@descryy/core 0.1.0

package/dist/validation/sources.d.ts

@@ -0,0 +1,153 @@
+/**
+ * The declaration side of §15's env/config check — read from the repository, not
+ * from the graph.
+ *
+ * ## Why this is not an adapter, and why it is legal here
+ *
+ * §15.3's own wording is *"cross-check against declared variables **or the
+ * deploy target's actual state**"*. The deploy target's state is not in the graph
+ * and never will be. What holds it is `.env`, a container manifest, a CI
+ * workflow, an image build file — **formats, not languages.** Reading
+ * `KEY=value` and an indented `env:` block names no language, so it does not
+ * cross the Canonical IR boundary; it is legal above it for the same reason
+ * reading a commit log is (`sources/git`).
+ *
+ * That is what lets the check produce findings with no adapter change at all.
+ * See DEC-120.
+ *
+ * ## Precision over recall, three times, because a misparse here is a wrong finding
+ *
+ * A name invented by a sloppy scan becomes a confident sentence about somebody's
+ * configuration. So:
+ *
+ * 1. **Two different name rules, on purpose.** In a dotenv file `KEY=` is
+ *    unambiguous, so any identifier shape is taken. Inside a structured document
+ *    an `env:` block is indistinguishable from any other mapping once the scan
+ *    loses its place, so only `UPPER_SNAKE` is accepted. The cost is a lowercase
+ *    variable in a manifest, which is rare; the alternative is turning a stray
+ *    key into a declaration.
+ * 2. **A block ends at the first line indented no deeper than its header.** No
+ *    document model, no continuation handling, no anchors. A construct this scan
+ *    cannot follow ends the block early, which *loses* names — a disclosed gap
+ *    rather than a wrong one.
+ * 3. **A commented-out declaration counts, and is marked.** `# STRIPE_KEY=` in a
+ *    sample file documents that the variable exists, which is exactly the
+ *    question being asked. Treating it as absent would report every well
+ *    documented optional setting as undeclared.
+ *
+ * ## The example/supply distinction
+ *
+ * `.env.example` **documents**; `.env.development` and a container manifest
+ * **supply**. Both are declarations for the purpose of "does this repository know
+ * this variable exists", and they are not interchangeable for anything else, so
+ * the distinction is carried on the surface rather than flattened.
+ */
+/** What a surface is evidence *of*. */
+export type SurfaceRole = 
+/** The repository's own statement that a variable exists. */
+"declaration"
+/** Something that actually sets a value on a path to production. */
+ | "deployTarget";
+export type SurfaceFormat = "dotenv" | "structured" | "imageBuild" | "wranglerVars";
+export interface EnvDeclaration {
+    readonly name: string;
+    /** 1-indexed, so a finding can cite it. */
+    readonly line: number;
+    /** Documented but not active — a commented-out assignment. */
+    readonly commented: boolean;
+}
+export interface ConfigSurface {
+    /** Repo-relative, with forward slashes. */
+    readonly file: string;
+    readonly format: SurfaceFormat;
+    readonly role: SurfaceRole;
+    /** True for `.env.example` / `.sample` / `.template` — documents, does not supply. */
+    readonly example: boolean;
+    readonly declarations: readonly EnvDeclaration[];
+}
+export interface SurfaceScan {
+    readonly surfaces: readonly ConfigSurface[];
+    /** Paths that looked like a surface and could not be read. Never silent. */
+    readonly unreadable: readonly string[];
+    /** True when the walk hit its file budget before finishing. */
+    readonly truncated: boolean;
+    /**
+     * The noise directories this walk actually used, echoed back.
+     *
+     * Empty means no adapter declared any, and the walk therefore descended into
+     * whatever vendored trees the repository holds. Reporting it is what keeps an
+     * undeclared scan from reading like a complete one (rule 7) — the caller can
+     * see that the surface count is inflated rather than inferring it from a number
+     * that looks fine.
+     */
+    readonly noiseDirectories: readonly string[];
+}
+export interface ScanOptions {
+    /** Directory budget depth. Beyond it the walk stops and says so. */
+    readonly maxDepth?: number;
+    /** Total files a walk may consider. */
+    readonly maxFiles?: number;
+    /**
+     * Directories this repository's ecosystems install dependencies or build output
+     * into — `node_modules`, `vendor`, `target`. **Supplied by the caller from the
+     * active adapters' `CapabilityMatrix.noiseDirectories`, never known here**
+     * (DEC-110). Undeclared, they are walked, and `SurfaceScan` says so.
