@agent-surface/cli 0.12.0 → 0.13.0

package/dist/chunk-VX6GBEP3.js

@@ -0,0 +1,539 @@
+import {
+  authoredIds,
+  unreadKey,
+  unresolved
+} from "./chunk-UGCLJ5JX.js";
+
+// src/render/model.ts
+function flatRows(view) {
+  return view.groups.flatMap((group) => group.rows);
+}
+function pathOf(capabilityId) {
+  return capabilityId.replace(/^(view|domain):/, "");
+}
+function leafOf(capabilityId) {
+  const withoutPlane = pathOf(capabilityId);
+  const dot = withoutPlane.lastIndexOf(".");
+  return dot === -1 ? withoutPlane : withoutPlane.slice(dot + 1);
+}
+function actionFlags(action) {
+  const flags = [];
+  if (action.idempotent) flags.push("idempotent");
+  if (action.reversible) flags.push("reversible");
+  if (action.confirmation !== "never") flags.push(`confirmation:${action.confirmation}`);
+  return flags;
+}
+function procedureFlags(procedure) {
+  const flags = [];
+  if (procedure.confirmation !== "never") flags.push(`confirmation:${procedure.confirmation}`);
+  for (const field of procedure.boundFields) {
+    flags.push(`${field.path} bound${field.locked ? "+locked" : ""}`);
+  }
+  return flags;
+}
+function explanationIndex(explanation) {
+  const index = /* @__PURE__ */ new Map();
+  for (const capability of explanation.capabilities) {
+    index.set(`${capability.capabilityId}\0${capability.registrationId}`, capability);
+  }
+  return index;
+}
+function buildView(result, options = {}) {
+  const { snapshot, explanation } = result;
+  const index = explanationIndex(explanation);
+  const groups = [];
+  const counts = { callable: 0, disabled: 0, hidden: 0 };
+  const enrich = (row, capabilityId, registrationId) => {
+    const explained = index.get(`${capabilityId}\0${registrationId}`);
+    if (options.explain && explained) {
+      row.policies = explained.policies;
+      row.availability = explained.availability;
+    }
+    return row;
+  };
+  for (const component of snapshot.components) {
+    const rows = [];
+    for (const observation of component.observations) {
+      rows.push(
+        enrich(
+          rowFor(observation, "observation", void 0, [], options, {
+            input: void 0,
+            output: observation.outputSchema
+          }),
+          observation.capabilityId,
+          component.registrationId
+        )
+      );
+    }
+    for (const action of component.actions) {
+      rows.push(
+        enrich(
+          rowFor(action, "action", action.effect, actionFlags(action), options, {
+            input: action.inputSchema,
+            output: action.outputSchema
+          }),
+          action.capabilityId,
+          component.registrationId
+        )
+      );
+    }
+    groups.push({
+      heading: component.instanceId === "default" ? component.type : `${component.type}@${component.instanceId}`,
+      rows
+    });
+  }
+  if (snapshot.procedures.length > 0) {
+    groups.push({
+      heading: "authoritative (domain)",
+      rows: snapshot.procedures.map(
+        (procedure) => enrich(
+          {
+            capabilityId: procedure.procedureId,
+            name: procedure.procedureId.replace(/^domain:/, ""),
+            path: pathOf(procedure.procedureId),
+            kind: "procedure",
+            plane: "domain",
+            outcome: procedure.available ? "expose" : "disable",
+            description: procedure.description,
+            ...procedure.unavailableReason ? { reason: procedure.unavailableReason } : {},
+            effect: procedure.effect,
+            flags: procedureFlags(procedure),
+            tags: [procedure.effect, ...procedureFlags(procedure)],
+            ...options.schemas ? { schemas: { input: procedure.inputSchema, output: procedure.outputSchema } } : {}
+          },
+          procedure.procedureId,
+          procedure.registrationId
+        )
+      )
+    });
+  }
+  const hidden = explanation.capabilities.filter((c) => c.outcome === "hide");
+  if (hidden.length > 0) {
+    groups.push({
+      heading: "hidden by policy (absent from the snapshot)",
+      rows: hidden.map((capability) => ({
+        capabilityId: capability.capabilityId,
+        name: leafOf(capability.capabilityId),
+        path: pathOf(capability.capabilityId),
+        kind: capability.kind,
+        plane: capability.plane,
+        outcome: "hide",
+        description: capability.description,
+        // No reason line, deliberately. The reason a hidden capability carries
+        // is its *availability* reason — "The drawer is not open" — and printing
+        // that under a row marked `hidden` says the UI declined when authority
+        // did. Authority hides, state discloses (D11/D12), and the two must
+        // never look alike. Why it was hidden is a policy question, which is
+        // what `--explain` answers.
+        //
+        // A hidden capability has no snapshot entry, so there is no effect to
+        // report — the table prints an em dash rather than inventing one. The
+        // capability path already carries the component type; only a non-default
+        // instance adds anything.
+        flags: capability.component.instanceId === "default" ? [] : [`@${capability.component.instanceId}`],
+        tags: [`${capability.component.type}@${capability.component.instanceId}`],
+        ...options.explain ? { policies: capability.policies, availability: capability.availability } : {}
+      }))
+    });
+  }
+  for (const capability of explanation.capabilities) {
+    if (capability.outcome === "expose") counts.callable += 1;
+    else if (capability.outcome === "disable") counts.disabled += 1;
+    else counts.hidden += 1;
+  }
+  return {
+    scenario: result.scenario,
+    ...snapshot.route?.path ? { route: snapshot.route.path } : {},
+    ...result.scope ? { scope: result.scope } : {},
+    groups,
+    counts,
+    rejections: result.rejections ?? [],
+    explained: options.explain === true
+  };
+}
+function rowFor(descriptor, kind, effect, flags, options, schemas) {
+  return {
+    capabilityId: descriptor.capabilityId,
+    name: descriptor.name,
+    path: pathOf(descriptor.capabilityId),
+    kind,
+    plane: "view",
+    outcome: descriptor.available ? "expose" : "disable",
+    description: descriptor.description,
+    ...descriptor.unavailableReason ? { reason: descriptor.unavailableReason } : {},
+    ...effect ? { effect } : {},
+    flags,
+    // The grouped detail view prints one combined list, the way it always has.
+    tags: effect ? [effect, ...flags] : [kind, ...flags],
+    ...options.schemas ? { schemas } : {}
+  };
+}
+
+// src/render/summary.ts
+import { relative } from "path";
+function displayPath(path) {
+  const rel = relative(process.cwd(), path);
+  return rel && !rel.startsWith("..") ? rel : path;
+}
+var DEPTH_TEXT = {
+  full: "full \u2014 the source is read and every scenario is mounted",
+  static: "static \u2014 the source only; nothing is mounted",
+  runtime: "runtime \u2014 the scenarios only; the source is not read"
+};
+function runContextRows(context) {
+  const rows = [
+    { label: "Config", text: displayPath(context.configPath) },
+    { label: "Depth", text: DEPTH_TEXT[context.depth] },
+    {
+      label: "Scope",
+      text: context.scope && context.scope.length > 0 ? `${context.scope.join(" \xB7 ")} \u2014 every count below is relative to it` : "whole surface \u2014 no component-type prefix filter"
+    }
+  ];
+  if (context.scenarios) {
+    const declared = context.declaredScenarios ?? context.scenarios;
+    const named = context.scenarios.length < declared.length;
+    rows.push({
+      label: "Scenarios",
+      text: `${named ? `${context.scenarios.length} of ${declared.length}` : context.scenarios.length} \u2014 ${context.scenarios.join(", ")}`
+    });
+  }
+  return rows;
+}
+function catalogRows(inventory, options = {}) {
+  const resolved = inventory.capabilities.filter((c) => c.resolution !== "unresolved");
+  const unreadEntries = unresolved(inventory);
+  const dynamicMetadata = resolved.filter((c) => c.resolution === "partial").length;
+  const authored = authoredIds(inventory).size + (options.domainCapabilities ?? 0);
+  return [
+    {
+      label: "STATUS",
+      tone: unreadEntries.length > 0 ? "warn" : "good",
+      text: unreadEntries.length > 0 ? `INCOMPLETE \u2014 ${unreadEntries.length} unread capability identit${unreadEntries.length === 1 ? "y" : "ies"}` : "COMPLETE \u2014 every capability identity resolved"
+    },
+    {
+      label: "Capabilities",
+      text: `${authored} authored (upper bound) \xB7 ${resolved.length} resolved call site${resolved.length === 1 ? "" : "s"}`
+    },
+    {
+      label: "Program",
+      text: `${inventory.filesAnalyzed} file${inventory.filesAnalyzed === 1 ? "" : "s"} analyzed` + (inventory.filesOutsideRoot > 0 ? ` \xB7 ${inventory.filesOutsideRoot} agent-surface implementation file${inventory.filesOutsideRoot === 1 ? "" : "s"} excluded` : "")
+    },
+    {
+      label: "Metadata",
+      text: `${dynamicMetadata} call site${dynamicMetadata === 1 ? "" : "s"} partially read` + (dynamicMetadata > 0 ? " \xB7 identity remains resolved" : "")
+    },
+    {
+      // Three different statements, and only one of them is a number. "Nobody
+      // looked" and "there is nothing to look at" must not read alike (OQ-1).
+      label: "Domain",
+      ...options.mounted && options.domainCapabilities === void 0 ? { tone: "warn" } : {},
+      text: options.domainCapabilities !== void 0 ? `${options.domainCapabilities} manifest capabilit${options.domainCapabilities === 1 ? "y" : "ies"}` : options.mounted ? "no authoritative oRPC manifest configured \u2014 that plane has no denominator" : "not analyzed at static depth; full depth reads the oRPC manifest"
+    }
+  ];
+}
+function runHeaderBlocks(title, context, inventory, domainCapabilities) {
+  return [
+    { title, rows: runContextRows(context) },
+    ...inventory ? [
+      {
+        title: "STATIC CATALOG",
+        rows: catalogRows(inventory, {
+          ...domainCapabilities === void 0 ? {} : { domainCapabilities },
+          ...context.depth === "static" ? {} : { mounted: true }
+        })
+      }
+    ] : []
+  ];
+}
+function scenarioStats(result) {
+  const counts = { expose: 0, disable: 0, hide: 0 };
+  for (const capability of result.explanation.capabilities) counts[capability.outcome] += 1;
+  return {
+    scenario: result.scenario,
+    ...result.snapshot.route?.path ? { route: result.snapshot.route.path } : {},
+    callable: counts.expose,
+    disabled: counts.disable,
+    hidden: counts.hide,
+    rejected: result.rejections.length
+  };
+}
+var NONE = "\u2014";
+function scenarioTable(stats, options = {}) {
+  const headers = ["SCENARIO", "ROUTE", "CALLABLE", "DISABLED", "HIDDEN", "REJECTED"];
+  if (options.baselines) headers.push("BASELINE");
+  return {
+    headers,
+    rows: stats.map((entry) => ({
+      // The baseline column already says `did not mount`, so the note carries
+      // only what a reader cannot get anywhere else: why.
