@cleocode/core 2026.6.13 → 2026.6.15

package/dist/admin/ops.d.ts

@@ -31,6 +31,9 @@ export declare const adminCoreOps: {
     readonly health: AdminCoreOperation<'admin.health'>;
     readonly 'config.show': AdminCoreOperation<'admin.config.show'>;
     readonly 'config.presets': AdminCoreOperation<'admin.config.presets'>;
+    readonly 'config.get': AdminCoreOperation<'admin.config.get'>;
+    readonly 'config.list': AdminCoreOperation<'admin.config.list'>;
+    readonly 'config.validate': AdminCoreOperation<'admin.config.validate'>;
     readonly stats: AdminCoreOperation<'admin.stats'>;
     readonly context: AdminCoreOperation<'admin.context'>;
     readonly 'context.pull': AdminCoreOperation<'admin.context.pull'>;
@@ -56,6 +59,7 @@ export declare const adminCoreOps: {
     readonly 'health.mutate': AdminCoreOperation<'admin.health.mutate'>;
     readonly 'config.set': AdminCoreOperation<'admin.config.set'>;
     readonly 'config.set-preset': AdminCoreOperation<'admin.config.set-preset'>;
+    readonly 'config.unset': AdminCoreOperation<'admin.config.unset'>;
     readonly 'backup.mutate': AdminCoreOperation<'admin.backup.mutate'>;
     readonly migrate: AdminCoreOperation<'admin.migrate'>;
     readonly cleanup: AdminCoreOperation<'admin.cleanup'>;

package/dist/admin/ops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ops.d.ts","sourceRoot":"","sources":["../../src/admin/ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,KAAK,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClC,KAAK,aAAa,CAAC,EAAE,SAAS,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE;IAAE,EAAE,EAAE,EAAE,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,KAAK,aAAa,CAAC,EAAE,SAAS,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE;IAAE,EAAE,EAAE,EAAE,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,KAAK,kBAAkB,CAAC,EAAE,SAAS,WAAW,IAAI,CAChD,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC,KACtB,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;AAEhC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,EAAE;IACjC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IAChE,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACtE,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACtE,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;IACpE,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC9D,QAAQ,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;IAC5E,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;IACpE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACxD,QAAQ,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACxE,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACtE,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;CACvE,CAAC"}
+{"version":3,"file":"ops.d.ts","sourceRoot":"","sources":["../../src/admin/ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,KAAK,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClC,KAAK,aAAa,CAAC,EAAE,SAAS,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE;IAAE,EAAE,EAAE,EAAE,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,KAAK,aAAa,CAAC,EAAE,SAAS,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE;IAAE,EAAE,EAAE,EAAE,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,KAAK,kBAAkB,CAAC,EAAE,SAAS,WAAW,IAAI,CAChD,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC,KACtB,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;AAEhC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,EAAE;IACjC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IAChE,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACtE,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC9D,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IAChE,QAAQ,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACxE,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACtE,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;IACpE,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC9D,QAAQ,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;IAC5E,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;IACpE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACxD,QAAQ,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACxE,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACtE,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;CACvE,CAAC"}

package/dist/check/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `@cleocode/core` check module — local CI-gate runners.
+ *
+ * Currently exposes the unified pre-PR gate (`cleo check pr`, T11956). The
+ * gate registry + runner live here so the CLI handler stays a thin dispatch
+ * (AGENTS.md Package-Boundary Check).
+ *
+ * @task T11956
+ * @epic T11679
+ */
+export { buildGateArgv, formatPrGateSummary, PR_GATES, type PrGateDef, type PrGateRunResult, type PrGateSummary, type RunPrGateOptions, resolveWorkingTree, runPrGate, selectPrGates, } from './pr-gate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/check/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/check/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,QAAQ,EACR,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,kBAAkB,EAClB,SAAS,EACT,aAAa,GACd,MAAM,cAAc,CAAC"}

package/dist/check/index.js

@@ -0,0 +1,12 @@
+/**
+ * `@cleocode/core` check module — local CI-gate runners.
+ *
+ * Currently exposes the unified pre-PR gate (`cleo check pr`, T11956). The
+ * gate registry + runner live here so the CLI handler stays a thin dispatch
+ * (AGENTS.md Package-Boundary Check).
+ *
+ * @task T11956
+ * @epic T11679
+ */
+export { buildGateArgv, formatPrGateSummary, PR_GATES, resolveWorkingTree, runPrGate, selectPrGates, } from './pr-gate.js';
+//# sourceMappingURL=index.js.map

