@endora-commerce/cli 0.100.0

package/dist/rules/entry-scope.js

@@ -0,0 +1,404 @@
+/**
+ * CI check — every non-HTTP entry point establishes a scope (feature 072, T037).
+ *
+ * The HTTP path has had an ambient `TenantContext` since feature 050 and now
+ * gets a resolution scope with it (`kernel/request-scope-hook.ts`). Everything
+ * else that starts an execution of its own had no such guarantee: measured
+ * before this feature, the 15 CLI scripts mentioned `TenantContext` **zero**
+ * times, two of the four interval sweeps established nothing at the timer, and
+ * the webhook queue's consumer established nothing at all. They worked because
+ * the rows they happen to touch carry no automatic tenant filter — an accident
+ * of entity classification, not a property of the code.
+ *
+ * ## The population is **sites**, not files (issue #237)
+ *
+ * This check used to classify *files*, and said so: "a file that opens a scope
+ * somewhere and forgets it elsewhere is a code-review problem". Code review is
+ * what missed it. `kernel/lifecycle/registry-cache.ts` read `module_registrations`
+ * and `settings` from a Redis pub/sub handler with no scope at all, and this
+ * check reported the file `scoped` off a correctly-wrapped `setInterval` 130
+ * lines below (issue #235). The file-level answer is a disjunction — one right
+ * entry point vouches for every other one in the same file — and six files in
+ * this tree carry more than one, which is precisely where a disjunction can hide
+ * something.
+ *
+ * So an entry point is a **site**, and each site answers for itself. Six classes:
+ *
+ *   - **CLI scripts** — anything under a `scripts/` directory in `src/`;
+ *   - **Declared programs** — a `src/` file `package.json` runs as a process of
+ *     its own (see below);
+ *   - **BullMQ consumers** — each `new Worker(...)` construction;
+ *   - **Interval sweeps** — each repeating timer. `interval` is the *shape*, not
+ *     the constructor: `setInterval`, and equally a `setTimeout` whose callback
+ *     re-arms it. It is also the word the scope itself uses
+ *     (`ScopeEntryPointKind`), which is why the label stays;
+ *   - **Pub/sub handlers** — each `x.on('message', …)`. A message delivered off a
+ *     socket the composition opened has no caller to inherit a context from;
+ *     this is the class issue #235 was in, and the class this check had no
+ *     population for at all;
+ *   - **Process-lifecycle handlers** — each `process.on/once(...)`. Same
+ *     argument, and `kernel/container.ts`'s `installShutdownDisposal` is the
+ *     site that proves the file-level population could not reach it:
+ *     `container.ts` is under no `scripts/` directory, is no declared program,
+ *     constructs no `Worker` and starts no timer, so *no* file-level class ever
+ *     contained it.
+ *
+ * The first two are file-level by nature — the entry is the file's own top-level
+ * execution — and they keep one site per file. Their scope question is asked over
+ * the file **minus** the callbacks of the site-shaped entry points in it, so a
+ * program cannot read as scoped off a scope its Worker opens. That subtraction is
+ * the file-level disjunction, removed at its last hiding place.
+ *
+ * Boot reconcilers are a seventh class and are *not* detectable: "a function the
+ * composition root awaits before serving" has no syntactic marker. They are
+ * covered by review and by `composition.ts` calling `enterSystemScope` for each
+ * of the four.
+ *
+ * ## What "this site opens a scope" means, and how far it looks
+ *
+ * A site is scoped when `enterSystemScope` / `enterPlatformScope` is called in
+ * its own callback, or in a function bound **in the same file** that the callback
+ * calls — **one hop**, the depth `check-port-catches` follows `this.<method>()`
+ * to. Deeper needs a call graph, which is a different project.
+ *
+ * Binding an identifier callback is **not** one of those hops: in
+ * `new Worker(QUEUE, processor, …)`, `processor` *is* the callback, and half the
+ * queues in this tree are written that way. The hop is counted from the callback
+ * body. So what this cannot see, stated rather than discovered later:
+ *
+ *   - a callback that delegates to an **imported** function which opens the
+ *     scope — reported as unscoped, and the ledger is where that gets answered;
+ *   - a callback that delegates to a **method** (`this.handleMessage(…)`): only
+ *     module-level bindings are resolved;
+ *   - a scope opened two hops below the callback body.
+ *
+ * All three fail *loudly* — a site reads unscoped — which is the direction a
+ * blind spot has to fail in.
+ *
+ * ## Why `package.json` is the second source of the population (issue #228)
+ *
+ * The shape classes were written from what the tree held when FR-020 landed.
+ * `src/seeds/dev-catalog-seed.ts` is none of them: it is a top-level `main()`
+ * that truncates and repopulates a dozen modules' tables, run by
+ * `pnpm --filter backend run seed:dev`, and it established no scope. The check
+ * printed `unscoped=0` — and that zero said nothing about the file, because the
+ * file was never in the population.
