@3f-consulting/spec-controller-core 0.1.0-alpha.7 → 0.1.0-alpha.71

package/dist/lib/scnCitation.js

@@ -1,47 +1,7 @@
-/**
- * The citation-form helper — the ONE owner of what a citation LOOKS LIKE in a Vitest
- * `describe`/`it` title. Sibling of `lib/featureCode.ts`, which owns the id GRAMMAR
- * (`SCN-<FFF>-<NNN>`, Evidence Manifesto §9A); this owns the wrapper that turns a
- * mention of that id into a citation.
- *
- * A citation is the BRACKETED token — `[SCN-<FFF>-<NNN>]`. Canon assigns the forms per
- * backend (evidence-manifesto.md): "The Vitest `describe`/`it` string includes
- * `[SCN-007]`; the Cucumber-JS step block carries a `// @SCN-007` marker comment." The
- * `@` form is Cucumber's marker and is NOT a Vitest citation here — deliberately, and
- * that exclusion is the rule's teeth: `@SCN-…` is how this repository writes every prose
- * cross-reference, in comments, headers and ticket references, so accepting it in a title
- * would leave the false-citation class open on the form most likely to appear by accident.
- *
- * Before this module the two citation readers each carried their own sigil-OPTIONAL regex
- * — `/\bSCN-[A-Z0-9]+-\d+\b/` in parse/vitest.ts and `/@?(SCN-[A-Z0-9]+-\d+)/g` in
- * tests/checks/scnSubIssueGate.ts — so any SCN-shaped token anywhere in a title was a
- * citation whatever it was doing there. On the runtime side that minted a phantom scenario
- * from fixture data; on the static side it let a prose mention vouch for a changed test
- * block, a false green. Two copies of the answer is how they drifted from canon and from
- * each other, so there is one copy now and both import it (3F-2368).
- */
-/**
- * The bracketed citation. Captures the bare code so callers get `SCN-<FFF>-<NNN>` with no
- * wrapper. Intentionally NOT anchored — a title carries the citation among prose — and
- * intentionally not `\b`-delimited, because the brackets are the delimiters.
- */
-const SCN_CITATION = /\[(SCN-[A-Z0-9]+-\d+)\]/;
-/** The same, globally, for callers reading every citation on a line. */
-const SCN_CITATIONS = /\[(SCN-[A-Z0-9]+-\d+)\]/g;
-/**
- * The FIRST bracketed scenario id cited in `text`, as a bare code, or null when `text`
- * cites none. An SCN-shaped token without its brackets is prose and yields null.
- */
+import { SCN_ID_SOURCE } from "../domain/featureCode.js";
+const SCN_CITATION = new RegExp(`\\[(${SCN_ID_SOURCE})\\]`);
 export function parseScnCitation(text) {
     const match = SCN_CITATION.exec(text);
     return match ? match[1] : null;
 }
-/**
- * EVERY bracketed scenario id cited in `text`, as bare codes, in document order and
- * de-duplicated. The multi-citation read the scn-subissue gate needs, where one
- * `describe` line may vouch for more than one scenario.
- */
-export function parseScnCitations(text) {
-    return [...new Set([...text.matchAll(SCN_CITATIONS)].map((match) => match[1]))];
-}
 //# sourceMappingURL=scnCitation.js.map

package/dist/lib/scnCitation.js.map

@@ -1 +1 @@
-{"version":3,"file":"scnCitation.js","sourceRoot":"","sources":["../../src/lib/scnCitation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;GAIG;AACH,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAE/C,wEAAwE;AACxE,MAAM,aAAa,GAAG,0BAA0B,CAAC;AAEjD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC"}
+{"version":3,"file":"scnCitation.js","sourceRoot":"","sources":["../../src/lib/scnCitation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,CAAC;AAE5D,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC"}

