@agent-surface/cli 0.10.0 → 0.11.0

package/dist/{chunk-4AEQKM2X.js → chunk-GXXKZTQB.js}

@@ -1,14 +1,174 @@
 import {
-  formatValue
-} from "./chunk-ODUIFFPM.js";
+  UsageError,
+  createSurfaceRunner
+} from "./chunk-QIVOZAWX.js";
+
+// src/baseline.ts
+import { mkdirSync, readFileSync, writeFileSync } from "fs";
+import { dirname, join, resolve } from "path";
+import { serializeSurfaceSnapshot } from "@agent-surface/testing";
+var DEFAULT_BASELINE_DIR = ".agent-surface";
+function baselineDirFor(configPath, configured) {
+  return resolve(dirname(configPath), configured ?? DEFAULT_BASELINE_DIR);
+}
+function baselinePath(dir, scenario) {
+  return join(dir, `${scenario}.json`);
+}
+function normalize(snapshot) {
+  return serializeSurfaceSnapshot(snapshot);
+}
+function readBaseline(path) {
+  try {
+    return JSON.parse(readFileSync(path, "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function writeBaseline(path, value) {
+  mkdirSync(dirname(path), { recursive: true });
+  writeFileSync(path, `${JSON.stringify(value, null, 2)}
+`, "utf8");
+}
+var PATH_SEGMENT = /([^.[\]]+)|\[(\d+)\]/g;
+function subjectFor(document, path) {
+  let node = document;
+  let subject;
+  for (const match of path.matchAll(PATH_SEGMENT)) {
+    if (typeof node !== "object" || node === null) return subject;
+    const record = node;
+    const candidate = record["capabilityId"] ?? record["procedureId"];
+    if (typeof candidate === "string") subject = candidate;
+    const key = match[1] ?? match[2];
+    if (key === void 0) return subject;
+    node = record[key];
+  }
+  if (typeof node === "object" && node !== null) {
+    const record = node;
+    const candidate = record["capabilityId"] ?? record["procedureId"];
+    if (typeof candidate === "string") subject = candidate;
+  }
+  return subject;
+}
+function annotate(entries, after, before) {
+  return entries.map((entry) => {
+    const subject = subjectFor(after, entry.path) ?? subjectFor(before, entry.path);
+    return subject ? { ...entry, subject } : entry;
+  });
+}
+function diff(before, after, path = "") {
+  if (Object.is(before, after)) return [];
+  const bothArrays = Array.isArray(before) && Array.isArray(after);
+  const bothObjects = !bothArrays && typeof before === "object" && typeof after === "object" && before !== null && after !== null;
+  if (bothArrays) {
+    const entries = [];
+    const max = Math.max(before.length, after.length);
+    for (let i = 0; i < max; i++) {
+      const at = `${path}[${i}]`;
+      if (i >= before.length) entries.push({ path: at, kind: "added", after: after[i] });
+      else if (i >= after.length) entries.push({ path: at, kind: "removed", before: before[i] });
+      else entries.push(...diff(before[i], after[i], at));
+    }
+    return entries;
+  }
+  if (bothObjects) {
+    const entries = [];
+    const beforeRecord = before;
+    const afterRecord = after;
+    const keys = /* @__PURE__ */ new Set([...Object.keys(beforeRecord), ...Object.keys(afterRecord)]);
+    for (const key of [...keys].sort()) {
+      const at = path ? `${path}.${key}` : key;
+      if (!(key in beforeRecord)) {
+        entries.push({ path: at, kind: "added", after: afterRecord[key] });
+      } else if (!(key in afterRecord)) {
+        entries.push({ path: at, kind: "removed", before: beforeRecord[key] });
+      } else {
+        entries.push(...diff(beforeRecord[key], afterRecord[key], at));
+      }
+    }
+    return entries;
+  }
+  if (JSON.stringify(before) === JSON.stringify(after)) return [];
+  return [{ path: path || "<root>", kind: "changed", before, after }];
+}
+function formatValue(value) {
+  if (value === void 0) return "\u2014";
+  const text = typeof value === "string" ? value : JSON.stringify(value);
+  return text.length > 120 ? `${text.slice(0, 117)}\u2026` : text;
+}
+
+// src/coverage.ts
+import { existsSync, readFileSync as readFileSync2 } from "fs";
+import { join as join2 } from "path";
+var ALLOWLIST_FILE = "coverage-allow.json";
+function allowlistPathFor(baselineDir) {
+  return join2(baselineDir, ALLOWLIST_FILE);
+}
+function readAllowlist(path) {
+  if (!existsSync(path)) return {};
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync2(path, "utf8"));
+  } catch (error) {
+    throw new Error(
+      `could not parse ${path}: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    throw new Error(`${path} must be a JSON object of { "capabilityId": "reason" }`);
+  }
+  const allowlist = {};
+  for (const [id, reason] of Object.entries(parsed)) {
+    if (typeof reason !== "string" || reason.trim() === "") {
+      throw new Error(`${path}: "${id}" needs a non-empty reason string`);
+    }
+    allowlist[id] = reason;
+  }
+  return allowlist;
+}
+function buildCoverageReport(input) {
+  const unreached = [];
+  const allowed = [];
+  for (const id of [...input.authored].sort()) {
+    if (input.reachedIds.has(id)) continue;
+    if (id in input.allowlist) {
+      allowed.push(id);
+      continue;
+    }
+    unreached.push({ capabilityId: id, origin: input.origins.get(id) ?? { file: "?", line: 0 } });
+  }
+  const staleAllowlist = Object.keys(input.allowlist).filter((id) => input.reachedIds.has(id) || !input.authored.has(id)).sort();
+  const unaccounted = [...input.reachedIds].filter((id) => !input.authored.has(id)).sort();
+  const domainReached = unaccounted.filter((id) => id.startsWith("domain:"));
+  const undeclared = unaccounted.filter((id) => !id.startsWith("domain:"));
+  return {
+    authored: input.authored.size,
+    reached: [...input.authored].filter((id) => input.reachedIds.has(id)).length,
+    scenarios: input.scenarios,
+    ...input.scope ? { scope: input.scope } : {},
+    allowlistOutOfScope: input.allowlistOutOfScope ?? 0,
+    unreached,
+    undeclared,
+    domainReached,
+    unresolved: input.unresolved,
+    allowed,
+    staleAllowlist,
+    allowlistPath: input.allowlistPath
+  };
+}
+function coverageExitCode(report, options = {}) {
+  if (report.unreached.length > 0) return 1;
+  if (report.unresolved.length > 0 && !options.allowUnresolved) return 1;
+  if (report.staleAllowlist.length > 0) return 1;
+  return 0;
+}
 
 // src/extract.ts
-import { existsSync } from "fs";
-import { dirname, isAbsolute, join, relative, resolve } from "path";
+import { existsSync as existsSync2 } from "fs";
+import { dirname as dirname2, isAbsolute, join as join3, relative, resolve as resolve2 } from "path";
 import ts from "typescript";
 var UNRESOLVED_ID = "<unresolved>";
 function findTsconfig(from) {
-  return ts.findConfigFile(resolve(from), ts.sys.fileExists, "tsconfig.json");
+  return ts.findConfigFile(resolve2(from), ts.sys.fileExists, "tsconfig.json");
 }
 function readProgramFiles(tsconfigPath) {
   const read = ts.readConfigFile(tsconfigPath, ts.sys.readFile);
@@ -20,7 +180,7 @@ function readProgramFiles(tsconfigPath) {
   const parsed = ts.parseJsonConfigFileContent(
     read.config,
     ts.sys,
-    dirname(tsconfigPath)
+    dirname2(tsconfigPath)
   );
   if (parsed.errors.length > 0 && parsed.fileNames.length === 0) {
     throw new Error(
@@ -219,9 +379,9 @@ function visitCall(call, emit, source) {
   );
 }
 function extractCapabilities(options) {
-  const root = resolve(options.root);
-  const tsconfigPath = options.tsconfig ? isAbsolute(options.tsconfig) ? options.tsconfig : join(root, options.tsconfig) : findTsconfig(root);
-  if (!tsconfigPath || !existsSync(tsconfigPath)) {
+  const root = resolve2(options.root);
+  const tsconfigPath = options.tsconfig ? isAbsolute(options.tsconfig) ? options.tsconfig : join3(root, options.tsconfig) : findTsconfig(root);
+  if (!tsconfigPath || !existsSync2(tsconfigPath)) {
     throw new Error(
       `no tsconfig.json found from ${root} \u2014 \`capabilities\` reads the TypeScript program, so it needs one (pass --tsconfig to point at it)`
     );
@@ -281,218 +441,113 @@ function unresolved(inventory) {
   return inventory.capabilities.filter((capability) => capability.resolution === "unresolved");
 }
 
-// src/render/plain.ts
-var MARK = { expose: "+", disable: "~", hide: "-" };
-function renderRow(row, lines) {
-  const tags = row.tags.length > 0 ? `  [${row.tags.join(", ")}]` : "";
-  lines.push(`  ${MARK[row.outcome]} ${row.name}${tags}`);
-  lines.push(`      ${row.description}`);
-  if (row.reason) lines.push(`      reason: ${row.reason}`);
-  if (row.policies) {
-    if (row.policies.length === 0) {
-      lines.push("      policies: none");
-    } else {
-      for (const policy of row.policies) {
-        const vote = policy.discovery ? policy.discovery.decision === "disable" ? `disable \u2014 ${policy.discovery.reason}` : policy.discovery.decision : "no discovery hook";
-        const phases = policy.phases.length > 0 ? policy.phases.join("/") : "\u2014";
-        const flags = [
-          policy.threw ? "THREW" : "",
-          policy.confirmationEscalation ? "escalates-confirmation" : ""
-        ].filter(Boolean).join(", ");
-        lines.push(
-          `      policy ${policy.name} (${policy.scope}, ${phases}): ${vote}${flags ? ` [${flags}]` : ""}`
-        );
-      }
-    }
-    if (row.availability && !row.availability.available) {
-      lines.push(
-        `      availability: unavailable${row.availability.reason ? ` \u2014 ${row.availability.reason}` : ""}`
+// src/analysis.ts