package/dist/check/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/check/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,QAAQ,EAKR,kBAAkB,EAClB,SAAS,EACT,aAAa,GACd,MAAM,cAAc,CAAC"}

package/dist/check/pr-gate.d.ts

@@ -0,0 +1,183 @@
+/**
+ * `cleo check pr` — unified local pre-PR gate (T11956 · DHQ-073 · Epic T11679).
+ *
+ * Runs the SAME high-signal gates that CI runs, locally, in one command, and
+ * returns a single pass/fail summary so an agent can self-verify BEFORE
+ * opening a PR. This closes the DHQ-073 gap: there was no single "run exactly
+ * the CI required-gates locally" command, so agents repeatedly hit
+ * Type-Check / Canon-Drift / Install-Test failures only after CI ran.
+ *
+ * Design (CORE-first, per AGENTS.md Package-Boundary Check)
+ * --------------------------------------------------------
+ * The gate REGISTRY and the RUNNER live here in `@cleocode/core`. The CLI
+ * handler in `packages/cleo` is a thin dispatch that calls {@link runPrGate}
+ * and renders the result. No business logic lives in the CLI layer.
+ *
+ * Memory safety
+ * -------------
+ * Heavy gates (build, typecheck, test) are cgroup-capped on Linux via
+ * `systemd-run --user --scope -p MemoryMax=… -p MemorySwapMax=0` when the
+ * binary is available — mirroring the project's OOM-safety discipline. The cap
+ * is best-effort: if `systemd-run` is absent (macOS / minimal CI) the gate
+ * runs uncapped.
+ *
+ * @task T11956
+ * @epic T11679 (DHQ burn-down)
+ * @see docs/release/branch-protection-setup.md § "Required Status Checks"
+ */
+/**
+ * A single runnable pre-PR gate. The `command` + `args` are executed verbatim
+ * (no shell) from the repository root.
+ */
+export interface PrGateDef {
+    /** Stable machine id (kebab-case) used in results and `--only` filters. */
+    readonly id: string;
+    /** Human-readable label shown in the summary. */
+    readonly label: string;
+    /** The executable to run (e.g. `pnpm`, `node`, `cleo`). */
+    readonly command: string;
+    /** Arguments passed to the executable. */
+    readonly args: readonly string[];
+    /**
+     * Whether this gate is memory-heavy and should be cgroup-capped on Linux.
+     * Lint gates are cheap; build/typecheck/test are heavy.
+     */
+    readonly heavy: boolean;
+    /**
+     * `core` gates run by default. `full` gates run only with `full: true` —
+     * the complete CI lint surface, which is slower and rarely needed for a
+     * focused change.
+     */
+    readonly tier: 'core' | 'full';
+    /** One-line rationale shown in `--list`. */
+    readonly description: string;
+}
+/**
+ * The canonical pre-PR gate registry. The `core` tier mirrors the gates that
+ * actually gate `main` and that agents most commonly trip; the `full` tier
+ * adds the complete standalone-lint surface for an exhaustive local sweep.
+ *
+ * Ordered cheapest-first so a fast lint failure surfaces before the slow
+ * build/test gates run.
+ */
+export declare const PR_GATES: readonly PrGateDef[];
+/** Outcome of a single gate. */
+export interface PrGateRunResult {
+    /** Gate id (matches {@link PrGateDef.id}). */
+    readonly id: string;
+    /** Gate label. */
+    readonly label: string;
+    /** Final status. `skipped` means the gate was filtered out by `--only`. */
+    readonly status: 'pass' | 'fail' | 'skipped';
+    /** Process exit code (null if the process could not be spawned or skipped). */
+    readonly exitCode: number | null;
+    /** Wall-clock duration in milliseconds. */
+    readonly durationMs: number;
+    /** Whether the gate was cgroup-capped on this run. */
+    readonly capped: boolean;
+    /** Last lines of combined stdout/stderr (trimmed) for failure triage. */
+    readonly outputTail: string;
+}
+/** Aggregate result of a `cleo check pr` run. */
+export interface PrGateSummary {
+    /** Repository root the gates ran against. */
+    readonly repoRoot: string;
+    /** True iff every non-skipped gate passed. */
+    readonly passed: boolean;
+    /** Per-gate results in execution order. */