+      ...entry.failed ? {
+        note: `${options.baselines ? "" : "did not mount \u2014 "}${entry.failure ?? "the scenario threw during mount"}`
+      } : {},
+      cells: [
+        entry.scenario,
+        entry.route ?? NONE,
+        ...entry.failed ? [NONE, NONE, NONE, NONE] : [
+          String(entry.callable),
+          String(entry.disabled),
+          String(entry.hidden),
+          entry.rejected > 0 ? String(entry.rejected) : NONE
+        ],
+        ...options.baselines ? [entry.failed ? "did not mount" : entry.baseline ?? NONE] : []
+      ]
+    }))
+  };
+}
+var RANK = { hide: 0, disable: 1, expose: 2 };
+function trackReach(reach, rows, scenario) {
+  for (const row of rows) {
+    const current = reach.get(row.capabilityId);
+    if (!current) {
+      reach.set(row.capabilityId, {
+        capabilityId: row.capabilityId,
+        best: row.outcome,
+        ...row.effect ? { effect: row.effect } : {},
+        flags: row.flags,
+        ...row.reason ? { note: row.reason } : {},
+        scenarios: [scenario]
+      });
+      continue;
+    }
+    current.scenarios.push(scenario);
+    if (!current.effect && row.effect) current.effect = row.effect;
+    if (current.flags.length === 0 && row.flags.length > 0) current.flags = row.flags;
+    if (RANK[row.outcome] > RANK[current.best]) {
+      current.best = row.outcome;
+      if (row.reason) current.note = row.reason;
+      else delete current.note;
+    }
+  }
+}
+function neverCallable(reach) {
+  return [...reach.values()].filter((entry) => entry.best !== "expose").sort((a, b) => a.capabilityId.localeCompare(b.capabilityId));
+}
+var MUTATING = /* @__PURE__ */ new Set(["server-mutation", "external-side-effect", "destructive"]);
+function riskOf(entries) {
+  const present = entries.filter((entry) => entry.outcome !== "hide");
+  return {
+    present: present.length,
+    destructive: present.filter((entry) => entry.effect === "destructive").length,
+    mutating: present.filter((entry) => entry.effect && MUTATING.has(entry.effect)).length,
+    confirmed: present.filter(
+      (entry) => entry.flags.some((flag) => flag.startsWith("confirmation:"))
+    ).length,
+    bound: present.filter((entry) => entry.flags.some((flag) => flag.includes(" bound"))).length
+  };
+}
+function riskParts(risk) {
+  return [
+    ...risk.destructive > 0 ? [`${risk.destructive} destructive`] : [],
+    ...risk.mutating > risk.destructive ? [`${risk.mutating - risk.destructive} mutating`] : [],
+    ...risk.confirmed > 0 ? [`${risk.confirmed} confirmation-gated`] : []
+  ];
+}
+function riskClause(rows) {
+  const parts = riskParts(riskOf(rows));
+  return parts.join(", ");
+}
+function riskText(reach) {
+  const risk = riskOf([...reach.values()].map((entry) => ({ ...entry, outcome: entry.best })));
+  const parts = riskParts(risk);
+  if (risk.present === 0) {
+    return "nothing is on the surface at all \u2014 every capability was hidden by policy";
+  }
+  if (parts.length === 0) {
+    return `nothing mutating or destructive is on the surface \xB7 ${risk.present} read-only or local-state capabilit${risk.present === 1 ? "y" : "ies"}`;
+  }
+  return [...parts, ...risk.bound > 0 ? [`${risk.bound} with bound input`] : []].join(" \xB7 ");
+}
+function surfaceSummaryRows(input) {
+  const rows = [];
+  const coverage = input.coverage;
+  if (coverage) {
+    rows.push({
+      label: "Reach",
+      tone: coverage.unreached.length > 0 ? "bad" : "good",
+      text: `${coverage.reached}/${coverage.authored} authored capabilit${coverage.authored === 1 ? "y" : "ies"} reached` + (coverage.unreached.length > 0 ? ` \xB7 ${coverage.unreached.length} unreached` : "") + (coverage.allowed.length > 0 ? ` \xB7 ${coverage.allowed.length} allowlisted` : "")
+    });
+  }
+  const mounted = input.reach.size;
+  const dark = neverCallable(input.reach);
+  if (mounted > 0) {
+    const stuck = dark.filter((entry) => entry.best === "disable").length;
+    const why = [
+      ...stuck > 0 ? [`${stuck} disabled`] : [],
+      ...dark.length > stuck ? [`${dark.length - stuck} hidden`] : []
+    ].join(", ");
+    rows.push({
+      label: "Callable",
+      tone: dark.length > 0 ? "warn" : "good",
+      text: `${mounted - dark.length}/${mounted} mounted capabilit${mounted === 1 ? "y is" : "ies are"} callable in at least one scenario` + (dark.length > 0 ? ` \xB7 ${dark.length} never callable (${why})` : "")
+    });
+    rows.push({ label: "Risk", text: riskText(input.reach) });
+  }
+  if (coverage) {
+    if (coverage.domainReached.length > 0 || coverage.domainAuthoritative) {
+      rows.push({
+        label: "Domain",
+        tone: coverage.unmanifestedDomain.length > 0 ? "bad" : "good",
+        text: coverage.unmanifestedDomain.length > 0 ? `${coverage.unmanifestedDomain.length} mounted capabilit${coverage.unmanifestedDomain.length === 1 ? "y is" : "ies are"} absent from the oRPC manifest` : `${coverage.domainReached.length} capabilit${coverage.domainReached.length === 1 ? "y" : "ies"} reached${coverage.domainAuthoritative ? " against the authoritative oRPC manifest" : " and held apart \u2014 configure the manifest to cover that plane"}`
+      });
+    }
+    rows.push({
+      label: "Catalog",
+      tone: coverage.unresolved.length > 0 ? "warn" : "good",
+      text: coverage.unresolved.length > 0 ? `${coverage.unresolved.length} unread call site${coverage.unresolved.length === 1 ? "" : "s"} \u2014 every count above is a floor` : `every call site read${coverage.allowedUnread.length > 0 ? ` \xB7 ${coverage.allowedUnread.length} allowlisted` : ""}`
+    });
+  }
+  rows.push({
+    label: "Scenarios",
+    tone: input.failures > 0 ? "bad" : void 0,
+    text: `${input.scenarios.filter((entry) => !entry.failed).length} mounted` + (input.failures > 0 ? ` \xB7 ${input.failures} did not mount` : "")
+  });
+  rows.push({ label: "Verdict", tone: verdictTone(input), text: verdictText(input) });
+  return rows;
+}
+function verdictTone(input) {
+  if (input.failures > 0) return "bad";
+  if (!input.coverage) return "warn";
+  const clean = input.coverage.unreached.length === 0 && input.coverage.unresolved.length === 0 && input.coverage.staleAllowlist.length === 0 && input.coverage.staleUnreadAllowlist.length === 0 && input.coverage.unmanifestedDomain.length === 0;
+  return clean ? "good" : "bad";
+}
+function verdictText(input) {
+  if (input.failures > 0) {
+    return "a scenario did not mount, so no coverage verdict was computed at all";
+  }
+  const coverage = input.coverage;
+  if (!coverage) {
+    return input.depth === "runtime" ? "the source was not read at this depth \u2014 a statement about these scenarios only" : "no coverage verdict at this depth";
+  }
+  if (coverage.unreached.length > 0) {
+    return `${coverage.unreached.length} authored capabilit${coverage.unreached.length === 1 ? "y is" : "ies are"} reached by no scenario`;
+  }
+  if (coverage.unresolved.length > 0) {
+    return "every capability the catalog could read is reached \u2014 and the catalog has holes in it";
+  }
+  return coverage.allowed.length > 0 ? "no new coverage gaps \u2014 the allowlist still holds the known ones" : "every authored capability is reached by a scenario";
+}
+function coverageSections(report, options = {}) {
+  const sections = [];
+  if (report.unreached.length > 0) {
+    sections.push({
+      title: "UNREACHED",
+      gloss: "authored, and no scenario mounts it",
+      count: report.unreached.length,
+      headers: ["CAPABILITY", "ORIGIN"],
+      rows: report.unreached.map((entry) => ({
+        cells: [entry.capabilityId, `${entry.origin.file}:${entry.origin.line}`]
+      })),
+      hint: `add a scenario that mounts them, delete the dead component, or record the decision in ${displayPath(report.allowlistPath)}`
+    });
+  }
+  if (report.undeclared.length > 0) {
+    if (!options.compact || options.detail) {
+      sections.push({
+        title: "UNDECLARED",
+        gloss: "present at runtime with no static origin \u2014 a dynamic registration, or a gap here",
+        count: report.undeclared.length,
+        tone: "notice",
+        lines: report.undeclared
+      });
+    } else {
+      sections.push({
+        title: "NOTICE",
+        gloss: `${report.undeclared.length} runtime capabilit${report.undeclared.length === 1 ? "y has" : "ies have"} no static origin; re-run with --detail to list them`,
+        count: 0,
+        tone: "notice"
+      });
+    }
+  }
+  if (report.unmanifestedDomain.length > 0) {
+    sections.push({
+      title: "UNMANIFESTED DOMAIN",
+      gloss: "mounted, but absent from the authoritative oRPC manifest",
+      count: report.unmanifestedDomain.length,
+      lines: report.unmanifestedDomain,
+      hint: "add them to the manifest, or stop mounting a router the manifest does not describe"
+    });
+  }
+  if (report.staleAllowlist.length > 0) {
+    sections.push({
+      title: "STALE ALLOWLIST",
+      gloss: "a scenario reaches these now, so delete them before the list rots",