+import { dirname as dirname3 } from "path";
+import { matchesScope } from "@agent-surface/core/explain";
+function readInventory(options) {
+  if (options.depth === "runtime") return void 0;
+  return extractCapabilities({
+    root: dirname3(options.configPath),
+    ...options.tsconfig ? { tsconfig: options.tsconfig } : {}
+  });
+}
+async function mountScenarios(options, onEach) {
+  if (options.depth === "static") return void 0;
+  const runner = await createSurfaceRunner(options.configPath);
+  try {
+    if (options.scenario && !runner.scenarioNames.includes(options.scenario)) {
+      throw new UsageError(
+        `unknown scenario "${options.scenario}" \u2014 this config defines ` + runner.scenarioNames.map((name) => `"${name}"`).join(", ")
       );
     }
-  }
-  if (row.schemas) {
-    if (row.schemas.input !== void 0) {
-      lines.push(`      input: ${JSON.stringify(row.schemas.input)}`);
-    }
-    if (row.schemas.output !== void 0) {
-      lines.push(`      output: ${JSON.stringify(row.schemas.output)}`);
+    const scenarios = options.scenario ? [options.scenario] : runner.scenarioNames;
+    const results = [];
+    const failures = [];
+    for (const scenario of scenarios) {
+      let result;
+      try {
+        result = await runner.collect({
+          scenario,
+          ...options.scope ? { scope: options.scope } : {}
+        });
+      } catch (error) {
+        failures.push({
+          scenario,
+          message: error instanceof Error ? error.message : String(error)
+        });
+        continue;
+      }
+      results.push(result);
+      await onEach?.(result);
     }
+    return {
+      scenarios,
+      results,
+      failures,
+      baselineDir: baselineDirFor(
+        options.configPath,
+        options.baselineDir ?? runner.config.baselineDir
+      )
+    };
+  } finally {
+    await runner.close();
   }
 }
-function renderCountsPlain(view) {
-  return `${view.counts.callable} callable, ${view.counts.disabled} visible-disabled, ${view.counts.hidden} hidden` + (view.rejections.length > 0 ? `, ${view.rejections.length} registration${view.rejections.length === 1 ? "" : "s"} rejected` : "");
+function componentTypeOf(capabilityId) {
+  const withoutPlane = capabilityId.replace(/^(view|domain):/, "");
+  const dot = withoutPlane.lastIndexOf(".");
+  return dot === -1 ? withoutPlane : withoutPlane.slice(0, dot);
 }
-function renderRejections(view, lines) {
-  if (view.rejections.length === 0) return;
-  lines.push("");
-  lines.push(`rejected during mount  (${view.rejections.length})`);
-  for (const rejection of view.rejections) {
-    const why = rejection.reason === "duplicate" ? "duplicate \u2014 an earlier registration holds this key" : "guard \u2014 onRegister rejected this registration";
-    lines.push(`  ! ${rejection.componentType} (${rejection.instanceId})  ${why}`);
-  }
-}
-function renderSurfacePlain(view) {
-  const lines = [];
-  lines.push(
-    `scenario ${view.scenario}${view.route ? `  route ${view.route}` : ""}${view.scope && view.scope.length > 0 ? `  scope ${view.scope.join(" ")}` : ""}`
-  );
-  lines.push(renderCountsPlain(view));
-  renderRejections(view, lines);
-  const populated = view.groups.filter((group) => group.rows.length > 0);
-  if (populated.length === 0) {
-    lines.push("");
-    if (view.counts.hidden > 0) {
-      lines.push(
-        `Nothing is callable here \u2014 all ${view.counts.hidden} registered capabilities were hidden by policy.`
-      );
-      if (!view.explained) lines.push("Re-run with --explain to see which policy hid them.");
-    } else {
-      lines.push("Nothing is registered for this scenario \u2014 the agent has no surface here.");
-      if (!view.explained) {
-        lines.push("Re-run with --explain to see whether a policy hid it.");
-      }
-    }
-    return lines.join("\n");
-  }
-  for (const group of populated) {
-    lines.push("");
-    lines.push(`${group.heading}  (${group.rows.length})`);
-    for (const row of group.rows) renderRow(row, lines);
-  }
-  return lines.join("\n");
-}
-function renderInventoryPlain(inventory) {
-  const lines = [];
-  const resolved = inventory.capabilities.filter((c) => c.resolution !== "unresolved");
-  const unresolvedEntries = unresolved(inventory);
-  const ids = authoredIds(inventory);
-  lines.push(
-    `${ids.size} authored (upper bound), ${resolved.length} call site${resolved.length === 1 ? "" : "s"} across ${inventory.filesAnalyzed} file${inventory.filesAnalyzed === 1 ? "" : "s"}`
-  );
-  lines.push("domain: not analyzed \u2014 domain capabilities come from the oRPC router (OQ-1)");
-  if (inventory.filesOutsideRoot > 0) {
-    lines.push(
-      `${inventory.filesOutsideRoot} program file${inventory.filesOutsideRoot === 1 ? "" : "s"} outside the config's directory were not analyzed`
-    );
-  }
-  const byId = [...resolved].sort((a, b) => a.capabilityId.localeCompare(b.capabilityId));
-  if (byId.length > 0) {
-    lines.push("");
-    for (const capability of byId) {
-      const mark = capability.resolution === "static" ? " " : "~";
-      lines.push(`  ${mark} ${capability.capabilityId}`);
-      lines.push(`      ${capability.origin.file}:${capability.origin.line}  [${capability.kind}]`);
-      if (capability.description) lines.push(`      ${capability.description}`);
-      if (capability.note) lines.push(`      partial: ${capability.note}`);
+function joinCoverage(inventory, runtime, options) {
+  if (!inventory || !runtime) return void 0;
+  if (runtime.failures.length > 0) return void 0;
+  const inScope = (capabilityId) => matchesScope(componentTypeOf(capabilityId), options.scope);
+  const origins = /* @__PURE__ */ new Map();
+  for (const capability of inventory.capabilities) {
+    if (!origins.has(capability.capabilityId)) {
+      origins.set(capability.capabilityId, capability.origin);
     }
   }
-  if (unresolvedEntries.length > 0) {
-    lines.push("");
-    lines.push(`unresolved  (${unresolvedEntries.length})`);
-    for (const capability of unresolvedEntries) {
-      lines.push(`  ? ${capability.origin.file}:${capability.origin.line}`);
-      lines.push(`      ${capability.note ?? "the extractor could not read this call site"}`);
+  const authored = new Set([...authoredIds(inventory)].filter(inScope));
+  const reachedIds = /* @__PURE__ */ new Set();
+  for (const result of runtime.results) {
+    for (const capability of result.explanation.capabilities) {
+      reachedIds.add(capability.capabilityId);
     }
-    lines.push("");
-    lines.push(
-      `${unresolvedEntries.length} call site${unresolvedEntries.length === 1 ? "" : "s"} could not be resolved \u2014 fix them, or re-run with --allow-unresolved to accept the gap`
-    );
   }
-  return lines.join("\n");
-}
-function renderCoveragePlain(report) {
-  const lines = [];
-  lines.push(
-    `${report.authored} authored (upper bound), ${report.reached} reached across ${report.scenarios.length} scenario${report.scenarios.length === 1 ? "" : "s"} (${report.scenarios.join(", ")})`
+  const allowlistPath = allowlistPathFor(runtime.baselineDir);
+  const wholeAllowlist = readAllowlist(allowlistPath);
+  const allowlist = Object.fromEntries(
+    Object.entries(wholeAllowlist).filter(([id]) => inScope(id))
   );
-  if (report.unreached.length > 0) {
-    lines.push("");
-    lines.push(`unreached  (${report.unreached.length})`);
-    for (const entry of report.unreached) {
-      lines.push(`  ${entry.capabilityId}`);
-      lines.push(`       ${entry.origin.file}:${entry.origin.line} \u2014 no scenario mounts it`);
-    }
-  }
-  if (report.domainReached.length > 0) {
-    lines.push("");
-    lines.push(
-      `domain (not analyzed)  (${report.domainReached.length}) \u2014 reached, and outside this inventory by design`
-    );
-    for (const id of report.domainReached) lines.push(`  ${id}`);
-  }
-  if (report.undeclared.length > 0) {
-    lines.push("");
-    lines.push(`undeclared  (${report.undeclared.length})`);
-    lines.push("  present at runtime with no static origin \u2014 a dynamic registration, or a gap here");
-    for (const id of report.undeclared) lines.push(`  ${id}`);
-  }
-  if (report.unresolved.length > 0) {
-    lines.push("");
-    lines.push(`unresolved  (${report.unresolved.length})`);
-    for (const capability of report.unresolved) {
-      lines.push(`  ? ${capability.origin.file}:${capability.origin.line}`);
-      lines.push(`      ${capability.note ?? "the extractor could not read this call site"}`);
-    }
-  }
-  if (report.allowed.length > 0) {
-    lines.push("");
-    lines.push(
-      `${report.allowed.length} unreached capabilit${report.allowed.length === 1 ? "y is" : "ies are"} allowlisted in ${report.allowlistPath}`
-    );
-  }
-  if (report.staleAllowlist.length > 0) {
-    lines.push("");
-    lines.push(`stale allowlist entries  (${report.staleAllowlist.length})`);
-    lines.push("  these are reached now \u2014 delete them so the list cannot silently rot");
-    for (const id of report.staleAllowlist) lines.push(`  ${id}`);
-  }
-  lines.push("");
-  const verdicts = [];
-  if (report.unreached.length > 0) {
-    verdicts.push(
-      `surface coverage gap in ${report.unreached.length} capabilit${report.unreached.length === 1 ? "y" : "ies"} \u2014 add a scenario, or delete the component`
-    );
-  }
