@agent-surface/cli 0.12.1 → 0.14.0

package/README.md

@@ -49,10 +49,30 @@ agent-surface check [scenario]      # fail drift, gaps, rejections, stale scenar
 Every command covers all scenarios in the config unless you name one. `inspect` prints each in turn:
 
 ```text
-11 authored (upper bound) · 10 call sites across 21 files · 1 domain manifest capability
+SURFACE INSPECT
+Config      agent-surface.config.tsx
+Depth       full — the source is read and every scenario is mounted
+Scope       whole surface — no component-type prefix filter
+Scenarios   1 of 2 — admin
+
+SURFACE SUMMARY
+Reach       11/11 authored capabilities reached
+Callable    9/11 mounted capabilities are callable in at least one scenario · 2 never callable
+Risk        1 destructive · 1 confirmation-gated · 1 with bound input
+Domain      1 capability reached against the authoritative oRPC manifest
+Catalog     every call site read
+Scenarios   1 mounted
+Verdict     every authored capability is reached by a scenario
+
+STATIC CATALOG
+STATUS        COMPLETE — every capability identity resolved
+Capabilities  11 authored (upper bound) · 10 resolved call sites
+Program       21 files analyzed · 40 agent-surface implementation files excluded
+Metadata      5 call sites partially read · identity remains resolved
+Domain        1 manifest capability
 
 scenario admin  route /devices
-9 callable, 2 visible-disabled, 0 hidden
+9 callable, 2 visible-disabled, 0 hidden  ·  1 destructive, 1 confirmation-gated
 
 CAPABILITY                KIND         EFFECT       STATE     FLAGS
 app.navigation.goTo       action       navigation   callable  reversible
@@ -62,11 +82,9 @@ devices.drawer.close      action       local-state  disabled  reversible
 devices.table.sort        action       local-state  callable  idempotent · reversible
 devices.disable           procedure    destructive  disabled  confirmation:required · deviceIds bound+locked
     ⤷ Select at least one device first
-
-11 authored · 11 reached · 0 unreached · 1 scenario (admin)
 ```
 
-Every count names what it is relative to — the scenario always, the scope when one is active. A surface is a projection of one mounted context, never "the app".
+Summaries first, details after. The run header states what every number below it is relative to — the config, the depth, the scope, the scenarios — and prints before the mounts it will spend its time on. Each scenario's own table repeats the qualifier that is local to it: a surface is a projection of one mounted context, never "the app".
 
 `--detail` shows full capability, origin, and diagnostic detail; `--explain` and `--schemas` imply it.
 
@@ -110,8 +128,28 @@ A route nobody visits never registers, so it is in no snapshot and drifts agains
 UNREACHED — authored, and no scenario mounts it  (1)
 CAPABILITY                ORIGIN
 view:cov.unmounted.toCsv  Unmounted.tsx:26
+  → add a scenario that mounts them, delete the dead component, or record the decision in
+    .agent-surface/coverage-allow.json
+```
 
-3 authored · 2 reached · 1 unreached · 1 scenario (default)
+`check` says the same thing as a report — a verdict, the health matrix behind it, one row per scenario, then the findings and the commands that clear them:
+
+```text
+SURFACE CHECK  FAIL
+Config             agent-surface.config.tsx
+Depth              full — the source is read and every scenario is mounted
+Scope              whole surface — no component-type prefix filter
+
+Coverage    FAIL   2/3 authored capabilities reached · 1 unreached
+Catalog     PASS   all static sites resolved
+Domain      PASS   1 manifest capability reached
+Baselines   FAIL   1/2 scenario baselines current
+Runtime     PASS   2 scenarios mounted
+
+SCENARIOS  (2)
+SCENARIO   ROUTE     CALLABLE  DISABLED  HIDDEN  REJECTED  BASELINE
+admin      /devices  9         2         0       —         drift (1)
+anonymous  /devices  0         0         11      —         current
 ```
 
 `inspect` reports it and `snapshot` reports it; **`check` fails on it**. It also fails on an unread call site, because the catalog is `unreached`'s denominator and holes in it make that count a floor rather than an answer — pass `--allow-unresolved` to accept that knowingly, which still prints the gap. Adoption ratchets through a committed `.agent-surface/coverage-allow.json`, whose stale entries fail the command.

package/dist/bin.js

@@ -3,9 +3,11 @@ import {
   DEPTHS,
   findConfig,
   isDepth,
+  renderReportPlain,
   write,
   writeError
-} from "./chunk-QIVOZAWX.js";
+} from "./chunk-G7Z6PP6C.js";
+import "./chunk-LQUL4OIA.js";
 
 // src/bin.ts
 import { realpathSync } from "fs";
@@ -131,7 +133,7 @@ async function main(argv = process.argv.slice(2)) {
   const depth = values.depth;
   try {
     if (command === "init") {
-      const { runInit } = await import("./init-LFQ5R3G7.js");
+      const { runInit } = await import("./init-64GIHMKV.js");
       return await runInit({
         cwd: process.cwd(),
         ...values.tsconfig ? { tsconfig: values.tsconfig } : {},
@@ -158,7 +160,7 @@ async function main(argv = process.argv.slice(2)) {
       ...values["baseline-dir"] ? { baselineDir: values["baseline-dir"] } : {}
     };
     if (command === "inspect") {
-      const { runInspect } = await import("./inspect-XMDZBSK2.js");
+      const { runInspect } = await import("./inspect-6OZ6ZBKZ.js");
       return await runInspect({
         ...shared,
         ...values.detail ? { detail: true } : {},
@@ -167,10 +169,10 @@ async function main(argv = process.argv.slice(2)) {
       });
     }
     if (command === "snapshot") {
-      const { runSnapshot } = await import("./snapshot-FLXE5UC6.js");
+      const { runSnapshot } = await import("./snapshot-GTDFQTN2.js");
       return await runSnapshot(shared);
     }
-    const { runCheck } = await import("./check-POE5VRSE.js");
+    const { runCheck } = await import("./check-O7ENP4XP.js");
     return await runCheck({
       ...shared,
       ...values.detail ? { detail: true } : {},
@@ -229,14 +231,21 @@ function exitWhenWedged(code) {
     if (held.length > 0) {
       const kinds = [...new Set(held)].sort().join(", ");
       writeError(
-        [
-          "",
-          "PROCESS CLEANUP  WARN",
-          `Open handles  ${held.length} (${kinds})`,
-          "Impact        report complete; exit code unchanged; process exit forced",
-          "Likely cause  polling, websocket, or a cache timer created during mount",
-          `Exit          ${code}`
-        ].join("\n")
+        `
+${renderReportPlain([
+          {
+            title: "PROCESS CLEANUP  WARN",
+            rows: [
+              { label: "Open handles", text: `${held.length} (${kinds})` },
+              { label: "Impact", text: "report complete; exit code unchanged; process exit forced" },
+              {
+                label: "Likely cause",
+                text: "polling, websocket, or a cache timer created during mount"
+              },
+              { label: "Exit", text: String(code) }
+            ]
+          }
+        ])}`
       );
     }
     void flushOutput().then(() => process.exit(code));

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/bin.ts","../src/dom.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { realpathSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { parseArgs } from \"node:util\";\nimport { DEPTHS, isDepth } from \"./contract.js\";\nimport { installDom } from \"./dom.js\";\nimport { findConfig } from \"./load.js\";\nimport { writeError, write } from \"./output.js\";\n\nconst USAGE = `agent-surface — the agent surface your app exposes\n\nUsage\n  agent-surface init                     read the codebase, then scaffold a config\n  agent-surface inspect    [scenario]    what an agent can reach, and what it cannot\n  agent-surface snapshot   [scenario]    write/refresh the committed baseline\n  agent-surface check      [scenario]    fail on drift, or on a capability no scenario reaches\n\nEvery command covers all scenarios in the config unless you name one.\n\nDepth\n  --depth full          read the source AND mount the scenarios, and report the gap (default)\n  --depth static        read the source only — no Vite, no jsdom, no mount, no scenarios needed\n  --depth runtime       mount only — skip the TypeScript program on a repo wide enough to feel it\n\nOptions\n  --config <path>       path to agent-surface.config.* (default: nearest, searching upward)\n  --baseline-dir        where baselines live (default: .agent-surface next to the config)\n  --scope <prefix>      restrict to a component-type prefix (repeatable)\n  --detail              full capability, origin, and diagnostic detail\n  --explain             name the policies behind every decision (implies --detail)\n  --schemas             include input/output JSON Schemas (implies --detail)\n  --tsconfig <path>     tsconfig the source read uses (default: nearest to the config)\n  --allow-unresolved    check: do not fail on a call site that could not be read\n  --yes                 init: write without asking\n  --json                emit data instead of a rendered view\n  --plain               force plain text (implied when piped, or under CI / NO_COLOR)\n  -h, --help            show this\n  -v, --version         print the version\n\nExit codes are the contract: 0 clean, 1 a finding, 2 the command could not run.