@am_shork/attest 0.1.7 → 0.2.0

package/CHANGELOG.md

@@ -5,118 +5,214 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## Versioning
+
+Under 0.x SemVer a breaking change bumps the **minor**. "Breaking" means it
+changes the exit code of an existing valid setup, rejects previously-valid
+input, removes/renames a public API or `--json` field, or changes a default
+runtime behavior an existing invocation relies on — diagnostic message text is
+not API.
+
 ## [Unreleased]
 
-### Under consideration (non-breaking, not implemented)
-
-- **`attest check` is described as static validation, but it executes every
-  `*.reqs.ts` it finds.** Reading a registry means evaluating the module, via
-  Vite, anywhere under the project root. That is the same threat model as
-  `vitest run` — except `check` is advertised as "static structural validation
-  (fast CI pre-check)", which is exactly the wording that gets it scheduled
-  ahead of, or outside, whatever sandbox the test run is given. On a fork MR,
-  a `*.reqs.ts` with a top-level `fetch` is enough.
-  *The candidate fix, and why it is more than a patch:* read the registry from
-  the AST instead — the compiler API is already the parser layer's tool — for
-  `check`, `cover` and `render`, keeping the loader for `verify` and `archive`,
-  which run the suite anyway and so gain nothing from avoiding evaluation.
-  This makes "a registry is a literal" a design contract rather than a
-  limitation: `params: { maxMb: MAX_MB }` imported from application code
-  already violates the single-source rule the framework exists to enforce,
-  since the value's real owner is elsewhere. It would also turn `render`'s
-  purity from a convention into something structurally guaranteed — today a
-  `Date.now()` in a registry makes `--check` fail forever.
-  *What blocks it:* a non-literal registry must become an ERROR, never a silent
-  fallback to evaluation, or the guarantee is worth nothing — so this is a
-  breaking change for repos that compute their registry, and needs an explicit
-  opt-out (`--eval`) rather than a warning period, since a warning period
-  spends the whole transition still evaluating. The real risk is extractor
-  fidelity: `-1` is a unary expression, `1_000` is not `Number(text)`,
-  `as const` needs unwrapping, and any of those misread would break a repo the
-  change is supposed to leave untouched. Differential testing against the
-  current loader over every fixture is the prerequisite.
+## [0.2.0] - 2026-07-26
+
+Three things that could each end a run with the wrong verdict: a registry read
+by executing it, a green that attested nothing, and a red about code Attest was
+never pointed at.
+
+### Security
+
+- **`attest check` described itself as static validation while executing every
+  `*.reqs.ts` it found.** Reading a registry meant evaluating the module, via
+  Vite, anywhere under the project root — the same threat model as
+  `vitest run`, behind wording ("static structural validation (fast CI
+  pre-check)") that is exactly what gets a command scheduled ahead of, or
+  outside, whatever sandbox the test run is given. On a fork MR, a `*.reqs.ts`
+  with a top-level `fetch` was enough to reach CI secrets.
+  `check`, `cover` and `render` now read the registry from the **AST** — the
+  compiler API was already the parser layer's tool — and run no line of the
+  project. `verify` and `archive` still evaluate: they run the whole suite
+  anyway, so declining to run one more module would buy them nothing.
+  The extracted object literal is handed to the same `RegistrySchema`
+  `defineRequirements` calls, so a literal registry keeps its behaviour, its
+  codes and its diagnostic wording unchanged. That equivalence is not an
+  assertion: a differential suite reads every `*.reqs.ts` in the repo, and every
+  literal form that could be misread (`-1`, `1_000`, `0x10`, `30.0`, `1e3`, a
+  template literal with no substitution, `as const`, `satisfies`), through both
+  readers and requires the two registries to be deeply equal — down to key
+  order.
+  It also turns `render`'s purity from a convention into a structural
+  guarantee: a registry can no longer contain a `Date.now()` that makes
+  `render --check` fail forever.
+
+### Changed
+
+- **BREAKING: a registry must be a literal.** A registry `check`, `cover` or
+  `render` cannot read from the source is a new `registry-not-static` ERROR,
+  pointing at the line that stopped it. There is deliberately no fallback to
+  evaluation — a reader that quietly runs the file when extraction fails
+  guarantees nothing — and deliberately no warning period, which would spend
+  the whole transition still evaluating. `--eval` is the named way back, on all
+  three commands, and restores the old behaviour exactly.
+  This makes "a registry is a literal" a design contract rather than a tooling
+  limitation: `params: { maxMb: MAX_MB }` imported from application code already
+  violates the single-source rule the framework exists to enforce, because the
+  value's real owner is elsewhere. Affected repos have two migrations, and
+  inlining the value is the one that fixes the underlying problem.
+  A registry file may still be written as `const reqs = defineRequirements({…});
+  export default reqs;`, and may import `defineRequirements` under any alias or
+  through a namespace.
+  The `--json` envelope is unchanged: `registry-not-static` is a new `code` on
