@descryy/core 0.1.0

package/dist/validation/rollback.js

@@ -0,0 +1,302 @@
+/**
+ * §15.3's rollback-readiness check — *"pattern-match migrations against a known
+ * list of destructive operations"*.
+ *
+ * Class A at R0, and **deliberately the easy half of consumer impact**: a
+ * destructive operation is a pattern in a migration, not an inference about who
+ * reads the column. The scope fence that makes that classification safe is stated
+ * in `migrations.ts` and every sentence below stays behind it.
+ *
+ * ## The trap, measured before this was written
+ *
+ * The env check's trap was a variable read and never declared. This one is
+ * larger, and DEC-122 counted it:
+ *
+ * | repository | migrations | with a reverse section |
+ * | --- | --- | --- |
+ * | `outline` | 300 | **300** |
+ * | `dispatch` | 162 | **162** |
+ * | `directus` | 112 | 110 |
+ *
+ * **Effectively every migration in these projects declares a reverse, and a
+ * destructive operation in the reverse is supposed to be there** — it undoes the
+ * forward migration. A check that matched destructive operations without knowing
+ * which half it was reading would report `outline`'s 202 destructive files, and
+ * most of those matches are a drop that undoes a create three lines above.
+ *
+ * So `section` is to this check what `required` was to the env check: the field
+ * without which the whole thing is wrong on nearly every file it sees. And
+ * `unknown` is not a synonym for `forward`. Two of the reference repositories
+ * declare no direction at all — they hand the framework a reversal callback — and
+ * their operations are **counted and disclosed, never reported**. That refusal
+ * alone withholds 192 files' worth of matches, and it is the honest treatment:
+ * an operation whose half cannot be determined is not evidence of a forward
+ * destructive change.
+ *
+ * ## Two further refusals, both from the only real DDL in the corpus
+ *
+ * - **`DROP … IF EXISTS` paired with a `CREATE` of the same object** is an
+ *   idempotent setup script, not a data-losing change. Both destructive lines in
+ *   the one genuine `.sql` file found across fifteen repositories are exactly
+ *   this shape.
+ * - **Dropping an object created in the same migration** is not a finding. The
+ *   object did not exist before the file ran.
+ *
+ * ## Where the input comes from
+ *
+ * Two sources, and DEC-122 measured that the one the architecture implies is the
+ * smaller: **0 `.sql` files inside a migration directory** across the reference
+ * corpus, against **3,301** migrations written as program code. The format half
+ * runs today and needs no adapter; the code half arrives as `attrs.migrationOps`
+ * and is an adapter's to produce. When neither is present the check says so and
+ * does not report a clean result.
+ */
+import { fileScopedNodes } from "./nodes.js";
+const DEFAULT_MAX_FINDINGS = 25;
+/** DDL read straight from the repository needs no resolution — see `env.ts`. */
+const DECLARATIVE_RESOLUTION = 3;
+const SECTIONS = new Set(["forward", "reverse", "unknown"]);
+const KINDS = new Set([
+    "DROP_TABLE",
+    "DROP_COLUMN",
+    "DROP_SCHEMA",
+    "TRUNCATE",
+    "RENAME",
+]);
+/**
+ * Pull `attrs.migrationOps` off a file node, refusing anything malformed.
+ *
+ * A row with no `section`, or an unrecognised one, is **dropped rather than
+ * treated as forward**. Defaulting it would manufacture exactly the claim the
+ * reverse-section fence exists to withhold, on a corpus where the reverse
+ * section is present in effectively every file.
