@descryy/core 0.1.0

package/dist/validation/env.js

@@ -0,0 +1,447 @@
+/**
+ * §15.3's environment/config check — *"cheapest and most reliable, ship first"*.
+ *
+ * The first thing in this repository that produces a statement about somebody's
+ * code rather than a measurement about the graph. Everything below is shaped by
+ * one fact, which was measured before any of it was written:
+ *
+ * > **A variable that is read and never declared is usually not a bug.**
+ *
+ * | repository | declared | read | read and never declared |
+ * | --- | --- | --- | --- |
+ * | `outline` | 91 | 23 | **18** |
+ * | `saleor` | 7 | 114 | **107** |
+ *
+ * The 107 are not defects; that repository's configuration lives in framework
+ * defaults and a deployment this run cannot see. The 18 are not defects either,
+ * and they are the more instructive set because they look plausible — container
+ * credentials, a platform's dyno id, a proxy setting, five alternates to a
+ * variable that *is* declared. A rule that reports them names a real variable at
+ * a real line and is wrong every time, which is how a tool gets uninstalled.
+ *
+ * This is the contract engine's problem in a second spelling — 117 callers, 24
+ * routes, and the 101 unmatched being a backend nobody analysed — so it takes the
+ * same two answers. **Report against evidence that exists; disclose the rest with
+ * a count.** See DEC-121.
+ *
+ * ## Three evidence sets, and the rule over them
+ *
+ * ```
+ *   reads (graph)        declarations (.env*)      deploy target (manifests, CI)
+ *        │                       │                          │
+ *        └───────── a finding needs two of these ────────────┘
+ *                    and, for a defect claim,
+ *              one of them must assert *requirement*
+ * ```
+ *
+ * Requirement is asserted by exactly one thing: **the read site fails when the
+ * variable is absent.** Not "has no fallback" — that was the first rule, it was
+ * measured, and it was wrong five times out of six.
+ *
+ * ## The rule that replaced it, and the six findings that killed the first one
+ *
+ * The first version asked whether the read supplied a fallback. On `dispatch` it
+ * emitted six findings and **five were false**:
+ *
+ * | finding | source | why it was wrong |
+ * | --- | --- | --- |
+ * | `FORMKIT_ENTERPRISE_TOKEN` | `if (env.X && env.X.startsWith(…))` | a feature gate |
+ * | `VITE_DISPATCH_SENTRY_ENABLED` | `let e = env.X; if (e) {…}` | a feature gate |
+ * | `VITE_DISPATCH_SENTRY_DSN` | used only inside that gate | never reached |
+ * | `VITE_DISPATCH_AVATAR_TEMPLATE` | `const t = env.X` | absent is a valid value |
+ * | `VITE_FORMKIT_PRO_PROJECT_KEY` | `const hasPro = env.X` | the name says it |
+ *
+ * Every one is *assigned without a fallback and then tested*. Deciding
+ * requirement from the assignment needs to know what happens to the value
+ * afterwards, which is dataflow — R1 work at least, and not available here.
+ *
+ * The sixth finding was true, and the difference is the whole rule: it read
+ * through an accessor that **raises** when the variable is unset. So:
+ *
+ * - an accessor that raises on absence — a subscript, a config lookup with no
+ *   declared default — **asserts requirement**;
+ * - an accessor that yields an absent value instead **asserts nothing at all**,
+ *   however the result is later used.
+ *
+ * The second case is not "optional". It is *unknown at this resolution*, and it
+ * is counted and disclosed rather than assumed either way. That is why a
+ * repository whose every read yields-on-absence produces no read-side finding at
+ * all and is told so in words.
+ *
+ * **A list of platform-supplied names was considered and rejected.** It decides a
+ * fact about a variable from its spelling, it cannot be maintained across
+ * clouds, and it is silently wrong on the repository that genuinely requires
+ * `PORT`. Rule 3's shape, one level up from node types.
+ *
+ * ## The coverage guard — `nearestMiss` in a second spelling
+ *
+ * `orphans.ts` refuses to report an unmatched caller when nothing on the provider
+ * side resembles it, because the honest description is *"the provider side was
+ * never read"*. Same refusal here: before any read-side finding is emitted, the
+ * check asks what fraction of the variables the code names the repository
+ * declares *at all*. Below the floor the declaration surface is decorative, the
+ * configuration lives somewhere this run cannot see, and **nothing is reported**
+ * — only a count and the reason. That is the rule that turns `saleor`'s 107 into
+ * one honest sentence.
