@dsh-triage/core 0.1.0 → 0.3.0

package/dist/upgrade.js

@@ -0,0 +1,538 @@
+/**
+ * Upgrade impact: "if I move to dsh `<target>`, which loader rows and bundles get denied?"
+ *
+ * WHAT THIS MODULE IS ALLOWED TO SAY
+ * ----------------------------------
+ * One thing per unit: **would the target runtime be admitted by the range this unit
+ * declares?** It answers that by calling `evaluateAdmission` — the same function `why`,
+ * `check`, `audit` and the panel use — with `env.dsh` replaced by the target. There is no
+ * second range implementation here on purpose: admission semantics are locked by
+ * `data/gold/admission-cases.json`, and a local copy of "engines first, then peers" would
+ * be a second rule set that drifts silently.
+ *
+ * WHAT IT REFUSES TO SAY
+ * ----------------------
+ * - "this row will *work*": a declaration being admitted is not a measurement;
+ * - anything about feature behaviour, configuration names or data migration;
+ * - anything about a plugin that is not installed (no manifest = nothing to judge);
+ * - anything about another profile. `impact.profile` names the one that was read
+ *   (`BS-38`: two profiles, two correct answers).
+ *
+ * PURITY
+ * ------
+ * No filesystem access, no network, no clock, no environment reads. Rows and bundles arrive
+ * already parsed, the timestamp arrives from the caller. Same input (in any array order) →
+ * byte-identical output: the ordering keys below form a total order and never use
+ * `localeCompare`, whose result depends on the ICU build of the machine that runs it.
+ */
+import { gt, valid } from 'semver';
+import { evaluateAdmission } from './admission.js';
+import { catalogFor, format } from './messages.js';
+import { verdictFromAdmission, verdictsFromRowAdmission } from './verdict.js';
+/** The four buckets, in terminal order. A unit lands in exactly one of them. */
+export const UPGRADE_BUCKETS = ['would-be-denied', 'cannot-tell', 'improved', 'likely-fine'];
+/**
+ * Validate a target before anything is read.
+ *
+ * Exposed because the CLI must reject `--to ^0.3.0` **before** it touches a profile: a
+ * usage error that depends on whether the profile exists would report the wrong thing.
+ */
+export function upgradeTargetProblem(target) {
+    const trimmed = target.trim();
+    if (trimmed === '')
+        return 'target must be an exact semver version; got an empty string';
+    if (valid(trimmed) === null) {
+        return `target must be an exact semver version (got "${target}"); only the keywords next and latest are resolved from npm, everything else must be exact`;
+    }
+    return null;
+}
+/**
+ * Judge the impact of moving to `input.target`.
+ *
+ * The target is validated first: `semver.satisfies('0.3', '*')` returns `false` without
+ * throwing, so an unvalidated target would silently turn every unit into "denied". A bad
+ * target is a usage error, not a finding.
+ */
+export function judgeUpgradeImpact(input) {
+    const problem = upgradeTargetProblem(input.target);
+    if (problem !== null) {
+        return { ok: false, code: 'invalid-target', detail: problem, target: input.target };
+    }
+    const target = input.target.trim();
+    const env = input.env;
+    const current = env.dsh === null || env.dsh.trim() === '' ? null : env.dsh.trim();
+    const targetEnv = { ...env, dsh: target };
+    const registryFacts = [...(input.registry ?? [])];
+    const units = [
+        ...input.bundles.map((bundle) => bundleUnit(bundle, env, targetEnv, current, input.generatedAt)),
+        ...input.rows.map((row) => rowUnit(row, env, targetEnv, current, input.generatedAt)),
+    ];
+    // Attach registry annotations AFTER every bucket decision. This ordering is the whole
+    // reason a registry fact cannot move a unit: by the time it is read, `bucket` is frozen.
+    const annotated = units.map((unit) => ({ ...unit, suggestions: notesFor(unit, registryFacts) }));
+    const ordered = [...annotated].sort(compareUnits);
+    return {
+        ok: true,
+        impact: {
+            schema_version: 1,
+            profile: env.profile,
+            profile_source: input.profileSource ?? 'live',
+            current,
+            current_valid: current !== null && valid(current) !== null,
+            target,
+            target_valid: true,
+            target_relation: relationOf(current, target),
+            buckets: UPGRADE_BUCKETS,
+            counts: countOf(ordered),
+            units: ordered,
+            registry: {
+                consulted: registryFacts.length > 0 || (input.registryFailures ?? []).length > 0,
+                facts: registryFacts.length,
+                failures: [...(input.registryFailures ?? [])].sort((left, right) => compareStrings(left.package, right.package) || compareStrings(left.code, right.code)),
+            },
+            generated_at: input.generatedAt,
+        },
+    };
+}
+/**
+ * Classify one unit by **target status first, then current status**.
