@coderifts/agent-guard 1.1.0 → 1.3.0

package/README.md

@@ -15,16 +15,41 @@ import { CodeRifts } from '@coderifts/sdk';
 const client = new CodeRifts({ apiKey: 'cr_live_...' });
 
 const outcome = await guardToolCall(
-  { toolName: 'Edit', arguments: { path: 'openapi.yaml' }, filesTouched: ['openapi.yaml'], diff: '...' },
+  {
+    toolName: 'Edit',
+    arguments: { path: 'openapi.yaml' },
+    // Supply the contract change as artifacts[] with before/after content — this is what the
+    // server preflights. `id`/`type`/`before`/`after` are all required for each artifact.
+    artifacts: [{ id: 'public-api', type: 'openapi', before: baseSpec, after: proposedSpec }],
+  },
   // The mutating work is created ONLY here, after the verdict — never eagerly (closes TOCTOU).
   async (envelope, redactedCall) => applyEdit(redactedCall),
-  { client },
+  { client, operation: 'merge', environment: 'production' },
 );
 
 if (!outcome.executed) console.error('blocked:', outcome.verdict);
 // Retry ONLY when outcome.executionAttempted === false (the safe-to-retry signal).
 ```
 
+> **Supply `artifacts[]` with content.** If the guard detects a contract change (e.g. from
+> `filesTouched`/`diff`) but you did **not** supply `artifacts[]` with `before`/`after`, it fails
+> closed **locally** with `outcome.verdict.cause === 'MISSING_ARTIFACT_CONTENT'` — the tool does not
+> execute and the error is *actionable* (pass the change as artifacts), not a package failure. The
+> guard never sends an empty change set to the server.
+
+### Guarding the whole tool surface (inescapability)
+
+`guardToolCall` guards one call. To make CodeRifts the **only** path a mutating tool can take, wrap
+your entire tool list with [`guardToolRegistry`](#) — it returns the sole tool table the agent may
+see (every mutator wrapped, fail-closed at construction if any would remain raw):
+
+```typescript
+import { guardToolRegistry } from '@coderifts/agent-guard';
+
+const { tools, coverage } = guardToolRegistry(rawTools, { guard: { client } });
+// register ONLY `tools` with your agent SDK; coverage === 'COMPLETE' ⇒ no mutator is reachable raw.
+```
+
 ## Guarantees (tsc-verified)
 
 - **Fail-closed by default** — any ambiguity, integrity failure, or unknown state resolves to `STOP`.

package/dist/cjs/artifact-resolver.d.ts

@@ -0,0 +1,76 @@
+/**
+ * artifactResolver — automatic base/head contract artifacts from a pure git snapshot (artifact-
+ * resolver-SPEC v1.0). The companion to MISSING_ARTIFACT_CONTENT: it answers "where do before/after
+ * come from?" by turning `git diff --name-only` + blob reads into `artifacts[] { id, type, before,
+ * after }` ready for preflight — OR honest `unresolved[]` entries. It NEVER decides, scores, or
+ * touches the fingerprint (§0.1); `report.claim.produces_verdict` is ALWAYS false.
+ *
+ * PURE + DETERMINISTIC (§0.3): git I/O is the host's job and enters as the `blobs` input; the same
+ * snapshot + changedFiles + config yields byte-identical artifacts/unresolved/coverage.
+ *
+ * Anti-fabrication (§4.2 / A1/A2): a missing $ref target, unreadable blob, or ambiguous SSOT becomes
+ * an `unresolved` entry with a code — NEVER an invented component, stub, or half-bundle.