+      count: report.staleAllowlist.length,
+      lines: report.staleAllowlist,
+      hint: `delete these keys from ${displayPath(report.allowlistPath)}`
+    });
+  }
+  if (report.staleUnreadAllowlist.length > 0) {
+    sections.push({
+      title: "STALE UNREAD ALLOWLIST",
+      gloss: "the extractor reads these now, so delete them before the list rots",
+      count: report.staleUnreadAllowlist.length,
+      lines: report.staleUnreadAllowlist,
+      hint: `delete these keys from ${displayPath(report.unreadAllowlistPath)}`
+    });
+  }
+  if (report.unresolved.length > 0) {
+    sections.push(unreadSection(report.unresolved, report.unreadAllowlistPath));
+  }
+  return sections;
+}
+function unreadSection(entries, allowlistPath) {
+  return {
+    title: "UNREAD CALL SITES",
+    gloss: "the catalog is incomplete, so every count above is a floor",
+    count: entries.length,
+    lines: entries.flatMap((entry) => [
+      `${entry.origin.file}:${entry.origin.line}`,
+      `    ${entry.note ?? "the extractor could not read this call site"}`,
+      `    allowlist key: ${unreadKey(entry)}`
+    ]),
+    hint: allowlistPath ? `make the call site readable, or accept each key in ${displayPath(allowlistPath)}` : "make the call site readable, or accept each key in .agent-surface/unresolved-allow.json"
+  };
+}
+function neverCallableSection(entries) {
+  const stuck = entries.filter((entry) => entry.best === "disable").length;
+  const hidden = entries.length - stuck;
+  return {
+    title: "NEVER CALLABLE",
+    gloss: "every scenario mounted these, and none of them could call one",
+    count: entries.length,
+    tone: "notice",
+    headers: ["CAPABILITY", "BEST STATE", "WHY"],
+    rows: entries.map((entry) => ({
+      cells: [
+        entry.capabilityId,
+        entry.best === "disable" ? "disabled" : "hidden",
+        entry.best === "disable" ? entry.note ?? "the UI reported it unavailable in every scenario" : "a policy hid it in every scenario"
+      ]
+    })),
+    hint: [
+      ...stuck > 0 ? [
+        "add a scenario that reaches the state these need \u2014 an open drawer, a filled list, a selected row"
+      ] : [],
+      ...hidden > 0 ? [
+        `add a scenario whose consumer carries the authority ${stuck > 0 ? "the hidden ones are" : "these are"} waiting for`
+      ] : []
+    ].join("; ")
+  };
+}
+
+export {
+  flatRows,
+  buildView,
+  displayPath,
+  runContextRows,
+  catalogRows,
+  runHeaderBlocks,
+  scenarioStats,
+  scenarioTable,
+  trackReach,
+  neverCallable,
+  riskClause,
+  surfaceSummaryRows,
+  coverageSections,
+  unreadSection,
+  neverCallableSection
+};
+//# sourceMappingURL=chunk-VX6GBEP3.js.map

package/dist/chunk-VX6GBEP3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/render/model.ts","../src/render/summary.ts"],"sourcesContent":["import type {\n  AgentActionDescriptor,\n  AgentObservationDescriptor,\n  AgentProcedureDescriptor,\n  AgentSurfaceSnapshot,\n} from \"@agent-surface/core\";\nimport type { CapabilityExplanation, SurfaceExplanation } from \"@agent-surface/core/explain\";\nimport type { CollectResult, RegistrationRejection } from \"../collect.js\";\n\n/**\n * One view model, two renderers. The Ink UI and the plain-text fallback both\n * consume this, so `--plain` can never drift into showing something different\n * from what a TTY shows.\n */\nexport interface CapabilityRow {\n  capabilityId: string;\n  /** Leaf name — the group heading already carries the rest of the id. */\n  name: string;\n  /**\n   * The id minus its plane prefix. The table is flat, so its first column has\n   * to carry the whole path; the grouped detail view uses `name`.\n   */\n  path: string;\n  kind: \"observation\" | \"action\" | \"procedure\";\n  plane: \"view\" | \"domain\";\n  outcome: \"expose\" | \"disable\" | \"hide\";\n  description: string;\n  reason?: string;\n  /** The effect, alone, for the table's own column. Observations have none. */\n  effect?: string;\n  /** What is left of `tags` once the effect has its own column. */\n  flags: string[];\n  /** Effect and flags together — what the grouped detail view prints. */\n  tags: string[];\n  policies?: CapabilityExplanation[\"policies\"];\n  availability?: CapabilityExplanation[\"availability\"];\n  schemas?: { input?: unknown; output?: unknown };\n}\n\nexport interface CapabilityGroup {\n  heading: string;\n  rows: CapabilityRow[];\n}\n\nexport interface SurfaceView {\n  scenario: string;\n  route?: string;\n  /**\n   * The scope the counts below were computed under (`AS-CLI-007`). A scope\n   * filters the snapshot *and* the explanation, so without it on screen the\n   * header reads as a statement about the whole surface when it is a statement\n   * about one prefix of it.\n   */\n  scope?: string[];\n  groups: CapabilityGroup[];\n  counts: { callable: number; disabled: number; hidden: number };\n  /** Refused during the mount — absent from both projections (`AS-CLI-006`). */\n  rejections: RegistrationRejection[];\n  explained: boolean;\n}\n\nexport interface ViewOptions {\n  explain?: boolean;\n  schemas?: boolean;\n}\n\n/**\n * The table is flat — `groups` exist for the grouped detail view, which is what\n * `--detail`, `--explain` and `--schemas` render. Flattening here rather than in\n * each renderer keeps the two views over one order.\n */\nexport function flatRows(view: SurfaceView): CapabilityRow[] {\n  return view.groups.flatMap((group) => group.rows);\n}\n\nfunction pathOf(capabilityId: string): string {\n  return capabilityId.replace(/^(view|domain):/, \"\");\n}\n\nfunction leafOf(capabilityId: string): string {\n  const withoutPlane = pathOf(capabilityId);\n  const dot = withoutPlane.lastIndexOf(\".\");\n  return dot === -1 ? withoutPlane : withoutPlane.slice(dot + 1);\n}\n\n/**\n * The effect gets its own table column; everything else is a flag. An\n * observation reads state and has no effect at all, which the table shows as\n * an em dash rather than inventing one.\n */\nfunction actionFlags(action: AgentActionDescriptor): string[] {\n  const flags: string[] = [];\n  if (action.idempotent) flags.push(\"idempotent\");\n  if (action.reversible) flags.push(\"reversible\");\n  if (action.confirmation !== \"never\") flags.push(`confirmation:${action.confirmation}`);\n  return flags;\n}\n\nfunction procedureFlags(procedure: AgentProcedureDescriptor): string[] {\n  const flags: string[] = [];\n  if (procedure.confirmation !== \"never\") flags.push(`confirmation:${procedure.confirmation}`);\n  for (const field of procedure.boundFields) {\n    flags.push(`${field.path} bound${field.locked ? \"+locked\" : \"\"}`);\n  }\n  return flags;\n}\n\nfunction explanationIndex(explanation: SurfaceExplanation): Map<string, CapabilityExplanation> {\n  const index = new Map<string, CapabilityExplanation>();\n  for (const capability of explanation.capabilities) {\n    // Keyed by id + registration so two instances of one component stay apart.\n    index.set(`${capability.capabilityId}\\u0000${capability.registrationId}`, capability);\n  }\n  return index;\n}\n\nexport function buildView(result: CollectResult, options: ViewOptions = {}): SurfaceView {\n  const { snapshot, explanation } = result;\n  const index = explanationIndex(explanation);\n  const groups: CapabilityGroup[] = [];\n  const counts = { callable: 0, disabled: 0, hidden: 0 };\n\n  const enrich = (\n    row: CapabilityRow,\n    capabilityId: string,\n    registrationId: string,\n  ): CapabilityRow => {\n    const explained = index.get(`${capabilityId}\\u0000${registrationId}`);\n    if (options.explain && explained) {\n      row.policies = explained.policies;\n      row.availability = explained.availability;\n    }\n    return row;\n  };\n\n  for (const component of snapshot.components) {\n    const rows: CapabilityRow[] = [];\n\n    for (const observation of component.observations) {\n      rows.push(\n        enrich(\n          rowFor(observation, \"observation\", undefined, [], options, {\n            input: undefined,\n            output: observation.outputSchema,\n          }),\n          observation.capabilityId,\n          component.registrationId,\n        ),\n      );\n    }\n    for (const action of component.actions) {\n      rows.push(\n        enrich(\n          rowFor(action, \"action\", action.effect, actionFlags(action), options, {\n            input: action.inputSchema,\n            output: action.outputSchema,\n          }),\n          action.capabilityId,\n          component.registrationId,\n        ),\n      );\n    }\n\n    groups.push({\n      heading:\n        component.instanceId === \"default\"\n          ? component.type\n          : `${component.type}@${component.instanceId}`,\n      rows,\n    });\n  }\n\n  if (snapshot.procedures.length > 0) {\n    groups.push({\n      heading: \"authoritative (domain)\",\n      rows: snapshot.procedures.map((procedure) =>\n        enrich(\n          {\n            capabilityId: procedure.procedureId,\n            name: procedure.procedureId.replace(/^domain:/, \"\"),\n            path: pathOf(procedure.procedureId),\n            kind: \"procedure\",\n            plane: \"domain\",\n            outcome: procedure.available ? \"expose\" : \"disable\",\n            description: procedure.description,\n            ...