+ *
+ * Kept in one place so `would-be-denied` cannot mean two different things for a row and a
+ * bundle, and so `improved` has exactly one definition (spec §4.1).
+ */
+function classify(input) {
+    if (input.manifest === null) {
+        // A row with no installed package has a verdict the engine already knows how to write
+        // (it names `missing.row-module`); a bundle from a snapshot does not, and says so itself.
+        const verdict = input.row === null
+            ? null
+            : (verdictsFromRowAdmission({
+                env: input.targetEnv,
+                rows: [input.row],
+                generatedAt: input.generatedAt,
+            })[0] ?? null);
+        return {
+            bucket: 'cannot-tell',
+            cause: 'not-installed',
+            verdict,
+            missing_evidence: verdict === null ? ['missing.admission'] : verdict.missingEvidence,
+        };
+    }
+    const admission = evaluateAdmission(input.manifest, input.targetEnv.dsh ?? '');
+    if (admission.status === 'indeterminate') {
+        // Unreachable with a validated target; kept so a future caller cannot get `likely-fine`.
+        return { bucket: 'cannot-tell', cause: 'runtime-unknown', verdict: null, missing_evidence: ['missing.runtime'] };
+    }
+    if (admission.status === 'unconstrained') {
+        const verdict = verdictAt(input, admission);
+        return {
+            bucket: 'cannot-tell',
+            cause: 'no-declaration',
+            verdict,
+            missing_evidence: verdict.missingEvidence,
+        };
+    }
+    if (admission.status === 'denied') {
+        // A range that can never be satisfied (`""`, `workspace:*`, not-semver) denies on *any*
+        // runtime. Reporting it as `target-denied` would blame the upgrade for a defect that is
+        // already there; reporting it as `cannot-tell` would hide a definite denial. So it stays
+        // in `would-be-denied` with a cause that says why (spec §14 #1).
+        const unusable = admission.unmet.length > 0 && admission.unmet.every((requirement) => requirement.failure !== null);
+        return {
+            bucket: 'would-be-denied',
+            cause: unusable ? 'unusable-declaration' : 'target-denied',
+            verdict: verdictAt(input, admission),
+            missing_evidence: [],
+        };
+    }
+    // admitted at target: the only branch where `improved` can exist.
+    const currentAdmission = currentAdmissionOf(input.manifest, input.current);
+    const improved = currentAdmission !== null &&
+        currentAdmission.status === 'denied' &&
+        currentAdmission.unmet.some((requirement) => requirement.failure === null);
+    return {
+        bucket: improved ? 'improved' : 'likely-fine',
+        cause: improved ? 'denied-now-admitted-then' : 'admitted-at-target',
+        verdict: verdictAt(input, admission),
+        missing_evidence: [],
+    };
+}
+/**
+ * The verdict the same engine would print for this unit at the **target** runtime.
+ *
+ * Rows go through `verdictsFromRowAdmission` so the row id, the `disable-entry` remediation
+ * and the unmet reasons are exactly what `why` prints for a denied row. Admitted rows return
+ * no row verdict there (silence is `why`'s "fine"), so they fall back to the plugin-shaped
+ * builder. Bundles always use the plugin-shaped builder — a bundle has no row to name.
+ */
+function verdictAt(input, admission) {
+    if (input.kind === 'row' && input.row !== null) {
+        const [rowVerdict] = verdictsFromRowAdmission({
+            env: input.targetEnv,
+            rows: [input.row],
+            generatedAt: input.generatedAt,
+        });
+        if (rowVerdict !== undefined)
+            return rowVerdict;
+    }
+    return verdictFromAdmission({
+        subject: {
+            name: input.name,
+            version: input.version,
+            kind: input.kind === 'row' ? 'entry' : 'plugin',
+        },
+        env: input.targetEnv,
+        admission,
+        generatedAt: input.generatedAt,
+    });
+}
+function bundleUnit(bundle, env, targetEnv, current, generatedAt) {
+    const classification = classify({
+        kind: 'bundle',
+        name: bundle.name,
+        version: bundle.version,
+        manifest: bundle.manifest,
+        targetEnv,
+        current,
+        generatedAt,
+        row: null,
+    });
+    return unitOf({
+        id: `bundle:${bundle.name}`,
+        kind: 'bundle',
+        name: bundle.name,
+        version: bundle.version,
+        rowIds: [],
+        source: null,
+        classification,
+        manifest: bundle.manifest,
+        targetEnv,
+        current,
+    });
+}
+function rowUnit(row, env, targetEnv, current, generatedAt) {
+    const classification = classify({
+        kind: 'row',
+        name: row.module,
+        version: row.version,
+        manifest: row.manifest,
+        targetEnv,
+        current,
+        generatedAt,
+        row,
+    });
+    return unitOf({
+        id: `row:${row.rowId}`,
+        kind: 'row',
+        name: row.module,
+        version: row.version,
+        rowIds: [row.rowId],
+        source: row.source,
+        classification,
+        manifest: row.manifest,
+        targetEnv,
+        current,
+    });
+}
+function unitOf(input) {
+    const target = standingOf(input.manifest, input.targetEnv.dsh);
+    const currentStanding = standingOf(input.manifest, input.current);
+    const verdict = input.classification.verdict;
+    return {
+        id: input.id,
+        kind: input.kind,
+        name: input.name,
+        version: input.version,
+        row_ids: input.rowIds,
+        source: input.source,
+        bucket: input.classification.bucket,
+        cause: input.classification.cause,
+        already_denied_at_current: currentStanding.status === 'denied',
+        current: currentStanding,
+        target,
+        remediation: verdict === null ? [] : verdict.remediation,
+        reasons: verdict === null ? [] : verdict.reasons,
+        missing_evidence: input.classification.missing_evidence,
+        verdict,
+        suggestions: [],
+    };
+}
+/* --------------------------------- standings --------------------------------- */
+/**
+ * Evaluate one manifest on one runtime **without inventing an answer**.