+ */
+export type ArtifactType = 'openapi' | 'graphql' | 'grpc' | 'asyncapi' | 'mcp_manifest';
+export type ResolvedArtifact = {
+    id: string;
+    type: ArtifactType;
+    before: string;
+    after: string;
+};
+export type UnresolvedReason = 'unreadable_blob' | 'missing_ref_target' | 'ref_cycle' | 'ref_depth_exceeded' | 'ambiguous_ssot' | 'unsupported_encoding' | 'type_ambiguous' | 'empty_changed_contract' | 'config_ssot_missing' | 'external_ref_forbidden' | 'parse_error';
+export type UnresolvedEntry = {
+    path: string;
+    reason: UnresolvedReason;
+    detail?: string;
+    related_paths?: string[];
+};
+export type ResolveCoverage = 'COMPLETE' | 'PARTIAL' | 'UNRESOLVED' | 'EMPTY';
+export type BlobValue = string | null | {
+    error: UnresolvedReason;
+    detail?: string;
+};
+export type ResolveInput = {
+    repository?: string;
+    baseRef: string;
+    headRef: string;
+    changedFiles: string[];
+    /** Pure snapshot keyed `${ref}:${path}` → text | null (absent) | { error }. */
+    blobs: Record<string, BlobValue>;
+};
+export type ResolveConfig = {
+    maxRefDepth?: number;
+    followExternalRefs?: boolean;
+    ssotPrefer?: string[];
+    generatedGlobs?: string[];
+    pathTypeHints?: Record<string, ArtifactType>;
+    allowBinary?: boolean;
+    openApiAssembly?: 'bundle_inline' | 'root_only';
+    /** Matrix flags (§5.1 pairing / §5 strict SSOT). */
+    forceSameSurfaceGroup?: string[];
+    requireSsotIfConfigured?: boolean;
+};
+export type SsotSelection = {
+    chosen: string;
+    deferred: string[];
+    reason: 'ssotPrefer' | 'generated_deprioritized' | 'single';
+};
+export type ResolveResult = {
+    artifacts: ResolvedArtifact[];
+    unresolved: UnresolvedEntry[];
+    coverage: ResolveCoverage;
+    report: {
+        version: 'artifact-resolver-report/1.0';
+        baseRef: string;
+        headRef: string;
+        contract_paths_discovered: string[];
+        ignored_non_contract: string[];
+        ssot_selections: SsotSelection[];
+        claim: {
+            artifacts_ready_for_preflight: boolean;
+            produces_verdict: false;
+        };
+    };
+};
+export declare function resolve(input: ResolveInput, config?: ResolveConfig): ResolveResult;
+//# sourceMappingURL=artifact-resolver.d.ts.map

package/dist/cjs/artifact-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-resolver.d.ts","sourceRoot":"","sources":["../../src/artifact-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,cAAc,CAAC;AAExF,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GACxB,iBAAiB,GAAG,oBAAoB,GAAG,WAAW,GAAG,oBAAoB,GAC7E,gBAAgB,GAAG,sBAAsB,GAAG,gBAAgB,GAAG,wBAAwB,GACvF,qBAAqB,GAAG,wBAAwB,GAAG,aAAa,CAAC;AAErE,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEpH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,CAAC;AAE9E,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,gBAAgB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,MAAM,MAAM,YAAY,GAAG;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,eAAe,GAAG,WAAW,CAAC;IAChD,oDAAoD;IACpD,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,yBAAyB,GAAG,QAAQ,CAAA;CAAE,CAAC;AAEhI,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE;QACN,OAAO,EAAE,8BAA8B,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,yBAAyB,EAAE,MAAM,EAAE,CAAC;QACpC,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,eAAe,EAAE,aAAa,EAAE,CAAC;QACjC,KAAK,EAAE;YAAE,6BAA6B,EAAE,OAAO,CAAC;YAAC,gBAAgB,EAAE,KAAK,CAAA;SAAE,CAAC;KAC5E,CAAC;CACH,CAAC;AA0PF,wBAAgB,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,GAAE,aAAkB,GAAG,aAAa,CAgGtF"}

package/dist/cjs/artifact-resolver.js

@@ -0,0 +1,413 @@
+"use strict";
+/**
+ * artifactResolver — automatic base/head contract artifacts from a pure git snapshot (artifact-
+ * resolver-SPEC v1.0). The companion to MISSING_ARTIFACT_CONTENT: it answers "where do before/after
+ * come from?" by turning `git diff --name-only` + blob reads into `artifacts[] { id, type, before,
+ * after }` ready for preflight — OR honest `unresolved[]` entries. It NEVER decides, scores, or
+ * touches the fingerprint (§0.1); `report.claim.produces_verdict` is ALWAYS false.
+ *
+ * PURE + DETERMINISTIC (§0.3): git I/O is the host's job and enters as the `blobs` input; the same
+ * snapshot + changedFiles + config yields byte-identical artifacts/unresolved/coverage.
+ *
+ * Anti-fabrication (§4.2 / A1/A2): a missing $ref target, unreadable blob, or ambiguous SSOT becomes
+ * an `unresolved` entry with a code — NEVER an invented component, stub, or half-bundle.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolve = resolve;
+const resolver_yaml_js_1 = require("./resolver-yaml.js");
+const resolver_glob_js_1 = require("./resolver-glob.js");
+const DEFAULT_GENERATED = ['**/generated/**', '**/gen/**'];
+const VENDOR_GLOBS = ['**/node_modules/**', '**/vendor/**'];
+// ── path helpers (POSIX) ─────────────────────────────────────────────────────────────────────────
+function normalizePath(p) {
+    let s = p.replace(/\\/g, '/').trim();
+    while (s.startsWith('./'))
+        s = s.slice(2);
+    return s;
+}
+function dirname(p) {
+    const i = p.lastIndexOf('/');
+    return i === -1 ? '' : p.slice(0, i);
+}
+function basename(p) {
+    const i = p.lastIndexOf('/');
+    return i === -1 ? p : p.slice(i + 1);
+}
+function extname(p) {
+    const b = basename(p);
+    const i = b.lastIndexOf('.');
+    return i === -1 ? '' : b.slice(i + 1).toLowerCase();
+}
+function resolveRelative(dir, rel) {
+    const parts = (dir ? dir.split('/') : []).concat(normalizePath(rel).split('/'));
+    const out = [];
+    for (const seg of parts) {
+        if (seg === '' || seg === '.')