-  if (report.unresolved.length > 0) {
-    verdicts.push(
-      `${report.unresolved.length} call site${report.unresolved.length === 1 ? "" : "s"} could not be read, so this report is incomplete \u2014 fix them, or accept the gap knowingly`
-    );
-  }
-  if (report.staleAllowlist.length > 0) {
-    verdicts.push(
-      `${report.staleAllowlist.length} allowlist entr${report.staleAllowlist.length === 1 ? "y is" : "ies are"} stale \u2014 remove them so the list cannot silently rot`
-    );
-  }
-  if (verdicts.length === 0) {
-    verdicts.push(
-      report.allowed.length > 0 ? "no new surface coverage gaps \u2014 the allowlist still holds the known ones" : "every authored capability is reached by a scenario"
-    );
-  }
-  lines.push(...verdicts);
-  return lines.join("\n");
-}
-function renderDiffPlain(scenario, entries) {
-  const lines = [`${scenario}: ${entries.length} change${entries.length === 1 ? "" : "s"}`];
-  for (const entry of entries) {
-    const where = entry.subject ? `${entry.subject}  (${entry.path})` : entry.path;
-    if (entry.kind === "added") lines.push(`  + ${where}  ${formatValue(entry.after)}`);
-    else if (entry.kind === "removed") lines.push(`  - ${where}  ${formatValue(entry.before)}`);
-    else {
-      lines.push(`  ~ ${where}`);
-      lines.push(`      before: ${formatValue(entry.before)}`);
-      lines.push(`      after:  ${formatValue(entry.after)}`);
-    }
-  }
-  return lines.join("\n");
+  return buildCoverageReport({
+    authored,
+    origins,
+    reachedIds,
+    scenarios: runtime.scenarios,
+    ...options.scope ? { scope: options.scope } : {},
+    unresolved: unresolved(inventory),
+    allowlist,
+    allowlistOutOfScope: Object.keys(wholeAllowlist).length - Object.keys(allowlist).length,
+    allowlistPath
+  });
 }
 
 export {
+  baselinePath,
+  normalize,
+  readBaseline,
+  writeBaseline,
+  annotate,
+  diff,
+  formatValue,
+  coverageExitCode,
+  findTsconfig,
   extractCapabilities,
   authoredIds,
   unresolved,
-  renderSurfacePlain,
-  renderInventoryPlain,
-  renderCoveragePlain,
-  renderDiffPlain
+  readInventory,
+  mountScenarios,
+  joinCoverage
 };
-//# sourceMappingURL=chunk-4AEQKM2X.js.map
+//# sourceMappingURL=chunk-GXXKZTQB.js.map

package/dist/chunk-GXXKZTQB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/baseline.ts","../src/coverage.ts","../src/extract.ts","../src/analysis.ts"],"sourcesContent":["import { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { serializeSurfaceSnapshot } from \"@agent-surface/testing\";\nimport type { AgentSurfaceSnapshot } from \"@agent-surface/core\";\n\nexport const DEFAULT_BASELINE_DIR = \".agent-surface\";\n\nexport function baselineDirFor(configPath: string, configured?: string): string {\n  return resolve(dirname(configPath), configured ?? DEFAULT_BASELINE_DIR);\n}\n\nexport function baselinePath(dir: string, scenario: string): string {\n  return join(dir, `${scenario}.json`);\n}\n\n/**\n * The committed form. `serializeSurfaceSnapshot` is the same normalizer the\n * Vitest matcher uses: registration ids become stable placeholders and the\n * volatile fields (surfaceId, capturedAt, version) drop out, so a baseline\n * diff is a diff of *what agents can see* and nothing else.\n */\nexport function normalize(snapshot: AgentSurfaceSnapshot): unknown {\n  return serializeSurfaceSnapshot(snapshot);\n}\n\nexport function readBaseline(path: string): unknown | undefined {\n  try {\n    return JSON.parse(readFileSync(path, \"utf8\")) as unknown;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function writeBaseline(path: string, value: unknown): void {\n  mkdirSync(dirname(path), { recursive: true });\n  writeFileSync(path, `${JSON.stringify(value, null, 2)}\\n`, \"utf8\");\n}\n\nexport interface DiffEntry {\n  path: string;\n  kind: \"added\" | \"removed\" | \"changed\";\n  before?: unknown;\n  after?: unknown;\n  /**\n   * The capability the change belongs to. A reviewer needs to know that\n   * `view:devices.table.sort` changed — `components[3].actions[1]` is the same\n   * fact in a form nobody can act on.\n   */\n  subject?: string;\n}\n\nconst PATH_SEGMENT = /([^.[\\]]+)|\\[(\\d+)\\]/g;\n\n/** Nearest enclosing capability id for a diff path, if the path sits inside one. */\nfunction subjectFor(document: unknown, path: string): string | undefined {\n  let node: unknown = document;\n  let subject: string | undefined;\n  for (const match of path.matchAll(PATH_SEGMENT)) {\n    if (typeof node !== \"object\" || node === null) return subject;\n    const record = node as Record<string, unknown>;\n    const candidate = record[\"capabilityId\"] ?? record[\"procedureId\"];\n    if (typeof candidate === \"string\") subject = candidate;\n    const key = match[1] ?? match[2];\n    if (key === undefined) return subject;\n    node = record[key];\n  }\n  if (typeof node === \"object\" && node !== null) {\n    const record = node as Record<string, unknown>;\n    const candidate = record[\"capabilityId\"] ?? record[\"procedureId\"];\n    if (typeof candidate === \"string\") subject = candidate;\n  }\n  return subject;\n}\n\n/** Labels each entry with the capability it belongs to, when there is one. */\nexport function annotate(entries: DiffEntry[], after: unknown, before: unknown): DiffEntry[] {\n  return entries.map((entry) => {\n    const subject = subjectFor(after, entry.path) ?? subjectFor(before, entry.path);\n    return subject ? { ...entry, subject } : entry;\n  });\n}\n\n/**\n * Structural diff, deliberately total: every difference is drift, including a\n * changed description. Descriptions are the provider's cached prompt prefix\n * (D28) — a silent edit re-bills every conversation, so it is exactly the kind\n * of change a reviewer should see.\n */\nexport function diff(before: unknown, after: unknown, path = \"\"): DiffEntry[] {\n  if (Object.is(before, after)) return [];\n\n  const bothArrays = Array.isArray(before) && Array.isArray(after);\n  const bothObjects =\n    !bothArrays &&\n    typeof before === \"object\" &&\n    typeof after === \"object\" &&\n    before !== null &&\n    after !== null;\n\n  if (bothArrays) {\n    const entries: DiffEntry[] = [];\n    const max = Math.max(before.length, after.length);\n    for (let i = 0; i < max; i++) {\n      const at = `${path}[${i}]`;\n      if (i >= before.length) entries.push({ path: at, kind: \"added\", after: after[i] });\n      else if (i >= after.length) entries.push({ path: at, kind: \"removed\", before: before[i] });\n      else entries.push(...diff(before[i], after[i], at));\n    }\n    return entries;\n  }\n\n  if (bothObjects) {\n    const entries: DiffEntry[] = [];\n    const beforeRecord = before as Record<string, unknown>;\n    const afterRecord = after as Record<string, unknown>;\n    const keys = new Set([...Object.keys(beforeRecord), ...Object.keys(afterRecord)]);\n    for (const key of [...keys].sort()) {\n      const at = path ? `${path}.${key}` : key;\n      if (!(key in beforeRecord)) {\n        entries.push({ path: at, kind: \"added\", after: afterRecord[key] });\n      } else if (!(key in afterRecord)) {\n        entries.push({ path: at, kind: \"removed\", before: beforeRecord[key] });\n      } else {\n        entries.push(...diff(beforeRecord[key], afterRecord[key], at));\n      }\n    }\n    return entries;\n  }\n\n  if (JSON.stringify(before) === JSON.stringify(after)) return [];\n  return [{ path: path || \"<root>\", kind: \"changed\", before, after }];\n}\n\nexport function formatValue(value: unknown): string {\n  if (value === undefined) return \"—\";\n  const text = typeof value === \"string\" ? value : JSON.stringify(value);\n  return text.length > 120 ? `${text.slice(0, 117)}…` : text;\n}\n","/**\n * `coverage` — authored minus reached (`AS-COVER-004…005`, D36).\n *\n * The inventory says what the codebase authors; the scenarios say what a mount\n * surfaces. Neither half alone answers \"which authored capability does no\n * scenario reach\", because that is a set difference no command computed.\n */\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { AuthoredCapability } from \"./extract.js\";\n\nexport const ALLOWLIST_FILE = \"coverage-allow.json\";\n\n/**\n * A committed list of unreached capabilities a repository has decided not to\n * fix yet, each with a reason. Adoption has to ratchet rather than gate: a\n * codebase turning this on with 200 unreached capabilities cannot fix them in\n * one pull request, and a check that can only be adopted big-bang is a check\n * that never gets adopted.\n */\nexport type CoverageAllowlist = Record<string, string>;\n\nexport function allowlistPathFor(baselineDir: string): string {\n  return join(baselineDir, ALLOWLIST_FILE);\n}\n\nexport function readAllowlist(path: string): CoverageAllowlist {\n  if (!existsSync(path)) return {};\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(readFileSync(path, \"utf8\"));\n  } catch (error) {\n    throw new Error(\n      `could not parse ${path}: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n  if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n    throw new Error(`${path} must be a JSON object of { \"capabilityId\": \"reason\" }`);\n  }\n  const allowlist: CoverageAllowlist = {};\n  for (const [id, reason] of Object.entries(parsed as Record<string, unknown>)) {\n    if (typeof reason !