+ *
+ * `runtime === null` and an unparsable runtime are both "not evaluated": `satisfies()` would
+ * return `false` for a garbage version and we would report a denial that means nothing.
+ */
+function standingOf(manifest, runtime) {
+    const name = runtime === null || runtime.trim() === '' ? null : runtime.trim();
+    if (manifest === null)
+        return { runtime: name, status: 'not-installed', mode: null, unmet: [] };
+    if (name === null)
+        return { runtime: null, status: null, mode: null, unmet: [] };
+    if (valid(name) === null)
+        return { runtime: name, status: 'invalid-runtime', mode: null, unmet: [] };
+    const admission = evaluateAdmission(manifest, name);
+    return { runtime: name, status: admission.status, mode: admission.mode, unmet: admission.unmet };
+}
+function currentAdmissionOf(manifest, current) {
+    if (current === null || valid(current) === null)
+        return null;
+    return evaluateAdmission(manifest, current);
+}
+function relationOf(current, target) {
+    if (current === null || valid(current) === null)
+        return 'unknown';
+    if (current === target)
+        return 'same';
+    return gt(target, current) ? 'newer' : 'older';
+}
+/* ------------------------------- registry notes ------------------------------- */
+/**
+ * Turn one packument's version→manifest map into ONE annotation.
+ *
+ * Chosen here (in core, next to the range logic) rather than in the CLI, because picking
+ * "the newest version whose declaration admits the target" needs semver ordering — a second
+ * implementation of that ordering in the CLI would be exactly the kind of drift this file
+ * exists to avoid.
+ *
+ * `admitsTarget: false` is a legitimate answer: it means "I looked, and no published version
+ * declares the target". Dropping it would make the search invisible.
+ */
+export function registryFactFor(input) {
+    if (upgradeTargetProblem(input.target) !== null)
+        return null;
+    const target = input.target.trim();
+    const candidates = [...input.versions.entries()]
+        .filter((entry) => valid(entry[0]) !== null)
+        .sort((left, right) => (gt(left[0], right[0]) ? -1 : gt(right[0], left[0]) ? 1 : 0));
+    const newest = candidates[0];
+    if (newest === undefined)
+        return null;
+    const admitting = candidates.find(([, manifest]) => evaluateAdmission(manifest, target).status === 'admitted');
+    const chosen = admitting ?? newest;
+    return {
+        package: input.packageName,
+        version: chosen[0],
+        declaredRange: describeDeclaredRanges(evaluateAdmission(chosen[1], target)),
+        admitsTarget: admitting !== undefined,
+        publishedAt: input.publishedAt?.[chosen[0]] ?? null,
+    };
+}
+/** How the annotation names the declaration: `engines.dsh 0.1.0-rc.6`, `@x/dsh-llm@0.2.1-rc.4`. */
+function describeDeclaredRanges(admission) {
+    if (admission.requirements.length === 0)
+        return 'no declaration';
+    const shown = admission.requirements
+        .slice(0, 3)
+        .map((requirement) => (requirement.key === 'dsh' ? `engines.dsh ${requirement.range}` : `${requirement.key}@${requirement.range}`));
+    const rest = admission.requirements.length - shown.length;
+    return rest > 0 ? `${shown.join(' & ')} (+${rest} more)` : shown.join(' & ');
+}
+/**
+ * Attach registry facts as annotations.
+ *
+ * Only `would-be-denied` / `cannot-tell` units get them: those are the units where "is there
+ * a published build that declares the target?" is the next question. A fact with
+ * `admitsTarget: false` is still attached — it is evidence that was looked up, and dropping
+ * it would hide the search.
