@appport/assessment 0.0.0-stage → 0.1.0

package/dist/artifact.js

@@ -0,0 +1,260 @@
+/**
+ * The `appport.application-assessment/1` artifact: its shape, its content digest and its verifier
+ * (spec/assessment-1.md §3, §6–§8).
+ *
+ * An assessment describes what a static reading of a repository found. It is not a capability contract, a fulfillment
+ * claim, a registry entry or an authorization grant, and nothing in it is verified behavior: `scope` states this, and
+ * the verifier rejects an artifact that claims otherwise.
+ */
+import { canonicalize, digestOf, isDigest, sha256 } from "@appport/protocol";
+import { lstatSync } from "node:fs";
+import { gitIdentity, isInside, readRepositoryFile, repositoryRoot } from "./files.js";
+export const ASSESSMENT_FORMAT = "appport.application-assessment/1";
+export const SCANNER_VERSION = "appport.assessment-scanner/1";
+/**
+ * Scanner 2 adds HTTP-route candidates read from JavaScript and TypeScript (`js.ts`), and needs a format that can say so: `/2`
+ * is `/1` plus an `http` operation, an `http-route` entry point and the `js-static` collection method. Scanner 1 is unchanged
+ * and still writes `/1`, byte for byte, so every existing assessment (and every extraction that records one's digest) reproduces.
+ */
+export const ASSESSMENT_FORMAT_2 = "appport.application-assessment/2";
+export const SCANNER_VERSION_2 = "appport.assessment-scanner/2";
+export const ASSESSMENT_FORMATS = [ASSESSMENT_FORMAT, ASSESSMENT_FORMAT_2];
+/** Which scanner each format is written by; a reader refuses a mismatch. */
+export const SCANNER_OF_FORMAT = { [ASSESSMENT_FORMAT]: SCANNER_VERSION, [ASSESSMENT_FORMAT_2]: SCANNER_VERSION_2 };
+export const TOOL_NAME = "@appport/assessment";
+export const TOOL_VERSION = "0.1.0";
+/**
+ * - `observed`: a statement about what the repository text contains at a location (a declaration, a call, a literal).
+ *   It can be checked by reading the cited lines.
+ * - `inferred`: a conclusion drawn from observed evidence by a stated rule (a handler implements an RPC because name and
+ *   request type match). It cites its basis and may be wrong.
+ * - `unknown`: something the assessment looked for and could not determine. It is never evidence that a thing is absent.
+ */
+export const EVIDENCE_CLASSES = ["observed", "inferred", "unknown"];
+export const COLLECTION_METHODS = ["scanner", "manifest-parse", "proto-static", "go-static", "path-convention", "git-metadata", "derivation", "js-static"];
+/** Methods only `/2` may use. */
+export const FORMAT_2_METHODS = ["js-static"];
+export const READINESS_CLASSES = ["exposure-candidate", "investigate", "insufficient-evidence"];
+export const CRITERIA = ["entry-point", "implementation", "io-schema", "validation", "authorization", "tests", "reachability-complete", "small-surface"];
+export const CONCERNS = ["outbound-http", "async-work", "writes-state", "unresolved-interface"];
+/** Concerns that prevent `exposure-candidate`; the rest only order candidates. */
+export const BLOCKING_CONCERNS = ["outbound-http", "async-work", "unresolved-interface"];
+/** The evidence id rule: a hash of everything in the record except the id itself. */
+export function evidenceId(record) {
+    return `ev-${sha256(canonicalize(record)).slice(0, 16)}`;
+}
+/** The content digest: `digestOf` (RFC 8785, sha256) over the artifact without `digest` and the volatile `assessment`. */
+export function assessmentDigest(artifact) {
+    const { digest: _digest, assessment: _volatile, ...content } = artifact;
+    return digestOf(content);
+}
+const TOP_LEVEL = ["format", "assessment", "tool", "target", "configuration", "coverage", "evidence", "inventory", "candidates", "recommendation", "findings", "limitations", "questions", "scope", "digest"];
+const EVIDENCE_MEMBERS = ["id", "class", "kind", "location", "subject", "observation", "method", "basis", "limitations"];
+const CANDIDATE_MEMBERS = ["id", "name", "description", "operation", "entryPoints", "implementation", "inputs", "outputs", "dependencies", "sideEffects", "authorization", "validation", "tests", "evidence", "confidence", "readiness", "unknowns", "exposure"];
+const isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+/** Every evidence reference outside the evidence list: string arrays under a member named `evidence`. */
+function evidenceReferences(value, pointer, out) {
+    if (Array.isArray(value))
+        value.forEach((v, k) => evidenceReferences(v, `${pointer}/${k}`, out));
+    else if (isObject(value))
+        for (const [key, v] of Object.entries(value)) {
+            if (key === "evidence" && Array.isArray(v))
+                v.forEach((id, k) => out.push({ id, pointer: `${pointer}/evidence/${k}` }));
+            else
+                evidenceReferences(v, `${pointer}/${key}`, out);
+        }
+}
+/**
+ * Verifies an assessment artifact's integrity and honesty. Without `repository` it checks structure, references,
+ * evidence classes and the digest. With `repository` it also checks every observed location against the files: the
+ * path exists inside the root, the lines exist, and the subject occurs in them.