package/dist/model.d.ts

@@ -1,26 +1,3 @@
-/**
- * The reconciliation data model — now a thin re-export of the co-located domain concept
- * modules under `domain/**` (3F-1994, the DDD retrofit's Slice A). The types and their
- * behaviour moved to the modules that OWN them — each concept co-locating its type with its
- * pure free functions (module, not class):
- *   - `domain/journal.ts`                   — the debit/credit input concepts (evidence
- *                                              obligations, scenarios, evidence observations,
- *                                              pending items) + `evidenceObligationPairsOf`.
- *   - `domain/qualityCheckReconciliation.ts` — the reconciling item (`Outcome`,
- *                                              `OUTCOME_DESCRIPTION`, `OUT_OF_BALANCE_OUTCOMES`,
- *                                              `QualityCheckReconciliation`) +
- *                                              `reconcileEvidenceObligation`.
- *   - `domain/scenarioReconciliation.ts`     — the account (`ScenarioReconciliation`,
- *                                              `ScenarioVerdict`, `ScenarioKind`) + `verdictFor` /
- *                                              `reconcilingItemsOf`.
- *   - `domain/ledger.ts`                     — the Ledger + the whole-run predicates.
- *
- * This module stays as the stable internal aggregation point (`../model.js`) so the many
- * in-core importers and the public v1 barrel (`index.ts`) see the SAME surface —
- * only the concepts' HOME moved. It is NOT a `domain/**` module itself (it re-exports across the
- * concept modules, and it sits OUTSIDE `packages/core/src/domain/`, which is what `lint:boundaries`'s
- * `domain-imports-adapter` rule is scoped to — the domain-purity guard's population until 3F-3438).
- */
 export * from "./domain/journal.js";
 export * from "./domain/qualityCheckReconciliation.js";
 export * from "./domain/scenarioReconciliation.js";

package/dist/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oBAAoB,CAAC"}

package/dist/model.js

@@ -1,26 +1,3 @@
-/**
- * The reconciliation data model — now a thin re-export of the co-located domain concept
- * modules under `domain/**` (3F-1994, the DDD retrofit's Slice A). The types and their
- * behaviour moved to the modules that OWN them — each concept co-locating its type with its
- * pure free functions (module, not class):
- *   - `domain/journal.ts`                   — the debit/credit input concepts (evidence
- *                                              obligations, scenarios, evidence observations,
- *                                              pending items) + `evidenceObligationPairsOf`.
- *   - `domain/qualityCheckReconciliation.ts` — the reconciling item (`Outcome`,
- *                                              `OUTCOME_DESCRIPTION`, `OUT_OF_BALANCE_OUTCOMES`,
- *                                              `QualityCheckReconciliation`) +
- *                                              `reconcileEvidenceObligation`.
- *   - `domain/scenarioReconciliation.ts`     — the account (`ScenarioReconciliation`,
- *                                              `ScenarioVerdict`, `ScenarioKind`) + `verdictFor` /
- *                                              `reconcilingItemsOf`.
- *   - `domain/ledger.ts`                     — the Ledger + the whole-run predicates.
- *
- * This module stays as the stable internal aggregation point (`../model.js`) so the many
- * in-core importers and the public v1 barrel (`index.ts`) see the SAME surface —
- * only the concepts' HOME moved. It is NOT a `domain/**` module itself (it re-exports across the
- * concept modules, and it sits OUTSIDE `packages/core/src/domain/`, which is what `lint:boundaries`'s
- * `domain-imports-adapter` rule is scoped to — the domain-purity guard's population until 3F-3438).
- */
 export * from "./domain/journal.js";
 export * from "./domain/qualityCheckReconciliation.js";
 export * from "./domain/scenarioReconciliation.js";

