@ddt-tools/cli 0.2.0 → 0.2.4

package/dist/profile-SQTBNKYS.js

@@ -0,0 +1,98 @@
+import "./chunk-DGUM43GV.js";
+
+// src/commands/profile.ts
+import { promises as fs } from "fs";
+import path from "path";
+import { Command } from "commander";
+import { profile, createConnection, getProfile } from "@ddt-tools/core";
+function profileCommand() {
+  const cmd = new Command("profile");
+  cmd.description(
+    "Compute per-column profile statistics (nulls, distinct, min/max, top values) for a table. Rows are read from a JSON file in v1 (live-warehouse executeRows wiring is a documented follow-up)."
+  ).argument(
+    "<fqn>",
+    "Fully-qualified table name to embed in the profile output (CATALOG.SCHEMA.TABLE)."
+  ).option(
+    "--rows <path>",
+    "JSON file containing the rows to profile (TableRow[]). Mutually exclusive with --live."
+  ).option(
+    "--live <profile>",
+    "Connection profile name to fetch rows live from Databricks via SELECT * FROM <fqn>. Mutually exclusive with --rows."
+  ).option(
+    "--row-limit <n>",
+    "Cap rows fetched in live mode. Default 50000. Use 0 for unbounded (DANGER on prod tables).",
+    "50000"
+  ).option(
+    "--columns <list>",
+    "Comma-separated column list. Defaults to every key seen in the rows."
+  ).option("--top-n <n>", "Cap the top-values list per column. Default 10.", "10").option(
+    "--sampled",
+    "Mark the row set as sampled (caller-supplied sample, not the full table).",
+    false
+  ).option(
+    "--sample-strategy <label>",
+    'Free-form sampling label (e.g. "TABLESAMPLE(1 PERCENT)"). Default "FULL".'
+  ).option("--population-rows <n>", "When --sampled, the full population row count for context.").option("--format <fmt>", "Output format: json | markdown. Default json.", "json").option("-o, --output <path>", "Write the profile to a file instead of stdout.").action(async (fqn, opts) => {
+    await runProfile(fqn, opts);
+  });
+  return cmd;
+}
+async function runProfile(fqn, opts) {
+  const rowsPath = opts.rows;
+  const liveProfile = opts.live;
+  if (Boolean(rowsPath) === Boolean(liveProfile)) {
+    throw new Error("Specify exactly one of --rows or --live.");
+  }
+  const rows = liveProfile ? await fetchLiveRows(liveProfile, fqn, Number(opts.rowLimit ?? "50000")) : await readRowsFile(String(rowsPath));
+  const columns = opts.columns ? String(opts.columns).split(",").map((s) => s.trim()).filter(Boolean) : void 0;
+  const topN = Number(opts.topN ?? "10") || 10;
+  const sampled = opts.sampled === true;
+  const populationRowCount = opts.populationRows ? Number(opts.populationRows) : void 0;
+  const sampleStrategy = opts.sampleStrategy ? String(opts.sampleStrategy) : void 0;
+  const tableProfile = profile.analyzeRows(fqn, rows, {
+    ...columns ? { columns } : {},
+    topN,
+    sampled,
+    ...populationRowCount !== void 0 ? { populationRowCount } : {},
+    ...sampleStrategy ? { sampleStrategy } : {}
+  });
+  const format = String(opts.format ?? "json").toLowerCase();
+  const output = format === "markdown" ? profile.renderProfileMarkdown(tableProfile) : JSON.stringify(tableProfile, null, 2);
+  if (opts.output) {
+    const outPath = path.resolve(String(opts.output));
+    await fs.writeFile(outPath, output, "utf8");
+    console.error(`profile: wrote ${outPath} (columns=${tableProfile.columns.length})`);
+  } else {
+    process.stdout.write(output + "\n");
+  }
+}
+async function readRowsFile(p) {
+  const rowsJson = await fs.readFile(path.resolve(p), "utf8");
+  const rows = JSON.parse(rowsJson);
+  if (!Array.isArray(rows)) {
+    throw new Error(`--rows file must contain a TableRow[] (JSON array). Got: ${typeof rows}.`);
+  }
+  return rows;
+}
+async function fetchLiveRows(profileName, fqn, rowLimit) {
+  const limit = rowLimit > 0 ? ` LIMIT ${Math.floor(rowLimit)}` : "";
+  const sql = `SELECT * FROM ${fqn}${limit}`;
+  const cp = await getProfile(profileName);
+  const conn = createConnection(cp);
+  console.error(`profile: connecting to ${cp.auth.host}\u2026`);
+  await conn.connect();
+  try {
+    const rows = await conn.executeRows(sql);
+    console.error(
+      `profile: fetched ${rows.length} row(s) from ${fqn}${rowLimit > 0 && rows.length === rowLimit ? " (LIMIT reached \u2014 increase --row-limit for full-table profile)" : ""}.`
+    );
+    return rows;
+  } finally {
+    await conn.disconnect().catch(() => void 0);
+  }
+}
+export {
+  profileCommand,
+  runProfile
+};
+//# sourceMappingURL=profile-SQTBNKYS.js.map

package/dist/profile-SQTBNKYS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/profile.ts"],"sourcesContent":["/**\n * `ddt profile <fqn>` — item 4 of the constraint-enforcement initiative.\n *\n * Reads rows from either:\n *  - a JSON file (`--rows`), or\n *  - a live warehouse (`--live <profile>`) via `DatabricksConnection.executeRows`.\n *\n * Live mode runs `SELECT * FROM <fqn> LIMIT --row-limit` via the SQL\n * Statement Execution API. Composes with `ddt suggest-constraints`.\n *\n * Mirrors `sdt profile`.\n */\nimport { promises as fs } from 'fs';\nimport path from 'path';\nimport { Command } from 'commander';\nimport { profile, createConnection, getProfile } from '@ddt-tools/core';\n\nexport function profileCommand(): Command {\n  const cmd = new Command('profile');\n  cmd\n    .description(\n      'Compute per-column profile statistics (nulls, distinct, min/max, top values) for a table. ' +\n        'Rows are read from a JSON file in v1 (live-warehouse executeRows wiring is a documented follow-up).',\n    )\n    .argument(\n      '<fqn>',\n      'Fully-qualified table name to embed in the profile output (CATALOG.SCHEMA.TABLE).',\n    )\n    .option(\n      '--rows <path>',\n      'JSON file containing the rows to profile (TableRow[]). Mutually exclusive with --live.',\n    )\n    .option(\n      '--live <profile>',\n      'Connection profile name to fetch rows live from Databricks via SELECT * FROM <fqn>. Mutually exclusive with --rows.',\n    )\n    .option(\n      '--row-limit <n>',\n      'Cap rows fetched in live mode. Default 50000. Use 0 for unbounded (DANGER on prod tables).',\n      '50000',\n    )\n    .option(\n      '--columns <list>',\n      'Comma-separated column list. Defaults to every key seen in the rows.',\n    )\n    .option('--top-n <n>', 'Cap the top-values list per column. Default 10.', '10')\n    .option(\n      '--sampled',\n      'Mark the row set as sampled (caller-supplied sample, not the full table).',\n      false,\n    )\n    .option(\n      '--sample-strategy <label>',\n      'Free-form sampling label (e.g. \"TABLESAMPLE(1 PERCENT)\"). Default \"FULL\".',\n    )\n    .option('--population-rows <n>', 'When --sampled, the full population row count for context.')\n    .option('--format <fmt>', 'Output format: json | markdown. Default json.', 'json')\n    .option('-o, --output <path>', 'Write the profile to a file instead of stdout.')