+ */
+export function verifyAssessment(value, options = {}) {
+    const findings = [];
+    const add = (code, path, message) => findings.push({ code, path, message });
+    if (!isObject(value)) {
+        add("ASSESSMENT_MALFORMED", "", "an assessment is a JSON object");
+        return { ok: false, findings };
+    }
+    if (!ASSESSMENT_FORMATS.includes(value.format))
+        add("ASSESSMENT_FORMAT", "/format", `unsupported format ${JSON.stringify(value.format)}; this reader implements ${ASSESSMENT_FORMATS.join(" and ")}`);
+    for (const key of Object.keys(value))
+        if (!TOP_LEVEL.includes(key))
+            add("ASSESSMENT_MEMBER", `/${key}`, `undocumented member "${key}"`);
+    for (const key of TOP_LEVEL)
+        if (!(key in value))
+            add("ASSESSMENT_MEMBER", `/${key}`, `missing member "${key}"`);
+    if (findings.length)
+        return { ok: false, findings };
+    const configuredScanner = isObject(value.configuration) ? value.configuration.scanner : undefined;
+    if (configuredScanner !== SCANNER_OF_FORMAT[value.format])
+        add("ASSESSMENT_SCANNER", "/configuration/scanner", `${String(value.format)} is written by ${SCANNER_OF_FORMAT[value.format]}, not ${JSON.stringify(configuredScanner)}`);
+    const evidence = value.evidence;
+    const candidates = value.candidates;
+    if (!Array.isArray(evidence) || !Array.isArray(candidates)) {
+        add("ASSESSMENT_MALFORMED", "/evidence", "evidence and candidates are arrays");
+        return { ok: false, findings };
+    }
+    // Evidence records.
+    const byId = new Map();
+    evidence.forEach((record, k) => {
+        const at = `/evidence/${k}`;
+        if (!isObject(record))
+            return add("EVIDENCE_MALFORMED", at, "an evidence record is an object");
+        for (const key of Object.keys(record))
+            if (!EVIDENCE_MEMBERS.includes(key))
+                add("EVIDENCE_MEMBER", `${at}/${key}`, `undocumented member "${key}"`);
+        const id = record.id;
+        if (typeof id !== "string")
+            return add("EVIDENCE_MALFORMED", `${at}/id`, "id is a string");
+        if (byId.has(id))
+            add("EVIDENCE_DUPLICATE", `${at}/id`, `duplicate evidence id ${id}`);
+        byId.set(id, record);
+        const { id: _id, ...content } = record;
+        if (evidenceId(content) !== id)
+            add("EVIDENCE_ID", `${at}/id`, `${id} is not the content id of this record`);
+        if (!EVIDENCE_CLASSES.includes(record.class))
+            add("EVIDENCE_CLASS", `${at}/class`, `unknown evidence class ${JSON.stringify(record.class)}`);
+        if (!COLLECTION_METHODS.includes(record.method) || (value.format === ASSESSMENT_FORMAT && FORMAT_2_METHODS.includes(record.method)))
+            add("EVIDENCE_METHOD", `${at}/method`, `unknown collection method ${JSON.stringify(record.method)} for ${String(value.format)}`);
+        if (typeof record.kind !== "string" || typeof record.observation !== "string")
+            add("EVIDENCE_MALFORMED", at, "kind and observation are strings");
+        const location = record.location;
+        if (location !== undefined) {
+            if (!isObject(location) ||
+                typeof location.path !== "string" ||
+                location.path.startsWith("/") ||
+                location.path.split("/").includes("..") ||
+                !Number.isInteger(location.startLine) ||
+                !Number.isInteger(location.endLine) ||
+                location.startLine < 1 ||
+                location.endLine < location.startLine)
+                add("EVIDENCE_LOCATION", `${at}/location`, "a location is a repository-relative path and a line range starting at 1");
+        }
+        if (record.class === "observed" && location === undefined && record.method !== "scanner")
+            add("EVIDENCE_LOCATION", at, "observed evidence cites a location");
+    });
+    evidence.forEach((record, k) => {
+        if (!isObject(record))
+            return;
+        const at = `/evidence/${k}`;
+        const basis = record.basis;
+        if (record.class === "inferred") {
+            if (!Array.isArray(basis) || basis.length === 0)
+                return add("EVIDENCE_BASIS", `${at}/basis`, "inferred evidence cites its basis");
+            if (!basis.some((b) => byId.get(b)?.class === "observed"))
+                add("EVIDENCE_BASIS", `${at}/basis`, "inferred evidence cites at least one observed record");
+        }
+        if (Array.isArray(basis))
+            basis.forEach((b, j) => {
+                const target = byId.get(b);
+                if (!target)
+                    add("EVIDENCE_REFERENCE", `${at}/basis/${j}`, `unknown evidence ${JSON.stringify(b)}`);
+                else if (target.class === "unknown")
+                    add("EVIDENCE_BASIS", `${at}/basis/${j}`, "an unknown cannot be the basis of anything");
+            });
+        else if (basis !== undefined)
+            add("EVIDENCE_MALFORMED", `${at}/basis`, "basis is an array");
+    });
+    // References from everywhere else.