package/dist/model.js.map

@@ -1 +1 @@
-{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oBAAoB,CAAC"}

package/dist/parse/checkScriptsRunInCI.d.ts

@@ -1,182 +1,19 @@
-/**
- * The CI-parse primitive — the shared static-evidence reader machinery BOTH static-check
- * observers import: walk the CI config STRUCTURALLY to its steps (`ciWorkflowSteps`, of which
- * `ciRunSteps` is the projection to the `run:` ones and `ciRunCommands` the projection to their
- * command strings), and test whether a command invokes
- * a given npm script by an EXACT package-manager invocation (`commandInvokesScript`).
- * `runningStaticChecks` (the running-check observer, and since 3F-3410 the only static-check
- * observer) reads a check's enforcement off these, so the watermelon-critical parse lives in ONE
- * place — a mis-read could itself HIDE a watermelon (read a severed static check as enforced, or
- * the reverse).
- *
- * The CI config is parsed with the reputable `yaml` parser (jobs → steps → run, including
- * block-scalar `run:` and `if:`/matrix steps) — never line-scanned. The step mapping is read
- * for its `continue-on-error` and its `id:` as well as its `run:`, because a step whose red the job
- * would swallow is a check that reports without enforcing (3F-3042, @SCN-LNT-032) and a step's
- * `id:` is where a consumer writes the `@SCN` its check cites (3F-3261). A static check's
- * command counts as enforced only on an EXACT
- * package-manager invocation of its script name (`pnpm <script>` / `pnpm run <script>` /
- * `npm run <script>` / `yarn <script>`), so a sibling static check's run step never falsely enforces it.
- *
- * Parent: @SCN-LNT-001.
- */
-/** The minimal shape of `package.json` the static check observers depend on. */
 export interface PackageJsonScripts {
     scripts?: Record<string, string>;
 }
-/**
- * One CI `run:` step: the command, the `id:` it was given, and whether its red is the job's verdict.
- *
- * A UNION RATHER THAN AN OPTIONAL FIELD for the `continue-on-error` half, so the invariant is
- * unrepresentable rather than commented. A step that does not abort the job always names the key
- * that severs it — a reader has to know WHICH key to delete, and the two live in two different
- * places — and a step that does abort it carries no such key to go stale beside the flag.
- *
- * `id` IS OPTIONAL AND THAT IS NOT THE SAME SHAPE OF QUESTION. There is no second key and no
- * invariant to pair it with: the step either carries an `id:` or it does not, and its absence is a
- * fact about the workflow rather than a state needing a witness. Optional rather than `string |
- * null` for the reason the observation's own `scnId` is (`domain/journal.ts`) — an absent citation
- * carries no key at all.
- *
- * @SCN-LNT-032 — features/fitness-reconciliation.feature.
- */
-export type CiRunStep = {
-    readonly command: string;
-    readonly id?: string;
-} & StepAbortsJob;
-/**
- * Whether a step's red is the job's verdict, and — when it is not — which key severed it.
- *
- * NAMED RATHER THAN INLINED because two step readings now carry it: `CiRunStep`, which is the
- * `run:`-only projection every existing caller reads, and `CiWorkflowStep`, the whole-pipeline
- * walk below. Restating the union in both would let the two drift into disagreeing about the one
- * attribute that separates a gate from a gate in name only.
- */
-type StepAbortsJob = {
-    readonly abortsJob: true;
-} | {
-    readonly abortsJob: false;
-    /** Which key carries the `continue-on-error`, and the value it carries. */
-    readonly continuesOnError: {
-        readonly carriedBy: "step" | "job";
-        readonly value: string;
-    };
-};
-/**
- * What a step DOES — GitHub gives a step one of these two and never both.
- *
- * A UNION RATHER THAN TWO OPTIONAL FIELDS, so "a step with neither" and "a step with both" are
- * unrepresentable instead of being states every reader has to remember to handle.
- */
-export type CiStepAction = 
-/** A shell step, carrying the command it runs. */
-{
+export type CiStepAction = {
     readonly runs: string;
-}
-/** An action step, carrying the action reference it uses. */
- | {
+} | {
     readonly uses: string;
 };
-/**
- * ONE step of ONE job of ONE workflow — every step, whatever form it takes, with the identity a
- * consumer would recognise it by and the job it belongs to.
- *
- * WHY THIS EXISTS BESIDE `CiRunStep` (3F-3352). Three things this walk has always seen and thrown
- * away are each needed to report a pipeline rather than a subset of it: `uses:` steps (a quality
- * check can be an action, so discarding them at the walk drops real checks), the step's `name:`
- * (which is how a consumer identifies a step, and how a report names one), and the job the step
- * belongs to (`Typecheck` in `ci.yml` and `Typecheck` in `release.yml` are otherwise
- * indistinguishable, which makes a per-step exclusion unwritable).
- *
- * A SOURCE INDEX RATHER THAN A FILENAME. `ciSources` is an array of anonymous source strings and
- * the core holds no filesystem — deliberately, and `ciSourcePaths.ts` says why. Mapping the index
- * back to a workflow file is the CLI edge's job, where the paths are already resolved.
- */
 export type CiWorkflowStep = {
-    /** Which of the `ciSources` this step was read from — an index, never a path. */
     readonly sourceIndex: number;
-    /** The key this step's job is written under in the workflow's `jobs:` mapping. */