\n    .action(async (fqn: string, opts: Record<string, unknown>) => {\n      await runProfile(fqn, opts);\n    });\n  return cmd;\n}\n\nexport async function runProfile(fqn: string, opts: Record<string, unknown>): Promise<void> {\n  const rowsPath = opts.rows as string | undefined;\n  const liveProfile = opts.live as string | undefined;\n  if (Boolean(rowsPath) === Boolean(liveProfile)) {\n    throw new Error('Specify exactly one of --rows or --live.');\n  }\n  const rows: profile.TableRow[] = liveProfile\n    ? await fetchLiveRows(liveProfile, fqn, Number(opts.rowLimit ?? '50000'))\n    : await readRowsFile(String(rowsPath));\n  const columns = opts.columns\n    ? String(opts.columns)\n        .split(',')\n        .map((s) => s.trim())\n        .filter(Boolean)\n    : undefined;\n  const topN = Number(opts.topN ?? '10') || 10;\n  const sampled = opts.sampled === true;\n  const populationRowCount = opts.populationRows ? Number(opts.populationRows) : undefined;\n  const sampleStrategy = opts.sampleStrategy ? String(opts.sampleStrategy) : undefined;\n\n  const tableProfile = profile.analyzeRows(fqn, rows, {\n    ...(columns ? { columns } : {}),\n    topN,\n    sampled,\n    ...(populationRowCount !== undefined ? { populationRowCount } : {}),\n    ...(sampleStrategy ? { sampleStrategy } : {}),\n  });\n\n  const format = String(opts.format ?? 'json').toLowerCase();\n  const output =\n    format === 'markdown'\n      ? profile.renderProfileMarkdown(tableProfile)\n      : JSON.stringify(tableProfile, null, 2);\n\n  if (opts.output) {\n    const outPath = path.resolve(String(opts.output));\n    await fs.writeFile(outPath, output, 'utf8');\n    console.error(`profile: wrote ${outPath} (columns=${tableProfile.columns.length})`);\n  } else {\n    process.stdout.write(output + '\\n');\n  }\n}\n\nasync function readRowsFile(p: string): Promise<profile.TableRow[]> {\n  const rowsJson = await fs.readFile(path.resolve(p), 'utf8');\n  const rows = JSON.parse(rowsJson) as profile.TableRow[];\n  if (!Array.isArray(rows)) {\n    throw new Error(`--rows file must contain a TableRow[] (JSON array). Got: ${typeof rows}.`);\n  }\n  return rows;\n}\n\nasync function fetchLiveRows(\n  profileName: string,\n  fqn: string,\n  rowLimit: number,\n): Promise<profile.TableRow[]> {\n  const limit = rowLimit > 0 ? ` LIMIT ${Math.floor(rowLimit)}` : '';\n  const sql = `SELECT * FROM ${fqn}${limit}`;\n  const cp = await getProfile(profileName);\n  const conn = createConnection(cp);\n  console.error(`profile: connecting to ${cp.auth.host}…`);\n  await conn.connect();\n  try {\n    const rows = await conn.executeRows(sql);\n    console.error(\n      `profile: fetched ${rows.length} row(s) from ${fqn}${rowLimit > 0 && rows.length === rowLimit ? ' (LIMIT reached — increase --row-limit for full-table profile)' : ''}.`,\n    );\n    return rows as profile.TableRow[];\n  } finally {\n    await conn.disconnect().catch(() => undefined);\n  }\n}\n"],"mappings":";;;AAYA,SAAS,YAAY,UAAU;AAC/B,OAAO,UAAU;AACjB,SAAS,eAAe;AACxB,SAAS,SAAS,kBAAkB,kBAAkB;AAE/C,SAAS,iBAA0B;AACxC,QAAM,MAAM,IAAI,QAAQ,SAAS;AACjC,MACG;AAAA,IACC;AAAA,EAEF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,OAAO,eAAe,mDAAmD,IAAI,EAC7E;AAAA,IACC;AAAA,IACA;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,OAAO,yBAAyB,4DAA4D,EAC5F,OAAO,kBAAkB,iDAAiD,MAAM,EAChF,OAAO,uBAAuB,gDAAgD,EAC9E,OAAO,OAAO,KAAa,SAAkC;AAC5D,UAAM,WAAW,KAAK,IAAI;AAAA,EAC5B,CAAC;AACH,SAAO;AACT;AAEA,eAAsB,WAAW,KAAa,MAA8C;AAC1F,QAAM,WAAW,KAAK;AACtB,QAAM,cAAc,KAAK;AACzB,MAAI,QAAQ,QAAQ,MAAM,QAAQ,WAAW,GAAG;AAC9C,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AACA,QAAM,OAA2B,cAC7B,MAAM,cAAc,aAAa,KAAK,OAAO,KAAK,YAAY,OAAO,CAAC,IACtE,MAAM,aAAa,OAAO,QAAQ,CAAC;AACvC,QAAM,UAAU,KAAK,UACjB,OAAO,KAAK,OAAO,EAChB,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO,IACjB;AACJ,QAAM,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK;AAC1C,QAAM,UAAU,KAAK,YAAY;AACjC,QAAM,qBAAqB,KAAK,iBAAiB,OAAO,KAAK,cAAc,IAAI;AAC/E,QAAM,iBAAiB,KAAK,iBAAiB,OAAO,KAAK,cAAc,IAAI;AAE3E,QAAM,eAAe,QAAQ,YAAY,KAAK,MAAM;AAAA,IAClD,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,GAAI,uBAAuB,SAAY,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACjE,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,EAC7C,CAAC;AAED,QAAM,SAAS,OAAO,KAAK,UAAU,MAAM,EAAE,YAAY;AACzD,QAAM,SACJ,WAAW,aACP,QAAQ,sBAAsB,YAAY,IAC1C,KAAK,UAAU,cAAc,MAAM,CAAC;AAE1C,MAAI,KAAK,QAAQ;AACf,UAAM,UAAU,KAAK,QAAQ,OAAO,KAAK,MAAM,CAAC;AAChD,UAAM,GAAG,UAAU,SAAS,QAAQ,MAAM;AAC1C,YAAQ,MAAM,kBAAkB,OAAO,aAAa,aAAa,QAAQ,MAAM,GAAG;AAAA,EACpF,OAAO;AACL,YAAQ,OAAO,MAAM,SAAS,IAAI;AAAA,EACpC;AACF;AAEA,eAAe,aAAa,GAAwC;AAClE,QAAM,WAAW,MAAM,GAAG,SAAS,KAAK,QAAQ,CAAC,GAAG,MAAM;AAC1D,QAAM,OAAO,KAAK,MAAM,QAAQ;AAChC,MAAI,CAAC,MAAM,QAAQ,IAAI,GAAG;AACxB,UAAM,IAAI,MAAM,4DAA4D,OAAO,IAAI,GAAG;AAAA,EAC5F;AACA,SAAO;AACT;AAEA,eAAe,cACb,aACA,KACA,UAC6B;AAC7B,QAAM,QAAQ,WAAW,IAAI,UAAU,KAAK,MAAM,QAAQ,CAAC,KAAK;AAChE,QAAM,MAAM,iBAAiB,GAAG,GAAG,KAAK;AACxC,QAAM,KAAK,MAAM,WAAW,WAAW;AACvC,QAAM,OAAO,iBAAiB,EAAE;AAChC,UAAQ,MAAM,0BAA0B,GAAG,KAAK,IAAI,QAAG;AACvD,QAAM,KAAK,QAAQ;AACnB,MAAI;AACF,UAAM,OAAO,MAAM,KAAK,YAAY,GAAG;AACvC,YAAQ;AAAA,MACN,oBAAoB,KAAK,MAAM,gBAAgB,GAAG,GAAG,WAAW,KAAK,KAAK,WAAW,WAAW,wEAAmE,EAAE;AAAA,IACvK;AACA,WAAO;AAAA,EACT,UAAE;AACA,UAAM,KAAK,WAAW,EAAE,MAAM,MAAM,MAAS;AAAA,EAC/C;AACF;","names":[]}

package/dist/promote-FSGUPIPD.js

@@ -0,0 +1,417 @@
+import "./chunk-DGUM43GV.js";
+
+// src/commands/promote.ts
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { promises as fs } from "fs";
+import os from "os";
+import path from "path";
+import { Command } from "commander";
+import {
+  CompareEngine,
+  ScriptGenerator,
+  InMemorySource,
+  AccountExtractor,
+  createConnection,
+  defaultExtractors,
+  getProfile,
+  safety,
+  diffPromotionEnvConfigs,
+  renderEnvConfigDiffMarkdown,
+  parsePromotionProfile,
+  filterApprovalsByProfile,
+  evaluatePromotionGate,
+  summarizePromotionPlan
+} from "@ddt-tools/core";
+var execFileP = promisify(execFile);
+function promoteCommand() {
+  const cmd = new Command("promote");
+  cmd.description(
+    "Branch-per-env deploy: compare live source\u2192target, optionally open a PR with the deploy bundle."
+  ).option(
+    "--from <profile>",
+    "Source environment connection profile (e.g. dev). Required for root action."
+  ).option(
+    "--to <profile>",
+    "Target environment connection profile (e.g. stage). Required for root action."
+  ).option("--catalog <catalog>", "Limit to a single catalog.").option("--schema <schema>", "Limit to a single schema (requires --catalog).").option(
+    "--from-profile <path>",
+    "Path to source promotion profile JSON (parsed via parsePromotionProfile). Defaults to `.ddt/profiles/<from>.json` when present. PROMOTE.1+.3 gate wireup."
+  ).option(
+    "--to-profile <path>",
+    "Path to target promotion profile JSON (parsed via parsePromotionProfile). Defaults to `.ddt/profiles/<to>.json` when present. PROMOTE.1+.3 gate wireup."