+ *
+ * **The denominator is every named variable, not only the required ones**, and
+ * that is not a detail. Measured over required reads alone the denominator was
+ * four on a real repository, so deleting a single declaration moved coverage
+ * from 75% to 50% and flipped the guard from reporting six findings to
+ * reporting none. A guard that inverts on one line is not a guard. Asking "does
+ * this repository declare the variables its code names" over every read is the
+ * same question with a denominator large enough to answer it — and it is what
+ * the positive control found, which is precisely what a positive control is for.
+ *
+ * ## Deploy-target surfaces can only ever suppress a finding
+ *
+ * A container manifest's `environment:` block belongs to whichever image that
+ * service runs — a database's credentials are not this application's
+ * configuration. So manifests and pipelines count towards *declared*, and never
+ * towards *undocumented*: they can prevent a finding, never create one. Without
+ * this, `outline` reports three database credentials belonging to an image it
+ * merely depends on.
+ *
+ * ## Resolution, and why a config read is not R0
+ *
+ * A `.env` file is not code. *"This name is on line 12 of one file and in none of
+ * the others"* rests on a direct read of two declarative documents with no
+ * inference at any hop — strictly better evidence than an LSP-resolved name,
+ * because nothing needed resolving. It is treated as R3, on the same precedent
+ * that lets a contract format reach R3 with no language adapter at all.
+ *
+ * A claim about what the *code* requires is capped by the node the read came
+ * from, which is R0 for a syntax-only adapter. So a `REQUIRED_NOT_DECLARED`
+ * finding lands at class C and is labelled a prediction — principle 3 working,
+ * not a defect of the check. §15.3 calls this check Class A because the
+ * underlying fact is deterministic; the resolution cap is what reconciles the
+ * two, and the report says so rather than picking one.
+ */
+import { fileScopedNodes } from "./nodes.js";
+export const DEFAULT_COVERAGE_FLOOR = 0.6;
+/**
+ * Declared peers the guard demands before a ratio is allowed to mean anything.
+ *
+ * A ratio over a denominator of one or two is not evidence: one required read
+ * and one declaration is 100% coverage on a sample of size one. Picked before
+ * measuring, like the floor.
+ */
+const MIN_DECLARED_PEERS = 3;
+const DEFAULT_MAX_FINDINGS = 25;
+/** Direct reads of declarative documents need no resolution — see the header. */
+const DECLARATIVE_RESOLUTION = 3;
+/**
+ * Pull `attrs.envReads` off a file node, refusing anything malformed.
+ *
+ * `attrs` is opaque above the boundary and is written by code this engine does
+ * not own, so every field is checked. A row missing `required` is **dropped, not
+ * defaulted**: defaulting it to `true` would manufacture a requirement claim
+ * from an adapter that never made one, and that claim is the whole check.
+ */
+export function readEnvReads(attrs, file, resolution) {
+    const raw = attrs["envReads"];
+    const dynamicRaw = attrs["envDynamicReads"];
+    const dynamic = typeof dynamicRaw === "number" && Number.isFinite(dynamicRaw) && dynamicRaw > 0
+        ? Math.floor(dynamicRaw)
+        : 0;
+    if (!Array.isArray(raw))
+        return { reads: [], dynamic, malformed: 0 };
+    const reads = [];
+    let malformed = 0;
+    for (const entry of raw) {
+        if (typeof entry !== "object" || entry === null) {
+            malformed += 1;
+            continue;
+        }
+        const row = entry;
+        const name = row["name"];
+        const required = row["required"];
+        const line = row["line"];
+        if (typeof name !== "string" || name === "" || typeof required !== "boolean") {
+            malformed += 1;
+            continue;
+        }
+        reads.push({
+            name,
+            required,
+            file,
+            line: typeof line === "number" && Number.isFinite(line) ? line : 0,
+            resolution,
+        });
+    }
+    return { reads, dynamic, malformed };
+}
+export function checkEnvironment(provider, scan, options = {}) {
+    const floor = options.coverageFloor ?? DEFAULT_COVERAGE_FLOOR;
+    const maxFindings = options.maxFindings ?? DEFAULT_MAX_FINDINGS;
+    const scoped = options.files === undefined ? null : new Set(options.files);
+    const notes = [];
+    // --- the declaration side, from the filesystem ---------------------------
+    const declaredAt = new Map();
+    const dotenvExample = new Map();
+    const dotenvSet = new Map();
+    for (const surface of scan.surfaces) {
+        for (const declaration of surface.declarations) {
+            const evidence = {
+                file: surface.file,
+                line: declaration.line,
+                says: declaration.commented
+                    ? `${surface.file} documents it, commented out`
+                    : `${surface.file} declares it`,
+            };
+            let bucket = declaredAt.get(declaration.name);
+            if (bucket === undefined)
+                declaredAt.set(declaration.name, (bucket = []));
+            bucket.push(evidence);
+            // Only same-application surfaces feed the documentation comparison. A
+            // manifest sets variables for whichever image its service runs.