     readonly jobId: string;
-    /** What GitHub itself would display for this step — see `identityOf`. */
     readonly identity: string;
     readonly id?: string;
-    /**
-     * The step's OWN `env:` values, as written — where a workflow EXPRESSION crosses into a step.
-     *
-     * WHY A READER WANTS THEM (3F-3358). A `${{ }}` expansion inside `run:` is substituted into the
-     * script before bash sees it, so a value carrying a quote would end the string and the rest
-     * would be shell; the way a workflow hands a step something GitHub computed is therefore `env:`,
-     * and this repository's own step-record dump says so in as many words. A reader that cannot see
-     * `env:` cannot tell a step producing the run's own step record from any other shell step.
-     *
-     * THE STEP'S OWN, NEVER THE JOB'S, and that is a narrowing rather than an omission. A job-level
-     * `env:` reaches every step of the job, so reading it here would answer this question the same
-     * way for all of them — and a reader that took an expression off the job would set the whole
-     * job aside on the strength of one key.
-     *
-     * VALUES, NOT KEYS. What a caller asks about is what a step was handed; the name a workflow gave
-     * it is the author's own word for it, and not one this walk has any business carrying.
-     */
     readonly env: readonly string[];
-} & CiStepAction & StepAbortsJob;
-/**
- * Every CI `run:` step command across ALL of a target's config sources.
- *
- * A pipeline split across files — a nightly sweep, a security scan — enforces its checks
- * just as a single file does, so "does this check run in CI" is a question about the whole
- * set (3F-2238). Per-source, not joined: parse tolerance stays per document, so one
- * malformed workflow costs only its own commands instead of discarding every other file's
- * — joining first would widen the watermelon-hiding surface this parse exists to keep narrow.
- *
- * Sources, never paths: the caller reads the files, so no filesystem and no CI-provider
- * layout enters the core.
- */
-export declare function ciRunCommands(ciSources: readonly string[]): string[];
-/**
- * Every CI `run:` step across ALL of a target's config sources — the command, the `id:` it carries,
- * and whether the step's red would abort the job.
- *
- * THE SAME WALK `ciRunCommands` READS, WIDENED — never a second one, and widened TWICE now for the
- * same reason. `continue-on-error` and `id` are both keys of the step mapping this walk already
- * visits and used to discard, and a second walk to pick either up would be a second thing to get
- * wrong, disagreeing silently with the first about which steps a workflow even runs.
- * `ciRunCommands` is this function's projection, so the two cannot disagree.
- *
- * WHY A CALLER WANTS `abortsJob` (3F-3042). A green CI run is evidence that every unconditional
- * step ran, because a `run:` step that reds aborts the job. `continue-on-error` is the one
- * attribute that falsifies that: the step runs, reds, and leaves the job green. A reader that
- * cannot see it cannot tell a gate from a gate in name only.
- *
- * WHY A CALLER WANTS `id` (3F-3261). A check step's `id:` is where a consumer writes the `@SCN`
- * their check cites — a citation, never a declaration: the obligation stays in the scenario and the
- * command stays in the step. Reading it here is what lets the derivation say WHICH row a wired
- * check answers, rather than only that it is wired.
- *
- * @SCN-LNT-032 — features/fitness-reconciliation.feature.
- */
-export declare function ciRunSteps(ciSources: readonly string[]): CiRunStep[];
-/**
- * EVERY step across ALL of a target's config sources — `uses:` as well as `run:`, each with the
- * identity GitHub displays for it, the job it belongs to, and the source it was read from.
- *
- * THE WALK, OF WHICH `ciRunSteps` IS NOW THE PROJECTION — never a second one, for the third time
- * and the same reason. `uses:`, `name:` and the job key are all reachable from the mapping this
- * walk already visits, and a sibling walk to pick them up would be free to disagree with this one
- * about which steps a workflow even runs. `ciRunSteps` projects this, so the two cannot; that is
- * the relationship `ciRunCommands` already has to `ciRunSteps`, one layer along.
- *
- * WHY A CALLER WANTS THE WIDER READING (3F-3352, parent 3F-3343). A pipeline's quality checks are
- * whatever a consumer's pipeline runs, and a reader that discards every `uses:` step at the walk
- * cannot see a check that is an action; one that forgets `name:` cannot report a step by the
- * string its author reads in their own run log; and one that flattens the jobs cannot tell two
- * identically-named steps in two workflows apart, which is what makes a per-step judgement about
- * one of them unwritable.
- *
- * IT CHANGES NO VERDICT. Nothing is discovered, excluded or classified here — this reader makes
- * the steps VISIBLE, and what is done with them is its callers'.
- */
+    readonly abortsJob: boolean;
+} & CiStepAction;
 export declare function ciWorkflowSteps(ciSources: readonly string[]): CiWorkflowStep[];
-/** Does any line of a (possibly multi-line block-scalar) command invoke the script? */
-export declare function commandInvokesScript(command: string, guard: string): boolean;
-export {};
+export declare function commandInvokesScript(command: string, script: string): boolean;
 //# sourceMappingURL=checkScriptsRunInCI.d.ts.map

