@ddt-tools/cli 0.2.0 → 0.2.4

package/dist/drift-FDRNPWQA.js

@@ -0,0 +1,233 @@
+import {
+  attachRelatedOptions
+} from "./chunk-DL3V7UJ2.js";
+import {
+  addMappingFlags,
+  buildMappingFromOptions
+} from "./chunk-2FT6HXKS.js";
+import "./chunk-DGUM43GV.js";
+
+// src/commands/drift.ts
+import { Command } from "commander";
+import {
+  CompareEngine,
+  DbtManifestSource,
+  InMemorySource,
+  ProjectSource,
+  AccountExtractor,
+  createConnection,
+  defaultExtractors,
+  driftAnomaly,
+  getProfile
+} from "@ddt-tools/core";
+function driftWatchSubcommand() {
+  const sub = new Command("watch");
+  sub.description(
+    "Poll a project against the live Unity Catalog on a fixed interval. Prints DRIFT_DETECTED events to stdout (or POSTs to --webhook) when the catalog diverges from the project."
+  ).requiredOption("--source <path>", "Path to .ddtproj or .ddtpac").requiredOption("--connection <name>", "Connection profile name").option("--catalog <catalog>", "Limit drift check to a single catalog.").option("--schema <schema>", "Limit drift check to a single schema (requires --catalog).").option("--interval <seconds>", "Poll interval in seconds (min 5).", "60").option(
+    "--webhook <url>",
+    "POST drift events as JSON to this URL (Slack/Teams/generic receiver)."
+  ).option("--format <fmt>", "Output format: text | json.", "text").option(
+    "--quiet",
+    "Suppress CLEAN status lines; emit only DRIFT_DETECTED and error events.",
+    false
+  ).action(async (opts) => {
+    const intervalSecs = Math.max(5, parseInt(String(opts.interval), 10) || 60);
+    const format = String(opts.format) === "json" ? "json" : "text";
+    const webhookUrl = opts.webhook ? String(opts.webhook) : void 0;
+    const quiet = !!opts.quiet;
+    const sourcePath = String(opts.source);
+    const scope = {
+      ...opts.catalog ? { catalog: String(opts.catalog) } : {},
+      ...opts.schema ? { schema: String(opts.schema) } : {}
+    };
+    const profile = await getProfile(String(opts.connection));
+    const conn = createConnection(profile);
+    await conn.connect();
+    const src = sourcePath.endsWith(".ddtpac") ? await (async () => {
+      const { PacSource } = await import("@ddt-tools/core");
+      return new PacSource(sourcePath, "source");
+    })() : new ProjectSource(sourcePath, "source");
+    if (!quiet && format === "text") {
+      console.log(
+        `drift watch: polling every ${intervalSecs}s \u2014 ${sourcePath} \u2192 ${profile.auth.host}`
+      );
+      console.log("Press Ctrl+C to stop.");
+    }
+    const postToWebhook = async (event) => {
+      if (!webhookUrl) return;
+      try {
+        const res = await fetch(webhookUrl, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify(event)
+        });
+        if (!res.ok && format === "text") console.warn(`Webhook POST failed: HTTP ${res.status}`);
+      } catch (err) {
+        if (format === "text")
+          console.warn(`Webhook error: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    };
+    const pollOnce = async () => {
+      const ts = (/* @__PURE__ */ new Date()).toISOString();
+      try {
+        const accountExtractor = new AccountExtractor(defaultExtractors());
+        const liveObjs = await accountExtractor.extract(conn, scope);
+        const live = new InMemorySource(liveObjs, { kind: "live", label: profile.auth.host });
+        const engine = new CompareEngine();
+        const result = await engine.compare(src, live);
+        const s = result.summary;
+        const drifted = s.added + s.removed + s.modified;
+        if (drifted > 0) {
+          const event = {
+            type: "DRIFT_DETECTED",
+            timestamp: ts,
+            source: sourcePath,
+            added: s.added,
+            removed: s.removed,
+            modified: s.modified
+          };
+          if (format === "json") process.stdout.write(JSON.stringify(event) + "\n");
+          else console.warn(`[${ts}] DRIFT_DETECTED  +${s.added} -${s.removed} ~${s.modified}`);
+          await postToWebhook(event);
+        } else if (!quiet) {
+          if (format === "json")
+            process.stdout.write(
+              JSON.stringify({ type: "CLEAN", timestamp: ts, source: sourcePath }) + "\n"
+            );
+          else console.log(`[${ts}] clean`);
+        }
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (format === "json")
+          process.stdout.write(
+            JSON.stringify({ type: "POLL_ERROR", timestamp: ts, error: message }) + "\n"
+          );
+        else console.error(`[${ts}] poll error: ${message}`);
+      }
+    };
+    await pollOnce();
+    const timer = setInterval(() => {
+      void pollOnce();
+    }, intervalSecs * 1e3);
+    process.once("SIGINT", () => {
+      clearInterval(timer);
+      void conn.disconnect().then(() => process.exit(0));
+    });
+    await new Promise(() => {
+    });
+  });
+  return sub;
+}
+function driftCommand() {
+  const cmd = new Command("drift");
+  cmd.description(
+    "Refuse with non-zero exit when the live target has drifted from --source or a dbt manifest."
+  ).option("--source <path>", "Source: .ddtproj or .ddtpac (required unless --vs-dbt-project).").option(
+    "--vs-dbt-project <path>",
+    "Compare a compiled dbt project (or target/manifest.json) against the live target. Run `dbt compile` first. When set, --source is not required."
+  ).requiredOption("--connection <name>", "Connection profile to extract live state from.").option("--catalog <catalog>", "Limit drift check to a single catalog.").option("--schema <schema>", "Limit drift check to a single schema (requires --catalog).").option("--ignore-case", "Compare object FQNs case-insensitively.", false).option(
+    "--allow-extras",
+    "Treat objects that exist on the target but not in source as OK (no drift).",
+    false
+  ).option(
+    "--anomalies",
+    "Also classify drift via the anomaly detector (new grants to `account users`, bypass-principal grants, owner changes, audit-column drops, mask removals, new bypass-named groups).",
+    false
+  ).option(
+    "--anomalies-only",
+    "Skip the simple drift summary and emit only the anomaly report. Implies --anomalies.",
+    false
+  ).option(
+    "--fail-on-anomaly <severity>",
+    "Exit non-zero when any anomaly at or above this severity fires. Values: critical | high | medium | low. Default: drift presence alone determines exit code."
+  );
+  addMappingFlags(cmd);
+  cmd.action(async (opts) => {
+    if (!opts.source && !opts.vsDBtProject) {
+      console.error("Provide either --source <path> or --vs-dbt-project <path>.");
+      process.exitCode = 1;
+      return;
+    }
+    const nameMapping = await buildMappingFromOptions(opts);
+    const profile = await getProfile(String(opts.connection));
+    const conn = createConnection(profile);
+    try {
+      await conn.connect();
+      const accountExtractor = new AccountExtractor(defaultExtractors());
+      const scope = {
+        ...opts.catalog ? { catalog: String(opts.catalog) } : {},
+        ...opts.schema ? { schema: String(opts.schema) } : {}
+      };
+      const liveObjs = await accountExtractor.extract(conn, scope);
+      const live = new InMemorySource(liveObjs, { kind: "live", label: profile.auth.host });
+      const src = opts.vsDBtProject ? new DbtManifestSource(String(opts.vsDBtProject), `dbt:${opts.vsDBtProject}`) : String(opts.source).endsWith(".ddtpac") ? (
+        // PacSource via inline import to keep this command self-contained.