+    readonly gates: readonly PrGateRunResult[];
+    /** Roll-up counts. */
+    readonly summary: {
+        readonly pass: number;
+        readonly fail: number;
+        readonly skipped: number;
+    };
+}
+/** Options controlling a {@link runPrGate} run. */
+export interface RunPrGateOptions {
+    /** Run the full standalone-lint surface in addition to the core tier. */
+    readonly full?: boolean;
+    /** Restrict the run to these gate ids (others reported as `skipped`). */
+    readonly only?: readonly string[];
+    /** Continue running remaining gates after the first failure (default true). */
+    readonly keepGoing?: boolean;
+    /** MemoryMax for heavy gates on Linux (default `16G`). */
+    readonly memoryMax?: string;
+    /**
+     * Override the working tree the gates run in. Defaults to the git toplevel
+     * of `process.cwd()` (so an agent inside a worktree validates THAT worktree,
+     * incl. uncommitted changes — not whatever `CLEO_ROOT` points at).
+     */
+    readonly cwd?: string;
+    /**
+     * Streaming sink for human progress. Receives one line per lifecycle event.
+     * Defaults to a no-op so the function is pure-by-default for tests.
+     */
+    readonly onProgress?: (line: string) => void;
+}
+/**
+ * Resolve the gate set for a run: the `core` tier always, plus the `full`
+ * tier when requested, then narrowed by `only` (which marks the rest skipped).
+ *
+ * @param opts run options
+ * @returns the gates to execute (in registry order) plus the skipped set
+ * @internal exported for unit testing
+ */
+export declare function selectPrGates(opts: Pick<RunPrGateOptions, 'full' | 'only'>): {
+    toRun: PrGateDef[];
+    skipped: PrGateDef[];
+};
+/**
+ * Build the argv for a gate, wrapping heavy gates in a cgroup-capped
+ * `systemd-run --user --scope` (via the spawn-wrapper SSoT) when available.
+ *
+ * Delegates to {@link buildSpawnArgs} from
+ * `packages/core/src/resources/spawn-wrapper.ts` — the ONLY constructor of
+ * `systemd-run` argv for cleo children (T11993 SSoT enforcement).
+ *
+ * @param gate the gate definition
+ * @param memoryMax MemoryMax value (e.g. `16G`); passed as a resource override.
+ * @returns `{ command, args, capped }`
+ * @internal exported for unit testing
+ */
+export declare function buildGateArgv(gate: PrGateDef, memoryMax: string): {
+    command: string;
+    args: string[];
+    capped: boolean;
+};
+/**
+ * Resolve the working tree the gates run in: the git toplevel of
+ * `process.cwd()` (so the gates validate the agent's actual checkout/worktree
+ * incl. uncommitted changes). Falls back to {@link getProjectRoot} when not in
+ * a git work tree.
+ *
+ * @returns absolute path to the working-tree root
+ * @internal exported for unit testing
+ */
+export declare function resolveWorkingTree(): string;
+/**
+ * Run the unified pre-PR gate suite and return a structured summary.
+ *
+ * Each gate runs as a child process from the repository root. Heavy gates are
+ * cgroup-capped on Linux when `systemd-run` is available. By default the run
+ * continues after a failure (so the agent sees every problem at once); pass
+ * `keepGoing: false` to stop at the first failure.
+ *
+ * This function performs no process I/O of its own beyond `onProgress`
+ * callbacks — the CLI layer owns stdout/stderr rendering.
+ *
+ * @param opts run options
+ * @returns the aggregate {@link PrGateSummary}
+ */
+export declare function runPrGate(opts?: RunPrGateOptions): PrGateSummary;
+/**
+ * Render a {@link PrGateSummary} as a human-readable, multi-line report
+ * (no trailing newline). The CLI writes this to stderr while the LAFS envelope
+ * goes to stdout — keeping presentation logic in core so the CLI stays a thin
+ * dispatch (AGENTS.md Package-Boundary Check).
+ *
+ * @param summary the aggregate result of a `cleo check pr` run
+ * @returns the formatted human report
+ */
+export declare function formatPrGateSummary(summary: PrGateSummary): string;
+//# sourceMappingURL=pr-gate.d.ts.map