(procedure.unavailableReason ? { reason: procedure.unavailableReason } : {}),\n            effect: procedure.effect,\n            flags: procedureFlags(procedure),\n            tags: [procedure.effect, ...procedureFlags(procedure)],\n            ...(options.schemas\n              ? { schemas: { input: procedure.inputSchema, output: procedure.outputSchema } }\n              : {}),\n          },\n          procedure.procedureId,\n          procedure.registrationId,\n        ),\n      ),\n    });\n  }\n\n  // Hidden capabilities exist only in the explanation — that is the whole point\n  // of it. They get their own group so nobody mistakes them for callable.\n  //\n  // Unconditional, not behind `--explain`, for the reason `AS-CLI-007` moved\n  // the hidden *count* out from behind it: signed out, the example app rendered\n  // `0 callable, 0 visible-disabled` over eleven perfectly good capabilities\n  // that authority had hidden, and a reader who did not know to re-run with a\n  // flag read that as an app which annotated nothing. The explanation is\n  // collected on every run regardless, so this costs nothing. The policy\n  // *attribution* still needs `--explain`; only the rows moved.\n  const hidden = explanation.capabilities.filter((c) => c.outcome === \"hide\");\n  if (hidden.length > 0) {\n    groups.push({\n      heading: \"hidden by policy (absent from the snapshot)\",\n      rows: hidden.map((capability) => ({\n        capabilityId: capability.capabilityId,\n        name: leafOf(capability.capabilityId),\n        path: pathOf(capability.capabilityId),\n        kind: capability.kind,\n        plane: capability.plane,\n        outcome: \"hide\" as const,\n        description: capability.description,\n        // No reason line, deliberately. The reason a hidden capability carries\n        // is its *availability* reason — \"The drawer is not open\" — and printing\n        // that under a row marked `hidden` says the UI declined when authority\n        // did. Authority hides, state discloses (D11/D12), and the two must\n        // never look alike. Why it was hidden is a policy question, which is\n        // what `--explain` answers.\n        //\n        // A hidden capability has no snapshot entry, so there is no effect to\n        // report — the table prints an em dash rather than inventing one. The\n        // capability path already carries the component type; only a non-default\n        // instance adds anything.\n        flags:\n          capability.component.instanceId === \"default\"\n            ? []\n            : [`@${capability.component.instanceId}`],\n        tags: [`${capability.component.type}@${capability.component.instanceId}`],\n        ...(options.explain\n          ? { policies: capability.policies, availability: capability.availability }\n          : {}),\n      })),\n    });\n  }\n\n  for (const capability of explanation.capabilities) {\n    if (capability.outcome === \"expose\") counts.callable += 1;\n    else if (capability.outcome === \"disable\") counts.disabled += 1;\n    else counts.hidden += 1;\n  }\n\n  return {\n    scenario: result.scenario,\n    ...(snapshot.route?.path ? { route: snapshot.route.path } : {}),\n    ...(result.scope ? { scope: result.scope } : {}),\n    groups,\n    counts,\n    rejections: result.rejections ?? [],\n    explained: options.explain === true,\n  };\n}\n\nfunction rowFor(\n  descriptor: AgentObservationDescriptor | AgentActionDescriptor,\n  kind: \"observation\" | \"action\",\n  effect: string | undefined,\n  flags: string[],\n  options: ViewOptions,\n  schemas: { input?: unknown; output?: unknown },\n): CapabilityRow {\n  return {\n    capabilityId: descriptor.capabilityId,\n    name: descriptor.name,\n    path: pathOf(descriptor.capabilityId),\n    kind,\n    plane: \"view\",\n    outcome: descriptor.available ? \"expose\" : \"disable\",\n    description: descriptor.description,\n    ...(descriptor.unavailableReason ? { reason: descriptor.unavailableReason } : {}),\n    ...(effect ? { effect } : {}),\n    flags,\n    // The grouped detail view prints one combined list, the way it always has.\n    tags: effect ? [effect, ...flags] : [kind, ...flags],\n    ...(options.schemas ? { schemas } : {}),\n  };\n}\n","/**\n * The report model both renderers draw: labelled rows, and findings.\n *\n * `inspect` and `check` answer different questions, but they answer them about\n * the same surface and a reader moves between them. So the *shapes* are shared\n * — a run header, a status matrix, a findings section — and only the content\n * differs. A second copy of \"how a finding looks\" is how the two commands drift\n * into disagreeing about what they found.\n *\n * Everything here is data. Plain text renders it in `plain.ts`, the terminal UI\n * in `ink.tsx`, and neither can invent a row the other does not have.\n */\nimport { relative } from \"node:path\";\nimport type { CollectResult } from \"../collect.js\";\nimport type { Depth } from \"../contract.js\";\nimport type { CoverageReport } from \"../coverage.js\";\nimport { unreadKey } from \"../coverage.js\";\nimport { authoredIds, unresolved, type CapabilityInventory } from \"../extract.js\";\nimport type { CapabilityRow } from \"./model.js\";\n\nexport type ReportStatus = \"PASS\" | \"WARN\" | \"FAIL\" | \"ERROR\";\n\n/** Colour hint for the terminal UI. Plain text ignores it — words carry it. */\nexport type ReportTone = \"good\" | \"warn\" | \"bad\";\n\n/** One `label  [STATUS]  text` line. */\nexport interface ReportRow {\n  label: string;\n  status?: ReportStatus;\n  tone?: ReportTone;\n  text: string;\n}\n\nexport interface ReportBlock {\n  title?: string;\n  rows: ReportRow[];\n}\n\n/**\n * A finding: a heading that says what it is, a gloss that says why it matters,\n * and its entries as either a table or a list. `hint` is what to do about it,\n * printed with the finding rather than left for the reader to infer.\n */\nexport interface FindingSection {\n  title: string;\n  gloss: string;\n  count: number;\n  /** `notice` is reported but gates nothing — rendered without alarm. */\n  tone?: \"finding\" | \"notice\";\n  headers?: string[];\n  rows?: Array<{ cells: string[]; note?: string }>;\n  lines?: string[];\n  hint?: string;\n}\n\n/**\n * A path as the reader will type it. `relative` alone turns a baseline\n * directory outside the working tree into a stack of `..` nobody can read, let\n * alone paste — so anything that escapes the working directory prints absolute.\n */\nexport function displayPath(path: string): string {\n  const rel = relative(process.cwd(), path);\n  return rel && !rel.startsWith(\"..\") ? rel : path;\n}\n\nconst DEPTH_TEXT: Record<Depth, string> = {\n  full: \"full — the source is read and every scenario is mounted\",\n  static: \"static — the source only; nothing is mounted\",\n  runtime: \"runtime — the scenarios only; the source is not read\",\n};\n\nexport interface RunContext {\n  configPath: string;\n  depth: Depth;\n  /** The effective scope: `--scope` when given, else the config's. */\n  scope?: string[];\n  /** Scenarios this run covers. Absent when the depth mounts nothing. */\n  scenarios?: string[];\n  /** Every scenario the config declares, for `n of m` when one was named. */\n  declaredScenarios?: string[];\n}\n\n/**\n * What the numbers below are about, before there are any (`AS-CLI-007`).\n *\n * A report that opens with its counts asks the reader to hold them until the\n * qualifier arrives — and on a scoped run, or a run against a config they did\n * not choose, the unqualified number is simply the wrong one.\n */\nexport function runContextRows(context: RunContext): ReportRow[] {\n  const rows: ReportRow[] = [\n    { label: \"Config\", text: displayPath(context.configPath) },\n    { label: \"Depth\", text: DEPTH_TEXT[context.depth] },\n    {\n      label: \"Scope\",\n      text:\n        context.scope && context.scope.length > 0\n          ? `${context.scope.join(\" · \")} — every count below is relative to it`\n          : \"whole surface — no component-type prefix filter\",\n    },\n  ];\n  if (context.scenarios) {\n    const declared = context.declaredScenarios ?? context.scenarios;\n    const named = context.scenarios.length < declared.length;\n    rows.push({\n      label: \"Scenarios\",\n      text:\n        `${named ? `${context.scenarios.length} of ${declared.length}` : context.scenarios.length}` +\n        ` — ${context.scenarios.join(\", \")}`,\n    });\n  }\n  return rows;\n}\n\n/**\n * The static catalog's summary (`AS-COVER-001…003`). \"Upper bound\" is in the\n * text on purpose: a tsconfig's include globs are wider than what a bundle\n * reaches, so a capability in a component no route renders any more is counted\n * here. That is dead code — a different finding, not a false positive — and the\n * reader has to be told which number they are holding.