package/dist/parse/checkScriptsRunInCI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkScriptsRunInCI.d.ts","sourceRoot":"","sources":["../../src/parse/checkScriptsRunInCI.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAUD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,aAAa,CAAC;AAE3F;;;;;;;GAOG;AACH,KAAK,aAAa,GACd;IAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAC5B;IACE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3F,CAAC;AAEN;;;;;GAKG;AACH,MAAM,MAAM,YAAY;AACtB,kDAAkD;AAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC3B,6DAA6D;GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9B;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC,GAAG,YAAY,GACd,aAAa,CAAC;AA0IhB;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAEpE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAAE,CAEpE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,EAAE,CAE9E;AAwBD,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAE5E"}
+{"version":3,"file":"checkScriptsRunInCI.d.ts","sourceRoot":"","sources":["../../src/parse/checkScriptsRunInCI.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAQD,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9B,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B,GAAG,YAAY,CAAC;AAuEjB,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,EAAE,CAE9E;AAiBD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAE7E"}

package/dist/parse/checkScriptsRunInCI.js

@@ -1,87 +1,23 @@
-/**
- * The CI-parse primitive — the shared static-evidence reader machinery BOTH static-check
- * observers import: walk the CI config STRUCTURALLY to its steps (`ciWorkflowSteps`, of which
- * `ciRunSteps` is the projection to the `run:` ones and `ciRunCommands` the projection to their
- * command strings), and test whether a command invokes
- * a given npm script by an EXACT package-manager invocation (`commandInvokesScript`).
- * `runningStaticChecks` (the running-check observer, and since 3F-3410 the only static-check
- * observer) reads a check's enforcement off these, so the watermelon-critical parse lives in ONE
- * place — a mis-read could itself HIDE a watermelon (read a severed static check as enforced, or
- * the reverse).
- *
- * The CI config is parsed with the reputable `yaml` parser (jobs → steps → run, including
- * block-scalar `run:` and `if:`/matrix steps) — never line-scanned. The step mapping is read
- * for its `continue-on-error` and its `id:` as well as its `run:`, because a step whose red the job
- * would swallow is a check that reports without enforcing (3F-3042, @SCN-LNT-032) and a step's
- * `id:` is where a consumer writes the `@SCN` its check cites (3F-3261). A static check's
- * command counts as enforced only on an EXACT
- * package-manager invocation of its script name (`pnpm <script>` / `pnpm run <script>` /
- * `npm run <script>` / `yarn <script>`), so a sibling static check's run step never falsely enforces it.
- *
- * Parent: @SCN-LNT-001.
- */
 import { parse } from "yaml";
-/** A non-null object — the YAML-parse walk narrows through these. */
 function isRecord(v) {
     return typeof v === "object" && v !== null;
 }
-/** The one key that severs a step's red from the job's verdict — GitHub spells it in two places. */
 const CONTINUE_ON_ERROR = "continue-on-error";
-/**
- * Does a `continue-on-error` value leave a step's red as the job's verdict?
- *
- * THE SAFE DIRECTION, the one this walk already takes on a document it cannot parse at all:
- * absent, `false`, or the string `"false"` vouches for a step and nothing else does. An
- * expression's value is decided by the run rather than by the document, so a step this parse
- * cannot PROVE will abort the job is a step it must not vouch for — the reading that reports a
- * check unenforced (flagged) rather than falsely enforced (hidden).
- */
 function vouchesForTheStep(value) {
     return value === undefined || value === false || value === "false";
 }
-/**
- * A step's own `env:` VALUES, or none — anything that is not a string is not an expression and is
- * not something a reader here can be given, the same safe direction `idOf` below takes.
- */
 function envValuesOf(value) {
-    return isRecord(value)
-        ? Object.values(value).filter((entry) => typeof entry === "string")
-        : [];
+    return Object.values(isRecord(value) ? value : {}).filter((entry) => typeof entry === "string");
 }
-/**
- * A step's `id:`, or nothing.
- *
- * A STRING OR SILENCE. YAML will hand back a number for `id: 001` and a mapping for a malformed
- * one, and neither is something a citation can be read off — so anything but a non-empty string
- * reads as no `id:` at all. The SAFE direction again: an unreadable `id:` leaves the step citing
- * nothing, which posts to suspense and is visible, rather than citing a coerced word that would
- * answer some obligation by accident.
- */
 function idOf(value) {