+  the existing `Issue` shape, which is additive, so `schemaVersion` stays `1`.
+  `vite` remains a peer dependency — `verify` and `archive` run the suite through
+  it — but `check`, `cover` and `render` no longer start a Vite server at all.
+- **BREAKING: a vacuous green stops passing.** `attest verify` on a root with no
+  requirements printed `✓ No issues.` and exited `0`, because `passed` is "no
+  failing tests" and a run with nothing in it has none. It is now an `empty-spec`
+  ERROR, so `ok` becomes false and the exit code follows the existing `hasError`
+  path. The empty directory is the harmless version; the one that matters is the
+  repo whose registry stopped being found — a renamed folder, a moved root — where
+  the tests still run, still pass, and the report is indistinguishable from a real
+  green. Deliberately narrower than "no scenario executed": with at least one
+  requirement, a missing scenario is already `uncovered-requirement` and a declared
+  scenario that never ran is already `declared-not-run`, so firing on those would
+  only double-report a run that is red anyway. *Breaking:* a root that attests
+  nothing flips from exit 0 to exit 1 — which is the point, since it attested
+  nothing.
+- **BREAKING: a run executes only the spec files that declare a `requirement()`.**
+  `verify` swept every `*.spec.ts` under the root into a child run with no
+  aliases, no DOM and no plugins, so pointing it at the root of a repo that
+  already had a suite produced a guaranteed red about code Attest was never asked
+  to attest. That was the first thing a mid-project adopter saw, and it was not a
+  finding about their intent layer at all. The run scope is now derived from the
+  static plan, which already records which files declare intent. `archive` gets
+  the same scope, for the same reason: a change must not fail its gate because an
+  unrelated suite shares its root. *Breaking:* a repo relying on the sweep to run
+  requirement-less specs sees a different set execute — and `attest` was never the
+  right thing to run them with. Unchanged for `check`, `cover` and `render`, which
+  only ever counted `requirement()`/`scenario()` calls and so never had the bug.
+
+### Added
+
+- **`verify` reports what it looked at.** The human summary leads with
+  `— 20 requirements / 41 scenarios, 0 error, …` and is preceded by the run
+  scope (`Running 12 spec files`, plus how many were located and skipped for
+  declaring no `requirement()`). `--json` carries the same four numbers under
+  `counts`. This is the companion the change above needs: scoping the run means a
+  file whose `requirement()` the parser fails to see is now dropped from the run
+  rather than failing in it, and the gap between "located" and "in scope" is where
+  that would show. It is also a second line of defence against a vacuous green — a
+  report that says `0 requirements` cannot be misread as a full pass. `counts` is
+  a new optional field on an existing envelope, so `schemaVersion` stays `1`.
+
+### Fixed
+
+- **The design document described three anti-drift mechanisms; two exist.**
+  §6's mechanism 2, "red/green expectation tracking" — a new requirement's
+  scenarios must be red while a change is in progress and green at archive time,
+  with the framework blocking on a mismatch — was written as shipped behaviour,
+  with a strength rating, next to two mechanisms that are real. It was never
+  built. What ships is the weaker half: §8's gate requires green at archive time,
+  but nothing records or requires the earlier red, so a scenario that was green
+  from the start — asserting nothing — passes it. Anyone who budgeted their own
+  review against three mechanisms was covered by two. Now marked
+  **(not implemented)** inline, with the gap named. Same treatment for
+  `/atx:propose` and `/atx:apply` in §9, which are likewise designed and unbuilt;
+  the manual path (`changes/<name>/` + `attest archive`) is spelled out beside
+  them.
+- **Documentation described an API that does not exist.** §1's architecture
+  diagram — the first thing a reader meets — showed `@covers('AUTH-3')` and a
+  `covers(id)` back-link, an early spelling of what shipped as
+  `requirement(id)` / `scenario(name)`, with coverage reconstructed from the
+  `[reqId]` suite name. §5.4 already described the real mechanism, so the
+  document contradicted itself. The registry and spec samples also imported from
+  a bare `'attest'`, and §10 declared the package as `attest` exporting only
+  `.` — the published package is `@am_shork/attest` and has exported `./define`
+  since 0.1.2, which is the import path README tells users to write. These are
+  samples meant to be copied, and this repo's docs are also fed to agents, so a
+  stale name becomes generated code.
+- **Smaller documentation corrections.** §1 called its own three-row table "the
+  two core reports"; the Coverage row attributed coverage to runtime collection
+  alone, when `check`/`cover` read it statically. §4 listed the SHALL/MUST rule
+  under structural validation, where it is enforced by the schema one layer up.
+  §5.3's `Issue` sample omitted the `reqId` field the same snippet sets. §7
+  cited "§6" for a section of OpenSpec's analysis, not this document's §6.
+  The README's `--json` sample claimed `"version": "0.1.2"`, and its
+  prerequisites section was headed "Requirements" — a term this project already
+  uses for the intent layer.