+        await (async () => {
+          const { PacSource } = await import("@ddt-tools/core");
+          return new PacSource(String(opts.source), "source");
+        })()
+      ) : new ProjectSource(String(opts.source), "source");
+      const engine = new CompareEngine();
+      const result = await engine.compare(src, live, {
+        ignoreCase: !!opts.ignoreCase,
+        ...nameMapping ? { nameMapping } : {}
+      });
+      const s = result.summary;
+      const drifted = s.added + s.modified + (opts.allowExtras ? 0 : s.removed);
+      if (!opts.anomaliesOnly) {
+        console.log(`Source:   ${result.source.kind}:${result.source.label}`);
+        console.log(`Target:   ${result.target.kind}:${result.target.label}`);
+        console.log(`Summary:  +${s.added} -${s.removed} ~${s.modified} =${s.unchanged}`);
+        console.log(`Drifted:  ${drifted}` + (opts.allowExtras ? " (extras allowed)" : ""));
+        if (drifted > 0) {
+          console.log("");
+          console.log("Drift detected:");
+          for (const o of result.objects) {
+            if (o.kind === "unchanged") continue;
+            if (o.kind === "removed" && opts.allowExtras) continue;
+            const glyph = o.kind === "added" ? "+ source-only" : o.kind === "removed" ? "- target-only" : "~ modified";
+            console.log(`  ${glyph}  ${o.identity.objectType} ${o.identity.fqn}`);
+          }
+          process.exitCode = 1;
+        }
+      }
+      if (opts.anomalies || opts.anomaliesOnly) {
+        const report = driftAnomaly.detectAnomalies(result);
+        if (report.totalAnomalies === 0) {
+          console.log("Anomaly scan: 0 findings.");
+        } else {
+          console.log("");
+          console.log(`Anomaly scan: ${report.totalAnomalies} finding(s):`);
+          for (const a of report.anomalies) {
+            console.log(`  [${a.severity}] ${a.category}: ${a.fqn} \u2014 ${a.reason}`);
+          }
+          const failOn = opts.failOnAnomaly?.toLowerCase();
+          if (failOn && ["critical", "high", "medium", "low"].includes(failOn)) {
+            const failRank = driftAnomaly.anomalySeverityRank(
+              failOn
+            );
+            const triggered = report.anomalies.some(
+              (a) => driftAnomaly.anomalySeverityRank(a.severity) <= failRank
+            );
+            if (triggered) process.exitCode = 1;
+          }
+        }
+      }
+    } finally {
+      await conn.disconnect();
+    }
+  });
+  attachRelatedOptions(cmd, [
+    "compare.ignoreCase",
+    "compare.ignoreComments",
+    "compare.ignoreFormattingDifferences",
+    "compare.excludeObjectTypes"
+  ]);
+  cmd.addCommand(driftWatchSubcommand());
+  return cmd;
+}
+export {
+  driftCommand
+};
+//# sourceMappingURL=drift-FDRNPWQA.js.map

package/dist/drift-FDRNPWQA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/drift.ts"],"sourcesContent":["import { Command } from 'commander';\nimport {\n  CompareEngine,\n  DbtManifestSource,\n  InMemorySource,\n  ProjectSource,\n  AccountExtractor,\n  createConnection,\n  defaultExtractors,\n  driftAnomaly,\n  getProfile,\n  type CompareSource,\n} from '@ddt-tools/core';\nimport { addMappingFlags, buildMappingFromOptions } from '../util/mapping.js';\nimport { attachRelatedOptions } from '../util/help-catalog.js';\n\nfunction driftWatchSubcommand(): Command {\n  const sub = new Command('watch');\n  sub\n    .description(\n      'Poll a project against the live Unity Catalog on a fixed interval. Prints DRIFT_DETECTED events to stdout (or POSTs to --webhook) when the catalog diverges from the project.',\n    )\n    .requiredOption('--source <path>', 'Path to .ddtproj or .ddtpac')\n    .requiredOption('--connection <name>', 'Connection profile name')\n    .option('--catalog <catalog>', 'Limit drift check to a single catalog.')\n    .option('--schema <schema>', 'Limit drift check to a single schema (requires --catalog).')\n    .option('--interval <seconds>', 'Poll interval in seconds (min 5).', '60')\n    .option(\n      '--webhook <url>',\n      'POST drift events as JSON to this URL (Slack/Teams/generic receiver).',\n    )\n    .option('--format <fmt>', 'Output format: text | json.', 'text')\n    .option(\n      '--quiet',\n      'Suppress CLEAN status lines; emit only DRIFT_DETECTED and error events.',\n      false,\n    )\n    .action(async (opts) => {\n      const intervalSecs = Math.max(5, parseInt(String(opts.interval), 10) || 60);\n      const format = String(opts.format) === 'json' ? 'json' : 'text';\n      const webhookUrl = opts.webhook ? String(opts.webhook) : undefined;\n      const quiet = !!opts.quiet;\n      const sourcePath = String(opts.source);\n      const scope = {\n        ...(opts.catalog ? { catalog: String(opts.catalog) } : {}),\n        ...(opts.schema ? { schema: String(opts.schema) } : {}),\n      };\n\n      const profile = await getProfile(String(opts.connection));\n      const conn = createConnection(profile);\n      await conn.connect();\n\n      const src: CompareSource = sourcePath.endsWith('.ddtpac')\n        ? await (async () => {\n            const { PacSource } = await import('@ddt-tools/core');\n            return new PacSource(sourcePath, 'source');\n          })()\n        : new ProjectSource(sourcePath, 'source');\n\n      if (!quiet && format === 'text') {\n        console.log(\n          `drift watch: polling every ${intervalSecs}s — ${sourcePath} → ${profile.auth.host}`,\n        );\n        console.log('Press Ctrl+C to stop.');\n      }\n\n      const postToWebhook = async (event: Record<string, unknown>): Promise<void> => {\n        if (!webhookUrl) return;\n        try {\n          const res = await fetch(webhookUrl, {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            body: JSON.stringify(event),\n          });\n          if (!res.ok && format === 'text') console.warn(`Webhook POST failed: HTTP ${res.status}`);\n        } catch (err) {\n          if (format === 'text')\n            console.warn(`Webhook error: ${err instanceof Error ? err.message : String(err)}`);\n        }\n      };\n\n      const pollOnce = async (): Promise<void> => {\n        const ts = new Date().toISOString();\n        try {\n          const accountExtractor = new AccountExtractor(defaultExtractors());\n          const liveObjs = await accountExtractor.extract(conn, scope);\n          const live = new InMemorySource(liveObjs, { kind: 'live', label: profile.auth.host });\n          const engine = new CompareEngine();\n          const result = await engine.compare(src, live);\n          const s = result.summary;\n          const drifted = s.added + s.removed + s.modified;\n          if (drifted > 0) {\n            const event = {\n              type: 'DRIFT_DETECTED',\n              timestamp: ts,\n              source: sourcePath,\n              added: s.added,\n              removed: s.removed,\n              modified: s.modified,\n            };\n            if (format === 'json') process.stdout.write(JSON.stringify(event) + '\\n');\n            else console.warn(`[${ts}] DRIFT_DETECTED  +${s.added} -${s.removed} ~${s.modified}`);\n            await postToWebhook(event);\n          } else if (!quiet) {\n            if (format === 'json')\n              process.stdout.write(\n                JSON.stringify({ type: 'CLEAN', timestamp: ts, source: sourcePath }) + '\\n',\n              );\n            else console.log(`[${ts}] clean`);\n          }\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err);\n          if (format === 'json')\n            process.stdout.write(\n              JSON.stringify({ type: 'POLL_ERROR', timestamp: ts, error: message }) + '\\n',\n            );\n          else console.error(`[${ts}] poll error: ${message}`);\n        }\n      };\n\n      await pollOnce();\n      const timer = setInterval(() => {\n        void pollOnce();\n      }, intervalSecs * 1000);\n      process.once('SIGINT', () => {\n        clearInterval(timer);\n        void conn.disconnect().then(() => process.exit(0));\n      });\n      await new Promise<void>(() => {});\n    });\n  return sub;\n}\n\n/**\n * `ddt drift` — refuse-on-drift CI gate. Compares a `.ddtproj` (or\n * `.ddtpac`) against a live target via the configured connection profile;\n * exits non-zero when the live state differs.\n *\n * Use it as a nightly cron / scheduled GitHub Action to catch unsanctioned\n * changes to prod.\n */\nexport function driftCommand(): Command {\n  const cmd = new Command('drift');\n  cmd\n    .description(\n      'Refuse with non-zero exit when the live target has drifted from --source or a dbt manifest.',\n    )\n    .option('--source <path>', 'Source: .ddtproj or .ddtpac (required unless --vs-dbt-project).')\n    .option(\n      '--vs-dbt-project <path>',\n      'Compare a compiled dbt project (or target/manifest.json) against the live target. ' +\n        'Run `dbt compile` first. When set, --source is not required.',\n    )\n    .requiredOption('--connection <name>', 'Connection profile to extract live state from.')\n    .option('--catalog <catalog>', 'Limit drift check to a single catalog.')\n    .option('--schema <schema>', 'Limit drift check to a single schema (requires --catalog).')\n    .option('--ignore-case', 'Compare object FQNs case-insensitively.', false)\n    .option(\n      '--allow-extras',\n      'Treat objects that exist on the target but not in source as OK (no drift).',\n      false,\n    )\n    .option(\n      '--anomalies',\n      'Also classify drift via the anomaly detector (new grants to `account users`, bypass-principal grants, owner changes, audit-column drops, mask removals, new bypass-named groups).',\n      false,\n    )\n    .option(\n      '--anomalies-only',\n      'Skip the simple drift summary and emit only the anomaly report. Implies --anomalies.',\n      false,\n    )\n    .option(\n      '--fail-on-anomaly <severity>',\n      'Exit non-zero when any anomaly at or above this severity fires. Values: critical | high | medium | low. Default: drift presence alone determines exit code.',\n    );\n  addMappingFlags(cmd);\n  cmd.action(async (opts) => {\n    if (!opts.source && !opts.vsDBtProject) {\n      console.error('Provide either --source <path> or --vs-dbt-project <path>.');\n      process.exitCode = 1;\n      return;\n    }\n    const nameMapping = await buildMappingFromOptions(opts);\n    const profile = await getProfile(String(opts.connection));\n    const conn = createConnection(profile);\n    try {\n      await conn.connect();\n      const accountExtractor = new AccountExtractor(defaultExtractors());\n      const scope = {\n        ...(opts.catalog ? { catalog: String(opts.catalog) } : {}),\n        ...(opts.schema ? { schema: String(opts.schema) } : {}),\n      };\n      const liveObjs = await accountExtractor.extract(conn, scope);\n      const live = new InMemorySource(liveObjs, { kind: 'live', label: profile.auth.host });\n      const src: CompareSource = opts.vsDBtProject\n        ? new DbtManifestSource(String(opts.vsDBtProject), `dbt:${opts.vsDBtProject}`)\n        : String(opts.source).endsWith('.ddtpac')\n          ? // PacSource via inline import to keep this command self-contained.\n            await (async () => {\n              const { PacSource } = await import('@ddt-tools/core');\n              return new PacSource(String(opts.source), 'source');\n            })()\n          : new ProjectSource(String(opts.source), 'source');\n\n      const engine = new CompareEngine();\n      const result = await engine.compare(src, live, {\n        ignoreCase: !!opts.ignoreCase,\n        ...(nameMapping ? { nameMapping } : {}),\n      });\n\n      const s = result.summary;\n      const drifted = s.added + s.modified + (opts.allowExtras ? 0 : s.removed);\n      if (!opts.anomaliesOnly) {\n        console.log(`Source:   ${result.source.kind}:${result.source.label}`);\n        console.log(`Target:   ${result.target.kind}:${result.target.label}`);\n        console.log(`Summary:  +${s.added} -${s.removed} ~${s.modified} =${s.unchanged}`);\n        console.log(`Drifted:  ${drifted}` + (opts.allowExtras ? ' (extras allowed)' : ''));\n        if (drifted > 0) {\n          console.log('');\n          console.log('Drift detected:');\n          for (const o of result.objects) {\n            if (o.kind === 'unchanged') continue;\n            if (o.kind === 'removed' && opts.allowExtras) continue;\n            const glyph =\n              o.kind === 'added'\n                ? '+ source-only'\n                : o.kind === 'removed'\n                  ? '- target-only'\n                  : '~ modified';\n            console.log(`  ${glyph}  ${o.identity.objectType} ${o.identity.fqn}`);\n          }\n          process.exitCode = 1;\n        }\n      }\n\n      if (opts.anomalies || opts.anomaliesOnly) {\n        const report = driftAnomaly.detectAnomalies(result);\n        if (report.totalAnomalies === 0) {\n          console.log('Anomaly scan: 0 findings.');\n        } else {\n          console.log('');\n          console.log(`Anomaly scan: ${report.totalAnomalies} finding(s):`);\n          for (const a of report.anomalies) {\n            console.log(`  [${a.severity}] ${a.category}: ${a.fqn} — ${a.reason}`);\n          }\n          const failOn = (opts.failOnAnomaly as string | undefined)?.toLowerCase();\n          if (failOn && ['critical', 'high', 'medium', 'low'].includes(failOn)) {\n            const failRank = driftAnomaly.anomalySeverityRank(\n              failOn as driftAnomaly.AnomalySeverity,\n            );\n            const triggered = report.anomalies.some(\n              (a) => driftAnomaly.anomalySeverityRank(a.severity) <= failRank,\n            );\n            if (triggered) process.exitCode = 1;\n          }\n        }\n      }\n    } finally {\n      await conn.disconnect();\n    }\n  });\n  attachRelatedOptions(cmd, [\n    'compare.ignoreCase',\n    'compare.ignoreComments',\n    'compare.ignoreFormattingDifferences',\n    'compare.excludeObjectTypes',\n  ]);\n  cmd.addCommand(driftWatchSubcommand());\n  return cmd;\n}\n"],"mappings":";;;;;;;;;;AAAA,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAIP,SAAS,uBAAgC;AACvC,QAAM,MAAM,IAAI,QAAQ,OAAO;AAC/B,MACG;AAAA,IACC;AAAA,EACF,EACC,eAAe,mBAAmB,6BAA6B,EAC/D,eAAe,uBAAuB,yBAAyB,EAC/D,OAAO,uBAAuB,wCAAwC,EACtE,OAAO,qBAAqB,4DAA4D,EACxF,OAAO,wBAAwB,qCAAqC,IAAI,EACxE;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,OAAO,kBAAkB,+BAA+B,MAAM,EAC9D;AAAA,IACC;AAAA,IACA;AAAA,IACA;AAAA,EACF,EACC,OAAO,OAAO,SAAS;AACtB,UAAM,eAAe,KAAK,IAAI,GAAG,SAAS,OAAO,KAAK,QAAQ,GAAG,EAAE,KAAK,EAAE;AAC1E,UAAM,SAAS,OAAO,KAAK,MAAM,MAAM,SAAS,SAAS;AACzD,UAAM,aAAa,KAAK,UAAU,OAAO,KAAK,OAAO,IAAI;AACzD,UAAM,QAAQ,CAAC,CAAC,KAAK;AACrB,UAAM,aAAa,OAAO,KAAK,MAAM;AACrC,UAAM,QAAQ;AAAA,MACZ,GAAI,KAAK,UAAU,EAAE,SAAS,OAAO,KAAK,OAAO,EAAE,IAAI,CAAC;AAAA,MACxD,GAAI,KAAK,SAAS,EAAE,QAAQ,OAAO,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,IACvD;AAEA,UAAM,UAAU,MAAM,WAAW,OAAO,KAAK,UAAU,CAAC;AACxD,UAAM,OAAO,iBAAiB,OAAO;AACrC,UAAM,KAAK,QAAQ;AAEnB,UAAM,MAAqB,WAAW,SAAS,SAAS,IACpD,OAAO,YAAY;AACjB,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,iBAAiB;AACpD,aAAO,IAAI,UAAU,YAAY,QAAQ;AAAA,IAC3C,GAAG,IACH,IAAI,cAAc,YAAY,QAAQ;AAE1C,QAAI,CAAC,SAAS,WAAW,QAAQ;AAC/B,cAAQ;AAAA,QACN,8BAA8B,YAAY,YAAO,UAAU,WAAM,QAAQ,KAAK,IAAI;AAAA,MACpF;AACA,cAAQ,IAAI,uBAAuB;AAAA,IACrC;AAEA,UAAM,gBAAgB,OAAO,UAAkD;AAC7E,UAAI,CAAC,WAAY;AACjB,UAAI;AACF,cAAM,MAAM,MAAM,MAAM,YAAY;AAAA,UAClC,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,KAAK;AAAA,QAC5B,CAAC;AACD,YAAI,CAAC,IAAI,MAAM,WAAW,OAAQ,SAAQ,KAAK,6BAA6B,IAAI,MAAM,EAAE;AAAA,MAC1F,SAAS,KAAK;AACZ,YAAI,WAAW;AACb,kBAAQ,KAAK,kBAAkB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,MACrF;AAAA,IACF;AAEA,UAAM,WAAW,YAA2B;AAC1C,YAAM,MAAK,oBAAI,KAAK,GAAE,YAAY;AAClC,UAAI;AACF,cAAM,mBAAmB,IAAI,iBAAiB,kBAAkB,CAAC;AACjE,cAAM,WAAW,MAAM,iBAAiB,QAAQ,MAAM,KAAK;AAC3D,cAAM,OAAO,IAAI,eAAe,UAAU,EAAE,MAAM,QAAQ,OAAO,QAAQ,KAAK,KAAK,CAAC;AACpF,cAAM,SAAS,IAAI,cAAc;AACjC,cAAM,SAAS,MAAM,OAAO,QAAQ,KAAK,IAAI;AAC7C,cAAM,IAAI,OAAO;AACjB,cAAM,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE;AACxC,YAAI,UAAU,GAAG;AACf,gBAAM,QAAQ;AAAA,YACZ,MAAM;AAAA,YACN,WAAW;AAAA,YACX,QAAQ;AAAA,YACR,OAAO,EAAE;AAAA,YACT,SAAS,EAAE;AAAA,YACX,UAAU,EAAE;AAAA,UACd;AACA,cAAI,WAAW,OAAQ,SAAQ,OAAO,MAAM,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,cACnE,SAAQ,KAAK,IAAI,EAAE,sBAAsB,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,EAAE,QAAQ,EAAE;AACpF,gBAAM,cAAc,KAAK;AAAA,QAC3B,WAAW,CAAC,OAAO;AACjB,cAAI,WAAW;AACb,oBAAQ,OAAO;AAAA,cACb,KAAK,UAAU,EAAE,MAAM,SAAS,WAAW,IAAI,QAAQ,WAAW,CAAC,IAAI;AAAA,YACzE;AAAA,cACG,SAAQ,IAAI,IAAI,EAAE,SAAS;AAAA,QAClC;AAAA,MACF,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAI,WAAW;AACb,kBAAQ,OAAO;AAAA,YACb,KAAK,UAAU,EAAE,MAAM,cAAc,WAAW,IAAI,OAAO,QAAQ,CAAC,IAAI;AAAA,UAC1E;AAAA,YACG,SAAQ,MAAM,IAAI,EAAE,iBAAiB,OAAO,EAAE;AAAA,MACrD;AAAA,IACF;AAEA,UAAM,SAAS;AACf,UAAM,QAAQ,YAAY,MAAM;AAC9B,WAAK,SAAS;AAAA,IAChB,GAAG,eAAe,GAAI;AACtB,YAAQ,KAAK,UAAU,MAAM;AAC3B,oBAAc,KAAK;AACnB,WAAK,KAAK,WAAW,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,IACnD,CAAC;AACD,UAAM,IAAI,QAAc,MAAM;AAAA,IAAC,CAAC;AAAA,EAClC,CAAC;AACH,SAAO;AACT;AAUO,SAAS,eAAwB;AACtC,QAAM,MAAM,IAAI,QAAQ,OAAO;AAC/B,MACG;AAAA,IACC;AAAA,EACF,EACC,OAAO,mBAAmB,iEAAiE,EAC3F;AAAA,IACC;AAAA,IACA;AAAA,EAEF,EACC,eAAe,uBAAuB,gDAAgD,EACtF,OAAO,uBAAuB,wCAAwC,EACtE,OAAO,qBAAqB,4DAA4D,EACxF,OAAO,iBAAiB,2CAA2C,KAAK,EACxE;AAAA,IACC;AAAA,IACA;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF;AACF,kBAAgB,GAAG;AACnB,MAAI,OAAO,OAAO,SAAS;AACzB,QAAI,CAAC,KAAK,UAAU,CAAC,KAAK,cAAc;AACtC,cAAQ,MAAM,4DAA4D;AAC1E,cAAQ,WAAW;AACnB;AAAA,IACF;AACA,UAAM,cAAc,MAAM,wBAAwB,IAAI;AACtD,UAAM,UAAU,MAAM,WAAW,OAAO,KAAK,UAAU,CAAC;AACxD,UAAM,OAAO,iBAAiB,OAAO;AACrC,QAAI;AACF,YAAM,KAAK,QAAQ;AACnB,YAAM,mBAAmB,IAAI,iBAAiB,kBAAkB,CAAC;AACjE,YAAM,QAAQ;AAAA,QACZ,GAAI,KAAK,UAAU,EAAE,SAAS,OAAO,KAAK,OAAO,EAAE,IAAI,CAAC;AAAA,QACxD,GAAI,KAAK,SAAS,EAAE,QAAQ,OAAO,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,MACvD;AACA,YAAM,WAAW,MAAM,iBAAiB,QAAQ,MAAM,KAAK;AAC3D,YAAM,OAAO,IAAI,eAAe,UAAU,EAAE,MAAM,QAAQ,OAAO,QAAQ,KAAK,KAAK,CAAC;AACpF,YAAM,MAAqB,KAAK,eAC5B,IAAI,kBAAkB,OAAO,KAAK,YAAY,GAAG,OAAO,KAAK,YAAY,EAAE,IAC3E,OAAO,KAAK,MAAM,EAAE,SAAS,SAAS;AAAA;AAAA,QAEpC,OAAO,YAAY;AACjB,gBAAM,EAAE,UAAU,IAAI,MAAM,OAAO,iBAAiB;AACpD,iBAAO,IAAI,UAAU,OAAO,KAAK,MAAM,GAAG,QAAQ;AAAA,QACpD,GAAG;AAAA,UACH,IAAI,cAAc,OAAO,KAAK,MAAM,GAAG,QAAQ;AAErD,YAAM,SAAS,IAAI,cAAc;AACjC,YAAM,SAAS,MAAM,OAAO,QAAQ,KAAK,MAAM;AAAA,QAC7C,YAAY,CAAC,CAAC,KAAK;AAAA,QACnB,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,MACvC,CAAC;AAED,YAAM,IAAI,OAAO;AACjB,YAAM,UAAU,EAAE,QAAQ,EAAE,YAAY,KAAK,cAAc,IAAI,EAAE;AACjE,UAAI,CAAC,KAAK,eAAe;AACvB,gBAAQ,IAAI,aAAa,OAAO,OAAO,IAAI,IAAI,OAAO,OAAO,KAAK,EAAE;AACpE,gBAAQ,IAAI,aAAa,OAAO,OAAO,IAAI,IAAI,OAAO,OAAO,KAAK,EAAE;AACpE,gBAAQ,IAAI,cAAc,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,EAAE,QAAQ,KAAK,EAAE,SAAS,EAAE;AAChF,gBAAQ,IAAI,aAAa,OAAO,MAAM,KAAK,cAAc,sBAAsB,GAAG;AAClF,YAAI,UAAU,GAAG;AACf,kBAAQ,IAAI,EAAE;AACd,kBAAQ,IAAI,iBAAiB;AAC7B,qBAAW,KAAK,OAAO,SAAS;AAC9B,gBAAI,EAAE,SAAS,YAAa;AAC5B,gBAAI,EAAE,SAAS,aAAa,KAAK,YAAa;AAC9C,kBAAM,QACJ,EAAE,SAAS,UACP,kBACA,EAAE,SAAS,YACT,kBACA;AACR,oBAAQ,IAAI,KAAK,KAAK,KAAK,EAAE,SAAS,UAAU,IAAI,EAAE,SAAS,GAAG,EAAE;AAAA,UACtE;AACA,kBAAQ,WAAW;AAAA,QACrB;AAAA,MACF;AAEA,UAAI,KAAK,aAAa,KAAK,eAAe;AACxC,cAAM,SAAS,aAAa,gBAAgB,MAAM;AAClD,YAAI,OAAO,mBAAmB,GAAG;AAC/B,kBAAQ,IAAI,2BAA2B;AAAA,QACzC,OAAO;AACL,kBAAQ,IAAI,EAAE;AACd,kBAAQ,IAAI,iBAAiB,OAAO,cAAc,cAAc;AAChE,qBAAW,KAAK,OAAO,WAAW;AAChC,oBAAQ,IAAI,MAAM,EAAE,QAAQ,KAAK,EAAE,QAAQ,KAAK,EAAE,GAAG,WAAM,EAAE,MAAM,EAAE;AAAA,UACvE;AACA,gBAAM,SAAU,KAAK,eAAsC,YAAY;AACvE,cAAI,UAAU,CAAC,YAAY,QAAQ,UAAU,KAAK,EAAE,SAAS,MAAM,GAAG;AACpE,kBAAM,WAAW,aAAa;AAAA,cAC5B;AAAA,YACF;AACA,kBAAM,YAAY,OAAO,UAAU;AAAA,cACjC,CAAC,MAAM,aAAa,oBAAoB,EAAE,QAAQ,KAAK;AAAA,YACzD;AACA,gBAAI,UAAW,SAAQ,WAAW;AAAA,UACpC;AAAA,QACF;AAAA,MACF;AAAA,IACF,UAAE;AACA,YAAM,KAAK,WAAW;AAAA,IACxB;AAAA,EACF,CAAC;AACD,uBAAqB,KAAK;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,WAAW,qBAAqB,CAAC;AACrC,SAAO;AACT;","names":[]}

package/dist/drift-gate-6BWWWMHW.js

@@ -0,0 +1,103 @@
+import "./chunk-DGUM43GV.js";
+
+// src/commands/drift-gate.ts
+import { Command } from "commander";
+import {
+  AccountExtractor,
+  CompareEngine,
+  InMemorySource,
+  createConnection,
+  defaultExtractors,
+  getProfile
+} from "@ddt-tools/core";
+function driftGateCommand() {
+  const cmd = new Command("drift-gate");
+  cmd.description(
+    "Refuse-on-drift CI gate across multiple replica workspaces. Compares replicas against a primary."
