@descryy/core 0.3.0 → 0.5.0

package/dist/tiers/ladder.js

@@ -1,93 +1,21 @@
-/**
- * The four capability tiers of §11A.11, expressed as requirements a machine can
- * check — and the ones it cannot, named as such.
- *
- * ## Why this file exists at all
- *
- * Nine adapters state a tier in a doc comment. **DEC-075 §6 says a tier is
- * generated from `capabilities()` and the gate results, never written in
- * prose**, and until now nothing implemented that, so the only tier claims in
- * the repository were the ones a human typed. That is the single piece of
- * standing dishonesty in the codebase: a claim about what works for a language,
- * made by the person who wanted it to be true, in a comment nothing checks.
- *
- * ## The ladder, from §11A.11
- *
- * | tier | what works | what it costs |
- * | --- | --- | --- |
- * | **S — Full** | contract *shape* matching, data propagation, oracle-derived tests | R3 + router extractor + ORM extractor |
- * | **A — Contract** | endpoint matching, path-level orphans, migration DAG | R2/R3 + router extractor |
- * | **B — Graph** | blast radius, impact scoring, test discovery, in-language root cause | R2 adapter |
- * | **C — Signal** | env/config, rollback readiness, hidden dependency, file-level blast radius | R0, one grammar and one query set |
- *
- * A tier is **cumulative**: S implies A implies B implies C. So a language is
- * awarded the highest tier whose requirements are *all* met, and the
- * requirements of every tier below it are re-checked rather than assumed —
- * because an adapter can reach R3 and still not emit a `FUNCTION`, and a ladder
- * that assumed monotonicity would hand it an A on the strength of its routes.
- *
- * ## What a requirement may be
- *
- * Three kinds, and the split is the honest part:
- *
- * - **`capability`** — read straight off `capabilities()`. Machine-checked, no
- *   judgement. `capabilities()` is itself machine-checked against what the
- *   adapter actually emitted (DEC-070), so this is evidence, not a promise.
- * - **`conformance`** — the corpus passes at the resolution the tier claims.
- *   Machine-checked by running the harness.
- * - **`attested`** — a fact no machine in this repository can establish, so it
- *   is *declared* with its evidence and marked as declared. There is exactly
- *   one, and it is DEC-075's second condition: a ≥200-edge precision draw on
- *   two repositories **the adapter's author did not choose**. A machine can
- *   check the 200 and the two; it cannot check "did not choose", which is a
- *   fact about a person's intent. Recording it as attested is what stops the
- *   generator laundering a human judgement into a computed result.
- */
+/** §11A.11's tiers (S/A/B/C, cumulative) as machine-checkable requirements —
+ *  DEC-075 §6: a tier is generated from `capabilities()` + gate results,
+ *  never written in prose. Requirements re-checked per tier (not assumed
+ *  monotonic). Three kinds: `capability`/`conformance` (machine-checked),
+ *  `attested` (DEC-075's one human-judgment fact, declared with evidence). */
 /** Highest first. The order the generator walks, and the only place it lives. */
 export const TIERS = ["S", "A", "B", "C"];
-// ---------------------------------------------------------------------------
-// There is deliberately no list of framework names here.
-//
-// The first version of this file carried three: ROUTER_EXTRACTORS with
-// `express`, `fastapi`, `flask`, `django`; ORM_EXTRACTORS with `sqlalchemy`,
-// `prisma`, `gorm`; SCHEMA_EXTRACTORS with `pydantic`, `zod`. The boundary lint
-// rejected all twelve, and it was right on the merits rather than pedantic:
-// **that is engine code above the Canonical IR knowing what a Python web
-// framework is called**, which is rule 1, and a list that must grow every time
-// anyone writes an extractor is the shape rule 1 exists to prevent.
-//
-// The fix is not an allowlist entry. It is that the requirement was
-// **redundant**. "A router extractor is bound" was asking, indirectly, whether
-// the adapter can produce routes — and the requirement immediately above it
-// already asks that directly, in vocabulary terms: does it emit `API_ROUTE`,
-// `API_ENDPOINT` and `SERVES_API`. An adapter emitting those has a router
-// extractor by definition, whatever it is called, and one that does not cannot
-// be rescued by a name in `frameworkExtractors`. The same held for the ORM
-// requirement against `MODEL`/`READS`/`WRITES`, and for the schema requirement
-// against `DTO`/`USES_TYPE`.
-//
-// So the name check bought nothing and cost the boundary. Deleting it changed
-// no adapter's tier, which is the evidence that it was never load-bearing.
-//
-// The general form, worth keeping: **when engine code needs to know what a
-// framework is, ask what it produced.** The vocabulary is the shared language
-// precisely so the engine never has to learn a framework's name.
-// ---------------------------------------------------------------------------
-// ---------------------------------------------------------------------------
-// The ladder itself.