+- **The feedback template and the GitLab issue template each claimed to be the
+  other.** They are not identical, and should not be: `outcome:` is for
+  maintainer-authored reports and `verdict:` for outside ones, so the issue form
+  is deliberately the outside-reporter subset. Both now say so, the key rule is
+  stated where it can be read, and the issue form gained the mid-project
+  follow-up its own `adoption: brownfield` field was asking for and never posed.
+
+Two checks now hold the parts of this that can be held mechanically, in
+`tests/docs-consistency.spec.ts`: the source cites design sections by number in
+58 places, and every citation must resolve in both languages, so inserting a
+section can no longer silently repoint them; and any JSON sample in the README
+that identifies itself as attest output must carry the current `version` and
+`schemaVersion`. Neither can catch a section that describes something unbuilt —
+that is what the inline marker is for.
+
+## Considered and rejected
+
+Decisions **not** to build something, kept where they can be found before the
+same candidate is proposed again. Nothing here shipped, so nothing here belongs
+to a release — this section is deliberately outside the version history and does
+not move when one is cut.
+
 - **Two gaps in the intent layer: nothing resists a bloated requirement, and
-  nothing resists a duplicated one.** Recorded as a design note, with the
-  evidence that currently blocks each candidate fix.
-  *Against bloat, what already works:* `uncovered-requirement` being an ERROR is
-  the real mechanism — every requirement costs an executable scenario, so "the
-  system should be maintainable" cannot be written and left standing. That is a
-  genuine cost function on the intent layer, which prose SDD does not have.
-  *What doesn't:* coverage is binary (≥1 scenario), so five sharp requirements
-  cost five mandatory scenarios while one requirement lumping five obligations
-  together costs one. **The rule as designed rewards lumping**, and the engine
-  has no notion of "one requirement = one obligation". Attest's own registry
-  shows it: `ATX-5` carries two obligations under one SHALL, `ATX-9` three
-  clauses, `ATX-10` two.
-  *Against duplication and contradiction:* effectively nothing. Every
-  cross-requirement check in the engine is keyed on the **id** —
-  `duplicate-requirement` (same id in two registry files), `rename-target-exists`,
-  and `add-conflict`, which content-compares only when ids collide. Two
-  requirements under different ids that contradict each other (`AUTH-3` expires a
-  session after 30 minutes, `SESS-7` says sessions never expire) pass schema,
-  `check`, `verify` and the archive gate, each green under its own scenario.
-  `params` does not help, and the reason is structural: it is an
-  **intra-requirement** mechanism. It pins one requirement's statement to its own
-  assertions; two requirements may each own a `params` entry of the same name with
-  different values and both stay green. Design §11 admits semantic drift needs
-  human review — semantic *duplication* is the same category and is not mentioned
-  at all. This matters most in the workflow the package exists for: an agent asked
-  for a new behaviour is additive by default, and will add `SESS-7` rather than
-  `modified: { 'AUTH-3': … }`. The delta workflow provides the correct path; it
-  does not force it, and the one counter-pressure (a new requirement costs a
-  scenario) does not deter an agent that will happily write one.
-  *Candidate 1 — `divergent-param` (WARNING):* the same param name declared in
-  more than one requirement with different values, scoped to a shared id prefix
-  (`AUTH-*` vs `AUTH-*`) to limit collisions between unrelated domains. It would
-  not detect abstract contradiction, only its most common concrete form: one named
-  constant pinned twice, differently. **Blocked, and by this repo's own registry:**
-  `idleTimeoutMin` is `15` in `ATX-3` and `30` in `ATX-10`, both under the same
-  prefix, and both legitimate — unrelated illustrative fixtures. So the false
-  positive is not hypothetical, and prefix scoping does not save a repo that uses
-  one prefix throughout. The mechanism needs a way to declare two params
-  independent before it can ship, and that escape hatch is undesigned.
-  *Candidate 2 — `compound-requirement` (WARNING):* more than one RFC-2119
-  keyword in a single `statement` is objectively more than one obligation, which
-  directly opposes the lumping incentive above. Cheap and deterministic, but its
-  reach is narrow: over the 12 self requirements it flags exactly one (`ATX-10`,
-  `SHALL … and MUST …`) and misses both `ATX-5` and `ATX-9`, which pack multiple
-  clauses under a single keyword.
-  *Explicitly rejected:* similarity matching between statements (token overlap,
-  embeddings). That reintroduces the fuzzy AI comparison design §0 exists to
-  remove. Real semantic duplication needs judgement and belongs to human review
-  at the propose stage; the engine should not pretend to prove it.
-  Both candidates are WARNING-level, so neither would change the exit code of an
-  existing valid setup (only ERROR fails a run) — they are listed here rather than
-  under 0.2.0 for that reason.
-
-The breaking items below are held for **0.2.0** (under 0.x SemVer a breaking
-change bumps the minor). "Breaking" means it changes the exit code of an existing