+            continue;
+        if (seg === '..')
+            out.pop();
+        else
+            out.push(seg);
+    }
+    return out.join('/');
+}
+// ── discovery (§2) ──────────────────────────────────────────────────────────────────────────────
+function classifyByName(path) {
+    const b = basename(path).toLowerCase();
+    const ext = extname(path);
+    const yamlJson = ext === 'yaml' || ext === 'yml' || ext === 'json';
+    if (yamlJson && (b.includes('openapi') || b.includes('swagger')))
+        return 'openapi';
+    if (yamlJson && b.includes('asyncapi'))
+        return 'asyncapi';
+    if (ext === 'graphql' || ext === 'gql')
+        return 'graphql';
+    if (ext === 'proto')
+        return 'grpc';
+    if (b === 'mcp.json' || b === 'tools-catalog.json')
+        return 'mcp_manifest';
+    return null;
+}
+function classifyByContent(text) {
+    if (!text)
+        return null;
+    if (/(^|\n)\s*["']?openapi["']?\s*:\s*["']?[23]/.test(text) || (/swagger\s*:/.test(text) && /paths\s*:/.test(text)))
+        return 'openapi';
+    if (/(^|\n)\s*["']?asyncapi["']?\s*:/.test(text))
+        return 'asyncapi';
+    if (/\btype\s+Query\b|\btype\s+Mutation\b|\bschema\s*\{/.test(text))
+        return 'graphql';
+    if (/syntax\s*=\s*["']proto[23]["']/.test(text))
+        return 'grpc';
+    try {
+        const j = JSON.parse(text);
+        if (j && Array.isArray(j.tools) && j.tools.some((t) => t && typeof t === 'object' && 'inputSchema' in t))
+            return 'mcp_manifest';
+    }
+    catch { /* not json */ }
+    return null;
+}
+/** *mcp*.json (not exactly mcp.json) needs a content check (tools + inputSchema) per the §2.3 table. */
+function isMcpByNameNeedingContent(path) {
+    const b = basename(path).toLowerCase();
+    return extname(path) === 'json' && b.includes('mcp') && b !== 'mcp.json';
+}
+// ── $ref scanning + bounded inliner (§4) ──────────────────────────────────────────────────────────
+const REF_RE = /\$ref["']?\s*:\s*["']?([^"'\s,}]+)["']?/g;
+function scanRefs(text) {
+    const out = [];
+    let m;
+    REF_RE.lastIndex = 0;
+    while ((m = REF_RE.exec(text)) !== null)
+        out.push(m[1]);
+    return out;
+}
+function isExternalRef(ref) { return /^[a-z][a-z0-9+.-]*:\/\//i.test(ref) || ref.startsWith('//'); }
+function isInternalRef(ref) { return ref.startsWith('#'); }
+function splitRef(ref) {
+    const i = ref.indexOf('#');
+    return i === -1 ? { file: ref, pointer: '' } : { file: ref.slice(0, i), pointer: ref.slice(i + 1) };
+}
+function jsonPointer(doc, pointer) {
+    if (pointer === '' || pointer === '/')
+        return doc;
+    const parts = pointer.replace(/^\//, '').split('/').map((p) => p.replace(/~1/g, '/').replace(/~0/g, '~'));
+    let cur = doc;
+    for (const part of parts) {
+        if (cur && typeof cur === 'object' && part in cur)
+            cur = cur[part];
+        else
+            return undefined;
+    }
+    return cur;
+}
+function slugify(s) { return s.replace(/[^A-Za-z0-9]+/g, '_'); }
+class RefError extends Error {
+    reason;
+    related;
+    constructor(reason, related) { super(reason); this.reason = reason; this.related = related; }
+}
+/** Assemble one side (base/head) into a deterministic JSON bundle. Throws RefError on any ref failure. */
+function assembleSide(rootPath, rootText, refSide, input, config, deps) {
+    const maxDepth = config.maxRefDepth ?? 8;
+    let root;
+    try {
+        root = (0, resolver_yaml_js_1.parseDoc)(rootText);
+    }
+    catch (e) {
+        if (e instanceof resolver_yaml_js_1.YamlLiteError)
+            throw new RefError('parse_error');
+        throw e;
+    }
+    const components = {};
+    const inline = (node, curDir, depth, stack) => {
+        if (Array.isArray(node))
+            return node.map((n) => inline(n, curDir, depth, stack));
+        if (node && typeof node === 'object') {
+            const rec = node;
+            if (typeof rec.$ref === 'string') {
+                const ref = rec.$ref;
+                if (isExternalRef(ref))
+                    throw new RefError('external_ref_forbidden'); // v1: out of pure-git scope
+                if (isInternalRef(ref))
+                    return { ...rec }; // JSON pointer within doc — self-contained, kept as-is
+                const { file, pointer } = splitRef(ref);
+                const targetPath = resolveRelative(curDir, file);
+                const key = `${targetPath}#${pointer}`;
+                if (depth + 1 > maxDepth)
+                    throw new RefError('ref_depth_exceeded', targetPath);