\n`;\n\nconst COMMANDS = [\"init\", \"inspect\", \"snapshot\", \"check\"];\n\n/** Commands that were cut, and where their answer went (0.11.0). */\nconst RETIRED: Record<string, string> = {\n  capabilities: \"agent-surface inspect --depth static\",\n  coverage: \"agent-surface inspect (or `check`, which now fails on the gap)\",\n};\n\nexport async function main(argv: string[] = process.argv.slice(2)): Promise<number> {\n  let parsed;\n  try {\n    parsed = parseArgs({\n      args: argv,\n      allowPositionals: true,\n      options: {\n        config: { type: \"string\" },\n        \"baseline-dir\": { type: \"string\" },\n        scope: { type: \"string\", multiple: true },\n        depth: { type: \"string\", default: \"full\" },\n        detail: { type: \"boolean\", default: false },\n        explain: { type: \"boolean\", default: false },\n        schemas: { type: \"boolean\", default: false },\n        tsconfig: { type: \"string\" },\n        \"allow-unresolved\": { type: \"boolean\", default: false },\n        yes: { type: \"boolean\", default: false },\n        json: { type: \"boolean\", default: false },\n        plain: { type: \"boolean\", default: false },\n        help: { type: \"boolean\", short: \"h\", default: false },\n        version: { type: \"boolean\", short: \"v\", default: false },\n      },\n    });\n  } catch (error) {\n    writeError(error instanceof Error ? error.message : String(error));\n    writeError(USAGE);\n    return 2;\n  }\n\n  const { values, positionals } = parsed;\n  if (values.help) {\n    write(USAGE);\n    return 0;\n  }\n  if (values.version) {\n    write(await readVersion());\n    return 0;\n  }\n\n  const [command, scenario] = positionals;\n  if (!command) {\n    write(USAGE);\n    return 2;\n  }\n  if (!COMMANDS.includes(command)) {\n    const moved = RETIRED[command];\n    writeError(\n      moved\n        ? `\"${command}\" was removed in 0.11 — its answer is now \\`${moved}\\`. ` +\n            \"The static catalog and the live projection are one command, so the gap between \" +\n            \"them is reported rather than left for whoever remembers to look.\"\n        : `unknown command \"${command}\"`,\n    );\n    if (!moved) writeError(USAGE);\n    return 2;\n  }\n\n  if (!isDepth(values.depth)) {\n    writeError(`--depth must be one of ${DEPTHS.join(\", \")} — got \"${values.depth}\"`);\n    return 2;\n  }\n  const depth = values.depth;\n\n  try {\n    if (command === \"init\") {\n      // Nothing to find and nothing to mount: `init` is the command that runs\n      // before a config exists.\n      const { runInit } = await import(\"./commands/init.js\");\n      return await runInit({\n        cwd: process.cwd(),\n        ...(values.tsconfig ? { tsconfig: values.tsconfig } : {}),\n        ...(values.yes ? { yes: true } : {}),\n        ...(values.plain ? { plain: true } : {}),\n      });\n    }\n\n    const configPath = values.config ?? findConfig();\n    if (!configPath) {\n      writeError(\n        \"no agent-surface.config.* found (searched upward from the working directory).\\n\" +\n          \"Run `agent-surface init`, or see https://agent-surface-docs.vercel.app/20-cli\",\n      );\n      return 2;\n    }\n\n    // A presentation surface needs a DOM to mount into, and react-dom reads\n    // these globals at import time — so this must happen before any app module\n    // loads. It stays installed for the life of the process, on purpose\n    // (see dom.ts).\n    //\n    // `--depth static` is the exception, and deliberately so: it reads the\n    // TypeScript program and mounts nothing, so it must not pay for — or be\n    // able to be affected by — a DOM it never renders into.\n    if (depth !== \"static\") installDom();\n\n    const shared = {\n      configPath,\n      depth,\n      ...(scenario ? { scenario } : {}),\n      ...(values.scope ? { scope: values.scope } : {}),\n      ...(values.tsconfig ? { tsconfig: values.tsconfig } : {}),\n      ...(values.json ? { json: true } : {}),\n      ...(values.plain ? { plain: true } : {}),\n      ...(values[\"baseline-dir\"] ? { baselineDir: values[\"baseline-dir\"] } : {}),\n    };\n\n    if (command === \"inspect\") {\n      const { runInspect } = await import(\"./commands/inspect.js\");\n      return await runInspect({\n        ...shared,\n        ...(values.detail ? { detail: true } : {}),\n        ...(values.explain ? { explain: true } : {}),\n        ...(values.schemas ? { schemas: true } : {}),\n      });\n    }\n    if (command === \"snapshot\") {\n      const { runSnapshot } = await import(\"./commands/snapshot.js\");\n      return await runSnapshot(shared);\n    }\n    const { runCheck } = await import(\"./commands/check.js\");\n    return await runCheck({\n      ...shared,\n      ...(values.detail ? { detail: true } : {}),\n      ...(values[\"allow-unresolved\"] ? { allowUnresolved: true } : {}),\n    });\n  } catch (error) {\n    writeError(error instanceof Error ? error.message : String(error));\n    if (error instanceof Error && error.stack && process.env[\"AGENT_SURFACE_DEBUG\"]) {\n      writeError(error.stack);\n    }\n    // `2` — the command could not run, as opposed to running and finding\n    // something. CI has to tell those apart: a gate that exits 1 both when the\n    // surface changed and when the tool never loaded the app is a gate whose\n    // green is the only signal worth anything, and whose red says nothing.\n    return 2;\n  }\n}\n\nasync function readVersion(): Promise<string> {\n  try {\n    const { readFileSync } = await import(\"node:fs\");\n    const path = fileURLToPath(new URL(\"../package.json\", import.meta.url));\n    return (JSON.parse(readFileSync(path, \"utf8\")) as { version: string }).version;\n  } catch {\n    return \"unknown\";\n  }\n}\n\n/**\n * Self-execute only as a binary; importing this module (tests) must not run it.\n * `argv[1]` is compared through `realpathSync` because package managers install\n * the bin as a symlink — comparing the raw path silently never matches, and the\n * CLI exits 0 having done nothing.\n */\nfunction invokedAsBinary(): boolean {\n  const entry = process.argv[1];\n  if (!entry) return false;\n  try {\n    return fileURLToPath(import.meta.url) === realpathSync(entry);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * How long a finished command is allowed to keep running before it is treated\n * as wedged. Costs a hung run one extra second; costs a healthy run nothing,\n * because a healthy run has already exited by then.\n */\nconst GRACE_MS = 1000;\n\n/**\n * What this process's own stdin/stdout/stderr are called, depending on where\n * they were pointed: a terminal, a `|`, or a `>`. None of the three holds the\n * event loop open — a clean run exits naturally through all of them — so when\n * something *else* has wedged the command they are still in the handle table,\n * and naming them would send the reader after the one thing that is not the\n * cause. Their own leak would be the CLI's bug to fix, not the app's to hear\n * about.\n */\nconst OWN_STDIO = new Set([\"TTYWrap\", \"PipeWrap\", \"FileWrap\"]);\n\n/** Resource types still holding the loop once the command is provably wedged. */\nfunction heldHandles(): string[] {\n  const active = process.getActiveResourcesInfo?.() ?? [];\n  return active.filter((resource) => !OWN_STDIO.has(resource));\n}\n\n/**\n * `process.exit()` discards whatever is still buffered on a pipe, so a\n * redirected run could lose its last lines — and redirected runs are the ones\n * that matter (`--json`, CI logs). Drain both streams first, but never wait\n * indefinitely: a reader that has stopped consuming must not turn a forced exit\n * back into the hang it exists to prevent.\n */\nasync function flushOutput(): Promise<void> {\n  const drained = Promise.all(\n    [process.stdout, process.stderr].map(\n      (stream) =>\n        new Promise<void>((resolve) => {\n          if (stream.writableLength === 0) resolve();\n          else stream.write(\"\", () => resolve());\n        }),\n    ),\n  );\n  const deadline = new Promise<void>((resolve) => {\n    setTimeout(resolve, 2000).unref();\n  });\n  await Promise.race([drained, deadline]);\n}\n\n/**\n * Ends the process, and says why it had to be ended when that is the case.\n *\n * The mount is an arbitrary React tree, not code written for a one-shot\n * process: a polling interval, a websocket, an animation loop or a data layer's\n * cache timer all keep Node's event loop alive long after the surface has been\n * rendered. Setting `process.exitCode` alone means such a command prints its\n * full, correct output and then appears to hang — with a successful exit code\n * already set, and nothing on screen to explain the wait (`AS-CLI-005`).\n *\n * The detector is the timer itself, not a reading of the handle table. An\n * unref'd timer does not hold the loop open, so a command with nothing left to\n * do exits naturally on `process.exitCode` and this never fires. Its firing is\n * therefore the diagnosis — this run *was* about to hang — and whatever it then\n * finds in the handle table is genuinely the cause. Reading the table eagerly\n * instead would blame the app for the CLI's own teardown: vite's dev server is\n * still closing its socket at the moment the last scenario is rendered, so\n * every healthy run would accuse its own app of leaking a `TCPServerWrap`.\n *\n * Naming the handles is the same move the package already makes for\n * capabilities: the invisible thing becomes inspectable. Exiting anyway is what\n * makes the tool usable unattended.\n */\nfunction exitWhenWedged(code: number): void {\n  process.exitCode = code;\n  setTimeout(() => {\n    const held = heldHandles();\n    if (held.length > 0) {\n      const kinds = [...new Set(held)].sort().join(\", \");\n      writeError(\n        [\n          \"\",\n          \"PROCESS CLEANUP  WARN\",\n          `Open handles  ${held.length} (${kinds})`,\n          \"Impact        report complete; exit code unchanged; process exit forced\",\n          \"Likely cause  polling, websocket, or a cache timer created during mount\",\n          `Exit          ${code}`,\n        ].join(\"\\n\"),\n      );\n    }\n    void flushOutput().then(() => process.exit(code));\n  }, GRACE_MS).unref();\n}\n\nif (invokedAsBinary()) {\n  main().then(\n    (code) => exitWhenWedged(code),\n    (error: unknown) => {\n      writeError(error instanceof Error ? error.message : String(error));\n      exitWhenWedged(1);\n    },\n  );\n}\n","import { JSDOM } from \"jsdom\";\n\n/**\n * A presentation surface only exists once components mount, and mounting needs\n * a DOM. Vitest gets one from its `jsdom` environment; a plain Node process has\n * to install one itself — *before* anything imports `react-dom`, which reads\n * these globals at module scope.