-valid setup, rejects previously-valid input, removes/renames a public API or
-`--json` field, or changes a default runtime behavior an existing invocation
-relies on — diagnostic message text is not API.
-
-### Planned for 0.2.0 (breaking)
-
-- **A vacuous green stops passing.** Today `attest verify` on a spec that ran no
-  scenarios (an empty or requirement-less directory) prints
-  `✓ No issues. — 0 error, …` and exits `0`, because `runAndCollect` reads "no
-  failing tests" as `passed`. `verify` will instead emit a new `empty-spec`
-  ERROR when zero scenarios executed (or the registry has zero requirements),
-  so `ok` becomes `false` and the exit code follows the existing `hasError`
-  path. Wires up `hasSpecs()` (present in `pipeline.ts`, never called today).
-  *Breaking:* an "empty directory → exit 0" run flips to exit 1 — which is the
-  point, since that run attests nothing. *Non-breaking companion (may land
-  earlier in 0.1.x):* requirement/scenario counts in the summary line
-  (`— 33 requirements / 59 scenarios, 0 error, …`).
-- **Default spec discovery ignores files with no `requirement()`.** `verify` at
-  a repo root currently sweeps every `**/*.spec.ts` — including a pre-existing
-  suite — into a runner with no aliases/DOM, a guaranteed red unrelated to the
-  code. The default will change to run only spec files that declare at least one
-  `requirement()`, so an incumbent suite is left untouched without forcing a
-  directory layout. *Breaking:* a repo relying on the root scan to pick up
-  requirement-less specs sees a different set run. *Non-breaking companion (may
-  land earlier in 0.1.x):* a pre-run report of how many spec files were located
-  and how many contain a `requirement()` call.
+  nothing resists a duplicated one.** The gaps themselves are described in design
+  §11, which is where a permanent property of the design belongs. What is kept
+  here is the list of mechanisms tried and what killed each, so the same three
+  are not proposed again without new evidence. All three were scored against
+  every registry this repo ships *before* any was written into the engine — the
+  order `divergent-param` was originally designed in the wrong way round. The
+  measurement is runnable in `tests/intent-rule-candidates.spec.ts` and fails
+  when a requirement is added without a hand-labelled obligation count, because
+  the reach figure once quoted here went stale exactly that way.
+  *`compound-requirement` (WARNING) — rejected.* More than one RFC-2119 keyword
+  in one `statement` is objectively more than one obligation. Measured: of the 6
+  requirements in the corpus carrying more than one, it flags 1 (`ATX-10`) and
+  misses `ATX-5`, `ATX-9`, `ATX-13`, `ATX-14`, `ATX-17` — every one that packs
+  clauses under a single keyword, which is the form the coverage incentive
+  actually rewards. A wider variant (keyword plus a coordinating `and`/`while`/
+  `;`) reaches 5 of 6 with one wrong hit, so reach is not the deciding argument.
+  This is: both variants are silenced by deleting the word that triggered them,
+  and neither can tell that deletion from a real split. `SHALL do A and MUST do
+  B` clears the warning as `SHALL do A and do B` — same two obligations, one
+  fewer normative keyword. A rule whose cheapest fix degrades the artifact it
+  protects does not ship.
+  *`divergent-param` (WARNING) — rejected.* One param name declared with
+  different values in two requirements sharing an id prefix. Measured: it fires
+  twice on this repo and both firings are wrong — `idleTimeoutMin` (`15` in
+  `ATX-3`, `30` in `ATX-10`), unrelated illustrative fixtures, and `code`
+  (`registry-not-static` in `ATX-17`, `empty-spec` in `ATX-18`), two diagnostics
+  that could not possibly agree. The second arrived on its own when `ATX-18` was
+  added, which is the more damning half: a generic param name collides more often
+  as a registry grows, so the false-positive rate rises with adoption — the
+  opposite of what a shippable rule does. Still zero true positives across 24
+  requirements. The escape hatch it was blocked on has since been designed
+  and does not rescue it: with no config file the only workable shape is an
+  additive `independentParams?: string[]` on the requirement (a CLI flag is
+  per-invocation for what is a permanent property of two requirements; changing
+  the `params` shape rejects every existing registry). Viable, but it is
+  permanent schema surface for a rule with no demonstrated true positive, and in
+  practice it would be written *after* the warning fires — a one-line silencer.
+  *Countable obligations (breaking) — rejected.* An `obligations: string[]` per
+  requirement, with coverage counted per obligation, removing the lumping
+  incentive at the source instead of detecting it afterwards. Rejected because
+  the **id is already that unit**: splitting into two ids costs two scenarios and
+  buys the same incentive with no new concept (`ATX-11`/`ATX-12` are exactly that
+  split). It would touch the parser, coverage, `render`, `SPEC.md`, delta apply
+  and the `--json` schema, and it relocates the incentive rather than removing
+  it — nothing can force the array to be complete.
+  *Not considered:* similarity matching between statements (token overlap,
+  embeddings). That reintroduces the fuzzy comparison design §0 exists to remove;
+  real semantic duplication needs judgement and belongs to human review at the
+  propose stage.
 