-// ---------------------------------------------------------------------------
+// No framework-name list here — an earlier version had one (express,
+// fastapi, sqlalchemy, prisma...) and the boundary lint rejected it (rule 1:
+// engine code above the IR can't name a framework). Ask what it produced instead.
 const C_REQUIREMENTS = [
     {
         id: "C.parses",
         kind: "capability",
         statement: "the adapter produces a file-level graph",
-        // `MODULE`, not `FILE`. The vocabulary has both, and this requirement first
-        // asked for both — at which point every adapter in the repository failed
-        // Tier C. Checked against a real run rather than assumed: **no adapter
-        // emits or declares `FILE`**, and `MODULE` is what a file resolves to in
-        // all nine. A requirement no producer can satisfy does not make a generator
-        // strict, it makes it useless, and the ladder would have been "corrected"
-        // by whoever needed a tier first.
+        // `MODULE`, not `FILE` — an earlier version required both and every
+        // adapter failed Tier C (no adapter emits `FILE`; `MODULE` is what a
+        // file resolves to in all nine). Unsatisfiable requirements get "corrected" away.
         nodeTypes: ["MODULE"],
     },
     {
@@ -179,12 +107,8 @@ export const LADDER = [
     { tier: "A", name: "Contract", requires: A_REQUIREMENTS },
     { tier: "S", name: "Full", requires: S_REQUIREMENTS },
 ];
-/**
- * Every requirement a tier needs, including the tiers beneath it.
- *
- * Cumulative and re-checked rather than assumed — see the header. `C` is the
- * floor, so `requirementsFor("C")` is C's own list.
- */
+/** Every requirement a tier needs, including tiers beneath it — cumulative,
+ *  re-checked not assumed. `C` is the floor. */
 export function requirementsFor(tier) {
     const order = ["C", "B", "A", "S"];
     const upTo = order.indexOf(tier);

package/dist/tiers/ladder.js.map

@@ -1 +1 @@
-{"version":3,"file":"ladder.js","sourceRoot":"","sources":["../../src/tiers/ladder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAMH,iFAAiF;AACjF,MAAM,CAAC,MAAM,KAAK,GAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAoB3D,8EAA8E;AAC9E,yDAAyD;AACzD,EAAE;AACF,uEAAuE;AACvE,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,yEAAyE;AACzE,+EAA+E;AAC/E,oEAAoE;AACpE,EAAE;AACF,oEAAoE;AACpE,+EAA+E;AAC/E,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,6BAA6B;AAC7B,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,cAAc,GAA2B;IAC7C;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,yCAAyC;QACpD,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,yEAAyE;QACzE,4EAA4E;QAC5E,0EAA0E;QAC1E,kCAAkC;QAClC,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,qCAAqC;QAChD,aAAa,EAAE,CAAC;KACjB;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,wEAAwE;QACnF,SAAS,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;QAChC,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;KAChC;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,uEAAuE;QAClF,SAAS,EAAE,CAAC,WAAW,CAAC;QACxB,SAAS,EAAE,CAAC,OAAO,CAAC;KACrB;IACD;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,+DAA+D;QAC1E,aAAa,EAAE,CAAC;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,qCAAqC;QAChD,aAAa,EAAE,CAAC;KACjB;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,uEAAuE;QAClF,SAAS,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC;QACxC,SAAS,EAAE,CAAC,YAAY,CAAC;KAC1B;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,oFAAoF;QAC/F,SAAS,EAAE,CAAC,UAAU,CAAC;KACxB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,UAAU;QAChB,SAAS,EACP,2GAA2G;KAC9G;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,wFAAwF;QACnG,aAAa,EAAE,CAAC;KACjB;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,oFAAoF;QAC/F,SAAS,EAAE,CAAC,KAAK,CAAC;QAClB,SAAS,EAAE,CAAC,WAAW,CAAC;KACzB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,gFAAgF;QAC3F,SAAS,EAAE,CAAC,OAAO,CAAC;QACpB,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC/B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,qCAAqC;QAChD,aAAa,EAAE,CAAC;KACjB;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAA8B;IAC/C,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE;IACvD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE;IACtD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE;IACzD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE;CACtD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAU;IACxC,MAAM,KAAK,GAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,KAAK;SACT,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC;SAClB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"ladder.js","sourceRoot":"","sources":["../../src/tiers/ladder.ts"],"names":[],"mappings":"AAAA;;;;8EAI8E;AAM9E,iFAAiF;AACjF,MAAM,CAAC,MAAM,KAAK,GAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAoB3D,qEAAqE;AACrE,6EAA6E;AAC7E,kFAAkF;AAElF,MAAM,cAAc,GAA2B;IAC7C;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,yCAAyC;QACpD,oEAAoE;QACpE,qEAAqE;QACrE,kFAAkF;QAClF,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,qCAAqC;QAChD,aAAa,EAAE,CAAC;KACjB;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,wEAAwE;QACnF,SAAS,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;QAChC,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;KAChC;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,uEAAuE;QAClF,SAAS,EAAE,CAAC,WAAW,CAAC;QACxB,SAAS,EAAE,CAAC,OAAO,CAAC;KACrB;IACD;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,+DAA+D;QAC1E,aAAa,EAAE,CAAC;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,qCAAqC;QAChD,aAAa,EAAE,CAAC;KACjB;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