@copilotkit/aimock 1.43.0 → 1.45.0

package/dist/validate-cli.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"validate-cli.cjs","names":["Logger","entryToFixture","validateFixtures","renderValidationRef"],"sources":["../src/validate-cli.ts"],"sourcesContent":["/**\n * `aimock validate` subcommand — offline fixture lint.\n *\n * Usage: `aimock validate [--strict] [--json] [--] <path> [more paths ...]`\n *\n * Each path is a fixture file or a directory; directories are walked\n * recursively for `*.json` in the same order `--fixtures <dir>` loads them.\n * For each file: read bytes, JSON-parse, require a top-level\n * `{ \"fixtures\": [...] }` envelope, convert the entries (surfacing the\n * per-entry conversion warnings the server logs), then run the\n * `validateFixtures` rules over that file's entries alone, so its findings\n * are attributed to it.\n *\n * `validateFixtures` is then run a SECOND time over the union of every\n * successfully-parsed file's entries, in load order. Its rules are not all\n * per-fixture: `duplicate userMessage` and the catch-all ordering check look\n * at the other fixtures in the array they are given. Run per file those two\n * cannot see across files, so the findings the union pass adds — a\n * `userMessage` duplicated in two files, a catch-all that is last in its own\n * file but not last overall — are the cross-file ones. They are reported\n * against the file that owns the fixture, with the other file named in the\n * message; findings the per-file pass already made are not repeated.\n *\n * How this compares to the server's `--validate-on-load`, in both directions:\n *  - Stricter: there an unreadable, unparseable or wrong-shape file is\n *    non-fatal — it warns on stderr, contributes zero fixtures, and startup\n *    continues as long as the run loaded at least one fixture from somewhere.\n *    Here every such file fails the run — with one deliberate exception, for\n *    parity: a `*.json` file the WALK turned up that parses but carries no\n *    top-level `fixtures` array is not a fixture file (this package's own\n *    `fixtures/` tree holds aimock config files alongside fixtures), and is\n *    passed over with a note, exactly as the loader passes over it. A file\n *    the caller NAMES is still validated, wrong shape and all. Two walk\n *    hazards the server does not\n *    survive are refused outright rather than mirrored: a `*.json` path that\n *    is not a regular file (a FIFO, a socket, a device) is a per-file error\n *    here, where the server's `readFileSync` blocks on it forever; and a\n *    directory symlink that points back at a directory already being walked\n *    is reported once as a cycle, where the server recurses through it until\n *    the kernel returns ELOOP (~32 levels deep) and loads those levels'\n *    fixtures over and over. One diagnostic here has no counterpart there at\n *    all: an entry whose `match` is a string, a number, a boolean or an array\n *    converts, on both sides, into an EMPTY match — a catch-all answering\n *    every request — and the server loads it without a word. That is a server\n *    bug, not a rule this lint may quietly invent an error for, so it is a\n *    `[warning]` (which `--strict` promotes to a failure) rather than an\n *    error, and the fixture still goes on to the rules exactly as the server\n *    would build it.\n *  - Equal: the `validateFixtures` rules themselves, because of the union\n *    pass above, and the zero-fixture rule — a run whose inputs yield no\n *    fixtures at all is an error here, matching the server's \"No fixtures\n *    loaded and validation/strict mode is enabled — aborting.\" A single\n *    `{\"fixtures\": []}` file alongside files that do load fixtures is an\n *    error in neither place. Equal too in what the inputs expand to: a path\n *    named twice, and a directory reached both directly and through an\n *    acyclic symlink to it, are validated once per mention, exactly as the\n *    server loads one `--fixtures` source per mention — so the duplicate\n *    fixtures that produces are reported here as the server reports them,\n *    one finding per (fixture, rule), the same count the server logs.\n *\n * A path mentioned more than once in one run is therefore several DIFFERENT\n * loads that happen to share a name, and printing that bare name for each of\n * them made them indistinguishable: a warning read as if a fixture shadowed\n * itself. Each mention is numbered, and every rendering surface carries that\n * number — human lines and their summary, cross-file references, and a\n * `mention` field on each `--json` `files[]` entry. The `<path>[<n>]` suffix\n * is printed only for a path that IS mentioned more than once, because for\n * every other path the name alone already names one load; the `--json` field\n * is always present so a consumer never has to infer it.\n *  - Weaker: this is a static lint. It never starts a server, so it covers\n *    nothing about binding, remote `--fixtures <url>` sources (it reads local\n *    paths only), `--watch` reloads, or any runtime behaviour.\n *\n * Nothing the filesystem or a fixture entry can do is allowed to escape this\n * function: a malformed entry, an unreadable path, a stat failure or a symlink\n * cycle each becomes a per-file `[error]` in the report, and a crash inside\n * either `validateFixtures` pass becomes a file-level or run-level `[error]`,\n * so the run still emits a report (valid JSON under `--json`) and still exits\n * 1. Run-level errors print after the per-file output, and the \"no fixtures\n * loaded\" one is withheld when a file already reported why it loaded none.\n *\n * Prints human lines by default (`file: [error|warning] #i message`) or a\n * JSON document with `--json`. Everything that contributes to a non-zero exit\n * goes to stderr, so a CI log's stderr always shows the reason; `--json` keeps\n * stdout to the report alone and puts the reason on stderr. The two modes\n * report the same facts: a fatal file is one record that both the stdout\n * tally and `files[].errors` count, and `--json` emits a document for a usage\n * error too — stdout is never empty on a `--json` run, whatever failed it.\n * A path naming a remote source (`https://...`) is refused as unsupported\n * rather than read as a filename. Exit codes:\n * 0 = clean (warnings allowed unless `--strict`), 1 = everything that fails\n * the run — errors / unreadable / unparseable / wrong shape / unwalkable path\n * / no fixtures loaded at all, and a usage error (no paths or an unknown\n * option) too, because every other CLI surface in this package exits 1 on a\n * usage error and nothing here uses sysexits codes. `--help` is handled\n * separately and exits 0.\n */\n\nimport { readFileSync, readdirSync, realpathSync, statSync } from \"node:fs\";\nimport type { Stats } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport { format, parseArgs } from \"node:util\";\nimport { entryToFixture, renderValidationRef, validateFixtures } from \"./fixture-loader.js\";\nimport type { ValidationRef } from \"./fixture-loader.js\";\nimport { Logger } from \"./logger.js\";\nimport type { Fixture, FixtureFile } from \"./types.js\";\n\nexport const VALIDATE_HELP = `\nUsage: aimock validate [options] [--] <path> [more paths ...]\n\nValidate aimock fixture files offline. Each path is a fixture file or a\ndirectory of them (walked recursively for *.json, like --fixtures <dir>).\nFiles are checked one at a time and then as one combined set, so the rules\nthat span files -- a userMessage duplicated across two files, a catch-all\nthat is not last overall -- are reported here as the server reports them.\n\nWhere the server's --validate-on-load differs: there an unreadable,\nunparseable or wrong-shape file only warns and startup continues, while here\nevery such file fails the run. The one exception, which matches the loader: a\n*.json file found by WALKING a directory that has no top-level \"fixtures\"\narray is not a fixture file (an aimock config, say) and is skipped with a\nnote -- a file you name on the command line is still validated. As on the\nserver, a run that loads no fixtures at all is an error. This is a static lint: it starts no server and reads\nlocal paths only (no remote --fixtures URL).\n\nA path given twice is validated twice, because the server loads one set of\nfixtures per --fixtures it is given; the duplicate fixtures that produces are\nreported as the server reports them, one finding per fixture and rule. Such a\npath is printed as <path>[<n>], numbering its mentions from 1, so each load\nand every reference to its fixtures names one of them (--json reports the\nnumber as \"mention\" on every file). A directory symlink pointing back at a\ndirectory already being walked is a symlink cycle and fails the run; one\npointing anywhere else is followed, as the server follows it.\n\nOptions:\n      --strict          Treat warnings as errors (exit 1 on warnings)\n      --json            Emit a JSON report instead of human lines\n  -h, --help            Show this help message\n      --                Stop option parsing; every later argument is a path\n                        (use this for a path that begins with \"-\")\n\nExit codes:\n  0  all files valid (warnings allowed unless --strict)\n  1  anything that failed the run: validation errors; a malformed fixture\n     entry; an unreadable or unparseable file; a named path of the wrong\n     shape (a walked one is skipped instead); a path that\n     cannot be stat'd, read or walked (including a symlink cycle, or a\n     *.json path that is not a regular file); a directory holding no *.json;\n     no fixtures loaded from any input; --strict warnings; or a usage error\n     (no paths given, or an unknown option)\n`.trim();\n\nexport interface ValidateCliDeps {\n  argv?: string[];\n  log?: (msg: string) => void;\n  logError?: (msg: string) => void;\n  exit?: (code: number) => void;\n}\n\n/**\n * One finding against a file. `index` is the fixture entry it belongs to and is\n * ABSENT when the finding is about the file as a whole (a crash inside the\n * validator, say) rather than an entry — attributing such a finding to entry #0\n * blames a fixture that may be perfectly valid. `detail` carries the raw\n * underlying text (a thrown error's message) for a finding whose `message` is a\n * human-facing rephrasing of it; the `--json` report carries it as its own\n * field and the human report prints it on an indented continuation line.\n */\ninterface Finding {\n  index?: number;\n  message: string;\n  detail?: string;\n}\n\ninterface FileReport {\n  file: string;\n  /**\n   * Which mention of `file` this report is, 1-based, in the order the run\n   * expanded its paths. It is the only thing that tells two reports of the\n   * same path apart — they are separate loads with separate findings.\n   */\n  mention: number;\n  fixtures: number;\n  errors: Finding[];\n  warnings: Finding[];\n  fatal?: string;\n  /** Set when the walk passed the file over; see `nonFixtureSkipReason`. */\n  skipped?: string;\n}\n\n/**\n * A rule finding the per-file pass made, with what the cross-file pass needs\n * to recognise its own restatement of it.\n *\n * Both passes run the same rules, and each rule fires at most once per fixture\n * — which is why the server, whose single pass IS the union pass, logs exactly\n * one line per (fixture, rule). So the SITE identifies the finding: the file\n * (supplied by the caller, the only thing that knows the file id), the entry\n * index, the severity and the rule. Two findings at one site can differ only\n * in which other fixtures they name, and the union pass's answer to that is\n * the authoritative one — it sees every file — so its wording REPLACES the\n * per-file wording rather than printing beside it, which is what made a\n * repeated path report one duplicate twice.\n *\n * `refs` holds the entry indices this finding names, so a restatement that\n * names the same fixtures can be recognised as adding nothing and leave the\n * per-file wording alone. Matching on the rendered message with its digits\n * masked (a previous scheme) both collapsed distinct findings that happened to\n * mask alike and hid genuine cross-file ones, because a union index and a\n * file-local index mask to the same \"#\".\n *\n * `finding` is the very object in the report, so an upgrade is an in-place\n * rewrite that keeps the finding in the position it was reported at.\n */\ninterface FindingIdentity {\n  severity: \"error\" | \"warning\";\n  index: number;\n  /** The rule id for a ref-carrying finding, else its verbatim message. */\n  kind: string;\n  /** Entry indices this finding names, within the SAME file. */\n  refs: number[];\n  /** The finding as it sits in the file's report, for an in-place upgrade. */\n  finding: Finding;\n}\n\n/** The indices a ref names, in a fixed order, for identity purposes. */\nfunction refIndices(ref: ValidationRef): number[] {\n  return ref.rule === \"duplicate-user-message\"\n    ? [ref.shadows]\n    : [ref.shadowsFrom, ref.shadowsThrough];\n}\n\n/**\n * A path argument that names a remote source rather than a local file: any\n * `scheme://` prefix, not just http(s), so `ftp://` and friends get the same\n * explanation instead of a filesystem error. A Windows drive letter (\"C:\\\\x\")\n * has no `//` and is not matched.\n */\nconst REMOTE_SOURCE = /^[a-z][a-z0-9+.-]*:\\/\\//i;\n\n/** Render an unknown thrown value as a one-line message. */\nfunction errText(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n\n/**\n * Record why a file produced no report at all. A fatal is ONE fact, so it is\n * written once, here, into both shapes that report it: `fatal`, which names\n * the reason, and `errors`, which is what every tally — the human summary\n * line, the `--json` consumer counting `files[].errors` — actually counts.\n * Set on `fatal` alone, the two modes disagreed: stdout said \"1 error(s)\"\n * while the same run's JSON said `\"errors\": []`, so a CI script adding up the\n * JSON saw a clean run that had exited 1.\n *\n * The finding carries no `index`: a fatal is about the file, not an entry\n * (see `Finding.index`).\n */\nfunction setFatal(report: FileReport, message: string): void {\n  report.fatal = message;\n  report.errors.push({ message });\n}\n\n/** A file that never got as far as a report, with its fatal already recorded. */\nfunction fatalReport(file: string, mention: number, message: string): FileReport {\n  const report: FileReport = { file, mention, fixtures: 0, errors: [], warnings: [] };\n  setFatal(report, message);\n  return report;\n}\n\n/**\n * Logger that routes `warn` AND `error` into caller-supplied sinks instead of\n * the console, so the per-entry conversion diagnostics `entryToFixture` emits\n * land in the report rather than being dropped on the floor — and, under\n * `--json`, never interleave with the JSON document on stdout/stderr.\n * Exported for tests only; it is not part of the package's public API.\n * `info`/`debug` are inert: they are already below this logger's \"warn\" level,\n * and silencing them explicitly keeps future call sites off stdout too.\n */\nexport class CollectingLogger extends Logger {\n  private readonly warnSink: (msg: string) => void;\n  private readonly errorSink: (msg: string) => void;\n\n  constructor(warnSink: (msg: string) => void, errorSink: (msg: string) => void) {\n    super(\"warn\");\n    this.warnSink = warnSink;\n    this.errorSink = errorSink;\n  }\n\n  /**\n   * Serialise exactly as the sink this logger replaces does — byte for byte.\n   * `Logger` writes `console.warn(\"[aimock]\", ...args)`, and console's\n   * formatting IS `util.format`, so the call it makes is\n   * `format(\"[aimock]\", ...args)`: `\"[aimock]\"` is the FORMAT STRING and holds\n   * no specifiers, which is what makes a caller's own `%s`/`%d` inert and its\n   * arguments plain trailing values. Calling `format(...args)` instead\n   * promoted the caller's message into the format slot — so a message that\n   * happened to contain `%s` (a fixture path, say) swallowed the next\n   * argument — and dropped the `[aimock]` prefix, leaving the report and the\n   * server's own stderr disagreeing about the same diagnostic.\n   * `util.inspect` still renders object arguments readably, which is what\n   * `String(a)` could not do.\n   */\n  private static format(args: unknown[]): string {\n    return format(\"[aimock]\", ...args);\n  }\n\n  override warn(...args: unknown[]): void {\n    this.warnSink(CollectingLogger.format(args));\n  }\n\n  override error(...args: unknown[]): void {\n    this.errorSink(CollectingLogger.format(args));\n  }\n\n  override info(...args: unknown[]): void {\n    void args; /* suppressed: never write to stdout from inside a --json run */\n  }\n\n  override debug(...args: unknown[]): void {\n    void args; /* suppressed: never write to stdout from inside a --json run */\n  }\n}\n\n/**\n * One product of the walk: a `*.json` file to validate, or — with `fatal`\n * set — a path that could not be walked, reported as its own per-file error,\n * or — with `skipped` set — a `*.json` file the walk found that is not a\n * fixture file at all and is passed over (see `nonFixtureSkipReason`).\n */\ninterface CollectEntry {\n  file: string;\n  fatal?: string;\n  skipped?: string;\n}\n\n/**\n * Why a `*.json` file the WALK turned up is not a fixture file, or\n * `undefined` if it is one (or if the question cannot be answered cheaply).\n *\n * A directory is not a fixture directory: this package ships `fixtures/`\n * holding both fixture files and eight aimock CONFIG files — the six\n * `fixtures/examples/**\\/*-config.json`, `full-suite.json`, and\n * `agui/agui-text-response.json`, whose AG-UI fixtures sit NESTED under\n * `agui` where `--fixtures` cannot see them — which is why the documented\n * `aimock validate ./fixtures/` exited 1 on the package's own tree. The\n * server has the same mixture to deal with and passes over it:\n * `loadFixtureFile` warns \"Missing or invalid \\\"fixtures\\\" array\", returns no\n * fixtures, and startup continues. This mirrors that skip, so a walked\n * directory reports on the fixture files in it and says what it passed over.\n *\n * Non-fixture means the file carries no top-level `fixtures` key at all (or\n * is an aimock config). A `fixtures` key that is present but not an array is\n * a MALFORMED fixture file and still fails the run, as the loader would refuse\n * it. The skip applies ONLY to files the walk discovered — a path the caller named explicitly is still validated, and a\n * wrong-shape file there still fails the run, because naming a file is\n * asking about that file.\n *\n * A file carrying an aimock config section (`configSections`) is named as\n * what it is rather than by what it lacks, because \"not a fixture file\" on\n * its own is read as \"holds no fixtures\" — false of `agui`-sectioned configs,\n * which hold AG-UI fixtures that `aimock --config`, not `--fixtures`, serves.\n *\n * Unreadable and unparseable are deliberately NOT skips. Returning\n * `undefined` for them hands the file to `validateOneFile`, which reports the\n * real read error or JSON syntax error — a defect in any `*.json` file, and\n * one no config file has an excuse for either.