@agent-surface/cli 0.9.0 → 0.10.0

package/dist/chunk-4AEQKM2X.js

@@ -0,0 +1,498 @@
+import {
+  formatValue
+} from "./chunk-ODUIFFPM.js";
+
+// src/extract.ts
+import { existsSync } from "fs";
+import { dirname, isAbsolute, join, relative, resolve } from "path";
+import ts from "typescript";
+var UNRESOLVED_ID = "<unresolved>";
+function findTsconfig(from) {
+  return ts.findConfigFile(resolve(from), ts.sys.fileExists, "tsconfig.json");
+}
+function readProgramFiles(tsconfigPath) {
+  const read = ts.readConfigFile(tsconfigPath, ts.sys.readFile);
+  if (read.error) {
+    throw new Error(
+      `could not read ${tsconfigPath}: ${ts.flattenDiagnosticMessageText(read.error.messageText, " ")}`
+    );
+  }
+  const parsed = ts.parseJsonConfigFileContent(
+    read.config,
+    ts.sys,
+    dirname(tsconfigPath)
+  );
+  if (parsed.errors.length > 0 && parsed.fileNames.length === 0) {
+    throw new Error(
+      `could not resolve any files from ${tsconfigPath}: ${parsed.errors.map((error) => ts.flattenDiagnosticMessageText(error.messageText, " ")).join("; ")}`
+    );
+  }
+  return { fileNames: parsed.fileNames, options: parsed.options };
+}
+function calleeName(call) {
+  if (ts.isIdentifier(call.expression)) return call.expression.text;
+  if (ts.isPropertyAccessExpression(call.expression)) return call.expression.name.text;
+  return void 0;
+}
+function propertyName(name) {
+  if (ts.isIdentifier(name) || ts.isStringLiteral(name)) return name.text;
+  return void 0;
+}
+function propertyOf(object, wanted) {
+  for (const property of object.properties) {
+    if (ts.isPropertyAssignment(property) && propertyName(property.name) === wanted) {
+      return property.initializer;
+    }
+  }
+  return void 0;
+}
+function hasSpread(object) {
+  return object.properties.some((property) => ts.isSpreadAssignment(property));
+}
+function literalText(node) {
+  if (!node) return void 0;
+  if (ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node)) return node.text;
+  if (ts.isParenthesizedExpression(node)) return literalText(node.expression);
+  if (ts.isBinaryExpression(node) && node.operatorToken.kind === ts.SyntaxKind.PlusToken) {
+    const left = literalText(node.left);
+    const right = literalText(node.right);
+    if (left !== void 0 && right !== void 0) return left + right;
+  }
+  return void 0;
+}
+function describeConstruct(node) {
+  if (ts.isCallExpression(node)) {
+    const callee = calleeName(node);
+    return callee ? `built by ${callee}()` : "built by a call expression";
+  }
+  if (ts.isIdentifier(node)) return `a variable (${node.text}) this extractor could not follow`;
+  if (ts.isConditionalExpression(node)) return "a conditional expression";
+  if (ts.isTemplateExpression(node)) return "a template with substitutions";
+  if (ts.isPropertyAccessExpression(node)) return "a property access";
+  return "a non-literal expression";
+}
+function objectLiteralFor(expression, source) {
+  if (ts.isObjectLiteralExpression(expression)) return { object: expression };
+  if (ts.isIdentifier(expression)) {
+    const target = expression.text;
+    let found;
+    const visit = (node) => {
+      if (found) return;
+      if (ts.isVariableDeclaration(node) && ts.isIdentifier(node.name) && node.name.text === target && node.initializer && ts.isObjectLiteralExpression(node.initializer)) {
+        found = node.initializer;
+        return;
+      }
+      ts.forEachChild(node, visit);
+    };
+    visit(source);
+    if (found) return { object: found };
+    return {
+      note: `the config is \`${target}\`, which is not a same-module object literal \u2014 the extractor follows one hop only`
+    };
+  }
+  return { note: `the config is ${describeConstruct(expression)}` };
+}
+var GRANULAR_HOOKS = /* @__PURE__ */ new Set(["useAgentAction", "useAgentObservation"]);
+function capabilitiesFromGroup(group, kind, componentType, componentPartial, emit, source) {
+  if (!group) return;
+  const resolved = objectLiteralFor(group, source);
+  if (!resolved.object) {
+    emit.push({
+      capabilityId: `view:${componentType}.${UNRESOLVED_ID}`,
+      kind,
+      origin: emit.origin(group),
+      resolution: "unresolved",
+      note: `\`${kind}s\` on "${componentType}" is not an object literal: ${resolved.note}`
+    });
+    return;
+  }
+  for (const property of resolved.object.properties) {
+    if (ts.isSpreadAssignment(property)) {
+      emit.push({
+        capabilityId: `view:${componentType}.${UNRESOLVED_ID}`,
+        kind,
+        origin: emit.origin(property),
+        resolution: "unresolved",
+        note: `\`${kind}s\` on "${componentType}" spreads another object, which may contribute capabilities this inventory cannot name`
+      });
+      continue;
+    }
+    const name = ts.isPropertyAssignment(property) || ts.isMethodDeclaration(property) ? propertyName(property.name) : ts.isShorthandPropertyAssignment(property) ? property.name.text : void 0;
+    if (name === void 0) {
+      emit.push({
+        capabilityId: `view:${componentType}.${UNRESOLVED_ID}`,
+        kind,
+        origin: emit.origin(property),
+        resolution: "unresolved",
+        note: `a capability on "${componentType}" has a computed name`
+      });
+      continue;
+    }
+    const capability = {
+      capabilityId: `view:${componentType}.${name}`,
+      kind,
+      origin: emit.origin(property),
+      resolution: "static"
+    };
+    const notes = [];
+    if (componentPartial) notes.push(componentPartial);
+    const value = ts.isPropertyAssignment(property) ? property.initializer : void 0;
+    const definition = value && ts.isCallExpression(value) && value.arguments.length > 0 ? value.arguments[0] : value;
+    if (definition && ts.isObjectLiteralExpression(definition)) {
+      const description = literalText(propertyOf(definition, "description"));
+      if (description !== void 0) capability.description = description;
+      else notes.push("description is not a string literal");
+      if (kind === "action") {
+        const effect = literalText(propertyOf(definition, "effect"));
+        if (effect !== void 0) capability.effect = effect;
+        else notes.push("effect is not a string literal");
+      }
+      if (hasSpread(definition)) notes.push("the definition spreads another object");
+    } else {
+      notes.push(
+        value ? `the definition is ${describeConstruct(value)}` : "the definition is not an object literal"
+      );
+    }
+    if (notes.length > 0) {
+      capability.resolution = "partial";
+      capability.note = notes.join("; ");
+    }
+    emit.push(capability);
+  }
+}
+function visitCall(call, emit, source) {
+  const callee = calleeName(call);
+  if (callee === void 0) return;
+  if (GRANULAR_HOOKS.has(callee)) {
+    emit.push({
+      capabilityId: UNRESOLVED_ID,
+      kind: callee === "useAgentAction" ? "action" : "observation",
+      origin: emit.origin(call),
+      resolution: "unresolved",
+      note: `${callee}() registers against a render-scope link, so its component type is not at this call site`
+    });
+    return;
+  }
+  if (callee !== "useAgentComponent" && callee !== "register") return;
+  const argument = call.arguments[0];
+  if (!argument) return;
+  const resolved = objectLiteralFor(argument, source);
+  if (!resolved.object) {
+    emit.push({
+      capabilityId: UNRESOLVED_ID,
+      kind: "action",
+      origin: emit.origin(call),
+      resolution: "unresolved",
+      note: `${callee}() call site could not be read: ${resolved.note}`
+    });
+    return;
+  }
+  const config = resolved.object;
+  const type = literalText(propertyOf(config, "type"));
+  if (type === void 0) {
+    if (callee === "register" && propertyOf(config, "type") === void 0) return;
+    emit.push({
+      capabilityId: UNRESOLVED_ID,
+      kind: "action",
+      origin: emit.origin(call),
+      resolution: "unresolved",
+      note: `\`type\` is not a string literal, so no capability id on this component can be determined`
+    });
+    return;
+  }
+  const componentPartial = hasSpread(config) ? "the component config spreads another object, so some metadata here may be dynamic" : void 0;
+  capabilitiesFromGroup(
+    propertyOf(config, "observations"),
+    "observation",
+    type,
+    componentPartial,
+    emit,
+    source
+  );
+  capabilitiesFromGroup(
+    propertyOf(config, "actions"),
+    "action",
+    type,
+    componentPartial,
+    emit,
+    source
+  );
+}
+function extractCapabilities(options) {
+  const root = resolve(options.root);
+  const tsconfigPath = options.tsconfig ? isAbsolute(options.tsconfig) ? options.tsconfig : join(root, options.tsconfig) : findTsconfig(root);
+  if (!tsconfigPath || !existsSync(tsconfigPath)) {