\n *\n * Process-wide on purpose, and permanent: the app tree runs inside the\n * vite-node graph, which shares this realm's globals, and there is deliberately\n * no way to take the DOM back down — see the note on teardown below. Returning\n * nothing is the honest signature; an installer that handed back a disposer\n * doing nothing would read, at every call site, as cleanup that happens.\n */\nexport function installDom(url = \"http://localhost/\"): void {\n  const globals = globalThis as Record<string, unknown>;\n  if (typeof globals[\"document\"] !== \"undefined\") return;\n\n  const dom = new JSDOM(\"<!doctype html><html><body></body></html>\", {\n    url,\n    pretendToBeVisual: true,\n  });\n  const { window } = dom;\n\n  // Everything jsdom's window defines that this realm does not already have.\n  // Skipping existing keys matters: Node's own `fetch`, `URL` and timers are\n  // more capable than jsdom's shims, and clobbering them breaks app code.\n  for (const key of Object.getOwnPropertyNames(window)) {\n    if (key.startsWith(\"_\")) continue;\n    if (key in globals) continue;\n    const descriptor = Object.getOwnPropertyDescriptor(window, key);\n    if (!descriptor) continue;\n    Object.defineProperty(globals, key, descriptor);\n  }\n\n  for (const key of [\"window\", \"document\", \"navigator\"] as const) {\n    if (!(key in globals)) {\n      Object.defineProperty(globals, key, { value: window[key], configurable: true });\n    }\n  }\n}\n\n/**\n * There is deliberately no teardown, and the DOM is deliberately process-wide.\n *\n * `react-dom` captures `window`/`document` when it is first imported. Removing\n * the globals — or worse, calling `window.close()` — leaves that captured\n * reference pointing at a dead realm, so the *next* mount in the same process\n * fails in a way that looks nothing like its cause. A CLI invocation ends by\n * exiting (see `exitWhenWedged` in `bin.ts`), so there is nothing to reclaim; only\n * in-process callers (the test suite) run more than one command, and those are\n * exactly the ones this protects.\n */\n"],"mappings":";;;;;;;;;;AACA,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB;;;ACH1B,SAAS,aAAa;AAcf,SAAS,WAAW,MAAM,qBAA2B;AAC1D,QAAM,UAAU;AAChB,MAAI,OAAO,QAAQ,UAAU,MAAM,YAAa;AAEhD,QAAM,MAAM,IAAI,MAAM,6CAA6C;AAAA,IACjE;AAAA,IACA,mBAAmB;AAAA,EACrB,CAAC;AACD,QAAM,EAAE,OAAO,IAAI;AAKnB,aAAW,OAAO,OAAO,oBAAoB,MAAM,GAAG;AACpD,QAAI,IAAI,WAAW,GAAG,EAAG;AACzB,QAAI,OAAO,QAAS;AACpB,UAAM,aAAa,OAAO,yBAAyB,QAAQ,GAAG;AAC9D,QAAI,CAAC,WAAY;AACjB,WAAO,eAAe,SAAS,KAAK,UAAU;AAAA,EAChD;AAEA,aAAW,OAAO,CAAC,UAAU,YAAY,WAAW,GAAY;AAC9D,QAAI,EAAE,OAAO,UAAU;AACrB,aAAO,eAAe,SAAS,KAAK,EAAE,OAAO,OAAO,GAAG,GAAG,cAAc,KAAK,CAAC;AAAA,IAChF;AAAA,EACF;AACF;;;AD/BA,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiCd,IAAM,WAAW,CAAC,QAAQ,WAAW,YAAY,OAAO;AAGxD,IAAM,UAAkC;AAAA,EACtC,cAAc;AAAA,EACd,UAAU;AACZ;AAEA,eAAsB,KAAK,OAAiB,QAAQ,KAAK,MAAM,CAAC,GAAoB;AAClF,MAAI;AACJ,MAAI;AACF,aAAS,UAAU;AAAA,MACjB,MAAM;AAAA,MACN,kBAAkB;AAAA,MAClB,SAAS;AAAA,QACP,QAAQ,EAAE,MAAM,SAAS;AAAA,QACzB,gBAAgB,EAAE,MAAM,SAAS;AAAA,QACjC,OAAO,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,QACxC,OAAO,EAAE,MAAM,UAAU,SAAS,OAAO;AAAA,QACzC,QAAQ,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC1C,SAAS,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC3C,SAAS,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC3C,UAAU,EAAE,MAAM,SAAS;AAAA,QAC3B,oBAAoB,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACtD,KAAK,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACvC,MAAM,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACxC,OAAO,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACzC,MAAM,EAAE,MAAM,WAAW,OAAO,KAAK,SAAS,MAAM;AAAA,QACpD,SAAS,EAAE,MAAM,WAAW,OAAO,KAAK,SAAS,MAAM;AAAA,MACzD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,eAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,QAAQ,YAAY,IAAI;AAChC,MAAI,OAAO,MAAM;AACf,UAAM,KAAK;AACX,WAAO;AAAA,EACT;AACA,MAAI,OAAO,SAAS;AAClB,UAAM,MAAM,YAAY,CAAC;AACzB,WAAO;AAAA,EACT;AAEA,QAAM,CAAC,SAAS,QAAQ,IAAI;AAC5B,MAAI,CAAC,SAAS;AACZ,UAAM,KAAK;AACX,WAAO;AAAA,EACT;AACA,MAAI,CAAC,SAAS,SAAS,OAAO,GAAG;AAC/B,UAAM,QAAQ,QAAQ,OAAO;AAC7B;AAAA,MACE,QACI,IAAI,OAAO,oDAA+C,KAAK,wJAG/D,oBAAoB,OAAO;AAAA,IACjC;AACA,QAAI,CAAC,MAAO,YAAW,KAAK;AAC5B,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,QAAQ,OAAO,KAAK,GAAG;AAC1B,eAAW,0BAA0B,OAAO,KAAK,IAAI,CAAC,gBAAW,OAAO,KAAK,GAAG;AAChF,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,OAAO;AAErB,MAAI;AACF,QAAI,YAAY,QAAQ;AAGtB,YAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,oBAAoB;AACrD,aAAO,MAAM,QAAQ;AAAA,QACnB,KAAK,QAAQ,IAAI;AAAA,QACjB,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,QACvD,GAAI,OAAO,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;AAAA,QAClC,GAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,MACxC,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,OAAO,UAAU,WAAW;AAC/C,QAAI,CAAC,YAAY;AACf;AAAA,QACE;AAAA,MAEF;AACA,aAAO;AAAA,IACT;AAUA,QAAI,UAAU,SAAU,YAAW;AAEnC,UAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/B,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MAC9C,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MACvD,GAAI,OAAO,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAAA,MACpC,GAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,MACtC,GAAI,OAAO,cAAc,IAAI,EAAE,aAAa,OAAO,cAAc,EAAE,IAAI,CAAC;AAAA,IAC1E;AAEA,QAAI,YAAY,WAAW;AACzB,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,uBAAuB;AAC3D,aAAO,MAAM,WAAW;AAAA,QACtB,GAAG;AAAA,QACH,GAAI,OAAO,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,QACxC,GAAI,OAAO,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,QAC1C,GAAI,OAAO,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MAC5C,CAAC;AAAA,IACH;AACA,QAAI,YAAY,YAAY;AAC1B,YAAM,EAAE,YAAY,IAAI,MAAM,OAAO,wBAAwB;AAC7D,aAAO,MAAM,YAAY,MAAM;AAAA,IACjC;AACA,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,qBAAqB;AACvD,WAAO,MAAM,SAAS;AAAA,MACpB,GAAG;AAAA,MACH,GAAI,OAAO,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,MACxC,GAAI,OAAO,kBAAkB,IAAI,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAAA,IAChE,CAAC;AAAA,EACH,SAAS,OAAO;AACd,eAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,QAAI,iBAAiB,SAAS,MAAM,SAAS,QAAQ,IAAI,qBAAqB,GAAG;AAC/E,iBAAW,MAAM,KAAK;AAAA,IACxB;AAKA,WAAO;AAAA,EACT;AACF;AAEA,eAAe,cAA+B;AAC5C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,IAAS;AAC/C,UAAM,OAAO,cAAc,IAAI,IAAI,mBAAmB,YAAY,GAAG,CAAC;AACtE,WAAQ,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,EAA0B;AAAA,EACzE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQA,SAAS,kBAA2B;AAClC,QAAM,QAAQ,QAAQ,KAAK,CAAC;AAC5B,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,cAAc,YAAY,GAAG,MAAM,aAAa,KAAK;AAAA,EAC9D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,IAAM,WAAW;AAWjB,IAAM,YAAY,oBAAI,IAAI,CAAC,WAAW,YAAY,UAAU,CAAC;AAG7D,SAAS,cAAwB;AAC/B,QAAM,SAAS,QAAQ,yBAAyB,KAAK,CAAC;AACtD,SAAO,OAAO,OAAO,CAAC,aAAa,CAAC,UAAU,IAAI,QAAQ,CAAC;AAC7D;AASA,eAAe,cAA6B;AAC1C,QAAM,UAAU,QAAQ;AAAA,IACtB,CAAC,QAAQ,QAAQ,QAAQ,MAAM,EAAE;AAAA,MAC/B,CAAC,WACC,IAAI,QAAc,CAAC,YAAY;AAC7B,YAAI,OAAO,mBAAmB,EAAG,SAAQ;AAAA,YACpC,QAAO,MAAM,IAAI,MAAM,QAAQ,CAAC;AAAA,MACvC,CAAC;AAAA,IACL;AAAA,EACF;AACA,QAAM,WAAW,IAAI,QAAc,CAAC,YAAY;AAC9C,eAAW,SAAS,GAAI,EAAE,MAAM;AAAA,EAClC,CAAC;AACD,QAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;AACxC;AAyBA,SAAS,eAAe,MAAoB;AAC1C,UAAQ,WAAW;AACnB,aAAW,MAAM;AACf,UAAM,OAAO,YAAY;AACzB,QAAI,KAAK,SAAS,GAAG;AACnB,YAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI;AACjD;AAAA,QACE;AAAA,UACE;AAAA,UACA;AAAA,UACA,iBAAiB,KAAK,MAAM,KAAK,KAAK;AAAA,UACtC;AAAA,UACA;AAAA,UACA,iBAAiB,IAAI;AAAA,QACvB,EAAE,KAAK,IAAI;AAAA,MACb;AAAA,IACF;AACA,SAAK,YAAY,EAAE,KAAK,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,EAClD,GAAG,QAAQ,EAAE,MAAM;AACrB;AAEA,IAAI,gBAAgB,GAAG;AACrB,OAAK,EAAE;AAAA,IACL,CAAC,SAAS,eAAe,IAAI;AAAA,IAC7B,CAAC,UAAmB;AAClB,iBAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,qBAAe,CAAC;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/bin.ts","../src/dom.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { realpathSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { parseArgs } from \"node:util\";\nimport { DEPTHS, isDepth } from \"./contract.js\";\nimport { installDom } from \"./dom.js\";\nimport { findConfig } from \"./load.js\";\nimport { writeError, write } from \"./output.js\";\nimport { renderReportPlain } from \"./render/plain.js\";\n\nconst USAGE = `agent-surface — the agent surface your app exposes\n\nUsage\n  agent-surface init                     read the codebase, then scaffold a config\n  agent-surface inspect    [scenario]    what an agent can reach, and what it cannot\n  agent-surface snapshot   [scenario]    write/refresh the committed baseline\n  agent-surface check      [scenario]    fail on drift, or on a capability no scenario reaches\n\nEvery command covers all scenarios in the config unless you name one.\n\nDepth\n  --depth full          read the source AND mount the scenarios, and report the gap (default)\n  --depth static        read the source only — no Vite, no jsdom, no mount, no scenarios needed\n  --depth runtime       mount only — skip the TypeScript program on a repo wide enough to feel it\n\nOptions\n  --config <path>       path to agent-surface.config.* (default: nearest, searching upward)\n  --baseline-dir        where baselines live (default: .agent-surface next to the config)\n  --scope <prefix>      restrict to a component-type prefix (repeatable)\n  --detail              full capability, origin, and diagnostic detail\n  --explain             name the policies behind every decision (implies --detail)\n  --schemas             include input/output JSON Schemas (implies --detail)\n  --tsconfig <path>     tsconfig the source read uses (default: nearest to the config)\n  --allow-unresolved    check: do not fail on a call site that could not be read\n  --yes                 init: write without asking\n  --json                emit data instead of a rendered view\n  --plain               force plain text (implied when piped, or under CI / NO_COLOR)\n  -h, --help            show this\n  -v, --version         print the version\n\nExit codes are the contract: 0 clean, 1 a finding, 2 the command could not run.