,uEAAuE;QAClF,SAAS,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC;QACxC,SAAS,EAAE,CAAC,YAAY,CAAC;KAC1B;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,oFAAoF;QAC/F,SAAS,EAAE,CAAC,UAAU,CAAC;KACxB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,UAAU;QAChB,SAAS,EACP,2GAA2G;KAC9G;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,wFAAwF;QACnG,aAAa,EAAE,CAAC;KACjB;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,oFAAoF;QAC/F,SAAS,EAAE,CAAC,KAAK,CAAC;QAClB,SAAS,EAAE,CAAC,WAAW,CAAC;KACzB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,gFAAgF;QAC3F,SAAS,EAAE,CAAC,OAAO,CAAC;QACpB,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC/B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,qCAAqC;QAChD,aAAa,EAAE,CAAC;KACjB;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAA8B;IAC/C,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE;IACvD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE;IACtD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE;IACzD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE;CACtD,CAAC;AAEF;gDACgD;AAChD,MAAM,UAAU,eAAe,CAAC,IAAU;IACxC,MAAM,KAAK,GAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,KAAK;SACT,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC;SAClB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/validation/attributes.d.ts

@@ -0,0 +1,47 @@
+/** Attribute-existence check (UAT round 3's 2nd of 4 missed defects): reads `attrs.unresolvedFields`
+ *  off a READS edge, emitted only when the type's field list is provably complete (same guard
+ *  USES_TYPE rests on). Absent = silence, never a guess. Location is the reader's file/line, not the access. */
+import { type ResolutionLevel } from "@descryy/ir";
+import type { AdjacencyProvider, QueryResult } from "../query/provider.ts";
+export interface AttributeFinding {
+    /** The name read and not declared. */
+    readonly attribute: string;
+    readonly typeName: string;
+    readonly typeId: string;
+    /** The reading function's file. Null when that node carries none. */
+    readonly file: string | null;
+    /** The reading function's own starting line — see the header on precision. */
+    readonly line: number;
+    readonly detail: string;
+    readonly resolution: ResolutionLevel;
+}
+export interface AttributeReport {
+    readonly findings: readonly AttributeFinding[];
+    /** The count before `maxFindings` capped it — P27's disclosed remainder: a structured field, not only a prose note. */
+    readonly findingsTotal: number;
+    readonly examined: {
+        readonly typesExamined: number;
+        readonly readEdgesExamined: number;
+        /** Of those, how many carried `fields` or `unresolvedFields` at all — the signal this mechanism ran. */
+        readonly edgesWithFieldInfo: number;
+    };
+    /** True when at least one `READS` edge onto a type-like node carried field-existence information. */
+    readonly ran: boolean;
+}
+export interface AttributeCheckOptions {
+    /** Restrict to reads whose containing function sits in one of these repo-relative files. */
+    readonly files?: readonly string[];
+    readonly maxFindings?: number;
+    /** Cap on type-like nodes enumerated per type. Truncation is reported. */
+    readonly limit?: number;
+}
+/** Pulls attrs.unresolvedFields off a READS edge, refusing malformed entries. `hasFieldInfo` is
+ *  true whenever `fields` or `unresolvedFields` is present — signals the producer evaluated this
+ *  edge at all, distinguishing "looked and found nothing" from "never looked" (same as env.ts's readsAvailable). */
+export declare function readUnresolvedFields(attrs: Readonly<Record<string, unknown>> | undefined): {
+    readonly unresolvedFields: readonly string[];
+    readonly hasFieldInfo: boolean;
+    readonly malformed: number;
+};
+export declare function checkAttributeExistence(provider: AdjacencyProvider, options?: AttributeCheckOptions): QueryResult<AttributeReport>;
+//# sourceMappingURL=attributes.d.ts.map

package/dist/validation/attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attributes.d.ts","sourceRoot":"","sources":["../../src/validation/attributes.ts"],"names":[],"mappings":"AAAA;;gHAEgH;AAEhH,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,KAAK,EAAE,iBAAiB,EAAc,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEvF,MAAM,WAAW,gBAAgB;IAC/B,sCAAsC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,uHAAuH;IACvH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,wGAAwG;QACxG,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;KACrC,CAAC;IACF,qGAAqG;IACrG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAID;;oHAEoH;AACpH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GAAG;IAC1F,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAeA;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,GAAE,qBAA0B,GAClC,WAAW,CAAC,eAAe,CAAC,CA6H9B"}

package/dist/validation/attributes.js

@@ -0,0 +1,130 @@
+/** Attribute-existence check (UAT round 3's 2nd of 4 missed defects): reads `attrs.unresolvedFields`
+ *  off a READS edge, emitted only when the type's field list is provably complete (same guard
+ *  USES_TYPE rests on). Absent = silence, never a guess. Location is the reader's file/line, not the access. */
+import { TYPE_LIKE_NODE_TYPES } from "@descryy/ir";
+const DEFAULT_MAX_FINDINGS = 25;
+/** Pulls attrs.unresolvedFields off a READS edge, refusing malformed entries. `hasFieldInfo` is
+ *  true whenever `fields` or `unresolvedFields` is present — signals the producer evaluated this
+ *  edge at all, distinguishing "looked and found nothing" from "never looked" (same as env.ts's readsAvailable). */
+export function readUnresolvedFields(attrs) {
