is non-zero if any error-level diagnostic was produced.\n \n from __future__ import annotations\n \n+import json\n import re\n import sys\n from typing import TYPE_CHECKING\n@@ -52,6 +53,7 @@ from .codegen import generate\n from .diagnostics import Diagnostic, Severity\n from .lexer import LexError\n from .lifetimes import check_lifetimes\n+from .ownir import OwnIRError, dump_summaries, load\n from .parser import ParseError, parse\n from .report import build_report, render_report\n \n@@ -313,8 +315,6 @@ def cmd_summaries(path: str) -> int:\n even when the solve degraded (the `degraded` field carries the reason —\n this surface reports state, it does not judge); 2 only for unreadable\n facts, like `ownir`.\"\"\"\n- import json\n- from .ownir import OwnIRError, dump_summaries, load\n try:\n doc = dump_summaries(load(path))\n except OwnIRError as e:\ndiff --git a/ownlang/ownir.py b/ownlang/ownir.py\nindex ce4f42d..84e3948 100644\n--- a/ownlang/ownir.py\n+++ b/ownlang/ownir.py\n@@ -783,7 +783,7 @@ def _prelude_resources() -> list[ResourceDecl]:\n \n def to_module(facts: dict[str, Any],\n notes: list[str] | None = None,\n- advisories: list[\"Finding\"] | None = None,\n+ advisories: list[Finding] | None = None,\n ) -> tuple[Module, dict[str, dict[str, Any]]]:\n \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source\n text and no re-parse (P-016 B0a; the round-trip `to_own` + `parse` has existed\n M ownlang/__main__.py\n M ownlang/ownir.py\n?? sandboy/Cargo.lock\n","/bin/bash -lc 'git diff -- ownlang/__main__.py ownlang/ownir.py && git status --short'",[566],"30965",{"_472":567,"_93":486},"git diff -- ownlang/__main__.py ownlang/ownir.py && git status --short",{"_428":569,"_409":410,"_430":416},{"_489":570,"_463":558,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"git diff -- ownlang/__main__.py ownlang/ownir.py && git status --short\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":6000}",{"_428":572,"_409":410,"_430":416},{"_470":573,"_472":574,"_474":575,"_476":477,"_414":576,"_478":32,"_42":577,"_479":578,"_481":482,"_421":114,"_93":483},"Found 1 error (1 fixed, 0 remaining).\nSuccess: no issues found in 19 source files\nownir: 245/245 bridge checks passed\n\nanalysis: 132/132 passed, 0 failed\ncodegen: 43/43 generated cleanly\ngolden: PASS\nbuffer: PASS\nescape: PASS\nbranchy: PASS\nnesting: PASS\nordering: PASS\nhelper: PASS\ncfg_json: 20/20 CFG-seam checks pass\ncodegen content: 23/23 passed, 0 failed\nproperty fuzz: 3000 clean programs checked (200 hoist, 2800 inline), 0 failed\nreal-world corpus (corpus/real-world/):\n ado-executereader-leak OWN001\n arraypool-aliased-receiver OWN003\n arraypool-double-return OWN003\n arraypool-field-fullspan-overread OWN025\n arraypool-fullspan-overread OWN025\n arraypool-length-overread OWN025\n arraypool-memory-view-escape OWN002\n arraypool-span-view-after-return OWN002\n arraypool-use-after-return OWN002\n field-dispose-via-exchange OWN001\n field-dispose-via-helper OWN001\n field-noop-dispose-wrapper OWN001\n local-dispose-via-using-statement OWN001\n memorypool-double-dispose OWN003\n memorypool-using-owner-escape OWN002\n memorypool-using-statement-view-escape OWN002\n memorypool-using-view-escape OWN002\n memorypool-view-after-dispose OWN002\n nethermind-patriciatree-arraypool-leak OWN001\n ownership-handoff-consume OWN001,OWN002\n ownership-handoff-use OWN002\n ownership-handoff-use-transitive OWN002\n pool-transfer-via-wrapper-local OWN001\n screentogif-loaded-subscription OWN001\n screentogif-systemevents-leak OWN001\n sharex-rfc2898-derivebytes-leak OWN001\n socket-accept-leak OWN001\n subscription-self-owned-property OWN001\n tcplistener-accept-leak OWN001\n tcplistener-acceptsocket-leak OWN001\n using-statement-throw-releases OWN001\ncorpus: 31/31 cases match their expected diagnostics\ndiag_sarif: 10/10 SARIF projection checks pass\ndiagnostics: PASS (evidence invariant + slice ordering + SARIF builders)\neffects: 31/31 EFF001 stability checks passed\nevidence: 12/12 evidence-coverage checks pass\nexplain: PASS (text + exit codes + --json harvest + DI catalogue + dispatch)\nwhat it catches — gallery (examples/gallery/):\n 00_ok_clean.own clean clean: rent -> view -> return, exception-safe\n 01_leak_on_error_path.own OWN001 forgot Dispose() on the early-out path\n (owned resource not released on all paths (possible leak))\n 02_use_after_release.own OWN002 touched a stream after Dispose()\n (use after release)\n 03_double_release.own OWN003 Dispose() called twice\n (double release)\n 04_use_after_move.own OWN005 used a value after moving ownership away\n (use after move)\n 05_dispose_while_view_live.own OWN008 ArrayPool.Return while a Span over it is live\n (release while borrowed)\n 06_exclusive_while_shared.own OWN006 wrote through a Span aliased by a ReadOnlySpan\n (mutable borrow while a shared borrow is live)\n 07_use_after_handoff.own OWN002 used a buffer after a callee took ownership\n (use after release)\n 08_stack_buffer_escapes.own OWN015 returned a Span over a stackalloc (dangling)\n (stack-backed buffer cannot escape the current function)\n 09_untracked_call.own OWN040 ownership laundered through an opaque call\n (call to an undeclared function (unknown calls are forbidden))\n 10_leak_in_loop.own OWN001 acquired in a loop, never released (while)\n (owned resource not released on all paths (possible leak))\n 11_overspan_full_view.own OWN025 full view buf.AsSpan() past the rented length\n (full-length view of a pooled buffer reaches past its logical length)\ngallery: 12/12 examples match their documented diagnostic\nlifetimes: 10/10 region cases match expected codes\nloops: 20/20 loop (while) cases pass\nownership: 45/45 D5.0 summary checks passed\nownir: 245/245 bridge checks passed\nrid (D5.4 step 0 — RID indirection):\n ok rid_of defaults to id(sym)\n ok mint returns id(sym) and records it\n ok distinct handles mint distinct RIDs\n ok copy() preserves handle_rid\n ok _join_handle_rid unions disjoint maps\n ok _join_handle_rid keeps an agreeing shared mapping\n ok _join_handle_rid asserts on a conflicting mapping\n ok 1:1 acquire still leaks (OWN001)\n ok 1:1 acquire+release stays silent\n ok 1:1 double-release still OWN003\n ok returning an owned resource escapes clean\n ok a sibling RID still leaks before return (OWN001)\n ok releasing an owning alias of a borrowed RID is OWN008\n ok using an owning alias of a mut-borrowed RID is OWN013\nrid: 14/14 RID-layer checks pass\nspec: 23/23 normative rules fire on their example\nsyntax parity fixtures OK: 24 cases (20 rejections, 4 accepts) verified in sync\nWPF lifetime corpus (corpus/wpf/):\n field-use-after-dispose OWN002\n handler-use-after-dispose OWN002\n handler-use-after-dispose-wrapped-delegate OWN002\n pooled-view-after-dispose OWN002\n subscription-explicit-delegate-release OWN001\n subscription-target-typed-delegate-release OWN001\n systemevents-region-escape OWN014\n viewmodel-escapes-to-app OWN014\n zombie-viewmodel OWN001\nwpf: 9/9 cases match expected codes + carry kind metadata\n","/bin/bash -lc 'ruff check . --fix && mypy && python tests/test_ownir.py && python tests/run_tests.py'",[579],7238,"call_AOAn2IpUaWS2oXF4Oo9Se9oN","1139",{"_472":580,"_93":486},"ruff check . --fix && mypy && python tests/test_ownir.py && python tests/run_tests.py",{"_428":582,"_409":410,"_430":416},{"_463":583,"_42":-5,"_434":-5,"_465":584,"_93":467},"call_nrDGQYoxKoMCaP1OVt0knvAD","Chunk ID: 88ca58\nWall time: 2.8487 seconds\nProcess exited with code 0\nOriginal token count: 1491\nOutput:\nSuccess: no issues found in 19 source files\nownir: 245/245 bridge checks passed\n\nanalysis: 132/132 passed, 0 failed\ncodegen: 43/43 generated cleanly\ngolden: PASS\nbuffer: PASS\nescape: PASS\nbranchy: PASS\nnesting: PASS\nordering: PASS\nhelper: PASS\ncfg_json: 20/20 CFG-seam checks pass\ncodegen content: 23/23 passed, 0 failed\nproperty fuzz: 3000 clean programs checked (200 hoist, 2800 inline), 0 failed\nreal-world corpus (corpus/real-world/):\n ado-executereader-leak OWN001\n arraypool-aliased-receiver OWN003\n arraypool-double-return OWN003\n arraypool-field-fullspan-overread OWN025\n arraypool-fullspan-overread OWN025\n arraypool-length-overread OWN025\n arraypool-memory-view-escape OWN002\n arraypool-span-view-after-return OWN002\n arraypool-use-after-return OWN002\n field-dispose-via-exchange OWN001\n field-dispose-via-helper OWN001\n field-noop-dispose-wrapper OWN001\n local-dispose-via-using-statement OWN001\n memorypool-double-dispose OWN003\n memorypool-using-owner-escape OWN002\n memorypool-using-statement-view-escape OWN002\n memorypool-using-view-escape OWN002\n memorypool-view-after-dispose OWN002\n nethermind-patriciatree-arraypool-leak OWN001\n ownership-handoff-consume OWN001,OWN002\n ownership-handoff-use OWN002\n ownership-handoff-use-transitive OWN002\n pool-transfer-via-wrapper-local OWN001\n screentogif-loaded-subscription OWN001\n screentogif-systemevents-leak OWN001\n sharex-rfc2898-derivebytes-leak OWN001\n socket-accept-leak OWN001\n subscription-self-owned-property OWN001\n tcplistener-accept-leak OWN001\n tcplistener-acceptsocket-leak OWN001\n using-statement-throw-releases OWN001\ncorpus: 31/31 cases match their expected diagnostics\ndiag_sarif: 10/10 SARIF projection checks pass\ndiagnostics: PASS (evidence invariant + slice ordering + SARIF builders)\neffects: 31/31 EFF001 stability checks passed\nevidence: 12/12 evidence-coverage checks pass\nexplain: PASS (text + exit codes + --json harvest + DI catalogue + dispatch)\nwhat it catches — gallery (examples/gallery/):\n 00_ok_clean.own clean clean: rent -> view -> return, exception-safe\n 01_leak_on_error_path.own OWN001 forgot Dispose() on the early-out path\n (owned resource not released on all paths (possible leak))\n 02_use_after_release.own OWN002 touched a stream after Dispose()\n (use after release)\n 03_double_release.own OWN003 Dispose() called twice\n (double release)\n 04_use_after_move.own OWN005 used a value after moving ownership away\n (use after move)\n 05_dispose_while_view_live.own OWN008 ArrayPool.Return while a Span over it is live\n (release while borrowed)\n 06_exclusive_while_shared.own OWN006 wrote through a Span aliased by a ReadOnlySpan\n (mutable borrow while a shared borrow is live)\n 07_use_after_handoff.own OWN002 used a buffer after a callee took ownership\n (use after release)\n 08_stack_buffer_escapes.own OWN015 returned a Span over a stackalloc (dangling)\n (stack-backed buffer cannot escape the current function)\n 09_untracked_call.own OWN040 ownership laundered through an opaque call\n (call to an undeclared function (unknown calls are forbidden))\n 10_leak_in_loop.own OWN001 acquired in a loop, never released (while)\n (owned resource not released on all paths (possible leak))\n 11_overspan_full_view.own OWN025 full view buf.AsSpan() past the rented length\n (full-length view of a pooled buffer reaches past its logical length)\ngallery: 12/12 examples match their documented diagnostic\nlifetimes: 10/10 region cases match expected codes\nloops: 20/20 loop (while) cases pass\nownership: 45/45 D5.0 summary checks passed\nownir: 245/245 bridge checks passed\nrid (D5.4 step 0 — RID indirection):\n ok rid_of defaults to id(sym)\n ok mint returns id(sym) and records it\n ok distinct handles mint distinct RIDs\n ok copy() preserves handle_rid\n ok _join_handle_rid unions disjoint maps\n ok _join_handle_rid keeps an agreeing shared mapping\n ok _join_handle_rid asserts on a conflicting mapping\n ok 1:1 acquire still leaks (OWN001)\n ok 1:1 acquire+release stays silent\n ok 1:1 double-release still OWN003\n ok returning an owned resource escapes clean\n ok a sibling RID still leaks before return (OWN001)\n ok releasing an owning alias of a borrowed RID is OWN008\n ok using an owning alias of a mut-borrowed RID is OWN013\nrid: 14/14 RID-layer checks pass\nspec: 23/23 normative rules fire on their example\nsyntax parity fixtures OK: 24 cases (20 rejections, 4 accepts) verified in sync\nWPF lifetime corpus (corpus/wpf/):\n field-use-after-dispose OWN002\n handler-use-after-dispose OWN002\n handler-use-after-dispose-wrapped-delegate OWN002\n pooled-view-after-dispose OWN002\n subscription-explicit-delegate-release OWN001\n subscription-target-typed-delegate-release OWN001\n systemevents-region-escape OWN014\n viewmodel-escapes-to-app OWN014\n zombie-viewmodel OWN001\nwpf: 9/9 cases match expected codes + carry kind metadata\n",{"_428":586,"_409":410,"_430":416},{"_489":587,"_463":583,"_42":-5,"_434":-5,"_181":588,"_492":-5,"_93":493},"{\"session_id\":1139,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}","write_stdin",{"_428":590,"_409":410,"_430":416},{"_463":577,"_42":-5,"_434":-5,"_465":591,"_93":467},"Chunk ID: eefc38\nWall time: 1.0019 seconds\nProcess running with session ID 1139\nOriginal token count: 10\nOutput:\nFound 1 error (1 fixed, 0 remaining).\n",{"_428":593,"_409":410,"_430":416},{"_489":594,"_463":577,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"ruff check . --fix && mypy && python tests/test_ownir.py && python tests/run_tests.py\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}",{"_428":596,"_409":410,"_430":416},{"_431":-5,"_448":597,"_42":-5,"_434":-5,"_450":598,"_93":452},"gAAAAABqTeU0WjybGRCaKw9JoCcSccm90gc2aYKxJMfa11jQr9D-UIXK2Np-DQ5uuP9aBfWX_U-a3TksiMs62jOhHg7RxsTxJNMXRVW50o8_YrIsULyISdRdZecRGzbfx2NP6PAMkbgAvZj6w5fGsdSV8Hbnfj8M46kbLEnFhekGBlLR5D7bhuwJN2eEh0k3nIByIIYywGZd8ORtln6cTWPN5Ml9yXCko3Htx4cctd-XW4bdI__9W56r9GYtekTzKUzd3BW4HkZuG0xsa0C29dn6KcsNLo-65GXOi6V0FDzcHMvbCpnO7ePumnSSFvYNO3avwcpqkKRkVVVhttQunfJpLfrMSFsCvoI3rcpIWMERU59torfd2uijeSf5_-PXqPeZz37TvOy1jZaGwO07KETW8Kq-lfyHWhMme6esFmQD9UlwebtwKB0aRW-5MSIHXfAJ23TslYP2JOb_qz1THznUsp1EqRcgtQ2bnQsZVN5-C0yFa7burTTxfA-yT74rlhba2qSFK0d1wFjmdgLeFnCo9P_RtIJBFLXxbpznsEnDa2051UEcRqT6HevkifBv6JwVm_8yttA2jFxyD1CndcJwi2lvEdnnKtqAylkNIv7TWrWIJpKVRm__jq5h1ce9A70Mk8XBALi0eJs_36pHTr1k0CIj5FWt_PDPwvr06By_eBNVhA5Tvp57Hh6J8KMsvX3S10kEN3b6aJE6XPLPNO7G5nrcNfcgpwii7nIsxln46fVH7dr2ud0MpCYql_4o_L5HkZm7aM4wVf02AQfWPbWrLpiDO9UPhpi_O9MCrRF-Ns-kXlRnLm2sjariTcMqXKoNbjjUkbj5Q6zTMCcjUScbphuq-LOlRDYl7TFCbI61-ebqb58iYz8s_9YapNWrEn_Crn7pz9rZd4JuCOmsLngyN1ZKIFG6Bg1Y_H9vifyhP_X5WqcbmtEVjyh4J0SNI6UdecZrISH6ZYmdh-AT1upuuxp3wk2uwX10aDgNki7vvRGWBjgzW40=",[599],{"_46":600,"_93":455},"**Evaluating code sorting**\n\nI'm considering whether to sort .ownir before parsing. It might make sense because sorting first could help streamline the process. Additionally, I wonder if running a ruff fix would be a good step to ensure everything aligns correctly. I’ll keep these options in mind as I work through the task and make sure to tackle it in a logical order. Keeping organized is key to avoiding future issues!",{"_428":602,"_409":410,"_430":416},{"_431":603,"_42":604,"_450":605,"_93":452},[],"rs_0fe8a768663ad02f016a4de532bf488198b9aa673c5f4ab22d",[600],{"_428":607,"_409":410,"_430":416},{"_470":608,"_472":609,"_474":610,"_476":477,"_414":611,"_478":612,"_42":613,"_479":614,"_481":482,"_421":615,"_93":483},"I001 [*] Import block is un-sorted or un-formatted\n --> ownlang/__main__.py:49:1\n |\n47 | from .cfg import Instr\n48 |\n49 | / from .analysis import analyze\n50 | | from .buffers import validate_policies\n51 | | from .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures\n52 | | from .codegen import generate\n53 | | from .diagnostics import Diagnostic, Severity\n54 | | from .lexer import LexError\n55 | | from .lifetimes import check_lifetimes\n56 | | from .parser import ParseError, parse\n57 | | from .report import build_report, render_report\n58 | | from .ownir import OwnIRError, dump_summaries, load\n | |___________________________________________________^\n |\nhelp: Organize imports\n\nFound 1 error.\n[*] 1 fixable with the `--fix` option.\n","/bin/bash -lc \"python - <<'PY'\nfrom pathlib import Path\np=Path('ownlang/__main__.py')\ns=p.read_text()\ns=s.replace('import re\\\\nimport sys\\\\nfrom typing import TYPE_CHECKING\\\\n', 'import json\\\\nimport re\\\\nimport sys\\\\nfrom typing import TYPE_CHECKING\\\\n')\ns=s.replace('from .report import build_report, render_report\\\\n', 'from .report import build_report, render_report\\\\nfrom .ownir import OwnIRError, dump_summaries, load\\\\n')\ns=s.replace(' import json\\\\n from .ownir import OwnIRError, dump_summaries, load\\\\n try:\\\\n', ' try:\\\\n')\np.write_text(s)\np=Path('ownlang/ownir.py')\ns=p.read_text().replace('advisories: list[\\\"Finding\\\"] | None = None,', 'advisories: list[Finding] | None = None,')\np.write_text(s)\nPY\nruff check . && mypy && python tests/test_ownir.py && python tests/run_tests.py\"",[616],1066,1,"call_7KDj8JSkrj6563epuLp8vFc8","17740","failed",{"_472":617,"_93":486},"python - <<'PY'\nfrom pathlib import Path\np=Path('ownlang/__main__.py')\ns=p.read_text()\ns=s.replace('import re\\nimport sys\\nfrom typing import TYPE_CHECKING\\n', 'import json\\nimport re\\nimport sys\\nfrom typing import TYPE_CHECKING\\n')\ns=s.replace('from .report import build_report, render_report\\n', 'from .report import build_report, render_report\\nfrom .ownir import OwnIRError, dump_summaries, load\\n')\ns=s.replace(' import json\\n from .ownir import OwnIRError, dump_summaries, load\\n try:\\n', ' try:\\n')\np.write_text(s)\np=Path('ownlang/ownir.py')\ns=p.read_text().replace('advisories: list[\"Finding\"] | None = None,', 'advisories: list[Finding] | None = None,')\np.write_text(s)\nPY\nruff check . && mypy && python tests/test_ownir.py && python tests/run_tests.py",{"_428":619,"_409":410,"_430":416},{"_463":613,"_42":-5,"_434":-5,"_465":620,"_93":467},"Chunk ID: 3b4e95\nWall time: 0.9649 seconds\nProcess exited with code 1\nOriginal token count: 194\nOutput:\nI001 [*] Import block is un-sorted or un-formatted\n --> ownlang/__main__.py:49:1\n |\n47 | from .cfg import Instr\n48 |\n49 | / from .analysis import analyze\n50 | | from .buffers import validate_policies\n51 | | from .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures\n52 | | from .codegen import generate\n53 | | from .diagnostics import Diagnostic, Severity\n54 | | from .lexer import LexError\n55 | | from .lifetimes import check_lifetimes\n56 | | from .parser import ParseError, parse\n57 | | from .report import build_report, render_report\n58 | | from .ownir import OwnIRError, dump_summaries, load\n | |___________________________________________________^\n |\nhelp: Organize imports\n\nFound 1 error.\n[*] 1 fixable with the `--fix` option.\n",{"_428":622,"_409":410,"_430":416},{"_489":623,"_463":613,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"python - <<'PY'\\nfrom pathlib import Path\\np=Path('ownlang/__main__.py')\\ns=p.read_text()\\ns=s.replace('import re\\\\nimport sys\\\\nfrom typing import TYPE_CHECKING\\\\n', 'import json\\\\nimport re\\\\nimport sys\\\\nfrom typing import TYPE_CHECKING\\\\n')\\ns=s.replace('from .report import build_report, render_report\\\\n', 'from .report import build_report, render_report\\\\nfrom .ownir import OwnIRError, dump_summaries, load\\\\n')\\ns=s.replace(' import json\\\\n from .ownir import OwnIRError, dump_summaries, load\\\\n try:\\\\n', ' try:\\\\n')\\np.write_text(s)\\np=Path('ownlang/ownir.py')\\ns=p.read_text().replace('advisories: list[\\\"Finding\\\"] | None = None,', 'advisories: list[Finding] | None = None,')\\np.write_text(s)\\nPY\\nruff check . && mypy && python tests/test_ownir.py && python tests/run_tests.py\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":10000}",{"_428":625,"_409":410,"_430":416},{"_463":626,"_42":-5,"_434":-5,"_465":627,"_93":467},"call_xCXaX2VSdkMuYbhkU08GlqpB","Chunk ID: 8684ce\nWall time: 0.0005 seconds\nProcess exited with code 0\nOriginal token count: 519\nOutput:\n\nimport re\nimport sys\nfrom typing import TYPE_CHECKING\n\nif TYPE_CHECKING:\n from .cfg import Instr\n\nfrom .analysis import analyze\nfrom .buffers import validate_policies\nfrom .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures\nfrom .codegen import generate\nfrom .diagnostics import Diagnostic, Severity\nfrom .lexer import LexError\nfrom .lifetimes import check_lifetimes\nfrom .parser import ParseError, parse\nfrom .report import build_report, render_report\n\n\ndef check_module(mod: object) -> list[Diagnostic]:\n \"\"\"Run the full ownership pipeline over an already-parsed module and return\n its diagnostics. This is the AST-level entry to the *one* checker: callers\n that already hold a `Module` (the OwnIR bridge lowers facts straight to one)\n use this instead of re-serialising to source text and re-parsing it.\"\"\"\n rnames = {r.name for r in mod.resources} # type: ignore[attr-defined]\n sigs = collect_signatures(mod) # type: ignore[arg-type]\n pols = collect_policies(mod) # type: ignore[arg-type]\n kinds = collect_kinds(mod) # type: ignore[arg-type]\n diags: list[Diagnostic] = list(validate_policies(pols))\n diags.extend(check_lifetimes(mod)) # type: ignore[arg-type]\n for fn in mod.functions: # type: ignore[attr-defined]\nfrom .effects import Binding as EffectBinding\nfrom .effects import Effect as ReactEffect\nfrom .effects import find_effect_storms\nfrom .evidence import code_flow, di_path_steps\nfrom .ownership import (\n MethodSkeleton,\n ParamSkeleton,\n PathAction,\n ReturnSkeleton,\n Transfer,\n solve,\n solve_with_log,\n)\n\n# The OwnIR schema version this core understands. Bump it whenever the fact\n# vocabulary changes incompatibly; the extractor stamps the same number so a\n# mismatched extractor/core pair fails loudly (see load()) instead of silently\n# mis-reading facts.\nOWNIR_VERSION = 0\n\n\nclass OwnIRError(ValueError):\n \"\"\"A malformed or unmappable OwnIR fact set. Carries a human message; the\n driver turns it into a clear one-line error rather than a traceback.\"\"\"\n\n\n",{"_428":629,"_409":410,"_430":416},{"_470":630,"_472":631,"_474":632,"_476":477,"_414":32,"_478":32,"_42":626,"_479":633,"_481":482,"_421":114,"_93":483},"\nimport re\nimport sys\nfrom typing import TYPE_CHECKING\n\nif TYPE_CHECKING:\n from .cfg import Instr\n\nfrom .analysis import analyze\nfrom .buffers import validate_policies\nfrom .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures\nfrom .codegen import generate\nfrom .diagnostics import Diagnostic, Severity\nfrom .lexer import LexError\nfrom .lifetimes import check_lifetimes\nfrom .parser import ParseError, parse\nfrom .report import build_report, render_report\n\n\ndef check_module(mod: object) -> list[Diagnostic]:\n \"\"\"Run the full ownership pipeline over an already-parsed module and return\n its diagnostics. This is the AST-level entry to the *one* checker: callers\n that already hold a `Module` (the OwnIR bridge lowers facts straight to one)\n use this instead of re-serialising to source text and re-parsing it.\"\"\"\n rnames = {r.name for r in mod.resources} # type: ignore[attr-defined]\n sigs = collect_signatures(mod) # type: ignore[arg-type]\n pols = collect_policies(mod) # type: ignore[arg-type]\n kinds = collect_kinds(mod) # type: ignore[arg-type]\n diags: list[Diagnostic] = list(validate_policies(pols))\n diags.extend(check_lifetimes(mod)) # type: ignore[arg-type]\n for fn in mod.functions: # type: ignore[attr-defined]\nfrom .effects import Binding as EffectBinding\nfrom .effects import Effect as ReactEffect\nfrom .effects import find_effect_storms\nfrom .evidence import code_flow, di_path_steps\nfrom .ownership import (\n MethodSkeleton,\n ParamSkeleton,\n PathAction,\n ReturnSkeleton,\n Transfer,\n solve,\n solve_with_log,\n)\n\n# The OwnIR schema version this core understands. Bump it whenever the fact\n# vocabulary changes incompatibly; the extractor stamps the same number so a\n# mismatched extractor/core pair fails loudly (see load()) instead of silently\n# mis-reading facts.\nOWNIR_VERSION = 0\n\n\nclass OwnIRError(ValueError):\n \"\"\"A malformed or unmappable OwnIR fact set. Carries a human message; the\n driver turns it into a clear one-line error rather than a traceback.\"\"\"\n\n\n","/bin/bash -lc \"sed -n '40,70p' ownlang/__main__.py && sed -n '145,170p' ownlang/ownir.py\"",[634,635],"40299",{"_472":640,"_181":641,"_162":642,"_93":639},{"_472":636,"_181":637,"_162":638,"_93":639},"sed -n '145,170p' ownlang/ownir.py","ownir.py","/workspace/Own.NET/ownlang/ownir.py","read","sed -n '40,70p' ownlang/__main__.py","__main__.py","/workspace/Own.NET/ownlang/__main__.py",{"_428":644,"_409":410,"_430":416},{"_489":645,"_463":626,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"sed -n '40,70p' ownlang/__main__.py && sed -n '145,170p' ownlang/ownir.py\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":3000}",{"_428":647,"_409":410,"_430":416},{"_463":648,"_42":-5,"_434":-5,"_465":649,"_93":467},"call_sfZHYYBdzmCBCNcglHCvjHAD","Chunk ID: 39a2e2\nWall time: 0.0000 seconds\nProcess exited with code 0\nOriginal token count: 383\nOutput:\nownlang/__main__.py:39:from __future__ import annotations\nownlang/__main__.py:41:import re\nownlang/__main__.py:42:import sys\nownlang/__main__.py:43:from typing import TYPE_CHECKING\nownlang/__main__.py:48:from .analysis import analyze\nownlang/__main__.py:49:from .buffers import validate_policies\nownlang/__main__.py:50:from .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures\nownlang/__main__.py:51:from .codegen import generate\nownlang/__main__.py:52:from .diagnostics import Diagnostic, Severity\nownlang/__main__.py:53:from .lexer import LexError\nownlang/__main__.py:54:from .lifetimes import check_lifetimes\nownlang/__main__.py:55:from .parser import ParseError, parse\nownlang/__main__.py:56:from .report import build_report, render_report\nownlang/ownir.py:102:from __future__ import annotations\nownlang/ownir.py:104:import json\nownlang/ownir.py:105:from collections import Counter\nownlang/ownir.py:106:from dataclasses import dataclass\nownlang/ownir.py:107:from typing import Any\nownlang/ownir.py:109:from .ast_nodes import (\nownlang/ownir.py:135:from .di import LIFETIMES as DI_LIFETIMES\nownlang/ownir.py:136:from .di import (\nownlang/ownir.py:144:from .diagnostics import TITLES, Severity\nownlang/ownir.py:145:from .effects import Binding as EffectBinding\nownlang/ownir.py:146:from .effects import Effect as ReactEffect\nownlang/ownir.py:147:from .effects import find_effect_storms\nownlang/ownir.py:148:from .evidence import code_flow, di_path_steps\nownlang/ownir.py:149:from .ownership import (\n",{"_428":651,"_409":410,"_430":416},{"_470":652,"_472":653,"_474":654,"_476":477,"_414":32,"_478":32,"_42":648,"_479":655,"_481":482,"_421":114,"_93":483},"ownlang/__main__.py:39:from __future__ import annotations\nownlang/__main__.py:41:import re\nownlang/__main__.py:42:import sys\nownlang/__main__.py:43:from typing import TYPE_CHECKING\nownlang/__main__.py:48:from .analysis import analyze\nownlang/__main__.py:49:from .buffers import validate_policies\nownlang/__main__.py:50:from .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures\nownlang/__main__.py:51:from .codegen import generate\nownlang/__main__.py:52:from .diagnostics import Diagnostic, Severity\nownlang/__main__.py:53:from .lexer import LexError\nownlang/__main__.py:54:from .lifetimes import check_lifetimes\nownlang/__main__.py:55:from .parser import ParseError, parse\nownlang/__main__.py:56:from .report import build_report, render_report\nownlang/ownir.py:102:from __future__ import annotations\nownlang/ownir.py:104:import json\nownlang/ownir.py:105:from collections import Counter\nownlang/ownir.py:106:from dataclasses import dataclass\nownlang/ownir.py:107:from typing import Any\nownlang/ownir.py:109:from .ast_nodes import (\nownlang/ownir.py:135:from .di import LIFETIMES as DI_LIFETIMES\nownlang/ownir.py:136:from .di import (\nownlang/ownir.py:144:from .diagnostics import TITLES, Severity\nownlang/ownir.py:145:from .effects import Binding as EffectBinding\nownlang/ownir.py:146:from .effects import Effect as ReactEffect\nownlang/ownir.py:147:from .effects import find_effect_storms\nownlang/ownir.py:148:from .evidence import code_flow, di_path_steps\nownlang/ownir.py:149:from .ownership import (\n","/bin/bash -lc 'rg -n \"''^import |''^from \" ownlang/__main__.py ownlang/ownir.py | head -80'",[656],"57246",{"_472":657,"_162":641,"_658":659,"_93":660},"rg -n '^import |''^from ' ownlang/__main__.py ownlang/ownir.py","query","^import |^from ","search",{"_428":662,"_409":410,"_430":416},{"_489":663,"_463":648,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"rg -n \\\"^import |^from \\\" ownlang/__main__.py ownlang/ownir.py | head -80\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":4000}",{"_428":665,"_409":410,"_430":416},{"_463":666,"_42":-5,"_434":-5,"_465":667,"_93":467},"call_0fjnPXJTkR9GUi86SIAskiyJ","Chunk ID: 5b81f0\nWall time: 0.0000 seconds\nProcess exited with code 0\nOriginal token count: 1035\nOutput:\n\"\"\"\nCommand-line driver for the OwnLang PoC.\n\n python -m ownlang check file.own # report ownership diagnostics\n python -m ownlang check file.own --format sarif # SARIF 2.1.0 log (code scanning)\n python -m ownlang emit file.own # check, then print generated C#\n python -m ownlang cfg file.own # dump the control-flow graph (human debug view)\n python -m ownlang cfg file.own --format json # canonical CFG JSON (oracle seam)\n python -m ownlang report file.own # buffer storage report + .ownreport.json\n python -m ownlang ownir facts.json # check OwnIR facts extracted from C# (P-001)\n python -m ownlang ownir facts.json --format github|msbuild|human|sarif\n python -m ownlang summaries facts.json # dump solved method-ownership summaries\n # (MOS) + extern log — deterministic JSON\n python -m ownlang explain OWN001 [DI002 ...] # explain diagnostic code(s): what/why/fix\n python -m ownlang explain --json findings.json # explain every code in a findings/SARIF file\n\n`explain` is the diagnostic catalogue side of the CLI (the `ownsharp explain` the\nroslyn-tools-shaped surface advertises): it prints what a code means, why it fires,\nand how to fix it. It lives in the core, next to the catalogue, because there is one\nchecker — the C# extractor emits facts, it does not own the diagnostics.\n\n`--format` selects the finding surface. On `ownir`: `human` (default CLI line),\n`github` (CI annotations on the PR diff), `msbuild` (VS Error List), or `sarif`\n(a SARIF 2.1.0 log — GitHub code scanning, and the cross-tool oracle reads it too).\nOn `check` it is `human` (default) or `sarif` — the `.own` flow diagnostics as a\nSARIF log carrying each finding's evidence slice (relatedLocations / codeFlows);\n`github`/`msbuild` are ownir-only (they render a Finding, not a Diagnostic).\n`--severity` (ownir only) picks how the host shows a finding — `error` (default,\nfails a build / red check) or `warning` (advisory). It is a presentation choice;\nthe finding is still the core's verdict.\n`--verbosity` (ownir only) is `quiet` (errors only — hide the advisory notes:\nOWN050 \"leakage analysis skipped\", OWN051 \"ownership transfer unverified\",\nOWN052 \"summaries skipped\"), `normal` (default), or `verbose` (also print a\nper-code breakdown).\n\nExit code is non-zero if any error-level diagnostic was produced.\n\"\"\"\n\nfrom __future__ import annotations\n\n\"\"\"\nOwnIR fact bridge (P-001 v0): C# leak facts -> the existing OwnLang core.\n\nA Roslyn extractor (frontend/roslyn/, CI-only) scans real C# and emits *facts* in\nthe spec's vocabulary; this module ingests them, routes them through the proven\nchecker, and maps the verdict back to the original C# location. The core stays a\nsingle checker — we do not reimplement it in C# (a second checker would drift).\n\nOwnIR schema (JSON)::\n\n {\n \"ownir_version\": 0,\n \"module\": \"WpfApp\",\n \"components\": [\n {\n \"name\": \"CustomerViewModel\",\n \"file\": \"CustomerViewModel.cs\",\n \"subscriptions\": [\n {\"event\": \"bus.CustomerChanged\", \"handler\": \"OnCustomerChanged\",\n \"line\": 12, \"released\": false},\n {\"event\": \"_timer.Tick\", \"handler\": \"OnTick\", \"line\": 18,\n \"released\": false, \"resource\": \"timer\"}\n ]\n }\n ]\n }\n\nEach entry in `subscriptions` (historically named — it is really the list of\nowned-resource records) is an owned resource, discriminated by an optional\n`resource` field:\n\n - \"subscription\" (default): `event +=` acquires, a matching `-=` releases;\n tag `[resource: subscription token]`.\n - \"timer\": a started `DispatcherTimer`/`Timer` whose `Tick`/`Elapsed` handler\n is never `-=`'d or `Stop()`ped; tag `[resource: timer]`.\n - \"disposable\": an `IDisposable` field the class `new`s and never `Dispose()`s\n (optional `type` names the field's declared type); tag\n `[resource: disposable field]`.\n - \"subscribe\": a `X.Subscribe(...)` whose `IDisposable` result is ignored (a\n bare statement, not captured/disposed). Tiered by `source` like a `+=`: a\n",{"_428":669,"_409":410,"_430":416},{"_470":670,"_472":671,"_474":672,"_476":477,"_414":32,"_478":32,"_42":666,"_479":673,"_481":482,"_421":114,"_93":483},"\"\"\"\nCommand-line driver for the OwnLang PoC.\n\n python -m ownlang check file.own # report ownership diagnostics\n python -m ownlang check file.own --format sarif # SARIF 2.1.0 log (code scanning)\n python -m ownlang emit file.own # check, then print generated C#\n python -m ownlang cfg file.own # dump the control-flow graph (human debug view)\n python -m ownlang cfg file.own --format json # canonical CFG JSON (oracle seam)\n python -m ownlang report file.own # buffer storage report + .ownreport.json\n python -m ownlang ownir facts.json # check OwnIR facts extracted from C# (P-001)\n python -m ownlang ownir facts.json --format github|msbuild|human|sarif\n python -m ownlang summaries facts.json # dump solved method-ownership summaries\n # (MOS) + extern log — deterministic JSON\n python -m ownlang explain OWN001 [DI002 ...] # explain diagnostic code(s): what/why/fix\n python -m ownlang explain --json findings.json # explain every code in a findings/SARIF file\n\n`explain` is the diagnostic catalogue side of the CLI (the `ownsharp explain` the\nroslyn-tools-shaped surface advertises): it prints what a code means, why it fires,\nand how to fix it. It lives in the core, next to the catalogue, because there is one\nchecker — the C# extractor emits facts, it does not own the diagnostics.\n\n`--format` selects the finding surface. On `ownir`: `human` (default CLI line),\n`github` (CI annotations on the PR diff), `msbuild` (VS Error List), or `sarif`\n(a SARIF 2.1.0 log — GitHub code scanning, and the cross-tool oracle reads it too).\nOn `check` it is `human` (default) or `sarif` — the `.own` flow diagnostics as a\nSARIF log carrying each finding's evidence slice (relatedLocations / codeFlows);\n`github`/`msbuild` are ownir-only (they render a Finding, not a Diagnostic).\n`--severity` (ownir only) picks how the host shows a finding — `error` (default,\nfails a build / red check) or `warning` (advisory). It is a presentation choice;\nthe finding is still the core's verdict.\n`--verbosity` (ownir only) is `quiet` (errors only — hide the advisory notes:\nOWN050 \"leakage analysis skipped\", OWN051 \"ownership transfer unverified\",\nOWN052 \"summaries skipped\"), `normal` (default), or `verbose` (also print a\nper-code breakdown).\n\nExit code is non-zero if any error-level diagnostic was produced.\n\"\"\"\n\nfrom __future__ import annotations\n\n\"\"\"\nOwnIR fact bridge (P-001 v0): C# leak facts -> the existing OwnLang core.\n\nA Roslyn extractor (frontend/roslyn/, CI-only) scans real C# and emits *facts* in\nthe spec's vocabulary; this module ingests them, routes them through the proven\nchecker, and maps the verdict back to the original C# location. The core stays a\nsingle checker — we do not reimplement it in C# (a second checker would drift).\n\nOwnIR schema (JSON)::\n\n {\n \"ownir_version\": 0,\n \"module\": \"WpfApp\",\n \"components\": [\n {\n \"name\": \"CustomerViewModel\",\n \"file\": \"CustomerViewModel.cs\",\n \"subscriptions\": [\n {\"event\": \"bus.CustomerChanged\", \"handler\": \"OnCustomerChanged\",\n \"line\": 12, \"released\": false},\n {\"event\": \"_timer.Tick\", \"handler\": \"OnTick\", \"line\": 18,\n \"released\": false, \"resource\": \"timer\"}\n ]\n }\n ]\n }\n\nEach entry in `subscriptions` (historically named — it is really the list of\nowned-resource records) is an owned resource, discriminated by an optional\n`resource` field:\n\n - \"subscription\" (default): `event +=` acquires, a matching `-=` releases;\n tag `[resource: subscription token]`.\n - \"timer\": a started `DispatcherTimer`/`Timer` whose `Tick`/`Elapsed` handler\n is never `-=`'d or `Stop()`ped; tag `[resource: timer]`.\n - \"disposable\": an `IDisposable` field the class `new`s and never `Dispose()`s\n (optional `type` names the field's declared type); tag\n `[resource: disposable field]`.\n - \"subscribe\": a `X.Subscribe(...)` whose `IDisposable` result is ignored (a\n bare statement, not captured/disposed). Tiered by `source` like a `+=`: a\n","/bin/bash -lc \"sed -n '1,40p' ownlang/__main__.py && sed -n '1,40p' ownlang/ownir.py\"",[674,675],"80713",{"_472":677,"_181":641,"_162":642,"_93":639},{"_472":676,"_181":637,"_162":638,"_93":639},"sed -n '1,40p' ownlang/ownir.py","sed -n '1,40p' ownlang/__main__.py",{"_428":679,"_409":410,"_430":416},{"_489":680,"_463":666,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"sed -n '1,40p' ownlang/__main__.py && sed -n '1,40p' ownlang/ownir.py\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":2000}",{"_428":682,"_409":410,"_430":416},{"_463":683,"_42":-5,"_434":-5,"_465":684,"_93":467},"call_sc4sKhYW0KVybOgPKac7PPuz","Chunk ID: 7b465d\nWall time: 0.0000 seconds\nProcess exited with code 0\nOriginal token count: 450\nOutput:\n # rather than silently succeed. A mix of known + unknown still exits 0.\n if all(c.upper() not in TITLES and c.upper() not in EXPLANATIONS for c in all_codes):\n return 2\n return 0\n\n\ndef cmd_summaries(path: str) -> int:\n \"\"\"Dump the solved Method Ownership Summaries (MOS) + the extern-boundary\n log for an OwnIR facts file as one deterministic JSON document on stdout\n (roadmap stage 1). The debugging answer to \"why did this call stay plain /\n consume / fresh?\" — and the frozen parity surface the Rust port of the\n inference layer is diffed against, so its output contract is byte-stable:\n sorted method keys, sorted extern log, fixed field order. Exit code is 0\n even when the solve degraded (the `degraded` field carries the reason —\n this surface reports state, it does not judge); 2 only for unreadable\n facts, like `ownir`.\"\"\"\n import json\n from .ownir import OwnIRError, dump_summaries, load\n try:\n doc = dump_summaries(load(path))\n except OwnIRError as e:\n print(f\"{path}: error: {e}\", file=sys.stderr)\n return 2\n print(json.dumps(doc, indent=2, sort_keys=True))\n return 0\n\n [ResourceMember(\"acquire\", \"Rent\", 0),\n ResourceMember(\"release\", \"Return\", 0)], 0,\n kind=\"pooled buffer\"),\n ]\n\n\ndef to_module(facts: dict[str, Any],\n notes: list[str] | None = None,\n advisories: list[\"Finding\"] | None = None,\n ) -> tuple[Module, dict[str, dict[str, Any]]]:\n \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source\n text and no re-parse (P-016 B0a; the round-trip `to_own` + `parse` has existed\n since P-001). Mirrors `to_own`'s lowering exactly: each owned-resource fact\n",{"_428":686,"_409":410,"_430":416},{"_470":687,"_472":688,"_474":689,"_476":477,"_414":32,"_478":32,"_42":683,"_479":690,"_481":482,"_421":114,"_93":483}," # rather than silently succeed. A mix of known + unknown still exits 0.\n if all(c.upper() not in TITLES and c.upper() not in EXPLANATIONS for c in all_codes):\n return 2\n return 0\n\n\ndef cmd_summaries(path: str) -> int:\n \"\"\"Dump the solved Method Ownership Summaries (MOS) + the extern-boundary\n log for an OwnIR facts file as one deterministic JSON document on stdout\n (roadmap stage 1). The debugging answer to \"why did this call stay plain /\n consume / fresh?\" — and the frozen parity surface the Rust port of the\n inference layer is diffed against, so its output contract is byte-stable:\n sorted method keys, sorted extern log, fixed field order. Exit code is 0\n even when the solve degraded (the `degraded` field carries the reason —\n this surface reports state, it does not judge); 2 only for unreadable\n facts, like `ownir`.\"\"\"\n import json\n from .ownir import OwnIRError, dump_summaries, load\n try:\n doc = dump_summaries(load(path))\n except OwnIRError as e:\n print(f\"{path}: error: {e}\", file=sys.stderr)\n return 2\n print(json.dumps(doc, indent=2, sort_keys=True))\n return 0\n\n [ResourceMember(\"acquire\", \"Rent\", 0),\n ResourceMember(\"release\", \"Return\", 0)], 0,\n kind=\"pooled buffer\"),\n ]\n\n\ndef to_module(facts: dict[str, Any],\n notes: list[str] | None = None,\n advisories: list[\"Finding\"] | None = None,\n ) -> tuple[Module, dict[str, dict[str, Any]]]:\n \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source\n text and no re-parse (P-016 B0a; the round-trip `to_own` + `parse` has existed\n since P-001). Mirrors `to_own`'s lowering exactly: each owned-resource fact\n","/bin/bash -lc \"sed -n '300,325p' ownlang/__main__.py && sed -n '778,790p' ownlang/ownir.py\"",[691,692],"26225",{"_472":694,"_181":641,"_162":642,"_93":639},{"_472":693,"_181":637,"_162":638,"_93":639},"sed -n '778,790p' ownlang/ownir.py","sed -n '300,325p' ownlang/__main__.py",{"_428":696,"_409":410,"_430":416},{"_489":697,"_463":683,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"sed -n '300,325p' ownlang/__main__.py && sed -n '778,790p' ownlang/ownir.py\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":2000}",{"_428":699,"_409":410,"_430":416},{"_431":-5,"_448":700,"_42":-5,"_434":-5,"_450":701,"_93":452},"gAAAAABqTeUfJP4CQxjdZTnGsK2R8aOPHkAIvK2YPtt4pSv-77yBCe5gNbs3SKut14x1bu8ULahnYHB3lG6eeBpkvJJbGnqob6WtfHulgZHx8LTz7QR5AJoot7obIbN5jF3HypTSkldxuk1G4G8dSBsWNlKHnR97GzmgtEolU_YW5XY-J-GAK9yVXBsdueW57VeUuQyWStYZf61Yha5VbWMy9n01YRz9ec6GoXOiM9m23luiDZMsH2yu5vBbwFUFyF01Ipt6revGKcNwG6GaVLKqin5MnJ7oeQtyc-3m53Ms8rdPoOa0dcvlYqH1etnahgsiwXznl-3pSw_xL8aHB6Eirm0fkLuH8b3X2cGTjopASJRuMasmE-wwcMuRmAs0SKmzdNFJ_j0MHIyveJlRDPZ1s9D9lFYvDba3hG14dt_tXIR7XoJStkMf2c6Z9EMzb626FaB4MxxczYVGqgebDIUuKj7cm0N8H3fedOyY5qWosR-fewzRn4C92HyMvi-BUDZdFE46zbi30TiLEqloQQOJ3522bt-3iX9x7z0YfOvrYA5v5dbCIJ7JdMly9iZHvGtRHNRgo8ESb1TrAcCfNFMjLS2-7DI8T_-qFGNCmI5Tlbja8MJ3gTTWWE0f5pdhnhwKutgFGXQUHV5DeA04ZB-VTKuRmkIHHoH9IO2Zww8HT5o3Tg4QOU5LrcLnHT3cZGKrzq2I5vBBvtrEzAElfF8MYNX39Sx2LMvtlP_lSqH_j1kVfbUdf2CQHLCEEGqqwitjLolWN_a8HEK3XQNon5l1BZiCe3T07fSZEHVHoN690LyVenBAZQobffCy5cJLahgbKGMCRwrdai3DTVAcveY1GmDKYNK1VLcn-BN68lymFvqV3MLfzYa-fn1GhhH2sbIBOgL-LHMtClwhEC381uzNGCOo8KlZCtfsizwA_cLZz7nBPlRW8iG_5bUU0Pudf9MkflTU8q2gYSn4j-wjNwVGShSlSl-qwk1Jq0tlmiA04XJ5d-TfX8JgtdJwAvHZu3sIxvTHc5tsXT-T1Sxr3NN7HB6md9iFXehtxclMBlmprFzph3tza56JA2vx2nUSoJC1HsDe7G2ey3h1BBU0xKBl9SPzNAX36jy3MpzWNar9_g8fCYyxHUV370piL3W3mT0W8sgRyaGbuLWo9DatyvABfRBX447VeMTcRR45niDF8Bk5POTsgDK6G3UaKyf320ir7aCrYNgJ",[702],{"_46":703,"_93":455},"**Evaluating lint issues**\n\nI’m wondering about the lint failing. If everything is okay, then maybe there's no need for changes. However, if there are issues, fixing the lint is necessary. The user asked if everything is good, so that's likely a yes or no answer. The developer said that if code changes are needed, I should generate a pull request. Since the lint failure suggests not everything is good, I definitely need to address that. I'll apply the necessary edits.",{"_428":705,"_409":410,"_430":416},{"_431":706,"_42":707,"_450":708,"_93":452},[],"rs_0fe8a768663ad02f016a4de51c540c819898f8634e28b354b3",[703],{"_428":710,"_409":410,"_430":416},{"_470":711,"_472":712,"_474":713,"_476":477,"_414":714,"_478":612,"_42":715,"_479":716,"_481":482,"_421":615,"_93":483},"I001 [*] Import block is un-sorted or un-formatted\n --> ownlang/__main__.py:316:5\n |\n314 | this surface reports state, it does not judge); 2 only for unreadable\n315 | facts, like `ownir`.\"\"\"\n316 | / import json\n317 | | from .ownir import OwnIRError, dump_summaries, load\n | |_______________________________________________________^\n318 | try:\n319 | doc = dump_summaries(load(path))\n |\nhelp: Organize imports\n\nUP037 [*] Remove quotes from type annotation\n --> ownlang/ownir.py:786:32\n |\n784 | def to_module(facts: dict[str, Any],\n785 | notes: list[str] | None = None,\n786 | advisories: list[\"Finding\"] | None = None,\n | ^^^^^^^^^\n787 | ) -> tuple[Module, dict[str, dict[str, Any]]]:\n788 | \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source\n |\nhelp: Remove quotes\n\nFound 2 errors.\n[*] 2 fixable with the `--fix` option.\n","/bin/bash -lc 'ruff check . && mypy'",[717],497,"call_zWqKixNoC4QyCijatybUcyuC","33878",{"_472":718,"_93":486},"ruff check . && mypy",{"_428":720,"_409":410,"_430":416},{"_463":715,"_42":-5,"_434":-5,"_465":721,"_93":467},"Chunk ID: 5a7bad\nWall time: 0.3954 seconds\nProcess exited with code 1\nOriginal token count: 246\nOutput:\nI001 [*] Import block is un-sorted or un-formatted\n --> ownlang/__main__.py:316:5\n |\n314 | this surface reports state, it does not judge); 2 only for unreadable\n315 | facts, like `ownir`.\"\"\"\n316 | / import json\n317 | | from .ownir import OwnIRError, dump_summaries, load\n | |_______________________________________________________^\n318 | try:\n319 | doc = dump_summaries(load(path))\n |\nhelp: Organize imports\n\nUP037 [*] Remove quotes from type annotation\n --> ownlang/ownir.py:786:32\n |\n784 | def to_module(facts: dict[str, Any],\n785 | notes: list[str] | None = None,\n786 | advisories: list[\"Finding\"] | None = None,\n | ^^^^^^^^^\n787 | ) -> tuple[Module, dict[str, dict[str, Any]]]:\n788 | \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source\n |\nhelp: Remove quotes\n\nFound 2 errors.\n[*] 2 fixable with the `--fix` option.