     if (typeof value !== "string")
         return undefined;
     const id = value.trim();
     return id === "" ? undefined : id;
 }
-/** A step's own `continue-on-error` read against its job's. */
 function abortsJobOf(ownValue, jobValue) {
-    // The step's own key is named ahead of its job's because it is the nearer one to delete;
-    // either alone is enough to sever the step, so this decides the message and not the verdict.
-    if (!vouchesForTheStep(ownValue)) {
-        return { abortsJob: false, continuesOnError: { carriedBy: "step", value: String(ownValue) } };
-    }
-    if (!vouchesForTheStep(jobValue)) {
-        return { abortsJob: false, continuesOnError: { carriedBy: "job", value: String(jobValue) } };
-    }
-    return { abortsJob: true };
+    return vouchesForTheStep(ownValue) && vouchesForTheStep(jobValue);
 }
-/**
- * What a step does, or nothing at all.
- *
- * `run:` IS READ FIRST so that a malformed step carrying both keys is read exactly as this walk
- * has always read it. A step carrying neither is not a step GitHub would run, and yields nothing
- * — the same safe direction the rest of this parse takes on what it cannot make sense of.
- */
 function actionOf(step) {
     const runs = step["run"];
     if (typeof runs === "string")
@@ -91,15 +27,6 @@ function actionOf(step) {
         return { uses };
     return undefined;
 }
-/**
- * The string GitHub itself displays for a step: its `name:`, else the action it `uses:`, else the
- * first line of its `run:`.
- *
- * IN GITHUB'S OWN ORDER AND FOR GITHUB'S OWN REASON — a consumer naming a step in configuration,
- * or reading one off a report, reads the string already in front of them in their run log, so
- * nothing new has to be learned to write one down. The first NON-BLANK line of a `run:`, because a
- * block scalar may open on one and an empty identity is a string no consumer can write.
- */
 function identityOf(name, action) {
     if (typeof name === "string" && name.trim() !== "")
         return name.trim();
@@ -107,10 +34,6 @@ function identityOf(name, action) {
         return action.uses;
     return action.runs.split(/\r?\n/).find((line) => line.trim() !== "")?.trim() ?? "";
 }
-/**
- * The steps of ONE job. A job-level `continue-on-error` reaches every one of them, which
- * is why the job's own key is read here rather than left to the step loop to miss.
- */
 function stepsOfJob(jobId, job, sourceIndex) {
     if (!isRecord(job))
         return [];
@@ -125,134 +48,51 @@ function stepsOfJob(jobId, job, sourceIndex) {
         const action = actionOf(step);
         if (action === undefined)
             continue;
-        const id = idOf(step["id"]);
         read.push({
             sourceIndex,
             jobId,
             identity: identityOf(step["name"], action),
             env: envValuesOf(step["env"]),
-            // Spread rather than an `id: undefined` assignment, so a step carrying no `id:` carries no
-            // key at all — the shape an absent citation has everywhere else in this engine.
-            ...(id !== undefined ? { id } : {}),
+            id: idOf(step["id"]),
             ...action,
-            ...abortsJobOf(step[CONTINUE_ON_ERROR], jobValue),
+            abortsJob: abortsJobOf(step[CONTINUE_ON_ERROR], jobValue),
         });
     }
     return read;
 }
-/**
- * Every step of ONE config source, walked STRUCTURALLY from the parsed document
- * (jobs → steps). A malformed config that fails to parse yields no steps — the SAFE
- * direction: it reports static checks as unenforced (flagged), never falsely enforced (hidden).
- */
 function stepsOf(ciSource, sourceIndex) {
     let doc;
     try {
         doc = parse(ciSource);
     }
     catch {
-        return [];
+        // An unparseable workflow declares no steps, as one with no jobs does.
     }
     const jobs = isRecord(doc) ? doc["jobs"] : undefined;
     if (!isRecord(jobs))
         return [];
     return Object.entries(jobs).flatMap(([jobId, job]) => stepsOfJob(jobId, job, sourceIndex));
 }
-/** One whole-pipeline step read back down to the `run:`-step shape its callers have always had. */
-function runStepOf(step) {
-    const read = { command: step.runs, ...(step.id !== undefined ? { id: step.id } : {}) };
-    return step.abortsJob
-        ? { ...read, abortsJob: true }
-        : { ...read, abortsJob: false, continuesOnError: step.continuesOnError };
-}
-/**
- * Every CI `run:` step command across ALL of a target's config sources.
- *
- * A pipeline split across files — a nightly sweep, a security scan — enforces its checks
- * just as a single file does, so "does this check run in CI" is a question about the whole
- * set (3F-2238). Per-source, not joined: parse tolerance stays per document, so one
- * malformed workflow costs only its own commands instead of discarding every other file's