+                if (stack.has(key))
+                    throw new RefError('ref_cycle', targetPath);
+                const blob = getBlob(input, refSide, targetPath);
+                if (blob === null || blob === undefined)
+                    throw new RefError('missing_ref_target', targetPath);
+                if (typeof blob === 'object')
+                    throw new RefError(blob.error, targetPath);
+                deps.add(targetPath);
+                let targetDoc;
+                try {
+                    targetDoc = (0, resolver_yaml_js_1.parseDoc)(blob);
+                }
+                catch {
+                    throw new RefError('parse_error', targetPath);
+                }
+                const resolved = jsonPointer(targetDoc, pointer);
+                if (resolved === undefined)
+                    throw new RefError('missing_ref_target', targetPath);
+                const inlined = inline(resolved, dirname(targetPath), depth + 1, new Set([...stack, key]));
+                const slug = slugify(`${targetPath}__${pointer}`);
+                components[slug] = inlined;
+                return { $ref: `#/components/${slug}` };
+            }
+            const out = {};
+            for (const k of Object.keys(rec))
+                out[k] = inline(rec[k], curDir, depth, stack);
+            return out;
+        }
+        return node;
+    };
+    const inlinedRoot = inline(root, dirname(rootPath), 0, new Set());
+    if (Object.keys(components).length > 0) {
+        const existing = (inlinedRoot.components && typeof inlinedRoot.components === 'object') ? inlinedRoot.components : {};
+        inlinedRoot.components = { ...existing, ...components };
+    }
+    return (0, resolver_yaml_js_1.stableStringify)(inlinedRoot);
+}
+// ── blob access ───────────────────────────────────────────────────────────────────────────────
+function getBlob(input, ref, path) {
+    return input.blobs[`${ref}:${path}`];
+}
+function loadRoot(path, type, input, config) {
+    const baseBlob = getBlob(input, input.baseRef, path);
+    const headBlob = getBlob(input, input.headRef, path);
+    if (baseBlob && typeof baseBlob === 'object')
+        return { unresolved: { path, reason: baseBlob.error } };
+    if (headBlob && typeof headBlob === 'object')
+        return { unresolved: { path, reason: headBlob.error } };
+    const baseNull = baseBlob === null || baseBlob === undefined;
+    const headNull = headBlob === null || headBlob === undefined;
+    if (baseNull && headNull)
+        return { unresolved: { path, reason: 'empty_changed_contract' } };
+    let before = baseNull ? '' : baseBlob;
+    let after = headNull ? '' : headBlob;
+    const deps = new Set();
+    const assemble = (type === 'openapi' || type === 'asyncapi') && (config.openApiAssembly ?? 'bundle_inline') === 'bundle_inline';
+    if (assemble) {
+        try {
+            if (before !== '' && scanRefs(before).some((r) => !isInternalRef(r)))
+                before = assembleSide(path, before, input.baseRef, input, config, deps);
+            if (after !== '' && scanRefs(after).some((r) => !isInternalRef(r)))
+                after = assembleSide(path, after, input.headRef, input, config, deps);
+        }
+        catch (e) {
+            if (e instanceof RefError)
+                return { unresolved: { path, reason: e.reason, ...(e.related ? { related_paths: [e.related] } : {}) } };
+            throw e;
+        }
+    }
+    const id = input.repository ? `${input.repository}:${type}:${path}` : `${type}:${path}`;
+    return { artifact: { id, type, before, after }, deps: [...deps] };
+}
+function selectGroups(candidates, config, generatedGlobs) {
+    const n = candidates.length;
+    const parent = Array.from({ length: n }, (_, i) => i);
+    const find = (x) => { while (parent[x] !== x) {
+        parent[x] = parent[parent[x]];
+        x = parent[x];
+    } return x; };
+    const union = (a, b) => { const ra = find(a); const rb = find(b); if (ra !== rb)
+        parent[Math.max(ra, rb)] = Math.min(ra, rb); };
+    // forceSameSurfaceGroup: union all listed candidates.
+    if (Array.isArray(config.forceSameSurfaceGroup)) {
+        const idxs = candidates.map((c, i) => (config.forceSameSurfaceGroup.includes(c.path) ? i : -1)).filter((i) => i >= 0);
+        for (let k = 1; k < idxs.length; k += 1)
+            union(idxs[0], idxs[k]);
+    }
+    // generated↔source auto-pairing: per type, if the type mixes generated + non-generated → union all.