\n */\nfunction nonFixtureSkipReason(file: string): string | undefined {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(readFileSync(file, \"utf-8\")) as unknown;\n  } catch {\n    return undefined;\n  }\n  const asConfig = aimockConfigDescription(parsed);\n  if (asConfig !== undefined) return `not a fixture file — ${asConfig}`;\n  // A present `fixtures` key of the wrong shape is a MALFORMED fixture file,\n  // not a non-fixture file: hand it to `validateOneFile`, which fails it the\n  // way the same file fails when named.\n  if (typeof parsed === \"object\" && parsed !== null && \"fixtures\" in parsed) return undefined;\n  return 'not a fixture file — no top-level \"fixtures\" key';\n}\n\n/**\n * The mock sections of `AimockConfig` (config-loader.ts). An object carrying\n * any of them is an aimock config file: `aimock --config <path>` starts a\n * server from it, while `--fixtures <path>` loads nothing from it.\n */\nconst CONFIG_SECTIONS = [\"llm\", \"mcp\", \"a2a\", \"agui\", \"vector\", \"services\"] as const;\n\n/**\n * What a parsed-but-not-fixture-shaped JSON document IS, when it is an aimock\n * config file, or `undefined` when it is not one. Used by both the walk's skip\n * note and the fatal a NAMED file of that shape gets, so the two surfaces\n * describe the same file the same way. The sections found are listed, so an\n * `agui` config is never described as a file holding no fixtures — it holds\n * AG-UI ones, nested where the fixture loader does not look.\n */\nfunction aimockConfigDescription(parsed: unknown): string | undefined {\n  if (typeof parsed !== \"object\" || parsed === null) return undefined;\n  const doc = parsed as Record<string, unknown>;\n  const sections = CONFIG_SECTIONS.filter((key) => typeof doc[key] === \"object\" && doc[key]);\n  if (sections.length === 0) return undefined;\n  return `an aimock config file (${sections.join(\", \")}), which \"aimock --config\" serves and \"--fixtures\" does not load`;\n}\n\n/**\n * Collect `*.json` files under `dirPath`, recursing into subdirectories.\n * Mirrors `loadFixturesFromDir`: within a directory the `*.json` files come\n * first in sorted order, then its subdirectories in sorted order, so the\n * reported order matches the server's load order, and the same stat-error\n * handling — a vanished entry (ENOENT) is skipped silently, every other\n * failure is surfaced. Unlike the loader, which only warns, each surfaced\n * failure becomes a `fatal` entry that fails the run, and it is emitted in\n * walk position (an unreadable subdirectory is reported where that\n * subdirectory was reached, not after every file in the tree) so the report\n * reads in encounter order. Entries that are neither directories nor\n * `*.json` files are ignored, as they are by the loader.\n *\n * `ancestors` holds the real paths of the directories this call is nested\n * inside. A directory whose real path is one of them closes a symlink cycle\n * and is reported instead of walked; the server has no such guard and\n * recurses through the cycle until the kernel returns ELOOP. A repeat visit\n * that is NOT an ancestor — `root/link -> root/sub` alongside `root/sub` — is\n * no cycle: it is walked again, because the server walks it again and loads\n * those fixtures twice.\n *\n * A `*.json` entry that is not a regular file (a FIFO, a socket, a device)\n * is a `fatal` entry rather than a target, because reading it is what the\n * containment promise above cannot keep: `readFileSync` on a FIFO with no\n * writer blocks forever, as it does on the server.\n */\nfunction collectJsonFiles(\n  dirPath: string,\n  ancestors: string[],\n  out: CollectEntry[] = [],\n): CollectEntry[] {\n  let realPath: string;\n  try {\n    realPath = realpathSync(dirPath);\n  } catch (err) {\n    out.push({ file: dirPath, fatal: `Could not resolve directory: ${errText(err)}` });\n    return out;\n  }\n  if (ancestors.includes(realPath)) {\n    out.push({\n      file: dirPath,\n      fatal: `Symlink cycle detected: already walking ${realPath}`,\n    });\n    return out;\n  }\n\n  let names: string[];\n  try {\n    names = readdirSync(dirPath);\n  } catch (err) {\n    out.push({ file: dirPath, fatal: `Could not read directory: ${errText(err)}` });\n    return out;\n  }\n\n  // Sort the whole entry list, not just the `*.json` names, so a stat failure\n  // or a non-regular `*.json` lands at a deterministic place in the report\n  // whatever order the filesystem hands entries back in.\n  const subdirs: string[] = [];\n  for (const name of [...names].sort()) {\n    const fullPath = join(dirPath, name);\n    let stats: Stats;\n    try {\n      stats = statSync(fullPath);\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") {\n        out.push({ file: fullPath, fatal: `Could not stat: ${errText(err)}` });\n      }\n      continue;\n    }\n    if (stats.isDirectory()) subdirs.push(name);\n    else if (!name.endsWith(\".json\")) continue;\n    else if (stats.isFile()) {\n      const skipped = nonFixtureSkipReason(fullPath);\n      out.push(skipped === undefined ? { file: fullPath } : { file: fullPath, skipped });\n    } else out.push({ file: fullPath, fatal: \"Not a regular file\" });\n  }\n\n  const chain = [...ancestors, realPath];\n  for (const sub of subdirs) collectJsonFiles(join(dirPath, sub), chain, out);\n  return out;\n}\n\n/** The entry shape the loader and the server both assume, quoted verbatim. */\nconst ENTRY_SHAPE = 'every entry needs { \"match\": { ... }, \"response\": { ... } }';\n\n/** Name a value the way a fixture author would read it back in their JSON. */\nfunction gotText(value: unknown): string {\n  if (value === null) return \"null\";\n  if (value === undefined) return \"absent\";\n  if (Array.isArray(value)) return \"an array\";\n  return `a ${typeof value}`;\n}\n\n/**\n * A shape defect in a raw fixture entry, classified BEFORE conversion.\n *\n * `convertible` is what the SERVER does with the same entry, and it is the\n * whole reason this is a classifier and not a catch handler. `entryToFixture`\n * only reads `entry.match.userMessage` and friends, so it throws for exactly\n * two shapes: a non-object `entry`, and an `entry.match` that is null or\n * absent. A `match` that is a STRING, a NUMBER, a BOOLEAN or an ARRAY has no\n * such properties either, but reading them is perfectly legal — every field\n * comes back `undefined`, the entry converts into an EMPTY match, and an empty\n * match is a catch-all that answers every request. Classifying after the throw\n * therefore never saw that case at all, and `validate` printed `OK`.\n */\ntype EntryDefect =\n  /** `entryToFixture` would throw: report it and skip the entry. */\n  | { severity: \"error\"; convertible: false; why: string }\n  /** Converts, but not into the fixture the author meant: report and convert. */\n  | { severity: \"warning\"; convertible: true; why: string };\n\n/**\n * Classify a raw entry's shape, or return `undefined` when nothing about it is\n * worth saying. Runs before `entryToFixture`, so every branch below is driven\n * by the entry itself rather than by whichever exception the conversion\n * happened to throw.\n *\n * A missing or non-object `response` is deliberately NOT classified here: the\n * conversion accepts it (`{ ...undefined }` is `{}`), the server accepts it,\n * and the `validateFixtures` rules already reject it by name — \"response is\n * not a recognized type (must have content, toolCalls, ...)\" — which is the\n * more actionable message of the two. Saying it here as well would report one\n * defect twice. It is still named alongside `match` when `match` is fatal,\n * because then the rules never run on the entry at all and an author fixing\n * `{}` would otherwise need one round trip per missing key.\n */\nfunction classifyEntry(entry: unknown): EntryDefect | undefined {\n  if (entry === null || typeof entry !== \"object\" || Array.isArray(entry)) {\n    return {\n      severity: \"error\",\n      convertible: false,\n      why: `entry is ${gotText(entry)}, expected an object — ${ENTRY_SHAPE}`,\n    };\n  }\n  const match = (entry as Record<string, unknown>).match;\n  if (match === null || match === undefined) {\n    const missing = ([\"match\", \"response\"] as const).filter((key) => {\n      const value = (entry as Record<string, unknown>)[key];\n      return value === null || typeof value !== \"object\" || Array.isArray(value);\n    });\n    return {\n      severity: \"error\",\n      convertible: false,\n      why: `missing or non-object ${missing.map((k) => `\"${k}\"`).join(\" and \")} — ${ENTRY_SHAPE}`,\n    };\n  }\n  if (typeof match !== \"object\" || Array.isArray(match)) {\n    return {\n      severity: \"warning\",\n      convertible: true,\n      why:\n        `\"match\" is ${gotText(match)}, not an object — every match field reads as ` +\n        `undefined, so this entry is an empty match: a CATCH-ALL answering every ` +\n        `request. The server loads it the same way, so this warns rather than ` +\n        `errors; --strict fails on it. ${ENTRY_SHAPE}`,\n    };\n  }\n  return undefined;\n}\n\n/**\n * The backstop for an entry `classifyEntry` passed and `entryToFixture` threw\n * on anyway (a `toolCalls: [null]`, say, which `normalizeResponse` walks).\n * Which entry it was is the actionable half, so that leads; the raw thrown\n * text follows as `detail`, which `--json` carries as its own field and the\n * human report prints on an indented continuation line. It used to say\n * `see \"detail\"`, naming a field only the `--json` report has — in human mode\n * that pointed at nothing at all.\n */\nfunction unexpectedEntryFailure(index: number, err: unknown): Finding {\n  return {\n    index,\n    message: `Invalid fixture entry #${index}: could not be converted to a fixture`,\n    detail: errText(err),\n  };\n}\n\n/**\n * Validate one fixture file into a report. Every failure mode — unreadable,\n * unparseable, wrong shape, or a single malformed entry — is recorded in the\n * returned report rather than thrown.\n *\n * The converted fixtures are handed back alongside the report, with\n * `indices[i]` giving the entry index `fixtures[i]` was converted from, so the\n * cross-file union pass can append them and map its findings back to a file\n * and an entry index.\n */\nfunction validateOneFile(\n  file: string,\n  mention: number,\n): {\n  report: FileReport;\n  fixtures: Fixture[];\n  indices: number[];\n  identities: FindingIdentity[];\n  runErrors: string[];\n} {\n  const report: FileReport = { file, mention, fixtures: 0, errors: [], warnings: [] };\n  const fixtures: Fixture[] = [];\n  const sourceIndex: number[] = [];\n  // Findings that belong to no entry because an index could not be resolved.\n  // They are raised at run level rather than filed against a guessed entry.\n  const runErrors: string[] = [];\n  // Identities of the findings the RULES produced (not the conversion\n  // diagnostics, which the union pass cannot produce and so cannot repeat).\n  const identities: FindingIdentity[] = [];\n\n  let raw: string;\n  try {\n    raw = readFileSync(file, \"utf-8\");\n  } catch (err) {\n    setFatal(report, `Could not read file: ${errText(err)}`);\n    return { report, fixtures, indices: sourceIndex, identities, runErrors };\n  }\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw) as unknown;\n  } catch (err) {\n    setFatal(report, `Invalid JSON: ${errText(err)}`);\n    return { report, fixtures, indices: sourceIndex, identities, runErrors };\n  }\n  if (\n    typeof parsed !== \"object\" ||\n    parsed === null ||\n    !Array.isArray((parsed as { fixtures?: unknown }).fixtures)\n  ) {\n    // Naming a file is asking about that file, so the wrong shape is still\n    // fatal — the loader refuses it too. Say WHICH wrong shape when the file\n    // is an aimock config, so the answer names the file for what it is rather\n    // than implying it holds nothing.\n    const asConfig = aimockConfigDescription(parsed);\n    setFatal(\n      report,\n      asConfig === undefined\n        ? 'Missing or invalid \"fixtures\" array (expected { \"fixtures\": [...] })'\n        : `Missing or invalid \"fixtures\" array (expected { \"fixtures\": [...] }) — this is ${asConfig}`,\n    );\n    return { report, fixtures, indices: sourceIndex, identities, runErrors };\n  }\n\n  // Convert the entries we already parsed rather than re-reading the file,\n  // and give the conversion a logger so its per-entry diagnostics are\n  // attributed to the entry that produced them instead of being discarded.\n  let entryIndex = 0;\n  const entryLogger = new CollectingLogger(\n    (message) => report.warnings.push({ index: entryIndex, message }),\n    (message) => report.errors.push({ index: entryIndex, message }),\n  );\n\n  // Classify each entry's shape FIRST, then convert. A `{}`, `null` or\n  // match-less entry makes `entryToFixture` throw, so it is reported and\n  // skipped; a convertible-but-wrong entry (a non-object `match`) is reported\n  // and still converted, so the rules go on seeing exactly the fixture array\n  // the server would build. The `try` stays as a backstop for a throw the\n  // classifier did not predict. Which entry each converted fixture came from\n  // is remembered so `validateFixtures` indices stay entry indices.\n  const entries = (parsed as FixtureFile).fixtures;\n  for (let index = 0; index < entries.length; index++) {\n    entryIndex = index;\n    const defect = classifyEntry(entries[index]);\n    if (defect !== undefined) {\n      const label = defect.severity === \"error\" ? \"Invalid fixture entry\" : \"Fixture entry\";\n      const finding: Finding = { index, message: `${label} #${index}: ${defect.why}` };\n      if (!defect.convertible) {\n        report.errors.push(finding);\n        continue;\n      }\n      report.warnings.push(finding);\n    }\n    try {\n      fixtures.push(entryToFixture(entries[index], entryLogger));\n      sourceIndex.push(index);\n    } catch (err) {\n      report.errors.push(unexpectedEntryFailure(index, err));\n    }\n  }\n\n  report.fixtures = fixtures.length;\n  // `validateFixtures` reports against the COMPACTED array, which skips the\n  // entries that failed to convert. The finding's own index is mapped back to\n  // an entry index — and so are the indices its message NAMES, or one line\n  // would print two different index spaces: \"#2 ... shadows fixture 0\" where\n  // \"#2\" is an entry and \"0\" is a compacted slot.\n  // `?? fixtureIndex` here USED to mask an unresolvable index by printing a\n  // compacted slot as if it were an entry index — two different index spaces\n  // in one line, with nothing to say so. It is unreachable while `sourceIndex`\n  // is pushed in lockstep with `fixtures`, so if it ever fires the run is\n  // wrong, not merely imprecise: raise it at run level (which fails the run)\n  // instead of quietly printing a number that means something else.\n  const unresolved = new Set<number>();\n  const toEntryIndex = (fixtureIndex: number): number => {\n    const entry = sourceIndex[fixtureIndex];\n    if (entry !== undefined) return entry;\n    if (!unresolved.has(fixtureIndex)) {\n      unresolved.add(fixtureIndex);\n      runErrors.push(\n        `finding for fixture index ${fixtureIndex}, which maps to no entry in this file`,\n      );\n    }\n    return fixtureIndex;\n  };\n  try {\n    for (const r of validateFixtures(fixtures)) {\n      const index = toEntryIndex(r.fixtureIndex);\n      const refs = r.ref === undefined ? [] : refIndices(r.ref).map(toEntryIndex);\n      const message =\n        r.ref === undefined\n          ? r.message\n          : renderValidationRef(r.ref, (i) => String(toEntryIndex(i)));\n      const finding: Finding = { index, message };\n      identities.push({\n        severity: r.severity,\n        index,\n        kind: r.ref === undefined ? `message:${r.message}` : r.ref.rule,\n        refs,\n        finding,\n      });\n      if (r.severity === \"error\") report.errors.push(finding);\n      else report.warnings.push(finding);\n    }\n  } catch (err) {\n    // File-level: the validator walks every entry, so which one tripped it is\n    // unknown. Filing it at #0 would accuse the file's first fixture, which is\n    // very likely innocent, so this finding carries no entry index at all.\n    report.errors.push({ message: `Validation failed for this file: ${errText(err)}` });\n  }\n  return { report, fixtures, indices: sourceIndex, identities, runErrors };\n}\n\n/**\n * `#<index> ` for a finding that belongs to one entry; empty for a file-level\n * finding, which names no entry (see Finding.index). Shared by the human lines\n * and the failure summary so a reader of either can locate the same entry.\n */\nconst findingAt = (f: Finding): string => (f.index === undefined ? \"\" : `#${f.index} `);\n\n/**\n * One-line reason a run failed, for the stderr side of `--json` output.\n *\n * It NAMES the failure first — the file and the finding that caused the\n * non-zero exit — and only then totals what else failed, because the line is\n * often the single line a CI log shows. Leading with a fixed list of counts\n * put two zeros (\"0 unreadable/invalid file(s), 0 file(s) with errors\") in\n * front of every strict-warning failure, where the reader has to get past the\n * things that did NOT happen to reach the one that did. Counts that are zero\n * are omitted for the same reason, and a file whose fatal is already the lead\n * is counted as unreadable/invalid only, not a second time under \"with\n * errors\" — its fatal now rides in `errors` as well (see `setFatal`).\n */\nfunction summarizeFailure(\n  reports: FileReport[],\n  strict: boolean,\n  runErrors: string[],\n  name: (r: FileReport) => string,\n): string {\n  const fatalFiles = reports.filter((r) => r.fatal !== undefined);\n  const erroredFiles = reports.filter((r) => r.fatal === undefined && r.errors.length > 0);\n  const warnedFiles = reports.filter((r) => r.warnings.length > 0);\n\n  // First failure in report order: a fatal file, else a file with errors, else\n  // a run-level error, else (under --strict) the warning that failed the run.\n  let lead: string;\n  if (fatalFiles[0] !== undefined) lead = `${name(fatalFiles[0])}: ${fatalFiles[0].fatal}`;\n  else if (erroredFiles[0] !== undefined)\n    lead = `${name(erroredFiles[0])}: ${findingAt(erroredFiles[0].errors[0])}${erroredFiles[0].errors[0].message}`;\n  else if (runErrors[0] !== undefined) lead = runErrors[0];\n  else if (warnedFiles[0] !== undefined)\n    lead = `${name(warnedFiles[0])}: ${findingAt(warnedFiles[0].warnings[0])}${warnedFiles[0].warnings[0].message} (--strict)`;\n  /* v8 ignore next -- a failed run always has one of the four above */ else\n    lead = \"the run failed\";\n\n  const counts: string[] = [];\n  if (fatalFiles.length > 0) counts.push(`${fatalFiles.length} unreadable/invalid file(s)`);\n  if (erroredFiles.length > 0) counts.push(`${erroredFiles.length} file(s) with errors`);\n  // A run-level error (no fixtures loaded from any input) belongs to no single\n  // file, so it is counted on its own.\n  if (runErrors.length > 0) counts.push(`${runErrors.length} run-level error(s)`);\n  if (strict && warnedFiles.length > 0)\n    counts.push(`${warnedFiles.length} file(s) with warnings (--strict)`);\n\n  return `Error: fixture validation failed — ${lead} [${counts.join(\", \")}].