+     */
+    readonly noiseDirectories?: readonly string[];
+}
+/**
+ * Shared with the migration scan, so the two walks cannot disagree about what
+ * counts as vendored. A second copy of this rule is a second place to forget the
+ * next ecosystem.
+ */
+export declare function skipDirectory(name: string, noiseDirectories?: readonly string[]): boolean;
+/**
+ * Read every configuration surface a repository exposes.
+ *
+ * Structured documents are only opened when their path says they are a manifest
+ * or a workflow. Opening every YAML file in a repository would pull in test
+ * data, schema definitions and dependency lockfiles, and an `env:` key inside a
+ * schema definition is a description of a variable rather than a declaration of
+ * one.
+ */
+export declare function scanConfigSurfaces(root: string, options?: ScanOptions): SurfaceScan;
+/** `KEY=value`, and `# KEY=value`, which documents the same variable. */
+export declare function readDotenv(text: string): readonly EnvDeclaration[];
+/** `ENV K=V`, the legacy `ENV K V`, and `ARG K`. */
+export declare function readImageBuild(text: string): readonly EnvDeclaration[];
+/**
+ * `env:` / `environment:` blocks in an indented document, in both forms.
+ *
+ * Mapping — `KEY: value` — and sequence — `- KEY=value` or a bare `- KEY`. The
+ * bare sequence form declares a pass-through from the host, which is still the
+ * document stating that the variable exists.
+ */
+export declare function readStructured(text: string): readonly EnvDeclaration[];
+/** One `KEY = "value"` line inside a `wrangler.toml` `[vars]` or `[env.<name>.vars]` table. */
+export interface WranglerVarsEntry {
+    /** `"default"` for the top-level `[vars]` table — the same tag `resolve.ts`'s `environmentOf` gives a bare `.env` file. */
+    readonly environment: string;
+    readonly name: string;
+    /** `null` for a commented-out line — documented, not active, same rule `readDotenv` applies. */
+    readonly value: string | null;
+    readonly line: number;
+    readonly commented: boolean;
+}
+/**
+ * Walk a `wrangler.toml`'s `[vars]` and `[env.<name>.vars]` tables only.
+ *
+ * Every other table — `[[kv_namespaces]]`, `[assets]`, `[env.<name>]` itself
+ * (the deploy target's own settings, not its vars) — is out of scope by
+ * construction rather than by exclusion list: entering *any* table this
+ * function does not recognise as a vars table resets tracking to "outside",
+ * so a line that merely looks like `KEY = value` inside `[[kv_namespaces]]`
+ * (e.g. `binding = "HOSTNAMES"`) is never mistaken for a declared variable.
+ * `[[...]]` array-of-tables headers are matched and reset scope the same way,
+ * rather than silently falling through as an unrecognised line — an
+ * `[[env.staging.kv_namespaces]]` line right after `[env.staging.vars]` must
+ * end that table, not extend it.
+ */
+export declare function readWranglerVarsEntries(text: string): readonly WranglerVarsEntry[];
+/** The declaration-only projection `scanConfigSurfaces` uses. See `readWranglerVarsEntries` for the value-carrying form `resolve.ts` reads. */
+export declare function readWranglerVars(text: string): readonly EnvDeclaration[];
+//# sourceMappingURL=sources.d.ts.map

package/dist/validation/sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../src/validation/sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAKH,uCAAuC;AACvC,MAAM,MAAM,WAAW;AACrB,6DAA6D;AAC3D,aAAa;AACf,oEAAoE;GAClE,cAAc,CAAC;AAEnB,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,WAAW;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AA4DD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,gBAAgB,GAAE,SAAS,MAAM,EAAO,GACvC,OAAO,CAMT;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,WAAW,CAmDvF;AAqED,yEAAyE;AACzE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAgBlE;AAED,oDAAoD;AACpD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAwBtE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CA4BtE;AAED,+FAA+F;AAC/F,MAAM,WAAW,iBAAiB;IAChC,2HAA2H;IAC3H,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAWD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,iBAAiB,EAAE,CAoClF;AAED,+IAA+I;AAC/I,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAGxE"}

package/dist/validation/sources.js

@@ -0,0 +1,409 @@
+/**
+ * The declaration side of §15's env/config check — read from the repository, not
+ * from the graph.