+    const references = [];
+    for (const key of TOP_LEVEL.filter((k) => k !== "evidence"))
+        evidenceReferences(value[key], `/${key}`, references);
+    for (const { id, pointer } of references)
+        if (typeof id !== "string" || !byId.has(id))
+            add("EVIDENCE_REFERENCE", pointer, `unknown evidence ${JSON.stringify(id)}`);
+    // Candidates and their readiness.
+    const candidateIds = new Set();
+    candidates.forEach((candidate, k) => {
+        const at = `/candidates/${k}`;
+        if (!isObject(candidate))
+            return add("CANDIDATE_MALFORMED", at, "a candidate is an object");
+        for (const key of Object.keys(candidate))
+            if (!CANDIDATE_MEMBERS.includes(key))
+                add("CANDIDATE_MEMBER", `${at}/${key}`, `undocumented member "${key}"`);
+        if (typeof candidate.id !== "string" || candidateIds.has(candidate.id))
+            add("CANDIDATE_ID", `${at}/id`, "candidate ids are unique strings");
+        else
+            candidateIds.add(candidate.id);
+        const operation = candidate.operation;
+        if (!isObject(operation) || !(operation.kind === "rpc" || (operation.kind === "http" && value.format === ASSESSMENT_FORMAT_2)))
+            add("CANDIDATE_OPERATION", `${at}/operation/kind`, `an operation is an rpc${value.format === ASSESSMENT_FORMAT_2 ? " or an http route" : " (http routes are appport.application-assessment/2)"}`);
+        const readiness = candidate.readiness;
+        if (!isObject(readiness) || !READINESS_CLASSES.includes(readiness.class))
+            add("READINESS_CLASS", `${at}/readiness/class`, `readiness is one of ${READINESS_CLASSES.join(", ")}; an assessment never establishes that a capability is verified`);
+        const exposure = candidate.exposure;
+        if (!isObject(exposure) || exposure.status !== "proposed" || exposure.authoritative !== false)
+            add("EXPOSURE_CLAIM", `${at}/exposure`, "an exposure is a non-authoritative proposal");
+    });
+    // A verified claim anywhere: a string "verified" as any readiness, status, link or confidence.
+    const claims = [];
+    const scan = (v, pointer) => {
+        if (Array.isArray(v))
+            v.forEach((x, k) => scan(x, `${pointer}/${k}`));
+        else if (isObject(v))
+            for (const [key, x] of Object.entries(v))
+                (["class", "status", "confidence", "readiness", "link"].includes(key) && x === "verified" ? claims.push(`${pointer}/${key}`) : scan(x, `${pointer}/${key}`));
+    };
+    scan(candidates, "/candidates");
+    scan(value.recommendation, "/recommendation");
+    for (const pointer of claims)
+        add("VERIFIED_CLAIM", pointer, "an assessment never establishes verified behavior");
+    const scope = value.scope;
+    if (!isObject(scope) || scope.grantsAuthority !== false || scope.verifiesBehavior !== false || scope.modifiesTarget !== false || Object.keys(scope).length !== 3)
+        add("SCOPE_CLAIM", "/scope", "an assessment grants no authority, verifies no behavior and modifies no target");
+    const recommendation = value.recommendation;
+    if (recommendation !== null) {
+        const candidate = isObject(recommendation) ? candidates.find((c) => isObject(c) && c.id === recommendation.candidate) : undefined;
+        if (!candidate)
+            add("RECOMMENDATION", "/recommendation/candidate", "the recommendation names a candidate in this assessment");
+        else if (candidate.readiness?.class !== "exposure-candidate")
+            add("RECOMMENDATION", "/recommendation", "only an exposure candidate is recommended");
+    }
+    if (Array.isArray(value.questions))
+        value.questions.forEach((q, k) => {
+            if (isObject(q) && q.candidate !== undefined && !candidateIds.has(q.candidate))
+                add("QUESTION_REFERENCE", `/questions/${k}/candidate`, "a question names a candidate in this assessment");
+        });
+    if (!isDigest(value.digest))
+        add("DIGEST_FORMAT", "/digest", "digest is sha256:<64 hex>");
+    else if (assessmentDigest(value) !== value.digest)
+        add("DIGEST_MISMATCH", "/digest", "the content does not match its digest");
+    if (options.repository !== undefined)
+        verifyLocations(value, options.repository, add);
+    return { ok: findings.length === 0, findings };
+}
+function verifyLocations(value, repository, add) {
+    const root = repositoryRoot(repository);
+    const target = value.target;
+    const identity = gitIdentity(root);
+    if (target?.revision !== undefined && identity.revision !== target.revision)
+        add("REVISION_MISMATCH", "/target/revision", `the repository is at ${identity.revision ?? "an unknown revision"}, the assessment at ${String(target.revision)}`);
+    const cache = new Map();
+    const lines = (path) => {
+        if (!cache.has(path)) {
+            try {
+                const absolute = `${root}/${path}`;
+                cache.set(path, isInside(root, absolute) && lstatSync(absolute).isFile() ? readRepositoryFile(root, path).split("\n") : null);
+            }
+            catch {
+                cache.set(path, null);
+            }
+        }
+        return cache.get(path);
+    };
+    value.evidence.forEach((record, k) => {
+        const location = record.location;
+        if (record.class !== "observed" || !location)
+            return;
+        const at = `/evidence/${k}/location`;
+        const file = lines(location.path);
+        if (!file)
+            return add("LOCATION_MISSING", at, `${location.path} is not a readable file in the repository`);