+ */
+function notesFor(unit, facts) {
+    if (facts.length === 0)
+        return [];
+    if (unit.bucket !== 'would-be-denied' && unit.bucket !== 'cannot-tell')
+        return [];
+    return facts
+        .filter((fact) => fact.package === unit.name)
+        .map((fact) => ({
+        annotation_only: true,
+        tier: 'measured-registry',
+        package: fact.package,
+        version: fact.version,
+        declared_range: fact.declaredRange,
+        admits_target: fact.admitsTarget,
+        published_at: fact.publishedAt ?? null,
+        note_id: 'upgrade.registry-annotation',
+    }))
+        .sort((left, right) => compareVersionsDescending(left.version, right.version));
+}
+/* --------------------------------- ordering ---------------------------------- */
+const BUCKET_RANK = {
+    'would-be-denied': 0,
+    'cannot-tell': 1,
+    improved: 2,
+    'likely-fine': 3,
+};
+const KIND_RANK = { bundle: 0, row: 1 };
+/**
+ * Total order: bucket → kind → name → version → id.
+ *
+ * `localeCompare` is not used anywhere in this chain: it depends on the ICU build, so the
+ * same input could sort differently on two machines and the artifact would stop reproducing.
+ */
+export function compareUnits(left, right) {
+    return (BUCKET_RANK[left.bucket] - BUCKET_RANK[right.bucket] ||
+        KIND_RANK[left.kind] - KIND_RANK[right.kind] ||
+        compareStrings(left.name, right.name) ||
+        compareStrings(left.version ?? '', right.version ?? '') ||
+        compareStrings(left.id, right.id));
+}
+function compareStrings(left, right) {
+    if (left === right)
+        return 0;
+    return left < right ? -1 : 1;
+}
+function compareVersionsDescending(left, right) {
+    const leftValid = valid(left) !== null;
+    const rightValid = valid(right) !== null;
+    if (leftValid && rightValid)
+        return gt(left, right) ? -1 : gt(right, left) ? 1 : 0;
+    if (leftValid !== rightValid)
+        return leftValid ? -1 : 1;
+    return compareStrings(right, left);
+}
+function countOf(units) {
+    const count = (bucket) => units.filter((unit) => unit.bucket === bucket).length;
+    const bundles = units.filter((unit) => unit.kind === 'bundle').length;
+    return {
+        bundles,
+        rows: units.length - bundles,
+        would_be_denied: count('would-be-denied'),
+        cannot_tell: count('cannot-tell'),
+        improved: count('improved'),
+        likely_fine: count('likely-fine'),
+        total: units.length,
+    };
+}
+/* --------------------------------- rendering --------------------------------- */
+/** Units printed per bucket before the terminal says "… N more, --json". */
+const MAX_RENDERED_UNITS = 20;
+/** Reasons and fixes printed per unit; the full lists live in `--json`. */
+const MAX_DETAIL_PER_UNIT = 2;
+const FIX_PRIORITY = [
+    'pin-version',
+    'disable-entry',
+    'downgrade-dsh',
+    'upgrade-dsh',
+    'allow-version',
+    'probe',
+    'report',
+    'remove-plugin',
+];
+const BUCKET_LABEL = {
+    'would-be-denied': 'upgrade.bucket.would-be-denied',
+    'cannot-tell': 'upgrade.bucket.cannot-tell',
+    improved: 'upgrade.bucket.improved',
+    'likely-fine': 'upgrade.bucket.likely-fine',
+};
+const COUNT_KEY = {
+    'would-be-denied': 'would_be_denied',
+    'cannot-tell': 'cannot_tell',
+    improved: 'improved',
+    'likely-fine': 'likely_fine',
+};
+const RELATION_ID = {
+    same: 'upgrade.relation.same',
+    newer: 'upgrade.relation.newer',
+    older: 'upgrade.relation.older',
+    unknown: 'upgrade.relation.unknown',
+};
+/** Terminal rendering. Pure: locale in, text out; no colour, no clock, no width probing. */
+export function renderUpgradeImpact(impact, locale) {
+    const catalog = catalogFor(locale);
+    const text = (id, params) => {
+        const template = catalog.messages[id];
+        return template === undefined ? `?${id}` : format(template, params);
+    };
+    const lines = [];
+    lines.push(text('upgrade.header', {
+        target: impact.target,
+        units: impact.counts.total,
+        bundles: impact.counts.bundles,
+        rows: impact.counts.rows,
+    }));
+    lines.push(text(RELATION_ID[impact.target_relation], {
+        target: impact.target,
+        current: impact.current ?? 'unknown',
+    }));
+    lines.push(text('upgrade.profile-scope', { profile: impact.profile, source: impact.profile_source }));
+    lines.push(text('upgrade.admitted-only', { target: impact.target }));
+    if (impact.counts.total === 0) {
+        lines.push('');
+        lines.push(text('upgrade.nothing-sampled', { profile: impact.profile }));
+        return `${lines.join('\n')}\n`;
+    }
+    for (const bucket of impact.buckets) {
+        const units = impact.units.filter((unit) => unit.bucket === bucket);
+        const count = impact.counts[COUNT_KEY[bucket]];
+        lines.push('');
+        lines.push(text(BUCKET_LABEL[bucket], { count, target: impact.target }));
+        for (const unit of units.slice(0, MAX_RENDERED_UNITS)) {
+            lines.push(`  ${unit.id}${unit.version === null ? '' : `  ${unit.name}@${unit.version}`}`);
+            if (unit.cause === 'unusable-declaration')
+                lines.push(`    ${text('upgrade.unusable-declaration', { target: impact.target })}`);
+            if (unit.already_denied_at_current)
+                lines.push(`    ${text('upgrade.already-denied', { current: impact.current ?? 'unknown' })}`);
+            for (const reason of pickBlockingReasons(unit)) {
+                lines.push(`    reason  ${text(reason.messageId, reason.params)}`);