+    const byType = new Map();
+    candidates.forEach((c, i) => { const a = byType.get(c.type) ?? []; a.push(i); byType.set(c.type, a); });
+    for (const idxs of byType.values()) {
+        const gen = idxs.filter((i) => (0, resolver_glob_js_1.matchAny)(generatedGlobs, candidates[i].path));
+        if (gen.length > 0 && gen.length < idxs.length)
+            for (let k = 1; k < idxs.length; k += 1)
+                union(idxs[0], idxs[k]);
+    }
+    const groups = new Map();
+    for (let i = 0; i < n; i += 1) {
+        const r = find(i);
+        const g = groups.get(r) ?? [];
+        g.push(i);
+        groups.set(r, g);
+    }
+    const selections = [];
+    const chosen = [];
+    const ambiguous = [];
+    for (const g of groups.values()) {
+        const members = g.map((i) => candidates[i].path).sort();
+        if (members.length === 1) {
+            chosen.push(candidates[g[0]]);
+            selections.push({ chosen: members[0], deferred: [], reason: 'single' });
+            continue;
+        }
+        // ssotPrefer first-match wins.
+        const prefRanked = members.map((p) => ({ p, rank: (0, resolver_glob_js_1.firstMatchIndex)(config.ssotPrefer, p) })).filter((x) => x.rank >= 0);
+        if (prefRanked.length > 0) {
+            prefRanked.sort((a, b) => (a.rank - b.rank) || (a.p < b.p ? -1 : 1));
+            const chosenPath = prefRanked[0].p;
+            chosen.push(candidates[g.find((i) => candidates[i].path === chosenPath)]);
+            selections.push({ chosen: chosenPath, deferred: members.filter((m) => m !== chosenPath), reason: 'ssotPrefer' });
+            continue;
+        }
+        // generated deprioritization: exactly one non-generated source wins.
+        const nongen = members.filter((p) => !(0, resolver_glob_js_1.matchAny)(generatedGlobs, p));
+        if (nongen.length === 1) {
+            const chosenPath = nongen[0];
+            chosen.push(candidates[g.find((i) => candidates[i].path === chosenPath)]);
+            selections.push({ chosen: chosenPath, deferred: members.filter((m) => m !== chosenPath), reason: 'generated_deprioritized' });
+            continue;
+        }
+        // else ambiguous — no pick-by-guess.
+        ambiguous.push(...members);
+    }
+    return { selections, chosen, ambiguous };
+}
+// ── the pure resolve (§1.1) ─────────────────────────────────────────────────────────────────────
+function resolve(input, config = {}) {
+    const generatedGlobs = config.generatedGlobs ?? DEFAULT_GENERATED;
+    // 1-2. normalize + stable-dedupe changedFiles.
+    const seen = new Set();
+    const paths = [];
+    for (const raw of (Array.isArray(input.changedFiles) ? input.changedFiles : [])) {
+        const p = normalizePath(raw);
+        if (p && !seen.has(p)) {
+            seen.add(p);
+            paths.push(p);
+        }
+    }
+    // 3-4. discover contract candidates vs ignored non-contract.
+    const candidates = [];
+    const ignored = [];
+    for (const p of paths) {
+        if ((0, resolver_glob_js_1.matchAny)(VENDOR_GLOBS, p)) {
+            ignored.push(p);
+            continue;
+        }
+        let type = config.pathTypeHints?.[p] ?? classifyByName(p);
+        if (type === null || isMcpByNameNeedingContent(p)) {
+            const peek = firstDefinedText(getBlob(input, input.headRef, p), getBlob(input, input.baseRef, p));
+            const sniff = classifyByContent(peek);
+            if (isMcpByNameNeedingContent(p))
+                type = sniff === 'mcp_manifest' ? 'mcp_manifest' : (type ?? sniff);
+            else
+                type = sniff;
+        }
+        if (type)
+            candidates.push({ path: p, type });
+        else
+            ignored.push(p);
+    }
+    const unresolved = [];
+    let effectiveCandidates = candidates;
+    // strict SSOT: a required, declared, exact ssotPrefer path that is absent → config_ssot_missing.
+    if (config.requireSsotIfConfigured && Array.isArray(config.ssotPrefer)) {
+        const missing = config.ssotPrefer.filter((pref) => !hasGlobChar(pref) && !existsInTree(input, pref));
+        const hasGenerated = candidates.some((c) => (0, resolver_glob_js_1.matchAny)(generatedGlobs, c.path));
+        if (missing.length > 0 && hasGenerated) {
+            for (const pref of missing)
+                unresolved.push({ path: pref, reason: 'config_ssot_missing' });
+            effectiveCandidates = candidates.filter((c) => !(0, resolver_glob_js_1.matchAny)(generatedGlobs, c.path)); // deprioritized generated suppressed
+        }
+    }
+    // 5. SSOT grouping + selection.