\n",{"_428":723,"_409":410,"_430":416},{"_489":724,"_463":715,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"ruff check . && mypy\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":6000}",{"_428":726,"_409":410,"_430":416},{"_470":727,"_472":728,"_474":729,"_476":477,"_414":730,"_478":32,"_42":731,"_479":732,"_481":482,"_421":114,"_93":483},"\nanalysis: 132/132 passed, 0 failed\ncodegen: 43/43 generated cleanly\ngolden: PASS\nbuffer: PASS\nescape: PASS\nbranchy: PASS\nnesting: PASS\nordering: PASS\nhelper: PASS\ncfg_json: 20/20 CFG-seam checks pass\ncodegen content: 23/23 passed, 0 failed\nproperty fuzz: 3000 clean programs checked (200 hoist, 2800 inline), 0 failed\nreal-world corpus (corpus/real-world/):\n ado-executereader-leak OWN001\n arraypool-aliased-receiver OWN003\n arraypool-double-return OWN003\n arraypool-field-fullspan-overread OWN025\n arraypool-fullspan-overread OWN025\n arraypool-length-overread OWN025\n arraypool-memory-view-escape OWN002\n arraypool-span-view-after-return OWN002\n arraypool-use-after-return OWN002\n field-dispose-via-exchange OWN001\n field-dispose-via-helper OWN001\n field-noop-dispose-wrapper OWN001\n local-dispose-via-using-statement OWN001\n memorypool-double-dispose OWN003\n memorypool-using-owner-escape OWN002\n memorypool-using-statement-view-escape OWN002\n memorypool-using-view-escape OWN002\n memorypool-view-after-dispose OWN002\n nethermind-patriciatree-arraypool-leak OWN001\n ownership-handoff-consume OWN001,OWN002\n ownership-handoff-use OWN002\n ownership-handoff-use-transitive OWN002\n pool-transfer-via-wrapper-local OWN001\n screentogif-loaded-subscription OWN001\n screentogif-systemevents-leak OWN001\n sharex-rfc2898-derivebytes-leak OWN001\n socket-accept-leak OWN001\n subscription-self-owned-property OWN001\n tcplistener-accept-leak OWN001\n tcplistener-acceptsocket-leak OWN001\n using-statement-throw-releases OWN001\ncorpus: 31/31 cases match their expected diagnostics\ndiag_sarif: 10/10 SARIF projection checks pass\ndiagnostics: PASS (evidence invariant + slice ordering + SARIF builders)\neffects: 31/31 EFF001 stability checks passed\nevidence: 12/12 evidence-coverage checks pass\nexplain: PASS (text + exit codes + --json harvest + DI catalogue + dispatch)\nwhat it catches — gallery (examples/gallery/):\n 00_ok_clean.own clean clean: rent -> view -> return, exception-safe\n 01_leak_on_error_path.own OWN001 forgot Dispose() on the early-out path\n (owned resource not released on all paths (possible leak))\n 02_use_after_release.own OWN002 touched a stream after Dispose()\n (use after release)\n 03_double_release.own OWN003 Dispose() called twice\n (double release)\n 04_use_after_move.own OWN005 used a value after moving ownership away\n (use after move)\n 05_dispose_while_view_live.own OWN008 ArrayPool.Return while a Span over it is live\n (release while borrowed)\n 06_exclusive_while_shared.own OWN006 wrote through a Span aliased by a ReadOnlySpan\n (mutable borrow while a shared borrow is live)\n 07_use_after_handoff.own OWN002 used a buffer after a callee took ownership\n (use after release)\n 08_stack_buffer_escapes.own OWN015 returned a Span over a stackalloc (dangling)\n (stack-backed buffer cannot escape the current function)\n 09_untracked_call.own OWN040 ownership laundered through an opaque call\n (call to an undeclared function (unknown calls are forbidden))\n 10_leak_in_loop.own OWN001 acquired in a loop, never released (while)\n (owned resource not released on all paths (possible leak))\n 11_overspan_full_view.own OWN025 full view buf.AsSpan() past the rented length\n (full-length view of a pooled buffer reaches past its logical length)\ngallery: 12/12 examples match their documented diagnostic\nlifetimes: 10/10 region cases match expected codes\nloops: 20/20 loop (while) cases pass\nownership: 45/45 D5.0 summary checks passed\nownir: 245/245 bridge checks passed\nrid (D5.4 step 0 — RID indirection):\n ok rid_of defaults to id(sym)\n ok mint returns id(sym) and records it\n ok distinct handles mint distinct RIDs\n ok copy() preserves handle_rid\n ok _join_handle_rid unions disjoint maps\n ok _join_handle_rid keeps an agreeing shared mapping\n ok _join_handle_rid asserts on a conflicting mapping\n ok 1:1 acquire still leaks (OWN001)\n ok 1:1 acquire+release stays silent\n ok 1:1 double-release still OWN003\n ok returning an owned resource escapes clean\n ok a sibling RID still leaks before return (OWN001)\n ok releasing an owning alias of a borrowed RID is OWN008\n ok using an owning alias of a mut-borrowed RID is OWN013\nrid: 14/14 RID-layer checks pass\nspec: 23/23 normative rules fire on their example\nsyntax parity fixtures OK: 24 cases (20 rejections, 4 accepts) verified in sync\nWPF lifetime corpus (corpus/wpf/):\n field-use-after-dispose OWN002\n handler-use-after-dispose OWN002\n handler-use-after-dispose-wrapped-delegate OWN002\n pooled-view-after-dispose OWN002\n subscription-explicit-delegate-release OWN001\n subscription-target-typed-delegate-release OWN001\n systemevents-region-escape OWN014\n viewmodel-escapes-to-app OWN014\n zombie-viewmodel OWN001\nwpf: 9/9 cases match expected codes + carry kind metadata\n","/bin/bash -lc 'python tests/run_tests.py'",[733],3063,"call_PkcnSKa4yDwGgTcq6UwuDqSW","49680",{"_472":734,"_93":486},"python tests/run_tests.py",{"_428":736,"_409":410,"_430":416},{"_463":737,"_42":-5,"_434":-5,"_465":738,"_93":467},"call_fNRRex58pfZerBetEosA2Igr","Chunk ID: d076e6\nWall time: 0.3738 seconds\nProcess exited with code 0\nOriginal token count: 1471\nOutput:\n\nanalysis: 132/132 passed, 0 failed\ncodegen: 43/43 generated cleanly\ngolden: PASS\nbuffer: PASS\nescape: PASS\nbranchy: PASS\nnesting: PASS\nordering: PASS\nhelper: PASS\ncfg_json: 20/20 CFG-seam checks pass\ncodegen content: 23/23 passed, 0 failed\nproperty fuzz: 3000 clean programs checked (200 hoist, 2800 inline), 0 failed\nreal-world corpus (corpus/real-world/):\n ado-executereader-leak OWN001\n arraypool-aliased-receiver OWN003\n arraypool-double-return OWN003\n arraypool-field-fullspan-overread OWN025\n arraypool-fullspan-overread OWN025\n arraypool-length-overread OWN025\n arraypool-memory-view-escape OWN002\n arraypool-span-view-after-return OWN002\n arraypool-use-after-return OWN002\n field-dispose-via-exchange OWN001\n field-dispose-via-helper OWN001\n field-noop-dispose-wrapper OWN001\n local-dispose-via-using-statement OWN001\n memorypool-double-dispose OWN003\n memorypool-using-owner-escape OWN002\n memorypool-using-statement-view-escape OWN002\n memorypool-using-view-escape OWN002\n memorypool-view-after-dispose OWN002\n nethermind-patriciatree-arraypool-leak OWN001\n ownership-handoff-consume OWN001,OWN002\n ownership-handoff-use OWN002\n ownership-handoff-use-transitive OWN002\n pool-transfer-via-wrapper-local OWN001\n screentogif-loaded-subscription OWN001\n screentogif-systemevents-leak OWN001\n sharex-rfc2898-derivebytes-leak OWN001\n socket-accept-leak OWN001\n subscription-self-owned-property OWN001\n tcplistener-accept-leak OWN001\n tcplistener-acceptsocket-leak OWN001\n using-statement-throw-releases OWN001\ncorpus: 31/31 cases match their expected diagnostics\ndiag_sarif: 10/10 SARIF projection checks pass\ndiagnostics: PASS (evidence invariant + slice ordering + SARIF builders)\neffects: 31/31 EFF001 stability checks passed\nevidence: 12/12 evidence-coverage checks pass\nexplain: PASS (text + exit codes + --json harvest + DI catalogue + dispatch)\nwhat it catches — gallery (examples/gallery/):\n 00_ok_clean.own clean clean: rent -> view -> return, exception-safe\n 01_leak_on_error_path.own OWN001 forgot Dispose() on the early-out path\n (owned resource not released on all paths (possible leak))\n 02_use_after_release.own OWN002 touched a stream after Dispose()\n (use after release)\n 03_double_release.own OWN003 Dispose() called twice\n (double release)\n 04_use_after_move.own OWN005 used a value after moving ownership away\n (use after move)\n 05_dispose_while_view_live.own OWN008 ArrayPool.Return while a Span over it is live\n (release while borrowed)\n 06_exclusive_while_shared.own OWN006 wrote through a Span aliased by a ReadOnlySpan\n (mutable borrow while a shared borrow is live)\n 07_use_after_handoff.own OWN002 used a buffer after a callee took ownership\n (use after release)\n 08_stack_buffer_escapes.own OWN015 returned a Span over a stackalloc (dangling)\n (stack-backed buffer cannot escape the current function)\n 09_untracked_call.own OWN040 ownership laundered through an opaque call\n (call to an undeclared function (unknown calls are forbidden))\n 10_leak_in_loop.own OWN001 acquired in a loop, never released (while)\n (owned resource not released on all paths (possible leak))\n 11_overspan_full_view.own OWN025 full view buf.AsSpan() past the rented length\n (full-length view of a pooled buffer reaches past its logical length)\ngallery: 12/12 examples match their documented diagnostic\nlifetimes: 10/10 region cases match expected codes\nloops: 20/20 loop (while) cases pass\nownership: 45/45 D5.0 summary checks passed\nownir: 245/245 bridge checks passed\nrid (D5.4 step 0 — RID indirection):\n ok rid_of defaults to id(sym)\n ok mint returns id(sym) and records it\n ok distinct handles mint distinct RIDs\n ok copy() preserves handle_rid\n ok _join_handle_rid unions disjoint maps\n ok _join_handle_rid keeps an agreeing shared mapping\n ok _join_handle_rid asserts on a conflicting mapping\n ok 1:1 acquire still leaks (OWN001)\n ok 1:1 acquire+release stays silent\n ok 1:1 double-release still OWN003\n ok returning an owned resource escapes clean\n ok a sibling RID still leaks before return (OWN001)\n ok releasing an owning alias of a borrowed RID is OWN008\n ok using an owning alias of a mut-borrowed RID is OWN013\nrid: 14/14 RID-layer checks pass\nspec: 23/23 normative rules fire on their example\nsyntax parity fixtures OK: 24 cases (20 rejections, 4 accepts) verified in sync\nWPF lifetime corpus (corpus/wpf/):\n field-use-after-dispose OWN002\n handler-use-after-dispose OWN002\n handler-use-after-dispose-wrapped-delegate OWN002\n pooled-view-after-dispose OWN002\n subscription-explicit-delegate-release OWN001\n subscription-target-typed-delegate-release OWN001\n systemevents-region-escape OWN014\n viewmodel-escapes-to-app OWN014\n zombie-viewmodel OWN001\nwpf: 9/9 cases match expected codes + carry kind metadata\n",{"_428":740,"_409":410,"_430":416},{"_489":741,"_463":737,"_42":-5,"_434":-5,"_181":588,"_492":-5,"_93":493},"{\"session_id\":49680,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":6000}",{"_428":743,"_409":410,"_430":416},{"_463":731,"_42":-5,"_434":-5,"_465":744,"_93":467},"Chunk ID: 5ee0b6\nWall time: 1.0016 seconds\nProcess running with session ID 49680\nOriginal token count: 0\nOutput:\n",{"_428":746,"_409":410,"_430":416},{"_489":747,"_463":731,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"python tests/run_tests.py\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":6000}",{"_428":749,"_409":410,"_430":416},{"_470":750,"_472":751,"_474":752,"_476":477,"_414":753,"_478":32,"_42":754,"_479":755,"_481":482,"_421":114,"_93":483},"ownir: 245/245 bridge checks passed\n","/bin/bash -lc 'python tests/test_ownir.py'",[756],730,"call_Lyrbs6M9t7PKRR5fj1lR0vF2","74381",{"_472":757,"_93":486},"python tests/test_ownir.py",{"_428":759,"_409":410,"_430":416},{"_463":754,"_42":-5,"_434":-5,"_465":760,"_93":467},"Chunk ID: 4a4276\nWall time: 0.6292 seconds\nProcess exited with code 0\nOriginal token count: 9\nOutput:\nownir: 245/245 bridge checks passed\n",{"_428":762,"_409":410,"_430":416},{"_489":763,"_463":754,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"python tests/test_ownir.py\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":6000}",{"_428":765,"_409":410,"_430":416},{"_431":-5,"_448":766,"_42":-5,"_434":-5,"_450":767,"_93":452},"gAAAAABqTeUR7sKNAE6gsR0RUl4qQMnmJDvIXhMmBXmF9HdM76zi5mJdVpOM72GGf7NJcqulODXpn8UeFJ8hkcLBrOIX131RM1xhZ9xpBUQxXIYgPYOFPZlfwI2MZ0IJoZ2pUMZ50_0pegblEfEAPeLwjMGNxakfL-Mn0lHdZMws5H57kNIxm7l76-Kd_7th0m5cySWbknNGtVEnN3yqbeKR07ymVn-wht24LO7VzQy_q3aIPsnGuRPKYFpM3Gik1-p5c947QzUqh205ZOCjA0-NOfGmMDbUOsnmARXuJLuY59f0CxH0fJKkJXmc57WEiBpIG0IyPwtbpKvgg_h1ScFUIgUOQA0sW24VUgyePLz8kVPBNgUNLE8fguYfll40r1Ev_m17wP0x8rHJ9OxDCkaVKtrcOWOJO5r3mdWnYPtyL-ZEesAFXLiF7-xGjTfS5EbrsWAs7IXwOtWMT4ktw1vk_zVraiRX6jnYZDWAQXufB-AFqy5NgLF-3i8ArYqCt0yBA66Z97FxwHXZn7D3dJvVHL_fGqwHg83wjwsFk-RYJ1EpoAAtHfqDI8Q24kXR_pnhq8nA7TQ3EbYJU4709Av03dLQREauru-z8jRQEVKtggXjaZ7qAFa9Trsmd2YBistgfCRP3mqAEmht98XUjSTd3Hpdc6a_6sUowKNrLH3FsNE1_1crmqwl-pNgIceFh_gjMYLje8tgDkOtbhHRmoulhkKJGy6qrSiibzEtEH90TPszrVBUoRbMznTVFuiSzyKZbD8iw7AOmuFHrKX17K_-axc0hf2rpB5ekvmzM55Jnk63dbKJOS2x3W3Rrcwj_8Hr1vrBT7tbE_V49RkLUOUSJK_UEKES_063DDmKRB_vk8sN3jESNOBwSQSN_onzxN3hStOd1JJ0rXYCXXm_vnAx0vcuJQ995exDftom0X2Los9zdHhld-equZ4m4DU5-HvTnKkS_Q49CzTiUaBhElEiz5-M_CT9_MfhH_xxpQlNSP-qvBZY4iDaXwJol95Hh2m3pvVmiWSP2lhCfZlfVWHPzH19zs8SHyZv9TWt45ft7GvWVSLUgog-4azR1Ijw4k_F7BlMYArvNlxcRg9VIFCUAjkRktFMpdki_A_ELAn5NH_hnGyEH3JTOnYGGsic2Lxt4NLo6jWmxhgeAmDTve672l2iYzWNdl3iKHWiVMfEohJOz9VU0_TxYSlAcnUrQkWcGwqtWpW2kK5Wk1TE-096Kd1cd-nhbSpnwaw1P3gilNRRiSd1iPXqmF2rOiSnjfxUHJ67U7-ZSeRF5S1ms3hFng9Iy1nGkYcB9SCY0YInClsLqpG_ij2EZDbmai0LvC3ca6_zLCd9r1H4XdkS7HXaiTJEkQC165by06pRYVY39yOSos9DNkE-JGfKFMpRbXhr63_7YKF49A3spd3S_8n8QqR0rS1n9aLeSUJLPtVLInvDLDwMtnvip7u8J43R6pQAiZOBAE_w5IVRkpBY4vBZpvjTJ3mVXl_1FtftkWeC_IvvmXm6ivAlcBxUDXjGebyGdBe_9j-u",[768],{"_46":769,"_93":455},"**Evaluating project status**\n\nIt seems there's an untracked file called sandboy, which likely isn’t ours. I’m thinking I need to respond with \"all good,\" in case the reviewer asks for a status update. However, there’s a P1 issue mentioned that might need addressing. I’ll have to run tests and verify. If there are no changes, I shouldn’t commit or make a pull request. I’ll also need to check the tests around P1 to ensure they’re covered properly.",{"_428":771,"_409":410,"_430":416},{"_431":772,"_42":773,"_450":774,"_93":452},[],"rs_0fe8a768663ad02f016a4de50d689c8198b24a98b9a163d860",[769],{"_428":776,"_409":410,"_430":416},{"_463":777,"_42":-5,"_434":-5,"_465":778,"_93":467},"call_njzDAXd1zJdIHs0SGAvkgncD","Chunk ID: 2e514c\nWall time: 0.0014 seconds\nProcess exited with code 0\nOriginal token count: 10020\nOutput:\nTotal output lines: 436\n\n# AGENTS.md\n\nThis file provides guidance to agents when working with code in this repository.\n\n- Use the repository root for core commands: `python -m ownlang check|emit|cfg|report `; `emit` deliberately refuses to generate C# when any diagnostic exists.\n- Full zero-dependency regression is `python tests/run_tests.py`; single tests are standalone scripts such as `python tests/test_ownir.py`, not pytest tests.\n- `tests/run_tests.py` imports the other test files and runs the codegen fuzzer with `(iterations=3000, seed=1234)`; run `python tests/test_codegen_props.py ` when changing codegen invariants.\n- Lint gate is exactly `ruff check .` plus `mypy`; mypy is strict only for `ownlang`, while tests/fuzzers stay dynamic and are covered by ruff.\n- Ruff intentionally omits SIM because branch-collapsing fights the commented checker/control-flow structure; do not simplify those branches just for style.\n- The core pipeline is parser -> CFG resolver/lowering -> ownership/lifetime/effect/DI analyses -> diagnostics; Roslyn and OwnTS frontends emit facts only, and the Python core owns all verdicts.\n- Unknown OwnLang calls are hard errors: add local/`extern fn` signatures with ownership effects instead of letting calls tunnel through opaque host code.\n- Adding AST/CFG variants normally requires updating `assert_never` dispatch sites in `ownlang/cfg.py`, `ownlang/analysis.py`, and `ownlang/codegen.py`.\n- Codegen has two intentional modes: straight-line, laminar lifetimes get try/finally hoisting; branchy/transferring code emits releases inline. Do not add runtime “released?” flags to paper over static mistakes.\n- OwnIR schema is versioned in `ownlang/ownir.py`; additive optional fields like resource/type metadata are tolerated, incompatible vocabulary changes must fail loudly.\n- For C# repo scans, `scripts/own-check.sh` is the Action/bash surface and defaults to `--flow-locals`; on Windows use `scripts\\own-check.ps1` rather than requiring bash.\n- The Roslyn extractor auto-adds built `bin/` refs for `.csproj`/`.sln` inputs unless `--no-project-refs`; unresolved external events become advisory OWN050, not guessed leaks.\n- `audit/` must stay decoupled from `ownlang` and consumes `own-check` only through its CLI/SARIF; `audit/README.md` says active audit development currently lives in the separate OwnAudit repo.\n- Existing Cursor guidance: if CodeGraph MCP tools are available, prefer them for structural symbol/caller/impact questions; use text search for literal strings and comments.\ndocs/notes/interprocedural-tz.md:18:| A | Деривация скелетов | `functions[]`-факты → `MethodSkeleton` | `ownir.py:1415` `_build_skeletons` + walkers (`_param_signals:1305`, `_forward_targets:1333`), merge `:1388` | `own-bridge` |\ndocs/notes/interprocedural-tz.md:20:| C | Применение | MOS → `consume`/`borrow`/`acquire`/`alias_join` на call-site | `_lower_fn_params:1529`, call-handler `_lower_flow:1819`, `_callee_returns_fresh:1276` | `own-bridge` |\ndocs/notes/interprocedural-tz.md:41:`dispose | adopt | return` → `must`; `borrow` → `no`; `forward(callee,arg)` →\ndocs/notes/interprocedural-tz.md:67:### 2.4 Деривация return-скелета (R-правила, `_infer_return_skeleton:1098`)\ndocs/notes/interprocedural-tz.md:69:- **R1** Нет `return ` → `none`.\ndocs/notes/interprocedural-tz.md:70:- **R2** Есть хоть один bare `return` / `return null` → `none`, никакой заявки\ndocs/notes/interprocedural-tz.md:80:### 2.5 Слияние перегрузок (M-правила, `_merge_skeletons:1388`, `_merge_returns:1372`)\ndocs/notes/interprocedural-tz.md:96:- **F1** Граф: рёбра M→C по forward-путям параметров и forward-return, только в\ndocs/notes/interprocedural-tz.md:132: `_callee_returns_fresh:1276` — **единственный** источник истины о freshness,\ndocs/notes/interprocedural-tz.md:134: Tier A авторитетен (summary есть → верим его `returns`); first-party без\ndocs/notes/interprocedural-tz.md:152:> освобождение на **всех** normal-return путях (early-return без release блокирует\ndocs/notes/interprocedural-tz.md:153:> заявку; release-then-return засчитывается; `while`-тело — никогда не definite);\ndocs/notes/interprocedural-tz.md:158:Дизайн-нота (d5 §1) определяет `must` как «released on **all** normal-return\ndocs/notes/interprocedural-tz.md:218:### D3: `adopt`/`return` — вклады без продюсера\ndocs/notes/interprocedural-tz.md:220:`contrib` понимает `adopt` и `return` как `must`, но деривация их не эмитит\ndocs/notes/interprocedural-tz.md:221:(adopt — T4b-межпроцедурный, return-of-param — сознательно не консьюм,\ndocs/notes/interprocedural-tz.md:227:> T4b-сводки, return — owned-return-value modelling) и указанием порту: нести\ndocs/notes/interprocedural-tz.md:236:### D6 (обнаружено при реализации OWN051): `may`/`unknown` → plain — это не молчание\ndocs/notes/interprocedural-tz.md:250:> по-аргументные `$`-каналы (расширение M3-маршрутизации) — untracked-имя не\ndocs/notes/interprocedural-tz.md:294:- **INV9** `_callee_returns_fresh` — единственный источник истины о freshness\ndocs/notes/interprocedural-tz.md:387:### 6.2 Этап 3 — `aliasOf:i` через return (первый срез)\ndocs/notes/interprocedural-tz.md:391: параметр с индексом `i`; нет bare return; `v` не acquired и не результат\ndocs/notes/interprocedural-tz.md:399: никого (один OWN001); возврат из фабрики с bare-return веткой (silent);\ndocs/notes/interprocedural-tz.md:415: вызывающем и (b) возвращается им (`return v`). Один несоответствующий сайт →\ndocs/notes/interprocedural-tz.md:441:- [ ] Tier A/B-старшинство не задето (INV4); `_callee_returns_fresh` остался\ntests/test_ownir.py:87: \"\"\"Write a facts dict to a temp file and return its path (load() needs one).\"\"\"\ntests/test_ownir.py:91: return path\ntests/test_ownir.py:98: return True\ntests/test_ownir.py:99: return False\ntests/test_ownir.py:103: \"\"\"Pin the OwnIR bridge on the canonical leak/ok facts; return 0/1.\"\"\"\ntests/test_ownir.py:148: return check_facts({\"module\": \"M\", \"components\": [\ntests/test_ownir.py:195: return check_facts({\"module\": \"M\", \"components\": [\ntests/test_ownir.py:458: # --- POOL001 ArrayPool: a buffer rented but never returned leaks; a returned\ntests/test_ownir.py:472: if \"rented\" not in p0.message or \"returned\" not in p0.message:\ntests/test_ownir.py:473: fails.append(f\"pool message missing rented/returned: {p0.message!r}\")\ntests/test_ownir.py:497: # IDisposable created and captured ONLY through member access into a returned\ntests/test_ownir.py:553: # exceptional exit (a bare `return` while the local is live) before each\ntests/test_ownir.py:558: # 'tfLeak'). Without the dedup this returns 2.\ntests/test_ownir.py:584: # --- finally-before-return + switch lowering: a `return` inside a try-with-finally runs\ntests/test_ownir.py:585: # the finally first (a finally-disposed resource is released on the return path ->\ntests/test_ownir.py:586: # silent), an early return that skips a later dispose leaks ('r2'), a no-default switch\ntests/test_ownir.py:597: fails.append(f\"expected OWN001 on 'r2'@20 (early-return leak) and 's2'@40 (switch \"\ntests/test_ownir.py:598: f\"else-branch leak) only — clean 'r' (finally before return) and 's' \"\ntests/test_ownir.py:604: # partial-path leak ('may not be returned to the pool on every path'), a never-returned\ntests/test_ownir.py:605: # one ('rented but never returned'), and leaves a plain disposable on the same shape\ntests/test_ownir.py:620: (\"buf\", \"pooled buffer\", \"may not be returned to the pool on every path\", \"pooled buffer\"),\ntests/test_ownir.py:621: (\"nbuf\", \"pooled buffer\", \"rented but never returned to the pool\", \"pooled buffer\"),\ntests/test_ownir.py:1314: (\"Archiver.cs\", 26, \"used here after it was released/returned\")):\ntests/test_ownir.py:1379: # regression (codex review): inference does NOT treat `return` as a consume\ntests/test_ownir.py:1380: # signal, and a value-bearing `return` no longer crashes the bridge. A function\ntests/test_ownir.py:1381: # that returns an owned local/param gets an owned return type, so the value\ntests/test_ownir.py:1387: {\"op\": \"return\", \"var\": \"s\", \"line\": 2}]},\ntests/test_ownir.py:1389: \"body\": [{\"op\": \"return\", \"var\": \"s\", \"line\": 6}]}]})\ntests/test_ownir.py:1391: fails.append(f\"a value-bearing return should be a clean escape (no crash, no \"\ntests/test_ownir.py:1483: # `maybe(s){ if(c) sink(s); }` consumes s on only one path, so a caller that uses s\ntests/test_ownir.py:1484: # after `maybe(s)` must stay SILENT (no false OWN002 on the non-forward path).\ntests/test_ownir.py:1487: {\"name\": \"maybe\", \"file\": \"F.cs\", \"params\": [{\"name\": \"s\", \"line\": 1}],\ntests/test_ownir.py:1496: {\"op\": \"call\", \"callee\": \"maybe\", \"args\": [\"s\"], \"line\": 11},\ntests/test_ownir.py:1499: if gotc != [(\"user_c\", \"OWN051\", True)]:\ntests/test_ownir.py:1501: f\"honest OWN051 advisory (d5 §5), got {gotc}\")\ntests/test_ownir.py:1517: if gotd1c != [(\"careful\", \"OWN051\", True)]:\ntests/test_ownir.py:1519: f\"one OWN051 advisory, got {gotd1c}\")\ntests/test_ownir.py:1547: if gotd1w != [(\"loop_user\", \"OWN051\", True)]:\ntests/test_ownir.py:1549: f\"verdicts, one OWN051 advisory, got {gotd1w}\")\ntests/test_ownir.py:1550: # (TZ D1) an early `return` on an unreleased path blocks the definite claim:\ntests/test_ownir.py:1551: # `guard(x){ if(c) return; release x; }` does not release on the guard path.\ntests/test_ownir.py:1555: \"body\": [{\"op\": \"if\", \"line\": 2, \"then\": [{\"op\": \"return\", \"line\": 3}],\ntests/test_ownir.py:1563: if gotd1g != [(\"guard_user\", \"OWN051\", True)]:\ntests/test_ownir.py:1564: fails.append(\"TZ D1: an early-return-unreleased path blocks consume — no \"\ntests/test_ownir.py:1565: f\"verdicts, one OWN051 advisory, got {gotd1g}\")\ntests/test_ownir.py:1566: # (TZ D1) release-then-return in a branch plus a fall-through release IS\ntests/test_ownir.py:1573: {\"op\": \"return\", \"line\": 4}],\ntests/test_ownir.py:1582: fails.append(\"TZ D1: release-then-return + fall-through release is all-paths \"\ntests/test_ownir.py:1598: if gotd1f != [(\"via_user\", \"OWN051\", True)]:\ntests/test_ownir.py:1600: f\"transitively — no verdicts, one OWN051 advisory, got {gotd1f}\")\ntests/test_ownir.py:1602: # a may-call must be silent (untracked), not an OWN001 — before this fix a\ntests/test_ownir.py:1605: # the disposer) fabricated a leak. The gap is the OWN051 advisory instead.\ntests/test_ownir.py:1615: if gotd6 != [(\"drop_user\", 11, \"OWN051\", True)]:\ntests/test_ownir.py:1617: f\"(one OWN051 advisory, no OWN001), got {gotd6}\")\ntests/test_ownir.py:1619: # after a borrow-only callee is the T3 recall win (a real OWN001, no OWN051) —\ntests/test_ownir.py:1633: # the OWN051 owned-local gate keeps the advisory channel quiet.\ntests/test_ownir.py:1692: {\"op\": \"return\", \"var\": \"r\", \"line\": 2}]},\ntests/test_ownir.py:1698: kinds = {s[\"method\"]: s[\"returns\"][\"owned\"] for s in doc[\"summaries\"]}\ntests/test_ownir.py:1731: # spec/Inference.md conformance: the advisory codes the spec names (OWN051,\ntests/test_ownir.py:1735: missing = [c for c in (\"OWN051\", \"OWN052\") if c not in TITLES]\ntests/test_ownir.py:1774: if gotn != [(\"ovn_use\", \"OWN051\", True)]:\ntests/test_ownir.py:1776: f\"verdicts, one OWN051 advisory, got {gotn}\")\ntests/test_ownir.py:1791: if gotdir != [(\"dN\", \"OWN051\", True)]:\ntests/test_ownir.py:1793: f\"verdicts, one OWN051 advisory (merged may), got {gotdir}\")\ntests/test_ownir.py:1811: # (_merge_returns) overloaded FACTORY: every overload returns fresh, so a dropped result\ntests/test_ownir.py:1818: {\"op\": \"return\", \"var\": \"r\", \"line\": 2}]},\ntests/test_ownir.py:1821: {\"op\": \"return\", \"var\": \"r\", \"line\": 6}]},\ntests/test_ownir.py:1828: # when overloads DISAGREE on the return (one fresh, one not), the merge degrades to a\ntests/test_ownir.py:1829: # non-fresh return, so a dropped result makes NO claim (precision-first: a real leak via\ntests/test_ownir.py:1835: {\"op\": \"return\", \"var\": \"r\", \"line\": 2}]}, # fresh\ntests/test_ownir.py:1837: \"body\": [{\"op\": \"use\", \"var\": \"p\", \"line\": 5}]}, # no owned return\ntests/test_ownir.py:1841: fails.append(\"§10 q2 disagreeing-return overloads must make no fresh claim (silent), \"\ntests/test_ownir.py:1901: # and $borrow then releasing is clean — the loan is returned, the owner discharges.\ntests/test_ownir.py:1950: # --- P-005 D5.2 (T1): a `fresh`-returning factory call becomes an acquire SITE.\ntests/test_ownir.py:1951: # A method that acquires a local and returns it (`make`) has returnsOwned=fresh;\ntests/test_ownir.py:1957: {\"op\": \"return\", \"var\": \"x\", \"line\": 2}]}\ntests/test_ownir.py:1966: fails.append(\"D5.2 T1: a fresh-returning factory whose result is never disposed \"\ntests/test_ownir.py:1988: # fresh propagates through a forward-return factory-of-factory: `relay` returns the\ntests/test_ownir.py:1994: {\"op\": \"return\", \"var\": \"t\", \"line\": 2}]},\ntests/test_ownir.py:2000: fails.append(\"D5.2 T1: fresh must propagate through a forward-return factory-of-\"\ntests/test_ownir.py:2002: # PRECISION: a method that returns a PARAMETER is NOT fresh (that is the wrap/alias\ntests/test_ownir.py:2003: # case, T4/D5.4). `ident(s){ return s }` must not make the caller acquire `r`, and\ntests/test_ownir.py:2008: \"body\": [{\"op\": \"return\", \"var\": \"s\", \"line\": 2}]},\ntests/test_ownir.py:2016: fails.append(\"D5.2 T1: returning a parameter is not `fresh` (no false acquire of \"\ntests/test_ownir.py:2033: # Tier B (D5.3 / P1a): a curated BCL *factory* (`File.OpenRead` &c.) returns an owned\ntests/test_ownir.py:2038: return check_facts({\"module\": \"M\", \"functions\": [\ntests/test_ownir.py:2067: # acquire of its result, stays silent (precision-first: the table is owned-returns only).\ntests/test_ownir.py:2074: # A `MyCompany.File.OpenRead` returning a plain value must NOT fabricate a false OWN001.\ntests/test_ownir.py:2089: # P1a (stdlib pack): more curated owned-returning factories. A dropped XmlReader/XmlWriter/\ntests/test_ownir.py:2110: # that returns its parameter is NOT fresh, so a caller dropping its result is clean; the\ntests/test_ownir.py:2114: \"body\": [{\"op\": \"return\", \"var\": \"x\", \"line\": 2}]},\ntests/test_ownir.py:2124: # RECALL (Codex): a first-party wrapper that returns a BCL factory result is itself fresh,\ntests/test_ownir.py:2125: # so a caller dropping `Make()` leaks OWN001 — the return skeleton propagates BCL freshness\ntests/test_ownir.py:2131: {\"op\": \"return\", \"var\": \"s\", \"line\": 3}]},\ntests/test_ownir.py:2135: fails.append(f\"Tier B: a wrapper returning a BCL factory result must be fresh \"\ntests/test_ownir.py:2162: # an instance method returning `bool`, so a bare match would fabricate ownership for the\ntests/test_ownir.py:2168: # first-party method named `SHA256.Create` that returns its parameter is NOT fresh; a\ntests/test_ownir.py:2169: # wrapper `Make` that returns `SHA256.Create(x)` must inherit THAT (non-fresh) summary,\ntests/test_ownir.py:2171: # wrapper's return skeleton short-circuited to `fresh` via the BCL name match, fabricating\ntests/test_ownir.py:2175: \"body\": [{\"op\": \"return\", \"var\": \"x\", \"line\": 2}]},\ntests/test_ownir.py:2179: {\"op\": \"return\", \"var\": \"r\", \"line\": 7}]},\ntests/test_ownir.py:2196: \"body\": [{\"op\": \"return\", \"var\": \"a\", \"line\": 2}]},\ntests/test_ownir.py:2199: \"body\": [{\"op\": \"return\", \"var\": \"a\", \"line\": 4}]},\ntests/test_ownir.py:2214: \"body\": [{\"op\": \"return\", \"var\": \"a\", \"line\": 2}]},\ntests/test_ownir.py:2237: # the factory acquire must fire inside CONTROL FLOW too: a fresh-returning call in\ntests/test_ownir.py:2251: # PRECISION (CodeRabbit): a returned local that is also a call RESULT is mixed-origin,\ntests/test_ownir.py:2253: # owned) result, and returns it — `returned == acquired == {x}` would wrongly read as\ntests/test_ownir.py:2262: {\"op\": \"return\", \"var\": \"x\", \"line\": 3}]},\ntests/test_ownir.py:2268: fails.append(\"D5.2 T1: a mixed-origin return (acquired AND a call result) is not \"\ntests/test_ownir.py:2270: # PRECISION (Codex): `fresh` requires EVERY return path to be owned. A method that\ntests/test_ownir.py:2271: # returns an acquired local on one branch but a bare `return` (null / non-owned) on\ntests/test_ownir.py:2273: # leak on the null path. `maybe_make` must not be fresh -> caller_bare stays silent.\ntests/test_ownir.py:2276: {\"name\": \"maybe_make\", \"file\": \"T1.cs\",\ntests/test_ownir.py:2279: {\"op\": \"return\", \"var\": \"x\", \"line\": 3}],\ntests/test_ownir.py:2280: \"else\": [{\"op\": \"return\", \"line\": 4}]}]},\ntests/test_ownir.py:2282: \"body\": [{\"op\": \"call\", \"callee\": \"maybe_make\", \"args\": [], \"result\": \"r\",\ntests/test_ownir.py:2286: fails.append(\"D5.2 T1: a method with a non-owned (`return null`) path is not \"\ntests/test_ownir.py:2363: # than silently returning no findings. A loop-aware model is a separate follow-up; this\ntests/test_ownir.py:2379: # SAFETY (CodeRabbit Major): the hoist must NOT fire when a branch early-`return`s on a\ntests/test_ownir.py:2381: # that path, a FALSE OWN001. `guard` (`if c: acquire r else: return; release r`) is\ntests/test_ownir.py:2382: # clean C# (else returns, r never acquired there). `_branch_hoist_safe` blocks the hoist,\ntests/test_ownir.py:2391: \"else\": [{\"op\": \"return\", \"line\": 3}]},\ntests/test_ownir.py:2397: fails.append(\"bridge branch-scope: an early-return branch must not be hoisted into a \"\ntests/test_ownir.py:2399: # a one-branch acquire with NO early return IS safe to hoist (else falls through to the\ntests/test_ownir.py:2410: fails.append(\"bridge branch-scope: a one-branch acquire (no early return) released \"\ntests/test_ownir.py:2432: # owning handle on the SAME resource obligation as `src` (a factory returning a\ntests/test_ownir.py:2509: fails.append(\"D5.4 T4: an alias_join over an untracked src must make no claim \"\ntests/test_ownir.py:2521: {\"op\": \"return\", \"var\": \"w\", \"line\": 3}]}]})\ntests/test_ownir.py:2524: fails.append(\"D5.4 T4: returning the wrapper escapes the shared obligation, so the \"\ntests/test_ownir.py:2542: # the buffer is still returned, so there is no OWN001 leak. Routes through the\ntests/test_ownir.py:2683: return 1 if fails else 0\nownlang/ownir.py:59: never disposed and not guarded by `using` (and not returned/passed out);\nownlang/ownir.py:174: return s.replace(\"%\", \"%25\").replace(\"\\r\", \"%0D\").replace(\"\\n\", \"%0A\")\nownlang/ownir.py:180: return _esc_data(s).replace(\":\", \"%3A\").replace(\",\", \"%2C\")\nownlang/ownir.py:238: \"acquire\", \"release\", \"use\", \"overspan\", \"return\",\nownlang/ownir.py:296: return out\nownlang/ownir.py:303: return _DI_REGION.get(di…20 tokens truncated…(f\"{self.file}:{self.line}: {severity}: [{self.code}] \"\nownlang/ownir.py:346: return (f\"::{severity} file={_esc_prop(self.file)},line={self.line},\"\nownlang/ownir.py:355: return (f\"{self.file}({self.line}): {severity} {self.code}: \"\nownlang/ownir.py:365: return f.render_github(severity)\nownlang/ownir.py:367: return f.render_msbuild(severity)\nownlang/ownir.py:368: return f.render(severity)\nownlang/ownir.py:388: return \"note\"\nownlang/ownir.py:390: return \"warning\"\nownlang/ownir.py:391: return \"error\"\nownlang/ownir.py:431: return result\nownlang/ownir.py:451: return {\nownlang/ownir.py:646: return result\nownlang/ownir.py:758: return \"\\n\".join(lines), handles\nownlang/ownir.py:765: return [\nownlang/ownir.py:797: ready-made advisory Findings minted during lowering (OWN051 unverified-transfer\nownlang/ownir.py:903: # release / if / return over a CFG). The core checks them path-sensitively\nownlang/ownir.py:926: # wrapper-return path in `_infer_return_skeleton`.\nownlang/ownir.py:963: untracked = frozenset(a for a, _c, _t, _l in unverified)\nownlang/ownir.py:965: # OWN051, gated on args that actually carry an obligation here (an\nownlang/ownir.py:970: if c and _callee_returns_fresh(c, mos, first_party)}\nownlang/ownir.py:975: file=ffile, line=cline, code=\"OWN051\",\nownlang/ownir.py:986: # An untracked local must not be hoisted either — the hoisted `Let`\nownlang/ownir.py:990: if k not in untracked}\nownlang/ownir.py:1004: untracked)]\nownlang/ownir.py:1005: # A body that returns a value gets an owned return type, so the core\nownlang/ownir.py:1006: # models `return s` as a valid ESCAPE (the value is discharged to the\nownlang/ownir.py:1007: # caller) instead of a void-return mismatch that would leave `s` looking\nownlang/ownir.py:1008: # leaked. The bridge does not know the real C# return type; an owned\nownlang/ownir.py:1009: # resource type is what makes the escape check fire (any return-type\nownlang/ownir.py:1012: if _returns_value(nodes) else None)\nownlang/ownir.py:1014: return (Module(str(facts.get(\"module\", \"Extracted\")),\nownlang/ownir.py:1045: return out\nownlang/ownir.py:1058: surfaces as an advisory OWN051 (the honest record of the gap; TZ итерация 6).\nownlang/ownir.py:1064: return out\nownlang/ownir.py:1068: return\nownlang/ownir.py:1095: return out\nownlang/ownir.py:1098:def _returns_value(nodes: Any) -> bool:\nownlang/ownir.py:1099: \"\"\"True if a flow body returns a VALUE on some path (a `return` op carrying a\nownlang/ownir.py:1101: return type so `return s` models a valid escape (discharge), not a void-return\nownlang/ownir.py:1104: return False\nownlang/ownir.py:1109: if op == \"return\" and n.get(\"var\") is not None:\nownlang/ownir.py:1110: return True\nownlang/ownir.py:1111: if op == \"if\" and (_returns_value(n.get(\"then\"))\nownlang/ownir.py:1112: or _returns_value(n.get(\"else\"))):\nownlang/ownir.py:1113: return True\nownlang/ownir.py:1114: if op == \"while\" and _returns_value(n.get(\"body\")):\nownlang/ownir.py:1115: return True\nownlang/ownir.py:1116: return False\nownlang/ownir.py:1122: `return`s, for P-005 D5.2 fresh-return inference.\"\"\"\nownlang/ownir.py:1125: return out\nownlang/ownir.py:1139: return out\nownlang/ownir.py:1142:def _has_bare_return(nodes: Any) -> bool:\nownlang/ownir.py:1143: \"\"\"True if some `return` op carries NO `var` (a bare `return` / `return null` /\nownlang/ownir.py:1144: a non-local expression) anywhere in the body. Such a path returns a non-owned\nownlang/ownir.py:1145: value, so the method is not uniformly `fresh` — `_infer_return_skeleton` must not\nownlang/ownir.py:1148: return False\nownlang/ownir.py:1153: if op == \"return\" and n.get(\"var\") is None:\nownlang/ownir.py:1154: return True\nownlang/ownir.py:1155: if op == \"if\" and (_has_bare_return(n.get(\"then\"))\nownlang/ownir.py:1156: or _has_bare_return(n.get(\"else\"))):\nownlang/ownir.py:1157: return True\nownlang/ownir.py:1158: if op == \"while\" and _has_bare_return(n.get(\"body\")):\nownlang/ownir.py:1159: return True\nownlang/ownir.py:1160: return False\nownlang/ownir.py:1165: forward-return inference, P-005 D5.2). A local bound by two *different* callees\nownlang/ownir.py:1167: forward-return (precision-first).\"\"\"\nownlang/ownir.py:1170: return out\nownlang/ownir.py:1174: return\nownlang/ownir.py:1191: return out\nownlang/ownir.py:1194:def _infer_return_skeleton(nodes: Any, param_names: set[str],\nownlang/ownir.py:1196: \"\"\"Infer a method's owned-return kind for the D5.0 solver (P-005 D5.2, T1).\nownlang/ownir.py:1198: `fresh` — every `return ` path returns a local the body itself `acquire`d\nownlang/ownir.py:1199: (a factory: `acquire x; …; return x`). A returned **parameter** is NOT fresh\nownlang/ownir.py:1201: caller acquire a value it does not own. `forward` — a single returned local that\nownlang/ownir.py:1203: return t;`); the solver propagates `Make`'s own return kind. Anything else stays\nownlang/ownir.py:1206: returned = _collect_vars(nodes, \"return\", \"var\")\nownlang/ownir.py:1207: if not returned:\nownlang/ownir.py:1208: return ReturnSkeleton() # void / no value return\nownlang/ownir.py:1209: if _has_bare_return(nodes):\nownlang/ownir.py:1210: # some normal-return path yields a non-owned value (`return null` / bare\nownlang/ownir.py:1211: # `return`), so the method is not uniformly fresh — a caller dropping the\nownlang/ownir.py:1213: return ReturnSkeleton()\nownlang/ownir.py:1216: # `fresh` only when EVERY returned local is acquired here and *nowhere else*. A local\nownlang/ownir.py:1221: for v in returned):\nownlang/ownir.py:1222: return ReturnSkeleton(\"fresh\")\nownlang/ownir.py:1223: if len(returned) == 1:\nownlang/ownir.py:1224: (v,) = tuple(returned)\nownlang/ownir.py:1229: # a thin wrapper returning a BCL factory's result is itself `fresh` — the\nownlang/ownir.py:1230: # caller owns it (Codex). Without this the return is a `forward` to an\nownlang/ownir.py:1232: # dropped `Make()` whose body is `return File.OpenRead(p)` leaks invisibly.\nownlang/ownir.py:1236: return ReturnSkeleton(\"fresh\")\nownlang/ownir.py:1237: return ReturnSkeleton(\"forward\", callee=callee)\nownlang/ownir.py:1238: return ReturnSkeleton() # not provably owned -> no claim\nownlang/ownir.py:1297:# return the caller OWNS — the producer half of the boundary contract (the consume/borrow\nownlang/ownir.py:1307:# UNAMBIGUOUS static factories whose return the caller owns are listed — overload-ambiguous\nownlang/ownir.py:1309:# is a static owned-Process factory but ALSO an instance method returning `bool`, so a bare\nownlang/ownir.py:1322: # OWNS and must dispose. `XmlReader`/`XmlWriter.Create` return a fresh reader/writer; a\nownlang/ownir.py:1332: # `fresh` (`_callee_returns_fresh`). Owning BCL factories are emitted as `acquire`, not `call`,\nownlang/ownir.py:1356: return name.removeprefix(\"global::\")\nownlang/ownir.py:1360: \"\"\"True if `callee` names a curated BCL factory whose return the caller owns. Accepts\nownlang/ownir.py:1367: return False\nownlang/ownir.py:1369: return name in _BCL_FRESH_FACTORIES or name in _BCL_FRESH_FQNS\nownlang/ownir.py:1372:def _callee_returns_fresh(callee: str, mos: dict[str, Any] | None,\nownlang/ownir.py:1375: A first-party summary is AUTHORITATIVE — if one exists we trust its `returns`, so a\nownlang/ownir.py:1384: would look fresh on a direct call while a wrapper around it (which `_infer_return_skeleton`\nownlang/ownir.py:1386: direct and wrapper-returned paths agree (CodeRabbit). Precision-safe: no summary + first-party\nownlang/ownir.py:1389: return False\nownlang/ownir.py:1395: return getattr(summ, \"returns\", None) == \"fresh\"\nownlang/ownir.py:1397: return False\nownlang/ownir.py:1398: return _is_bcl_fresh_factory(callee)\nownlang/ownir.py:1402: \"\"\"Scan a flow body for how parameter `pname` is treated, returning\nownlang/ownir.py:1407: return rel, passed, used\nownlang/ownir.py:1426: return rel, passed, used\nownlang/ownir.py:1435: and `exits_ok` is whether every `return` op seen so far was reached with the\nownlang/ownir.py:1442: return rel, True, exits_ok\nownlang/ownir.py:1449: elif op == \"return\":\nownlang/ownir.py:1450: # a normal-return path ends here carrying the current state; the rest\nownlang/ownir.py:1452: return rel, False, exits_ok and rel == 2\nownlang/ownir.py:1462: return rel, False, exits_ok # both branches returned\nownlang/ownir.py:1468: # body that never completes (always returns) leaves only the\nownlang/ownir.py:1472: return rel, True, exits_ok\nownlang/ownir.py:1476: \"\"\"True only when EVERY normal-return path through the body releases `pname`\nownlang/ownir.py:1477: — the d5 note's `must` (\"released on all normal-return paths\"). A partial\nownlang/ownir.py:1478: (one-branch / in-loop / guarded-by-early-return) release must join to `may`\nownlang/ownir.py:1482: return exits_ok and (not falls_through or rel == 2)\nownlang/ownir.py:1485:def _forward_targets(pname: str, nodes: Any,\nownlang/ownir.py:1494: return out\nownlang/ownir.py:1509: out.extend(_forward_targets(pname, sub))\nownlang/ownir.py:1510: return out\nownlang/ownir.py:1520: return PathAction(kind)\nownlang/ownir.py:1521: return PathAction(\"forward\", callee, arg)\nownlang/ownir.py:1524:def _merge_returns(rets: list[ReturnSkeleton]) -> ReturnSkeleton:\nownlang/ownir.py:1525: \"\"\"The conservative return of a set of same-name overloads. Only a kind ALL\nownlang/ownir.py:1526: overloads agree on survives (so a call to the name returns it regardless of which\nownlang/ownir.py:1528: any disagreement degrades to a no-op `unknown` return — never a fabricated `fresh`\nownlang/ownir.py:1532: return ReturnSkeleton(\"fresh\")\nownlang/ownir.py:1534: return ReturnSkeleton(\"none\")\nownlang/ownir.py:1536: return ReturnSkeleton(\"aliased\")\nownlang/ownir.py:1537: return ReturnSkeleton(\"unknown\") # mixed / forward / aliasOf -> fails closed\nownlang/ownir.py:1552: return group[0]\nownlang/ownir.py:1567: return MethodSkeleton(group[0].key, params,\nownlang/ownir.py:1568: _merge_returns([sk.ret for sk in group]), floc[0], floc[1])\nownlang/ownir.py:1586: on every normal-return path (`_definite_release`). A partial release\nownlang/ownir.py:1587: (one branch / in a loop / behind an early return) also emits a kept\nownlang/ownir.py:1597: The return kind is inferred too (P-005 D5.2, T1): a body that `acquire`s a local\nownlang/ownir.py:1598: and returns it is `fresh` (a factory); `_infer_return_skeleton` keeps it\nownlang/ownir.py:1599: precision-first (a returned parameter is never `fresh`).\nownlang/ownir.py:1649: allt = _forward_targets(cname, body)\nownlang/ownir.py:1650: top = _forward_targets(cname, body, recurse=False)\nownlang/ownir.py:1663: ret = _infer_return_skeleton(body, pnames, first_party)\nownlang/ownir.py:1670: return [_merge_skeletons(group) for group in by_key.values()]\nownlang/ownir.py:1678: normal-return path is CONSUME (ownership taken and discharged); a partial\nownlang/ownir.py:1679: release (one branch / in a loop / behind an early return) is `may` and stays\nownlang/ownir.py:1686: deliberately do NOT treat `return ` as a consume signal: the bridge\nownlang/ownir.py:1687: does not yet model returned (owned) VALUES, so a returned param is\nownlang/ownir.py:1694: return \"consume\"\nownlang/ownir.py:1695: return None # released on SOME paths only -> `may` -> plain (TZ D1)\nownlang/ownir.py:1698: return \"consume\"\nownlang/ownir.py:1700: return \"borrow\"\nownlang/ownir.py:1701: return None # may / unknown / unresolved -> plain (precision-first)\nownlang/ownir.py:1703: return \"borrow\"\nownlang/ownir.py:1704: return None\nownlang/ownir.py:1722: return out\nownlang/ownir.py:1749: return out\nownlang/ownir.py:1757: can EXIT (early `return`) before the post-merge release on a path where the source\nownlang/ownir.py:1759: a *false* OWN001 (e.g. `if c: acquire r else: return; release r`). This is a\nownlang/ownir.py:1761: do, a `while` body never does (it may run zero times), and a `return` that does not\nownlang/ownir.py:1762: itself return `name` (a discharge) on a not-yet-acquired path is unsafe. (CodeRabbit\nownlang/ownir.py:1766: return True\nownlang/ownir.py:1768: return _callee_returns_fresh(str(n.get(\"callee\", \"\")), mos, first_party)\nownlang/ownir.py:1769: return False\nownlang/ownir.py:1774: return True, acquired\nownlang/ownir.py:1781: elif op == \"return\":\nownlang/ownir.py:1783: return False, acquired\nownlang/ownir.py:1787: return False, acquired\nownlang/ownir.py:1790: return False, acquired\nownlang/ownir.py:1795: return False, acquired\nownlang/ownir.py:1796: return True, acquired\nownlang/ownir.py:1798: return analyze(nodes, False)[0]\nownlang/ownir.py:1816: returning call `result`) at depth ≥ 1; (2) its shallowest **reference** (use/release/\nownlang/ownir.py:1817: return/call-arg) is at **depth 0** — the function top, so function-scope is the\nownlang/ownir.py:1823: holds — no path can early-`return` before the release on a path that did not acquire\nownlang/ownir.py:1825: OWN001). The returned `(line, pool)` is the first branch-acquire site and whether it\nownlang/ownir.py:1837: return None\nownlang/ownir.py:1838: return res if _callee_returns_fresh(callee, mos, first_party) else None\nownlang/ownir.py:1846: return\nownlang/ownir.py:1862: if op in (\"use\", \"release\", \"overspan\", \"return\"):\nownlang/ownir.py:1881: return {name: (acq_line[name], acq_pool.get(name, False))\nownlang/ownir.py:1895: untracked: frozenset[str] = frozenset()) -> list[Stmt]:\nownlang/ownir.py:1897: return reference a C# local by name (`var`); `if` carries `then`/`else`\nownlang/ownir.py:1904: summary (`mos`) returns `fresh`, is **also** lowered as an `acquire` of that\nownlang/ownir.py:1914: `untracked` names (see `_unverified_transfer_calls`) are locals handed to a\nownlang/ownir.py:1918: is surfaced as an advisory OWN051 instead of a fabricated verdict.\"\"\"\nownlang/ownir.py:1932: if name in untracked:\nownlang/ownir.py:1934: # not ours to check (OWN051 carries the honest note). No obligation\nownlang/ownir.py:1949: # resource obligation as `src` — a factory returning a wrapper of `src`,\nownlang/ownir.py:1959: # even when the new alias's `src` is untracked: we make no claim on the new\nownlang/ownir.py:1965: if src_h is not None and name not in hoisted and name not in untracked:\nownlang/ownir.py:1989: elif op == \"return\":\nownlang/ownir.py:1998: first_party, overloaded, untracked)\nownlang/ownir.py:2001: first_party, overloaded, untracked)\nownlang/ownir.py:2007: first_party, overloaded, untracked)\nownlang/ownir.py:2023: # `_callee_returns_fresh`). Used only by the overload channel below; the direct-`Call`\nownlang/ownir.py:2038: # optimistic default + advisory OWN051), so a direct Call would\nownlang/ownir.py:2043: # the untracked arg is never referenced). The channel emits sink\nownlang/ownir.py:2049: if channel is not None and str(a) not in untracked:\nownlang/ownir.py:2063: # `fresh`-returning factory, the result is a newly-owned local — mint an\nownlang/ownir.py:2065: # above; this models the return). A non-fresh / unknown return makes no\nownlang/ownir.py:2077: and result not in untracked\nownlang/ownir.py:2078: and _callee_returns_fresh(callee, mos, first_party)):\nownlang/ownir.py:2106: return body\nownlang/ownir.py:2116: return None\nownlang/ownir.py:2117: return subject.split(\"#\", 1)[0]\nownlang/ownir.py:2124: \"OWN002\": \"used here after it was released/returned\",\nownlang/ownir.py:2125: \"OWN003\": \"released/returned here a second time\",\nownlang/ownir.py:2135: use/return/view codes have a distinct second site; a plain leak (OWN001) is a single\nownlang/ownir.py:2141: return ()\nownlang/ownir.py:2145: return ((f, acq, origin), (f, dline, viol))\nownlang/ownir.py:2150: the skeletons, run the solver, and return the solved summaries plus the\nownlang/ownir.py:2155: (transfer per param, return kind) and the `unresolved` extern boundaries\nownlang/ownir.py:2177: return {\nownlang/ownir.py:2187: \"\"\"Run the core checker over the lowered facts and return findings mapped\nownlang/ownir.py:2217: # The bridge SYNTHESISES return types and parameter effects (from inference\nownlang/ownir.py:2222: # - OWN033/OWN035: return-TYPE mismatches (the bridge gives a function an\nownlang/ownir.py:2223: # owned return type iff its body returns a value; the real leak/use\nownlang/ownir.py:2224: # checks still run, and `return s` discharges via escape-on-return).\nownlang/ownir.py:2275: # \"never returned/disposed\"; a partial release as \"not on every path\".\nownlang/ownir.py:2278: msg = (f\"pooled buffer '{name}' may not be returned to the \"\nownlang/ownir.py:2282: f\"returned to the pool (leak)\")\nownlang/ownir.py:2289: \"OWN002\": f\"pooled buffer '{name}' is used after it is returned to the pool\",\nownlang/ownir.py:2290: \"OWN003\": f\"pooled buffer '{name}' is returned to the pool more than once\",\nownlang/ownir.py:2292: f\"being returned on some path\"),\nownlang/ownir.py:2402: message = (f\"pooled buffer '{event}' is rented but never returned \"\nownlang/ownir.py:2445: # OWN051 (d5 §5's advisory channel): each owned local handed to a\nownlang/ownir.py:2446: # may/unknown-contract position was optimistically untracked at that call —\nownlang/ownir.py:2482: return findings\nownlang/ownir.py:2489: return v if isinstance(v, int) and not isinstance(v, bool) else 0\nownlang/ownir.py:2502: return ((c.consumed_file, c.consumed_line, label),)\nownlang/ownir.py:2503: return ()\nownlang/ownir.py:2512: return (c.resolved_file, c.resolved_line)\nownlang/ownir.py:2513: return (c.file, c.line)\nownlang/ownir.py:2521: return ((c.file, c.line, f\"registration of singleton '{c.singleton}'\"),)\nownlang/ownir.py:2522: return ()\nownlang/ownir.py:2531: return (c.cached_file, c.cached_line)\nownlang/ownir.py:2532: return (c.file, c.line)\nownlang/ownir.py:2540: return ((c.file, c.line, f\"registration of singleton '{c.singleton}'\"),)\nownlang/ownir.py:2541: return ()\nownlang/ownir.py:2549: return ()\nownlang/ownir.py:2550: return tuple(\nownlang/ownir.py:2561: return []\nownlang/ownir.py:2651: # and is promoted to application lifetime (the captive returns, hidden behind the API that\nownlang/ownir.py:2662: return out\nownlang/ownir.py:2671: return []\nownlang/ownir.py:2723: return out\nownlang/ownir.py:2736: return out\nownlang/ownir.py:2758: return out\n",{"_428":780,"_409":410,"_430":416},{"_470":781,"_472":782,"_474":783,"_476":477,"_414":612,"_478":32,"_42":777,"_479":784,"_481":482,"_421":114,"_93":483},"# AGENTS.md\n\nThis file provides guidance to agents when working with code in this repository.\n\n- Use the repository root for core commands: `python -m ownlang check|emit|cfg|report `; `emit` deliberately refuses to generate C# when any diagnostic exists.\n- Full zero-dependency regression is `python tests/run_tests.py`; single tests are standalone scripts such as `python tests/test_ownir.py`, not pytest tests.\n- `tests/run_tests.py` imports the other test files and runs the codegen fuzzer with `(iterations=3000, seed=1234)`; run `python tests/test_codegen_props.py ` when changing codegen invariants.\n- Lint gate is exactly `ruff check .` plus `mypy`; mypy is strict only for `ownlang`, while tests/fuzzers stay dynamic and are covered by ruff.\n- Ruff intentionally omits SIM because branch-collapsing fights the commented checker/control-flow structure; do not simplify those branches just for style.\n- The core pipeline is parser -> CFG resolver/lowering -> ownership/lifetime/effect/DI analyses -> diagnostics; Roslyn and OwnTS frontends emit facts only, and the Python core owns all verdicts.\n- Unknown OwnLang calls are hard errors: add local/`extern fn` signatures with ownership effects instead of letting calls tunnel through opaque host code.\n- Adding AST/CFG variants normally requires updating `assert_never` dispatch sites in `ownlang/cfg.py`, `ownlang/analysis.py`, and `ownlang/codegen.py`.\n- Codegen has two intentional modes: straight-line, laminar lifetimes get try/finally hoisting; branchy/transferring code emits releases inline. Do not add runtime “released?” flags to paper over static mistakes.\n- OwnIR schema is versioned in `ownlang/ownir.py`; additive optional fields like resource/type metadata are tolerated, incompatible vocabulary changes must fail loudly.\n- For C# repo scans, `scripts/own-check.sh` is the Action/bash surface and defaults to `--flow-locals`; on Windows use `scripts\\own-check.ps1` rather than requiring bash.\n- The Roslyn extractor auto-adds built `bin/` refs for `.csproj`/`.sln` inputs unless `--no-project-refs`; unresolved external events become advisory OWN050, not guessed leaks.\n- `audit/` must stay decoupled from `ownlang` and consumes `own-check` only through its CLI/SARIF; `audit/README.md` says active audit development currently lives in the separate OwnAudit repo.\n- Existing Cursor guidance: if CodeGraph MCP tools are available, prefer them for structural symbol/caller/impact questions; use text search for literal strings and comments.\ndocs/notes/interprocedural-tz.md:18:| A | Деривация скелетов | `functions[]`-факты → `MethodSkeleton` | `ownir.py:1415` `_build_skeletons` + walkers (`_param_signals:1305`, `_forward_targets:1333`), merge `:1388` | `own-bridge` |\ndocs/notes/interprocedural-tz.md:20:| C | Применение | MOS → `consume`/`borrow`/`acquire`/`alias_join` на call-site | `_lower_fn_params:1529`, call-handler `_lower_flow:1819`, `_callee_returns_fresh:1276` | `own-bridge` |\ndocs/notes/interprocedural-tz.md:41:`dispose | adopt | return` → `must`; `borrow` → `no`; `forward(callee,arg)` →\ndocs/notes/interprocedural-tz.md:67:### 2.4 Деривация return-скелета (R-правила, `_infer_return_skeleton:1098`)\ndocs/notes/interprocedural-tz.md:69:- **R1** Нет `return ` → `none`.\ndocs/notes/interprocedural-tz.md:70:- **R2** Есть хоть один bare `return` / `return null` → `none`, никакой заявки\ndocs/notes/interprocedural-tz.md:80:### 2.5 Слияние перегрузок (M-правила, `_merge_skeletons:1388`, `_merge_returns:1372`)\ndocs/notes/interprocedural-tz.md:96:- **F1** Граф: рёбра M→C по forward-путям параметров и forward-return, только в\ndocs/notes/interprocedural-tz.md:132: `_callee_returns_fresh:1276` — **единственный** источник истины о freshness,\ndocs/notes/interprocedural-tz.md:134: Tier A авторитетен (summary есть → верим его `returns`); first-party без\ndocs/notes/interprocedural-tz.md:152:> освобождение на **всех** normal-return путях (early-return без release блокирует\ndocs/notes/interprocedural-tz.md:153:> заявку; release-then-return засчитывается; `while`-тело — никогда не definite);\ndocs/notes/interprocedural-tz.md:158:Дизайн-нота (d5 §1) определяет `must` как «released on **all** normal-return\ndocs/notes/interprocedural-tz.md:218:### D3: `adopt`/`return` — вклады без продюсера\ndocs/notes/interprocedural-tz.md:220:`contrib` понимает `adopt` и `return` как `must`, но деривация их не эмитит\ndocs/notes/interprocedural-tz.md:221:(adopt — T4b-межпроцедурный, return-of-param — сознательно не консьюм,\ndocs/notes/interprocedural-tz.md:227:> T4b-сводки, return — owned-return-value modelling) и указанием порту: нести\ndocs/notes/interprocedural-tz.md:236:### D6 (обнаружено при реализации OWN051): `may`/`unknown` → plain — это не молчание\ndocs/notes/interprocedural-tz.md:250:> по-аргументные `$`-каналы (расширение M3-маршрутизации) — untracked-имя не\ndocs/notes/interprocedural-tz.md:294:- **INV9** `_callee_returns_fresh` — единственный источник истины о freshness\ndocs/notes/interprocedural-tz.md:387:### 6.2 Этап 3 — `aliasOf:i` через return (первый срез)\ndocs/notes/interprocedural-tz.md:391: параметр с индексом `i`; нет bare return; `v` не acquired и не результат\ndocs/notes/interprocedural-tz.md:399: никого (один OWN001); возврат из фабрики с bare-return веткой (silent);\ndocs/notes/interprocedural-tz.md:415: вызывающем и (b) возвращается им (`return v`). Один несоответствующий сайт →\ndocs/notes/interprocedural-tz.md:441:- [ ] Tier A/B-старшинство не задето (INV4); `_callee_returns_fresh` остался\ntests/test_ownir.py:87: \"\"\"Write a facts dict to a temp file and return its path (load() needs one).\"\"\"\ntests/test_ownir.py:91: return path\ntests/test_ownir.py:98: return True\ntests/test_ownir.py:99: return False\ntests/test_ownir.py:103: \"\"\"Pin the OwnIR bridge on the canonical leak/ok facts; return 0/1.\"\"\"\ntests/test_ownir.py:148: return check_facts({\"module\": \"M\", \"components\": [\ntests/test_ownir.py:195: return check_facts({\"module\": \"M\", \"components\": [\ntests/test_ownir.py:458: # --- POOL001 ArrayPool: a buffer rented but never returned leaks; a returned\ntests/test_ownir.py:472: if \"rented\" not in p0.message or \"returned\" not in p0.message:\ntests/test_ownir.py:473: fails.append(f\"pool message missing rented/returned: {p0.message!r}\")\ntests/test_ownir.py:497: # IDisposable created and captured ONLY through member access into a returned\ntests/test_ownir.py:553: # exceptional exit (a bare `return` while the local is live) before each\ntests/test_ownir.py:558: # 'tfLeak'). Without the dedup this returns 2.