+            }
+            for (const reason of pickCurrentBlockingReasons(unit)) {
+                lines.push(`    now     ${text(reason.messageId, reason.params)}`);
+            }
+            for (const missing of unit.missing_evidence) {
+                lines.push(`    missing ${text(missing)}`);
+            }
+            const fixes = orderedFixes(unit.remediation);
+            for (const fix of fixes.slice(0, MAX_DETAIL_PER_UNIT)) {
+                lines.push(`    fix     [${fix.kind}] ${fix.messageId === undefined ? fix.note : text(fix.messageId, fix.params)}`);
+            }
+            if (fixes.length > MAX_DETAIL_PER_UNIT) {
+                lines.push(`    …       ${text('upgrade.more-fixes', { count: fixes.length - MAX_DETAIL_PER_UNIT })}`);
+            }
+            for (const note of unit.suggestions) {
+                lines.push(`    ${text('upgrade.registry-annotation', {
+                    package: note.package,
+                    version: note.version,
+                    range: note.declared_range,
+                    target: impact.target,
+                    verdict: note.admits_target ? 'admitted' : 'denied',
+                })}`);
+            }
+        }
+        if (count > MAX_RENDERED_UNITS) {
+            lines.push(`  ${text('upgrade.more-units', { count: count - MAX_RENDERED_UNITS })}`);
+        }
+    }
+    for (const failure of impact.registry.failures) {
+        lines.push(`registry ${failure.package}: ${failure.code} (${failure.detail})`);
+    }
+    return `${lines.join('\n')}\n`;
+}
+function pickBlockingReasons(unit) {
+    return unit.reasons.filter((reason) => reason.severity === 'block').slice(0, MAX_DETAIL_PER_UNIT);
+}
+/** For `improved`: the denial that exists **today**, which is what makes the unit interesting. */
+function pickCurrentBlockingReasons(unit) {
+    if (unit.bucket !== 'improved')
+        return [];
+    return unit.current.unmet
+        .slice(0, MAX_DETAIL_PER_UNIT)
+        .map((requirement) => ({
+        code: 'upgrade-current-unmet',
+        severity: 'info',
+        messageId: requirement.key === 'dsh' ? 'admission.unmet.engines' : 'admission.unmet.peer',
+        params: { key: requirement.key, range: requirement.range, runtime: unit.current.runtime ?? 'unknown' },
+    }));
+}
+function orderedFixes(remediation) {
+    const rank = (kind) => {
+        const index = FIX_PRIORITY.indexOf(kind);
+        return index === -1 ? FIX_PRIORITY.length : index;
+    };
+    return [...remediation].sort((left, right) => rank(left.kind) - rank(right.kind) || compareStrings(left.note, right.note));
+}
+/** Convenience for callers that only need a yes/no: is anything going to be denied? */
+export function hasNewDenials(impact) {
+    return impact.counts.would_be_denied > 0;
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAe,MAAM,eAAe,CAAA;AAG/D,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAE7E,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,CAAU,CAAA;AA6IrG;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,6DAA6D,CAAA;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,gDAAgD,MAAM,4FAA4F,CAAA;IAC3J,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAElC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IACrB,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;IACjF,MAAM,SAAS,GAAmB,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;IACzD,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAA;IAEjD,MAAM,KAAK,GAAkB;QAC3B,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAChG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;KACrF,CAAA;IAED,sFAAsF;IACtF,yFAAyF;IACzF,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAA;IAChG,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAEjD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,cAAc,EAAE,KAAK,CAAC,aAAa,IAAI,MAAM;YAC7C,OAAO;YACP,aAAa,EAAE,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI;YAC1D,MAAM;YACN,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;YAC5C,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC;YACxB,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE;gBACR,SAAS,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;gBAChF,KAAK,EAAE,aAAa,CAAC,MAAM;gBAC3B,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAChD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CACtG;aACF;YACD,YAAY,EAAE,KAAK,CAAC,WAAW;SAChC;KACF,CAAA;AACH,CAAC;AAWD;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,KASjB;IACC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC5B,sFAAsF;QACtF,0FAA0F;QAC1F,MAAM,OAAO,GACX,KAAK,CAAC,GAAG,KAAK,IAAI;YAChB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,wBAAwB,CAAC;gBACxB,GAAG,EAAE,KAAK,CAAC,SAAS;gBACpB,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;gBACjB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAA;QACpB,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,KAAK,EAAE,eAAe;YACtB,OAAO;YACP,gBAAgB,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe;SACrF,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IAE9E,IAAI,SAAS,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QACzC,yFAAyF;QACzF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAA;IAClH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QAC3C,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,KAAK,EAAE,gBAAgB;YACvB,OAAO;YACP,gBAAgB,EAAE,OAAO,CAAC,eAAe;SAC1C,CAAA;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,wFAAwF;QACxF,wFAAwF;QACxF,yFAAyF;QACzF,iEAAiE;QACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,KAAK,IAAI,CAAC,CAAA;