+  ).option(
+    "--approve <approver>",
+    "Record an approval from <approver> (repeatable). Counts toward target.requiredApprovals; filtered by approver whitelist if the target profile declares one.",
+    collectRepeatable,
+    []
+  ).option(
+    "--reject <approver>",
+    "Record an explicit rejection from <approver> (repeatable). Any single rejection blocks regardless of approvals count; filtered by approver whitelist.",
+    collectRepeatable,
+    []
+  ).option(
+    "--force",
+    "Bypass safety-classifier blockers on non-production targets. NEVER bypasses EXPLICIT_REJECTION; refused outright when target.isProduction is true.",
+    false
+  ).option(
+    "--open-pr",
+    "Open a GitHub PR with the deploy bundle. Requires `gh` CLI + --repo.",
+    false
+  ).option("--repo <slug>", "GitHub repo slug (owner/repo) \u2014 required with --open-pr.").option("--base <branch>", "PR base branch. Default: main.", "main").option("--branch <name>", "PR head branch name. Default: ddt-promote/<timestamp>.").option("-o, --output <path>", "Write the deploy bundle to <path> (markdown). Default: stdout.").action(async (opts) => {
+    if (!opts.from || !opts.to) {
+      throw new Error(
+        "required options '--from <profile>' and '--to <profile>' must be specified"
+      );
+    }
+    const fromProfile = await getProfile(String(opts.from));
+    const toProfile = await getProfile(String(opts.to));
+    const scope = {
+      ...opts.catalog ? { catalog: String(opts.catalog) } : {},
+      ...opts.schema ? { schema: String(opts.schema) } : {}
+    };
+    const extract = async (profile, label) => {
+      const conn = createConnection(profile);
+      try {
+        await conn.connect();
+        const account = new AccountExtractor(defaultExtractors());
+        const objs = await account.extract(conn, scope);
+        return new InMemorySource(objs, { kind: "live", label });
+      } finally {
+        await conn.disconnect();
+      }
+    };
+    const fromSource = await extract(fromProfile, `from:${fromProfile.auth.host}`);
+    const toSource = await extract(toProfile, `to:${toProfile.auth.host}`);
+    const engine = new CompareEngine();
+    const result = await engine.compare(fromSource, toSource);
+    const totalChanges = result.summary.added + result.summary.removed + result.summary.modified;
+    if (totalChanges === 0) {
+      console.log(
+        `Nothing to promote: ${String(opts.from)} \u2192 ${String(opts.to)} is already in sync.`
+      );
+      return;
+    }
+    const generator = new ScriptGenerator();
+    const script = generator.generate(result, {});
+    const safetyAssessment = safety.assess(result);
+    const fromPromotionProfile = await loadPromotionProfileForCli(
+      opts.fromProfile ? String(opts.fromProfile) : void 0,
+      String(opts.from),
+      ".ddt",
+      "--from-profile"
+    );
+    const toPromotionProfile = await loadPromotionProfileForCli(
+      opts.toProfile ? String(opts.toProfile) : void 0,
+      String(opts.to),
+      ".ddt",
+      "--to-profile"
+    );
+    const gate = evaluatePromoteCliGate({
+      from: String(opts.from),
+      to: String(opts.to),
+      fromProfile: fromPromotionProfile,
+      toProfile: toPromotionProfile,
+      approvers: parseApproverList(opts.approve),
+      rejections: parseRejectionList(opts.reject),
+      force: opts.force === true,
+      safety: safetyAssessment
+    });
+    if (!gate.decision.proceed) {
+      process.stderr.write(`${gate.summary.headline}
+`);
+      process.stderr.write(renderPromoteGateMarkdown(gate));
+      process.exitCode = 1;
+      return;
+    }
+    if (gate.decision.warnings.length > 0) {
+      process.stderr.write(`${gate.summary.headline}
+`);
+      for (const w of gate.decision.warnings) {
+        process.stderr.write(`  warning: ${w.code} \u2014 ${w.message}
+`);
+      }
+    }
+    const lines = [];
+    lines.push(`# Promote: ${String(opts.from)} \u2192 ${String(opts.to)}`);
+    lines.push("");
+    lines.push(`Generated by \`ddt promote\` at ${(/* @__PURE__ */ new Date()).toISOString()}.`);
+    lines.push("");
+    lines.push(renderPromoteGateMarkdown(gate));
+    lines.push("## Diff summary");
+    lines.push("");
+    lines.push(`- **Added**: ${result.summary.added}`);
+    lines.push(`- **Removed**: ${result.summary.removed}`);
+    lines.push(`- **Modified**: ${result.summary.modified}`);
+    lines.push("");
+    lines.push("## Safety");
+    lines.push("");
+    const groups = safety.groupByReversibility(safetyAssessment);
+    lines.push(safety.formatReversibilityBuckets(groups));
+    lines.push("");
+    lines.push("## Migration script");
+    lines.push("");
+    lines.push("```sql");
+    lines.push(script.sql);
+    lines.push("```");
+    const bundle = lines.join("\n");
+    if (opts.output) {
+      await fs.writeFile(String(opts.output), bundle, "utf8");
+      console.log(`Wrote deploy bundle \u2192 ${String(opts.output)}`);
+    } else if (!opts.openPr) {
+      console.log(bundle);
+    }
+    if (opts.openPr) {
+      if (!opts.repo) throw new Error("--repo <owner/repo> is required with --open-pr");
+      const branchName = String(
+        opts.branch ?? `ddt-promote/${String(opts.from)}-to-${String(opts.to)}-${Date.now()}`
+      );
+      const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), "ddt-promote-"));
+      const bodyPath = path.join(tmpDir, "pr-body.md");
+      await fs.writeFile(bodyPath, bundle, "utf8");
+      const totalChanges2 = result.summary.added + result.summary.removed + result.summary.modified;
+      const title = `Promote: ${String(opts.from)} \u2192 ${String(opts.to)} (${totalChanges2} changes)`;
+      const args = [
+        "pr",
+        "create",
+        "--repo",
+        String(opts.repo),
+        "--base",
+        String(opts.base),
+        "--head",
+        branchName,
+        "--title",
+        title,
+        "--body-file",
+        bodyPath
+      ];
+      try {
+        const { stdout } = await execFileP("gh", args);
+        console.log(stdout.trim());
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new Error(
+          `gh pr create failed: ${msg}
+Manual workaround: the bundle is at ${bodyPath}; paste it into a PR by hand.`
+        );
+      }
+    }
+  });
+  cmd.command("diff").description(
+    "Diff two promotion-environment profile JSON files (PROMOTE.2 / PROMOTE.3 wireup). Pure file I/O \u2014 never compares secret values, only secret keys."
+  ).requiredOption(
+    "--source <path>",
+    "Path to the source .ddt/profiles/<env>.json (parsed via parsePromotionProfile)."
+  ).requiredOption("--target <path>", "Path to the target profile JSON.").option("--format <fmt>", "Output format: markdown (default) | json", "markdown").action(async (opts) => {
+    const format = String(opts.format ?? "markdown").toLowerCase();
+    if (format !== "markdown" && format !== "json") {
+      process.stderr.write(
+        `Invalid --format ${JSON.stringify(opts.format)}; expected "markdown" or "json".