package/dist/check/pr-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-gate.d.ts","sourceRoot":"","sources":["../../src/check/pr-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAQD;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,EAAE,SAAS,SAAS,EAwH/B,CAAC;AAEX,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7C,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,2CAA2C;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,iDAAiD;AACjD,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,sBAAsB;IACtB,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9F;AAED,mDAAmD;AACnD,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG;IAC5E,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB,CAWA;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,MAAM,GAChB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAatD;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAS3C;AAiBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,SAAS,CAAC,IAAI,GAAE,gBAAqB,GAAG,aAAa,CA4EpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAclE"}

package/dist/check/pr-gate.js

@@ -0,0 +1,348 @@
+/**
+ * `cleo check pr` — unified local pre-PR gate (T11956 · DHQ-073 · Epic T11679).
+ *
+ * Runs the SAME high-signal gates that CI runs, locally, in one command, and
+ * returns a single pass/fail summary so an agent can self-verify BEFORE
+ * opening a PR. This closes the DHQ-073 gap: there was no single "run exactly
+ * the CI required-gates locally" command, so agents repeatedly hit
+ * Type-Check / Canon-Drift / Install-Test failures only after CI ran.
+ *
+ * Design (CORE-first, per AGENTS.md Package-Boundary Check)
+ * --------------------------------------------------------
+ * The gate REGISTRY and the RUNNER live here in `@cleocode/core`. The CLI
+ * handler in `packages/cleo` is a thin dispatch that calls {@link runPrGate}
+ * and renders the result. No business logic lives in the CLI layer.
+ *
+ * Memory safety
+ * -------------
+ * Heavy gates (build, typecheck, test) are cgroup-capped on Linux via
+ * `systemd-run --user --scope -p MemoryMax=… -p MemorySwapMax=0` when the
+ * binary is available — mirroring the project's OOM-safety discipline. The cap
+ * is best-effort: if `systemd-run` is absent (macOS / minimal CI) the gate
+ * runs uncapped.
+ *
+ * @task T11956
+ * @epic T11679 (DHQ burn-down)
+ * @see docs/release/branch-protection-setup.md § "Required Status Checks"
+ */
+import { spawnSync } from 'node:child_process';
+import { getProjectRoot } from '../paths.js';
+import { buildSpawnArgs, hasSystemdRun } from '../resources/spawn-wrapper.js';
+/**
+ * The default MemoryMax applied to heavy gates on Linux. Matches the project's
+ * standard cgroup cap for local build/test runs.
+ */
+const DEFAULT_MEMORY_MAX = '16G';
+/**
+ * The canonical pre-PR gate registry. The `core` tier mirrors the gates that
+ * actually gate `main` and that agents most commonly trip; the `full` tier
+ * adds the complete standalone-lint surface for an exhaustive local sweep.
+ *
+ * Ordered cheapest-first so a fast lint failure surfaces before the slow
+ * build/test gates run.
+ */
+export const PR_GATES = [
+    {
+        id: 'biome',
+        label: 'Biome (lint + format)',
+        command: 'pnpm',
+        args: ['biome', 'check', '.'],
+        heavy: false,
+        tier: 'core',
+        description: 'Format + lint check (CI: Lint & Format)',
+    },
+    {
+        id: 'lockfile',
+        label: 'Lockfile Check',
+        command: 'pnpm',
+        args: ['install', '--frozen-lockfile'],
+        heavy: false,
+        tier: 'core',
+        description: 'pnpm-lock.yaml is consistent (CI: Lockfile Check)',
+    },
+    {
+        id: 'arch',
+        label: 'Architectural Boundary Check (cleo check arch)',
+        command: 'cleo',
+        args: ['check', 'arch'],
+        heavy: false,
+        tier: 'core',
+        description: 'SG-ARCH-SOLID gates (CI: Arch Boundary Check)',
+    },
+    {
+        id: 'canon-docs',
+        label: 'Canon Drift Check (docs SSoT)',
+        command: 'cleo',
+        args: ['check', 'canon', 'docs'],
+        heavy: false,
+        tier: 'core',
+        description: 'No raw *.md bypassing the docs SSoT (CI: Canon Drift Check)',
+    },
+    {
+        id: 'merge-bar-aggregate',
+        label: 'Merge-Bar Aggregate Gate Lint',
+        command: 'node',
+        args: ['scripts/lint-merge-bar-aggregate.mjs'],
+        heavy: false,
+        tier: 'core',
+        description: 'Every PR-gating workflow keeps a complete aggregate gate (T11955)',
+    },
+    {
+        id: 'typecheck',
+        label: 'Type Check (full tsc -b)',
+        command: 'pnpm',