\ntests/test_ownir.py:584: # --- finally-before-return + switch lowering: a `return` inside a try-with-finally runs\ntests/test_ownir.py:585: # the finally first (a finally-disposed resource is released on the return path ->\ntests/test_ownir.py:586: # silent), an early return that skips a later dispose leaks ('r2'), a no-default switch\ntests/test_ownir.py:597: fails.append(f\"expected OWN001 on 'r2'@20 (early-return leak) and 's2'@40 (switch \"\ntests/test_ownir.py:598: f\"else-branch leak) only — clean 'r' (finally before return) and 's' \"\ntests/test_ownir.py:604: # partial-path leak ('may not be returned to the pool on every path'), a never-returned\ntests/test_ownir.py:605: # one ('rented but never returned'), and leaves a plain disposable on the same shape\ntests/test_ownir.py:620: (\"buf\", \"pooled buffer\", \"may not be returned to the pool on every path\", \"pooled buffer\"),\ntests/test_ownir.py:621: (\"nbuf\", \"pooled buffer\", \"rented but never returned to the pool\", \"pooled buffer\"),\ntests/test_ownir.py:1314: (\"Archiver.cs\", 26, \"used here after it was released/returned\")):\ntests/test_ownir.py:1379: # regression (codex review): inference does NOT treat `return` as a consume\ntests/test_ownir.py:1380: # signal, and a value-bearing `return` no longer crashes the bridge. A function\ntests/test_ownir.py:1381: # that returns an owned local/param gets an owned return type, so the value\ntests/test_ownir.py:1387: {\"op\": \"return\", \"var\": \"s\", \"line\": 2}]},\ntests/test_ownir.py:1389: \"body\": [{\"op\": \"return\", \"var\": \"s\", \"line\": 6}]}]})\ntests/test_ownir.py:1391: fails.append(f\"a value-bearing return should be a clean escape (no crash, no \"\ntests/test_ownir.py:1483: # `maybe(s){ if(c) sink(s); }` consumes s on only one path, so a caller that uses s\ntests/test_ownir.py:1484: # after `maybe(s)` must stay SILENT (no false OWN002 on the non-forward path).\ntests/test_ownir.py:1487: {\"name\": \"maybe\", \"file\": \"F.cs\", \"params\": [{\"name\": \"s\", \"line\": 1}],\ntests/test_ownir.py:1496: {\"op\": \"call\", \"callee\": \"maybe\", \"args\": [\"s\"], \"line\": 11},\ntests/test_ownir.py:1499: if gotc != [(\"user_c\", \"OWN051\", True)]:\ntests/test_ownir.py:1501: f\"honest OWN051 advisory (d5 §5), got {gotc}\")\ntests/test_ownir.py:1517: if gotd1c != [(\"careful\", \"OWN051\", True)]:\ntests/test_ownir.py:1519: f\"one OWN051 advisory, got {gotd1c}\")\ntests/test_ownir.py:1547: if gotd1w != [(\"loop_user\", \"OWN051\", True)]:\ntests/test_ownir.py:1549: f\"verdicts, one OWN051 advisory, got {gotd1w}\")\ntests/test_ownir.py:1550: # (TZ D1) an early `return` on an unreleased path blocks the definite claim:\ntests/test_ownir.py:1551: # `guard(x){ if(c) return; release x; }` does not release on the guard path.\ntests/test_ownir.py:1555: \"body\": [{\"op\": \"if\", \"line\": 2, \"then\": [{\"op\": \"return\", \"line\": 3}],\ntests/test_ownir.py:1563: if gotd1g != [(\"guard_user\", \"OWN051\", True)]:\ntests/test_ownir.py:1564: fails.append(\"TZ D1: an early-return-unreleased path blocks consume — no \"\ntests/test_ownir.py:1565: f\"verdicts, one OWN051 advisory, got {gotd1g}\")\ntests/test_ownir.py:1566: # (TZ D1) release-then-return in a branch plus a fall-through release IS\ntests/test_ownir.py:1573: {\"op\": \"return\", \"line\": 4}],\ntests/test_ownir.py:1582: fails.append(\"TZ D1: release-then-return + fall-through release is all-paths \"\ntests/test_ownir.py:1598: if gotd1f != [(\"via_user\", \"OWN051\", True)]:\ntests/test_ownir.py:1600: f\"transitively — no verdicts, one OWN051 advisory, got {gotd1f}\")\ntests/test_ownir.py:1602: # a may-call must be silent (untracked), not an OWN001 — before this fix a\ntests/test_ownir.py:1605: # the disposer) fabricated a leak. The gap is the OWN051 advisory instead.\ntests/test_ownir.py:1615: if gotd6 != [(\"drop_user\", 11, \"OWN051\", True)]:\ntests/test_ownir.py:1617: f\"(one OWN051 advisory, no OWN001), got {gotd6}\")\ntests/test_ownir.py:1619: # after a borrow-only callee is the T3 recall win (a real OWN001, no OWN051) —\ntests/test_ownir.py:1633: # the OWN051 owned-local gate keeps the advisory channel quiet.\ntests/test_ownir.py:1692: {\"op\": \"return\", \"var\": \"r\", \"line\": 2}]},\ntests/test_ownir.py:1698: kinds = {s[\"method\"]: s[\"returns\"][\"owned\"] for s in doc[\"summaries\"]}\ntests/test_ownir.py:1731: # spec/Inference.md conformance: the advisory codes the spec names (OWN051,\ntests/test_ownir.py:1735: missing = [c for c in (\"OWN051\", \"OWN052\") if c not in TITLES]\ntests/test_ownir.py:1774: if gotn != [(\"ovn_use\", \"OWN051\", True)]:\ntests/test_ownir.py:1776: f\"verdicts, one OWN051 advisory, got {gotn}\")\ntests/test_ownir.py:1791: if gotdir != [(\"dN\", \"OWN051\", True)]:\ntests/test_ownir.py:1793: f\"verdicts, one OWN051 advisory (merged may), got {gotdir}\")\ntests/test_ownir.py:1811: # (_merge_returns) overloaded FACTORY: every overload returns fresh, so a dropped result\ntests/test_ownir.py:1818: {\"op\": \"return\", \"var\": \"r\", \"line\": 2}]},\ntests/test_ownir.py:1821: {\"op\": \"return\", \"var\": \"r\", \"line\": 6}]},\ntests/test_ownir.py:1828: # when overloads DISAGREE on the return (one fresh, one not), the merge degrades to a\ntests/test_ownir.py:1829: # non-fresh return, so a dropped result makes NO claim (precision-first: a real leak via\ntests/test_ownir.py:1835: {\"op\": \"return\", \"var\": \"r\", \"line\": 2}]}, # fresh\ntests/test_ownir.py:1837: \"body\": [{\"op\": \"use\", \"var\": \"p\", \"line\": 5}]}, # no owned return\ntests/test_ownir.py:1841: fails.append(\"§10 q2 disagreeing-return overloads must make no fresh claim (silent), \"\ntests/test_ownir.py:1901: # and $borrow then releasing is clean — the loan is returned, the owner discharges.\ntests/test_ownir.py:1950: # --- P-005 D5.2 (T1): a `fresh`-returning factory call becomes an acquire SITE.\ntests/test_ownir.py:1951: # A method that acquires a local and returns it (`make`) has returnsOwned=fresh;\ntests/test_ownir.py:1957: {\"op\": \"return\", \"var\": \"x\", \"line\": 2}]}\ntests/test_ownir.py:1966: fails.append(\"D5.2 T1: a fresh-returning factory whose result is never disposed \"\ntests/test_ownir.py:1988: # fresh propagates through a forward-return factory-of-factory: `relay` returns the\ntests/test_ownir.py:1994: {\"op\": \"return\", \"var\": \"t\", \"line\": 2}]},\ntests/test_ownir.py:2000: fails.append(\"D5.2 T1: fresh must propagate through a forward-return factory-of-\"\ntests/test_ownir.py:2002: # PRECISION: a method that returns a PARAMETER is NOT fresh (that is the wrap/alias\ntests/test_ownir.py:2003: # case, T4/D5.4). `ident(s){ return s }` must not make the caller acquire `r`, and\ntests/test_ownir.py:2008: \"body\": [{\"op\": \"return\", \"var\": \"s\", \"line\": 2}]},\ntests/test_ownir.py:2016: fails.append(\"D5.2 T1: returning a parameter is not `fresh` (no false acquire of \"\ntests/test_ownir.py:2033: # Tier B (D5.3 / P1a): a curated BCL *factory* (`File.OpenRead` &c.) returns an owned\ntests/test_ownir.py:2038: return check_facts({\"module\": \"M\", \"functions\": [\ntests/test_ownir.py:2067: # acquire of its result, stays silent (precision-first: the table is owned-returns only).\ntests/test_ownir.py:2074: # A `MyCompany.File.OpenRead` returning a plain value must NOT fabricate a false OWN001.\ntests/test_ownir.py:2089: # P1a (stdlib pack): more curated owned-returning factories. A dropped XmlReader/XmlWriter/\ntests/test_ownir.py:2110: # that returns its parameter is NOT fresh, so a caller dropping its result is clean; the\ntests/test_ownir.py:2114: \"body\": [{\"op\": \"return\", \"var\": \"x\", \"line\": 2}]},\ntests/test_ownir.py:2124: # RECALL (Codex): a first-party wrapper that returns a BCL factory result is itself fresh,\ntests/test_ownir.py:2125: # so a caller dropping `Make()` leaks OWN001 — the return skeleton propagates BCL freshness\ntests/test_ownir.py:2131: {\"op\": \"return\", \"var\": \"s\", \"line\": 3}]},\ntests/test_ownir.py:2135: fails.append(f\"Tier B: a wrapper returning a BCL factory result must be fresh \"\ntests/test_ownir.py:2162: # an instance method returning `bool`, so a bare match would fabricate ownership for the\ntests/test_ownir.py:2168: # first-party method named `SHA256.Create` that returns its parameter is NOT fresh; a\ntests/test_ownir.py:2169: # wrapper `Make` that returns `SHA256.Create(x)` must inherit THAT (non-fresh) summary,\ntests/test_ownir.py:2171: # wrapper's return skeleton short-circuited to `fresh` via the BCL name match, fabricating\ntests/test_ownir.py:2175: \"body\": [{\"op\": \"return\", \"var\": \"x\", \"line\": 2}]},\ntests/test_ownir.py:2179: {\"op\": \"return\", \"var\": \"r\", \"line\": 7}]},\ntests/test_ownir.py:2196: \"body\": [{\"op\": \"return\", \"var\": \"a\", \"line\": 2}]},\ntests/test_ownir.py:2199: \"body\": [{\"op\": \"return\", \"var\": \"a\", \"line\": 4}]},\ntests/test_ownir.py:2214: \"body\": [{\"op\": \"return\", \"var\": \"a\", \"line\": 2}]},\ntests/test_ownir.py:2237: # the factory acquire must fire inside CONTROL FLOW too: a fresh-returning call in\ntests/test_ownir.py:2251: # PRECISION (CodeRabbit): a returned local that is also a call RESULT is mixed-origin,\ntests/test_ownir.py:2253: # owned) result, and returns it — `returned == acquired == {x}` would wrongly read as\ntests/test_ownir.py:2262: {\"op\": \"return\", \"var\": \"x\", \"line\": 3}]},\ntests/test_ownir.py:2268: fails.append(\"D5.2 T1: a mixed-origin return (acquired AND a call result) is not \"\ntests/test_ownir.py:2270: # PRECISION (Codex): `fresh` requires EVERY return path to be owned. A method that\ntests/test_ownir.py:2271: # returns an acquired local on one branch but a bare `return` (null / non-owned) on\ntests/test_ownir.py:2273: # leak on the null path. `maybe_make` must not be fresh -> caller_bare stays silent.\ntests/test_ownir.py:2276: {\"name\": \"maybe_make\", \"file\": \"T1.cs\",\ntests/test_ownir.py:2279: {\"op\": \"return\", \"var\": \"x\", \"line\": 3}],\ntests/test_ownir.py:2280: \"else\": [{\"op\": \"return\", \"line\": 4}]}]},\ntests/test_ownir.py:2282: \"body\": [{\"op\": \"call\", \"callee\": \"maybe_make\", \"args\": [], \"result\": \"r\",\ntests/test_ownir.py:2286: fails.append(\"D5.2 T1: a method with a non-owned (`return null`) path is not \"\ntests/test_ownir.py:2363: # than silently returning no findings. A loop-aware model is a separate follow-up; this\ntests/test_ownir.py:2379: # SAFETY (CodeRabbit Major): the hoist must NOT fire when a branch early-`return`s on a\ntests/test_ownir.py:2381: # that path, a FALSE OWN001. `guard` (`if c: acquire r else: return; release r`) is\ntests/test_ownir.py:2382: # clean C# (else returns, r never acquired there). `_branch_hoist_safe` blocks the hoist,\ntests/test_ownir.py:2391: \"else\": [{\"op\": \"return\", \"line\": 3}]},\ntests/test_ownir.py:2397: fails.append(\"bridge branch-scope: an early-return branch must not be hoisted into a \"\ntests/test_ownir.py:2399: # a one-branch acquire with NO early return IS safe to hoist (else falls through to the\ntests/test_ownir.py:2410: fails.append(\"bridge branch-scope: a one-branch acquire (no early return) released \"\ntests/test_ownir.py:2432: # owning handle on the SAME resource obligation as `src` (a factory returning a\ntests/test_ownir.py:2509: fails.append(\"D5.4 T4: an alias_join over an untracked src must make no claim \"\ntests/test_ownir.py:2521: {\"op\": \"return\", \"var\": \"w\", \"line\": 3}]}]})\ntests/test_ownir.py:2524: fails.append(\"D5.4 T4: returning the wrapper escapes the shared obligation, so the \"\ntests/test_ownir.py:2542: # the buffer is still returned, so there is no OWN001 leak. Routes through the\ntests/test_ownir.py:2683: return 1 if fails else 0\nownlang/ownir.py:59: never disposed and not guarded by `using` (and not returned/passed out);\nownlang/ownir.py:174: return s.replace(\"%\", \"%25\").replace(\"\\r\", \"%0D\").replace(\"\\n\", \"%0A\")\nownlang/ownir.py:180: return _esc_data(s).replace(\":\", \"%3A\").replace(\",\", \"%2C\")\nownlang/ownir.py:238: \"acquire\", \"release\", \"use\", \"overspan\", \"return\",\nownlang/ownir.py:296: return out\nownlang/ownir.py:303: return _DI_REGION.get(di_life.get(cname, \"\"), _SUBSCRIBER_REGION)\nownlang/ownir.py:337: return (f\"{self.file}:{self.line}: {severity}: [{self.code}] \"\nownlang/ownir.py:346: return (f\"::{severity} file={_esc_prop(self.file)},line={self.line},\"\nownlang/ownir.py:355: return (f\"{self.file}({self.line}): {severity} {self.code}: \"\nownlang/ownir.py:365: return f.render_github(severity)\nownlang/ownir.py:367: return f.render_msbuild(severity)\nownlang/ownir.py:368: return f.render(severity)\nownlang/ownir.py:388: return \"note\"\nownlang/ownir.py:390: return \"warning\"\nownlang/ownir.py:391: return \"error\"\nownlang/ownir.py:431: return result\nownlang/ownir.py:451: return {\nownlang/ownir.py:646: return result\nownlang/ownir.py:758: return \"\\n\".join(lines), handles\nownlang/ownir.py:765: return [\nownlang/ownir.py:797: ready-made advisory Findings minted during lowering (OWN051 unverified-transfer\nownlang/ownir.py:903: # release / if / return over a CFG). The core checks them path-sensitively\nownlang/ownir.py:926: # wrapper-return path in `_infer_return_skeleton`.\nownlang/ownir.py:963: untracked = frozenset(a for a, _c, _t, _l in unverified)\nownlang/ownir.py:965: # OWN051, gated on args that actually carry an obligation here (an\nownlang/ownir.py:970: if c and _callee_returns_fresh(c, mos, first_party)}\nownlang/ownir.py:975: file=ffile, line=cline, code=\"OWN051\",\nownlang/ownir.py:986: # An untracked local must not be hoisted either — the hoisted `Let`\nownlang/ownir.py:990: if k not in untracked}\nownlang/ownir.py:1004: untracked)]\nownlang/ownir.py:1005: # A body that returns a value gets an owned return type, so the core\nownlang/ownir.py:1006: # models `return s` as a valid ESCAPE (the value is discharged to the\nownlang/ownir.py:1007: # caller) instead of a void-return mismatch that would leave `s` looking\nownlang/ownir.py:1008: # leaked. The bridge does not know the real C# return type; an owned\nownlang/ownir.py:1009: # resource type is what makes the escape check fire (any return-type\nownlang/ownir.py:1012: if _returns_value(nodes) else None)\nownlang/ownir.py:1014: return (Module(str(facts.get(\"module\", \"Extracted\")),\nownlang/ownir.py:1045: return out\nownlang/ownir.py:1058: surfaces as an advisory OWN051 (the honest record of the gap; TZ итерация 6).\nownlang/ownir.py:1064: return out\nownlang/ownir.py:1068: return\nownlang/ownir.py:1095: return out\nownlang/ownir.py:1098:def _returns_value(nodes: Any) -> bool:\nownlang/ownir.py:1099: \"\"\"True if a flow body returns a VALUE on some path (a `return` op carrying a\nownlang/ownir.py:1101: return type so `return s` models a valid escape (discharge), not a void-return\nownlang/ownir.py:1104: return False\nownlang/ownir.py:1109: if op == \"return\" and n.get(\"var\") is not None:\nownlang/ownir.py:1110: return True\nownlang/ownir.py:1111: if op == \"if\" and (_returns_value(n.get(\"then\"))\nownlang/ownir.py:1112: or _returns_value(n.get(\"else\"))):\nownlang/ownir.py:1113: return True\nownlang/ownir.py:1114: if op == \"while\" and _returns_value(n.get(\"body\")):\nownlang/ownir.py:1115: return True\nownlang/ownir.py:1116: return False\nownlang/ownir.py:1122: `return`s, for P-005 D5.2 fresh-return inference.\"\"\"\nownlang/ownir.py:1125: return out\nownlang/ownir.py:1139: return out\nownlang/ownir.py:1142:def _has_bare_return(nodes: Any) -> bool:\nownlang/ownir.py:1143: \"\"\"True if some `return` op carries NO `var` (a bare `return` / `return null` /\nownlang/ownir.py:1144: a non-local expression) anywhere in the body. Such a path returns a non-owned\nownlang/ownir.py:1145: value, so the method is not uniformly `fresh` — `_infer_return_skeleton` must not\nownlang/ownir.py:1148: return False\nownlang/ownir.py:1153: if op == \"return\" and n.get(\"var\") is None:\nownlang/ownir.py:1154: return True\nownlang/ownir.py:1155: if op == \"if\" and (_has_bare_return(n.get(\"then\"))\nownlang/ownir.py:1156: or _has_bare_return(n.get(\"else\"))):\nownlang/ownir.py:1157: return True\nownlang/ownir.py:1158: if op == \"while\" and _has_bare_return(n.get(\"body\")):\nownlang/ownir.py:1159: return True\nownlang/ownir.py:1160: return False\nownlang/ownir.py:1165: forward-return inference, P-005 D5.2). A local bound by two *different* callees\nownlang/ownir.py:1167: forward-return (precision-first).\"\"\"\nownlang/ownir.py:1170: return out\nownlang/ownir.py:1174: return\nownlang/ownir.py:1191: return out\nownlang/ownir.py:1194:def _infer_return_skeleton(nodes: Any, param_names: set[str],\nownlang/ownir.py:1196: \"\"\"Infer a method's owned-return kind for the D5.0 solver (P-005 D5.2, T1).\nownlang/ownir.py:1198: `fresh` — every `return ` path returns a local the body itself `acquire`d\nownlang/ownir.py:1199: (a factory: `acquire x; …; return x`). A returned **parameter** is NOT fresh\nownlang/ownir.py:1201: caller acquire a value it does not own. `forward` — a single returned local that\nownlang/ownir.py:1203: return t;`); the solver propagates `Make`'s own return kind. Anything else stays\nownlang/ownir.py:1206: returned = _collect_vars(nodes, \"return\", \"var\")\nownlang/ownir.py:1207: if not returned:\nownlang/ownir.py:1208: return ReturnSkeleton() # void / no value return\nownlang/ownir.py:1209: if _has_bare_return(nodes):\nownlang/ownir.py:1210: # some normal-return path yields a non-owned value (`return null` / bare\nownlang/ownir.py:1211: # `return`), so the method is not uniformly fresh — a caller dropping the\nownlang/ownir.py:1213: return ReturnSkeleton()\nownlang/ownir.py:1216: # `fresh` only when EVERY returned local is acquired here and *nowhere else*. A local\nownlang/ownir.py:1221: for v in returned):\nownlang/ownir.py:1222: return ReturnSkeleton(\"fresh\")\nownlang/ownir.py:1223: if len(returned) == 1:\nownlang/ownir.py:1224: (v,) = tuple(returned)\nownlang/ownir.py:1229: # a thin wrapper returning a BCL factory's result is itself `fresh` — the\nownlang/ownir.py:1230: # caller owns it (Codex). Without this the return is a `forward` to an\nownlang/ownir.py:1232: # dropped `Make()` whose body is `return File.OpenRead(p)` leaks invisibly.\nownlang/ownir.py:1236: return ReturnSkeleton(\"fresh\")\nownlang/ownir.py:1237: return ReturnSkeleton(\"forward\", callee=callee)\nownlang/ownir.py:1238: return ReturnSkeleton() # not provably owned -> no claim\nownlang/ownir.py:1297:# return the caller OWNS — the producer half of the boundary contract (the consume/borrow\nownlang/ownir.py:1307:# UNAMBIGUOUS static factories whose return the caller owns are listed — overload-ambiguous\nownlang/ownir.py:1309:# is a static owned-Process factory but ALSO an instance method returning `bool`, so a bare\nownlang/ownir.py:1322: # OWNS and must dispose. `XmlReader`/`XmlWriter.Create` return a fresh reader/writer; a\nownlang/ownir.py:1332: # `fresh` (`_callee_returns_fresh`). Owning BCL factories are emitted as `acquire`, not `call`,\nownlang/ownir.py:1356: return name.removeprefix(\"global::\")\nownlang/ownir.py:1360: \"\"\"True if `callee` names a curated BCL factory whose return the caller owns. Accepts\nownlang/ownir.py:1367: return False\nownlang/ownir.py:1369: return name in _BCL_FRESH_FACTORIES or name in _BCL_FRESH_FQNS\nownlang/ownir.py:1372:def _callee_returns_fresh(callee: str, mos: dict[str, Any] | None,\nownlang/ownir.py:1375: A first-party summary is AUTHORITATIVE — if one exists we trust its `returns`, so a\nownlang/ownir.py:1384: would look fresh on a direct call while a wrapper around it (which `_infer_return_skeleton`\nownlang/ownir.py:1386: direct and wrapper-returned paths agree (CodeRabbit). Precision-safe: no summary + first-party\nownlang/ownir.py:1389: return False\nownlang/ownir.py:1395: return getattr(summ, \"returns\", None) == \"fresh\"\nownlang/ownir.py:1397: return False\nownlang/ownir.py:1398: return _is_bcl_fresh_factory(callee)\nownlang/ownir.py:1402: \"\"\"Scan a flow body for how parameter `pname` is treated, returning\nownlang/ownir.py:1407: return rel, passed, used\nownlang/ownir.py:1426: return rel, passed, used\nownlang/ownir.py:1435: and `exits_ok` is whether every `return` op seen so far was reached with the\nownlang/ownir.py:1442: return rel, True, exits_ok\nownlang/ownir.py:1449: elif op == \"return\":\nownlang/ownir.py:1450: # a normal-return path ends here carrying the current state; the rest\nownlang/ownir.py:1452: return rel, False, exits_ok and rel == 2\nownlang/ownir.py:1462: return rel, False, exits_ok # both branches returned\nownlang/ownir.py:1468: # body that never completes (always returns) leaves only the\nownlang/ownir.py:1472: return rel, True, exits_ok\nownlang/ownir.py:1476: \"\"\"True only when EVERY normal-return path through the body releases `pname`\nownlang/ownir.py:1477: — the d5 note's `must` (\"released on all normal-return paths\"). A partial\nownlang/ownir.py:1478: (one-branch / in-loop / guarded-by-early-return) release must join to `may`\nownlang/ownir.py:1482: return exits_ok and (not falls_through or rel == 2)\nownlang/ownir.py:1485:def _forward_targets(pname: str, nodes: Any,\nownlang/ownir.py:1494: return out\nownlang/ownir.py:1509: out.extend(_forward_targets(pname, sub))\nownlang/ownir.py:1510: return out\nownlang/ownir.py:1520: return PathAction(kind)\nownlang/ownir.py:1521: return PathAction(\"forward\", callee, arg)\nownlang/ownir.py:1524:def _merge_returns(rets: list[ReturnSkeleton]) -> ReturnSkeleton:\nownlang/ownir.py:1525: \"\"\"The conservative return of a set of same-name overloads. Only a kind ALL\nownlang/ownir.py:1526: overloads agree on survives (so a call to the name returns it regardless of which\nownlang/ownir.py:1528: any disagreement degrades to a no-op `unknown` return — never a fabricated `fresh`\nownlang/ownir.py:1532: return ReturnSkeleton(\"fresh\")\nownlang/ownir.py:1534: return ReturnSkeleton(\"none\")\nownlang/ownir.py:1536: return ReturnSkeleton(\"aliased\")\nownlang/ownir.py:1537: return ReturnSkeleton(\"unknown\") # mixed / forward / aliasOf -> fails closed\nownlang/ownir.py:1552: return group[0]\nownlang/ownir.py:1567: return MethodSkeleton(group[0].key, params,\nownlang/ownir.py:1568: _merge_returns([sk.ret for sk in group]), floc[0], floc[1])\nownlang/ownir.py:1586: on every normal-return path (`_definite_release`). A partial release\nownlang/ownir.py:1587: (one branch / in a loop / behind an early return) also emits a kept\nownlang/ownir.py:1597: The return kind is inferred too (P-005 D5.2, T1): a body that `acquire`s a local\nownlang/ownir.py:1598: and returns it is `fresh` (a factory); `_infer_return_skeleton` keeps it\nownlang/ownir.py:1599: precision-first (a returned parameter is never `fresh`).\nownlang/ownir.py:1649: allt = _forward_targets(cname, body)\nownlang/ownir.py:1650: top = _forward_targets(cname, body, recurse=False)\nownlang/ownir.py:1663: ret = _infer_return_skeleton(body, pnames, first_party)\nownlang/ownir.py:1670: return [_merge_skeletons(group) for group in by_key.values()]\nownlang/ownir.py:1678: normal-return path is CONSUME (ownership taken and discharged); a partial\nownlang/ownir.py:1679: release (one branch / in a loop / behind an early return) is `may` and stays\nownlang/ownir.py:1686: deliberately do NOT treat `return ` as a consume signal: the bridge\nownlang/ownir.py:1687: does not yet model returned (owned) VALUES, so a returned param is\nownlang/ownir.py:1694: return \"consume\"\nownlang/ownir.py:1695: return None # released on SOME paths only -> `may` -> plain (TZ D1)\nownlang/ownir.py:1698: return \"consume\"\nownlang/ownir.py:1700: return \"borrow\"\nownlang/ownir.py:1701: return None # may / unknown / unresolved -> plain (precision-first)\nownlang/ownir.py:1703: return \"borrow\"\nownlang/ownir.py:1704: return None\nownlang/ownir.py:1722: return out\nownlang/ownir.py:1749: return out\nownlang/ownir.py:1757: can EXIT (early `return`) before the post-merge release on a path where the source\nownlang/ownir.py:1759: a *false* OWN001 (e.g. `if c: acquire r else: return; release r`). This is a\nownlang/ownir.py:1761: do, a `while` body never does (it may run zero times), and a `return` that does not\nownlang/ownir.py:1762: itself return `name` (a discharge) on a not-yet-acquired path is unsafe. (CodeRabbit\nownlang/ownir.py:1766: return True\nownlang/ownir.py:1768: return _callee_returns_fresh(str(n.get(\"callee\", \"\")), mos, first_party)\nownlang/ownir.py:1769: return False\nownlang/ownir.py:1774: return True, acquired\nownlang/ownir.py:1781: elif op == \"return\":\nownlang/ownir.py:1783: return False, acquired\nownlang/ownir.py:1787: return False, acquired\nownlang/ownir.py:1790: return False, acquired\nownlang/ownir.py:1795: return False, acquired\nownlang/ownir.py:1796: return True, acquired\nownlang/ownir.py:1798: return analyze(nodes, False)[0]\nownlang/ownir.py:1816: returning call `result`) at depth ≥ 1; (2) its shallowest **reference** (use/release/\nownlang/ownir.py:1817: return/call-arg) is at **depth 0** — the function top, so function-scope is the\nownlang/ownir.py:1823: holds — no path can early-`return` before the release on a path that did not acquire\nownlang/ownir.py:1825: OWN001). The returned `(line, pool)` is the first branch-acquire site and whether it\nownlang/ownir.py:1837: return None\nownlang/ownir.py:1838: return res if _callee_returns_fresh(callee, mos, first_party) else None\nownlang/ownir.py:1846: return\nownlang/ownir.py:1862: if op in (\"use\", \"release\", \"overspan\", \"return\"):\nownlang/ownir.py:1881: return {name: (acq_line[name], acq_pool.get(name, False))\nownlang/ownir.py:1895: untracked: frozenset[str] = frozenset()) -> list[Stmt]:\nownlang/ownir.py:1897: return reference a C# local by name (`var`); `if` carries `then`/`else`\nownlang/ownir.py:1904: summary (`mos`) returns `fresh`, is **also** lowered as an `acquire` of that\nownlang/ownir.py:1914: `untracked` names (see `_unverified_transfer_calls`) are locals handed to a\nownlang/ownir.py:1918: is surfaced as an advisory OWN051 instead of a fabricated verdict.\"\"\"\nownlang/ownir.py:1932: if name in untracked:\nownlang/ownir.py:1934: # not ours to check (OWN051 carries the honest note). No obligation\nownlang/ownir.py:1949: # resource obligation as `src` — a factory returning a wrapper of `src`,\nownlang/ownir.py:1959: # even when the new alias's `src` is untracked: we make no claim on the new\nownlang/ownir.py:1965: if src_h is not None and name not in hoisted and name not in untracked:\nownlang/ownir.py:1989: elif op == \"return\":\nownlang/ownir.py:1998: first_party, overloaded, untracked)\nownlang/ownir.py:2001: first_party, overloaded, untracked)\nownlang/ownir.py:2007: first_party, overloaded, untracked)\nownlang/ownir.py:2023: # `_callee_returns_fresh`). Used only by the overload channel below; the direct-`Call`\nownlang/ownir.py:2038: # optimistic default + advisory OWN051), so a direct Call would\nownlang/ownir.py:2043: # the untracked arg is never referenced). The channel emits sink\nownlang/ownir.py:2049: if channel is not None and str(a) not in untracked:\nownlang/ownir.py:2063: # `fresh`-returning factory, the result is a newly-owned local — mint an\nownlang/ownir.py:2065: # above; this models the return). A non-fresh / unknown return makes no\nownlang/ownir.py:2077: and result not in untracked\nownlang/ownir.py:2078: and _callee_returns_fresh(callee, mos, first_party)):\nownlang/ownir.py:2106: return body\nownlang/ownir.py:2116: return None\nownlang/ownir.py:2117: return subject.split(\"#\", 1)[0]\nownlang/ownir.py:2124: \"OWN002\": \"used here after it was released/returned\",\nownlang/ownir.py:2125: \"OWN003\": \"released/returned here a second time\",\nownlang/ownir.py:2135: use/return/view codes have a distinct second site; a plain leak (OWN001) is a single\nownlang/ownir.py:2141: return ()\nownlang/ownir.py:2145: return ((f, acq, origin), (f, dline, viol))\nownlang/ownir.py:2150: the skeletons, run the solver, and return the solved summaries plus the\nownlang/ownir.py:2155: (transfer per param, return kind) and the `unresolved` extern boundaries\nownlang/ownir.py:2177: return {\nownlang/ownir.py:2187: \"\"\"Run the core checker over the lowered facts and return findings mapped\nownlang/ownir.py:2217: # The bridge SYNTHESISES return types and parameter effects (from inference\nownlang/ownir.py:2222: # - OWN033/OWN035: return-TYPE mismatches (the bridge gives a function an\nownlang/ownir.py:2223: # owned return type iff its body returns a value; the real leak/use\nownlang/ownir.py:2224: # checks still run, and `return s` discharges via escape-on-return).\nownlang/ownir.py:2275: # \"never returned/disposed\"; a partial release as \"not on every path\".\nownlang/ownir.py:2278: msg = (f\"pooled buffer '{name}' may not be returned to the \"\nownlang/ownir.py:2282: f\"returned to the pool (leak)\")\nownlang/ownir.py:2289: \"OWN002\": f\"pooled buffer '{name}' is used after it is returned to the pool\",\nownlang/ownir.py:2290: \"OWN003\": f\"pooled buffer '{name}' is returned to the pool more than once\",\nownlang/ownir.py:2292: f\"being returned on some path\"),\nownlang/ownir.py:2402: message = (f\"pooled buffer '{event}' is rented but never returned \"\nownlang/ownir.py:2445: # OWN051 (d5 §5's advisory channel): each owned local handed to a\nownlang/ownir.py:2446: # may/unknown-contract position was optimistically untracked at that call —\nownlang/ownir.py:2482: return findings\nownlang/ownir.py:2489: return v if isinstance(v, int) and not isinstance(v, bool) else 0\nownlang/ownir.py:2502: return ((c.consumed_file, c.consumed_line, label),)\nownlang/ownir.py:2503: return ()\nownlang/ownir.py:2512: return (c.resolved_file, c.resolved_line)\nownlang/ownir.py:2513: return (c.file, c.line)\nownlang/ownir.py:2521: return ((c.file, c.line, f\"registration of singleton '{c.singleton}'\"),)\nownlang/ownir.py:2522: return ()\nownlang/ownir.py:2531: return (c.cached_file, c.cached_line)\nownlang/ownir.py:2532: return (c.file, c.line)\nownlang/ownir.py:2540: return ((c.file, c.line, f\"registration of singleton '{c.singleton}'\"),)\nownlang/ownir.py:2541: return ()\nownlang/ownir.py:2549: return ()\nownlang/ownir.py:2550: return tuple(\nownlang/ownir.py:2561: return []\nownlang/ownir.py:2651: # and is promoted to application lifetime (the captive returns, hidden behind the API that\nownlang/ownir.py:2662: return out\nownlang/ownir.py:2671: return []\nownlang/ownir.py:2723: return out\nownlang/ownir.py:2736: return out\nownlang/ownir.py:2758: return out\n","/bin/bash -lc 'cat AGENTS.md && git diff --stat && git diff -- sandboy/Cargo.lock | head -50 && rg -n \"untracked|OWN051|maybe|forward_targets|early-return|return\" ownlang/ownir.py tests/test_ownir.py docs/notes/interprocedural-tz.md'",[785],"61643",{"_472":786,"_93":486},"cat AGENTS.md && git diff --stat && git diff -- sandboy/Cargo.lock | head -50 && rg -n \"untracked|OWN051|maybe|forward_targets|early-return|return\" ownlang/ownir.py tests/test_ownir.py docs/notes/interprocedural-tz.md",{"_428":788,"_409":410,"_430":416},{"_489":789,"_463":777,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\":\"cat AGENTS.md && git diff --stat && git diff -- sandboy/Cargo.lock | head -50 && rg -n \\\"untracked|OWN051|maybe|forward_targets|early-return|return\\\" ownlang/ownir.py tests/test_ownir.py docs/notes/interprocedural-tz.md\",\"workdir\":\"/workspace/Own.NET\",\"yield_time_ms\":1000,\"max_output_tokens\":12000}",{"_428":791,"_409":410,"_430":416},{"_463":792,"_42":-5,"_434":-5,"_465":793,"_93":467},"call_cFC7O1YrWp3i6qnnRBOLBWq6","Chunk ID: 7182eb\nWall time: 0.0000 seconds\nProcess exited with code 0\nOriginal token count: 171\nOutput:\n/workspace/Own.NET\n../Own.NET/AGENTS.md\n../Own.NET/.roo/rules-code/AGENTS.md\n../Own.NET/.roo/rules-architect/AGENTS.md\n../Own.NET/.roo/rules-debug/AGENTS.md\n../Own.NET/.roo/rules-ask/AGENTS.md\n?? sandboy/Cargo.lock\n4177327 spec: Inference.md — normative spec of the interprocedural ownership layer (roadmap stage 0)\nf9e4f04 feat(d5): OWN051 + real optimistic silence — untrack a local at a may/unknown call (TZ D6)\nc6262c0 feat(d5): `summaries` verb — deterministic MOS dump (roadmap stage 1, parity surface)\n52b9c03 docs(d5): mark the producer-less adopt/return path kinds RESERVED (TZ D3)\n1dd9a1f fix(d5): stop serializing the unproduced `escapes` axis in MOS to_dict (TZ D2)\n",{"_428":795,"_409":410,"_430":416},{"_470":796,"_472":797,"_474":798,"_476":477,"_414":32,"_478":32,"_42":792,"_479":799,"_481":482,"_421":114,"_93":483},"/workspace/Own.NET\n../Own.NET/AGENTS.md\n../Own.NET/.roo/rules-code/AGENTS.md\n../Own.NET/.roo/rules-architect/AGENTS.md\n../Own.NET/.roo/rules-debug/AGENTS.md\n../Own.NET/.roo/rules-ask/AGENTS.md\n?? sandboy/Cargo.lock\n4177327 spec: Inference.md — normative spec of the interprocedural ownership layer (roadmap stage 0)\nf9e4f04 feat(d5): OWN051 + real optimistic silence — untrack a local at a may/unknown call (TZ D6)\nc6262c0 feat(d5): `summaries` verb — deterministic MOS dump (roadmap stage 1, parity surface)\n52b9c03 docs(d5): mark the producer-less adopt/return path kinds RESERVED (TZ D3)\n1dd9a1f fix(d5): stop serializing the unproduced `escapes` axis in MOS to_dict (TZ D2)\n","/bin/bash -lc 'pwd && find .. -name AGENTS.md -print && git status --short && git log --oneline -5'",[800],"3165",{"_472":801,"_93":486},"pwd && find .. -name AGENTS.md -print && git status --short && git log --oneline -5",{"_428":803,"_409":410,"_430":416},{"_489":804,"_463":792,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},"{\"cmd\": \"pwd && find .. -name AGENTS.md -print && git status --short && git log --oneline -5\", \"workdir\": \"/workspace/Own.NET\", \"yield_time_ms\": 1000, \"max_output_tokens\": 6000}",{"_428":806,"_409":410,"_430":416},{"_431":-5,"_448":807,"_42":-5,"_434":-5,"_450":808,"_93":452},"gAAAAABqTeUIUaDW7TVqm07zHtf9H28PFBFZrQRA7Igclm5xJMT6930YvNxmzPFXl0geX2Wx0Dddu0wvBAlE-RWWGFQ82ieUId4nHDHmhxnshNd8ANDfz5Kdant2rmNfvfOLoARADYerhDn8lBSEQgZEM7ttg_R9htPmNCNmoqT18Q8U1-wCMKE6CroWtMrVP3UW39OOyz8WfBYNcfTgR6lEjkXTLjPV6g4zsGBx3fQg0f1OfZWRT_JtfJlwZ60se5ke0G6rXpetQUUOVxs6kciJN_pIqokE2tStCZMkolyS81euPB5NbvDyJP1SXrh8g9cpnAUd4JJd14EfX3L01tR0LO6UhmIfaEqnnCa4ZIsLRS1TGgQULec_cEk_BNOlyL38E5Xy747tq6D2-SB4kJp5uULt5CJQUO-QXLwZyI_ZPG0wzfIt-OgkGOsgeeV0mhymbeVRzPh_9AC5e_bojBDZWpd_u-XFRdYI2I9fx5ebL8o-s2I6ifGihElMarkQjeKy6pwaiwfD2l9S16E1wdZzRRfVylKelapHIrGGYDZeK7IK9v4QOK6RwLYmYt8AF3qBr2sDKqzxItBVApqAKrHlb8nd_v6QsBhRmd8PK3C9t4rCrYbx2A2uONNolKIH_Qzc0VITDAfgEqzedyAi8j6sZvohUXa-FWTWPlO0Awd_lmiHDDNlW1Qz-TAHEBzAN-RSQC4BVX0bp2RAplFJtMPbxJBLshok-uvq8rMmU0SlxqSn7_BTnzpYUiU2CZFHG4OHSrBpx-tH7egShPGSpwtxHaXAXUO-NZW5kA0xqKW7kl_4Otm5dICdaGseEGHfkVcJOmpO5zERfnKs40SwVrdFX_UmkWOKclbXCWr63kEGsQ0Y5OEbtSLOJ-u_87JQTWyB1FOxRvR_hPMpbI_GGSmVgBUhSDjPmOw34s8SbFtDd5bEaaOocyrF-ifMdsFKsdgiSb-OgA1_cKyaylOsRqEio3v4lQRE_nT_SF0ZWndtIOvKolkGJiVsvW1DwfREDCYkhBfyIaA93clbgfBKPu_t0JrtrTol4rW7jWJ5bdvyNAG3SQJv0X0PF6aOxYRSJ04aiu3apMxbJxxAQBqA6bL49lE4OvYDN1cops38uxbmWdeLNRTPlcBtBsgULMcIw97ASSwmVYHxSEb-honknWrUamAZwoxxoD6CRDSOUIcoIAHKUCoL49c=",[809],{"_46":810,"_93":455},"**Checking repository status**\n\nI’m figuring out if we need an answer from the trigger. Maybe I should inspect the repository status. The developer mentioned committing changes and making a pull request if there are any changes. But, hmm, it seems like there might not be any changes needed after all. I should verify the comments and look through the commands to ensure everything is in order. Let's keep this organized!",{"_428":812,"_409":410,"_430":416},{"_431":813,"_42":814,"_450":815,"_93":452},[],"rs_0fe8a768663ad02f016a4de506178c81988a6dea53fd2afc88",[810],{"_428":817,"_409":410,"_430":416},{"_818":-5,"_431":819,"_42":820,"_93":821},"clientId",[822],"b0e1bafa-1e08-45ce-9a65-a1d7a4ecbcfd","userMessage",{"_46":823,"_824":825,"_93":46},"\nYou are Codex, assisting with follow-up actions on a GitHub pull request.\n\nInput blocks\n------------\n… # The comment or event that invoked you\n… # PR metadata (title, branches, SHAs, status, etc.)\n… # Comments / Reviews for the PR\n\nPossible triggers\n• A user mentions you (@codex)\n• A reviewer requests changes\n• An automated or internal system asks you to review / update\n\nGuidelines\n1. Read the block first and treat it as the primary intent.\n2. Always consult and to interpret and validate the trigger; use only context that materially affects your decision and ignore the rest.\n3. If the trigger comes from a comment thread, the first block will be combined earlier comments from the same thread, clearly indicated with `Comments in the same thread`.\n4. Remaining blocks are in chronological order, oldest first, one block per comment.\n5. When the trigger relates to CI/build status (e.g., “help me fix CI”), incorporate CI/status details found in as supporting context.\n6. If code change is needed, generate a **new** PR with the requested changes. The PR title and message should summarize the changes **on top** of the original pull request.\n@codex is all good{\"title\":\"docs: interprocedural roadmap — staged path from D5 today to 'proper interprocedural'\",\"body\":\"Consolidates the scattered interprocedural state (d5 note's shipped\\nslices, tech-debt register §3 prerequisite, deferred trackers #122/#146,\\nthe arity residual of d5 §10 q2) into one sequenced roadmap:\\n\\n- stage 0: spec the verdict-determining bridge inference + golden facts\\n (the P-022 hard prerequisite, unlocks everything else)\\n- stage 1: observability first — OWN051 advisory + MOS summary dump\\n- stage 2: arity/signature key on call ops (additive optional field,\\n no OWNIR_VERSION bump) to stop conservative overload merging\\n- stage 3: aliasOf:i through return + out/ref fresh (Dapper/Polly\\n become oracle anchors with a recorded reason)\\n- stage 4: publisher provenance (#146) on top of stage 3's skeletons\\n- stage 5: exclusivity axis (#122) strictly on its consumer trigger\\n- stage 6: Tier C annotations + pessimistic mode\\n\\nIncludes a definition of done, a dependency graph, on-record rejections\\n(context sensitivity, IL decompilation, frontend inference), and a\\nreading path into ownership.py/ownir.py for newcomers. Cross-linked\\nfrom the d5 note's §10 open questions.\\n\\nCo-Authored-By: Claude \\nClaude-Session: https://claude.ai/code/session_01LBmDyLWHqoQUGqiydSxroi\\n\\n\\n## Summary by CodeRabbit\\n\\n* **New Features**\\n * Added a `summaries` CLI command to print deterministic solved method ownership summaries from an OwnIR facts file.\\n * Added a public `dump_summaries` API to emit summaries plus degradation/unresolved details.\\n* **Diagnostics**\\n * Introduced new advisory codes **OWN051** (unverified interprocedural ownership at call sites) and **OWN052** (interprocedural summary inference failures).\\n* **Bug Fixes**\\n * Improved release/consume precision by considering all normal-return paths.\\n * Ensured deterministic summary output location and byte-identical JSON emission.\\n* **Documentation**\\n * Expanded interprocedural roadmap and added/updated the interprocedural inference specification, including deferred sequencing cross-references.\\n* **Tests**\\n * Updated conformance and regression checks for new advisories and deterministic summaries.\\n\",\"base_ref\":\"5ea68daa526b3e814fee1c63cd2d4f93319c59ea\",\"head_ref\":\"4177327552ded5f02296b310602c2d93608398c0\",\"merge_commit_sha\":null,\"type\":\"pull_request_info\"}{\"type\":\"pull_request_comment\",\"body\":\"\\n\\n\\n[![Review Change Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/PhysShell/Own.NET/pull/177?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\\n\\n\\nNo actionable comments were generated in the recent review. 🎉\\n\\n\\nℹ️ Recent review info \\n\\n\\n⚙️ Run configuration \\n\\n**Configuration used**: Path: .coderabbit.yaml\\n\\n**Review profile**: CHILL\\n\\n**Plan**: Pro Plus\\n\\n**Run ID**: `9b0016cf-96a1-48dc-a55f-1f74dcd9d44c`\\n\\n \\n\\n\\n📥 Commits \\n\\nReviewing files that changed from the base of the PR and between d25a8b425c4542baf720755ce93d55c713e519a3 and 4177327552ded5f02296b310602c2d93608398c0.\\n\\n \\n\\n\\n📒 Files selected for processing (11) \\n\\n* `docs/notes/interprocedural-roadmap.md`\\n* `docs/notes/interprocedural-tz.md`\\n* `ownlang/__main__.py`\\n* `ownlang/diagnostics.py`\\n* `ownlang/ownership.py`\\n* `ownlang/ownir.py`\\n* `spec/Diagnostics.md`\\n* `spec/Inference.md`\\n* `spec/README.md`\\n* `tests/test_ownership.py`\\n* `tests/test_ownir.py`\\n\\n \\n\\n\\n✅ Files skipped from review due to trivial changes (5) \\n\\n* spec/Diagnostics.md\\n* tests/test_ownership.py\\n* spec/README.md\\n* docs/notes/interprocedural-tz.md\\n* docs/notes/interprocedural-roadmap.md\\n\\n \\n\\n \\n\\n---\\n\\n\\n\\n📝 Walkthrough \\n\\n## Walkthrough\\n\\nThis PR adds interprocedural ownership-transfer documentation, a new summaries CLI command, MOS-driven advisory reporting, and updated diagnostics, serialization, and tests for the bridge.\\n\\n### Changes\\n\\n**Interprocedural ownership layer**\\n\\n|Layer / File(s)|Summary|\\n|---|---|\\n|**Roadmap intro and sequencing** `docs/notes/d5-ownership-transfer.md`, `docs/notes/interprocedural-roadmap.md`|Adds the roadmap framing, target-state criteria, current transfer directions, deferred-item triggers, and the D5 cross-reference to the roadmap.|\\n|**Roadmap stages and constraints** `docs/notes/interprocedural-roadmap.md`|Adds the Rust-port mapping, stage plan, ordering/dependency notes, excluded approaches, and reading guide for the interprocedural roadmap.|\\n|**Normative interprocedural specification** `docs/notes/interprocedural-tz.md`, `spec/Inference.md`, `spec/Diagnostics.md`, `spec/README.md`|Defines the interprocedural ownership inference specification, divergence resolutions, invariants, Rust-port requirements, diagnostics coverage, and the conformance checklist.|\\n|**Ownership summary shape** `ownlang/ownership.py`, `ownlang/diagnostics.py`, `tests/test_ownership.py`|Updates ownership-action documentation, reserves the escapes axis, removes escapes from serialized summaries, and registers the new diagnostic codes and explanations.|\\n|**MOS bridge and lowering** `ownlang/ownir.py`|Extends MOS solving observability, adds advisory capture for unverified transfers, propagates untracked lowering state, stabilizes summary generation, and introduces `dump_summaries`.|\\n|**CLI, diagnostics, and tests** `ownlang/__main__.py`, `tests/test_ownir.py`|Adds the summaries CLI command, broadens diagnostic catalog entries, and updates tests for advisory reporting, degraded solving, deterministic dumps, and escapes omission.|\\n\\n**Estimated code review effort:** 5 (Critical) | ~120 minutes\\n\\n**Possibly related PRs**\\n- [PhysShell/Own.NET#14](https://github.com/PhysShell/Own.NET/pull/14): Changes the same OwnIR-to-core bridge path that this PR extends with MOS-solving notes and advisories.\\n- [PhysShell/Own.NET#111](https://github.com/PhysShell/Own.NET/pull/111): Shares the same D5 interprocedural ownership-transfer work and summary serialization surface.\\n- [PhysShell/Own.NET#172](https://github.com/PhysShell/Own.NET/pull/172): Overlaps on diagnostic registration and OwnIR bridge failure behavior for the new interprocedural advisory codes.\\n\\n \\n\\n\\n\\n\\n\\n🚥 Pre-merge checks | ✅ 3 | ❌ 1 \\n\\n### ❌ Failed checks (1 warning)\\n\\n| Check name | Status | Explanation | Resolution |\\n| :---------------: | :--------- | :------------------------------------------------------------------------------------------------------------------------------------ | :---------------------------------------------------------------------------------------------------------------------------------- |\\n| Description check | ⚠️ Warning | The description is substantive, but it does not follow the required template sections and is missing the checklist/test/issue fields. | Add the required headings: Что и зачем, Тип изменения, Как проверено, Связанные issue, and Чеклист, and fill in the relevant items. |\\n\\n\\n✅ Passed checks (3 passed) \\n\\n| Check name | Status | Explanation |\\n| :------------------------: | :------- | :---------------------------------------------------------------------------------------------- |\\n| Title check | ✅ Passed | The title clearly matches the PR’s main change: a staged roadmap for the interprocedural layer. |\\n| Linked Issues check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |\\n| Out of Scope Changes check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |\\n\\n \\n\\n \\n\\n\\n\\n\\n\\n✨ Finishing Touches \\n\\n\\n📝 Generate docstrings \\n\\n- [ ] Create stacked PR\\n- [ ] Commit on current branch\\n\\n \\n\\n🧪 Generate unit tests (beta) \\n\\n- [ ] Create PR with unit tests\\n- [ ] Commit unit tests in branch `claude/project-issues-review-arws0n`\\n\\n \\n\\n⚔️ Resolve merge conflicts \\n\\n- [ ] Resolve merge conflict in branch `claude/project-issues-review-arws0n`\\n\\n \\n\\n \\n\\n\\n\\n\\n---\\n\\nThanks for using [CodeRabbit](https://coderabbit.ai?utm_source=oss&utm_medium=github&utm_campaign=PhysShell/Own.NET&utm_content=177)! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.\\n\\n\\n❤️ Share \\n\\n- [X](https://twitter.com/intent/tweet?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A&url=https%3A//coderabbit.ai)\\n- [Mastodon](https://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai)\\n- [Reddit](https://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai)\\n- [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code)\\n\\n \\n\\n\\n_{Comment `@coderabbitai help` to get the list of available commands.}\\n\\n\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Treat early-return-skipped forwards as partial**\\n\\nFor a body like `if (c) return; Sink(x)`, the only forward is still top-level, so `_forward_targets(..., recurse=False)` records exactly one edge and this rule produces only `[forward]`, which solves to `must`; I verified that this makes the callee leak its parameter and flags the caller's protective `Dispose()` as OWN002 even though one normal path never transfers ownership. Since this TZ is the Rust-port/parity source, please either add this as a D-class defect or require early-return paths to contribute a `borrow` before calling the shape “unconditional”.\\n\\nUseful? React with 👍 / 👎.\",\"path\":\"docs/notes/interprocedural-tz.md\",\"side\":\"RIGHT\",\"line\":58}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nHere are some automated review suggestions for this pull request.\\n\\n**Reviewed commit:** `d25a8b425c`\\n \\n\\n ℹ️ About Codex in GitHub \\n \\n\\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\\n- Open a pull request for review\\n- Mark a draft as ready\\n- Comment \\\"@codex review\\\".\\n\\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\\n\\n\\n\\n\\nCodex can also answer questions or update the PR. Try commenting \\\"@codex address that feedback\\\".\\n \\n \",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex review and propose changes\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"**_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Keep tracking locals until the unverified call**\\n\\nWhen a variable is passed to a `may`/`unknown` callee anywhere in the function, `untracked` is applied to the whole body, so this branch skips the original acquire instead of only stopping tracking at the call site. In cases like `acquire s; release s; use s; maybe(s)`, or an `if` where only one branch calls `maybe(s)`, the pre-call use-after-release or the no-call branch leak is suppressed and only OWN051 remains, even though the advisory says the local is “not checked past this call.”\\n\\nUseful? React with 👍 / 👎.\",\"path\":\"ownlang/ownir.py\",\"side\":\"RIGHT\",\"line\":1932}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nHere are some automated review suggestions for this pull request.\\n\\n**Reviewed commit:** `f9e4f04df2`\\n \\n\\n ℹ️ About Codex in GitHub \\n \\n\\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\\n- Open a pull request for review\\n- Mark a draft as ready\\n- Comment \\\"@codex review\\\".\\n\\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\\n\\n\\n\\n\\nCodex can also answer questions or update the PR. Try commenting \\\"@codex address that feedback\\\".\\n \\n \",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex is all good\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"You have reached your Codex usage limits. You can see your limits in the [Codex usage dashboard](https://chatgpt.com/codex/cloud/settings/usage).\",\"path\":null,\"side\":null,\"line\":null}","text_elements",[],{"_428":827,"_409":410,"_430":416},{"_431":828,"_433":-5,"_42":-5,"_434":-5,"_435":-5,"_97":319,"_93":437},[829],{"_46":823,"_93":830},"input_text",{"_428":832,"_409":410,"_430":416},{"_431":833,"_433":-5,"_42":-5,"_434":-5,"_435":-5,"_97":319,"_93":437},[834,835],{"_46":837,"_93":830},{"_46":836,"_93":830},"\n /workspace/Own.NET\n bash\n 2026-07-08\n Etc/UTC\n","# AGENTS.md instructions for /workspace/Own.NET\n\n\n# AGENTS.md\n\nThis file provides guidance to agents when working with code in this repository.\n\n- Use the repository root for core commands: `python -m ownlang check|emit|cfg|report `; `emit` deliberately refuses to generate C# when any diagnostic exists.\n- Full zero-dependency regression is `python tests/run_tests.py`; single tests are standalone scripts such as `python tests/test_ownir.py`, not pytest tests.\n- `tests/run_tests.py` imports the other test files and runs the codegen fuzzer with `(iterations=3000, seed=1234)`; run `python tests/test_codegen_props.py ` when changing codegen invariants.\n- Lint gate is exactly `ruff check .` plus `mypy`; mypy is strict only for `ownlang`, while tests/fuzzers stay dynamic and are covered by ruff.\n- Ruff intentionally omits SIM because branch-collapsing fights the commented checker/control-flow structure; do not simplify those branches just for style.\n- The core pipeline is parser -> CFG resolver/lowering -> ownership/lifetime/effect/DI analyses -> diagnostics; Roslyn and OwnTS frontends emit facts only, and the Python core owns all verdicts.\n- Unknown OwnLang calls are hard errors: add local/`extern fn` signatures with ownership effects instead of letting calls tunnel through opaque host code.\n- Adding AST/CFG variants normally requires updating `assert_never` dispatch sites in `ownlang/cfg.py`, `ownlang/analysis.py`, and `ownlang/codegen.py`.\n- Codegen has two intentional modes: straight-line, laminar lifetimes get try/finally hoisting; branchy/transferring code emits releases inline. Do not add runtime “released?” flags to paper over static mistakes.\n- OwnIR schema is versioned in `ownlang/ownir.py`; additive optional fields like resource/type metadata are tolerated, incompatible vocabulary changes must fail loudly.\n- For C# repo scans, `scripts/own-check.sh` is the Action/bash surface and defaults to `--flow-locals`; on Windows use `scripts\\own-check.ps1` rather than requiring bash.\n- The Roslyn extractor auto-adds built `bin/` refs for `.csproj`/`.sln` inputs unless `--no-project-refs`; unresolved external events become advisory OWN050, not guessed leaks.\n- `audit/` must stay decoupled from `ownlang` and consumes `own-check` only through its CLI/SARIF; `audit/README.md` says active audit development currently lives in the separate OwnAudit repo.\n- Existing Cursor guidance: if CodeGraph MCP tools are available, prefer them for structural symbol/caller/impact questions; use text search for literal strings and comments.\n\n",{"_428":839,"_409":410,"_430":416},{"_431":840,"_433":-5,"_42":-5,"_434":-5,"_435":-5,"_97":841,"_93":437},[842,843],"developer",{"_46":845,"_93":830},{"_46":844,"_93":830},"\n## Skills\nA skill is a set of local instructions to follow that is stored in a `SKILL.md` file. Below is the list of skills that can be used. Each entry includes a name, description, and file path so you can open the source for full instructions when using a specific skill.\n### Available skills\n- imagegen: Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or derive visual variants from references, and the output should be a bitmap asset rather than repo-native code or vector. Do not use when the task is better handled by editing existing SVG/vector/code-native assets, extending an established icon or logo system, or building the visual directly in HTML/CSS/canvas. (file: /opt/codex/skills/.system/imagegen/SKILL.md)\n- openai-docs: Use when the user asks how to build with OpenAI products or APIs and needs up-to-date official documentation with citations, help choosing the latest model for a use case, or model upgrade and prompt-upgrade guidance; prioritize OpenAI docs MCP tools, use bundled references only as helper context, and restrict any fallback browsing to official OpenAI domains. (file: /opt/codex/skills/.system/openai-docs/SKILL.md)\n- plugin-creator: Create and scaffold plugin directories for Codex with a required `.codex-plugin/plugin.json`, optional plugin folders/files, and baseline placeholders you can edit before publishing or testing. Use when Codex needs to create a new local plugin, add optional plugin structure, or generate or update repo-root `.agents/plugins/marketplace.json` entries for plugin ordering and availability metadata. (file: /opt/codex/skills/.system/plugin-creator/SKILL.md)\n- skill-creator: Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Codex's capabilities with specialized knowledge, workflows, or tool integrations. (file: /opt/codex/skills/.system/skill-creator/SKILL.md)\n- skill-installer: Install Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list installable skills, install a curated skill, or install a skill from another repo (including private repos). (file: /opt/codex/skills/.system/skill-installer/SKILL.md)\n### How to use skills\n- Discovery: The list above is the skills available in this session (name + description + file path). Skill bodies live on disk at the listed paths.