QACnH,OAAO;YACL,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,eAAe;YAC1D,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC;YACpC,gBAAgB,EAAE,EAAE;SACrB,CAAA;IACH,CAAC;IAED,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1E,MAAM,QAAQ,GACZ,gBAAgB,KAAK,IAAI;QACzB,gBAAgB,CAAC,MAAM,KAAK,QAAQ;QACpC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,KAAK,IAAI,CAAC,CAAA;IAC5E,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;QAC7C,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,oBAAoB;QACnE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC;QACpC,gBAAgB,EAAE,EAAE;KACrB,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAChB,KAOC,EACD,SAA0B;IAE1B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QAC/C,MAAM,CAAC,UAAU,CAAC,GAAG,wBAAwB,CAAC;YAC5C,GAAG,EAAE,KAAK,CAAC,SAAS;YACpB,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;YACjB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAA;QACF,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,UAAU,CAAA;IACjD,CAAC;IACD,OAAO,oBAAoB,CAAC;QAC1B,OAAO,EAAE;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;SAChD;QACD,GAAG,EAAE,KAAK,CAAC,SAAS;QACpB,SAAS;QACT,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,MAA0B,EAC1B,GAAmB,EACnB,SAAyB,EACzB,OAAsB,EACtB,WAAmB;IAEnB,MAAM,cAAc,GAAG,QAAQ,CAAC;QAC9B,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS;QACT,OAAO;QACP,WAAW;QACX,GAAG,EAAE,IAAI;KACV,CAAC,CAAA;IACF,OAAO,MAAM,CAAC;QACZ,EAAE,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE;QAC3B,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,IAAI;QACZ,cAAc;QACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS;QACT,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,OAAO,CACd,GAAmB,EACnB,GAAmB,EACnB,SAAyB,EACzB,OAAsB,EACtB,WAAmB;IAEnB,MAAM,cAAc,GAAG,QAAQ,CAAC;QAC9B,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,GAAG,CAAC,MAAM;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS;QACT,OAAO;QACP,WAAW;QACX,GAAG;KACJ,CAAC,CAAA;IACF,OAAO,MAAM,CAAC;QACZ,EAAE,EAAE,OAAO,GAAG,CAAC,KAAK,EAAE;QACtB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,GAAG,CAAC,MAAM;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;QACnB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,cAAc;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS;QACT,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAWf;IACC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAC9D,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,OAAO,CAAA;IAC5C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,MAAM;QACnC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK;QACjC,yBAAyB,EAAE,eAAe,CAAC,MAAM,KAAK,QAAQ;QAC9D,OAAO,EAAE,eAAe;QACxB,MAAM;QACN,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW;QACxD,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;QAChD,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,gBAAgB;QACvD,OAAO;QACP,WAAW,EAAE,EAAE;KAChB,CAAA;AACH,CAAC;AAED,mFAAmF;AAEnF;;;;;GAKG;AACH,SAAS,UAAU,CAAC,QAAwB,EAAE,OAAsB;IAClE,MAAM,IAAI,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;IAC9E,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IAC/F,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IAChF,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACpG,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAA;AAClG,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAiB,EAAE,OAAsB;IACnE,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC5D,OAAO,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,OAAsB,EAAE,MAAc;IACxD,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACjE,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,MAAM,CAAA;IACrC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;AAChD,CAAC;AAED,oFAAoF;AAEpF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,KAK/B;IACC,IAAI,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAClC,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,KAAK,EAA8B,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;SACvE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtF,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;IAC5B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAA;IAC9G,MAAM,MAAM,GAAG,SAAS,IAAI,MAAM,CAAA;IAClC,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,WAAW;QAC1B,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAClB,aAAa,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3E,YAAY,EAAE,SAAS,KAAK,SAAS;QACrC,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;KACpD,CAAA;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,sBAAsB,CAAC,SAA0B;IACxD,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAA;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY;SACjC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACrI,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IACzD,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,IAAiB,EAAE,KAAqC;IACxE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,EAAE,CAAA;IACjF,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC;SAC5C,GAAG,CAAC,CAAC,IAAI,EAAuB,EAAE,CAAC,CAAC;QACnC,eAAe,EAAE,IAAI;QACrB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,aAAa,EAAE,IAAI,CAAC,YAAY;QAChC,YAAY,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACtC,OAAO,EAAE,6BAA6B;KACvC,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;AAClF,CAAC;AAED,mFAAmF;AAEnF,MAAM,WAAW,GAA4C;IAC3D,iBAAiB,EAAE,CAAC;IACpB,aAAa,EAAE,CAAC;IAChB,QAAQ,EAAE,CAAC;IACX,aAAa,EAAE,CAAC;CACjB,CAAA;AAED,MAAM,SAAS,GAA+C,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAA;AAEnF;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAiB,EAAE,KAAkB;IAChE,OAAO,CACL,