+    throw new Error(
+      `no tsconfig.json found from ${root} \u2014 \`capabilities\` reads the TypeScript program, so it needs one (pass --tsconfig to point at it)`
+    );
+  }
+  const { fileNames, options: compilerOptions } = readProgramFiles(tsconfigPath);
+  const program = ts.createProgram(fileNames, compilerOptions);
+  const capabilities = [];
+  let filesAnalyzed = 0;
+  let filesOutsideRoot = 0;
+  for (const source of program.getSourceFiles()) {
+    if (source.isDeclarationFile) continue;
+    if (source.fileName.includes("/node_modules/")) continue;
+    if (!isInside(root, source.fileName)) {
+      filesOutsideRoot += 1;
+      continue;
+    }
+    filesAnalyzed += 1;
+    const emit = {
+      push: (capability) => capabilities.push(capability),
+      origin: (node) => ({
+        file: relative(root, source.fileName),
+        line: source.getLineAndCharacterOfPosition(node.getStart(source)).line + 1
+      })
+    };
+    const visit = (node) => {
+      if (ts.isCallExpression(node)) visitCall(node, emit, source);
+      ts.forEachChild(node, visit);
+    };
+    visit(source);
+  }
+  capabilities.sort(
+    (a, b) => a.capabilityId.localeCompare(b.capabilityId) || a.origin.file.localeCompare(b.origin.file) || a.origin.line - b.origin.line
+  );
+  return {
+    capabilities,
+    tsconfig: tsconfigPath,
+    root,
+    filesAnalyzed,
+    filesOutsideRoot,
+    domain: "not-analyzed"
+  };
+}
+function isInside(root, file) {
+  const rel = relative(root, file);
+  return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
+}
+function authoredIds(inventory) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const capability of inventory.capabilities) {
+    if (capability.resolution === "unresolved") continue;
+    if (capability.capabilityId.endsWith(UNRESOLVED_ID)) continue;
+    ids.add(capability.capabilityId);
+  }
+  return ids;
+}
+function unresolved(inventory) {
+  return inventory.capabilities.filter((capability) => capability.resolution === "unresolved");
+}
+
+// src/render/plain.ts
+var MARK = { expose: "+", disable: "~", hide: "-" };
+function renderRow(row, lines) {
+  const tags = row.tags.length > 0 ? `  [${row.tags.join(", ")}]` : "";
+  lines.push(`  ${MARK[row.outcome]} ${row.name}${tags}`);
+  lines.push(`      ${row.description}`);
+  if (row.reason) lines.push(`      reason: ${row.reason}`);
+  if (row.policies) {
+    if (row.policies.length === 0) {
+      lines.push("      policies: none");
+    } else {
+      for (const policy of row.policies) {
+        const vote = policy.discovery ? policy.discovery.decision === "disable" ? `disable \u2014 ${policy.discovery.reason}` : policy.discovery.decision : "no discovery hook";
+        const phases = policy.phases.length > 0 ? policy.phases.join("/") : "\u2014";
+        const flags = [
+          policy.threw ? "THREW" : "",
+          policy.confirmationEscalation ? "escalates-confirmation" : ""
+        ].filter(Boolean).join(", ");
+        lines.push(
+          `      policy ${policy.name} (${policy.scope}, ${phases}): ${vote}${flags ? ` [${flags}]` : ""}`
+        );
+      }
+    }
+    if (row.availability && !row.availability.available) {
+      lines.push(
+        `      availability: unavailable${row.availability.reason ? ` \u2014 ${row.availability.reason}` : ""}`
+      );
+    }
+  }
+  if (row.schemas) {
+    if (row.schemas.input !== void 0) {
+      lines.push(`      input: ${JSON.stringify(row.schemas.input)}`);
+    }
+    if (row.schemas.output !== void 0) {
+      lines.push(`      output: ${JSON.stringify(row.schemas.output)}`);
+    }
+  }
+}
+function renderCountsPlain(view) {
+  return `${view.counts.callable} callable, ${view.counts.disabled} visible-disabled, ${view.counts.hidden} hidden` + (view.rejections.length > 0 ? `, ${view.rejections.length} registration${view.rejections.length === 1 ? "" : "s"} rejected` : "");
+}
+function renderRejections(view, lines) {
+  if (view.rejections.length === 0) return;
+  lines.push("");
+  lines.push(`rejected during mount  (${view.rejections.length})`);
+  for (const rejection of view.rejections) {
+    const why = rejection.reason === "duplicate" ? "duplicate \u2014 an earlier registration holds this key" : "guard \u2014 onRegister rejected this registration";
+    lines.push(`  ! ${rejection.componentType} (${rejection.instanceId})  ${why}`);
+  }
+}
+function renderSurfacePlain(view) {
+  const lines = [];
+  lines.push(
+    `scenario ${view.scenario}${view.route ? `  route ${view.route}` : ""}${view.scope && view.scope.length > 0 ? `  scope ${view.scope.join(" ")}` : ""}`
+  );
+  lines.push(renderCountsPlain(view));
+  renderRejections(view, lines);
+  const populated = view.groups.filter((group) => group.rows.length > 0);
+  if (populated.length === 0) {
+    lines.push("");
+    if (view.counts.hidden > 0) {
+      lines.push(
+        `Nothing is callable here \u2014 all ${view.counts.hidden} registered capabilities were hidden by policy.`
+      );
+      if (!view.explained) lines.push("Re-run with --explain to see which policy hid them.");
+    } else {
+      lines.push("Nothing is registered for this scenario \u2014 the agent has no surface here.");
+      if (!view.explained) {
+        lines.push("Re-run with --explain to see whether a policy hid it.");
+      }
+    }
+    return lines.join("\n");
+  }
+  for (const group of populated) {
+    lines.push("");
+    lines.push(`${group.heading}  (${group.rows.length})`);
+    for (const row of group.rows) renderRow(row, lines);
+  }
+  return lines.join("\n");
+}
+function renderInventoryPlain(inventory) {
+  const lines = [];
+  const resolved = inventory.capabilities.filter((c) => c.resolution !== "unresolved");
+  const unresolvedEntries = unresolved(inventory);
+  const ids = authoredIds(inventory);
+  lines.push(
+    `${ids.size} authored (upper bound), ${resolved.length} call site${resolved.length === 1 ? "" : "s"} across ${inventory.filesAnalyzed} file${inventory.filesAnalyzed === 1 ? "" : "s"}`
+  );
+  lines.push("domain: not analyzed \u2014 domain capabilities come from the oRPC router (OQ-1)");
+  if (inventory.filesOutsideRoot > 0) {
+    lines.push(
+      `${inventory.filesOutsideRoot} program file${inventory.filesOutsideRoot === 1 ? "" : "s"} outside the config's directory were not analyzed`
+    );
+  }
+  const byId = [...resolved].sort((a, b) => a.capabilityId.localeCompare(b.capabilityId));
+  if (byId.length > 0) {
+    lines.push("");
+    for (const capability of byId) {
+      const mark = capability.resolution === "static" ? " " : "~";
+      lines.push(`  ${mark} ${capability.capabilityId}`);
+      lines.push(`      ${capability.origin.file}:${capability.origin.line}  [${capability.kind}]`);
+      if (capability.description) lines.push(`      ${capability.description}`);
+      if (capability.note) lines.push(`      partial: ${capability.note}`);
+    }
+  }
+  if (unresolvedEntries.length > 0) {
+    lines.push("");
+    lines.push(`unresolved  (${unresolvedEntries.length})`);
+    for (const capability of unresolvedEntries) {
+      lines.push(`  ? ${capability.origin.file}:${capability.origin.line}`);
+      lines.push(`      ${capability.note ?? "the extractor could not read this call site"}`);
+    }
+    lines.push("");
+    lines.push(
+      `${unresolvedEntries.length} call site${unresolvedEntries.length === 1 ? "" : "s"} could not be resolved \u2014 fix them, or re-run with --allow-unresolved to accept the gap`
+    );
+  }
+  return lines.join("\n");
+}
+function renderCoveragePlain(report) {
+  const lines = [];
+  lines.push(
+    `${report.authored} authored (upper bound), ${report.reached} reached across ${report.scenarios.length} scenario${report.scenarios.length === 1 ? "" : "s"} (${report.scenarios.join(", ")})`
+  );
+  if (report.unreached.length > 0) {
+    lines.push("");
+    lines.push(`unreached  (${report.unreached.length})`);
+    for (const entry of report.unreached) {
+      lines.push(`  ${entry.capabilityId}`);
+      lines.push(`       ${entry.origin.file}:${entry.origin.line} \u2014 no scenario mounts it`);
+    }
+  }
+  if (report.domainReached.length > 0) {
+    lines.push("");
+    lines.push(
+      `domain (not analyzed)  (${report.domainReached.length}) \u2014 reached, and outside this inventory by design`
+    );
+    for (const id of report.domainReached) lines.push(`  ${id}`);
+  }
+  if (report.undeclared.length > 0) {
+    lines.push("");
+    lines.push(`undeclared  (${report.undeclared.length})`);
+    lines.push("  present at runtime with no static origin \u2014 a dynamic registration, or a gap here");
+    for (const id of report.undeclared) lines.push(`  ${id}`);