+ *
+ * ## Why this is not an adapter, and why it is legal here
+ *
+ * §15.3's own wording is *"cross-check against declared variables **or the
+ * deploy target's actual state**"*. The deploy target's state is not in the graph
+ * and never will be. What holds it is `.env`, a container manifest, a CI
+ * workflow, an image build file — **formats, not languages.** Reading
+ * `KEY=value` and an indented `env:` block names no language, so it does not
+ * cross the Canonical IR boundary; it is legal above it for the same reason
+ * reading a commit log is (`sources/git`).
+ *
+ * That is what lets the check produce findings with no adapter change at all.
+ * See DEC-120.
+ *
+ * ## Precision over recall, three times, because a misparse here is a wrong finding
+ *
+ * A name invented by a sloppy scan becomes a confident sentence about somebody's
+ * configuration. So:
+ *
+ * 1. **Two different name rules, on purpose.** In a dotenv file `KEY=` is
+ *    unambiguous, so any identifier shape is taken. Inside a structured document
+ *    an `env:` block is indistinguishable from any other mapping once the scan
+ *    loses its place, so only `UPPER_SNAKE` is accepted. The cost is a lowercase
+ *    variable in a manifest, which is rare; the alternative is turning a stray
+ *    key into a declaration.
+ * 2. **A block ends at the first line indented no deeper than its header.** No
+ *    document model, no continuation handling, no anchors. A construct this scan
+ *    cannot follow ends the block early, which *loses* names — a disclosed gap
+ *    rather than a wrong one.
+ * 3. **A commented-out declaration counts, and is marked.** `# STRIPE_KEY=` in a
+ *    sample file documents that the variable exists, which is exactly the
+ *    question being asked. Treating it as absent would report every well
+ *    documented optional setting as undeclared.
+ *
+ * ## The example/supply distinction
+ *
+ * `.env.example` **documents**; `.env.development` and a container manifest
+ * **supply**. Both are declarations for the purpose of "does this repository know
+ * this variable exists", and they are not interchangeable for anything else, so
+ * the distinction is carried on the surface rather than flattened.
+ */
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { join, relative, sep } from "node:path";
+const DEFAULT_MAX_DEPTH = 5;
+const DEFAULT_MAX_FILES = 20_000;
+/**
+ * Directories a configuration scan must not descend into.
+ *
+ * Vendored code carries its own `.env.example` files, and a dependency's sample
+ * configuration is not this repository's declaration of anything. Including one
+ * would put another project's variable names into the denominator of the
+ * coverage guard, which is the number that decides whether anything is reported
+ * at all.
+ *
+ * **The rule is structural, not a list of ecosystems' cache directories.** The
+ * first version of this was such a list and the boundary lint rejected it, which
+ * was the correct call: engine code that knows one ecosystem's build cache by
+ * name is engine code that will be missing the next one's. Every dotted directory
+ * is skipped apart from the ones that hold pipeline definitions.
+ *
+ * **`node_modules`, `vendor`, `target`, `dist`, `build`, `out` and `coverage`
+ * used to sit here too**, and DEC-110 recorded them as the unfinished half of its
+ * own ruling — *"three ecosystems' names in the skip list"* — while naming the end
+ * state: `noiseDirectories` on `CapabilityMatrix`, declared per adapter. They are
+ * gone from the engine now and arrive through `ScanOptions.noiseDirectories`
+ * instead. **The knowledge moved to the layer that has it; a second list was not
+ * created** — DEC-110's *"what must not happen is a third list."*
+ *
+ * The cost is real and disclosed rather than hidden: with nothing declared, a
+ * dependency tree in an undotted directory is walked and a sample inside it is
+ * read. `SurfaceScan.noiseDirectories` reports the set actually used, so an empty
+ * declaration cannot pass for a complete one (rule 7), and
+ * `bench/env-precision.mjs` still reports the surface count per repository.
+ */
+/**
+ * Dotted directories that are walked anyway, because **configuration lives in
+ * them**.
+ *
+ * The list started as pipelines only and that was too narrow — found by the
+ * decisions denominator, not by reasoning. `dispatch` keeps a real
+ * `.devcontainer/.env.example` documenting five variables; skipping it made the
+ * declaration surface incomplete, which moved the coverage guard *and* made
+ * three variables look undocumented when the repository documents all three. A
+ * missing declaration source does not fail loudly here: it silently turns
+ * correct suppressions into findings.