 ## [0.1.7] - 2026-07-26
 
@@ -438,7 +534,8 @@ Initial release.
   (MIT), whose four-stage engine and diff-first change model Attest's
   architecture is adapted from (re-implemented from scratch, no source copied).
 
-[Unreleased]: https://gitlab.com/Pseudorca/attest/-/compare/v0.1.7...main
+[Unreleased]: https://gitlab.com/Pseudorca/attest/-/compare/v0.2.0...main
+[0.2.0]: https://gitlab.com/Pseudorca/attest/-/tags/v0.2.0
 [0.1.7]: https://gitlab.com/Pseudorca/attest/-/tags/v0.1.7
 [0.1.6]: https://gitlab.com/Pseudorca/attest/-/tags/v0.1.6
 [0.1.5]: https://gitlab.com/Pseudorca/attest/-/tags/v0.1.5

package/README.md

@@ -4,7 +4,7 @@ A TDD-native spec framework. **Tests are the source of truth for verification;
 ID-bound requirements are the source of truth for intent.** Attest binds the two
 by a stable ID and continuously detects drift.
 
-- **Coverage** — does every requirement have ≥1 scenario? (from runtime coverage)
+- **Coverage** — does every requirement have ≥1 scenario? (statically, or from the run)
 - **Result** — is every test green? (from the test runner)
 - **Drift** — do intent and assertions still agree? (static + runtime cross-check)
 
@@ -16,7 +16,7 @@ sets) get the same single source as a lone number.
 
 See the authoritative design — [English](https://gitlab.com/Pseudorca/attest/-/blob/main/docs/en/attest-design.md) · [中文](https://gitlab.com/Pseudorca/attest/-/blob/main/docs/zh/attest-design.md) — and the rest of the [docs](https://gitlab.com/Pseudorca/attest/-/tree/main/docs).
 
-## Requirements
+## Prerequisites
 
 - Node ≥ 20.19
 - pnpm, plus `vitest` + `vite` (peer dependencies)
@@ -30,7 +30,9 @@ pnpm add -D @am_shork/attest vitest vite
 ```
 
 **1. Declare a requirement** (`requirements/auth.reqs.ts`) — import the intent API
-from the vitest-free `/define` subpath so registry loading never touches the runtime:
+from the vitest-free `/define` subpath so registry loading never touches the runtime.
+A registry is a **literal**: every value is written where you can read it (see
+[A registry is a literal](#a-registry-is-a-literal)):
 