\n`;\n\nconst COMMANDS = [\"init\", \"inspect\", \"snapshot\", \"check\"];\n\n/** Commands that were cut, and where their answer went (0.11.0). */\nconst RETIRED: Record<string, string> = {\n  capabilities: \"agent-surface inspect --depth static\",\n  coverage: \"agent-surface inspect (or `check`, which now fails on the gap)\",\n};\n\nexport async function main(argv: string[] = process.argv.slice(2)): Promise<number> {\n  let parsed;\n  try {\n    parsed = parseArgs({\n      args: argv,\n      allowPositionals: true,\n      options: {\n        config: { type: \"string\" },\n        \"baseline-dir\": { type: \"string\" },\n        scope: { type: \"string\", multiple: true },\n        depth: { type: \"string\", default: \"full\" },\n        detail: { type: \"boolean\", default: false },\n        explain: { type: \"boolean\", default: false },\n        schemas: { type: \"boolean\", default: false },\n        tsconfig: { type: \"string\" },\n        \"allow-unresolved\": { type: \"boolean\", default: false },\n        yes: { type: \"boolean\", default: false },\n        json: { type: \"boolean\", default: false },\n        plain: { type: \"boolean\", default: false },\n        help: { type: \"boolean\", short: \"h\", default: false },\n        version: { type: \"boolean\", short: \"v\", default: false },\n      },\n    });\n  } catch (error) {\n    writeError(error instanceof Error ? error.message : String(error));\n    writeError(USAGE);\n    return 2;\n  }\n\n  const { values, positionals } = parsed;\n  if (values.help) {\n    write(USAGE);\n    return 0;\n  }\n  if (values.version) {\n    write(await readVersion());\n    return 0;\n  }\n\n  const [command, scenario] = positionals;\n  if (!command) {\n    write(USAGE);\n    return 2;\n  }\n  if (!COMMANDS.includes(command)) {\n    const moved = RETIRED[command];\n    writeError(\n      moved\n        ? `\"${command}\" was removed in 0.11 — its answer is now \\`${moved}\\`. ` +\n            \"The static catalog and the live projection are one command, so the gap between \" +\n            \"them is reported rather than left for whoever remembers to look.\"\n        : `unknown command \"${command}\"`,\n    );\n    if (!moved) writeError(USAGE);\n    return 2;\n  }\n\n  if (!isDepth(values.depth)) {\n    writeError(`--depth must be one of ${DEPTHS.join(\", \")} — got \"${values.depth}\"`);\n    return 2;\n  }\n  const depth = values.depth;\n\n  try {\n    if (command === \"init\") {\n      // Nothing to find and nothing to mount: `init` is the command that runs\n      // before a config exists.\n      const { runInit } = await import(\"./commands/init.js\");\n      return await runInit({\n        cwd: process.cwd(),\n        ...(values.tsconfig ? { tsconfig: values.tsconfig } : {}),\n        ...(values.yes ? { yes: true } : {}),\n        ...(values.plain ? { plain: true } : {}),\n      });\n    }\n\n    const configPath = values.config ?? findConfig();\n    if (!configPath) {\n      writeError(\n        \"no agent-surface.config.* found (searched upward from the working directory).\\n\" +\n          \"Run `agent-surface init`, or see https://agent-surface-docs.vercel.app/20-cli\",\n      );\n      return 2;\n    }\n\n    // A presentation surface needs a DOM to mount into, and react-dom reads\n    // these globals at import time — so this must happen before any app module\n    // loads. It stays installed for the life of the process, on purpose\n    // (see dom.ts).\n    //\n    // `--depth static` is the exception, and deliberately so: it reads the\n    // TypeScript program and mounts nothing, so it must not pay for — or be\n    // able to be affected by — a DOM it never renders into.\n    if (depth !== \"static\") installDom();\n\n    const shared = {\n      configPath,\n      depth,\n      ...(scenario ? { scenario } : {}),\n      ...(values.scope ? { scope: values.scope } : {}),\n      ...(values.tsconfig ? { tsconfig: values.tsconfig } : {}),\n      ...(values.json ? { json: true } : {}),\n      ...(values.plain ? { plain: true } : {}),\n      ...(values[\"baseline-dir\"] ? { baselineDir: values[\"baseline-dir\"] } : {}),\n    };\n\n    if (command === \"inspect\") {\n      const { runInspect } = await import(\"./commands/inspect.js\");\n      return await runInspect({\n        ...shared,\n        ...(values.detail ? { detail: true } : {}),\n        ...(values.explain ? { explain: true } : {}),\n        ...(values.schemas ? { schemas: true } : {}),\n      });\n    }\n    if (command === \"snapshot\") {\n      const { runSnapshot } = await import(\"./commands/snapshot.js\");\n      return await runSnapshot(shared);\n    }\n    const { runCheck } = await import(\"./commands/check.js\");\n    return await runCheck({\n      ...shared,\n      ...(values.detail ? { detail: true } : {}),\n      ...(values[\"allow-unresolved\"] ? { allowUnresolved: true } : {}),\n    });\n  } catch (error) {\n    writeError(error instanceof Error ? error.message : String(error));\n    if (error instanceof Error && error.stack && process.env[\"AGENT_SURFACE_DEBUG\"]) {\n      writeError(error.stack);\n    }\n    // `2` — the command could not run, as opposed to running and finding\n    // something. CI has to tell those apart: a gate that exits 1 both when the\n    // surface changed and when the tool never loaded the app is a gate whose\n    // green is the only signal worth anything, and whose red says nothing.\n    return 2;\n  }\n}\n\nasync function readVersion(): Promise<string> {\n  try {\n    const { readFileSync } = await import(\"node:fs\");\n    const path = fileURLToPath(new URL(\"../package.json\", import.meta.url));\n    return (JSON.parse(readFileSync(path, \"utf8\")) as { version: string }).version;\n  } catch {\n    return \"unknown\";\n  }\n}\n\n/**\n * Self-execute only as a binary; importing this module (tests) must not run it.\n * `argv[1]` is compared through `realpathSync` because package managers install\n * the bin as a symlink — comparing the raw path silently never matches, and the\n * CLI exits 0 having done nothing.\n */\nfunction invokedAsBinary(): boolean {\n  const entry = process.argv[1];\n  if (!entry) return false;\n  try {\n    return fileURLToPath(import.meta.url) === realpathSync(entry);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * How long a finished command is allowed to keep running before it is treated\n * as wedged. Costs a hung run one extra second; costs a healthy run nothing,\n * because a healthy run has already exited by then.\n */\nconst GRACE_MS = 1000;\n\n/**\n * What this process's own stdin/stdout/stderr are called, depending on where\n * they were pointed: a terminal, a `|`, or a `>`. None of the three holds the\n * event loop open — a clean run exits naturally through all of them — so when\n * something *else* has wedged the command they are still in the handle table,\n * and naming them would send the reader after the one thing that is not the\n * cause. Their own leak would be the CLI's bug to fix, not the app's to hear\n * about.\n */\nconst OWN_STDIO = new Set([\"TTYWrap\", \"PipeWrap\", \"FileWrap\"]);\n\n/** Resource types still holding the loop once the command is provably wedged. */\nfunction heldHandles(): string[] {\n  const active = process.getActiveResourcesInfo?.() ?? [];\n  return active.filter((resource) => !OWN_STDIO.has(resource));\n}\n\n/**\n * `process.exit()` discards whatever is still buffered on a pipe, so a\n * redirected run could lose its last lines — and redirected runs are the ones\n * that matter (`--json`, CI logs). Drain both streams first, but never wait\n * indefinitely: a reader that has stopped consuming must not turn a forced exit\n * back into the hang it exists to prevent.\n */\nasync function flushOutput(): Promise<void> {\n  const drained = Promise.all(\n    [process.stdout, process.stderr].map(\n      (stream) =>\n        new Promise<void>((resolve) => {\n          if (stream.writableLength === 0) resolve();\n          else stream.write(\"\", () => resolve());\n        }),\n    ),\n  );\n  const deadline = new Promise<void>((resolve) => {\n    setTimeout(resolve, 2000).unref();\n  });\n  await Promise.race([drained, deadline]);\n}\n\n/**\n * Ends the process, and says why it had to be ended when that is the case.\n *\n * The mount is an arbitrary React tree, not code written for a one-shot\n * process: a polling interval, a websocket, an animation loop or a data layer's\n * cache timer all keep Node's event loop alive long after the surface has been\n * rendered. Setting `process.exitCode` alone means such a command prints its\n * full, correct output and then appears to hang — with a successful exit code\n * already set, and nothing on screen to explain the wait (`AS-CLI-005`).\n *\n * The detector is the timer itself, not a reading of the handle table. An\n * unref'd timer does not hold the loop open, so a command with nothing left to\n * do exits naturally on `process.exitCode` and this never fires. Its firing is\n * therefore the diagnosis — this run *was* about to hang — and whatever it then\n * finds in the handle table is genuinely the cause. Reading the table eagerly\n * instead would blame the app for the CLI's own teardown: vite's dev server is\n * still closing its socket at the moment the last scenario is rendered, so\n * every healthy run would accuse its own app of leaking a `TCPServerWrap`.\n *\n * Naming the handles is the same move the package already makes for\n * capabilities: the invisible thing becomes inspectable. Exiting anyway is what\n * makes the tool usable unattended.\n */\nfunction exitWhenWedged(code: number): void {\n  process.exitCode = code;\n  setTimeout(() => {\n    const held = heldHandles();\n    if (held.length > 0) {\n      const kinds = [...new Set(held)].sort().join(\", \");\n      // Rendered plain, and through the report's own grid: this is a block of\n      // the report, so it has to line up with one — but it is written during a\n      // forced teardown, after the presenter has drawn its last frame and\n      // unmounted, and opening a new live frame there is how a command that was\n      // about to be killed hangs instead.