+ *
+ * These are directories a human authors configuration in, as opposed to ones a
+ * tool writes state into — which is the distinction the dotted-skip rule is
+ * reaching for and cannot express structurally. DEC-110 records the end state:
+ * the adapter declares its own noise directories and this list goes away.
+ */
+const CONFIG_DIRECTORIES = new Set([
+    ".github",
+    ".circleci",
+    ".buildkite",
+    ".devcontainer",
+    ".config",
+]);
+/**
+ * Shared with the migration scan, so the two walks cannot disagree about what
+ * counts as vendored. A second copy of this rule is a second place to forget the
+ * next ecosystem.
+ */
+export function skipDirectory(name, noiseDirectories = []) {
+    // The structural rule is checked first, and deliberately: a declaration cannot
+    // re-admit a dotted state directory, and cannot exclude `.github`. The adapter
+    // declares what its ecosystem installs, not what the engine's own rule means.
+    if (name.startsWith("."))
+        return !CONFIG_DIRECTORIES.has(name);
+    return noiseDirectories.includes(name);
+}
+/** `.env`, `.env.local`, `.env.test` — but not `.env.d.ts` or `.envrc`. */
+const DOTENV = /^\.env(\.[A-Za-z0-9_.-]+)?$/;
+const EXAMPLE_SUFFIX = /\.(example|sample|template|dist|defaults?)$/i;
+const CONTAINER_MANIFEST = /^(docker-)?compose([.-][A-Za-z0-9_.-]+)?\.ya?ml$/i;
+const IMAGE_BUILD = /^(Containerfile|Dockerfile)([.-][A-Za-z0-9_.-]+)?$/i;
+const STRUCTURED = /\.ya?ml$/i;
+/** Cloudflare Workers' own config file — the exact filename, not a general TOML reader. */
+const WRANGLER_TOML = /^wrangler\.toml$/;
+/** POSIX-conventional variable name. Deliberately strict — see the header. */
+const UPPER_SNAKE = /^[A-Z][A-Z0-9_]*$/;
+/** Any identifier shape, for the unambiguous `KEY=` form. */
+const ANY_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * Read every configuration surface a repository exposes.
+ *
+ * Structured documents are only opened when their path says they are a manifest
+ * or a workflow. Opening every YAML file in a repository would pull in test
+ * data, schema definitions and dependency lockfiles, and an `env:` key inside a
+ * schema definition is a description of a variable rather than a declaration of
+ * one.
+ */
+export function scanConfigSurfaces(root, options = {}) {
+    const maxDepth = options.maxDepth ?? DEFAULT_MAX_DEPTH;
+    const maxFiles = options.maxFiles ?? DEFAULT_MAX_FILES;
+    const noiseDirectories = options.noiseDirectories ?? [];
+    const surfaces = [];
+    const unreadable = [];
+    let seen = 0;
+    let truncated = false;
+    const walk = (dir, depth) => {
+        if (truncated || depth > maxDepth)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(dir).sort();
+        }
+        catch {
+            unreadable.push(rel(root, dir));
+            return;
+        }
+        for (const entry of entries) {
+            if (truncated)
+                return;
+            const full = join(dir, entry);
+            let directory = false;
+            try {
+                directory = statSync(full).isDirectory();
+            }
+            catch {
+                continue;
+            }
+            if (directory) {
+                if (skipDirectory(entry, noiseDirectories))
+                    continue;
+                walk(full, depth + 1);
+                continue;
+            }
+            if (++seen > maxFiles) {
+                truncated = true;
+                return;
+            }
+            const surface = classify(root, dir, entry);
+            if (surface === null)
+                continue;
+            const parsed = read(root, full, surface);
+            if (parsed === null)
+                unreadable.push(rel(root, full));
+            else if (parsed.declarations.length > 0)
+                surfaces.push(parsed);
+        }
+    };
+    walk(root, 0);
+    surfaces.sort((a, b) => a.file.localeCompare(b.file));
+    return { surfaces, unreadable, truncated, noiseDirectories };
+}
+function classify(root, dir, entry) {
+    if (DOTENV.test(entry)) {
+        const example = EXAMPLE_SUFFIX.test(entry) || entry === ".env.example";
+        // An example file states what exists; a concrete one states what is set.
+        // Neither is on a path to production by itself, so both are declarations —
+        // the deploy target is the manifest that mounts them.