\n */\nexport function catalogRows(\n  inventory: CapabilityInventory,\n  options: { domainCapabilities?: number; mounted?: boolean } = {},\n): ReportRow[] {\n  const resolved = inventory.capabilities.filter((c) => c.resolution !== \"unresolved\");\n  const unreadEntries = unresolved(inventory);\n  const dynamicMetadata = resolved.filter((c) => c.resolution === \"partial\").length;\n  const authored = authoredIds(inventory).size + (options.domainCapabilities ?? 0);\n\n  return [\n    {\n      label: \"STATUS\",\n      tone: unreadEntries.length > 0 ? \"warn\" : \"good\",\n      text:\n        unreadEntries.length > 0\n          ? `INCOMPLETE — ${unreadEntries.length} unread capability identit${\n              unreadEntries.length === 1 ? \"y\" : \"ies\"\n            }`\n          : \"COMPLETE — every capability identity resolved\",\n    },\n    {\n      label: \"Capabilities\",\n      text: `${authored} authored (upper bound) · ${resolved.length} resolved call site${\n        resolved.length === 1 ? \"\" : \"s\"\n      }`,\n    },\n    {\n      label: \"Program\",\n      text:\n        `${inventory.filesAnalyzed} file${inventory.filesAnalyzed === 1 ? \"\" : \"s\"} analyzed` +\n        (inventory.filesOutsideRoot > 0\n          ? ` · ${inventory.filesOutsideRoot} agent-surface implementation file${\n              inventory.filesOutsideRoot === 1 ? \"\" : \"s\"\n            } excluded`\n          : \"\"),\n    },\n    {\n      label: \"Metadata\",\n      text:\n        `${dynamicMetadata} call site${dynamicMetadata === 1 ? \"\" : \"s\"} partially read` +\n        (dynamicMetadata > 0 ? \" · identity remains resolved\" : \"\"),\n    },\n    {\n      // Three different statements, and only one of them is a number. \"Nobody\n      // looked\" and \"there is nothing to look at\" must not read alike (OQ-1).\n      label: \"Domain\",\n      ...(options.mounted && options.domainCapabilities === undefined\n        ? { tone: \"warn\" as const }\n        : {}),\n      text:\n        options.domainCapabilities !== undefined\n          ? `${options.domainCapabilities} manifest capabilit${\n              options.domainCapabilities === 1 ? \"y\" : \"ies\"\n            }`\n          : options.mounted\n            ? \"no authoritative oRPC manifest configured — that plane has no denominator\"\n            : \"not analyzed at static depth; full depth reads the oRPC manifest\",\n    },\n  ];\n}\n\n/**\n * The header a run opens with: what it was pointed at, and the catalog it read\n * before mounting anything.\n */\nexport function runHeaderBlocks(\n  title: string,\n  context: RunContext,\n  inventory?: CapabilityInventory,\n  domainCapabilities?: number,\n): ReportBlock[] {\n  return [\n    { title, rows: runContextRows(context) },\n    ...(inventory\n      ? [\n          {\n            title: \"STATIC CATALOG\",\n            rows: catalogRows(inventory, {\n              ...(domainCapabilities === undefined ? {} : { domainCapabilities }),\n              ...(context.depth === \"static\" ? {} : { mounted: true }),\n            }),\n          },\n        ]\n      : []),\n  ];\n}\n\n/** Per-scenario totals — the row a reader compares scenarios across. */\nexport interface ScenarioStats {\n  scenario: string;\n  route?: string;\n  callable: number;\n  disabled: number;\n  hidden: number;\n  rejected: number;\n  /** Set when the scenario threw instead of mounting. */\n  failed?: boolean;\n  /** Why it threw, printed under its row rather than in a column. */\n  failure?: string;\n  /** `check` only: how the committed baseline compared. */\n  baseline?: string;\n}\n\nexport function scenarioStats(result: CollectResult): ScenarioStats {\n  const counts = { expose: 0, disable: 0, hide: 0 };\n  for (const capability of result.explanation.capabilities) counts[capability.outcome] += 1;\n  return {\n    scenario: result.scenario,\n    ...(result.snapshot.route?.path ? { route: result.snapshot.route.path } : {}),\n    callable: counts.expose,\n    disabled: counts.disable,\n    hidden: counts.hide,\n    rejected: result.rejections.length,\n  };\n}\n\nconst NONE = \"—\";\n\n/** One row per scenario: the comparison a list of names cannot make. */\nexport function scenarioTable(\n  stats: ScenarioStats[],\n  options: { baselines?: boolean } = {},\n): { headers: string[]; rows: Array<{ cells: string[] }> } {\n  const headers = [\"SCENARIO\", \"ROUTE\", \"CALLABLE\", \"DISABLED\", \"HIDDEN\", \"REJECTED\"];\n  if (options.baselines) headers.push(\"BASELINE\");\n  return {\n    headers,\n    rows: stats.map((entry) => ({\n      // The baseline column already says `did not mount`, so the note carries\n      // only what a reader cannot get anywhere else: why.\n      ...(entry.failed\n        ? {\n            note: `${options.baselines ? \"\" : \"did not mount — \"}${\n              entry.failure ?? \"the scenario threw during mount\"\n            }`,\n          }\n        : {}),\n      cells: [\n        entry.scenario,\n        entry.route ?? NONE,\n        ...(entry.failed\n          ? [NONE, NONE, NONE, NONE]\n          : [\n              String(entry.callable),\n              String(entry.disabled),\n              String(entry.hidden),\n              entry.rejected > 0 ? String(entry.rejected) : NONE,\n            ]),\n        ...(options.baselines ? [entry.failed ? \"did not mount\" : (entry.baseline ?? NONE)] : []),\n      ],\n    })),\n  };\n}\n\n/**\n * What every scenario together made of one capability.\n *\n * `unreached` answers \"did anything mount this\". This answers the question one\n * step in: *it mounted, and could any scenario actually call it?* A drawer\n * every scenario leaves closed registers its `close` action in every snapshot\n * and is callable in none of them — reached by the coverage join, and never\n * exercised. Neither half sees that alone.\n */\nexport interface CapabilityReach {\n  capabilityId: string;\n  /** The best outcome any scenario produced: expose beats disable beats hide. */\n  best: \"expose\" | \"disable\" | \"hide\";\n  effect?: string;\n  flags: string[];\n  /** Why it was not callable, from the scenario that came closest. */\n  note?: string;\n  scenarios: string[];\n}\n\nconst RANK = { hide: 0, disable: 1, expose: 2 } as const;\n\nexport function trackReach(\n  reach: Map<string, CapabilityReach>,\n  rows: CapabilityRow[],\n  scenario: string,\n): void {\n  for (const row of rows) {\n    const current = reach.get(row.capabilityId);\n    if (!current) {\n      reach.set(row.capabilityId, {\n        capabilityId: row.capabilityId,\n        best: row.outcome,\n        ...(row.effect ? { effect: row.effect } : {}),\n        flags: row.flags,\n        ...(row.reason ? { note: row.reason } : {}),\n        scenarios: [scenario],\n      });\n      continue;\n    }\n    current.scenarios.push(scenario);\n    // The effect is a property of the descriptor, so any scenario that carries\n    // one carries the same one — but a policy-hidden row has no snapshot entry\n    // to read it from, so the first scenario to see it wins.\n    if (!current.effect && row.effect) current.effect = row.effect;\n    if (current.flags.length === 0 && row.flags.length > 0) current.flags = row.flags;\n    if (RANK[row.outcome] > RANK[current.best]) {\n      current.best = row.outcome;\n      if (row.reason) current.note = row.reason;\n      else delete current.note;\n    }\n  }\n}\n\nexport function neverCallable(reach: Map<string, CapabilityReach>): CapabilityReach[] {\n  return [...reach.values()]\n    .filter((entry) => entry.best !== \"expose\")\n    .sort((a, b) => a.capabilityId.localeCompare(b.capabilityId));\n}\n\nconst MUTATING = new Set([\"server-mutation\", \"external-side-effect\", \"destructive\"]);\n\ninterface Risk {\n  present: number;\n  destructive: number;\n  mutating: number;\n  confirmed: number;\n  bound: number;\n}\n\n/**\n * What an agent could do here, as opposed to how much surface there is.\n *\n * Counted over everything the snapshot carries — `callable` *and*\n * `visible-disabled`. A disabled capability is disclosed to the agent and\n * becomes callable the moment the UI state it waits on arrives, so leaving it\n * out would report a surface with a destructive action on it as one without.\n * A hidden capability is genuinely absent: authority removed it, and counting\n * it here would report a policy working as a risk.\n */\nfunction riskOf(\n  entries: Array<{ outcome: \"expose\" | \"disable\" | \"hide\"; effect?: string; flags: string[] }>,\n): Risk {\n  const present = entries.filter((entry) => entry.outcome !