== \"string\" || reason.trim() === \"\") {\n      throw new Error(`${path}: \"${id}\" needs a non-empty reason string`);\n    }\n    allowlist[id] = reason;\n  }\n  return allowlist;\n}\n\nexport interface UnreachedCapability {\n  capabilityId: string;\n  origin: { file: string; line: number };\n}\n\nexport interface CoverageReport {\n  /** Distinct capability ids the inventory resolved, within any active scope. */\n  authored: number;\n  /** How many of them at least one scenario surfaced. */\n  reached: number;\n  scenarios: string[];\n  /**\n   * The scope every number here was computed under (`AS-CLI-007`). A scope\n   * filters the catalog *and* the mount, so `10 authored` without it on screen\n   * reads as a claim about the whole codebase when it is a claim about one\n   * prefix of it.\n   */\n  scope?: string[];\n  /**\n   * Allowlist entries outside the active scope, which a scoped run cannot\n   * judge: not unreached (nothing looked), not stale (nothing reached them).\n   * Counted rather than silently dropped, so a scoped run never reads as a\n   * verdict on the whole allowlist.\n   */\n  allowlistOutOfScope: number;\n  /** Authored, surfaced by no scenario, and not allowlisted — the finding. */\n  unreached: UnreachedCapability[];\n  /**\n   * Present at runtime with no static origin: a dynamic registration, or a gap\n   * in the extractor. `view:` only — see `domainReached`.\n   */\n  undeclared: string[];\n  /**\n   * `domain:` capabilities a scenario surfaced. Held apart from `undeclared`\n   * because the inventory never claimed to analyze that plane: filing them as\n   * \"no static origin\" would report the design's own stated boundary as a\n   * defect, which is the misleading check this whole command rejects.\n   */\n  domainReached: string[];\n  /** Carried forward from the inventory. */\n  unresolved: AuthoredCapability[];\n  /** Unreached, but listed in the allowlist. */\n  allowed: string[];\n  /** Listed in the allowlist and reached anyway — the list has rotted. */\n  staleAllowlist: string[];\n  allowlistPath: string;\n}\n\nexport interface BuildCoverageInput {\n  authored: Set<string>;\n  /** First origin seen for each authored id, for the report. */\n  origins: Map<string, { file: string; line: number }>;\n  /**\n   * Every capability id any scenario's *explanation* held.\n   *\n   * The explanation, not the snapshot. A capability a policy hid **was**\n   * reached: a scenario mounted it and the policy made a deliberate decision\n   * about it. Classifying those as unreached would flood the report with the\n   * library's own correct behaviour — in the example app the `anonymous`\n   * scenario alone would contribute eleven false gaps.\n   */\n  reachedIds: Set<string>;\n  scenarios: string[];\n  scope?: string[];\n  unresolved: AuthoredCapability[];\n  /**\n   * Already filtered to the active scope by the caller, which owns the scope\n   * predicate. Entries outside it are counted in `allowlistOutOfScope`.\n   */\n  allowlist: CoverageAllowlist;\n  allowlistOutOfScope?: number;\n  allowlistPath: string;\n}\n\nexport function buildCoverageReport(input: BuildCoverageInput): CoverageReport {\n  const unreached: UnreachedCapability[] = [];\n  const allowed: string[] = [];\n\n  for (const id of [...input.authored].sort()) {\n    if (input.reachedIds.has(id)) continue;\n    if (id in input.allowlist) {\n      allowed.push(id);\n      continue;\n    }\n    unreached.push({ capabilityId: id, origin: input.origins.get(id) ?? { file: \"?\", line: 0 } });\n  }\n\n  // An allowlist entry that is no longer unreached fails the command, so the\n  // list shrinks and cannot silently rot — the same idiom as the baselines\n  // `check` already commits.\n  const staleAllowlist = Object.keys(input.allowlist)\n    .filter((id) => input.reachedIds.has(id) || !input.authored.has(id))\n    .sort();\n\n  const unaccounted = [...input.reachedIds].filter((id) => !input.authored.has(id)).sort();\n  const domainReached = unaccounted.filter((id) => id.startsWith(\"domain:\"));\n  const undeclared = unaccounted.filter((id) => !id.startsWith(\"domain:\"));\n\n  return {\n    authored: input.authored.size,\n    reached: [...input.authored].filter((id) => input.reachedIds.has(id)).length,\n    scenarios: input.scenarios,\n    ...(input.scope ? { scope: input.scope } : {}),\n    allowlistOutOfScope: input.allowlistOutOfScope ?? 0,\n    unreached,\n    undeclared,\n    domainReached,\n    unresolved: input.unresolved,\n    allowed,\n    staleAllowlist,\n    allowlistPath: input.allowlistPath,\n  };\n}\n\n/**\n * `0` clean, `1` a gap.\n *\n * `undeclared` deliberately does not fail (OQ-4): a dynamically registered\n * capability is legitimate, and from the outside it is indistinguishable from\n * an extractor that missed something. Failing on it would punish the honest\n * case to catch the other one. It is reported, loudly, and revisited when a\n * codebase does it deliberately.\n *\n * `unresolved` does fail, and `--allow-unresolved` is the only way past it\n * (`AS-COVER-003`). A partial understanding of a codebase that reports itself\n * as complete is the failure the whole static half exists to remove: `unreached`\n * is computed against the catalog, so a catalog with holes in it makes that\n * count a floor rather than an answer. Accepting the gap still prints it.\n */\nexport function coverageExitCode(\n  report: CoverageReport,\n  options: { allowUnresolved?: boolean } = {},\n): number {\n  if (report.unreached.length > 0) return 1;\n  if (report.unresolved.length > 0 && !options.allowUnresolved) return 1;\n  if (report.staleAllowlist.length > 0) return 1;\n  return 0;\n}\n","/**\n * The static capability inventory (`AS-COVER-001…003`, D35).\n *\n * `inspect` answers *what can an agent do on this page right now*. It cannot\n * answer *did we author something no scenario ever reaches*, because a surface\n * is a projection of what is mounted: a route no scenario visits registers\n * nothing, so there is nothing to report and nothing to diff. The denominator\n * has to come from somewhere that does not require mounting.\n *\n * It comes from here. A registration call site is far more static than the\n * surface it produces:\n *\n * ```tsx\n * useAgentComponent({\n *   type: \"devices.table\",                       // string literal\n *   actions: { sort: action({ … }) },            // capability name is a key\n * });\n * ```\n *\n * `view:devices.table.sort` is fully determined by source text. What is\n * genuinely dynamic — availability, policy outcome, binding — is the\n * *projection*, and none of it is claimed here.\n *\n * ## This creates no exposure path (directive §2.1)\n *\n * No DOM is scanned, nothing is registered, no annotation is suggested. This\n * module *reads the same reviewed registration code* a human reads and counts\n * what is already there. It lives in `@agent-surface/cli` — which no adapter\n * imports and no application ships — and must never be re-exported from\n * `@agent-surface/core`, mirroring `AS-EXPLAIN-004` (`AS-COVER-006`).\n *\n * ## Failure discipline is the substance, not a detail\n *\n * > Better a missing check than a misleading check.\n *\n * A call site this module cannot understand is **reported with its file and\n * line**, never dropped. An inventory that silently omitted the constructs it\n * failed to parse would understate the denominator, and a coverage number built\n * on it would claim completeness it never had.\n */\nimport { existsSync } from \"node:fs\";\nimport { dirname, isAbsolute, join, relative, resolve } from \"node:path\";\nimport ts from \"typescript\";\n\n/** Identity could not be recovered from the call site at all. */\nexport const UNRESOLVED_ID = \"<unresolved>\";\n\nexport interface AuthoredCapability {\n  /** Canonical id, instance-independent: `view:devices.table.sort`. */\n  capabilityId: string;\n  kind: \"observation\" | \"action\" | \"procedure\";\n  /** Where a human can go and read it. */\n  origin: { file: string; line: number };\n  /** Literals recovered from the call site; absent when not statically known. */\n  description?: string;\n  effect?: string;\n  /**\n   * How much of this call site the extractor understood.\n   *\n   * `static` — identity and metadata both recovered from literals.\n   * `partial` — identity resolved, some metadata dynamic. The common case: a\n   *   spread `instanceId`, or a description built from a template.\n   * `unresolved` — identity NOT resolved. Reported, never dropped.\n   */\n  resolution: \"static\" | \"partial\" | \"unresolved\";\n  /** Present on `partial`/`unresolved`: what defeated the extractor. */\n  note?: string;\n}\n\nexport interface CapabilityInventory {\n  capabilities: AuthoredCapability[];\n  /** Absolute path to the tsconfig whose file list was analyzed. */\n  tsconfig: string;\n  /** Directory the analysis was rooted at — the surface config's own. */\n  root: string;\n  /** Files the program actually walked — the inventory's blast radius. */\n  filesAnalyzed: number;\n  /**\n   * Program files skipped for living outside `root` — workspace packages the\n   * app's tsconfig aliases in, typically the library's own source. Reported\n   * rather than dropped silently: a boundary nobody can see is a boundary\n   * nobody can check.