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;QACpD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5C,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QACrC,cAAc,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACvD,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAClC,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAA;IAC5B,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY,EAAE,KAAa;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAA;IACtC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA;IACxC,IAAI,SAAS,IAAI,UAAU;QAAE,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClF,IAAI,SAAS,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvD,OAAO,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,OAAO,CAAC,KAA6B;IAC5C,MAAM,KAAK,GAAG,CAAC,MAAqB,EAAU,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAA;IACtG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAA;IACrE,OAAO;QACL,OAAO;QACP,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO;QAC5B,eAAe,EAAE,KAAK,CAAC,iBAAiB,CAAC;QACzC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;QAC3B,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;QACjC,KAAK,EAAE,KAAK,CAAC,MAAM;KACpB,CAAA;AACH,CAAC;AAED,mFAAmF;AAEnF,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAC7B,2EAA2E;AAC3E,MAAM,mBAAmB,GAAG,CAAC,CAAA;AAE7B,MAAM,YAAY,GAAmC;IACnD,aAAa;IACb,eAAe;IACf,eAAe;IACf,aAAa;IACb,eAAe;IACf,OAAO;IACP,QAAQ;IACR,eAAe;CAChB,CAAA;AAED,MAAM,YAAY,GAA4C;IAC5D,iBAAiB,EAAE,gCAAgC;IACnD,aAAa,EAAE,4BAA4B;IAC3C,QAAQ,EAAE,yBAAyB;IACnC,aAAa,EAAE,4BAA4B;CAC5C,CAAA;AAED,MAAM,SAAS,GAAyD;IACtE,iBAAiB,EAAE,iBAAiB;IACpC,aAAa,EAAE,aAAa;IAC5B,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,aAAa;CAC7B,CAAA;AAED,MAAM,WAAW,GAA8C;IAC7D,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,wBAAwB;IAC/B,KAAK,EAAE,wBAAwB;IAC/B,OAAO,EAAE,0BAA0B;CACpC,CAAA;AAED,4FAA4F;AAC5F,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,MAAc;IACvE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,MAAkD,EAAU,EAAE;QACtF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACrC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACrE,CAAC,CAAA;IACD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,gBAAgB,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;QAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;KACzB,CAAC,CACH,CAAA;IACD,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;QACxC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,SAAS;KACrC,CAAC,CACH,CAAA;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAA;IACrG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAEpE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACd,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACxE,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;IAChC,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;QAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACd,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QACxE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YAC1F,IAAI,IAAI,CAAC,KAAK,KAAK,sBAAsB;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,8BAA8B,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;YAC/H,IAAI,IAAI,CAAC,yBAAyB;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;YACjI,KAAK,MAAM,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACpE,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtD,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACpE,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC5C,CAAC;YACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YAC5C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAAE,CAAC;gBACtD,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACrH,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBACvC,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAA;YACxG,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CACR,OAAO,IAAI,CAAC,6BAA6B,EAAE;oBACzC,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,KAAK,EAAE,IAAI,CAAC,cAAc;oBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;iBACpD,CAAC,EAAE,CACL,CAAA;YACH,CAAC;QACH,CAAC;QACD,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,GAAG,kBAAkB,EAAE,CAAC,EAAE,CAAC,CAAA;QACtF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;AAChC,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAiB;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAA;AACnG,CAAC;AAED,kGAAkG;AAClG,SAAS,0BAA0B,CAAC,IAAiB;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,CAAA;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK;SACtB,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC;SAC7B,GAAG,CAAC,CAAC,WAAW,EAAU,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,WAAW,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,sBAAsB;QACzF,MAAM,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,EAAE;KACvG,CAAC,CAAC,CAAA;AACP,CAAC;AAED,SAAS,YAAY,CAAC,WAAmC;IACvD,MAAM,IAAI,GAAG,CAAC,IAAyB,EAAU,EAAE;QACjD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;IACnD,CAAC,CAAA;IACD,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5H,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,CAAA;AAC1C,CAAC"}

package/dist/verdict.d.ts

@@ -75,6 +75,12 @@ export interface RowAdmissionInput {
     readonly env: EnvFingerprint;
     readonly rows: readonly RowDeclaration[];
     readonly generatedAt: string;
+    /**
+     * The profile's own exemptions (`compatibility.json`). When one covers this exact
+     * module@version on this exact runtime, the loader admits the row, so we must not report it as
+     * blocked — a tool that disagrees with the running profile is worse than a tool that says nothing.