 ```ts
 import { defineRequirements } from '@am_shork/attest/define';
@@ -67,7 +69,9 @@ requirement('AUTH-3', () => {
 
 ```bash
 attest check    # static: orphan tests, uncovered requirements, unbound params
+                # (reads your registry; runs none of your code)
 attest verify   # run tests + coverage + drift, graded report
+                # (runs only the spec files that declare a requirement())
 attest cover    # which requirements lack a scenario
 attest render   # the requirements as Markdown, for people who don't read TS
 attest archive <change>   # gate a proposed change: green + covered + no drift
@@ -77,6 +81,40 @@ attest archive <change>   # gate a proposed change: green + covered + no drift
 `..`, or contain a path separator, since the gate loads and runs that change's
 delta. Any other directory name is fine.
 
+### A registry is a literal
+
+`check`, `cover` and `render` read your `*.reqs.ts` files from their **source**,
+with the TypeScript compiler API. They never execute them. That is what makes
+`attest check` safe to run where its description implies you can — first in the
+pipeline, on an untrusted fork MR, outside whatever sandbox you give the tests.
+(`verify` and `archive` do run your suite, so they read the registry by
+evaluating it: there is nothing left to protect at that point.)
+
+The cost is a contract: every value in a registry must be written in the
+registry.
+
+```ts
+import { MAX_MB } from '../src/config.js';
+
+export default defineRequirements({
+  'UP-1': {
+    statement: 'An upload SHALL be rejected above {maxMb} MB.',
+    rationale: 'Protect the storage tier from unbounded writes.',
+    params: { maxMb: MAX_MB }, // ✗ registry-not-static
+  },
+});
+```
+
+This is reported as a `registry-not-static` ERROR pointing at the line. It is
+not only a tooling limit: the single-source rule says the requirement owns that
+number, and importing it says the application owns it. Inline the value and read
+it from the registry in your code — that is the fix. If you need the old
+behaviour instead, `--eval` restores it on all three commands:
+
+```bash
+attest check --eval    # reads the registry by executing every *.reqs.ts
+```
+
 ### A readable spec for humans (`attest render`)
 
 The intent layer lives in TypeScript, which means a reviewer, a QA engineer, or
@@ -114,6 +152,31 @@ Three properties this deliberately keeps:
 The Markdown is prose for humans and its formatting is not a stable contract —
 don't parse it. `--json` is the machine surface.
 
+### What a run actually runs
+
+`verify` executes **only the spec files that declare a `requirement()`**. A repo
+that already has a test suite keeps it: those files are located, reported, and
+left alone — Attest is not a general test runner, and running someone's suite in
+a child process with no aliases and no DOM only ever produced a red about code it
+was never pointed at. `archive` uses the same scope.
+
+Every run says so, before the issues:
+
+```
+Running 12 spec files (30 without a requirement(), not run)
+✓ No issues.
+— 20 requirements / 41 scenarios, 0 error, 0 warning, 0 info
+```
+
+The gap between the two numbers is worth watching: a spec file whose
+`requirement()` call Attest cannot see statically is skipped rather than failed,
+and that is where it shows. The same four numbers are in `--json` under `counts`.
+
+A run with **no requirements** under the root is an `empty-spec` ERROR, not a
+pass. "No failing tests" is not the same claim as "the requirements hold", and
+the case that matters is not the empty directory — it is the repo whose registry
+quietly stopped being found, where the tests still run and still go green.
+
 ### Framework code (`.vue`, DOM, path aliases)
 
 The child run isolates from any ambient config by default, so specs run in a bare
@@ -145,7 +208,7 @@ attest check --json
 {
   "tool": "attest",
   "schemaVersion": 1,
-  "version": "0.1.2",
+  "version": "0.2.0",
   "command": "check",
   "ok": false,
   "summary": { "error": 1, "warning": 0, "info": 0 },
@@ -163,7 +226,8 @@ attest check --json
 ```
 
 `verify` adds `passed` (was the test run itself green, independent of the
-overall verdict); `cover` adds `coverage[]` — one `{ reqId, covered,
+overall verdict) and `counts` (`requirements`, `scenarios`, `specFiles`,
+`attesting`); `cover` adds `coverage[]` — one `{ reqId, covered,
 scenarioCount }` row per requirement — plus a `requirements` roll-up;
 `archive` adds `change`; `render` adds `outFile` (and never the document itself).
 `schemaVersion` is bumped on any breaking change to