+        if (location.endLine > file.length)
+            return add("LOCATION_RANGE", at, `${location.path} has ${file.length} lines; the evidence cites ${location.startLine}-${location.endLine}`);
+        const subject = record.subject;
+        if (typeof subject === "string" && !file.slice(location.startLine - 1, location.endLine).join("\n").includes(subject))
+            add("LOCATION_SUBJECT", at, `${JSON.stringify(subject)} does not occur in ${location.path}:${location.startLine}-${location.endLine}`);
+    });
+}
+//# sourceMappingURL=artifact.js.map

package/dist/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../src/artifact.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAsD,MAAM,mBAAmB,CAAC;AACjI,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAExG,MAAM,CAAC,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;AACpE,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAC9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAChE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAU,CAAC;AACpF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAA2B,EAAE,CAAC,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC,mBAAmB,CAAC,EAAE,iBAAiB,EAAE,CAAC;AAC5I,MAAM,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC;AAC/C,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAG7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AACpK,iCAAiC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAsB,CAAC,WAAW,CAAC,CAAC;AA0BjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,oBAAoB,EAAE,aAAa,EAAE,uBAAuB,CAAU,CAAC;AAGzG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,OAAO,EAAE,uBAAuB,EAAE,eAAe,CAAU,CAAC;AAElK,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,sBAAsB,CAAU,CAAC;AAEzG,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAuB,CAAC,eAAe,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC;AA6K7G,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,MAA4B;IACrD,OAAO,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,gBAAgB,CAAC,QAAuE;IACtG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,QAAiC,CAAC;IACjG,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AASD,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC9M,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AACzH,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAEjQ,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAExH,yGAAyG;AACzG,SAAS,kBAAkB,CAAC,KAAc,EAAE,OAAe,EAAE,GAA4C;IACvG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;SAC5F,IAAI,QAAQ,CAAC,KAAK,CAAC;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;;gBACnH,kBAAkB,CAAC,CAAC,EAAE,GAAG,OAAO,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,OAAO,GAA4B,EAAE;IACpF,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACpG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,sBAAsB,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,CAAE,kBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,mBAAmB,EAAE,SAAS,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9N,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,mBAAmB,EAAE,IAAI,GAAG,EAAE,EAAE,wBAAwB,GAAG,GAAG,CAAC,CAAC;IACxI,KAAK,MAAM,GAAG,IAAI,SAAS;QAAE,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;YAAE,GAAG,CAAC,mBAAmB,EAAE,IAAI,GAAG,EAAE,EAAE,mBAAmB,GAAG,GAAG,CAAC,CAAC;IACjH,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAEpD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,iBAAiB,KAAK,iBAAiB,CAAC,KAAK,CAAC,MAAgB,CAAC;QAAE,GAAG,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,iBAAiB,CAAC,KAAK,CAAC,MAAgB,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACzP,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,sBAAsB,EAAE,WAAW,EAAE,oCAAoC,CAAC,CAAC;QAC/E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,oBAAoB;IACpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmC,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,CAAC,oBAAoB,EAAE,EAAE,EAAE,iCAAiC,CAAC,CAAC;QAC/F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,iBAAiB,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,wBAAwB,GAAG,GAAG,CAAC,CAAC;QACnJ,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,oBAAoB,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC3F,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,oBAAoB,EAAE,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrB,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;QACvC,IAAI,UAAU,CAAC,OAA+B,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,uCAAuC,CAAC,CAAC;QACrI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAsB,CAAC;YAAE,GAAG,CAAC,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,0BAA0B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9J,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,iBAAiB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAgB,CAAC,CAAC;YAAE,GAAG,CAAC,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,6BAA6B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpS,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YAAE,GAAG,CAAC,oBAAoB,EAAE,EAAE,EAAE,kCAAkC,CAAC,CAAC;QACjJ,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IACE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACnB,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBACjC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACvC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACrC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAClC,QAAQ,CAAC,SAAoB,GAAG,CAAC;gBACjC,QAAQ,CAAC,OAAkB,GAAI,QAAQ,CAAC,SAAoB;gBAE7D,GAAG,CAAC,mBAAmB,EAAE,GAAG,EAAE,WAAW,EAAE,yEAAyE,CAAC,CAAC;QAC1H,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