+`
+      );
+      process.exitCode = 1;
+      return;
+    }
+    const sourcePath = path.resolve(String(opts.source));
+    const targetPath = path.resolve(String(opts.target));
+    const sourceText = await fs.readFile(sourcePath, "utf8");
+    const targetText = await fs.readFile(targetPath, "utf8");
+    let sourceJson;
+    let targetJson;
+    try {
+      sourceJson = JSON.parse(sourceText);
+    } catch (err) {
+      emitDiffError(
+        format,
+        "PROFILE_PARSE_ERROR",
+        `--source is not valid JSON: ${describeErr(err)}`
+      );
+      process.exitCode = 1;
+      return;
+    }
+    try {
+      targetJson = JSON.parse(targetText);
+    } catch (err) {
+      emitDiffError(
+        format,
+        "PROFILE_PARSE_ERROR",
+        `--target is not valid JSON: ${describeErr(err)}`
+      );
+      process.exitCode = 1;
+      return;
+    }
+    const sourceParse = parsePromotionProfile(sourceJson);
+    if (!sourceParse.profile) {
+      emitDiffError(format, "PROFILE_INVALID", renderParseErrors("--source", sourceParse.errors));
+      process.exitCode = 2;
+      return;
+    }
+    const targetParse = parsePromotionProfile(targetJson);
+    if (!targetParse.profile) {
+      emitDiffError(format, "PROFILE_INVALID", renderParseErrors("--target", targetParse.errors));
+      process.exitCode = 2;
+      return;
+    }
+    const source = profileToEnvConfig(sourceParse.profile);
+    const target = profileToEnvConfig(targetParse.profile);
+    const diff = diffPromotionEnvConfigs(source, target);
+    if (format === "json") {
+      process.stdout.write(JSON.stringify(diff, null, 2) + "\n");
+    } else {
+      const md = renderEnvConfigDiffMarkdown(diff);
+      process.stdout.write(md);
+      if (!md.endsWith("\n")) process.stdout.write("\n");
+    }
+  });
+  return cmd;
+}
+function profileToEnvConfig(profile) {
+  return {
+    name: profile.name,
+    profileName: profile.profileName,
+    isProduction: profile.isProduction,
+    requiredApprovals: profile.requiredApprovals,
+    ...profile.variables ? { variables: profile.variables } : {},
+    ...profile.secretKeys ? { secretKeys: profile.secretKeys } : {},
+    ...profile.profileFields ? { profileFields: profile.profileFields } : {}
+  };
+}
+function describeErr(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+function renderParseErrors(label, errors) {
+  const lines = errors.map((e) => `  - ${e.path}: ${e.message}`);
+  return `${label} failed parsePromotionProfile:
+${lines.join("\n")}`;
+}
+function emitDiffError(format, errorCode, message) {
+  if (format === "json") {
+    process.stdout.write(JSON.stringify({ ok: false, errorCode, message }) + "\n");
+  } else {
+    process.stderr.write(`promote diff refused: ${errorCode}
+${message}
+`);
+  }
+}
+function collectRepeatable(value, prev) {
+  return [...prev, value];
+}
+function parseApproverList(raw) {
+  if (!Array.isArray(raw)) return [];
+  const out = [];
+  for (const v of raw) {
+    if (typeof v === "string" && v.length > 0) out.push(v);
+  }
+  return out;
+}
+function parseRejectionList(raw) {
+  if (!Array.isArray(raw)) return [];
+  const out = [];
+  for (const v of raw) {
+    if (typeof v !== "string" || v.length === 0) continue;
+    out.push({ approver: v });
+  }
+  return out;
+}
+function profileToEnvironment(name, profile) {
+  if (profile) {
+    return {
+      name: profile.name,
+      profileName: profile.profileName,
+      isProduction: profile.isProduction,
+      requiredApprovals: profile.requiredApprovals
+    };
+  }
+  return { name, profileName: name, isProduction: false, requiredApprovals: 0 };
+}
+function evaluatePromoteCliGate(opts) {
+  const now = opts.now ?? (/* @__PURE__ */ new Date()).toISOString();
+  const source = profileToEnvironment(opts.from, opts.fromProfile);
+  const target = profileToEnvironment(opts.to, opts.toProfile);
+  const approvals = opts.approvers.map((approver) => ({ approver, at: now }));
+  const rejections = opts.rejections.map((r) => ({
+    approver: r.approver,
+    at: now,
+    ...r.reason !== void 0 ? { reason: r.reason } : {}
+  }));
+  let approvalState = { approvals, rejections };
+  if (opts.toProfile) {
+    approvalState = filterApprovalsByProfile(opts.toProfile, approvalState);
+  }
+  const inputs = {
+    source,
+    target,
+    safety: opts.safety,
+    approvalState,
+    force: opts.force
+  };
+  const decision = evaluatePromotionGate(inputs);
+  const summary = summarizePromotionPlan(inputs);
+  return { decision, summary, source, target };
+}
+function renderPromoteGateMarkdown(outcome) {
+  const lines = [];
+  lines.push("## Promotion gate");
+  lines.push("");
+  lines.push(`**${outcome.summary.headline}**`);
+  lines.push("");
+  lines.push(
+    `- **Source**: ${outcome.source.name} (profile \`${outcome.source.profileName}\`${outcome.source.isProduction ? ", production" : ""})`
+  );
+  lines.push(
+    `- **Target**: ${outcome.target.name} (profile \`${outcome.target.profileName}\`${outcome.target.isProduction ? ", production" : ""})`
+  );
+  lines.push(
+    `- **Approvals**: ${outcome.summary.approvalsRecorded} recorded / ${outcome.summary.approvalsRequired} required`
+  );
+  lines.push("");
+  if (outcome.decision.blockers.length > 0) {
+    lines.push(`### Blockers (${outcome.decision.blockers.length})`);
+    lines.push("");
+    for (const b of outcome.decision.blockers) {
+      lines.push(`- **${b.code}** \u2014 ${b.message}`);
+    }
+    lines.push("");
+  }
+  if (outcome.decision.warnings.length > 0) {
+    lines.push(`### Warnings (${outcome.decision.warnings.length})`);
+    lines.push("");
+    for (const w of outcome.decision.warnings) {
+      lines.push(`- **${w.code}** \u2014 ${w.message}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+async function loadPromotionProfileForCli(explicitPath, envName, configDir, flagName) {
+  const targetPath = explicitPath ? path.resolve(explicitPath) : path.resolve(path.join(configDir, "profiles", `${envName}.json`));
+  let text;
+  try {
+    text = await fs.readFile(targetPath, "utf8");
+  } catch (err) {
+    if (explicitPath !== void 0) {
+      throw new Error(`${flagName} ${targetPath} could not be read: ${describeErr(err)}`);
+    }
+    return void 0;
+  }
+  let json;
+  try {
+    json = JSON.parse(text);
+  } catch (err) {
+    throw new Error(`${targetPath} is not valid JSON: ${describeErr(err)}`);
+  }
+  const parsed = parsePromotionProfile(json);
+  if (!parsed.profile) {
+    throw new Error(renderParseErrors(targetPath, parsed.errors));
+  }
+  return parsed.profile;
+}
+export {
+  evaluatePromoteCliGate,
+  loadPromotionProfileForCli,
+  parseApproverList,
+  parseRejectionList,
+  promoteCommand,
+  renderPromoteGateMarkdown
+};
+//# sourceMappingURL=promote-FSGUPIPD.js.map