+  ).requiredOption("--primary <profile>", "Primary workspace connection profile.").requiredOption("--replicas <list>", "Comma-separated replica connection profile names.").option("--catalog <catalog>", "Limit drift comparison to a single catalog.").option("--schema <schema>", "Limit drift comparison to a single schema (requires --catalog).").option(
+    "--threshold <n>",
+    "Max allowed differences per replica before the gate fails. Default 0.",
+    "0"
+  ).option("--format <fmt>", "Output: table | json.", "table").action(async (opts) => {
+    const primary = await getProfile(String(opts.primary));
+    const replicaNames = String(opts.replicas).split(",").map((s) => s.trim()).filter(Boolean);
+    if (replicaNames.length === 0) {
+      throw new Error("At least one replica profile is required via --replicas.");
+    }
+    const threshold = Number.parseInt(String(opts.threshold), 10);
+    const scope = {
+      ...opts.catalog ? { catalog: String(opts.catalog) } : {},
+      ...opts.schema ? { schema: String(opts.schema) } : {}
+    };
+    const primaryConn = createConnection(primary);
+    let primaryObjs;
+    try {
+      await primaryConn.connect();
+      primaryObjs = await new AccountExtractor(defaultExtractors()).extract(primaryConn, scope);
+    } finally {
+      await primaryConn.disconnect();
+    }
+    const primarySource = new InMemorySource(primaryObjs, {
+      kind: "live",
+      label: `primary:${primary.auth.host}`
+    });
+    const results = [];
+    const engine = new CompareEngine();
+    for (const replicaName of replicaNames) {
+      const replicaProfile = await getProfile(replicaName);
+      const replicaConn = createConnection(replicaProfile);
+      let replicaObjs;
+      try {
+        await replicaConn.connect();
+        replicaObjs = await new AccountExtractor(defaultExtractors()).extract(replicaConn, scope);
+      } finally {
+        await replicaConn.disconnect();
+      }
+      const replicaSource = new InMemorySource(replicaObjs, {
+        kind: "live",
+        label: `replica:${replicaProfile.auth.host}`
+      });
+      const result = await engine.compare(primarySource, replicaSource);
+      const { added, removed, modified } = result.summary;
+      results.push({
+        profile: replicaName,
+        workspaceHost: replicaProfile.auth.host,
+        added,
+        removed,
+        modified,
+        total: added + removed + modified
+      });
+    }
+    if (opts.format === "json") {
+      console.log(
+        JSON.stringify({ primary: primary.auth.host, threshold, replicas: results }, null, 2)
+      );
+    } else {
+      console.log(`Drift gate \u2014 primary ${primary.auth.host}`);
+      console.log("");
+      console.log(
+        "  REPLICA-PROFILE         WORKSPACE-HOST                  ADD  RM  MOD  TOTAL  STATUS"
+      );
+      console.log(
+        "  ----------------------  ------------------------------  ---  --  ---  -----  ------"
+      );
+      for (const r of results) {
+        const status = r.total > threshold ? "DRIFT" : "OK";
+        console.log(
+          `  ${r.profile.padEnd(22).slice(0, 22)}  ${r.workspaceHost.padEnd(30).slice(0, 30)}  ${String(r.added).padStart(3)}  ${String(r.removed).padStart(2)}  ${String(r.modified).padStart(3)}  ${String(r.total).padStart(5)}  ${status}`
+        );
+      }
+    }
+    const drifting = results.filter((r) => r.total > threshold);
+    if (drifting.length > 0) {
+      console.error("");
+      console.error(`Drift detected in ${drifting.length} replica(s) (threshold=${threshold}).`);
+      process.exitCode = 1;
+    }
+  });
+  return cmd;
+}
+export {
+  driftGateCommand
+};
+//# sourceMappingURL=drift-gate-6BWWWMHW.js.map

package/dist/drift-gate-6BWWWMHW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/drift-gate.ts"],"sourcesContent":["/**\n * `ddt drift-gate` — multi-region/replica drift gate.\n *\n * Compares the live schema in N replica workspaces against a primary\n * workspace's live schema. Useful for orgs that replicate Unity Catalog\n * state across regions (Delta Sharing, multi-workspace deployments) and\n * want a CI gate that fires the moment any replica drifts from the\n * primary.\n *\n * Algorithm:\n *   1. Extract primary's live model.\n *   2. For each replica, extract live model + compare against primary.\n *   3. Aggregate per-replica diff counts.\n *   4. Exit non-zero if any replica has drift > threshold.\n *\n * Combine with the existing `ddt drift` command (project ↔ region) to\n * cover both vectors: (a) project drift (drift) and (b) inter-region\n * drift (drift-gate).\n */\nimport { Command } from 'commander';\nimport {\n  AccountExtractor,\n  CompareEngine,\n  InMemorySource,\n  createConnection,\n  defaultExtractors,\n  getProfile,\n} from '@ddt-tools/core';\n\ninterface RegionResult {\n  profile: string;\n  workspaceHost: string;\n  added: number;\n  removed: number;\n  modified: number;\n  total: number;\n}\n\nexport function driftGateCommand(): Command {\n  const cmd = new Command('drift-gate');\n  cmd\n    .description(\n      'Refuse-on-drift CI gate across multiple replica workspaces. Compares replicas against a primary.',\n    )\n    .requiredOption('--primary <profile>', 'Primary workspace connection profile.')\n    .requiredOption('--replicas <list>', 'Comma-separated replica connection profile names.')\n    .option('--catalog <catalog>', 'Limit drift comparison to a single catalog.')\n    .option('--schema <schema>', 'Limit drift comparison to a single schema (requires --catalog).')\n    .option(\n      '--threshold <n>',\n      'Max allowed differences per replica before the gate fails. Default 0.',\n      '0',\n    )\n    .option('--format <fmt>', 'Output: table | json.', 'table')\n    .action(async (opts) => {\n      const primary = await getProfile(String(opts.primary));\n      const replicaNames = String(opts.replicas)\n        .split(',')\n        .map((s) => s.trim())\n        .filter(Boolean);\n      if (replicaNames.length === 0) {\n        throw new Error('At least one replica profile is required via --replicas.');\n      }\n      const threshold = Number.parseInt(String(opts.threshold), 10);\n      const scope = {\n        ...(opts.catalog ? { catalog: String(opts.catalog) } : {}),\n        ...(opts.schema ? { schema: String(opts.schema) } : {}),\n      };\n\n      // 1. Extract primary.\n      const primaryConn = createConnection(primary);\n      let primaryObjs;\n      try {\n        await primaryConn.connect();\n        primaryObjs = await new AccountExtractor(defaultExtractors()).extract(primaryConn, scope);\n      } finally {\n        await primaryConn.disconnect();\n      }\n      const primarySource = new InMemorySource(primaryObjs, {\n        kind: 'live',\n        label: `primary:${primary.auth.host}`,\n      });\n\n      const results: RegionResult[] = [];\n      const engine = new CompareEngine();\n\n      // 2. Per-replica compare.\n      for (const replicaName of replicaNames) {\n        const replicaProfile = await getProfile(replicaName);\n        const replicaConn = createConnection(replicaProfile);\n        let replicaObjs;\n        try {\n          await replicaConn.connect();\n          replicaObjs = await new AccountExtractor(defaultExtractors()).extract(replicaConn, scope);\n        } finally {\n          await replicaConn.disconnect();\n        }\n        const replicaSource = new InMemorySource(replicaObjs, {\n          kind: 'live',\n          label: `replica:${replicaProfile.auth.host}`,\n        });\n        const result = await engine.compare(primarySource, replicaSource);\n        const { added, removed, modified } = result.summary;\n        results.push({\n          profile: replicaName,\n          workspaceHost: replicaProfile.auth.host,\n          added,\n          removed,\n          modified,\n          total: added + removed + modified,\n        });\n      }\n\n      if (opts.format === 'json') {\n        console.log(\n          JSON.stringify({ primary: primary.auth.host, threshold, replicas: results }, null, 2),\n        );\n      } else {\n        console.log(`Drift gate — primary ${primary.auth.host}`);\n        console.log('');\n        console.log(\n          '  REPLICA-PROFILE         WORKSPACE-HOST                  ADD  RM  MOD  TOTAL  STATUS',\n        );\n        console.log(\n          '  ----------------------  ------------------------------  ---  --  ---  -----  ------',\n        );\n        for (const r of results) {\n          const status = r.total > threshold ? 