,mBAAmB,EAAE,EAAE,EAAE,oCAAoC,CAAC,CAAC;IAC/J,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO;QAC9B,MAAM,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC;YAClI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC,EAAE,KAAK,KAAK,UAAU,CAAC;gBAAE,GAAG,CAAC,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,sDAAsD,CAAC,CAAC;QACpK,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACtB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACrB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC;gBACrC,IAAI,CAAC,MAAM;oBAAE,GAAG,CAAC,oBAAoB,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;qBAC/F,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;oBAAE,GAAG,CAAC,gBAAgB,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAC;YAC/H,CAAC,CAAC,CAAC;aACA,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,oBAAoB,EAAE,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,mCAAmC;IACnC,MAAM,UAAU,GAA4C,EAAE,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC;QAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;IACnH,KAAK,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,UAAU;QAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAEpK,kCAAkC;IAClC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,GAAG,CAAC,qBAAqB,EAAE,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAC5F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,wBAAwB,GAAG,GAAG,CAAC,CAAC;QACxJ,IAAI,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,kCAAkC,CAAC,CAAC;;YACvI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;YAAE,GAAG,CAAC,qBAAqB,EAAE,GAAG,EAAE,iBAAiB,EAAE,yBAAyB,KAAK,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,qDAAqD,EAAE,CAAC,CAAC;QAClU,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAuB,CAAC;YAAE,GAAG,CAAC,iBAAiB,EAAE,GAAG,EAAE,kBAAkB,EAAE,uBAAuB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAClQ,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,aAAa,KAAK,KAAK;YAAE,GAAG,CAAC,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE,6CAA6C,CAAC,CAAC;IACxL,CAAC,CAAC,CAAC;IACH,+FAA+F;IAC/F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,OAAe,EAAE,EAAE;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACjE,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAC/N,CAAC,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAC9C,KAAK,MAAM,OAAO,IAAI,MAAM;QAAE,GAAG,CAAC,gBAAgB,EAAE,OAAO,EAAE,mDAAmD,CAAC,CAAC;IAElH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,IAAI,KAAK,CAAC,gBAAgB,KAAK,KAAK,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAC9J,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,gFAAgF,CAAC,CAAC;IAEjH,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC5C,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClI,IAAI,CAAC,SAAS;YAAE,GAAG,CAAC,gBAAgB,EAAE,2BAA2B,EAAE,yDAAyD,CAAC,CAAC;aACzH,IAAK,SAAS,CAAC,SAAqC,EAAE,KAAK,KAAK,oBAAoB;YAAE,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,2CAA2C,CAAC,CAAC;IACnL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC/B,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,SAAmB,CAAC;gBAAE,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,YAAY,EAAE,iDAAiD,CAAC,CAAC;QACtM,CAAC,CAAC,CAAC;IAEL,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;SACrF,IAAI,gBAAgB,CAAC,KAAyC,CAAC,KAAK,KAAK,CAAC,MAAM;QAAE,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,uCAAuC,CAAC,CAAC;IAElK,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACtF,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CAAC,KAA8B,EAAE,UAAkB,EAAE,GAA0D;IACrI,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAA6C,CAAC;IACnE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,GAAG,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,wBAAwB,QAAQ,CAAC,QAAQ,IAAI,qBAAqB,uBAAuB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9O,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;gBACnC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChI,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;IAC1B,CAAC,CAAC;IACD,KAAK,CAAC,QAA2C,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAgC,CAAC;QACzD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,QAAQ;YAAE,OAAO;QACrD,MAAM,EAAE,GAAG,aAAa,CAAC,WAAW,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,kBAAkB,EAAE,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,2CAA2C,CAAC,CAAC;QAC3G,IAAI,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,gBAAgB,EAAE,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,MAAM,8BAA8B,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAChL,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,kBAAkB,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,sBAAsB,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAChQ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+export interface CliIO {
+    out: (text: string) => void;
+    err: (text: string) => void;
+}
+/** Runs the CLI. Returns the exit status; never calls `process.exit`. */
+export declare function main(argv: string[], io?: CliIO): number;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAwBA,MAAM,WAAW,KAAK;IACpB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAwCD,yEAAyE;AACzE,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,KAAkG,GAAG,MAAM,CAuEnJ"}

package/dist/cli.js

@@ -0,0 +1,162 @@
+#!/usr/bin/env node
+/**
+ * `appworks assess <repo> --output <file> [--scanner 1|2] [--force] [--strict]`
+ * `appworks verify <file> [--repo <repo>]`
+ *
+ * Exit status (spec/assessment-1.md §10):
+ *   0  assess: an assessment was written (complete or partial; the summary says which). verify: the artifact is valid.