package/dist/cli/index.js

@@ -13,7 +13,7 @@ import { rename, writeFile } from 'node:fs/promises';
 import { dirname, join, resolve } from 'node:path';
 import { runCheck, runVerify, runCover, runArchive, runRender, runRenderCheck, } from '../core/pipeline.js';
 import { hasError } from '../core/types.js';
-import { formatIssues, summarize, formatCoverage } from './report.js';
+import { formatIssues, formatScope, summarize, formatCoverage } from './report.js';
 import { archiveReport, checkReport, coverReport, errorReport, renderJson, renderReport, verifyReport, } from './json.js';
 import { packageVersion } from './version.js';
 const VERSION = packageVersion();
@@ -30,6 +30,8 @@ function root(dir) {
 }
 const JSON_FLAG = '--json';
 const JSON_HELP = 'emit one machine-readable JSON report on stdout';
+const EVAL_FLAG = '--eval';
+const EVAL_HELP = 'read the registry by executing every *.reqs.ts (runs project code); default: read it from the source';
 const VITEST_CONFIG_FLAG = '--vitest-config <path>';
 const VITEST_CONFIG_HELP = 'load this Vitest config in the child run (transforms, aliases, environment); default: isolated';
 /** Resolve a user-supplied config path against cwd, so Vitest gets an absolute one. */
@@ -78,11 +80,12 @@ async function runAction(command, opts, action) {
 }
 program
     .command('check')
-    .description('Static structural validation (fast CI pre-check).')
+    .description('Static structural validation (fast CI pre-check); runs no project code.')
     .argument('[dir]', 'project root', undefined)
     .option(JSON_FLAG, JSON_HELP)
+    .option(EVAL_FLAG, EVAL_HELP)
     .action((dir, opts) => runAction('check', opts, async () => {
-    const issues = await runCheck(root(dir));
+    const issues = await runCheck(root(dir), { evaluate: opts.eval });
     return {
         report: checkReport(VERSION, issues),
         human: () => {
@@ -98,12 +101,15 @@ program
     .option(JSON_FLAG, JSON_HELP)
     .option(VITEST_CONFIG_FLAG, VITEST_CONFIG_HELP)
     .action((dir, opts) => runAction('verify', opts, async () => {
-    const { issues, passed, ok } = await runVerify(root(dir), { vitestConfig: vitestConfig(opts) });
+    const { issues, passed, ok, counts } = await runVerify(root(dir), {
+        vitestConfig: vitestConfig(opts),
+    });
     return {
-        report: verifyReport(VERSION, issues, passed, ok),
+        report: verifyReport(VERSION, issues, passed, ok, counts),
         human: () => {
+            console.log(formatScope(counts));
             console.log(formatIssues(issues));
-            console.log(summarize(issues));
+            console.log(summarize(issues, counts));
         },
     };
 }));
@@ -112,8 +118,9 @@ program
     .description('Coverage report: which requirements lack a scenario.')
     .argument('[dir]', 'project root', undefined)
     .option(JSON_FLAG, JSON_HELP)
+    .option(EVAL_FLAG, EVAL_HELP)
     .action((dir, opts) => runAction('cover', opts, async () => {
-    const rows = await runCover(root(dir));
+    const rows = await runCover(root(dir), { evaluate: opts.eval });
     const uncovered = rows.filter((r) => !r.covered).length;
     return {
         report: coverReport(VERSION, rows),
@@ -130,6 +137,7 @@ program
     .option('--out <file>', 'write the document to this file instead of stdout')
     .option('--check', 'fail if --out is missing or no longer matches the registry')
     .option(JSON_FLAG, JSON_HELP)
+    .option(EVAL_FLAG, EVAL_HELP)
     .action((dir, opts, cmd) => {
     // stdout carries exactly one document, so the Markdown and a --json report
     // can never both go there. Usage errors are outside the --json contract
@@ -147,7 +155,7 @@ program
             const issues = await runRenderCheck(root(dir), dest, {
                 display: opts.out,
                 command: `attest render${dir ? ` ${dir}` : ''} --out ${opts.out}`,
-            });
+            }, { evaluate: opts.eval });
             return {
                 report: renderReport(VERSION, issues, opts.out),
                 human: () => {
@@ -160,7 +168,7 @@ program
                 },
             };
         }
-        const { markdown, issues } = await runRender(root(dir));
+        const { markdown, issues } = await runRender(root(dir), { evaluate: opts.eval });
         // Never overwrite a good document with the output of a broken registry.
         if (!hasError(issues) && dest)
             await writeAtomic(dest, markdown);