'DRIFT' : 'OK';\n          console.log(\n            `  ${r.profile.padEnd(22).slice(0, 22)}  ${r.workspaceHost.padEnd(30).slice(0, 30)}  ${String(r.added).padStart(3)}  ${String(r.removed).padStart(2)}  ${String(r.modified).padStart(3)}  ${String(r.total).padStart(5)}  ${status}`,\n          );\n        }\n      }\n\n      const drifting = results.filter((r) => r.total > threshold);\n      if (drifting.length > 0) {\n        console.error('');\n        console.error(`Drift detected in ${drifting.length} replica(s) (threshold=${threshold}).`);\n        process.exitCode = 1;\n      }\n    });\n  return cmd;\n}\n"],"mappings":";;;AAmBA,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWA,SAAS,mBAA4B;AAC1C,QAAM,MAAM,IAAI,QAAQ,YAAY;AACpC,MACG;AAAA,IACC;AAAA,EACF,EACC,eAAe,uBAAuB,uCAAuC,EAC7E,eAAe,qBAAqB,mDAAmD,EACvF,OAAO,uBAAuB,6CAA6C,EAC3E,OAAO,qBAAqB,iEAAiE,EAC7F;AAAA,IACC;AAAA,IACA;AAAA,IACA;AAAA,EACF,EACC,OAAO,kBAAkB,yBAAyB,OAAO,EACzD,OAAO,OAAO,SAAS;AACtB,UAAM,UAAU,MAAM,WAAW,OAAO,KAAK,OAAO,CAAC;AACrD,UAAM,eAAe,OAAO,KAAK,QAAQ,EACtC,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,QAAI,aAAa,WAAW,GAAG;AAC7B,YAAM,IAAI,MAAM,0DAA0D;AAAA,IAC5E;AACA,UAAM,YAAY,OAAO,SAAS,OAAO,KAAK,SAAS,GAAG,EAAE;AAC5D,UAAM,QAAQ;AAAA,MACZ,GAAI,KAAK,UAAU,EAAE,SAAS,OAAO,KAAK,OAAO,EAAE,IAAI,CAAC;AAAA,MACxD,GAAI,KAAK,SAAS,EAAE,QAAQ,OAAO,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,IACvD;AAGA,UAAM,cAAc,iBAAiB,OAAO;AAC5C,QAAI;AACJ,QAAI;AACF,YAAM,YAAY,QAAQ;AAC1B,oBAAc,MAAM,IAAI,iBAAiB,kBAAkB,CAAC,EAAE,QAAQ,aAAa,KAAK;AAAA,IAC1F,UAAE;AACA,YAAM,YAAY,WAAW;AAAA,IAC/B;AACA,UAAM,gBAAgB,IAAI,eAAe,aAAa;AAAA,MACpD,MAAM;AAAA,MACN,OAAO,WAAW,QAAQ,KAAK,IAAI;AAAA,IACrC,CAAC;AAED,UAAM,UAA0B,CAAC;AACjC,UAAM,SAAS,IAAI,cAAc;AAGjC,eAAW,eAAe,cAAc;AACtC,YAAM,iBAAiB,MAAM,WAAW,WAAW;AACnD,YAAM,cAAc,iBAAiB,cAAc;AACnD,UAAI;AACJ,UAAI;AACF,cAAM,YAAY,QAAQ;AAC1B,sBAAc,MAAM,IAAI,iBAAiB,kBAAkB,CAAC,EAAE,QAAQ,aAAa,KAAK;AAAA,MAC1F,UAAE;AACA,cAAM,YAAY,WAAW;AAAA,MAC/B;AACA,YAAM,gBAAgB,IAAI,eAAe,aAAa;AAAA,QACpD,MAAM;AAAA,QACN,OAAO,WAAW,eAAe,KAAK,IAAI;AAAA,MAC5C,CAAC;AACD,YAAM,SAAS,MAAM,OAAO,QAAQ,eAAe,aAAa;AAChE,YAAM,EAAE,OAAO,SAAS,SAAS,IAAI,OAAO;AAC5C,cAAQ,KAAK;AAAA,QACX,SAAS;AAAA,QACT,eAAe,eAAe,KAAK;AAAA,QACnC;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,QAAQ,UAAU;AAAA,MAC3B,CAAC;AAAA,IACH;AAEA,QAAI,KAAK,WAAW,QAAQ;AAC1B,cAAQ;AAAA,QACN,KAAK,UAAU,EAAE,SAAS,QAAQ,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,MAAM,CAAC;AAAA,MACtF;AAAA,IACF,OAAO;AACL,cAAQ,IAAI,6BAAwB,QAAQ,KAAK,IAAI,EAAE;AACvD,cAAQ,IAAI,EAAE;AACd,cAAQ;AAAA,QACN;AAAA,MACF;AACA,cAAQ;AAAA,QACN;AAAA,MACF;AACA,iBAAW,KAAK,SAAS;AACvB,cAAM,SAAS,EAAE,QAAQ,YAAY,UAAU;AAC/C,gBAAQ;AAAA,UACN,KAAK,EAAE,QAAQ,OAAO,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,KAAK,EAAE,cAAc,OAAO,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,MAAM;AAAA,QACpO;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,QAAQ,OAAO,CAAC,MAAM,EAAE,QAAQ,SAAS;AAC1D,QAAI,SAAS,SAAS,GAAG;AACvB,cAAQ,MAAM,EAAE;AAChB,cAAQ,MAAM,qBAAqB,SAAS,MAAM,0BAA0B,SAAS,IAAI;AACzF,cAAQ,WAAW;AAAA,IACrB;AAAA,EACF,CAAC;AACH,SAAO;AACT;","names":[]}

package/dist/error-lookup-4R3Y4RBC.js

@@ -0,0 +1,56 @@
+import "./chunk-DGUM43GV.js";
+
+// src/commands/error-lookup.ts
+import { Command } from "commander";
+import { errorCatalog } from "@ddt-tools/core";
+function errorLookupCommand() {
+  const cmd = new Command("error-lookup");
+  cmd.description("Look up a failure in the known-error catalog by code, fingerprint, or message.").option("--code <code>", "Adapter error code (e.g. PERMISSION_DENIED).").option("--fingerprint <hex>", "16-char fingerprint from a prior failure.").option("--message <text>", "Free-text error message \u2014 falls back to regex match.").option("--list", "List every entry in the catalog (with code/key/cause).", false).option("--format <fmt>", "text | json. Default text.", "text").action(
+    (opts) => {
+      const fmt = (opts.format ?? "text").toLowerCase();
+      if (opts.list) {
+        const all = errorCatalog.DEFAULT_KNOWN_ERRORS;
+        if (fmt === "json") {
+          process.stdout.write(JSON.stringify(all, null, 2) + "\n");
+        } else {
+          for (const entry of all) {
+            const codeList = entry.codes?.join(", ") ?? "\u2014";
+            process.stdout.write(
+              `${entry.key}
+  codes: ${codeList}
+  cause: ${entry.causeSummary}
+
+`
+            );
+          }
+        }
+        return;
+      }
+      if (!opts.code && !opts.fingerprint && !opts.message) {
+        process.stderr.write("error-lookup: pass --code, --fingerprint, --message, or --list\n");
+        process.exitCode = 2;
+        return;
+      }
+      const match = errorCatalog.lookupKnownError({
+        code: opts.code,
+        fingerprint: opts.fingerprint,
+        message: opts.message
+      });
+      if (!match) {
+        process.stderr.write("No catalog entry matched.\n");
+        process.exitCode = 1;
+        return;
+      }
+      if (fmt === "json") {
+        process.stdout.write(JSON.stringify(match, null, 2) + "\n");
+      } else {
+        process.stdout.write(errorCatalog.formatCatalogMatch(match) + "\n");
+      }
+    }
+  );
+  return cmd;
+}
+export {
+  errorLookupCommand
+};
+//# sourceMappingURL=error-lookup-4R3Y4RBC.js.map

package/dist/error-lookup-4R3Y4RBC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/error-lookup.ts"],"sourcesContent":["/**\n * `ddt error-lookup` — look up a failure in the known-error catalog (DSR.2).\n *\n * Usage:\n *   ddt error-lookup --code PERMISSION_DENIED\n *   ddt error-lookup --fingerprint abcd1234deadbeef\n *   ddt error-lookup --message \"Permission denied\"\n *   ddt error-lookup --list\n *\n * Exit codes:\n *   0 — match found, or `--list` ran\n *   1 — no match found for the supplied input\n *   2 — usage error (no --code / --fingerprint / --message / --list passed)\n *\n * Mirrors `sdt error-lookup`.\n */\nimport { Command } from 'commander';\nimport { errorCatalog } from '@ddt-tools/core';\n\nexport function errorLookupCommand(): Command {\n  const cmd = new Command('error-lookup');\n  cmd\n    .description('Look up a failure in the known-error catalog by code, fingerprint, or message.')\n    .option('--code <code>', 'Adapter error code (e.g. PERMISSION_DENIED).')\n    .option('--fingerprint <hex>', '16-char fingerprint from a prior failure.')\n    .option('--message <text>', 'Free-text error message — falls back to regex match.')\n    .option('--list', 'List every entry in the catalog (with code/key/cause).', false)\n    .option('--format <fmt>', 'text | json. Default text.', 'text')\n    .action(\n      (opts: {\n        code?: string;\n        fingerprint?: string;\n        message?: string;\n        list?: boolean;\n        format?: string;\n      }) => {\n        const fmt = (opts.format ?? 'text').toLowerCase();\n        if (opts.list) {\n          const all = errorCatalog.DEFAULT_KNOWN_ERRORS;\n          if (fmt === 'json') {\n            process.stdout.write(JSON.stringify(all, null, 2) + '\\n');\n          } else {\n            for (const entry of all) {\n              const codeList = entry.codes?.join(', ') ?? '—';\n              process.stdout.write(\n                `${entry.key}\\n  codes: ${codeList}\\n  cause: ${entry.causeSummary}\\n\\n`,\n              );\n            }\n          }\n          return;\n        }\n        if (!opts.code && !opts.fingerprint && !opts.message) {\n          process.stderr.write('error-lookup: pass --code, --fingerprint, --message, or --list\\n');\n          process.exitCode = 2;\n          return;\n        }\n        const match = errorCatalog.lookupKnownError({\n          code: opts.code,\n          fingerprint: opts.fingerprint,\n          message: opts.message,\n        });\n        if (!match) {\n          process.stderr.write('No catalog entry matched.