+ *   1  a fatal error: the repository cannot be read, the output cannot be written, or (verify) the artifact is invalid.
+ *   2  invalid arguments, or an output path that would overwrite a file without --force or lies inside the repository.
+ *   3  assess --strict: an assessment was written, but it is partial.
+ */
+import { lstatSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
+import { basename, dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { assessRepository } from "./analyze.js";
+import { TOOL_NAME, TOOL_VERSION, verifyAssessment } from "./artifact.js";
+import { RepositoryError, isInside, repositoryRoot } from "./files.js";
+const USAGE = `usage:
+  appworks assess <repo> --output <file> [--scanner 1|2] [--force] [--strict]
+    --scanner 2 also reads HTTP routes registered in JavaScript and TypeScript and writes appport.application-assessment/2 (default 1)
+  appworks verify <file> [--repo <repo>]
+  appworks --version`;
+class UsageError extends Error {
+}
+function parse(args, flags, valued) {
+    const positional = [];
+    const options = {};
+    for (let k = 0; k < args.length; k++) {
+        const a = args[k];
+        if (a.startsWith("--")) {
+            const name = a.slice(2);
+            if (flags.includes(name))
+                options[name] = true;
+            else if (valued.includes(name)) {
+                const v = args[++k];
+                if (v === undefined || v.startsWith("--"))
+                    throw new UsageError(`--${name} needs a value`);
+                options[name] = v;
+            }
+            else
+                throw new UsageError(`unknown option ${a}`);
+        }
+        else
+            positional.push(a);
+    }
+    return { positional, options };
+}
+function summary(a, output) {
+    const by = (cls) => a.candidates.filter((c) => c.readiness.class === cls).length;
+    const rec = a.recommendation ? a.candidates.find((c) => c.id === a.recommendation.candidate) : undefined;
+    return [
+        `${a.coverage.partial ? "Partial assessment" : "Assessment"} of ${a.target.name}${a.target.revision ? ` at ${a.target.revision.slice(0, 12)}` : ""}`,
+        `  files: ${a.coverage.filesAnalyzed} analyzed of ${a.coverage.filesSeen}; ${a.coverage.skipped.length} skipped; ${a.coverage.malformed.length} malformed`,
+        ...(a.coverage.partial ? [`  partial: ${a.coverage.partialReasons.join(", ")}`] : []),
+        `  candidates: ${a.candidates.length} (${by("exposure-candidate")} exposure candidates, ${by("investigate")} to investigate, ${by("insufficient-evidence")} with insufficient evidence)`,
+        rec
+            ? `  recommended: ${rec.name}${rec.exposure.capability ? ` as proposed ${rec.exposure.capability.name}@1 (${rec.exposure.effectBasis.effect})` : ""}; ${a.recommendation.beforeExposure.length} items to resolve before exposure`
+            : "  recommended: none",
+        `  evidence: ${a.evidence.length} records; ${a.findings.length} findings; ${a.questions.length} questions`,
+        `  nothing was verified, executed or granted; the target was not modified`,
+        `  digest: ${a.digest}`,
+        `  written: ${output}`
+    ].join("\n");
+}
+/** Runs the CLI. Returns the exit status; never calls `process.exit`. */
+export function main(argv, io = { out: (t) => process.stdout.write(`${t}\n`), err: (t) => process.stderr.write(`${t}\n`) }) {
+    const [command, ...rest] = argv;
+    try {
+        if (command === "--version") {
+            io.out(`${TOOL_NAME} ${TOOL_VERSION}`);
+            return 0;
+        }
+        if (command === "assess") {
+            const { positional, options } = parse(rest, ["force", "strict"], ["output", "scanner"]);
+            if (options.scanner !== undefined && options.scanner !== "1" && options.scanner !== "2")
+                throw new UsageError("--scanner is 1 or 2");
+            if (positional.length !== 1)
+                throw new UsageError("assess takes exactly one repository path");
+            if (typeof options.output !== "string")
+                throw new UsageError("assess requires --output <file>");
+            let root;
+            try {
+                root = repositoryRoot(positional[0]);
+            }
+            catch (error) {
+                throw error instanceof RepositoryError ? new UsageError(error.message) : error;
+            }
+            const output = resolve(options.output);
+            let parent;
+            try {
+                parent = realpathSync(dirname(output));
+            }
+            catch {
+                throw new UsageError(`the output directory ${dirname(output)} does not exist`);
+            }
+            if (isInside(root, resolve(parent, basename(output))))
+                throw new UsageError("the output must not be written inside the assessed repository");
+            let exists = false;
+            try {
+                const stat = lstatSync(output);