package/dist/promote-FSGUPIPD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/promote.ts"],"sourcesContent":["/**\n * `ddt promote --from <profile> --to <profile>` — branch-per-env deploy\n * automation.\n *\n * Compares two live workspaces (typically dev → stage or stage → prod),\n * generates the migration script + safety report, and either:\n *   - prints the bundle to stdout (default), or\n *   - opens a pull request with the diff + safety report attached\n *     (`--open-pr` + `--repo`). Requires `gh` (GitHub CLI) on PATH.\n *\n * Stage promotion workflow: when a feature is verified in dev, run\n * `ddt promote --from dev --to stage --open-pr`; the bot generates a\n * \"promote ABC → stage\" PR with the SQL preview + safety findings + AI\n * narration so the reviewer can approve without re-running compare.\n */\nimport { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport { promises as fs } from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { Command } from 'commander';\nimport {\n  CompareEngine,\n  ScriptGenerator,\n  InMemorySource,\n  AccountExtractor,\n  createConnection,\n  defaultExtractors,\n  getProfile,\n  safety,\n  diffPromotionEnvConfigs,\n  renderEnvConfigDiffMarkdown,\n  parsePromotionProfile,\n  filterApprovalsByProfile,\n  evaluatePromotionGate,\n  summarizePromotionPlan,\n  type EvaluatePromotionGateInputs,\n  type PromotionApprovalState,\n  type PromotionEnvironment,\n  type PromotionEnvironmentConfig,\n  type PromotionGateDecision,\n  type PromotionPlanSummary,\n  type PromotionProfile,\n} from '@ddt-tools/core';\ntype SafetyAssessment = safety.SafetyAssessment;\n\nconst execFileP = promisify(execFile);\n\nexport function promoteCommand(): Command {\n  const cmd = new Command('promote');\n  cmd\n    .description(\n      'Branch-per-env deploy: compare live source→target, optionally open a PR with the deploy bundle.',\n    )\n    .option(\n      '--from <profile>',\n      'Source environment connection profile (e.g. dev). Required for root action.',\n    )\n    .option(\n      '--to <profile>',\n      'Target environment connection profile (e.g. stage). Required for root action.',\n    )\n    .option('--catalog <catalog>', 'Limit to a single catalog.')\n    .option('--schema <schema>', 'Limit to a single schema (requires --catalog).')\n    .option(\n      '--from-profile <path>',\n      'Path to source promotion profile JSON (parsed via parsePromotionProfile). ' +\n        'Defaults to `.ddt/profiles/<from>.json` when present. PROMOTE.1+.3 gate wireup.',\n    )\n    .option(\n      '--to-profile <path>',\n      'Path to target promotion profile JSON (parsed via parsePromotionProfile). ' +\n        'Defaults to `.ddt/profiles/<to>.json` when present. PROMOTE.1+.3 gate wireup.',\n    )\n    .option(\n      '--approve <approver>',\n      'Record an approval from <approver> (repeatable). Counts toward target.requiredApprovals; ' +\n        'filtered by approver whitelist if the target profile declares one.',\n      collectRepeatable,\n      [] as string[],\n    )\n    .option(\n      '--reject <approver>',\n      'Record an explicit rejection from <approver> (repeatable). Any single rejection blocks ' +\n        'regardless of approvals count; filtered by approver whitelist.',\n      collectRepeatable,\n      [] as string[],\n    )\n    .option(\n      '--force',\n      'Bypass safety-classifier blockers on non-production targets. NEVER bypasses ' +\n        'EXPLICIT_REJECTION; refused outright when target.isProduction is true.',\n      false,\n    )\n    .option(\n      '--open-pr',\n      'Open a GitHub PR with the deploy bundle. Requires `gh` CLI + --repo.',\n      false,\n    )\n    .option('--repo <slug>', 'GitHub repo slug (owner/repo) — required with --open-pr.')\n    .option('--base <branch>', 'PR base branch. Default: main.', 'main')\n    .option('--branch <name>', 'PR head branch name. Default: ddt-promote/<timestamp>.')\n    .option('-o, --output <path>', 'Write the deploy bundle to <path> (markdown). Default: stdout.')\n    .action(async (opts) => {\n      if (!opts.from || !opts.to) {\n        throw new Error(\n          \"required options '--from <profile>' and '--to <profile>' must be specified\",\n        );\n      }\n      const fromProfile = await getProfile(String(opts.from));\n      const toProfile = await getProfile(String(opts.to));\n      const scope = {\n        ...(opts.catalog ? { catalog: String(opts.catalog) } : {}),\n        ...(opts.schema ? { schema: String(opts.schema) } : {}),\n      };\n\n      // Extract both sides.\n      const extract = async (profile: typeof fromProfile, label: string) => {\n        const conn = createConnection(profile);\n        try {\n          await conn.connect();\n          const account = new AccountExtractor(defaultExtractors());\n          const objs = await account.extract(conn, scope);\n          return new InMemorySource(objs, { kind: 'live', label });\n        } finally {\n          await conn.disconnect();\n        }\n      };\n      const fromSource = await extract(fromProfile, `from:${fromProfile.auth.host}`);\n      const toSource = await extract(toProfile, `to:${toProfile.auth.host}`);\n\n      // Compare from → to (i.e., apply differences from `from` onto `to`).\n      const engine = new CompareEngine();\n      const result = await engine.compare(fromSource, toSource);\n\n      const totalChanges = result.summary.added + result.summary.removed + result.summary.modified;\n      if (totalChanges === 0) {\n        console.log(\n          `Nothing to promote: ${String(opts.from)} → ${String(opts.to)} is already in sync.`,\n        );\n        return;\n      }\n\n      // Generate migration script.\n      const generator = new ScriptGenerator();\n      const script = generator.generate(result, {});\n      const safetyAssessment = safety.assess(result);\n\n      const fromPromotionProfile = await loadPromotionProfileForCli(\n        opts.fromProfile ? String(opts.fromProfile) : undefined,\n        String(opts.from),\n        '.ddt',\n        '--from-profile',\n      );\n      const toPromotionProfile = await loadPromotionProfileForCli(\n        opts.toProfile ? String(opts.toProfile) : undefined,\n        String(opts.to),\n        '.ddt',\n        '--to-profile',\n      );\n\n      const gate = evaluatePromoteCliGate({\n        from: String(opts.from),\n        to: String(opts.to),\n        fromProfile: fromPromotionProfile,\n        toProfile: toPromotionProfile,\n        approvers: parseApproverList(opts.approve),\n        rejections: parseRejectionList(opts.reject),\n        force: opts.force === true,\n        safety: safetyAssessment,\n      });\n\n      if (!gate.decision.proceed) {\n        process.stderr.write(`${gate.summary.headline}\\n`);\n        process.stderr.write(renderPromoteGateMarkdown(gate));\n        process.exitCode = 1;\n        return;\n      }\n      if (gate.decision.warnings.length > 0) {\n        process.stderr.write(`${gate.summary.headline}\\n`);\n        for (const w of gate.decision.warnings) {\n          process.stderr.write(`  warning: ${w.code} — ${w.message}\\n`);\n        }\n      }\n\n      // Build the deploy bundle (markdown).\n      const lines: string[] = [];\n      lines.push(`# Promote: ${String(opts.from)} → ${String(opts.to)}`);\n      lines.push('');\n      lines.push(`Generated by \\`ddt promote\\` at ${new Date().toISOString()}.`);\n      lines.push('');\n      lines.push(renderPromoteGateMarkdown(gate));\n      lines.push('## Diff summary');\n      lines.push('');\n      lines.push(`- **Added**: ${result.summary.added}`);\n      lines.push(`- **Removed**: ${result.summary.removed}`);\n      lines.push(`- **Modified**: ${result.summary.modified}`);\n      lines.push('');\n      lines.push('## Safety');\n      lines.push('');\n      const groups = safety.groupByReversibility(safetyAssessment);\n      lines.push(safety.formatReversibilityBuckets(groups));\n      lines.push('');\n      lines.push('## Migration script');\n      lines.push('');\n      lines.push('```sql');\n      lines.push(script.sql);\n      lines.push('```');\n      const bundle = lines.join('\\n');\n\n      // Emit bundle.