+    const { selections, chosen, ambiguous } = selectGroups(effectiveCandidates, config, generatedGlobs);
+    for (const p of [...new Set(ambiguous)].sort())
+        unresolved.push({ path: p, reason: 'ambiguous_ssot' });
+    // 7. load each selected root → artifact | unresolved; reclassify $ref dependency files.
+    const artifacts = [];
+    const selBySel = new Map(selections.map((s) => [s.chosen, s]));
+    for (const c of chosen.slice().sort((a, b) => (a.path < b.path ? -1 : 1))) {
+        const res = loadRoot(c.path, c.type, input, config);
+        if ('artifact' in res) {
+            artifacts.push(res.artifact);
+            const sel = selBySel.get(c.path);
+            for (const dep of res.deps) {
+                const idx = ignored.indexOf(dep);
+                if (idx >= 0)
+                    ignored.splice(idx, 1);
+                if (sel && !sel.deferred.includes(dep) && dep !== c.path)
+                    sel.deferred.push(dep);
+            }
+            if (sel)
+                sel.deferred.sort();
+        }
+        else {
+            unresolved.push(res.unresolved);
+        }
+    }
+    // 6/7. coverage (§7).
+    const A = artifacts.length;
+    const U = unresolved.length;
+    const chosenCount = chosen.length;
+    let coverage;
+    if (chosenCount === 0 && U === 0)
+        coverage = 'EMPTY';
+    else if (U === 0 && A >= 1 && A === chosenCount)
+        coverage = 'COMPLETE';
+    else if (A >= 1 && U >= 1)
+        coverage = 'PARTIAL';
+    else
+        coverage = 'UNRESOLVED';
+    // sort outputs deterministically (§6).
+    artifacts.sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));
+    unresolved.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : (a.reason < b.reason ? -1 : a.reason > b.reason ? 1 : 0)));
+    ignored.sort();
+    const contractDiscovered = effectiveCandidates.map((c) => c.path).slice().sort();
+    return {
+        artifacts,
+        unresolved,
+        coverage,
+        report: {
+            version: 'artifact-resolver-report/1.0',
+            baseRef: input.baseRef,
+            headRef: input.headRef,
+            contract_paths_discovered: contractDiscovered,
+            ignored_non_contract: ignored,
+            ssot_selections: selections,
+            claim: {
+                artifacts_ready_for_preflight: coverage === 'COMPLETE' || coverage === 'EMPTY',
+                produces_verdict: false,
+            },
+        },
+    };
+}
+function firstDefinedText(...vals) {
+    for (const v of vals)
+        if (typeof v === 'string')
+            return v;
+    return undefined;
+}
+function hasGlobChar(p) { return /[*?]/.test(p); }
+function existsInTree(input, path) {
+    return typeof getBlob(input, input.baseRef, path) === 'string' || typeof getBlob(input, input.headRef, path) === 'string';
+}
+//# sourceMappingURL=artifact-resolver.js.map

package/dist/cjs/artifact-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-resolver.js","sourceRoot":"","sources":["../../src/artifact-resolver.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAmTH,0BAgGC;AAjZD,yDAA8E;AAC9E,yDAA+D;AAwD/D,MAAM,iBAAiB,GAAG,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;AAC3D,MAAM,YAAY,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;AAE5D,oGAAoG;AACpG,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AACD,SAAS,QAAQ,CAAC,CAAS;IACzB,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AACD,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AACD,SAAS,eAAe,CAAC,GAAW,EAAE,GAAW;IAC/C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QACxC,IAAI,GAAG,KAAK,IAAI;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;;YACvB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,mGAAmG;AACnG,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,CAAC;IACnE,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACnF,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACnC,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,oBAAoB;QAAE,OAAO,cAAc,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,iBAAiB,CAAC,IAAwB;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACtI,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IACpE,IAAI,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtF,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,aAAa,IAAK,CAAY,CAAC;YAAE,OAAO,cAAc,CAAC;IACvJ,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AACD,wGAAwG;AACxG,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC;AAC3E,CAAC;AAED,qGAAqG;AACrG,MAAM,MAAM,GAAG,0CAA0C,CAAC;AAC1D,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAyB,CAAC;IAC9B,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAS,aAAa,CAAC,GAAW,IAAa,OAAO,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrH,SAAS,aAAa,CAAC,GAAW,IAAa,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5E,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACtG,CAAC;AACD,SAAS,WAAW,CAAC,GAAY,EAAE,OAAe;IAChD,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1G,IAAI,GAAG,GAAY,GAAG,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,IAAK,GAA+B;YAAE,GAAG,GAAI,GAA+B,CAAC,IAAI,CAAC,CAAC;;YACxH,OAAO,SAAS,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAS,OAAO,CAAC,CAAS,IAAY,OAAO,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAEhF,MAAM,QAAS,SAAQ,KAAK;IAC1B,MAAM,CAAmB;IACzB,OAAO,CAAU;IACjB,YAAY,MAAwB,EAAE,OAAgB,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;CACzH;AAED,0GAA0G;AAC1G,SAAS,YAAY,CACnB,QAAgB,EAAE,QAAgB,EAAE,OAAe,EAAE,KAAmB,EAAE,MAAqB,EAAE,IAAiB;IAElH,