== \"hide\");\n  return {\n    present: present.length,\n    destructive: present.filter((entry) => entry.effect === \"destructive\").length,\n    mutating: present.filter((entry) => entry.effect && MUTATING.has(entry.effect)).length,\n    confirmed: present.filter((entry) =>\n      entry.flags.some((flag) => flag.startsWith(\"confirmation:\")),\n    ).length,\n    bound: present.filter((entry) => entry.flags.some((flag) => flag.includes(\" bound\"))).length,\n  };\n}\n\nfunction riskParts(risk: Risk): string[] {\n  return [\n    ...(risk.destructive > 0 ? [`${risk.destructive} destructive`] : []),\n    ...(risk.mutating > risk.destructive ? [`${risk.mutating - risk.destructive} mutating`] : []),\n    ...(risk.confirmed > 0 ? [`${risk.confirmed} confirmation-gated`] : []),\n  ];\n}\n\n/**\n * The scenario header's risk clause. Empty when there is nothing to say, so a\n * read-only surface does not carry a row of zeroes to be read and dismissed.\n */\nexport function riskClause(rows: CapabilityRow[]): string {\n  const parts = riskParts(riskOf(rows));\n  return parts.join(\", \");\n}\n\n/** The same question over every scenario at once, for the closing summary. */\nfunction riskText(reach: Map<string, CapabilityReach>): string {\n  const risk = riskOf([...reach.values()].map((entry) => ({ ...entry, outcome: entry.best })));\n  const parts = riskParts(risk);\n  if (risk.present === 0) {\n    return \"nothing is on the surface at all — every capability was hidden by policy\";\n  }\n  if (parts.length === 0) {\n    return (\n      `nothing mutating or destructive is on the surface · ${risk.present} ` +\n      `read-only or local-state capabilit${risk.present === 1 ? \"y\" : \"ies\"}`\n    );\n  }\n  return [...parts, ...(risk.bound > 0 ? [`${risk.bound} with bound input`] : [])].join(\" · \");\n}\n\nexport interface SurfaceSummaryInput {\n  depth: Depth;\n  coverage?: CoverageReport;\n  scenarios: ScenarioStats[];\n  failures: number;\n  reach: Map<string, CapabilityReach>;\n}\n\n/**\n * `inspect`'s closing block — the thing a reader who scrolled to the bottom\n * stops on. It states no PASS/FAIL: `inspect` reports findings and never gates\n * on them, and a status word beside a number would read as the exit code it is\n * not.\n */\nexport function surfaceSummaryRows(input: SurfaceSummaryInput): ReportRow[] {\n  const rows: ReportRow[] = [];\n  const coverage = input.coverage;\n\n  if (coverage) {\n    rows.push({\n      label: \"Reach\",\n      tone: coverage.unreached.length > 0 ? \"bad\" : \"good\",\n      text:\n        `${coverage.reached}/${coverage.authored} authored capabilit${\n          coverage.authored === 1 ? \"y\" : \"ies\"\n        } reached` +\n        (coverage.unreached.length > 0 ? ` · ${coverage.unreached.length} unreached` : \"\") +\n        (coverage.allowed.length > 0 ? ` · ${coverage.allowed.length} allowlisted` : \"\"),\n    });\n  }\n\n  const mounted = input.reach.size;\n  const dark = neverCallable(input.reach);\n  if (mounted > 0) {\n    const stuck = dark.filter((entry) => entry.best === \"disable\").length;\n    const why = [\n      ...(stuck > 0 ? [`${stuck} disabled`] : []),\n      ...(dark.length > stuck ? [`${dark.length - stuck} hidden`] : []),\n    ].join(\", \");\n    rows.push({\n      label: \"Callable\",\n      tone: dark.length > 0 ? \"warn\" : \"good\",\n      text:\n        `${mounted - dark.length}/${mounted} mounted capabilit${\n          mounted === 1 ? \"y is\" : \"ies are\"\n        } callable in at least one scenario` +\n        (dark.length > 0 ? ` · ${dark.length} never callable (${why})` : \"\"),\n    });\n    rows.push({ label: \"Risk\", text: riskText(input.reach) });\n  }\n\n  if (coverage) {\n    if (coverage.domainReached.length > 0 || coverage.domainAuthoritative) {\n      rows.push({\n        label: \"Domain\",\n        tone: coverage.unmanifestedDomain.length > 0 ? \"bad\" : \"good\",\n        text:\n          coverage.unmanifestedDomain.length > 0\n            ? `${coverage.unmanifestedDomain.length} mounted capabilit${\n                coverage.unmanifestedDomain.length === 1 ? \"y is\" : \"ies are\"\n              } absent from the oRPC manifest`\n            : `${coverage.domainReached.length} capabilit${\n                coverage.domainReached.length === 1 ? \"y\" : \"ies\"\n              } reached${\n                coverage.domainAuthoritative\n                  ? \" against the authoritative oRPC manifest\"\n                  : \" and held apart — configure the manifest to cover that plane\"\n              }`,\n      });\n    }\n    rows.push({\n      label: \"Catalog\",\n      tone: coverage.unresolved.length > 0 ? \"warn\" : \"good\",\n      text:\n        coverage.unresolved.length > 0\n          ? `${coverage.unresolved.length} unread call site${\n              coverage.unresolved.length === 1 ? \"\" : \"s\"\n            } — every count above is a floor`\n          : `every call site read${\n              coverage.allowedUnread.length > 0\n                ? ` · ${coverage.allowedUnread.length} allowlisted`\n                : \"\"\n            }`,\n    });\n  }\n\n  rows.push({\n    label: \"Scenarios\",\n    tone: input.failures > 0 ? \"bad\" : undefined,\n    text:\n      `${input.scenarios.filter((entry) => !entry.failed).length} mounted` +\n      (input.failures > 0 ? ` · ${input.failures} did not mount` : \"\"),\n  });\n\n  rows.push({ label: \"Verdict\", tone: verdictTone(input), text: verdictText(input) });\n  return rows;\n}\n\nfunction verdictTone(input: SurfaceSummaryInput): ReportTone {\n  if (input.failures > 0) return \"bad\";\n  if (!input.coverage) return \"warn\";\n  const clean =\n    input.coverage.unreached.length === 0 &&\n    input.coverage.unresolved.length === 0 &&\n    input.coverage.staleAllowlist.length === 0 &&\n    input.coverage.staleUnreadAllowlist.length === 0 &&\n    input.coverage.unmanifestedDomain.length === 0;\n  return clean ? \"good\" : \"bad\";\n}\n\n/** The one sentence a reader takes away. Never a status word — see above. */\nfunction verdictText(input: SurfaceSummaryInput): string {\n  if (input.failures > 0) {\n    return \"a scenario did not mount, so no coverage verdict was computed at all\";\n  }\n  const coverage = input.coverage;\n  if (!coverage) {\n    return input.depth === \"runtime\"\n      ? \"the source was not read at this depth — a statement about these scenarios only\"\n      : \"no coverage verdict at this depth\";\n  }\n  if (coverage.unreached.length > 0) {\n    return `${coverage.unreached.length} authored capabilit${\n      coverage.unreached.length === 1 ? \"y is\" : \"ies are\"\n    } reached by no scenario`;\n  }\n  if (coverage.unresolved.length > 0) {\n    return \"every capability the catalog could read is reached — and the catalog has holes in it\";\n  }\n  return coverage.allowed.length > 0\n    ? \"no new coverage gaps — the allowlist still holds the known ones\"\n    : \"every authored capability is reached by a scenario\";\n}\n\n/**\n * The findings a coverage report carries. Shared by `inspect`, `snapshot` and\n * `check`, so the gate and the viewer cannot describe the same gap differently.\n */\nexport function coverageSections(\n  report: CoverageReport,\n  options: { compact?: boolean; detail?: boolean } = {},\n): FindingSection[] {\n  const sections: FindingSection[] = [];\n\n  if (report.unreached.length > 0) {\n    sections.push({\n      title: \"UNREACHED\",\n      gloss: \"authored, and no scenario mounts it\",\n      count: report.unreached.length,\n      headers: [\"CAPABILITY\", \"ORIGIN\"],\n      rows: report.unreached.map((entry) => ({\n        cells: [entry.capabilityId, `${entry.origin.file}:${entry.origin.line}`],\n      })),\n      hint:\n        \"add a scenario that mounts them, delete the dead component, or record the decision \" +\n        `in ${displayPath(report.allowlistPath)}`,\n    });\n  }\n\n  if (report.undeclared.length > 0) {\n    if (!options.compact || options.detail) {\n      sections.push({\n        title: \"UNDECLARED\",\n        gloss: \"present at runtime with no static origin — a dynamic registration, or a gap here\",\n        count: report.undeclared.length,\n        tone: \"notice\",\n        lines: report.undeclared,\n      });\n    } else {\n      sections.push({\n        title: \"NOTICE\",\n        gloss: `${report.undeclared.length} runtime capabilit${\n          report.undeclared.length === 1 ? \"y has\" : \"ies have\"\n        } no static origin; re-run with --detail to list them`,\n        count: 0,\n        tone: \"notice\",\n      });\n    }\n  }\n\n  if (report.unmanifestedDomain.length > 0) {\n    sections.push({\n      title: \"UNMANIFESTED DOMAIN\",\n      gloss: \"mounted, but absent from the authoritative oRPC manifest\",\n      count: report.unmanifestedDomain.length,\n      lines: report.unmanifestedDomain,\n      hint: \"add them to the manifest, or stop mounting a router the manifest does not describe\",\n    });\n  }\n\n  if (report.staleAllowlist.length > 0) {\n    sections.push({\n      title: \"STALE ALLOWLIST\",\n      gloss: \"a scenario reaches these now, so delete them before the list rots\",\n      count: report.staleAllowlist.length,\n      lines: report.staleAllowlist,\n      hint: `delete these keys from ${displayPath(report.allowlistPath)}`,\n    });\n  }\n\n  if (report.staleUnreadAllowlist.length > 0) {\n    sections.push({\n      title: \"STALE UNREAD ALLOWLIST\",\n      gloss: \"the extractor reads these now, so delete them before the list rots\",\n      count: report.staleUnreadAllowlist.length,\n      lines: report.staleUnreadAllowlist,\n      hint: `delete these keys from ${displayPath(report.unreadAllowlistPath)}`,\n    });\n  }\n\n  if (report.unresolved.length > 0) {\n    sections.push(unreadSection(report.unresolved, report.unreadAllowlistPath));\n  }\n\n  return sections;\n}\n\n/**\n * Call sites the extractor could not read. Reported with file and line, never\n * dropped: an inventory that silently omitted what it failed to parse would\n * understate the denominator, and every number built on it would claim a\n * completeness it never had.