+        args: ['run', 'typecheck'],
+        heavy: true,
+        tier: 'core',
+        description: 'Full-tree TypeScript build (CI: Type Check)',
+    },
+    {
+        id: 'build',
+        label: 'Build',
+        command: 'pnpm',
+        args: ['run', 'build'],
+        heavy: true,
+        tier: 'core',
+        description: 'Full dependency-graph build (CI: Build & Verify)',
+    },
+    {
+        id: 'test',
+        label: 'Unit Tests',
+        command: 'pnpm',
+        args: ['run', 'test'],
+        heavy: true,
+        tier: 'core',
+        description: 'Vitest suite (CI: Unit Tests shards)',
+    },
+    // --- full tier: the complete standalone-lint surface ---------------------
+    {
+        id: 'lint-llm-chokepoint',
+        label: 'LLM Chokepoint Guard',
+        command: 'node',
+        args: ['scripts/lint-llm-chokepoint.mjs'],
+        heavy: false,
+        tier: 'full',
+        description: 'No-hardcoded-models / out-of-chokepoint LLM construction (CI: Arch Boundary Check)',
+    },
+    {
+        id: 'lint-contracts-dep',
+        label: 'Contracts Dep Lint',
+        command: 'node',
+        args: ['scripts/lint-contracts-dep.mjs'],
+        heavy: false,
+        tier: 'full',
+        description: 'Package boundary dependency lint (CI: Contracts Dep Lint)',
+    },
+    {
+        id: 'lint-deployed-template-parity',
+        label: 'Deployed Template Parity',
+        command: 'node',
+        args: ['scripts/lint-deployed-template-parity.mjs'],
+        heavy: false,
+        tier: 'full',
+        description: 'Rendered workflow templates match deployed (CI: Deployed Template Parity)',
+    },
+    {
+        id: 'lint-publish-surface',
+        label: 'Publish Surface Lint',
+        command: 'node',
+        args: ['scripts/lint-publish-surface.mjs'],
+        heavy: false,
+        tier: 'full',
+        description: 'npm publish surface SSoT (CI: Publish Surface Lint)',
+    },
+    {
+        id: 'lint-no-crate-publish',
+        label: 'Crate Publish Guard',
+        command: 'node',
+        args: ['scripts/lint-no-crate-publish.mjs'],
+        heavy: false,
+        tier: 'full',
+        description: 'Zero crates.io publishes (CI: Crate Publish Guard)',
+    },
+];
+/**
+ * Resolve the gate set for a run: the `core` tier always, plus the `full`
+ * tier when requested, then narrowed by `only` (which marks the rest skipped).
+ *
+ * @param opts run options
+ * @returns the gates to execute (in registry order) plus the skipped set
+ * @internal exported for unit testing
+ */
+export function selectPrGates(opts) {
+    const tierFiltered = PR_GATES.filter((g) => g.tier === 'core' || (opts.full && g.tier === 'full'));
+    if (!opts.only || opts.only.length === 0) {
+        return { toRun: [...tierFiltered], skipped: [] };
+    }
+    const wanted = new Set(opts.only);
+    const toRun = tierFiltered.filter((g) => wanted.has(g.id));
+    const skipped = tierFiltered.filter((g) => !wanted.has(g.id));
+    return { toRun, skipped };
+}
+/**
+ * Build the argv for a gate, wrapping heavy gates in a cgroup-capped
+ * `systemd-run --user --scope` (via the spawn-wrapper SSoT) when available.
+ *
+ * Delegates to {@link buildSpawnArgs} from
+ * `packages/core/src/resources/spawn-wrapper.ts` — the ONLY constructor of
+ * `systemd-run` argv for cleo children (T11993 SSoT enforcement).
+ *
+ * @param gate the gate definition
+ * @param memoryMax MemoryMax value (e.g. `16G`); passed as a resource override.
+ * @returns `{ command, args, capped }`
+ * @internal exported for unit testing
+ */
+export function buildGateArgv(gate, memoryMax) {
+    if (gate.heavy && hasSystemdRun()) {
+        const built = buildSpawnArgs(gate.command, gate.args, {
+            scopeClass: 'test',
+            resources: { memoryMax },
+        });
+        return {
+            command: built.command,
+            args: built.args,
+            capped: built.mode === 'systemd',
+        };
+    }
+    return { command: gate.command, args: [...gate.args], capped: false };
+}
+/**
+ * Resolve the working tree the gates run in: the git toplevel of
+ * `process.cwd()` (so the gates validate the agent's actual checkout/worktree
+ * incl. uncommitted changes). Falls back to {@link getProjectRoot} when not in
+ * a git work tree.
+ *
+ * @returns absolute path to the working-tree root
+ * @internal exported for unit testing
+ */
+export function resolveWorkingTree() {
+    const top = spawnSync('git', ['rev-parse', '--show-toplevel'], {
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'ignore'],
+    });
+    if (top.status === 0 && typeof top.stdout === 'string' && top.stdout.trim().length > 0) {