`;\n}\n\nexport function runValidateCli(deps: ValidateCliDeps = {}): void {\n  const argv = deps.argv ?? process.argv.slice(2);\n  const log = deps.log ?? console.log.bind(console);\n  const logError = deps.logError ?? console.error.bind(console);\n  const exit = deps.exit ?? process.exit.bind(process);\n\n  /**\n   * Is `flag` present as an OPTION in argv — i.e. before the `--` terminator,\n   * after which every argument is a path? Needed because a usage error can be\n   * a `parseArgs` throw, which leaves no parsed `values` to consult, and the\n   * output mode still has to be honoured. `--flag=value` counts: these are all\n   * boolean options, so giving one a value IS the usage error being reported,\n   * and matching the bare token alone answered \"no `--json` here\" for the one\n   * argv that most obviously asked for JSON — leaving stdout empty.\n   */\n  const flagInArgv = (flag: string): boolean => {\n    for (const arg of argv) {\n      if (arg === \"--\") return false;\n      if (arg === flag || arg.startsWith(`${flag}=`)) return true;\n    }\n    return false;\n  };\n\n  /**\n   * A usage error, in whichever mode the argv asked for. `--json` promises\n   * \"one document on stdout\" (README), and a run that fails on its own argv is\n   * still a run: emitting nothing there handed a CI job parsing stdout an\n   * empty buffer — a JSON parse error standing in for a perfectly ordinary\n   * \"no paths given\". The document reports the usage error the same way a\n   * run-level error is reported, so one consumer shape reads both. The\n   * human-readable reason plus the help text stay on stderr in both modes, so\n   * `--json` stdout is still the document alone.\n   */\n  const usageError = (message: string): void => {\n    logError(`Error: ${message}\\n\\n${VALIDATE_HELP}`);\n    if (flagInArgv(\"--json\")) {\n      log(\n        JSON.stringify(\n          {\n            strict: flagInArgv(\"--strict\"),\n            failed: true,\n            files: [],\n            run: { fixtures: 0, errors: [message] },\n          },\n          null,\n          2,\n        ),\n      );\n    }\n    exit(1);\n  };\n\n  // Parse with node:util parseArgs, like the main CLI (src/cli.ts) and the\n  // server path in src/aimock-cli.ts: strict mode rejects unknown options and\n  // the \"--\" terminator falls out for free, so a fixture path that begins with\n  // \"-\" is still reachable.\n  let values: { strict?: boolean; json?: boolean; help?: boolean };\n  let paths: string[];\n  try {\n    const parsed = parseArgs({\n      args: argv,\n      options: {\n        strict: { type: \"boolean\", default: false },\n        json: { type: \"boolean\", default: false },\n        help: { type: \"boolean\", short: \"h\", default: false },\n      },\n      strict: true,\n      allowPositionals: true,\n    });\n    values = parsed.values;\n    paths = parsed.positionals;\n  } catch (err) {\n    /* v8 ignore next -- parseArgs always throws Error subclasses */\n    const msg = err instanceof Error ? err.message : String(err);\n    usageError(msg);\n    return;\n  }\n\n  if (values.help === true) {\n    // `--json --help` still has to leave one JSON document on stdout and\n    // nothing else (README, docs): a consumer that forwards its own argv to\n    // `validate --json \"$@\"` and pipes stdout to `jq` gets a parse error the\n    // moment a user asks for help. The help text is the document's one field.\n    log(values.json === true ? JSON.stringify({ help: VALIDATE_HELP }, null, 2) : VALIDATE_HELP);\n    exit(0);\n    return;\n  }\n  const strict = values.strict === true;\n  const json = values.json === true;\n\n  if (paths.length === 0) {\n    usageError(\"no fixture paths given.\");\n    return;\n  }\n\n  // Expand directory arguments into their `*.json` members. A missing path is\n  // passed through untouched so the read below reports the real per-file\n  // error; any other stat failure (ELOOP, EACCES, ...) is its own error, and\n  // a path that exists but is neither a directory nor a regular file is\n  // refused rather than read (see `collectJsonFiles`).\n  //\n  // Targets are NOT de-duplicated: the server loads one set of fixtures per\n  // `--fixtures` it is given, so a path named twice — or a file named both\n  // directly and via its parent directory — is loaded twice there, and the\n  // duplicate-`userMessage` findings that produces are exactly what this lint\n  // exists to surface. Validating it twice here is what makes the union pass\n  // see what the server sees.\n  const targets: CollectEntry[] = [];\n  for (const path of paths) {\n    // A remote source is refused by NAME. `--fixtures <url>` is a runtime\n    // feature of the server; this lint reads local paths only, and handing a\n    // URL to `statSync` produced a bare ENOENT quoting the URL back — which\n    // reads as \"you typed the path wrong\", not \"this input is unsupported\".\n    if (REMOTE_SOURCE.test(path)) {\n      targets.push({\n        file: path,\n        fatal:\n          \"Remote fixture source: this lint reads local paths only (the server's --fixtures accepts a URL; validate does not) — download the file and validate the local copy\",\n      });\n      continue;\n    }\n    let stats: Stats;\n    try {\n      stats = statSync(path);\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === \"ENOENT\") targets.push({ file: path });\n      else targets.push({ file: path, fatal: `Could not stat: ${errText(err)}` });\n      continue;\n    }\n    if (!stats.isDirectory()) {\n      if (stats.isFile()) targets.push({ file: path });\n      else targets.push({ file: path, fatal: \"Not a regular file\" });\n      continue;\n    }\n    const entries = collectJsonFiles(path, []);\n    // Only an actually-walkable, actually-empty directory is \"no fixtures\n    // found\" — an unreadable one reports why it could not be read.\n    if (entries.length === 0) {\n      targets.push({ file: path, fatal: \"No .json fixture files found in directory\" });\n      continue;\n    }\n    targets.push(...entries);\n  }\n\n  // How many times each path is mentioned by the expanded target list, and a\n  // running count that hands each target its own 1-based mention number. Both\n  // are needed before the first report is printed: whether a name is ambiguous\n  // is a property of the whole run, not of the file being reported. Both key\n  // on the resolved path, not its spelling: a walked entry is `join`-normalised\n  // while a named one is verbatim, and `./d/a.json` named beside the walk of\n  // `./d` is the same load twice. The spelling is still what gets displayed.\n  const mentionKey = (file: string): string => resolve(file);\n  const mentionCount = new Map<string, number>();\n  for (const target of targets)\n    mentionCount.set(mentionKey(target.file), (mentionCount.get(mentionKey(target.file)) ?? 0) + 1);\n  const mentionsSoFar = new Map<string, number>();\n  const nextMention = (file: string): number => {\n    const mention = (mentionsSoFar.get(mentionKey(file)) ?? 0) + 1;\n    mentionsSoFar.set(mentionKey(file), mention);\n    return mention;\n  };\n  /**\n   * How a file is NAMED in human output and in cross-file references. A path\n   * this run loads more than once gets its mention number, because the bare\n   * path names all of those loads at once: without it a second load's findings\n   * read as a file shadowing itself. A path loaded once is printed unadorned —\n   * there is nothing to tell it apart from, and \"[1]\" on every line of an\n   * ordinary run is noise. The `--json` report carries `mention` regardless.\n   */\n  const displayName = (report: FileReport): string =>\n    (mentionCount.get(mentionKey(report.file)) ?? 1) > 1\n      ? `${report.file}[${report.mention}]`\n      : report.file;\n\n  const reports: FileReport[] = [];\n  // Every successfully-parsed entry, in load order, plus the file and local\n  // index each one came from. `validateFixtures` reports by array index, so\n  // the union pass below needs this to map its findings back to a file.\n  const union: Fixture[] = [];\n  const provenance: { report: FileReport; index: number }[] = [];\n  // The rule findings the per-file pass already reported, by SITE — the file\n  // (by id, so two mentions of one path are two sites), the entry index, the\n  // severity and the rule. Each rule fires at most once per fixture in either\n  // pass, so a union finding that lands on an occupied site is that same\n  // finding seen with every file in view: it never prints a second line, and\n  // it rewrites the first one only when it names different fixtures. Keying on\n  // the rendered text with digits masked (a previous scheme) instead made every\n  // \"shadows fixtures <n>+\" look alike, which both collapsed distinct findings\n  // and silently swallowed genuine cross-file ones.\n  const reportedBySite = new Map<string, { finding: Finding; refs: string[] }[]>();\n  const fileIds = new Map<FileReport, number>();\n  // Declared before the per-file loop because that loop contributes to it: an\n  // index a file could not resolve belongs to no entry and no file section.\n  const runErrors: string[] = [];\n  const siteKey = (fileId: number, index: number, severity: string, kind: string): string =>\n    [fileId, index, severity, kind].join(\"\\u0000\");\n\n  for (const target of targets) {\n    // Passed over by the walk: it appears in the report so nothing the walk\n    // touched vanishes, but it contributes no fixtures and no findings.\n    if (target.skipped !== undefined) {\n      reports.push({\n        file: target.file,\n        mention: nextMention(target.file),\n        fixtures: 0,\n        errors: [],\n        warnings: [],\n        skipped: target.skipped,\n      });\n      continue;\n    }\n    if (target.fatal !== undefined) {\n      reports.push(fatalReport(target.file, nextMention(target.file), target.fatal));\n      continue;\n    }\n\n    let report: FileReport;\n    let fixtures: Fixture[] = [];\n    let indices: number[] = [];\n    let identities: FindingIdentity[] = [];\n    let fileRunErrors: string[] = [];\n    const mention = nextMention(target.file);\n    try {\n      ({\n        report,\n        fixtures,\n        indices,\n        identities,\n        runErrors: fileRunErrors,\n      } = validateOneFile(target.file, mention));\n    } catch (err) {\n      // Backstop: nothing unexpected gets to abandon the remaining files.\n      report = fatalReport(target.file, mention, `Validation failed: ${errText(err)}`);\n    }\n    reports.push(report);\n    // These are raised inside `validateOneFile`, which knows the path but not\n    // how many times this run loads it, so they are named here instead.\n    runErrors.push(...fileRunErrors.map((e) => `${displayName(report)}: ${e}`));\n    const fileId = fileIds.size;\n    fileIds.set(report, fileId);\n\n    // Only RULE findings are registered: a conversion diagnostic or a\n    // file-level finding (no entry index) can never be restated by the union\n    // pass, so it has no identity here.\n    for (const identity of identities) {\n      const key = siteKey(fileId, identity.index, identity.severity, identity.kind);\n      const atSite = reportedBySite.get(key) ?? [];\n      atSite.push({\n        finding: identity.finding,\n        refs: identity.refs.map((ref) => `${fileId}:${ref}`),\n      });\n      reportedBySite.set(key, atSite);\n    }\n    for (let i = 0; i < fixtures.length; i++) {\n      // Same masking as `toEntryIndex` above, one level out: `?? i` silently\n      // relabelled a union fixture with a compacted slot number. Keep the\n      // union aligned with what the server loads (so the cross-file rules see\n      // the same array), but fail the run rather than print a wrong index.\n      const index = indices[i];\n      if (index === undefined) {\n        runErrors.push(\n          `${displayName(report)}: converted fixture ${i} has no source entry index; ` +\n            `cross-file findings against it are reported at its array position`,\n        );\n      }\n      union.push(fixtures[i]);\n      provenance.push({ report, index: index ?? i });\n    }\n  }\n\n  // Cross-file pass. The server validates every loaded fixture as one array,\n  // so its duplicate-userMessage and catch-all-ordering rules see across\n  // files; run per file they never can. Validate the union and keep only the\n  // findings the per-file pass did not already make.\n  // Set when the run failed because it loaded nothing at all, so the human\n  // printer can withhold \"OK\" from the files that loaded nothing — see below.\n  let noFixturesLoaded = false;\n  // When a file already said WHY it produced no fixtures (unreadable, invalid\n  // JSON, wrong shape, a bad entry), the run-level line below would repeat that\n  // same cause as a second, causeless error. Report it only when nothing else\n  // has; the run still fails either way, on the per-file finding.\n  const causeAlreadyReported = reports.some((r) => r.fatal !== undefined || r.errors.length > 0);\n  if (union.length === 0) {\n    // The server aborts startup on this exact condition\n    // (\"No fixtures loaded and validation/strict mode is enabled\"), so a run\n    // whose inputs yield nothing — `{\"fixtures\": []}` and nothing else —\n    // fails here too. Parsed-but-empty files alongside files that do load\n    // fixtures are fine in both places.\n    if (!causeAlreadyReported) {\n      runErrors.push(\n        \"No fixtures loaded from any input — the server aborts startup on this under --validate-on-load/--strict\",\n      );\n      noFixturesLoaded = true;\n    }\n  } else {\n    // A union index as the reader sees it: the load that owns the fixture —\n    // named by path, plus its mention number when that path is loaded more\n    // than once — and its index inside that load.\n    const describe = (unionIndex: number): string => {\n      const origin = provenance[unionIndex];\n      return origin === undefined\n        ? String(unionIndex)\n        : `${displayName(origin.report)} #${origin.index}`;\n    };\n    // The same index as an identity for de-duplication. An unresolvable one\n    // gets its own namespace rather than aliasing onto a real file.\n    const targetOf = (unionIndex: number): string => {\n      const origin = provenance[unionIndex];\n      if (origin === undefined) return `union:${unionIndex}`;\n      const fileId = fileIds.get(origin.report);\n      return fileId === undefined ? `union:${unionIndex}` : `${fileId}:${origin.index}`;\n    };\n    // Cross-file wording is rendered from the finding's REF DATA, never by\n    // rewriting its prose: `duplicate userMessage` quotes the fixture's own\n    // text, and text that itself reads \"fixture 3\" is not an index.\n    const renderCrossFile = (ref: ValidationRef): string => {\n      if (ref.rule === \"duplicate-user-message\") {\n        return `duplicate userMessage '${ref.userMessage}' — shadows fixture ${describe(ref.shadows)}`;\n      }\n      // Both ends are named because the point of the cross-file pass is that\n      // the shadowed range reaches past the catch-all's own file; a bare\n      // \"<file> #0+\" would read as if \"+\" were part of the index.\n      const head = \"empty match acts as catch-all but is not the last fixture\";\n      return ref.shadowsFrom === ref.shadowsThrough\n        ? `${head} — shadows ${describe(ref.shadowsFrom)}`\n        : `${head} — shadows every later fixture, from ${describe(ref.shadowsFrom)} through ${describe(ref.shadowsThrough)}`;\n    };\n    // The per-file pass above is wrapped per file; this one is the run's only\n    // other call into `validateFixtures`, and an uncontained throw here killed\n    // the process with no report at all and a truncated (invalid) `--json`\n    // stdout. Contain it as a run-level error so the report is still emitted,\n    // is still valid JSON, and the run still exits 1.\n    try {\n      for (const r of validateFixtures(union)) {\n        const origin = provenance[r.fixtureIndex];\n        if (origin === undefined) {\n          // Unreachable while `provenance` is pushed in lockstep with `union`.\n          // A bare `continue` here DROPPED the finding: an error finding could\n          // vanish and leave the run exiting 0, reporting a clean bill of\n          // health for fixtures the server would refuse. Raise it at run level,\n          // as the adjacent unrecognised-file case already does.\n          runErrors.push(\n            `Cross-file finding for an unknown fixture index ${r.fixtureIndex}: ${r.message}`,\n          );\n          continue;\n        }\n        const fileId = fileIds.get(origin.report);\n        if (fileId === undefined) {\n          // Unreachable while provenance is built from reported files; recorded\n          // as a run-level error rather than defaulted onto file 0, which would\n          // attribute the finding to an unrelated file.\n          runErrors.push(`Cross-file finding for an unrecognised file: ${r.message}`);\n          continue;\n        }\n        const kind = r.ref === undefined ? `message:${r.message}` : r.ref.rule;\n        const refTargets = r.ref === undefined ? [] : refIndices(r.ref).map(targetOf);\n        const message = `cross-file: ${r.ref === undefined ? r.message : renderCrossFile(r.ref)}`;\n        const already = reportedBySite\n          .get(siteKey(fileId, origin.index, r.severity, kind))\n          ?.shift();\n        if (already !== undefined) {\n          // The per-file pass already reported this rule against this fixture,\n          // and the server would log it once. If the union names the same\n          // fixtures it adds nothing and the file-local wording stands; if it\n          // names others — a shadow that reaches into another load — that is\n          // the fuller truth, so it replaces the wording in place rather than\n          // printing a second line about the same fixture.\n          const same =\n            already.refs.length === refTargets.length &&\n            already.refs.every((target, i) => target === refTargets[i]);\n          if (!same) already.finding.message = message;\n          continue;\n        }\n        if (r.severity === \"error\") origin.report.errors.push({ index: origin.index, message });\n        else origin.report.warnings.push({ index: origin.index, message });\n      }\n    } catch (err) {\n      runErrors.push(`Cross-file validation failed: ${errText(err)}`);\n    }\n  }\n\n  const hasFatal = reports.some((r) => r.fatal !== undefined);\n  const hasErrors = reports.some((r) => r.errors.length > 0) || runErrors.length > 0;\n  const hasWarnings = reports.some((r) => r.warnings.length > 0);\n  const failed = hasFatal || hasErrors || (strict && hasWarnings);\n\n  // Anything that CAUSES the non-zero exit must reach stderr, or a CI log shows\n  // a failure with no reason. Warnings are informational by default and are the\n  // cause under --strict, so they follow the exit they produce.\n  const logWarning = strict ? logError : log;\n\n  if (json) {\n    log(\n      JSON.stringify(\n        { strict, failed, files: reports, run: { fixtures: union.length, errors: runErrors } },\n        null,\n        2,\n      ),\n    );\n    // Keep stdout to the JSON document alone, but still say on stderr why the\n    // run failed.\n    if (failed) logError(summarizeFailure(reports, strict, runErrors, displayName));\n  } else {\n    const at = findingAt;\n    // `detail` (the raw thrown text behind a rephrased message) is a field of\n    // the `--json` document, so human mode used to lose it entirely. Print it\n    // on an indented continuation line under its own finding, where it reads\n    // as belonging to that line rather than as another finding.