+    if (attrs === undefined)
+        return { unresolvedFields: [], hasFieldInfo: false, malformed: 0 };
+    const rawUnresolved = attrs["unresolvedFields"];
+    const rawFields = attrs["fields"];
+    const hasFieldInfo = Array.isArray(rawUnresolved) || Array.isArray(rawFields);
+    if (!Array.isArray(rawUnresolved))
+        return { unresolvedFields: [], hasFieldInfo, malformed: 0 };
+    const unresolvedFields = [];
+    let malformed = 0;
+    for (const entry of rawUnresolved) {
+        if (typeof entry === "string" && entry !== "")
+            unresolvedFields.push(entry);
+        else
+            malformed += 1;
+    }
+    return { unresolvedFields, hasFieldInfo, malformed };
+}
+export function checkAttributeExistence(provider, options = {}) {
+    const maxFindings = options.maxFindings ?? DEFAULT_MAX_FINDINGS;
+    const scoped = options.files === undefined ? null : new Set(options.files);
+    const notes = [];
+    let typesExamined = 0;
+    let readEdgesExamined = 0;
+    let edgesWithFieldInfo = 0;
+    let malformed = 0;
+    let typesTruncated = false;
+    const findings = [];
+    for (const type of TYPE_LIKE_NODE_TYPES) {
+        const set = options.limit === undefined ? provider.nodesOfType(type) : provider.nodesOfType(type, options.limit);
+        typesTruncated = typesTruncated || set.truncated;
+        for (const typeNode of set.nodes) {
+            typesExamined += 1;
+            const edges = provider.incoming(typeNode.id, { types: ["READS"] });
+            for (const edge of edges) {
+                readEdgesExamined += 1;
+                const extracted = readUnresolvedFields(edge.attrs);
+                malformed += extracted.malformed;
+                if (extracted.hasFieldInfo)
+                    edgesWithFieldInfo += 1;
+                if (extracted.unresolvedFields.length === 0)
+                    continue;
+                const from = provider.node(edge.from);
+                const path = from?.file ?? null;
+                if (scoped !== null && (path === null || !scoped.has(path)))
+                    continue;
+                const where = path === null ? null : from?.range !== null && from?.range !== undefined
+                    ? `${path}:${from.range.startLine}`
+                    : path;
+                for (const attribute of extracted.unresolvedFields) {
+                    findings.push({
+                        attribute,
+                        typeName: typeNode.name,
+                        typeId: typeNode.id,
+                        file: path,
+                        line: from?.range?.startLine ?? 0,
+                        detail: `${attribute} is read on a value typed ${typeNode.name}` +
+                            (where === null ? "" : ` (in the function at ${where})`) +
+                            `, and ${typeNode.name}'s own field list — provably complete for this type at the ` +
+                            "resolution this run reached — does not declare it. Any call reaching this read " +
+                            "raises when it runs. This is not proof the attribute never exists at runtime: a " +
+                            "dynamically assigned attribute, a mixin declared outside this graph, or a field a " +
+                            "mapping layer adds without a matching declaration could each still make the read " +
+                            "valid — it reports absence from the declaration this run resolved, not absence at " +
+                            "runtime.",
+                        resolution: edge.resolution,
+                    });
+                }
+            }
+        }
+    }
+    findings.sort((a, b) => a.typeName.localeCompare(b.typeName) ||
+        a.attribute.localeCompare(b.attribute) ||
+        (a.file ?? "").localeCompare(b.file ?? ""));
+    const kept = findings.slice(0, maxFindings);
+    const ran = edgesWithFieldInfo > 0;
+    if (readEdgesExamined === 0) {
+        notes.push("No READS edge onto a CLASS, MODEL or DTO node was found in the graph. This check reads " +
+            "attrs.unresolvedFields on such an edge — either no code in this graph reads an attribute " +
+            "of a modeled type, or no adapter reached the resolution this check needs. This is not a " +
+            "result of every read being valid.");
+    }
+    else if (!ran) {
+        notes.push(`${readEdgesExamined} READS edge(s) onto a type-like node were found, and none carried ` +
+            "attrs.fields or attrs.unresolvedFields — the field-existence signal this check reads. No " +
+            "adapter on this run supplied it, so nothing here could be checked against a declared " +
+            "type. This is not a result of zero missing attributes.");
+    }
+    if (malformed > 0) {
+        notes.push(`${malformed} unresolvedFields entry(ies) were dropped as malformed — a row that was not a ` +
+            "non-empty string. Dropped rather than guessed at.");
+    }
+    if (scoped !== null) {
+        notes.push(`The read side was restricted to ${scoped.size} scoped file(s), by the file of the function ` +
+            "doing the read.");
+    }
+    if (kept.length < findings.length) {
+        notes.push(`${findings.length - kept.length} further finding(s) were withheld: a report is capped at ` +
+            `${maxFindings} so a short list stays worth reading. They were found, not missed.`);
+    }
+    if (typesTruncated) {
+        notes.push("More CLASS/MODEL/DTO nodes exist in the graph than were enumerated, so this check covers a " +
+            "prefix of the repository's declared types rather than all of them.");