\n- Trigger rules: If the user names a skill (with `$SkillName` or plain text) OR the task clearly matches a skill's description shown above, you must use that skill for that turn. Multiple mentions mean use them all. Do not carry skills across turns unless re-mentioned.\n- Missing/blocked: If a named skill isn't in the list or the path can't be read, say so briefly and continue with the best fallback.\n- How to use a skill (progressive disclosure):\n 1) After deciding to use a skill, open its `SKILL.md`. Read only enough to follow the workflow.\n 2) When `SKILL.md` references relative paths (e.g., `scripts/foo.py`), resolve them relative to the skill directory listed above first, and only consider other paths if needed.\n 3) If `SKILL.md` points to extra folders such as `references/`, load only the specific files needed for the request; don't bulk-load everything.\n 4) If `scripts/` exist, prefer running or patching them instead of retyping large code blocks.\n 5) If `assets/` or templates exist, reuse them instead of recreating from scratch.\n- Coordination and sequencing:\n - If multiple skills apply, choose the minimal set that covers the request and state the order you'll use them.\n - Announce which skill(s) you're using and why (one short line). If you skip an obvious skill, say why.\n- Context hygiene:\n - Keep context small: summarize long sections instead of pasting them; only load extra files when needed.\n - Avoid deep reference-chasing: prefer opening only files directly linked from `SKILL.md` unless you're blocked.\n - When variants exist (frameworks, providers, domains), pick only the relevant reference file(s) and note that choice.\n- Safety and fallback: If a skill can't be applied cleanly (missing files, unclear instructions), state the issue, pick the next-best approach, and continue.\n","\nFilesystem sandboxing defines which files can be read or written. `sandbox_mode` is `danger-full-access`: No filesystem sandboxing - all commands are permitted. Network access is enabled.\nApproval policy is currently never. Do not provide the `sandbox_permissions` for any reason, commands will be rejected.\n","turn/started",{"_409":410,"_88":848},{"_104":-5,"_42":416,"_417":849,"_419":420,"_421":850},[],"inProgress",{"_421":852,"_409":410},{"_853":854,"_93":855},"activeFlags",[],"active","thread/started",{"_858":859},"thread",{"_860":-5,"_861":-5,"_862":863,"_864":420,"_476":477,"_865":15,"_866":-5,"_867":-5,"_868":-5,"_869":870,"_42":410,"_871":872,"_181":-5,"_873":-5,"_162":874,"_875":195,"_876":-5,"_481":877,"_421":878,"_879":-5,"_78":880,"_881":420},"agentNickname","agentRole","cliVersion","0.128.0","createdAt","ephemeral","extra","forkedFromId","gitInfo","historyMode","legacy","modelProvider","openai","parentThreadId","/opt/codex/sessions/2026/07/08/rollout-2026-07-08T05-49-53-019f4046-8f15-75a0-a194-7a2193f7daca.jsonl","preview","recencyAt","vscode",{"_93":425},"threadSource",[],"updatedAt",[],"messages",[885],{"_42":886,"_887":888,"_889":890,"_891":890,"_431":892,"_421":893,"_433":-5,"_894":32,"_895":896,"_897":898,"_899":-5},"3fc515e9-26d3-4b4e-826e-de4a770028de","author",{"_97":319,"_181":-5,"_895":908},"create_time",1783489793.229704,"update_time",{"_904":46,"_905":906},"finished_successfully","weight","metadata",{"_900":901},"recipient","all","channel","l1239dk1",{"_902":903},"inline_comments",[],"content_type","parts",[907],"@codex is all good\ndocs: interprocedural roadmap — staged path from D5 today to 'proper interprocedural'\n\nConsolidates the scattered interprocedural state (d5 note's shipped\nslices, tech-debt register §3 prerequisite, deferred trackers #122/#146,\nthe arity residual of d5 §10 q2) into one sequenced roadmap:\n\n- stage 0: spec the verdict-determining bridge inference + golden facts\n (the P-022 hard prerequisite, unlocks everything else)\n- stage 1: observability first — OWN051 advisory + MOS summary dump\n- stage 2: arity/signature key on call ops (additive optional field,\n no OWNIR_VERSION bump) to stop conservative overload merging\n- stage 3: aliasOf:i through return + out/ref fresh (Dapper/Polly\n become oracle anchors with a recorded reason)\n- stage 4: publisher provenance (#146) on top of stage 3's skeletons\n- stage 5: exclusivity axis (#122) strictly on its consumer trigger\n- stage 6: Tier C annotations + pessimistic mode\n\nIncludes a definition of done, a dependency graph, on-record rejections\n(context sensitivity, IL decompilation, frontend inference), and a\nreading path into ownership.py/ownir.py for newcomers. Cross-linked\nfrom the d5 note's §10 open questions.\n\nCo-Authored-By: Claude \nClaude-Session: https://claude.ai/code/session_01LBmDyLWHqoQUGqiydSxroi\n\n\n## Summary by CodeRabbit\n\n* **New Features**\n * Added a `summaries` CLI command to print deterministic solved method ownership summaries from an OwnIR facts file.\n * Added a public `dump_summaries` API to emit summaries plus degradation/unresolved details.\n* **Diagnostics**\n * Introduced new advisory codes **OWN051** (unverified interprocedural ownership at call sites) and **OWN052** (interprocedural summary inference failures).\n* **Bug Fixes**\n * Improved release/consume precision by considering all normal-return paths.\n * Ensured deterministic summary output location and byte-identical JSON emission.\n* **Documentation**\n * Expanded interprocedural roadmap and added/updated the interprocedural inference specification, including deferred sequencing cross-references.\n* **Tests**\n * Updated conformance and regression checks for new advisories and deterministic summaries.\n\n\n\n\n[![Review Change Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/PhysShell/Own.NET/pull/177?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n\nNo actionable comments were generated in the recent review. 🎉\n\n\nℹ️ Recent review info \n\n\n⚙️ Run configuration \n\n**Configuration used**: Path: .coderabbit.yaml\n\n**Review profile**: CHILL\n\n**Plan**: Pro Plus\n\n**Run ID**: `9b0016cf-96a1-48dc-a55f-1f74dcd9d44c`\n\n \n\n\n📥 Commits \n\nReviewing files that changed from the base of the PR and between d25a8b425c4542baf720755ce93d55c713e519a3 and 4177327552ded5f02296b310602c2d93608398c0.\n\n \n\n\n📒 Files selected for processing (11) \n\n* `docs/notes/interprocedural-roadmap.md`\n* `docs/notes/interprocedural-tz.md`\n* `ownlang/__main__.py`\n* `ownlang/diagnostics.py`\n* `ownlang/ownership.py`\n* `ownlang/ownir.py`\n* `spec/Diagnostics.md`\n* `spec/Inference.md`\n* `spec/README.md`\n* `tests/test_ownership.py`\n* `tests/test_ownir.py`\n\n \n\n\n✅ Files skipped from review due to trivial changes (5) \n\n* spec/Diagnostics.md\n* tests/test_ownership.py\n* spec/README.md\n* docs/notes/interprocedural-tz.md\n* docs/notes/interprocedural-roadmap.md\n\n \n\n \n\n---\n\n\n\n📝 Walkthrough \n\n## Walkthrough\n\nThis PR adds interprocedural ownership-transfer documentation, a new summaries CLI command, MOS-driven advisory reporting, and updated diagnostics, serialization, and tests for the bridge.\n\n### Changes\n\n**Interprocedural ownership layer**\n\n|Layer / File(s)|Summary|\n|---|---|\n|**Roadmap intro and sequencing** `docs/notes/d5-ownership-transfer.md`, `docs/notes/interprocedural-roadmap.md`|Adds the roadmap framing, target-state criteria, current transfer directions, deferred-item triggers, and the D5 cross-reference to the roadmap.|\n|**Roadmap stages and constraints** `docs/notes/interprocedural-roadmap.md`|Adds the Rust-port mapping, stage plan, ordering/dependency notes, excluded approaches, and reading guide for the interprocedural roadmap.|\n|**Normative interprocedural specification** `docs/notes/interprocedural-tz.md`, `spec/Inference.md`, `spec/Diagnostics.md`, `spec/README.md`|Defines the interprocedural ownership inference specification, divergence resolutions, invariants, Rust-port requirements, diagnostics coverage, and the conformance checklist.|\n|**Ownership summary shape** `ownlang/ownership.py`, `ownlang/diagnostics.py`, `tests/test_ownership.py`|Updates ownership-action documentation, reserves the escapes axis, removes escapes from serialized summaries, and registers the new diagnostic codes and explanations.|\n|**MOS bridge and lowering** `ownlang/ownir.py`|Extends MOS solving observability, adds advisory capture for unverified transfers, propagates untracked lowering state, stabilizes summary generation, and introduces `dump_summaries`.|\n|**CLI, diagnostics, and tests** `ownlang/__main__.py`, `tests/test_ownir.py`|Adds the summaries CLI command, broadens diagnostic catalog entries, and updates tests for advisory reporting, degraded solving, deterministic dumps, and escapes omission.|\n\n**Estimated code review effort:** 5 (Critical) | ~120 minutes\n\n**Possibly related PRs**\n- [PhysShell/Own.NET#14](https://github.com/PhysShell/Own.NET/pull/14): Changes the same OwnIR-to-core bridge path that this PR extends with MOS-solving notes and advisories.\n- [PhysShell/Own.NET#111](https://github.com/PhysShell/Own.NET/pull/111): Shares the same D5 interprocedural ownership-transfer work and summary serialization surface.\n- [PhysShell/Own.NET#172](https://github.com/PhysShell/Own.NET/pull/172): Overlaps on diagnostic registration and OwnIR bridge failure behavior for the new interprocedural advisory codes.\n\n \n\n\n\n\n\n🚥 Pre-merge checks | ✅ 3 | ❌ 1 \n\n### ❌ Failed checks (1 warning)\n\n| Check name | Status | Explanation | Resolution |\n| :---------------: | :--------- | :------------------------------------------------------------------------------------------------------------------------------------ | :---------------------------------------------------------------------------------------------------------------------------------- |\n| Description check | ⚠️ Warning | The description is substantive, but it does not follow the required template sections and is missing the checklist/test/issue fields. | Add the required headings: Что и зачем, Тип изменения, Как проверено, Связанные issue, and Чеклист, and fill in the relevant items. |\n\n\n✅ Passed checks (3 passed) \n\n| Check name | Status | Explanation |\n| :------------------------: | :------- | :---------------------------------------------------------------------------------------------- |\n| Title check | ✅ Passed | The title clearly matches the PR’s main change: a staged roadmap for the interprocedural layer. |\n| Linked Issues check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |\n| Out of Scope Changes check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |\n\n \n\n \n\n\n\n\n\n✨ Finishing Touches \n\n\n📝 Generate docstrings \n\n- [ ] Create stacked PR\n- [ ] Commit on current branch\n\n \n\n🧪 Generate unit tests (beta) \n\n- [ ] Create PR with unit tests\n- [ ] Commit unit tests in branch `claude/project-issues-review-arws0n`\n\n \n\n⚔️ Resolve merge conflicts \n\n- [ ] Resolve merge conflict in branch `claude/project-issues-review-arws0n`\n\n \n\n \n\n\n\n\n---\n\nThanks for using [CodeRabbit](https://coderabbit.ai?utm_source=oss&utm_medium=github&utm_campaign=PhysShell/Own.NET&utm_content=177)! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.\n\n\n❤️ Share \n\n- [X](https://twitter.com/intent/tweet?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A&url=https%3A//coderabbit.ai)\n- [Mastodon](https://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai)\n- [Reddit](https://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai)\n- [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code)\n\n \n\n\n_{Comment `@coderabbitai help` to get the list of available commands.}\n\n\n**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Treat early-return-skipped forwards as partial**\n\nFor a body like `if (c) return; Sink(x)`, the only forward is still top-level, so `_forward_targets(..., recurse=False)` records exactly one edge and this rule produces only `[forward]`, which solves to `must`; I verified that this makes the callee leak its parameter and flags the caller's protective `Dispose()` as OWN002 even though one normal path never transfers ownership. Since this TZ is the Rust-port/parity source, please either add this as a D-class defect or require early-return paths to contribute a `borrow` before calling the shape “unconditional”.\n\nUseful? React with 👍 / 👎.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\n**Reviewed commit:** `d25a8b425c`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n \n@codex review and propose changes\n**_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Keep tracking locals until the unverified call**\n\nWhen a variable is passed to a `may`/`unknown` callee anywhere in the function, `untracked` is applied to the whole body, so this branch skips the original acquire instead of only stopping tracking at the call site. In cases like `acquire s; release s; use s; maybe(s)`, or an `if` where only one branch calls `maybe(s)`, the pre-call use-after-release or the no-call branch leak is suppressed and only OWN051 remains, even though the advisory says the local is “not checked past this call.”\n\nUseful? React with 👍 / 👎.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\n**Reviewed commit:** `f9e4f04df2`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n \n@codex is all good\nYou have reached your Codex usage limits. You can see your limits in the [Codex usage dashboard](https://chatgpt.com/codex/cloud/settings/usage).",{},"created",1783489881.7088895,"Completing the task","event_type","info",{"_93":437,"_97":94,"_431":3654},{"_93":941,"_942":943},{"_93":917,"_918":524,"_919":920,"_921":922,"_923":-5},"pr","pr_title","pr_message","### Motivation\n- Clean up lint and type-annotation failures introduced by the new summaries CLI / OwnIR bridge so the repository meets the `ruff`/`mypy` gates.\n\n### Description\n- Move `json` and the OwnIR helpers (`OwnIRError`, `dump_summaries`, `load`) into the top-level import block of `ownlang/__main__.py` and remove the local import from `cmd_summaries`, and change the `to_module` annotation in `ownlang/ownir.py` from `list[\"Finding\"]` to `list[Finding]` (use postponed annotations directly).\n\n### Testing\n- Ran `ruff check . --fix` (fixed import ordering) and `mypy` with no remaining errors, `python tests/test_ownir.py` (passed), and `python tests/run_tests.py` (full test suite passed).","output_diff",{"_93":921,"_924":477,"_129":130,"_925":-5,"_318":926,"_927":928,"_929":930,"_931":932,"_933":932,"_934":935,"_936":937},"pre_apply_patch","repo_id","preapply_patch_base_commit_sha","diff --git a/ownlang/__main__.py b/ownlang/__main__.py\nindex 1dcc4ce55e9489007b69a9a07d11d65a74d387e1..5d9b2e231bd8be913a901a7cb637febfcb63a9bb 100644\n--- a/ownlang/__main__.py\n+++ b/ownlang/__main__.py\n@@ -16,64 +16,66 @@ Command-line driver for the OwnLang PoC.\n \n `explain` is the diagnostic catalogue side of the CLI (the `ownsharp explain` the\n roslyn-tools-shaped surface advertises): it prints what a code means, why it fires,\n and how to fix it. It lives in the core, next to the catalogue, because there is one\n checker — the C# extractor emits facts, it does not own the diagnostics.\n \n `--format` selects the finding surface. On `ownir`: `human` (default CLI line),\n `github` (CI annotations on the PR diff), `msbuild` (VS Error List), or `sarif`\n (a SARIF 2.1.0 log — GitHub code scanning, and the cross-tool oracle reads it too).\n On `check` it is `human` (default) or `sarif` — the `.own` flow diagnostics as a\n SARIF log carrying each finding's evidence slice (relatedLocations / codeFlows);\n `github`/`msbuild` are ownir-only (they render a Finding, not a Diagnostic).\n `--severity` (ownir only) picks how the host shows a finding — `error` (default,\n fails a build / red check) or `warning` (advisory). It is a presentation choice;\n the finding is still the core's verdict.\n `--verbosity` (ownir only) is `quiet` (errors only — hide the advisory notes:\n OWN050 \"leakage analysis skipped\", OWN051 \"ownership transfer unverified\",\n OWN052 \"summaries skipped\"), `normal` (default), or `verbose` (also print a\n per-code breakdown).\n \n Exit code is non-zero if any error-level diagnostic was produced.\n \"\"\"\n \n from __future__ import annotations\n \n+import json\n import re\n import sys\n from typing import TYPE_CHECKING\n \n if TYPE_CHECKING:\n from .cfg import Instr\n \n from .analysis import analyze\n from .buffers import validate_policies\n from .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures\n from .codegen import generate\n from .diagnostics import Diagnostic, Severity\n from .lexer import LexError\n from .lifetimes import check_lifetimes\n+from .ownir import OwnIRError, dump_summaries, load\n from .parser import ParseError, parse\n from .report import build_report, render_report\n \n \n def check_module(mod: object) -> list[Diagnostic]:\n \"\"\"Run the full ownership pipeline over an already-parsed module and return\n its diagnostics. This is the AST-level entry to the *one* checker: callers\n that already hold a `Module` (the OwnIR bridge lowers facts straight to one)\n use this instead of re-serialising to source text and re-parsing it.\"\"\"\n rnames = {r.name for r in mod.resources} # type: ignore[attr-defined]\n sigs = collect_signatures(mod) # type: ignore[arg-type]\n pols = collect_policies(mod) # type: ignore[arg-type]\n kinds = collect_kinds(mod) # type: ignore[arg-type]\n diags: list[Diagnostic] = list(validate_policies(pols))\n diags.extend(check_lifetimes(mod)) # type: ignore[arg-type]\n for fn in mod.functions: # type: ignore[attr-defined]\n cfg, d1 = build_cfg(fn, rnames, sigs, pols, kinds)\n d2 = analyze(cfg)\n diags.extend(d1)\n diags.extend(d2)\n diags.sort(key=lambda d: (d.line, d.code))\n return diags\n \n \n def _collect(src: str) -> tuple[list[Diagnostic], object | None]:\n@@ -291,52 +293,50 @@ def cmd_explain(codes: list[str], json_path: str | None) -> int:\n for c in found:\n if c not in all_codes:\n all_codes.append(c)\n if not all_codes:\n print(\"explain: give a code (e.g. OWN001) or --json \", file=sys.stderr)\n return 2\n from .diagnostics import EXPLANATIONS, TITLES\n print(\"\\n\\n\".join(_explain_one(c) for c in all_codes))\n # If every requested code is unknown, that is almost certainly a typo — fail (2)\n # rather than silently succeed. A mix of known + unknown still exits 0.\n if all(c.upper() not in TITLES and c.upper() not in EXPLANATIONS for c in all_codes):\n return 2\n return 0\n \n \n def cmd_summaries(path: str) -> int:\n \"\"\"Dump the solved Method Ownership Summaries (MOS) + the extern-boundary\n log for an OwnIR facts file as one deterministic JSON document on stdout\n (roadmap stage 1). The debugging answer to \"why did this call stay plain /\n consume / fresh?\" — and the frozen parity surface the Rust port of the\n inference layer is diffed against, so its output contract is byte-stable:\n sorted method keys, sorted extern log, fixed field order. Exit code is 0\n even when the solve degraded (the `degraded` field carries the reason —\n this surface reports state, it does not judge); 2 only for unreadable\n facts, like `ownir`.\"\"\"\n- import json\n- from .ownir import OwnIRError, dump_summaries, load\n try:\n doc = dump_summaries(load(path))\n except OwnIRError as e:\n print(f\"{path}: error: {e}\", file=sys.stderr)\n return 2\n print(json.dumps(doc, indent=2, sort_keys=True))\n return 0\n \n \n def cmd_ownir(path: str, fmt: str = \"human\", severity: str = \"error\",\n verbosity: str = \"normal\") -> int:\n \"\"\"Check OwnIR facts (extracted from real C# by the Roslyn frontend) through\n the same core, surfacing findings at their C# locations (P-001). `fmt`\n selects the surface: human (CLI), github (CI annotations), msbuild (VS),\n sarif (SARIF 2.1.0 log);\n `severity` picks how the host shows them (error/warning); `verbosity` is\n `quiet` (errors only — hide the advisory OWN05x notes), `normal` (default), or\n `verbose` (also print a per-code breakdown).\"\"\"\n from .ownir import OwnIRError, build_sarif, check_facts, load, render_finding\n try:\n findings = check_facts(load(path))\n except OwnIRError as e:\n # bad facts / a drifted contract: a clear one-liner, not a traceback.\n print(f\"{path}: error: {e}\", file=sys.stderr)\n return 2\ndiff --git a/ownlang/ownir.py b/ownlang/ownir.py\nindex ce4f42d26a5eaee89f11795c67757a4e3808a07b..84e39485214a0a0398bcd8fe6b67878f5cc09a58 100644\n--- a/ownlang/ownir.py\n+++ b/ownlang/ownir.py\n@@ -761,51 +761,51 @@ def to_own(facts: dict[str, Any]) -> tuple[str, dict[str, dict[str, Any]]]:\n def _prelude_resources() -> list[ResourceDecl]:\n \"\"\"The owned-resource declarations the lowered functions acquire — the AST twin\n of `_PRELUDE`. Members mirror the text prelude; `kind` carries the\n `[resource: ]` tag a finding surfaces.\"\"\"\n return [\n ResourceDecl(\"Subscription\",\n [ResourceMember(\"acquire\", \"Subscribe\", 0),\n ResourceMember(\"release\", \"Dispose\", 0)], 0,\n kind=\"subscription token\"),\n ResourceDecl(\"Timer\",\n [ResourceMember(\"acquire\", \"Start\", 0),\n ResourceMember(\"release\", \"Stop\", 0)], 0, kind=\"timer\"),\n ResourceDecl(\"Disposable\",\n [ResourceMember(\"acquire\", \"New\", 0),\n ResourceMember(\"release\", \"Dispose\", 0)], 0,\n kind=\"disposable field\"),\n ResourceDecl(\"PooledBuffer\",\n [ResourceMember(\"acquire\", \"Rent\", 0),\n ResourceMember(\"release\", \"Return\", 0)], 0,\n kind=\"pooled buffer\"),\n ]\n \n \n def to_module(facts: dict[str, Any],\n notes: list[str] | None = None,\n- advisories: list[\"Finding\"] | None = None,\n+ advisories: list[Finding] | None = None,\n ) -> tuple[Module, dict[str, dict[str, Any]]]:\n \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source\n text and no re-parse (P-016 B0a; the round-trip `to_own` + `parse` has existed\n since P-001). Mirrors `to_own`'s lowering exactly: each owned-resource fact\n becomes `let = acquire ();`, with a `release` iff the\n extractor found a matching teardown. Returns the Module plus the handle->fact\n map; a diagnostic names a handle via its symbol `origin` (`#`,\n cfg.py), which maps straight back to the C# location. `notes`, when given,\n collects coverage-degradation reasons (a failed MOS solve — TZ D5) the caller\n should surface as advisory findings rather than lose; `advisories` collects\n ready-made advisory Findings minted during lowering (OWN051 unverified-transfer\n notes) for the caller to append.\"\"\"\n handles: dict[str, dict[str, Any]] = {}\n functions: list[FnDecl] = []\n gid = 0\n any_capture = False\n di_life = _di_life_map(facts) # DI registrations: service name -> lifetime\n components = facts.get(\"components\", [])\n if not isinstance(components, list):\n raise OwnIRError(\"OwnIR 'components' must be a JSON array\")\n for comp in components:\n if not isinstance(comp, dict):\n raise OwnIRError(\"each OwnIR component must be a JSON object\")\n cname = comp.get(\"name\", f\"Component{gid}\")\n body: list[Stmt] = []\n","external_storage_diff",{"_938":939,"_940":-5},"files_modified",2,"lines_added",3,"lines_removed","commit_message","fix: satisfy lint for summaries bridge","additional_parent_commit_shas",[],"file_id","file_00000000ebc071f5895510c6b2f859f0","ttl","partial_repo_snapshot","files",[944,945],{"_162":3250,"_947":-5,"_948":3251,"_950":-5},{"_162":946,"_947":-5,"_948":949,"_950":-5},"ownlang/ownir.py","contents","line_range_contents",[951],"missing_reason",{"_952":612,"_953":954,"_431":955,"_956":59},"line_range_start","line_range_end",2758,[957,958,195,959,960,961,962,195,963,195,964,965,966,967,968,969,970,971,972,973,974,975,976,977,978,979,195,980,981,982,195,983,984,985,986,987,988,989,990,991,992,993,994,995,996,997,998,999,1000,1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,1011,1012,1013,1014,1015,1016,1017,195,1018,1019,1020,1021,1022,1023,1024,1025,1026,1027,195,1028,1029,1030,195,1031,1032,1033,1034,1035,195,1036,1037,195,1038,1039,1040,1041,1042,1043,1044,1045,957,195,1046,195,1047,1048,1049,1050,195,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1076,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,1095,1096,1097,1076,195,1098,1099,1100,1101,1102,195,195,1103,1104,1105,195,195,1106,1107,1108,1109,195,195,1110,1111,1112,1113,195,195,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1119,1124,1125,1117,1126,1119,1127,1128,1129,1130,1119,1076,195,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,1143,1144,195,1145,1146,1147,1148,1149,1150,1151,1152,1153,195,1154,1155,1156,1157,1158,1159,1160,1161,1162,1163,195,1164,1165,1166,1167,195,1168,1169,1170,1171,1172,1173,1174,1175,1176,1177,1178,1179,1180,1181,1182,1183,1184,1185,1186,1187,1188,1189,1190,1191,1192,1144,1193,1194,1195,1196,1197,1198,1199,1200,1201,195,195,1202,1203,1204,1205,1206,1207,1208,1209,1210,1211,1212,1213,1214,195,195,1215,1216,1217,1218,1219,195,195,1220,1221,1222,1223,1224,1225,1226,1227,1228,1229,1230,1231,1232,1233,1234,1235,1236,1237,1238,1239,1240,1241,1242,1243,1244,1245,1246,1247,1248,195,1249,1250,1251,195,1252,1253,1254,1255,1256,1257,1258,1259,195,1260,1261,1262,1263,1264,1265,1266,1251,195,195,1267,1268,1269,1270,1271,1272,1273,1274,1275,1276,195,195,1277,1278,1279,1280,1281,1282,1076,1283,195,195,1284,1285,1286,1287,1288,1289,1290,1291,1292,1293,1294,195,195,1295,1296,1297,1298,1299,1300,979,1301,1302,1303,1304,1305,1306,1307,1308,1309,1310,1311,1312,1313,979,1314,1315,1316,1317,1318,1319,1320,1035,1321,1322,1323,1324,1325,1326,1327,1328,1329,195,195,1330,1331,1332,1333,1334,1335,195,1336,1337,1338,1339,1340,1341,1342,1343,1344,1035,1345,1346,1347,1348,1349,1350,1351,1352,1353,1354,1355,1356,1357,1358,1359,1360,979,195,195,1361,1362,1363,1364,1365,1366,1367,1368,1369,1370,1371,1372,1373,1374,1375,1376,1377,1378,1379,1380,1381,1382,1383,1384,1385,1386,1387,1388,1389,1390,1391,1392,1393,1394,1395,1396,1397,1398,1399,1400,1401,1394,1402,1403,1404,1405,1394,1406,1407,1408,1409,1410,1411,1394,1412,1413,1414,1415,1416,1417,1418,1419,1420,1421,1422,1423,1424,1425,1426,1427,1428,1429,1430,1431,1432,1433,1434,1435,1436,1437,1438,1439,1440,1441,1442,1443,1444,1445,1446,1447,1448,1449,1450,1451,1452,1453,1454,1455,1456,1421,1457,1458,1459,1460,1461,1462,1463,1464,1465,1466,1453,1454,1455,1467,1421,1468,1458,1469,1470,1471,1472,1473,1474,1475,1476,1428,1477,1478,1479,1480,1481,1482,1483,1484,1485,1486,1487,1488,1489,1490,1491,1492,1493,1494,1495,1496,1497,1498,1499,1500,1501,1502,1503,1504,1505,1506,1507,1508,1509,1510,1511,1512,1513,1514,1515,1394,1516,1517,1518,1394,1519,1520,1521,1394,1522,1523,1329,195,195,1524,1525,1526,195,1527,1528,1529,1530,1531,1532,1533,1534,1535,1536,1537,1538,1539,1540,1541,1542,1543,1544,1545,1546,1547,1548,1549,1550,1551,1552,1553,1554,1555,1556,1557,1558,1559,1560,1561,1562,1563,1564,1558,1565,1566,1567,1568,1569,1570,1571,1572,1573,1574,1575,1576,1577,1578,1579,1580,1581,1582,1583,1584,1558,1585,1586,1587,1588,1589,1590,1591,1592,1593,1594,1595,1596,1597,1598,1599,1600,1601,1602,1577,1603,1604,1605,1606,1607,1608,1609,1610,1611,1612,1613,1614,1615,1616,1617,1618,1619,1620,1621,1622,1623,1624,1625,1626,1627,1628,1629,195,195,1630,1631,1632,1633,1634,1635,1636,1637,1638,1639,1640,1641,1642,1643,1637,1644,1645,1646,1647,1648,1035,195,195,1649,1650,1651,1652,1653,1654,1655,1656,1657,1658,1659,1660,1661,1662,1663,1530,1664,1531,1532,1534,1535,1536,1537,1538,1539,1540,1541,1665,1666,1667,1542,1543,1544,1545,1549,1550,1551,1552,1668,1669,1557,1558,1670,1671,1672,1673,1564,1558,1674,1675,1676,1677,1678,1679,1680,1681,1682,1683,1570,1684,1685,1686,1687,1573,1574,1575,1576,1577,1578,1579,1580,1581,1688,1689,1690,1691,1692,1584,1558,1693,1694,1695,1696,1697,1698,1699,1700,1701,1702,1703,1589,1590,1591,1592,1593,1594,1595,1596,1597,1598,1704,1705,1706,1707,1708,1709,1602,1577,1603,1604,1605,1606,1607,1710,1711,1609,1712,1713,1714,1715,1716,1717,1718,1719,1720,1721,1722,1723,1724,1725,1726,1727,1728,1365,1729,1730,1731,1732,1733,1734,1735,1736,1737,1738,1739,1740,1741,1742,1743,1744,1745,1746,1747,1748,1749,1750,1558,1751,1752,1753,1754,1755,1756,1757,1758,1759,1760,1761,1762,1763,1764,1765,1766,1767,1768,1769,1770,1771,1772,1773,1774,1775,1776,1777,1778,1779,1780,1781,1782,1783,1784,1785,1786,1787,1788,1789,1790,1791,1792,1793,1794,1795,1796,1797,1798,1799,1800,1801,1802,1803,1804,1805,1806,1807,1808,1809,1810,1811,1812,1813,1814,1815,1816,1817,1818,1819,1820,1821,1822,1823,1824,1825,1826,1827,1828,1829,195,195,1830,1831,1832,1833,1834,1835,1836,1837,1838,1839,1840,1841,1842,1843,1844,1845,1846,1847,1848,1849,1850,1851,1852,1214,195,195,1853,1854,1855,1856,1857,195,1858,1859,1860,1861,1862,1863,1864,1865,1866,1867,1868,195,1869,1870,1871,1872,1873,1558,1874,1875,1876,1877,1878,1879,1880,1881,1882,1883,1884,1885,1886,1887,1888,1889,1890,1891,1892,1893,1894,195,1895,1214,195,195,1896,1897,1898,1899,1900,1901,1902,1836,1837,1838,1839,1903,1904,1905,1906,1904,1907,1904,1908,195,195,1909,1910,1911,1912,1835,1901,1868,1836,1837,1838,1839,1913,1914,1842,1843,1844,1915,1916,1849,1917,1214,195,195,1918,1919,1920,1921,1922,1901,1902,1836,1837,1838,1839,1923,1904,1924,1925,1904,1926,1904,1908,195,195,1927,1928,1929,1930,1931,1932,1901,1868,195,1933,1870,1871,1872,1873,1558,1874,1875,1934,1935,1936,1937,1890,1938,1939,1893,1940,195,1941,1214,195,195,1942,1943,1944,195,1945,1946,1947,1948,1949,1950,1951,1952,1953,1954,1955,1956,1957,1958,1959,1960,1961,1962,1963,1964,1965,1966,1967,1968,1969,1970,1971,1972,1973,1974,1975,1976,1977,1978,1979,1980,1981,1982,1983,1984,1985,195,195,1986,1987,1988,1989,1990,1991,1992,1993,1994,1995,1996,1144,195,1997,1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,1076,2013,2014,2015,2016,2017,195,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,2028,2029,195,2030,2031,2032,2033,195,195,2034,2035,2036,2037,2038,2039,2040,2041,2042,2043,2044,2045,2046,2047,2048,2049,2050,2051,2052,2053,2054,2055,2056,2057,2054,2058,2059,2060,2061,2062,2063,2064,2065,2066,2067,2068,2069,2070,2071,2072,2073,2074,2075,2076,2054,2077,2078,2054,1144,2079,2080,2081,195,195,2082,2083,2084,2085,2086,2087,2088,195,195,2089,2090,2091,2092,2093,2094,2095,2096,1902,2097,2098,195,195,2099,2100,2101,2102,2103,2104,2105,2106,195,2107,2108,2109,2110,2111,2112,2113,2096,1902,2114,2115,2116,2117,2118,2119,2120,1902,2121,195,195,2122,2123,2124,2125,2126,1901,2127,1836,1837,1838,1839,2128,2129,2130,2131,2132,2133,2134,2135,2136,2137,2138,2139,2140,2141,2142,195,195,2143,2144,195,2145,2146,2147,2148,2149,2150,2151,2152,2153,1901,2154,1836,1837,1838,1839,2128,2155,2156,2157,2158,2159,1844,2160,2161,2162,2163,2164,2165,2166,2167,2168,1849,2169,2170,2171,2172,2173,2174,2175,2176,2177,195,195,2178,2179,2180,2181,2182,2183,2184,2185,195,195,2186,2187,2188,2189,2190,2191,2192,2193,1901,1868,1836,1837,1838,1839,2194,2195,2131,2196,2197,2198,2199,2200,2201,2139,2202,1214,195,195,2203,2204,2205,2206,2207,2208,2209,2210,2211,195,195,2212,2213,2214,2215,2216,2217,2218,2219,1969,2220,2221,2222,2223,2224,195,195,2225,2226,2227,2228,2229,2230,2231,2232,2233,2234,2235,2236,2237,2238,2239,2240,2241,2242,2243,2244,2245,2246,2247,2248,2249,2250,2251,2252,2253,195,195,2254,2255,2256,2257,2258,2259,2260,2261,195,2262,2263,2264,2265,2266,2267,2268,2269,2270,2271,2272,2273,2274,2275,2276,2277,195,2278,2279,2280,195,2281,2282,2283,2284,2285,2286,2287,2288,2289,2290,2291,2292,2293,2294,1838,2295,2296,1838,2297,2298,2299,2300,2301,2302,2303,1558,2304,2305,2306,2307,2308,2309,2310,2311,2312,2167,2313,2314,2315,2316,2317,2318,2319,2320,2321,2322,2323,2324,2325,2326,2327,2328,2329,2330,2331,2332,2333,2334,2335,2336,2337,2338,2339,2340,2341,2342,2343,2344,2345,2346,195,195,2347,2348,2349,2350,2351,2352,2353,2354,2355,2356,2357,2358,2359,2360,2361,2362,2363,2364,2365,2366,2367,2368,2369,2370,2371,2368,2372,2373,2374,2375,2376,2377,195,195,2378,2379,2380,2381,2382,2383,2384,2385,2386,2387,2388,2389,2390,2391,2392,1868,2393,2394,2395,1838,2396,2397,2398,2399,2400,2401,2402,2403,2404,2405,2406,2407,2408,2409,2410,2411,2412,2413,2414,2415,2416,2417,1214,195,195,2418,2419,2420,195,2421,2422,2423,2424,2425,2426,2427,2428,2429,2430,1904,2431,2432,1902,195,2433,2434,2435,2436,2437,1873,1558,1874,2438,2439,2440,2441,2442,1890,2443,2444,2442,2445,2446,2442,2447,1893,2448,2449,2442,2450,195,2451,195,195,2452,2453,2454,2455,2456,195,2457,2458,2459,2460,2461,2462,2463,195,2464,2465,2466,2467,2468,2469,2470,2471,2472,2473,2474,2475,2476,2477,2478,2479,2480,2481,195,2482,2483,2484,2485,2486,195,2487,2488,2489,195,2490,1870,1871,1872,1873,1558,1874,2491,2492,2493,2494,2495,2496,2497,2498,2499,2500,2501,2502,2503,2504,2505,2506,2507,2508,2509,2510,2511,1893,2512,195,2513,2514,2515,2516,2517,2518,2519,2520,2521,2522,195,195,2523,2524,2525,2526,2527,2528,2529,2530,2531,2532,2533,2534,2535,2536,2537,195,2538,2539,2540,2541,195,2542,2543,2544,2545,2546,195,2547,2548,2549,2550,2551,2552,2553,1836,1837,1838,1839,2554,2555,2556,2557,2558,2559,1558,2560,2561,2562,2563,1558,2564,2565,2566,2567,1808,2568,2569,2570,2571,2572,2573,2574,2575,2576,2577,2578,2579,2580,2556,2581,2582,2583,2584,2585,2586,2587,2588,2589,2590,2591,1804,2592,2593,2594,2595,2596,2597,2598,2599,2600,2601,2602,2603,2604,2605,2599,2600,2606,2607,2599,2600,2608,2156,1841,2609,2610,1844,2611,2612,2613,2614,2615,2616,2614,2615,2617,1849,2618,2619,2614,2615,2620,2130,2621,2622,2623,2624,2625,2626,2627,2628,2195,2629,2630,2631,2632,2633,2634,2635,2636,2637,2638,2639,2640,2641,2642,2643,2644,2645,2646,2647,2648,2649,2650,2651,2652,2653,2654,2655,2656,2657,2658,2659,2660,2661,2662,2663,2664,2665,2666,2667,2668,2669,2670,2671,2672,2673,2674,2675,2676,2677,2678,2679,2680,2681,2682,2683,2684,2685,2686,2687,2688,2591,1804,2689,2690,2594,2691,2596,2692,2693,2694,2695,2696,2697,1421,2698,2699,2700,2701,2702,2703,2704,2705,2706,1421,2707,2708,2709,2710,195,195,2711,2712,2713,2714,2715,2716,2717,2718,2719,195,195,2720,2721,2722,2723,2724,2725,2726,2727,1144,195,195,2728,2729,2730,2731,2732,2733,2734,2735,2736,2737,2738,2739,2740,2741,2742,195,195,2743,2744,2745,2746,195,2747,2748,2749,2750,2751,2752,2753,2754,195,2755,2756,2757,2758,2759,2760,1720,2761,2762,2763,2764,2765,2766,2767,2768,1345,2769,2770,2771,2772,2773,979,195,195,2774,2775,2776,195,2777,2778,2779,2780,2781,2782,2783,2784,2785,2786,2787,195,2788,2789,2790,2791,195,2792,2793,2794,2795,2796,195,2797,2798,2799,1838,2800,2801,2802,2803,2804,2805,2806,2807,2808,2809,2810,2811,2812,2813,2814,2815,2816,1838,2817,2818,1421,2819,2820,2821,2822,2823,2824,2825,2826,2827,2828,2829,2830,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,2842,2843,2844,2845,1558,2846,2847,2848,2849,2850,2851,2852,2853,2854,2855,2856,2857,2858,2859,2317,2860,2861,2335,2862,2863,2864,2865,2866,2867,2868,2869,2870,2871,2167,2866,2872,2873,2874,2875,2876,2877,2878,2879,2880,1838,2881,2882,2883,2884,2885,2886,2887,2888,2889,2890,2891,2892,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2905,2906,2907,2908,2909,2910,2911,2912,2913,2914,2876,2877,2915,2916,1838,2917,2918,2919,2920,2921,2922,2923,2924,2925,2926,2927,2895,2928,2897,2929,2930,2876,2877,2915,2931,1838,2932,2933,2934,2935,2936,2937,2938,2939,2940,2941,2942,2943,2944,2945,2946,2942,2943,2947,2948,2949,2950,2951,2952,2953,2954,2955,2956,2957,2958,2959,2960,2167,2961,2962,2963,2964,2965,2966,2700,2967,2968,2969,2970,2971,2972,2973,2974,2954,2955,2975,2976,2977,2978,2979,2167,2975,2980,2981,2982,2983,2984,2985,195,2986,2987,2988,2989,195,2990,2991,2992,2993,2994,195,2995,2996,2997,2998,195,2999,3000,3001,3002,195,3003,3004,3005,3006,3007,3008,2982,3009,3010,3011,3012,3013,3014,195,3015,3016,3017,3018,3019,3020,3021,3022,3023,3024,3025,3026,1838,3027,3028,3029,195,3030,3031,195,195,3032,3033,3034,3035,3036,195,195,3037,3038,3039,3040,3041,3042,3043,3044,3045,3046,3047,3048,195,195,3049,3050,3051,3052,3053,3054,3055,3056,195,195,3057,3058,3059,3060,3061,3062,3048,195,195,3063,3064,3065,3066,3067,3068,3069,3056,195,195,3070,3071,3072,3073,3074,3062,3048,195,195,3075,3076,3077,3078,2392,2738,3079,3080,3081,2248,195,195,3082,3083,3084,1208,2392,3085,3086,3087,3088,3089,3090,3091,3092,3093,3094,3095,3096,3097,3098,3099,3100,3101,3102,3103,3104,3105,3106,3107,3108,3109,3110,3111,3112,3113,3114,3115,3116,3117,1035,3118,3119,3120,3121,3122,3123,3124,3125,3126,3127,3128,1035,3129,3130,3131,3132,3133,3123,3134,3125,3135,3136,3137,3138,1035,3139,3140,3141,3142,3133,3123,3143,3125,3135,3136,3144,3145,1035,3146,3147,3148,3149,3150,3151,3152,3153,3154,3155,3156,3157,3135,3158,3159,3160,3161,3162,3163,3164,3165,3166,3167,3155,3168,3169,3170,3171,3172,1214,195,195,3173,3174,3175,3176,3177,2392,3085,3178,3179,3180,3181,3182,3183,3184,1838,3185,3186,3187,3188,3189,1838,3190,3191,3192,3193,3194,3195,3196,3197,3198,3199,3200,3201,3202,1838,3203,3204,3205,3206,3207,3208,3209,3210,3211,3212,3213,3214,3215,3216,3217,3218,3219,3220,2709,3155,3221,3222,3223,1214,195,195,3224,3225,3226,3227,3228,3229,3230,3211,3231,3232,1868,3233,1539,1838,3234,3235,3236,3237,1838,3238,3239,3240,1558,3241,3242,3243,3244,3245,3246,3247,3248,3249,1214],"contains_end_of_file","\"\"\"","OwnIR fact bridge (P-001 v0): C# leak facts -> the existing OwnLang core.","A Roslyn extractor (frontend/roslyn/, CI-only) scans real C# and emits *facts* in","the spec's vocabulary; this module ingests them, routes them through the proven","checker, and maps the verdict back to the original C# location. The core stays a","single checker — we do not reimplement it in C# (a second checker would drift).","OwnIR schema (JSON)::"," {"," \"ownir_version\": 0,"," \"module\": \"WpfApp\","," \"components\": ["," {"," \"name\": \"CustomerViewModel\","," \"file\": \"CustomerViewModel.cs\","," \"subscriptions\": ["," {\"event\": \"bus.CustomerChanged\", \"handler\": \"OnCustomerChanged\","," \"line\": 12, \"released\": false},"," {\"event\": \"_timer.Tick\", \"handler\": \"OnTick\", \"line\": 18,"," \"released\": false, \"resource\": \"timer\"}"," ]"," }"," ]"," }","Each entry in `subscriptions` (historically named — it is really the list of","owned-resource records) is an owned resource, discriminated by an optional","`resource` field:"," - \"subscription\" (default): `event +=` acquires, a matching `-=` releases;"," tag `[resource: subscription token]`."," - \"timer\": a started `DispatcherTimer`/`Timer` whose `Tick`/`Elapsed` handler"," is never `-=`'d or `Stop()`ped; tag `[resource: timer]`."," - \"disposable\": an `IDisposable` field the class `new`s and never `Dispose()`s"," (optional `type` names the field's declared type); tag"," `[resource: disposable field]`."," - \"subscribe\": a `X.Subscribe(...)` whose `IDisposable` result is ignored (a"," bare statement, not captured/disposed). Tiered by `source` like a `+=`: a"," self-rooted `this.WhenAnyValue(x => x.SelfProp)` chain (`source: \"self\"`) is a"," GC-collectible self-cycle, not a leak (silent); an `injected` source is a"," warning (unknown lifetime); a `static`/external/unknown source is a leak. Tag"," `[resource: subscription token]`."," - \"capture\": a *tokenless* strong subscription (`event += handler` with no"," token to release) whose event SOURCE provably outlives the subscriber. This"," is NOT an acquire/release owned resource — it lowers to the lifetime engine's"," `subscribe self to ` (ownlang/lifetimes.py) with the source's region,"," so a source that strictly outlives the captured component yields OWN014 (the"," region escape — the captured object is promoted to the longer lifetime and"," leaks). The source's lifetime class is the entry's `source`: a `static`"," (process-lived) event is the longest region. A source of unknown/shorter"," lifetime is left conservative (no finding) — the region model is precise where"," the token model (`resource: \"subscription\"`) only warns. A `capture` with a"," matching `-=` (`released: true`) is mitigated and stays silent (the source no"," longer holds self on close), just as a released token subscription nets to a"," balanced acquire/release. Tag `[resource: subscription token]`."," - \"local-disposable\": a local the method `new`s of an `IDisposable` type,"," never disposed and not guarded by `using` (and not returned/passed out);"," tag `[resource: disposable]`."," - \"pool\": an `ArrayPool`/`MemoryPool` buffer `Rent`ed but never `Return`ed;"," tag `[resource: pooled buffer]`."," - \"unresolved-subscription\": a `+=` whose left side could not be bound to an"," event (its declaring type is an unreferenced external assembly). NOT an owned"," resource — it is skipped by the lowering and surfaced separately as an"," advisory OWN050 \"leakage analysis skipped\" note, never a leak (P-014 Tier A).","An unreleased entry is the core's OWN001 (owned-but-not-released) at the C#","`line`. The `resource`/`type` FIELDS are additive and optional — an older core","that predates them reads an entry with no `resource` as a subscription. But a new","resource-kind VALUE is a vocabulary change, not additive metadata: the kind","selects the analysis path, so a PRESENT-but-unknown kind is rejected at load","(fail-loud), and introducing one MUST bump `ownir_version` (spec/OwnIR.md §2).","A `capture` entry instead routes through the lifetime/region engine and surfaces","as OWN014 (region escape) when its source provably outlives — see docs/proposals/","P-004 and docs/lifetimes.md (the C# facts now reach the region core, not only the","`.own` DSL).","An optional top-level `services` array carries the DI registration graph for the","DI001 captive-dependency check (P-006) — a separate core analysis (ownlang/di.py)","over who is registered with which lifetime and who they depend on::"," \"services\": ["," {\"name\": \"EmailSender\", \"lifetime\": \"singleton\", \"deps\": [\"AppDbContext\"],"," \"file\": \"Startup.cs\", \"line\": 12},"," {\"name\": \"AppDbContext\", \"lifetime\": \"scoped\", \"deps\": []}"," ]","A singleton that reaches a scoped service (directly, or through a transient) is a","DI001 finding at its registration site. The block is additive/optional too.","The `services` graph also feeds the region engine (P-006 + P-004): a subscription","with `source: \"injected\"` may carry `source_type` (the source's declared type). If","that type is registered here, its DI lifetime IS a region — singleton (application)","> scoped > transient — so an injected subscription whose source provably outlives","the subscriber surfaces as OWN014 (the captive/zombie escape), and one proven","shorter-or-equal stays silent. An unresolved `source_type` keeps the honest OWN001","warning. This is how lifetimes the intra-procedural model cannot know locally reach","the region check — from the registration graph.","from __future__ import annotations","import json","from collections import Counter","from dataclasses import dataclass","from typing import Any","from .ast_nodes import ("," Acquire,"," AliasJoin,"," Call,"," Effect,"," EffectParam,"," Expr,"," ExternDecl,"," FnDecl,"," If,"," Let,"," LifetimeDecl,"," Module,"," Overspan,"," Param,"," Release,"," ResourceDecl,"," ResourceMember,"," Return,"," Stmt,"," Subscribe,"," TypeRef,"," Use,"," VarRef,"," While,",")","from .di import LIFETIMES as DI_LIFETIMES","from .di import ("," Service,"," find_captive_dependencies,"," find_captured_transient_disposables,"," find_explicit_root_resolutions,"," find_scope_cached_captives,"," find_weak_captive_dependencies,","from .diagnostics import TITLES, Severity","from .effects import Binding as EffectBinding","from .effects import Effect as ReactEffect","from .effects import find_effect_storms","from .evidence import code_flow, di_path_steps","from .ownership import ("," MethodSkeleton,"," ParamSkeleton,"," PathAction,"," ReturnSkeleton,"," Transfer,"," solve,"," solve_with_log,","# The OwnIR schema version this core understands. Bump it whenever the fact","# vocabulary changes incompatibly; the extractor stamps the same number so a","# mismatched extractor/core pair fails loudly (see load()) instead of silently","# mis-reading facts.","OWNIR_VERSION = 0","class OwnIRError(ValueError):"," \"\"\"A malformed or unmappable OwnIR fact set. Carries a human message; the"," driver turns it into a clear one-line error rather than a traceback.\"\"\"","def _esc_data(s: str) -> str:"," \"\"\"Escape a GitHub workflow-command message (the text after `::`). Per the"," Actions command spec, only `%`, CR and LF are special there.\"\"\""," return s.replace(\"%\", \"%25\").replace(\"\\r\", \"%0D\").replace(\"\\n\", \"%0A\")","def _esc_prop(s: str) -> str:"," \"\"\"Escape a GitHub workflow-command property value (`file=`, `title=`)."," Property values additionally treat `:` and `,` as separators.\"\"\""," return _esc_data(s).replace(\":\", \"%3A\").replace(\",\", \"%2C\")","_PRELUDE = ("," 'resource Subscription {\\n'"," ' acquire Subscribe\\n'"," ' release Dispose\\n'"," ' kind \"subscription token\"\\n'"," '}\\n'"," 'resource Timer {\\n'"," ' acquire Start\\n'"," ' release Stop\\n'"," ' kind \"timer\"\\n'"," 'resource Disposable {\\n'"," ' acquire New\\n'"," ' kind \"disposable field\"\\n'"," 'resource PooledBuffer {\\n'"," ' acquire Rent\\n'"," ' release Return\\n'"," ' kind \"pooled buffer\"\\n'","# OwnIR resource kinds the bridge knows how to lower: (own resource type to","# acquire, human kind tag the finding carries). `event +=` is a Subscription; a","# `Tick`/`Elapsed` handler on a started timer is a Timer (the running timer","# strong-refs the handler's owner); an `IDisposable` field the class `new`s is a","# Disposable it owns; an `ArrayPool`/`MemoryPool` `Rent` is a PooledBuffer that","# must be `Return`ed. Unknown values fall back to Subscription.","_RESOURCES = {"," \"subscription\": (\"Subscription\", \"subscription token\"),"," \"subscribe\": (\"Subscription\", \"subscription token\"),"," \"timer\": (\"Timer\", \"timer\"),"," \"disposable\": (\"Disposable\", \"disposable field\"),"," \"local-disposable\": (\"Disposable\", \"disposable\"),"," \"pool\": (\"PooledBuffer\", \"pooled buffer\"),","}","# Every resource-kind discriminator the core routes on (the `_RESOURCES` owned","# kinds, plus `capture` — routed to the lifetime/region engine — and","# `unresolved-subscription` — skipped to an advisory OWN050). The kind CHANGES the","# analysis path (§4 of spec/OwnIR.md), so it is NOT metadata: a PRESENT-but-unknown","# kind is rejected at load (fail-loud, like an unknown flow op), never silently","# routed as a `subscription`. An ABSENT `resource` field still defaults to","# `subscription` (an old extractor that predates the field). Consequence: adding a","# new kind is a vocabulary change that MUST bump OWNIR_VERSION (spec/OwnIR.md §2).","_KNOWN_RESOURCE_KINDS = frozenset(_RESOURCES) | {\"capture\", \"unresolved-subscription\"}","# The complete flow-op vocabulary the lowerer (`_lower_flow`) handles — the single","# authority the `_lower_flow` dispatch, `spec/ownir.schema.json`, and the Rust","# `own-ir` crate must all agree on. Every op here has a branch in `_lower_flow`","# (the `else` there rejects anything NOT in this set as vocabulary skew, and treats","# an op that IS here but reaches `else` as an internal-consistency bug). Adding an","# op is a vocabulary change that MUST bump OWNIR_VERSION (spec/OwnIR.md §2/§5).","_FLOW_OPS = frozenset({"," \"acquire\", \"release\", \"use\", \"overspan\", \"return\","," \"alias_join\", \"call\", \"if\", \"while\",","})","# The parameter ownership-effect vocabulary (P-006/2b): a method contract's","# per-parameter effect. Like `_FLOW_OPS`, a closed enum the schema and the Rust","# `ParamEffect` are bound to; an absent effect is inferred from the body.","_PARAM_EFFECTS = frozenset({\"consume\", \"borrow\", \"borrow_mut\", \"plain\"})","# --- P-004 region escape (the `capture` resource kind) ----------------------","# A `capture` is a tokenless strong subscription routed NOT through the","# acquire/release ownership model but through the lifetime/region engine","# (ownlang/lifetimes.py): the captured component lives in a short region, its","# event source in a longer one, and `subscribe self to ` promotes the","# component to the longer lifetime -> OWN014. The map below turns the extractor's","# `source` kind into the source's region; only *provably longer* sources are","# mapped, so an unknown/shorter source produces no node and no finding (the region","# model is conservative — no false positive). `_SUBSCRIBER_REGION` is the shorter","# region an un-registered UI subscriber (a Window/VM the framework owns) lives in.","#","# P-006 + P-004 (DI-sourced escape): a DI-registered source's lifetime IS a region","# too. The .NET DI order — singleton (application) > scoped (request) > transient","# (per-resolution) — is the same kind of partial order, so an *injected*","# subscription whose source's REGISTERED lifetime strictly outlives the","# subscriber's is the same region escape (the captive/zombie case). A `singleton`","# shares the long `Process` region with a static event (both app/process-lived); a","# subscriber that is itself DI-registered carries its own region. The lifetimes the","# intra-procedural model could not know locally come from the registration graph —","# we only escalate when the source's lifetime is KNOWN there; an unregistered","# source keeps the honest OWN001 warning.","_SUBSCRIBER_REGION = \"Subscriber\"","_CAPTURE_SOURCE_REGIONS = {"," \"static\": \"Process\", # a static event (e.g. SystemEvents.*) lives for the"," # whole process -> strictly longer than any subscriber.","# .NET DI lifetime -> region. `singleton` is the long `Process` region (app-lived,","# shared with static events); `scoped`/`transient` are strictly shorter.","_DI_REGION = {\"singleton\": \"Process\", \"scoped\": \"scoped\", \"transient\": \"transient\"}","_CAPTURE_LIFETIMES = ["," LifetimeDecl(\"Process\", None, 0), # app/process/singleton lifetime"," LifetimeDecl(\"scoped\", \"Process\", 0), # scoped strictly < Process"," LifetimeDecl(\"transient\", \"scoped\", 0), # transient strictly < scoped"," LifetimeDecl(_SUBSCRIBER_REGION, \"Process\", 0), # un-registered VM < Process","]","def _di_life_map(facts: dict[str, Any]) -> dict[str, str]:"," \"\"\"Map each DI-registered service name -> its lifetime (singleton/scoped/"," transient) from the optional `services` graph. The bridge cross-references a"," subscription's `source_type` (and the subscriber's own name) against this to"," derive regions for the lifetime engine.\"\"\""," out: dict[str, str] = {}"," raw = facts.get(\"services\", [])"," if isinstance(raw, list):"," for s in raw:"," if isinstance(s, dict) and isinstance(s.get(\"name\"), str) \\"," and s.get(\"lifetime\") in DI_LIFETIMES:"," out[s[\"name\"]] = s[\"lifetime\"]"," return out","def _subscriber_region(cname: str, di_life: dict[str, str]) -> str:"," \"\"\"The region a subscriber component lives in: its own DI-registered lifetime's"," region if it is registered, else the short un-registered `Subscriber` region (a"," Window/VM the UI framework owns, never a heap root).