+ */
+export function readMigrationOps(attrs) {
+    const raw = attrs["migrationOps"];
+    if (!Array.isArray(raw))
+        return { ops: [], malformed: 0 };
+    const ops = [];
+    let malformed = 0;
+    for (const entry of raw) {
+        if (typeof entry !== "object" || entry === null) {
+            malformed += 1;
+            continue;
+        }
+        const row = entry;
+        const kind = row["kind"];
+        const target = row["target"];
+        const section = row["section"];
+        const line = row["line"];
+        if (typeof kind !== "string" ||
+            !KINDS.has(kind) ||
+            typeof target !== "string" ||
+            target === "" ||
+            typeof section !== "string" ||
+            !SECTIONS.has(section)) {
+            malformed += 1;
+            continue;
+        }
+        ops.push({
+            kind: kind,
+            target,
+            section: section,
+            line: typeof line === "number" && Number.isFinite(line) ? line : 0,
+            guarded: row["guarded"] === true,
+        });
+    }
+    return { ops, malformed };
+}
+export function checkRollbackReadiness(provider, scan, options = {}) {
+    const maxFindings = options.maxFindings ?? DEFAULT_MAX_FINDINGS;
+    const scoped = options.files === undefined ? null : new Set(options.files);
+    const notes = [];
+    const candidates = [];
+    // --- the format half: DDL read from the repository -----------------------
+    let fromSource = 0;
+    for (const migration of scan.files) {
+        if (scoped !== null && !scoped.has(migration.file))
+            continue;
+        fromSource += 1;
+        for (const op of migration.ops) {
+            candidates.push({
+                op,
+                file: migration.file,
+                creates: migration.creates,
+                resolution: DECLARATIVE_RESOLUTION,
+            });
+        }
+    }
+    // --- the code half: whatever an adapter attached -------------------------
+    const nodes = fileScopedNodes(provider, options.limit);
+    let fromGraph = 0;
+    let malformed = 0;
+    for (const node of nodes.nodes) {
+        const path = node.file;
+        if (path === null)
+            continue;
+        if (scoped !== null && !scoped.has(path))
+            continue;
+        const extracted = readMigrationOps(node.attrs);
+        malformed += extracted.malformed;
+        if (extracted.ops.length === 0)
+            continue;
+        fromGraph += 1;
+        for (const op of extracted.ops) {
+            candidates.push({ op, file: path, creates: [], resolution: node.resolution });
+        }
+    }
+    // --- the refusals --------------------------------------------------------
+    const findings = [];
+    const withheld = { reverse: 0, undirected: 0, idempotent: 0, selfCreated: 0 };
+    for (const candidate of candidates) {
+        const { op } = candidate;
+        if (op.section === "reverse") {
+            withheld.reverse += 1;
+            continue;
+        }
+        if (op.section === "unknown") {
+            withheld.undirected += 1;
+            continue;
+        }
+        // Order separates two different refusals. A create *before* the drop means a
+        // temporary object that did not exist when the file started. A create
+        // *after* a guarded drop is an idempotent setup script. Without the line
+        // these collapse into one bucket and the disclosure names the wrong cause.
+        const object = op.target.split(".")[0] ?? op.target;
+        const matches = candidate.creates.filter((c) => c.name === op.target || c.name === object);
+        if (matches.some((c) => c.line < op.line)) {
+            withheld.selfCreated += 1;
+            continue;
+        }
+        if (op.guarded && matches.some((c) => c.line > op.line)) {
+            withheld.idempotent += 1;
+            continue;
+        }
+        findings.push({
+            kind: op.kind,
+            target: op.target,
+            file: candidate.file,
+            line: op.line,
+            detail: describe(op, candidate.file),
+            resolution: candidate.resolution,
+        });
+    }
+    // Better evidence first, then by file so two runs agree.