+    }
+    let resolutionFloor = 4;
+    for (const finding of kept)
+        if (finding.resolution < resolutionFloor)
+            resolutionFloor = finding.resolution;
+    const stamp = { ...provider.baseStamp(), resolutionFloor };
+    return {
+        data: {
+            findings: kept,
+            findingsTotal: findings.length,
+            examined: { typesExamined, readEdgesExamined, edgesWithFieldInfo },
+            ran,
+        },
+        stamp,
+        truncated: typesTruncated || kept.length < findings.length,
+        notes,
+    };
+}
+//# sourceMappingURL=attributes.js.map

package/dist/validation/attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attributes.js","sourceRoot":"","sources":["../../src/validation/attributes.ts"],"names":[],"mappings":"AAAA;;gHAEgH;AAEhH,OAAO,EAAE,oBAAoB,EAAwB,MAAM,aAAa,CAAC;AAuCzE,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;oHAEoH;AACpH,MAAM,UAAU,oBAAoB,CAAC,KAAoD;IAKvF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC5F,MAAM,aAAa,GAAG,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAE/F,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;YAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YACvE,SAAS,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAA2B,EAC3B,UAAiC,EAAE;IAEnC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACjH,cAAc,GAAG,cAAc,IAAI,GAAG,CAAC,SAAS,CAAC;QAEjD,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACjC,aAAa,IAAI,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAEnE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,iBAAiB,IAAI,CAAC,CAAC;gBACvB,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnD,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;gBACjC,IAAI,SAAS,CAAC,YAAY;oBAAE,kBAAkB,IAAI,CAAC,CAAC;gBACpD,IAAI,SAAS,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAEtD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;gBAChC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBAEtE,MAAM,KAAK,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;oBACpF,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;oBACnC,CAAC,CAAC,IAAI,CAAC;gBAET,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,gBAAgB,EAAE,CAAC;oBACnD,QAAQ,CAAC,IAAI,CAAC;wBACZ,SAAS;wBACT,QAAQ,EAAE,QAAQ,CAAC,IAAI;wBACvB,MAAM,EAAE,QAAQ,CAAC,EAAE;wBACnB,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC;wBACjC,MAAM,EACJ,GAAG,SAAS,6BAA6B,QAAQ,CAAC,IAAI,EAAE;4BACxD,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,KAAK,GAAG,CAAC;4BACxD,SAAS,QAAQ,CAAC,IAAI,6DAA6D;4BACnF,iFAAiF;4BACjF,kFAAkF;4BAClF,oFAAoF;4BACpF,mFAAmF;4BACnF,oFAAoF;4BACpF,UAAU;wBACZ,UAAU,EAAE,IAAI,CAAC,UAAU;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QACtC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAC7C,CAAC;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAE5C,MAAM,GAAG,GAAG,kBAAkB,GAAG,CAAC,CAAC;IAEnC,IAAI,iBAAiB,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,yFAAyF;YACvF,2FAA2F;YAC3F,0FAA0F;YAC1F,mCAAmC,CACtC,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CACR,GAAG,iBAAiB,oEAAoE;YACtF,2FAA2F;YAC3F,uFAAuF;YACvF,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,GAAG,SAAS,gFAAgF;YAC1F,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,mCAAmC,MAAM,CAAC,IAAI,+CAA+C;YAC3F,iBAAiB,CACpB,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,2DAA2D;YACzF,GAAG,WAAW,oEAAoE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CACR,6FAA6F;YAC3F,oEAAoE,CACvE,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,GAAoB,CAAC,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,IAAI;QAAE,IAAI,OAAO,CAAC,UAAU,GAAG,eAAe;YAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAE3G,MAAM,KAAK,GAAe,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,CAAC;IACvE,OAAO;QACL,IAAI,EAAE;YACJ,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,QAAQ,EAAE,EAAE,aAAa,EAAE,iBAAiB,EAAE,kBAAkB,EAAE;YAClE,GAAG;SACJ;QACD,KAAK;QACL,SAAS,EAAE,cAAc,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;QAC1D,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/validation/config-graph.d.ts

@@ -1,51 +1,8 @@
-/**
- * §15.3's config dependency graph — *"track env vars, secrets, flags, config
- * files and what uses them"*, and the row whose note reads *"feeds the
- * deploy-target check"*.
- *
- * ## This is a query, not a check, and the distinction is the design
- *
- * Checks 1 and 2 emit findings. This one emits **structure**: for every variable
- * the repository knows about, where it is declared, where it is read, and what
- * transitively depends on the files that read it. §15.3 says it feeds check 1,
- * and that is exactly what it is for — a missing variable read by a module forty
- * others import is a different sentence from one read by a single script, and
- * until now the check had no way to tell them apart.
- *
- * Because it produces no findings of its own, it has **no precision gate of its
- * own**, and that is stated rather than quietly skipped. Its correctness rests
- * entirely on the `IMPORTS` edges beneath it, whose precision is already gated
- * elsewhere. What this module can get wrong on its own is the *join* — attaching
- * the wrong file to a variable — and that is what its bench exercises.
- *
- * ## No new vocabulary, which is the whole reason it is shaped this way
- *
- * *"New capabilities are new queries over these edges, not new types."* A
- * variable still has no node (DEC-120). The dependent set is `scopeChange`
- * seeded with the **file that reads the variable** — impact flowing outward from
- * a changed file is precisely the existing traversal, with its budgets, its decay
- * scoring and its truncation disclosure already correct.