+  }
+  if (report.unresolved.length > 0) {
+    lines.push("");
+    lines.push(`unresolved  (${report.unresolved.length})`);
+    for (const capability of report.unresolved) {
+      lines.push(`  ? ${capability.origin.file}:${capability.origin.line}`);
+      lines.push(`      ${capability.note ?? "the extractor could not read this call site"}`);
+    }
+  }
+  if (report.allowed.length > 0) {
+    lines.push("");
+    lines.push(
+      `${report.allowed.length} unreached capabilit${report.allowed.length === 1 ? "y is" : "ies are"} allowlisted in ${report.allowlistPath}`
+    );
+  }
+  if (report.staleAllowlist.length > 0) {
+    lines.push("");
+    lines.push(`stale allowlist entries  (${report.staleAllowlist.length})`);
+    lines.push("  these are reached now \u2014 delete them so the list cannot silently rot");
+    for (const id of report.staleAllowlist) lines.push(`  ${id}`);
+  }
+  lines.push("");
+  const verdicts = [];
+  if (report.unreached.length > 0) {
+    verdicts.push(
+      `surface coverage gap in ${report.unreached.length} capabilit${report.unreached.length === 1 ? "y" : "ies"} \u2014 add a scenario, or delete the component`
+    );
+  }
+  if (report.unresolved.length > 0) {
+    verdicts.push(
+      `${report.unresolved.length} call site${report.unresolved.length === 1 ? "" : "s"} could not be read, so this report is incomplete \u2014 fix them, or accept the gap knowingly`
+    );
+  }
+  if (report.staleAllowlist.length > 0) {
+    verdicts.push(
+      `${report.staleAllowlist.length} allowlist entr${report.staleAllowlist.length === 1 ? "y is" : "ies are"} stale \u2014 remove them so the list cannot silently rot`
+    );
+  }
+  if (verdicts.length === 0) {
+    verdicts.push(
+      report.allowed.length > 0 ? "no new surface coverage gaps \u2014 the allowlist still holds the known ones" : "every authored capability is reached by a scenario"
+    );
+  }
+  lines.push(...verdicts);
+  return lines.join("\n");
+}
+function renderDiffPlain(scenario, entries) {
+  const lines = [`${scenario}: ${entries.length} change${entries.length === 1 ? "" : "s"}`];
+  for (const entry of entries) {
+    const where = entry.subject ? `${entry.subject}  (${entry.path})` : entry.path;
+    if (entry.kind === "added") lines.push(`  + ${where}  ${formatValue(entry.after)}`);
+    else if (entry.kind === "removed") lines.push(`  - ${where}  ${formatValue(entry.before)}`);
+    else {
+      lines.push(`  ~ ${where}`);
+      lines.push(`      before: ${formatValue(entry.before)}`);
+      lines.push(`      after:  ${formatValue(entry.after)}`);
+    }
+  }
+  return lines.join("\n");
+}
+
+export {
+  extractCapabilities,
+  authoredIds,
+  unresolved,
+  renderSurfacePlain,
+  renderInventoryPlain,
+  renderCoveragePlain,
+  renderDiffPlain
+};
+//# sourceMappingURL=chunk-4AEQKM2X.js.map

package/dist/chunk-4AEQKM2X.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/extract.ts","../src/render/plain.ts"],"sourcesContent":["/**\n * The static capability inventory (`AS-COVER-001…003`, D35).\n *\n * `inspect` answers *what can an agent do on this page right now*. It cannot\n * answer *did we author something no scenario ever reaches*, because a surface\n * is a projection of what is mounted: a route no scenario visits registers\n * nothing, so there is nothing to report and nothing to diff. The denominator\n * has to come from somewhere that does not require mounting.\n *\n * It comes from here. A registration call site is far more static than the\n * surface it produces:\n *\n * ```tsx\n * useAgentComponent({\n *   type: \"devices.table\",                       // string literal\n *   actions: { sort: action({ … }) },            // capability name is a key\n * });\n * ```\n *\n * `view:devices.table.sort` is fully determined by source text. What is\n * genuinely dynamic — availability, policy outcome, binding — is the\n * *projection*, and none of it is claimed here.\n *\n * ## This creates no exposure path (directive §2.1)\n *\n * No DOM is scanned, nothing is registered, no annotation is suggested. This\n * module *reads the same reviewed registration code* a human reads and counts\n * what is already there. It lives in `@agent-surface/cli` — which no adapter\n * imports and no application ships — and must never be re-exported from\n * `@agent-surface/core`, mirroring `AS-EXPLAIN-004` (`AS-COVER-006`).\n *\n * ## Failure discipline is the substance, not a detail\n *\n * > Better a missing check than a misleading check.\n *\n * A call site this module cannot understand is **reported with its file and\n * line**, never dropped. An inventory that silently omitted the constructs it\n * failed to parse would understate the denominator, and a coverage number built\n * on it would claim completeness it never had.\n */\nimport { existsSync } from \"node:fs\";\nimport { dirname, isAbsolute, join, relative, resolve } from \"node:path\";\nimport ts from \"typescript\";\n\n/** Identity could not be recovered from the call site at all. */\nexport const UNRESOLVED_ID = \"<unresolved>\";\n\nexport interface AuthoredCapability {\n  /** Canonical id, instance-independent: `view:devices.table.sort`. */\n  capabilityId: string;\n  kind: \"observation\" | \"action\" | \"procedure\";\n  /** Where a human can go and read it. */\n  origin: { file: string; line: number };\n  /** Literals recovered from the call site; absent when not statically known. */\n  description?: string;\n  effect?: string;\n  /**\n   * How much of this call site the extractor understood.\n   *\n   * `static` — identity and metadata both recovered from literals.\n   * `partial` — identity resolved, some metadata dynamic. The common case: a\n   *   spread `instanceId`, or a description built from a template.\n   * `unresolved` — identity NOT resolved. Reported, never dropped.\n   */\n  resolution: \"static\" | \"partial\" | \"unresolved\";\n  /** Present on `partial`/`unresolved`: what defeated the extractor. */\n  note?: string;\n}\n\nexport interface CapabilityInventory {\n  capabilities: AuthoredCapability[];\n  /** Absolute path to the tsconfig whose file list was analyzed. */\n  tsconfig: string;\n  /** Directory the analysis was rooted at — the surface config's own. */\n  root: string;\n  /** Files the program actually walked — the inventory's blast radius. */\n  filesAnalyzed: number;\n  /**\n   * Program files skipped for living outside `root` — workspace packages the\n   * app's tsconfig aliases in, typically the library's own source. Reported\n   * rather than dropped silently: a boundary nobody can see is a boundary\n   * nobody can check.\n   */\n  filesOutsideRoot: number;\n  /**\n   * The `domain:` plane is deliberately *not* analyzed here. Those capabilities\n   * come from the oRPC router, which is already a static export (OQ-1), and\n   * reporting zero of them would read as \"there are none\" rather than \"nobody\n   * looked\".\n   */\n  domain: \"not-analyzed\";\n}\n\n/* ── locating the program ─────────────────────────────────────────────── */\n\nexport function findTsconfig(from: string): string | undefined {\n  return ts.findConfigFile(resolve(from), ts.sys.fileExists, \"tsconfig.json\");\n}\n\ninterface ProgramFiles {\n  fileNames: string[];\n  options: ts.CompilerOptions;\n}\n\nfunction readProgramFiles(tsconfigPath: string): ProgramFiles {\n  const read = ts.readConfigFile(tsconfigPath, ts.sys.readFile);\n  if (read.error) {\n    throw new Error(\n      `could not read ${tsconfigPath}: ${ts.flattenDiagnosticMessageText(read.error.messageText, \" \")}`,\n    );\n  }\n  const parsed = ts.parseJsonConfigFileContent(\n    read.config as object,\n    ts.sys,\n    dirname(tsconfigPath),\n  );\n  if (parsed.errors.length > 0 && parsed.fileNames.length === 0) {\n    throw new Error(\n      `could not resolve any files from ${tsconfigPath}: ${parsed.errors\n        .map((error) => ts.flattenDiagnosticMessageText(error.messageText, \" \"))\n        .join(\"; \")}`,\n    );\n  }\n  return { fileNames: parsed.fileNames, options: parsed.options };\n}\n\n/* ── small AST helpers ────────────────────────────────────────────────── */\n\nfunction calleeName(call: ts.CallExpression): string | undefined {\n  if (ts.isIdentifier(call.expression)) return call.expression.text;\n  if (ts.isPropertyAccessExpression(call.expression)) return call.expression.name.text;\n  return undefined;\n}\n\nfunction propertyName(name: ts.PropertyName): string | undefined {\n  if (ts.isIdentifier(name) || ts.isStringLiteral(name)) return name.text;\n  return undefined;\n}\n\nfunction propertyOf(\n  object: ts.ObjectLiteralExpression,\n  wanted: string,\n): ts.Expression | undefined {\n  for (const property of object.properties) {\n    if (ts.isPropertyAssignment(property) && propertyName(property.name) === wanted) {\n      return property.initializer;\n    }\n  }\n  return undefined;\n}\n\nfunction hasSpread(object: ts.ObjectLiteralExpression): boolean {\n  return object.properties.some((property) => ts.isSpreadAssignment(property));\n}\n\nfunction literalText(node: ts.Expression | undefined): string | undefined {\n  if (!node) return undefined;\n  if (ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node)) return node.text;\n  if (ts.isParenthesizedExpression(node)) return literalText(node.expression);\n  // `\"one long \" + \"description split over two lines\"` is as statically known\n  // as either half. Descriptions are the provider's cached prompt prefix (D28),\n  // so they are long enough that authors wrap them — calling that `partial`\n  // would report the codebase's most common formatting choice as a defect.