+    findings.sort((a, b) => b.resolution - a.resolution ||
+        a.file.localeCompare(b.file) ||
+        a.line - b.line ||
+        a.target.localeCompare(b.target));
+    const kept = findings.slice(0, maxFindings);
+    // --- disclosures ---------------------------------------------------------
+    const ran = fromSource > 0 || fromGraph > 0;
+    const blockers = [];
+    if (!ran) {
+        blockers.push("No migration was read. This check reads DDL files under a migration directory straight " +
+            "from the repository, and migration operations from attrs.migrationOps on a file-scoped node — " +
+            "an array of { kind, target, line, section }. Neither was present on this run. Migrations " +
+            "written as program code need a language adapter to emit that key — not every adapter does, " +
+            "and this run's did not. This is not a result of zero destructive operations.");
+        for (const blocker of blockers)
+            notes.push(blocker);
+    }
+    if (withheld.reverse > 0) {
+        notes.push(`${withheld.reverse} destructive operation(s) sit in a migration's reverse section and are ` +
+            "not reported. A drop there undoes the forward migration and is supposed to be present; " +
+            "reporting it would flag correct code in almost every migration in a typical project.");
+    }
+    if (withheld.undirected > 0) {
+        notes.push(`${withheld.undirected} destructive operation(s) are in migrations that declare no forward ` +
+            "or reverse section, so which half they belong to could not be determined. They are not " +
+            'reported: an operation whose direction is unknown is not evidence of a forward ' +
+            "destructive change. This is the largest gap in this check and it closes when the " +
+            "producer records the section.");
+    }
+    if (withheld.selfCreated > 0) {
+        notes.push(`${withheld.selfCreated} operation(s) drop an object the same migration creates, and are ` +
+            "not reported: the object did not exist before the file ran.");
+    }
+    if (withheld.idempotent > 0) {
+        notes.push(`${withheld.idempotent} operation(s) are guarded by IF EXISTS in a file that also creates ` +
+            "objects — an idempotent setup script rather than an intentional change. Not reported.");
+    }
+    if (malformed > 0) {
+        notes.push(`${malformed} migration operation record(s) were dropped as malformed — an unrecognised ` +
+            'kind, a missing target, or a missing or unknown "section". A row without a section is ' +
+            "dropped rather than assumed to be forward, because that assumption is what the reverse " +
+            "fence exists to prevent.");
+    }
+    if (scan.unparsed > 0) {
+        notes.push(`${scan.unparsed} file(s) under a migration directory held no statement this check ` +
+            "recognises. They were read and understood to contain nothing destructive, which is not " +
+            "the same as being verified safe.");
+    }
+    if (scan.unreadable.length > 0) {
+        notes.push(`${scan.unreadable.length} migration path(s) could not be read.`);
+    }
+    if (kept.length < findings.length) {
+        notes.push(`${findings.length - kept.length} further finding(s) were withheld: a report is capped at ` +
+            `${maxFindings} so a short list stays worth reading. They were found, not missed.`);
+    }
+    if (nodes.truncated) {
+        notes.push("More files exist in the graph than were enumerated, so the code half covers a prefix of " +
+            "the repository rather than all of it.");
+    }
+    if (scan.truncated) {
+        notes.push("The migration scan hit its file budget before finishing, so some migrations were not read.");
+    }
+    if (ran && scoped === null && findings.length > 0) {
+        // §15.1 runs this against the *scoped subgraph*. Unscoped, it reads every
+        // migration the project has ever written, so a long list here is the history
+        // of the repository rather than a property of a change. Measured: 33 and 67
+        // forward operations on two repositories, all correct and almost all years
+        // old.
+        notes.push(`${findings.length} operation(s) were found across the whole repository, which is every ` +
+            "migration the project has ever written rather than anything about a particular change. " +
+            'This check is meant to run against a scoped change — pass "files" — where a handful of ' +
+            "migrations are in play. Read this list as history, not as a to-do.");
+    }
+    if (ran) {
+        notes.push("This check reports that a destructive operation is present. It does not assess whether the " +
+            "migration is safe to roll back — that needs the consumer-impact analysis this check is " +
+            "deliberately separate from.");
+    }
+    let resolutionFloor = DECLARATIVE_RESOLUTION;
+    for (const finding of kept) {
+        if (finding.resolution < resolutionFloor)
+            resolutionFloor = finding.resolution;
+    }
+    const stamp = { ...provider.baseStamp(), resolutionFloor };
+    return {
+        data: {
+            findings: kept,
+            findingsTotal: findings.length,
+            examined: { fromSource, fromGraph, operations: candidates.length },
+            withheld,
+            ran,
+            blockers,
+        },
+        stamp,
+        truncated: nodes.truncated || scan.truncated || kept.length < findings.length,
+        notes,
+    };
+}
+/** The sentence a developer reads. Behind the fence, always. */
+function describe(op, file) {
+    const where = op.line > 0 ? `${file}:${op.line}` : file;
+    switch (op.kind) {
+        case "DROP_TABLE":
+            return `${where} drops the table ${op.target} in the forward migration.`;
+        case "DROP_COLUMN":
+            return `${where} drops the column ${op.target} in the forward migration.`;
+        case "DROP_SCHEMA":
+            return `${where} drops the schema ${op.target} in the forward migration.`;
+        case "TRUNCATE":
+            return `${where} truncates ${op.target} in the forward migration.`;
+        default:
+            // A rename is a different claim from a drop and is worded as one: the rows
+            // survive, and what breaks is every reader of the old name.