+        return { format: "dotenv", role: "declaration", example };
+    }
+    if (WRANGLER_TOML.test(entry)) {
+        // Same status `.env.development` holds: the repository's own statement of
+        // what it runs with, not a deploy pipeline's manifest of it. `[vars]` and
+        // `.env.development` are read the same way for the same reason.
+        return { format: "wranglerVars", role: "declaration", example: false };
+    }
+    if (IMAGE_BUILD.test(entry)) {
+        return { format: "imageBuild", role: "deployTarget", example: false };
+    }
+    if (CONTAINER_MANIFEST.test(entry)) {
+        return { format: "structured", role: "deployTarget", example: false };
+    }
+    if (STRUCTURED.test(entry) && isPipelineDirectory(rel(root, dir))) {
+        return { format: "structured", role: "deployTarget", example: false };
+    }
+    return null;
+}
+/**
+ * Only structured documents whose *path* declares them a pipeline are opened.
+ *
+ * Named rather than pattern-matched on content: a document that happens to
+ * contain an `env:` key is not necessarily setting one, and guessing from
+ * content is how a schema fragment becomes a declaration.
+ */
+function isPipelineDirectory(dir) {
+    const parts = dir.split("/");
+    return (parts.includes("workflows") ||
+        parts.includes(".circleci") ||
+        parts.includes(".buildkite") ||
+        parts.includes("pipelines"));
+}
+function read(root, full, kind) {
+    let text;
+    try {
+        text = readFileSync(full, "utf8");
+    }
+    catch {
+        return null;
+    }
+    const declarations = kind.format === "dotenv"
+        ? readDotenv(text)
+        : kind.format === "imageBuild"
+            ? readImageBuild(text)
+            : kind.format === "wranglerVars"
+                ? readWranglerVars(text)
+                : readStructured(text);
+    return { file: rel(root, full), ...kind, declarations };
+}
+/** `KEY=value`, and `# KEY=value`, which documents the same variable. */
+export function readDotenv(text) {
+    const out = [];
+    const lines = text.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i += 1) {
+        const raw = lines[i] ?? "";
+        const commented = /^\s*#/.test(raw);
+        // `export KEY=value` is the shell-sourceable form of the same file and is
+        // common in deployment scripts.
+        const match = /^\s*(?:#\s*)?(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(raw);
+        if (match === null)
+            continue;
+        const name = match[1];
+        if (name === undefined || !ANY_NAME.test(name))
+            continue;
+        out.push({ name, line: i + 1, commented });
+    }
+    return dedupe(out);
+}
+/** `ENV K=V`, the legacy `ENV K V`, and `ARG K`. */
+export function readImageBuild(text) {
+    const out = [];
+    const lines = text.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i += 1) {
+        const raw = lines[i] ?? "";
+        const directive = /^\s*(ENV|ARG)\s+(.*)$/i.exec(raw);
+        if (directive === null)
+            continue;
+        const rest = (directive[2] ?? "").trim();
+        if (rest === "")
+            continue;
+        if (rest.includes("=")) {
+            // `ENV A=1 B=2` — take every assignment on the line.
+            for (const m of rest.matchAll(/(?:^|\s)([A-Z][A-Z0-9_]*)=/g)) {
+                const name = m[1];
+                if (name !== undefined)
+                    out.push({ name, line: i + 1, commented: false });
+            }
+            continue;
+        }
+        // `ENV KEY value` / `ARG KEY`.
+        const name = /^([A-Z][A-Z0-9_]*)(\s|$)/.exec(rest)?.[1];
+        if (name !== undefined)
+            out.push({ name, line: i + 1, commented: false });
+    }
+    return dedupe(out);
+}
+/**
+ * `env:` / `environment:` blocks in an indented document, in both forms.
+ *
+ * Mapping — `KEY: value` — and sequence — `- KEY=value` or a bare `- KEY`. The
+ * bare sequence form declares a pass-through from the host, which is still the
+ * document stating that the variable exists.
+ */
+export function readStructured(text) {
+    const out = [];
+    const lines = text.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i += 1) {
+        const header = /^(\s*)(env|environment):\s*(#.*)?$/.exec(lines[i] ?? "");
+        if (header === null)
+            continue;
+        const headerIndent = (header[1] ?? "").length;
+        for (let j = i + 1; j < lines.length; j += 1) {
+            const line = lines[j] ?? "";
+            if (line.trim() === "" || /^\s*#/.test(line))
+                continue;
+            const indent = line.length - line.trimStart().length;
+            // The block ends at the first line that is not deeper than its header.