\\n');\n          process.exitCode = 1;\n          return;\n        }\n        if (fmt === 'json') {\n          process.stdout.write(JSON.stringify(match, null, 2) + '\\n');\n        } else {\n          process.stdout.write(errorCatalog.formatCatalogMatch(match) + '\\n');\n        }\n      },\n    );\n  return cmd;\n}\n"],"mappings":";;;AAgBA,SAAS,eAAe;AACxB,SAAS,oBAAoB;AAEtB,SAAS,qBAA8B;AAC5C,QAAM,MAAM,IAAI,QAAQ,cAAc;AACtC,MACG,YAAY,gFAAgF,EAC5F,OAAO,iBAAiB,8CAA8C,EACtE,OAAO,uBAAuB,2CAA2C,EACzE,OAAO,oBAAoB,2DAAsD,EACjF,OAAO,UAAU,0DAA0D,KAAK,EAChF,OAAO,kBAAkB,8BAA8B,MAAM,EAC7D;AAAA,IACC,CAAC,SAMK;AACJ,YAAM,OAAO,KAAK,UAAU,QAAQ,YAAY;AAChD,UAAI,KAAK,MAAM;AACb,cAAM,MAAM,aAAa;AACzB,YAAI,QAAQ,QAAQ;AAClB,kBAAQ,OAAO,MAAM,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,IAAI;AAAA,QAC1D,OAAO;AACL,qBAAW,SAAS,KAAK;AACvB,kBAAM,WAAW,MAAM,OAAO,KAAK,IAAI,KAAK;AAC5C,oBAAQ,OAAO;AAAA,cACb,GAAG,MAAM,GAAG;AAAA,WAAc,QAAQ;AAAA,WAAc,MAAM,YAAY;AAAA;AAAA;AAAA,YACpE;AAAA,UACF;AAAA,QACF;AACA;AAAA,MACF;AACA,UAAI,CAAC,KAAK,QAAQ,CAAC,KAAK,eAAe,CAAC,KAAK,SAAS;AACpD,gBAAQ,OAAO,MAAM,kEAAkE;AACvF,gBAAQ,WAAW;AACnB;AAAA,MACF;AACA,YAAM,QAAQ,aAAa,iBAAiB;AAAA,QAC1C,MAAM,KAAK;AAAA,QACX,aAAa,KAAK;AAAA,QAClB,SAAS,KAAK;AAAA,MAChB,CAAC;AACD,UAAI,CAAC,OAAO;AACV,gBAAQ,OAAO,MAAM,6BAA6B;AAClD,gBAAQ,WAAW;AACnB;AAAA,MACF;AACA,UAAI,QAAQ,QAAQ;AAClB,gBAAQ,OAAO,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI,IAAI;AAAA,MAC5D,OAAO;AACL,gBAAQ,OAAO,MAAM,aAAa,mBAAmB,KAAK,IAAI,IAAI;AAAA,MACpE;AAAA,IACF;AAAA,EACF;AACF,SAAO;AACT;","names":[]}

package/dist/errorReporting-3LPE2IJY.js

@@ -0,0 +1,109 @@
+import {
+  logger
+} from "./chunk-VM2H4LAO.js";
+import "./chunk-DGUM43GV.js";
+
+// src/util/errorReporting.ts
+import { createInterface } from "readline";
+import * as errorReport from "@ddt-tools/core/errorReport";
+var EXEMPT_COMMANDS = /* @__PURE__ */ new Set(["telemetry", "feedback", "help", "completion"]);
+var activeConsent = "unset";
+var uninstallHooks = null;
+async function setupErrorReporting(commandName) {
+  if (EXEMPT_COMMANDS.has(commandName)) return;
+  const stored = await errorReport.readConsent();
+  activeConsent = stored.consent;
+  if (shouldPromptFirstRun(stored.consent) && process.stdout.isTTY && process.stdin.isTTY && !isCi()) {
+    printBetaNotice();
+    activeConsent = await promptFirstRunConsent() ? "on" : "off";
+    await errorReport.writeConsent(activeConsent === "on" ? "on" : "off");
+  }
+  if (activeConsent !== "off") {
+    uninstallHooks = errorReport.installProcessHooks();
+  }
+}
+async function finishErrorReporting(productVersion, transport = {}) {
+  await errorReport.flushErrorEvents();
+  await errorReport.sendUsagePing({
+    product: "ddt",
+    version: productVersion,
+    surface: "cli",
+    ...transport.fetchImpl ? { fetchImpl: transport.fetchImpl } : {}
+  }).catch(() => void 0);
+  if (!errorReport.isErrorReportingEnabled(activeConsent)) return;
+  const spooled = await errorReport.listSpooled(transport.dir);
+  if (spooled.length === 0) return;
+  const result = await errorReport.drainSpool({ productVersion }, transport);
+  if (result.sent > 0) {
+    logger.dim(`  (${result.sent} error report${result.sent === 1 ? "" : "s"} sent \u2014 thank you)`);
+  }
+}
+async function reportCliFailure(err, productVersion, transport = {}) {
+  errorReport.reportError(err, "handled", "cli:main");
+  await errorReport.flushErrorEvents(transport.dir);
+  if (errorReport.isErrorReportingEnabled(activeConsent)) {
+    await errorReport.drainSpool({ productVersion }, transport);
+    return;
+  }
+  if (!process.stdout.isTTY || !process.stdin.isTTY || isCi()) return;
+  const yes = await promptYesNo("Report this error to the DDT team? [y/N] ", false);
+  if (!yes) return;
+  const result = await errorReport.drainSpool({ productVersion }, transport);
+  if (result.sent > 0) logger.dim("  Report sent \u2014 thank you.");
+  else logger.dim("  Could not reach the error endpoint; the report is queued locally.");
+}
+function teardownErrorReporting() {
+  uninstallHooks?.();
+  uninstallHooks = null;
+  activeConsent = "unset";
+}
+function activeConsentForTests() {
+  return activeConsent;
+}
+var BETA_VERSION = "0.2.4";
+function shouldPromptFirstRun(consent) {
+  return consent === "unset";
+}
+function printBetaNotice() {
+  const lines = [
+    "\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510",
+    `\u2502  DDT ${BETA_VERSION} \u2014 Public Beta                                 \u2502`,
+    "\u2502  \u2022 All features are free during the beta.               \u2502",
+    "\u2502  \u2022 After the beta: core features stay free forever;     \u2502",
+    "\u2502    Pro features keep working and show license notices.  \u2502",
+    "\u2502  \u2022 AI features use your own API key (never ours).       \u2502",
+    '\u2502  \u2022 Found a bug? Run: ddt feedback "<what happened>"     \u2502',
+    "\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518"
+  ];
+  for (const line of lines) logger.info(line);
+}
+async function promptFirstRunConsent() {
+  logger.info("DDT can report errors automatically (sanitized diagnostics + OS context,");
+  logger.info("never your SQL, identifiers, or credentials) so they get fixed fast.");
+  logger.info(errorReport.CONSENT_WARNING);
+  return promptYesNo("Enable automatic error reporting? [Y/n] ", true);
+}
+function promptYesNo(question, defaultYes) {
+  return new Promise((resolve) => {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    rl.question(question, (answer) => {
+      rl.close();
+      const normalized = answer.trim().toLowerCase();
+      if (normalized === "") resolve(defaultYes);
+      else resolve(normalized === "y" || normalized === "yes");
+    });
+  });
+}
+function isCi() {
+  return process.env["CI"] === "true";
+}
+export {
+  activeConsentForTests,
+  finishErrorReporting,
+  printBetaNotice,
+  reportCliFailure,
+  setupErrorReporting,
+  shouldPromptFirstRun,
+  teardownErrorReporting
+};
+//# sourceMappingURL=errorReporting-3LPE2IJY.js.map

package/dist/errorReporting-3LPE2IJY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/util/errorReporting.ts"],"sourcesContent":["/**\n * CLI error-reporting wiring (ERR.2).\n *\n * Lazily imported from `cli.ts` hooks so the cold-start path pays zero cost\n * until a command actually runs (preAction) or fails (catch handler).\n *\n * Responsibilities:\n *   - first-run consent prompt (TTY only, default Yes, one keystroke)\n *   - crash-hook installation when consent allows capture\n *   - end-of-run drain: spool → `POST /errors` when consent is `on`\n *   - manual \"Report this error? [y/N]\" prompt when consent is NOT `on`\n *     and a command fails\n *\n * @see @ddt-tools/core/errorReport (capture substrate + consent + transport)\n */\nimport { createInterface } from 'node:readline';\n// Subpath import, NOT the `@ddt-tools/core` barrel — this module runs in the\n// preAction hook of every command; the barrel would drag ~85 core modules in.\nimport * as errorReport from '@ddt-tools/core/errorReport';\nimport { logger } from './logger.js';\n\n/** Commands that must never trigger the consent prompt or auto-drain. */\nconst EXEMPT_COMMANDS = new Set(['telemetry', 'feedback', 'help', 'completion']);\n\nlet activeConsent: errorReport.ErrorReportConsent = 'unset';\nlet uninstallHooks: (() => void) | null = null;\n\n/**\n * preAction hook body. Reads (and on first run, prompts for) consent, then\n * installs crash capture unless the user opted out.\n */\nexport async function setupErrorReporting(commandName: string): Promise<void> {\n  if (EXEMPT_COMMANDS.has(commandName)) return;\n  const stored = await errorReport.readConsent();\n  activeConsent = stored.consent;\n\n  // First-run consent prompt — explicit, one keystroke, default Yes.\n  // Skipped when not interactive (CI, pipes) so scripted runs never block.\n  if (\n    shouldPromptFirstRun(stored.consent) &&\n    process.stdout.isTTY &&\n    process.stdin.isTTY &&\n    !isCi()\n  ) {\n    // Beta install-time messaging — shown ONCE, immediately before the very\n    // first consent question (true first run, consent still `unset`).\n    printBetaNotice();\n    activeConsent = (await promptFirstRunConsent()) ? 