\n    const emitDetail = (f: Finding, sink: (msg: string) => void): void => {\n      if (f.detail !== undefined) sink(`    ${f.detail}`);\n    };\n    for (const r of reports) {\n      const name = displayName(r);\n      // A file the WALK turned up that is not fixture-shaped is passed over,\n      // exactly as the server passes over it, and says so on its one line.\n      if (r.skipped !== undefined) {\n        log(`${name}: skipped (${r.skipped})`);\n        continue;\n      }\n      // A fatal file needs no branch of its own: its reason rides in `errors`\n      // (see `setFatal`), so the loop below prints the same `[error]` line and\n      // the counting summary below tallies it — the stdout count and the\n      // `--json` `errors` array can no longer drift apart. Every file still\n      // gets exactly one summary line on stdout (README), including this one:\n      // a reader tallying stdout must not silently lose a file.\n      for (const e of r.errors) {\n        logError(`${name}: [error] ${at(e)}${e.message}`);\n        emitDetail(e, logError);\n      }\n      for (const w of r.warnings) {\n        logWarning(`${name}: [warning] ${at(w)}${w.message}`);\n        emitDetail(w, logWarning);\n      }\n      if (r.errors.length === 0 && r.warnings.length === 0) {\n        // \"OK\" is a claim about the RUN as well as the file: a reader tallying\n        // stdout on a run that failed would otherwise read \"OK\" against the very\n        // file that loaded none, on an exit of 1. Keying this on the RUN-level\n        // \"no fixtures loaded\" error was not enough — that error is withheld as\n        // soon as another file reports a cause, which is exactly when a failed\n        // run still has a zero-fixture file to print.\n        if (r.fixtures === 0 && failed) {\n          const why = noFixturesLoaded ? \"see the run-level error\" : \"the run failed elsewhere\";\n          log(`${name}: ${r.fixtures} fixture(s), loaded nothing — ${why}`);\n        } else {\n          log(`${name}: OK (${r.fixtures} fixture(s))`);\n        }\n      } else {\n        log(\n          `${name}: ${r.fixtures} fixture(s), ${r.errors.length} error(s), ${r.warnings.length} warning(s)`,\n        );\n      }\n    }\n    // Run-level errors last: they are consequences of (or additions to) the\n    // per-file output above, and printing them first put the summary before\n    // the detail it summarises.\n    for (const e of runErrors) logError(`[error] ${e}`);\n  }\n\n  exit(failed ? 1 : 0);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2GA,MAAa,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2C3B,MAAM;;AA4ER,SAAS,WAAW,KAA8B;AAChD,QAAO,IAAI,SAAS,2BAChB,CAAC,IAAI,QAAQ,GACb,CAAC,IAAI,aAAa,IAAI,eAAe;;;;;;;;AAS3C,MAAM,gBAAgB;;AAGtB,SAAS,QAAQ,KAAsB;AACrC,QAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;;;;;;;;;;;;;AAezD,SAAS,SAAS,QAAoB,SAAuB;AAC3D,QAAO,QAAQ;AACf,QAAO,OAAO,KAAK,EAAE,SAAS,CAAC;;;AAIjC,SAAS,YAAY,MAAc,SAAiB,SAA6B;CAC/E,MAAM,SAAqB;EAAE;EAAM;EAAS,UAAU;EAAG,QAAQ,EAAE;EAAE,UAAU,EAAE;EAAE;AACnF,UAAS,QAAQ,QAAQ;AACzB,QAAO;;;;;;;;;;;AAYT,IAAa,mBAAb,MAAa,yBAAyBA,sBAAO;CAC3C,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAAiC,WAAkC;AAC7E,QAAM,OAAO;AACb,OAAK,WAAW;AAChB,OAAK,YAAY;;;;;;;;;;;;;;;;CAiBnB,OAAe,OAAO,MAAyB;AAC7C,+BAAc,YAAY,GAAG,KAAK;;CAGpC,AAAS,KAAK,GAAG,MAAuB;AACtC,OAAK,SAAS,iBAAiB,OAAO,KAAK,CAAC;;CAG9C,AAAS,MAAM,GAAG,MAAuB;AACvC,OAAK,UAAU,iBAAiB,OAAO,KAAK,CAAC;;CAG/C,AAAS,KAAK,GAAG,MAAuB;CAIxC,AAAS,MAAM,GAAG,MAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiD3C,SAAS,qBAAqB,MAAkC;CAC9D,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,gCAAmB,MAAM,QAAQ,CAAC;SAC1C;AACN;;CAEF,MAAM,WAAW,wBAAwB,OAAO;AAChD,KAAI,aAAa,OAAW,QAAO,wBAAwB;AAI3D,KAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,cAAc,OAAQ,QAAO;AAClF,QAAO;;;;;;;AAQT,MAAM,kBAAkB;CAAC;CAAO;CAAO;CAAO;CAAQ;CAAU;CAAW;;;;;;;;;AAU3E,SAAS,wBAAwB,QAAqC;AACpE,KAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;CAC1D,MAAM,MAAM;CACZ,MAAM,WAAW,gBAAgB,QAAQ,QAAQ,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK;AAC1F,KAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAO,0BAA0B,SAAS,KAAK,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BvD,SAAS,iBACP,SACA,WACA,MAAsB,EAAE,EACR;CAChB,IAAI;AACJ,KAAI;AACF,uCAAwB,QAAQ;UACzB,KAAK;AACZ,MAAI,KAAK;GAAE,MAAM;GAAS,OAAO,gCAAgC,QAAQ,IAAI;GAAI,CAAC;AAClF,SAAO;;AAET,KAAI,UAAU,SAAS,SAAS,EAAE;AAChC,MAAI,KAAK;GACP,MAAM;GACN,OAAO,2CAA2C;GACnD,CAAC;AACF,SAAO;;CAGT,IAAI;AACJ,KAAI;AACF,mCAAoB,QAAQ;UACrB,KAAK;AACZ,MAAI,KAAK;GAAE,MAAM;GAAS,OAAO,6BAA6B,QAAQ,IAAI;GAAI,CAAC;AAC/E,SAAO;;CAMT,MAAM,UAAoB,EAAE;AAC5B,MAAK,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE;EACpC,MAAM,+BAAgB,SAAS,KAAK;EACpC,IAAI;AACJ,MAAI;AACF,iCAAiB,SAAS;WACnB,KAAK;AACZ,OAAK,IAA8B,SAAS,SAC1C,KAAI,KAAK;IAAE,MAAM;IAAU,OAAO,mBAAmB,QAAQ,IAAI;IAAI,CAAC;AAExE;;AAEF,MAAI,MAAM,aAAa,CAAE,SAAQ,KAAK,KAAK;WAClC,CAAC,KAAK,SAAS,QAAQ,CAAE;WACzB,MAAM,QAAQ,EAAE;GACvB,MAAM,UAAU,qBAAqB,SAAS;AAC9C,OAAI,KAAK,YAAY,SAAY,EAAE,MAAM,UAAU,GAAG;IAAE,MAAM;IAAU;IAAS,CAAC;QAC7E,KAAI,KAAK;GAAE,MAAM;GAAU,OAAO;GAAsB,CAAC;;CAGlE,MAAM,QAAQ,CAAC,GAAG,WAAW,SAAS;AACtC,MAAK,MAAM,OAAO,QAAS,sCAAsB,SAAS,IAAI,EAAE,OAAO,IAAI;AAC3E,QAAO;;;AAIT,MAAM,cAAc;;AAGpB,SAAS,QAAQ,OAAwB;AACvC,KAAI,UAAU,KAAM,QAAO;AAC3B,KAAI,UAAU,OAAW,QAAO;AAChC,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO;AACjC,QAAO,KAAK,OAAO;;;;;;;;;;;;;;;;;AAqCrB,SAAS,cAAc,OAAyC;AAC9D,KAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CACrE,QAAO;EACL,UAAU;EACV,aAAa;EACb,KAAK,YAAY,QAAQ,MAAM,CAAC,yBAAyB;EAC1D;CAEH,MAAM,QAAS,MAAkC;AACjD,KAAI,UAAU,QAAQ,UAAU,OAK9B,QAAO;EACL,UAAU;EACV,aAAa;EACb,KAAK,yBAPU,CAAC,SAAS,WAAW,CAAW,QAAQ,QAAQ;GAC/D,MAAM,QAAS,MAAkC;AACjD,UAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM;IAC1E,CAIsC,KAAK,MAAM,IAAI,EAAE,GAAG,CAAC,KAAK,QAAQ,CAAC,KAAK;EAC/E;AAEH,KAAI,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CACnD,QAAO;EACL,UAAU;EACV,aAAa;EACb,KACE,cAAc,QAAQ,MAAM,CAAC,0NAGI;EACpC;;;;;;;;;;;AAcL,SAAS,uBAAuB,OAAe,KAAuB;AACpE,QAAO;EACL;EACA,SAAS,0BAA0B,MAAM;EACzC,QAAQ,QAAQ,IAAI;EACrB;;;;;;;;;;;;AAaH,SAAS,gBACP,MACA,SAOA;CACA,MAAM,SAAqB;EAAE;EAAM;EAAS,UAAU;EAAG,QAAQ,EAAE;EAAE,UAAU,EAAE;EAAE;CACnF,MAAM,WAAsB,EAAE;CAC9B,MAAM,cAAwB,EAAE;CAGhC,MAAM,YAAsB,EAAE;CAG9B,MAAM,aAAgC,EAAE;CAExC,IAAI;AACJ,KAAI;AACF,kCAAmB,MAAM,QAAQ;UAC1B,KAAK;AACZ,WAAS,QAAQ,wBAAwB,QAAQ,IAAI,GAAG;AACxD,SAAO;GAAE;GAAQ;GAAU,SAAS;GAAa;GAAY;GAAW;;CAE1E,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,MAAM,IAAI;UACjB,KAAK;AACZ,WAAS,QAAQ,iBAAiB,QAAQ,IAAI,GAAG;AACjD,SAAO;GAAE;GAAQ;GAAU,SAAS;GAAa;GAAY;GAAW;;AAE1E,KACE,OAAO,WAAW,YAClB,WAAW,QACX,CAAC,MAAM,QAAS,OAAkC,SAAS,EAC3D;EAKA,MAAM,WAAW,wBAAwB,OAAO;AAChD,WACE,QACA,aAAa,SACT,6EACA,kFAAkF,WACvF;AACD,SAAO;GAAE;GAAQ;GAAU,SAAS;GAAa;GAAY;GAAW;;CAM1E,IAAI,aAAa;CACjB,MAAM,cAAc,IAAI,kBACrB,YAAY,OAAO,SAAS,KAAK;EAAE,OAAO;EAAY;EAAS,CAAC,GAChE,YAAY,OAAO,OAAO,KAAK;EAAE,OAAO;EAAY;EAAS,CAAC,CAChE;CASD,MAAM,UAAW,OAAuB;AACxC,MAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS;AACnD,eAAa;EACb,MAAM,SAAS,cAAc,QAAQ,OAAO;AAC5C,MAAI,WAAW,QAAW;GACxB,MAAM,QAAQ,OAAO,aAAa,UAAU,0BAA0B;GACtE,MAAM,UAAmB;IAAE;IAAO,SAAS,GAAG,MAAM,IAAI,MAAM,IAAI,OAAO;IAAO;AAChF,OAAI,CAAC,OAAO,aAAa;AACvB,WAAO,OAAO,KAAK,QAAQ;AAC3B;;AAEF,UAAO,SAAS,KAAK,QAAQ;;AAE/B,MAAI;AACF,YAAS,KAAKC,sCAAe,QAAQ,QAAQ,YAAY,CAAC;AAC1D,eAAY,KAAK,MAAM;WAChB,KAAK;AACZ,UAAO,OAAO,KAAK,uBAAuB,OAAO,IAAI,CAAC;;;AAI1D,QAAO,WAAW,SAAS;CAY3B,MAAM,6BAAa,IAAI,KAAa;CACpC,MAAM,gBAAgB,iBAAiC;EACrD,MAAM,QAAQ,YAAY;AAC1B,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,CAAC,WAAW,IAAI,aAAa,EAAE;AACjC,cAAW,IAAI,aAAa;AAC5B,aAAU,KACR,6BAA6B,aAAa,uCAC3C;;AAEH,SAAO;;AAET,KAAI;AACF,OAAK,MAAM,KAAKC,wCAAiB,SAAS,EAAE;GAC1C,MAAM,QAAQ,aAAa,EAAE,aAAa;GAC1C,MAAM,OAAO,EAAE,QAAQ,SAAY,EAAE,GAAG,WAAW,EAAE,IAAI,CAAC,IAAI,aAAa;GAK3E,MAAM,UAAmB;IAAE;IAAO,SAHhC,EAAE,QAAQ,SACN,EAAE,UACFC,2CAAoB,EAAE,MAAM,MAAM,OAAO,aAAa,EAAE,CAAC,CAAC;IACrB;AAC3C,cAAW,KAAK;IACd,UAAU,EAAE;IACZ;IACA,MAAM,EAAE,QAAQ,SAAY,WAAW,EAAE,YAAY,EAAE,IAAI;IAC3D;IACA;IACD,CAAC;AACF,OAAI,EAAE,aAAa,QAAS,QAAO,OAAO,KAAK,QAAQ;OAClD,QAAO,SAAS,KAAK,QAAQ;;UAE7B,KAAK;AAIZ,SAAO,OAAO,KAAK,EAAE,SAAS,oCAAoC,QAAQ,IAAI,IAAI,CAAC;;AAErF,QAAO;EAAE;EAAQ;EAAU,SAAS;EAAa;EAAY;EAAW;;;;;;;AAQ1E,MAAM,aAAa,MAAwB,EAAE,UAAU,SAAY,KAAK,IAAI,EAAE,MAAM;;;;;;;;;;;;;;AAepF,SAAS,iBACP,SACA,QACA,WACA,MACQ;CACR,MAAM,aAAa,QAAQ,QAAQ,MAAM,EAAE,UAAU,OAAU;CAC/D,MAAM,eAAe,QAAQ,QAAQ,MAAM,EAAE,UAAU,UAAa,EAAE,OAAO,SAAS,EAAE;CACxF,MAAM,cAAc,QAAQ,QAAQ,MAAM,EAAE,SAAS,SAAS,EAAE;CAIhE,IAAI;AACJ,KAAI,WAAW,OAAO,OAAW,QAAO,GAAG,KAAK,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG;UACxE,aAAa,OAAO,OAC3B,QAAO,GAAG,KAAK,aAAa,GAAG,CAAC,IAAI,UAAU,aAAa,GAAG,OAAO,GAAG,GAAG,aAAa,GAAG,OAAO,GAAG;UAC9F,UAAU,OAAO,OAAW,QAAO,UAAU;UAC7C,YAAY,OAAO,OAC1B,QAAO,GAAG,KAAK,YAAY,GAAG,CAAC,IAAI,UAAU,YAAY,GAAG,SAAS,GAAG,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ;KAE9G,QAAO;CAET,MAAM,SAAmB,EAAE;AAC3B,KAAI,WAAW,SAAS,EAAG,QAAO,KAAK,GAAG,WAAW,OAAO,6BAA6B;AACzF,KAAI,aAAa,SAAS,EAAG,QAAO,KAAK,GAAG,aAAa,OAAO,sBAAsB;AAGtF,KAAI,UAAU,SAAS,EAAG,QAAO,KAAK,GAAG,UAAU,OAAO,qBAAqB;AAC/E,KAAI,UAAU,YAAY,SAAS,EACjC,QAAO,KAAK,GAAG,YAAY,OAAO,mCAAmC;AAEvE,QAAO,sCAAsC,KAAK,IAAI,OAAO,KAAK,KAAK,CAAC;;AAG1E,SAAgB,eAAe,OAAwB,EAAE,EAAQ;CAC/D,MAAM,OAAO,KAAK,QAAQ,QAAQ,KAAK,MAAM,EAAE;CAC/C,MAAM,MAAM,KAAK,OAAO,QAAQ,IAAI,KAAK,QAAQ;CACjD,MAAM,WAAW,KAAK,YAAY,QAAQ,MAAM,KAAK,QAAQ;CAC7D,MAAM,OAAO,KAAK,QAAQ,QAAQ,KAAK,KAAK,QAAQ;;;;;;;;;;CAWpD,MAAM,cAAc,SAA0B;AAC5C,OAAK,MAAM,OAAO,MAAM;AACtB,OAAI,QAAQ,KAAM,QAAO;AACzB,OAAI,QAAQ,QAAQ,IAAI,WAAW,GAAG,KAAK,GAAG,CAAE,QAAO;;AAEzD,SAAO;;;;;;;;;;;;CAaT,MAAM,cAAc,YAA0B;AAC5C,WAAS,UAAU,QAAQ,MAAM,gBAAgB;AACjD,MAAI,WAAW,SAAS,CACtB,KACE,KAAK,UACH;GACE,QAAQ,WAAW,WAAW;GAC9B,QAAQ;GACR,OAAO,EAAE;GACT,KAAK;IAAE,UAAU;IAAG,QAAQ,CAAC,QAAQ;IAAE;GACxC,EACD,MACA,EACD,CACF;AAEH,OAAK,EAAE;;CAOT,IAAI;CACJ,IAAI;AACJ,KAAI;EACF,MAAM,kCAAmB;GACvB,MAAM;GACN,SAAS;IACP,QAAQ;KAAE,MAAM;KAAW,SAAS;KAAO;IAC3C,MAAM;KAAE,MAAM;KAAW,SAAS;KAAO;IACzC,MAAM;KAAE,MAAM;KAAW,OAAO;KAAK,SAAS;KAAO;IACtD;GACD,QAAQ;GACR,kBAAkB;GACnB,CAAC;AACF,WAAS,OAAO;AAChB,UAAQ,OAAO;UACR,KAAK;AAGZ,aADY,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAC7C;AACf;;AAGF,KAAI,OAAO,SAAS,MAAM;AAKxB,MAAI,OAAO,SAAS,OAAO,KAAK,UAAU,EAAE,MAAM,eAAe,EAAE,MAAM,EAAE,GAAG,cAAc;AAC5F,OAAK,EAAE;AACP;;CAEF,MAAM,SAAS,OAAO,WAAW;CACjC,MAAM,OAAO,OAAO,SAAS;AAE7B,KAAI,MAAM,WAAW,GAAG;AACtB,aAAW,0BAA0B;AACrC;;CAeF,MAAM,UAA0B,EAAE;AAClC,MAAK,MAAM,QAAQ,OAAO;AAKxB,MAAI,cAAc,KAAK,KAAK,EAAE;AAC5B,WAAQ,KAAK;IACX,MAAM;IACN,OACE;IACH,CAAC;AACF;;EAEF,IAAI;AACJ,MAAI;AACF,iCAAiB,KAAK;WACf,KAAK;AACZ,OAAK,IAA8B,SAAS,SAAU,SAAQ,KAAK,EAAE,MAAM,MAAM,CAAC;OAC7E,SAAQ,KAAK;IAAE,MAAM;IAAM,OAAO,mBAAmB,QAAQ,IAAI;IAAI,CAAC;AAC3E;;AAEF,MAAI,CAAC,MAAM,aAAa,EAAE;AACxB,OAAI,MAAM,QAAQ,CAAE,SAAQ,KAAK,EAAE,MAAM,MAAM,CAAC;OAC3C,SAAQ,KAAK;IAAE,MAAM;IAAM,OAAO;IAAsB,CAAC;AAC9D;;EAEF,MAAM,UAAU,iBAAiB,MAAM,EAAE,CAAC;AAG1C,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAQ,KAAK;IAAE,MAAM;IAAM,OAAO;IAA6C,CAAC;AAChF;;AAEF,UAAQ,KAAK,GAAG,QAAQ;;CAU1B,MAAM,cAAc,gCAAiC,KAAK;CAC1D,MAAM,+BAAe,IAAI,KAAqB;AAC9C,MAAK,MAAM,UAAU,QACnB,cAAa,IAAI,WAAW,OAAO,KAAK,GAAG,aAAa,IAAI,WAAW,OAAO,KAAK,CAAC,IAAI,KAAK,EAAE;CACjG,MAAM,gCAAgB,IAAI,KAAqB;CAC/C,MAAM,eAAe,SAAyB;EAC5C,MAAM,WAAW,cAAc,IAAI,WAAW,KAAK,CAAC,IAAI,KAAK;AAC7D,gBAAc,IAAI,WAAW,KAAK,EAAE,QAAQ;AAC5C,SAAO;;;;;;;;;;CAUT,MAAM,eAAe,YAClB,aAAa,IAAI,WAAW,OAAO,KAAK,CAAC,IAAI,KAAK,IAC/C,GAAG,OAAO,KAAK,GAAG,OAAO,QAAQ,KACjC,OAAO;CAEb,MAAM,UAAwB,EAAE;CAIhC,MAAM,QAAmB,EAAE;CAC3B,MAAM,aAAsD,EAAE;CAU9D,MAAM,iCAAiB,IAAI,KAAqD;CAChF,MAAM,0BAAU,IAAI,KAAyB;CAG7C,MAAM,YAAsB,EAAE;CAC9B,MAAM,WAAW,QAAgB,OAAe,UAAkB,SAChE;EAAC;EAAQ;EAAO;EAAU;EAAK,CAAC,KAAK,KAAS;AAEhD,MAAK,MAAM,UAAU,SAAS;AAG5B,MAAI,OAAO,YAAY,QAAW;AAChC,WAAQ,KAAK;IACX,MAAM,OAAO;IACb,SAAS,YAAY,OAAO,KAAK;IACjC,UAAU;IACV,QAAQ,EAAE;IACV,UAAU,EAAE;IACZ,SAAS,OAAO;IACjB,CAAC;AACF;;AAEF,MAAI,OAAO,UAAU,QAAW;AAC9B,WAAQ,KAAK,YAAY,OAAO,MAAM,YAAY,OAAO,KAAK,EAAE,OAAO,MAAM,CAAC;AAC9E;;EAGF,IAAI;EACJ,IAAI,WAAsB,EAAE;EAC5B,IAAI,UAAoB,EAAE;EAC1B,IAAI,aAAgC,EAAE;EACtC,IAAI,gBAA0B,EAAE;EAChC,MAAM,UAAU,YAAY,OAAO,KAAK;AACxC,MAAI;AACF,IAAC,CACC,QACA,UACA,SACA,YACA,WAAW,iBACT,gBAAgB,OAAO,MAAM,QAAQ;WAClC,KAAK;AAEZ,YAAS,YAAY,OAAO,MAAM,SAAS,sBAAsB,QAAQ,IAAI,GAAG;;AAElF,UAAQ,KAAK,OAAO;AAGpB,YAAU,KAAK,GAAG,cAAc,KAAK,MAAM,GAAG,YAAY,OAAO,CAAC,IAAI,IAAI,CAAC;EAC3E,MAAM,SAAS,QAAQ;AACvB,UAAQ,IAAI,QAAQ,OAAO;AAK3B,OAAK,MAAM,YAAY,YAAY;GACjC,MAAM,MAAM,QAAQ,QAAQ,SAAS,OAAO,SAAS,UAAU,SAAS,KAAK;GAC7E,MAAM,SAAS,eAAe,IAAI,IAAI,IAAI,EAAE;AAC5C,UAAO,KAAK;IACV,SAAS,SAAS;IAClB,MAAM,SAAS,KAAK,KAAK,QAAQ,GAAG,OAAO,GAAG,MAAM;IACrD,CAAC;AACF,kBAAe,IAAI,KAAK,OAAO;;AAEjC,OAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;GAKxC,MAAM,QAAQ,QAAQ;AACtB,OAAI,UAAU,OACZ,WAAU,KACR,GAAG,YAAY,OAAO,CAAC,sBAAsB,EAAE,+FAEhD;AAEH,SAAM,KAAK,SAAS,GAAG;AACvB,cAAW,KAAK;IAAE;IAAQ,OAAO,SAAS;IAAG,CAAC;;;CAUlD,IAAI,mBAAmB;CAKvB,MAAM,uBAAuB,QAAQ,MAAM,MAAM,EAAE,UAAU,UAAa,EAAE,OAAO,SAAS,EAAE;AAC9F,KAAI,MAAM,WAAW,GAMnB;MAAI,CAAC,sBAAsB;AACzB,aAAU,KACR,0GACD;AACD,sBAAmB;;QAEhB;EAIL,MAAM,YAAY,eAA+B;GAC/C,MAAM,SAAS,WAAW;AAC1B,UAAO,WAAW,SACd,OAAO,WAAW,GAClB,GAAG,YAAY,OAAO,OAAO,CAAC,IAAI,OAAO;;EAI/C,MAAM,YAAY,eAA+B;GAC/C,MAAM,SAAS,WAAW;AAC1B,OAAI,WAAW,OAAW,QAAO,SAAS;GAC1C,MAAM,SAAS,QAAQ,IAAI,OAAO,OAAO;AACzC,UAAO,WAAW,SAAY,SAAS,eAAe,GAAG,OAAO,GAAG,OAAO;;EAK5E,MAAM,mBAAmB,QAA+B;AACtD,OAAI,IAAI,SAAS,yBACf,QAAO,0BAA0B,IAAI,YAAY,sBAAsB,SAAS,IAAI,QAAQ;GAK9F,MAAM,OAAO;AACb,UAAO,IAAI,gBAAgB,IAAI,iBAC3B,GAAG,KAAK,aAAa,SAAS,IAAI,YAAY,KAC9C,GAAG,KAAK,uCAAuC,SAAS,IAAI,YAAY,CAAC,WAAW,SAAS,IAAI,eAAe;;AAOtH,MAAI;AACF,QAAK,MAAM,KAAKD,wCAAiB,MAAM,EAAE;IACvC,MAAM,SAAS,WAAW,EAAE;AAC5B,QAAI,WAAW,QAAW;AAMxB,eAAU,KACR,mDAAmD,EAAE,aAAa,IAAI,EAAE,UACzE;AACD;;IAEF,MAAM,SAAS,QAAQ,IAAI,OAAO,OAAO;AACzC,QAAI,WAAW,QAAW;AAIxB,eAAU,KAAK,gDAAgD,EAAE,UAAU;AAC3E;;IAEF,MAAM,OAAO,EAAE,QAAQ,SAAY,WAAW,EAAE,YAAY,EAAE,IAAI;IAClE,MAAM,aAAa,EAAE,QAAQ,SAAY,EAAE,GAAG,WAAW,EAAE,IAAI,CAAC,IAAI,SAAS;IAC7E,MAAM,UAAU,eAAe,EAAE,QAAQ,SAAY,EAAE,UAAU,gBAAgB,EAAE,IAAI;IACvF,MAAM,UAAU,eACb,IAAI,QAAQ,QAAQ,OAAO,OAAO,EAAE,UAAU,KAAK,CAAC,EACnD,OAAO;AACX,QAAI,YAAY,QAAW;AAUzB,SAAI,EAFF,QAAQ,KAAK,WAAW,WAAW,UACnC,QAAQ,KAAK,OAAO,QAAQ,MAAM,WAAW,WAAW,GAAG,EAClD,SAAQ,QAAQ,UAAU;AACrC;;AAEF,QAAI,EAAE,aAAa,QAAS,QAAO,OAAO,OAAO,KAAK;KAAE,OAAO,OAAO;KAAO;KAAS,CAAC;QAClF,QAAO,OAAO,SAAS,KAAK;KAAE,OAAO,OAAO;KAAO;KAAS,CAAC;;WAE7D,KAAK;AACZ,aAAU,KAAK,iCAAiC,QAAQ,IAAI,GAAG;;;CAInE,MAAM,WAAW,QAAQ,MAAM,MAAM,EAAE,UAAU,OAAU;CAC3D,MAAM,YAAY,QAAQ,MAAM,MAAM,EAAE,OAAO,SAAS,EAAE,IAAI,UAAU,SAAS;CACjF,MAAM,cAAc,QAAQ,MAAM,MAAM,EAAE,SAAS,SAAS,EAAE;CAC9D,MAAM,SAAS,YAAY,aAAc,UAAU;CAKnD,MAAM,aAAa,SAAS,WAAW;AAEvC,KAAI,MAAM;AACR,MACE,KAAK,UACH;GAAE;GAAQ;GAAQ,OAAO;GAAS,KAAK;IAAE,UAAU,MAAM;IAAQ,QAAQ;IAAW;GAAE,EACtF,MACA,EACD,CACF;AAGD,MAAI,OAAQ,UAAS,iBAAiB,SAAS,QAAQ,WAAW,YAAY,CAAC;QAC1E;EACL,MAAM,KAAK;EAKX,MAAM,cAAc,GAAY,SAAsC;AACpE,OAAI,EAAE,WAAW,OAAW,MAAK,OAAO,EAAE,SAAS;;AAErD,OAAK,MAAM,KAAK,SAAS;GACvB,MAAM,OAAO,YAAY,EAAE;AAG3B,OAAI,EAAE,YAAY,QAAW;AAC3B,QAAI,GAAG,KAAK,aAAa,EAAE,QAAQ,GAAG;AACtC;;AAQF,QAAK,MAAM,KAAK,EAAE,QAAQ;AACxB,aAAS,GAAG,KAAK,YAAY,GAAG,EAAE,GAAG,EAAE,UAAU;AACjD,eAAW,GAAG,SAAS;;AAEzB,QAAK,MAAM,KAAK,EAAE,UAAU;AAC1B,eAAW,GAAG,KAAK,cAAc,GAAG,EAAE,GAAG,EAAE,UAAU;AACrD,eAAW,GAAG,WAAW;;AAE3B,OAAI,EAAE,OAAO,WAAW,KAAK,EAAE,SAAS,WAAW,EAOjD,KAAI,EAAE,aAAa,KAAK,QAAQ;IAC9B,MAAM,MAAM,mBAAmB,4BAA4B;AAC3D,QAAI,GAAG,KAAK,IAAI,EAAE,SAAS,gCAAgC,MAAM;SAEjE,KAAI,GAAG,KAAK,QAAQ,EAAE,SAAS,cAAc;OAG/C,KACE,GAAG,KAAK,IAAI,EAAE,SAAS,eAAe,EAAE,OAAO,OAAO,aAAa,EAAE,SAAS,OAAO,aACtF;;AAML,OAAK,MAAM,KAAK,UAAW,UAAS,WAAW,IAAI;;AAGrD,MAAK,SAAS,IAAI,EAAE"}
+{"version":3,"file":"validate-cli.cjs","names":["Logger","hasMcpFakesKey","validateMcpFakes","entryToFixture","MisbehaviorConfigError","validateFixtures","renderValidationRef","sep","McpFakeStore","McpFakesAddError","build","plainText"],"sources":["../src/validate-cli.ts"],"sourcesContent":["/**\n * `aimock validate` subcommand — offline fixture lint.\n *\n * Usage: `aimock validate [--strict] [--json] [--] <path> [more paths ...]`\n *\n * Each path is a fixture file or a directory; directories are walked\n * recursively for `*.json` in the same order `--fixtures <dir>` loads them.\n * For each file: read bytes, JSON-parse, require a top-level\n * `{ \"fixtures\": [...] }` envelope, convert the entries (surfacing the\n * per-entry conversion warnings the server logs), then run the\n * `validateFixtures` rules over that file's entries alone, so its findings\n * are attributed to it.\n *\n * `validateFixtures` is then run a SECOND time over the union of every\n * successfully-parsed file's entries, in load order. Its rules are not all\n * per-fixture: `duplicate userMessage` and the catch-all ordering check look\n * at the other fixtures in the array they are given. Run per file those two\n * cannot see across files, so the findings the union pass adds — a\n * `userMessage` duplicated in two files, a catch-all that is last in its own\n * file but not last overall — are the cross-file ones. They are reported\n * against the file that owns the fixture, with the other file named in the\n * message; findings the per-file pass already made are not repeated.\n *\n * How this compares to the server's `--validate-on-load`, in both directions:\n *  - Stricter: there an unreadable, unparseable or wrong-shape file is\n *    non-fatal — it warns on stderr, contributes zero fixtures, and startup\n *    continues as long as the run loaded at least one fixture from somewhere.\n *    Here every such file fails the run — with one deliberate exception, for\n *    parity: a `*.json` file the WALK turned up that parses but carries no\n *    top-level `fixtures` array is not a fixture file (this package's own\n *    `fixtures/` tree holds aimock config files alongside fixtures), and is\n *    passed over with a note, exactly as the loader passes over it. A file\n *    the caller NAMES is still validated, wrong shape and all. Two walk\n *    hazards the server does not\n *    survive are refused outright rather than mirrored: a `*.json` path that\n *    is not a regular file (a FIFO, a socket, a device) is a per-file error\n *    here, where the server's `readFileSync` blocks on it forever; and a\n *    directory symlink that points back at a directory already being walked\n *    is reported once as a cycle, where the server recurses through it until\n *    the kernel returns ELOOP (~32 levels deep) and loads those levels'\n *    fixtures over and over. Malformed scalar or array matches are rejected\n *    before conversion, as they are by the server's fixture loader. The lint\n *    reports an entry error and continues validating valid siblings.\n *  - Equal: the `validateFixtures` rules themselves, because of the union\n *    pass above, and the zero-fixture rule — a run whose inputs yield no\n *    fixtures at all is an error here, matching the server's \"No fixtures\n *    loaded and validation/strict mode is enabled — aborting.\" A single\n *    `{\"fixtures\": []}` file alongside files that do load fixtures is an\n *    error in neither place. Equal too in what the inputs expand to: a path\n *    named twice, and a directory reached both directly and through an\n *    acyclic symlink to it, are validated once per mention, exactly as the\n *    server loads one `--fixtures` source per mention — so the duplicate\n *    fixtures that produces are reported here as the server reports them,\n *    one finding per (fixture, rule), the same count the server logs.