\n      if (opts.output) {\n        await fs.writeFile(String(opts.output), bundle, 'utf8');\n        console.log(`Wrote deploy bundle → ${String(opts.output)}`);\n      } else if (!opts.openPr) {\n        console.log(bundle);\n      }\n\n      if (opts.openPr) {\n        if (!opts.repo) throw new Error('--repo <owner/repo> is required with --open-pr');\n        const branchName = String(\n          opts.branch ?? `ddt-promote/${String(opts.from)}-to-${String(opts.to)}-${Date.now()}`,\n        );\n        const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'ddt-promote-'));\n        const bodyPath = path.join(tmpDir, 'pr-body.md');\n        await fs.writeFile(bodyPath, bundle, 'utf8');\n        const totalChanges =\n          result.summary.added + result.summary.removed + result.summary.modified;\n        const title = `Promote: ${String(opts.from)} → ${String(opts.to)} (${totalChanges} changes)`;\n        // Open PR via `gh` — leans on the user's auth + branch creation.\n        const args = [\n          'pr',\n          'create',\n          '--repo',\n          String(opts.repo),\n          '--base',\n          String(opts.base),\n          '--head',\n          branchName,\n          '--title',\n          title,\n          '--body-file',\n          bodyPath,\n        ];\n        try {\n          const { stdout } = await execFileP('gh', args);\n          console.log(stdout.trim());\n        } catch (err) {\n          const msg = err instanceof Error ? err.message : String(err);\n          throw new Error(\n            `gh pr create failed: ${msg}\\n` +\n              `Manual workaround: the bundle is at ${bodyPath}; paste it into a PR by hand.`,\n          );\n        }\n      }\n    });\n\n  cmd\n    .command('diff')\n    .description(\n      'Diff two promotion-environment profile JSON files (PROMOTE.2 / PROMOTE.3 wireup). ' +\n        'Pure file I/O — never compares secret values, only secret keys.',\n    )\n    .requiredOption(\n      '--source <path>',\n      'Path to the source .ddt/profiles/<env>.json (parsed via parsePromotionProfile).',\n    )\n    .requiredOption('--target <path>', 'Path to the target profile JSON.')\n    .option('--format <fmt>', 'Output format: markdown (default) | json', 'markdown')\n    .action(async (opts: { source: string; target: string; format?: string }) => {\n      const format = String(opts.format ?? 'markdown').toLowerCase();\n      if (format !== 'markdown' && format !== 'json') {\n        process.stderr.write(\n          `Invalid --format ${JSON.stringify(opts.format)}; expected \"markdown\" or \"json\".\\n`,\n        );\n        process.exitCode = 1;\n        return;\n      }\n\n      const sourcePath = path.resolve(String(opts.source));\n      const targetPath = path.resolve(String(opts.target));\n      const sourceText = await fs.readFile(sourcePath, 'utf8');\n      const targetText = await fs.readFile(targetPath, 'utf8');\n\n      let sourceJson: unknown;\n      let targetJson: unknown;\n      try {\n        sourceJson = JSON.parse(sourceText);\n      } catch (err) {\n        emitDiffError(\n          format,\n          'PROFILE_PARSE_ERROR',\n          `--source is not valid JSON: ${describeErr(err)}`,\n        );\n        process.exitCode = 1;\n        return;\n      }\n      try {\n        targetJson = JSON.parse(targetText);\n      } catch (err) {\n        emitDiffError(\n          format,\n          'PROFILE_PARSE_ERROR',\n          `--target is not valid JSON: ${describeErr(err)}`,\n        );\n        process.exitCode = 1;\n        return;\n      }\n\n      const sourceParse = parsePromotionProfile(sourceJson);\n      if (!sourceParse.profile) {\n        emitDiffError(format, 'PROFILE_INVALID', renderParseErrors('--source', sourceParse.errors));\n        process.exitCode = 2;\n        return;\n      }\n      const targetParse = parsePromotionProfile(targetJson);\n      if (!targetParse.profile) {\n        emitDiffError(format, 'PROFILE_INVALID', renderParseErrors('--target', targetParse.errors));\n        process.exitCode = 2;\n        return;\n      }\n\n      const source = profileToEnvConfig(sourceParse.profile);\n      const target = profileToEnvConfig(targetParse.profile);\n      const diff = diffPromotionEnvConfigs(source, target);\n\n      if (format === 'json') {\n        process.stdout.write(JSON.stringify(diff, null, 2) + '\\n');\n      } else {\n        const md = renderEnvConfigDiffMarkdown(diff);\n        process.stdout.write(md);\n        if (!md.endsWith('\\n')) process.stdout.write('\\n');\n      }\n    });\n\n  return cmd;\n}\n\nfunction profileToEnvConfig(profile: PromotionProfile): PromotionEnvironmentConfig {\n  return {\n    name: profile.name,\n    profileName: profile.profileName,\n    isProduction: profile.isProduction,\n    requiredApprovals: profile.requiredApprovals,\n    ...(profile.variables ? { variables: profile.variables } : {}),\n    ...(profile.secretKeys ? { secretKeys: profile.secretKeys } : {}),\n    ...(profile.profileFields ? { profileFields: profile.profileFields } : {}),\n  };\n}\n\nfunction describeErr(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n\nfunction renderParseErrors(\n  label: string,\n  errors: readonly { path: string; message: string }[],\n): string {\n  const lines = errors.map((e) => `  - ${e.path}: ${e.message}`);\n  return `${label} failed parsePromotionProfile:\\n${lines.join('\\n')}`;\n}\n\nfunction emitDiffError(format: string, errorCode: string, message: string): void {\n  if (format === 'json') {\n    process.stdout.write(JSON.stringify({ ok: false, errorCode, message }) + '\\n');\n  } else {\n    process.stderr.write(`promote diff refused: ${errorCode}\\n${message}\\n`);\n  }\n}\n\nfunction collectRepeatable(value: string, prev: string[]): string[] {\n  return [...prev, value];\n}\n\nexport function parseApproverList(raw: unknown): string[] {\n  if (!Array.isArray(raw)) return [];\n  const out: string[] = [];\n  for (const v of raw) {\n    if (typeof v === 'string' && v.length > 0) out.push(v);\n  }\n  return out;\n}\n\nexport interface PromoteCliRejection {\n  readonly approver: string;\n  readonly reason?: string;\n}\n\nexport function parseRejectionList(raw: unknown): PromoteCliRejection[] {\n  if (!Array.isArray(raw)) return [];\n  const out: PromoteCliRejection[] = [];\n  for (const v of raw) {\n    if (typeof v !== 'string' || v.length === 0) continue;\n    out.push({ approver: v });\n  }\n  return out;\n}\n\n/**\n * PROMOTE.1 + PROMOTE.3 gate inputs for the CLI orchestrator. Pure data\n * — file I/O happens in the caller, this helper composes the substrate.