+        return top.stdout.trim();
+    }
+    return getProjectRoot();
+}
+/**
+ * Keep only the last `n` non-empty lines of a captured output blob, trimmed.
+ *
+ * @param output raw combined output
+ * @param n max lines to retain
+ */
+function tailLines(output, n) {
+    return output
+        .split('\n')
+        .map((l) => l.trimEnd())
+        .filter((l) => l.length > 0)
+        .slice(-n)
+        .join('\n');
+}
+/**
+ * Run the unified pre-PR gate suite and return a structured summary.
+ *
+ * Each gate runs as a child process from the repository root. Heavy gates are
+ * cgroup-capped on Linux when `systemd-run` is available. By default the run
+ * continues after a failure (so the agent sees every problem at once); pass
+ * `keepGoing: false` to stop at the first failure.
+ *
+ * This function performs no process I/O of its own beyond `onProgress`
+ * callbacks — the CLI layer owns stdout/stderr rendering.
+ *
+ * @param opts run options
+ * @returns the aggregate {@link PrGateSummary}
+ */
+export function runPrGate(opts = {}) {
+    const repoRoot = opts.cwd ?? resolveWorkingTree();
+    const memoryMax = opts.memoryMax ?? DEFAULT_MEMORY_MAX;
+    const keepGoing = opts.keepGoing ?? true;
+    const emit = opts.onProgress ?? (() => { });
+    const { toRun, skipped } = selectPrGates(opts);
+    const results = [];
+    let aborted = false;
+    for (const gate of toRun) {
+        if (aborted) {
+            results.push({
+                id: gate.id,
+                label: gate.label,
+                status: 'skipped',
+                exitCode: null,
+                durationMs: 0,
+                capped: false,
+                outputTail: 'skipped — earlier gate failed and --keep-going is off',
+            });
+            continue;
+        }
+        const { command, args, capped } = buildGateArgv(gate, memoryMax);
+        emit(`▶ ${gate.label}${capped ? ` (capped ${memoryMax})` : ''}`);
+        const start = Date.now();
+        const proc = spawnSync(command, args, {
+            cwd: repoRoot,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: process.env,
+        });
+        const durationMs = Date.now() - start;
+        const combined = `${proc.stdout ?? ''}\n${proc.stderr ?? ''}`;
+        const passed = proc.status === 0;
+        results.push({
+            id: gate.id,
+            label: gate.label,
+            status: passed ? 'pass' : 'fail',
+            exitCode: proc.status,
+            durationMs,
+            capped,
+            outputTail: passed ? '' : tailLines(combined, 20),
+        });
+        emit(`${passed ? '✓' : '✗'} ${gate.label} (${(durationMs / 1000).toFixed(1)}s)`);
+        if (!passed && !keepGoing)
+            aborted = true;
+    }
+    for (const gate of skipped) {
+        results.push({
+            id: gate.id,
+            label: gate.label,
+            status: 'skipped',
+            exitCode: null,
+            durationMs: 0,
+            capped: false,
+            outputTail: 'skipped — not selected by --only',
+        });
+    }
+    const pass = results.filter((r) => r.status === 'pass').length;
+    const fail = results.filter((r) => r.status === 'fail').length;
+    const skip = results.filter((r) => r.status === 'skipped').length;
+    return {
+        repoRoot,
+        passed: fail === 0,
+        gates: results,
+        summary: { pass, fail, skipped: skip },
+    };
+}
+/**
+ * Render a {@link PrGateSummary} as a human-readable, multi-line report
+ * (no trailing newline). The CLI writes this to stderr while the LAFS envelope
+ * goes to stdout — keeping presentation logic in core so the CLI stays a thin
+ * dispatch (AGENTS.md Package-Boundary Check).
+ *
+ * @param summary the aggregate result of a `cleo check pr` run
+ * @returns the formatted human report
+ */
+export function formatPrGateSummary(summary) {
+    const rule = '─'.repeat(52);
+    const lines = ['', 'Pre-PR Gate (cleo check pr) — T11956', rule];
+    for (const g of summary.gates) {
+        const icon = g.status === 'pass' ? 'PASS' : g.status === 'fail' ? 'FAIL' : 'SKIP';
+        const dur = g.status === 'skipped' ? '' : ` (${(g.durationMs / 1000).toFixed(1)}s)`;
+        lines.push(`  [${icon}] ${g.label}${dur}`);
+        if (g.status === 'fail' && g.outputTail) {
+            for (const tail of g.outputTail.split('\n').slice(-6))
+                lines.push(`         ${tail}`);
+        }
+    }
+    const { pass, fail, skipped } = summary.summary;
+    lines.push(rule, `  Result: ${pass} passed, ${fail} failed, ${skipped} skipped`, '');
+    return lines.join('\n');
+}
+//# sourceMappingURL=pr-gate.js.map