\n *\n * A path mentioned more than once in one run is therefore several DIFFERENT\n * loads that happen to share a name, and printing that bare name for each of\n * them made them indistinguishable: a warning read as if a fixture shadowed\n * itself. Each mention is numbered, and every rendering surface carries that\n * number — human lines and their summary, cross-file references, and a\n * `mention` field on each `--json` `files[]` entry. The `<path>[<n>]` suffix\n * is printed only for a path that IS mentioned more than once, because for\n * every other path the name alone already names one load; the `--json` field\n * is always present so a consumer never has to infer it.\n *  - Weaker: this is a static lint. It never starts a server, so it covers\n *    nothing about binding, remote `--fixtures <url>` sources (it reads local\n *    paths only), `--watch` reloads, or any runtime behaviour.\n *\n * Nothing the filesystem or a fixture entry can do is allowed to escape this\n * function: a malformed entry, an unreadable path, a stat failure or a symlink\n * cycle each becomes a per-file `[error]` in the report, and a crash inside\n * either `validateFixtures` pass becomes a file-level or run-level `[error]`,\n * so the run still emits a report (valid JSON under `--json`) and still exits\n * 1. Run-level errors print after the per-file output, and the \"no fixtures\n * loaded\" one is withheld when a file already reported why it loaded none.\n *\n * Prints human lines by default (`file: [error|warning] #i message`) or a\n * JSON document with `--json`. Everything that contributes to a non-zero exit\n * goes to stderr, so a CI log's stderr always shows the reason; `--json` keeps\n * stdout to the report alone and puts the reason on stderr. The two modes\n * report the same facts: a fatal file is one record that both the stdout\n * tally and `files[].errors` count, and `--json` emits a document for a usage\n * error too — stdout is never empty on a `--json` run, whatever failed it.\n * A path naming a remote source (`https://...`) is refused as unsupported\n * rather than read as a filename. Exit codes:\n * 0 = clean (warnings allowed unless `--strict`), 1 = everything that fails\n * the run — errors / unreadable / unparseable / wrong shape / unwalkable path\n * / no fixtures loaded at all, and a usage error (no paths or an unknown\n * option) too, because every other CLI surface in this package exits 1 on a\n * usage error and nothing here uses sysexits codes. `--help` is handled\n * separately and exits 0.\n */\n\nimport { readFileSync, readdirSync, realpathSync, statSync } from \"node:fs\";\nimport type { Stats } from \"node:fs\";\nimport { join, relative, resolve, sep } from \"node:path\";\nimport { format, parseArgs } from \"node:util\";\nimport {\n  entryToFixture,\n  enableHeldFixtureMisbehavior,\n  markFixtureResponsesToolsExtended,\n  FixtureLoadError,\n  MisbehaviorConfigError,\n  hasMcpFakesKey,\n  renderValidationRef,\n  validateFixtures,\n} from \"./fixture-loader.js\";\nimport type { ValidationRef } from \"./fixture-loader.js\";\nimport { Logger } from \"./logger.js\";\nimport { McpFakesAddError, McpFakeStore, validateMcpFakes } from \"./mcp-fakes.js\";\nimport type { McpFakeIssue } from \"./mcp-fakes.js\";\nimport { build, msg, plainText } from \"./message-text.js\";\nimport type { Fixture, FixtureFile, McpFakeSource } from \"./types.js\";\n\nexport const VALIDATE_HELP = `\nUsage: aimock validate [options] [--] <path> [more paths ...]\n\nValidate aimock fixture files offline. Each path is a fixture file or a\ndirectory of them (walked recursively for *.json, like --fixtures <dir>).\nFiles are checked one at a time and then as one combined set, so the rules\nthat span files -- a userMessage duplicated across two files, a catch-all\nthat is not last overall -- are reported here as the server reports them.\n\nWhere the server's --validate-on-load differs: there an unreadable,\nunparseable or wrong-shape file only warns and startup continues, while here\nevery such file fails the run. The one exception, which matches the loader: a\n*.json file found by WALKING a directory that has no top-level \"fixtures\"\narray is not a fixture file (an aimock config, say) and is skipped with a\nnote -- a file you name on the command line is still validated. As on the\nserver, a run that loads no fixtures at all is an error. This is a static lint: it starts no server and reads\nlocal paths only (no remote --fixtures URL).\n\nA path given twice is validated twice, because the server loads one set of\nfixtures per --fixtures it is given; the duplicate fixtures that produces are\nreported as the server reports them, one finding per fixture and rule. Such a\npath is printed as <path>[<n>], numbering its mentions from 1, so each load\nand every reference to its fixtures names one of them (--json reports the\nnumber as \"mention\" on every file). A directory symlink pointing back at a\ndirectory already being walked is a symlink cycle and fails the run; one\npointing anywhere else is followed, as the server follows it.\n\nOptions:\n      --strict          Treat warnings as errors (exit 1 on warnings)\n      --json            Emit a JSON report instead of human lines\n      --misbehavior     Check fixture misbehavior keys, as the server does with\n                        --misbehavior (without it they are not read)\n      --responses-tools <legacy|extended>\n                        With \"extended\", check match.toolNamespace,\n                        customToolCalls and responsesBlocks, as a server with\n                        --responses-tools extended reads them (default\n                        \"legacy\": they are not read)\n  -h, --help            Show this help message\n      --                Stop option parsing; every later argument is a path\n                        (use this for a path that begins with \"-\")\n\nExit codes:\n  0  all files valid (warnings allowed unless --strict)\n  1  anything that failed the run: validation errors; a malformed fixture\n     entry; an unreadable or unparseable file; a named path of the wrong\n     shape (a walked one is skipped instead); a path that\n     cannot be stat'd, read or walked (including a symlink cycle, or a\n     *.json path that is not a regular file); a directory holding no *.json;\n     no fixtures loaded from any input; --strict warnings; or a usage error\n     (no paths given, or an unknown option)\n`.trim();\n\nexport interface ValidateCliDeps {\n  argv?: string[];\n  log?: (msg: string) => void;\n  logError?: (msg: string) => void;\n  exit?: (code: number) => void;\n}\n\n/**\n * One finding against a file. `index` is the fixture entry it belongs to and is\n * ABSENT when the finding is about the file as a whole (a crash inside the\n * validator, say) rather than an entry — attributing such a finding to entry #0\n * blames a fixture that may be perfectly valid. `detail` carries the raw\n * underlying text (a thrown error's message) for a finding whose `message` is a\n * human-facing rephrasing of it; the `--json` report carries it as its own\n * field and the human report prints it on an indented continuation line.\n */\ninterface Finding {\n  index?: number;\n  message: string;\n  detail?: string;\n}\n\ninterface FileReport {\n  file: string;\n  /**\n   * Which mention of `file` this report is, 1-based, in the order the run\n   * expanded its paths. It is the only thing that tells two reports of the\n   * same path apart — they are separate loads with separate findings.\n   */\n  mention: number;\n  fixtures: number;\n  /**\n   * `mcpFakes` blocks this file loaded (F8); set only for a file that has a\n   * top-level `mcpFakes` key.\n   */\n  mcpFakeBlocks?: number;\n  errors: Finding[];\n  warnings: Finding[];\n  fatal?: string;\n  /** Set when the walk passed the file over; see `nonFixtureSkipReason`. */\n  skipped?: string;\n}\n\n/**\n * A rule finding the per-file pass made, with what the cross-file pass needs\n * to recognise its own restatement of it.\n *\n * Both passes run the same rules, and each rule fires at most once per fixture\n * — which is why the server, whose single pass IS the union pass, logs exactly\n * one line per (fixture, rule). So the SITE identifies the finding: the file\n * (supplied by the caller, the only thing that knows the file id), the entry\n * index, the severity and the rule. Two findings at one site can differ only\n * in which other fixtures they name, and the union pass's answer to that is\n * the authoritative one — it sees every file — so its wording REPLACES the\n * per-file wording rather than printing beside it, which is what made a\n * repeated path report one duplicate twice.\n *\n * `refs` holds the entry indices this finding names, so a restatement that\n * names the same fixtures can be recognised as adding nothing and leave the\n * per-file wording alone. Matching on the rendered message with its digits\n * masked (a previous scheme) both collapsed distinct findings that happened to\n * mask alike and hid genuine cross-file ones, because a union index and a\n * file-local index mask to the same \"#\".\n *\n * `finding` is the very object in the report, so an upgrade is an in-place\n * rewrite that keeps the finding in the position it was reported at.\n */\ninterface FindingIdentity {\n  severity: \"error\" | \"warning\";\n  index: number;\n  /** The rule id for a ref-carrying finding, else its verbatim message. */\n  kind: string;\n  /** Entry indices this finding names, within the SAME file. */\n  refs: number[];\n  /** The finding as it sits in the file's report, for an in-place upgrade. */\n  finding: Finding;\n}\n\n/** The indices a ref names, in a fixed order, for identity purposes. */\nfunction refIndices(ref: ValidationRef): number[] {\n  return ref.rule === \"duplicate-user-message\"\n    ? [ref.shadows]\n    : [ref.shadowsFrom, ref.shadowsThrough];\n}\n\n/**\n * A path argument that names a remote source rather than a local file: any\n * `scheme://` prefix, not just http(s), so `ftp://` and friends get the same\n * explanation instead of a filesystem error. A Windows drive letter (\"C:\\\\x\")\n * has no `//` and is not matched.\n */\nconst REMOTE_SOURCE = /^[a-z][a-z0-9+.-]*:\\/\\//i;\n\n/** Render an unknown thrown value as a one-line message. */\nfunction errText(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n\n/**\n * Record why a file produced no report at all. A fatal is ONE fact, so it is\n * written once, here, into both shapes that report it: `fatal`, which names\n * the reason, and `errors`, which is what every tally — the human summary\n * line, the `--json` consumer counting `files[].errors` — actually counts.\n * Set on `fatal` alone, the two modes disagreed: stdout said \"1 error(s)\"\n * while the same run's JSON said `\"errors\": []`, so a CI script adding up the\n * JSON saw a clean run that had exited 1.\n *\n * The finding carries no `index`: a fatal is about the file, not an entry\n * (see `Finding.index`).\n */\nfunction setFatal(report: FileReport, message: string): void {\n  report.fatal = message;\n  report.errors.push({ message });\n}\n\n/** A file that never got as far as a report, with its fatal already recorded. */\nfunction fatalReport(file: string, mention: number, message: string): FileReport {\n  const report: FileReport = { file, mention, fixtures: 0, errors: [], warnings: [] };\n  setFatal(report, message);\n  return report;\n}\n\n/**\n * Logger that routes `warn` AND `error` into caller-supplied sinks instead of\n * the console, so the per-entry conversion diagnostics `entryToFixture` emits\n * land in the report rather than being dropped on the floor — and, under\n * `--json`, never interleave with the JSON document on stdout/stderr.\n * Exported for tests only; it is not part of the package's public API.\n * `info`/`debug` are inert: they are already below this logger's \"warn\" level,\n * and silencing them explicitly keeps future call sites off stdout too.\n */\nexport class CollectingLogger extends Logger {\n  private readonly warnSink: (msg: string) => void;\n  private readonly errorSink: (msg: string) => void;\n\n  constructor(warnSink: (msg: string) => void, errorSink: (msg: string) => void) {\n    super(\"warn\");\n    this.warnSink = warnSink;\n    this.errorSink = errorSink;\n  }\n\n  /**\n   * Serialise exactly as the sink this logger replaces does — byte for byte.\n   * `Logger` writes `console.warn(\"[aimock]\", ...args)`, and console's\n   * formatting IS `util.format`, so the call it makes is\n   * `format(\"[aimock]\", ...args)`: `\"[aimock]\"` is the FORMAT STRING and holds\n   * no specifiers, which is what makes a caller's own `%s`/`%d` inert and its\n   * arguments plain trailing values. Calling `format(...args)` instead\n   * promoted the caller's message into the format slot — so a message that\n   * happened to contain `%s` (a fixture path, say) swallowed the next\n   * argument — and dropped the `[aimock]` prefix, leaving the report and the\n   * server's own stderr disagreeing about the same diagnostic.\n   * `util.inspect` still renders object arguments readably, which is what\n   * `String(a)` could not do.\n   */\n  private static format(args: unknown[]): string {\n    return format(\"[aimock]\", ...args);\n  }\n\n  override warn(...args: unknown[]): void {\n    this.warnSink(CollectingLogger.format(args));\n  }\n\n  override error(...args: unknown[]): void {\n    this.errorSink(CollectingLogger.format(args));\n  }\n\n  override info(...args: unknown[]): void {\n    void args; /* suppressed: never write to stdout from inside a --json run */\n  }\n\n  override debug(...args: unknown[]): void {\n    void args; /* suppressed: never write to stdout from inside a --json run */\n  }\n}\n\n/**\n * One product of the walk: a `*.json` file to validate, or — with `fatal`\n * set — a path that could not be walked, reported as its own per-file error,\n * or — with `skipped` set — a `*.json` file the walk found that is not a\n * fixture file at all and is passed over (see `nonFixtureSkipReason`).\n */\ninterface CollectEntry {\n  file: string;\n  fatal?: string;\n  skipped?: string;\n  /**\n   * The entry-id `source` (I6) of the file's `mcpFakes` blocks: its path\n   * relative to the walked directory, with `/` separators, as\n   * `loadFixturesFromDirWithServices` derives it. Absent for a named file,\n   * whose source is its path as given.\n   */\n  source?: string;\n}\n\n/**\n * Why a `*.json` file the WALK turned up is not a fixture file, or\n * `undefined` if it is one (or if the question cannot be answered cheaply).\n *\n * A directory is not a fixture directory: this package ships `fixtures/`\n * holding both fixture files and eight aimock CONFIG files — the six\n * `fixtures/examples/**\\/*-config.json`, `full-suite.json`, and\n * `agui/agui-text-response.json`, whose AG-UI fixtures sit NESTED under\n * `agui` where `--fixtures` cannot see them — which is why the documented\n * `aimock validate ./fixtures/` exited 1 on the package's own tree. The\n * server has the same mixture to deal with and passes over it:\n * `loadFixtureFile` warns \"Missing or invalid \\\"fixtures\\\" array\", returns no\n * fixtures, and startup continues. This mirrors that skip, so a walked\n * directory reports on the fixture files in it and says what it passed over.\n *\n * Non-fixture means the file carries no top-level `fixtures` key at all (or\n * is an aimock config). A `fixtures` key that is present but not an array is\n * a MALFORMED fixture file and still fails the run, as the loader would refuse\n * it. The skip applies ONLY to files the walk discovered — a path the caller named explicitly is still validated, and a\n * wrong-shape file there still fails the run, because naming a file is\n * asking about that file.\n *\n * A file carrying an aimock config section (`configSections`) is named as\n * what it is rather than by what it lacks, because \"not a fixture file\" on\n * its own is read as \"holds no fixtures\" — false of `agui`-sectioned configs,\n * which hold AG-UI fixtures that `aimock --config`, not `--fixtures`, serves.\n *\n * Unreadable and unparseable are deliberately NOT skips. Returning\n * `undefined` for them hands the file to `validateOneFile`, which reports the\n * real read error or JSON syntax error — a defect in any `*.json` file, and\n * one no config file has an excuse for either.\n */\nfunction nonFixtureSkipReason(file: string): string | undefined {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(readFileSync(file, \"utf-8\")) as unknown;\n  } catch {\n    return undefined;\n  }\n  // F6: a top-level `mcpFakes` key makes it a fixture file (fakes-only or not).\n  // D2: checked before the config sections, because the loader loads the\n  // fakes of any file with the key, config-shaped or not.\n  if (hasMcpFakesKey(parsed)) return undefined;\n  const asConfig = aimockConfigDescription(parsed);\n  if (asConfig !== undefined) return `not a fixture file — ${asConfig}`;\n  // A present `fixtures` key of the wrong shape is a MALFORMED fixture file,\n  // not a non-fixture file: hand it to `validateOneFile`, which fails it the\n  // way the same file fails when named.\n  if (typeof parsed === \"object\" && parsed !== null && \"fixtures\" in parsed) return undefined;\n  return 'not a fixture file — no top-level \"fixtures\" key';\n}\n\n/**\n * The mock sections of `AimockConfig` (config-loader.ts). An object carrying\n * any of them is an aimock config file: `aimock --config <path>` starts a\n * server from it, while `--fixtures <path>` loads nothing from it.\n */\nconst CONFIG_SECTIONS = [\"llm\", \"mcp\", \"a2a\", \"agui\", \"vector\", \"services\"] as const;\n\n/**\n * What a parsed-but-not-fixture-shaped JSON document IS, when it is an aimock\n * config file, or `undefined` when it is not one. Used by both the walk's skip\n * note and the fatal a NAMED file of that shape gets, so the two surfaces\n * describe the same file the same way. The sections found are listed, so an\n * `agui` config is never described as a file holding no fixtures — it holds\n * AG-UI ones, nested where the fixture loader does not look.\n */\nfunction aimockConfigDescription(parsed: unknown): string | undefined {\n  if (typeof parsed !== \"object\" || parsed === null) return undefined;\n  const doc = parsed as Record<string, unknown>;\n  const sections = CONFIG_SECTIONS.filter((key) => typeof doc[key] === \"object\" && doc[key]);\n  if (sections.length === 0) return undefined;\n  return `an aimock config file (${sections.join(\", \")}), which \"aimock --config\" serves and \"--fixtures\" does not load`;\n}\n\n/**\n * Collect `*.json` files under `dirPath`, recursing into subdirectories.\n * Mirrors `loadFixturesFromDir`: within a directory the `*.json` files come\n * first in sorted order, then its subdirectories in sorted order, so the\n * reported order matches the server's load order, and the same stat-error\n * handling — a vanished entry (ENOENT) is skipped silently, every other\n * failure is surfaced. Unlike the loader, which only warns, each surfaced\n * failure becomes a `fatal` entry that fails the run, and it is emitted in\n * walk position (an unreadable subdirectory is reported where that\n * subdirectory was reached, not after every file in the tree) so the report\n * reads in encounter order. Entries that are neither directories nor\n * `*.json` files are ignored, as they are by the loader.