\n */\nexport interface PromoteCliGateOptions {\n  readonly from: string;\n  readonly to: string;\n  readonly fromProfile?: PromotionProfile;\n  readonly toProfile?: PromotionProfile;\n  readonly approvers: readonly string[];\n  readonly rejections: readonly PromoteCliRejection[];\n  readonly force: boolean;\n  readonly safety: SafetyAssessment;\n  readonly now?: string;\n}\n\nexport interface PromoteCliGateOutcome {\n  readonly decision: PromotionGateDecision;\n  readonly summary: PromotionPlanSummary;\n  readonly source: PromotionEnvironment;\n  readonly target: PromotionEnvironment;\n}\n\nfunction profileToEnvironment(\n  name: string,\n  profile: PromotionProfile | undefined,\n): PromotionEnvironment {\n  if (profile) {\n    return {\n      name: profile.name,\n      profileName: profile.profileName,\n      isProduction: profile.isProduction,\n      requiredApprovals: profile.requiredApprovals,\n    };\n  }\n  return { name, profileName: name, isProduction: false, requiredApprovals: 0 };\n}\n\n/**\n * Pure composition of parsePromotionProfile + filterApprovalsByProfile +\n * evaluatePromotionGate + summarizePromotionPlan. Unit-testable without\n * a live warehouse connection — pin tests cover production --force\n * refusal, EXPLICIT_REJECTION via --reject, INSUFFICIENT_APPROVALS,\n * approver-whitelist filtering, and warnings-only success.\n */\nexport function evaluatePromoteCliGate(opts: PromoteCliGateOptions): PromoteCliGateOutcome {\n  const now = opts.now ?? new Date().toISOString();\n  const source = profileToEnvironment(opts.from, opts.fromProfile);\n  const target = profileToEnvironment(opts.to, opts.toProfile);\n  const approvals = opts.approvers.map((approver) => ({ approver, at: now }));\n  const rejections = opts.rejections.map((r) => ({\n    approver: r.approver,\n    at: now,\n    ...(r.reason !== undefined ? { reason: r.reason } : {}),\n  }));\n  let approvalState: PromotionApprovalState = { approvals, rejections };\n  if (opts.toProfile) {\n    approvalState = filterApprovalsByProfile(opts.toProfile, approvalState);\n  }\n  const inputs: EvaluatePromotionGateInputs = {\n    source,\n    target,\n    safety: opts.safety,\n    approvalState,\n    force: opts.force,\n  };\n  const decision = evaluatePromotionGate(inputs);\n  const summary = summarizePromotionPlan(inputs);\n  return { decision, summary, source, target };\n}\n\n/** Markdown rendering of a promotion-gate outcome — embedded in the\n * deploy bundle (so the PR body carries the decision) and printed to\n * stderr on refusal. */\nexport function renderPromoteGateMarkdown(outcome: PromoteCliGateOutcome): string {\n  const lines: string[] = [];\n  lines.push('## Promotion gate');\n  lines.push('');\n  lines.push(`**${outcome.summary.headline}**`);\n  lines.push('');\n  lines.push(\n    `- **Source**: ${outcome.source.name} (profile \\`${outcome.source.profileName}\\`${outcome.source.isProduction ? ', production' : ''})`,\n  );\n  lines.push(\n    `- **Target**: ${outcome.target.name} (profile \\`${outcome.target.profileName}\\`${outcome.target.isProduction ? ', production' : ''})`,\n  );\n  lines.push(\n    `- **Approvals**: ${outcome.summary.approvalsRecorded} recorded / ${outcome.summary.approvalsRequired} required`,\n  );\n  lines.push('');\n  if (outcome.decision.blockers.length > 0) {\n    lines.push(`### Blockers (${outcome.decision.blockers.length})`);\n    lines.push('');\n    for (const b of outcome.decision.blockers) {\n      lines.push(`- **${b.code}** — ${b.message}`);\n    }\n    lines.push('');\n  }\n  if (outcome.decision.warnings.length > 0) {\n    lines.push(`### Warnings (${outcome.decision.warnings.length})`);\n    lines.push('');\n    for (const w of outcome.decision.warnings) {\n      lines.push(`- **${w.code}** — ${w.message}`);\n    }\n    lines.push('');\n  }\n  return lines.join('\\n');\n}\n\n/**\n * Load a promotion profile from disk for the CLI gate. Behavior:\n *   - If `explicitPath` is set, the file MUST exist + parse cleanly.\n *     Missing / malformed → throws with a precise error.\n *   - If `explicitPath` is undefined, tries the default well-known path\n *     `<configDir>/profiles/<envName>.json`. Missing file → returns\n *     `undefined` silently (no profile mode, gate runs with defaults).\n *     Malformed → throws (so a typo is not silently ignored).\n */\nexport async function loadPromotionProfileForCli(\n  explicitPath: string | undefined,\n  envName: string,\n  configDir: string,\n  flagName: string,\n): Promise<PromotionProfile | undefined> {\n  const targetPath = explicitPath\n    ? path.resolve(explicitPath)\n    : path.resolve(path.join(configDir, 'profiles', `${envName}.json`));\n  let text: string;\n  try {\n    text = await fs.readFile(targetPath, 'utf8');\n  } catch (err) {\n    if (explicitPath !== undefined) {\n      throw new Error(`${flagName} ${targetPath} could not be read: ${describeErr(err)}`);\n    }\n    return undefined; // silent fallback for default well-known path\n  }\n  let json: unknown;\n  try {\n    json = JSON.parse(text);\n  } catch (err) {\n    throw new Error(`${targetPath} is not valid JSON: ${describeErr(err)}`);\n  }\n  const parsed = parsePromotionProfile(json);\n  if (!parsed.profile) {\n    throw new Error(renderParseErrors(targetPath, parsed.errors));\n  }\n  return parsed.profile;\n}\n"],"mappings":";;;AAeA,SAAS,gBAAgB;AACzB,SAAS,iBAAiB;AAC1B,SAAS,YAAY,UAAU;AAC/B,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAQK;AAGP,IAAM,YAAY,UAAU,QAAQ;AAE7B,SAAS,iBAA0B;AACxC,QAAM,MAAM,IAAI,QAAQ,SAAS;AACjC,MACG;AAAA,IACC;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,OAAO,uBAAuB,4BAA4B,EAC1D,OAAO,qBAAqB,gDAAgD,EAC5E;AAAA,IACC;AAAA,IACA;AAAA,EAEF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EAEF,EACC;AAAA,IACC;AAAA,IACA;AAAA,IAEA;AAAA,IACA,CAAC;AAAA,EACH,EACC;AAAA,IACC;AAAA,IACA;AAAA,IAEA;AAAA,IACA,CAAC;AAAA,EACH,EACC;AAAA,IACC;AAAA,IACA;AAAA,IAEA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,IACA;AAAA,EACF,EACC,OAAO,iBAAiB,+DAA0D,EAClF,OAAO,mBAAmB,kCAAkC,MAAM,EAClE,OAAO,mBAAmB,wDAAwD,EAClF,OAAO,uBAAuB,gEAAgE,EAC9F,OAAO,OAAO,SAAS;AACtB,QAAI,CAAC,KAAK,QAAQ,CAAC,KAAK,IAAI;AAC1B,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,cAAc,MAAM,WAAW,OAAO,KAAK,IAAI,CAAC;AACtD,UAAM,YAAY,MAAM,WAAW,OAAO,KAAK,EAAE,CAAC;AAClD,UAAM,QAAQ;AAAA,MACZ,GAAI,KAAK,UAAU,EAAE,SAAS,OAAO,KAAK,OAAO,EAAE,IAAI,CAAC;AAAA,MACxD,GAAI,KAAK,SAAS,EAAE,QAAQ,OAAO,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,IACvD;AAGA,UAAM,UAAU,OAAO,SAA6B,UAAkB;AACpE,YAAM,OAAO,iBAAiB,OAAO;AACrC,UAAI;AACF,cAAM,KAAK,QAAQ;AACnB,cAAM,UAAU,IAAI,iBAAiB,kBAAkB,CAAC;AACxD,cAAM,OAAO,MAAM,QAAQ,QAAQ,MAAM,KAAK;AAC9C,eAAO,IAAI,eAAe,MAAM,EAAE,MAAM,QAAQ,MAAM,CAAC;AAAA,MACzD,UAAE;AACA,cAAM,KAAK,WAAW;AAAA,MACxB;AAAA,IACF;AACA,UAAM,aAAa,MAAM,QAAQ,aAAa,QAAQ,YAAY,KAAK,IAAI,EAAE;AAC7E,UAAM,WAAW,MAAM,QAAQ,WAAW,MAAM,UAAU,KAAK,IAAI,EAAE;AAGrE,UAAM,SAAS,IAAI,cAAc;AACjC,UAAM,SAAS,MAAM,OAAO,QAAQ,YAAY,QAAQ;AAExD,UAAM,eAAe,OAAO,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO,QAAQ;AACpF,QAAI,iBAAiB,GAAG;AACtB,cAAQ;AAAA,QACN,uBAAuB,OAAO,KAAK,IAAI,CAAC,WAAM,OAAO,KAAK,EAAE,CAAC;AAAA,MAC/D;AACA;AAAA,IACF;AAGA,UAAM,YAAY,IAAI,gBAAgB;AACtC,UAAM,SAAS,UAAU,SAAS,QAAQ,CAAC,CAAC;AAC5C,UAAM,mBAAmB,OAAO,OAAO,MAAM;AAE7C,UAAM,uBAAuB,MAAM;AAAA,MACjC,KAAK,cAAc,OAAO,KAAK,WAAW,IAAI;AAAA,MAC9C,OAAO,KAAK,IAAI;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AACA,UAAM,qBAAqB,MAAM;AAAA,MAC/B,KAAK,YAAY,OAAO,KAAK,SAAS,IAAI;AAAA,MAC1C,OAAO,KAAK,EAAE;AAAA,MACd;AAAA,MACA;AAAA,IACF;AAEA,UAAM,OAAO,uBAAuB;AAAA,MAClC,MAAM,OAAO,KAAK,IAAI;AAAA,MACtB,IAAI,OAAO,KAAK,EAAE;AAAA,MAClB,aAAa;AAAA,MACb,WAAW;AAAA,MACX,WAAW,kBAAkB,KAAK,OAAO;AAAA,MACzC,YAAY,mBAAmB,KAAK,MAAM;AAAA,MAC1C,OAAO,KAAK,UAAU;AAAA,MACtB,QAAQ;AAAA,IACV,CAAC;AAED,QAAI,CAAC,KAAK,SAAS,SAAS;AAC1B,cAAQ,OAAO,MAAM,GAAG,KAAK,QAAQ,QAAQ;AAAA,CAAI;AACjD,cAAQ,OAAO,MAAM,0BAA0B,IAAI,CAAC;AACpD,cAAQ,WAAW;AACnB;AAAA,IACF;AACA,QAAI,KAAK,SAAS,SAAS,SAAS,GAAG;AACrC,cAAQ,OAAO,MAAM,GAAG,KAAK,QAAQ,QAAQ;AAAA,CAAI;AACjD,iBAAW,KAAK,KAAK,SAAS,UAAU;AACtC,gBAAQ,OAAO,MAAM,cAAc,EAAE,IAAI,WAAM,EAAE,OAAO;AAAA,CAAI;AAAA,MAC9D;AAAA,IACF;AAGA,UAAM,QAAkB,CAAC;AACzB,UAAM,KAAK,cAAc,OAAO,KAAK,IAAI,CAAC,WAAM,OAAO,KAAK,EAAE,CAAC,EAAE;AACjE,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,oCAAmC,oBAAI,KAAK,GAAE,YAAY,CAAC,GAAG;AACzE,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,0BAA0B,IAAI,CAAC;AAC1C,UAAM,KAAK,iBAAiB;AAC5B,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,gBAAgB,OAAO,QAAQ,KAAK,EAAE;AACjD,UAAM,KAAK,kBAAkB,OAAO,QAAQ,OAAO,EAAE;AACrD,UAAM,KAAK,mBAAmB,OAAO,QAAQ,QAAQ,EAAE;AACvD,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,WAAW;AACtB,UAAM,KAAK,EAAE;AACb,UAAM,SAAS,OAAO,qBAAqB,gBAAgB;AAC3D,UAAM,KAAK,OAAO,2BAA2B,MAAM,CAAC;AACpD,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,qBAAqB;AAChC,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,QAAQ;AACnB,UAAM,KAAK,OAAO,GAAG;AACrB,UAAM,KAAK,KAAK;AAChB,UAAM,SAAS,MAAM,KAAK,IAAI;AAG9B,QAAI,KAAK,QAAQ;AACf,YAAM,GAAG,UAAU,OAAO,KAAK,MAAM,GAAG,QAAQ,MAAM;AACtD,cAAQ,IAAI,8BAAyB,OAAO,KAAK,MAAM,CAAC,EAAE;AAAA,IAC5D,WAAW,CAAC,KAAK,QAAQ;AACvB,cAAQ,IAAI,MAAM;AAAA,IACpB;AAEA,QAAI,KAAK,QAAQ;AACf,UAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,gDAAgD;AAChF,YAAM,aAAa;AAAA,QACjB,KAAK,UAAU,eAAe,OAAO,KAAK,IAAI,CAAC,OAAO,OAAO,KAAK,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;AAAA,MACrF;AACA,YAAM,SAAS,MAAM,GAAG,QAAQ,KAAK,KAAK,GAAG,OAAO,GAAG,cAAc,CAAC;AACtE,YAAM,WAAW,KAAK,KAAK,QAAQ,YAAY;AAC/C,YAAM,GAAG,UAAU,UAAU,QAAQ,MAAM;AAC3C,YAAMA,gBACJ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO,QAAQ;AACjE,YAAM,QAAQ,YAAY,OAAO,KAAK,IAAI,CAAC,WAAM,OAAO,KAAK,EAAE,CAAC,KAAKA,aAAY;AAEjF,YAAM,OAAO;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,KAAK,IAAI;AAAA,QAChB;AAAA,QACA,OAAO,KAAK,IAAI;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,UAAI;AACF,cAAM,EAAE,OAAO,IAAI,MAAM,UAAU,MAAM,IAAI;AAC7C,gBAAQ,IAAI,OAAO,KAAK,CAAC;AAAA,MAC3B,SAAS,KAAK;AACZ,cAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,cAAM,IAAI;AAAA,UACR,wBAAwB,GAAG;AAAA,sCACc,QAAQ;AAAA,QACnD;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAEH,MACG,QAAQ,MAAM,EACd;AAAA,IACC;AAAA,EAEF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,eAAe,mBAAmB,kCAAkC,EACpE,OAAO,kBAAkB,4CAA4C,UAAU,EAC/E,OAAO,OAAO,SAA8D;AAC3E,UAAM,SAAS,OAAO,KAAK,UAAU,UAAU,EAAE,YAAY;AAC7D,QAAI,WAAW,cAAc,WAAW,QAAQ;AAC9C,cAAQ,OAAO;AAAA,QACb,oBAAoB,KAAK,UAAU,KAAK,MAAM,CAAC;AAAA;AAAA,MACjD;AACA,cAAQ,WAAW;AACnB;AAAA,IACF;AAEA,UAAM,aAAa,KAAK,QAAQ,OAAO,KAAK,MAAM,CAAC;AACnD,UAAM,aAAa,KAAK,QAAQ,OAAO,KAAK,MAAM,CAAC;AACnD,UAAM,aAAa,MAAM,GAAG,SAAS,YAAY,MAAM;AACvD,UAAM,aAAa,MAAM,GAAG,SAAS,YAAY,MAAM;AAEvD,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,mBAAa,KAAK,MAAM,UAAU;AAAA,IACpC,SAAS,KAAK;AACZ;AAAA,QACE;AAAA,QACA;AAAA,QACA,+BAA+B,YAAY,GAAG,CAAC;AAAA,MACjD;AACA,cAAQ,WAAW;AACnB;AAAA,IACF;AACA,QAAI;AACF,mBAAa,KAAK,MAAM,UAAU;AAAA,IACpC,SAAS,KAAK;AACZ;AAAA,QACE;AAAA,QACA;AAAA,QACA,+BAA+B,YAAY,GAAG,CAAC;AAAA,MACjD;AACA,cAAQ,WAAW;AACnB;AAAA,IACF;AAEA,UAAM,cAAc,sBAAsB,UAAU;AACpD,QAAI,CAAC,YAAY,SAAS;AACxB,oBAAc,QAAQ,mBAAmB,kBAAkB,YAAY,YAAY,MAAM,CAAC;AAC1F,cAAQ,WAAW;AACnB;AAAA,IACF;AACA,UAAM,cAAc,sBAAsB,UAAU;AACpD,QAAI,CAAC,YAAY,SAAS;AACxB,oBAAc,QAAQ,mBAAmB,kBAAkB,YAAY,YAAY,MAAM,CAAC;AAC1F,cAAQ,WAAW;AACnB;AAAA,IACF;AAEA,UAAM,SAAS,mBAAmB,YAAY,OAAO;AACrD,UAAM,SAAS,mBAAmB,YAAY,OAAO;AACrD,UAAM,OAAO,wBAAwB,QAAQ,MAAM;AAEnD,QAAI,WAAW,QAAQ;AACrB,cAAQ,OAAO,MAAM,KAAK,UAAU,MAAM,MAAM,CAAC,IAAI,IAAI;AAAA,IAC3D,OAAO;AACL,YAAM,KAAK,4BAA4B,IAAI;AAC3C,cAAQ,OAAO,MAAM,EAAE;AACvB,UAAI,CAAC,GAAG,SAAS,IAAI,EAAG,SAAQ,OAAO,MAAM,IAAI;AAAA,IACnD;AAAA,EACF,CAAC;AAEH,SAAO;AACT;AAEA,SAAS,mBAAmB,SAAuD;AACjF,SAAO;AAAA,IACL,MAAM,QAAQ;AAAA,IACd,aAAa,QAAQ;AAAA,IACrB,cAAc,QAAQ;AAAA,IACtB,mBAAmB,QAAQ;AAAA,IAC3B,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,IAC5D,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,IAC/D,GAAI,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,cAAc,IAAI,CAAC;AAAA,EAC1E;AACF;AAEA,SAAS,YAAY,KAAsB;AACzC,SAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;AAEA,SAAS,kBACP,OACA,QACQ;AACR,QAAM,QAAQ,OAAO,IAAI,CAAC,MAAM,OAAO,EAAE,IAAI,KAAK,EAAE,OAAO,EAAE;AAC7D,SAAO,GAAG,KAAK;AAAA,EAAmC,MAAM,KAAK,IAAI,CAAC;AACpE;AAEA,SAAS,cAAc,QAAgB,WAAmB,SAAuB;AAC/E,MAAI,WAAW,QAAQ;AACrB,YAAQ,OAAO,MAAM,KAAK,UAAU,EAAE,IAAI,OAAO,WAAW,QAAQ,CAAC,IAAI,IAAI;AAAA,EAC/E,OAAO;AACL,YAAQ,OAAO,MAAM,yBAAyB,SAAS;AAAA,EAAK,OAAO;AAAA,CAAI;AAAA,EACzE;AACF;AAEA,SAAS,kBAAkB,OAAe,MAA0B;AAClE,SAAO,CAAC,GAAG,MAAM,KAAK;AACxB;AAEO,SAAS,kBAAkB,KAAwB;AACxD,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,QAAM,MAAgB,CAAC;AACvB,aAAW,KAAK,KAAK;AACnB,QAAI,OAAO,MAAM,YAAY,EAAE,SAAS,EAAG,KAAI,KAAK,CAAC;AAAA,EACvD;AACA,SAAO;AACT;AAOO,SAAS,mBAAmB,KAAqC;AACtE,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,QAAM,MAA6B,CAAC;AACpC,aAAW,KAAK,KAAK;AACnB,QAAI,OAAO,MAAM,YAAY,EAAE,WAAW,EAAG;AAC7C,QAAI,KAAK,EAAE,UAAU,EAAE,CAAC;AAAA,EAC1B;AACA,SAAO;AACT;AAyBA,SAAS,qBACP,MACA,SACsB;AACtB,MAAI,SAAS;AACX,WAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,aAAa,QAAQ;AAAA,MACrB,cAAc,QAAQ;AAAA,MACtB,mBAAmB,QAAQ;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,EAAE,MAAM,aAAa,MAAM,cAAc,OAAO,mBAAmB,EAAE;AAC9E;AASO,SAAS,uBAAuB,MAAoD;AACzF,QAAM,MAAM,KAAK,QAAO,oBAAI,KAAK,GAAE,YAAY;AAC/C,QAAM,SAAS,qBAAqB,KAAK,MAAM,KAAK,WAAW;AAC/D,QAAM,SAAS,qBAAqB,KAAK,IAAI,KAAK,SAAS;AAC3D,QAAM,YAAY,KAAK,UAAU,IAAI,CAAC,cAAc,EAAE,UAAU,IAAI,IAAI,EAAE;AAC1E,QAAM,aAAa,KAAK,WAAW,IAAI,CAAC,OAAO;AAAA,IAC7C,UAAU,EAAE;AAAA,IACZ,IAAI;AAAA,IACJ,GAAI,EAAE,WAAW,SAAY,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;AAAA,EACvD,EAAE;AACF,MAAI,gBAAwC,EAAE,WAAW,WAAW;AACpE,MAAI,KAAK,WAAW;AAClB,oBAAgB,yBAAyB,KAAK,WAAW,aAAa;AAAA,EACxE;AACA,QAAM,SAAsC;AAAA,IAC1C;AAAA,IACA;AAAA,IACA,QAAQ,KAAK;AAAA,IACb;AAAA,IACA,OAAO,KAAK;AAAA,EACd;AACA,QAAM,WAAW,sBAAsB,MAAM;AAC7C,QAAM,UAAU,uBAAuB,MAAM;AAC7C,SAAO,EAAE,UAAU,SAAS,QAAQ,OAAO;AAC7C;AAKO,SAAS,0BAA0B,SAAwC;AAChF,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,mBAAmB;AAC9B,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,KAAK,QAAQ,QAAQ,QAAQ,IAAI;AAC5C,QAAM,KAAK,EAAE;AACb,QAAM;AAAA,IACJ,iBAAiB,QAAQ,OAAO,IAAI,eAAe,QAAQ,OAAO,WAAW,KAAK,QAAQ,OAAO,eAAe,iBAAiB,EAAE;AAAA,EACrI;AACA,QAAM;AAAA,IACJ,iBAAiB,QAAQ,OAAO,IAAI,eAAe,QAAQ,OAAO,WAAW,KAAK,QAAQ,OAAO,eAAe,iBAAiB,EAAE;AAAA,EACrI;AACA,QAAM;AAAA,IACJ,oBAAoB,QAAQ,QAAQ,iBAAiB,eAAe,QAAQ,QAAQ,iBAAiB;AAAA,EACvG;AACA,QAAM,KAAK,EAAE;AACb,MAAI,QAAQ,SAAS,SAAS,SAAS,GAAG;AACxC,UAAM,KAAK,iBAAiB,QAAQ,SAAS,SAAS,MAAM,GAAG;AAC/D,UAAM,KAAK,EAAE;AACb,eAAW,KAAK,QAAQ,SAAS,UAAU;AACzC,YAAM,KAAK,OAAO,EAAE,IAAI,aAAQ,EAAE,OAAO,EAAE;AAAA,IAC7C;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AACA,MAAI,QAAQ,SAAS,SAAS,SAAS,GAAG;AACxC,UAAM,KAAK,iBAAiB,QAAQ,SAAS,SAAS,MAAM,GAAG;AAC/D,UAAM,KAAK,EAAE;AACb,eAAW,KAAK,QAAQ,SAAS,UAAU;AACzC,YAAM,KAAK,OAAO,EAAE,IAAI,aAAQ,EAAE,OAAO,EAAE;AAAA,IAC7C;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAWA,eAAsB,2BACpB,cACA,SACA,WACA,UACuC;AACvC,QAAM,aAAa,eACf,KAAK,QAAQ,YAAY,IACzB,KAAK,QAAQ,KAAK,KAAK,WAAW,YAAY,GAAG,OAAO,OAAO,CAAC;AACpE,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,GAAG,SAAS,YAAY,MAAM;AAAA,EAC7C,SAAS,KAAK;AACZ,QAAI,iBAAiB,QAAW;AAC9B,YAAM,IAAI,MAAM,GAAG,QAAQ,IAAI,UAAU,uBAAuB,YAAY,GAAG,CAAC,EAAE;AAAA,IACpF;AACA,WAAO;AAAA,EACT;AACA,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,SAAS,KAAK;AACZ,UAAM,IAAI,MAAM,GAAG,UAAU,uBAAuB,YAAY,GAAG,CAAC,EAAE;AAAA,EACxE;AACA,QAAM,SAAS,sBAAsB,IAAI;AACzC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,kBAAkB,YAAY,OAAO,MAAM,CAAC;AAAA,EAC9D;AACA,SAAO,OAAO;AAChB;","names":["totalChanges"]}