- *
- * Taking the scope rather than re-deriving it is deliberate: a second traversal
- * with its own rules would drift from the one the rest of the engine uses, and
- * the first symptom would be two different blast radiuses for the same file.
- *
- * ## Why R1, and what it degrades to
- *
- * Reaching *"what depends on this"* needs module resolution — `IMPORTS` edges
- * that actually resolve. At R0 there are none, so the dependent set is empty and
- * the report says the graph carried no import edges rather than reporting zero
- * dependents as a fact. **An empty dependent set from a graph with no imports and
- * an empty one from a genuinely unimported module are different statements**, and
- * only the second is information.
- *
- * ## The completeness fence
- *
- * Every count here is *what this graph can see* and is worded that way. NFR-9's
- * rule, and §15.3's own instruction for the neighbouring DB-impact check —
- * *"output must state what the tool can see, never implying completeness"* —
- * applies with equal force: a dependent set is a lower bound, always.
- */
+/** §15.3's config dependency graph — a query, not a check: emits structure
+ *  (which files transitively depend on a var's reader), no findings, so no
+ *  precision gate of its own; correctness rests on `IMPORTS` edge precision.
+ *  No new vocabulary — a var has no node (DEC-120); reuses `scopeChange`.
+ *  Needs R1 (import resolution) or dependents are unknown, never zero. */
 import type { AdjacencyProvider, QueryResult } from "../query/provider.ts";
 import type { SurfaceScan } from "./sources.ts";
 export interface ConfigDeclaration {
@@ -64,14 +21,8 @@ export interface ConfigVariable {
     readonly name: string;
     readonly declaredAt: readonly ConfigDeclaration[];
     readonly readAt: readonly ConfigReadSite[];
-    /**
-     * Files that transitively depend on a file reading this variable, as far as
-     * this graph can see.
-     *
-     * **A lower bound, never a total.** Null when the dependent set could not be
-     * computed at all — no reading file is in the graph, or the graph carries no
-     * import edges — which is not the same as zero.
-     */
+    /** Files transitively depending on a reader of this variable — a lower
+     *  bound, never a total. Null (not zero) when it couldn't be computed. */
     readonly dependents: number | null;
     /** A few dependent files, for a reader who wants to look. */
     readonly dependentSample: readonly string[];

package/dist/validation/config-graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-graph.d.ts","sourceRoot":"","sources":["../../src/validation/config-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAc,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAIvF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,cAAc,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,yDAAyD;IACzD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;IAC9C,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,8DAA8D;QAC9D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,oCAAoC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CAAC,WAAW,CAAC,CAgL1B"}
+{"version":3,"file":"config-graph.d.ts","sourceRoot":"","sources":["../../src/validation/config-graph.ts"],"names":[],"mappings":"AAAA;;;;0EAI0E;AAI1E,OAAO,KAAK,EAAE,iBAAiB,EAAc,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAIvF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,cAAc,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C;8EAC0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,yDAAyD;IACzD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;IAC9C,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,8DAA8D;QAC9D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,oCAAoC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CAAC,WAAW,CAAC,CA6K1B"}

package/dist/validation/config-graph.js

@@ -1,51 +1,8 @@
-/**
- * §15.3's config dependency graph — *"track env vars, secrets, flags, config
- * files and what uses them"*, and the row whose note reads *"feeds the
- * deploy-target check"*.
- *
- * ## This is a query, not a check, and the distinction is the design
- *
- * Checks 1 and 2 emit findings. This one emits **structure**: for every variable
- * the repository knows about, where it is declared, where it is read, and what
- * transitively depends on the files that read it. §15.3 says it feeds check 1,
- * and that is exactly what it is for — a missing variable read by a module forty
- * others import is a different sentence from one read by a single script, and
- * until now the check had no way to tell them apart.
- *
- * Because it produces no findings of its own, it has **no precision gate of its
- * own**, and that is stated rather than quietly skipped. Its correctness rests
- * entirely on the `IMPORTS` edges beneath it, whose precision is already gated
- * elsewhere. What this module can get wrong on its own is the *join* — attaching
- * the wrong file to a variable — and that is what its bench exercises.
- *
- * ## No new vocabulary, which is the whole reason it is shaped this way
- *
- * *"New capabilities are new queries over these edges, not new types."* A
- * variable still has no node (DEC-120). The dependent set is `scopeChange`
- * seeded with the **file that reads the variable** — impact flowing outward from
- * a changed file is precisely the existing traversal, with its budgets, its decay
- * scoring and its truncation disclosure already correct.
- *
- * Taking the scope rather than re-deriving it is deliberate: a second traversal
- * with its own rules would drift from the one the rest of the engine uses, and
- * the first symptom would be two different blast radiuses for the same file.
- *
- * ## Why R1, and what it degrades to
- *
- * Reaching *"what depends on this"* needs module resolution — `IMPORTS` edges
- * that actually resolve. At R0 there are none, so the dependent set is empty and
- * the report says the graph carried no import edges rather than reporting zero
- * dependents as a fact. **An empty dependent set from a graph with no imports and
- * an empty one from a genuinely unimported module are different statements**, and
- * only the second is information.