\n *\n * `ancestors` holds the real paths of the directories this call is nested\n * inside. A directory whose real path is one of them closes a symlink cycle\n * and is reported instead of walked; the server has no such guard and\n * recurses through the cycle until the kernel returns ELOOP. A repeat visit\n * that is NOT an ancestor — `root/link -> root/sub` alongside `root/sub` — is\n * no cycle: it is walked again, because the server walks it again and loads\n * those fixtures twice.\n *\n * A `*.json` entry that is not a regular file (a FIFO, a socket, a device)\n * is a `fatal` entry rather than a target, because reading it is what the\n * containment promise above cannot keep: `readFileSync` on a FIFO with no\n * writer blocks forever, as it does on the server.\n */\nfunction collectJsonFiles(\n  dirPath: string,\n  ancestors: string[],\n  out: CollectEntry[] = [],\n): CollectEntry[] {\n  let realPath: string;\n  try {\n    realPath = realpathSync(dirPath);\n  } catch (err) {\n    out.push({ file: dirPath, fatal: `Could not resolve directory: ${errText(err)}` });\n    return out;\n  }\n  if (ancestors.includes(realPath)) {\n    out.push({\n      file: dirPath,\n      fatal: `Symlink cycle detected: already walking ${realPath}`,\n    });\n    return out;\n  }\n\n  let names: string[];\n  try {\n    names = readdirSync(dirPath);\n  } catch (err) {\n    out.push({ file: dirPath, fatal: `Could not read directory: ${errText(err)}` });\n    return out;\n  }\n\n  // Sort the whole entry list, not just the `*.json` names, so a stat failure\n  // or a non-regular `*.json` lands at a deterministic place in the report\n  // whatever order the filesystem hands entries back in.\n  const subdirs: string[] = [];\n  for (const name of [...names].sort()) {\n    const fullPath = join(dirPath, name);\n    let stats: Stats;\n    try {\n      stats = statSync(fullPath);\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") {\n        out.push({ file: fullPath, fatal: `Could not stat: ${errText(err)}` });\n      }\n      continue;\n    }\n    if (stats.isDirectory()) subdirs.push(name);\n    else if (!name.endsWith(\".json\")) continue;\n    else if (stats.isFile()) {\n      const skipped = nonFixtureSkipReason(fullPath);\n      out.push(skipped === undefined ? { file: fullPath } : { file: fullPath, skipped });\n    } else out.push({ file: fullPath, fatal: \"Not a regular file\" });\n  }\n\n  const chain = [...ancestors, realPath];\n  for (const sub of subdirs) collectJsonFiles(join(dirPath, sub), chain, out);\n  return out;\n}\n\n/** The entry shape the loader and the server both assume, quoted verbatim. */\nconst ENTRY_SHAPE = 'every entry needs { \"match\": { ... }, \"response\": { ... } }';\n\n/** Name a value the way a fixture author would read it back in their JSON. */\nfunction gotText(value: unknown): string {\n  if (value === null) return \"null\";\n  if (value === undefined) return \"absent\";\n  if (Array.isArray(value)) return \"an array\";\n  return `a ${typeof value}`;\n}\n\n/**\n * A shape defect in a raw fixture entry, classified BEFORE conversion.\n *\n * Classifying before conversion gives known malformed shapes an actionable\n * explanation while leaving unexpected conversion failures to the backstop.\n */\ntype EntryDefect =\n  /** `entryToFixture` would throw: report it and skip the entry. */\n  | { severity: \"error\"; convertible: false; why: string }\n  /** Converts, but not into the fixture the author meant: report and convert. */\n  | { severity: \"warning\"; convertible: true; why: string };\n\n/**\n * Classify a raw entry's shape, or return `undefined` when nothing about it is\n * worth saying. Runs before `entryToFixture`, so every branch below is driven\n * by the entry itself rather than by whichever exception the conversion\n * happened to throw.\n *\n * A missing or non-object `response` is deliberately NOT classified here: the\n * conversion accepts it (`{ ...undefined }` is `{}`), the server accepts it,\n * and the `validateFixtures` rules already reject it by name — \"response is\n * not a recognized type (must have content, toolCalls, ...)\" — which is the\n * more actionable message of the two. Saying it here as well would report one\n * defect twice. It is still named alongside `match` when `match` is fatal,\n * because then the rules never run on the entry at all and an author fixing\n * `{}` would otherwise need one round trip per missing key.\n */\nfunction classifyEntry(entry: unknown): EntryDefect | undefined {\n  if (entry === null || typeof entry !== \"object\" || Array.isArray(entry)) {\n    return {\n      severity: \"error\",\n      convertible: false,\n      why: `entry is ${gotText(entry)}, expected an object — ${ENTRY_SHAPE}`,\n    };\n  }\n  const match = (entry as Record<string, unknown>).match;\n  if (match === null || match === undefined) {\n    const missing = ([\"match\", \"response\"] as const).filter((key) => {\n      const value = (entry as Record<string, unknown>)[key];\n      return value === null || typeof value !== \"object\" || Array.isArray(value);\n    });\n    return {\n      severity: \"error\",\n      convertible: false,\n      why: `missing or non-object ${missing.map((k) => `\"${k}\"`).join(\" and \")} — ${ENTRY_SHAPE}`,\n    };\n  }\n  if (typeof match !== \"object\" || Array.isArray(match)) {\n    return {\n      severity: \"error\",\n      convertible: false,\n      why: `\"match\" is ${gotText(match)}, expected an object — ${ENTRY_SHAPE}`,\n    };\n  }\n  return undefined;\n}\n\n/**\n * The backstop for an entry `classifyEntry` passed and `entryToFixture` threw\n * on anyway (a `toolCalls: [null]`, say, which `normalizeResponse` walks).\n * Which entry it was is the actionable half, so that leads; the raw thrown\n * text follows as `detail`, which `--json` carries as its own field and the\n * human report prints on an indented continuation line. It used to say\n * `see \"detail\"`, naming a field only the `--json` report has — in human mode\n * that pointed at nothing at all.\n */\nfunction unexpectedEntryFailure(index: number, err: unknown): Finding {\n  return {\n    index,\n    message: `Invalid fixture entry #${index}: could not be converted to a fixture`,\n    detail: errText(err),\n  };\n}\n\n/**\n * Validate one fixture file into a report. Every failure mode — unreadable,\n * unparseable, wrong shape, or a single malformed entry — is recorded in the\n * returned report rather than thrown.\n *\n * The converted fixtures are handed back alongside the report, with\n * `indices[i]` giving the entry index `fixtures[i]` was converted from, so the\n * cross-file union pass can append them and map its findings back to a file\n * and an entry index.\n */\nfunction validateOneFile(\n  file: string,\n  mention: number,\n  source: string,\n  misbehavior = false,\n  extendedResponsesTools = false,\n): {\n  report: FileReport;\n  fixtures: Fixture[];\n  indices: number[];\n  identities: FindingIdentity[];\n  runErrors: string[];\n  mcpFakes: McpFakeSource[];\n} {\n  const report: FileReport = { file, mention, fixtures: 0, errors: [], warnings: [] };\n  const fixtures: Fixture[] = [];\n  const sourceIndex: number[] = [];\n  // Findings that belong to no entry because an index could not be resolved.\n  // They are raised at run level rather than filed against a guessed entry.\n  const runErrors: string[] = [];\n  // Identities of the findings the RULES produced (not the conversion\n  // diagnostics, which the union pass cannot produce and so cannot repeat).\n  const identities: FindingIdentity[] = [];\n  // The file's `mcpFakes` blocks, when they pass `validateMcpFakes`, for the\n  // run's entry-id check across files (I8).\n  const mcpFakes: McpFakeSource[] = [];\n\n  let raw: string;\n  try {\n    raw = readFileSync(file, \"utf-8\");\n  } catch (err) {\n    setFatal(report, `Could not read file: ${errText(err)}`);\n    return { report, fixtures, indices: sourceIndex, identities, runErrors, mcpFakes };\n  }\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw) as unknown;\n  } catch (err) {\n    setFatal(report, `Invalid JSON: ${errText(err)}`);\n    return { report, fixtures, indices: sourceIndex, identities, runErrors, mcpFakes };\n  }\n  // F7: a file with a top-level `mcpFakes` key may leave `fixtures` out\n  // (spec 5.4), as the loader allows; a `fixtures` key it does have must\n  // still be an array.\n  const fakesDoc = hasMcpFakesKey(parsed) ? parsed : undefined;\n  const fixturesLeftOut =\n    fakesDoc !== undefined && !Object.prototype.hasOwnProperty.call(fakesDoc, \"fixtures\");\n  const badShape =\n    !fixturesLeftOut &&\n    (typeof parsed !== \"object\" ||\n      parsed === null ||\n      !Array.isArray((parsed as { fixtures?: unknown }).fixtures));\n  if (badShape) {\n    // Naming a file is asking about that file, so the wrong shape is still\n    // fatal — the loader refuses it too. Say WHICH wrong shape when the file\n    // is an aimock config, so the answer names the file for what it is rather\n    // than implying it holds nothing.\n    const asConfig = aimockConfigDescription(parsed);\n    setFatal(\n      report,\n      asConfig === undefined\n        ? 'Missing or invalid \"fixtures\" array (expected { \"fixtures\": [...] })'\n        : `Missing or invalid \"fixtures\" array (expected { \"fixtures\": [...] }) — this is ${asConfig}`,\n    );\n    // D3: the loader still loads the fakes of such a file (it only warns\n    // about `fixtures`), so they are checked below before returning.\n  }\n\n  if (fakesDoc !== undefined) {\n    // F7: validate the blocks under the file's entry-id source (I6). A bad\n    // block is an error of this file; L8 shadowed entries are warnings.\n    const fakes = fakesDoc.mcpFakes;\n    const validation = validateMcpFakes(fakes, source);\n    report.errors.push(...validation.errors.map(loadErrorFinding));\n    report.mcpFakeBlocks = 0;\n    // A recording's `_warnings` (S7): what the recorder redacted or skipped.\n    const recorded = fakesDoc._warnings;\n    if (Array.isArray(recorded)) {\n      for (const w of recorded) {\n        if (typeof w === \"string\") report.warnings.push({ message: w });\n      }\n    }\n    if (validation.errors.length > 0) {\n      report.warnings.push(...validation.warnings.map(issueFinding));\n    } else if (Array.isArray(fakes)) {\n      // The warnings of clean blocks come from the run's store, which gives\n      // each block its real entry ids (a repeated load is `@<k>`, I7).\n      fakes.forEach((block: unknown, blockIndex: number) => {\n        mcpFakes.push({ source, blockIndex, raw: block });\n      });\n    } else {\n      mcpFakes.push({ source, blockIndex: null, raw: fakes });\n    }\n  }\n  if (fixturesLeftOut || badShape) {\n    return { report, fixtures, indices: sourceIndex, identities, runErrors, mcpFakes };\n  }\n\n  // Convert the entries we already parsed rather than re-reading the file,\n  // and give the conversion a logger so its per-entry diagnostics are\n  // attributed to the entry that produced them instead of being discarded.\n  let entryIndex = 0;\n  const entryLogger = new CollectingLogger(\n    (message) => report.warnings.push({ index: entryIndex, message }),\n    (message) => report.errors.push({ index: entryIndex, message }),\n  );\n\n  // Classify known malformed shapes before conversion and skip those entries.\n  // Keep the catch as a backstop for unexpected conversion failures. Remember\n  // each converted fixture's source index so findings retain entry indices.\n  const entries = (parsed as FixtureFile).fixtures;\n  for (let index = 0; index < entries.length; index++) {\n    entryIndex = index;\n    const defect = classifyEntry(entries[index]);\n    if (defect !== undefined) {\n      const label = defect.severity === \"error\" ? \"Invalid fixture entry\" : \"Fixture entry\";\n      const finding: Finding = { index, message: `${label} #${index}: ${defect.why}` };\n      if (!defect.convertible) {\n        report.errors.push(finding);\n        continue;\n      }\n      report.warnings.push(finding);\n    }\n    try {\n      const fixture = entryToFixture(entries[index], entryLogger, undefined, {\n        file: source,\n        index,\n      });\n      // --misbehavior: check `misbehavior` keys as a server with misbehavior enabled does.\n      if (misbehavior) enableHeldFixtureMisbehavior(fixture);\n      // --responses-tools extended: check the keys only that mode reads.\n      if (extendedResponsesTools) markFixtureResponsesToolsExtended(fixture);\n      fixtures.push(fixture);\n      sourceIndex.push(index);\n    } catch (err) {\n      report.errors.push(\n        err instanceof MisbehaviorConfigError\n          ? { index, message: err.message }\n          : unexpectedEntryFailure(index, err),\n      );\n    }\n  }\n\n  report.fixtures = fixtures.length;\n  // `validateFixtures` reports against the COMPACTED array, which skips the\n  // entries that failed to convert. The finding's own index is mapped back to\n  // an entry index — and so are the indices its message NAMES, or one line\n  // would print two different index spaces: \"#2 ... shadows fixture 0\" where\n  // \"#2\" is an entry and \"0\" is a compacted slot.\n  // `?? fixtureIndex` here USED to mask an unresolvable index by printing a\n  // compacted slot as if it were an entry index — two different index spaces\n  // in one line, with nothing to say so. It is unreachable while `sourceIndex`\n  // is pushed in lockstep with `fixtures`, so if it ever fires the run is\n  // wrong, not merely imprecise: raise it at run level (which fails the run)\n  // instead of quietly printing a number that means something else.\n  const unresolved = new Set<number>();\n  const toEntryIndex = (fixtureIndex: number): number => {\n    const entry = sourceIndex[fixtureIndex];\n    if (entry !== undefined) return entry;\n    if (!unresolved.has(fixtureIndex)) {\n      unresolved.add(fixtureIndex);\n      runErrors.push(\n        `finding for fixture index ${fixtureIndex}, which maps to no entry in this file`,\n      );\n    }\n    return fixtureIndex;\n  };\n  try {\n    for (const r of validateFixtures(fixtures)) {\n      const index = toEntryIndex(r.fixtureIndex);\n      const refs = r.ref === undefined ? [] : refIndices(r.ref).map(toEntryIndex);\n      const message =\n        r.ref === undefined\n          ? r.message\n          : renderValidationRef(r.ref, (i) => String(toEntryIndex(i)));\n      const finding: Finding = { index, message };\n      identities.push({\n        severity: r.severity,\n        index,\n        kind: r.ref === undefined ? `message:${r.message}` : r.ref.rule,\n        refs,\n        finding,\n      });\n      if (r.severity === \"error\") report.errors.push(finding);\n      else report.warnings.push(finding);\n    }\n  } catch (err) {\n    // File-level: the validator walks every entry, so which one tripped it is\n    // unknown. Filing it at #0 would accuse the file's first fixture, which is\n    // very likely innocent, so this finding carries no entry index at all.\n    report.errors.push({ message: `Validation failed for this file: ${errText(err)}` });\n  }\n  return { report, fixtures, indices: sourceIndex, identities, runErrors, mcpFakes };\n}\n\n/**\n * A `FixtureLoadError` from an `mcpFakes` block as a file-level finding (no\n * fixture entry index): its message names the rule, file, block and entry.\n */\nfunction loadErrorFinding(err: FixtureLoadError): Finding {\n  return { message: err.message };\n}\n\n/** An L8 shadowed-entry warning as a file-level finding. */\nfunction issueFinding(issue: McpFakeIssue): Finding {\n  return { message: issue.message };\n}\n\n/**\n * `#<index> ` for a finding that belongs to one entry; empty for a file-level\n * finding, which names no entry (see Finding.index). Shared by the human lines\n * and the failure summary so a reader of either can locate the same entry.\n */\nconst findingAt = (f: Finding): string => (f.index === undefined ? \"\" : `#${f.index} `);\n\n/**\n * One-line reason a run failed, for the stderr side of `--json` output.\n *\n * It NAMES the failure first — the file and the finding that caused the\n * non-zero exit — and only then totals what else failed, because the line is\n * often the single line a CI log shows. Leading with a fixed list of counts\n * put two zeros (\"0 unreadable/invalid file(s), 0 file(s) with errors\") in\n * front of every strict-warning failure, where the reader has to get past the\n * things that did NOT happen to reach the one that did. Counts that are zero\n * are omitted for the same reason, and a file whose fatal is already the lead\n * is counted as unreadable/invalid only, not a second time under \"with\n * errors\" — its fatal now rides in `errors` as well (see `setFatal`).\n */\nfunction summarizeFailure(\n  reports: FileReport[],\n  strict: boolean,\n  runErrors: string[],\n  name: (r: FileReport) => string,\n): string {\n  const fatalFiles = reports.filter((r) => r.fatal !== undefined);\n  const erroredFiles = reports.filter((r) => r.fatal === undefined && r.errors.length > 0);\n  const warnedFiles = reports.filter((r) => r.warnings.length > 0);\n\n  // First failure in report order: a fatal file, else a file with errors, else\n  // a run-level error, else (under --strict) the warning that failed the run.\n  let lead: string;\n  if (fatalFiles[0] !== undefined) lead = `${name(fatalFiles[0])}: ${fatalFiles[0].fatal}`;\n  else if (erroredFiles[0] !== undefined)\n    lead = `${name(erroredFiles[0])}: ${findingAt(erroredFiles[0].errors[0])}${erroredFiles[0].errors[0].message}`;\n  else if (runErrors[0] !== undefined) lead = runErrors[0];\n  else if (warnedFiles[0] !== undefined)\n    lead = `${name(warnedFiles[0])}: ${findingAt(warnedFiles[0].warnings[0])}${warnedFiles[0].warnings[0].message} (--strict)`;\n  /* v8 ignore next -- a failed run always has one of the four above */ else\n    lead = \"the run failed\";\n\n  const counts: string[] = [];\n  if (fatalFiles.length > 0) counts.push(`${fatalFiles.length} unreadable/invalid file(s)`);\n  if (erroredFiles.length > 0) counts.push(`${erroredFiles.length} file(s) with errors`);\n  // A run-level error (no fixtures loaded from any input) belongs to no single\n  // file, so it is counted on its own.\n  if (runErrors.length > 0) counts.push(`${runErrors.length} run-level error(s)`);\n  if (strict && warnedFiles.length > 0)\n    counts.push(`${warnedFiles.length} file(s) with warnings (--strict)`);\n\n  return `Error: fixture validation failed — ${lead} [${counts.join(\", \")}].`;\n}\n\nexport function runValidateCli(deps: ValidateCliDeps = {}): void {\n  const argv = deps.argv ?? process.argv.slice(2);\n  const log = deps.log ?? console.log.bind(console);\n  const logError = deps.logError ?? console.error.bind(console);\n  const exit = deps.exit ?? process.exit.bind(process);\n\n  /**\n   * Is `flag` present as an OPTION in argv — i.e. before the `--` terminator,\n   * after which every argument is a path? Needed because a usage error can be\n   * a `parseArgs` throw, which leaves no parsed `values` to consult, and the\n   * output mode still has to be honoured. `--flag=value` counts: these are all\n   * boolean options, so giving one a value IS the usage error being reported,\n   * and matching the bare token alone answered \"no `--json` here\" for the one\n   * argv that most obviously asked for JSON — leaving stdout empty.