\n      writeError(\n        `\\n${renderReportPlain([\n          {\n            title: \"PROCESS CLEANUP  WARN\",\n            rows: [\n              { label: \"Open handles\", text: `${held.length} (${kinds})` },\n              { label: \"Impact\", text: \"report complete; exit code unchanged; process exit forced\" },\n              {\n                label: \"Likely cause\",\n                text: \"polling, websocket, or a cache timer created during mount\",\n              },\n              { label: \"Exit\", text: String(code) },\n            ],\n          },\n        ])}`,\n      );\n    }\n    void flushOutput().then(() => process.exit(code));\n  }, GRACE_MS).unref();\n}\n\nif (invokedAsBinary()) {\n  main().then(\n    (code) => exitWhenWedged(code),\n    (error: unknown) => {\n      writeError(error instanceof Error ? error.message : String(error));\n      exitWhenWedged(1);\n    },\n  );\n}\n","import { JSDOM } from \"jsdom\";\n\n/**\n * A presentation surface only exists once components mount, and mounting needs\n * a DOM. Vitest gets one from its `jsdom` environment; a plain Node process has\n * to install one itself — *before* anything imports `react-dom`, which reads\n * these globals at module scope.\n *\n * Process-wide on purpose, and permanent: the app tree runs inside the\n * vite-node graph, which shares this realm's globals, and there is deliberately\n * no way to take the DOM back down — see the note on teardown below. Returning\n * nothing is the honest signature; an installer that handed back a disposer\n * doing nothing would read, at every call site, as cleanup that happens.\n */\nexport function installDom(url = \"http://localhost/\"): void {\n  const globals = globalThis as Record<string, unknown>;\n  if (typeof globals[\"document\"] !== \"undefined\") return;\n\n  const dom = new JSDOM(\"<!doctype html><html><body></body></html>\", {\n    url,\n    pretendToBeVisual: true,\n  });\n  const { window } = dom;\n\n  // Everything jsdom's window defines that this realm does not already have.\n  // Skipping existing keys matters: Node's own `fetch`, `URL` and timers are\n  // more capable than jsdom's shims, and clobbering them breaks app code.\n  for (const key of Object.getOwnPropertyNames(window)) {\n    if (key.startsWith(\"_\")) continue;\n    if (key in globals) continue;\n    const descriptor = Object.getOwnPropertyDescriptor(window, key);\n    if (!descriptor) continue;\n    Object.defineProperty(globals, key, descriptor);\n  }\n\n  for (const key of [\"window\", \"document\", \"navigator\"] as const) {\n    if (!(key in globals)) {\n      Object.defineProperty(globals, key, { value: window[key], configurable: true });\n    }\n  }\n}\n\n/**\n * There is deliberately no teardown, and the DOM is deliberately process-wide.\n *\n * `react-dom` captures `window`/`document` when it is first imported. Removing\n * the globals — or worse, calling `window.close()` — leaves that captured\n * reference pointing at a dead realm, so the *next* mount in the same process\n * fails in a way that looks nothing like its cause. A CLI invocation ends by\n * exiting (see `exitWhenWedged` in `bin.ts`), so there is nothing to reclaim; only\n * in-process callers (the test suite) run more than one command, and those are\n * exactly the ones this protects.\n */\n"],"mappings":";;;;;;;;;;;;AACA,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB;;;ACH1B,SAAS,aAAa;AAcf,SAAS,WAAW,MAAM,qBAA2B;AAC1D,QAAM,UAAU;AAChB,MAAI,OAAO,QAAQ,UAAU,MAAM,YAAa;AAEhD,QAAM,MAAM,IAAI,MAAM,6CAA6C;AAAA,IACjE;AAAA,IACA,mBAAmB;AAAA,EACrB,CAAC;AACD,QAAM,EAAE,OAAO,IAAI;AAKnB,aAAW,OAAO,OAAO,oBAAoB,MAAM,GAAG;AACpD,QAAI,IAAI,WAAW,GAAG,EAAG;AACzB,QAAI,OAAO,QAAS;AACpB,UAAM,aAAa,OAAO,yBAAyB,QAAQ,GAAG;AAC9D,QAAI,CAAC,WAAY;AACjB,WAAO,eAAe,SAAS,KAAK,UAAU;AAAA,EAChD;AAEA,aAAW,OAAO,CAAC,UAAU,YAAY,WAAW,GAAY;AAC9D,QAAI,EAAE,OAAO,UAAU;AACrB,aAAO,eAAe,SAAS,KAAK,EAAE,OAAO,OAAO,GAAG,GAAG,cAAc,KAAK,CAAC;AAAA,IAChF;AAAA,EACF;AACF;;;AD9BA,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiCd,IAAM,WAAW,CAAC,QAAQ,WAAW,YAAY,OAAO;AAGxD,IAAM,UAAkC;AAAA,EACtC,cAAc;AAAA,EACd,UAAU;AACZ;AAEA,eAAsB,KAAK,OAAiB,QAAQ,KAAK,MAAM,CAAC,GAAoB;AAClF,MAAI;AACJ,MAAI;AACF,aAAS,UAAU;AAAA,MACjB,MAAM;AAAA,MACN,kBAAkB;AAAA,MAClB,SAAS;AAAA,QACP,QAAQ,EAAE,MAAM,SAAS;AAAA,QACzB,gBAAgB,EAAE,MAAM,SAAS;AAAA,QACjC,OAAO,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,QACxC,OAAO,EAAE,MAAM,UAAU,SAAS,OAAO;AAAA,QACzC,QAAQ,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC1C,SAAS,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC3C,SAAS,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC3C,UAAU,EAAE,MAAM,SAAS;AAAA,QAC3B,oBAAoB,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACtD,KAAK,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACvC,MAAM,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACxC,OAAO,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACzC,MAAM,EAAE,MAAM,WAAW,OAAO,KAAK,SAAS,MAAM;AAAA,QACpD,SAAS,EAAE,MAAM,WAAW,OAAO,KAAK,SAAS,MAAM;AAAA,MACzD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,eAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,QAAQ,YAAY,IAAI;AAChC,MAAI,OAAO,MAAM;AACf,UAAM,KAAK;AACX,WAAO;AAAA,EACT;AACA,MAAI,OAAO,SAAS;AAClB,UAAM,MAAM,YAAY,CAAC;AACzB,WAAO;AAAA,EACT;AAEA,QAAM,CAAC,SAAS,QAAQ,IAAI;AAC5B,MAAI,CAAC,SAAS;AACZ,UAAM,KAAK;AACX,WAAO;AAAA,EACT;AACA,MAAI,CAAC,SAAS,SAAS,OAAO,GAAG;AAC/B,UAAM,QAAQ,QAAQ,OAAO;AAC7B;AAAA,MACE,QACI,IAAI,OAAO,oDAA+C,KAAK,wJAG/D,oBAAoB,OAAO;AAAA,IACjC;AACA,QAAI,CAAC,MAAO,YAAW,KAAK;AAC5B,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,QAAQ,OAAO,KAAK,GAAG;AAC1B,eAAW,0BAA0B,OAAO,KAAK,IAAI,CAAC,gBAAW,OAAO,KAAK,GAAG;AAChF,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,OAAO;AAErB,MAAI;AACF,QAAI,YAAY,QAAQ;AAGtB,YAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,oBAAoB;AACrD,aAAO,MAAM,QAAQ;AAAA,QACnB,KAAK,QAAQ,IAAI;AAAA,QACjB,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,QACvD,GAAI,OAAO,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;AAAA,QAClC,GAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,MACxC,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,OAAO,UAAU,WAAW;AAC/C,QAAI,CAAC,YAAY;AACf;AAAA,QACE;AAAA,MAEF;AACA,aAAO;AAAA,IACT;AAUA,QAAI,UAAU,SAAU,YAAW;AAEnC,UAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/B,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MAC9C,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MACvD,GAAI,OAAO,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAAA,MACpC,GAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,MACtC,GAAI,OAAO,cAAc,IAAI,EAAE,aAAa,OAAO,cAAc,EAAE,IAAI,CAAC;AAAA,IAC1E;AAEA,QAAI,YAAY,WAAW;AACzB,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,uBAAuB;AAC3D,aAAO,MAAM,WAAW;AAAA,QACtB,GAAG;AAAA,QACH,GAAI,OAAO,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,QACxC,GAAI,OAAO,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,QAC1C,GAAI,OAAO,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MAC5C,CAAC;AAAA,IACH;AACA,QAAI,YAAY,YAAY;AAC1B,YAAM,EAAE,YAAY,IAAI,MAAM,OAAO,wBAAwB;AAC7D,aAAO,MAAM,YAAY,MAAM;AAAA,IACjC;AACA,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,qBAAqB;AACvD,WAAO,MAAM,SAAS;AAAA,MACpB,GAAG;AAAA,MACH,GAAI,OAAO,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,MACxC,GAAI,OAAO,kBAAkB,IAAI,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAAA,IAChE,CAAC;AAAA,EACH,SAAS,OAAO;AACd,eAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,QAAI,iBAAiB,SAAS,MAAM,SAAS,QAAQ,IAAI,qBAAqB,GAAG;AAC/E,iBAAW,MAAM,KAAK;AAAA,IACxB;AAKA,WAAO;AAAA,EACT;AACF;AAEA,eAAe,cAA+B;AAC5C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,IAAS;AAC/C,UAAM,OAAO,cAAc,IAAI,IAAI,mBAAmB,YAAY,GAAG,CAAC;AACtE,WAAQ,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,EAA0B;AAAA,EACzE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQA,SAAS,kBAA2B;AAClC,QAAM,QAAQ,QAAQ,KAAK,CAAC;AAC5B,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,cAAc,YAAY,GAAG,MAAM,aAAa,KAAK;AAAA,EAC9D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,IAAM,WAAW;AAWjB,IAAM,YAAY,oBAAI,IAAI,CAAC,WAAW,YAAY,UAAU,CAAC;AAG7D,SAAS,cAAwB;AAC/B,QAAM,SAAS,QAAQ,yBAAyB,KAAK,CAAC;AACtD,SAAO,OAAO,OAAO,CAAC,aAAa,CAAC,UAAU,IAAI,QAAQ,CAAC;AAC7D;AASA,eAAe,cAA6B;AAC1C,QAAM,UAAU,QAAQ;AAAA,IACtB,CAAC,QAAQ,QAAQ,QAAQ,MAAM,EAAE;AAAA,MAC/B,CAAC,WACC,IAAI,QAAc,CAAC,YAAY;AAC7B,YAAI,OAAO,mBAAmB,EAAG,SAAQ;AAAA,YACpC,QAAO,MAAM,IAAI,MAAM,QAAQ,CAAC;AAAA,MACvC,CAAC;AAAA,IACL;AAAA,EACF;AACA,QAAM,WAAW,IAAI,QAAc,CAAC,YAAY;AAC9C,eAAW,SAAS,GAAI,EAAE,MAAM;AAAA,EAClC,CAAC;AACD,QAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;AACxC;AAyBA,SAAS,eAAe,MAAoB;AAC1C,UAAQ,WAAW;AACnB,aAAW,MAAM;AACf,UAAM,OAAO,YAAY;AACzB,QAAI,KAAK,SAAS,GAAG;AACnB,YAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI;AAMjD;AAAA,QACE;AAAA,EAAK,kBAAkB;AAAA,UACrB;AAAA,YACE,OAAO;AAAA,YACP,MAAM;AAAA,cACJ,EAAE,OAAO,gBAAgB,MAAM,GAAG,KAAK,MAAM,KAAK,KAAK,IAAI;AAAA,cAC3D,EAAE,OAAO,UAAU,MAAM,4DAA4D;AAAA,cACrF;AAAA,gBACE,OAAO;AAAA,gBACP,MAAM;AAAA,cACR;AAAA,cACA,EAAE,OAAO,QAAQ,MAAM,OAAO,IAAI,EAAE;AAAA,YACtC;AAAA,UACF;AAAA,QACF,CAAC,CAAC;AAAA,MACJ;AAAA,IACF;AACA,SAAK,YAAY,EAAE,KAAK,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,EAClD,GAAG,QAAQ,EAAE,MAAM;AACrB;AAEA,IAAI,gBAAgB,GAAG;AACrB,OAAK,EAAE;AAAA,IACL,CAAC,SAAS,eAAe,IAAI;AAAA,IAC7B,CAAC,UAAmB;AAClB,iBAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,qBAAe,CAAC;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}

package/dist/check-O7ENP4XP.js

@@ -0,0 +1,259 @@
+import {
+  coverageReport,
+  scenarioBaseline
+} from "./chunk-JR4GESLI.js";
+import {
+  createPresenter,
+  joinCoverage,
+  mountScenarios,
+  readInventory
+} from "./chunk-YUT4FVQQ.js";
+import {
+  SCENARIO_MANIFEST_FILE,
+  UsageError,
+  annotate,
+  baselinePath,
+  diff,
+  readBaseline,
+  readScenarioManifest,
+  renderDriftPlain,
+  write
+} from "./chunk-G7Z6PP6C.js";
+import {
+  ALLOWLIST_FILE,
+  READING_SOURCE,
+  UNREAD_ALLOWLIST_FILE,
+  checkOverviewParts,
+  coverageExitCode,
+  coverageSections,
+  displayPath,
+  failureSection,
+  mountingLabel,
+  noVerdictSection,
+  scenarioStats
+} from "./chunk-LQUL4OIA.js";
+
+// src/commands/check.ts
+import { existsSync, readdirSync } from "fs";
+async function runCheck(options) {
+  if (options.depth === "static") {
+    throw new UsageError(
+      "check --depth static has nothing to compare \u2014 a baseline is a projection, and at this depth nothing is mounted. Use --depth runtime for drift alone, or full for both."