\n   */\n  filesOutsideRoot: number;\n  /**\n   * The `domain:` plane is deliberately *not* analyzed here. Those capabilities\n   * come from the oRPC router, which is already a static export (OQ-1), and\n   * reporting zero of them would read as \"there are none\" rather than \"nobody\n   * looked\".\n   */\n  domain: \"not-analyzed\";\n}\n\n/* ── locating the program ─────────────────────────────────────────────── */\n\nexport function findTsconfig(from: string): string | undefined {\n  return ts.findConfigFile(resolve(from), ts.sys.fileExists, \"tsconfig.json\");\n}\n\ninterface ProgramFiles {\n  fileNames: string[];\n  options: ts.CompilerOptions;\n}\n\nfunction readProgramFiles(tsconfigPath: string): ProgramFiles {\n  const read = ts.readConfigFile(tsconfigPath, ts.sys.readFile);\n  if (read.error) {\n    throw new Error(\n      `could not read ${tsconfigPath}: ${ts.flattenDiagnosticMessageText(read.error.messageText, \" \")}`,\n    );\n  }\n  const parsed = ts.parseJsonConfigFileContent(\n    read.config as object,\n    ts.sys,\n    dirname(tsconfigPath),\n  );\n  if (parsed.errors.length > 0 && parsed.fileNames.length === 0) {\n    throw new Error(\n      `could not resolve any files from ${tsconfigPath}: ${parsed.errors\n        .map((error) => ts.flattenDiagnosticMessageText(error.messageText, \" \"))\n        .join(\"; \")}`,\n    );\n  }\n  return { fileNames: parsed.fileNames, options: parsed.options };\n}\n\n/* ── small AST helpers ────────────────────────────────────────────────── */\n\nfunction calleeName(call: ts.CallExpression): string | undefined {\n  if (ts.isIdentifier(call.expression)) return call.expression.text;\n  if (ts.isPropertyAccessExpression(call.expression)) return call.expression.name.text;\n  return undefined;\n}\n\nfunction propertyName(name: ts.PropertyName): string | undefined {\n  if (ts.isIdentifier(name) || ts.isStringLiteral(name)) return name.text;\n  return undefined;\n}\n\nfunction propertyOf(\n  object: ts.ObjectLiteralExpression,\n  wanted: string,\n): ts.Expression | undefined {\n  for (const property of object.properties) {\n    if (ts.isPropertyAssignment(property) && propertyName(property.name) === wanted) {\n      return property.initializer;\n    }\n  }\n  return undefined;\n}\n\nfunction hasSpread(object: ts.ObjectLiteralExpression): boolean {\n  return object.properties.some((property) => ts.isSpreadAssignment(property));\n}\n\nfunction literalText(node: ts.Expression | undefined): string | undefined {\n  if (!node) return undefined;\n  if (ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node)) return node.text;\n  if (ts.isParenthesizedExpression(node)) return literalText(node.expression);\n  // `\"one long \" + \"description split over two lines\"` is as statically known\n  // as either half. Descriptions are the provider's cached prompt prefix (D28),\n  // so they are long enough that authors wrap them — calling that `partial`\n  // would report the codebase's most common formatting choice as a defect.\n  if (ts.isBinaryExpression(node) && node.operatorToken.kind === ts.SyntaxKind.PlusToken) {\n    const left = literalText(node.left);\n    const right = literalText(node.right);\n    if (left !== undefined && right !== undefined) return left + right;\n  }\n  return undefined;\n}\n\n/** A short name for whatever construct defeated us, for the `note`. */\nfunction describeConstruct(node: ts.Expression): string {\n  if (ts.isCallExpression(node)) {\n    const callee = calleeName(node);\n    return callee ? `built by ${callee}()` : \"built by a call expression\";\n  }\n  if (ts.isIdentifier(node)) return `a variable (${node.text}) this extractor could not follow`;\n  if (ts.isConditionalExpression(node)) return \"a conditional expression\";\n  if (ts.isTemplateExpression(node)) return \"a template with substitutions\";\n  if (ts.isPropertyAccessExpression(node)) return \"a property access\";\n  return \"a non-literal expression\";\n}\n\n/**\n * Resolves a config argument to an object literal, following **one hop** to a\n * same-module `const`.\n *\n * One hop is the whole rule. `useAgentComponent(CONFIG)` where `CONFIG` is a\n * module constant is common and cheap; `useAgentComponent(buildConfig(props))`\n * is not resolvable at any depth worth implementing. Stopping at one hop keeps\n * the limit *visible in the output* rather than buried in the implementation —\n * the deeper case is reported as `unresolved` with the construct named, which\n * is the behaviour this module exists to guarantee.\n */\nfunction objectLiteralFor(\n  expression: ts.Expression,\n  source: ts.SourceFile,\n): { object?: ts.ObjectLiteralExpression; note?: string } {\n  if (ts.isObjectLiteralExpression(expression)) return { object: expression };\n\n  if (ts.isIdentifier(expression)) {\n    const target = expression.text;\n    let found: ts.ObjectLiteralExpression | undefined;\n    const visit = (node: ts.Node): void => {\n      if (found) return;\n      if (\n        ts.isVariableDeclaration(node) &&\n        ts.isIdentifier(node.name) &&\n        node.name.text === target &&\n        node.initializer &&\n        ts.isObjectLiteralExpression(node.initializer)\n      ) {\n        found = node.initializer;\n        return;\n      }\n      ts.forEachChild(node, visit);\n    };\n    visit(source);\n    if (found) return { object: found };\n    return {\n      note: `the config is \\`${target}\\`, which is not a same-module object literal — the extractor follows one hop only`,\n    };\n  }\n\n  return { note: `the config is ${describeConstruct(expression)}` };\n}\n\n/* ── the extraction itself ────────────────────────────────────────────── */\n\n/** Hooks that register one capability against the enclosing render scope. */\nconst GRANULAR_HOOKS = new Set([\"useAgentAction\", \"useAgentObservation\"]);\n\ninterface Emitter {\n  push(capability: AuthoredCapability): void;\n  origin(node: ts.Node): { file: string; line: number };\n}\n\nfunction capabilitiesFromGroup(\n  group: ts.Expression | undefined,\n  kind: \"observation\" | \"action\",\n  componentType: string,\n  componentPartial: string | undefined,\n  emit: Emitter,\n  source: ts.SourceFile,\n): void {\n  if (!group) return;\n\n  const resolved = objectLiteralFor(group, source);\n  if (!resolved.object) {\n    emit.push({\n      capabilityId: `view:${componentType}.${UNRESOLVED_ID}`,\n      kind,\n      origin: emit.origin(group),\n      resolution: \"unresolved\",\n      note: `\\`${kind}s\\` on \"${componentType}\" is not an object literal: ${resolved.note}`,\n    });\n    return;\n  }\n\n  for (const property of resolved.object.properties) {\n    // A spread inside the capability map can add capabilities this extractor\n    // cannot name. That is an identity gap, not a metadata gap.\n    if (ts.isSpreadAssignment(property)) {\n      emit.push({\n        capabilityId: `view:${componentType}.${UNRESOLVED_ID}`,\n        kind,\n        origin: emit.origin(property),\n        resolution: \"unresolved\",\n        note: `\\`${kind}s\\` on \"${componentType}\" spreads another object, which may contribute capabilities this inventory cannot name`,\n      });\n      continue;\n    }\n\n    const name =\n      ts.isPropertyAssignment(property) || ts.isMethodDeclaration(property)\n        ? propertyName(property.name)\n        : ts.isShorthandPropertyAssignment(property)\n          ? property.name.text\n          : undefined;\n\n    if (name === undefined) {\n      emit.push({\n        capabilityId: `view:${componentType}.${UNRESOLVED_ID}`,\n        kind,\n        origin: emit.origin(property),\n        resolution: \"unresolved\",\n        note: `a capability on \"${componentType}\" has a computed name`,\n      });\n      continue;\n    }\n\n    // Identity is recovered from the key alone; the value only carries metadata.\n    const capability: AuthoredCapability = {\n      capabilityId: `view:${componentType}.${name}`,\n      kind,\n      origin: emit.origin(property),\n      resolution: \"static\",\n    };\n    const notes: string[] = [];\n    if (componentPartial) notes.push(componentPartial);\n\n    const value = ts.isPropertyAssignment(property) ? property.initializer : undefined;\n    const definition =\n      value && ts.isCallExpression(value) && value.arguments.length > 0\n        ? value.arguments[0]\n        : value;\n\n    if (definition && ts.isObjectLiteralExpression(definition)) {\n      const description = literalText(propertyOf(definition, \"description\"));\n      if (description !== undefined) capability.description = description;\n      else notes.push(\"description is not a string literal\");\n\n      if (kind === \"action\") {\n        const effect = literalText(propertyOf(definition, \"effect\"));\n        if (effect !== undefined) capability.effect = effect;\n        else notes.push(\"effect is not a string literal\");\n      }\n      if (hasSpread(definition)) notes.push(\"the definition spreads another object\");\n    } else {\n      notes.push(\n        value\n          ? `the definition is ${describeConstruct(value)}`\n          : \"the definition is not an object literal\",\n      );\n    }\n\n    if (notes.length > 0) {\n      capability.resolution = \"partial\";\n      capability.note = notes.join(\"; \");\n    }\n    emit.push(capability);\n  }\n}\n\nfunction visitCall(call: ts.CallExpression, emit: Emitter, source: ts.SourceFile): void {\n  const callee = calleeName(call);\n  if (callee === undefined) return;\n\n  if (GRANULAR_HOOKS.has(callee)) {\n    // OQ-3: the granular hooks register through a render-scope link rather than\n    // one aggregated descriptor, so the component `type` is not at this call\n    // site at all. Reporting the call site as unresolved is the honest state\n    // until that join key is settled — silently ignoring it would make a\n    // codebase that uses them look fully covered.