+            return (`${where} renames ${op.target} in the forward migration. The data is not destroyed; ` +
+                "anything still reading the old name stops finding it.");
+    }
+}
+//# sourceMappingURL=rollback.js.map

package/dist/validation/rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.js","sourceRoot":"","sources":["../../src/validation/rollback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAKH,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAiE7C,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,gFAAgF;AAChF,MAAM,sBAAsB,GAAoB,CAAC,CAAC;AAElD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAkB;IACrC,YAAY;IACZ,aAAa;IACb,aAAa;IACb,UAAU;IACV,QAAQ;CACT,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAwC;IAExC,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAE1D,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,SAAS,IAAI,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAuB,CAAC;YACnC,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,EAAE;YACb,OAAO,OAAO,KAAK,QAAQ;YAC3B,CAAC,QAAQ,CAAC,GAAG,CAAC,OAA2B,CAAC,EAC1C,CAAC;YACD,SAAS,IAAI,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,IAAuB;YAC7B,MAAM;YACN,OAAO,EAAE,OAA2B;YACpC,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI;SACjC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC5B,CAAC;AASD,MAAM,UAAU,sBAAsB,CACpC,QAA2B,EAC3B,IAAmB,EACnB,UAA2B,EAAE;IAE7B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,4EAA4E;IAE5E,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7D,UAAU,IAAI,CAAC,CAAC;QAChB,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC;gBACd,EAAE;gBACF,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,UAAU,EAAE,sBAAsB;aACnC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;QACjC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACzC,SAAS,IAAI,CAAC,CAAC;QACf,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAE9E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC;QAEzB,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC7B,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC7B,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,6EAA6E;QAC7E,sEAAsE;QACtE,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;QACpD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC3F,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC;YACpC,UAAU,EAAE,SAAS,CAAC,UAAU;SACjC,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU;QAC3B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI;QACf,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CACnC,CAAC;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAE5C,4EAA4E;IAE5E,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,QAAQ,CAAC,IAAI,CACX,yFAAyF;YACvF,gGAAgG;YAChG,2FAA2F;YAC3F,6FAA6F;YAC7F,8EAA8E,CACjF,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,OAAO,yEAAyE;YAC1F,yFAAyF;YACzF,sFAAsF,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,UAAU,sEAAsE;YAC1F,yFAAyF;YACzF,iFAAiF;YACjF,mFAAmF;YACnF,+BAA+B,CAClC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,WAAW,mEAAmE;YACxF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,UAAU,qEAAqE;YACzF,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,GAAG,SAAS,6EAA6E;YACvF,wFAAwF;YACxF,yFAAyF;YACzF,0BAA0B,CAC7B,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,QAAQ,oEAAoE;YAClF,yFAAyF;YACzF,kCAAkC,CACrC,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,uCAAuC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,2DAA2D;YACzF,GAAG,WAAW,oEAAoE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,0FAA0F;YACxF,uCAAuC,CAC1C,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CACR,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,0EAA0E;QAC1E,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,OAAO;QACP,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,uEAAuE;YACvF,yFAAyF;YACzF,yFAAyF;YACzF,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,CAAC,IAAI,CACR,6FAA6F;YAC3F,yFAAyF;YACzF,6BAA6B,CAChC,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,GAAoB,sBAAsB,CAAC;IAC9D,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,UAAU,GAAG,eAAe;YAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAAe,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,CAAC;IACvE,OAAO;QACL,IAAI,EAAE;YACJ,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE;YAClE,QAAQ;YACR,GAAG;YACH,QAAQ;SACT;QACD,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;QAC7E,KAAK;KACN,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,SAAS,QAAQ,CAAC,EAAe,EAAE,IAAY;IAC7C,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,YAAY;YACf,OAAO,GAAG,KAAK,oBAAoB,EAAE,CAAC,MAAM,4BAA4B,CAAC;QAC3E,KAAK,aAAa;YAChB,OAAO,GAAG,KAAK,qBAAqB,EAAE,CAAC,MAAM,4BAA4B,CAAC;QAC5E,KAAK,aAAa;YAChB,OAAO,GAAG,KAAK,qBAAqB,EAAE,CAAC,MAAM,4BAA4B,CAAC;QAC5E,KAAK,UAAU;YACb,OAAO,GAAG,KAAK,cAAc,EAAE,CAAC,MAAM,4BAA4B,CAAC;QACrE;YACE,2EAA2E;YAC3E,4DAA4D;YAC5D,OAAO,CACL,GAAG,KAAK,YAAY,EAAE,CAAC,MAAM,wDAAwD;gBACrF,uDAAuD,CACxD,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/validation/route-drift.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Route drift — static extraction against framework introspection (DEC-115).