+    );
+  }
+  const analysis = {
+    configPath: options.configPath,
+    depth: options.depth,
+    ...options.scenario ? { scenario: options.scenario } : {},
+    ...options.scope ? { scope: options.scope } : {},
+    ...options.tsconfig ? { tsconfig: options.tsconfig } : {},
+    ...options.baselineDir ? { baselineDir: options.baselineDir } : {}
+  };
+  const present = await createPresenter(options);
+  if (!options.json) await present.wait(READING_SOURCE);
+  const inventory = readInventory(analysis);
+  let scenarios = [];
+  let mountedCount = 0;
+  const runtime = await mountScenarios(analysis, {
+    onPlan: async (plan) => {
+      scenarios = plan.scenarios;
+      if (scenarios.length > 0) await present.wait(mountingLabel(scenarios, 0));
+    },
+    onEach: async () => {
+      mountedCount += 1;
+      if (mountedCount < scenarios.length) {
+        await present.wait(mountingLabel(scenarios, mountedCount));
+      }
+    }
+  });
+  present.settle();
+  if (!runtime) throw new UsageError("check needs a mount, and this depth performs none");
+  const drifted = [];
+  for (const result of runtime.results) {
+    const path = baselinePath(runtime.baselineDir, result.scenario);
+    const expected = readBaseline(path);
+    if (expected === void 0) {
+      drifted.push({ scenario: result.scenario, missingBaseline: true, entries: [] });
+      continue;
+    }
+    const actual = scenarioBaseline(result);
+    const entries = annotate(diff(expected, actual), actual, expected);
+    if (entries.length > 0) drifted.push({ scenario: result.scenario, entries });
+  }
+  const committedScenarios = readScenarioManifest(runtime.baselineDir);
+  const declared = [...runtime.declaredScenarios].sort();
+  const scenarioManifestMismatch = committedScenarios === void 0 || JSON.stringify(committedScenarios) !== JSON.stringify(declared);
+  const reserved = /* @__PURE__ */ new Set([SCENARIO_MANIFEST_FILE, ALLOWLIST_FILE, UNREAD_ALLOWLIST_FILE]);
+  const staleBaselineFiles = (existsSync(runtime.baselineDir) ? readdirSync(runtime.baselineDir, { withFileTypes: true }) : []).filter((entry) => entry.isFile() && entry.name.endsWith(".json") && !reserved.has(entry.name)).map((entry) => entry.name.slice(0, -5)).filter((scenario) => !runtime.declaredScenarios.includes(scenario)).sort();
+  const rejected = runtime.results.filter((result) => result.rejections.length > 0).map((result) => ({ scenario: result.scenario, rejections: result.rejections }));
+  const coverage = joinCoverage(inventory, runtime, analysis);
+  const coverageFailed = coverage !== void 0 && coverageExitCode(coverage, { allowUnresolved: options.allowUnresolved === true }) !== 0;
+  const couldNotRun = runtime.failures.length > 0;
+  const ok = drifted.length === 0 && !coverageFailed && !couldNotRun && rejected.length === 0 && !scenarioManifestMismatch && staleBaselineFiles.length === 0;
+  if (options.json) {
+    write(
+      JSON.stringify(
+        {
+          ok,
+          drifted,
+          failures: runtime.failures,
+          rejected,
+          scenarioManifest: {
+            expected: declared,
+            committed: committedScenarios ?? null,
+            staleBaselines: staleBaselineFiles
+          },
+          coverage: coverageReport(coverage)
+        },
+        null,
+        2
+      )
+    );
+    return couldNotRun ? 2 : ok ? 0 : 1;
+  }
+  const missing = drifted.filter((entry) => entry.missingBaseline);
+  const changed = drifted.filter((entry) => !entry.missingBaseline);
+  const baselineOf = (scenario) => {
+    const entry = drifted.find((candidate) => candidate.scenario === scenario);
+    if (!entry) return "current";
+    if (entry.missingBaseline) return "missing";
+    return `drift (${entry.entries.length})`;
+  };
+  const stats = runtime.scenarios.map((scenario) => {
+    const result = runtime.results.find((candidate) => candidate.scenario === scenario);
+    if (result) return { ...scenarioStats(result), baseline: baselineOf(scenario) };
+    const failure = runtime.failures.find((entry) => entry.scenario === scenario);
+    return {
+      scenario,
+      callable: 0,
+      disabled: 0,
+      hidden: 0,
+      rejected: 0,
+      failed: true,
+      ...failure?.message ? { failure: failure.message } : {}
+    };
+  });
+  const stream = ok ? void 0 : "err";
+  const parts = checkOverviewParts({
+    status: couldNotRun ? "ERROR" : ok ? "PASS" : "FAIL",
+    ...coverage ? { coverage } : {},
+    unresolvedAllowed: options.allowUnresolved === true,
+    baselineCurrent: Math.max(0, runtime.results.length - drifted.length),
+    baselineTotal: runtime.scenarios.length,
+    scenarioManifestOk: !scenarioManifestMismatch && staleBaselineFiles.length === 0,
+    rejected: rejected.reduce((sum, entry) => sum + entry.rejections.length, 0),
+    mountFailures: runtime.failures.length,
+    context: {
+      configPath: options.configPath,
+      depth: options.depth,
+      ...runtime.scope ? { scope: runtime.scope } : {}
+    },
+    stats
+  }).map((part) => ({ ...part, ...stream ? { stream } : {} }));
+  if (coverage) {
+    const gaps = coverageSections(coverage, {
+      compact: true,
+      ...options.detail ? { detail: true } : {}
+    });
+    if (gaps.length > 0) {
+      parts.push({
+        kind: "findings",
+        sections: gaps,
+        ...coverageFailed ? { stream: "err" } : {}
+      });
+    }
+  }
+  const sections = [];
+  const steps = [];
+  if (coverage && coverage.unreached.length > 0) {
+    steps.push(
+      `mount the ${coverage.unreached.length} unreached capabilit${coverage.unreached.length === 1 ? "y" : "ies"} from a scenario, or record the decision in ${displayPath(coverage.allowlistPath)}`
+    );
+  }
+  if (coverage && coverage.unresolved.length > 0 && options.allowUnresolved !== true) {
+    steps.push(
+      `make the ${coverage.unresolved.length} unread call site${coverage.unresolved.length === 1 ? "" : "s"} readable, or paste each printed key into ${displayPath(coverage.unreadAllowlistPath)}`
+    );
+  }
+  if (rejected.length > 0) {
+    const total = rejected.reduce((sum, entry) => sum + entry.rejections.length, 0);
+    sections.push({
+      title: "REJECTED REGISTRATIONS",
+      gloss: "the runtime refused authored surface during the mount",
+      count: total,
+      lines: rejected.flatMap(
+        (entry) => entry.rejections.map(
+          (rejection) => `${entry.scenario}: ${rejection.componentType}@${rejection.instanceId} (${rejection.reason})`
+        )
+      ),
+      hint: "a dead handle registers nothing \u2014 give the second registration its own instanceId, or remove the duplicated component type"
+    });
+    steps.push(
+      `resolve ${total} rejected registration${total === 1 ? "" : "s"} \u2014 the capabilities behind them reach no agent`
+    );
+  }
+  if (scenarioManifestMismatch || staleBaselineFiles.length > 0) {
+    sections.push({
+      title: "SCENARIO DRIFT",
+      gloss: "the committed baselines do not match the config",
+      count: 0,
+      lines: [
+        `config:   ${declared.join(", ")}`,
+        `manifest: ${committedScenarios?.join(", ") ?? "missing"}`,
+        ...staleBaselineFiles.length > 0 ? [`stale:    ${staleBaselineFiles.join(", ")}`] : []
+      ],
+      hint: "run `agent-surface snapshot`, commit the manifest, and delete any baseline for a scenario the config no longer declares"
+    });
+  }
+  if (missing.length > 0) {
+    sections.push({
+      title: "NO BASELINE",
+      gloss: "nothing to compare against, which is not the same as a match",
+      count: missing.length,
+      lines: missing.map(
+        (entry) => `${entry.scenario}: ${displayPath(
+          baselinePath(runtime.baselineDir, entry.scenario)
+        )} does not exist`
+      ),
+      hint: "run `agent-surface snapshot` and commit the files it writes"
+    });
+  }
+  if (changed.length > 0) {
+    sections.push({
+      title: "DRIFT",
+      gloss: "the surface changed against its baseline",
+      count: changed.length,
+      lines: changed.flatMap((entry) => renderDriftPlain(entry.scenario, entry.entries)),
+      hint: "review the change, then `agent-surface snapshot` to accept it" + (runtime.scope ? ". A scope filters the projection while baselines are written from whatever scope wrote them, so re-check without --scope before believing this one" : "")
+    });
+  }
+  const baselinesStale = missing.length > 0 || changed.length > 0 || scenarioManifestMismatch || staleBaselineFiles.length > 0;
+  if (baselinesStale) {
+    steps.push(
+      "`agent-surface snapshot`, then commit .agent-surface/ \u2014 this accepts the surface above as reviewed"
+    );
+  }
+  if (sections.length > 0) parts.push({ kind: "findings", stream: "err", sections });
+  if (couldNotRun) {
+    parts.push({
+      kind: "findings",
+      stream: "err",
+      sections: [
+        failureSection(runtime.failures),
+        ...inventory ? [noVerdictSection(runtime.failures)] : []
+      ]
+    });
+    steps.unshift(
+      `fix the mount for ${runtime.failures.map((failure) => failure.scenario).join(", ")} \u2014 every count above is missing whatever ${runtime.failures.length === 1 ? "it" : "they"} would have surfaced`
+    );
+  }
+  if (!ok && steps.length > 0) {
+    parts.push({ kind: "steps", stream: "err", title: "NEXT STEPS", steps });
+  }
+  await present.emit(...parts);
+  return couldNotRun ? 2 : ok ? 0 : 1;
+}
+export {
+  runCheck
+};
+//# sourceMappingURL=check-O7ENP4XP.js.map