\"\"\""," return _DI_REGION.get(di_life.get(cname, \"\"), _SUBSCRIBER_REGION)","@dataclass(frozen=True)","class Finding:"," file: str"," line: int"," code: str"," component: str"," event: str"," handler: str"," message: str"," kind: str = \"subscription token\""," # an advisory note (e.g. OWN050 \"leakage analysis skipped\") rather than a leak"," # verdict: rendered as a warning and excluded from the exit code."," advisory: bool = False"," # P-004 tiering: the intrinsic level when the source's lifetime cannot be"," # proven — \"warning\" for a subscription whose event SOURCE is an injected"," # dependency of unknown lifetime, None for a provable leak (shown at the host's"," # --severity, default error). Still a leak verdict (counts in the exit code);"," # only the displayed level differs."," severity: str | None = None"," # secondary, structured locations that explain the finding — each a"," # (file, line, label) triple. The primary `file`/`line` stays the anchor; these ride"," # along as SARIF `relatedLocations` (e.g. a DI captive's *consuming constructor*, distinct"," # from its registration-site anchor). Empty for findings with a single location."," related: tuple[tuple[str, int, str], ...] = ()"," # an ORDERED reachability slice — each an (file, line, label) triple — that explains the"," # finding by the path it walks: a DI captive's `singleton -> transient -> scoped` retention"," # chain, each hop anchored at a real registration site. Rides along as a SARIF `codeFlows`"," # (the step-through trace `relatedLocations` cannot express). Empty for a single-point finding."," flow: tuple[tuple[str, int, str], ...] = ()"," def render(self, severity: str = \"error\") -> str:"," return (f\"{self.file}:{self.line}: {severity}: [{self.code}] \""," f\"{self.message} [resource: {self.kind}]\")"," def render_github(self, severity: str = \"error\") -> str:"," \"\"\"A GitHub Actions workflow annotation. Printed on a CI step's stdout,"," GitHub renders it inline on the PR diff at the C# location. `severity`"," is the annotation level (`error`/`warning`); `title` carries the OWN"," code; the message keeps the [resource:] tag.\"\"\""," msg = f\"[{self.code}] {self.message} [resource: {self.kind}]\""," return (f\"::{severity} file={_esc_prop(self.file)},line={self.line},\""," f\"title={_esc_prop(self.code)}::{_esc_data(msg)}\")"," def render_msbuild(self, severity: str = \"error\") -> str:"," \"\"\"The canonical MSBuild diagnostic format `file(line): error CODE: msg`."," `dotnet build` and the Visual Studio Error List parse exactly this, so"," the findings surface in-IDE without a Roslyn analyzer — one checker, not"," a second one reimplemented in C#. `severity` picks `error`/`warning` so a"," build can show them advisory instead of failing.\"\"\""," return (f\"{self.file}({self.line}): {severity} {self.code}: \"","def render_finding(f: Finding, fmt: str, severity: str = \"error\") -> str:"," \"\"\"Render a finding in one of the supported surfaces: `human` (the default"," CLI line), `github` (CI annotation), or `msbuild` (VS Error List). `severity`"," is a presentation choice — the finding is still the core's verdict; it only"," controls whether the host shows it as an error (default) or a warning.\"\"\""," if fmt == \"github\":"," return f.render_github(severity)"," if fmt == \"msbuild\":"," return f.render_msbuild(severity)"," return f.render(severity)","# SARIF 2.1.0 — the OASIS-standard static-analysis interchange format. Unlike the","# line-per-finding surfaces above, a SARIF log is ONE document for the whole run,","# so it is built from the finding *list*, not rendered per finding.","_SARIF_SCHEMA = ("," \"https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/\""," \"Schemata/sarif-schema-2.1.0.json\"","_SARIF_INFO_URI = \"https://github.com/PhysShell/Own.NET\"","def _sarif_level(f: Finding, severity: str) -> str:"," \"\"\"The SARIF result level for a finding. Mirrors the CLI's per-finding severity"," (an advisory OWN050 and an intrinsic-warning finding both stay sub-error), but"," uses SARIF's dedicated `note` level for the advisory coverage notes — so a"," consumer can tell a *skip* (\"could not check this\") from a real warning-tier"," leak, which the flat error/warning surfaces cannot express.\"\"\""," if f.advisory:"," return \"note\""," if severity == \"warning\" or f.severity == \"warning\":"," return \"warning\""," return \"error\"","def _sarif_result(f: Finding, severity: str) -> dict[str, Any]:"," \"\"\"One SARIF `result` for a finding: the OWN code is the `ruleId`, the C#"," location is a `physicalLocation`, and the resource kind / subscription triple"," ride along in `properties` for any consumer that wants them.\"\"\""," phys: dict[str, Any] = {"," \"artifactLocation\": {\"uri\": f.file.replace(\"\\\\\", \"/\")},"," if f.line >= 1: # SARIF region.startLine is 1-based; omit it for a file-level finding"," phys[\"region\"] = {\"startLine\": f.line}"," props: dict[str, Any] = {\"resourceKind\": f.kind}"," for key, val in ((\"component\", f.component), (\"event\", f.event),"," (\"handler\", f.handler)):"," if val:"," props[key] = val"," result: dict[str, Any] = {"," \"ruleId\": f.code,"," \"level\": _sarif_level(f, severity),"," \"message\": {\"text\": f\"{f.message} [resource: {f.kind}]\"},"," \"locations\": [{\"physicalLocation\": phys}],"," \"properties\": props,"," # secondary locations (e.g. a DI captive's consuming constructor) — a SARIF consumer"," # (GitHub code scanning) renders these as clickable, labelled related locations."," related = ["," {\"physicalLocation\": {\"artifactLocation\": {\"uri\": rf.replace(\"\\\\\", \"/\")},"," \"region\": {\"startLine\": rl}},"," \"message\": {\"text\": rmsg}}"," for (rf, rl, rmsg) in f.related if rl >= 1"," if related:"," result[\"relatedLocations\"] = related"," # the ordered reachability slice (e.g. a DI captive's singleton -> transient -> scoped"," # retention path): a SARIF consumer renders codeFlows as a click-through step trace, which"," # is exactly the \"why is this held, and through what?\" question relatedLocations can't answer."," flows = code_flow(f.flow)"," if flows:"," result[\"codeFlows\"] = flows"," return result","def build_sarif(findings: list[Finding], severity: str = \"error\") -> dict[str, Any]:"," \"\"\"Render the findings as a single SARIF 2.1.0 log: one `run` whose"," `tool.driver` is Own.NET (with a `rules` catalogue of the OWN codes present and"," their titles) and whose `results` carry each finding's code, C# location,"," message and resource kind. `severity` is the same presentation choice as the"," other surfaces (it only sets each result's `level`)."," SARIF earns its place three ways: it is GitHub code-scanning native, it is a"," frozen/diffable run artifact (reproducibility), and it is the *same* shape"," `scripts/oracle_compare.py` already parses for Infer# and CodeQL — so own-check"," can join the cross-tool diff through one SARIF reader instead of the bespoke"," text parser (the parser-drift class of bug it documents).\"\"\""," codes = sorted({f.code for f in findings})"," rules = ["," {\"id\": code, \"shortDescription\": {\"text\": TITLES.get(code, code)}}"," for code in codes"," return {"," \"$schema\": _SARIF_SCHEMA,"," \"version\": \"2.1.0\","," \"runs\": ["," {"," \"tool\": {"," \"driver\": {"," \"name\": \"Own.NET\","," \"informationUri\": _SARIF_INFO_URI,"," \"rules\": rules,"," \"properties\": {\"ownirSchemaVersion\": OWNIR_VERSION},"," },"," },"," \"results\": [_sarif_result(f, severity) for f in findings],"," },"," ],","def load(path: str) -> dict[str, Any]:"," \"\"\"Load and shape-check an OwnIR facts file (it is external input — a"," malformed file should fail with a clear error, not a deep traceback).\"\"\""," with open(path, encoding=\"utf-8\") as f:"," try:"," result: Any = json.load(f)"," except json.JSONDecodeError as e:"," raise OwnIRError(f\"{path} is not valid JSON: {e}\") from e"," if not isinstance(result, dict):"," raise OwnIRError(\"OwnIR root must be a JSON object\")"," # version gate first: a vocabulary mismatch makes every later shape-check"," # meaningless, so reject it up front with an actionable message. An absent"," # field is treated as the current version (the only producers that omit it"," # predate versioning, i.e. are v0 by definition)."," ver = result.get(\"ownir_version\", OWNIR_VERSION)"," if not isinstance(ver, int) or isinstance(ver, bool):"," raise OwnIRError(f\"OwnIR 'ownir_version' must be an integer, got {ver!r}\")"," if ver != OWNIR_VERSION:"," raise OwnIRError("," f\"OwnIR facts are schema v{ver}, but this core understands \""," f\"v{OWNIR_VERSION}. Build the Roslyn extractor and the Python core \""," f\"from the same commit — the OwnIR fact vocabulary changed between \""," f\"the version that produced this file and the one reading it.\")"," comps = result.get(\"components\", [])"," if not isinstance(comps, list) or not all(isinstance(c, dict) for c in comps):"," raise OwnIRError(\"OwnIR 'components' must be a JSON array of objects\")"," for c in comps:"," subs = c.get(\"subscriptions\", [])"," if not isinstance(subs, list) or not all(isinstance(s, dict) for s in subs):"," raise OwnIRError(\"each component's 'subscriptions' must be objects\")"," for s in subs:"," r = s.get(\"resource\", \"subscription\")"," if not isinstance(r, str):"," raise OwnIRError("," f\"subscription 'resource' must be a string, got {r!r}\")"," # A present-but-unknown kind changes routing (§4), so reject it rather"," # than let it fall through to the owned/subscription path and mis-route"," # — the same fail-loud rule as an unknown flow op. A new kind must bump"," # OWNIR_VERSION (spec/OwnIR.md §2). An absent field defaulted to"," # \"subscription\" above, which is known."," if r not in _KNOWN_RESOURCE_KINDS:"," f\"unknown resource kind {r!r} — a new kind is a vocabulary \""," f\"change that must bump OWNIR_VERSION (see spec/OwnIR.md §2)\")"," t = s.get(\"type\")"," if t is not None and not isinstance(t, str):"," f\"subscription 'type' must be a string, got {t!r}\")"," # `source_type` (P-006 + P-004): the declared type of an injected event"," # source, cross-referenced against the `services` graph to derive its"," # DI lifetime/region. Additive/optional; an older core ignores it."," stp = s.get(\"source_type\")"," if stp is not None and not isinstance(stp, str):"," f\"subscription 'source_type' must be a string, got {stp!r}\")"," # Optional DI registration graph (DI001 — captive dependency, P-006). Additive"," # and optional: an older core simply ignores it."," svcs = result.get(\"services\", [])"," if not isinstance(svcs, list) or not all(isinstance(s, dict) for s in svcs):"," raise OwnIRError(\"OwnIR 'services' must be a JSON array of objects\")"," for s in svcs:"," lt = s.get(\"lifetime\")"," if lt not in DI_LIFETIMES:"," raise OwnIRError("," f\"service 'lifetime' must be one of {sorted(DI_LIFETIMES)}, \""," f\"got {lt!r}\")"," name = s.get(\"name\")"," if not isinstance(name, str) or not name:"," raise OwnIRError(\"service 'name' must be a non-empty string\")"," deps = s.get(\"deps\", [])"," if not isinstance(deps, list) or not all(isinstance(d, str) for d in deps):"," raise OwnIRError(\"service 'deps' must be an array of strings\")"," weak_deps = s.get(\"weak_deps\", [])"," if not isinstance(weak_deps, list) or not all(isinstance(d, str) for d in weak_deps):"," raise OwnIRError(\"service 'weak_deps' must be an array of strings\")"," root_resolves = s.get(\"root_resolves\", [])"," if not isinstance(root_resolves, list) or not all("," isinstance(d, str) for d in root_resolves):"," raise OwnIRError(\"service 'root_resolves' must be an array of strings\")"," if not isinstance(s.get(\"file\", \"?\"), str):"," raise OwnIRError(\"service 'file' must be a string\")"," ln = s.get(\"line\", 0)"," if not isinstance(ln, int) or isinstance(ln, bool):"," raise OwnIRError(\"service 'line' must be an integer\")"," # the consuming-constructor location (optional, P-006 Q#1) is validated like file/line."," if not isinstance(s.get(\"ctor_file\", \"?\"), str):"," raise OwnIRError(\"service 'ctor_file' must be a string\")"," cln = s.get(\"ctor_line\", 0)"," if not isinstance(cln, int) or isinstance(cln, bool):"," raise OwnIRError(\"service 'ctor_line' must be an integer\")"," if not isinstance(s.get(\"ctor_type\", \"\"), str):"," raise OwnIRError(\"service 'ctor_type' must be a string\")"," # DI004 call-site metadata (optional): an array of {type, file, line} objects."," sites = s.get(\"root_resolve_sites\", [])"," if not isinstance(sites, list) or not all("," isinstance(x, dict) and isinstance(x.get(\"type\", \"\"), str)"," and isinstance(x.get(\"file\", \"?\"), str)"," and isinstance(x.get(\"line\", 0), int) and not isinstance(x.get(\"line\", 0), bool)"," for x in sites):"," \"service 'root_resolve_sites' must be an array of \""," \"{type:str, file:str, line:int} objects\")"," # DI005 (scope-cached captive): types resolved from a self-created scope and cached"," # into a field, plus their field-store sites — validated like root_resolves / its sites."," scope_cached = s.get(\"scope_cached\", [])"," if not isinstance(scope_cached, list) or not all("," isinstance(d, str) for d in scope_cached):"," raise OwnIRError(\"service 'scope_cached' must be an array of strings\")"," csites = s.get(\"scope_cache_sites\", [])"," if not isinstance(csites, list) or not all("," for x in csites):"," \"service 'scope_cache_sites' must be an array of \""," # Optional reactive-effect graph (EFF001 — effect storm, P-020). Additive and"," # optional: an older core simply ignores it. Each effect carries its render-scope"," # binding table; the core (ownlang/effects.py) decides identity stability."," effs = result.get(\"effects\", [])"," if not isinstance(effs, list) or not all(isinstance(eff, dict) for eff in effs):"," raise OwnIRError(\"OwnIR 'effects' must be a JSON array of objects\")"," for eff in effs:"," deps = eff.get(\"deps\", [])"," raise OwnIRError(\"effect 'deps' must be an array of strings\")"," io = eff.get(\"io\", False)"," if not isinstance(io, bool):"," raise OwnIRError(f\"effect 'io' must be a boolean, got {io!r}\")"," eln = eff.get(\"line\", 0)"," if not isinstance(eln, int) or isinstance(eln, bool):"," raise OwnIRError(\"effect 'line' must be an integer\")"," binds = eff.get(\"bindings\", [])"," if not isinstance(binds, list) or not all(isinstance(b, dict) for b in binds):"," raise OwnIRError(\"effect 'bindings' must be a JSON array of objects\")"," for b in binds:"," if not isinstance(b.get(\"name\", \"\"), str):"," raise OwnIRError(\"binding 'name' must be a string\")"," if not isinstance(b.get(\"init\", \"unknown\"), str):"," raise OwnIRError(\"binding 'init' must be a string\")"," refs = b.get(\"refs\", [])"," if not isinstance(refs, list) or not all(isinstance(r, str) for r in refs):"," raise OwnIRError(\"binding 'refs' must be an array of strings\")"," bln = b.get(\"line\", 0)"," if not isinstance(bln, int) or isinstance(bln, bool):"," raise OwnIRError(\"binding 'line' must be an integer\")"," # Optional per-method flow bodies (P-016 B0b/B2 — local IDisposable"," # acquire/use/release over a CFG). Additive/optional; an older core ignores it."," fns = result.get(\"functions\", [])"," if not isinstance(fns, list) or not all(isinstance(f, dict) for f in fns):"," raise OwnIRError(\"OwnIR 'functions' must be a JSON array of objects\")"," for f in fns:"," # Optional ownership CONTRACT (P-006/2b): params + their effects. Additive"," # and optional — an older core just reads functions without contracts. An"," # omitted `effect` is INFERRED from the body (v1 contract inference), so the"," # field is a hint/override, not a requirement."," ps = f.get(\"params\", [])"," if not isinstance(ps, list) or not all(isinstance(p, dict) for p in ps):"," raise OwnIRError(\"a function's 'params' must be a JSON array of objects\")"," for p in ps:"," # identity fields first: `name` is what inference and finding-mapping"," # key on, so a malformed one must fail fast, not be silently coerced."," pn = p.get(\"name\")"," if not isinstance(pn, str) or not pn:"," f\"parameter 'name' must be a non-empty string, got {pn!r}\")"," pl = p.get(\"line\", 0)"," if not isinstance(pl, int) or isinstance(pl, bool):"," f\"parameter 'line' must be an integer, got {pl!r}\")"," peff = p.get(\"effect\")"," if peff is not None and peff not in _PARAM_EFFECTS:"," f\"parameter 'effect' must be one of {sorted(_PARAM_EFFECTS)}, \""," f\"got {peff!r}\")","def to_own(facts: dict[str, Any]) -> tuple[str, dict[str, dict[str, Any]]]:"," \"\"\"Lower OwnIR facts to a synthetic `.own` module (a readable ownership"," sketch of the C#) plus a map from each synthetic handle to its source fact."," Each subscription becomes `let = acquire Subscription();`, with a"," `release` iff the extractor found a matching unsubscribe. Handles are globally"," unique so a diagnostic naming one maps straight back to its C# location.\"\"\""," handles: dict[str, dict[str, Any]] = {}"," gid = 0"," any_capture = False"," comp_lines: list[str] = []"," di_life = _di_life_map(facts) # DI registrations: service name -> lifetime"," components = facts.get(\"components\", [])"," if not isinstance(components, list):"," raise OwnIRError(\"OwnIR 'components' must be a JSON array\")"," for comp in components:"," if not isinstance(comp, dict):"," raise OwnIRError(\"each OwnIR component must be a JSON object\")"," cname = comp.get(\"name\", f\"Component{gid}\")"," self_region = _subscriber_region(cname, di_life)"," subscriptions = comp.get(\"subscriptions\", [])"," if not isinstance(subscriptions, list):"," raise OwnIRError(\"component 'subscriptions' must be a JSON array\")"," cap_params: list[str] = [] # `: EventSource lifetime `"," cap_handles: list[str] = [] # sources for `subscribe self to ;`"," owned_lines: list[str] = [] # `let = acquire ();` (+ release)"," for sub in subscriptions:"," if not isinstance(sub, dict):"," raise OwnIRError(\"each subscription must be a JSON object\")"," rkind = sub.get(\"resource\", \"subscription\")"," # An \"unresolved-subscription\" marker is not an owned resource (the"," # extractor could not bind the LHS to an event). Do not lower it to an"," # acquire — that would become a phantom OWN001 leak. It is surfaced as"," # an advisory OWN050 note by _unresolved_findings instead."," if rkind == \"unresolved-subscription\":"," continue"," # A `subscribe` (ignored `.Subscribe()` result) whose SOURCE is `self`"," # is a self-rooted `this.WhenAnyValue(x => x.SelfProp)` cycle — the"," # observable, its handler and `this` form one cycle the GC collects"," # together, so it is NOT a leak. Skip it (silent); only an EXTERNAL"," # source holds the component from a longer-lived root. Mirrors to_module."," if rkind == \"subscribe\" and sub.get(\"source\") == \"self\":"," # A `capture` is the tokenless region-escape shape: it does NOT acquire"," # a token (no OWN001); it lowers to `subscribe self to ` with"," # the source's region, so the lifetime engine reports OWN014 when the"," # source provably outlives. An unmapped (unknown/shorter) source stays"," # conservative — no node, no finding. Mirrors to_module exactly."," if rkind == \"capture\":"," # a released capture (matching `-=`) is mitigated -> silent; skip"," # it, mirroring to_module (and a released token subscription)."," src = sub.get(\"source\")"," region = _CAPTURE_SOURCE_REGIONS.get(src) \\"," if isinstance(src, str) else None"," if region is None or sub.get(\"released\"):"," continue"," handle = f\"cap_{gid}\""," gid += 1"," handles[handle] = {**sub, \"component\": cname,"," \"file\": comp.get(\"file\", \"?\")}"," cap_params.append(f\"{handle}: EventSource lifetime {region}\")"," cap_handles.append(handle)"," any_capture = True"," # DI-sourced escape (mirrors to_module): an injected source with a KNOWN"," # DI lifetime lowers to `subscribe self to ` under its DI region."," # Only subscriptions reroute here — a non-subscription resource with an"," # incidental `source`/`source_type` keeps its own analysis path."," if (rkind == \"subscription\" and sub.get(\"source\") == \"injected\""," and not sub.get(\"released\")):"," st = sub.get(\"source_type\")"," src_life = di_life.get(st) if isinstance(st, str) else None"," if src_life is not None:"," handle = f\"cap_{gid}\""," gid += 1"," handles[handle] = {**sub, \"component\": cname,"," \"file\": comp.get(\"file\", \"?\"),"," \"di_source_life\": src_life}"," cap_params.append("," f\"{handle}: EventSource lifetime {_DI_REGION[src_life]}\")"," cap_handles.append(handle)"," any_capture = True"," handle = f\"sub_{gid}\""," gid += 1"," handles[handle] = {**sub, \"component\": cname,"," \"file\": comp.get(\"file\", \"?\")}"," rtype, _ = _RESOURCES.get(rkind, _RESOURCES[\"subscription\"])"," owned_lines.append(f\" let {handle} = acquire {rtype}();\")"," if sub.get(\"released\"):"," owned_lines.append(f\" release {handle};\")"," sig = \", \".join(cap_params)"," lt = f\" lifetime {self_region}\" if cap_handles else \"\""," comp_lines.append(f\"fn {cname}({sig}){lt} {{\")"," comp_lines.extend(owned_lines)"," for handle in cap_handles:"," comp_lines.append(f\" subscribe self to {handle};\")"," comp_lines.append(\"}\")"," comp_lines.append(\"\")"," # The region order the captures reference — emitted once, only when needed, so"," # a capture-free fact set lowers to byte-identical output as before."," lifetime_lines: list[str] = []"," if any_capture:"," for d in _CAPTURE_LIFETIMES:"," lifetime_lines.append(f\"lifetime {d.name};\" if d.longer is None"," else f\"lifetime {d.name} < {d.longer};\")"," lifetime_lines.append(\"\")"," lines = [f\"module {facts.get('module', 'Extracted')}\", \"\", _PRELUDE,"," *lifetime_lines, *comp_lines]"," return \"\\n\".join(lines), handles","def _prelude_resources() -> list[ResourceDecl]:"," \"\"\"The owned-resource declarations the lowered functions acquire — the AST twin"," of `_PRELUDE`. Members mirror the text prelude; `kind` carries the"," `[resource: ]` tag a finding surfaces.\"\"\""," return ["," ResourceDecl(\"Subscription\","," [ResourceMember(\"acquire\", \"Subscribe\", 0),"," ResourceMember(\"release\", \"Dispose\", 0)], 0,"," kind=\"subscription token\"),"," ResourceDecl(\"Timer\","," [ResourceMember(\"acquire\", \"Start\", 0),"," ResourceMember(\"release\", \"Stop\", 0)], 0, kind=\"timer\"),"," ResourceDecl(\"Disposable\","," [ResourceMember(\"acquire\", \"New\", 0),"," kind=\"disposable field\"),"," ResourceDecl(\"PooledBuffer\","," [ResourceMember(\"acquire\", \"Rent\", 0),"," ResourceMember(\"release\", \"Return\", 0)], 0,"," kind=\"pooled buffer\"),","def to_module(facts: dict[str, Any],"," notes: list[str] | None = None,"," advisories: list[Finding] | None = None,"," ) -> tuple[Module, dict[str, dict[str, Any]]]:"," \"\"\"Build the core `Module` AST **directly** from OwnIR facts — no `.own` source"," text and no re-parse (P-016 B0a; the round-trip `to_own` + `parse` has existed"," since P-001). Mirrors `to_own`'s lowering exactly: each owned-resource fact"," becomes `let = acquire ();`, with a `release` iff the"," extractor found a matching teardown. Returns the Module plus the handle->fact"," map; a diagnostic names a handle via its symbol `origin` (`#`,"," cfg.py), which maps straight back to the C# location. `notes`, when given,"," collects coverage-degradation reasons (a failed MOS solve — TZ D5) the caller"," should surface as advisory findings rather than lose; `advisories` collects"," ready-made advisory Findings minted during lowering (OWN051 unverified-transfer"," notes) for the caller to append.\"\"\""," functions: list[FnDecl] = []"," body: list[Stmt] = []"," params: list[Param] = [] # capture sources, carrying their region"," fn_lt: str | None = None # the subscriber region, set iff a capture"," # an unresolved-subscription marker is not an owned resource — it is"," # surfaced as an advisory OWN050 note, never lowered (see to_own)."," # A self-rooted `subscribe` (ignored `.Subscribe()` on a"," # `this.WhenAnyValue(x => x.SelfProp)` chain) is a GC-collectible"," # self-cycle, not a leak — skip it (silent), like a released"," # subscription. Only an EXTERNAL source holds the component."," # P-004 region escape: a `capture` is a tokenless strong subscription"," # whose source provably outlives the subscriber. Lower it to the"," # lifetime engine (`subscribe self to ` + the source's region)"," # -> OWN014, NOT to an acquire/release token. The source becomes a"," # param carrying its (longer) region; the function carries the shorter"," # subscriber region. A source of unknown/shorter lifetime stays"," # conservative (no node emitted, hence no finding). cfg.lower_stmt"," # treats Subscribe as a no-op and a non-resource param as PLAIN, so"," # this is inert for the OWN001 ownership pass — only check_lifetimes"," # reads it."," # A `capture` whose subscription IS torn down (a matching `-=`,"," # `released: true`) is mitigated: the source no longer holds self"," # on close, so there is no escape — skip it (silent), exactly as a"," # released token subscription nets to a balanced acquire/release."," line = _as_int(sub.get(\"line\", 0))"," params.append(Param(handle, TypeRef(\"EventSource\", False, False, 0),"," 0, lifetime=region))"," body.append(Subscribe(handle, line))"," fn_lt = self_region"," # P-006 + P-004 DI-sourced escape: an injected subscription whose source"," # TYPE resolves (via the `services` graph) to a KNOWN DI lifetime routes"," # through the SAME region engine. singleton/scoped/transient become the"," # source's region; the engine reports OWN014 iff it strictly outlives the"," # subscriber's region, and stays silent when it cannot (proven SAFE by"," # the registration order — no honest-warning hedge once the lifetime is"," # known). An unregistered/unknown source (src_life None) falls through to"," # the token path below and keeps the OWN001 warning. A released `-=`"," # mitigates it (same as any capture). Only subscriptions reroute here —"," # a non-subscription resource with an incidental `source`/`source_type`"," # keeps its own (timer/disposable/...) analysis path."," line = _as_int(sub.get(\"line\", 0))"," params.append(Param(handle,"," TypeRef(\"EventSource\", False, False, 0),"," 0, lifetime=_DI_REGION[src_life]))"," body.append(Subscribe(handle, line))"," fn_lt = self_region"," line = _as_int(sub.get(\"line\", 0))"," body.append(Let(handle, Acquire(rtype, [], line), line))"," body.append(Release(handle, line))"," functions.append(FnDecl(cname, params, None, body, 0, lifetime=fn_lt))"," # P-016 B0b/B2: per-method flow bodies for local IDisposables (acquire / use /"," # release / if / return over a CFG). The core checks them path-sensitively"," # (OWN001 not-released-on-all-paths, OWN002 use-after-release, OWN003 double-"," # release) — beyond the flat detectors. Experimental/additive at v0; graduation"," # bumps OWNIR_VERSION."," loc = [0]"," raw_fns = facts.get(\"functions\", [])"," if isinstance(raw_fns, list):"," # D5.1: resolve interprocedural ownership transfer once, up front, so a"," # forwarded `consume`/`borrow` param is checked compositionally (the give-up"," # case `_infer_param_effect` used to leave plain). Never let summary"," # computation crash the bridge — degrade to no-MOS (the old behaviour) —"," # but the whole interprocedural layer going dark must be OBSERVABLE, not"," # silent (honest-skip; TZ D5): record the reason for the caller to surface"," # as an advisory OWN052."," mos: dict[str, Any] = solve(_build_skeletons(raw_fns))"," except Exception as exc:"," mos = {}"," if notes is not None:"," notes.append(f\"{type(exc).__name__}: {exc}\")"," # every first-party method name: the Tier B BCL table must never fire for a callee we"," # compiled from source — Tier A is authoritative even with no usable summary"," # (CodeRabbit). Threaded into the freshness checks so direct calls agree with the"," # wrapper-return path in `_infer_return_skeleton`."," fp_names = [str(fn.get(\"name\", \"\")) for fn in raw_fns"," if isinstance(fn, dict) and fn.get(\"name\")]"," first_party = frozenset(_canonical_callee_name(n) for n in fp_names)"," # Names defined more than once are OVERLOADS. Their merged MOS summary is conservative,"," # but the core's call-signature table keeps only ONE same-name FnDecl (last-wins), so a"," # DIRECT `Call` to an overloaded name would mis-apply one overload's effects. Route those"," # args through the merged contract instead (see the `call` handler in `_lower_flow`)."," # Keyed on the CANONICAL name (like `first_party`), so a `global::`-qualified direct call"," # to an overloaded method still matches (CodeRabbit)."," overloaded = frozenset("," n for n, c in Counter(_canonical_callee_name(x) for x in fp_names).items() if c > 1)"," for fn in raw_fns:"," if not isinstance(fn, dict):"," fname = str(fn.get(\"name\", f\"Fn{loc[0]}\"))"," ffile = str(fn.get(\"file\", \"?\"))"," nodes = fn.get(\"body\", [])"," nodes = nodes if isinstance(nodes, list) else []"," # which locals have ANY release in the body (any branch) — lets the OWN001"," # wording distinguish \"never disposed\" (no release at all) from \"not"," # disposed on every path\" (released on some branch, leaked on another)."," released = _released_vars(nodes)"," # ownership contract params first (they seed `localmap` so the body's"," # uses/releases and call arguments resolve to them), then the flow body."," localmap: dict[str, str] = {}"," fparams = _lower_fn_params(fn, ffile, fname, handles, loc, localmap,"," released, mos)"," # The optimistic default (d5 §5), made real: an argument at a call"," # position whose contract resolved `may`/`unknown` means \"we cannot"," # verify whether ownership left the caller\" — so the caller's local is"," # UNTRACKED from that call's function (its acquire is not minted), and"," # neither a missing nor a defensive dispose after the call can be"," # charged. Anything less is not silence: a plain arg leaves the"," # obligation with the caller, so dropping it fabricates OWN001 on the"," # ubiquitous null-guard-helper idiom (TZ итерация 6)."," unverified = _unverified_transfer_calls(nodes, mos)"," untracked = frozenset(a for a, _c, _t, _l in unverified)"," if advisories is not None and unverified:"," # OWN051, gated on args that actually carry an obligation here (an"," # acquired local or a fresh factory result) — a plain value passed"," # to a may-position is not a gap worth a note."," owned_here = _collect_vars(nodes, \"acquire\", \"var\") | {"," v for v, c in _call_result_callees(nodes).items()"," if c and _callee_returns_fresh(c, mos, first_party)}"," for arg, callee, transfer, cline in unverified:"," if arg not in owned_here:"," continue"," advisories.append(Finding("," file=ffile, line=cline, code=\"OWN051\","," component=fname, event=arg, handler=callee,"," message=(f\"cannot verify whether '{callee}' takes \""," f\"ownership of '{arg}' (inferred contract: \""," f\"{transfer}); optimistically assuming it does — \""," f\"'{arg}' is not checked past this call\"),"," kind=\"ownership transfer\", advisory=True))"," # Cross-branch locals (acquired inside an `if`/`while` branch but referenced"," # after the merge) must be declared once at the function's outer scope, or"," # the core rejects the post-merge reference as OWN030 (the bridge branch-"," # scope fix). Pre-declare them here, then skip their in-branch acquire."," # An untracked local must not be hoisted either — the hoisted `Let`"," # would re-mint the very obligation the untrack removed."," hoist = {k: v for k, v in"," _hoisted_branch_locals(nodes, mos, first_party).items()"," if k not in untracked}"," hoisted_lets: list[Stmt] = []"," for hname in sorted(hoist):"," hh = f\"loc_{loc[0]}\""," loc[0] += 1"," hline, hpool = hoist[hname]"," localmap[hname] = hh"," handles[hh] = {\"file\": ffile, \"line\": hline, \"event\": hname,"," \"component\": fname, \"resource\": \"flow-local\","," \"ever_released\": hname in released, \"pool\": hpool}"," hoisted_lets.append(Let(hh, Acquire(\"Disposable\", [], hline), hline))"," fbody = [*hoisted_lets,"," *_lower_flow(nodes, ffile, fname, handles, loc, localmap,"," released, mos, set(hoist), first_party, overloaded,"," untracked)]"," # A body that returns a value gets an owned return type, so the core"," # models `return s` as a valid ESCAPE (the value is discharged to the"," # caller) instead of a void-return mismatch that would leave `s` looking"," # leaked. The bridge does not know the real C# return type; an owned"," # resource type is what makes the escape check fire (any return-type"," # mismatch it then reports is skipped in check_facts)."," fret = (TypeRef(\"Disposable\", False, False)"," if _returns_value(nodes) else None)"," functions.append(FnDecl(fname, fparams, fret, fbody, 0))"," return (Module(str(facts.get(\"module\", \"Extracted\")),"," resources=_prelude_resources(),"," externs=list(_OWNERSHIP_SINK_EXTERNS),"," functions=functions,"," lifetimes=list(_CAPTURE_LIFETIMES) if any_capture else []),"," handles)","def _released_vars(nodes: list[Any]) -> set[str]:"," \"\"\"The set of local names with at least one `release` op anywhere in a flow body"," (recursing into `if` branches and `while` bodies). Used to word an OWN001 as"," \"never disposed\" (the name is absent here, so it was released on no path) vs \"not"," on every path\" (the name is present, but the core still found a leaking path).\"\"\""," out: set[str] = set()"," for n in nodes:"," if not isinstance(n, dict):"," continue"," op = n.get(\"op\")"," if op == \"release\":"," v = n.get(\"var\")"," if isinstance(v, str):"," out.add(v)"," elif op == \"if\":"," for branch in (\"then\", \"else\"):"," b = n.get(branch, [])"," if isinstance(b, list):"," out |= _released_vars(b)"," elif op == \"while\":"," b = n.get(\"body\", [])"," if isinstance(b, list):"," out |= _released_vars(b)","def _unverified_transfer_calls("," nodes: Any, mos: dict[str, Any] | None) -> list[tuple[str, str, str, int]]:"," \"\"\"Every `(arg_name, callee, transfer, line)` where a call op hands an argument"," to a summarized callee position whose resolved transfer is `may` or `unknown` —"," the ownership contract the solver could NOT verify (d5 §5's advisory channel)."," Two consumers in `to_module`: the arg names become the per-function UNTRACK set"," (the optimistic default made real — \"caller no longer owns\" means the local's"," obligation stops being tracked at that call, so neither a missing NOR a"," defensive dispose after it can be charged), and each hit on an owned local"," surfaces as an advisory OWN051 (the honest record of the gap; TZ итерация 6)."," Callees with no summary at all are NOT collected: the extractor already"," escape-drops locals it hands to unanalyzable callees, and the `$`-sink externs"," are verified contracts, not gaps.\"\"\""," out: list[tuple[str, str, str, int]] = []"," if mos is None:"," return out"," def walk(ns: Any) -> None:"," if not isinstance(ns, list):"," return"," for n in ns:"," if not isinstance(n, dict):"," op = n.get(\"op\")"," if op == \"call\":"," callee = str(n.get(\"callee\", \"\"))"," summ = mos.get(callee) if callee else None"," if summ is None and callee:"," identity = _canonical_callee_name(callee)"," if identity != callee:"," summ = mos.get(identity)"," args = n.get(\"args\", [])"," if summ is not None and isinstance(args, list):"," for j, a in enumerate(args):"," ps = next((q for q in summ.params if q.index == j), None)"," if ps is not None and ps.transfer in (Transfer.MAY,"," Transfer.UNKNOWN):"," out.append((str(a), callee, ps.transfer.value,"," _as_int(n.get(\"line\", 0))))"," elif op == \"if\":"," walk(n.get(\"then\"))"," walk(n.get(\"else\"))"," elif op == \"while\":"," walk(n.get(\"body\"))"," walk(nodes)","def _returns_value(nodes: Any) -> bool:"," \"\"\"True if a flow body returns a VALUE on some path (a `return` op carrying a"," `var`), recursing into if/while. The bridge then gives the function an owned"," return type so `return s` models a valid escape (discharge), not a void-return"," mismatch.\"\"\""," if not isinstance(nodes, list):"," return False"," if op == \"return\" and n.get(\"var\") is not None:"," return True"," if op == \"if\" and (_returns_value(n.get(\"then\"))"," or _returns_value(n.get(\"else\"))):"," if op == \"while\" and _returns_value(n.get(\"body\")):"," return False","def _collect_vars(nodes: Any, op_kind: str, field: str) -> set[str]:"," \"\"\"Every string `field` of every `op_kind` op in a flow body (recursing into"," if/while). Used to gather the locals a body `acquire`s and the locals it"," `return`s, for P-005 D5.2 fresh-return inference.\"\"\""," if op == op_kind:"," v = n.get(field)"," out |= _collect_vars(n.get(\"then\"), op_kind, field)"," out |= _collect_vars(n.get(\"else\"), op_kind, field)"," out |= _collect_vars(n.get(\"body\"), op_kind, field)","def _has_bare_return(nodes: Any) -> bool:"," \"\"\"True if some `return` op carries NO `var` (a bare `return` / `return null` /"," a non-local expression) anywhere in the body. Such a path returns a non-owned"," value, so the method is not uniformly `fresh` — `_infer_return_skeleton` must not"," claim fresh/forward when one exists (P-005 D5.2 precision; Codex).\"\"\""," if op == \"return\" and n.get(\"var\") is None:"," if op == \"if\" and (_has_bare_return(n.get(\"then\"))"," or _has_bare_return(n.get(\"else\"))):"," if op == \"while\" and _has_bare_return(n.get(\"body\")):","def _call_result_callees(nodes: Any) -> dict[str, str | None]:"," \"\"\"Map each `result` local of a `call` op to the callee that produced it (for"," forward-return inference, P-005 D5.2). A local bound by two *different* callees"," (e.g. on separate branches) maps to None — ambiguous, so never claimed as a"," forward-return (precision-first).\"\"\""," out: dict[str, str | None] = {}"," def visit(ns: Any) -> None:"," res = n.get(\"result\")"," callee = n.get(\"callee\")"," if isinstance(res, str) and isinstance(callee, str) and callee:"," out[res] = None if res in out and out[res] != callee else callee"," visit(n.get(\"then\"))"," visit(n.get(\"else\"))"," visit(n.get(\"body\"))"," visit(nodes)","def _infer_return_skeleton(nodes: Any, param_names: set[str],"," first_party: frozenset[str] = frozenset()) -> ReturnSkeleton:"," \"\"\"Infer a method's owned-return kind for the D5.0 solver (P-005 D5.2, T1)."," `fresh` — every `return ` path returns a local the body itself `acquire`d"," (a factory: `acquire x; …; return x`). A returned **parameter** is NOT fresh"," (that is the wrap/alias case, T4 / D5.4) — claiming fresh there would make a"," caller acquire a value it does not own. `forward` — a single returned local that"," is the result of a first-party `call` (a factory-of-factory: `var t = Make();"," return t;`); the solver propagates `Make`'s own return kind. Anything else stays"," `none` (no claim) — precision-first: we only mark a call an acquire site when we"," can prove the result is freshly owned.\"\"\""," returned = _collect_vars(nodes, \"return\", \"var\")"," if not returned:"," return ReturnSkeleton() # void / no value return"," if _has_bare_return(nodes):"," # some normal-return path yields a non-owned value (`return null` / bare"," # `return`), so the method is not uniformly fresh — a caller dropping the"," # result must not be charged a leak on that path. Make no claim (Codex)."," return ReturnSkeleton()"," acquired = _collect_vars(nodes, \"acquire\", \"var\")"," call_results = _call_result_callees(nodes)"," # `fresh` only when EVERY returned local is acquired here and *nowhere else*. A local"," # that is also a call result on another path is mixed-origin (`if c: x = acquire()"," # else: x = other()`) — claiming fresh would make a caller acquire a value it does not"," # own on the non-acquire path, fabricating OWN001/OWN002 there. Degrade (CodeRabbit)."," if all(v in acquired and v not in param_names and v not in call_results"," for v in returned):"," return ReturnSkeleton(\"fresh\")"," if len(returned) == 1:"," (v,) = tuple(returned)"," callee = call_results.get(v)"," if callee and v not in param_names and v not in acquired:"," if _canonical_callee_name(callee) not in first_party \\"," and _is_bcl_fresh_factory(callee):"," # a thin wrapper returning a BCL factory's result is itself `fresh` — the"," # caller owns it (Codex). Without this the return is a `forward` to an"," # external (bodyless) callee, which the solver degrades to `unknown`, so a"," # dropped `Make()` whose body is `return File.OpenRead(p)` leaks invisibly."," # Tier A overrides Tier B: if `callee` is a first-party method (it has its"," # own summary, fresh or not), do NOT apply the bare BCL table — `forward` so"," # the solver resolves the wrapper through that summary instead (Codex P2)."," return ReturnSkeleton(\"fresh\")"," return ReturnSkeleton(\"forward\", callee=callee)"," return ReturnSkeleton() # not provably owned -> no claim","# P-006/2b: a method's ownership CONTRACT is its parameters' effects. Encoding","# each effect as the TypeRef `collect_signatures` reads (a resource-typed value =>","# CONSUME, a borrowed type => BORROW/BORROW_MUT, anything else => PLAIN) lets the","# SAME core signature table + `lower_call` resolve a call's per-argument effects —","# so cross-method ownership transfer is checked compositionally (the inter-","# procedural island) with NO new checker. The resource name is the prelude","# `Disposable` (any prelude resource would do; what matters is that it is owned).","_PARAM_EFFECT_TYPE = {"," \"consume\": TypeRef(\"Disposable\", False, False), # takes ownership"," \"borrow\": TypeRef(\"Disposable\", True, False), # shared loan, noescape"," \"borrow_mut\": TypeRef(\"Disposable\", True, True), # exclusive loan, noescape","# P-005 D5.1b — the per-call-site ownership-contract channel. The extractor cannot","# always pin a call's ownership effect from a first-party body: a BCL sink (e.g.","# `new StreamReader(s, leaveOpen: false)`) or a `[ConsumesOwnership]`-style","# annotation lives outside our summary set. Rather than grow a bespoke lowering for","# each such case, we pre-declare three fixed sink externs and let the extractor","# route any call's per-argument ownership through them: a `call $consume [x]` takes","# ownership of `x`, `$borrow`/`$borrow_mut` lend it for the call. They resolve via","# the SAME `collect_signatures` + `lower_call` path as any contracted call (so a","# later use of a consumed `x` is OWN002, an un-discharged borrow is still OWN001) —","# no new checker, no new flow lowering. Externs are declaration-only, never leak-","# checked themselves, and the `$` prefix cannot collide with a real C# member name.","_OWNERSHIP_SINK_EXTERNS = ("," ExternDecl(\"$consume\", [EffectParam(Effect.CONSUME, \"Disposable\", 0)], None, 0),"," ExternDecl(\"$borrow\", [EffectParam(Effect.BORROW, \"Disposable\", 0)], None, 0),"," ExternDecl(\"$borrow_mut\","," [EffectParam(Effect.BORROW_MUT, \"Disposable\", 0)], None, 0),","# The callee names a `call` op may resolve against in `lower_call` WITHOUT being a","# first-party function summary — the fixed sink externs. A call to any other callee","# that is not in the solved MOS is unresolvable (no signature) and must NOT be lowered","# to a `Call` (it would raise OWN040); see the `call` handler in `_lower_flow`.","_SINK_EXTERN_NAMES = frozenset(e.name for e in _OWNERSHIP_SINK_EXTERNS)","# A forward to a sink extern is a *known* transfer, so a skeleton can record the","# resolved path action directly — `$consume` is ownership leaving (a must-transfer),","# `$borrow` is a kept loan — rather than a `forward` edge to an unsummarized callee","# (which the solver would degrade to `unknown`, diluting a real `must` to plain).","# `$borrow_mut` is DELIBERATELY ABSENT (Codex P2): the transfer lattice carries no","# shared-vs-exclusive axis, so mapping it to `borrow` would silently downgrade an","# EXCLUSIVE loan to a shared one in the wrapper's contract — asserting something","# weaker than the truth. We decline the transitive claim instead (it falls through","# to a `forward` edge → `unknown` → the wrapper param stays plain, no false shared-","# borrow contract). The DIRECT `call $borrow_mut [x]` channel is unaffected and keeps","# full exclusivity through `lower_call`. Kept in sync with `_OWNERSHIP_SINK_EXTERNS`.","_SINK_PATH_ACTION = {\"$consume\": \"dispose\", \"$borrow\": \"borrow\"}","# A merged-overload transfer → the sink-extern channel that applies it at a DIRECT call","# site (so an overloaded name uses its conservative MOS contract, not the core's last-wins","# signature). `may`/`unknown` map to nothing (plain) — precision-first, never a guess.","_CHANNEL_FOR_TRANSFER = {Transfer.MUST: \"$consume\", Transfer.NO: \"$borrow\"}","# Tier B (P-005 D5.3 / P1a contracts): a curated table of well-known BCL *factories* whose","# return the caller OWNS — the producer half of the boundary contract (the consume/borrow","# *sink* half rides the `$consume`/`$borrow` channel above). These are pure factories: the","# result is a fresh owned `IDisposable` and the arguments are not resources, so a leaked","# `var s = File.OpenRead(p)` now surfaces as an OWN001 leak AT the factory call — it was","# invisible before (no body to infer `fresh` from; see docs/notes/corpus-benchmark.md).","# Overload-ambiguous *wrappers* that ADOPT an argument (e.g. `new StreamReader(stream)`) are","# deliberately excluded — that is the sink / T4 case, not a pure factory. Keyed by","# `Type.Method`; a callee matches on its last two dotted segments so a namespace-qualified","# `System.IO.File.OpenRead` resolves the same.","# The table, grouped by namespace so each entry's fully-qualified identity is exact. Only","# UNAMBIGUOUS static factories whose return the caller owns are listed — overload-ambiguous","# names are excluded on purpose (e.g. `new StreamReader(stream)` ADOPTS its arg; `Process.Start`","# is a static owned-Process factory but ALSO an instance method returning `bool`, so a bare","# match would fabricate ownership for `proc.Start()`). Crypto algorithm `Create()` factories are","# the high-value addition: `using var sha = SHA256.Create()` not disposed is a common real leak.","_BCL_FRESH_BY_NS = {"," \"System.IO\": ("," \"File.OpenRead\", \"File.OpenText\", \"File.OpenWrite\", \"File.Open\","," \"File.Create\", \"File.CreateText\", \"File.AppendText\", \"File.OpenHandle\","," ),"," \"System.Security.Cryptography\": ("," \"SHA1.Create\", \"SHA256.Create\", \"SHA384.Create\", \"SHA512.Create\", \"MD5.Create\","," \"Aes.Create\", \"RSA.Create\", \"ECDsa.Create\","," # P1a (stdlib contract pack): more well-known static factories whose result the caller"," # OWNS and must dispose. `XmlReader`/`XmlWriter.Create` return a fresh reader/writer; a"," # `JsonDocument` from `Parse` pools memory and must be disposed (a `var doc ="," # JsonDocument.Parse(json)` that drops `doc` is a common real leak)."," #"," # Relationship to the extractor's `IsOwningFactory` (frontend/roslyn/.../Program.cs) — NOT a"," # mirror, despite the old \"kept in lockstep\" wording. The two play different roles. The"," # extractor is the emission AUTHORITY: seeing `var x = Factory()` it emits `x` as an `acquire`"," # fact directly, so its list is the SUPERSET — File, crypto by `Create*`-prefix, Xml/Json, PLUS"," # ADO.NET (`ExecuteReader`/`CreateCommand`/`BeginTransaction`) and network `Accept*`. THIS table"," # is consulted only on the other path: a `call` op whose result the bridge must decide is"," # `fresh` (`_callee_returns_fresh`). Owning BCL factories are emitted as `acquire`, not `call`,"," # so this table is a deliberate SUBSET — the C#-only entries never arrive here as `call`s, so"," # adding them would be dead weight. Safety invariant: an owning BCL factory is emitted as"," # `acquire`. If the extractor ever emits a `call` op for one, add it here too (better: generate"," # both sides from `spec/ownir.schema.json` — see the tech-debt register). Keep the shared"," # File/crypto/Xml/Json entries aligned on that seam."," \"System.Xml\": ("," \"XmlReader.Create\", \"XmlWriter.Create\","," \"System.Text.Json\": ("," \"JsonDocument.Parse\",","_BCL_FRESH_FACTORIES = frozenset(e for es in _BCL_FRESH_BY_NS.values() for e in es)","# the fully-qualified identities (each under its real namespace), accepted beside the bare forms.","_BCL_FRESH_FQNS = frozenset(f\"{ns}.{e}\" for ns, es in _BCL_FRESH_BY_NS.items() for e in es)","def _canonical_callee_name(name: str) -> str:"," \"\"\"The identity a callee/method name is matched on: its `global::`-stripped form. The"," extractor may emit a fully-qualified call as `global::System.…` while the corresponding"," method definition (and so `mos` / `first_party`) carries the bare form. Stripping the"," qualifier on BOTH sides keeps a source-visible call from missing Tier A and falling through"," to the Tier B BCL table (CodeRabbit).\"\"\""," return name.removeprefix(\"global::\")","def _is_bcl_fresh_factory(callee: str) -> bool:"," \"\"\"True if `callee` names a curated BCL factory whose return the caller owns. Accepts"," ONLY the bare `Type.Method` (`File.OpenRead`, `SHA256.Create`) or its fully-qualified"," identity under that type's real namespace (`System.IO.File.OpenRead`,"," `System.Security.Cryptography.SHA256.Create`), with an optional `global::` qualifier — a"," same-named type in ANOTHER namespace (`MyCrypto.SHA256.Create`) is NOT a match."," Precision-first: we never fabricate ownership for a non-BCL look-alike (Codex / CodeRabbit).\"\"\""," if not callee:"," name = _canonical_callee_name(callee)"," return name in _BCL_FRESH_FACTORIES or name in _BCL_FRESH_FQNS","def _callee_returns_fresh(callee: str, mos: dict[str, Any] | None,"," first_party: frozenset[str] = frozenset()) -> bool:"," \"\"\"Whether a `call` to `callee` yields a fresh owned result the caller must release."," A first-party summary is AUTHORITATIVE — if one exists we trust its `returns`, so a"," same-named first-party `File.OpenRead` (Tier A) overrides the BCL table (Tier B) and is"," never given a fabricated `fresh` (Codex). Only a callee we have no body for falls back to"," the curated BCL factory table. The single source of truth shared by the leak pre-scan,"," the branch-hoist safety walk, and the flow lowering, so all three agree."," `first_party` carries Tier A's reach beyond the summary set: a method we compiled from"," source but DROPPED from `mos` (an overloaded name — see `_build_skeletons`) has no summary,"," yet the BCL table still must not apply to it, else a dropped/overloaded source `SHA256.Create`"," would look fresh on a direct call while a wrapper around it (which `_infer_return_skeleton`"," already excludes) stays silent. Suppress the Tier B fallback for any first-party name so"," direct and wrapper-returned paths agree (CodeRabbit). Precision-safe: no summary + first-party"," => no claim (a dropped overload we cannot prove owns its result).\"\"\""," identity = _canonical_callee_name(callee)"," summ = mos.get(callee) if mos is not None else None"," if summ is None and mos is not None and identity != callee:"," summ = mos.get(identity) # a `global::`-qualified call resolves to its bare summary"," if summ is not None:"," return getattr(summ, \"returns\", None) == \"fresh\""," if identity in first_party:"," return _is_bcl_fresh_factory(callee)","def _param_signals(pname: str, nodes: Any) -> tuple[bool, bool, bool]:"," \"\"\"Scan a flow body for how parameter `pname` is treated, returning"," (released, handed-to-a-call, used). Recurses into if/while branches so a"," discharge on any path counts.\"\"\""," rel = passed = used = False"," return rel, passed, used"," if op == \"release\" and str(n.get(\"var\")) == pname:"," rel = True"," elif op == \"call\":"," args = n.get(\"args\", [])"," if isinstance(args, list) and any(str(a) == pname for a in args):"," passed = True"," elif op == \"use\" and str(n.get(\"var\")) == pname:"," used = True"," elif op in (\"if\", \"while\"):"," subs = ([n.get(\"then\"), n.get(\"else\")] if op == \"if\""," else [n.get(\"body\")])"," for sub in subs:"," sr, sp, su = _param_signals(pname, sub)"," rel, passed, used = rel or sr, passed or sp, used or su"," return rel, passed, used","def _walk_release(pname: str, nodes: Any, rel_in: int) -> tuple[int, bool, bool]:"," \"\"\"Definite-release walk over one op sequence, for `_definite_release`."," Returns `(rel_out, falls_through, exits_ok)`: `rel_out` is the release state"," of the paths leaving the sequence bottom (0 = released on none, 1 = on some,"," 2 = on all), `falls_through` is whether any path reaches the bottom at all,"," and `exits_ok` is whether every `return` op seen so far was reached with the"," param already released. Ops that cannot affect or bypass a release are"," neutral by design: a compound op that COULD hide one (a future `try`/`using`)"," fails loud in `_lower_flow` first (the IR4 gate), so this walk never sees it.