+ *
+ * The comparison logic only; identity from `@descryy/ir`, never re-implemented
+ * here. The `bench/route-drift.mjs` instrument does the harder half of this
+ * row — reading `php artisan route:list`, the `--introspection` file
+ * fallback, and the refusal to run an installer on a cloned repository (§5
+ * rule 10, DEC-115 clause 3). This module is the query it calls: given two
+ * already-extracted route lists, decide what they say about each other.
+ *
+ * ## The rule this file is built around, before anything else
+ *
+ * **A diff is the one measurement where an empty input produces the most
+ * reassuring possible output.** If introspection returns nothing —
+ * `artisan` not runnable, the application not bootable, the command failing
+ * quietly — the drift is zero, and zero drift is exactly what a healthy
+ * repository looks like. So both population *sizes* are part of the result,
+ * not scaffolding, and this module cannot report agreement it was not
+ * actually given. An empty or implausible side is a **refusal** to report
+ * drift, never a clean bill — the same shape this lane measured directly on
+ * `env-precision-adapter.mjs`: two runs both printed `decision accuracy
+ * 100.0%`, one on 5 decisions and one on 51, indistinguishable except for the
+ * confidence interval underneath. A diff has no interval to fall back on, so
+ * the refusal has to be explicit.
+ *
+ * ## The polarity is DEC-115's and is not re-opened here
+ *
+ * Static extraction is the **floor**; introspection is a **promotion** over
+ * the same node ids. The two disagreement directions are two findings with
+ * different audiences and different truth conditions, and collapsing them is
+ * the error:
+ *
+ * | direction | what it is | what it is NOT |
+ * | --- | --- | --- |
+ * | static says yes, listing says no | "these two sources disagree" | **never** "dead route" — ambiguous between the customer's app and our own false positive, and nothing here separates them |
+ * | listing says yes, static says no | a statement about **us**: the extractor missed one | not a finding about the customer at all |
+ *
+ * The second row is the more valuable one. Where a listing exists it is
+ * **ground truth for recall** — a complete denominator this project has
+ * never had without hand-building it.
+ */
+/** One route, from either side, before identity is applied. */
+export interface DriftRoute {
+    readonly method: string;
+    readonly path: string;
+    /** Repo-relative, when the side has one (the static extractor always does). */
+    readonly file?: string;
+}
+/**
+ * What the introspected side actually returned.
+ *
+ * Three refusal states plus `read`, mirroring `RollbackReport.ran` /
+ * `blockers` one level down: a caller needs to know *why* nothing was
+ * compared, not just that nothing was.