\n *\n * The allowlist key is spelled out because it is `file#reason#site` and the\n * site is a hash — not the line the reader is looking at — so leaving them to\n * infer it guarantees a wrong guess and an entry that never matches.\n */\nexport function unreadSection(\n  entries: Array<Parameters<typeof unreadKey>[0]>,\n  allowlistPath?: string,\n): FindingSection {\n  return {\n    title: \"UNREAD CALL SITES\",\n    gloss: \"the catalog is incomplete, so every count above is a floor\",\n    count: entries.length,\n    lines: entries.flatMap((entry) => [\n      `${entry.origin.file}:${entry.origin.line}`,\n      `    ${entry.note ?? \"the extractor could not read this call site\"}`,\n      `    allowlist key: ${unreadKey(entry)}`,\n    ]),\n    hint: allowlistPath\n      ? `make the call site readable, or accept each key in ${displayPath(allowlistPath)}`\n      : \"make the call site readable, or accept each key in .agent-surface/unresolved-allow.json\",\n  };\n}\n\n/**\n * Mounted, and callable in no scenario. A finding `inspect` reports and the\n * gate does not: unlike an unreached capability, this one *is* covered by a\n * scenario — what is missing is a scenario that puts the app in the state, or\n * under the authority, where it can be used. That is a judgement about the\n * scenarios rather than a defect in the surface.\n *\n * Worth printing only when more than one scenario ran. Over a single scenario\n * \"never callable\" is the same statement its own table already made, one line\n * per capability, and a report that says everything twice is read once.\n */\nexport function neverCallableSection(entries: CapabilityReach[]): FindingSection {\n  const stuck = entries.filter((entry) => entry.best === \"disable\").length;\n  const hidden = entries.length - stuck;\n  return {\n    title: \"NEVER CALLABLE\",\n    gloss: \"every scenario mounted these, and none of them could call one\",\n    count: entries.length,\n    tone: \"notice\",\n    headers: [\"CAPABILITY\", \"BEST STATE\", \"WHY\"],\n    rows: entries.map((entry) => ({\n      cells: [\n        entry.capabilityId,\n        entry.best === \"disable\" ? \"disabled\" : \"hidden\",\n        entry.best === \"disable\"\n          ? (entry.note ?? \"the UI reported it unavailable in every scenario\")\n          : \"a policy hid it in every scenario\",\n      ],\n    })),\n    hint: [\n      ...(stuck > 0\n        ? [\n            \"add a scenario that reaches the state these need — an open drawer, a filled list, \" +\n              \"a selected row\",\n          ]\n        : []),\n      ...(hidden > 0\n        ? [\n            `add a scenario whose consumer carries the authority ${\n              stuck > 0 ? \"the hidden ones are\" : \"these are\"\n            } waiting for`,\n          ]\n        : []),\n    ].join(\"; \"),\n  };\n}\n"],"mappings":";;;;;;;AAuEO,SAAS,SAAS,MAAoC;AAC3D,SAAO,KAAK,OAAO,QAAQ,CAAC,UAAU,MAAM,IAAI;AAClD;AAEA,SAAS,OAAO,cAA8B;AAC5C,SAAO,aAAa,QAAQ,mBAAmB,EAAE;AACnD;AAEA,SAAS,OAAO,cAA8B;AAC5C,QAAM,eAAe,OAAO,YAAY;AACxC,QAAM,MAAM,aAAa,YAAY,GAAG;AACxC,SAAO,QAAQ,KAAK,eAAe,aAAa,MAAM,MAAM,CAAC;AAC/D;AAOA,SAAS,YAAY,QAAyC;AAC5D,QAAM,QAAkB,CAAC;AACzB,MAAI,OAAO,WAAY,OAAM,KAAK,YAAY;AAC9C,MAAI,OAAO,WAAY,OAAM,KAAK,YAAY;AAC9C,MAAI,OAAO,iBAAiB,QAAS,OAAM,KAAK,gBAAgB,OAAO,YAAY,EAAE;AACrF,SAAO;AACT;AAEA,SAAS,eAAe,WAA+C;AACrE,QAAM,QAAkB,CAAC;AACzB,MAAI,UAAU,iBAAiB,QAAS,OAAM,KAAK,gBAAgB,UAAU,YAAY,EAAE;AAC3F,aAAW,SAAS,UAAU,aAAa;AACzC,UAAM,KAAK,GAAG,MAAM,IAAI,SAAS,MAAM,SAAS,YAAY,EAAE,EAAE;AAAA,EAClE;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,aAAqE;AAC7F,QAAM,QAAQ,oBAAI,IAAmC;AACrD,aAAW,cAAc,YAAY,cAAc;AAEjD,UAAM,IAAI,GAAG,WAAW,YAAY,KAAS,WAAW,cAAc,IAAI,UAAU;AAAA,EACtF;AACA,SAAO;AACT;AAEO,SAAS,UAAU,QAAuB,UAAuB,CAAC,GAAgB;AACvF,QAAM,EAAE,UAAU,YAAY,IAAI;AAClC,QAAM,QAAQ,iBAAiB,WAAW;AAC1C,QAAM,SAA4B,CAAC;AACnC,QAAM,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,EAAE;AAErD,QAAM,SAAS,CACb,KACA,cACA,mBACkB;AAClB,UAAM,YAAY,MAAM,IAAI,GAAG,YAAY,KAAS,cAAc,EAAE;AACpE,QAAI,QAAQ,WAAW,WAAW;AAChC,UAAI,WAAW,UAAU;AACzB,UAAI,eAAe,UAAU;AAAA,IAC/B;AACA,WAAO;AAAA,EACT;AAEA,aAAW,aAAa,SAAS,YAAY;AAC3C,UAAM,OAAwB,CAAC;AAE/B,eAAW,eAAe,UAAU,cAAc;AAChD,WAAK;AAAA,QACH;AAAA,UACE,OAAO,aAAa,eAAe,QAAW,CAAC,GAAG,SAAS;AAAA,YACzD,OAAO;AAAA,YACP,QAAQ,YAAY;AAAA,UACtB,CAAC;AAAA,UACD,YAAY;AAAA,UACZ,UAAU;AAAA,QACZ;AAAA,MACF;AAAA,IACF;AACA,eAAW,UAAU,UAAU,SAAS;AACtC,WAAK;AAAA,QACH;AAAA,UACE,OAAO,QAAQ,UAAU,OAAO,QAAQ,YAAY,MAAM,GAAG,SAAS;AAAA,YACpE,OAAO,OAAO;AAAA,YACd,QAAQ,OAAO;AAAA,UACjB,CAAC;AAAA,UACD,OAAO;AAAA,UACP,UAAU;AAAA,QACZ;AAAA,MACF;AAAA,IACF;AAEA,WAAO,KAAK;AAAA,MACV,SACE,UAAU,eAAe,YACrB,UAAU,OACV,GAAG,UAAU,IAAI,IAAI,UAAU,UAAU;AAAA,MAC/C;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,SAAS,GAAG;AAClC,WAAO,KAAK;AAAA,MACV,SAAS;AAAA,MACT,MAAM,SAAS,WAAW;AAAA,QAAI,CAAC,cAC7B;AAAA,UACE;AAAA,YACE,cAAc,UAAU;AAAA,YACxB,MAAM,UAAU,YAAY,QAAQ,YAAY,EAAE;AAAA,YAClD,MAAM,OAAO,UAAU,WAAW;AAAA,YAClC,MAAM;AAAA,YACN,OAAO;AAAA,YACP,SAAS,UAAU,YAAY,WAAW;AAAA,YAC1C,aAAa,UAAU;AAAA,YACvB,GAAI,UAAU,oBAAoB,EAAE,QAAQ,UAAU,kBAAkB,IAAI,CAAC;AAAA,YAC7E,QAAQ,UAAU;AAAA,YAClB,OAAO,eAAe,SAAS;AAAA,YAC/B,MAAM,CAAC,UAAU,QAAQ,GAAG,eAAe,SAAS,CAAC;AAAA,YACrD,GAAI,QAAQ,UACR,EAAE,SAAS,EAAE,OAAO,UAAU,aAAa,QAAQ,UAAU,aAAa,EAAE,IAC5E,CAAC;AAAA,UACP;AAAA,UACA,UAAU;AAAA,UACV,UAAU;AAAA,QACZ;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAYA,QAAM,SAAS,YAAY,aAAa,OAAO,CAAC,MAAM,EAAE,YAAY,MAAM;AAC1E,MAAI,OAAO,SAAS,GAAG;AACrB,WAAO,KAAK;AAAA,MACV,SAAS;AAAA,MACT,MAAM,OAAO,IAAI,CAAC,gBAAgB;AAAA,QAChC,cAAc,WAAW;AAAA,QACzB,MAAM,OAAO,WAAW,YAAY;AAAA,QACpC,MAAM,OAAO,WAAW,YAAY;AAAA,QACpC,MAAM,WAAW;AAAA,QACjB,OAAO,WAAW;AAAA,QAClB,SAAS;AAAA,QACT,aAAa,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAYxB,OACE,WAAW,UAAU,eAAe,YAChC,CAAC,IACD,CAAC,IAAI,WAAW,UAAU,UAAU,EAAE;AAAA,QAC5C,MAAM,CAAC,GAAG,WAAW,UAAU,IAAI,IAAI,WAAW,UAAU,UAAU,EAAE;AAAA,QACxE,GAAI,QAAQ,UACR,EAAE,UAAU,WAAW,UAAU,cAAc,WAAW,aAAa,IACvE,CAAC;AAAA,MACP,EAAE;AAAA,IACJ,CAAC;AAAA,EACH;AAEA,aAAW,cAAc,YAAY,cAAc;AACjD,QAAI,WAAW,YAAY,SAAU,QAAO,YAAY;AAAA,aAC/C,WAAW,YAAY,UAAW,QAAO,YAAY;AAAA,QACzD,QAAO,UAAU;AAAA,EACxB;AAEA,SAAO;AAAA,IACL,UAAU,OAAO;AAAA,IACjB,GAAI,SAAS,OAAO,OAAO,EAAE,OAAO,SAAS,MAAM,KAAK,IAAI,CAAC;AAAA,IAC7D,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,IAC9C;AAAA,IACA;AAAA,IACA,YAAY,OAAO,cAAc,CAAC;AAAA,IAClC,WAAW,QAAQ,YAAY;AAAA,EACjC;AACF;AAEA,SAAS,OACP,YACA,MACA,QACA,OACA,SACA,SACe;AACf,SAAO;AAAA,IACL,cAAc,WAAW;AAAA,IACzB,MAAM,WAAW;AAAA,IACjB,MAAM,OAAO,WAAW,YAAY;AAAA,IACpC;AAAA,IACA,OAAO;AAAA,IACP,SAAS,WAAW,YAAY,WAAW;AAAA,IAC3C,aAAa,WAAW;AAAA,IACxB,GAAI,WAAW,oBAAoB,EAAE,QAAQ,WAAW,kBAAkB,IAAI,CAAC;AAAA,IAC/E,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,IAC3B;AAAA;AAAA,IAEA,MAAM,SAAS,CAAC,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,KAAK;AAAA,IACnD,GAAI,QAAQ,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvC;AACF;;;ACjRA,SAAS,gBAAgB;AAgDlB,SAAS,YAAY,MAAsB;AAChD,QAAM,MAAM,SAAS,QAAQ,IAAI,GAAG,IAAI;AACxC,SAAO,OAAO,CAAC,IAAI,WAAW,IAAI,IAAI,MAAM;AAC9C;AAEA,IAAM,aAAoC;AAAA,EACxC,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SAAS;AACX;AAoBO,SAAS,eAAe,SAAkC;AAC/D,QAAM,OAAoB;AAAA,IACxB,EAAE,OAAO,UAAU,MAAM,YAAY,QAAQ,UAAU,EAAE;AAAA,IACzD,EAAE,OAAO,SAAS,MAAM,WAAW,QAAQ,KAAK,EAAE;AAAA,IAClD;AAAA,MACE,OAAO;AAAA,MACP,MACE,QAAQ,SAAS,QAAQ,MAAM,SAAS,IACpC,GAAG,QAAQ,MAAM,KAAK,QAAK,CAAC,gDAC5B;AAAA,IACR;AAAA,EACF;AACA,MAAI,QAAQ,WAAW;AACrB,UAAM,WAAW,QAAQ,qBAAqB,QAAQ;AACtD,UAAM,QAAQ,QAAQ,UAAU,SAAS,SAAS;AAClD,SAAK,KAAK;AAAA,MACR,OAAO;AAAA,MACP,MACE,GAAG,QAAQ,GAAG,QAAQ,UAAU,MAAM,OAAO,SAAS,MAAM,KAAK,QAAQ,UAAU,MAAM,WACnF,QAAQ,UAAU,KAAK,IAAI,CAAC;AAAA,IACtC,CAAC;AAAA,EACH;AACA,SAAO;AACT;AASO,SAAS,YACd,WACA,UAA8D,CAAC,GAClD;AACb,QAAM,WAAW,UAAU,aAAa,OAAO,CAAC,MAAM,EAAE,eAAe,YAAY;AACnF,QAAM,gBAAgB,WAAW,SAAS;AAC1C,QAAM,kBAAkB,SAAS,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAC3E,QAAM,WAAW,YAAY,SAAS,EAAE,QAAQ,QAAQ,sBAAsB;AAE9E,SAAO;AAAA,IACL;AAAA,MACE,OAAO;AAAA,MACP,MAAM,cAAc,SAAS,IAAI,SAAS;AAAA,MAC1C,MACE,cAAc,SAAS,IACnB,qBAAgB,cAAc,MAAM,6BAClC,cAAc,WAAW,IAAI,MAAM,KACrC,KACA;AAAA,IACR;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,MAAM,GAAG,QAAQ,gCAA6B,SAAS,MAAM,sBAC3D,SAAS,WAAW,IAAI,KAAK,GAC/B;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