\"\"\""," rel = rel_in"," exits_ok = True"," return rel, True, exits_ok"," rel = 2"," elif op == \"return\":"," # a normal-return path ends here carrying the current state; the rest"," # of THIS sequence is unreachable."," return rel, False, exits_ok and rel == 2"," rt, lt, okt = _walk_release(pname, n.get(\"then\"), rel)"," re_, le, oke = _walk_release(pname, n.get(\"else\"), rel)"," exits_ok = exits_ok and okt and oke"," if lt and le:"," rel = rt if rt == re_ else 1"," elif lt or le:"," rel = rt if lt else re_"," else:"," return rel, False, exits_ok # both branches returned"," rb, lb, okb = _walk_release(pname, n.get(\"body\"), rel)"," exits_ok = exits_ok and okb"," # zero-trip entry joins with a completed iteration's exit state: a"," # release inside a loop is never definite for the fall-through. A"," # body that never completes (always returns) leaves only the"," # zero-trip path, so the entry state stands."," if lb and rb != rel:"," rel = 1"," return rel, True, exits_ok","def _definite_release(pname: str, nodes: Any) -> bool:"," \"\"\"True only when EVERY normal-return path through the body releases `pname`"," — the d5 note's `must` (\"released on all normal-return paths\"). A partial"," (one-branch / in-loop / guarded-by-early-return) release must join to `may`"," instead: flattening it to `consume` charges a caller's defensive dispose a"," false OWN002 and the helper itself a false OWN001 (TZ D1, reproduced).\"\"\""," rel, falls_through, exits_ok = _walk_release(pname, nodes, 0)"," return exits_ok and (not falls_through or rel == 2)","def _forward_targets(pname: str, nodes: Any,"," recurse: bool = True) -> list[tuple[str, int]]:"," \"\"\"Every `(callee, arg_index)` a `call` op hands `pname` to. The argument"," *position* is the callee's parameter index — what `solve()` resolves against"," the callee's summary (P-005 D5.1). With `recurse=False`, only top-level"," (straight-line) calls are counted, so a conditional/looped forward can be told"," apart from an unconditional one.\"\"\""," out: list[tuple[str, int]] = []"," if op == \"call\":"," callee = str(n.get(\"callee\", \"\"))"," if callee and isinstance(args, list):"," for j, a in enumerate(args):"," if str(a) == pname:"," out.append((callee, j))"," elif op in (\"if\", \"while\") and recurse:"," subs = ([n.get(\"then\"), n.get(\"else\")] if op == \"if\" else [n.get(\"body\")])"," out.extend(_forward_targets(pname, sub))","def _forward_path_action(callee: str, arg: int) -> PathAction:"," \"\"\"The skeleton path action for one forward edge. A forward to a fixed"," ownership-sink extern (D5.1b) is a *resolved* transfer recorded directly"," (`$consume` → `dispose`, `$borrow*` → `borrow`); any other callee is a"," `forward` edge the solver resolves against that callee's summary.\"\"\""," kind = _SINK_PATH_ACTION.get(callee)"," if kind is not None:"," return PathAction(kind)"," return PathAction(\"forward\", callee, arg)","def _merge_returns(rets: list[ReturnSkeleton]) -> ReturnSkeleton:"," \"\"\"The conservative return of a set of same-name overloads. Only a kind ALL"," overloads agree on survives (so a call to the name returns it regardless of which"," overload bound); a `forward`, an `aliasOf` (whose index is overload-specific), or"," any disagreement degrades to a no-op `unknown` return — never a fabricated `fresh`"," (which would mint a phantom acquire at the caller).\"\"\""," kinds = {r.kind for r in rets}"," if kinds == {\"fresh\"}:"," if kinds == {\"none\"}:"," return ReturnSkeleton(\"none\")"," if kinds == {\"aliased\"}:"," return ReturnSkeleton(\"aliased\")"," return ReturnSkeleton(\"unknown\") # mixed / forward / aliasOf -> fails closed","def _merge_skeletons(group: list[MethodSkeleton]) -> MethodSkeleton:"," \"\"\"Collapse same-name overloads into ONE conservative summary. The extractor"," names a call's callee `{Type}.{Method}` with no parameter signature (note's open"," question 2), so a forward to an overloaded name cannot pick an overload. Rather"," than drop them all (every such forward then stays `unknown`), join them on the"," lattice at (name, parameter-index) granularity: a parameter transfers `must` only"," when EVERY overload carrying that index consumes it, and an overload that merely"," keeps an index contributes a `borrow` path so the join can never fabricate a"," `must`. Disambiguating by argument type would need call-site type info the fact"," stream does not carry; arity is available but not modelled here (the join is"," already precision-safe, just coarser than a per-arity split would be).\"\"\""," if len(group) == 1:"," return group[0]"," by_index: dict[int, list[PathAction]] = {}"," names: dict[int, str] = {}"," for sk in group:"," for p in sk.params:"," # an overload that does nothing with this index KEEPS it (= `no`); record"," # that as a borrow path so it joins in rather than vanishing from concat."," by_index.setdefault(p.index, []).extend(p.paths or (PathAction(\"borrow\"),))"," names.setdefault(p.index, p.name)"," params = tuple("," ParamSkeleton(i, names[i], True, tuple(by_index[i])) for i in sorted(by_index)"," )"," # the merged location must not depend on `functions[]` input order (the summary"," # dump is a deterministic parity surface): take the smallest (file, line) pair."," floc = min((sk.file, sk.line) for sk in group)"," return MethodSkeleton(group[0].key, params,"," _merge_returns([sk.ret for sk in group]), floc[0], floc[1])","def _build_skeletons(raw_fns: list[Any]) -> list[MethodSkeleton]:"," \"\"\"Derive a Method Ownership Summary skeleton per first-party function from its"," flow body, for the D5.0 solver (P-005 D5.1). A parameter's path actions mirror"," the same priority `_infer_param_effect` uses — a release is a `dispose`, a"," forward to another call is a `forward` edge the solver resolves, an"," otherwise-used param is a `borrow` — so the solved transfer lines up with the"," bridge's local inference on the non-forward cases and only *resolves* the"," forwarded one."," Three precision rules keep `solve()` from ever inferring a false `must` (which"," would upgrade a caller to `consume` and fabricate OWN002/OWN001):"," - an **explicit** `effect` seeds the skeleton (it is a documented override —"," `consume`→`dispose`, `borrow`/`borrow_mut`→`borrow`, anything else owns"," nothing), so a contract-only callee resolves correctly even with no body;"," - a release counts as a `dispose` path alone only when it is **definite** —"," on every normal-return path (`_definite_release`). A partial release"," (one branch / in a loop / behind an early return) also emits a kept"," (`borrow`) path, so the join is `may` and the caller stays plain — a"," flattened `must` would charge a defensive caller-side dispose a false"," OWN002/OWN003 (TZ D1);"," - a forward is resolved only when it is a **single, unconditional,"," straight-line** handoff. A conditional / looped / multi-target forward also"," emits a non-transfer (`borrow`) path, so the lattice yields `may`/`no`"," (→ the caller stays plain), never a flattened `must`. Per-path structure is"," not modelled here — D5.1 deliberately under-claims rather than guess."," The return kind is inferred too (P-005 D5.2, T1): a body that `acquire`s a local"," and returns it is `fresh` (a factory); `_infer_return_skeleton` keeps it"," precision-first (a returned parameter is never `fresh`)."," Same-name overloads are MERGED into one conservative summary (`_merge_skeletons`)"," rather than dropped: the call node names its callee without a parameter signature"," (note's open question 2), so a forward to an overloaded name cannot pick an"," overload, but a lattice join over the overloads still resolves it precision-safely"," (and lets a uniformly-`fresh` overloaded factory be seen as fresh).\"\"\""," counts = Counter(str(fn.get(\"name\", \"\")) for fn in raw_fns if isinstance(fn, dict))"," # every first-party method name (even overloaded ones): the BCL fresh-factory table"," # must NOT apply to a call whose target we compile from source — Tier A (the"," # first-party summary) authoritatively overrides Tier B (the curated BCL table) even"," # when the source method happens to share a BCL factory's name (Codex P2)."," first_party = frozenset(_canonical_callee_name(k) for k in counts if k)"," by_key: dict[str, list[MethodSkeleton]] = {}"," for fn in raw_fns:"," if not isinstance(fn, dict):"," key = str(fn.get(\"name\", \"\"))"," if not key:"," body = fn.get(\"body\", [])"," body = body if isinstance(body, list) else []"," raw_params = fn.get(\"params\", [])"," raw_params = raw_params if isinstance(raw_params, list) else []"," params: list[ParamSkeleton] = []"," for i, p in enumerate(raw_params):"," if not isinstance(p, dict):"," cname = str(p.get(\"name\", \"?\"))"," eff = p.get(\"effect\")"," paths: tuple[PathAction, ...]"," if eff == \"consume\":"," paths = (PathAction(\"dispose\"),) # explicit override"," elif eff in (\"borrow\", \"borrow_mut\"):"," paths = (PathAction(\"borrow\"),)"," elif isinstance(eff, str):"," paths = () # explicit non-owning"," rel, passed, used = _param_signals(cname, body)"," if rel:"," if _definite_release(cname, body):"," paths = (PathAction(\"dispose\"),)"," else:"," # released on SOME paths only (TZ D1): a kept path exists,"," # so record it beside the dispose and let the lattice join"," # yield `may` — the caller stays plain, never a flattened"," # `must` that would charge its defensive dispose a false"," # OWN002/OWN003."," paths = (PathAction(\"dispose\"), PathAction(\"borrow\"))"," elif passed:"," allt = _forward_targets(cname, body)"," top = _forward_targets(cname, body, recurse=False)"," paths = tuple(_forward_path_action(c, j) for c, j in allt)"," if not (len(allt) == 1 and len(top) == 1):"," # not a single unconditional handoff: a no-transfer path"," # exists (other branch / zero-trip loop / sibling call), so"," # the join is `may`/`no`, never a false `must`."," paths = (*paths, PathAction(\"borrow\"))"," elif used:"," paths = (PathAction(\"borrow\"),)"," else:"," paths = ()"," params.append(ParamSkeleton(i, cname, True, paths))"," pnames = {str(p.get(\"name\", \"\")) for p in raw_params if isinstance(p, dict)}"," ret = _infer_return_skeleton(body, pnames, first_party)"," # carry the declaration file so the summary dump is navigable (functions[]"," # entries carry no line of their own — params do; line stays 0)."," by_key.setdefault(key, []).append("," MethodSkeleton(key, tuple(params), ret, str(fn.get(\"file\", \"?\"))))"," # one skeleton per name: solve() keys by name (a forward names its callee with no"," # signature), so same-name overloads are joined into a single conservative summary."," return [_merge_skeletons(group) for group in by_key.values()]","def _infer_param_effect(pname: str, nodes: Any,"," forward_transfer: Transfer | None = None) -> str | None:"," \"\"\"Infer a parameter's ownership CONTRACT from the callee's OWN body — the"," bounded inter-procedural step that lets first-party C# be checked without"," annotating every method. A param the body discharges (release) on EVERY"," normal-return path is CONSUME (ownership taken and discharged); a partial"," release (one branch / in a loop / behind an early return) is `may` and stays"," plain — flattening it to consume would charge a caller's defensive dispose a"," false OWN002 (TZ D1). One only read and retained is a BORROW (the"," caller keeps ownership, must still release). A param handed to another call"," used to be ambiguous and stay plain; **P-005 D5.1** resolves it through the"," call graph: `forward_transfer` is the solved transfer of that param (must →"," CONSUME, no → BORROW, may/unknown → stay plain, precision-first). We"," deliberately do NOT treat `return ` as a consume signal: the bridge"," does not yet model returned (owned) VALUES, so a returned param is"," consume-and-handed-back, not a plain consume. Inference never upgrades a"," borrow to a consume (or vice-versa) on a guess — an explicit `effect` in the"," fact always wins over inference.\"\"\""," rel, passed, used = _param_signals(pname, nodes)"," if rel:"," if _definite_release(pname, nodes):"," return \"consume\""," return None # released on SOME paths only -> `may` -> plain (TZ D1)"," if passed:"," if forward_transfer == Transfer.MUST:"," if forward_transfer == Transfer.NO:"," return \"borrow\""," return None # may / unknown / unresolved -> plain (precision-first)"," if used:"," return \"borrow\""," return None","def _lower_fn_params(fn: dict[str, Any], ffile: str, fname: str,"," handles: dict[str, dict[str, Any]], loc: list[int],"," localmap: dict[str, str],"," released_vars: set[str],"," mos: dict[str, Any] | None = None) -> list[Param]:"," \"\"\"Lower a function's declared ownership parameters into core Params. Each"," gets a globally-unique synthetic symbol (`parg_`) so a finding maps back to"," its C# location; `localmap` resolves later references (and call arguments) by"," the C# name. A `consume` parameter is an owned obligation in the callee — the"," same Param the `.own` front-end produces — so an undischarged one leaks (the"," obligation having moved in from the caller). A parameter with no explicit"," `effect` has its contract INFERRED from the body (`_infer_param_effect`).\"\"\""," out: list[Param] = []"," raw = fn.get(\"params\", [])"," if not isinstance(raw, list):"," summ = mos.get(fname) if mos is not None else None"," for i, p in enumerate(raw):"," if not isinstance(p, dict):"," cname = str(p.get(\"name\", \"?\"))"," eff = p.get(\"effect\")"," if not isinstance(eff, str):"," # D5.1: when the contract is inferred, resolve a *forwarded* param's"," # transfer through the call graph (the solved MOS for this method)."," ftrans = None"," if summ is not None:"," ps = next((q for q in summ.params if q.index == i), None)"," if ps is not None:"," ftrans = ps.transfer"," eff = _infer_param_effect(cname, fn.get(\"body\", []), ftrans)"," tref = _PARAM_EFFECT_TYPE.get(eff) if isinstance(eff, str) else None"," if tref is None:"," tref = TypeRef(\"int\", False, False) # a plain (non-owned) parameter"," sym = f\"parg_{loc[0]}\""," loc[0] += 1"," line = _as_int(p.get(\"line\", 0))"," localmap[cname] = sym"," handles[sym] = {\"file\": ffile, \"line\": line, \"event\": cname,"," \"component\": fname, \"resource\": \"flow-local\","," \"ever_released\": cname in released_vars}"," out.append(Param(sym, tref, line))","def _branch_hoist_safe(nodes: Any, name: str, mos: dict[str, Any] | None,"," first_party: frozenset[str] = frozenset()) -> bool:"," \"\"\"Whether hoisting `name` to an *unconditional* outer-scope acquire is leak-safe."," Hoisting makes a conditional acquire unconditional, so it is only safe if no path"," can EXIT (early `return`) before the post-merge release on a path where the source"," did not already acquire `name` — otherwise the hoisted resource leaks on that path,"," a *false* OWN001 (e.g. `if c: acquire r else: return; release r`). This is a"," definite-assignment walk: an `if` establishes acquisition only when **both** arms"," do, a `while` body never does (it may run zero times), and a `return` that does not"," itself return `name` (a discharge) on a not-yet-acquired path is unsafe. (CodeRabbit"," Major on #120.)\"\"\""," def acquires(n: dict[str, Any]) -> bool:"," if n.get(\"op\") == \"acquire\" and str(n.get(\"var\", \"\")) == name:"," if n.get(\"op\") == \"call\" and str(n.get(\"result\", \"\")) == name:"," return _callee_returns_fresh(str(n.get(\"callee\", \"\")), mos, first_party)"," def analyze(seq: Any, acquired: bool) -> tuple[bool, bool]:"," # (safe, acquired_after); safe=False => a fabricated-leak exit exists."," if not isinstance(seq, list):"," return True, acquired"," for n in seq:"," if acquires(n):"," acquired = True"," elif op == \"return\":"," if not acquired and str(n.get(\"var\", \"\")) != name:"," return False, acquired"," s1, a1 = analyze(n.get(\"then\"), acquired)"," if not s1:"," s2, a2 = analyze(n.get(\"else\"), acquired)"," if not s2:"," acquired = acquired or (a1 and a2)"," s, _ = analyze(n.get(\"body\"), acquired) # 0-trip: no acquisition gained"," if not s:"," return True, acquired"," return analyze(nodes, False)[0]","def _hoisted_branch_locals(nodes: Any,"," mos: dict[str, Any] | None,"," first_party: frozenset[str] = frozenset(),"," ) -> dict[str, tuple[int, bool]]:"," \"\"\"Locals acquired INSIDE an `if`/`while` branch but referenced after the merge."," The core resolver is strictly lexical: an `if` pushes a scope per branch and pops"," it at the merge, so a `Let` emitted inside a branch is out of scope afterwards."," The bridge's flat `localmap`, however, lets a later `release`/`use` resolve to"," that branch-scoped handle — which the core then rejects as OWN030 (undefined"," name), and `check_facts` raises. C# allows this shape (`IDisposable r; if (c) r ="," new X(); else r = new Y(); r.Dispose();`) because the *declaration* lives in the"," outer scope. So such a local must be declared once at the function's outer scope."," A name is hoisted iff (1) it is **acquired** (a plain `acquire`, or a `fresh`-"," returning call `result`) at depth ≥ 1; (2) its shallowest **reference** (use/release/"," return/call-arg) is at **depth 0** — the function top, so function-scope is the"," common-dominator (a depth ≥ 1 reference, e.g. acquired at depth 2 / released at depth"," 1, is *not* dominated by function-top, so hoisting there would leak on a sibling path;"," that nested variant stays a narrower limitation); (3) it is not acquired inside a"," `while` body (loop iterations are cumulative — hoisting `while { r = acquire() };"," release r` to one acquire would hide a per-iteration leak); and (4) `_branch_hoist_safe`"," holds — no path can early-`return` before the release on a path that did not acquire"," the local (else the unconditional hoisted acquire fabricates a leak — a *false*"," OWN001). The returned `(line, pool)` is the first branch-acquire site and whether it"," is an ArrayPool rent (so a hoisted pooled buffer keeps its kind). (Bridge branch-scope"," fix; Codex P2 on #116, loop exclusion Codex P1 + safety/pool CodeRabbit on #120.)\"\"\""," acq_depth: dict[str, int] = {} # name -> shallowest acquire depth"," acq_line: dict[str, int] = {} # name -> first-seen acquire line"," acq_pool: dict[str, bool] = {} # name -> is an ArrayPool rent (any acquire)"," ref_depth: dict[str, int] = {} # name -> shallowest non-acquire reference depth"," loop_acq: set[str] = set() # names acquired anywhere inside a `while` body"," def fresh_result(n: dict[str, Any]) -> str | None:"," callee, res = n.get(\"callee\"), n.get(\"result\")"," if not (isinstance(res, str) and res and isinstance(callee, str) and callee):"," return None"," return res if _callee_returns_fresh(callee, mos, first_party) else None"," def note_ref(name: str, depth: int) -> None:"," if name not in ref_depth or depth < ref_depth[name]:"," ref_depth[name] = depth"," def walk(ns: Any, depth: int, in_loop: bool) -> None:"," line = _as_int(n.get(\"line\", 0))"," acq = (str(n.get(\"var\", \"?\")) if op == \"acquire\""," else fresh_result(n) if op == \"call\" else None)"," if acq is not None:"," if acq not in acq_depth or depth < acq_depth[acq]:"," acq_depth[acq] = depth"," acq_line.setdefault(acq, line)"," if op == \"acquire\" and n.get(\"kind\") == \"pool\":"," acq_pool[acq] = True"," if in_loop:"," loop_acq.add(acq)"," if op in (\"use\", \"release\", \"overspan\", \"return\"):"," v = n.get(\"var\")"," if isinstance(v, str):"," note_ref(v, depth)"," elif op == \"call\":"," for a in (n.get(\"args\") or []):"," note_ref(str(a), depth)"," if op == \"if\":"," walk(n.get(\"then\"), depth + 1, in_loop)"," walk(n.get(\"else\"), depth + 1, in_loop)"," walk(n.get(\"body\"), depth + 1, True)"," walk(nodes, 0, False)"," # Only `if`-branch acquires are hoistable: branches are mutually exclusive, so"," # exactly one acquire runs and a single unconditional one is balanced. A `while`"," # body is CUMULATIVE — hoisting it would collapse 0..N iterations into one acquire"," # and hide a per-iteration leak (Codex P1), so a loop-acquired local is excluded (it"," # keeps its pre-existing behaviour; a loop-aware model is a separate follow-up)."," return {name: (acq_line[name], acq_pool.get(name, False))"," for name, d in acq_depth.items()"," if d >= 1 and ref_depth.get(name, -1) == 0 and name not in loop_acq"," and _branch_hoist_safe(nodes, name, mos, first_party)}","def _lower_flow(nodes: list[Any], ffile: str, fname: str,"," handles: dict[str, dict[str, Any]], loc: list[int],"," localmap: dict[str, str],"," released_vars: set[str],"," mos: dict[str, Any] | None = None,"," hoisted: set[str] | None = None,"," first_party: frozenset[str] = frozenset(),"," overloaded: frozenset[str] = frozenset(),"," untracked: frozenset[str] = frozenset()) -> list[Stmt]:"," \"\"\"Lower one OwnIR flow body (B0b/B2) into core statements. acquire/use/release/"," return reference a C# local by name (`var`); `if` carries `then`/`else`"," sub-bodies; `while` carries a `body` (a back-edge — the core's worklist fixpoint"," checks it, P-016 A1). Each acquire gets a globally-unique handle `loc_` (so a"," finding maps back to the C# local); `localmap` resolves later references within"," the same function and its branches/loops."," P-005 D5.2 (T1): a `call` op that binds a `result` local, whose callee's solved"," summary (`mos`) returns `fresh`, is **also** lowered as an `acquire` of that"," local — the call site is a factory, so the result is a newly-owned obligation and"," the existing leak / double-release / use-after-release checks apply to it."," `hoisted` names (see `_hoisted_branch_locals`) are declared once at the function's"," outer scope by the caller, so an in-branch acquire of such a name is SKIPPED here"," (the hoisted `Let` already declared+acquired it) — this keeps a cross-branch local"," in scope after the merge instead of emitting a branch-scoped `Let` the core would"," reject as OWN030."," `untracked` names (see `_unverified_transfer_calls`) are locals handed to a"," `may`/`unknown`-contract position: the optimistic default assumes ownership"," left the caller, so their acquires / fresh mints / alias mints are NOT emitted"," — later releases/uses of them resolve to nothing and stay silent, and the gap"," is surfaced as an advisory OWN051 instead of a fabricated verdict.\"\"\""," hoisted = hoisted or set()"," body: list[Stmt] = []"," line = _as_int(n.get(\"line\", 0))"," if op == \"acquire\":"," name = str(n.get(\"var\", \"?\"))"," if name in hoisted:"," # declared+acquired once at the outer scope (cross-branch local) — the"," # hoisted `Let` stands in for this in-branch acquire; emit nothing."," if name in untracked:"," # handed to a may/unknown-contract position later: optimistically"," # not ours to check (OWN051 carries the honest note). No obligation"," # is minted, so neither dropping nor disposing it can be charged."," handle = f\"loc_{loc[0]}\""," loc[0] += 1"," localmap[name] = handle"," handles[handle] = {\"file\": ffile, \"line\": line, \"event\": name,"," \"ever_released\": name in released_vars,"," # the extractor stamps an ArrayPool Rent's acquire kind so a"," # partial-path leak reads as a \"pooled buffer\", not \"disposable\"."," \"pool\": n.get(\"kind\") == \"pool\"}"," body.append(Let(handle, Acquire(\"Disposable\", [], line), line))"," elif op == \"alias_join\":"," # P-005 D5.4 (T4 wrap/adopt): `var` is a new owning handle on the SAME"," # resource obligation as `src` — a factory returning a wrapper of `src`,"," # or a ctor adopting `src` into an owning field (T4a ≡ T4b). The result"," # joins `src`'s alias set: dropping the wrapper while `src` is released is"," # NOT a leak, releasing both is OWN003, using either after release is"," # OWN002 — all evaluated per-RID by the core. Emitted only when `src` is a"," # tracked local; an unknown `src` makes no claim (precision-first)."," src_h = localmap.get(str(n.get(\"src\", \"\")))"," # Overwriting a tracked local KILLS its previous ownership binding — the"," # same rule as a call-result overwrite (D5.2). Drop the stale mapping FIRST,"," # even when the new alias's `src` is untracked: we make no claim on the new"," # handle, but the OLD obligation must not be silently discharged by a later"," # `release name` resolving to the dead handle (Codex P2). It leaks instead."," # A hoisted local keeps its single outer-scope handle (declared once)."," if name not in hoisted:"," localmap.pop(name, None)"," if src_h is not None and name not in hoisted and name not in untracked:"," handle = f\"loc_{loc[0]}\""," localmap[name] = handle"," handles[handle] = {\"file\": ffile, \"line\": line, \"event\": name,"," \"component\": fname, \"resource\": \"flow-local\","," \"ever_released\": name in released_vars,"," \"pool\": False}"," body.append(AliasJoin(handle, src_h, line))"," elif op == \"use\":"," h = localmap.get(str(n.get(\"var\")))"," if h is not None:"," body.append(Use(h, line))"," elif op == \"overspan\":"," # POOL005: a full-length Span/Memory view of a pooled buffer. The"," # extractor emits this only for a Rent'd local viewed with no length"," # bound; it routes to the same core op the `.own` `overspan` lowers to."," body.append(Overspan(h, line))"," elif op == \"release\":"," body.append(Release(h, line))"," h = localmap.get(str(v)) if v is not None else None"," body.append(Return(h, line))"," tn = n.get(\"then\", [])"," en = n.get(\"else\", [])"," then_b = _lower_flow(tn if isinstance(tn, list) else [], ffile, fname,"," handles, loc, localmap, released_vars, mos, hoisted,"," first_party, overloaded, untracked)"," else_b = _lower_flow(en if isinstance(en, list) else [], ffile, fname,"," body.append(If(\"?\", then_b, else_b, line))"," bn = n.get(\"body\", [])"," body_b = _lower_flow(bn if isinstance(bn, list) else [], ffile, fname,"," body.append(While(\"?\", body_b, line))"," # A call to a CONTRACTED callee (a function/extern whose signature the"," # bridge also lowered). `lower_call` resolves each argument's effect"," # from that signature: a `consume` parameter moves ownership across the"," # call (so a later use is OWN002), a `borrow` lends it. This is the"," # compositional island — the caller is checked against the callee's"," # contract, not its body. Arguments resolve C# locals/params via"," # `localmap`; an uncontracted call is simply not emitted by the"," # extractor (it is an escape, surfaced separately)."," identity = _canonical_callee_name(callee)"," raw_args = n.get(\"args\", [])"," summ = mos.get(callee) if (mos is not None and callee) else None"," # The merged summary, resolving a `global::`-qualified call to its bare key (like"," # `_callee_returns_fresh`). Used only by the overload channel below; the direct-`Call`"," # path stays on the raw `summ` so it never names a callee absent from the core"," # signature table (which would raise OWN040)."," merged = summ if summ is not None else ("," mos.get(identity) if (mos is not None and identity != callee) else None)"," if merged is not None and isinstance(raw_args, list) and ("," identity in overloaded"," or any(q.transfer in (Transfer.MAY, Transfer.UNKNOWN)"," for q in merged.params)):"," # Per-argument channel routing, for two shapes that must NOT emit a"," # direct `Call`:"," # - an OVERLOADED name: the core's last-wins signature table stores"," # one same-name FnDecl, so a direct Call would mis-apply one"," # overload's effect — a false OWN002 when overloads disagree;"," # - a callee with a MAY/UNKNOWN param: its arg is UNTRACKED (the"," # optimistic default + advisory OWN051), so a direct Call would"," # reference an undeclared name — a loud OWN030 (map-or-raise)."," # Apply the MOS contract per argument through the `$consume`/"," # `$borrow` channel instead, exactly as a FORWARD to this name"," # resolves (`must`→consume, `no`→borrow, `may`/`unknown`→nothing:"," # the untracked arg is never referenced). The channel emits sink"," # externs (never the callee name), so a qualified callee is safe"," # here. (Codex P2 / CodeRabbit.)"," for j, a in enumerate(raw_args):"," ps = next((q for q in merged.params if q.index == j), None)"," channel = _CHANNEL_FOR_TRANSFER.get(ps.transfer) if ps else None"," if channel is not None and str(a) not in untracked:"," body.append(Call(channel,"," [VarRef(localmap.get(str(a), str(a)), line)], line))"," # Only emit the `Call` when the callee is RESOLVABLE — a first-party function"," # with a summary, or a fixed ownership-sink extern. A real extraction surfaces"," # calls to callees we did not lower as functions (BCL / extension methods like"," # `GetRequiredService`); those have no signature, so `lower_call` would raise"," # OWN040. Drop them (no effect, no claim) — precision-safe, never a crash."," elif (summ is not None or callee in _SINK_EXTERN_NAMES) \\"," and callee and isinstance(raw_args, list):"," arg_refs: list[Expr] = [VarRef(localmap.get(str(a), str(a)), line)"," for a in raw_args]"," body.append(Call(callee, arg_refs, line))"," # P-005 D5.2 (T1): if the call binds a result and the callee is a known"," # `fresh`-returning factory, the result is a newly-owned local — mint an"," # acquire for it (the args' effects, if any, were applied by the Call"," # above; this models the return). A non-fresh / unknown return makes no"," # claim, so the result is never falsely owned (precision-first)."," result = n.get(\"result\")"," # Overwriting a tracked local KILLS its previous ownership binding: if the"," # old handle was not released before this call, it leaks (the reference is"," # lost). Drop the stale mapping before any optional fresh acquire, so"," # `acquire x; x = Unknown(); release x` leaks the original x rather than"," # reading as clean (CodeRabbit). A hoisted local keeps its single outer-scope"," # handle (it is declared once and never re-bound), so leave it alone."," if isinstance(result, str) and result and result not in hoisted:"," localmap.pop(result, None)"," if (isinstance(result, str) and result and result not in hoisted"," and result not in untracked"," and _callee_returns_fresh(callee, mos, first_party)):"," localmap[result] = handle"," handles[handle] = {\"file\": ffile, \"line\": line, \"event\": result,"," \"ever_released\": result in released_vars,"," body.append(Let(handle, Acquire(\"Disposable\", [], line), line))"," elif op in _FLOW_OPS:"," # In `_FLOW_OPS` (the declared vocabulary) but no branch above handled"," # it — an internal-consistency bug: the op was added to the authority set"," # and the schema without a matching lowering here. Fail loudly so the"," # gap surfaces in dev, not as a silently dropped obligation."," f\"OwnIR flow op {op!r} is declared in _FLOW_OPS but has no lowering \""," f\"in _lower_flow ({ffile}:{line}) — internal core inconsistency\")"," else:"," # Fail loud on an op this core cannot lower. Silently skipping it would"," # drop the acquire/release facts nested inside it — fabricating a leak (a"," # lost release) or hiding one (a lost acquire) while every existing fixture"," # still passes. A NEW op is a vocabulary change, not an additive optional"," # field, so it must bump OWNIR_VERSION on both the extractor and the core"," # (see spec/OwnIR.md); until then, refuse rather than mis-analyze."," f\"unknown OwnIR flow op {op!r} ({ffile}:{line}) — extractor/core \""," f\"vocabulary skew; a new op must bump OWNIR_VERSION (see spec/OwnIR.md)\""," )"," return body","def _handle_of(diag: object) -> str | None:"," \"\"\"The synthetic handle (`sub_N`) a diagnostic is about, recovered from its"," structured `subject` (`name#line`) — NOT by scraping the human message. Each"," acquire stamps `subject` in cfg.lower_let; None means the diagnostic carries"," no subject identity at all.\"\"\""," subject = getattr(diag, \"subject\", None)"," if not isinstance(subject, str) or not subject:"," return None"," return subject.split(\"#\", 1)[0]","# the violation-site label per flow-local code, for the 2-step \"origin -> manifestation\"","# reachability slice (P-015): the Rent/acquire site is where the resource came from, the","# diagnostic line is where the obligation is violated.","_FLOW_LOCAL_VIOLATION = {"," \"OWN002\": \"used here after it was released/returned\","," \"OWN003\": \"released/returned here a second time\","," \"OWN009\": \"may be used here after release on some path\","," \"OWN025\": \"viewed here at full length, past what it was rented for\",","def _flow_local_steps(sub: dict[str, Any], code: str, dline: int,"," pool: bool) -> tuple[tuple[str, int, str], ...]:"," \"\"\"A reachability slice for a flow-local finding: the Rent/acquire site (where the"," resource came from) -> the site where its obligation is violated (`dline`). Only the"," use/return/view codes have a distinct second site; a plain leak (OWN001) is a single"," point (the acquire itself) and gets no flow. Empty when a line is unknown or the two"," sites coincide (then the primary location already says it all).\"\"\""," viol = _FLOW_LOCAL_VIOLATION.get(code)"," acq = _as_int(sub.get(\"line\", 0))"," if viol is None or acq < 1 or dline < 1 or dline == acq:"," return ()"," f = str(sub.get(\"file\", \"?\"))"," name = sub.get(\"event\", \"?\")"," origin = f\"rented '{name}' here\" if pool else f\"acquired '{name}' here\""," return ((f, acq, origin), (f, dline, viol))","def dump_summaries(facts: dict[str, Any]) -> dict[str, Any]:"," \"\"\"The MOS observability / parity surface (roadmap stage 1, TZ §5.4): derive"," the skeletons, run the solver, and return the solved summaries plus the"," extern-boundary log as ONE deterministic document."," Two consumers, one contract:"," - a human asking \"why did this call stay plain?\" reads the method's summary"," (transfer per param, return kind) and the `unresolved` extern boundaries"," without reading bridge code;"," - the Rust port of the inference layer is diffed against this document"," (`oracle_exact`-style), which checks the port at the summary level — finer"," than diffing final diagnostics, where an inference bug can hide behind an"," unrelated silence."," Determinism is the contract: summaries are sorted by method key, the"," unresolved log arrives sorted from `solve_with_log`, and `to_dict` field"," order is fixed — the same facts yield byte-identical JSON regardless of"," `functions[]` input order. A failed solve degrades exactly like"," `check_facts` (empty summaries), with the reason in `degraded` — the same"," honesty OWN052 gives the checking path.\"\"\""," raw_fns = raw_fns if isinstance(raw_fns, list) else []"," degraded: str | None = None"," summaries: dict[str, Any] = {}"," unresolved: list[str] = []"," try:"," summaries, unresolved = solve_with_log(_build_skeletons(raw_fns))"," except Exception as exc:"," degraded = f\"{type(exc).__name__}: {exc}\""," \"module\": str(facts.get(\"module\", \"?\")),"," \"ownir_version\": OWNIR_VERSION,"," \"summaries\": [summaries[k].to_dict() for k in sorted(summaries)],"," \"unresolved\": unresolved,"," \"degraded\": degraded,","def check_facts(facts: dict[str, Any]) -> list[Finding]:"," \"\"\"Run the core checker over the lowered facts and return findings mapped"," back to their original C# locations (v0: the `event += without -=` leak)."," The fact->handle->diagnostic round-trip is fully ours: every error the core"," reports on the lowered module MUST attribute to a known subscription handle."," If one does not, the lowering has drifted from the core (or the core grew a"," diagnostic the bridge has not been taught to map) — we raise rather than"," silently dropping a real finding, since a swallowed leak is the worst"," outcome for a leak checker.\"\"\""," # P-016 B0a: build the core Module AST DIRECTLY from facts and check it — no"," # `.own` source text and no re-parse (the round-trip that existed since P-001)."," # `to_own` is kept as a human-readable sketch / test aid. Imported here to avoid"," # a module-level cycle (ownir is a leaf consumer)."," from .__main__ import check_module"," mos_notes: list[str] = []"," transfer_notes: list[Finding] = []"," mod, handles = to_module(facts, mos_notes, transfer_notes)"," diags = check_module(mod)"," # registration site of each DI service, to anchor a subscription-escape slice's"," # source hop: the injected event SOURCE is a registered service (P-006 + P-004), so"," # the reachability slice can point at where that longer-lived source was registered."," svc_loc = {str(s.get(\"name\", \"\")): (str(s.get(\"file\", \"?\")), _as_int(s.get(\"line\", 0)))"," for s in (facts.get(\"services\") or []) if isinstance(s, dict)}"," findings: list[Finding] = []"," for d in diags:"," if d.severity != Severity.ERROR:"," # The bridge SYNTHESISES return types and parameter effects (from inference"," # / extractor annotations); a handful of core diagnostics only report"," # INCONSISTENCIES in those synthesised shapes, which are artifacts of the"," # bridge's incomplete modeling, not real C# bugs (C# already type-checks)."," # They also carry no subject, so they cannot map to a handle. Skip them:"," # - OWN033/OWN035: return-TYPE mismatches (the bridge gives a function an"," # owned return type iff its body returns a value; the real leak/use"," # checks still run, and `return s` discharges via escape-on-return)."," # - OWN034/OWN041: effect-kind mismatches at a call, which surface when a"," # parameter's contract could not be inferred (an ambiguous pass-through"," # stays plain) -- a \"needs annotation / transitive inference\" gap, not a"," # leak. Surfacing these properly (with a subject) is a later step."," # - OWN040: a `call` to a callee the bridge did not lower as a function"," # (an extension/BCL method surfaced by the extractor). The `call` handler"," # already drops unresolvable callees, so this is belt-and-suspenders — a"," # synthetic-call artifact, never a real C# bug (C# already binds the call)."," if d.code in (\"OWN033\", \"OWN034\", \"OWN035\", \"OWN040\", \"OWN041\"):"," sub = handles.get(_handle_of(d) or \"\")"," if sub is None:"," f\"internal: the core reported [{d.code}] on the lowered facts \""," f\"that the bridge cannot map back to a C# subscription \""," f\"(subject={getattr(d, 'subject', None)!r}, \""," f\"message={d.message!r}). The OwnIR lowering has drifted from \""," f\"the core; teach the bridge this diagnostic rather than \""," f\"dropping the finding.\")"," event = sub.get(\"event\", \"?\")"," handler = sub.get(\"handler\", \"?\")"," component = sub[\"component\"]"," rkind = sub.get(\"resource\", \"subscription\")"," if rkind == \"flow-local\":"," # P-016 B0b/B2: path-sensitive local-IDisposable verdicts. The code is"," # the core's (OWN001/002/003/009); phrase it for the C# local."," name = event"," if d.code == \"OWN025\":"," # POOL005: a full-length view of a pooled buffer reaches past its"," # logical length. Report at the VIEW site (d.line — where the"," # unbounded AsSpan/Memory is taken), not the Rent site, and tag it"," # a pooled buffer rather than the generic disposable."," findings.append(Finding("," file=sub[\"file\"], line=d.line, code=d.code,"," component=component, event=name, handler=\"\","," message=(f\"pooled buffer '{name}' is viewed at its full \""," f\"length, past the logical length it was rented for \""," f\"(over-read / over-clear)\"),"," kind=\"pooled buffer\","," flow=_flow_local_steps(sub, d.code, d.line, True)))"," # An ArrayPool Rent is released by Return (a \"pooled buffer\"), not Dispose (a"," # \"disposable\"); the extractor stamps the acquire's kind so the flow path words"," # and tags it correctly — previously a Rent leaked/misused on a flow path was"," # mislabelled the generic \"disposable\" (e.g. a partial-throw-path Return)."," pool = sub.get(\"pool\")"," if d.code == \"OWN001\":"," # OWN001 spans \"released on 0 paths\" and \"released on some but not all\" —"," # the core's \"not on every path\". Word it from whether the flow body"," # released this local anywhere (ever_released): no release at all reads as"," # \"never returned/disposed\"; a partial release as \"not on every path\"."," if pool:"," if sub.get(\"ever_released\"):"," msg = (f\"pooled buffer '{name}' may not be returned to the \""," f\"pool on every path (leak)\")"," msg = (f\"pooled buffer '{name}' is rented but never \""," f\"returned to the pool (leak)\")"," msg = (f\"IDisposable local '{name}' may not be disposed on every path (leak)\""," if sub.get(\"ever_released\")"," else f\"IDisposable local '{name}' is never disposed (leak)\")"," elif pool:"," msg = {"," \"OWN002\": f\"pooled buffer '{name}' is used after it is returned to the pool\","," \"OWN003\": f\"pooled buffer '{name}' is returned to the pool more than once\","," \"OWN009\": (f\"pooled buffer '{name}' may be used after \""," f\"being returned on some path\"),"," }.get(d.code, f\"pooled buffer '{name}': {d.message}\")"," \"OWN002\": f\"IDisposable local '{name}' is used after it is disposed\","," \"OWN003\": f\"IDisposable local '{name}' is disposed more than once\","," \"OWN009\": f\"IDisposable local '{name}' may be used after disposal on some path\","," }.get(d.code, f\"IDisposable local '{name}': {d.message}\")"," findings.append(Finding("," file=sub[\"file\"], line=int(sub.get(\"line\", 0)), code=d.code,"," component=component, event=name, handler=\"\", message=msg,"," kind=\"pooled buffer\" if pool else \"disposable\","," flow=_flow_local_steps(sub, d.code, d.line, bool(pool))))"," if sub.get(\"di_source_life\"):"," # OWN014 region escape sourced from the DI graph (P-006 + P-004): the"," # injected event SOURCE is registered with a lifetime that the engine"," # proved strictly outlives the subscriber, so the strong subscription"," # promotes '{component}' to the source's lifetime and it can never be"," # collected — the captive/zombie case, now PROVEN (not the honest OWN001"," # warning an unresolved-lifetime source gets). Error-tier."," life = sub[\"di_source_life\"]"," st = sub.get(\"source_type\", \"?\")"," nice = {"," \"singleton\": \"a DI singleton (application-lifetime) service\","," \"scoped\": \"a DI scoped service\","," \"transient\": \"a DI transient service\","," }.get(life, f\"a DI {life} service\")"," message = (f\"event '{event}' is subscribed (handler '{handler}') to \""," f\"'{st}' — {nice} that outlives '{component}'; the strong \""," f\"subscription promotes '{component}' to the source's \""," f\"lifetime, so it can never be collected — a captive/region \""," f\"escape (leak, no release path)\")"," # reachability slice: the subscribe site -> where the longer-lived source was"," # registered (its lifetime is why this escapes). The source hop is present only"," # when the registration site is known from the services graph."," sub_ln = _as_int(sub.get(\"line\", 0))"," esc_flow: tuple[tuple[str, int, str], ...] = ()"," if sub_ln >= 1:"," steps = [(str(sub[\"file\"]), sub_ln,"," f\"'{component}' subscribes '{event}' to '{st}' here\")]"," sf, sl = svc_loc.get(st, (\"?\", 0))"," if sl >= 1:"," steps.append((sf, sl,"," f\"source '{st}' ({life}) registered here — outlives \""," f\"'{component}'\"))"," if len(steps) >= 2:"," esc_flow = tuple(steps)"," component=component, event=event, handler=handler,"," message=message, kind=\"subscription token\", flow=esc_flow))"," if rkind == \"capture\":"," # OWN014 region escape (P-004): the lifetime engine proved the event"," # SOURCE outlives the subscriber, so the strong (tokenless) subscription"," # promotes '{component}' to the source's longer lifetime and it can"," # never be collected. This is the `event += handler` fire-and-forget;"," # the mitigation — a disposable token released on close — would be a"," # `resource: \"subscription\"` (OWN001), not this. A provable leak, so it"," # stays error-tier (severity None)."," src = sub.get(\"source\", \"?\")"," origin = (\"a static (process-lived) event source\" if src == \"static\""," else f\"a longer-lived source ('{src}')\")"," f\"{origin} that outlives '{component}'; the strong \""," f\"lifetime, so it can never be collected — a region escape \""," f\"(leak, no release path)\")"," message=message, kind=\"subscription token\"))"," _, kind = _RESOURCES.get(rkind, _RESOURCES[\"subscription\"])"," # P-004 tiering: only the plain `event += handler` leak (the else branch"," # below) grades its severity from the source's proven lifetime; every other"," # resource is a provable leak and stays at the host's --severity (error)."," fsev: str | None = None"," if rkind == \"timer\":"," message = (f\"timer '{event}' (handler '{handler}') is started but \""," f\"never stopped or detached — the running timer keeps \""," f\"'{component}' alive (leak)\")"," elif rkind == \"disposable\":"," typ = sub.get(\"type\")"," of_type = f\" (type '{typ}')\" if typ else \"\""," message = (f\"IDisposable field '{event}'{of_type} is never \""," f\"disposed — its owner '{component}' leaks it (leak)\")"," elif rkind == \"local-disposable\":"," message = (f\"local IDisposable '{event}'{of_type} is created but \""," f\"never disposed (leak)\")"," elif rkind == \"subscribe\":"," # source-lifetime tiering (P-004), mirroring the `+=` else branch: a"," # self-rooted subscribe is already dropped in to_module (silent); an"," # injected source has UNKNOWN lifetime -> warning (\"may outlive\"); a"," # static/external/unknown source stays a provable leak (error)."," if sub.get(\"source\") == \"injected\":"," fsev = \"warning\""," message = (f\"the result of '{event}' is ignored — its IDisposable \""," f\"subscription is never disposed; the source is an \""," f\"injected dependency whose lifetime is unknown, so it \""," f\"may outlive and keep '{component}' alive (possible \""," f\"leak)\")"," message = (f\"the result of '{event}' is ignored — the IDisposable \""," f\"subscription is never disposed, leaking \""," f\"'{component}' (leak)\")"," elif rkind == \"pool\":"," message = (f\"pooled buffer '{event}' is rented but never returned \""," f\"to the pool (leak)\")"," # The source's lifetime decides the severity (the extractor stamps"," # `source`): a static event is process-lived -> a provable leak (error);"," # an injected dependency (ctor param / field / property) has UNKNOWN"," # lifetime -> a warning (\"may outlive this\", honest until ownership"," # modelling can prove it). A lambda handler has no `-=` handle, so it"," # could never be detached even on purpose — worth spelling out."," lam = (\" — and being an inline lambda it has no '-=' handle, so it \""," \"could never be detached\") if sub.get(\"lambda\") else \"\""," message = (f\"event '{event}' is subscribed (handler '{handler}') \""," f\"but never unsubscribed; its source is an injected \""," f\"dependency whose lifetime is unknown, so it may \""," f\"outlive and keep '{component}' alive (possible \""," f\"leak{lam})\")"," f\"but never unsubscribed — the source keeps \""," f\"'{component}' alive (leak{lam})\")"," findings.append(Finding("," file=sub[\"file\"], line=int(sub.get(\"line\", 0)), code=d.code,"," component=component, event=event, handler=handler,"," message=message, kind=kind, severity=fsev))"," # DI001 (captive dependency): a separate core analysis over the registration"," # graph, not the acquire/release model — the bridge just routes the facts to"," # it (see ownlang/di.py). Findings carry the registration site as file/line."," findings.extend(_di_findings(facts))"," # EFF001 (effect storm): a separate core analysis over the render-scope binding"," # graph (ownlang/effects.py), NOT the acquire/release model. The bridge routes"," # the optional `effects` facts to it; the frontend only states what each binding"," # syntactically is — the stability verdict is the core's."," findings.extend(_effect_findings(facts))"," # OWN050 (P-014 Tier A): a `+=` whose declaring type could not be resolved —"," # an advisory \"leakage analysis skipped\" note, never a leak. Routed through"," # this side path so it bypasses the ERROR-only diagnostic mapping above."," findings.extend(_unresolved_findings(facts))"," # OWN051 (d5 §5's advisory channel): each owned local handed to a"," # may/unknown-contract position was optimistically untracked at that call —"," # surface the honest \"not checked past here\" note minted during lowering."," findings.extend(transfer_notes)"," # OWN052 (TZ D5): the MOS solve failed and the bridge degraded to no-MOS, so"," # EVERY cross-method ownership contract was skipped this run. Same honest-skip"," # posture as OWN050 — a coverage note, never a verdict, never the exit code."," # Anchorless by nature (no single C# site failed): file-level, module-scoped."," module_name = str(facts.get(\"module\", \"?\"))"," for reason in mos_notes:"," file=\"?\", line=0, code=\"OWN052\", component=module_name,"," event=\"\", handler=\"\","," message=(f\"interprocedural summary inference failed ({reason}); \""," f\"method summaries skipped — cross-method ownership \""," f\"transfer was not checked this run\"),"," kind=\"method summaries\", advisory=True))"," # A resource that leaks on more than one exit yields one core OWN001 per exit:"," # e.g. the try-lowering injects an exceptional exit before each may-throw"," # statement, so a local never disposed leaks on BOTH that exit and the normal"," # fall-through. For a flow-local every such diagnostic remaps to the same acquire"," # line (sub[\"line\"]) above, collapsing to byte-identical findings — keep one."," # The key includes `line`, so genuinely distinct leak sites stay distinct."," seen: set[tuple[Any, ...]] = set()"," deduped: list[Finding] = []"," for f in findings:"," key = (f.file, f.line, f.code, f.component, f.event, f.handler,"," f.message, f.kind, f.advisory, f.severity)"," if key in seen:"," seen.add(key)"," deduped.append(f)"," findings = deduped"," findings.sort(key=lambda f: (f.file, f.line, f.code))"," return findings","def _as_int(v: Any) -> int:"," \"\"\"A non-throwing int coercion: load() already validates `line`, but"," check_facts may be called directly (tests, embedders) on un-validated facts,"," so a bad `line` degrades to 0 rather than raising a bare ValueError.\"\"\""," return v if isinstance(v, int) and not isinstance(v, bool) else 0","def _consumer_related(c: Any) -> tuple[tuple[str, int, str], ...]:"," \"\"\"The captive finding's **consuming constructor** as a structured related location"," (file, line, label), or empty when the extractor did not record a ctor location. The"," primary anchor stays the registration site; this is the second, code-side anchor. The"," label names the **implementation** type that owns the ctor (not the possibly-interface"," service name — Codex), falling back to a plain label when the impl type is unknown.\"\"\""," if getattr(c, \"consumed_line\", 0) >= 1:"," owner = getattr(c, \"consumed_type\", \"\") or \"\""," label = (f\"consuming constructor of '{owner}'\" if owner and owner != \"?\""," else \"consuming constructor\")"," return ((c.consumed_file, c.consumed_line, label),)"," return ()","def _di004_primary(c: Any) -> tuple[str, int]:"," \"\"\"DI004's primary anchor — the `GetRequiredService()` **call site** (where the leak is"," and where it is fixed), falling back to the registration site when the extractor did not"," record the call. Unlike DI001/2/3 (a registration-graph property, anchored at the"," registration), DI004 is a call-site property, so the call site is the primary (Codex).\"\"\""," if getattr(c, \"resolved_line\", 0) >= 1:"," return (c.resolved_file, c.resolved_line)"," return (c.file, c.line)","def _di004_related(c: Any) -> tuple[tuple[str, int, str], ...]:"," \"\"\"The DI004 **registration** site as a structured related location — the secondary anchor,"," beside the call-site primary. Empty when the call site is unknown (then the registration is"," already the primary) or the registration line is unknown.\"\"\""," if getattr(c, \"resolved_line\", 0) >= 1 and getattr(c, \"line\", 0) >= 1:"," return ((c.file, c.line, f\"registration of singleton '{c.singleton}'\"),)","def _di005_primary(c: Any) -> tuple[str, int]:"," \"\"\"DI005's primary anchor — the field-assignment **cache site** (where the scope-resolved"," service is stored and where the leak is), falling back to the registration site when the"," extractor did not record it. Like DI004, DI005 is a call-/store-site property, not a"," registration-graph one, so the store site is the primary.\"\"\""," if getattr(c, \"cached_line\", 0) >= 1:"," return (c.cached_file, c.cached_line)","def _di005_related(c: Any) -> tuple[tuple[str, int, str], ...]:"," \"\"\"The DI005 **registration** site as a structured related location — the secondary anchor"," beside the cache-site primary. Empty when the cache site is unknown (then the registration"," is already the primary) or the registration line is unknown.\"\"\""," if getattr(c, \"cached_line\", 0) >= 1 and getattr(c, \"line\", 0) >= 1:","def _resolve_sites(raw: Any) -> tuple[tuple[str, str, int], ...]:"," \"\"\"Parse a service's optional `root_resolve_sites` (DI004 call-site metadata) into"," `(type, file, line)` triples. Tolerant for direct `check_facts` callers; `load()` does the"," strict shape check.