+ */
+export type Introspection = {
+    readonly state: "read";
+    readonly source: string;
+    readonly routes: readonly DriftRoute[];
+} | {
+    readonly state: "not-applicable";
+    readonly why: string;
+} | {
+    readonly state: "refused";
+    readonly why: string;
+} | {
+    readonly state: "unreadable";
+    readonly why: string;
+};
+export interface DriftReport {
+    readonly reported: boolean;
+    readonly staticCount: number;
+    readonly introspectedCount: number;
+    /** Present only when `reported` — see the refusal reasons on `Introspection` otherwise. */
+    readonly refusalReason?: string;
+    readonly staticOnly?: readonly {
+        readonly key: string;
+        readonly route: DriftRoute;
+    }[];
+    readonly listedOnly?: readonly {
+        readonly key: string;
+        readonly route: DriftRoute;
+    }[];
+    readonly agreed?: number;
+    /** `agreed / introspected`, when introspection is the ground truth for recall. */
+    readonly recallAgainstListing?: number;
+}
+export interface DriftOptions {
+    /**
+     * Below this, a listing is not believed.
+     *
+     * A Laravel application with `artisan` and one route is far more likely to
+     * be a listing that failed than an application with one route. Crude on
+     * purpose — it exists to catch "the command produced almost nothing," not
+     * to model route counts.
+     */
+    readonly implausibleBelow?: number;
+}
+/**
+ * The comparison, and the refusal that guards it.
+ *
+ * `staticOnly`/`listedOnly`/`agreed` are only ever populated when both sides
+ * were actually read and the introspected side is not implausibly small.
+ * Every other path returns `reported: false` carrying both counts, because
+ * the counts are the evidence the refusal was necessary.
+ */
+export declare function checkRouteDrift(staticSide: readonly DriftRoute[], introspected: Introspection, options?: DriftOptions): DriftReport;
+//# sourceMappingURL=route-drift.d.ts.map

package/dist/validation/route-drift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-drift.d.ts","sourceRoot":"","sources":["../../src/validation/route-drift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAIH,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAA;CAAE,GAC3F;IAAE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,2FAA2F;IAC3F,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC;IACtF,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC;IACtF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AASD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,SAAS,UAAU,EAAE,EACjC,YAAY,EAAE,aAAa,EAC3B,OAAO,GAAE,YAAiB,GACzB,WAAW,CAkDb"}

package/dist/validation/route-drift.js

@@ -0,0 +1,103 @@
+/**
+ * Route drift — static extraction against framework introspection (DEC-115).
+ *
+ * The comparison logic only; identity from `@descryy/ir`, never re-implemented
+ * here. The `bench/route-drift.mjs` instrument does the harder half of this
+ * row — reading `php artisan route:list`, the `--introspection` file
+ * fallback, and the refusal to run an installer on a cloned repository (§5
+ * rule 10, DEC-115 clause 3). This module is the query it calls: given two
+ * already-extracted route lists, decide what they say about each other.
+ *
+ * ## The rule this file is built around, before anything else
+ *
+ * **A diff is the one measurement where an empty input produces the most
+ * reassuring possible output.** If introspection returns nothing —
+ * `artisan` not runnable, the application not bootable, the command failing
+ * quietly — the drift is zero, and zero drift is exactly what a healthy
+ * repository looks like. So both population *sizes* are part of the result,
+ * not scaffolding, and this module cannot report agreement it was not
+ * actually given. An empty or implausible side is a **refusal** to report
+ * drift, never a clean bill — the same shape this lane measured directly on
+ * `env-precision-adapter.mjs`: two runs both printed `decision accuracy
+ * 100.0%`, one on 5 decisions and one on 51, indistinguishable except for the
+ * confidence interval underneath. A diff has no interval to fall back on, so
+ * the refusal has to be explicit.
+ *
+ * ## The polarity is DEC-115's and is not re-opened here
+ *
+ * Static extraction is the **floor**; introspection is a **promotion** over
+ * the same node ids. The two disagreement directions are two findings with
+ * different audiences and different truth conditions, and collapsing them is
+ * the error:
+ *
+ * | direction | what it is | what it is NOT |
+ * | --- | --- | --- |
+ * | static says yes, listing says no | "these two sources disagree" | **never** "dead route" — ambiguous between the customer's app and our own false positive, and nothing here separates them |
+ * | listing says yes, static says no | a statement about **us**: the extractor missed one | not a finding about the customer at all |
+ *
+ * The second row is the more valuable one. Where a listing exists it is
+ * **ground truth for recall** — a complete denominator this project has
+ * never had without hand-building it.