+     */
+    readonly exemptions?: Readonly<Record<string, readonly string[]>>;
 }
 /**
  * Row-level admission attribution.

package/dist/verdict.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../src/verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAGrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAsB,KAAK,MAAM,EAAE,MAAM,eAAe,CAAA;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,OAAO,KAAK,EACV,UAAU,EAEV,cAAc,EAEd,MAAM,EAEN,OAAO,EACP,cAAc,EACf,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,CAAA;IACrC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAID,kDAAkD;AAClD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAgH1E;AAED,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,GAAG,SAAS,OAAO,EAAE,CA6CvF;AAED,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,wFAAwF;IACxF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,iGAAiG;IACjG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;CAC/C;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,sBAAsB,CAAA;CACjG;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,cAAc,EAAE,CAAA;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,iBAAiB,GAAG,SAAS,OAAO,EAAE,CAiMrF;AAaD,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAoBnE;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAW7D;AAED,oEAAoE;AACpE,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CA6BtE;AAyWD,yEAAyE;AACzE,wBAAgB,WAAW,IAAI,SAAS,MAAM,EAAE,CAE/C"}
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../src/verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAIrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAsB,KAAK,MAAM,EAAE,MAAM,eAAe,CAAA;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,OAAO,KAAK,EACV,UAAU,EAEV,cAAc,EAEd,MAAM,EAEN,OAAO,EACP,cAAc,EACf,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,CAAA;IACrC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAID,kDAAkD;AAClD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAgH1E;AAED,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,GAAG,SAAS,OAAO,EAAE,CA6CvF;AAED,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,wFAAwF;IACxF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,iGAAiG;IACjG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;CAC/C;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,sBAAsB,CAAA;CACjG;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,cAAc,EAAE,CAAA;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAA;CAClE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,iBAAiB,GAAG,SAAS,OAAO,EAAE,CAoOrF;AAaD,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAoBnE;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAW7D;AAED,oEAAoE;AACpE,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CA6BtE;AAyWD,yEAAyE;AACzE,wBAAgB,WAAW,IAAI,SAAS,MAAM,EAAE,CAE/C"}

package/dist/verdict.js

@@ -10,6 +10,7 @@
  */
 import { gt, minVersion } from 'semver';
 import { evaluateAdmission } from './admission.js';
+import { isExempted } from './exemption.js';
 import { judgeCompatChannel } from './compat-channel.js';
 import { catalogFor, format } from './messages.js';
 import { judgeRangeShape } from './version-drift.js';
@@ -318,6 +319,38 @@ export function verdictsFromRowAdmission(input) {
                         .join(', ')} lists it under ${[...new Set(declaredBy.map((origin) => origin.field))].join('/')}; moving it to peerDependencies (or removing the declaring plugin) removes the shadowing copy`,
                 },
             ];
+        if (isExempted(input.exemptions ?? {}, module, first.version, runtime)) {
+            // The profile granted this exact pair; the loader will admit the row. Report the row as
+            // admitted and keep the risk visible, rather than a `blocked` the runtime disagrees with.
+            out.push(finish({
+                subject,
+                env: input.env,
+                conclusion: 'go',
+                confidence: { level: 'medium', basis: 'declared' },
+                reasons: [
+                    scopeReason,
+                    {
+                        code: 'admission-exempted',
+                        severity: 'warn',
+                        messageId: 'admission.exempted',
+                        params: { module, version: first.version ?? 'unknown', runtime },
+                    },
+                    ...admission.unmet.map((requirement) => unmetReason(requirement, runtime)),
+                ],
+                evidence: [rowEvidence, runtimeEvidence],
+                remediation: [
+                    {
+                        kind: 'probe',
+                        messageId: 'remediation.probe',
+                        params: { module },
+                        note: 'the exemption bypasses the declaration only; behaviour is still unproven',
+                    },
+                ],
+                missingEvidence: [],
+                generatedAt: input.generatedAt,
+            }));
+            continue;
+        }
         out.push(finish({
             subject,
             env: input.env,