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,sCAAsC;AACtC,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,2EAA2E;AAC3E,4EAA4E;AAE5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EACL,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,UAAU,EACV,SAAS,EACT,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,WAAW,EACX,UAAU,EACV,YAAY,EACZ,YAAY,GAGb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;AAEjC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,iEAAiE,CAAC;KAC9E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,8EAA8E;AAC9E,uEAAuE;AACvE,iEAAiE;AACjE,SAAS,IAAI,CAAC,GAAY;IACxB,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3D,CAAC;AAiBD,MAAM,SAAS,GAAG,QAAQ,CAAC;AAC3B,MAAM,SAAS,GAAG,iDAAiD,CAAC;AAEpE,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AACpD,MAAM,kBAAkB,GACtB,gGAAgG,CAAC;AAEnG,uFAAuF;AACvF,SAAS,YAAY,CAAC,IAAuB;IAC3C,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnF,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC;IACzE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAQD;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CACtB,OAAoB,EACpB,IAAoB,EACpB,MAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;;YAC1C,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACzE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,mDAAmD,CAAC;KAChE,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,CAAC,GAAuB,EAAE,IAAoB,EAAE,EAAE,CACxD,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;IAClC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC;QACpC,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,qDAAqD,CAAC;KAClE,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;KAC9C,MAAM,CAAC,CAAC,GAAuB,EAAE,IAAuB,EAAE,EAAE,CAC3D,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;IACnC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO;QACL,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;QACjD,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,sDAAsD,CAAC;KACnE,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,CAAC,GAAuB,EAAE,IAAoB,EAAE,EAAE,CACxD,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;IAClC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACxD,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;QAClC,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,oBAAoB,SAAS,YAAY,CAAC,CACrE,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,mEAAmE,CAAC;KAChF,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,cAAc,EAAE,mDAAmD,CAAC;KAC3E,MAAM,CAAC,SAAS,EAAE,4DAA4D,CAAC;KAC/E,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,CAAC,GAAuB,EAAE,IAA0B,EAAE,GAAY,EAAE,EAAE;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,GAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,4FAA4F,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAErE,OAAO,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QAC1C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,2DAA2D;YAC3D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAK,EAAE;gBACpD,OAAO,EAAE,IAAI,CAAC,GAAI;gBAClB,OAAO,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,GAAI,EAAE;aACnE,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;gBAC/C,KAAK,EAAE,GAAG,EAAE;oBACV,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;yBAC7E,CAAC;wBACJ,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;wBAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;oBACjC,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,wEAAwE;QACxE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI;YAAE,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjE,OAAO;YACL,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;YAC/C,KAAK,EAAE,GAAG,EAAE;gBACV,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;oBAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjC,CAAC;qBAAM,IAAI,IAAI,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;KAC9C,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;KAC9C,WAAW,CAAC,gDAAgD,CAAC;KAC7D,MAAM,CAAC,CAAC,MAAc,EAAE,GAAuB,EAAE,IAAuB,EAAE,EAAE,CAC3E,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;IACpC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3F,OAAO;QACL,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;QAChD,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,0BAA0B,MAAM,oBAAoB,CAAC,CAClE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC5D,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC1C,8EAA8E;IAC9E,qDAAqD;IACrD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,sCAAsC;AACtC,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,2EAA2E;AAC3E,4EAA4E;AAE5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EACL,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,UAAU,EACV,SAAS,EACT,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,WAAW,EACX,UAAU,EACV,YAAY,EACZ,YAAY,GAGb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;AAEjC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,iEAAiE,CAAC;KAC9E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,8EAA8E;AAC9E,uEAAuE;AACvE,iEAAiE;AACjE,SAAS,IAAI,CAAC,GAAY;IACxB,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3D,CAAC;AAsBD,MAAM,SAAS,GAAG,QAAQ,CAAC;AAC3B,MAAM,SAAS,GAAG,iDAAiD,CAAC;AAEpE,MAAM,SAAS,GAAG,QAAQ,CAAC;AAC3B,MAAM,SAAS,GACb,sGAAsG,CAAC;AAEzG,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AACpD,MAAM,kBAAkB,GACtB,gGAAgG,CAAC;AAEnG,uFAAuF;AACvF,SAAS,YAAY,CAAC,IAAuB;IAC3C,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnF,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC;IACzE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAQD;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CACtB,OAAoB,EACpB,IAAoB,EACpB,MAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;;YAC1C,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACzE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,yEAAyE,CAAC;KACtF,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,CAAC,GAAuB,EAAE,IAAwB,EAAE,EAAE,CAC5D,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;IAClC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC;QACpC,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,qDAAqD,CAAC;KAClE,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;KAC9C,MAAM,CAAC,CAAC,GAAuB,EAAE,IAAuB,EAAE,EAAE,CAC3D,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;IACnC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAChE,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC;KACjC,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC;QACzD,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,sDAAsD,CAAC;KACnE,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,CAAC,GAAuB,EAAE,IAAwB,EAAE,EAAE,CAC5D,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;IAClC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACxD,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;QAClC,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,oBAAoB,SAAS,YAAY,CAAC,CACrE,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,mEAAmE,CAAC;KAChF,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,cAAc,EAAE,mDAAmD,CAAC;KAC3E,MAAM,CAAC,SAAS,EAAE,4DAA4D,CAAC;KAC/E,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,CAAC,GAAuB,EAAE,IAA0B,EAAE,GAAY,EAAE,EAAE;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,GAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,4FAA4F,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAErE,OAAO,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QAC1C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,2DAA2D;YAC3D,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,IAAI,CAAC,GAAG,CAAC,EACT,IAAK,EACL;gBACE,OAAO,EAAE,IAAI,CAAC,GAAI;gBAClB,OAAO,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,GAAI,EAAE;aACnE,EACD,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CACxB,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;gBAC/C,KAAK,EAAE,GAAG,EAAE;oBACV,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;yBAC7E,CAAC;wBACJ,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;wBAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;oBACjC,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,wEAAwE;QACxE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI;YAAE,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjE,OAAO;YACL,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;YAC/C,KAAK,EAAE,GAAG,EAAE;gBACV,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;oBAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjC,CAAC;qBAAM,IAAI,IAAI,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;KAC9C,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;KAC9C,WAAW,CAAC,gDAAgD,CAAC;KAC7D,MAAM,CAAC,CAAC,MAAc,EAAE,GAAuB,EAAE,IAAuB,EAAE,EAAE,CAC3E,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;IACpC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3F,OAAO;QACL,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;QAChD,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,0BAA0B,MAAM,oBAAoB,CAAC,CAClE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC5D,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC1C,8EAA8E;IAC9E,qDAAqD;IACrD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}