'on' : 'off';\n    await errorReport.writeConsent(activeConsent === 'on' ? 'on' : 'off');\n  }\n\n  // Crash capture is installed unless the user said no. Capture is local-only;\n  // nothing leaves the machine without `isErrorReportingEnabled` saying so.\n  if (activeConsent !== 'off') {\n    uninstallHooks = errorReport.installProcessHooks();\n  }\n}\n\n/**\n * postAction hook body. Flushes buffered events and, when consent is `on`,\n * drains the spool to the Worker. No-ops fast when there is nothing to send.\n * `transport` is injectable for tests.\n */\nexport async function finishErrorReporting(\n  productVersion: string,\n  transport: errorReport.TransportOptions = {},\n): Promise<void> {\n  await errorReport.flushErrorEvents();\n\n  // Anonymous usage ping (opt-in) — gated internally by the SAME consent +\n  // env opt-outs as error reporting and throttled to once per 24h. It is\n  // awaited here (not detached) so the postAction lifecycle has a\n  // deterministic completion point: `sendUsagePing` is self-bounded (3s hard\n  // timeout) and never throws, so awaiting it can block command exit by at\n  // most that timeout — the same bound the spool drain below already imposes.\n  // Detaching it left the send racing process teardown, which both dropped\n  // pings in practice and made the wiring untestable without a sleep.\n  // `transport.fetchImpl` is threaded through so tests can intercept it.\n  await errorReport\n    .sendUsagePing({\n      product: 'ddt',\n      version: productVersion,\n      surface: 'cli',\n      ...(transport.fetchImpl ? { fetchImpl: transport.fetchImpl } : {}),\n    })\n    .catch(() => undefined);\n\n  if (!errorReport.isErrorReportingEnabled(activeConsent)) return;\n  const spooled = await errorReport.listSpooled(transport.dir);\n  if (spooled.length === 0) return;\n  const result = await errorReport.drainSpool({ productVersion }, transport);\n  if (result.sent > 0) {\n    logger.dim(`  (${result.sent} error report${result.sent === 1 ? '' : 's'} sent — thank you)`);\n  }\n}\n\n/**\n * Top-level command-failure handler. Reports the error as `handled` (real\n * crashes go through `uncaughtExceptionMonitor`), then either auto-sends\n * (consent `on`) or offers a one-keystroke manual report.\n * `transport` is injectable for tests.\n */\nexport async function reportCliFailure(\n  err: unknown,\n  productVersion: string,\n  transport: errorReport.TransportOptions = {},\n): Promise<void> {\n  errorReport.reportError(err, 'handled', 'cli:main');\n  await errorReport.flushErrorEvents(transport.dir);\n\n  if (errorReport.isErrorReportingEnabled(activeConsent)) {\n    await errorReport.drainSpool({ productVersion }, transport);\n    return;\n  }\n\n  // Manual push path — only when interactive.\n  if (!process.stdout.isTTY || !process.stdin.isTTY || isCi()) return;\n  const yes = await promptYesNo('Report this error to the DDT team? [y/N] ', false);\n  if (!yes) return;\n  const result = await errorReport.drainSpool({ productVersion }, transport);\n  if (result.sent > 0) logger.dim('  Report sent — thank you.');\n  else logger.dim('  Could not reach the error endpoint; the report is queued locally.');\n}\n\n/** Uninstall crash hooks (tests). */\nexport function teardownErrorReporting(): void {\n  uninstallHooks?.();\n  uninstallHooks = null;\n  activeConsent = 'unset';\n}\n\n/** Current consent as seen by the hooks (tests). */\nexport function activeConsentForTests(): errorReport.ErrorReportConsent {\n  return activeConsent;\n}\n\n/** DDT version surfaced in the first-run beta notice. */\nconst BETA_VERSION = '0.2.4';\n\n/**\n * Whether the first-run flow (beta notice + consent prompt) should fire.\n * True ONLY on true first run — when consent has never been decided\n * (`unset`). Exported so the \"first run only\" contract is unit-testable\n * without faking a TTY.\n */\nexport function shouldPromptFirstRun(consent: errorReport.ErrorReportConsent): boolean {\n  return consent === 'unset';\n}\n\n/**\n * Beta install-time messaging — printed ONCE, on true first run (consent\n * `unset`), immediately before the consent question. Tells the user, at\n * install time: it's a 30-day public beta with all features free; what\n * happens after the beta (core stays free forever, Pro features keep\n * working but show license notices); that AI features are bring-your-own\n * key; and how to report a bug. Plain ASCII box to match CLI output style.\n */\nexport function printBetaNotice(): void {\n  const lines = [\n    '┌─────────────────────────────────────────────────────────┐',\n    `│  DDT ${BETA_VERSION} — Public Beta                                 │`,\n    '│  • All features are free during the beta.               │',\n    '│  • After the beta: core features stay free forever;     │',\n    '│    Pro features keep working and show license notices.  │',\n    '│  • AI features use your own API key (never ours).       │',\n    '│  • Found a bug? Run: ddt feedback \"<what happened>\"     │',\n    '└─────────────────────────────────────────────────────────┘',\n  ];\n  for (const line of lines) logger.info(line);\n}\n\nasync function promptFirstRunConsent(): Promise<boolean> {\n  logger.info('DDT can report errors automatically (sanitized diagnostics + OS context,');\n  logger.info('never your SQL, identifiers, or credentials) so they get fixed fast.');\n  logger.info(errorReport.CONSENT_WARNING);\n  return promptYesNo('Enable automatic error reporting? [Y/n] ', true);\n}\n\nfunction promptYesNo(question: string, defaultYes: boolean): Promise<boolean> {\n  return new Promise((resolve) => {\n    const rl = createInterface({ input: process.stdin, output: process.stdout });\n    rl.question(question, (answer) => {\n      rl.close();\n      const normalized = answer.trim().toLowerCase();\n      if (normalized === '') resolve(defaultYes);\n      else resolve(normalized === 'y' || normalized === 'yes');\n    });\n  });\n}\n\nfunction isCi(): boolean {\n  return process.env['CI'] === 'true';\n}\n"],"mappings":";;;;;;AAeA,SAAS,uBAAuB;AAGhC,YAAY,iBAAiB;AAI7B,IAAM,kBAAkB,oBAAI,IAAI,CAAC,aAAa,YAAY,QAAQ,YAAY,CAAC;AAE/E,IAAI,gBAAgD;AACpD,IAAI,iBAAsC;AAM1C,eAAsB,oBAAoB,aAAoC;AAC5E,MAAI,gBAAgB,IAAI,WAAW,EAAG;AACtC,QAAM,SAAS,MAAkB,wBAAY;AAC7C,kBAAgB,OAAO;AAIvB,MACE,qBAAqB,OAAO,OAAO,KACnC,QAAQ,OAAO,SACf,QAAQ,MAAM,SACd,CAAC,KAAK,GACN;AAGA,oBAAgB;AAChB,oBAAiB,MAAM,sBAAsB,IAAK,OAAO;AACzD,UAAkB,yBAAa,kBAAkB,OAAO,OAAO,KAAK;AAAA,EACtE;AAIA,MAAI,kBAAkB,OAAO;AAC3B,qBAA6B,gCAAoB;AAAA,EACnD;AACF;AAOA,eAAsB,qBACpB,gBACA,YAA0C,CAAC,GAC5B;AACf,QAAkB,6BAAiB;AAWnC,QACG,0BAAc;AAAA,IACb,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,IACT,GAAI,UAAU,YAAY,EAAE,WAAW,UAAU,UAAU,IAAI,CAAC;AAAA,EAClE,CAAC,EACA,MAAM,MAAM,MAAS;AAExB,MAAI,CAAa,oCAAwB,aAAa,EAAG;AACzD,QAAM,UAAU,MAAkB,wBAAY,UAAU,GAAG;AAC3D,MAAI,QAAQ,WAAW,EAAG;AAC1B,QAAM,SAAS,MAAkB,uBAAW,EAAE,eAAe,GAAG,SAAS;AACzE,MAAI,OAAO,OAAO,GAAG;AACnB,WAAO,IAAI,MAAM,OAAO,IAAI,gBAAgB,OAAO,SAAS,IAAI,KAAK,GAAG,yBAAoB;AAAA,EAC9F;AACF;AAQA,eAAsB,iBACpB,KACA,gBACA,YAA0C,CAAC,GAC5B;AACf,EAAY,wBAAY,KAAK,WAAW,UAAU;AAClD,QAAkB,6BAAiB,UAAU,GAAG;AAEhD,MAAgB,oCAAwB,aAAa,GAAG;AACtD,UAAkB,uBAAW,EAAE,eAAe,GAAG,SAAS;AAC1D;AAAA,EACF;AAGA,MAAI,CAAC,QAAQ,OAAO,SAAS,CAAC,QAAQ,MAAM,SAAS,KAAK,EAAG;AAC7D,QAAM,MAAM,MAAM,YAAY,6CAA6C,KAAK;AAChF,MAAI,CAAC,IAAK;AACV,QAAM,SAAS,MAAkB,uBAAW,EAAE,eAAe,GAAG,SAAS;AACzE,MAAI,OAAO,OAAO,EAAG,QAAO,IAAI,iCAA4B;AAAA,MACvD,QAAO,IAAI,qEAAqE;AACvF;AAGO,SAAS,yBAA+B;AAC7C,mBAAiB;AACjB,mBAAiB;AACjB,kBAAgB;AAClB;AAGO,SAAS,wBAAwD;AACtE,SAAO;AACT;AAGA,IAAM,eAAe;AAQd,SAAS,qBAAqB,SAAkD;AACrF,SAAO,YAAY;AACrB;AAUO,SAAS,kBAAwB;AACtC,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA,eAAU,YAAY;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,aAAW,QAAQ,MAAO,QAAO,KAAK,IAAI;AAC5C;AAEA,eAAe,wBAA0C;AACvD,SAAO,KAAK,0EAA0E;AACtF,SAAO,KAAK,sEAAsE;AAClF,SAAO,KAAiB,2BAAe;AACvC,SAAO,YAAY,4CAA4C,IAAI;AACrE;AAEA,SAAS,YAAY,UAAkB,YAAuC;AAC5E,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC3E,OAAG,SAAS,UAAU,CAAC,WAAW;AAChC,SAAG,MAAM;AACT,YAAM,aAAa,OAAO,KAAK,EAAE,YAAY;AAC7C,UAAI,eAAe,GAAI,SAAQ,UAAU;AAAA,UACpC,SAAQ,eAAe,OAAO,eAAe,KAAK;AAAA,IACzD,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,OAAgB;AACvB,SAAO,QAAQ,IAAI,IAAI,MAAM;AAC/B;","names":[]}