+            if (indent <= headerIndent)
+                break;
+            const mapping = /^\s*([A-Z][A-Z0-9_]*)\s*:/.exec(line);
+            if (mapping?.[1] !== undefined && UPPER_SNAKE.test(mapping[1])) {
+                out.push({ name: mapping[1], line: j + 1, commented: false });
+                continue;
+            }
+            const sequence = /^\s*-\s*"?([A-Z][A-Z0-9_]*)"?\s*(=|$)/.exec(line);
+            if (sequence?.[1] !== undefined && UPPER_SNAKE.test(sequence[1])) {
+                out.push({ name: sequence[1], line: j + 1, commented: false });
+            }
+        }
+    }
+    return dedupe(out);
+}
+const WRANGLER_ENV_VARS_TABLE = /^env\.([A-Za-z0-9_-]+)\.vars$/;
+/** `null` for every table that is not itself a vars table — `[env.staging]` names an environment but is not scoped to it. */
+function wranglerTableEnvironment(table) {
+    const trimmed = table.trim();
+    if (trimmed === "vars")
+        return "default";
+    return WRANGLER_ENV_VARS_TABLE.exec(trimmed)?.[1] ?? null;
+}
+/**
+ * Walk a `wrangler.toml`'s `[vars]` and `[env.<name>.vars]` tables only.
+ *
+ * Every other table — `[[kv_namespaces]]`, `[assets]`, `[env.<name>]` itself
+ * (the deploy target's own settings, not its vars) — is out of scope by
+ * construction rather than by exclusion list: entering *any* table this
+ * function does not recognise as a vars table resets tracking to "outside",
+ * so a line that merely looks like `KEY = value` inside `[[kv_namespaces]]`
+ * (e.g. `binding = "HOSTNAMES"`) is never mistaken for a declared variable.
+ * `[[...]]` array-of-tables headers are matched and reset scope the same way,
+ * rather than silently falling through as an unrecognised line — an
+ * `[[env.staging.kv_namespaces]]` line right after `[env.staging.vars]` must
+ * end that table, not extend it.
+ */
+export function readWranglerVarsEntries(text) {
+    const out = [];
+    const lines = text.split(/\r?\n/);
+    let currentEnvironment = null;
+    for (let i = 0; i < lines.length; i += 1) {
+        const trimmed = (lines[i] ?? "").trim();
+        if (trimmed === "")
+            continue;
+        if (/^\[\[[^[\]]+\]\]/.test(trimmed)) {
+            currentEnvironment = null;
+            continue;
+        }
+        const table = /^\[([^[\]]+)\]/.exec(trimmed);
+        if (table !== null) {
+            currentEnvironment = wranglerTableEnvironment(table[1] ?? "");
+            continue;
+        }
+        if (currentEnvironment === null)
+            continue;
+        const commented = trimmed.startsWith("#");
+        const body = commented ? trimmed.slice(1).trim() : trimmed;
+        const assignment = /^([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(body);
+        const name = assignment?.[1];
+        if (name === undefined || !ANY_NAME.test(name))
+            continue;
+        if (commented) {
+            out.push({ environment: currentEnvironment, name, value: null, line: i + 1, commented: true });
+            continue;
+        }
+        const rawValue = (assignment?.[2] ?? "").trim();
+        const quoted = /^"([^"]*)"/.exec(rawValue) ?? /^'([^']*)'/.exec(rawValue);
+        const value = quoted?.[1] ?? rawValue.replace(/\s*#.*$/, "").trim();
+        out.push({ environment: currentEnvironment, name, value, line: i + 1, commented: false });
+    }
+    return out;
+}
+/** The declaration-only projection `scanConfigSurfaces` uses. See `readWranglerVarsEntries` for the value-carrying form `resolve.ts` reads. */
+export function readWranglerVars(text) {
+    const declarations = readWranglerVarsEntries(text).map((e) => ({ name: e.name, line: e.line, commented: e.commented }));
+    return dedupe(declarations);
+}
+/** First occurrence wins, so a finding cites the line a reader would look at. */
+function dedupe(declarations) {
+    const seen = new Map();
+    for (const declaration of declarations) {
+        const existing = seen.get(declaration.name);
+        // An active assignment outranks a commented one even if it comes later:
+        // "set here" is a stronger fact than "documented here".