+ */
+import { endpointQsp, normaliseEndpointPath } from "@descryy/ir";
+const DEFAULT_IMPLAUSIBLE_BELOW = 3;
+/** Both sides reduce to this, through the IR's own identity. Never re-implemented. */
+function key(method, path) {
+    return endpointQsp(String(method || "").toUpperCase(), normaliseEndpointPath(String(path || "")));
+}
+/**
+ * The comparison, and the refusal that guards it.
+ *
+ * `staticOnly`/`listedOnly`/`agreed` are only ever populated when both sides
+ * were actually read and the introspected side is not implausibly small.
+ * Every other path returns `reported: false` carrying both counts, because
+ * the counts are the evidence the refusal was necessary.
+ */
+export function checkRouteDrift(staticSide, introspected, options = {}) {
+    const implausibleBelow = options.implausibleBelow ?? DEFAULT_IMPLAUSIBLE_BELOW;
+    if (introspected.state !== "read") {
+        return {
+            reported: false,
+            staticCount: staticSide.length,
+            introspectedCount: 0,
+            refusalReason: `introspection ${introspected.state}: ${introspected.why}`,
+        };
+    }
+    if (introspected.routes.length < implausibleBelow) {
+        return {
+            reported: false,
+            staticCount: staticSide.length,
+            introspectedCount: introspected.routes.length,
+            refusalReason: `the listing has fewer than ${implausibleBelow} routes — more likely a failed capture than ` +
+                `a genuinely small application.`,
+        };
+    }
+    const staticKeys = new Map();
+    for (const route of staticSide)
+        staticKeys.set(key(route.method, route.path), route);
+    const listedKeys = new Map();
+    for (const route of introspected.routes)
+        listedKeys.set(key(route.method, route.path), route);
+    const staticOnly = [...staticKeys]
+        .filter(([k]) => !listedKeys.has(k))
+        .map(([k, route]) => ({ key: k, route }));
+    const listedOnly = [...listedKeys]
+        .filter(([k]) => !staticKeys.has(k))
+        .map(([k, route]) => ({ key: k, route }));
+    const agreed = [...staticKeys].filter(([k]) => listedKeys.has(k)).length;
+    return {
+        reported: true,
+        staticCount: staticSide.length,
+        introspectedCount: introspected.routes.length,
+        staticOnly,
+        listedOnly,
+        agreed,
+        // `exactOptionalPropertyTypes` distinguishes an absent property from one
+        // present-and-undefined, so the spread includes the key only when there
+        // is a real ratio — `listedKeys.size` is never 0 on this path, since
+        // `implausibleBelow` already refused anything under it, but the type
+        // stays honest about the precondition rather than asserting past it.
+        ...(listedKeys.size === 0 ? {} : { recallAgainstListing: agreed / listedKeys.size }),
+    };
+}
+//# sourceMappingURL=route-drift.js.map

package/dist/validation/route-drift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-drift.js","sourceRoot":"","sources":["../../src/validation/route-drift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAgDjE,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC,sFAAsF;AACtF,SAAS,GAAG,CAAC,MAAc,EAAE,IAAY;IACvC,OAAO,WAAW,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,UAAiC,EACjC,YAA2B,EAC3B,UAAwB,EAAE;IAE1B,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;IAE/E,IAAI,YAAY,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,UAAU,CAAC,MAAM;YAC9B,iBAAiB,EAAE,CAAC;YACpB,aAAa,EAAE,iBAAiB,YAAY,CAAC,KAAK,KAAK,YAAY,CAAC,GAAG,EAAE;SAC1E,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,UAAU,CAAC,MAAM;YAC9B,iBAAiB,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM;YAC7C,aAAa,EACX,8BAA8B,gBAAgB,8CAA8C;gBAC5F,gCAAgC;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,UAAU;QAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM;QAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAE9F,MAAM,UAAU,GAAG,CAAC,GAAG,UAAU,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,CAAC,GAAG,UAAU,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,UAAU,CAAC,MAAM;QAC9B,iBAAiB,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM;QAC7C,UAAU;QACV,UAAU;QACV,MAAM;QACN,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;KACrF,CAAC;AACJ,CAAC"}