package/dist/check/pr-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-gate.js","sourceRoot":"","sources":["../../src/check/pr-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AA8B9E;;;GAGG;AACH,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAyB;IAC5C;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC;QAC7B,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC;QACtC,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,mDAAmD;KACjE;IACD;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,gDAAgD;QACvD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;QACvB,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,+CAA+C;KAC7D;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,+BAA+B;QACtC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAChC,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,6DAA6D;KAC3E;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,+BAA+B;QACtC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,sCAAsC,CAAC;QAC9C,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,mEAAmE;KACjF;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,0BAA0B;QACjC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;QAC1B,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,6CAA6C;KAC3D;IACD;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;QACtB,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,kDAAkD;KAChE;IACD;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,sCAAsC;KACpD;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,iCAAiC,CAAC;QACzC,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EACT,oFAAoF;KACvF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,gCAAgC,CAAC;QACxC,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,2DAA2D;KACzE;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,KAAK,EAAE,0BAA0B;QACjC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,2CAA2C,CAAC;QACnD,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,2EAA2E;KACzF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,kCAAkC,CAAC;QAC1C,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,qDAAqD;KACnE;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,qBAAqB;QAC5B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,mCAAmC,CAAC;QAC3C,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,oDAAoD;KAClE;CACO,CAAC;AAuDX;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAA6C;IAIzE,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAC7D,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAe,EACf,SAAiB;IAEjB,IAAI,IAAI,CAAC,KAAK,IAAI,aAAa,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpD,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE,SAAS,EAAE;SACzB,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS;SACjC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE;QAC7D,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,CAAS;IAC1C,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,KAAK,CAAC,CAAC,CAAC,CAAC;SACT,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,SAAS,CAAC,OAAyB,EAAE;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE3C,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,CAAC;gBACb,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,uDAAuD;aACpE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;YACpC,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAEtC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,KAAK,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,QAAQ,EAAE,IAAI,CAAC,MAAM;YACrB,UAAU;YACV,MAAM;YACN,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;SAClD,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEjF,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;YAAE,OAAO,GAAG,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,kCAAkC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAElE,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,IAAI,KAAK,CAAC;QAClB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAa,CAAC,EAAE,EAAE,sCAAsC,EAAE,IAAI,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAClF,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACpF,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,IAAI,YAAY,IAAI,YAAY,OAAO,UAAU,EAAE,EAAE,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}