+            if (surface.format !== "dotenv")
+                continue;
+            const target = surface.example ? dotenvExample : dotenvSet;
+            if (!target.has(declaration.name))
+                target.set(declaration.name, evidence);
+        }
+    }
+    // --- the read side, from the graph ---------------------------------------
+    const files = fileScopedNodes(provider, options.limit);
+    const reads = [];
+    let filesWithReads = 0;
+    let filesWithoutReads = 0;
+    let dynamic = 0;
+    let malformed = 0;
+    for (const node of files.nodes) {
+        const path = node.file;
+        if (path === null)
+            continue;
+        if (scoped !== null && !scoped.has(path))
+            continue;
+        const extracted = readEnvReads(node.attrs, path, node.resolution);
+        dynamic += extracted.dynamic;
+        malformed += extracted.malformed;
+        if (extracted.reads.length === 0 && extracted.dynamic === 0) {
+            filesWithoutReads += 1;
+            continue;
+        }
+        filesWithReads += 1;
+        reads.push(...extracted.reads);
+    }
+    const requiredReads = new Map();
+    const undeterminedNames = new Set();
+    const namedVariables = new Set();
+    for (const read of reads) {
+        namedVariables.add(read.name);
+        if (!read.required) {
+            undeterminedNames.add(read.name);
+            continue;
+        }
+        // First read site wins so the citation is stable between runs.
+        const existing = requiredReads.get(read.name);
+        if (existing === undefined || read.file < existing.file)
+            requiredReads.set(read.name, read);
+    }
+    const readsAvailable = filesWithReads > 0;
+    // --- the coverage guard --------------------------------------------------
+    //
+    // Over every variable the code names, not only the ones asserting requirement.
+    // See the header: the narrow denominator was four on a real repository, and
+    // deleting one declaration inverted the guard.
+    let coverage = null;
+    if (requiredReads.size > 0) {
+        let declared = 0;
+        let requiredUndeclared = 0;
+        for (const name of requiredReads.keys()) {
+            if (declaredAt.has(name))
+                declared += 1;
+            else
+                requiredUndeclared += 1;
+        }
+        const ratio = declared / requiredReads.size;
+        coverage = {
+            required: requiredReads.size,
+            named: namedVariables.size,
+            declared,
+            ratio,
+            floor,
+            // Both, and the absolute half is what makes the ratio safe at small n: a
+            // repository with one required read and one declaration scores 100% on
+            // evidence of size one.
+            passed: ratio >= floor && declared >= MIN_DECLARED_PEERS,
+            requiredUndeclared,
+            minDeclared: MIN_DECLARED_PEERS,
+        };
+    }
+    // --- findings ------------------------------------------------------------
+    const findings = [];
+    if (coverage !== null && coverage.passed) {
+        for (const [name, read] of requiredReads) {
+            if (declaredAt.has(name))
+                continue;
+            const where = read.line > 0 ? `${read.file}:${read.line}` : read.file;
+            findings.push({
+                kind: "REQUIRED_NOT_DECLARED",
+                name,
+                claim: "defect",
+                detail: `${name} is read at ${where} through an accessor that fails when it is unset, and ` +
+                    "no configuration file in this repository declares it. " +
+                    describeSurface(coverage),
+                evidence: [
+                    {
+                        file: read.file,
+                        line: read.line,
+                        says: "read here through an accessor that fails when the variable is unset",
+                    },
+                ],
+                resolution: Math.min(DECLARATIVE_RESOLUTION, read.resolution),
+            });
+        }
+    }
+    // Documentation drift, between same-application files only. Gated on the same
+    // floor: an example file documenting almost nothing is a fact about the file.