\n  if (ts.isBinaryExpression(node) && node.operatorToken.kind === ts.SyntaxKind.PlusToken) {\n    const left = literalText(node.left);\n    const right = literalText(node.right);\n    if (left !== undefined && right !== undefined) return left + right;\n  }\n  return undefined;\n}\n\n/** A short name for whatever construct defeated us, for the `note`. */\nfunction describeConstruct(node: ts.Expression): string {\n  if (ts.isCallExpression(node)) {\n    const callee = calleeName(node);\n    return callee ? `built by ${callee}()` : \"built by a call expression\";\n  }\n  if (ts.isIdentifier(node)) return `a variable (${node.text}) this extractor could not follow`;\n  if (ts.isConditionalExpression(node)) return \"a conditional expression\";\n  if (ts.isTemplateExpression(node)) return \"a template with substitutions\";\n  if (ts.isPropertyAccessExpression(node)) return \"a property access\";\n  return \"a non-literal expression\";\n}\n\n/**\n * Resolves a config argument to an object literal, following **one hop** to a\n * same-module `const`.\n *\n * One hop is the whole rule. `useAgentComponent(CONFIG)` where `CONFIG` is a\n * module constant is common and cheap; `useAgentComponent(buildConfig(props))`\n * is not resolvable at any depth worth implementing. Stopping at one hop keeps\n * the limit *visible in the output* rather than buried in the implementation —\n * the deeper case is reported as `unresolved` with the construct named, which\n * is the behaviour this module exists to guarantee.\n */\nfunction objectLiteralFor(\n  expression: ts.Expression,\n  source: ts.SourceFile,\n): { object?: ts.ObjectLiteralExpression; note?: string } {\n  if (ts.isObjectLiteralExpression(expression)) return { object: expression };\n\n  if (ts.isIdentifier(expression)) {\n    const target = expression.text;\n    let found: ts.ObjectLiteralExpression | undefined;\n    const visit = (node: ts.Node): void => {\n      if (found) return;\n      if (\n        ts.isVariableDeclaration(node) &&\n        ts.isIdentifier(node.name) &&\n        node.name.text === target &&\n        node.initializer &&\n        ts.isObjectLiteralExpression(node.initializer)\n      ) {\n        found = node.initializer;\n        return;\n      }\n      ts.forEachChild(node, visit);\n    };\n    visit(source);\n    if (found) return { object: found };\n    return {\n      note: `the config is \\`${target}\\`, which is not a same-module object literal — the extractor follows one hop only`,\n    };\n  }\n\n  return { note: `the config is ${describeConstruct(expression)}` };\n}\n\n/* ── the extraction itself ────────────────────────────────────────────── */\n\n/** Hooks that register one capability against the enclosing render scope. */\nconst GRANULAR_HOOKS = new Set([\"useAgentAction\", \"useAgentObservation\"]);\n\ninterface Emitter {\n  push(capability: AuthoredCapability): void;\n  origin(node: ts.Node): { file: string; line: number };\n}\n\nfunction capabilitiesFromGroup(\n  group: ts.Expression | undefined,\n  kind: \"observation\" | \"action\",\n  componentType: string,\n  componentPartial: string | undefined,\n  emit: Emitter,\n  source: ts.SourceFile,\n): void {\n  if (!group) return;\n\n  const resolved = objectLiteralFor(group, source);\n  if (!resolved.object) {\n    emit.push({\n      capabilityId: `view:${componentType}.${UNRESOLVED_ID}`,\n      kind,\n      origin: emit.origin(group),\n      resolution: \"unresolved\",\n      note: `\\`${kind}s\\` on \"${componentType}\" is not an object literal: ${resolved.note}`,\n    });\n    return;\n  }\n\n  for (const property of resolved.object.properties) {\n    // A spread inside the capability map can add capabilities this extractor\n    // cannot name. That is an identity gap, not a metadata gap.\n    if (ts.isSpreadAssignment(property)) {\n      emit.push({\n        capabilityId: `view:${componentType}.${UNRESOLVED_ID}`,\n        kind,\n        origin: emit.origin(property),\n        resolution: \"unresolved\",\n        note: `\\`${kind}s\\` on \"${componentType}\" spreads another object, which may contribute capabilities this inventory cannot name`,\n      });\n      continue;\n    }\n\n    const name =\n      ts.isPropertyAssignment(property) || ts.isMethodDeclaration(property)\n        ? propertyName(property.name)\n        : ts.isShorthandPropertyAssignment(property)\n          ? property.name.text\n          : undefined;\n\n    if (name === undefined) {\n      emit.push({\n        capabilityId: `view:${componentType}.${UNRESOLVED_ID}`,\n        kind,\n        origin: emit.origin(property),\n        resolution: \"unresolved\",\n        note: `a capability on \"${componentType}\" has a computed name`,\n      });\n      continue;\n    }\n\n    // Identity is recovered from the key alone; the value only carries metadata.\n    const capability: AuthoredCapability = {\n      capabilityId: `view:${componentType}.${name}`,\n      kind,\n      origin: emit.origin(property),\n      resolution: \"static\",\n    };\n    const notes: string[] = [];\n    if (componentPartial) notes.push(componentPartial);\n\n    const value = ts.isPropertyAssignment(property) ? property.initializer : undefined;\n    const definition =\n      value && ts.isCallExpression(value) && value.arguments.length > 0\n        ? value.arguments[0]\n        : value;\n\n    if (definition && ts.isObjectLiteralExpression(definition)) {\n      const description = literalText(propertyOf(definition, \"description\"));\n      if (description !== undefined) capability.description = description;\n      else notes.push(\"description is not a string literal\");\n\n      if (kind === \"action\") {\n        const effect = literalText(propertyOf(definition, \"effect\"));\n        if (effect !== undefined) capability.effect = effect;\n        else notes.push(\"effect is not a string literal\");\n      }\n      if (hasSpread(definition)) notes.push(\"the definition spreads another object\");\n    } else {\n      notes.push(\n        value\n          ? `the definition is ${describeConstruct(value)}`\n          : \"the definition is not an object literal\",\n      );\n    }\n\n    if (notes.length > 0) {\n      capability.resolution = \"partial\";\n      capability.note = notes.join(\"; \");\n    }\n    emit.push(capability);\n  }\n}\n\nfunction visitCall(call: ts.CallExpression, emit: Emitter, source: ts.SourceFile): void {\n  const callee = calleeName(call);\n  if (callee === undefined) return;\n\n  if (GRANULAR_HOOKS.has(callee)) {\n    // OQ-3: the granular hooks register through a render-scope link rather than\n    // one aggregated descriptor, so the component `type` is not at this call\n    // site at all. Reporting the call site as unresolved is the honest state\n    // until that join key is settled — silently ignoring it would make a\n    // codebase that uses them look fully covered.\n    emit.push({\n      capabilityId: UNRESOLVED_ID,\n      kind: callee === \"useAgentAction\" ? \"action\" : \"observation\",\n      origin: emit.origin(call),\n      resolution: \"unresolved\",\n      note: `${callee}() registers against a render-scope link, so its component type is not at this call site`,\n    });\n    return;\n  }\n\n  if (callee !== \"useAgentComponent\" && callee !== \"register\") return;\n  const argument = call.arguments[0];\n  if (!argument) return;\n\n  const resolved = objectLiteralFor(argument, source);\n  if (!resolved.object) {\n    emit.push({\n      capabilityId: UNRESOLVED_ID,\n      kind: \"action\",\n      origin: emit.origin(call),\n      resolution: \"unresolved\",\n      note: `${callee}() call site could not be read: ${resolved.note}`,\n    });\n    return;\n  }\n\n  const config = resolved.object;\n  const type = literalText(propertyOf(config, \"type\"));\n  if (type === undefined) {\n    // `register` is a common method name; only treat it as ours once the call\n    // actually looks like a registration. A `type` that exists but is dynamic\n    // *is* ours, and is a genuine finding.