\n   */\n  const flagInArgv = (flag: string): boolean => {\n    for (const arg of argv) {\n      if (arg === \"--\") return false;\n      if (arg === flag || arg.startsWith(`${flag}=`)) return true;\n    }\n    return false;\n  };\n\n  /**\n   * A usage error, in whichever mode the argv asked for. `--json` promises\n   * \"one document on stdout\" (README), and a run that fails on its own argv is\n   * still a run: emitting nothing there handed a CI job parsing stdout an\n   * empty buffer — a JSON parse error standing in for a perfectly ordinary\n   * \"no paths given\". The document reports the usage error the same way a\n   * run-level error is reported, so one consumer shape reads both. The\n   * human-readable reason plus the help text stay on stderr in both modes, so\n   * `--json` stdout is still the document alone.\n   */\n  const usageError = (message: string): void => {\n    logError(`Error: ${message}\\n\\n${VALIDATE_HELP}`);\n    if (flagInArgv(\"--json\")) {\n      log(\n        JSON.stringify(\n          {\n            strict: flagInArgv(\"--strict\"),\n            failed: true,\n            files: [],\n            run: { fixtures: 0, mcpFakeBlocks: 0, errors: [message] },\n          },\n          null,\n          2,\n        ),\n      );\n    }\n    exit(1);\n  };\n\n  // Parse with node:util parseArgs, like the main CLI (src/cli.ts) and the\n  // server path in src/aimock-cli.ts: strict mode rejects unknown options and\n  // the \"--\" terminator falls out for free, so a fixture path that begins with\n  // \"-\" is still reachable.\n  let values: {\n    strict?: boolean;\n    json?: boolean;\n    misbehavior?: boolean;\n    \"responses-tools\"?: string;\n    help?: boolean;\n  };\n  let paths: string[];\n  try {\n    const parsed = parseArgs({\n      args: argv,\n      options: {\n        strict: { type: \"boolean\", default: false },\n        json: { type: \"boolean\", default: false },\n        misbehavior: { type: \"boolean\", default: false },\n        \"responses-tools\": { type: \"string\" },\n        help: { type: \"boolean\", short: \"h\", default: false },\n      },\n      strict: true,\n      allowPositionals: true,\n    });\n    values = parsed.values;\n    paths = parsed.positionals;\n  } catch (err) {\n    /* v8 ignore next -- parseArgs always throws Error subclasses */\n    const msg = err instanceof Error ? err.message : String(err);\n    usageError(msg);\n    return;\n  }\n\n  if (values.help === true) {\n    // `--json --help` still has to leave one JSON document on stdout and\n    // nothing else (README, docs): a consumer that forwards its own argv to\n    // `validate --json \"$@\"` and pipes stdout to `jq` gets a parse error the\n    // moment a user asks for help. The help text is the document's one field.\n    log(values.json === true ? JSON.stringify({ help: VALIDATE_HELP }, null, 2) : VALIDATE_HELP);\n    exit(0);\n    return;\n  }\n  const strict = values.strict === true;\n  const json = values.json === true;\n  const misbehavior = values.misbehavior === true;\n  const responsesTools = values[\"responses-tools\"];\n  if (\n    responsesTools !== undefined &&\n    responsesTools !== \"legacy\" &&\n    responsesTools !== \"extended\"\n  ) {\n    usageError(`invalid --responses-tools \"${responsesTools}\" (expected \"legacy\" or \"extended\").`);\n    return;\n  }\n  const extendedResponsesTools = responsesTools === \"extended\";\n\n  if (paths.length === 0) {\n    usageError(\"no fixture paths given.\");\n    return;\n  }\n\n  // Expand directory arguments into their `*.json` members. A missing path is\n  // passed through untouched so the read below reports the real per-file\n  // error; any other stat failure (ELOOP, EACCES, ...) is its own error, and\n  // a path that exists but is neither a directory nor a regular file is\n  // refused rather than read (see `collectJsonFiles`).\n  //\n  // Targets are NOT de-duplicated: the server loads one set of fixtures per\n  // `--fixtures` it is given, so a path named twice — or a file named both\n  // directly and via its parent directory — is loaded twice there, and the\n  // duplicate-`userMessage` findings that produces are exactly what this lint\n  // exists to surface. Validating it twice here is what makes the union pass\n  // see what the server sees.\n  const targets: CollectEntry[] = [];\n  for (const path of paths) {\n    // A remote source is refused by NAME. `--fixtures <url>` is a runtime\n    // feature of the server; this lint reads local paths only, and handing a\n    // URL to `statSync` produced a bare ENOENT quoting the URL back — which\n    // reads as \"you typed the path wrong\", not \"this input is unsupported\".\n    if (REMOTE_SOURCE.test(path)) {\n      targets.push({\n        file: path,\n        fatal:\n          \"Remote fixture source: this lint reads local paths only (the server's --fixtures accepts a URL; validate does not) — download the file and validate the local copy\",\n      });\n      continue;\n    }\n    let stats: Stats;\n    try {\n      stats = statSync(path);\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === \"ENOENT\") targets.push({ file: path });\n      else targets.push({ file: path, fatal: `Could not stat: ${errText(err)}` });\n      continue;\n    }\n    if (!stats.isDirectory()) {\n      if (stats.isFile()) targets.push({ file: path });\n      else targets.push({ file: path, fatal: \"Not a regular file\" });\n      continue;\n    }\n    const entries = collectJsonFiles(path, []);\n    // Only an actually-walkable, actually-empty directory is \"no fixtures\n    // found\" — an unreadable one reports why it could not be read.\n    if (entries.length === 0) {\n      targets.push({ file: path, fatal: \"No .json fixture files found in directory\" });\n      continue;\n    }\n    // I6: a walked file's `mcpFakes` source is its path relative to the\n    // directory named on the command line, with `/` separators.\n    for (const entry of entries) {\n      targets.push({ ...entry, source: relative(path, entry.file).split(sep).join(\"/\") });\n    }\n  }\n\n  // How many times each path is mentioned by the expanded target list, and a\n  // running count that hands each target its own 1-based mention number. Both\n  // are needed before the first report is printed: whether a name is ambiguous\n  // is a property of the whole run, not of the file being reported. Both key\n  // on the resolved path, not its spelling: a walked entry is `join`-normalised\n  // while a named one is verbatim, and `./d/a.json` named beside the walk of\n  // `./d` is the same load twice. The spelling is still what gets displayed.\n  const mentionKey = (file: string): string => resolve(file);\n  const mentionCount = new Map<string, number>();\n  for (const target of targets)\n    mentionCount.set(mentionKey(target.file), (mentionCount.get(mentionKey(target.file)) ?? 0) + 1);\n  const mentionsSoFar = new Map<string, number>();\n  const nextMention = (file: string): number => {\n    const mention = (mentionsSoFar.get(mentionKey(file)) ?? 0) + 1;\n    mentionsSoFar.set(mentionKey(file), mention);\n    return mention;\n  };\n  /**\n   * How a file is NAMED in human output and in cross-file references. A path\n   * this run loads more than once gets its mention number, because the bare\n   * path names all of those loads at once: without it a second load's findings\n   * read as a file shadowing itself. A path loaded once is printed unadorned —\n   * there is nothing to tell it apart from, and \"[1]\" on every line of an\n   * ordinary run is noise. The `--json` report carries `mention` regardless.\n   */\n  const displayName = (report: FileReport): string =>\n    (mentionCount.get(mentionKey(report.file)) ?? 1) > 1\n      ? `${report.file}[${report.mention}]`\n      : report.file;\n\n  const reports: FileReport[] = [];\n  // Every successfully-parsed entry, in load order, plus the file and local\n  // index each one came from. `validateFixtures` reports by array index, so\n  // the union pass below needs this to map its findings back to a file.\n  const union: Fixture[] = [];\n  const provenance: { report: FileReport; index: number }[] = [];\n  // The rule findings the per-file pass already reported, by SITE — the file\n  // (by id, so two mentions of one path are two sites), the entry index, the\n  // severity and the rule. Each rule fires at most once per fixture in either\n  // pass, so a union finding that lands on an occupied site is that same\n  // finding seen with every file in view: it never prints a second line, and\n  // it rewrites the first one only when it names different fixtures. Keying on\n  // the rendered text with digits masked (a previous scheme) instead made every\n  // \"shadows fixtures <n>+\" look alike, which both collapsed distinct findings\n  // and silently swallowed genuine cross-file ones.\n  const reportedBySite = new Map<string, { finding: Finding; refs: string[] }[]>();\n  const fileIds = new Map<FileReport, number>();\n  // Declared before the per-file loop because that loop contributes to it: an\n  // index a file could not resolve belongs to no entry and no file section.\n  const runErrors: string[] = [];\n  // One throwaway store for the run: adding each file's `mcpFakes` blocks to\n  // it, in load order, applies the entry-id uniqueness check across files\n  // (I8, bad block (f)). A mount conflict needs the running server's mounts\n  // and cannot be found here (spec 5.4, known limitation).\n  const fakeStore = new McpFakeStore();\n  let mcpFakeBlocks = 0;\n  const siteKey = (fileId: number, index: number, severity: string, kind: string): string =>\n    [fileId, index, severity, kind].join(\"\\u0000\");\n\n  for (const target of targets) {\n    // Passed over by the walk: it appears in the report so nothing the walk\n    // touched vanishes, but it contributes no fixtures and no findings.\n    if (target.skipped !== undefined) {\n      reports.push({\n        file: target.file,\n        mention: nextMention(target.file),\n        fixtures: 0,\n        errors: [],\n        warnings: [],\n        skipped: target.skipped,\n      });\n      continue;\n    }\n    if (target.fatal !== undefined) {\n      reports.push(fatalReport(target.file, nextMention(target.file), target.fatal));\n      continue;\n    }\n\n    let report: FileReport;\n    let fixtures: Fixture[] = [];\n    let indices: number[] = [];\n    let identities: FindingIdentity[] = [];\n    let fileRunErrors: string[] = [];\n    let mcpFakes: McpFakeSource[] = [];\n    const mention = nextMention(target.file);\n    try {\n      ({\n        report,\n        fixtures,\n        indices,\n        identities,\n        runErrors: fileRunErrors,\n        mcpFakes,\n      } = validateOneFile(\n        target.file,\n        mention,\n        target.source ?? target.file,\n        misbehavior,\n        extendedResponsesTools,\n      ));\n    } catch (err) {\n      // Backstop: nothing unexpected gets to abandon the remaining files.\n      report = fatalReport(target.file, mention, `Validation failed: ${errText(err)}`);\n    }\n    if (mcpFakes.length > 0) {\n      try {\n        const added = fakeStore.add(mcpFakes, { kind: \"file\" });\n        report.mcpFakeBlocks = mcpFakes.length;\n        mcpFakeBlocks += mcpFakes.length;\n        report.warnings.push(...added.warnings.map(issueFinding));\n      } catch (err) {\n        if (err instanceof McpFakesAddError) {\n          report.errors.push(...err.errors.map(loadErrorFinding));\n          report.warnings.push(...err.warnings.map(issueFinding));\n        } else {\n          // D1: nothing may escape this function (see the module comment):\n          // any other throw is a finding of this file, so the run still\n          // reports every file and `--json` stays one valid document.\n          report.errors.push({\n            message: build(msg`mcpFakes check failed: ${plainText(errText(err), Infinity)}`),\n          });\n        }\n      }\n    }\n    reports.push(report);\n    // These are raised inside `validateOneFile`, which knows the path but not\n    // how many times this run loads it, so they are named here instead.\n    runErrors.push(...fileRunErrors.map((e) => `${displayName(report)}: ${e}`));\n    const fileId = fileIds.size;\n    fileIds.set(report, fileId);\n\n    // Only RULE findings are registered: a conversion diagnostic or a\n    // file-level finding (no entry index) can never be restated by the union\n    // pass, so it has no identity here.\n    for (const identity of identities) {\n      const key = siteKey(fileId, identity.index, identity.severity, identity.kind);\n      const atSite = reportedBySite.get(key) ?? [];\n      atSite.push({\n        finding: identity.finding,\n        refs: identity.refs.map((ref) => `${fileId}:${ref}`),\n      });\n      reportedBySite.set(key, atSite);\n    }\n    for (let i = 0; i < fixtures.length; i++) {\n      // Same masking as `toEntryIndex` above, one level out: `?? i` silently\n      // relabelled a union fixture with a compacted slot number. Keep the\n      // union aligned with what the server loads (so the cross-file rules see\n      // the same array), but fail the run rather than print a wrong index.\n      const index = indices[i];\n      if (index === undefined) {\n        runErrors.push(\n          `${displayName(report)}: converted fixture ${i} has no source entry index; ` +\n            `cross-file findings against it are reported at its array position`,\n        );\n      }\n      union.push(fixtures[i]);\n      provenance.push({ report, index: index ?? i });\n    }\n  }\n\n  // Cross-file pass. The server validates every loaded fixture as one array,\n  // so its duplicate-userMessage and catch-all-ordering rules see across\n  // files; run per file they never can. Validate the union and keep only the\n  // findings the per-file pass did not already make.\n  // Set when the run failed because it loaded nothing at all, so the human\n  // printer can withhold \"OK\" from the files that loaded nothing — see below.\n  let noFixturesLoaded = false;\n  // When a file already said WHY it produced no fixtures (unreadable, invalid\n  // JSON, wrong shape, a bad entry), the run-level line below would repeat that\n  // same cause as a second, causeless error. Report it only when nothing else\n  // has; the run still fails either way, on the per-file finding.\n  const causeAlreadyReported = reports.some((r) => r.fatal !== undefined || r.errors.length > 0);\n  if (union.length === 0) {\n    // F8: loaded `mcpFakes` blocks count as loaded.\n    // The server aborts startup on this exact condition\n    // (\"No fixtures loaded and validation/strict mode is enabled\"), so a run\n    // whose inputs yield nothing — `{\"fixtures\": []}` and nothing else —\n    // fails here too. Parsed-but-empty files alongside files that do load\n    // fixtures are fine in both places.\n    if (!causeAlreadyReported && mcpFakeBlocks === 0) {\n      runErrors.push(\n        \"No fixtures loaded from any input — the server aborts startup on this under --validate-on-load/--strict\",\n      );\n      noFixturesLoaded = true;\n    }\n  } else {\n    // A union index as the reader sees it: the load that owns the fixture —\n    // named by path, plus its mention number when that path is loaded more\n    // than once — and its index inside that load.\n    const describe = (unionIndex: number): string => {\n      const origin = provenance[unionIndex];\n      return origin === undefined\n        ? String(unionIndex)\n        : `${displayName(origin.report)} #${origin.index}`;\n    };\n    // The same index as an identity for de-duplication. An unresolvable one\n    // gets its own namespace rather than aliasing onto a real file.\n    const targetOf = (unionIndex: number): string => {\n      const origin = provenance[unionIndex];\n      if (origin === undefined) return `union:${unionIndex}`;\n      const fileId = fileIds.get(origin.report);\n      return fileId === undefined ? `union:${unionIndex}` : `${fileId}:${origin.index}`;\n    };\n    // Cross-file wording is rendered from the finding's REF DATA, never by\n    // rewriting its prose: `duplicate userMessage` quotes the fixture's own\n    // text, and text that itself reads \"fixture 3\" is not an index.\n    const renderCrossFile = (ref: ValidationRef): string => {\n      if (ref.rule === \"duplicate-user-message\") {\n        return `duplicate userMessage '${ref.userMessage}' — shadows fixture ${describe(ref.shadows)}`;\n      }\n      // Both ends are named because the point of the cross-file pass is that\n      // the shadowed range reaches past the catch-all's own file; a bare\n      // \"<file> #0+\" would read as if \"+\" were part of the index.\n      const head = \"empty match acts as catch-all but is not the last fixture\";\n      return ref.shadowsFrom === ref.shadowsThrough\n        ? `${head} — shadows ${describe(ref.shadowsFrom)}`\n        : `${head} — shadows every later fixture, from ${describe(ref.shadowsFrom)} through ${describe(ref.shadowsThrough)}`;\n    };\n    // The per-file pass above is wrapped per file; this one is the run's only\n    // other call into `validateFixtures`, and an uncontained throw here killed\n    // the process with no report at all and a truncated (invalid) `--json`\n    // stdout. Contain it as a run-level error so the report is still emitted,\n    // is still valid JSON, and the run still exits 1.\n    try {\n      for (const r of validateFixtures(union)) {\n        const origin = provenance[r.fixtureIndex];\n        if (origin === undefined) {\n          // Unreachable while `provenance` is pushed in lockstep with `union`.\n          // A bare `continue` here DROPPED the finding: an error finding could\n          // vanish and leave the run exiting 0, reporting a clean bill of\n          // health for fixtures the server would refuse. Raise it at run level,\n          // as the adjacent unrecognised-file case already does.\n          runErrors.push(\n            `Cross-file finding for an unknown fixture index ${r.fixtureIndex}: ${r.message}`,\n          );\n          continue;\n        }\n        const fileId = fileIds.get(origin.report);\n        if (fileId === undefined) {\n          // Unreachable while provenance is built from reported files; recorded\n          // as a run-level error rather than defaulted onto file 0, which would\n          // attribute the finding to an unrelated file.\n          runErrors.push(`Cross-file finding for an unrecognised file: ${r.message}`);\n          continue;\n        }\n        const kind = r.ref === undefined ? `message:${r.message}` : r.ref.rule;\n        const refTargets = r.ref === undefined ? [] : refIndices(r.ref).map(targetOf);\n        const message = `cross-file: ${r.ref === undefined ? r.message : renderCrossFile(r.ref)}`;\n        const already = reportedBySite\n          .get(siteKey(fileId, origin.index, r.severity, kind))\n          ?.shift();\n        if (already !== undefined) {\n          // The per-file pass already reported this rule against this fixture,\n          // and the server would log it once. If the union names the same\n          // fixtures it adds nothing and the file-local wording stands; if it\n          // names others — a shadow that reaches into another load — that is\n          // the fuller truth, so it replaces the wording in place rather than\n          // printing a second line about the same fixture.\n          const same =\n            already.refs.length === refTargets.length &&\n            already.refs.every((target, i) => target === refTargets[i]);\n          if (!same) already.finding.message = message;\n          continue;\n        }\n        if (r.severity === \"error\") origin.report.errors.push({ index: origin.index, message });\n        else origin.report.warnings.push({ index: origin.index, message });\n      }\n    } catch (err) {\n      runErrors.push(`Cross-file validation failed: ${errText(err)}`);\n    }\n  }\n\n  const hasFatal = reports.some((r) => r.fatal !== undefined);\n  const hasErrors = reports.some((r) => r.errors.length > 0) || runErrors.length > 0;\n  const hasWarnings = reports.some((r) => r.warnings.length > 0);\n  const failed = hasFatal || hasErrors || (strict && hasWarnings);\n\n  // Anything that CAUSES the non-zero exit must reach stderr, or a CI log shows\n  // a failure with no reason. Warnings are informational by default and are the\n  // cause under --strict, so they follow the exit they produce.\n  const logWarning = strict ? logError : log;\n\n  if (json) {\n    log(\n      JSON.stringify(\n        {\n          strict,\n          failed,\n          files: reports,\n          // D4: the blocks count as loaded, so a fakes-only run is not read\n          // as one that loaded nothing.\n          run: { fixtures: union.length, mcpFakeBlocks, errors: runErrors },\n        },\n        null,\n        2,\n      ),\n    );\n    // Keep stdout to the JSON document alone, but still say on stderr why the\n    // run failed.\n    if (failed) logError(summarizeFailure(reports, strict, runErrors, displayName));\n  } else {\n    const at = findingAt;\n    // `detail` (the raw thrown text behind a rephrased message) is a field of\n    // the `--json` document, so human mode used to lose it entirely. Print it\n    // on an indented continuation line under its own finding, where it reads\n    // as belonging to that line rather than as another finding.\n    const emitDetail = (f: Finding, sink: (msg: string) => void): void => {\n      if (f.detail !== undefined) sink(`    ${f.detail}`);\n    };\n    for (const r of reports) {\n      const name = displayName(r);\n      // A file the WALK turned up that is not fixture-shaped is passed over,\n      // exactly as the server passes over it, and says so on its one line.\n      if (r.skipped !== undefined) {\n        log(`${name}: skipped (${r.skipped})`);\n        continue;\n      }\n      // A fatal file needs no branch of its own: its reason rides in `errors`\n      // (see `setFatal`), so the loop below prints the same `[error]` line and\n      // the counting summary below tallies it — the stdout count and the\n      // `--json` `errors` array can no longer drift apart. Every file still\n      // gets exactly one summary line on stdout (README), including this one:\n      // a reader tallying stdout must not silently lose a file.\n      for (const e of r.errors) {\n        logError(`${name}: [error] ${at(e)}${e.message}`);\n        emitDetail(e, logError);\n      }\n      for (const w of r.warnings) {\n        logWarning(`${name}: [warning] ${at(w)}${w.message}`);\n        emitDetail(w, logWarning);\n      }\n      if (r.errors.length === 0 && r.warnings.length === 0) {\n        // \"OK\" is a claim about the RUN as well as the file: a reader tallying\n        // stdout on a run that failed would otherwise read \"OK\" against the very\n        // file that loaded none, on an exit of 1. Keying this on the RUN-level\n        // \"no fixtures loaded\" error was not enough — that error is withheld as\n        // soon as another file reports a cause, which is exactly when a failed\n        // run still has a zero-fixture file to print.\n        const blocks = r.mcpFakeBlocks ?? 0;\n        if (r.fixtures === 0 && blocks === 0 && failed) {\n          const why = noFixturesLoaded ? \"see the run-level error\" : \"the run failed elsewhere\";\n          log(`${name}: ${r.fixtures} fixture(s), loaded nothing — ${why}`);\n        } else if (blocks > 0) {\n          log(\n            build(\n              msg`${plainText(name, Infinity)}: OK (${r.fixtures} fixture(s), ${blocks} mcpFakes block(s))`,\n            ),\n          );\n        } else {\n          log(`${name}: OK (${r.fixtures} fixture(s))`);\n        }\n      } else {\n        log(\n          `${name}: ${r.fixtures} fixture(s), ${r.errors.length} error(s), ${r.warnings.length} warning(s)`,\n        );\n      }\n    }\n    // Run-level errors last: they are consequences of (or additions to) the\n    // per-file output above, and printing them first put the summary before\n    // the detail it summarises.\n    for (const e of runErrors) logError(`[error] ${e}`);\n  }\n\n  exit(failed ? 1 : 0);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkHA,MAAa,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkD3B,MAAM;;AAiFR,SAAS,WAAW,KAA8B;AAChD,QAAO,IAAI,SAAS,2BAChB,CAAC,IAAI,QAAQ,GACb,CAAC,IAAI,aAAa,IAAI,eAAe;;;;;;;;AAS3C,MAAM,gBAAgB;;AAGtB,SAAS,QAAQ,KAAsB;AACrC,QAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;;;;;;;;;;;;;AAezD,SAAS,SAAS,QAAoB,SAAuB;AAC3D,QAAO,QAAQ;AACf,QAAO,OAAO,KAAK,EAAE,SAAS,CAAC;;;AAIjC,SAAS,YAAY,MAAc,SAAiB,SAA6B;CAC/E,MAAM,SAAqB;EAAE;EAAM;EAAS,UAAU;EAAG,QAAQ,EAAE;EAAE,UAAU,EAAE;EAAE;AACnF,UAAS,QAAQ,QAAQ;AACzB,QAAO;;;;;;;;;;;AAYT,IAAa,mBAAb,MAAa,yBAAyBA,sBAAO;CAC3C,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAAiC,WAAkC;AAC7E,QAAM,OAAO;AACb,OAAK,WAAW;AAChB,OAAK,YAAY;;;;;;;;;;;;;;;;CAiBnB,OAAe,OAAO,MAAyB;AAC7C,+BAAc,YAAY,GAAG,KAAK;;CAGpC,AAAS,KAAK,GAAG,MAAuB;AACtC,OAAK,SAAS,iBAAiB,OAAO,KAAK,CAAC;;CAG9C,AAAS,MAAM,GAAG,MAAuB;AACvC,OAAK,UAAU,iBAAiB,OAAO,KAAK,CAAC;;CAG/C,AAAS,KAAK,GAAG,MAAuB;CAIxC,AAAS,MAAM,GAAG,MAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwD3C,SAAS,qBAAqB,MAAkC;CAC9D,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,gCAAmB,MAAM,QAAQ,CAAC;SAC1C;AACN;;AAKF,KAAIC,sCAAe,OAAO,CAAE,QAAO;CACnC,MAAM,WAAW,wBAAwB,OAAO;AAChD,KAAI,aAAa,OAAW,QAAO,wBAAwB;AAI3D,KAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,cAAc,OAAQ,QAAO;AAClF,QAAO;;;;;;;AAQT,MAAM,kBAAkB;CAAC;CAAO;CAAO;CAAO;CAAQ;CAAU;CAAW;;;;;;;;;AAU3E,SAAS,wBAAwB,QAAqC;AACpE,KAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;CAC1D,MAAM,MAAM;CACZ,MAAM,WAAW,gBAAgB,QAAQ,QAAQ,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK;AAC1F,KAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAO,0BAA0B,SAAS,KAAK,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BvD,SAAS,iBACP,SACA,WACA,MAAsB,EAAE,EACR;CAChB,IAAI;AACJ,KAAI;AACF,uCAAwB,QAAQ;UACzB,KAAK;AACZ,MAAI,KAAK;GAAE,MAAM;GAAS,OAAO,gCAAgC,QAAQ,IAAI;GAAI,CAAC;AAClF,SAAO;;AAET,KAAI,UAAU,SAAS,SAAS,EAAE;AAChC,MAAI,KAAK;GACP,MAAM;GACN,OAAO,2CAA2C;GACnD,CAAC;AACF,SAAO;;CAGT,IAAI;AACJ,KAAI;AACF,mCAAoB,QAAQ;UACrB,KAAK;AACZ,MAAI,KAAK;GAAE,MAAM;GAAS,OAAO,6BAA6B,QAAQ,IAAI;GAAI,CAAC;AAC/E,SAAO;;CAMT,MAAM,UAAoB,EAAE;AAC5B,MAAK,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE;EACpC,MAAM,+BAAgB,SAAS,KAAK;EACpC,IAAI;AACJ,MAAI;AACF,iCAAiB,SAAS;WACnB,KAAK;AACZ,OAAK,IAA8B,SAAS,SAC1C,KAAI,KAAK;IAAE,MAAM;IAAU,OAAO,mBAAmB,QAAQ,IAAI;IAAI,CAAC;AAExE;;AAEF,MAAI,MAAM,aAAa,CAAE,SAAQ,KAAK,KAAK;WAClC,CAAC,KAAK,SAAS,QAAQ,CAAE;WACzB,MAAM,QAAQ,EAAE;GACvB,MAAM,UAAU,qBAAqB,SAAS;AAC9C,OAAI,KAAK,YAAY,SAAY,EAAE,MAAM,UAAU,GAAG;IAAE,MAAM;IAAU;IAAS,CAAC;QAC7E,KAAI,KAAK;GAAE,MAAM;GAAU,OAAO;GAAsB,CAAC;;CAGlE,MAAM,QAAQ,CAAC,GAAG,WAAW,SAAS;AACtC,MAAK,MAAM,OAAO,QAAS,sCAAsB,SAAS,IAAI,EAAE,OAAO,IAAI;AAC3E,QAAO;;;AAIT,MAAM,cAAc;;AAGpB,SAAS,QAAQ,OAAwB;AACvC,KAAI,UAAU,KAAM,QAAO;AAC3B,KAAI,UAAU,OAAW,QAAO;AAChC,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO;AACjC,QAAO,KAAK,OAAO;;;;;;;;;;;;;;;;;AA8BrB,SAAS,cAAc,OAAyC;AAC9D,KAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CACrE,QAAO;EACL,UAAU;EACV,aAAa;EACb,KAAK,YAAY,QAAQ,MAAM,CAAC,yBAAyB;EAC1D;CAEH,MAAM,QAAS,MAAkC;AACjD,KAAI,UAAU,QAAQ,UAAU,OAK9B,QAAO;EACL,UAAU;EACV,aAAa;EACb,KAAK,yBAPU,CAAC,SAAS,WAAW,CAAW,QAAQ,QAAQ;GAC/D,MAAM,QAAS,MAAkC;AACjD,UAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM;IAC1E,CAIsC,KAAK,MAAM,IAAI,EAAE,GAAG,CAAC,KAAK,QAAQ,CAAC,KAAK;EAC/E;AAEH,KAAI,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CACnD,QAAO;EACL,UAAU;EACV,aAAa;EACb,KAAK,cAAc,QAAQ,MAAM,CAAC,yBAAyB;EAC5D;;;;;;;;;;;AAcL,SAAS,uBAAuB,OAAe,KAAuB;AACpE,QAAO;EACL;EACA,SAAS,0BAA0B,MAAM;EACzC,QAAQ,QAAQ,IAAI;EACrB;;;;;;;;;;;;AAaH,SAAS,gBACP,MACA,SACA,QACA,cAAc,OACd,yBAAyB,OAQzB;CACA,MAAM,SAAqB;EAAE;EAAM;EAAS,UAAU;EAAG,QAAQ,EAAE;EAAE,UAAU,EAAE;EAAE;CACnF,MAAM,WAAsB,EAAE;CAC9B,MAAM,cAAwB,EAAE;CAGhC,MAAM,YAAsB,EAAE;CAG9B,MAAM,aAAgC,EAAE;CAGxC,MAAM,WAA4B,EAAE;CAEpC,IAAI;AACJ,KAAI;AACF,kCAAmB,MAAM,QAAQ;UAC1B,KAAK;AACZ,WAAS,QAAQ,wBAAwB,QAAQ,IAAI,GAAG;AACxD,SAAO;GAAE;GAAQ;GAAU,SAAS;GAAa;GAAY;GAAW;GAAU;;CAEpF,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,MAAM,IAAI;UACjB,KAAK;AACZ,WAAS,QAAQ,iBAAiB,QAAQ,IAAI,GAAG;AACjD,SAAO;GAAE;GAAQ;GAAU,SAAS;GAAa;GAAY;GAAW;GAAU;;CAKpF,MAAM,WAAWA,sCAAe,OAAO,GAAG,SAAS;CACnD,MAAM,kBACJ,aAAa,UAAa,CAAC,OAAO,UAAU,eAAe,KAAK,UAAU,WAAW;CACvF,MAAM,WACJ,CAAC,oBACA,OAAO,WAAW,YACjB,WAAW,QACX,CAAC,MAAM,QAAS,OAAkC,SAAS;AAC/D,KAAI,UAAU;EAKZ,MAAM,WAAW,wBAAwB,OAAO;AAChD,WACE,QACA,aAAa,SACT,6EACA,kFAAkF,WACvF;;AAKH,KAAI,aAAa,QAAW;EAG1B,MAAM,QAAQ,SAAS;EACvB,MAAM,aAAaC,mCAAiB,OAAO,OAAO;AAClD,SAAO,OAAO,KAAK,GAAG,WAAW,OAAO,IAAI,iBAAiB,CAAC;AAC9D,SAAO,gBAAgB;EAEvB,MAAM,WAAW,SAAS;AAC1B,MAAI,MAAM,QAAQ,SAAS,EACzB;QAAK,MAAM,KAAK,SACd,KAAI,OAAO,MAAM,SAAU,QAAO,SAAS,KAAK,EAAE,SAAS,GAAG,CAAC;;AAGnE,MAAI,WAAW,OAAO,SAAS,EAC7B,QAAO,SAAS,KAAK,GAAG,WAAW,SAAS,IAAI,aAAa,CAAC;WACrD,MAAM,QAAQ,MAAM,CAG7B,OAAM,SAAS,OAAgB,eAAuB;AACpD,YAAS,KAAK;IAAE;IAAQ;IAAY,KAAK;IAAO,CAAC;IACjD;MAEF,UAAS,KAAK;GAAE;GAAQ,YAAY;GAAM,KAAK;GAAO,CAAC;;AAG3D,KAAI,mBAAmB,SACrB,QAAO;EAAE;EAAQ;EAAU,SAAS;EAAa;EAAY;EAAW;EAAU;CAMpF,IAAI,aAAa;CACjB,MAAM,cAAc,IAAI,kBACrB,YAAY,OAAO,SAAS,KAAK;EAAE,OAAO;EAAY;EAAS,CAAC,GAChE,YAAY,OAAO,OAAO,KAAK;EAAE,OAAO;EAAY;EAAS,CAAC,CAChE;CAKD,MAAM,UAAW,OAAuB;AACxC,MAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS;AACnD,eAAa;EACb,MAAM,SAAS,cAAc,QAAQ,OAAO;AAC5C,MAAI,WAAW,QAAW;GACxB,MAAM,QAAQ,OAAO,aAAa,UAAU,0BAA0B;GACtE,MAAM,UAAmB;IAAE;IAAO,SAAS,GAAG,MAAM,IAAI,MAAM,IAAI,OAAO;IAAO;AAChF,OAAI,CAAC,OAAO,aAAa;AACvB,WAAO,OAAO,KAAK,QAAQ;AAC3B;;AAEF,UAAO,SAAS,KAAK,QAAQ;;AAE/B,MAAI;GACF,MAAM,UAAUC,sCAAe,QAAQ,QAAQ,aAAa,QAAW;IACrE,MAAM;IACN;IACD,CAAC;AAEF,OAAI,YAAa,qDAA6B,QAAQ;AAEtD,OAAI,uBAAwB,0DAAkC,QAAQ;AACtE,YAAS,KAAK,QAAQ;AACtB,eAAY,KAAK,MAAM;WAChB,KAAK;AACZ,UAAO,OAAO,KACZ,eAAeC,gDACX;IAAE;IAAO,SAAS,IAAI;IAAS,GAC/B,uBAAuB,OAAO,IAAI,CACvC;;;AAIL,QAAO,WAAW,SAAS;CAY3B,MAAM,6BAAa,IAAI,KAAa;CACpC,MAAM,gBAAgB,iBAAiC;EACrD,MAAM,QAAQ,YAAY;AAC1B,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,CAAC,WAAW,IAAI,aAAa,EAAE;AACjC,cAAW,IAAI,aAAa;AAC5B,aAAU,KACR,6BAA6B,aAAa,uCAC3C;;AAEH,SAAO;;AAET,KAAI;AACF,OAAK,MAAM,KAAKC,wCAAiB,SAAS,EAAE;GAC1C,MAAM,QAAQ,aAAa,EAAE,aAAa;GAC1C,MAAM,OAAO,EAAE,QAAQ,SAAY,EAAE,GAAG,WAAW,EAAE,IAAI,CAAC,IAAI,aAAa;GAK3E,MAAM,UAAmB;IAAE;IAAO,SAHhC,EAAE,QAAQ,SACN,EAAE,UACFC,2CAAoB,EAAE,MAAM,MAAM,OAAO,aAAa,EAAE,CAAC,CAAC;IACrB;AAC3C,cAAW,KAAK;IACd,UAAU,EAAE;IACZ;IACA,MAAM,EAAE,QAAQ,SAAY,WAAW,EAAE,YAAY,EAAE,IAAI;IAC3D;IACA;IACD,CAAC;AACF,OAAI,EAAE,aAAa,QAAS,QAAO,OAAO,KAAK,QAAQ;OAClD,QAAO,SAAS,KAAK,QAAQ;;UAE7B,KAAK;AAIZ,SAAO,OAAO,KAAK,EAAE,SAAS,oCAAoC,QAAQ,IAAI,IAAI,CAAC;;AAErF,QAAO;EAAE;EAAQ;EAAU,SAAS;EAAa;EAAY;EAAW;EAAU;;;;;;AAOpF,SAAS,iBAAiB,KAAgC;AACxD,QAAO,EAAE,SAAS,IAAI,SAAS;;;AAIjC,SAAS,aAAa,OAA8B;AAClD,QAAO,EAAE,SAAS,MAAM,SAAS;;;;;;;AAQnC,MAAM,aAAa,MAAwB,EAAE,UAAU,SAAY,KAAK,IAAI,EAAE,MAAM;;;;;;;;;;;;;;AAepF,SAAS,iBACP,SACA,QACA,WACA,MACQ;CACR,MAAM,aAAa,QAAQ,QAAQ,MAAM,EAAE,UAAU,OAAU;CAC/D,MAAM,eAAe,QAAQ,QAAQ,MAAM,EAAE,UAAU,UAAa,EAAE,OAAO,SAAS,EAAE;CACxF,MAAM,cAAc,QAAQ,QAAQ,MAAM,EAAE,SAAS,SAAS,EAAE;CAIhE,IAAI;AACJ,KAAI,WAAW,OAAO,OAAW,QAAO,GAAG,KAAK,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG;UACxE,aAAa,OAAO,OAC3B,QAAO,GAAG,KAAK,aAAa,GAAG,CAAC,IAAI,UAAU,aAAa,GAAG,OAAO,GAAG,GAAG,aAAa,GAAG,OAAO,GAAG;UAC9F,UAAU,OAAO,OAAW,QAAO,UAAU;UAC7C,YAAY,OAAO,OAC1B,QAAO,GAAG,KAAK,YAAY,GAAG,CAAC,IAAI,UAAU,YAAY,GAAG,SAAS,GAAG,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ;KAE9G,QAAO;CAET,MAAM,SAAmB,EAAE;AAC3B,KAAI,WAAW,SAAS,EAAG,QAAO,KAAK,GAAG,WAAW,OAAO,6BAA6B;AACzF,KAAI,aAAa,SAAS,EAAG,QAAO,KAAK,GAAG,aAAa,OAAO,sBAAsB;AAGtF,KAAI,UAAU,SAAS,EAAG,QAAO,KAAK,GAAG,UAAU,OAAO,qBAAqB;AAC/E,KAAI,UAAU,YAAY,SAAS,EACjC,QAAO,KAAK,GAAG,YAAY,OAAO,mCAAmC;AAEvE,QAAO,sCAAsC,KAAK,IAAI,OAAO,KAAK,KAAK,CAAC;;AAG1E,SAAgB,eAAe,OAAwB,EAAE,EAAQ;CAC/D,MAAM,OAAO,KAAK,QAAQ,QAAQ,KAAK,MAAM,EAAE;CAC/C,MAAM,MAAM,KAAK,OAAO,QAAQ,IAAI,KAAK,QAAQ;CACjD,MAAM,WAAW,KAAK,YAAY,QAAQ,MAAM,KAAK,QAAQ;CAC7D,MAAM,OAAO,KAAK,QAAQ,QAAQ,KAAK,KAAK,QAAQ;;;;;;;;;;CAWpD,MAAM,cAAc,SAA0B;AAC5C,OAAK,MAAM,OAAO,MAAM;AACtB,OAAI,QAAQ,KAAM,QAAO;AACzB,OAAI,QAAQ,QAAQ,IAAI,WAAW,GAAG,KAAK,GAAG,CAAE,QAAO;;AAEzD,SAAO;;;;;;;;;;;;CAaT,MAAM,cAAc,YAA0B;AAC5C,WAAS,UAAU,QAAQ,MAAM,gBAAgB;AACjD,MAAI,WAAW,SAAS,CACtB,KACE,KAAK,UACH;GACE,QAAQ,WAAW,WAAW;GAC9B,QAAQ;GACR,OAAO,EAAE;GACT,KAAK;IAAE,UAAU;IAAG,eAAe;IAAG,QAAQ,CAAC,QAAQ;IAAE;GAC1D,EACD,MACA,EACD,CACF;AAEH,OAAK,EAAE;;CAOT,IAAI;CAOJ,IAAI;AACJ,KAAI;EACF,MAAM,kCAAmB;GACvB,MAAM;GACN,SAAS;IACP,QAAQ;KAAE,MAAM;KAAW,SAAS;KAAO;IAC3C,MAAM;KAAE,MAAM;KAAW,SAAS;KAAO;IACzC,aAAa;KAAE,MAAM;KAAW,SAAS;KAAO;IAChD,mBAAmB,EAAE,MAAM,UAAU;IACrC,MAAM;KAAE,MAAM;KAAW,OAAO;KAAK,SAAS;KAAO;IACtD;GACD,QAAQ;GACR,kBAAkB;GACnB,CAAC;AACF,WAAS,OAAO;AAChB,UAAQ,OAAO;UACR,KAAK;AAGZ,aADY,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAC7C;AACf;;AAGF,KAAI,OAAO,SAAS,MAAM;AAKxB,MAAI,OAAO,SAAS,OAAO,KAAK,UAAU,EAAE,MAAM,eAAe,EAAE,MAAM,EAAE,GAAG,cAAc;AAC5F,OAAK,EAAE;AACP;;CAEF,MAAM,SAAS,OAAO,WAAW;CACjC,MAAM,OAAO,OAAO,SAAS;CAC7B,MAAM,cAAc,OAAO,gBAAgB;CAC3C,MAAM,iBAAiB,OAAO;AAC9B,KACE,mBAAmB,UACnB,mBAAmB,YACnB,mBAAmB,YACnB;AACA,aAAW,8BAA8B,eAAe,sCAAsC;AAC9F;;CAEF,MAAM,yBAAyB,mBAAmB;AAElD,KAAI,MAAM,WAAW,GAAG;AACtB,aAAW,0BAA0B;AACrC;;CAeF,MAAM,UAA0B,EAAE;AAClC,MAAK,MAAM,QAAQ,OAAO;AAKxB,MAAI,cAAc,KAAK,KAAK,EAAE;AAC5B,WAAQ,KAAK;IACX,MAAM;IACN,OACE;IACH,CAAC;AACF;;EAEF,IAAI;AACJ,MAAI;AACF,iCAAiB,KAAK;WACf,KAAK;AACZ,OAAK,IAA8B,SAAS,SAAU,SAAQ,KAAK,EAAE,MAAM,MAAM,CAAC;OAC7E,SAAQ,KAAK;IAAE,MAAM;IAAM,OAAO,mBAAmB,QAAQ,IAAI;IAAI,CAAC;AAC3E;;AAEF,MAAI,CAAC,MAAM,aAAa,EAAE;AACxB,OAAI,MAAM,QAAQ,CAAE,SAAQ,KAAK,EAAE,MAAM,MAAM,CAAC;OAC3C,SAAQ,KAAK;IAAE,MAAM;IAAM,OAAO;IAAsB,CAAC;AAC9D;;EAEF,MAAM,UAAU,iBAAiB,MAAM,EAAE,CAAC;AAG1C,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAQ,KAAK;IAAE,MAAM;IAAM,OAAO;IAA6C,CAAC;AAChF;;AAIF,OAAK,MAAM,SAAS,QAClB,SAAQ,KAAK;GAAE,GAAG;GAAO,gCAAiB,MAAM,MAAM,KAAK,CAAC,MAAMC,cAAI,CAAC,KAAK,IAAI;GAAE,CAAC;;CAWvF,MAAM,cAAc,gCAAiC,KAAK;CAC1D,MAAM,+BAAe,IAAI,KAAqB;AAC9C,MAAK,MAAM,UAAU,QACnB,cAAa,IAAI,WAAW,OAAO,KAAK,GAAG,aAAa,IAAI,WAAW,OAAO,KAAK,CAAC,IAAI,KAAK,EAAE;CACjG,MAAM,gCAAgB,IAAI,KAAqB;CAC/C,MAAM,eAAe,SAAyB;EAC5C,MAAM,WAAW,cAAc,IAAI,WAAW,KAAK,CAAC,IAAI,KAAK;AAC7D,gBAAc,IAAI,WAAW,KAAK,EAAE,QAAQ;AAC5C,SAAO;;;;;;;;;;CAUT,MAAM,eAAe,YAClB,aAAa,IAAI,WAAW,OAAO,KAAK,CAAC,IAAI,KAAK,IAC/C,GAAG,OAAO,KAAK,GAAG,OAAO,QAAQ,KACjC,OAAO;CAEb,MAAM,UAAwB,EAAE;CAIhC,MAAM,QAAmB,EAAE;CAC3B,MAAM,aAAsD,EAAE;CAU9D,MAAM,iCAAiB,IAAI,KAAqD;CAChF,MAAM,0BAAU,IAAI,KAAyB;CAG7C,MAAM,YAAsB,EAAE;CAK9B,MAAM,YAAY,IAAIC,gCAAc;CACpC,IAAI,gBAAgB;CACpB,MAAM,WAAW,QAAgB,OAAe,UAAkB,SAChE;EAAC;EAAQ;EAAO;EAAU;EAAK,CAAC,KAAK,KAAS;AAEhD,MAAK,MAAM,UAAU,SAAS;AAG5B,MAAI,OAAO,YAAY,QAAW;AAChC,WAAQ,KAAK;IACX,MAAM,OAAO;IACb,SAAS,YAAY,OAAO,KAAK;IACjC,UAAU;IACV,QAAQ,EAAE;IACV,UAAU,EAAE;IACZ,SAAS,OAAO;IACjB,CAAC;AACF;;AAEF,MAAI,OAAO,UAAU,QAAW;AAC9B,WAAQ,KAAK,YAAY,OAAO,MAAM,YAAY,OAAO,KAAK,EAAE,OAAO,MAAM,CAAC;AAC9E;;EAGF,IAAI;EACJ,IAAI,WAAsB,EAAE;EAC5B,IAAI,UAAoB,EAAE;EAC1B,IAAI,aAAgC,EAAE;EACtC,IAAI,gBAA0B,EAAE;EAChC,IAAI,WAA4B,EAAE;EAClC,MAAM,UAAU,YAAY,OAAO,KAAK;AACxC,MAAI;AACF,IAAC,CACC,QACA,UACA,SACA,YACA,WAAW,eACX,YACE,gBACF,OAAO,MACP,SACA,OAAO,UAAU,OAAO,MACxB,aACA,uBACD;WACM,KAAK;AAEZ,YAAS,YAAY,OAAO,MAAM,SAAS,sBAAsB,QAAQ,IAAI,GAAG;;AAElF,MAAI,SAAS,SAAS,EACpB,KAAI;GACF,MAAM,QAAQ,UAAU,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAC;AACvD,UAAO,gBAAgB,SAAS;AAChC,oBAAiB,SAAS;AAC1B,UAAO,SAAS,KAAK,GAAG,MAAM,SAAS,IAAI,aAAa,CAAC;WAClD,KAAK;AACZ,OAAI,eAAeC,oCAAkB;AACnC,WAAO,OAAO,KAAK,GAAG,IAAI,OAAO,IAAI,iBAAiB,CAAC;AACvD,WAAO,SAAS,KAAK,GAAG,IAAI,SAAS,IAAI,aAAa,CAAC;SAKvD,QAAO,OAAO,KAAK,EACjB,SAASC,2BAAM,wBAAG,0BAA0BC,+BAAU,QAAQ,IAAI,EAAE,SAAS,GAAG,EACjF,CAAC;;AAIR,UAAQ,KAAK,OAAO;AAGpB,YAAU,KAAK,GAAG,cAAc,KAAK,MAAM,GAAG,YAAY,OAAO,CAAC,IAAI,IAAI,CAAC;EAC3E,MAAM,SAAS,QAAQ;AACvB,UAAQ,IAAI,QAAQ,OAAO;AAK3B,OAAK,MAAM,YAAY,YAAY;GACjC,MAAM,MAAM,QAAQ,QAAQ,SAAS,OAAO,SAAS,UAAU,SAAS,KAAK;GAC7E,MAAM,SAAS,eAAe,IAAI,IAAI,IAAI,EAAE;AAC5C,UAAO,KAAK;IACV,SAAS,SAAS;IAClB,MAAM,SAAS,KAAK,KAAK,QAAQ,GAAG,OAAO,GAAG,MAAM;IACrD,CAAC;AACF,kBAAe,IAAI,KAAK,OAAO;;AAEjC,OAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;GAKxC,MAAM,QAAQ,QAAQ;AACtB,OAAI,UAAU,OACZ,WAAU,KACR,GAAG,YAAY,OAAO,CAAC,sBAAsB,EAAE,+FAEhD;AAEH,SAAM,KAAK,SAAS,GAAG;AACvB,cAAW,KAAK;IAAE;IAAQ,OAAO,SAAS;IAAG,CAAC;;;CAUlD,IAAI,mBAAmB;CAKvB,MAAM,uBAAuB,QAAQ,MAAM,MAAM,EAAE,UAAU,UAAa,EAAE,OAAO,SAAS,EAAE;AAC9F,KAAI,MAAM,WAAW,GAOnB;MAAI,CAAC,wBAAwB,kBAAkB,GAAG;AAChD,aAAU,KACR,0GACD;AACD,sBAAmB;;QAEhB;EAIL,MAAM,YAAY,eAA+B;GAC/C,MAAM,SAAS,WAAW;AAC1B,UAAO,WAAW,SACd,OAAO,WAAW,GAClB,GAAG,YAAY,OAAO,OAAO,CAAC,IAAI,OAAO;;EAI/C,MAAM,YAAY,eAA+B;GAC/C,MAAM,SAAS,WAAW;AAC1B,OAAI,WAAW,OAAW,QAAO,SAAS;GAC1C,MAAM,SAAS,QAAQ,IAAI,OAAO,OAAO;AACzC,UAAO,WAAW,SAAY,SAAS,eAAe,GAAG,OAAO,GAAG,OAAO;;EAK5E,MAAM,mBAAmB,QAA+B;AACtD,OAAI,IAAI,SAAS,yBACf,QAAO,0BAA0B,IAAI,YAAY,sBAAsB,SAAS,IAAI,QAAQ;GAK9F,MAAM,OAAO;AACb,UAAO,IAAI,gBAAgB,IAAI,iBAC3B,GAAG,KAAK,aAAa,SAAS,IAAI,YAAY,KAC9C,GAAG,KAAK,uCAAuC,SAAS,IAAI,YAAY,CAAC,WAAW,SAAS,IAAI,eAAe;;AAOtH,MAAI;AACF,QAAK,MAAM,KAAKN,wCAAiB,MAAM,EAAE;IACvC,MAAM,SAAS,WAAW,EAAE;AAC5B,QAAI,WAAW,QAAW;AAMxB,eAAU,KACR,mDAAmD,EAAE,aAAa,IAAI,EAAE,UACzE;AACD;;IAEF,MAAM,SAAS,QAAQ,IAAI,OAAO,OAAO;AACzC,QAAI,WAAW,QAAW;AAIxB,eAAU,KAAK,gDAAgD,EAAE,UAAU;AAC3E;;IAEF,MAAM,OAAO,EAAE,QAAQ,SAAY,WAAW,EAAE,YAAY,EAAE,IAAI;IAClE,MAAM,aAAa,EAAE,QAAQ,SAAY,EAAE,GAAG,WAAW,EAAE,IAAI,CAAC,IAAI,SAAS;IAC7E,MAAM,UAAU,eAAe,EAAE,QAAQ,SAAY,EAAE,UAAU,gBAAgB,EAAE,IAAI;IACvF,MAAM,UAAU,eACb,IAAI,QAAQ,QAAQ,OAAO,OAAO,EAAE,UAAU,KAAK,CAAC,EACnD,OAAO;AACX,QAAI,YAAY,QAAW;AAUzB,SAAI,EAFF,QAAQ,KAAK,WAAW,WAAW,UACnC,QAAQ,KAAK,OAAO,QAAQ,MAAM,WAAW,WAAW,GAAG,EAClD,SAAQ,QAAQ,UAAU;AACrC;;AAEF,QAAI,EAAE,aAAa,QAAS,QAAO,OAAO,OAAO,KAAK;KAAE,OAAO,OAAO;KAAO;KAAS,CAAC;QAClF,QAAO,OAAO,SAAS,KAAK;KAAE,OAAO,OAAO;KAAO;KAAS,CAAC;;WAE7D,KAAK;AACZ,aAAU,KAAK,iCAAiC,QAAQ,IAAI,GAAG;;;CAInE,MAAM,WAAW,QAAQ,MAAM,MAAM,EAAE,UAAU,OAAU;CAC3D,MAAM,YAAY,QAAQ,MAAM,MAAM,EAAE,OAAO,SAAS,EAAE,IAAI,UAAU,SAAS;CACjF,MAAM,cAAc,QAAQ,MAAM,MAAM,EAAE,SAAS,SAAS,EAAE;CAC9D,MAAM,SAAS,YAAY,aAAc,UAAU;CAKnD,MAAM,aAAa,SAAS,WAAW;AAEvC,KAAI,MAAM;AACR,MACE,KAAK,UACH;GACE;GACA;GACA,OAAO;GAGP,KAAK;IAAE,UAAU,MAAM;IAAQ;IAAe,QAAQ;IAAW;GAClE,EACD,MACA,EACD,CACF;AAGD,MAAI,OAAQ,UAAS,iBAAiB,SAAS,QAAQ,WAAW,YAAY,CAAC;QAC1E;EACL,MAAM,KAAK;EAKX,MAAM,cAAc,GAAY,SAAsC;AACpE,OAAI,EAAE,WAAW,OAAW,MAAK,OAAO,EAAE,SAAS;;AAErD,OAAK,MAAM,KAAK,SAAS;GACvB,MAAM,OAAO,YAAY,EAAE;AAG3B,OAAI,EAAE,YAAY,QAAW;AAC3B,QAAI,GAAG,KAAK,aAAa,EAAE,QAAQ,GAAG;AACtC;;AAQF,QAAK,MAAM,KAAK,EAAE,QAAQ;AACxB,aAAS,GAAG,KAAK,YAAY,GAAG,EAAE,GAAG,EAAE,UAAU;AACjD,eAAW,GAAG,SAAS;;AAEzB,QAAK,MAAM,KAAK,EAAE,UAAU;AAC1B,eAAW,GAAG,KAAK,cAAc,GAAG,EAAE,GAAG,EAAE,UAAU;AACrD,eAAW,GAAG,WAAW;;AAE3B,OAAI,EAAE,OAAO,WAAW,KAAK,EAAE,SAAS,WAAW,GAAG;IAOpD,MAAM,SAAS,EAAE,iBAAiB;AAClC,QAAI,EAAE,aAAa,KAAK,WAAW,KAAK,QAAQ;KAC9C,MAAM,MAAM,mBAAmB,4BAA4B;AAC3D,SAAI,GAAG,KAAK,IAAI,EAAE,SAAS,gCAAgC,MAAM;eACxD,SAAS,EAClB,KACEK,2BACE,wBAAG,GAAGC,+BAAU,MAAM,SAAS,CAAC,QAAQ,EAAE,SAAS,eAAe,OAAO,qBAC1E,CACF;QAED,KAAI,GAAG,KAAK,QAAQ,EAAE,SAAS,cAAc;SAG/C,KACE,GAAG,KAAK,IAAI,EAAE,SAAS,eAAe,EAAE,OAAO,OAAO,aAAa,EAAE,SAAS,OAAO,aACtF;;AAML,OAAK,MAAM,KAAK,UAAW,UAAS,WAAW,IAAI;;AAGrD,MAAK,SAAS,IAAI,EAAE"}