- *
- * ## The completeness fence
- *
- * Every count here is *what this graph can see* and is worded that way. NFR-9's
- * rule, and §15.3's own instruction for the neighbouring DB-impact check —
- * *"output must state what the tool can see, never implying completeness"* —
- * applies with equal force: a dependent set is a lower bound, always.
- */
+/** §15.3's config dependency graph — a query, not a check: emits structure
+ *  (which files transitively depend on a var's reader), no findings, so no
+ *  precision gate of its own; correctness rests on `IMPORTS` edge precision.
+ *  No new vocabulary — a var has no node (DEC-120); reuses `scopeChange`.
+ *  Needs R1 (import resolution) or dependents are unknown, never zero. */
 import { scopeChange } from "../scoping/traverse.js";
 import { readEnvReads } from "./env.js";
 import { fileScopedNodes } from "./nodes.js";
@@ -56,7 +13,7 @@ export function buildConfigGraph(provider, scan, options = {}) {
     const maxTraversals = options.maxTraversals ?? DEFAULT_MAX_TRAVERSALS;
     const budget = options.budget ?? DEFAULT_BUDGET;
     const notes = [];
-    // --- declarations, from the repository -----------------------------------
+    // declarations, from the repository
     const declarations = new Map();
     for (const surface of scan.surfaces) {
         for (const declaration of surface.declarations) {
@@ -71,7 +28,7 @@ export function buildConfigGraph(provider, scan, options = {}) {
             });
         }
     }
-    // --- reads, from the graph -----------------------------------------------
+    // reads, from the graph
     const files = fileScopedNodes(provider, options.limit);
     const reads = new Map();
     const readingFile = new Map();
@@ -80,9 +37,8 @@ export function buildConfigGraph(provider, scan, options = {}) {
         const path = node.file;
         if (path === null)
             continue;
-        // Counted across every file, not only the reading ones: "this graph has no
-        // import edges" is a property of the graph, and sampling it from the files
-        // that happen to read configuration would be a property of those files.
+        // Counted across every file, not only reading ones — "no import edges"
+        // is a property of the graph, not of the files that read config.
         importEdges += provider.outgoing(node.id, { types: ["IMPORTS"], limit: 1 }).length;
         const extracted = readEnvReads(node.attrs, path, node.resolution);
         if (extracted.reads.length === 0)
@@ -96,7 +52,7 @@ export function buildConfigGraph(provider, scan, options = {}) {
         }
     }
     const importsAvailable = importEdges > 0;
-    // --- assemble, and traverse for the ones worth traversing ----------------
+    // assemble, and traverse for the ones worth traversing
     const names = [...new Set([...declarations.keys(), ...reads.keys()])].sort();
     const variables = [];
     let declaredOnly = 0;
@@ -106,9 +62,8 @@ export function buildConfigGraph(provider, scan, options = {}) {
     let traversals = 0;
     let floor = 4;
     let anyTruncated = false;
-    // Variables with a read site come first: a dependent set is only meaningful
-    // for one with a reading file, and the traversal budget should not be spent on
-    // declarations nothing reads.
+    // Read-site variables first — a dependent set means nothing without a
+    // reading file, and the traversal budget shouldn't go to unread declarations.
     const ordered = names.sort((a, b) => {
         const ar = reads.has(a) ? 0 : 1;
         const br = reads.has(b) ? 0 : 1;
@@ -133,9 +88,8 @@ export function buildConfigGraph(provider, scan, options = {}) {
         if (seeds.length > 0 && importsAvailable && traversals < maxTraversals) {
             traversals += 1;
             const scope = scopeChange(provider, [...new Set(seeds)], { budget });
-            // `changed` is the seed set itself — the files that read the variable —
-            // so the dependent count is `affected` alone. Including the seeds would
-            // report a variable read in one file as having one dependent.
+            // `changed` is the seed set (readers) itself, so count is `affected`
+            // alone — including seeds would give a single-file var one dependent.