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IACzC,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QAAC,IAAI,GAAG,IAAA,2BAAQ,EAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,YAAY,gCAAa;YAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,UAAU,GAA4B,EAAE,CAAC;IAE/C,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,MAAc,EAAE,KAAa,EAAE,KAAkB,EAAW,EAAE;QAC3F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACjF,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAA+B,CAAC;YAC5C,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;gBACrB,IAAI,aAAa,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC,4BAA4B;gBAClG,IAAI,aAAa,CAAC,GAAG,CAAC;oBAAE,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,uDAAuD;gBAClG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACxC,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACjD,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC;gBACvC,IAAI,KAAK,GAAG,CAAC,GAAG,QAAQ;oBAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;gBAC/E,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;gBACjD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;gBAC9F,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBACzE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACrB,IAAI,SAAkB,CAAC;gBACvB,IAAI,CAAC;oBAAC,SAAS,GAAG,IAAA,2BAAQ,EAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBAAC,CAAC;gBAC5F,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACjD,IAAI,QAAQ,KAAK,SAAS;oBAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;gBACjF,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC3F,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,UAAU,KAAK,OAAO,EAAE,CAAC,CAAC;gBAClD,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;gBAC3B,OAAO,EAAE,IAAI,EAAE,gBAAgB,IAAI,EAAE,EAAE,CAAC;YAC1C,CAAC;YACD,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAChF,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAA4B,CAAC;IAC7F,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,UAAqC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjJ,WAAW,CAAC,UAAU,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,IAAA,kCAAe,EAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED,iGAAiG;AACjG,SAAS,OAAO,CAAC,KAAmB,EAAE,GAAW,EAAE,IAAY;IAC7D,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAKD,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAkB,EAAE,KAAmB,EAAE,MAAqB;IAC5F,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAErD,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IACtG,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAEtG,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,CAAC;IAC7D,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,CAAC;IAC7D,IAAI,QAAQ,IAAI,QAAQ;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE,CAAC;IAE5F,IAAI,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,QAAmB,CAAC;IAClD,IAAI,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,QAAmB,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,MAAM,QAAQ,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,eAAe,CAAC,KAAK,eAAe,CAAC;IAChI,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9I,IAAI,KAAK,KAAK,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;gBAAE,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5I,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACnI,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACxF,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;AACpE,CAAC;AAKD,SAAS,YAAY,CAAC,UAAuB,EAAE,MAAqB,EAAE,cAAwB;IAE5F,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,GAAG,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhJ,sDAAsD;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,qBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,oGAAoG;IACpG,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,2BAAQ,EAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;YAAE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAEjH,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxE,SAAS;QACX,CAAC;QACD,+BAA+B;QAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAA,kCAAe,EAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QACvH,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAE,CAAC,CAAC,CAAC;YAC3E,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YACjH,SAAS;QACX,CAAC;QACD,qEAAqE;QACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,2BAAQ,EAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAE,CAAC,CAAC,CAAC;YAC3E,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC9H,SAAS;QACX,CAAC;QACD,qCAAqC;QACrC,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC3C,CAAC;AAED,mGAAmG;AACnG,SAAgB,OAAO,CAAC,KAAmB,EAAE,SAAwB,EAAE;IACrE,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,iBAAiB,CAAC;IAElE,+CAA+C;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACxD,CAAC;IAED,6DAA6D;IAC7D,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,IAAA,2BAAQ,EAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7D,IAAI,IAAI,GAAwB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,IAAI,KAAK,IAAI,IAAI,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAClG,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,yBAAyB,CAAC,CAAC,CAAC;gBAAE,IAAI,GAAG,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;;gBAChG,IAAI,GAAG,KAAK,CAAC;QACpB,CAAC;QACD,IAAI,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;;YACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,IAAI,mBAAmB,GAAG,UAAU,CAAC;IAErC,iGAAiG;IACjG,IAAI,MAAM,CAAC,uBAAuB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACrG,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