+                exists = true;
+                if (!stat.isFile())
+                    throw new UsageError(`${output} exists and is not a regular file`);
+            }
+            catch (error) {
+                if (error instanceof UsageError)
+                    throw error;
+            }
+            if (exists && !options.force)
+                throw new UsageError(`${output} exists; pass --force to replace it`);
+            const artifact = assessRepository(root, { scanner: options.scanner === "2" ? 2 : 1 });
+            writeFileSync(output, `${JSON.stringify(artifact, null, 2)}\n`, { flag: options.force ? "w" : "wx" });
+            io.out(summary(artifact, output));
+            return options.strict && artifact.coverage.partial ? 3 : 0;
+        }
+        if (command === "verify") {
+            const { positional, options } = parse(rest, [], ["repo"]);
+            if (positional.length !== 1)
+                throw new UsageError("verify takes exactly one artifact path");
+            let value;
+            try {
+                value = JSON.parse(readFileSync(positional[0], "utf8"));
+            }
+            catch (error) {
+                io.err(`cannot read ${positional[0]}: ${error.message}`);
+                return 1;
+            }
+            const result = verifyAssessment(value, typeof options.repo === "string" ? { repository: options.repo } : {});
+            if (result.ok) {
+                io.out(`valid ${value.format} ${value.digest}`);
+                return 0;
+            }
+            for (const f of result.findings)
+                io.err(`${f.code} ${f.path}: ${f.message}`);
+            return 1;
+        }
+        throw new UsageError(command ? `unknown command ${command}` : "no command");
+    }
+    catch (error) {
+        if (error instanceof UsageError) {
+            io.err(`${error.message}\n${USAGE}`);
+            return 2;
+        }
+        if (error instanceof RepositoryError) {
+            io.err(error.message);
+            return 1;
+        }
+        io.err(`assessment failed: ${error.message}`);
+        return 1;
+    }
+}
+const invoked = process.argv[1] ? (() => {
+    try {
+        return realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url));
+    }
+    catch {
+        return false;
+    }
+})() : false;
+if (invoked)
+    process.exitCode = main(process.argv.slice(2));
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,EAA8B,MAAM,eAAe,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEvE,MAAM,KAAK,GAAG;;;;qBAIO,CAAC;AAOtB,MAAM,UAAW,SAAQ,KAAK;CAAG;AAEjC,SAAS,KAAK,CAAC,IAAc,EAAE,KAAe,EAAE,MAAgB;IAC9D,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;iBAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,gBAAgB,CAAC,CAAC;gBAC3F,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;;gBAAM,MAAM,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;;YAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,OAAO,CAAC,CAAwB,EAAE,MAAc;IACvD,MAAM,EAAE,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IACzF,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,cAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,OAAO;QACL,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACpJ,YAAY,CAAC,CAAC,QAAQ,CAAC,aAAa,gBAAgB,CAAC,CAAC,QAAQ,CAAC,SAAS,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,aAAa,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,YAAY;QAC1J,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,iBAAiB,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,EAAE,CAAC,oBAAoB,CAAC,yBAAyB,EAAE,CAAC,aAAa,CAAC,oBAAoB,EAAE,CAAC,uBAAuB,CAAC,8BAA8B;QACxL,GAAG;YACD,CAAC,CAAC,kBAAkB,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,cAAe,CAAC,cAAc,CAAC,MAAM,mCAAmC;YAClO,CAAC,CAAC,qBAAqB;QACzB,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC,SAAS,CAAC,MAAM,YAAY;QAC1G,0EAA0E;QAC1E,aAAa,CAAC,CAAC,MAAM,EAAE;QACvB,cAAc,MAAM,EAAE;KACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,IAAI,CAAC,IAAc,EAAE,EAAE,GAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;IACzI,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,EAAE,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;YACxF,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,CAAC,OAAO,KAAK,GAAG;gBAAE,MAAM,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC;YACrI,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;YAC9F,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,UAAU,CAAC,iCAAiC,CAAC,CAAC;YAChG,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACjF,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,UAAU,CAAC,wBAAwB,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,+DAA+D,CAAC,CAAC;YAC7I,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC/B,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;oBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,mCAAmC,CAAC,CAAC;YACzF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,UAAU;oBAAE,MAAM,KAAK,CAAC;YAC/C,CAAC;YACD,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,qCAAqC,CAAC,CAAC;YACnG,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtF,aAAa,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACtG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAClC,OAAO,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;YAC5F,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,EAAE,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,CAAC,CAAC,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpE,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7G,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,EAAE,CAAC,GAAG,CAAC,SAAU,KAA+B,CAAC,MAAM,IAAK,KAA+B,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtG,OAAO,CAAC,CAAC;YACX,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;gBAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACrC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,sBAAuB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;IACtC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACb,IAAI,OAAO;IAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/files.d.ts

@@ -0,0 +1,53 @@
+/** Directories never descended into: dependencies, vendored code, build output and VCS metadata. */
+export declare const DEFAULT_EXCLUDED_DIRECTORIES: readonly [".git", ".hg", ".svn", "node_modules", "vendor", "dist", "build", "out", "target", ".next", ".turbo", "coverage", "__pycache__", ".venv"];
+/** Files larger than this are not read. */
+export declare const DEFAULT_MAX_FILE_BYTES = 1048576;
+export type SkipReason = "symlink" | "excluded-directory" | "ignored" | "generated" | "too-large" | "unreadable" | "binary" | "special-file";
+export interface RepositoryFile {
+    /** Repository-relative, `/`-separated. */
+    path: string;
+    size: number;
+}
+export interface Walk {
+    files: RepositoryFile[];
+    /** Directories and files not read, with the reason. Excluded directories are listed once, not file by file. */
+    skipped: Array<{
+        path: string;
+        reason: SkipReason;
+    }>;
+    /** Root `.gitignore` patterns this walker could not interpret; they were not applied. */
+    unsupportedIgnorePatterns: string[];
+}
+export declare class RepositoryError extends Error {
+    constructor(message: string);
+}
+/** Resolves and checks the repository root. */
+export declare function repositoryRoot(path: string): string;
+/** True when `absolute` lies inside `root` (or is it). */
+export declare function isInside(root: string, absolute: string): boolean;
+/**
+ * A minimal `.gitignore` interpreter for the root file: blank lines and comments, `dir/` patterns, `*`/`?` globs, and
+ * leading-`/` anchoring. Negation (`!`), `**` and character classes are not interpreted; such patterns are returned as
+ * unsupported and not applied, so a file they would exclude is scanned and the limitation is reported.
+ */
+export declare function parseIgnore(text: string): {
+    matchers: Array<(path: string, isDirectory: boolean) => boolean>;
+    unsupported: string[];
+};
+/** Walks the repository deterministically. */
+export declare function walkRepository(root: string, options?: {
+    maxFileBytes?: number;
+    excludedDirectories?: readonly string[];
+}): Walk;
+/**
+ * Reads a repository file as UTF-8, refusing anything that is not a regular file inside the root at the moment it is
+ * opened (the descriptor is checked, so a file replaced by a link after the walk is not followed).
+ */
+export declare function readRepositoryFile(root: string, path: string): string;
+/** The repository's identity from `.git` files, if present. Never runs git; credentials in remote URLs are removed. */
+export declare function gitIdentity(root: string): {
+    repository?: string;
+    revision?: string;
+    ref?: string;
+};
+//# sourceMappingURL=files.d.ts.map

package/dist/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAcA,oGAAoG;AACpG,eAAO,MAAM,4BAA4B,YAAI,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,CAAU,CAAC;AAChM,2CAA2C;AAC3C,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAEhD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,oBAAoB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,cAAc,CAAC;AAE7I,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,IAAI;IACnB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,+GAA+G;IAC/G,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IACrD,yFAAyF;IACzF,yBAAyB,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAID,+CAA+C;AAC/C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASnD;AAED,0DAA0D;AAC1D,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGhE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAmBrI;AAcD,8CAA8C;AAC9C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAAG,IAAI,CAqEnI;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAWrE;AAED,uHAAuH;AACvH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CA+BlG"}