package/dist/check-O7ENP4XP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/check.ts"],"sourcesContent":["import { existsSync, readdirSync } from \"node:fs\";\nimport {\n  UsageError,\n  joinCoverage,\n  mountScenarios,\n  readInventory,\n  type AnalysisOptions,\n  type Depth,\n} from \"../analysis.js\";\nimport {\n  annotate,\n  baselinePath,\n  diff,\n  readBaseline,\n  readScenarioManifest,\n  SCENARIO_MANIFEST_FILE,\n  type DiffEntry,\n} from \"../baseline.js\";\nimport { ALLOWLIST_FILE, coverageExitCode, UNREAD_ALLOWLIST_FILE } from \"../coverage.js\";\nimport { renderDriftPlain } from \"../render/plain.js\";\nimport { createPresenter } from \"../render/present.js\";\nimport {\n  checkOverviewParts,\n  coverageSections,\n  displayPath,\n  failureSection,\n  mountingLabel,\n  noVerdictSection,\n  READING_SOURCE,\n  scenarioStats,\n  type FindingSection,\n  type ReportPart,\n  type ScenarioStats,\n} from \"../render/summary.js\";\nimport { write } from \"../output.js\";\nimport { coverageReport, scenarioBaseline } from \"../report.js\";\n\nexport interface CheckOptions {\n  configPath: string;\n  depth: Depth;\n  scenario?: string;\n  scope?: string[];\n  tsconfig?: string;\n  baselineDir?: string;\n  allowUnresolved?: boolean;\n  json?: boolean;\n  plain?: boolean;\n  detail?: boolean;\n}\n\ninterface ScenarioDrift {\n  scenario: string;\n  missingBaseline?: boolean;\n  entries: DiffEntry[];\n}\n\ninterface RejectedScenario {\n  scenario: string;\n  rejections: Array<{ componentType: string; instanceId: string; reason: string }>;\n}\n\n/**\n * The gate. The only command in this package that fails on a finding, which is\n * why every finding has to reach it.\n *\n * It used to fail on exactly one class — the projection drifting from its\n * baseline — and print a line telling you that capabilities no scenario mounts\n * were a different command's question. A gate that names the check it is not\n * performing is a gate with a hole in it, and in CI the hole was silent: a\n * whole unreached route sat behind a green tick.\n *\n * So it now fails on every incomplete or changed report:\n *\n * - **drift** — the surface changed against its committed baseline;\n * - **a missing baseline** — nothing to compare, which is not the same as a match;\n * - **an unreached capability** — authored, and no scenario mounts it;\n * - **an unread call site** — the catalog is incomplete, so the third check\n *   above is computed over a denominator that is only a floor;\n * - **a rejected registration** — authored surface was refused;\n * - **scenario drift** — config, manifest and baseline files disagree.\n *\n * `.agent-surface/coverage-allow.json` ratchets the third; `--allow-unresolved`\n * accepts the fourth. Both are deliberate, committed decisions rather than\n * flags that quietly widen the gate.\n *\n * The report is read top-down: the verdict, what it was computed over, one row\n * per class of finding whether or not it fired, one row per scenario, then the\n * findings themselves and the commands that clear them — the same shapes, in\n * the same grid, that `inspect` uses for the same things. Its output is a\n * report pasted into a pull request and read out of a CI log, and neither of\n * those is a terminal — so neither of those gets a terminal UI: piped, `CI` and\n * `NO_COLOR` all render plain text, and that is decided by the presenter, once,\n * rather than by this command declining to have a renderer at all.\n */\nexport async function runCheck(options: CheckOptions): Promise<number> {\n  if (options.depth === \"static\") {\n    throw new UsageError(\n      \"check --depth static has nothing to compare — a baseline is a projection, and \" +\n        \"at this depth nothing is mounted. Use --depth runtime for drift alone, or full for both.\",\n    );\n  }\n\n  const analysis: AnalysisOptions = {\n    configPath: options.configPath,\n    depth: options.depth,\n    ...(options.scenario ? { scenario: options.scenario } : {}),\n    ...(options.scope ? { scope: options.scope } : {}),\n    ...(options.tsconfig ? { tsconfig: options.tsconfig } : {}),\n    ...(options.baselineDir ? { baselineDir: options.baselineDir } : {}),\n  };\n\n  const present = await createPresenter(options);\n  if (!options.json) await present.wait(READING_SOURCE);\n\n  const inventory = readInventory(analysis);\n  // No streaming here, unlike `inspect`. A report is read top-down and has to\n  // lead with its findings, which means every finding has to exist first — so\n  // the terminal is told what it is waiting for instead, in the same words and\n  // with the same spinner `inspect` uses for the same wait.\n  let scenarios: string[] = [];\n  let mountedCount = 0;\n  const runtime = await mountScenarios(analysis, {\n    onPlan: async (plan) => {\n      scenarios = plan.scenarios;\n      if (scenarios.length > 0) await present.wait(mountingLabel(scenarios, 0));\n    },\n    onEach: async () => {\n      mountedCount += 1;\n      if (mountedCount < scenarios.length) {\n        await present.wait(mountingLabel(scenarios, mountedCount));\n      }\n    },\n  });\n  present.settle();\n  if (!runtime) throw new UsageError(\"check needs a mount, and this depth performs none\");\n\n  const drifted: ScenarioDrift[] = [];\n  for (const result of runtime.results) {\n    const path = baselinePath(runtime.baselineDir, result.scenario);\n    const expected = readBaseline(path);\n    if (expected === undefined) {\n      drifted.push({ scenario: result.scenario, missingBaseline: true, entries: [] });\n      continue;\n    }\n    const actual = scenarioBaseline(result);\n    const entries = annotate(diff(expected, actual), actual, expected);\n    if (entries.length > 0) drifted.push({ scenario: result.scenario, entries });\n  }\n\n  const committedScenarios = readScenarioManifest(runtime.baselineDir);\n  const declared = [...runtime.declaredScenarios].sort();\n  const scenarioManifestMismatch =\n    committedScenarios === undefined ||\n    JSON.stringify(committedScenarios) !== JSON.stringify(declared);\n  const reserved = new Set([SCENARIO_MANIFEST_FILE, ALLOWLIST_FILE, UNREAD_ALLOWLIST_FILE]);\n  const staleBaselineFiles = (\n    existsSync(runtime.baselineDir) ? readdirSync(runtime.baselineDir, { withFileTypes: true }) : []\n  )\n    .filter((entry) => entry.isFile() && entry.name.endsWith(\".json\") && !reserved.has(entry.name))\n    .map((entry) => entry.name.slice(0, -5))\n    .filter((scenario) => !runtime.declaredScenarios.includes(scenario))\n    .sort();\n\n  const rejected: RejectedScenario[] = runtime.results\n    .filter((result) => result.rejections.length > 0)\n    .map((result) => ({ scenario: result.scenario, rejections: result.rejections }));\n\n  const coverage = joinCoverage(inventory, runtime, analysis);\n  const coverageFailed =\n    coverage !== undefined &&\n    coverageExitCode(coverage, { allowUnresolved: options.allowUnresolved === true }) !== 0;\n  const couldNotRun = runtime.failures.length > 0;\n  const ok =\n    drifted.length === 0 &&\n    !coverageFailed &&\n    !couldNotRun &&\n    rejected.length === 0 &&\n    !scenarioManifestMismatch &&\n    staleBaselineFiles.length === 0;\n\n  if (options.json) {\n    write(\n      JSON.stringify(\n        {\n          ok,\n          drifted,\n          failures: runtime.failures,\n          rejected,\n          scenarioManifest: {\n            expected: declared,\n            committed: committedScenarios ?? null,\n            staleBaselines: staleBaselineFiles,\n          },\n          coverage: coverageReport(coverage),\n        },\n        null,\n        2,\n      ),\n    );\n    return couldNotRun ? 2 : ok ? 0 : 1;\n  }\n\n  // \"No baseline\" is not drift, and filing it under a heading that says the\n  // surface changed would be a claim about a comparison that never happened.\n  const missing = drifted.filter((entry) => entry.missingBaseline);\n  const changed = drifted.filter((entry) => !entry.missingBaseline);\n\n  const baselineOf = (scenario: string): string => {\n    const entry = drifted.find((candidate) => candidate.scenario === scenario);\n    if (!entry) return \"current\";\n    if (entry.missingBaseline) return \"missing\";\n    return `drift (${entry.entries.length})`;\n  };\n  // One row per scenario the run attempted, in config order — including the\n  // ones that threw, which otherwise appear only at the bottom of the report.\n  const stats: ScenarioStats[] = runtime.scenarios.map((scenario) => {\n    const result = runtime.results.find((candidate) => candidate.scenario === scenario);\n    if (result) return { ...scenarioStats(result), baseline: baselineOf(scenario) };\n    const failure = runtime.failures.find((entry) => entry.scenario === scenario);\n    return {\n      scenario,\n      callable: 0,\n      disabled: 0,\n      hidden: 0,\n      rejected: 0,\n      failed: true,\n      ...(failure?.message ? { failure: failure.message } : {}),\n    };\n  });\n\n  // A failing report goes to stderr in full. The verdict is the part a reader\n  // has to see, and a gate whose red is on the stream nobody captured is a gate\n  // that reads as green.\n  const stream = ok ? undefined : (\"err\" as const);\n  const parts: ReportPart[] = checkOverviewParts({\n    status: couldNotRun ? \"ERROR\" : ok ? \"PASS\" : \"FAIL\",\n    ...(coverage ? { coverage } : {}),\n    unresolvedAllowed: options.allowUnresolved === true,\n    baselineCurrent: Math.max(0, runtime.results.length - drifted.length),\n    baselineTotal: runtime.scenarios.length,\n    scenarioManifestOk: !scenarioManifestMismatch && staleBaselineFiles.length === 0,\n    rejected: rejected.reduce((sum, entry) => sum + entry.rejections.length, 0),\n    mountFailures: runtime.failures.length,\n    context: {\n      configPath: options.configPath,\n      depth: options.depth,\n      ...(runtime.scope ? { scope: runtime.scope } : {}),\n    },\n    stats,\n  }).map((part) => ({ ...part, ...(stream ? { stream } : {}) }));\n\n  // The gap leads, because it is the finding this command could not previously\n  // make at all. Drift follows, because it is the one it always could.\n  if (coverage) {\n    const gaps = coverageSections(coverage, {\n      compact: true,\n      ...(options.detail ? { detail: true } : {}),\n    });\n    if (gaps.length > 0) {\n      parts.push({\n        kind: \"findings\",\n        sections: gaps,\n        ...(coverageFailed ? { stream: \"err\" as const } : {}),\n      });\n    }\n  }\n\n  const sections: FindingSection[] = [];\n  const steps: string[] = [];\n  if (coverage && coverage.unreached.length > 0) {\n    steps.push(\n      `mount the ${coverage.unreached.length} unreached capabilit${\n        coverage.unreached.length === 1 ? \"y\" : \"ies\"\n      } from a scenario, or record the decision in ${displayPath(coverage.allowlistPath)}`,\n    );\n  }\n  if (coverage && coverage.unresolved.length > 0 && options.allowUnresolved !