\n    emit.push({\n      capabilityId: UNRESOLVED_ID,\n      kind: callee === \"useAgentAction\" ? \"action\" : \"observation\",\n      origin: emit.origin(call),\n      resolution: \"unresolved\",\n      note: `${callee}() registers against a render-scope link, so its component type is not at this call site`,\n    });\n    return;\n  }\n\n  if (callee !== \"useAgentComponent\" && callee !== \"register\") return;\n  const argument = call.arguments[0];\n  if (!argument) return;\n\n  const resolved = objectLiteralFor(argument, source);\n  if (!resolved.object) {\n    emit.push({\n      capabilityId: UNRESOLVED_ID,\n      kind: \"action\",\n      origin: emit.origin(call),\n      resolution: \"unresolved\",\n      note: `${callee}() call site could not be read: ${resolved.note}`,\n    });\n    return;\n  }\n\n  const config = resolved.object;\n  const type = literalText(propertyOf(config, \"type\"));\n  if (type === undefined) {\n    // `register` is a common method name; only treat it as ours once the call\n    // actually looks like a registration. A `type` that exists but is dynamic\n    // *is* ours, and is a genuine finding.\n    if (callee === \"register\" && propertyOf(config, \"type\") === undefined) return;\n    emit.push({\n      capabilityId: UNRESOLVED_ID,\n      kind: \"action\",\n      origin: emit.origin(call),\n      resolution: \"unresolved\",\n      note: `\\`type\\` is not a string literal, so no capability id on this component can be determined`,\n    });\n    return;\n  }\n\n  // A spread at the component level is the documented common case — the\n  // conditional `...(props.instance ? { instanceId } : {})`. `instanceId` is not\n  // part of a capability id, so identity survives; metadata may not.\n  const componentPartial = hasSpread(config)\n    ? \"the component config spreads another object, so some metadata here may be dynamic\"\n    : undefined;\n\n  capabilitiesFromGroup(\n    propertyOf(config, \"observations\"),\n    \"observation\",\n    type,\n    componentPartial,\n    emit,\n    source,\n  );\n  capabilitiesFromGroup(\n    propertyOf(config, \"actions\"),\n    \"action\",\n    type,\n    componentPartial,\n    emit,\n    source,\n  );\n}\n\nexport interface ExtractOptions {\n  /** Directory the analysis is rooted at — normally the surface config's dir. */\n  root: string;\n  /** Explicit tsconfig; found upward from `root` when omitted. */\n  tsconfig?: string;\n}\n\n/**\n * Reads the program and returns every capability its registration call sites\n * author. Nothing is executed: no Vite server, no jsdom, no scenarios, no mount.\n */\nexport function extractCapabilities(options: ExtractOptions): CapabilityInventory {\n  const root = resolve(options.root);\n  const tsconfigPath = options.tsconfig\n    ? isAbsolute(options.tsconfig)\n      ? options.tsconfig\n      : join(root, options.tsconfig)\n    : findTsconfig(root);\n\n  if (!tsconfigPath || !existsSync(tsconfigPath)) {\n    throw new Error(\n      `no tsconfig.json found from ${root} — \\`capabilities\\` reads the TypeScript program, ` +\n        \"so it needs one (pass --tsconfig to point at it)\",\n    );\n  }\n\n  const { fileNames, options: compilerOptions } = readProgramFiles(tsconfigPath);\n  const program = ts.createProgram(fileNames, compilerOptions);\n\n  const capabilities: AuthoredCapability[] = [];\n  let filesAnalyzed = 0;\n\n  let filesOutsideRoot = 0;\n\n  for (const source of program.getSourceFiles()) {\n    if (source.isDeclarationFile) continue;\n    if (source.fileName.includes(\"/node_modules/\")) continue;\n    // A tsconfig with workspace path aliases pulls the library's *own* source\n    // into the program, where `registry.register(definition)` inside\n    // `useAgentComponent` reads as an unresolvable registration call site. It\n    // is not one: it is the implementation every real call site goes through.\n    // The inventory covers the app the surface config points at, and says so\n    // rather than quietly widening or narrowing.\n    if (!isInside(root, source.fileName)) {\n      filesOutsideRoot += 1;\n      continue;\n    }\n    filesAnalyzed += 1;\n\n    const emit: Emitter = {\n      push: (capability) => capabilities.push(capability),\n      origin: (node) => ({\n        file: relative(root, source.fileName),\n        line: source.getLineAndCharacterOfPosition(node.getStart(source)).line + 1,\n      }),\n    };\n\n    const visit = (node: ts.Node): void => {\n      if (ts.isCallExpression(node)) visitCall(node, emit, source);\n      ts.forEachChild(node, visit);\n    };\n    visit(source);\n  }\n\n  capabilities.sort(\n    (a, b) =>\n      a.capabilityId.localeCompare(b.capabilityId) ||\n      a.origin.file.localeCompare(b.origin.file) ||\n      a.origin.line - b.origin.line,\n  );\n\n  return {\n    capabilities,\n    tsconfig: tsconfigPath,\n    root,\n    filesAnalyzed,\n    filesOutsideRoot,\n    domain: \"not-analyzed\",\n  };\n}\n\n/** True when `file` lives under `root` — the analyzed boundary. */\nfunction isInside(root: string, file: string): boolean {\n  const rel = relative(root, file);\n  return rel !== \"\" && !rel.startsWith(\"..\") && !isAbsolute(rel);\n}\n\n/** Distinct capability ids the inventory resolved — the coverage denominator. */\nexport function authoredIds(inventory: CapabilityInventory): Set<string> {\n  const ids = new Set<string>();\n  for (const capability of inventory.capabilities) {\n    if (capability.resolution === \"unresolved\") continue;\n    if (capability.capabilityId.endsWith(UNRESOLVED_ID)) continue;\n    ids.add(capability.capabilityId);\n  }\n  return ids;\n}\n\nexport function unresolved(inventory: CapabilityInventory): AuthoredCapability[] {\n  return inventory.capabilities.filter((capability) => capability.resolution === \"unresolved\");\n}\n","/**\n * The two halves of the surface, and the join between them.\n *\n * A presentation surface has two sources of truth, and every command needs\n * some mix of both:\n *\n * - the **catalog** — what this codebase authors. Static: `type` is a string\n *   literal, capability names are object keys, so `view:devices.table.sort` is\n *   fully determined by source text ([`extract.ts`](./extract.ts)).\n * - the **projection** — what a mounted scenario actually surfaces, after\n *   availability, policy and binding have had their say ([`collect.ts`](./collect.ts)).\n *\n * Splitting those across separate commands is what let a green `check` sit on\n * top of a route no scenario visits. So the split lives here, behind a `depth`\n * dial, and the commands compose the same three steps in whatever order their\n * output needs: `inspect` streams and closes with the verdict, `check` collects\n * and leads with it.\n */\nimport { dirname } from \"node:path\";\nimport { matchesScope } from \"@agent-surface/core/explain\";\nimport { baselineDirFor } from \"./baseline.js\";\nimport { UsageError, type Depth } from \"./contract.js\";\nimport type { CollectResult } from \"./collect.js\";\nimport {\n  allowlistPathFor,\n  buildCoverageReport,\n  readAllowlist,\n  type CoverageReport,\n} from \"./coverage.js\";\nimport {\n  authoredIds,\n  extractCapabilities,\n  unresolved,\n  type CapabilityInventory,\n} from \"./extract.js\";\nimport { createSurfaceRunner } from \"./load.js\";\n\nexport type { Depth } from \"./contract.js\";\nexport { UsageError } from \"./contract.js\";\n\nexport interface AnalysisOptions {\n  configPath: string;\n  depth: Depth;\n  scenario?: string;\n  scope?: string[];\n  tsconfig?: string;\n  baselineDir?: string;\n}\n\n/**\n * The static half. `undefined` at `--depth runtime`, which is the caller\n * saying it does not want this computed rather than it having failed.\n */\nexport function readInventory(options: AnalysisOptions): CapabilityInventory | undefined {\n  if (options.depth === \"runtime\") return undefined;\n  return extractCapabilities({\n    root: dirname(options.configPath),\n    ...(options.tsconfig ? { tsconfig: options.tsconfig } : {}),\n  });\n}\n\n/** A scenario the config declares whose mount threw. Named, never swallowed. */\nexport interface ScenarioFailure {\n  scenario: string;\n  message: string;\n}\n\nexport interface RuntimeAnalysis {\n  /** Every scenario this run set out to mount, in config order. */\n  scenarios: string[];\n  /** The ones that mounted. */\n  results: CollectResult[];\n  failures: ScenarioFailure[];\n  baselineDir: string;\n}\n\n/**\n * The runtime half. `undefined` at `--depth static`.\n *\n * `onEach` is awaited as each scenario finishes, so a command can print as it\n * goes instead of after the last mount — a config with ten scenarios is a long\n * time to look at nothing.\n *\n * A scenario that throws is recorded and the run continues. Before this was\n * one command, `capabilities` was the only thing that still worked on an app\n * that would not mount; merging the commands would have thrown that away if a\n * single bad scenario could abort the run.