+    const undocumented = [...dotenvSet.keys()].filter((n) => !dotenvExample.has(n));
+    if (dotenvExample.size > 0 && dotenvSet.size > 0) {
+        const documented = dotenvSet.size - undocumented.length;
+        const ratio = documented / dotenvSet.size;
+        if (ratio >= floor) {
+            for (const name of undocumented) {
+                const evidence = dotenvSet.get(name);
+                if (evidence === undefined)
+                    continue;
+                findings.push({
+                    kind: "SET_BUT_UNDOCUMENTED",
+                    name,
+                    claim: "lead",
+                    detail: `${name} is set in ${evidence.file}:${evidence.line} and no example file in this ` +
+                        "repository documents it. That is a lead, not a defect: someone setting this project " +
+                        "up from the example alone would not learn the variable exists.",
+                    evidence: [{ ...evidence, says: `${evidence.file} sets it` }],
+                    resolution: DECLARATIVE_RESOLUTION,
+                });
+            }
+        }
+        else {
+            notes.push(`${undocumented.length} variable(s) are set in a configuration file and documented in no ` +
+                `example file, and they are not reported. The example files cover only ` +
+                `${Math.round(ratio * 100)}% of what the other files set, which is a fact about the ` +
+                "example rather than about any one variable.");
+        }
+    }
+    let declaredNeverRead = 0;
+    if (readsAvailable) {
+        const everyRead = namedVariables;
+        for (const name of declaredAt.keys())
+            if (!everyRead.has(name))
+                declaredNeverRead += 1;
+    }
+    // Defects before leads, then better evidence, then by name so two runs agree.
+    findings.sort((a, b) => (a.claim === b.claim ? 0 : a.claim === "defect" ? -1 : 1) ||
+        b.resolution - a.resolution ||
+        a.name.localeCompare(b.name));
+    const kept = findings.slice(0, maxFindings);
+    // --- disclosures ---------------------------------------------------------
+    if (scan.surfaces.length === 0) {
+        notes.push("No configuration file was found in this repository — no .env file, container manifest, " +
+            "image build file or pipeline definition declares a variable. Nothing could be " +
+            "cross-checked, which is a property of what was analysed rather than a clean result.");
+    }
+    if (!readsAvailable) {
+        notes.push("No file in the graph carries environment reads, so nothing was checked against the code. " +
+            "This engine reads attrs.envReads on a file-scoped node — an array of { name, required, line } — " +
+            "and no adapter emits it yet. Only the configuration files were compared against each " +
+            "other. This is not a result of zero problems.");
+    }
+    else if (filesWithoutReads > 0) {
+        notes.push(`${filesWithoutReads} file(s) in the graph carry no environment reads. Some genuinely read ` +
+            "no configuration; others were produced by an adapter that does not extract reads at all, " +
+            'and this check cannot tell those apart. "We found nothing here" and "we could not look ' +
+            'here" are different statements and only the second is safe to assume.');
+    }
+    if (coverage !== null && !coverage.passed && coverage.requiredUndeclared > 0) {
+        notes.push(`${coverage.requiredUndeclared} variable(s) are read through an accessor that fails when ` +
+            "they are unset and declared nowhere in this repository, and none of them is reported. " +
+            `This repository declares ${coverage.declared} of the ${coverage.required} variables its ` +
+            "code cannot start without " +
+            `(${Math.round(coverage.ratio * 100)}%, floor ${Math.round(floor * 100)}%), so its ` +
+            "configuration comes from somewhere this run cannot see — a secrets manager, a platform, " +
+            "a deployment. Reporting them would be one confident wrong sentence per variable.");
+    }
+    if (coverage === null && readsAvailable) {
+        notes.push(`Every one of the ${namedVariables.size} variable(s) this code names is read through an ` +
+            "accessor that yields an absent value rather than failing, so no read asserts that any " +
+            "variable is required and no missing-variable claim could be made. Whether the code copes " +
+            "with an absent value depends on what happens to it afterwards, which needs resolution " +