== true) {\n    steps.push(\n      `make the ${coverage.unresolved.length} unread call site${\n        coverage.unresolved.length === 1 ? \"\" : \"s\"\n      } readable, or paste each printed key into ${displayPath(coverage.unreadAllowlistPath)}`,\n    );\n  }\n\n  if (rejected.length > 0) {\n    const total = rejected.reduce((sum, entry) => sum + entry.rejections.length, 0);\n    sections.push({\n      title: \"REJECTED REGISTRATIONS\",\n      gloss: \"the runtime refused authored surface during the mount\",\n      count: total,\n      lines: rejected.flatMap((entry) =>\n        entry.rejections.map(\n          (rejection) =>\n            `${entry.scenario}: ${rejection.componentType}@${rejection.instanceId} (${rejection.reason})`,\n        ),\n      ),\n      hint:\n        \"a dead handle registers nothing — give the second registration its own instanceId, \" +\n        \"or remove the duplicated component type\",\n    });\n    steps.push(\n      `resolve ${total} rejected registration${total === 1 ? \"\" : \"s\"} — the capabilities ` +\n        \"behind them reach no agent\",\n    );\n  }\n\n  if (scenarioManifestMismatch || staleBaselineFiles.length > 0) {\n    sections.push({\n      title: \"SCENARIO DRIFT\",\n      gloss: \"the committed baselines do not match the config\",\n      count: 0,\n      lines: [\n        `config:   ${declared.join(\", \")}`,\n        `manifest: ${committedScenarios?.join(\", \") ?? \"missing\"}`,\n        ...(staleBaselineFiles.length > 0 ? [`stale:    ${staleBaselineFiles.join(\", \")}`] : []),\n      ],\n      hint:\n        \"run `agent-surface snapshot`, commit the manifest, and delete any baseline for a \" +\n        \"scenario the config no longer declares\",\n    });\n  }\n\n  if (missing.length > 0) {\n    sections.push({\n      title: \"NO BASELINE\",\n      gloss: \"nothing to compare against, which is not the same as a match\",\n      count: missing.length,\n      lines: missing.map(\n        (entry) =>\n          `${entry.scenario}: ${displayPath(\n            baselinePath(runtime.baselineDir, entry.scenario),\n          )} does not exist`,\n      ),\n      hint: \"run `agent-surface snapshot` and commit the files it writes\",\n    });\n  }\n\n  if (changed.length > 0) {\n    sections.push({\n      title: \"DRIFT\",\n      gloss: \"the surface changed against its baseline\",\n      count: changed.length,\n      lines: changed.flatMap((entry) => renderDriftPlain(entry.scenario, entry.entries)),\n      hint:\n        \"review the change, then `agent-surface snapshot` to accept it\" +\n        (runtime.scope\n          ? \". A scope filters the projection while baselines are written from whatever \" +\n            \"scope wrote them, so re-check without --scope before believing this one\"\n          : \"\"),\n    });\n  }\n\n  const baselinesStale =\n    missing.length > 0 ||\n    changed.length > 0 ||\n    scenarioManifestMismatch ||\n    staleBaselineFiles.length > 0;\n  if (baselinesStale) {\n    steps.push(\n      \"`agent-surface snapshot`, then commit .agent-surface/ — this accepts the surface \" +\n        \"above as reviewed\",\n    );\n  }\n\n  if (sections.length > 0) parts.push({ kind: \"findings\", stream: \"err\", sections });\n\n  if (couldNotRun) {\n    parts.push({\n      kind: \"findings\",\n      stream: \"err\",\n      sections: [\n        failureSection(runtime.failures),\n        ...(inventory ? [noVerdictSection(runtime.failures)] : []),\n      ],\n    });\n    // First, and above every other remedy: nothing else in this report can be\n    // trusted while a scenario the config declares never ran.\n    steps.unshift(\n      `fix the mount for ${runtime.failures\n        .map((failure) => failure.scenario)\n        .join(\", \")} — every count above is missing whatever ${\n        runtime.failures.length === 1 ? \"it\" : \"they\"\n      } would have surfaced`,\n    );\n  }\n\n  // Last, and only when something failed: the tail of a CI log is what a reader\n  // sees first, and a list of findings without the commands that clear them\n  // leaves the reader to derive those from six different sections.\n  if (!ok && steps.length > 0) {\n    parts.push({ kind: \"steps\", stream: \"err\", title: \"NEXT STEPS\", steps });\n  }\n\n  await present.emit(...parts);\n  return couldNotRun ? 2 : ok ? 0 : 1;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,mBAAmB;AA8FxC,eAAsB,SAAS,SAAwC;AACrE,MAAI,QAAQ,UAAU,UAAU;AAC9B,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AAEA,QAAM,WAA4B;AAAA,IAChC,YAAY,QAAQ;AAAA,IACpB,OAAO,QAAQ;AAAA,IACf,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,IACzD,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAChD,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,IACzD,GAAI,QAAQ,cAAc,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;AAAA,EACpE;AAEA,QAAM,UAAU,MAAM,gBAAgB,OAAO;AAC7C,MAAI,CAAC,QAAQ,KAAM,OAAM,QAAQ,KAAK,cAAc;AAEpD,QAAM,YAAY,cAAc,QAAQ;AAKxC,MAAI,YAAsB,CAAC;AAC3B,MAAI,eAAe;AACnB,QAAM,UAAU,MAAM,eAAe,UAAU;AAAA,IAC7C,QAAQ,OAAO,SAAS;AACtB,kBAAY,KAAK;AACjB,UAAI,UAAU,SAAS,EAAG,OAAM,QAAQ,KAAK,cAAc,WAAW,CAAC,CAAC;AAAA,IAC1E;AAAA,IACA,QAAQ,YAAY;AAClB,sBAAgB;AAChB,UAAI,eAAe,UAAU,QAAQ;AACnC,cAAM,QAAQ,KAAK,cAAc,WAAW,YAAY,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF,CAAC;AACD,UAAQ,OAAO;AACf,MAAI,CAAC,QAAS,OAAM,IAAI,WAAW,mDAAmD;AAEtF,QAAM,UAA2B,CAAC;AAClC,aAAW,UAAU,QAAQ,SAAS;AACpC,UAAM,OAAO,aAAa,QAAQ,aAAa,OAAO,QAAQ;AAC9D,UAAM,WAAW,aAAa,IAAI;AAClC,QAAI,aAAa,QAAW;AAC1B,cAAQ,KAAK,EAAE,UAAU,OAAO,UAAU,iBAAiB,MAAM,SAAS,CAAC,EAAE,CAAC;AAC9E;AAAA,IACF;AACA,UAAM,SAAS,iBAAiB,MAAM;AACtC,UAAM,UAAU,SAAS,KAAK,UAAU,MAAM,GAAG,QAAQ,QAAQ;AACjE,QAAI,QAAQ,SAAS,EAAG,SAAQ,KAAK,EAAE,UAAU,OAAO,UAAU,QAAQ,CAAC;AAAA,EAC7E;AAEA,QAAM,qBAAqB,qBAAqB,QAAQ,WAAW;AACnE,QAAM,WAAW,CAAC,GAAG,QAAQ,iBAAiB,EAAE,KAAK;AACrD,QAAM,2BACJ,uBAAuB,UACvB,KAAK,UAAU,kBAAkB,MAAM,KAAK,UAAU,QAAQ;AAChE,QAAM,WAAW,oBAAI,IAAI,CAAC,wBAAwB,gBAAgB,qBAAqB,CAAC;AACxF,QAAM,sBACJ,WAAW,QAAQ,WAAW,IAAI,YAAY,QAAQ,aAAa,EAAE,eAAe,KAAK,CAAC,IAAI,CAAC,GAE9F,OAAO,CAAC,UAAU,MAAM,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,KAAK,CAAC,SAAS,IAAI,MAAM,IAAI,CAAC,EAC7F,IAAI,CAAC,UAAU,MAAM,KAAK,MAAM,GAAG,EAAE,CAAC,EACtC,OAAO,CAAC,aAAa,CAAC,QAAQ,kBAAkB,SAAS,QAAQ,CAAC,EAClE,KAAK;AAER,QAAM,WAA+B,QAAQ,QAC1C,OAAO,CAAC,WAAW,OAAO,WAAW,SAAS,CAAC,EAC/C,IAAI,CAAC,YAAY,EAAE,UAAU,OAAO,UAAU,YAAY,OAAO,WAAW,EAAE;AAEjF,QAAM,WAAW,aAAa,WAAW,SAAS,QAAQ;AAC1D,QAAM,iBACJ,aAAa,UACb,iBAAiB,UAAU,EAAE,iBAAiB,QAAQ,oBAAoB,KAAK,CAAC,MAAM;AACxF,QAAM,cAAc,QAAQ,SAAS,SAAS;AAC9C,QAAM,KACJ,QAAQ,WAAW,KACnB,CAAC,kBACD,CAAC,eACD,SAAS,WAAW,KACpB,CAAC,4BACD,mBAAmB,WAAW;AAEhC,MAAI,QAAQ,MAAM;AAChB;AAAA,MACE,KAAK;AAAA,QACH;AAAA,UACE;AAAA,UACA;AAAA,UACA,UAAU,QAAQ;AAAA,UAClB;AAAA,UACA,kBAAkB;AAAA,YAChB,UAAU;AAAA,YACV,WAAW,sBAAsB;AAAA,YACjC,gBAAgB;AAAA,UAClB;AAAA,UACA,UAAU,eAAe,QAAQ;AAAA,QACnC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,cAAc,IAAI,KAAK,IAAI;AAAA,EACpC;AAIA,QAAM,UAAU,QAAQ,OAAO,CAAC,UAAU,MAAM,eAAe;AAC/D,QAAM,UAAU,QAAQ,OAAO,CAAC,UAAU,CAAC,MAAM,eAAe;AAEhE,QAAM,aAAa,CAAC,aAA6B;AAC/C,UAAM,QAAQ,QAAQ,KAAK,CAAC,cAAc,UAAU,aAAa,QAAQ;AACzE,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,MAAM,gBAAiB,QAAO;AAClC,WAAO,UAAU,MAAM,QAAQ,MAAM;AAAA,EACvC;AAGA,QAAM,QAAyB,QAAQ,UAAU,IAAI,CAAC,aAAa;AACjE,UAAM,SAAS,QAAQ,QAAQ,KAAK,CAAC,cAAc,UAAU,aAAa,QAAQ;AAClF,QAAI,OAAQ,QAAO,EAAE,GAAG,cAAc,MAAM,GAAG,UAAU,WAAW,QAAQ,EAAE;AAC9E,UAAM,UAAU,QAAQ,SAAS,KAAK,CAAC,UAAU,MAAM,aAAa,QAAQ;AAC5E,WAAO;AAAA,MACL;AAAA,MACA,UAAU;AAAA,MACV,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,GAAI,SAAS,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,IACzD;AAAA,EACF,CAAC;AAKD,QAAM,SAAS,KAAK,SAAa;AACjC,QAAM,QAAsB,mBAAmB;AAAA,IAC7C,QAAQ,cAAc,UAAU,KAAK,SAAS;AAAA,IAC9C,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IAC/B,mBAAmB,QAAQ,oBAAoB;AAAA,IAC/C,iBAAiB,KAAK,IAAI,GAAG,QAAQ,QAAQ,SAAS,QAAQ,MAAM;AAAA,IACpE,eAAe,QAAQ,UAAU;AAAA,IACjC,oBAAoB,CAAC,4BAA4B,mBAAmB,WAAW;AAAA,IAC/E,UAAU,SAAS,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,WAAW,QAAQ,CAAC;AAAA,IAC1E,eAAe,QAAQ,SAAS;AAAA,IAChC,SAAS;AAAA,MACP,YAAY,QAAQ;AAAA,MACpB,OAAO,QAAQ;AAAA,MACf,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAClD;AAAA,IACA;AAAA,EACF,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC,EAAG,EAAE;AAI7D,MAAI,UAAU;AACZ,UAAM,OAAO,iBAAiB,UAAU;AAAA,MACtC,SAAS;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,IAC3C,CAAC;AACD,QAAI,KAAK,SAAS,GAAG;AACnB,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,UAAU;AAAA,QACV,GAAI,iBAAiB,EAAE,QAAQ,MAAe,IAAI,CAAC;AAAA,MACrD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,WAA6B,CAAC;AACpC,QAAM,QAAkB,CAAC;AACzB,MAAI,YAAY,SAAS,UAAU,SAAS,GAAG;AAC7C,UAAM;AAAA,MACJ,aAAa,SAAS,UAAU,MAAM,uBACpC,SAAS,UAAU,WAAW,IAAI,MAAM,KAC1C,+CAA+C,YAAY,SAAS,aAAa,CAAC;AAAA,IACpF;AAAA,EACF;AACA,MAAI,YAAY,SAAS,WAAW,SAAS,KAAK,QAAQ,oBAAoB,MAAM;AAClF,UAAM;AAAA,MACJ,YAAY,SAAS,WAAW,MAAM,oBACpC,SAAS,WAAW,WAAW,IAAI,KAAK,GAC1C,6CAA6C,YAAY,SAAS,mBAAmB,CAAC;AAAA,IACxF;AAAA,EACF;AAEA,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,QAAQ,SAAS,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,WAAW,QAAQ,CAAC;AAC9E,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO,SAAS;AAAA,QAAQ,CAAC,UACvB,MAAM,WAAW;AAAA,UACf,CAAC,cACC,GAAG,MAAM,QAAQ,KAAK,UAAU,aAAa,IAAI,UAAU,UAAU,KAAK,UAAU,MAAM;AAAA,QAC9F;AAAA,MACF;AAAA,MACA,MACE;AAAA,IAEJ,CAAC;AACD,UAAM;AAAA,MACJ,WAAW,KAAK,yBAAyB,UAAU,IAAI,KAAK,GAAG;AAAA,IAEjE;AAAA,EACF;AAEA,MAAI,4BAA4B,mBAAmB,SAAS,GAAG;AAC7D,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,QACL,aAAa,SAAS,KAAK,IAAI,CAAC;AAAA,QAChC,aAAa,oBAAoB,KAAK,IAAI,KAAK,SAAS;AAAA,QACxD,GAAI,mBAAmB,SAAS,IAAI,CAAC,aAAa,mBAAmB,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,MACxF;AAAA,MACA,MACE;AAAA,IAEJ,CAAC;AAAA,EACH;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,QACb,CAAC,UACC,GAAG,MAAM,QAAQ,KAAK;AAAA,UACpB,aAAa,QAAQ,aAAa,MAAM,QAAQ;AAAA,QAClD,CAAC;AAAA,MACL;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ,QAAQ,CAAC,UAAU,iBAAiB,MAAM,UAAU,MAAM,OAAO,CAAC;AAAA,MACjF,MACE,mEACC,QAAQ,QACL,uJAEA;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,iBACJ,QAAQ,SAAS,KACjB,QAAQ,SAAS,KACjB,4BACA,mBAAmB,SAAS;AAC9B,MAAI,gBAAgB;AAClB,UAAM;AAAA,MACJ;AAAA,IAEF;AAAA,EACF;AAEA,MAAI,SAAS,SAAS,EAAG,OAAM,KAAK,EAAE,MAAM,YAAY,QAAQ,OAAO,SAAS,CAAC;AAEjF,MAAI,aAAa;AACf,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,UAAU;AAAA,QACR,eAAe,QAAQ,QAAQ;AAAA,QAC/B,GAAI,YAAY,CAAC,iBAAiB,QAAQ,QAAQ,CAAC,IAAI,CAAC;AAAA,MAC1D;AAAA,IACF,CAAC;AAGD,UAAM;AAAA,MACJ,qBAAqB,QAAQ,SAC1B,IAAI,CAAC,YAAY,QAAQ,QAAQ,EACjC,KAAK,IAAI,CAAC,iDACX,QAAQ,SAAS,WAAW,IAAI,OAAO,MACzC;AAAA,IACF;AAAA,EACF;AAKA,MAAI,CAAC,MAAM,MAAM,SAAS,GAAG;AAC3B,UAAM,KAAK,EAAE,MAAM,SAAS,QAAQ,OAAO,OAAO,cAAc,MAAM,CAAC;AAAA,EACzE;AAEA,QAAM,QAAQ,KAAK,GAAG,KAAK;AAC3B,SAAO,cAAc,IAAI,KAAK,IAAI;AACpC;","names":[]}