\n */\nexport async function mountScenarios(\n  options: AnalysisOptions,\n  onEach?: (result: CollectResult) => void | Promise<void>,\n): Promise<RuntimeAnalysis | undefined> {\n  if (options.depth === \"static\") return undefined;\n\n  const runner = await createSurfaceRunner(options.configPath);\n  try {\n    if (options.scenario && !runner.scenarioNames.includes(options.scenario)) {\n      throw new UsageError(\n        `unknown scenario \"${options.scenario}\" — this config defines ` +\n          runner.scenarioNames.map((name) => `\"${name}\"`).join(\", \"),\n      );\n    }\n    const scenarios = options.scenario ? [options.scenario] : runner.scenarioNames;\n    const results: CollectResult[] = [];\n    const failures: ScenarioFailure[] = [];\n\n    for (const scenario of scenarios) {\n      let result: CollectResult;\n      try {\n        result = await runner.collect({\n          scenario,\n          ...(options.scope ? { scope: options.scope } : {}),\n        });\n      } catch (error) {\n        failures.push({\n          scenario,\n          message: error instanceof Error ? error.message : String(error),\n        });\n        continue;\n      }\n      results.push(result);\n      await onEach?.(result);\n    }\n\n    return {\n      scenarios,\n      results,\n      failures,\n      baselineDir: baselineDirFor(\n        options.configPath,\n        options.baselineDir ?? runner.config.baselineDir,\n      ),\n    };\n  } finally {\n    await runner.close();\n  }\n}\n\n/**\n * The component type a capability id belongs to: `view:devices.table.sort` →\n * `devices.table`. Capability names are object keys and cannot contain a dot,\n * so the last one is always the boundary; component types can and do.\n */\nfunction componentTypeOf(capabilityId: string): string {\n  const withoutPlane = capabilityId.replace(/^(view|domain):/, \"\");\n  const dot = withoutPlane.lastIndexOf(\".\");\n  return dot === -1 ? withoutPlane : withoutPlane.slice(0, dot);\n}\n\n/**\n * Authored minus reached (`AS-COVER-004…005`).\n *\n * Two ways this returns `undefined`, and neither is \"no gaps\":\n *\n * - a half was not computed, because the depth did not ask for it;\n * - **a scenario failed to mount.** That scenario reached nothing, so every\n *   capability it would have surfaced would be reported as one no scenario\n *   reaches. A coverage verdict computed over a partial run is precisely the\n *   misleading check this package refuses to emit, so there is no verdict\n *   until every scenario mounted. The renderer says which of the two it was.\n */\nexport function joinCoverage(\n  inventory: CapabilityInventory | undefined,\n  runtime: RuntimeAnalysis | undefined,\n  options: AnalysisOptions,\n): CoverageReport | undefined {\n  if (!inventory || !runtime) return undefined;\n  if (runtime.failures.length > 0) return undefined;\n\n  // A scope filters the mount, so it has to filter the catalog by the same\n  // predicate — core's own, not a second copy of it. Without this, `--scope\n  // devices` reported every `app.navigation` capability as unreached, with the\n  // words \"no scenario mounts it\" over two that both scenarios mount.\n  const inScope = (capabilityId: string): boolean =>\n    matchesScope(componentTypeOf(capabilityId), options.scope);\n\n  const origins = new Map<string, { file: string; line: number }>();\n  for (const capability of inventory.capabilities) {\n    if (!origins.has(capability.capabilityId)) {\n      origins.set(capability.capabilityId, capability.origin);\n    }\n  }\n\n  const authored = new Set([...authoredIds(inventory)].filter(inScope));\n  const reachedIds = new Set<string>();\n  for (const result of runtime.results) {\n    for (const capability of result.explanation.capabilities) {\n      reachedIds.add(capability.capabilityId);\n    }\n  }\n\n  // The allowlist is a statement about the whole catalog, and a scoped run has\n  // only looked at part of it. Judging an out-of-scope entry either way would\n  // be wrong in both directions — it is not an unreached capability this run\n  // waved through, and it is not a stale entry either, because nothing here\n  // reached it.\n  const allowlistPath = allowlistPathFor(runtime.baselineDir);\n  const wholeAllowlist = readAllowlist(allowlistPath);\n  const allowlist = Object.fromEntries(\n    Object.entries(wholeAllowlist).filter(([id]) => inScope(id)),\n  );\n\n  return buildCoverageReport({\n    authored,\n    origins,\n    reachedIds,\n    scenarios: runtime.scenarios,\n    ...(options.scope ? { scope: options.scope } : {}),\n    unresolved: unresolved(inventory),\n    allowlist,\n    allowlistOutOfScope: Object.keys(wholeAllowlist).length - Object.keys(allowlist).length,\n    allowlistPath,\n  });\n}\n"],"mappings":";;;;;;AAAA,SAAS,WAAW,cAAc,qBAAqB;AACvD,SAAS,SAAS,MAAM,eAAe;AACvC,SAAS,gCAAgC;AAGlC,IAAM,uBAAuB;AAE7B,SAAS,eAAe,YAAoB,YAA6B;AAC9E,SAAO,QAAQ,QAAQ,UAAU,GAAG,cAAc,oBAAoB;AACxE;AAEO,SAAS,aAAa,KAAa,UAA0B;AAClE,SAAO,KAAK,KAAK,GAAG,QAAQ,OAAO;AACrC;AAQO,SAAS,UAAU,UAAyC;AACjE,SAAO,yBAAyB,QAAQ;AAC1C;AAEO,SAAS,aAAa,MAAmC;AAC9D,MAAI;AACF,WAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,cAAc,MAAc,OAAsB;AAChE,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,gBAAc,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AACnE;AAeA,IAAM,eAAe;AAGrB,SAAS,WAAW,UAAmB,MAAkC;AACvE,MAAI,OAAgB;AACpB,MAAI;AACJ,aAAW,SAAS,KAAK,SAAS,YAAY,GAAG;AAC/C,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,UAAM,SAAS;AACf,UAAM,YAAY,OAAO,cAAc,KAAK,OAAO,aAAa;AAChE,QAAI,OAAO,cAAc,SAAU,WAAU;AAC7C,UAAM,MAAM,MAAM,CAAC,KAAK,MAAM,CAAC;AAC/B,QAAI,QAAQ,OAAW,QAAO;AAC9B,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C,UAAM,SAAS;AACf,UAAM,YAAY,OAAO,cAAc,KAAK,OAAO,aAAa;AAChE,QAAI,OAAO,cAAc,SAAU,WAAU;AAAA,EAC/C;AACA,SAAO;AACT;AAGO,SAAS,SAAS,SAAsB,OAAgB,QAA8B;AAC3F,SAAO,QAAQ,IAAI,CAAC,UAAU;AAC5B,UAAM,UAAU,WAAW,OAAO,MAAM,IAAI,KAAK,WAAW,QAAQ,MAAM,IAAI;AAC9E,WAAO,UAAU,EAAE,GAAG,OAAO,QAAQ,IAAI;AAAA,EAC3C,CAAC;AACH;AAQO,SAAS,KAAK,QAAiB,OAAgB,OAAO,IAAiB;AAC5E,MAAI,OAAO,GAAG,QAAQ,KAAK,EAAG,QAAO,CAAC;AAEtC,QAAM,aAAa,MAAM,QAAQ,MAAM,KAAK,MAAM,QAAQ,KAAK;AAC/D,QAAM,cACJ,CAAC,cACD,OAAO,WAAW,YAClB,OAAO,UAAU,YACjB,WAAW,QACX,UAAU;AAEZ,MAAI,YAAY;AACd,UAAM,UAAuB,CAAC;AAC9B,UAAM,MAAM,KAAK,IAAI,OAAO,QAAQ,MAAM,MAAM;AAChD,aAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,YAAM,KAAK,GAAG,IAAI,IAAI,CAAC;AACvB,UAAI,KAAK,OAAO,OAAQ,SAAQ,KAAK,EAAE,MAAM,IAAI,MAAM,SAAS,OAAO,MAAM,CAAC,EAAE,CAAC;AAAA,eACxE,KAAK,MAAM,OAAQ,SAAQ,KAAK,EAAE,MAAM,IAAI,MAAM,WAAW,QAAQ,OAAO,CAAC,EAAE,CAAC;AAAA,UACpF,SAAQ,KAAK,GAAG,KAAK,OAAO,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;AAAA,IACpD;AACA,WAAO;AAAA,EACT;AAEA,MAAI,aAAa;AACf,UAAM,UAAuB,CAAC;AAC9B,UAAM,eAAe;AACrB,UAAM,cAAc;AACpB,UAAM,OAAO,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,YAAY,GAAG,GAAG,OAAO,KAAK,WAAW,CAAC,CAAC;AAChF,eAAW,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,GAAG;AAClC,YAAM,KAAK,OAAO,GAAG,IAAI,IAAI,GAAG,KAAK;AACrC,UAAI,EAAE,OAAO,eAAe;AAC1B,gBAAQ,KAAK,EAAE,MAAM,IAAI,MAAM,SAAS,OAAO,YAAY,GAAG,EAAE,CAAC;AAAA,MACnE,WAAW,EAAE,OAAO,cAAc;AAChC,gBAAQ,KAAK,EAAE,MAAM,IAAI,MAAM,WAAW,QAAQ,aAAa,GAAG,EAAE,CAAC;AAAA,MACvE,OAAO;AACL,gBAAQ,KAAK,GAAG,KAAK,aAAa,GAAG,GAAG,YAAY,GAAG,GAAG,EAAE,CAAC;AAAA,MAC/D;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,MAAI,KAAK,UAAU,MAAM,MAAM,KAAK,UAAU,KAAK,EAAG,QAAO,CAAC;AAC9D,SAAO,CAAC,EAAE,MAAM,QAAQ,UAAU,MAAM,WAAW,QAAQ,MAAM,CAAC;AACpE;AAEO,SAAS,YAAY,OAAwB;AAClD,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;AACrE,SAAO,KAAK,SAAS,MAAM,GAAG,KAAK,MAAM,GAAG,GAAG,CAAC,WAAM;AACxD;;;AClIA,SAAS,YAAY,gBAAAA,qBAAoB;AACzC,SAAS,QAAAC,aAAY;AAGd,IAAM,iBAAiB;AAWvB,SAAS,iBAAiB,aAA6B;AAC5D,SAAOA,MAAK,aAAa,cAAc;AACzC;AAEO,SAAS,cAAc,MAAiC;AAC7D,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAMD,cAAa,MAAM,MAAM,CAAC;AAAA,EAChD,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,mBAAmB,IAAI,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IACpF;AAAA,EACF;AACA,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E,UAAM,IAAI,MAAM,GAAG,IAAI,wDAAwD;AAAA,EACjF;AACA,QAAM,YAA+B,CAAC;AACtC,aAAW,CAAC,IAAI,MAAM,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC5E,QAAI,OAAO,WAAW,YAAY,OAAO,KAAK,MAAM,IAAI;AACtD,YAAM,IAAI,MAAM,GAAG,IAAI,MAAM,EAAE,mCAAmC;AAAA,IACpE;AACA,cAAU,EAAE,IAAI;AAAA,EAClB;AACA,SAAO;AACT;AA4EO,SAAS,oBAAoB,OAA2C;AAC7E,QAAM,YAAmC,CAAC;AAC1C,QAAM,UAAoB,CAAC;AAE3B,aAAW,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,KAAK,GAAG;AAC3C,QAAI,MAAM,WAAW,IAAI,EAAE,EAAG;AAC9B,QAAI,MAAM,MAAM,WAAW;AACzB,cAAQ,KAAK,EAAE;AACf;AAAA,IACF;AACA,cAAU,KAAK,EAAE,cAAc,IAAI,QAAQ,MAAM,QAAQ,IAAI,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,EAAE,CAAC;AAAA,EAC9F;AAKA,QAAM,iBAAiB,OAAO,KAAK,MAAM,SAAS,EAC/C,OAAO,CAAC,OAAO,MAAM,WAAW,IAAI,EAAE,KAAK,CAAC,MAAM,SAAS,IAAI,EAAE,CAAC,EAClE,KAAK;AAER,QAAM,cAAc,CAAC,GAAG,MAAM,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,SAAS,IAAI,EAAE,CAAC,EAAE,KAAK;AACvF,QAAM,gBAAgB,YAAY,OAAO,CAAC,OAAO,GAAG,WAAW,SAAS,CAAC;AACzE,QAAM,aAAa,YAAY,OAAO,CAAC,OAAO,CAAC,GAAG,WAAW,SAAS,CAAC;AAEvE,SAAO;AAAA,IACL,UAAU,MAAM,SAAS;AAAA,IACzB,SAAS,CAAC,GAAG,MAAM,QAAQ,EAAE,OAAO,CAAC,OAAO,MAAM,WAAW,IAAI,EAAE,CAAC,EAAE;AAAA,IACtE,WAAW,MAAM;AAAA,IACjB,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,IAC5C,qBAAqB,MAAM,uBAAuB;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,eAAe,MAAM;AAAA,EACvB;AACF;AAiBO,SAAS,iBACd,QACA,UAAyC,CAAC,GAClC;AACR,MAAI,OAAO,UAAU,SAAS,EAAG,QAAO;AACxC,MAAI,OAAO,WAAW,SAAS,KAAK,CAAC,QAAQ,gBAAiB,QAAO;AACrE,MAAI,OAAO,eAAe,SAAS,EAAG,QAAO;AAC7C,SAAO;AACT;;;AClJA,SAAS,cAAAE,mBAAkB;AAC3B,SAAS,WAAAC,UAAS,YAAY,QAAAC,OAAM,UAAU,WAAAC,gBAAe;AAC7D,OAAO,QAAQ;AAGR,IAAM,gBAAgB;AAkDtB,SAAS,aAAa,MAAkC;AAC7D,SAAO,GAAG,eAAeA,SAAQ,IAAI,GAAG,GAAG,IAAI,YAAY,eAAe;AAC5E;AAOA,SAAS,iBAAiB,cAAoC;AAC5D,QAAM,OAAO,GAAG,eAAe,cAAc,GAAG,IAAI,QAAQ;AAC5D,MAAI,KAAK,OAAO;AACd,UAAM,IAAI;AAAA,MACR,kBAAkB,YAAY,KAAK,GAAG,6BAA6B,KAAK,MAAM,aAAa,GAAG,CAAC;AAAA,IACjG;AAAA,EACF;AACA,QAAM,SAAS,GAAG;AAAA,IAChB,KAAK;AAAA,IACL,GAAG;AAAA,IACHF,SAAQ,YAAY;AAAA,EACtB;AACA,MAAI,OAAO,OAAO,SAAS,KAAK,OAAO,UAAU,WAAW,GAAG;AAC7D,UAAM,IAAI;AAAA,MACR,oCAAoC,YAAY,KAAK,OAAO,OACzD,IAAI,CAAC,UAAU,GAAG,6BAA6B,MAAM,aAAa,GAAG,CAAC,EACtE,KAAK,IAAI,CAAC;AAAA,IACf;AAAA,EACF;AACA,SAAO,EAAE,WAAW,OAAO,WAAW,SAAS,OAAO,QAAQ;AAChE;AAIA,SAAS,WAAW,MAA6C;AAC/D,MAAI,GAAG,aAAa,KAAK,UAAU,EAAG,QAAO,KAAK,WAAW;AAC7D,MAAI,GAAG,2BAA2B,KAAK,UAAU,EAAG,QAAO,KAAK,WAAW,KAAK;AAChF,SAAO;AACT;AAEA,SAAS,aAAa,MAA2C;AAC/D,MAAI,GAAG,aAAa,IAAI,KAAK,GAAG,gBAAgB,IAAI,EAAG,QAAO,KAAK;AACnE,SAAO;AACT;AAEA,SAAS,WACP,QACA,QAC2B;AAC3B,aAAW,YAAY,OAAO,YAAY;AACxC,QAAI,GAAG,qBAAqB,QAAQ,KAAK,aAAa,SAAS,IAAI,MAAM,QAAQ;AAC/E,aAAO,SAAS;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,UAAU,QAA6C;AAC9D,SAAO,OAAO,WAAW,KAAK,CAAC,aAAa,GAAG,mBAAmB,QAAQ,CAAC;AAC7E;AAEA,SAAS,YAAY,MAAqD;AACxE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,GAAG,gBAAgB,IAAI,KAAK,GAAG,gCAAgC,IAAI,EAAG,QAAO,KAAK;AACtF,MAAI,GAAG,0BAA0B,IAAI,EAAG,QAAO,YAAY,KAAK,UAAU;AAK1E,MAAI,GAAG,mBAAmB,IAAI,KAAK,KAAK,cAAc,SAAS,GAAG,WAAW,WAAW;AACtF,UAAM,OAAO,YAAY,KAAK,IAAI;AAClC,UAAM,QAAQ,YAAY,KAAK,KAAK;AACpC,QAAI,SAAS,UAAa,UAAU,OAAW,QAAO,OAAO;AAAA,EAC/D;AACA,SAAO;AACT;AAGA,SAAS,kBAAkB,MAA6B;AACtD,MAAI,GAAG,iBAAiB,IAAI,GAAG;AAC7B,UAAM,SAAS,WAAW,IAAI;AAC9B,WAAO,SAAS,YAAY,MAAM,OAAO;AAAA,EAC3C;AACA,MAAI,GAAG,aAAa,IAAI,EAAG,QAAO,eAAe,KAAK,IAAI;AAC1D,MAAI,GAAG,wBAAwB,IAAI,EAAG,QAAO;AAC7C,MAAI,GAAG,qBAAqB,IAAI,EAAG,QAAO;AAC1C,MAAI,GAAG,2BAA2B,IAAI,EAAG,QAAO;AAChD,SAAO;AACT;AAaA,SAAS,iBACP,YACA,QACwD;AACxD,MAAI,GAAG,0BAA0B,UAAU,EAAG,QAAO,EAAE,QAAQ,WAAW;AAE1E,MAAI,GAAG,aAAa,UAAU,GAAG;AAC/B,UAAM,SAAS,WAAW;AAC1B,QAAI;AACJ,UAAM,QAAQ,CAAC,SAAwB;AACrC,UAAI,MAAO;AACX,UACE,GAAG,sBAAsB,IAAI,KAC7B,GAAG,aAAa,KAAK,IAAI,KACzB,KAAK,KAAK,SAAS,UACnB,KAAK,eACL,GAAG,0BAA0B,KAAK,WAAW,GAC7C;AACA,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,SAAG,aAAa,MAAM,KAAK;AAAA,IAC7B;AACA,UAAM,MAAM;AACZ,QAAI,MAAO,QAAO,EAAE,QAAQ,MAAM;AAClC,WAAO;AAAA,MACL,MAAM,mBAAmB,MAAM;AAAA,IACjC;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,iBAAiB,kBAAkB,UAAU,CAAC,GAAG;AAClE;AAKA,IAAM,iBAAiB,oBAAI,IAAI,CAAC,kBAAkB,qBAAqB,CAAC;AAOxE,SAAS,sBACP,OACA,MACA,eACA,kBACA,MACA,QACM;AACN,MAAI,CAAC,MAAO;AAEZ,QAAM,WAAW,iBAAiB,OAAO,MAAM;AAC/C,MAAI,CAAC,SAAS,QAAQ;AACpB,SAAK,KAAK;AAAA,MACR,cAAc,QAAQ,aAAa,IAAI,aAAa;AAAA,MACpD;AAAA,MACA,QAAQ,KAAK,OAAO,KAAK;AAAA,MACzB,YAAY;AAAA,MACZ,MAAM,KAAK,IAAI,WAAW,aAAa,+BAA+B,SAAS,IAAI;AAAA,IACrF,CAAC;AACD;AAAA,EACF;AAEA,aAAW,YAAY,SAAS,OAAO,YAAY;AAGjD,QAAI,GAAG,mBAAmB,QAAQ,GAAG;AACnC,WAAK,KAAK;AAAA,QACR,cAAc,QAAQ,aAAa,IAAI,aAAa;AAAA,QACpD;AAAA,QACA,QAAQ,KAAK,OAAO,QAAQ;AAAA,QAC5B,YAAY;AAAA,QACZ,MAAM,KAAK,IAAI,WAAW,aAAa;AAAA,MACzC,CAAC;AACD;AAAA,IACF;AAEA,UAAM,OACJ,GAAG,qBAAqB,QAAQ,KAAK,GAAG,oBAAoB,QAAQ,IAChE,aAAa,SAAS,IAAI,IAC1B,GAAG,8BAA8B,QAAQ,IACvC,SAAS,KAAK,OACd;AAER,QAAI,SAAS,QAAW;AACtB,WAAK,KAAK;AAAA,QACR,cAAc,QAAQ,aAAa,IAAI,aAAa;AAAA,QACpD;AAAA,QACA,QAAQ,KAAK,OAAO,QAAQ;AAAA,QAC5B,YAAY;AAAA,QACZ,MAAM,oBAAoB,aAAa;AAAA,MACzC,CAAC;AACD;AAAA,IACF;AAGA,UAAM,aAAiC;AAAA,MACrC,cAAc,QAAQ,aAAa,IAAI,IAAI;AAAA,MAC3C;AAAA,MACA,QAAQ,KAAK,OAAO,QAAQ;AAAA,MAC5B,YAAY;AAAA,IACd;AACA,UAAM,QAAkB,CAAC;AACzB,QAAI,iBAAkB,OAAM,KAAK,gBAAgB;AAEjD,UAAM,QAAQ,GAAG,qBAAqB,QAAQ,IAAI,SAAS,cAAc;AACzE,UAAM,aACJ,SAAS,GAAG,iBAAiB,KAAK,KAAK,MAAM,UAAU,SAAS,IAC5D,MAAM,UAAU,CAAC,IACjB;AAEN,QAAI,cAAc,GAAG,0BAA0B,UAAU,GAAG;AAC1D,YAAM,cAAc,YAAY,WAAW,YAAY,aAAa,CAAC;AACrE,UAAI,gBAAgB,OAAW,YAAW,cAAc;AAAA,UACnD,OAAM,KAAK,qCAAqC;AAErD,UAAI,SAAS,UAAU;AACrB,cAAM,SAAS,YAAY,WAAW,YAAY,QAAQ,CAAC;AAC3D,YAAI,WAAW,OAAW,YAAW,SAAS;AAAA,YACzC,OAAM,KAAK,gCAAgC;AAAA,MAClD;AACA,UAAI,UAAU,UAAU,EAAG,OAAM,KAAK,uCAAuC;AAAA,IAC/E,OAAO;AACL,YAAM;AAAA,QACJ,QACI,qBAAqB,kBAAkB,KAAK,CAAC,KAC7C;AAAA,MACN;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,GAAG;AACpB,iBAAW,aAAa;AACxB,iBAAW,OAAO,MAAM,KAAK,IAAI;AAAA,IACnC;AACA,SAAK,KAAK,UAAU;AAAA,EACtB;AACF;AAEA,SAAS,UAAU,MAAyB,MAAe,QAA6B;AACtF,QAAM,SAAS,WAAW,IAAI;AAC9B,MAAI,WAAW,OAAW;AAE1B,MAAI,eAAe,IAAI,MAAM,GAAG;AAM9B,SAAK,KAAK;AAAA,MACR,cAAc;AAAA,MACd,MAAM,WAAW,mBAAmB,WAAW;AAAA,MAC/C,QAAQ,KAAK,OAAO,IAAI;AAAA,MACxB,YAAY;AAAA,MACZ,MAAM,GAAG,MAAM;AAAA,IACjB,CAAC;AACD;AAAA,EACF;AAEA,MAAI,WAAW,uBAAuB,WAAW,WAAY;AAC7D,QAAM,WAAW,KAAK,UAAU,CAAC;AACjC,MAAI,CAAC,SAAU;AAEf,QAAM,WAAW,iBAAiB,UAAU,MAAM;AAClD,MAAI,CAAC,SAAS,QAAQ;AACpB,SAAK,KAAK;AAAA,MACR,cAAc;AAAA,MACd,MAAM;AAAA,MACN,QAAQ,KAAK,OAAO,IAAI;AAAA,MACxB,YAAY;AAAA,MACZ,MAAM,GAAG,MAAM,mCAAmC,SAAS,IAAI;AAAA,IACjE,CAAC;AACD;AAAA,EACF;AAEA,QAAM,SAAS,SAAS;AACxB,QAAM,OAAO,YAAY,WAAW,QAAQ,MAAM,CAAC;AACnD,MAAI,SAAS,QAAW;AAItB,QAAI,WAAW,cAAc,WAAW,QAAQ,MAAM,MAAM,OAAW;AACvE,SAAK,KAAK;AAAA,MACR,cAAc;AAAA,MACd,MAAM;AAAA,MACN,QAAQ,KAAK,OAAO,IAAI;AAAA,MACxB,YAAY;AAAA,MACZ,MAAM;AAAA,IACR,CAAC;AACD;AAAA,EACF;AAKA,QAAM,mBAAmB,UAAU,MAAM,IACrC,sFACA;AAEJ;AAAA,IACE,WAAW,QAAQ,cAAc;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA;AAAA,IACE,WAAW,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAaO,SAAS,oBAAoB,SAA8C;AAChF,QAAM,OAAOE,SAAQ,QAAQ,IAAI;AACjC,QAAM,eAAe,QAAQ,WACzB,WAAW,QAAQ,QAAQ,IACzB,QAAQ,WACRD,MAAK,MAAM,QAAQ,QAAQ,IAC7B,aAAa,IAAI;AAErB,MAAI,CAAC,gBAAgB,CAACF,YAAW,YAAY,GAAG;AAC9C,UAAM,IAAI;AAAA,MACR,+BAA+B,IAAI;AAAA,IAErC;AAAA,EACF;AAEA,QAAM,EAAE,WAAW,SAAS,gBAAgB,IAAI,iBAAiB,YAAY;AAC7E,QAAM,UAAU,GAAG,cAAc,WAAW,eAAe;AAE3D,QAAM,eAAqC,CAAC;AAC5C,MAAI,gBAAgB;AAEpB,MAAI,mBAAmB;AAEvB,aAAW,UAAU,QAAQ,eAAe,GAAG;AAC7C,QAAI,OAAO,kBAAmB;AAC9B,QAAI,OAAO,SAAS,SAAS,gBAAgB,EAAG;AAOhD,QAAI,CAAC,SAAS,MAAM,OAAO,QAAQ,GAAG;AACpC,0BAAoB;AACpB;AAAA,IACF;AACA,qBAAiB;AAEjB,UAAM,OAAgB;AAAA,MACpB,MAAM,CAAC,eAAe,aAAa,KAAK,UAAU;AAAA,MAClD,QAAQ,CAAC,UAAU;AAAA,QACjB,MAAM,SAAS,MAAM,OAAO,QAAQ;AAAA,QACpC,MAAM,OAAO,8BAA8B,KAAK,SAAS,MAAM,CAAC,EAAE,OAAO;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,QAAQ,CAAC,SAAwB;AACrC,UAAI,GAAG,iBAAiB,IAAI,EAAG,WAAU,MAAM,MAAM,MAAM;AAC3D,SAAG,aAAa,MAAM,KAAK;AAAA,IAC7B;AACA,UAAM,MAAM;AAAA,EACd;AAEA,eAAa;AAAA,IACX,CAAC,GAAG,MACF,EAAE,aAAa,cAAc,EAAE,YAAY,KAC3C,EAAE,OAAO,KAAK,cAAc,EAAE,OAAO,IAAI,KACzC,EAAE,OAAO,OAAO,EAAE,OAAO;AAAA,EAC7B;AAEA,SAAO;AAAA,IACL;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV;AACF;AAGA,SAAS,SAAS,MAAc,MAAuB;AACrD,QAAM,MAAM,SAAS,MAAM,IAAI;AAC/B,SAAO,QAAQ,MAAM,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG;AAC/D;AAGO,SAAS,YAAY,WAA6C;AACvE,QAAM,MAAM,oBAAI,IAAY;AAC5B,aAAW,cAAc,UAAU,cAAc;AAC/C,QAAI,WAAW,eAAe,aAAc;AAC5C,QAAI,WAAW,aAAa,SAAS,aAAa,EAAG;AACrD,QAAI,IAAI,WAAW,YAAY;AAAA,EACjC;AACA,SAAO;AACT;AAEO,SAAS,WAAW,WAAsD;AAC/E,SAAO,UAAU,aAAa,OAAO,CAAC,eAAe,WAAW,eAAe,YAAY;AAC7F;;;AC/eA,SAAS,WAAAI,gBAAe;AACxB,SAAS,oBAAoB;AAkCtB,SAAS,cAAc,SAA2D;AACvF,MAAI,QAAQ,UAAU,UAAW,QAAO;AACxC,SAAO,oBAAoB;AAAA,IACzB,MAAMC,SAAQ,QAAQ,UAAU;AAAA,IAChC,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC3D,CAAC;AACH;AA6BA,eAAsB,eACpB,SACA,QACsC;AACtC,MAAI,QAAQ,UAAU,SAAU,QAAO;AAEvC,QAAM,SAAS,MAAM,oBAAoB,QAAQ,UAAU;AAC3D,MAAI;AACF,QAAI,QAAQ,YAAY,CAAC,OAAO,cAAc,SAAS,QAAQ,QAAQ,GAAG;AACxE,YAAM,IAAI;AAAA,QACR,qBAAqB,QAAQ,QAAQ,kCACnC,OAAO,cAAc,IAAI,CAAC,SAAS,IAAI,IAAI,GAAG,EAAE,KAAK,IAAI;AAAA,MAC7D;AAAA,IACF;AACA,UAAM,YAAY,QAAQ,WAAW,CAAC,QAAQ,QAAQ,IAAI,OAAO;AACjE,UAAM,UAA2B,CAAC;AAClC,UAAM,WAA8B,CAAC;AAErC,eAAW,YAAY,WAAW;AAChC,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,OAAO,QAAQ;AAAA,UAC5B;AAAA,UACA,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QAClD,CAAC;AAAA,MACH,SAAS,OAAO;AACd,iBAAS,KAAK;AAAA,UACZ;AAAA,UACA,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,QAChE,CAAC;AACD;AAAA,MACF;AACA,cAAQ,KAAK,MAAM;AACnB,YAAM,SAAS,MAAM;AAAA,IACvB;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa;AAAA,QACX,QAAQ;AAAA,QACR,QAAQ,eAAe,OAAO,OAAO;AAAA,MACvC;AAAA,IACF;AAAA,EACF,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAOA,SAAS,gBAAgB,cAA8B;AACrD,QAAM,eAAe,aAAa,QAAQ,mBAAmB,EAAE;AAC/D,QAAM,MAAM,aAAa,YAAY,GAAG;AACxC,SAAO,QAAQ,KAAK,eAAe,aAAa,MAAM,GAAG,GAAG;AAC9D;AAcO,SAAS,aACd,WACA,SACA,SAC4B;AAC5B,MAAI,CAAC,aAAa,CAAC,QAAS,QAAO;AACnC,MAAI,QAAQ,SAAS,SAAS,EAAG,QAAO;AAMxC,QAAM,UAAU,CAAC,iBACf,aAAa,gBAAgB,YAAY,GAAG,QAAQ,KAAK;AAE3D,QAAM,UAAU,oBAAI,IAA4C;AAChE,aAAW,cAAc,UAAU,cAAc;AAC/C,QAAI,CAAC,QAAQ,IAAI,WAAW,YAAY,GAAG;AACzC,cAAQ,IAAI,WAAW,cAAc,WAAW,MAAM;AAAA,IACxD;AAAA,EACF;AAEA,QAAM,WAAW,IAAI,IAAI,CAAC,GAAG,YAAY,SAAS,CAAC,EAAE,OAAO,OAAO,CAAC;AACpE,QAAM,aAAa,oBAAI,IAAY;AACnC,aAAW,UAAU,QAAQ,SAAS;AACpC,eAAW,cAAc,OAAO,YAAY,cAAc;AACxD,iBAAW,IAAI,WAAW,YAAY;AAAA,IACxC;AAAA,EACF;AAOA,QAAM,gBAAgB,iBAAiB,QAAQ,WAAW;AAC1D,QAAM,iBAAiB,cAAc,aAAa;AAClD,QAAM,YAAY,OAAO;AAAA,IACvB,OAAO,QAAQ,cAAc,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,QAAQ,EAAE,CAAC;AAAA,EAC7D;AAEA,SAAO,oBAAoB;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,QAAQ;AAAA,IACnB,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAChD,YAAY,WAAW,SAAS;AAAA,IAChC;AAAA,IACA,qBAAqB,OAAO,KAAK,cAAc,EAAE,SAAS,OAAO,KAAK,SAAS,EAAE;AAAA,IACjF;AAAA,EACF,CAAC;AACH;","names":["readFileSync","join","existsSync","dirname","join","resolve","dirname","dirname"]}