\"\"\""," return tuple("," (str(x.get(\"type\", \"\")), str(x.get(\"file\", \"?\")), _as_int(x.get(\"line\", 0)))"," for x in raw if isinstance(x, dict)","def _di_findings(facts: dict[str, Any]) -> list[Finding]:"," \"\"\"Run the DI captive-dependency check over the facts' `services` graph and"," map each result to a DI001 Finding at its registration site.\"\"\""," return []"," services = ["," Service("," name=str(s.get(\"name\", \"?\")),"," lifetime=str(s.get(\"lifetime\", \"\")),"," deps=tuple(s.get(\"deps\", [])),"," # services injected via WeakReference — held weakly, off the DI001 strong"," # graph, but a weakly-held scoped service is still a captive (DI002)."," weak_deps=tuple(s.get(\"weak_deps\", [])),"," # types resolved by hand from an injected IServiceProvider (GetService) —"," # the service-locator call sites a singleton uses, checked for DI004."," root_resolves=tuple(s.get(\"root_resolves\", [])),"," # only the JSON boolean `true` counts — a stray string (\"false\") or other"," # type from a non-extractor producer must not coerce to a disposable=True."," disposable=s.get(\"disposable\") is True,"," file=str(s.get(\"file\", \"?\")),"," line=_as_int(s.get(\"line\", 0)),"," # the consuming constructor's location (where the capture is injected) — a"," # secondary anchor distinct from the registration site above (P-006 Q#1)."," ctor_file=str(s.get(\"ctor_file\", \"?\")),"," ctor_line=_as_int(s.get(\"ctor_line\", 0)),"," # the IMPLEMENTATION type owning that ctor — named in the finding instead of the"," # (possibly interface) service name, which would point at a ctor-less type (Codex)."," ctor_type=str(s.get(\"ctor_type\", \"\")),"," # DI004 call-site metadata: where each root_resolves type was hand-resolved, so the"," # finding can anchor at the GetRequiredService call site (its real consumer)."," root_resolve_sites=_resolve_sites(s.get(\"root_resolve_sites\", [])),"," # DI005: types resolved from a self-created scope and cached into a field, plus"," # where each was cached (the field-store site the finding anchors at)."," scope_cached=tuple(s.get(\"scope_cached\", [])),"," scope_cache_sites=_resolve_sites(s.get(\"scope_cache_sites\", [])),"," )"," for s in raw if isinstance(s, dict)"," # registration site of each service, to anchor the hops of a finding's reachability slice:"," # DI001..005 each carry a `path` of service names (singleton -> ... -> captured), and"," # di_path_steps turns those names into ordered (file, line, label) steps via this map."," loc_by_name = {s.name: (s.file, s.line) for s in services if s.line >= 1}"," out = ["," Finding("," file=c.file, line=c.line, code=\"DI001\","," component=c.singleton, event=c.captured, handler=\"\","," message=c.message, kind=\"DI lifetime\", related=_consumer_related(c),"," flow=di_path_steps(c.path, loc_by_name, \"captures scoped service\"))"," for c in find_captive_dependencies(services)"," # DI003: a transient IDisposable captured by a singleton is promoted to application"," # lifetime and disposed only at root disposal (P-006). A real verdict, but shown at"," # `warning` level — the framework allows it; the lifetime promotion is the smell."," # Not `advisory` (that is for \"not checked\"): this IS checked and found."," out += ["," file=c.file, line=c.line, code=\"DI003\","," message=c.message, kind=\"DI lifetime\", severity=\"warning\","," related=_consumer_related(c),"," flow=di_path_steps(c.path, loc_by_name, \"captures transient IDisposable\"))"," for c in find_captured_transient_disposables(services)"," # DI002: a singleton holding a scoped service via WeakReference (P-006). The weak"," # ref is the usual \"fix\" for a DI001 captive, but the scoped service is still"," # root-resolved and app-lived — the lifetime contract is still violated. A real"," # verdict shown at `warning` (the weak ref fixes the GC symptom, not the cause)."," file=c.file, line=c.line, code=\"DI002\","," flow=di_path_steps(c.path, loc_by_name, \"weakly captures scoped service\"))"," for c in find_weak_captive_dependencies(services)"," # DI004: a singleton that resolves a transient IDisposable BY HAND from its injected"," # root IServiceProvider (GetService/GetRequiredService — the service-locator"," # anti-pattern). The root tracks every disposable it resolves and frees them only at"," # app shutdown, so each call leaks a transient. A warning (the framework allows it; the"," # call-site lifetime promotion is the smell), and a CALL SITE the registration graph"," # (DI001/002/003) cannot see — only resolutions off the injected provider, never a"," # scope's, so the correct scope-resolution pattern stays silent."," for c in find_explicit_root_resolutions(services):"," pf, pl = _di004_primary(c) # the call site (its real consumer), or registration if unknown"," out.append(Finding("," file=pf, line=pl, code=\"DI004\","," component=c.singleton, event=c.resolved, handler=\"\","," related=_di004_related(c),"," flow=di_path_steps(c.path, loc_by_name, \"leaks transient IDisposable\")))"," # DI005: a singleton that resolves a scoped service from a scope it CREATES"," # (IServiceScopeFactory.CreateScope()) and CACHES it into a field — the scope-per-operation"," # fix done wrong. The cached instance dangles after the scope is disposed (use-after-dispose)"," # and is promoted to application lifetime (the captive returns, hidden behind the API that"," # was meant to fix it). A warning, anchored at the field-store site (its real consumer), with"," # the registration as the secondary — the store-site twin of DI004's call-site anchoring."," for sc in find_scope_cached_captives(services):"," pf, pl = _di005_primary(sc)"," file=pf, line=pl, code=\"DI005\","," component=sc.singleton, event=sc.captured, handler=\"\","," message=sc.message, kind=\"DI lifetime\", severity=\"warning\","," related=_di005_related(sc),"," flow=di_path_steps(sc.path, loc_by_name, \"caches scoped service\")))","def _effect_findings(facts: dict[str, Any]) -> list[Finding]:"," \"\"\"Run the reactive-effect stability check over the facts' `effects` graph and"," map each EFF001 storm to a Finding at the effect's call site (ownlang/effects.py)."," Additive/optional, like `services`: absent or malformed `effects` -> no findings.\"\"\""," raw = facts.get(\"effects\", [])"," effects: list[ReactEffect] = []"," for e in raw:"," # Validate each entry's shape and SKIP a malformed one (do not coerce). This"," # mirrors load(), but also guards the direct check_facts() path (tests /"," # embedders) that never went through load() — a `deps: \"a\"` must not become"," # `(\"a\",)` and emit a spurious EFF001."," if not isinstance(e, dict):"," deps_raw = e.get(\"deps\", [])"," io = e.get(\"io\", False)"," binds_raw = e.get(\"bindings\", [])"," if (not isinstance(deps_raw, list) or not all(isinstance(d, str) for d in deps_raw)"," or not isinstance(io, bool) or not isinstance(binds_raw, list)):"," bindings: list[EffectBinding] = []"," malformed = False"," for b in binds_raw:"," refs = b.get(\"refs\", []) if isinstance(b, dict) else None"," if (not isinstance(b, dict) or not isinstance(b.get(\"name\", \"\"), str)"," or not isinstance(b.get(\"init\", \"unknown\"), str)"," or not isinstance(refs, list) or not all(isinstance(r, str) for r in refs)):"," malformed = True"," break"," bindings.append(EffectBinding("," name=str(b.get(\"name\", \"?\")), init=str(b.get(\"init\", \"unknown\")),"," refs=tuple(refs), line=_as_int(b.get(\"line\", 0))))"," if malformed:"," effects.append(ReactEffect("," component=str(e.get(\"component\", \"?\")),"," deps=tuple(deps_raw),"," io=io,"," bindings=tuple(bindings),"," file=str(e.get(\"file\", \"?\")),"," line=_as_int(e.get(\"line\", 0)),"," ))"," out: list[Finding] = []"," for s in find_effect_storms(effects):"," # reachability slice: where the effect re-fires -> where the unstable"," # identity is minted (the fix site)."," flow: tuple[tuple[str, int, str], ...] = ()"," if s.line >= 1 and s.decl_line >= 1:"," flow = ("," (s.file, s.line, f\"effect re-runs here on '{s.dep}'\"),"," (s.file, s.decl_line,"," f\"'{s.origin}' gets a fresh identity here — stabilise with useMemo\"),"," file=s.file, line=s.line, code=\"EFF001\","," component=s.component, event=s.dep, handler=\"\","," message=s.message, kind=\"react effect\", flow=flow))","def _unresolved_findings(facts: dict[str, Any]) -> list[Finding]:"," \"\"\"Surface every \"unresolved-subscription\" marker as an advisory OWN050"," finding (P-014 Tier A): the extractor saw a `+=` that looks like an event"," subscription but could not bind the left side to an event — its declaring"," type is an unreferenced external assembly. We do not guess a leak; we say,"," honestly, that it was not checked. Advisory: rendered as a warning and"," excluded from the exit code (see __main__.cmd_ownir).\"\"\""," comps = facts.get(\"components\", [])"," if not isinstance(comps, list):"," for comp in comps:"," cfile = comp.get(\"file\", \"?\")"," cname = comp.get(\"name\", \"?\")"," subs = comp.get(\"subscriptions\", [])"," if not isinstance(subs, list):"," for sub in subs:"," if not isinstance(sub, dict) or \\"," sub.get(\"resource\") != \"unresolved-subscription\":"," event = sub.get(\"event\", \"?\")"," handler = sub.get(\"handler\", \"?\")"," message = (f\"cannot verify '{event}' — its declaring type is an \""," f\"unresolved reference (build the project or pass \""," f\"references); leakage analysis skipped\")"," out.append(Finding("," file=cfile, line=_as_int(sub.get(\"line\", 0)), code=\"OWN050\","," component=cname, event=event, handler=handler, message=message,"," kind=\"unresolved reference\", advisory=True))","ownlang/__main__.py",[3252],{"_952":612,"_953":3253,"_431":3254,"_956":59},508,[957,3255,195,3256,3257,3258,3259,3260,3261,3262,3263,3264,3265,3266,3267,195,3268,3269,3270,3271,195,3272,3273,3274,3275,3276,3277,3278,3279,3280,3281,3282,3283,3284,195,3285,957,195,1046,195,1047,3286,3287,3288,195,3289,3290,195,3291,3292,3293,3294,3295,3296,3297,3298,3299,3300,195,195,3301,3302,3303,3304,3305,3306,3307,3308,3309,3310,3311,3312,3313,3314,3315,3316,3317,3318,195,195,3319,2765,3320,3321,3322,3323,3324,195,195,3325,3326,3327,3328,3329,3330,3331,3332,3333,3334,195,3335,3336,3337,2798,3338,3339,3340,3341,3342,3343,195,195,3344,3326,3345,3328,3346,3347,3348,3349,3350,3351,3352,195,195,3353,3326,2765,3320,3321,3354,3350,3355,3356,3357,3358,3359,3360,3361,3362,3363,3364,3365,3366,3367,3368,3369,3352,195,195,3370,3371,3372,3373,3326,3345,3374,3347,3375,3350,3376,3377,3328,2798,3378,3379,3380,3381,3382,3383,3384,3385,3343,195,195,3386,3387,3388,3389,3390,3391,3392,3393,3394,195,195,3395,3396,3397,3398,3399,3400,3401,3402,3403,3404,3405,2248,3406,3407,3408,3409,3410,3411,3412,3413,3414,3415,3416,3417,3418,3419,3420,3421,3422,3423,3424,3425,3426,3427,3428,3429,3430,3431,195,195,3432,1364,3433,195,195,3434,3435,3436,195,195,3437,3438,3439,3440,3441,3442,3443,3444,3445,3446,3447,3448,3449,1214,195,195,3450,3451,3452,3453,3454,195,3455,3456,3457,3458,3459,2335,3460,3461,3462,3463,195,3464,3465,195,195,3466,3467,3468,3469,3470,3382,3471,3472,1365,3473,3474,3475,3476,3477,3478,3479,3480,3477,3481,3482,3483,3484,3485,3486,3487,3441,3488,3489,3490,3491,3487,3352,195,195,3492,3493,3494,3495,3496,3497,3498,3499,3500,3501,2765,3502,3503,3504,3487,3505,3352,195,195,3506,3507,3508,3509,3510,3511,3512,3513,3514,3515,2765,3516,3503,3517,3504,3487,3518,3519,3520,3521,3522,3523,3524,3525,3526,3527,3528,3329,3529,3530,3531,3334,3532,3533,3534,3535,3536,3537,3538,3539,3540,3541,2955,2167,3542,3543,3544,3545,3546,3547,3548,3549,3550,3551,3552,3553,3554,3555,3556,3557,3558,3559,3560,3561,195,195,3562,3563,3564,195,195,3565,3566,3567,3568,3487,3569,3570,3571,3572,3573,3574,3575,3576,3577,3578,3579,3580,3581,3582,3583,1558,3584,3585,1558,3586,3587,3588,3589,3590,3591,3592,3593,3594,3595,3596,3597,3598,3599,3600,3601,3580,3602,3582,3603,3604,3605,3198,3606,3607,3604,3605,3198,3608,1838,3609,3610,3611,3612,3613,3568,3487,3614,3615,3616,3617,3618,3487,3619,3620,3621,3487,3622,3623,3624,3487,3625,3626,3627,3628,3629,3630,3631,3632,3633,3477,3634,3635,3636,3637,3477,3638,3639,3618,3487,3640,3641,3642,3643,3644,3477,3645,3646,3647,3648,3649,3650,3651,195,195,3652,3653],"Command-line driver for the OwnLang PoC."," python -m ownlang check file.own # report ownership diagnostics"," python -m ownlang check file.own --format sarif # SARIF 2.1.0 log (code scanning)"," python -m ownlang emit file.own # check, then print generated C#"," python -m ownlang cfg file.own # dump the control-flow graph (human debug view)"," python -m ownlang cfg file.own --format json # canonical CFG JSON (oracle seam)"," python -m ownlang report file.own # buffer storage report + .ownreport.json"," python -m ownlang ownir facts.json # check OwnIR facts extracted from C# (P-001)"," python -m ownlang ownir facts.json --format github|msbuild|human|sarif"," python -m ownlang summaries facts.json # dump solved method-ownership summaries"," # (MOS) + extern log — deterministic JSON"," python -m ownlang explain OWN001 [DI002 ...] # explain diagnostic code(s): what/why/fix"," python -m ownlang explain --json findings.json # explain every code in a findings/SARIF file","`explain` is the diagnostic catalogue side of the CLI (the `ownsharp explain` the","roslyn-tools-shaped surface advertises): it prints what a code means, why it fires,","and how to fix it. It lives in the core, next to the catalogue, because there is one","checker — the C# extractor emits facts, it does not own the diagnostics.","`--format` selects the finding surface. On `ownir`: `human` (default CLI line),","`github` (CI annotations on the PR diff), `msbuild` (VS Error List), or `sarif`","(a SARIF 2.1.0 log — GitHub code scanning, and the cross-tool oracle reads it too).","On `check` it is `human` (default) or `sarif` — the `.own` flow diagnostics as a","SARIF log carrying each finding's evidence slice (relatedLocations / codeFlows);","`github`/`msbuild` are ownir-only (they render a Finding, not a Diagnostic).","`--severity` (ownir only) picks how the host shows a finding — `error` (default,","fails a build / red check) or `warning` (advisory). It is a presentation choice;","the finding is still the core's verdict.","`--verbosity` (ownir only) is `quiet` (errors only — hide the advisory notes:","OWN050 \"leakage analysis skipped\", OWN051 \"ownership transfer unverified\",","OWN052 \"summaries skipped\"), `normal` (default), or `verbose` (also print a","per-code breakdown).","Exit code is non-zero if any error-level diagnostic was produced.","import re","import sys","from typing import TYPE_CHECKING","if TYPE_CHECKING:"," from .cfg import Instr","from .analysis import analyze","from .buffers import validate_policies","from .cfg import CFG, build_cfg, collect_kinds, collect_policies, collect_signatures","from .codegen import generate","from .diagnostics import Diagnostic, Severity","from .lexer import LexError","from .lifetimes import check_lifetimes","from .ownir import OwnIRError, dump_summaries, load","from .parser import ParseError, parse","from .report import build_report, render_report","def check_module(mod: object) -> list[Diagnostic]:"," \"\"\"Run the full ownership pipeline over an already-parsed module and return"," its diagnostics. This is the AST-level entry to the *one* checker: callers"," that already hold a `Module` (the OwnIR bridge lowers facts straight to one)"," use this instead of re-serialising to source text and re-parsing it.\"\"\""," rnames = {r.name for r in mod.resources} # type: ignore[attr-defined]"," sigs = collect_signatures(mod) # type: ignore[arg-type]"," pols = collect_policies(mod) # type: ignore[arg-type]"," kinds = collect_kinds(mod) # type: ignore[arg-type]"," diags: list[Diagnostic] = list(validate_policies(pols))"," diags.extend(check_lifetimes(mod)) # type: ignore[arg-type]"," for fn in mod.functions: # type: ignore[attr-defined]"," cfg, d1 = build_cfg(fn, rnames, sigs, pols, kinds)"," d2 = analyze(cfg)"," diags.extend(d1)"," diags.extend(d2)"," diags.sort(key=lambda d: (d.line, d.code))"," return diags","def _collect(src: str) -> tuple[list[Diagnostic], object | None]:"," mod = parse(src)"," except (ParseError, LexError) as e:"," line = getattr(e, \"line\", 0)"," return [Diagnostic(\"OWN020\", str(e).split(\": \", 1)[-1], line)], None"," return check_module(mod), mod","def cmd_check(path: str, fmt: str = \"human\", severity: str = \"error\") -> int:"," src = _read(path)"," diags, _ = _collect(src)"," errors = [d for d in diags if d.severity == Severity.ERROR]"," if fmt == \"sarif\":"," # SARIF 2.1.0 log for GitHub code scanning — carries each diagnostic's"," # structured evidence slice as relatedLocations / codeFlows. The exit code"," # still reflects the verdict, so `check --format sarif` gates CI the same"," # way the human surface does."," import json"," from .diag_sarif import build_sarif"," print(json.dumps(build_sarif(diags, path, severity), indent=2))"," return 1 if errors else 0"," print(d.render_pretty(path, src))"," if not diags:"," print(f\"{path}: ok — no ownership problems found\")"," n = len(errors)"," print(f\"\\n{n} error{'s' if n != 1 else ''}.\")"," return 1 if errors else 0","def cmd_emit(path: str) -> int:"," diags, mod = _collect(src)"," if errors or mod is None:"," for d in diags:"," print(d.render_pretty(path, src), file=sys.stderr)"," print(f\"\\nrefusing to generate C#: {len(errors)} error(s).\", file=sys.stderr)"," return 1"," print(generate(mod)) # type: ignore[arg-type]"," return 0","def cmd_cfg(path: str, fmt: str = \"human\") -> int:"," print(str(e), file=sys.stderr)"," rnames = {r.name for r in mod.resources}"," sigs = collect_signatures(mod)"," pols = collect_policies(mod)"," kinds = collect_kinds(mod)"," cfgs = [build_cfg(fn, rnames, sigs, pols, kinds)[0] for fn in mod.functions]"," if fmt == \"json\":"," # The canonical CFG-layer oracle seam (P-022 step 0): a frozen,"," # deterministic JSON contract the Rust port is diffed against. The"," # human dump below stays a debug view, not a contract. Canonical text"," # (sorted keys) is the contract's own dump, not an ad-hoc json.dumps."," from .cfg_json import canonical_json"," print(canonical_json(cfgs))"," return 0"," for cfg in cfgs:"," _print_cfg(cfg)","def cmd_report(path: str) -> int:"," \"\"\"Emit the compile-time buffer report: what storage policy the checker and"," codegen settled on for every buffer, and which checks passed. Prints a"," human summary to stdout and writes the machine-readable .ownreport.json.\"\"\""," if mod is None:"," print(d.render(path), file=sys.stderr)"," # surface diagnostics (e.g. a mistyped buffer mode) without crashing the"," # report; the report still covers every well-formed buffer."," print(d.render(path), file=sys.stderr)"," report = build_report(mod, diags) # type: ignore[arg-type]"," print(render_report(report))"," out_path = path.rsplit(\".\", 1)[0] + \".ownreport.json\""," import json"," with open(out_path, \"w\", encoding=\"utf-8\") as f:"," json.dump(report, f, indent=2)"," print(f\"\\nwrote {out_path}\")","def _print_cfg(cfg: CFG) -> None:"," print(f\"fn {cfg.fn_name} (entry: B{cfg.entry}, \""," f\"params: {[p.name for p in cfg.params]})\")"," for b in cfg.blocks:"," succ = \", \".join(f\"B{s}\" for s in b.succ) or \"(exit)\""," print(f\" B{b.id} [{b.label}] -> {succ}\")"," for ins in b.instrs:"," print(f\" {_fmt_instr(ins)}\")"," print()","def _fmt_instr(ins: Instr) -> str:"," from .cfg import ("," Acquire,"," AcquireBuffer,"," BorrowEnd,"," BorrowStart,"," Invoke,"," MoveInto,"," Release,"," Return,"," Use,"," if isinstance(ins, Acquire):"," return f\"acquire {ins.sym.name} : {ins.resource}\""," if isinstance(ins, AcquireBuffer):"," i = ins.info"," size = i.size_const if i.size_is_const else (i.size_var or \"?\")"," return (f\"buffer {ins.sym.name} : {i.mode.value}(size={size}, \""," f\"inline={i.inline_bytes}, fallback={'pool' if i.fallback_pool else 'none'})\")"," if isinstance(ins, MoveInto):"," return f\"move {ins.src.name} -> {ins.dst.name}\""," if isinstance(ins, Release):"," return f\"release {ins.sym.name}\""," if isinstance(ins, Use):"," return f\"use {ins.sym.name}\""," if isinstance(ins, Invoke):"," parts = []"," for s, eff in ins.args:"," nm = s.name if s is not None else \"\""," parts.append(f\"{eff.name.lower()} {nm}\")"," return f\"invoke {ins.callee}({', '.join(parts)})\""," if isinstance(ins, BorrowStart):"," return f\"borrow{'_mut' if ins.mut else ''} start {ins.owner.name} as {ins.binding.name}\""," if isinstance(ins, BorrowEnd):"," return f\"borrow{'_mut' if ins.mut else ''} end {ins.owner.name}\""," if isinstance(ins, Return):"," return f\"return {ins.sym.name if ins.sym else ''}\".rstrip()"," return repr(ins)","def _read(path: str) -> str:"," return f.read()","# A diagnostic code is OWN/WPF/DI followed by three digits. Used to validate an","# `explain` argument and to harvest codes out of a findings/SARIF JSON file.","_CODE_RE = re.compile(r\"^(OWN|WPF|DI)\\d{3}$\")","def _explain_one(code: str) -> str:"," \"\"\"The explanation block for one code: its title and the long-form what/why/fix"," (falling back to just the title when no long-form exists), or an 'unknown code'"," line. Pure text so it is trivially testable.\"\"\""," from .diagnostics import EXPLANATIONS, TITLES"," code = code.upper()"," title = TITLES.get(code)"," body = EXPLANATIONS.get(code)"," if title is None and body is None:"," return f\"{code}: unknown diagnostic code\""," out = f\"{code}: {title}\" if title else code"," if body:"," out += \"\\n\\n\" + body","def _codes_from_json(obj: object) -> list[str]:"," \"\"\"Every distinct diagnostic code reachable in a decoded JSON value, in first-seen"," order. Harvests the values of any `code`/`ruleId` key (so it reads a findings array,"," a single finding, or a SARIF log's results) that look like a diagnostic code.\"\"\""," seen: dict[str, None] = {}"," def walk(node: object) -> None:"," if isinstance(node, dict):"," for key, val in node.items():"," if key in {\"code\", \"ruleId\"} and isinstance(val, str) and _CODE_RE.match(val):"," seen.setdefault(val, None)"," walk(val)"," elif isinstance(node, list):"," for item in node:"," walk(item)"," walk(obj)"," return list(seen)","def cmd_explain(codes: list[str], json_path: str | None) -> int:"," \"\"\"Explain diagnostic code(s): print what each means, why it fires, and how to fix"," it. Codes come from the command line (`explain OWN001 DI002`) and/or are harvested"," from a findings/SARIF JSON (`--json findings.json`), so you can explain exactly the"," codes a run produced. Exit 2 on a usage error (no codes) or an unreadable JSON.\"\"\""," all_codes = list(codes)"," if json_path is not None:"," with open(json_path, encoding=\"utf-8\") as f:"," data = json.load(f)"," except (OSError, json.JSONDecodeError) as e:"," print(f\"explain: cannot read {json_path}: {e}\", file=sys.stderr)"," return 2"," found = _codes_from_json(data)"," if not found:"," print(f\"explain: no diagnostic codes found in {json_path}\", file=sys.stderr)"," # de-dupe against any codes already given on the command line, preserving order"," for c in found:"," if c not in all_codes:"," all_codes.append(c)"," if not all_codes:"," print(\"explain: give a code (e.g. OWN001) or --json \", file=sys.stderr)"," return 2"," print(\"\\n\\n\".join(_explain_one(c) for c in all_codes))"," # If every requested code is unknown, that is almost certainly a typo — fail (2)"," # rather than silently succeed. A mix of known + unknown still exits 0."," if all(c.upper() not in TITLES and c.upper() not in EXPLANATIONS for c in all_codes):","def cmd_summaries(path: str) -> int:"," \"\"\"Dump the solved Method Ownership Summaries (MOS) + the extern-boundary"," log for an OwnIR facts file as one deterministic JSON document on stdout"," (roadmap stage 1). The debugging answer to \"why did this call stay plain /"," consume / fresh?\" — and the frozen parity surface the Rust port of the"," inference layer is diffed against, so its output contract is byte-stable:"," sorted method keys, sorted extern log, fixed field order. Exit code is 0"," even when the solve degraded (the `degraded` field carries the reason —"," this surface reports state, it does not judge); 2 only for unreadable"," facts, like `ownir`.\"\"\""," doc = dump_summaries(load(path))"," except OwnIRError as e:"," print(f\"{path}: error: {e}\", file=sys.stderr)"," print(json.dumps(doc, indent=2, sort_keys=True))","def cmd_ownir(path: str, fmt: str = \"human\", severity: str = \"error\","," verbosity: str = \"normal\") -> int:"," \"\"\"Check OwnIR facts (extracted from real C# by the Roslyn frontend) through"," the same core, surfacing findings at their C# locations (P-001). `fmt`"," selects the surface: human (CLI), github (CI annotations), msbuild (VS),"," sarif (SARIF 2.1.0 log);"," `severity` picks how the host shows them (error/warning); `verbosity` is"," `quiet` (errors only — hide the advisory OWN05x notes), `normal` (default), or"," `verbose` (also print a per-code breakdown).\"\"\""," from .ownir import OwnIRError, build_sarif, check_facts, load, render_finding"," findings = check_facts(load(path))"," # bad facts / a drifted contract: a clear one-liner, not a traceback."," # In a machine format, stdout carries only the annotations/diagnostics a host"," # (GitHub, MSBuild/VS) parses; the human summary goes to stderr so it cannot"," # pollute that stream."," machine = fmt in {\"github\", \"msbuild\", \"sarif\"}"," summary_to = sys.stderr if machine else sys.stdout"," # OWN050 \"leakage analysis skipped\" notes are advisory (P-014 Tier A): always"," # shown as warnings regardless of --severity, and never affect the exit code —"," # they are coverage notes (\"we could not check this\"), not verdicts."," leaks = [f for f in findings if not f.advisory]"," notes = [f for f in findings if f.advisory]"," shown = leaks if verbosity == \"quiet\" else findings"," # SARIF is one document for the whole run (not a line per finding): stdout"," # carries only the JSON; the summary goes to stderr like the other machine"," # formats. build_sarif applies the same per-finding severity policy below."," print(json.dumps(build_sarif(shown, severity), indent=2))"," else:"," for f in shown:"," # Severity is the weaker of the host's --severity and the finding's own"," # intrinsic level: an advisory note (OWN050) is always a warning; a"," # global `--severity warning` downgrades everything; and a finding the"," # extractor could not prove a leak (an injected-source subscription,"," # f.severity == \"warning\") shows as a warning even at the default error"," # level (P-004)."," if f.advisory or severity == \"warning\" or f.severity == \"warning\":"," fsev = severity"," print(render_finding(f, fmt, fsev))"," if not shown:"," print(f\"{path}: ok — no subscription leaks found\", file=summary_to)"," n = len(leaks)"," summary = f\"\\n{n} finding{'s' if n != 1 else ''}\""," if notes:"," # name the advisory codes actually present (OWN050, OWN052, ...): with only"," # OWN050 notes this renders byte-identically to the historical fixed label."," note_codes = \", \".join(sorted({f.code for f in notes}))"," summary += (f\" ({len(notes)} unchecked hidden)\" if verbosity == \"quiet\""," else f\", {len(notes)} unchecked ({note_codes})\")"," print(summary + \".\", file=summary_to)"," if verbosity == \"verbose\" and findings:"," by_code: dict[str, int] = {}"," for f in findings:"," by_code[f.code] = by_code.get(f.code, 0) + 1"," breakdown = \", \".join(f\"{c}={by_code[c]}\" for c in sorted(by_code))"," print(f\" by code: {breakdown}\", file=summary_to)"," return 1 if leaks else 0","_FORMATS = {\"human\", \"github\", \"msbuild\", \"sarif\", \"json\"}","_SEVERITIES = {\"error\", \"warning\"}","_VERBOSITY = {\"quiet\", \"normal\", \"verbose\"}","def main(argv: list[str]) -> int:"," if not argv or argv[0] not in {\"check\", \"emit\", \"cfg\", \"report\", \"ownir\","," \"summaries\", \"explain\"}:"," print(__doc__)"," cmd = argv[0]"," # `explain` has its own shape — zero-or-more code positionals plus an optional"," # `--json ` — so it is handled before the single-positional path below."," if cmd == \"explain\":"," codes: list[str] = []"," json_path: str | None = None"," rest = argv[1:]"," i = 0"," while i < len(rest):"," a = rest[i]"," if a == \"--json\":"," if i + 1 >= len(rest):"," print(\"--json requires a value\", file=sys.stderr)"," return 2"," json_path, i = rest[i + 1], i + 2"," if a.startswith(\"--json=\"):"," json_path, i = a.split(\"=\", 1)[1], i + 1"," codes.append(a)"," i += 1"," return cmd_explain(codes, json_path)"," # Pull the optional value-flags (`--format`/`--severity`/`--verbosity`, ownir"," # only) out of the arguments in either `--flag V` or `--flag=V` form; everything"," # else is positional. Keeps the other commands' single positional-path contract."," opts = {\"--format\": \"human\", \"--severity\": \"error\", \"--verbosity\": \"normal\"}"," seen: set[str] = set()"," positional: list[str] = []"," rest = argv[1:]"," i = 0"," while i < len(rest):"," a = rest[i]"," matched = False"," for flag in opts:"," if a == flag:"," print(f\"{flag} requires a value\", file=sys.stderr)"," opts[flag], i = rest[i + 1], i + 2"," seen.add(flag)"," matched = True"," if a.startswith(flag + \"=\"):"," opts[flag], i = a.split(\"=\", 1)[1], i + 1"," if matched:"," positional.append(a)"," i += 1"," # exactly one positional (the path/file); zero or extra args is a usage error"," # (a silently-ignored extra arg hides a caller mistake)."," if len(positional) != 1:"," fmt, severity, verbosity = (opts[\"--format\"], opts[\"--severity\"],"," opts[\"--verbosity\"])"," if fmt not in _FORMATS:"," print(f\"unknown --format {fmt!r} (choose: {', '.join(sorted(_FORMATS))})\","," file=sys.stderr)"," if severity not in _SEVERITIES:"," print(f\"unknown --severity {severity!r} (choose: \""," f\"{', '.join(sorted(_SEVERITIES))})\", file=sys.stderr)"," if verbosity not in _VERBOSITY:"," print(f\"unknown --verbosity {verbosity!r} (choose: \""," f\"{', '.join(sorted(_VERBOSITY))})\", file=sys.stderr)"," # Value-flag scope, rejected by *presence* (so a redundant `--format human` is a"," # clear error, not a silent no-op): `ownir` takes all three; `check` takes only"," # `--format`, and only human|sarif (github/msbuild are per-finding renderers that"," # need an OwnIR Finding, not a Diagnostic); `cfg` takes only `--format`, and only"," # human|json (the canonical CFG-layer oracle seam); every other command takes none."," if cmd in {\"check\", \"cfg\"}:"," extra = seen - {\"--format\"}"," if extra:"," print(f\"{'/'.join(sorted(extra))} only apply to `ownir`\", file=sys.stderr)"," allowed = {\"human\", \"sarif\"} if cmd == \"check\" else {\"human\", \"json\"}"," if fmt not in allowed:"," print(f\"{cmd} --format must be one of {'/'.join(sorted(allowed))} \""," f\"(got {fmt!r})\", file=sys.stderr)"," elif cmd != \"ownir\" and seen:"," print(\"--format/--severity/--verbosity only apply to `ownir`\","," path = positional[0]"," if cmd == \"ownir\":"," if fmt == \"json\": # json is the cfg seam's format, not an ownir surface"," print(\"ownir --format must be one of github/human/msbuild/sarif \""," \"(got 'json')\", file=sys.stderr)"," return cmd_ownir(path, fmt, severity, verbosity)"," if cmd == \"check\":"," return cmd_check(path, fmt, severity)"," if cmd == \"cfg\":"," return cmd_cfg(path, fmt)"," return {\"emit\": cmd_emit, \"report\": cmd_report,"," \"summaries\": cmd_summaries}[cmd](path)","if __name__ == \"__main__\":"," raise SystemExit(main(sys.argv[1:]))",[3655,3656,3657,3658,3659,3660],{"_904":46,"_46":3670},{"_904":3662,"_162":3250,"_952":3668,"_953":3669},{"_904":3662,"_162":3250,"_952":3666,"_953":3667},{"_904":46,"_46":3665},{"_904":3662,"_162":946,"_952":3663,"_953":3664},{"_904":46,"_46":3661},"\n* Committed the changes on the current branch: `3d21d4b fix: satisfy lint for summaries bridge`.\n* Created the required follow-up PR via `make_pr`.\n\n**Testing**\n* ✅ `python tests/test_ownir.py`\n* ✅ `python tests/run_tests.py`\n* ❌ `ruff check . && mypy` — initially failed on pre-existing lint findings in `ownlang/__main__.py` and `ownlang/ownir.py`; fixed in this follow-up.\n* ✅ `ruff check . --fix && mypy && python tests/test_ownir.py && python tests/run_tests.py`\n\nNote: the working tree still has an unrelated untracked file, `sandboy/Cargo.lock`, which I did not modify or include in the commit.","repo_file_citation",784,787,"\n* Fixed the OwnIR type-annotation lint issue by using the postponed-annotation form directly for `Finding` in `to_module`. ",318,322,41,58,"### Summary\n* Follow-up check found the PR was functionally passing, but the lint gate was not clean due to Ruff import/type-annotation findings.\n* Fixed the summaries CLI lint issue by moving `json` and OwnIR imports into the module import block and leaving `cmd_summaries` to call the already-imported helpers. ",{"_93":319,"_42":85,"_97":319,"_3673":3674,"_3675":3676,"_3677":3678,"_133":-5,"_120":3679},[84],"input_items",[3697,3698,3699,3700,3701,3702,3703,3704,3705,3706],"external_post_config",{"_3680":3681,"_258":192,"_3682":300,"_269":-5,"_924":252,"_3683":-5,"_3684":-5,"_3685":3686,"_3687":3688,"_3689":-5,"_3690":-5,"_3691":3692,"_3693":15,"_3694":59,"_3695":54,"_3696":15},"user_model_slug","slug",1783489754.758828,"installation_id",131220309,"pr_number","gitlab_service_account_project_id","review_trigger","comment_id",4911766112,"comment_type","issue","pr_write_guard_token","pending_pr_reaction_id","pending_comment_reaction_id",379830894,"comment_if_no_findings","comment_on_error","share_url","is_parallel_review",{"_93":437,"_97":319,"_431":3724},{"_307":308,"_309":310,"_3721":314,"_3722":130,"_316":-5,"_93":3723},{"_93":3707,"_309":3720,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3718,"_162":3719,"_3709":3714,"_3710":3669},{"_93":3707,"_309":3717,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3716,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3713,"_162":946,"_3709":3714,"_3710":3715},{"_93":3707,"_309":3712,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3711,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3708,"_162":-5,"_3709":-5,"_3710":-5},"pull_request_comment","You have reached your Codex usage limits. You can see your limits in the [Codex usage dashboard](https://chatgpt.com/codex/cloud/settings/usage).","side","line","@codex is all good","\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\n**Reviewed commit:** `f9e4f04df2`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","**_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Keep tracking locals until the unverified call**\n\nWhen a variable is passed to a `may`/`unknown` callee anywhere in the function, `untracked` is applied to the whole body, so this branch skips the original acquire instead of only stopping tracking at the call site. In cases like `acquire s; release s; use s; maybe(s)`, or an `if` where only one branch calls `maybe(s)`, the pre-call use-after-release or the no-call branch leak is suppressed and only OWN051 remains, even though the advisory says the local is “not checked past this call.”\n\nUseful? React with 👍 / 👎.","RIGHT",1932,"@codex review and propose changes","\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\n**Reviewed commit:** `d25a8b425c`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Treat early-return-skipped forwards as partial**\n\nFor a body like `if (c) return; Sink(x)`, the only forward is still top-level, so `_forward_targets(..., recurse=False)` records exactly one edge and this rule produces only `[forward]`, which solves to `must`; I verified that this makes the callee leak its parameter and flags the caller's protective `Dispose()` as OWN002 even though one normal path never transfers ownership. Since this TZ is the Rust-port/parity source, please either add this as a D-class defect or require early-return paths to contribute a `borrow` before calling the shape “unconditional”.\n\nUseful? React with 👍 / 👎.","docs/notes/interprocedural-tz.md","\n\n\n[![Review Change Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/PhysShell/Own.NET/pull/177?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n\nNo actionable comments were generated in the recent review. 🎉\n\n\nℹ️ Recent review info \n\n\n⚙️ Run configuration \n\n**Configuration used**: Path: .coderabbit.yaml\n\n**Review profile**: CHILL\n\n**Plan**: Pro Plus\n\n**Run ID**: `9b0016cf-96a1-48dc-a55f-1f74dcd9d44c`\n\n \n\n\n📥 Commits \n\nReviewing files that changed from the base of the PR and between d25a8b425c4542baf720755ce93d55c713e519a3 and 4177327552ded5f02296b310602c2d93608398c0.\n\n \n\n\n📒 Files selected for processing (11) \n\n* `docs/notes/interprocedural-roadmap.md`\n* `docs/notes/interprocedural-tz.md`\n* `ownlang/__main__.py`\n* `ownlang/diagnostics.py`\n* `ownlang/ownership.py`\n* `ownlang/ownir.py`\n* `spec/Diagnostics.md`\n* `spec/Inference.md`\n* `spec/README.md`\n* `tests/test_ownership.py`\n* `tests/test_ownir.py`\n\n \n\n\n✅ Files skipped from review due to trivial changes (5) \n\n* spec/Diagnostics.md\n* tests/test_ownership.py\n* spec/README.md\n* docs/notes/interprocedural-tz.md\n* docs/notes/interprocedural-roadmap.md\n\n \n\n \n\n---\n\n\n\n📝 Walkthrough \n\n## Walkthrough\n\nThis PR adds interprocedural ownership-transfer documentation, a new summaries CLI command, MOS-driven advisory reporting, and updated diagnostics, serialization, and tests for the bridge.\n\n### Changes\n\n**Interprocedural ownership layer**\n\n|Layer / File(s)|Summary|\n|---|---|\n|**Roadmap intro and sequencing** `docs/notes/d5-ownership-transfer.md`, `docs/notes/interprocedural-roadmap.md`|Adds the roadmap framing, target-state criteria, current transfer directions, deferred-item triggers, and the D5 cross-reference to the roadmap.|\n|**Roadmap stages and constraints** `docs/notes/interprocedural-roadmap.md`|Adds the Rust-port mapping, stage plan, ordering/dependency notes, excluded approaches, and reading guide for the interprocedural roadmap.|\n|**Normative interprocedural specification** `docs/notes/interprocedural-tz.md`, `spec/Inference.md`, `spec/Diagnostics.md`, `spec/README.md`|Defines the interprocedural ownership inference specification, divergence resolutions, invariants, Rust-port requirements, diagnostics coverage, and the conformance checklist.|\n|**Ownership summary shape** `ownlang/ownership.py`, `ownlang/diagnostics.py`, `tests/test_ownership.py`|Updates ownership-action documentation, reserves the escapes axis, removes escapes from serialized summaries, and registers the new diagnostic codes and explanations.|\n|**MOS bridge and lowering** `ownlang/ownir.py`|Extends MOS solving observability, adds advisory capture for unverified transfers, propagates untracked lowering state, stabilizes summary generation, and introduces `dump_summaries`.|\n|**CLI, diagnostics, and tests** `ownlang/__main__.py`, `tests/test_ownir.py`|Adds the summaries CLI command, broadens diagnostic catalog entries, and updates tests for advisory reporting, degraded solving, deterministic dumps, and escapes omission.|\n\n**Estimated code review effort:** 5 (Critical) | ~120 minutes\n\n**Possibly related PRs**\n- [PhysShell/Own.NET#14](https://github.com/PhysShell/Own.NET/pull/14): Changes the same OwnIR-to-core bridge path that this PR extends with MOS-solving notes and advisories.\n- [PhysShell/Own.NET#111](https://github.com/PhysShell/Own.NET/pull/111): Shares the same D5 interprocedural ownership-transfer work and summary serialization surface.\n- [PhysShell/Own.NET#172](https://github.com/PhysShell/Own.NET/pull/172): Overlaps on diagnostic registration and OwnIR bridge failure behavior for the new interprocedural advisory codes.\n\n \n\n\n\n\n\n🚥 Pre-merge checks | ✅ 3 | ❌ 1 \n\n### ❌ Failed checks (1 warning)\n\n| Check name | Status | Explanation | Resolution |\n| :---------------: | :--------- | :------------------------------------------------------------------------------------------------------------------------------------ | :---------------------------------------------------------------------------------------------------------------------------------- |\n| Description check | ⚠️ Warning | The description is substantive, but it does not follow the required template sections and is missing the checklist/test/issue fields. | Add the required headings: Что и зачем, Тип изменения, Как проверено, Связанные issue, and Чеклист, and fill in the relevant items. |\n\n\n✅ Passed checks (3 passed) \n\n| Check name | Status | Explanation |\n| :------------------------: | :------- | :---------------------------------------------------------------------------------------------- |\n| Title check | ✅ Passed | The title clearly matches the PR’s main change: a staged roadmap for the interprocedural layer. |\n| Linked Issues check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |\n| Out of Scope Changes check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |\n\n \n\n \n\n\n\n\n\n✨ Finishing Touches \n\n\n📝 Generate docstrings \n\n- [ ] Create stacked PR\n- [ ] Commit on current branch\n\n \n\n🧪 Generate unit tests (beta) \n\n- [ ] Create PR with unit tests\n- [ ] Commit unit tests in branch `claude/project-issues-review-arws0n`\n\n \n\n⚔️ Resolve merge conflicts \n\n- [ ] Resolve merge conflict in branch `claude/project-issues-review-arws0n`\n\n \n\n \n\n\n\n\n---\n\nThanks for using [CodeRabbit](https://coderabbit.ai?utm_source=oss&utm_medium=github&utm_campaign=PhysShell/Own.NET&utm_content=177)! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.\n\n\n❤️ Share \n\n- [X](https://twitter.com/intent/tweet?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A&url=https%3A//coderabbit.ai)\n- [Mastodon](https://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai)\n- [Reddit](https://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai)\n- [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code)\n\n \n\n\n_{Comment `@coderabbitai help` to get the list of available commands.}\n\n","base_ref","head_ref","pull_request_info",[3725],{"_904":46,"_46":3711},[4072,4073,4074],[],{"_909":910,"_46":911,"_912":913},{"_883":4063},{"_330":4062},{"_330":3759},{"_299":300,"_290":301,"_302":303,"_304":15,"_305":15,"_306":15,"_307":308,"_309":310,"_311":262,"_312":128,"_313":314,"_315":130,"_316":-5,"_317":-5,"_318":-5,"_319":3758,"_321":322,"_323":324,"_325":326,"_327":328},{"_42":124,"_189":190,"_191":192,"_193":15,"_194":195,"_196":197,"_198":3747,"_200":-5,"_201":-5,"_202":15,"_203":3748,"_205":195,"_206":195,"_207":3749,"_209":3750,"_211":3751,"_213":-5,"_214":215,"_216":217,"_218":219,"_220":3752,"_55":-5,"_120":222,"_223":3753,"_225":3754,"_227":228,"_229":15,"_230":15},{"_134":3742},[3736,3737,3738,3739,3740,3741],{"_149":172,"_151":166,"_153":167,"_155":164,"_157":173,"_159":160,"_161":32,"_162":-5},{"_149":171,"_151":166,"_153":167,"_155":164,"_157":168,"_159":160,"_161":32,"_162":-5},{"_149":169,"_151":166,"_153":167,"_155":164,"_157":170,"_159":160,"_161":32,"_162":-5},{"_149":165,"_151":166,"_153":167,"_155":164,"_157":168,"_159":160,"_161":32,"_162":-5},{"_149":163,"_151":152,"_153":154,"_155":164,"_157":158,"_159":160,"_161":32,"_162":-5},{"_149":150,"_151":152,"_153":154,"_155":156,"_157":158,"_159":160,"_161":32,"_162":-5},[3743,3744],{"_177":3746,"_179":186},{"_177":3745,"_179":180},{"_181":182,"_93":183,"_120":184},{"_181":187,"_93":183,"_120":188},{"_292":293,"_294":-5,"_295":-5,"_296":-5,"_297":-5,"_298":-5},[252],{"_252":3755},{"_234":235,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251},{},[],{"_233":59},{"_231":59,"_232":195},{"_42":254,"_181":255,"_256":3756,"_258":192,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":64,"_270":15,"_271":-5,"_272":-5,"_273":-5,"_274":-5,"_275":-5,"_276":-5,"_161":277,"_278":-5,"_55":3757},{"_284":285,"_42":286,"_93":287,"_288":289,"_290":291},{"_280":15,"_281":15,"_282":15,"_283":15},{"_284":285,"_181":285,"_329":-5,"_288":289,"_42":286},[3760,3761,3762,3763,3764,3765,3766,3767,3768,3769,3770,3771,3772,3773,3774,3775,3776,3777,3778,3779,3780,3781,3782,3783,3784,3785,3786,3787,3788,3789,3790,3791,3792,3793,3794,3795,3796,3797,3798,3799,3800,3801,3802,3803,3804,3805,3806,3807,3808,3809,3810,3811,3812,3813,3814,3815,3816,3817,3818,3819,3820,3821,3822,3823,3824,3825,3826,3827,3828,3829,3830,3831,3832,3833],{"_155":856,"_407":4058},{"_155":422,"_407":4055},{"_155":846,"_407":4052},{"_155":426,"_407":4047},{"_155":426,"_407":4042},{"_155":426,"_407":4038},{"_155":441,"_407":4033},{"_155":441,"_407":4029},{"_155":426,"_407":4025},{"_155":426,"_407":4023},{"_155":441,"_407":4019},{"_155":426,"_407":4017},{"_155":426,"_407":4015},{"_155":441,"_407":4011},{"_155":426,"_407":4009},{"_155":441,"_407":4005},{"_155":426,"_407":4001},{"_155":426,"_407":3999},{"_155":426,"_407":3997},{"_155":441,"_407":3993},{"_155":426,"_407":3991},{"_155":426,"_407":3989},{"_155":426,"_407":3987},{"_155":426,"_407":3985},{"_155":441,"_407":3981},{"_155":426,"_407":3979},{"_155":426,"_407":3977},{"_155":441,"_407":3973},{"_155":441,"_407":3969},{"_155":426,"_407":3965},{"_155":426,"_407":3963},{"_155":441,"_407":3958},{"_155":426,"_407":3956},{"_155":426,"_407":3954},{"_155":441,"_407":3949},{"_155":426,"_407":3947},{"_155":426,"_407":3945},{"_155":441,"_407":3941},{"_155":426,"_407":3939},{"_155":426,"_407":3937},{"_155":441,"_407":3932},{"_155":426,"_407":3930},{"_155":426,"_407":3928},{"_155":426,"_407":3926},{"_155":441,"_407":3922},{"_155":441,"_407":3918},{"_155":426,"_407":3914},{"_155":426,"_407":3912},{"_155":426,"_407":3910},{"_155":426,"_407":3908},{"_155":426,"_407":3906},{"_155":441,"_407":3902},{"_155":426,"_407":3900},{"_155":441,"_407":3896},{"_155":426,"_407":3894},{"_155":441,"_407":3890},{"_155":426,"_407":3887},{"_155":426,"_407":3885},{"_155":441,"_407":3881},{"_155":426,"_407":3879},{"_155":426,"_407":3877},{"_155":441,"_407":3870},{"_155":426,"_407":3868},{"_155":441,"_407":3864},{"_155":426,"_407":3861},{"_155":426,"_407":3859},{"_155":441,"_407":3855},{"_155":426,"_407":3853},{"_155":441,"_407":3849},{"_155":426,"_407":3845},{"_155":441,"_407":3843},{"_155":426,"_407":3839},{"_155":422,"_407":3837},{"_155":406,"_407":3834},{"_409":410,"_88":3835},{"_412":413,"_414":415,"_104":-5,"_42":416,"_417":3836,"_419":420,"_421":114},[],{"_421":3838,"_409":410},{"_93":425},{"_428":3840,"_409":410,"_430":416},{"_431":3841,"_433":-5,"_42":-5,"_434":-5,"_435":436,"_97":94,"_93":437},[3842],{"_46":439,"_93":440},{"_428":3844,"_409":410,"_430":416},{"_42":444,"_435":436,"_46":439,"_93":445},{"_428":3846,"_409":410,"_430":416},{"_431":-5,"_448":449,"_42":-5,"_434":-5,"_450":3847,"_93":452},[3848],{"_46":454,"_93":455},{"_428":3850,"_409":410,"_430":416},{"_431":3851,"_42":459,"_450":3852,"_93":452},[],[454],{"_428":3854,"_409":410,"_430":416},{"_463":464,"_42":-5,"_434":-5,"_465":466,"_93":467},{"_428":3856,"_409":410,"_430":416},{"_470":471,"_472":473,"_474":3857,"_476":477,"_414":32,"_478":32,"_42":464,"_479":480,"_481":482,"_421":114,"_93":483},[3858],{"_472":485,"_93":486},{"_428":3860,"_409":410,"_430":416},{"_489":490,"_463":464,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3862,"_409":410,"_430":416},{"_431":-5,"_448":496,"_42":-5,"_434":-5,"_450":3863,"_93":452},[],{"_428":3865,"_409":410,"_430":416},{"_431":3866,"_42":501,"_450":3867,"_93":452},[],[],{"_428":3869,"_409":410,"_430":416},{"_463":505,"_42":-5,"_434":-5,"_465":506,"_93":467},{"_428":3871,"_409":410,"_430":416},{"_509":-5,"_489":3872,"_414":511,"_104":-5,"_42":505,"_512":-5,"_513":-5,"_514":3873,"_516":517,"_421":114,"_518":517,"_93":519},{"_307":524,"_309":525},{"_520":-5,"_431":3874,"_522":3875},[3876],{"_307":524,"_309":525},{"_93":46,"_46":527},{"_428":3878,"_409":410,"_430":416},{"_489":530,"_463":505,"_42":-5,"_434":-5,"_181":517,"_492":531,"_93":493},{"_428":3880,"_409":410,"_430":416},{"_463":534,"_42":-5,"_434":-5,"_465":535,"_93":467},{"_428":3882,"_409":410,"_430":416},{"_470":538,"_472":539,"_474":3883,"_476":477,"_414":32,"_478":32,"_42":534,"_479":541,"_481":482,"_421":114,"_93":483},[3884],{"_472":543,"_93":486},{"_428":3886,"_409":410,"_430":416},{"_489":546,"_463":534,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3888,"_409":410,"_430":416},{"_431":-5,"_448":549,"_42":-5,"_434":-5,"_450":3889,"_93":452},[],{"_428":3891,"_409":410,"_430":416},{"_431":3892,"_42":554,"_450":3893,"_93":452},[],[],{"_428":3895,"_409":410,"_430":416},{"_463":558,"_42":-5,"_434":-5,"_465":559,"_93":467},{"_428":3897,"_409":410,"_430":416},{"_470":562,"_472":563,"_474":3898,"_476":477,"_414":32,"_478":32,"_42":558,"_479":565,"_481":482,"_421":114,"_93":483},[3899],{"_472":567,"_93":486},{"_428":3901,"_409":410,"_430":416},{"_489":570,"_463":558,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3903,"_409":410,"_430":416},{"_470":573,"_472":574,"_474":3904,"_476":477,"_414":576,"_478":32,"_42":577,"_479":578,"_481":482,"_421":114,"_93":483},[3905],{"_472":580,"_93":486},{"_428":3907,"_409":410,"_430":416},{"_463":583,"_42":-5,"_434":-5,"_465":584,"_93":467},{"_428":3909,"_409":410,"_430":416},{"_489":587,"_463":583,"_42":-5,"_434":-5,"_181":588,"_492":-5,"_93":493},{"_428":3911,"_409":410,"_430":416},{"_463":577,"_42":-5,"_434":-5,"_465":591,"_93":467},{"_428":3913,"_409":410,"_430":416},{"_489":594,"_463":577,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3915,"_409":410,"_430":416},{"_431":-5,"_448":597,"_42":-5,"_434":-5,"_450":3916,"_93":452},[3917],{"_46":600,"_93":455},{"_428":3919,"_409":410,"_430":416},{"_431":3920,"_42":604,"_450":3921,"_93":452},[],[600],{"_428":3923,"_409":410,"_430":416},{"_470":608,"_472":609,"_474":3924,"_476":477,"_414":611,"_478":612,"_42":613,"_479":614,"_481":482,"_421":615,"_93":483},[3925],{"_472":617,"_93":486},{"_428":3927,"_409":410,"_430":416},{"_463":613,"_42":-5,"_434":-5,"_465":620,"_93":467},{"_428":3929,"_409":410,"_430":416},{"_489":623,"_463":613,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3931,"_409":410,"_430":416},{"_463":626,"_42":-5,"_434":-5,"_465":627,"_93":467},{"_428":3933,"_409":410,"_430":416},{"_470":630,"_472":631,"_474":3934,"_476":477,"_414":32,"_478":32,"_42":626,"_479":633,"_481":482,"_421":114,"_93":483},[3935,3936],{"_472":640,"_181":641,"_162":642,"_93":639},{"_472":636,"_181":637,"_162":638,"_93":639},{"_428":3938,"_409":410,"_430":416},{"_489":645,"_463":626,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3940,"_409":410,"_430":416},{"_463":648,"_42":-5,"_434":-5,"_465":649,"_93":467},{"_428":3942,"_409":410,"_430":416},{"_470":652,"_472":653,"_474":3943,"_476":477,"_414":32,"_478":32,"_42":648,"_479":655,"_481":482,"_421":114,"_93":483},[3944],{"_472":657,"_162":641,"_658":659,"_93":660},{"_428":3946,"_409":410,"_430":416},{"_489":663,"_463":648,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3948,"_409":410,"_430":416},{"_463":666,"_42":-5,"_434":-5,"_465":667,"_93":467},{"_428":3950,"_409":410,"_430":416},{"_470":670,"_472":671,"_474":3951,"_476":477,"_414":32,"_478":32,"_42":666,"_479":673,"_481":482,"_421":114,"_93":483},[3952,3953],{"_472":677,"_181":641,"_162":642,"_93":639},{"_472":676,"_181":637,"_162":638,"_93":639},{"_428":3955,"_409":410,"_430":416},{"_489":680,"_463":666,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3957,"_409":410,"_430":416},{"_463":683,"_42":-5,"_434":-5,"_465":684,"_93":467},{"_428":3959,"_409":410,"_430":416},{"_470":687,"_472":688,"_474":3960,"_476":477,"_414":32,"_478":32,"_42":683,"_479":690,"_481":482,"_421":114,"_93":483},[3961,3962],{"_472":694,"_181":641,"_162":642,"_93":639},{"_472":693,"_181":637,"_162":638,"_93":639},{"_428":3964,"_409":410,"_430":416},{"_489":697,"_463":683,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3966,"_409":410,"_430":416},{"_431":-5,"_448":700,"_42":-5,"_434":-5,"_450":3967,"_93":452},[3968],{"_46":703,"_93":455},{"_428":3970,"_409":410,"_430":416},{"_431":3971,"_42":707,"_450":3972,"_93":452},[],[703],{"_428":3974,"_409":410,"_430":416},{"_470":711,"_472":712,"_474":3975,"_476":477,"_414":714,"_478":612,"_42":715,"_479":716,"_481":482,"_421":615,"_93":483},[3976],{"_472":718,"_93":486},{"_428":3978,"_409":410,"_430":416},{"_463":715,"_42":-5,"_434":-5,"_465":721,"_93":467},{"_428":3980,"_409":410,"_430":416},{"_489":724,"_463":715,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3982,"_409":410,"_430":416},{"_470":727,"_472":728,"_474":3983,"_476":477,"_414":730,"_478":32,"_42":731,"_479":732,"_481":482,"_421":114,"_93":483},[3984],{"