\n    if (callee === \"register\" && propertyOf(config, \"type\") === undefined) return;\n    emit.push({\n      capabilityId: UNRESOLVED_ID,\n      kind: \"action\",\n      origin: emit.origin(call),\n      resolution: \"unresolved\",\n      note: `\\`type\\` is not a string literal, so no capability id on this component can be determined`,\n    });\n    return;\n  }\n\n  // A spread at the component level is the documented common case — the\n  // conditional `...(props.instance ? { instanceId } : {})`. `instanceId` is not\n  // part of a capability id, so identity survives; metadata may not.\n  const componentPartial = hasSpread(config)\n    ? \"the component config spreads another object, so some metadata here may be dynamic\"\n    : undefined;\n\n  capabilitiesFromGroup(\n    propertyOf(config, \"observations\"),\n    \"observation\",\n    type,\n    componentPartial,\n    emit,\n    source,\n  );\n  capabilitiesFromGroup(\n    propertyOf(config, \"actions\"),\n    \"action\",\n    type,\n    componentPartial,\n    emit,\n    source,\n  );\n}\n\nexport interface ExtractOptions {\n  /** Directory the analysis is rooted at — normally the surface config's dir. */\n  root: string;\n  /** Explicit tsconfig; found upward from `root` when omitted. */\n  tsconfig?: string;\n}\n\n/**\n * Reads the program and returns every capability its registration call sites\n * author. Nothing is executed: no Vite server, no jsdom, no scenarios, no mount.\n */\nexport function extractCapabilities(options: ExtractOptions): CapabilityInventory {\n  const root = resolve(options.root);\n  const tsconfigPath = options.tsconfig\n    ? isAbsolute(options.tsconfig)\n      ? options.tsconfig\n      : join(root, options.tsconfig)\n    : findTsconfig(root);\n\n  if (!tsconfigPath || !existsSync(tsconfigPath)) {\n    throw new Error(\n      `no tsconfig.json found from ${root} — \\`capabilities\\` reads the TypeScript program, ` +\n        \"so it needs one (pass --tsconfig to point at it)\",\n    );\n  }\n\n  const { fileNames, options: compilerOptions } = readProgramFiles(tsconfigPath);\n  const program = ts.createProgram(fileNames, compilerOptions);\n\n  const capabilities: AuthoredCapability[] = [];\n  let filesAnalyzed = 0;\n\n  let filesOutsideRoot = 0;\n\n  for (const source of program.getSourceFiles()) {\n    if (source.isDeclarationFile) continue;\n    if (source.fileName.includes(\"/node_modules/\")) continue;\n    // A tsconfig with workspace path aliases pulls the library's *own* source\n    // into the program, where `registry.register(definition)` inside\n    // `useAgentComponent` reads as an unresolvable registration call site. It\n    // is not one: it is the implementation every real call site goes through.\n    // The inventory covers the app the surface config points at, and says so\n    // rather than quietly widening or narrowing.\n    if (!isInside(root, source.fileName)) {\n      filesOutsideRoot += 1;\n      continue;\n    }\n    filesAnalyzed += 1;\n\n    const emit: Emitter = {\n      push: (capability) => capabilities.push(capability),\n      origin: (node) => ({\n        file: relative(root, source.fileName),\n        line: source.getLineAndCharacterOfPosition(node.getStart(source)).line + 1,\n      }),\n    };\n\n    const visit = (node: ts.Node): void => {\n      if (ts.isCallExpression(node)) visitCall(node, emit, source);\n      ts.forEachChild(node, visit);\n    };\n    visit(source);\n  }\n\n  capabilities.sort(\n    (a, b) =>\n      a.capabilityId.localeCompare(b.capabilityId) ||\n      a.origin.file.localeCompare(b.origin.file) ||\n      a.origin.line - b.origin.line,\n  );\n\n  return {\n    capabilities,\n    tsconfig: tsconfigPath,\n    root,\n    filesAnalyzed,\n    filesOutsideRoot,\n    domain: \"not-analyzed\",\n  };\n}\n\n/** True when `file` lives under `root` — the analyzed boundary. */\nfunction isInside(root: string, file: string): boolean {\n  const rel = relative(root, file);\n  return rel !== \"\" && !rel.startsWith(\"..\") && !isAbsolute(rel);\n}\n\n/** Distinct capability ids the inventory resolved — the coverage denominator. */\nexport function authoredIds(inventory: CapabilityInventory): Set<string> {\n  const ids = new Set<string>();\n  for (const capability of inventory.capabilities) {\n    if (capability.resolution === \"unresolved\") continue;\n    if (capability.capabilityId.endsWith(UNRESOLVED_ID)) continue;\n    ids.add(capability.capabilityId);\n  }\n  return ids;\n}\n\nexport function unresolved(inventory: CapabilityInventory): AuthoredCapability[] {\n  return inventory.capabilities.filter((capability) => capability.resolution === \"unresolved\");\n}\n","import type { CapabilityRow, SurfaceView } from \"./model.js\";\nimport type { DiffEntry } from \"../baseline.js\";\nimport { formatValue } from \"../baseline.js\";\nimport { authoredIds, unresolved, type CapabilityInventory } from \"../extract.js\";\nimport type { CoverageReport } from \"../coverage.js\";\n\n/**\n * The no-colour, no-cursor rendering used when stdout is piped or when\n * `--plain`, `CI` or `NO_COLOR` is set. Same view model as the Ink UI, so the\n * two cannot disagree about what the surface contains.\n */\n\nconst MARK = { expose: \"+\", disable: \"~\", hide: \"-\" } as const;\n\nfunction renderRow(row: CapabilityRow, lines: string[]): void {\n  const tags = row.tags.length > 0 ? `  [${row.tags.join(\", \")}]` : \"\";\n  lines.push(`  ${MARK[row.outcome]} ${row.name}${tags}`);\n  lines.push(`      ${row.description}`);\n  if (row.reason) lines.push(`      reason: ${row.reason}`);\n\n  if (row.policies) {\n    if (row.policies.length === 0) {\n      lines.push(\"      policies: none\");\n    } else {\n      for (const policy of row.policies) {\n        const vote = policy.discovery\n          ? policy.discovery.decision === \"disable\"\n            ? `disable — ${policy.discovery.reason}`\n            : policy.discovery.decision\n          : \"no discovery hook\";\n        const phases = policy.phases.length > 0 ? policy.phases.join(\"/\") : \"—\";\n        const flags = [\n          policy.threw ? \"THREW\" : \"\",\n          policy.confirmationEscalation ? \"escalates-confirmation\" : \"\",\n        ]\n          .filter(Boolean)\n          .join(\", \");\n        lines.push(\n          `      policy ${policy.name} (${policy.scope}, ${phases}): ${vote}${\n            flags ? ` [${flags}]` : \"\"\n          }`,\n        );\n      }\n    }\n    if (row.availability && !row.availability.available) {\n      lines.push(\n        `      availability: unavailable${\n          row.availability.reason ? ` — ${row.availability.reason}` : \"\"\n        }`,\n      );\n    }\n  }\n\n  if (row.schemas) {\n    if (row.schemas.input !== undefined) {\n      lines.push(`      input: ${JSON.stringify(row.schemas.input)}`);\n    }\n    if (row.schemas.output !== undefined) {\n      lines.push(`      output: ${JSON.stringify(row.schemas.output)}`);\n    }\n  }\n}\n\n/**\n * The counts line, and everything it is relative to (`AS-CLI-007`).\n *\n * `hidden` is printed unconditionally. It is computed on every run — the\n * explanation is always collected — and suppressing it outside `--explain`\n * meant a surface with a policy-hidden half rendered as a complete one. The\n * *attribution* still needs `--explain`; only the count moved.\n */\nexport function renderCountsPlain(view: SurfaceView): string {\n  return (\n    `${view.counts.callable} callable, ${view.counts.disabled} visible-disabled, ` +\n    `${view.counts.hidden} hidden` +\n    (view.rejections.length > 0\n      ? `, ${view.rejections.length} registration${view.rejections.length === 1 ? \"\" : \"s\"} rejected`\n      : \"\")\n  );\n}\n\nfunction renderRejections(view: SurfaceView, lines: string[]): void {\n  if (view.rejections.length === 0) return;\n  lines.push(\"\");\n  lines.push(`rejected during mount  (${view.rejections.length})`);\n  for (const rejection of view.rejections) {\n    const why =\n      rejection.reason === \"duplicate\"\n        ? \"duplicate — an earlier registration holds this key\"\n        : \"guard — onRegister rejected this registration\";\n    lines.push(`  ! ${rejection.componentType} (${rejection.instanceId})  ${why}`);\n  }\n}\n\nexport function renderSurfacePlain(view: SurfaceView): string {\n  const lines: string[] = [];\n  lines.push(\n    `scenario ${view.scenario}${view.route ? `  route ${view.route}` : \"\"}${\n      view.scope && view.scope.length > 0 ? `  scope ${view.scope.join(\" \")}` : \"\"\n    }`,\n  );\n  lines.push(renderCountsPlain(view));\n\n  renderRejections(view, lines);\n\n  const populated = view.groups.filter((group) => group.rows.length > 0);\n  if (populated.length === 0) {\n    lines.push(\"\");\n    // \"Nothing is registered\" is only true when nothing was hidden. Saying it\n    // over a surface a policy emptied sends the reader to the wrong file.