- * — joining first would widen the watermelon-hiding surface this parse exists to keep narrow.
- *
- * Sources, never paths: the caller reads the files, so no filesystem and no CI-provider
- * layout enters the core.
- */
-export function ciRunCommands(ciSources) {
-    return ciRunSteps(ciSources).map((step) => step.command);
-}
-/**
- * Every CI `run:` step across ALL of a target's config sources — the command, the `id:` it carries,
- * and whether the step's red would abort the job.
- *
- * THE SAME WALK `ciRunCommands` READS, WIDENED — never a second one, and widened TWICE now for the
- * same reason. `continue-on-error` and `id` are both keys of the step mapping this walk already
- * visits and used to discard, and a second walk to pick either up would be a second thing to get
- * wrong, disagreeing silently with the first about which steps a workflow even runs.
- * `ciRunCommands` is this function's projection, so the two cannot disagree.
- *
- * WHY A CALLER WANTS `abortsJob` (3F-3042). A green CI run is evidence that every unconditional
- * step ran, because a `run:` step that reds aborts the job. `continue-on-error` is the one
- * attribute that falsifies that: the step runs, reds, and leaves the job green. A reader that
- * cannot see it cannot tell a gate from a gate in name only.
- *
- * WHY A CALLER WANTS `id` (3F-3261). A check step's `id:` is where a consumer writes the `@SCN`
- * their check cites — a citation, never a declaration: the obligation stays in the scenario and the
- * command stays in the step. Reading it here is what lets the derivation say WHICH row a wired
- * check answers, rather than only that it is wired.
- *
- * @SCN-LNT-032 — features/fitness-reconciliation.feature.
- */
-export function ciRunSteps(ciSources) {
-    return ciWorkflowSteps(ciSources).flatMap((step) => ("runs" in step ? [runStepOf(step)] : []));
-}
-/**
- * EVERY step across ALL of a target's config sources — `uses:` as well as `run:`, each with the
- * identity GitHub displays for it, the job it belongs to, and the source it was read from.
- *
- * THE WALK, OF WHICH `ciRunSteps` IS NOW THE PROJECTION — never a second one, for the third time
- * and the same reason. `uses:`, `name:` and the job key are all reachable from the mapping this
- * walk already visits, and a sibling walk to pick them up would be free to disagree with this one
- * about which steps a workflow even runs. `ciRunSteps` projects this, so the two cannot; that is
- * the relationship `ciRunCommands` already has to `ciRunSteps`, one layer along.
- *
- * WHY A CALLER WANTS THE WIDER READING (3F-3352, parent 3F-3343). A pipeline's quality checks are
- * whatever a consumer's pipeline runs, and a reader that discards every `uses:` step at the walk
- * cannot see a check that is an action; one that forgets `name:` cannot report a step by the
- * string its author reads in their own run log; and one that flattens the jobs cannot tell two
- * identically-named steps in two workflows apart, which is what makes a per-step judgement about
- * one of them unwritable.
- *
- * IT CHANGES NO VERDICT. Nothing is discovered, excluded or classified here — this reader makes
- * the steps VISIBLE, and what is done with them is its callers'.
- */
 export function ciWorkflowSteps(ciSources) {
     return ciSources.flatMap((ciSource, sourceIndex) => stepsOf(ciSource, sourceIndex));
 }
-/**
- * Does a single command LINE invoke the given npm script via a package manager?
- * Matches `pnpm <guard>`, `pnpm run <guard>`, `npm run <guard>`, `yarn <guard>`
- * on an EXACT script-name token — no fuzzy substring (a fuzzy match could hide a
- * watermelon by treating a sibling static check's step as this static check's).
- */
-function lineInvokesScript(line, guard) {
+function lineInvokesScript(line, script) {
     const tokens = line.trim().split(/\s+/);
-    for (let i = 0; i < tokens.length; i++) {
-        const tok = tokens[i];
+    for (const [i, tok] of tokens.entries()) {
         if (tok === "pnpm" || tok === "yarn") {
             let j = i + 1;
             if (tokens[j] === "run")
                 j++;
-            if (tokens[j] === guard)
+            if (tokens[j] === script)
                 return true;
         }
-        if (tok === "npm" && tokens[i + 1] === "run" && tokens[i + 2] === guard) {
+        if (tok === "npm" && tokens[i + 1] === "run" && tokens[i + 2] === script) {
             return true;
         }
     }
     return false;
 }
-/** Does any line of a (possibly multi-line block-scalar) command invoke the script? */
-export function commandInvokesScript(command, guard) {
-    return command.split(/\r?\n/).some((line) => lineInvokesScript(line, guard));
+export function commandInvokesScript(command, script) {
+    return command.split(/\r?\n/).some((line) => lineInvokesScript(line, script));
 }
 //# sourceMappingURL=checkScriptsRunInCI.js.map