_472":734,"_93":486},{"_428":3986,"_409":410,"_430":416},{"_463":737,"_42":-5,"_434":-5,"_465":738,"_93":467},{"_428":3988,"_409":410,"_430":416},{"_489":741,"_463":737,"_42":-5,"_434":-5,"_181":588,"_492":-5,"_93":493},{"_428":3990,"_409":410,"_430":416},{"_463":731,"_42":-5,"_434":-5,"_465":744,"_93":467},{"_428":3992,"_409":410,"_430":416},{"_489":747,"_463":731,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":3994,"_409":410,"_430":416},{"_470":750,"_472":751,"_474":3995,"_476":477,"_414":753,"_478":32,"_42":754,"_479":755,"_481":482,"_421":114,"_93":483},[3996],{"_472":757,"_93":486},{"_428":3998,"_409":410,"_430":416},{"_463":754,"_42":-5,"_434":-5,"_465":760,"_93":467},{"_428":4000,"_409":410,"_430":416},{"_489":763,"_463":754,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4002,"_409":410,"_430":416},{"_431":-5,"_448":766,"_42":-5,"_434":-5,"_450":4003,"_93":452},[4004],{"_46":769,"_93":455},{"_428":4006,"_409":410,"_430":416},{"_431":4007,"_42":773,"_450":4008,"_93":452},[],[769],{"_428":4010,"_409":410,"_430":416},{"_463":777,"_42":-5,"_434":-5,"_465":778,"_93":467},{"_428":4012,"_409":410,"_430":416},{"_470":781,"_472":782,"_474":4013,"_476":477,"_414":612,"_478":32,"_42":777,"_479":784,"_481":482,"_421":114,"_93":483},[4014],{"_472":786,"_93":486},{"_428":4016,"_409":410,"_430":416},{"_489":789,"_463":777,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4018,"_409":410,"_430":416},{"_463":792,"_42":-5,"_434":-5,"_465":793,"_93":467},{"_428":4020,"_409":410,"_430":416},{"_470":796,"_472":797,"_474":4021,"_476":477,"_414":32,"_478":32,"_42":792,"_479":799,"_481":482,"_421":114,"_93":483},[4022],{"_472":801,"_93":486},{"_428":4024,"_409":410,"_430":416},{"_489":804,"_463":792,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4026,"_409":410,"_430":416},{"_431":-5,"_448":807,"_42":-5,"_434":-5,"_450":4027,"_93":452},[4028],{"_46":810,"_93":455},{"_428":4030,"_409":410,"_430":416},{"_431":4031,"_42":814,"_450":4032,"_93":452},[],[810],{"_428":4034,"_409":410,"_430":416},{"_818":-5,"_431":4035,"_42":820,"_93":821},[4036],{"_46":823,"_824":4037,"_93":46},[],{"_428":4039,"_409":410,"_430":416},{"_431":4040,"_433":-5,"_42":-5,"_434":-5,"_435":-5,"_97":319,"_93":437},[4041],{"_46":823,"_93":830},{"_428":4043,"_409":410,"_430":416},{"_431":4044,"_433":-5,"_42":-5,"_434":-5,"_435":-5,"_97":319,"_93":437},[4045,4046],{"_46":837,"_93":830},{"_46":836,"_93":830},{"_428":4048,"_409":410,"_430":416},{"_431":4049,"_433":-5,"_42":-5,"_434":-5,"_435":-5,"_97":841,"_93":437},[4050,4051],{"_46":845,"_93":830},{"_46":844,"_93":830},{"_409":410,"_88":4053},{"_104":-5,"_42":416,"_417":4054,"_419":420,"_421":850},[],{"_421":4056,"_409":410},{"_853":4057,"_93":855},[],{"_858":4059},{"_860":-5,"_861":-5,"_862":863,"_864":420,"_476":477,"_865":15,"_866":-5,"_867":-5,"_868":-5,"_869":870,"_42":410,"_871":872,"_181":-5,"_873":-5,"_162":874,"_875":195,"_876":-5,"_481":877,"_421":4060,"_879":-5,"_78":4061,"_881":420},{"_93":425},[],[],[4064],{"_42":886,"_887":4065,"_889":890,"_891":890,"_431":4066,"_421":893,"_433":-5,"_894":32,"_895":4067,"_897":898,"_899":-5},{"_97":319,"_181":-5,"_895":4071},{"_904":46,"_905":4070},{"_900":4068},{"_902":4069},[],[907],{},{"_93":437,"_97":94,"_431":4087},{"_93":941,"_942":4078},{"_93":917,"_918":524,"_919":920,"_921":4075,"_923":-5},{"_93":921,"_924":477,"_129":130,"_925":-5,"_318":926,"_927":4076,"_929":930,"_931":932,"_933":932,"_934":935,"_936":4077},{"_938":939,"_940":-5},[],[4079,4080],{"_162":3250,"_947":-5,"_948":4084,"_950":-5},{"_162":946,"_947":-5,"_948":4081,"_950":-5},[4082],{"_952":612,"_953":954,"_431":4083,"_956":59},[957,958,195,959,960,961,962,195,963,195,964,965,966,967,968,969,970,971,972,973,974,975,976,977,978,979,195,980,981,982,195,983,984,985,986,987,988,989,990,991,992,993,994,995,996,997,998,999,1000,1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,1011,1012,1013,1014,1015,1016,1017,195,1018,1019,1020,1021,1022,1023,1024,1025,1026,1027,195,1028,1029,1030,195,1031,1032,1033,1034,1035,195,1036,1037,195,1038,1039,1040,1041,1042,1043,1044,1045,957,195,1046,195,1047,1048,1049,1050,195,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1076,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,1095,1096,1097,1076,195,1098,1099,1100,1101,1102,195,195,1103,1104,1105,195,195,1106,1107,1108,1109,195,195,1110,1111,1112,1113,195,195,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1119,1124,1125,1117,1126,1119,1127,1128,1129,1130,1119,1076,195,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,1143,1144,195,1145,1146,1147,1148,1149,1150,1151,1152,1153,195,1154,1155,1156,1157,1158,1159,1160,1161,1162,1163,195,1164,1165,1166,1167,195,1168,1169,1170,1171,1172,1173,1174,1175,1176,1177,1178,1179,1180,1181,1182,1183,1184,1185,1186,1187,1188,1189,1190,1191,1192,1144,1193,1194,1195,1196,1197,1198,1199,1200,1201,195,195,1202,1203,1204,1205,1206,1207,1208,1209,1210,1211,1212,1213,1214,195,195,1215,1216,1217,1218,1219,195,195,1220,1221,1222,1223,1224,1225,1226,1227,1228,1229,1230,1231,1232,1233,1234,1235,1236,1237,1238,1239,1240,1241,1242,1243,1244,1245,1246,1247,1248,195,1249,1250,1251,195,1252,1253,1254,1255,1256,1257,1258,1259,195,1260,1261,1262,1263,1264,1265,1266,1251,195,195,1267,1268,1269,1270,1271,1272,1273,1274,1275,1276,195,195,1277,1278,1279,1280,1281,1282,1076,1283,195,195,1284,1285,1286,1287,1288,1289,1290,1291,1292,1293,1294,195,195,1295,1296,1297,1298,1299,1300,979,1301,1302,1303,1304,1305,1306,1307,1308,1309,1310,1311,1312,1313,979,1314,1315,1316,1317,1318,1319,1320,1035,1321,1322,1323,1324,1325,1326,1327,1328,1329,195,195,1330,1331,1332,1333,1334,1335,195,1336,1337,1338,1339,1340,1341,1342,1343,1344,1035,1345,1346,1347,1348,1349,1350,1351,1352,1353,1354,1355,1356,1357,1358,1359,1360,979,195,195,1361,1362,1363,1364,1365,1366,1367,1368,1369,1370,1371,1372,1373,1374,1375,1376,1377,1378,1379,1380,1381,1382,1383,1384,1385,1386,1387,1388,1389,1390,1391,1392,1393,1394,1395,1396,1397,1398,1399,1400,1401,1394,1402,1403,1404,1405,1394,1406,1407,1408,1409,1410,1411,1394,1412,1413,1414,1415,1416,1417,1418,1419,1420,1421,1422,1423,1424,1425,1426,1427,1428,1429,1430,1431,1432,1433,1434,1435,1436,1437,1438,1439,1440,1441,1442,1443,1444,1445,1446,1447,1448,1449,1450,1451,1452,1453,1454,1455,1456,1421,1457,1458,1459,1460,1461,1462,1463,1464,1465,1466,1453,1454,1455,1467,1421,1468,1458,1469,1470,1471,1472,1473,1474,1475,1476,1428,1477,1478,1479,1480,1481,1482,1483,1484,1485,1486,1487,1488,1489,1490,1491,1492,1493,1494,1495,1496,1497,1498,1499,1500,1501,1502,1503,1504,1505,1506,1507,1508,1509,1510,1511,1512,1513,1514,1515,1394,1516,1517,1518,1394,1519,1520,1521,1394,1522,1523,1329,195,195,1524,1525,1526,195,1527,1528,1529,1530,1531,1532,1533,1534,1535,1536,1537,1538,1539,1540,1541,1542,1543,1544,1545,1546,1547,1548,1549,1550,1551,1552,1553,1554,1555,1556,1557,1558,1559,1560,1561,1562,1563,1564,1558,1565,1566,1567,1568,1569,1570,1571,1572,1573,1574,1575,1576,1577,1578,1579,1580,1581,1582,1583,1584,1558,1585,1586,1587,1588,1589,1590,1591,1592,1593,1594,1595,1596,1597,1598,1599,1600,1601,1602,1577,1603,1604,1605,1606,1607,1608,1609,1610,1611,1612,1613,1614,1615,1616,1617,1618,1619,1620,1621,1622,1623,1624,1625,1626,1627,1628,1629,195,195,1630,1631,1632,1633,1634,1635,1636,1637,1638,1639,1640,1641,1642,1643,1637,1644,1645,1646,1647,1648,1035,195,195,1649,1650,1651,1652,1653,1654,1655,1656,1657,1658,1659,1660,1661,1662,1663,1530,1664,1531,1532,1534,1535,1536,1537,1538,1539,1540,1541,1665,1666,1667,1542,1543,1544,1545,1549,1550,1551,1552,1668,1669,1557,1558,1670,1671,1672,1673,1564,1558,1674,1675,1676,1677,1678,1679,1680,1681,1682,1683,1570,1684,1685,1686,1687,1573,1574,1575,1576,1577,1578,1579,1580,1581,1688,1689,1690,1691,1692,1584,1558,1693,1694,1695,1696,1697,1698,1699,1700,1701,1702,1703,1589,1590,1591,1592,1593,1594,1595,1596,1597,1598,1704,1705,1706,1707,1708,1709,1602,1577,1603,1604,1605,1606,1607,1710,1711,1609,1712,1713,1714,1715,1716,1717,1718,1719,1720,1721,1722,1723,1724,1725,1726,1727,1728,1365,1729,1730,1731,1732,1733,1734,1735,1736,1737,1738,1739,1740,1741,1742,1743,1744,1745,1746,1747,1748,1749,1750,1558,1751,1752,1753,1754,1755,1756,1757,1758,1759,1760,1761,1762,1763,1764,1765,1766,1767,1768,1769,1770,1771,1772,1773,1774,1775,1776,1777,1778,1779,1780,1781,1782,1783,1784,1785,1786,1787,1788,1789,1790,1791,1792,1793,1794,1795,1796,1797,1798,1799,1800,1801,1802,1803,1804,1805,1806,1807,1808,1809,1810,1811,1812,1813,1814,1815,1816,1817,1818,1819,1820,1821,1822,1823,1824,1825,1826,1827,1828,1829,195,195,1830,1831,1832,1833,1834,1835,1836,1837,1838,1839,1840,1841,1842,1843,1844,1845,1846,1847,1848,1849,1850,1851,1852,1214,195,195,1853,1854,1855,1856,1857,195,1858,1859,1860,1861,1862,1863,1864,1865,1866,1867,1868,195,1869,1870,1871,1872,1873,1558,1874,1875,1876,1877,1878,1879,1880,1881,1882,1883,1884,1885,1886,1887,1888,1889,1890,1891,1892,1893,1894,195,1895,1214,195,195,1896,1897,1898,1899,1900,1901,1902,1836,1837,1838,1839,1903,1904,1905,1906,1904,1907,1904,1908,195,195,1909,1910,1911,1912,1835,1901,1868,1836,1837,1838,1839,1913,1914,1842,1843,1844,1915,1916,1849,1917,1214,195,195,1918,1919,1920,1921,1922,1901,1902,1836,1837,1838,1839,1923,1904,1924,1925,1904,1926,1904,1908,195,195,1927,1928,1929,1930,1931,1932,1901,1868,195,1933,1870,1871,1872,1873,1558,1874,1875,1934,1935,1936,1937,1890,1938,1939,1893,1940,195,1941,1214,195,195,1942,1943,1944,195,1945,1946,1947,1948,1949,1950,1951,1952,1953,1954,1955,1956,1957,1958,1959,1960,1961,1962,1963,1964,1965,1966,1967,1968,1969,1970,1971,1972,1973,1974,1975,1976,1977,1978,1979,1980,1981,1982,1983,1984,1985,195,195,1986,1987,1988,1989,1990,1991,1992,1993,1994,1995,1996,1144,195,1997,1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,1076,2013,2014,2015,2016,2017,195,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,2028,2029,195,2030,2031,2032,2033,195,195,2034,2035,2036,2037,2038,2039,2040,2041,2042,2043,2044,2045,2046,2047,2048,2049,2050,2051,2052,2053,2054,2055,2056,2057,2054,2058,2059,2060,2061,2062,2063,2064,2065,2066,2067,2068,2069,2070,2071,2072,2073,2074,2075,2076,2054,2077,2078,2054,1144,2079,2080,2081,195,195,2082,2083,2084,2085,2086,2087,2088,195,195,2089,2090,2091,2092,2093,2094,2095,2096,1902,2097,2098,195,195,2099,2100,2101,2102,2103,2104,2105,2106,195,2107,2108,2109,2110,2111,2112,2113,2096,1902,2114,2115,2116,2117,2118,2119,2120,1902,2121,195,195,2122,2123,2124,2125,2126,1901,2127,1836,1837,1838,1839,2128,2129,2130,2131,2132,2133,2134,2135,2136,2137,2138,2139,2140,2141,2142,195,195,2143,2144,195,2145,2146,2147,2148,2149,2150,2151,2152,2153,1901,2154,1836,1837,1838,1839,2128,2155,2156,2157,2158,2159,1844,2160,2161,2162,2163,2164,2165,2166,2167,2168,1849,2169,2170,2171,2172,2173,2174,2175,2176,2177,195,195,2178,2179,2180,2181,2182,2183,2184,2185,195,195,2186,2187,2188,2189,2190,2191,2192,2193,1901,1868,1836,1837,1838,1839,2194,2195,2131,2196,2197,2198,2199,2200,2201,2139,2202,1214,195,195,2203,2204,2205,2206,2207,2208,2209,2210,2211,195,195,2212,2213,2214,2215,2216,2217,2218,2219,1969,2220,2221,2222,2223,2224,195,195,2225,2226,2227,2228,2229,2230,2231,2232,2233,2234,2235,2236,2237,2238,2239,2240,2241,2242,2243,2244,2245,2246,2247,2248,2249,2250,2251,2252,2253,195,195,2254,2255,2256,2257,2258,2259,2260,2261,195,2262,2263,2264,2265,2266,2267,2268,2269,2270,2271,2272,2273,2274,2275,2276,2277,195,2278,2279,2280,195,2281,2282,2283,2284,2285,2286,2287,2288,2289,2290,2291,2292,2293,2294,1838,2295,2296,1838,2297,2298,2299,2300,2301,2302,2303,1558,2304,2305,2306,2307,2308,2309,2310,2311,2312,2167,2313,2314,2315,2316,2317,2318,2319,2320,2321,2322,2323,2324,2325,2326,2327,2328,2329,2330,2331,2332,2333,2334,2335,2336,2337,2338,2339,2340,2341,2342,2343,2344,2345,2346,195,195,2347,2348,2349,2350,2351,2352,2353,2354,2355,2356,2357,2358,2359,2360,2361,2362,2363,2364,2365,2366,2367,2368,2369,2370,2371,2368,2372,2373,2374,2375,2376,2377,195,195,2378,2379,2380,2381,2382,2383,2384,2385,2386,2387,2388,2389,2390,2391,2392,1868,2393,2394,2395,1838,2396,2397,2398,2399,2400,2401,2402,2403,2404,2405,2406,2407,2408,2409,2410,2411,2412,2413,2414,2415,2416,2417,1214,195,195,2418,2419,2420,195,2421,2422,2423,2424,2425,2426,2427,2428,2429,2430,1904,2431,2432,1902,195,2433,2434,2435,2436,2437,1873,1558,1874,2438,2439,2440,2441,2442,1890,2443,2444,2442,2445,2446,2442,2447,1893,2448,2449,2442,2450,195,2451,195,195,2452,2453,2454,2455,2456,195,2457,2458,2459,2460,2461,2462,2463,195,2464,2465,2466,2467,2468,2469,2470,2471,2472,2473,2474,2475,2476,2477,2478,2479,2480,2481,195,2482,2483,2484,2485,2486,195,2487,2488,2489,195,2490,1870,1871,1872,1873,1558,1874,2491,2492,2493,2494,2495,2496,2497,2498,2499,2500,2501,2502,2503,2504,2505,2506,2507,2508,2509,2510,2511,1893,2512,195,2513,2514,2515,2516,2517,2518,2519,2520,2521,2522,195,195,2523,2524,2525,2526,2527,2528,2529,2530,2531,2532,2533,2534,2535,2536,2537,195,2538,2539,2540,2541,195,2542,2543,2544,2545,2546,195,2547,2548,2549,2550,2551,2552,2553,1836,1837,1838,1839,2554,2555,2556,2557,2558,2559,1558,2560,2561,2562,2563,1558,2564,2565,2566,2567,1808,2568,2569,2570,2571,2572,2573,2574,2575,2576,2577,2578,2579,2580,2556,2581,2582,2583,2584,2585,2586,2587,2588,2589,2590,2591,1804,2592,2593,2594,2595,2596,2597,2598,2599,2600,2601,2602,2603,2604,2605,2599,2600,2606,2607,2599,2600,2608,2156,1841,2609,2610,1844,2611,2612,2613,2614,2615,2616,2614,2615,2617,1849,2618,2619,2614,2615,2620,2130,2621,2622,2623,2624,2625,2626,2627,2628,2195,2629,2630,2631,2632,2633,2634,2635,2636,2637,2638,2639,2640,2641,2642,2643,2644,2645,2646,2647,2648,2649,2650,2651,2652,2653,2654,2655,2656,2657,2658,2659,2660,2661,2662,2663,2664,2665,2666,2667,2668,2669,2670,2671,2672,2673,2674,2675,2676,2677,2678,2679,2680,2681,2682,2683,2684,2685,2686,2687,2688,2591,1804,2689,2690,2594,2691,2596,2692,2693,2694,2695,2696,2697,1421,2698,2699,2700,2701,2702,2703,2704,2705,2706,1421,2707,2708,2709,2710,195,195,2711,2712,2713,2714,2715,2716,2717,2718,2719,195,195,2720,2721,2722,2723,2724,2725,2726,2727,1144,195,195,2728,2729,2730,2731,2732,2733,2734,2735,2736,2737,2738,2739,2740,2741,2742,195,195,2743,2744,2745,2746,195,2747,2748,2749,2750,2751,2752,2753,2754,195,2755,2756,2757,2758,2759,2760,1720,2761,2762,2763,2764,2765,2766,2767,2768,1345,2769,2770,2771,2772,2773,979,195,195,2774,2775,2776,195,2777,2778,2779,2780,2781,2782,2783,2784,2785,2786,2787,195,2788,2789,2790,2791,195,2792,2793,2794,2795,2796,195,2797,2798,2799,1838,2800,2801,2802,2803,2804,2805,2806,2807,2808,2809,2810,2811,2812,2813,2814,2815,2816,1838,2817,2818,1421,2819,2820,2821,2822,2823,2824,2825,2826,2827,2828,2829,2830,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,2842,2843,2844,2845,1558,2846,2847,2848,2849,2850,2851,2852,2853,2854,2855,2856,2857,2858,2859,2317,2860,2861,2335,2862,2863,2864,2865,2866,2867,2868,2869,2870,2871,2167,2866,2872,2873,2874,2875,2876,2877,2878,2879,2880,1838,2881,2882,2883,2884,2885,2886,2887,2888,2889,2890,2891,2892,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2905,2906,2907,2908,2909,2910,2911,2912,2913,2914,2876,2877,2915,2916,1838,2917,2918,2919,2920,2921,2922,2923,2924,2925,2926,2927,2895,2928,2897,2929,2930,2876,2877,2915,2931,1838,2932,2933,2934,2935,2936,2937,2938,2939,2940,2941,2942,2943,2944,2945,2946,2942,2943,2947,2948,2949,2950,2951,2952,2953,2954,2955,2956,2957,2958,2959,2960,2167,2961,2962,2963,2964,2965,2966,2700,2967,2968,2969,2970,2971,2972,2973,2974,2954,2955,2975,2976,2977,2978,2979,2167,2975,2980,2981,2982,2983,2984,2985,195,2986,2987,2988,2989,195,2990,2991,2992,2993,2994,195,2995,2996,2997,2998,195,2999,3000,3001,3002,195,3003,3004,3005,3006,3007,3008,2982,3009,3010,3011,3012,3013,3014,195,3015,3016,3017,3018,3019,3020,3021,3022,3023,3024,3025,3026,1838,3027,3028,3029,195,3030,3031,195,195,3032,3033,3034,3035,3036,195,195,3037,3038,3039,3040,3041,3042,3043,3044,3045,3046,3047,3048,195,195,3049,3050,3051,3052,3053,3054,3055,3056,195,195,3057,3058,3059,3060,3061,3062,3048,195,195,3063,3064,3065,3066,3067,3068,3069,3056,195,195,3070,3071,3072,3073,3074,3062,3048,195,195,3075,3076,3077,3078,2392,2738,3079,3080,3081,2248,195,195,3082,3083,3084,1208,2392,3085,3086,3087,3088,3089,3090,3091,3092,3093,3094,3095,3096,3097,3098,3099,3100,3101,3102,3103,3104,3105,3106,3107,3108,3109,3110,3111,3112,3113,3114,3115,3116,3117,1035,3118,3119,3120,3121,3122,3123,3124,3125,3126,3127,3128,1035,3129,3130,3131,3132,3133,3123,3134,3125,3135,3136,3137,3138,1035,3139,3140,3141,3142,3133,3123,3143,3125,3135,3136,3144,3145,1035,3146,3147,3148,3149,3150,3151,3152,3153,3154,3155,3156,3157,3135,3158,3159,3160,3161,3162,3163,3164,3165,3166,3167,3155,3168,3169,3170,3171,3172,1214,195,195,3173,3174,3175,3176,3177,2392,3085,3178,3179,3180,3181,3182,3183,3184,1838,3185,3186,3187,3188,3189,1838,3190,3191,3192,3193,3194,3195,3196,3197,3198,3199,3200,3201,3202,1838,3203,3204,3205,3206,3207,3208,3209,3210,3211,3212,3213,3214,3215,3216,3217,3218,3219,3220,2709,3155,3221,3222,3223,1214,195,195,3224,3225,3226,3227,3228,3229,3230,3211,3231,3232,1868,3233,1539,1838,3234,3235,3236,3237,1838,3238,3239,3240,1558,3241,3242,3243,3244,3245,3246,3247,3248,3249,1214],[4085],{"_952":612,"_953":3253,"_431":4086,"_956":59},[957,3255,195,3256,3257,3258,3259,3260,3261,3262,3263,3264,3265,3266,3267,195,3268,3269,3270,3271,195,3272,3273,3274,3275,3276,3277,3278,3279,3280,3281,3282,3283,3284,195,3285,957,195,1046,195,1047,3286,3287,3288,195,3289,3290,195,3291,3292,3293,3294,3295,3296,3297,3298,3299,3300,195,195,3301,3302,3303,3304,3305,3306,3307,3308,3309,3310,3311,3312,3313,3314,3315,3316,3317,3318,195,195,3319,2765,3320,3321,3322,3323,3324,195,195,3325,3326,3327,3328,3329,3330,3331,3332,3333,3334,195,3335,3336,3337,2798,3338,3339,3340,3341,3342,3343,195,195,3344,3326,3345,3328,3346,3347,3348,3349,3350,3351,3352,195,195,3353,3326,2765,3320,3321,3354,3350,3355,3356,3357,3358,3359,3360,3361,3362,3363,3364,3365,3366,3367,3368,3369,3352,195,195,3370,3371,3372,3373,3326,3345,3374,3347,3375,3350,3376,3377,3328,2798,3378,3379,3380,3381,3382,3383,3384,3385,3343,195,195,3386,3387,3388,3389,3390,3391,3392,3393,3394,195,195,3395,3396,3397,3398,3399,3400,3401,3402,3403,3404,3405,2248,3406,3407,3408,3409,3410,3411,3412,3413,3414,3415,3416,3417,3418,3419,3420,3421,3422,3423,3424,3425,3426,3427,3428,3429,3430,3431,195,195,3432,1364,3433,195,195,3434,3435,3436,195,195,3437,3438,3439,3440,3441,3442,3443,3444,3445,3446,3447,3448,3449,1214,195,195,3450,3451,3452,3453,3454,195,3455,3456,3457,3458,3459,2335,3460,3461,3462,3463,195,3464,3465,195,195,3466,3467,3468,3469,3470,3382,3471,3472,1365,3473,3474,3475,3476,3477,3478,3479,3480,3477,3481,3482,3483,3484,3485,3486,3487,3441,3488,3489,3490,3491,3487,3352,195,195,3492,3493,3494,3495,3496,3497,3498,3499,3500,3501,2765,3502,3503,3504,3487,3505,3352,195,195,3506,3507,3508,3509,3510,3511,3512,3513,3514,3515,2765,3516,3503,3517,3504,3487,3518,3519,3520,3521,3522,3523,3524,3525,3526,3527,3528,3329,3529,3530,3531,3334,3532,3533,3534,3535,3536,3537,3538,3539,3540,3541,2955,2167,3542,3543,3544,3545,3546,3547,3548,3549,3550,3551,3552,3553,3554,3555,3556,3557,3558,3559,3560,3561,195,195,3562,3563,3564,195,195,3565,3566,3567,3568,3487,3569,3570,3571,3572,3573,3574,3575,3576,3577,3578,3579,3580,3581,3582,3583,1558,3584,3585,1558,3586,3587,3588,3589,3590,3591,3592,3593,3594,3595,3596,3597,3598,3599,3600,3601,3580,3602,3582,3603,3604,3605,3198,3606,3607,3604,3605,3198,3608,1838,3609,3610,3611,3612,3613,3568,3487,3614,3615,3616,3617,3618,3487,3619,3620,3621,3487,3622,3623,3624,3487,3625,3626,3627,3628,3629,3630,3631,3632,3633,3477,3634,3635,3636,3637,3477,3638,3639,3618,3487,3640,3641,3642,3643,3644,3477,3645,3646,3647,3648,3649,3650,3651,195,195,3652,3653],[4088,4089,4090,4091,4092,4093],{"_904":46,"_46":3670},{"_904":3662,"_162":3250,"_952":3668,"_953":3669},{"_904":3662,"_162":3250,"_952":3666,"_953":3667},{"_904":46,"_46":3665},{"_904":3662,"_162":946,"_952":3663,"_953":3664},{"_904":46,"_46":3661},[4440,4441,4442],[],{"_909":910,"_46":911,"_912":913},{"_883":4431},{"_330":4430},{"_330":4127},{"_299":300,"_290":301,"_302":303,"_304":15,"_305":15,"_306":15,"_307":308,"_309":310,"_311":262,"_312":128,"_313":314,"_315":130,"_316":-5,"_317":-5,"_318":-5,"_319":4126,"_321":322,"_323":324,"_325":326,"_327":328},{"_42":124,"_189":190,"_191":192,"_193":15,"_194":195,"_196":197,"_198":4115,"_200":-5,"_201":-5,"_202":15,"_203":4116,"_205":195,"_206":195,"_207":4117,"_209":4118,"_211":4119,"_213":-5,"_214":215,"_216":217,"_218":219,"_220":4120,"_55":-5,"_120":222,"_223":4121,"_225":4122,"_227":228,"_229":15,"_230":15},{"_134":4110},[4104,4105,4106,4107,4108,4109],{"_149":172,"_151":166,"_153":167,"_155":164,"_157":173,"_159":160,"_161":32,"_162":-5},{"_149":171,"_151":166,"_153":167,"_155":164,"_157":168,"_159":160,"_161":32,"_162":-5},{"_149":169,"_151":166,"_153":167,"_155":164,"_157":170,"_159":160,"_161":32,"_162":-5},{"_149":165,"_151":166,"_153":167,"_155":164,"_157":168,"_159":160,"_161":32,"_162":-5},{"_149":163,"_151":152,"_153":154,"_155":164,"_157":158,"_159":160,"_161":32,"_162":-5},{"_149":150,"_151":152,"_153":154,"_155":156,"_157":158,"_159":160,"_161":32,"_162":-5},[4111,4112],{"_177":4114,"_179":186},{"_177":4113,"_179":180},{"_181":182,"_93":183,"_120":184},{"_181":187,"_93":183,"_120":188},{"_292":293,"_294":-5,"_295":-5,"_296":-5,"_297":-5,"_298":-5},[252],{"_252":4123},{"_234":235,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251},{},[],{"_233":59},{"_231":59,"_232":195},{"_42":254,"_181":255,"_256":4124,"_258":192,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":64,"_270":15,"_271":-5,"_272":-5,"_273":-5,"_274":-5,"_275":-5,"_276":-5,"_161":277,"_278":-5,"_55":4125},{"_284":285,"_42":286,"_93":287,"_288":289,"_290":291},{"_280":15,"_281":15,"_282":15,"_283":15},{"_284":285,"_181":285,"_329":-5,"_288":289,"_42":286},[4128,4129,4130,4131,4132,4133,4134,4135,4136,4137,4138,4139,4140,4141,4142,4143,4144,4145,4146,4147,4148,4149,4150,4151,4152,4153,4154,4155,4156,4157,4158,4159,4160,4161,4162,4163,4164,4165,4166,4167,4168,4169,4170,4171,4172,4173,4174,4175,4176,4177,4178,4179,4180,4181,4182,4183,4184,4185,4186,4187,4188,4189,4190,4191,4192,4193,4194,4195,4196,4197,4198,4199,4200,4201],{"_155":856,"_407":4426},{"_155":422,"_407":4423},{"_155":846,"_407":4420},{"_155":426,"_407":4415},{"_155":426,"_407":4410},{"_155":426,"_407":4406},{"_155":441,"_407":4401},{"_155":441,"_407":4397},{"_155":426,"_407":4393},{"_155":426,"_407":4391},{"_155":441,"_407":4387},{"_155":426,"_407":4385},{"_155":426,"_407":4383},{"_155":441,"_407":4379},{"_155":426,"_407":4377},{"_155":441,"_407":4373},{"_155":426,"_407":4369},{"_155":426,"_407":4367},{"_155":426,"_407":4365},{"_155":441,"_407":4361},{"_155":426,"_407":4359},{"_155":426,"_407":4357},{"_155":426,"_407":4355},{"_155":426,"_407":4353},{"_155":441,"_407":4349},{"_155":426,"_407":4347},{"_155":426,"_407":4345},{"_155":441,"_407":4341},{"_155":441,"_407":4337},{"_155":426,"_407":4333},{"_155":426,"_407":4331},{"_155":441,"_407":4326},{"_155":426,"_407":4324},{"_155":426,"_407":4322},{"_155":441,"_407":4317},{"_155":426,"_407":4315},{"_155":426,"_407":4313},{"_155":441,"_407":4309},{"_155":426,"_407":4307},{"_155":426,"_407":4305},{"_155":441,"_407":4300},{"_155":426,"_407":4298},{"_155":426,"_407":4296},{"_155":426,"_407":4294},{"_155":441,"_407":4290},{"_155":441,"_407":4286},{"_155":426,"_407":4282},{"_155":426,"_407":4280},{"_155":426,"_407":4278},{"_155":426,"_407":4276},{"_155":426,"_407":4274},{"_155":441,"_407":4270},{"_155":426,"_407":4268},{"_155":441,"_407":4264},{"_155":426,"_407":4262},{"_155":441,"_407":4258},{"_155":426,"_407":4255},{"_155":426,"_407":4253},{"_155":441,"_407":4249},{"_155":426,"_407":4247},{"_155":426,"_407":4245},{"_155":441,"_407":4238},{"_155":426,"_407":4236},{"_155":441,"_407":4232},{"_155":426,"_407":4229},{"_155":426,"_407":4227},{"_155":441,"_407":4223},{"_155":426,"_407":4221},{"_155":441,"_407":4217},{"_155":426,"_407":4213},{"_155":441,"_407":4211},{"_155":426,"_407":4207},{"_155":422,"_407":4205},{"_155":406,"_407":4202},{"_409":410,"_88":4203},{"_412":413,"_414":415,"_104":-5,"_42":416,"_417":4204,"_419":420,"_421":114},[],{"_421":4206,"_409":410},{"_93":425},{"_428":4208,"_409":410,"_430":416},{"_431":4209,"_433":-5,"_42":-5,"_434":-5,"_435":436,"_97":94,"_93":437},[4210],{"_46":439,"_93":440},{"_428":4212,"_409":410,"_430":416},{"_42":444,"_435":436,"_46":439,"_93":445},{"_428":4214,"_409":410,"_430":416},{"_431":-5,"_448":449,"_42":-5,"_434":-5,"_450":4215,"_93":452},[4216],{"_46":454,"_93":455},{"_428":4218,"_409":410,"_430":416},{"_431":4219,"_42":459,"_450":4220,"_93":452},[],[454],{"_428":4222,"_409":410,"_430":416},{"_463":464,"_42":-5,"_434":-5,"_465":466,"_93":467},{"_428":4224,"_409":410,"_430":416},{"_470":471,"_472":473,"_474":4225,"_476":477,"_414":32,"_478":32,"_42":464,"_479":480,"_481":482,"_421":114,"_93":483},[4226],{"_472":485,"_93":486},{"_428":4228,"_409":410,"_430":416},{"_489":490,"_463":464,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4230,"_409":410,"_430":416},{"_431":-5,"_448":496,"_42":-5,"_434":-5,"_450":4231,"_93":452},[],{"_428":4233,"_409":410,"_430":416},{"_431":4234,"_42":501,"_450":4235,"_93":452},[],[],{"_428":4237,"_409":410,"_430":416},{"_463":505,"_42":-5,"_434":-5,"_465":506,"_93":467},{"_428":4239,"_409":410,"_430":416},{"_509":-5,"_489":4240,"_414":511,"_104":-5,"_42":505,"_512":-5,"_513":-5,"_514":4241,"_516":517,"_421":114,"_518":517,"_93":519},{"_307":524,"_309":525},{"_520":-5,"_431":4242,"_522":4243},[4244],{"_307":524,"_309":525},{"_93":46,"_46":527},{"_428":4246,"_409":410,"_430":416},{"_489":530,"_463":505,"_42":-5,"_434":-5,"_181":517,"_492":531,"_93":493},{"_428":4248,"_409":410,"_430":416},{"_463":534,"_42":-5,"_434":-5,"_465":535,"_93":467},{"_428":4250,"_409":410,"_430":416},{"_470":538,"_472":539,"_474":4251,"_476":477,"_414":32,"_478":32,"_42":534,"_479":541,"_481":482,"_421":114,"_93":483},[4252],{"_472":543,"_93":486},{"_428":4254,"_409":410,"_430":416},{"_489":546,"_463":534,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4256,"_409":410,"_430":416},{"_431":-5,"_448":549,"_42":-5,"_434":-5,"_450":4257,"_93":452},[],{"_428":4259,"_409":410,"_430":416},{"_431":4260,"_42":554,"_450":4261,"_93":452},[],[],{"_428":4263,"_409":410,"_430":416},{"_463":558,"_42":-5,"_434":-5,"_465":559,"_93":467},{"_428":4265,"_409":410,"_430":416},{"_470":562,"_472":563,"_474":4266,"_476":477,"_414":32,"_478":32,"_42":558,"_479":565,"_481":482,"_421":114,"_93":483},[4267],{"_472":567,"_93":486},{"_428":4269,"_409":410,"_430":416},{"_489":570,"_463":558,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4271,"_409":410,"_430":416},{"_470":573,"_472":574,"_474":4272,"_476":477,"_414":576,"_478":32,"_42":577,"_479":578,"_481":482,"_421":114,"_93":483},[4273],{"_472":580,"_93":486},{"_428":4275,"_409":410,"_430":416},{"_463":583,"_42":-5,"_434":-5,"_465":584,"_93":467},{"_428":4277,"_409":410,"_430":416},{"_489":587,"_463":583,"_42":-5,"_434":-5,"_181":588,"_492":-5,"_93":493},{"_428":4279,"_409":410,"_430":416},{"_463":577,"_42":-5,"_434":-5,"_465":591,"_93":467},{"_428":4281,"_409":410,"_430":416},{"_489":594,"_463":577,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4283,"_409":410,"_430":416},{"_431":-5,"_448":597,"_42":-5,"_434":-5,"_450":4284,"_93":452},[4285],{"_46":600,"_93":455},{"_428":4287,"_409":410,"_430":416},{"_431":4288,"_42":604,"_450":4289,"_93":452},[],[600],{"_428":4291,"_409":410,"_430":416},{"_470":608,"_472":609,"_474":4292,"_476":477,"_414":611,"_478":612,"_42":613,"_479":614,"_481":482,"_421":615,"_93":483},[4293],{"_472":617,"_93":486},{"_428":4295,"_409":410,"_430":416},{"_463":613,"_42":-5,"_434":-5,"_465":620,"_93":467},{"_428":4297,"_409":410,"_430":416},{"_489":623,"_463":613,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4299,"_409":410,"_430":416},{"_463":626,"_42":-5,"_434":-5,"_465":627,"_93":467},{"_428":4301,"_409":410,"_430":416},{"_470":630,"_472":631,"_474":4302,"_476":477,"_414":32,"_478":32,"_42":626,"_479":633,"_481":482,"_421":114,"_93":483},[4303,4304],{"_472":640,"_181":641,"_162":642,"_93":639},{"_472":636,"_181":637,"_162":638,"_93":639},{"_428":4306,"_409":410,"_430":416},{"_489":645,"_463":626,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4308,"_409":410,"_430":416},{"_463":648,"_42":-5,"_434":-5,"_465":649,"_93":467},{"_428":4310,"_409":410,"_430":416},{"_470":652,"_472":653,"_474":4311,"_476":477,"_414":32,"_478":32,"_42":648,"_479":655,"_481":482,"_421":114,"_93":483},[4312],{"_472":657,"_162":641,"_658":659,"_93":660},{"_428":4314,"_409":410,"_430":416},{"_489":663,"_463":648,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4316,"_409":410,"_430":416},{"_463":666,"_42":-5,"_434":-5,"_465":667,"_93":467},{"_428":4318,"_409":410,"_430":416},{"_470":670,"_472":671,"_474":4319,"_476":477,"_414":32,"_478":32,"_42":666,"_479":673,"_481":482,"_421":114,"_93":483},[4320,4321],{"_472":677,"_181":641,"_162":642,"_93":639},{"_472":676,"_181":637,"_162":638,"_93":639},{"_428":4323,"_409":410,"_430":416},{"_489":680,"_463":666,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4325,"_409":410,"_430":416},{"_463":683,"_42":-5,"_434":-5,"_465":684,"_93":467},{"_428":4327,"_409":410,"_430":416},{"_470":687,"_472":688,"_474":4328,"_476":477,"_414":32,"_478":32,"_42":683,"_479":690,"_481":482,"_421":114,"_93":483},[4329,4330],{"_472":694,"_181":641,"_162":642,"_93":639},{"_472":693,"_181":637,"_162":638,"_93":639},{"_428":4332,"_409":410,"_430":416},{"_489":697,"_463":683,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4334,"_409":410,"_430":416},{"_431":-5,"_448":700,"_42":-5,"_434":-5,"_450":4335,"_93":452},[4336],{"_46":703,"_93":455},{"_428":4338,"_409":410,"_430":416},{"_431":4339,"_42":707,"_450":4340,"_93":452},[],[703],{"_428":4342,"_409":410,"_430":416},{"_470":711,"_472":712,"_474":4343,"_476":477,"_414":714,"_478":612,"_42":715,"_479":716,"_481":482,"_421":615,"_93":483},[4344],{"_472":718,"_93":486},{"_428":4346,"_409":410,"_430":416},{"_463":715,"_42":-5,"_434":-5,"_465":721,"_93":467},{"_428":4348,"_409":410,"_430":416},{"_489":724,"_463":715,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4350,"_409":410,"_430":416},{"_470":727,"_472":728,"_474":4351,"_476":477,"_414":730,"_478":32,"_42":731,"_479":732,"_481":482,"_421":114,"_93":483},[4352],{"_472":734,"_93":486},{"_428":4354,"_409":410,"_430":416},{"_463":737,"_42":-5,"_434":-5,"_465":738,"_93":467},{"_428":4356,"_409":410,"_430":416},{"_489":741,"_463":737,"_42":-5,"_434":-5,"_181":588,"_492":-5,"_93":493},{"_428":4358,"_409":410,"_430":416},{"_463":731,"_42":-5,"_434":-5,"_465":744,"_93":467},{"_428":4360,"_409":410,"_430":416},{"_489":747,"_463":731,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4362,"_409":410,"_430":416},{"_470":750,"_472":751,"_474":4363,"_476":477,"_414":753,"_478":32,"_42":754,"_479":755,"_481":482,"_421":114,"_93":483},[4364],{"_472":757,"_93":486},{"_428":4366,"_409":410,"_430":416},{"_463":754,"_42":-5,"_434":-5,"_465":760,"_93":467},{"_428":4368,"_409":410,"_430":416},{"_489":763,"_463":754,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4370,"_409":410,"_430":416},{"_431":-5,"_448":766,"_42":-5,"_434":-5,"_450":4371,"_93":452},[4372],{"_46":769,"_93":455},{"_428":4374,"_409":410,"_430":416},{"_431":4375,"_42":773,"_450":4376,"_93":452},[],[769],{"_428":4378,"_409":410,"_430":416},{"_463":777,"_42":-5,"_434":-5,"_465":778,"_93":467},{"_428":4380,"_409":410,"_430":416},{"_470":781,"_472":782,"_474":4381,"_476":477,"_414":612,"_478":32,"_42":777,"_479":784,"_481":482,"_421":114,"_93":483},[4382],{"_472":786,"_93":486},{"_428":4384,"_409":410,"_430":416},{"_489":789,"_463":777,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4386,"_409":410,"_430":416},{"_463":792,"_42":-5,"_434":-5,"_465":793,"_93":467},{"_428":4388,"_409":410,"_430":416},{"_470":796,"_472":797,"_474":4389,"_476":477,"_414":32,"_478":32,"_42":792,"_479":799,"_481":482,"_421":114,"_93":483},[4390],{"_472":801,"_93":486},{"_428":4392,"_409":410,"_430":416},{"_489":804,"_463":792,"_42":-5,"_434":-5,"_181":491,"_492":-5,"_93":493},{"_428":4394,"_409":410,"_430":416},{"_431":-5,"_448":807,"_42":-5,"_434":-5,"_450":4395,"_93":452},[4396],{"_46":810,"_93":455},{"_428":4398,"_409":410,"_430":416},{"_431":4399,"_42":814,"_450":4400,"_93":452},[],[810],{"_428":4402,"_409":410,"_430":416},{"_818":-5,"_431":4403,"_42":820,"_93":821},[4404],{"_46":823,"_824":4405,"_93":46},[],{"_428":4407,"_409":410,"_430":416},{"_431":4408,"_433":-5,"_42":-5,"_434":-5,"_435":-5,"_97":319,"_93":437},[4409],{"_46":823,"_93":830},{"_428":4411,"_409":410,"_430":416},{"_431":4412,"_433":-5,"_42":-5,"_434":-5,"_435":-5,"_97":319,"_93":437},[4413,4414],{"_46":837,"_93":830},{"_46":836,"_93":830},{"_428":4416,"_409":410,"_430":416},{"_431":4417,"_433":-5,"_42":-5,"_434":-5,"_435":-5,"_97":841,"_93":437},[4418,4419],{"_46":845,"_93":830},{"_46":844,"_93":830},{"_409":410,"_88":4421},{"_104":-5,"_42":416,"_417":4422,"_419":420,"_421":850},[],{"_421":4424,"_409":410},{"_853":4425,"_93":855},[],{"_858":4427},{"_860":-5,"_861":-5,"_862":863,"_864":420,"_476":477,"_865":15,"_866":-5,"_867":-5,"_868":-5,"_869":870,"_42":410,"_871":872,"_181":-5,"_873":-5,"_162":874,"_875":195,"_876":-5,"_481":877,"_421":4428,"_879":-5,"_78":4429,"_881":420},{"_93":425},[],[],[4432],{"_42":886,"_887":4433,"_889":890,"_891":890,"_431":4434,"_421":893,"_433":-5,"_894":32,"_895":4435,"_897":898,"_899":-5},{"_97":319,"_181":-5,"_895":4439},{"_904":46,"_905":4438},{"_900":4436},{"_902":4437},[],[907],{},{"_93":437,"_97":94,"_431":4455},{"_93":941,"_942":4446},{"_93":917,"_918":524,"_919":920,"_921":4443,"_923":-5},{"_93":921,"_924":477,"_129":130,"_925":-5,"_318":926,"_927":4444,"_929":930,"_931":932,"_933":932,"_934":935,"_936":4445},{"_938":939,"_940":-5},[],[4447,4448],{"_162":3250,"_947":-5,"_948":4452,"_950":-5},{"_162":946,"_947":-5,"_948":4449,"_950":-5},[4450],{"_952":612,"_953":954,"_431":4451,"_956":59},[957,958,195,959,960,961,962,195,963,195,964,965,966,967,968,969,970,971,972,973,974,975,976,977,978,979,195,980,981,982,195,983,984,985,986,987,988,989,990,991,992,993,994,995,996,997,998,999,1000,1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,1011,1012,1013,1014,1015,1016,1017,195,1018,1019,1020,1021,1022,1023,1024,1025,1026,1027,195,1028,1029,1030,195,1031,1032,1033,1034,1035,195,1036,1037,195,1038,1039,1040,1041,1042,1043,1044,1045,957,195,1046,195,1047,1048,1049,1050,195,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1076,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,1095,1096,1097,1076,195,1098,1099,1100,1101,1102,195,195,1103,1104,1105,195,195,1106,1107,1108,1109,195,195,1110,1111,1112,1113,195,195,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1119,1124,1125,1117,1126,1119,1127,1128,1129,1130,1119,1076,195,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,1143,1144,195,1145,1146,1147,1148,1149,1150,1151,1152,1153,195,1154,1155,1156,1157,1158,1159,1160,1161,1162,1163,195,1164,1165,1166,1167,195,1168,1169,1170,1171,1172,1173,1174,1175,1176,1177,1178,1179,1180,1181,1182,1183,1184,1185,1186,1187,1188,1189,1190,1191,1192,1144,1193,1194,1195,1196,1197,1198,1199,1200,1201,195,195,1202,1203,1204,1205,1206,1207,1208,1209,1210,1211,1212,1213,1214,195,195,1215,1216,1217,1218,1219,195,195,1220,1221,1222,1223,1224,1225,1226,1227,1228,1229,1230,1231,1232,1233,1234,1235,1236,1237,1238,1239,1240,1241,1242,1243,1244,1245,1246,1247,1248,195,1249,1250,1251,195,1252,1253,1254,1255,1256,1257,1258,1259,195,1260,1261,1262,1263,1264,1265,1266,1251,195,195,1267,1268,1269,1270,1271,1272,1273,1274,1275,1276,195,195,1277,1278,1279,1280,1281,1282,1076,1283,195,195,1284,1285,1286,1287,1288,1289,1290,1291,1292,1293,1294,195,195,1295,1296,1297,1298,1299,1300,979,1301,1302,1303,1304,1305,1306,1307,1308,1309,1310,1311,1312,1313,979,1314,1315,1316,1317,1318,1319,1320,1035,1321,1322,1323,1324,1325,1326,1327,1328,1329,195,195,1330,1331,1332,1333,1334,1335,195,1336,1337,1338,1339,1340,1341,1342,1343,1344,1035,1345,1346,1347,1348,1349,1350,1351,1352,1353,1354,1355,1356,1357,1358,1359,1360,979,195,195,1361,1362,1363,1364,1365,1366,1367,1368,1369,1370,1371,1372,1373,1374,1375,1376,1377,1378,1379,1380,1381,1382,1383,1384,1385,1386,1387,1388,1389,1390,1391,1392,1393,1394,1395,1396,1397,1398,1399,1400,1401,1394,1402,1403,1404,1405,1394,1406,1407,1408,1409,1410,1411,1394,1412,1413,1414,1415,1416,1417,1418,1419,1420,1421,1422,1423,1424,1425,1426,1427,1428,1429,1430,1431,1432,1433,1434,1435,1436,1437,1438,1439,1440,1441,1442,1443,1444,1445,1446,1447,1448,1449,1450,1451,1452,1453,1454,1455,1456,1421,1457,1458,1459,1460,1461,1462,1463,1464,1465,1466,1453,1454,1455,1467,1421,1468,1458,1469,1470,1471,1472,1473,1474,1475,1476,1428,1477,1478,1479,1480,1481,1482,1483,1484,1485,1486,1487,1488,1489,1490,1491,1492,1493,1494,1495,1496,1497,1498,1499,1500,1501,1502,1503,1504,1505,1506,1507,1508,1509,1510,1511,1512,1513,1514,1515,1394,1516,1517,1518,1394,1519,1520,1521,1394,1522,1523,1329,195,195,1524,1525,1526,195,1527,1528,1529,1530,1531,1532,1533,1534,1535,1536,1537,1538,1539,1540,1541,1542,1543,1544,1545,1546,1547,1548,1549,1550,1551,1552,1553,1554,1555,1556,1557,1558,1559,1560,1561,1562,1563,1564,1558,1565,1566,1567,1568,1569,1570,1571,1572,1573,1574,1575,1576,1577,1578,1579,1580,1581,1582,1583,1584,1558,1585,1586,1587,1588,1589,1590,1591,1592,1593,1594,1595,1596,1597,1598,1599,1600,1601,1602,1577,1603,1604,1605,1606,1607,1608,1609,1610,1611,1612,1613,1614,1615,1616,1617,1618,1619,1620,1621,1622,1623,1624,1625,1626,1627,1628,1629,195,195,1630,1631,1632,1633,1634,1635,1636,1637,1638,1639,1640,1641,1642,1643,1637,1644,1645,1646,1647,1648,1035,195,195,1649,1650,1651,1652,1653,1654,1655,1656,1657,1658,1659,1660,1661,1662,1663,1530,1664,1531,1532,1534,1535,1536,1537,1538,1539,1540,1541,1665,1666,1667,1542,1543,1544,1545,1549,1550,1551,1552,1668,1669,1557,1558,1670,1671,1672,1673,1564,1558,1674,1675,1676,1677,1678,1679,1680,1681,1682,1683,1570,1684,1685,1686,1687,1573,1574,1575,1576,1577,1578,1579,1580,1581,1688,1689,1690,1691,1692,1584,1558,1693,1694,1695,1696,1697,1698,1699,1700,1701,1702,1703,1589,1590,1591,1592,1593,1594,1595,1596,1597,1598,1704,1705,1706,1707,1708,1709,1602,1577,1603,1604,1605,1606,1607,1710,1711,1609,1712,1713,1714,1715,1716,1717,1718,1719,1720,1721,1722,1723,1724,1725,1726,1727,1728,1365,1729,1730,1731,1732,1733,1734,1735,1736,1737,1738,1739,1740,1741,1742,1743,1744,1745,1746,1747,1748,1749,1750,1558,1751,1752,1753,1754,1755,1756,1757,1758,1759,1760,1761,1762,1763,1764,1765,1766,1767,1768,1769,1770,1771,1772,1773,1774,1775,1776,1777,1778,1779,1780,1781,1782,1783,1784,1785,1786,1787,1788,1789,1790,1791,1792,1793,1794,1795,1796,1797,1798,1799,1800,1801,1802,1803,1804,1805,1806,1807,1808,1809,1810,1811,1812,1813,1814,1815,1816,1817,1818,1819,1820,1821,1822,1823,1824,1825,1826,1827,1828,1829,195,195,1830,1831,1832,1833,1834,1835,1836,1837,1838,1839,1840,1841,1842,1843,1844,1845,1846,1847,1848,1849,1850,1851,1852,1214,195,195,1853,1854,1855,1856,1857,195,1858,1859,1860,1861,1862,1863,1864,1865,1866,1867,1868,195,1869,1870,1871,1872,1873,1558,1874,1875,1876,1877,1878,1879,1880,1881,1882,1883,1884,1885,1886,1887,1888,1889,1890,1891,1892,1893,1894,195,1895,1214,195,195,1896,1897,1898,1899,1900,1901,1902,1836,1837,1838,1839,1903,1904,1905,1906,1904,1907,1904,1908,195,195,1909,1910,1911,1912,1835,1901,1868,1836,1837,1838,1839,1913,1914,1842,1843,1844,1915,1916,1849,1917,1214,195,195,1918,1919,1920,1921,1922,1901,1902,1836,1837,1838,1839,1923,1904,1924,1925,1904,1926,1904,1908,195,195,1927,1928,1929,1930,1931,1932,1901,1868,195,1933,1870,1871,1872,1873,1558,1874,1875,1934,1935,1936,1937,1890,1938,1939,1893,1940,195,1941,1214,195,195,1942,1943,1944,195,1945,1946,1947,1948,1949,1950,1951,1952,1953,1954,1955,1956,1957,1958,1959,1960,1961,1962,1963,1964,1965,1966,1967,1968,1969,1970,1971,1972,1973,1974,1975,1976,1977,1978,1979,1980,1981,1982,1983,1984,1985,195,195,1986,1987,1988,1989,1990,1991,1992,1993,1994,1995,1996,1144,195,1997,1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,1076,2013,2014,2015,2016,2017,195,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,2028,2029,195,2030,2031,2032,2033,195,195,2034,2035,2036,2037,2038,2039,2040,2041,2042,2043,2044,2045,2046,2047,2048,2049,2050,2051,2052,2053,2054,2055,2056,2057,2054,2058,2059,2060,2061,2062,2063,2064,2065,2066,2067,2068,2069,2070,2071,2072,2073,2074,2075,2076,2054,2077,2078,2054,1144,2079,2080,2081,195,195,2082,2083,2084,2085,2086,2087,2088,195,195,2089,2090,2091,2092,2093,2094,2095,2096,1902,2097,2098,195,195,2099,2100,2101,2102,2103,2104,2105,2106,195,2107,2108,2109,2110,2111,2112,2113,2096,1902,2114,2115,2116,2117,2118,2119,2120,1902,2121,195,195,2122,2123,2124,2125,2126,1901,2127,1836,1837,1838,1839,2128,2129,2130,2131,2132,2133,2134,2135,2136,2137,2138,2139,2140,2141,2142,195,195,2143,2144,195,2145,2146,2147,2148,2149,2150,2151,2152,2153,1901,2154,1836,1837,1838,1839,2128,2155,2156,2157,2158,2159,1844,2160,2161,2162,2163,2164,2165,2166,2167,2168,1849,2169,2170,2171,2172,2173,2174,2175,2176,2177,195,195,2178,2179,2180,2181,2182,2183,2184,2185,195,195,2186,2187,2188,2189,2190,2191,2192,2193,1901,1868,1836,1837,1838,1839,2194,2195,2131,2196,2197,2198,2199,2200,2201,2139,2202,1214,195,195,2203,2204,2205,2206,2207,2208,2209,2210,2211,195,195,2212,2213,2214,2215,2216,2217,2218,2219,1969,2220,2221,2222,2223,2224,195,195,2225,2226,2227,2228,2229,2230,2231,2232,2233,2234,2235,2236,2237,2238,2239,2240,2241,2242,2243,2244,2245,2246,2247,2248,2249,2250,2251,2252,2253,195,195,2254,2255,2256,2257,2258,2259,2260,2261,195,2262,2263,2264,2265,2266,2267,2268,2269,2270,2271,2272,2273,2274,2275,2276,2277,195,2278,2279,2280,195,2281,2282,2283,2284,2285,2286,2287,2288,2289,2290,2291,2292,2293,2294,1838,2295,2296,1838,2297,2298,2299,2300,2301,2302,2303,1558,2304,2305,2306,2307,2308,2309,2310,2311,2312,2167,2313,2314,2315,2316,2317,2318,2319,2320,2321,2322,2323,2324,2325,2326,2327,2328,2329,2330,2331,2332,2333,2334,2335,2336,2337,2338,2339,2340,2341,2342,2343,2344,2345,2346,195,195,2347,2348,2349,2350,2351,2352,2353,2354,2355,2356,2357,2358,2359,2360,2361,2362,2363,2364,2365,2366,2367,2368,2369,2370,2371,2368,2372,2373,2374,2375,2376,2377,195,195,2378,2379,2380,2381,2382,2383,2384,2385,2386,2387,2388,2389,2390,2391,2392,1868,2393,2394,2395,1838,2396,2397,2398,2399,2400,2401,2402,2403,2404,2405,2406,2407,2408,2409,2410,2411,2412,2413,2414,2415,2416,2417,1214,195,195,2418,2419,2420,195,2421,2422,2423,2424,2425,2426,2427,2428,2429,2430,1904,2431,2432,1902,195,2433,2434,2435,2436,2437,1873,1558,1874,2438,2439,2440,2441,2442,1890,2443,2444,2442,2445,2446,2442,2447,1893,2448,2449,2442,2450,195,2451,195,195,2452,2453,2454,2455,2456,195,2457,2458,2459,2460,2461,2462,2463,195,2464,2465,2466,2467,2468,2469,2470,2471,2472,2473,2474,2475,2476,2477,2478,2479,2480,2481,195,2482,2483,2484,2485,2486,195,2487,2488,2489,195,2490,1870,1871,1872,1873,1558,1874,2491,2492,2493,2494,2495,2496,2497,2498,2499,2500,2501,2502,2503,2504,2505,2506,2507,2508,2509,2510,2511,1893,2512,195,2513,2514,2515,2516,2517,2518,2519,2520,2521,2522,195,195,2523,2524,2525,2526,2527,2528,2529,2530,2531,2532,2533,2534,2535,2536,2537,195,2538,2539,2540,2541,195,2542,2543,2544,2545,2546,195,2547,2548,2549,2550,2551,2552,2553,1836,1837,1838,1839,2554,2555,2556,2557,2558,2559,1558,2560,2561,2562,2563,1558,2564,2565,2566,2567,1808,2568,2569,2570,2571,2572,2573,2574,2575,2576,2577,2578,2579,2580,2556,2581,2582,2583,2584,2585,2586,2587,2588,2589,2590,2591,1804,2592,2593,2594,2595,2596,2597,2598,2599,2600,2601,2602,2603,2604,2605,2599,2600,2606,2607,2599,2600,2608,2156,1841,2609,2610,1844,2611,2612,2613,2614,2615,2616,2614,2615,2617,1849,2618,2619,2614,2615,2620,2130,2621,2622,2623,2624,2625,2626,2627,2628,2195,2629,2630,2631,2632,2633,2634,2635,2636,2637,2638,2639,2640,2641,2642,2643,2644,2645,2646,2647,2648,2649,2650,2651,2652,2653,2654,2655,2656,2657,2658,2659,2660,2661,2662,2663,2664,2665,2666,2667,2668,2669,2670,2671,2672,2673,2674,2675,2676,2677,2678,2679,2680,2681,2682,2683,2684,2685,2686,2687,2688,2591,1804,2689,2690,2594,2691,2596,2692,2693,2694,2695,2696,2697,1421,2698,2699,2700,2701,2702,2703,2704,2705,2706,1421,2707,2708,2709,2710,195,195,2711,2712,2713,2714,2715,2716,2717,2718,2719,195,195,2720,2721,2722,2723,2724,2725,2726,2727,1144,195,195,2728,2729,2730,2731,2732,2733,2734,2735,2736,2737,2738,2739,2740,2741,2742,195,195,2743,2744,2745,2746,195,2747,2748,2749,2750,2751,2752,2753,2754,195,2755,2756,2757,2758,2759,2760,1720,2761,2762,2763,2764,2765,2766,2767,2768,1345,2769,2770,2771,2772,2773,979,195,195,2774,2775,2776,195,2777,2778,2779,2780,2781,2782,2783,2784,2785,2786,2787,195,2788,2789,2790,2791,195,2792,2793,2794,2795,2796,195,2797,2798,2799,1838,2800,2801,2802,2803,2804,2805,2806,2807,2808,2809,2810,2811,2812,2813,2814,2815,2816,1838,2817,2818,1421,2819,2820,2821,2822,2823,2824,2825,2826,2827,2828,2829,2830,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,2842,2843,2844,2845,1558,2846,2847,2848,2849,2850,2851,2852,2853,2854,2855,2856,2857,2858,2859,2317,2860,2861,2335,2862,2863,2864,2865,2866,2867,2868,2869,2870,2871,2167,2866,2872,2873,2874,2875,2876,2877,2878,2879,2880,1838,2881,2882,2883,2884,2885,2886,2887,2888,2889,2890,2891,2892,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2905,2906,2907,2908,2909,2910,2911,2912,2913,2914,2876,2877,2915,2916,1838,2917,2918,2919,2920,2921,2922,2923,2924,2925,2926,2927,2895,2928,2897,2929,2930,2876,2877,2915,2931,1838,2932,2933,2934,2935,2936,2937,2938,2939,2940,2941,2942,2943,2944,2945,2946,2942,2943,2947,2948,2949,2950,2951,2952,2953,2954,2955,2956,2957,2958,2959,2960,2167,2961,2962,2963,2964,2965,2966,2700,2967,2968,2969,2970,2971,2972,2973,2974,2954,2955,2975,2976,2977,2978,2979,2167,2975,2980,2981,2982,2983,2984,2985,195,2986,2987,2988,2989,195,2990,2991,2992,2993,2994,195,2995,2996,2997,2998,195,2999,3000,3001,3002,195,3003,3004,3005,3006,3007,3008,2982,3009,3010,3011,3012,3013,3014,195,3015,3016,3017,3018,3019,3020,3021,3022,3023,3024,3025,3026,1838,3027,3028,3029,195,3030,3031,195,195,3032,3033,3034,3035,3036,195,195,3037,3038,3039,3040,3041,3042,3043,3044,3045,3046,3047,3048,195,195,3049,3050,3051,3052,3053,3054,3055,3056,195,195,3057,3058,3059,3060,3061,3062,3048,195,195,3063,3064,3065,3066,3067,3068,3069,3056,195,195,3070,3071,3072,3073,3074,3062,3048,195,195,3075,3076,3077,3078,2392,2738,3079,3080,3081,2248,195,195,3082,3083,3084,1208,2392,3085,3086,3087,3088,3089,3090,3091,3092,3093,3094,3095,3096,3097,3098,3099,3100,3101,3102,3103,3104,3105,3106,3107,3108,3109,3110,3111,3112,3113,3114,3115,3116,3117,1035,3118,3119,3120,3121,3122,3123,3124,3125,3126,3127,3128,1035,3129,3130,3131,3132,3133,3123,3134,3125,3135,3136,3137,3138,1035,3139,3140,3141,3142,3133,3123,3143,3125,3135,3136,3144,3145,1035,3146,3147,3148,3149,3150,3151,3152,3153,3154,3155,3156,3157,3135,3158,3159,3160,3161,3162,3163,3164,3165,3166,3167,3155,3168,3169,3170,3171,3172,1214,195,195,3173,3174,3175,3176,3177,2392,3085,3178,3179,3180,3181,3182,3183,3184,1838,3185,3186,3187,3188,3189,1838,3190,3191,3192,3193,3194,3195,3196,3197,3198,3199,3200,3201,3202,1838,3203,3204,3205,3206,3207,3208,3209,3210,3211,3212,3213,3214,3215,3216,3217,3218,3219,3220,2709,3155,3221,3222,3223,1214,195,195,3224,3225,3226,3227,3228,3229,3230,3211,3231,3232,1868,3233,1539,1838,3234,3235,3236,3237,1838,3238,3239,3240,1558,3241,3242,3243,3244,3245,3246,3247,3248,3249,1214],[4453],{"_952":612,"_953":3253,"_431":4454,"_956":59},[957,3255,195,3256,3257,3258,3259,3260,3261,3262,3263,3264,3265,3266,3267,195,3268,3269,3270,3271,195,3272,3273,3274,3275,3276,3277,3278,3279,3280,3281,3282,3283,3284,195,3285,957,195,1046,195,1047,3286,3287,3288,195,3289,3290,195,3291,3292,3293,3294,3295,3296,3297,3298,3299,3300,195,195,3301,3302,3303,3304,3305,3306,3307,3308,3309,3310,3311,3312,3313,3314,3315,3316,3317,3318,195,195,3319,2765,3320,3321,3322,3323,3324,195,195,3325,3326,3327,3328,3329,3330,3331,3332,3333,3334,195,3335,3336,3337,2798,3338,3339,3340,3341,3342,3343,195,195,3344,3326,3345,3328,3346,3347,3348,3349,3350,3351,3352,195,195,3353,3326,2765,3320,3321,3354,3350,3355,3356,3357,3358,3359,3360,3361,3362,3363,3364,3365,3366,3367,3368,3369,3352,195,195,3370,3371,3372,3373,3326,3345,3374,3347,3375,3350,3376,3377,3328,2798,3378,3379,3380,3381,3382,3383,3384,3385,3343,195,195,3386,3387,3388,3389,3390,3391,3392,3393,3394,195,195,3395,3396,3397,3398,3399,3400,3401,3402,3403,3404,3405,2248,3406,3407,3408,3409,3410,3411,3412,3413,3414,3415,3416,3417,3418,3419,3420,3421,3422,3423,3424,3425,3426,3427,3428,3429,3430,3431,195,195,3432,1364,3433,195,195,3434,3435,3436,195,195,3437,3438,3439,3440,3441,3442,3443,3444,3445,3446,3447,3448,3449,1214,195,195,3450,3451,3452,3453,3454,195,3455,3456,3457,3458,3459,2335,3460,3461,3462,3463,195,3464,3465,195,195,3466,3467,3468,3469,3470,3382,3471,3472,1365,3473,3474,3475,3476,3477,3478,3479,3480,3477,3481,3482,3483,3484,3485,3486,3487,3441,3488,3489,3490,3491,3487,3352,195,195,3492,3493,3494,3495,3496,3497,3498,3499,3500,3501,2765,3502,3503,3504,3487,3505,3352,195,195,3506,3507,3508,3509,3510,3511,3512,3513,3514,3515,2765,3516,3503,3517,3504,3487,3518,3519,3520,3521,3522,3523,3524,3525,3526,3527,3528,3329,3529,3530,3531,3334,3532,3533,3534,3535,3536,3537,3538,3539,3540,3541,2955,2167,3542,3543,3544,3545,3546,3547,3548,3549,3550,3551,3552,3553,3554,3555,3556,3557,3558,3559,3560,3561,195,195,3562,3563,3564,195,195,3565,3566,3567,3568,3487,3569,3570,3571,3572,3573,3574,3575,3576,3577,3578,3579,3580,3581,3582,3583,1558,3584,3585,1558,3586,3587,3588,3589,3590,3591,3592,3593,3594,3595,3596,3597,3598,3599,3600,3601,3580,3602,3582,3603,3604,3605,3198,3606,3607,3604,3605,3198,3608,1838,3609,3610,3611,3612,3613,3568,3487,3614,3615,3616,3617,3618,3487,3619,3620,3621,3487,3622,3623,3624,3487,3625,3626,3627,3628,3629,3630,3631,3632,3633,3477,3634,3635,3636,3637,3477,3638,3639,3618,3487,3640,3641,3642,3643,3644,3477,3645,3646,3647,3648,3649,3650,3651,195,195,3652,3653],[4456,4457,4458,4459,4460,4461],{"_904":46,"_46":3670},{"_904":3662,"_162":3250,"_952":3668,"_953":3669},{"_904":3662,"_162":3250,"_952":3666,"_953":3667},{"_904":46,"_46":3665},{"_904":3662,"_162":946,"_952":3663,"_953":3664},{"_904":46,"_46":3661},[4464,4465,4466,4467,4468,4469,4470,4471,4472,4473],{"_3680":3681,"_258":192,"_3682":300,"_269":-5,"_924":252,"_3683":-5,"_3684":-5,"_3685":3686,"_3687":3688,"_3689":-5,"_3690":-5,"_3691":3692,"_3693":15,"_3694":59,"_3695":54,"_3696":15},{"_93":437,"_97":319,"_431":4474},{"_307":308,"_309":310,"_3721":314,"_3722":130,"_316":-5,"_93":3723},{"_93":3707,"_309":3720,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3718,"_162":3719,"_3709":3714,"_3710":3669},{"_93":3707,"_309":3717,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3716,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3713,"_162":946,"_3709":3714,"_3710":3715},{"_93":3707,"_309":3712,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3711,"_162":-5,"_3709":-5,"_3710":-5},{"_93":3707,"_309":3708,"_162":-5,"_3709":-5,"_3710":-5},[4475],{"_904":46,"_46":3711},"task_e_6a4de4d9d1ec83208696d90d7962d70b",1783489753.820086,"GitHub Mention: docs: interprocedural roadmap — staged path from D5 today to 'proper interprocedural'","has_generated_title","has_unread_turn","denormalized_metadata",{"_4507":32,"_4508":4509,"_4510":-5,"_4511":-5,"_4501":4512,"_4513":-5,"_4514":-5,"_4515":-5,"_4516":-5},"task_status_display",{"_4495":4496,"_4497":192,"_131":128,"_4498":-5,"_4499":917},"creator_workspace","external_pull_requests",[4488],{"_42":4489,"_4490":84,"_4491":4492,"_4493":130},"github-1268541171-177","assistant_turn_id","pull_request",{"_299":300,"_290":301,"_302":303,"_304":15,"_305":15,"_306":15,"_307":308,"_309":310,"_311":262,"_312":128,"_313":314,"_315":130,"_316":-5,"_317":-5,"_318":-5,"_319":4494,"_321":322,"_323":324,"_325":326,"_327":328},"codex_updated_sha",{"_284":285,"_181":285,"_329":-5,"_288":289,"_42":286},"latest_turn_status_display",{"_4500":84,"_113":114,"_4501":4502,"_95":4503,"_4504":-5,"_4505":-5,"_4506":917,"_115":-5},"environment_label","fix_task_id","initial_intent","turn_id","diff_stats",{"_929":930,"_931":932,"_933":932},[],"image_asset_pointer_citations","issue_counts","intent","num_follow_ups","repo_name_map",{},"last_user_turn_created_at","last_turn_status",{"_929":-5,"_931":-5,"_933":-5},"last_pushed_turn_id","start_branch_name","pushed_branch_name","cached_pull_request_data","dd",{"_4528":4529,"_4530":4531},"disablePrefetch","shouldPrefetchAccount","shouldPrefetchUser","shouldPrefetchSystemHints","promoteCss","disableSSR","stripModulepreloadImports","statsigGateEvaluationsPromise",["P",4527],"traceId","15109078309571131276","traceTime",1784185644396]