,MACE,GAAG,UAAU,aAAa,QAAQ,UAAU,kBAAkB,IAAI,KAAK,GAAG,eACzE,UAAU,mBAAmB,IAC1B,SAAM,UAAU,gBAAgB,qCAC9B,UAAU,qBAAqB,IAAI,KAAK,GAC1C,cACA;AAAA,IACR;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,MACE,GAAG,eAAe,aAAa,oBAAoB,IAAI,KAAK,GAAG,qBAC9D,kBAAkB,IAAI,oCAAiC;AAAA,IAC5D;AAAA,IACA;AAAA;AAAA;AAAA,MAGE,OAAO;AAAA,MACP,GAAI,QAAQ,WAAW,QAAQ,uBAAuB,SAClD,EAAE,MAAM,OAAgB,IACxB,CAAC;AAAA,MACL,MACE,QAAQ,uBAAuB,SAC3B,GAAG,QAAQ,kBAAkB,sBAC3B,QAAQ,uBAAuB,IAAI,MAAM,KAC3C,KACA,QAAQ,UACN,mFACA;AAAA,IACV;AAAA,EACF;AACF;AAMO,SAAS,gBACd,OACA,SACA,WACA,oBACe;AACf,SAAO;AAAA,IACL,EAAE,OAAO,MAAM,eAAe,OAAO,EAAE;AAAA,IACvC,GAAI,YACA;AAAA,MACE;AAAA,QACE,OAAO;AAAA,QACP,MAAM,YAAY,WAAW;AAAA,UAC3B,GAAI,uBAAuB,SAAY,CAAC,IAAI,EAAE,mBAAmB;AAAA,UACjE,GAAI,QAAQ,UAAU,WAAW,CAAC,IAAI,EAAE,SAAS,KAAK;AAAA,QACxD,CAAC;AAAA,MACH;AAAA,IACF,IACA,CAAC;AAAA,EACP;AACF;AAkBO,SAAS,cAAc,QAAsC;AAClE,QAAM,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,EAAE;AAChD,aAAW,cAAc,OAAO,YAAY,aAAc,QAAO,WAAW,OAAO,KAAK;AACxF,SAAO;AAAA,IACL,UAAU,OAAO;AAAA,IACjB,GAAI,OAAO,SAAS,OAAO,OAAO,EAAE,OAAO,OAAO,SAAS,MAAM,KAAK,IAAI,CAAC;AAAA,IAC3E,UAAU,OAAO;AAAA,IACjB,UAAU,OAAO;AAAA,IACjB,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO,WAAW;AAAA,EAC9B;AACF;AAEA,IAAM,OAAO;AAGN,SAAS,cACd,OACA,UAAmC,CAAC,GACqB;AACzD,QAAM,UAAU,CAAC,YAAY,SAAS,YAAY,YAAY,UAAU,UAAU;AAClF,MAAI,QAAQ,UAAW,SAAQ,KAAK,UAAU;AAC9C,SAAO;AAAA,IACL;AAAA,IACA,MAAM,MAAM,IAAI,CAAC,WAAW;AAAA;AAAA;AAAA,MAG1B,GAAI,MAAM,SACN;AAAA,QACE,MAAM,GAAG,QAAQ,YAAY,KAAK,uBAAkB,GAClD,MAAM,WAAW,iCACnB;AAAA,MACF,IACA,CAAC;AAAA,MACL,OAAO;AAAA,QACL,MAAM;AAAA,QACN,MAAM,SAAS;AAAA,QACf,GAAI,MAAM,SACN,CAAC,MAAM,MAAM,MAAM,IAAI,IACvB;AAAA,UACE,OAAO,MAAM,QAAQ;AAAA,UACrB,OAAO,MAAM,QAAQ;AAAA,UACrB,OAAO,MAAM,MAAM;AAAA,UACnB,MAAM,WAAW,IAAI,OAAO,MAAM,QAAQ,IAAI;AAAA,QAChD;AAAA,QACJ,GAAI,QAAQ,YAAY,CAAC,MAAM,SAAS,kBAAmB,MAAM,YAAY,IAAK,IAAI,CAAC;AAAA,MACzF;AAAA,IACF,EAAE;AAAA,EACJ;AACF;AAsBA,IAAM,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,EAAE;AAEvC,SAAS,WACd,OACA,MACA,UACM;AACN,aAAW,OAAO,MAAM;AACtB,UAAM,UAAU,MAAM,IAAI,IAAI,YAAY;AAC1C,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,IAAI,cAAc;AAAA,QAC1B,cAAc,IAAI;AAAA,QAClB,MAAM,IAAI;AAAA,QACV,GAAI,IAAI,SAAS,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;AAAA,QAC3C,OAAO,IAAI;AAAA,QACX,GAAI,IAAI,SAAS,EAAE,MAAM,IAAI,OAAO,IAAI,CAAC;AAAA,QACzC,WAAW,CAAC,QAAQ;AAAA,MACtB,CAAC;AACD;AAAA,IACF;AACA,YAAQ,UAAU,KAAK,QAAQ;AAI/B,QAAI,CAAC,QAAQ,UAAU,IAAI,OAAQ,SAAQ,SAAS,IAAI;AACxD,QAAI,QAAQ,MAAM,WAAW,KAAK,IAAI,MAAM,SAAS,EAAG,SAAQ,QAAQ,IAAI;AAC5E,QAAI,KAAK,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,GAAG;AAC1C,cAAQ,OAAO,IAAI;AACnB,UAAI,IAAI,OAAQ,SAAQ,OAAO,IAAI;AAAA,UAC9B,QAAO,QAAQ;AAAA,IACtB;AAAA,EACF;AACF;AAEO,SAAS,cAAc,OAAwD;AACpF,SAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EACtB,OAAO,CAAC,UAAU,MAAM,SAAS,QAAQ,EACzC,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,cAAc,EAAE,YAAY,CAAC;AAChE;AAEA,IAAM,WAAW,oBAAI,IAAI,CAAC,mBAAmB,wBAAwB,aAAa,CAAC;AAoBnF,SAAS,OACP,SACM;AACN,QAAM,UAAU,QAAQ,OAAO,CAAC,UAAU,MAAM,YAAY,MAAM;AAClE,SAAO;AAAA,IACL,SAAS,QAAQ;AAAA,IACjB,aAAa,QAAQ,OAAO,CAAC,UAAU,MAAM,WAAW,aAAa,EAAE;AAAA,IACvE,UAAU,QAAQ,OAAO,CAAC,UAAU,MAAM,UAAU,SAAS,IAAI,MAAM,MAAM,CAAC,EAAE;AAAA,IAChF,WAAW,QAAQ;AAAA,MAAO,CAAC,UACzB,MAAM,MAAM,KAAK,CAAC,SAAS,KAAK,WAAW,eAAe,CAAC;AAAA,IAC7D,EAAE;AAAA,IACF,OAAO,QAAQ,OAAO,CAAC,UAAU,MAAM,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,QAAQ,CAAC,CAAC,EAAE;AAAA,EACxF;AACF;AAEA,SAAS,UAAU,MAAsB;AACvC,SAAO;AAAA,IACL,GAAI,KAAK,cAAc,IAAI,CAAC,GAAG,KAAK,WAAW,cAAc,IAAI,CAAC;AAAA,IAClE,GAAI,KAAK,WAAW,KAAK,cAAc,CAAC,GAAG,KAAK,WAAW,KAAK,WAAW,WAAW,IAAI,CAAC;AAAA,IAC3F,GAAI,KAAK,YAAY,IAAI,CAAC,GAAG,KAAK,SAAS,qBAAqB,IAAI,CAAC;AAAA,EACvE;AACF;AAMO,SAAS,WAAW,MAA+B;AACxD,QAAM,QAAQ,UAAU,OAAO,IAAI,CAAC;AACpC,SAAO,MAAM,KAAK,IAAI;AACxB;AAGA,SAAS,SAAS,OAA6C;AAC7D,QAAM,OAAO,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,SAAS,MAAM,KAAK,EAAE,CAAC;AAC3F,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,KAAK,YAAY,GAAG;AACtB,WAAO;AAAA,EACT;AACA,MAAI,MAAM,WAAW,GAAG;AACtB,WACE,0DAAuD,KAAK,OAAO,sCAC9B,KAAK,YAAY,IAAI,MAAM,KAAK;AAAA,EAEzE;AACA,SAAO,CAAC,GAAG,OAAO,GAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,KAAK,KAAK,mBAAmB,IAAI,CAAC,CAAE,EAAE,KAAK,QAAK;AAC7F;AAgBO,SAAS,mBAAmB,OAAyC;AAC1E,QAAM,OAAoB,CAAC;AAC3B,QAAM,WAAW,MAAM;AAEvB,MAAI,UAAU;AACZ,SAAK,KAAK;AAAA,MACR,OAAO;AAAA,MACP,MAAM,SAAS,UAAU,SAAS,IAAI,QAAQ;AAAA,MAC9C,MACE,GAAG,SAAS,OAAO,IAAI,SAAS,QAAQ,sBACtC,SAAS,aAAa,IAAI,MAAM,KAClC,cACC,SAAS,UAAU,SAAS,IAAI,SAAM,SAAS,UAAU,MAAM,eAAe,OAC9E,SAAS,QAAQ,SAAS,IAAI,SAAM,SAAS,QAAQ,MAAM,iBAAiB;AAAA,IACjF,CAAC;AAAA,EACH;AAEA,QAAM,UAAU,MAAM,MAAM;AAC5B,QAAM,OAAO,cAAc,MAAM,KAAK;AACtC,MAAI,UAAU,GAAG;AACf,UAAM,QAAQ,KAAK,OAAO,CAAC,UAAU,MAAM,SAAS,SAAS,EAAE;AAC/D,UAAM,MAAM;AAAA,MACV,GAAI,QAAQ,IAAI,CAAC,GAAG,KAAK,WAAW,IAAI,CAAC;AAAA,MACzC,GAAI,KAAK,SAAS,QAAQ,CAAC,GAAG,KAAK,SAAS,KAAK,SAAS,IAAI,CAAC;AAAA,IACjE,EAAE,KAAK,IAAI;AACX,SAAK,KAAK;AAAA,MACR,OAAO;AAAA,MACP,MAAM,KAAK,SAAS,IAAI,SAAS;AAAA,MACjC,MACE,GAAG,UAAU,KAAK,MAAM,IAAI,OAAO,qBACjC,YAAY,IAAI,SAAS,SAC3B,wCACC,KAAK,SAAS,IAAI,SAAM,KAAK,MAAM,oBAAoB,GAAG,MAAM;AAAA,IACrE,CAAC;AACD,SAAK,KAAK,EAAE,OAAO,QAAQ,MAAM,SAAS,MAAM,KAAK,EAAE,CAAC;AAAA,EAC1D;AAEA,MAAI,UAAU;AACZ,QAAI,SAAS,cAAc,SAAS,KAAK,SAAS,qBAAqB;AACrE,WAAK,KAAK;AAAA,QACR,OAAO;AAAA,QACP,MAAM,SAAS,mBAAmB,SAAS,IAAI,QAAQ;AAAA,QACvD,MACE,SAAS,mBAAmB,SAAS,IACjC,GAAG,SAAS,mBAAmB,MAAM,qBACnC,SAAS,mBAAmB,WAAW,IAAI,SAAS,SACtD,mCACA,GAAG,SAAS,cAAc,MAAM,aAC9B,SAAS,cAAc,WAAW,IAAI,MAAM,KAC9C,WACE,SAAS,sBACL,6CACA,mEACN;AAAA,MACR,CAAC;AAAA,IACH;AACA,SAAK,KAAK;AAAA,MACR,OAAO;AAAA,MACP,MAAM,SAAS,WAAW,SAAS,IAAI,SAAS;AAAA,MAChD,MACE,SAAS,WAAW,SAAS,IACzB,GAAG,SAAS,WAAW,MAAM,oBAC3B,SAAS,WAAW,WAAW,IAAI,KAAK,GAC1C,yCACA,uBACE,SAAS,cAAc,SAAS,IAC5B,SAAM,SAAS,cAAc,MAAM,iBACnC,EACN;AAAA,IACR,CAAC;AAAA,EACH;AAEA,OAAK,KAAK;AAAA,IACR,OAAO;AAAA,IACP,MAAM,MAAM,WAAW,IAAI,QAAQ;AAAA,IACnC,MACE,GAAG,MAAM,UAAU,OAAO,CAAC,UAAU,CAAC,MAAM,MAAM,EAAE,MAAM,cACzD,MAAM,WAAW,IAAI,SAAM,MAAM,QAAQ,mBAAmB;AAAA,EACjE,CAAC;AAED,OAAK,KAAK,EAAE,OAAO,WAAW,MAAM,YAAY,KAAK,GAAG,MAAM,YAAY,KAAK,EAAE,CAAC;AAClF,SAAO;AACT;AAEA,SAAS,YAAY,OAAwC;AAC3D,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,MAAI,CAAC,MAAM,SAAU,QAAO;AAC5B,QAAM,QACJ,MAAM,SAAS,UAAU,WAAW,KACpC,MAAM,SAAS,WAAW,WAAW,KACrC,MAAM,SAAS,eAAe,WAAW,KACzC,MAAM,SAAS,qBAAqB,WAAW,KAC/C,MAAM,SAAS,mBAAmB,WAAW;AAC/C,SAAO,QAAQ,SAAS;AAC1B;AAGA,SAAS,YAAY,OAAoC;AACvD,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO;AAAA,EACT;AACA,QAAM,WAAW,MAAM;AACvB,MAAI,CAAC,UAAU;AACb,WAAO,MAAM,UAAU,YACnB,wFACA;AAAA,EACN;AACA,MAAI,SAAS,UAAU,SAAS,GAAG;AACjC,WAAO,GAAG,SAAS,UAAU,MAAM,sBACjC,SAAS,UAAU,WAAW,IAAI,SAAS,SAC7C;AAAA,EACF;AACA,MAAI,SAAS,WAAW,SAAS,GAAG;AAClC,WAAO;AAAA,EACT;AACA,SAAO,SAAS,QAAQ,SAAS,IAC7B,yEACA;AACN;AAMO,SAAS,iBACd,QACA,UAAmD,CAAC,GAClC;AAClB,QAAM,WAA6B,CAAC;AAEpC,MAAI,OAAO,UAAU,SAAS,GAAG;AAC/B,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO,OAAO,UAAU;AAAA,MACxB,SAAS,CAAC,cAAc,QAAQ;AAAA,MAChC,MAAM,OAAO,UAAU,IAAI,CAAC,WAAW;AAAA,QACrC,OAAO,CAAC,MAAM,cAAc,GAAG,MAAM,OAAO,IAAI,IAAI,MAAM,OAAO,IAAI,EAAE;AAAA,MACzE,EAAE;AAAA,MACF,MACE,yFACM,YAAY,OAAO,aAAa,CAAC;AAAA,IAC3C,CAAC;AAAA,EACH;AAEA,MAAI,OAAO,WAAW,SAAS,GAAG;AAChC,QAAI,CAAC,QAAQ,WAAW,QAAQ,QAAQ;AACtC,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO,OAAO,WAAW;AAAA,QACzB,MAAM;AAAA,QACN,OAAO,OAAO;AAAA,MAChB,CAAC;AAAA,IACH,OAAO;AACL,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO,GAAG,OAAO,WAAW,MAAM,qBAChC,OAAO,WAAW,WAAW,IAAI,UAAU,UAC7C;AAAA,QACA,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,OAAO,mBAAmB,SAAS,GAAG;AACxC,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO,OAAO,mBAAmB;AAAA,MACjC,OAAO,OAAO;AAAA,MACd,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,MAAI,OAAO,eAAe,SAAS,GAAG;AACpC,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO,OAAO,eAAe;AAAA,MAC7B,OAAO,OAAO;AAAA,MACd,MAAM,0BAA0B,YAAY,OAAO,aAAa,CAAC;AAAA,IACnE,CAAC;AAAA,EACH;AAEA,MAAI,OAAO,qBAAqB,SAAS,GAAG;AAC1C,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO,OAAO,qBAAqB;AAAA,MACnC,OAAO,OAAO;AAAA,MACd,MAAM,0BAA0B,YAAY,OAAO,mBAAmB,CAAC;AAAA,IACzE,CAAC;AAAA,EACH;AAEA,MAAI,OAAO,WAAW,SAAS,GAAG;AAChC,aAAS,KAAK,cAAc,OAAO,YAAY,OAAO,mBAAmB,CAAC;AAAA,EAC5E;AAEA,SAAO;AACT;AAYO,SAAS,cACd,SACA,eACgB;AAChB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ,QAAQ,CAAC,UAAU;AAAA,MAChC,GAAG,MAAM,OAAO,IAAI,IAAI,MAAM,OAAO,IAAI;AAAA,MACzC,OAAO,MAAM,QAAQ,6CAA6C;AAAA,MAClE,sBAAsB,UAAU,KAAK,CAAC;AAAA,IACxC,CAAC;AAAA,IACD,MAAM,gBACF,sDAAsD,YAAY,aAAa,CAAC,KAChF;AAAA,EACN;AACF;AAaO,SAAS,qBAAqB,SAA4C;AAC/E,QAAM,QAAQ,QAAQ,OAAO,CAAC,UAAU,MAAM,SAAS,SAAS,EAAE;AAClE,QAAM,SAAS,QAAQ,SAAS;AAChC,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO,QAAQ;AAAA,IACf,MAAM;AAAA,IACN,SAAS,CAAC,cAAc,cAAc,KAAK;AAAA,IAC3C,MAAM,QAAQ,IAAI,CAAC,WAAW;AAAA,MAC5B,OAAO;AAAA,QACL,MAAM;AAAA,QACN,MAAM,SAAS,YAAY,aAAa;AAAA,QACxC,MAAM,SAAS,YACV,MAAM,QAAQ,qDACf;AAAA,MACN;AAAA,IACF,EAAE;AAAA,IACF,MAAM;AAAA,MACJ,GAAI,QAAQ,IACR;AAAA,QACE;AAAA,MAEF,IACA,CAAC;AAAA,MACL,GAAI,SAAS,IACT;AAAA,QACE,uDACE,QAAQ,IAAI,wBAAwB,WACtC;AAAA,MACF,IACA,CAAC;AAAA,IACP,EAAE,KAAK,IAAI;AAAA,EACb;AACF;","names":[]}