\n    if (view.counts.hidden > 0) {\n      lines.push(\n        `Nothing is callable here — all ${view.counts.hidden} registered capabilities were hidden by policy.`,\n      );\n      if (!view.explained) lines.push(\"Re-run with --explain to see which policy hid them.\");\n    } else {\n      lines.push(\"Nothing is registered for this scenario — the agent has no surface here.\");\n      if (!view.explained) {\n        lines.push(\"Re-run with --explain to see whether a policy hid it.\");\n      }\n    }\n    return lines.join(\"\\n\");\n  }\n\n  for (const group of populated) {\n    lines.push(\"\");\n    lines.push(`${group.heading}  (${group.rows.length})`);\n    for (const row of group.rows) renderRow(row, lines);\n  }\n  return lines.join(\"\\n\");\n}\n\n/**\n * The static inventory (`AS-COVER-001…003`). The summary says \"upper bound\" in\n * so many words: a tsconfig's include globs are wider than what a bundle\n * reaches, so a capability in a component no route renders any more is in here.\n * That is dead code — a different finding, not a false positive — and the\n * reader has to be told which number they are holding.\n */\nexport function renderInventoryPlain(inventory: CapabilityInventory): string {\n  const lines: string[] = [];\n  const resolved = inventory.capabilities.filter((c) => c.resolution !== \"unresolved\");\n  const unresolvedEntries = unresolved(inventory);\n  const ids = authoredIds(inventory);\n\n  lines.push(\n    `${ids.size} authored (upper bound), ${resolved.length} call site${\n      resolved.length === 1 ? \"\" : \"s\"\n    } across ${inventory.filesAnalyzed} file${inventory.filesAnalyzed === 1 ? \"\" : \"s\"}`,\n  );\n  lines.push(\"domain: not analyzed — domain capabilities come from the oRPC router (OQ-1)\");\n  if (inventory.filesOutsideRoot > 0) {\n    // Relative, not absolute: plain output is byte-stable across runs\n    // (`AS-CLI-003`), and an absolute path makes it machine-specific the moment\n    // two people diff a CI log.\n    lines.push(\n      `${inventory.filesOutsideRoot} program file${\n        inventory.filesOutsideRoot === 1 ? \"\" : \"s\"\n      } outside the config's directory were not analyzed`,\n    );\n  }\n\n  const byId = [...resolved].sort((a, b) => a.capabilityId.localeCompare(b.capabilityId));\n  if (byId.length > 0) {\n    lines.push(\"\");\n    for (const capability of byId) {\n      const mark = capability.resolution === \"static\" ? \" \" : \"~\";\n      lines.push(`  ${mark} ${capability.capabilityId}`);\n      lines.push(`      ${capability.origin.file}:${capability.origin.line}  [${capability.kind}]`);\n      if (capability.description) lines.push(`      ${capability.description}`);\n      if (capability.note) lines.push(`      partial: ${capability.note}`);\n    }\n  }\n\n  if (unresolvedEntries.length > 0) {\n    lines.push(\"\");\n    lines.push(`unresolved  (${unresolvedEntries.length})`);\n    for (const capability of unresolvedEntries) {\n      lines.push(`  ? ${capability.origin.file}:${capability.origin.line}`);\n      lines.push(`      ${capability.note ?? \"the extractor could not read this call site\"}`);\n    }\n    lines.push(\"\");\n    lines.push(\n      `${unresolvedEntries.length} call site${\n        unresolvedEntries.length === 1 ? \"\" : \"s\"\n      } could not be resolved — fix them, or re-run with --allow-unresolved to accept the gap`,\n    );\n  }\n\n  return lines.join(\"\\n\");\n}\n\n/**\n * The coverage report (`AS-COVER-004…005`). `unreached` is the finding this\n * command exists for; the other two buckets are reported rather than buried,\n * for the same reason the inventory reports what it could not parse.\n */\nexport function renderCoveragePlain(report: CoverageReport): string {\n  const lines: string[] = [];\n  lines.push(\n    `${report.authored} authored (upper bound), ${report.reached} reached across ${\n      report.scenarios.length\n    } scenario${report.scenarios.length === 1 ? \"\" : \"s\"} (${report.scenarios.join(\", \")})`,\n  );\n\n  if (report.unreached.length > 0) {\n    lines.push(\"\");\n    lines.push(`unreached  (${report.unreached.length})`);\n    for (const entry of report.unreached) {\n      lines.push(`  ${entry.capabilityId}`);\n      lines.push(`       ${entry.origin.file}:${entry.origin.line} — no scenario mounts it`);\n    }\n  }\n\n  if (report.domainReached.length > 0) {\n    lines.push(\"\");\n    lines.push(\n      `domain (not analyzed)  (${report.domainReached.length}) — reached, and outside this inventory by design`,\n    );\n    for (const id of report.domainReached) lines.push(`  ${id}`);\n  }\n\n  if (report.undeclared.length > 0) {\n    lines.push(\"\");\n    lines.push(`undeclared  (${report.undeclared.length})`);\n    lines.push(\"  present at runtime with no static origin — a dynamic registration, or a gap here\");\n    for (const id of report.undeclared) lines.push(`  ${id}`);\n  }\n\n  if (report.unresolved.length > 0) {\n    lines.push(\"\");\n    lines.push(`unresolved  (${report.unresolved.length})`);\n    for (const capability of report.unresolved) {\n      lines.push(`  ? ${capability.origin.file}:${capability.origin.line}`);\n      lines.push(`      ${capability.note ?? \"the extractor could not read this call site\"}`);\n    }\n  }\n\n  if (report.allowed.length > 0) {\n    lines.push(\"\");\n    lines.push(\n      `${report.allowed.length} unreached capabilit${\n        report.allowed.length === 1 ? \"y is\" : \"ies are\"\n      } allowlisted in ${report.allowlistPath}`,\n    );\n  }\n\n  if (report.staleAllowlist.length > 0) {\n    lines.push(\"\");\n    lines.push(`stale allowlist entries  (${report.staleAllowlist.length})`);\n    lines.push(\"  these are reached now — delete them so the list cannot silently rot\");\n    for (const id of report.staleAllowlist) lines.push(`  ${id}`);\n  }\n\n  lines.push(\"\");\n  // Each bucket gets its own remedy. \"Add a scenario, or delete the component\"\n  // is the right advice for an unreached capability and useless advice for a\n  // call site the extractor could not read.\n  const verdicts: string[] = [];\n  if (report.unreached.length > 0) {\n    verdicts.push(\n      `surface coverage gap in ${report.unreached.length} capabilit${\n        report.unreached.length === 1 ? \"y\" : \"ies\"\n      } — add a scenario, or delete the component`,\n    );\n  }\n  if (report.unresolved.length > 0) {\n    verdicts.push(\n      `${report.unresolved.length} call site${\n        report.unresolved.length === 1 ? \"\" : \"s\"\n      } could not be read, so this report is incomplete — fix them, or accept the gap knowingly`,\n    );\n  }\n  if (report.staleAllowlist.length > 0) {\n    verdicts.push(\n      `${report.staleAllowlist.length} allowlist entr${\n        report.staleAllowlist.length === 1 ? \"y is\" : \"ies are\"\n      } stale — remove them so the list cannot silently rot`,\n    );\n  }\n  if (verdicts.length === 0) {\n    verdicts.push(\n      report.allowed.length > 0\n        ? \"no new surface coverage gaps — the allowlist still holds the known ones\"\n        : \"every authored capability is reached by a scenario\",\n    );\n  }\n  lines.push(...verdicts);\n  return lines.join(\"\\n\");\n}\n\nexport function renderDiffPlain(scenario: string, entries: DiffEntry[]): string {\n  const lines = [`${scenario}: ${entries.length} change${entries.length === 1 ? \"\" : \"s\"}`];\n  for (const entry of entries) {\n    const where = entry.subject ? `${entry.subject}  (${entry.path})` : entry.path;\n    if (entry.kind === \"added\") lines.push(`  + ${where}  ${formatValue(entry.after)}`);\n    else if (entry.kind === \"removed\") lines.push(`  - ${where}  ${formatValue(entry.before)}`);\n    else {\n      lines.push(`  ~ ${where}`);\n      lines.push(`      before: ${formatValue(entry.before)}`);\n      lines.push(`      after:  ${formatValue(entry.after)}`);\n    }\n  }\n  return