,2BAAQ,EAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,OAAO;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAC3F,mBAAmB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,2BAAQ,EAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,qCAAqC;QAC1H,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,mBAAmB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACpG,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAEvG,wFAAwF;IACxF,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;YACtB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,GAAG,IAAI,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACrC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI;oBAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,GAAG;gBAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;IAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,IAAI,QAAyB,CAAC;IAC9B,IAAI,WAAW,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,QAAQ,GAAG,OAAO,CAAC;SAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,WAAW;QAAE,QAAQ,GAAG,UAAU,CAAC;SAClE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,QAAQ,GAAG,SAAS,CAAC;;QAC3C,QAAQ,GAAG,YAAY,CAAC;IAE7B,uCAAuC;IACvC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnI,OAAO,CAAC,IAAI,EAAE,CAAC;IACf,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IAEjF,OAAO;QACL,SAAS;QACT,UAAU;QACV,QAAQ;QACR,MAAM,EAAE;YACN,OAAO,EAAE,8BAA8B;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,yBAAyB,EAAE,kBAAkB;YAC7C,oBAAoB,EAAE,OAAO;YAC7B,eAAe,EAAE,UAAU;YAC3B,KAAK,EAAE;gBACL,6BAA6B,EAAE,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,OAAO;gBAC9E,gBAAgB,EAAE,KAAK;aACxB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAG,IAA+B;IAC1D,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,SAAS,WAAW,CAAC,CAAS,IAAa,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,SAAS,YAAY,CAAC,KAAmB,EAAE,IAAY;IACrD,OAAO,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,QAAQ,CAAC;AAC5H,CAAC"}

package/dist/cjs/guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EACV,WAAW,EAAE,YAAY,EACT,kBAAkB,EAAE,cAAc,EAEnD,MAAM,YAAY,CAAC;AA+IpB,wBAAsB,aAAa,CAAC,CAAC,EACnC,IAAI,EAAE,kBAAkB,EACxB,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,EACjC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAqK1B"}
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EACV,WAAW,EAAE,YAAY,EACT,kBAAkB,EAAE,cAAc,EAEnD,MAAM,YAAY,CAAC;AA+JpB,wBAAsB,aAAa,CAAC,CAAC,EACnC,IAAI,EAAE,kBAAkB,EACxB,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,EACjC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAoL1B"}

package/dist/cjs/guard.js

@@ -152,6 +152,23 @@ async function runUnenforced(config, factory, envelope, verdict, preflighted, re
 function blocked(verdict, preflighted) {
     return { executionAttempted: false, executed: false, enforced: false, verdict, preflighted };
 }
+/**
+ * True iff at least one supplied artifact carries analyzable before/after content. A preflight
+ * trigger with no such content cannot be analyzed by the server (an empty list comes back as an
+ * opaque REQUEST_REJECTED), so the guard fails closed LOCALLY with MISSING_ARTIFACT_CONTENT instead.
+ * Reads defensively — the caller's artifacts are untrusted runtime data.
+ */
+function hasAnalyzableContent(artifacts) {
+    if (!Array.isArray(artifacts) || artifacts.length === 0)
+        return false;
+    return artifacts.some((a) => {
+        if (!a || typeof a !== 'object')
+            return false;
+        const before = a.before;
+        const after = a.after;
+        return (typeof before === 'string' && before.length > 0) || (typeof after === 'string' && after.length > 0);
+    });
+}
 function unavailableVerdict(parts, count) {
     return { kind: 'UNAVAILABLE', decisionMissing: true, unavailableCount: count, ...parts };
 }
@@ -187,6 +204,20 @@ async function guardToolCall(call, executeFactory, config) {
         const verdict = { kind: 'SKIPPED', reason: 'NOT_A_CONTRACT_CALL', signals: detection.signals, detectorVersion: detector.version };
         return runUnenforced(config, executeFactory, null, verdict, false, redacted);
     }
+    // MISSING_ARTIFACT_CONTENT — developer-adoption fail-closed (audit #1). The detector says a contract
+    // change is happening (trigger:true) but the caller supplied NO analyzable content: no artifacts, or
+    // artifacts without before/after. Sending an empty list to the server returns an opaque
+    // REQUEST_REJECTED; instead fail closed LOCALLY with a clear, actionable cause so the developer knows
+    // to pass artifacts:[{ id, type, before, after }]. The tool does NOT execute (fail-closed preserved).
+    // This can only fire when preflight is genuinely required — a non-contract/readonly call already
+    // returned via the SKIPPED path above. It is NOT a server-availability failure, so it does NOT trip
+    // the breaker (a developer's missing content must not degrade the open-policy path for later calls).
+    if (!hasAnalyzableContent(detection.artifacts)) {
+        emit(config, { type: 'artifact_content_missing', at: iso(), cause: 'MISSING_ARTIFACT_CONTENT', signals: detection.signals });
+        const count = (breakers.get(config)?.fails.length) ?? 0;
+        const v = unavailableVerdict({ cause: 'MISSING_ARTIFACT_CONTENT', failPolicy, resolution: 'CLOSED', action: 'STOP' }, count);
+        return blocked(v, false);
+    }
     // config validation: lkg policy requires an LkgStore.
     if (failPolicy === 'lkg' && !config.lkg) {
         breakerRecord(config);