             const affected = scope.data.affected;
             dependents = affected.length;
             dependentSample = affected
@@ -159,7 +113,7 @@ export function buildConfigGraph(provider, scan, options = {}) {
         });
     }
     variables.sort((a, b) => (b.dependents ?? -1) - (a.dependents ?? -1) || a.name.localeCompare(b.name));
-    // --- disclosures ---------------------------------------------------------
+    // disclosures
     if (!importsAvailable) {
         notes.push("No resolved import edge is in this graph, so no dependent set could be computed for any " +
             "variable. Every dependent count is reported as unknown rather than as zero: a module " +

package/dist/validation/config-graph.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-graph.js","sourceRoot":"","sources":["../../src/validation/config-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA4D7C,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,MAAM,GAAG,CAAC,CAAC;AAEjB,MAAM,UAAU,gBAAgB,CAC9B,QAA2B,EAC3B,IAAiB,EACjB,UAA8B,EAAE;IAEhC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,4EAA4E;IAE5E,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC5D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/C,IAAI,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAEvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QAEnF,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC3C,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,WAAW,GAAG,CAAC,CAAC;IAEzC,4EAA4E;IAE5E,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,KAAK,GAAoB,CAAC,CAAC;IAC/B,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,4EAA4E;IAC5E,+EAA+E;IAC/E,8BAA8B;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,IAAI,CAAC,CAAC;aACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,YAAY,IAAI,CAAC,CAAC;;YAC7C,QAAQ,IAAI,CAAC,CAAC;QAEnB,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,eAAe,GAAa,EAAE,CAAC;QACnC,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,MAAM,KAAK,GAAG,MAAM;aACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACzC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACpD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE1B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;YACvE,UAAU,IAAI,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACrE,wEAAwE;YACxE,wEAAwE;YACxE,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC7B,eAAe,GAAG,QAAQ;iBACvB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC/B,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;iBAC/C,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACpB,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7D,IAAI,SAAS;gBAAE,YAAY,GAAG,IAAI,CAAC;YACnC,IAAI,KAAK,CAAC,KAAK,CAAC,eAAe,GAAG,KAAK;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC;YAC7E,cAAc,IAAI,CAAC,CAAC;QACtB,CAAC;QAED,SAAS,CAAC,IAAI,CAAC;YACb,IAAI;YACJ,UAAU;YACV,MAAM;YACN,UAAU;YACV,eAAe;YACf,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAI,CACZ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACtF,CAAC;IAEF,4EAA4E;IAE5E,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,0FAA0F;YACxF,uFAAuF;YACvF,uFAAuF;YACvF,wFAAwF;YACxF,gBAAgB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,4FAA4F;YAC1F,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,aAAa,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,8CAA8C,aAAa,2BAA2B;YACpF,0EAA0E;YAC1E,8BAA8B,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CACR,6FAA6F;YAC3F,gEAAgE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,qFAAqF;YACnF,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,0FAA0F;QACxF,2FAA2F;QAC3F,yCAAyC,CAC5C,CAAC;IAEF,MAAM,KAAK,GAAe;QACxB,GAAG,QAAQ,CAAC,SAAS,EAAE;QACvB,eAAe,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;KAClD,CAAC;IAEF,OAAO;QACL,IAAI,EAAE;YACJ,SAAS;YACT,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE;YAC7E,gBAAgB;SACjB;QACD,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,YAAY;QAC1C,KAAK;KACN,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config-graph.js","sourceRoot":"","sources":["../../src/validation/config-graph.ts"],"names":[],"mappings":"AAAA;;;;0EAI0E;AAK1E,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAsD7C,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,MAAM,GAAG,CAAC,CAAC;AAEjB,MAAM,UAAU,gBAAgB,CAC9B,QAA2B,EAC3B,IAAiB,EACjB,UAA8B,EAAE;IAEhC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,oCAAoC;IAEpC,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC5D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/C,IAAI,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wBAAwB;IAExB,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAEvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,uEAAuE;QACvE,iEAAiE;QACjE,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QAEnF,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC3C,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,WAAW,GAAG,CAAC,CAAC;IAEzC,uDAAuD;IAEvD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,KAAK,GAAoB,CAAC,CAAC;IAC/B,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,sEAAsE;IACtE,8EAA8E;IAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,IAAI,CAAC,CAAC;aACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,YAAY,IAAI,CAAC,CAAC;;YAC7C,QAAQ,IAAI,CAAC,CAAC;QAEnB,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,eAAe,GAAa,EAAE,CAAC;QACnC,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,MAAM,KAAK,GAAG,MAAM;aACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACzC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACpD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE1B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;YACvE,UAAU,IAAI,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACrE,qEAAqE;YACrE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC7B,eAAe,GAAG,QAAQ;iBACvB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC/B,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;iBAC/C,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACpB,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7D,IAAI,SAAS;gBAAE,YAAY,GAAG,IAAI,CAAC;YACnC,IAAI,KAAK,CAAC,KAAK,CAAC,eAAe,GAAG,KAAK;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC;YAC7E,cAAc,IAAI,CAAC,CAAC;QACtB,CAAC;QAED,SAAS,CAAC,IAAI,CAAC;YACb,IAAI;YACJ,UAAU;YACV,MAAM;YACN,UAAU;YACV,eAAe;YACf,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAI,CACZ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACtF,CAAC;IAEF,cAAc;IAEd,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,0FAA0F;YACxF,uFAAuF;YACvF,uFAAuF;YACvF,wFAAwF;YACxF,gBAAgB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,4FAA4F;YAC1F,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,aAAa,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,8CAA8C,aAAa,2BAA2B;YACpF,0EAA0E;YAC1E,8BAA8B,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CACR,6FAA6F;YAC3F,gEAAgE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,qFAAqF;YACnF,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,0FAA0F;QACxF,2FAA2F;QAC3F,yCAAyC,CAC5C,CAAC;IAEF,MAAM,KAAK,GAAe;QACxB,GAAG,QAAQ,CAAC,SAAS,EAAE;QACvB,eAAe,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;KAClD,CAAC;IAEF,OAAO;QACL,IAAI,EAAE;YACJ,SAAS;YACT,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE;YAC7E,gBAAgB;SACjB;QACD,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,YAAY;QAC1C,KAAK;KACN,CAAC;AACJ,CAAC"}