+        if (existing === undefined || (existing.commented && !declaration.commented)) {
+            seen.set(declaration.name, declaration);
+        }
+    }
+    return [...seen.values()].sort((a, b) => a.line - b.line || a.name.localeCompare(b.name));
+}
+function rel(root, full) {
+    const r = relative(root, full);
+    return r === "" ? "." : r.split(sep).join("/");
+}
+//# sourceMappingURL=sources.js.map

package/dist/validation/sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../src/validation/sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AA6DhD,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,SAAS;IACT,WAAW;IACX,YAAY;IACZ,eAAe;IACf,SAAS;CACV,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,mBAAsC,EAAE;IAExC,+EAA+E;IAC/E,+EAA+E;IAC/E,8EAA8E;IAC9E,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,2EAA2E;AAC3E,MAAM,MAAM,GAAG,6BAA6B,CAAC;AAC7C,MAAM,cAAc,GAAG,8CAA8C,CAAC;AACtE,MAAM,kBAAkB,GAAG,mDAAmD,CAAC;AAC/E,MAAM,WAAW,GAAG,qDAAqD,CAAC;AAC1E,MAAM,UAAU,GAAG,WAAW,CAAC;AAC/B,2FAA2F;AAC3F,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC,8EAA8E;AAC9E,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,6DAA6D;AAC7D,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,UAAuB,EAAE;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAExD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QAChD,IAAI,SAAS,IAAI,KAAK,GAAG,QAAQ;YAAE,OAAO;QAC1C,IAAI,OAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,aAAa,CAAC,KAAK,EAAE,gBAAgB,CAAC;oBAAE,SAAS;gBACrD,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YAED,IAAI,EAAE,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACtB,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,IAAI;gBAAE,SAAS;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACzC,IAAI,MAAM,KAAK,IAAI;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;iBACjD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACd,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;AAC/D,CAAC;AAQD,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW,EAAE,KAAa;IACxD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,cAAc,CAAC;QACvE,yEAAyE;QACzE,2EAA2E;QAC3E,sDAAsD;QACtD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,0EAA0E;QAC1E,gEAAgE;QAChE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,IAAgB;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,YAAY,GAChB,IAAI,CAAC,MAAM,KAAK,QAAQ;QACtB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAClB,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,YAAY;YAC5B,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC;YACtB,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,cAAc;gBAC9B,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBACxB,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC;AAC1D,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,0EAA0E;QAC1E,gCAAgC;QAChC,MAAM,KAAK,GAAG,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,IAAI;YAAE,SAAS;QACjC,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAE1B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,qDAAqD;YACrD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,IAAI,KAAK,SAAS;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,SAAS;QACX,CAAC;QACD,+BAA+B;QAC/B,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAE9C,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;YACrD,uEAAuE;YACvE,IAAI,MAAM,IAAI,YAAY;gBAAE,MAAM;YAElC,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9D,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAaD,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAEhE,6HAA6H;AAC7H,SAAS,wBAAwB,CAAC,KAAa;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAE7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,EAAE;YAAE,SAAS;QAE7B,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,kBAAkB,GAAG,IAAI,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,kBAAkB,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,IAAI,kBAAkB,KAAK,IAAI;YAAE,SAAS;QAE1C,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3D,MAAM,UAAU,GAAG,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAEzD,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+IAA+I;AAC/I,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACxH,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC;AAC9B,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,YAAuC;IACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC/C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5C,wEAAwE;QACxE,wDAAwD;QACxD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY;IACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC"}

package/dist/worker/index.d.ts

@@ -0,0 +1,5 @@
+export { createTraversalPool, workerEntryUrl } from "./pool.ts";
+export type { TraversalPool, TraversalPoolOptions, PoolTraversalResult } from "./pool.ts";
+export { weightFromTable } from "./protocol.ts";
+export type { EdgeWeightTable, TraversalRequest, ReachedWire, WorkerMessage, MainMessage, } from "./protocol.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/worker/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAE1F,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,WAAW,GACZ,MAAM,eAAe,CAAC"}

package/dist/worker/index.js

@@ -0,0 +1,3 @@
+export { createTraversalPool, workerEntryUrl } from "./pool.js";
+export { weightFromTable } from "./protocol.js";
+//# sourceMappingURL=index.js.map

package/dist/worker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGhE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}