lines.join(\"\\n\");\n}\n"],"mappings":";;;;;AAwCA,SAAS,kBAAkB;AAC3B,SAAS,SAAS,YAAY,MAAM,UAAU,eAAe;AAC7D,OAAO,QAAQ;AAGR,IAAM,gBAAgB;AAkDtB,SAAS,aAAa,MAAkC;AAC7D,SAAO,GAAG,eAAe,QAAQ,IAAI,GAAG,GAAG,IAAI,YAAY,eAAe;AAC5E;AAOA,SAAS,iBAAiB,cAAoC;AAC5D,QAAM,OAAO,GAAG,eAAe,cAAc,GAAG,IAAI,QAAQ;AAC5D,MAAI,KAAK,OAAO;AACd,UAAM,IAAI;AAAA,MACR,kBAAkB,YAAY,KAAK,GAAG,6BAA6B,KAAK,MAAM,aAAa,GAAG,CAAC;AAAA,IACjG;AAAA,EACF;AACA,QAAM,SAAS,GAAG;AAAA,IAChB,KAAK;AAAA,IACL,GAAG;AAAA,IACH,QAAQ,YAAY;AAAA,EACtB;AACA,MAAI,OAAO,OAAO,SAAS,KAAK,OAAO,UAAU,WAAW,GAAG;AAC7D,UAAM,IAAI;AAAA,MACR,oCAAoC,YAAY,KAAK,OAAO,OACzD,IAAI,CAAC,UAAU,GAAG,6BAA6B,MAAM,aAAa,GAAG,CAAC,EACtE,KAAK,IAAI,CAAC;AAAA,IACf;AAAA,EACF;AACA,SAAO,EAAE,WAAW,OAAO,WAAW,SAAS,OAAO,QAAQ;AAChE;AAIA,SAAS,WAAW,MAA6C;AAC/D,MAAI,GAAG,aAAa,KAAK,UAAU,EAAG,QAAO,KAAK,WAAW;AAC7D,MAAI,GAAG,2BAA2B,KAAK,UAAU,EAAG,QAAO,KAAK,WAAW,KAAK;AAChF,SAAO;AACT;AAEA,SAAS,aAAa,MAA2C;AAC/D,MAAI,GAAG,aAAa,IAAI,KAAK,GAAG,gBAAgB,IAAI,EAAG,QAAO,KAAK;AACnE,SAAO;AACT;AAEA,SAAS,WACP,QACA,QAC2B;AAC3B,aAAW,YAAY,OAAO,YAAY;AACxC,QAAI,GAAG,qBAAqB,QAAQ,KAAK,aAAa,SAAS,IAAI,MAAM,QAAQ;AAC/E,aAAO,SAAS;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,UAAU,QAA6C;AAC9D,SAAO,OAAO,WAAW,KAAK,CAAC,aAAa,GAAG,mBAAmB,QAAQ,CAAC;AAC7E;AAEA,SAAS,YAAY,MAAqD;AACxE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,GAAG,gBAAgB,IAAI,KAAK,GAAG,gCAAgC,IAAI,EAAG,QAAO,KAAK;AACtF,MAAI,GAAG,0BAA0B,IAAI,EAAG,QAAO,YAAY,KAAK,UAAU;AAK1E,MAAI,GAAG,mBAAmB,IAAI,KAAK,KAAK,cAAc,SAAS,GAAG,WAAW,WAAW;AACtF,UAAM,OAAO,YAAY,KAAK,IAAI;AAClC,UAAM,QAAQ,YAAY,KAAK,KAAK;AACpC,QAAI,SAAS,UAAa,UAAU,OAAW,QAAO,OAAO;AAAA,EAC/D;AACA,SAAO;AACT;AAGA,SAAS,kBAAkB,MAA6B;AACtD,MAAI,GAAG,iBAAiB,IAAI,GAAG;AAC7B,UAAM,SAAS,WAAW,IAAI;AAC9B,WAAO,SAAS,YAAY,MAAM,OAAO;AAAA,EAC3C;AACA,MAAI,GAAG,aAAa,IAAI,EAAG,QAAO,eAAe,KAAK,IAAI;AAC1D,MAAI,GAAG,wBAAwB,IAAI,EAAG,QAAO;AAC7C,MAAI,GAAG,qBAAqB,IAAI,EAAG,QAAO;AAC1C,MAAI,GAAG,2BAA2B,IAAI,EAAG,QAAO;AAChD,SAAO;AACT;AAaA,SAAS,iBACP,YACA,QACwD;AACxD,MAAI,GAAG,0BAA0B,UAAU,EAAG,QAAO,EAAE,QAAQ,WAAW;AAE1E,MAAI,GAAG,aAAa,UAAU,GAAG;AAC/B,UAAM,SAAS,WAAW;AAC1B,QAAI;AACJ,UAAM,QAAQ,CAAC,SAAwB;AACrC,UAAI,MAAO;AACX,UACE,GAAG,sBAAsB,IAAI,KAC7B,GAAG,aAAa,KAAK,IAAI,KACzB,KAAK,KAAK,SAAS,UACnB,KAAK,eACL,GAAG,0BAA0B,KAAK,WAAW,GAC7C;AACA,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,SAAG,aAAa,MAAM,KAAK;AAAA,IAC7B;AACA,UAAM,MAAM;AACZ,QAAI,MAAO,QAAO,EAAE,QAAQ,MAAM;AAClC,WAAO;AAAA,MACL,MAAM,mBAAmB,MAAM;AAAA,IACjC;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,iBAAiB,kBAAkB,UAAU,CAAC,GAAG;AAClE;AAKA,IAAM,iBAAiB,oBAAI,IAAI,CAAC,kBAAkB,qBAAqB,CAAC;AAOxE,SAAS,sBACP,OACA,MACA,eACA,kBACA,MACA,QACM;AACN,MAAI,CAAC,MAAO;AAEZ,QAAM,WAAW,iBAAiB,OAAO,MAAM;AAC/C,MAAI,CAAC,SAAS,QAAQ;AACpB,SAAK,KAAK;AAAA,MACR,cAAc,QAAQ,aAAa,IAAI,aAAa;AAAA,MACpD;AAAA,MACA,QAAQ,KAAK,OAAO,KAAK;AAAA,MACzB,YAAY;AAAA,MACZ,MAAM,KAAK,IAAI,WAAW,aAAa,+BAA+B,SAAS,IAAI;AAAA,IACrF,CAAC;AACD;AAAA,EACF;AAEA,aAAW,YAAY,SAAS,OAAO,YAAY;AAGjD,QAAI,GAAG,mBAAmB,QAAQ,GAAG;AACnC,WAAK,KAAK;AAAA,QACR,cAAc,QAAQ,aAAa,IAAI,aAAa;AAAA,QACpD;AAAA,QACA,QAAQ,KAAK,OAAO,QAAQ;AAAA,QAC5B,YAAY;AAAA,QACZ,MAAM,KAAK,IAAI,WAAW,aAAa;AAAA,MACzC,CAAC;AACD;AAAA,IACF;AAEA,UAAM,OACJ,GAAG,qBAAqB,QAAQ,KAAK,GAAG,oBAAoB,QAAQ,IAChE,aAAa,SAAS,IAAI,IAC1B,GAAG,8BAA8B,QAAQ,IACvC,SAAS,KAAK,OACd;AAER,QAAI,SAAS,QAAW;AACtB,WAAK,KAAK;AAAA,QACR,cAAc,QAAQ,aAAa,IAAI,aAAa;AAAA,QACpD;AAAA,QACA,QAAQ,KAAK,OAAO,QAAQ;AAAA,QAC5B,YAAY;AAAA,QACZ,MAAM,oBAAoB,aAAa;AAAA,MACzC,CAAC;AACD;AAAA,IACF;AAGA,UAAM,aAAiC;AAAA,MACrC,cAAc,QAAQ,aAAa,IAAI,IAAI;AAAA,MAC3C;AAAA,MACA,QAAQ,KAAK,OAAO,QAAQ;AAAA,MAC5B,YAAY;AAAA,IACd;AACA,UAAM,QAAkB,CAAC;AACzB,QAAI,iBAAkB,OAAM,KAAK,gBAAgB;AAEjD,UAAM,QAAQ,GAAG,qBAAqB,QAAQ,IAAI,SAAS,cAAc;AACzE,UAAM,aACJ,SAAS,GAAG,iBAAiB,KAAK,KAAK,MAAM,UAAU,SAAS,IAC5D,MAAM,UAAU,CAAC,IACjB;AAEN,QAAI,cAAc,GAAG,0BAA0B,UAAU,GAAG;AAC1D,YAAM,cAAc,YAAY,WAAW,YAAY,aAAa,CAAC;AACrE,UAAI,gBAAgB,OAAW,YAAW,cAAc;AAAA,UACnD,OAAM,KAAK,qCAAqC;AAErD,UAAI,SAAS,UAAU;AACrB,cAAM,SAAS,YAAY,WAAW,YAAY,QAAQ,CAAC;AAC3D,YAAI,WAAW,OAAW,YAAW,SAAS;AAAA,YACzC,OAAM,KAAK,gCAAgC;AAAA,MAClD;AACA,UAAI,UAAU,UAAU,EAAG,OAAM,KAAK,uCAAuC;AAAA,IAC/E,OAAO;AACL,YAAM;AAAA,QACJ,QACI,qBAAqB,kBAAkB,KAAK,CAAC,KAC7C;AAAA,MACN;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,GAAG;AACpB,iBAAW,aAAa;AACxB,iBAAW,OAAO,MAAM,KAAK,IAAI;AAAA,IACnC;AACA,SAAK,KAAK,UAAU;AAAA,EACtB;AACF;AAEA,SAAS,UAAU,MAAyB,MAAe,QAA6B;AACtF,QAAM,SAAS,WAAW,IAAI;AAC9B,MAAI,WAAW,OAAW;AAE1B,MAAI,eAAe,IAAI,MAAM,GAAG;AAM9B,SAAK,KAAK;AAAA,MACR,cAAc;AAAA,MACd,MAAM,WAAW,mBAAmB,WAAW;AAAA,MAC/C,QAAQ,KAAK,OAAO,IAAI;AAAA,MACxB,YAAY;AAAA,MACZ,MAAM,GAAG,MAAM;AAAA,IACjB,CAAC;AACD;AAAA,EACF;AAEA,MAAI,WAAW,uBAAuB,WAAW,WAAY;AAC7D,QAAM,WAAW,KAAK,UAAU,CAAC;AACjC,MAAI,CAAC,SAAU;AAEf,QAAM,WAAW,iBAAiB,UAAU,MAAM;AAClD,MAAI,CAAC,SAAS,QAAQ;AACpB,SAAK,KAAK;AAAA,MACR,cAAc;AAAA,MACd,MAAM;AAAA,MACN,QAAQ,KAAK,OAAO,IAAI;AAAA,MACxB,YAAY;AAAA,MACZ,MAAM,GAAG,MAAM,mCAAmC,SAAS,IAAI;AAAA,IACjE,CAAC;AACD;AAAA,EACF;AAEA,QAAM,SAAS,SAAS;AACxB,QAAM,OAAO,YAAY,WAAW,QAAQ,MAAM,CAAC;AACnD,MAAI,SAAS,QAAW;AAItB,QAAI,WAAW,cAAc,WAAW,QAAQ,MAAM,MAAM,OAAW;AACvE,SAAK,KAAK;AAAA,MACR,cAAc;AAAA,MACd,MAAM;AAAA,MACN,QAAQ,KAAK,OAAO,IAAI;AAAA,MACxB,YAAY;AAAA,MACZ,MAAM;AAAA,IACR,CAAC;AACD;AAAA,EACF;AAKA,QAAM,mBAAmB,UAAU,MAAM,IACrC,sFACA;AAEJ;AAAA,IACE,WAAW,QAAQ,cAAc;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA;AAAA,IACE,WAAW,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAaO,SAAS,oBAAoB,SAA8C;AAChF,QAAM,OAAO,QAAQ,QAAQ,IAAI;AACjC,QAAM,eAAe,QAAQ,WACzB,WAAW,QAAQ,QAAQ,IACzB,QAAQ,WACR,KAAK,MAAM,QAAQ,QAAQ,IAC7B,aAAa,IAAI;AAErB,MAAI,CAAC,gBAAgB,CAAC,WAAW,YAAY,GAAG;AAC9C,UAAM,IAAI;AAAA,MACR,+BAA+B,IAAI;AAAA,IAErC;AAAA,EACF;AAEA,QAAM,EAAE,WAAW,SAAS,gBAAgB,IAAI,iBAAiB,YAAY;AAC7E,QAAM,UAAU,GAAG,cAAc,WAAW,eAAe;AAE3D,QAAM,eAAqC,CAAC;AAC5C,MAAI,gBAAgB;AAEpB,MAAI,mBAAmB;AAEvB,aAAW,UAAU,QAAQ,eAAe,GAAG;AAC7C,QAAI,OAAO,kBAAmB;AAC9B,QAAI,OAAO,SAAS,SAAS,gBAAgB,EAAG;AAOhD,QAAI,CAAC,SAAS,MAAM,OAAO,QAAQ,GAAG;AACpC,0BAAoB;AACpB;AAAA,IACF;AACA,qBAAiB;AAEjB,UAAM,OAAgB;AAAA,MACpB,MAAM,CAAC,eAAe,aAAa,KAAK,UAAU;AAAA,MAClD,QAAQ,CAAC,UAAU;AAAA,QACjB,MAAM,SAAS,MAAM,OAAO,QAAQ;AAAA,QACpC,MAAM,OAAO,8BAA8B,KAAK,SAAS,MAAM,CAAC,EAAE,OAAO;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,QAAQ,CAAC,SAAwB;AACrC,UAAI,GAAG,iBAAiB,IAAI,EAAG,WAAU,MAAM,MAAM,MAAM;AAC3D,SAAG,aAAa,MAAM,KAAK;AAAA,IAC7B;AACA,UAAM,MAAM;AAAA,EACd;AAEA,eAAa;AAAA,IACX,CAAC,GAAG,MACF,EAAE,aAAa,cAAc,EAAE,YAAY,KAC3C,EAAE,OAAO,KAAK,cAAc,EAAE,OAAO,IAAI,KACzC,EAAE,OAAO,OAAO,EAAE,OAAO;AAAA,EAC7B;AAEA,SAAO;AAAA,IACL;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV;AACF;AAGA,SAAS,SAAS,MAAc,MAAuB;AACrD,QAAM,MAAM,SAAS,MAAM,IAAI;AAC/B,SAAO,QAAQ,MAAM,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG;AAC/D;AAGO,SAAS,YAAY,WAA6C;AACvE,QAAM,MAAM,oBAAI,IAAY;AAC5B,aAAW,cAAc,UAAU,cAAc;AAC/C,QAAI,WAAW,eAAe,aAAc;AAC5C,QAAI,WAAW,aAAa,SAAS,aAAa,EAAG;AACrD,QAAI,IAAI,WAAW,YAAY;AAAA,EACjC;AACA,SAAO;AACT;AAEO,SAAS,WAAW,WAAsD;AAC/E,SAAO,UAAU,aAAa,OAAO,CAAC,eAAe,WAAW,eAAe,YAAY;AAC7F;;;ACrfA,IAAM,OAAO,EAAE,QAAQ,KAAK,SAAS,KAAK,MAAM,IAAI;AAEpD,SAAS,UAAU,KAAoB,OAAuB;AAC5D,QAAM,OAAO,IAAI,KAAK,SAAS,IAAI,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM;AAClE,QAAM,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,EAAE;AACtD,QAAM,KAAK,SAAS,IAAI,WAAW,EAAE;AACrC,MAAI,IAAI,OAAQ,OAAM,KAAK,iBAAiB,IAAI,MAAM,EAAE;AAExD,MAAI,IAAI,UAAU;AAChB,QAAI,IAAI,SAAS,WAAW,GAAG;AAC7B,YAAM,KAAK,sBAAsB;AAAA,IACnC,OAAO;AACL,iBAAW,UAAU,IAAI,UAAU;AACjC,cAAM,OAAO,OAAO,YAChB,OAAO,UAAU,aAAa,YAC5B,kBAAa,OAAO,UAAU,MAAM,KACpC,OAAO,UAAU,WACnB;AACJ,cAAM,SAAS,OAAO,OAAO,SAAS,IAAI,OAAO,OAAO,KAAK,GAAG,IAAI;AACpE,cAAM,QAAQ;AAAA,UACZ,OAAO,QAAQ,UAAU;AAAA,UACzB,OAAO,yBAAyB,2BAA2B;AAAA,QAC7D,EACG,OAAO,OAAO,EACd,KAAK,IAAI;AACZ,cAAM;AAAA,UACJ,gBAAgB,OAAO,IAAI,KAAK,OAAO,KAAK,KAAK,MAAM,MAAM,IAAI,GAC/D,QAAQ,KAAK,KAAK,MAAM,EAC1B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,IAAI,gBAAgB,CAAC,IAAI,aAAa,WAAW;AACnD,YAAM;AAAA,QACJ,kCACE,IAAI,aAAa,SAAS,WAAM,IAAI,aAAa,MAAM,KAAK,EAC9D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,IAAI,SAAS;AACf,QAAI,IAAI,QAAQ,UAAU,QAAW;AACnC,YAAM,KAAK,gBAAgB,KAAK,UAAU,IAAI,QAAQ,KAAK,CAAC,EAAE;AAAA,IAChE;AACA,QAAI,IAAI,QAAQ,WAAW,QAAW;AACpC,YAAM,KAAK,iBAAiB,KAAK,UAAU,IAAI,QAAQ,MAAM,CAAC,EAAE;AAAA,IAClE;AAAA,EACF;AACF;AAUO,SAAS,kBAAkB,MAA2B;AAC3D,SACE,GAAG,KAAK,OAAO,QAAQ,cAAc,KAAK,OAAO,QAAQ,sBACtD,KAAK,OAAO,MAAM,aACpB,KAAK,WAAW,SAAS,IACtB,KAAK,KAAK,WAAW,MAAM,gBAAgB,KAAK,WAAW,WAAW,IAAI,KAAK,GAAG,cAClF;AAER;AAEA,SAAS,iBAAiB,MAAmB,OAAuB;AAClE,MAAI,KAAK,WAAW,WAAW,EAAG;AAClC,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,2BAA2B,KAAK,WAAW,MAAM,GAAG;AAC/D,aAAW,aAAa,KAAK,YAAY;AACvC,UAAM,MACJ,UAAU,WAAW,cACjB,4DACA;AACN,UAAM,KAAK,OAAO,UAAU,aAAa,KAAK,UAAU,UAAU,MAAM,GAAG,EAAE;AAAA,EAC/E;AACF;AAEO,SAAS,mBAAmB,MAA2B;AAC5D,QAAM,QAAkB,CAAC;AACzB,QAAM;AAAA,IACJ,YAAY,KAAK,QAAQ,GAAG,KAAK,QAAQ,WAAW,KAAK,KAAK,KAAK,EAAE,GACnE,KAAK,SAAS,KAAK,MAAM,SAAS,IAAI,WAAW,KAAK,MAAM,KAAK,GAAG,CAAC,KAAK,EAC5E;AAAA,EACF;AACA,QAAM,KAAK,kBAAkB,IAAI,CAAC;AAElC,mBAAiB,MAAM,KAAK;AAE5B,QAAM,YAAY,KAAK,OAAO,OAAO,CAAC,UAAU,MAAM,KAAK,SAAS,CAAC;AACrE,MAAI,UAAU,WAAW,GAAG;AAC1B,UAAM,KAAK,EAAE;AAGb,QAAI,KAAK,OAAO,SAAS,GAAG;AAC1B,YAAM;AAAA,QACJ,uCAAkC,KAAK,OAAO,MAAM;AAAA,MACtD;AACA,UAAI,CAAC,KAAK,UAAW,OAAM,KAAK,qDAAqD;AAAA,IACvF,OAAO;AACL,YAAM,KAAK,+EAA0E;AACrF,UAAI,CAAC,KAAK,WAAW;AACnB,cAAM,KAAK,uDAAuD;AAAA,MACpE;AAAA,IACF;AACA,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB;AAEA,aAAW,SAAS,WAAW;AAC7B,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,GAAG,MAAM,OAAO,MAAM,MAAM,KAAK,MAAM,GAAG;AACrD,eAAW,OAAO,MAAM,KAAM,WAAU,KAAK,KAAK;AAAA,EACpD;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AASO,SAAS,qBAAqB,WAAwC;AAC3E,QAAM,QAAkB,CAAC;AACzB,QAAM,WAAW,UAAU,aAAa,OAAO,CAAC,MAAM,EAAE,eAAe,YAAY;AACnF,QAAM,oBAAoB,WAAW,SAAS;AAC9C,QAAM,MAAM,YAAY,SAAS;AAEjC,QAAM;AAAA,IACJ,GAAG,IAAI,IAAI,4BAA4B,SAAS,MAAM,aACpD,SAAS,WAAW,IAAI,KAAK,GAC/B,WAAW,UAAU,aAAa,QAAQ,UAAU,kBAAkB,IAAI,KAAK,GAAG;AAAA,EACpF;AACA,QAAM,KAAK,kFAA6E;AACxF,MAAI,UAAU,mBAAmB,GAAG;AAIlC,UAAM;AAAA,MACJ,GAAG,UAAU,gBAAgB,gBAC3B,UAAU,qBAAqB,IAAI,KAAK,GAC1C;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,cAAc,EAAE,YAAY,CAAC;AACtF,MAAI,KAAK,SAAS,GAAG;AACnB,UAAM,KAAK,EAAE;AACb,eAAW,cAAc,MAAM;AAC7B,YAAM,OAAO,WAAW,eAAe,WAAW,MAAM;AACxD,YAAM,KAAK,KAAK,IAAI,IAAI,WAAW,YAAY,EAAE;AACjD,YAAM,KAAK,SAAS,WAAW,OAAO,IAAI,IAAI,WAAW,OAAO,IAAI,MAAM,WAAW,IAAI,GAAG;AAC5F,UAAI,WAAW,YAAa,OAAM,KAAK,SAAS,WAAW,WAAW,EAAE;AACxE,UAAI,WAAW,KAAM,OAAM,KAAK,kBAAkB,WAAW,IAAI,EAAE;AAAA,IACrE;AAAA,EACF;AAEA,MAAI,kBAAkB,SAAS,GAAG;AAChC,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,gBAAgB,kBAAkB,MAAM,GAAG;AACtD,eAAW,cAAc,mBAAmB;AAC1C,YAAM,KAAK,OAAO,WAAW,OAAO,IAAI,IAAI,WAAW,OAAO,IAAI,EAAE;AACpE,YAAM,KAAK,SAAS,WAAW,QAAQ,6CAA6C,EAAE;AAAA,IACxF;AACA,UAAM,KAAK,EAAE;AACb,UAAM;AAAA,MACJ,GAAG,kBAAkB,MAAM,aACzB,kBAAkB,WAAW,IAAI,KAAK,GACxC;AAAA,IACF;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;AAOO,SAAS,oBAAoB,QAAgC;AAClE,QAAM,QAAkB,CAAC;AACzB,QAAM;AAAA,IACJ,GAAG,OAAO,QAAQ,4BAA4B,OAAO,OAAO,mBAC1D,OAAO,UAAU,MACnB,YAAY,OAAO,UAAU,WAAW,IAAI,KAAK,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,CAAC;AAAA,EACtF;AAEA,MAAI,OAAO,UAAU,SAAS,GAAG;AAC/B,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,eAAe,OAAO,UAAU,MAAM,GAAG;AACpD,eAAW,SAAS,OAAO,WAAW;AACpC,YAAM,KAAK,KAAK,MAAM,YAAY,EAAE;AACpC,YAAM,KAAK,UAAU,MAAM,OAAO,IAAI,IAAI,MAAM,OAAO,IAAI,+BAA0B;AAAA,IACvF;AAAA,EACF;AAEA,MAAI,OAAO,cAAc,SAAS,GAAG;AACnC,UAAM,KAAK,EAAE;AACb,UAAM;AAAA,MACJ,2BAA2B,OAAO,cAAc,MAAM;AAAA,IACxD;AACA,eAAW,MAAM,OAAO,cAAe,OAAM,KAAK,KAAK,EAAE,EAAE;AAAA,EAC7D;AAEA,MAAI,OAAO,WAAW,SAAS,GAAG;AAChC,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,gBAAgB,OAAO,WAAW,MAAM,GAAG;AACtD,UAAM,KAAK,yFAAoF;AAC/F,eAAW,MAAM,OAAO,WAAY,OAAM,KAAK,KAAK,EAAE,EAAE;AAAA,EAC1D;AAEA,MAAI,OAAO,WAAW,SAAS,GAAG;AAChC,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,gBAAgB,OAAO,WAAW,MAAM,GAAG;AACtD,eAAW,cAAc,OAAO,YAAY;AAC1C,YAAM,KAAK,OAAO,WAAW,OAAO,IAAI,IAAI,WAAW,OAAO,IAAI,EAAE;AACpE,YAAM,KAAK,SAAS,WAAW,QAAQ,6CAA6C,EAAE;AAAA,IACxF;AAAA,EACF;AAEA,MAAI,OAAO,QAAQ,SAAS,GAAG;AAC7B,UAAM,KAAK,EAAE;AACb,UAAM;AAAA,MACJ,GAAG,OAAO,QAAQ,MAAM,uBACtB,OAAO,QAAQ,WAAW,IAAI,SAAS,SACzC,mBAAmB,OAAO,aAAa;AAAA,IACzC;AAAA,EACF;AAEA,MAAI,OAAO,eAAe,SAAS,GAAG;AACpC,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,6BAA6B,OAAO,eAAe,MAAM,GAAG;AACvE,UAAM,KAAK,4EAAuE;AAClF,eAAW,MAAM,OAAO,eAAgB,OAAM,KAAK,KAAK,EAAE,EAAE;AAAA,EAC9D;AAEA,QAAM,KAAK,EAAE;AAIb,QAAM,WAAqB,CAAC;AAC5B,MAAI,OAAO,UAAU,SAAS,GAAG;AAC/B,aAAS;AAAA,MACP,2BAA2B,OAAO,UAAU,MAAM,aAChD,OAAO,UAAU,WAAW,IAAI,MAAM,KACxC;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,WAAW,SAAS,GAAG;AAChC,aAAS;AAAA,MACP,GAAG,OAAO,WAAW,MAAM,aACzB,OAAO,WAAW,WAAW,IAAI,KAAK,GACxC;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,eAAe,SAAS,GAAG;AACpC,aAAS;AAAA,MACP,GAAG,OAAO,eAAe,MAAM,kBAC7B,OAAO,eAAe,WAAW,IAAI,SAAS,SAChD;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,WAAW,GAAG;AACzB,aAAS;AAAA,MACP,OAAO,QAAQ,SAAS,IACpB,iFACA;AAAA,IACN;AAAA,EACF;AACA,QAAM,KAAK,GAAG,QAAQ;AACtB,SAAO,MAAM,KAAK,IAAI;AACxB;AAEO,SAAS,gBAAgB,UAAkB,SAA8B;AAC9E,QAAM,QAAQ,CAAC,GAAG,QAAQ,KAAK,QAAQ,MAAM,UAAU,QAAQ,WAAW,IAAI,KAAK,GAAG,EAAE;AACxF,aAAW,SAAS,SAAS;AAC3B,UAAM,QAAQ,MAAM,UAAU,GAAG,MAAM,OAAO,MAAM,MAAM,IAAI,MAAM,MAAM;AAC1E,QAAI,MAAM,SAAS,QAAS,OAAM,KAAK,OAAO,KAAK,KAAK,YAAY,MAAM,KAAK,CAAC,EAAE;AAAA,aACzE,MAAM,SAAS,UAAW,OAAM,KAAK,OAAO,KAAK,KAAK,YAAY,MAAM,MAAM,CAAC,EAAE;AAAA,SACrF;AACH,YAAM,KAAK,OAAO,KAAK,EAAE;AACzB,YAAM,KAAK,iBAAiB,YAAY,MAAM,MAAM,CAAC,EAAE;AACvD,YAAM,KAAK,iBAAiB,YAAY,MAAM,KAAK,CAAC,EAAE;AAAA,IACxD;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}

package/dist/chunk-A27Y7ALQ.js

@@ -0,0 +1,51 @@
+// src/output.ts
+function isPlain(flags) {
+  if (flags.json) return true;
+  if (flags.plain) return true;
+  if (process.env["CI"]) return true;
+  if (process.env["NO_COLOR"]) return true;
+  if (process.stdout.isTTY !== true) return true;
+  return !process.stdout.columns;
+}
+function write(text) {
+  process.stdout.write(`${text}
+`);
+}
+function writeError(text) {
+  process.stderr.write(`${text}
+`);
+}
+var cached;
+async function loadInk() {
+  if (cached !== void 0) return cached;
+  try {
+    cached = await import("./ink-HBPOQTRS.js");
+  } catch {
+    cached = null;
+  }
+  return cached;
+}
+async function paint(element) {
+  const { render } = await import("ink");
+  const instance = render(element);
+  instance.unmount();
+  await instance.waitUntilExit();
+}
+async function transient(element) {
+  const { render } = await import("ink");
+  const instance = render(element);
+  return () => {
+    instance.clear();
+    instance.unmount();
+  };
+}
+
+export {
+  isPlain,
+  write,
+  writeError,
+  loadInk,
+  paint,
+  transient
+};
+//# sourceMappingURL=chunk-A27Y7ALQ.js.map

package/dist/chunk-A27Y7ALQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/output.ts"],"sourcesContent":["import type { ReactElement } from \"react\";\n\nexport interface OutputFlags {\n  plain?: boolean;\n  json?: boolean;\n}\n\n/**\n * Terminal-aware only when there is a terminal. Piped output, `--plain`, `CI`\n * and `NO_COLOR` all fall back to plain text — a CLI whose output changes shape\n * when redirected is unusable in a build log.\n */\nexport function isPlain(flags: OutputFlags): boolean {\n  if (flags.json) return true;\n  if (flags.plain) return true;\n  if (process.env[\"CI\"]) return true;\n  if (process.env[\"NO_COLOR\"]) return true;\n  if (process.stdout.isTTY !== true) return true;\n  // A TTY that cannot report its width (some CI ptys, `script` on macOS) makes\n  // Ink lay out at zero columns and emit one character per line. Plain text is\n  // the only honest rendering for a terminal whose size is unknown.\n  return !process.stdout.columns;\n}\n\nexport function write(text: string): void {\n  process.stdout.write(`${text}\\n`);\n}\n\nexport function writeError(text: string): void {\n  process.stderr.write(`${text}\\n`);\n}\n\ntype InkModule = typeof import(\"./render/ink.js\");\n\nlet cached: InkModule | null | undefined;\n\n/**\n * Loads the Ink renderer, or returns `null` when it cannot run here.\n *\n * Two reasons this is lazy rather than a top-level import. It keeps `--plain`\n * and `--json` from paying for a terminal UI they never draw — and Ink drives\n * React through `react-reconciler`, which reads React 19 internals, so a host\n * that pins React 18 globally cannot load it at all. Neither is a reason to\n * fail a command that was about to print text.\n */\nexport async function loadInk(): Promise<InkModule | null> {\n  if (cached !== undefined) return cached;\n  try {\n    cached = await import(\"./render/ink.js\");\n  } catch {\n    cached = null;\n  }\n  return cached;\n}\n\n/** Paints an Ink element once and returns when the frame has been flushed. */\nexport async function paint(element: ReactElement): Promise<void> {\n  const { render } = await import(\"ink\");\n  const instance = render(element);\n  instance.unmount();\n  await instance.waitUntilExit();\n}\n\n/** A live Ink frame (spinner) that is cleared before the real output lands. */\nexport async function transient(element: ReactElement): Promise<() => void> {\n  const { render } = await import(\"ink\");\n  const instance = render(element);\n  return () => {\n    instance.clear();\n    instance.unmount();\n  };\n}\n"],"mappings":";AAYO,SAAS,QAAQ,OAA6B;AACnD,MAAI,MAAM,KAAM,QAAO;AACvB,MAAI,MAAM,MAAO,QAAO;AACxB,MAAI,QAAQ,IAAI,IAAI,EAAG,QAAO;AAC9B,MAAI,QAAQ,IAAI,UAAU,EAAG,QAAO;AACpC,MAAI,QAAQ,OAAO,UAAU,KAAM,QAAO;AAI1C,SAAO,CAAC,QAAQ,OAAO;AACzB;AAEO,SAAS,MAAM,MAAoB;AACxC,UAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAClC;AAEO,SAAS,WAAW,MAAoB;AAC7C,UAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAClC;AAIA,IAAI;AAWJ,eAAsB,UAAqC;AACzD,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI;AACF,aAAS,MAAM,OAAO,mBAAiB;AAAA,EACzC,QAAQ;AACN,aAAS;AAAA,EACX;AACA,SAAO;AACT;AAGA,eAAsB,MAAM,SAAsC;AAChE,QAAM,EAAE,OAAO,IAAI,MAAM,OAAO,KAAK;AACrC,QAAM,WAAW,OAAO,OAAO;AAC/B,WAAS,QAAQ;AACjB,QAAM,SAAS,cAAc;AAC/B;AAGA,eAAsB,UAAU,SAA4C;AAC1E,QAAM,EAAE,OAAO,IAAI,MAAM,OAAO,KAAK;AACrC,QAAM,WAAW,OAAO,OAAO;AAC/B,SAAO,MAAM;AACX,aAAS,MAAM;AACf,aAAS,QAAQ;AAAA,EACnB;AACF;","names":[]}