package/dist/parse/checkScriptsRunInCI.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkScriptsRunInCI.js","sourceRoot":"","sources":["../../src/parse/checkScriptsRunInCI.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAO7B,qEAAqE;AACrE,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;AAC7C,CAAC;AAED,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AA4F9C;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,QAAQ,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACpF,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACxB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,+DAA+D;AAC/D,SAAS,WAAW,CAAC,QAAiB,EAAE,QAAiB;IACvD,yFAAyF;IACzF,6FAA6F;IAC7F,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,IAA6B;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,IAAa,EAAE,MAAoB;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,MAAM,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,GAAY,EAAE,WAAmB;IAClE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACxC,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC;YACR,WAAW;YACX,KAAK;YACL,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAC1C,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,2FAA2F;YAC3F,gFAAgF;YAChF,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,MAAM;YACT,GAAG,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,QAAgB,EAAE,WAAmB;IACpD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,mGAAmG;AACnG,SAAS,SAAS,CAAC,IAAgD;IACjE,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACvF,OAAO,IAAI,CAAC,SAAS;QACnB,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;QAC9B,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,SAA4B;IACxD,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,UAAU,CAAC,SAA4B;IACrD,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjG,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAAC,SAA4B;IAC1D,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK;gBAAE,CAAC,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;QACD,IAAI,GAAG,KAAK,KAAK,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,KAAa;IACjE,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC"}
+{"version":3,"file":"checkScriptsRunInCI.js","sourceRoot":"","sources":["../../src/parse/checkScriptsRunInCI.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAM7B,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAe9C,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CACvD,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACxB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,QAAiB,EAAE,QAAiB;IACvD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,IAA6B;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,IAAa,EAAE,MAAoB;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,MAAM,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,GAAY,EAAE,WAAmB;IAClE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACxC,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,IAAI,CAAC,IAAI,CAAC;YACR,WAAW;YACX,KAAK;YACL,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAC1C,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,GAAG,MAAM;YACT,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,WAAmB;IACpD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAA4B;IAC1D,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAc;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK;gBAAE,CAAC,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;QACxC,CAAC;QACD,IAAI,GAAG,KAAK,KAAK,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAClE,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC"}