+            "this run did not reach. The check is not saying the configuration is complete.");
+    }
+    if (dynamic > 0) {
+        notes.push(`${dynamic} environment read(s) use a computed name and were not resolved to a variable. ` +
+            "They are counted rather than guessed at: a name assembled at runtime is not a name this " +
+            "check can check, and inventing one would be a false claim.");
+    }
+    if (malformed > 0) {
+        notes.push(`${malformed} environment read record(s) were dropped as malformed — a row missing "name" ` +
+            'or a boolean "optional". A row without "optional" is dropped rather than assumed ' +
+            "required, because that assumption is the entire finding.");
+    }
+    if (declaredNeverRead > 0) {
+        notes.push(`${declaredNeverRead} declared variable(s) are read nowhere in the graph. Not reported: the ` +
+            "usual explanation is a reader this analysis did not cover, not dead configuration.");
+    }
+    if (scan.unreadable.length > 0) {
+        notes.push(`${scan.unreadable.length} path(s) looked like configuration and could not be read. Their ` +
+            "contents are not in any count above.");
+    }
+    if (scoped !== null) {
+        notes.push(`The read side was restricted to ${scoped.size} scoped file(s). Configuration files were ` +
+            "read in full, because a declaration is repository-wide regardless of what changed.");
+    }
+    if (kept.length < findings.length) {
+        notes.push(`${findings.length - kept.length} further finding(s) were withheld: a report is capped at ` +
+            `${maxFindings} so a short list stays worth reading. They were found, not missed.`);
+    }
+    if (files.truncated) {
+        notes.push("More files exist in the graph than were enumerated, so the read side covers a prefix of " +
+            "the repository rather than all of it. Files beyond the cap were not examined.");
+    }
+    if (scan.truncated) {
+        notes.push("The configuration scan hit its file budget before finishing, so some declarations may be " +
+            "missing. A variable reported as undeclared could be declared in a file that was not " +
+            "reached.");
+    }
+    let resolutionFloor = DECLARATIVE_RESOLUTION;
+    for (const finding of kept) {
+        if (finding.resolution < resolutionFloor)
+            resolutionFloor = finding.resolution;
+    }
+    const stamp = { ...provider.baseStamp(), resolutionFloor };
+    return {
+        data: {
+            findings: kept,
+            findingsTotal: findings.length,
+            surfaces: scan.surfaces.map((s) => ({
+                file: s.file,
+                role: s.role,
+                example: s.example,
+                declared: s.declarations.length,
+            })),
+            reads: {
+                filesWithReads,
+                filesWithoutReads,
+                required: requiredReads.size,
+                undetermined: undeterminedNames.size,
+                dynamic,
+            },
+            coverage,
+            declaredNeverRead,
+            readsAvailable,
+        },
+        stamp,
+        truncated: files.truncated || scan.truncated || kept.length < findings.length,
+        notes,
+    };
+}
+function describeSurface(coverage) {
+    return (`This repository declares ${coverage.declared} of the ${coverage.required} variables its code ` +
+        `cannot start without (${Math.round(coverage.ratio * 100)}%), so its configuration surface is ` +
+        "complete " +
+        "enough for the absence of one to be a fact about that variable.");
+}
+//# sourceMappingURL=env.js.map

package/dist/validation/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/validation/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsHG;AAKH,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAoH7C,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,iFAAiF;AACjF,MAAM,sBAAsB,GAAoB,CAAC,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAwC,EACxC,IAAY,EACZ,UAA2B;IAE3B,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAC7F,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACxB,CAAC,CAAC,CAAC,CAAC;IAEN,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAErE,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,SAAS,IAAI,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,IAAI,OAAO,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7E,SAAS,IAAI,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,QAAQ;YACR,IAAI;YACJ,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClE,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAA2B,EAC3B,IAAiB,EACjB,UAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,4EAA4E;IAE5E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEjD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAgB;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,IAAI,EAAE,WAAW,CAAC,SAAS;oBACzB,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,8BAA8B;oBAC/C,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,cAAc;aAClC,CAAC;YACF,IAAI,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS;gBAAE,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEtB,sEAAsE;YACtE,gEAAgE;YAChE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAAE,SAAS;YAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAEvD,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACnD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAClE,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC;QAC7B,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;QACjC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YAC5D,iBAAiB,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,cAAc,IAAI,CAAC,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,EAAmB,CAAC;IACjD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QACD,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI;YAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,cAAc,GAAG,cAAc,GAAG,CAAC,CAAC;IAE1C,4EAA4E;IAC5E,EAAE;IACF,+EAA+E;IAC/E,4EAA4E;IAC5E,+CAA+C;IAE/C,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAC1C,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,QAAQ,IAAI,CAAC,CAAC;;gBACnC,kBAAkB,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC;QAC5C,QAAQ,GAAG;YACT,QAAQ,EAAE,aAAa,CAAC,IAAI;YAC5B,KAAK,EAAE,cAAc,CAAC,IAAI;YAC1B,QAAQ;YACR,KAAK;YACL,KAAK;YACL,yEAAyE;YACzE,uEAAuE;YACvE,wBAAwB;YACxB,MAAM,EAAE,KAAK,IAAI,KAAK,IAAI,QAAQ,IAAI,kBAAkB;YACxD,kBAAkB;YAClB,WAAW,EAAE,kBAAkB;SAChC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAE5E,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAElC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,aAAa,EAAE,CAAC;YACzC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACtE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,IAAI;gBACJ,KAAK,EAAE,QAAQ;gBACf,MAAM,EACJ,GAAG,IAAI,eAAe,KAAK,wDAAwD;oBACnF,wDAAwD;oBACxD,eAAe,CAAC,QAAQ,CAAC;gBAC3B,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,IAAI,EAAE,qEAAqE;qBAC5E;iBACF;gBACD,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,UAAU,CAAoB;aACjF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC;QACxD,MAAM,KAAK,GAAG,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1C,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YACnB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,QAAQ,KAAK,SAAS;oBAAE,SAAS;gBACrC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sBAAsB;oBAC5B,IAAI;oBACJ,KAAK,EAAE,MAAM;oBACb,MAAM,EACJ,GAAG,IAAI,cAAc,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,+BAA+B;wBAClF,sFAAsF;wBACtF,gEAAgE;oBAClE,QAAQ,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;oBAC7D,UAAU,EAAE,sBAAsB;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,GAAG,YAAY,CAAC,MAAM,oEAAoE;gBACxF,wEAAwE;gBACxE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,2DAA2D;gBACrF,6CAA6C,CAChD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,cAAc,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,iBAAiB,IAAI,CAAC,CAAC;IACzF,CAAC;IAED,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU;QAC3B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAC/B,CAAC;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAE5C,4EAA4E;IAE5E,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,yFAAyF;YACvF,gFAAgF;YAChF,qFAAqF,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,2FAA2F;YACzF,kGAAkG;YAClG,uFAAuF;YACvF,+CAA+C,CAClD,CAAC;IACJ,CAAC;SAAM,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,GAAG,iBAAiB,wEAAwE;YAC1F,2FAA2F;YAC3F,yFAAyF;YACzF,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC7E,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,kBAAkB,4DAA4D;YACxF,wFAAwF;YACxF,4BAA4B,QAAQ,CAAC,QAAQ,WAAW,QAAQ,CAAC,QAAQ,iBAAiB;YAC1F,4BAA4B;YAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,GAAG,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,aAAa;YACpF,0FAA0F;YAC1F,kFAAkF,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,IAAI,cAAc,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,oBAAoB,cAAc,CAAC,IAAI,kDAAkD;YACvF,wFAAwF;YACxF,2FAA2F;YAC3F,wFAAwF;YACxF,gFAAgF,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CACR,GAAG,OAAO,gFAAgF;YACxF,0FAA0F;YAC1F,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,GAAG,SAAS,+EAA+E;YACzF,mFAAmF;YACnF,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CACR,GAAG,iBAAiB,yEAAyE;YAC3F,oFAAoF,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,kEAAkE;YACzF,sCAAsC,CACzC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,mCAAmC,MAAM,CAAC,IAAI,4CAA4C;YACxF,oFAAoF,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,2DAA2D;YACzF,GAAG,WAAW,oEAAoE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,0FAA0F;YACxF,+EAA+E,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CACR,2FAA2F;YACzF,sFAAsF;YACtF,UAAU,CACb,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,GAAoB,sBAAsB,CAAC;IAC9D,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,UAAU,GAAG,eAAe;YAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAAe,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,CAAC;IACvE,OAAO;QACL,IAAI,EAAE;YACJ,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;aAChC,CAAC,CAAC;YACH,KAAK,EAAE;gBACL,cAAc;gBACd,iBAAiB;gBACjB,QAAQ,EAAE,aAAa,CAAC,IAAI;gBAC5B,YAAY,EAAE,iBAAiB,CAAC,IAAI;gBACpC,OAAO;aACR;YACD,QAAQ;YACR,iBAAiB;YACjB,cAAc;SACf;QACD,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;QAC7E,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAuB;IAC9C,OAAO,CACL,4BAA4B,QAAQ,CAAC,QAAQ,WAAW,QAAQ,CAAC,QAAQ,sBAAsB;QAC/F,yBAAyB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,GAAG,CAAC,sCAAsC;QAC/F,WAAW;QACX,iEAAiE,CAClE,CAAC;AACJ,CAAC"}

package/dist/validation/index.d.ts

@@ -0,0 +1,16 @@
+export { fileScopedNodes, FILE_SCOPED_NODE_TYPES } from "./nodes.ts";
+export { scanMigrations, readMigration, classifyStatement, statements, } from "./migrations.ts";
+export type { DestructiveKind, MigrationFile, MigrationOp, MigrationScan, MigrationScanOptions, MigrationSection, } from "./migrations.ts";
+export { buildConfigGraph } from "./config-graph.ts";
+export type { ConfigDeclaration, ConfigGraph, ConfigGraphOptions, ConfigReadSite, ConfigVariable, } from "./config-graph.ts";
+export { checkRollbackReadiness, readMigrationOps } from "./rollback.ts";
+export type { RollbackFinding, RollbackOptions, RollbackReport } from "./rollback.ts";
+export { checkRouteDrift } from "./route-drift.ts";
+export type { DriftOptions, DriftReport, DriftRoute, Introspection } from "./route-drift.ts";
+export { runJoinSubstitutionControl } from "./join-substitution.ts";
+export type { FlaggedSubstitution, JoinSubstitutionOptions, JoinSubstitutionReport, SubstitutionCaller, SubstitutionRoute, SubstitutionUncontrollable, UnreproducibleJoin, } from "./join-substitution.ts";
+export { scanConfigSurfaces, skipDirectory, readDotenv, readImageBuild, readStructured, readWranglerVars, readWranglerVarsEntries, } from "./sources.ts";
+export type { ConfigSurface, EnvDeclaration, ScanOptions, SurfaceFormat, SurfaceRole, SurfaceScan, WranglerVarsEntry, } from "./sources.ts";
+export { checkEnvironment, readEnvReads, DEFAULT_COVERAGE_FLOOR } from "./env.ts";
+export type { CoverageGuard, EnvCheckOptions, EnvClaim, EnvEvidence, EnvFinding, EnvFindingKind, EnvRead, EnvReport, } from "./env.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EACL,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,eAAe,EACf,aAAa,EACb,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,YAAY,EACV,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,cAAc,GACf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACzE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,aAAa,EACb,cAAc,EACd,WAAW,EACX,aAAa,EACb,WAAW,EACX,WAAW,EACX,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAClF,YAAY,EACV,aAAa,EACb,eAAe,EACf,QAAQ,EACR,WAAW,EACX,UAAU,EACV,cAAc,EACd,OAAO,EACP,SAAS,GACV,MAAM,UAAU,CAAC"}

package/dist/validation/index.js

@@ -0,0 +1,9 @@
+export { fileScopedNodes, FILE_SCOPED_NODE_TYPES } from "./nodes.js";
+export { scanMigrations, readMigration, classifyStatement, statements, } from "./migrations.js";
+export { buildConfigGraph } from "./config-graph.js";
+export { checkRollbackReadiness, readMigrationOps } from "./rollback.js";
+export { checkRouteDrift } from "./route-drift.js";
+export { runJoinSubstitutionControl } from "./join-substitution.js";
+export { scanConfigSurfaces, skipDirectory, readDotenv, readImageBuild, readStructured, readWranglerVars, readWranglerVarsEntries, } from "./sources.js";
+export { checkEnvironment, readEnvReads, DEFAULT_COVERAGE_FLOOR } from "./env.js";
+//# sourceMappingURL=index.js.map

package/dist/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EACL,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,UAAU,GACX,MAAM,iBAAiB,CAAC;AAUzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AASrD,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGzE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAWpE,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AAWtB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC"}