+ *
+ * That is issue #215's failure by another mechanism: there the *walks* came back
+ * short, here the *population definition* excluded a real entry point. Both
+ * report a green that means "not looking", and nothing in the output told the
+ * two apart.
+ *
+ * So the population has a second source, and it is not another shape: it is the
+ * repository's own declaration of what it runs. Every `src/**.ts` path named by
+ * a script in `backend/package.json` is a process entry point by construction —
+ * `pnpm run <name>` starts it, no HTTP request is involved, and nothing above it
+ * can open a scope on its behalf.
+ *
+ * The two sources are a **union**, and the seed is the standing proof that the
+ * declaration half is load-bearing: it is under no `scripts/` directory and no
+ * shape class contains it, so without the `package.json` source it is not in
+ * the population at all.
+ *
+ * The other half used to be cited to `backfill-quote-channel.ts`, a `scripts/`
+ * file run directly with no package script of its own — and it was the *only*
+ * one, so D-167 deleting it took the citation with it. Today every `scripts/`
+ * file is also a declared program, which means the `scripts/` half adds no site
+ * this run would otherwise miss. It stays, and the reason is the shape of the
+ * two sources rather than today's count: a `scripts/` file is a process entry
+ * point because of what it *is*, while a `package.json` entry says only what
+ * this repository currently chooses to run. An author who adds a maintenance
+ * script and invokes it with `tsx` — which is exactly how the deleted file was
+ * run — is back in the case the union exists for, and the check would report
+ * `unscoped=0` about a file it never opened. Dropping the shape half would make
+ * that silence possible again to save nothing.
+ *
+ * ## One analysis, two hosts
+ *
+ * This file is the analysis (`specs/101-endora-check/contracts/package-scope-layout.md`
+ * §6). `backend/scripts/check-entry-scope.ts` hosts it over this repository's
+ * module walk roots and holds `NO_SCOPE_NEEDED`, which is a ledger of *this*
+ * tree's sites; `endora check` hosts it over one module package, where the
+ * ledger is the package's own and is applied by `check/ledger.ts` over every
+ * rule at once. So {@link violationsOf} and {@link staleAllowances} take the
+ * ledger as an argument rather than reading one: a ledger read from inside the
+ * analysis is a ledger only one host can have.
+ */
+import { readdirSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import ts from 'typescript';
+import { callbackOf, calleeName, enclosingName, findRepeatingTimerSites, localFunctions, MODULE_SCOPE, parseScript, receiverName, stringLiteralOf, } from '../lib/repeating-timers.js';
+/** The two functions that open a scope. Nothing else counts as establishing one. */
+const SCOPE_ENTRY_FUNCTIONS = new Set([
+    'enterPlatformScope',
+    'enterSystemScope',
+]);
+/** Process-lifecycle events: a handler for one of these has no caller either. */
+const PROCESS_EVENTS = new Set([
+    'SIGINT',
+    'SIGTERM',
+    'SIGHUP',
+    'SIGQUIT',
+    'SIGUSR1',
+    'SIGUSR2',
+    'beforeExit',
+    'exit',
+    'uncaughtException',
+    'unhandledRejection',
+]);
+/** The scheduler slot of a file-level site: the file's own top-level execution. */
+export const FILE_SCOPE = '<file>';
+/**
+ * `<file>:<scheduler>:<construct>` — the ledger key, and the identity of a site.
+ *
+ * Line-independent, in the idiom of `check-entry-presence.ts`'s `keyOf`: moving
+ * code inside a file does not invalidate an entry, and re-opening the hole
+ * somewhere else does not silently inherit one.
+ *
+ * A key may cover **more than one site**: `index.ts` registers `SIGINT` and
+ * `SIGTERM` in the same function with the same construct, and one entry
+ * answering for both is what a reader wants there. It is deliberate, and it is
+ * the granularity's floor — two sites the key cannot tell apart are two sites
+ * one reason has to be true of.
+ */
+export function keyOf(site) {
+    return `${site.file}:${site.scheduler}:${site.construct}`;
+}
+/**
+ * Every TypeScript source under `dir` — colocated tests included, which is the
+ * one difference from the other walks in this estate and is deliberate: a test
+ * that starts a worker is an entry point too.
+ *
+ * Exported because the population is part of the rule, not part of a host.
+ */
+export function collectEntryScopeSources(dir, out = []) {
+    for (const name of readdirSync(dir)) {
+        const full = join(dir, name);
+        if (statSync(full).isDirectory()) {
+            if (name === 'node_modules' || name === 'dist')
+                continue;
+            collectEntryScopeSources(full, out);
+        }
+        else if (name.endsWith('.ts') && !name.endsWith('.test.ts')) {
+            out.push(full);
+        }
+    }
+    return out;
+}
+/** Every spelling a site-shaped entry point can start with. Loose on purpose — see below. */
+const SITE_TOKENS = /new Worker|setInterval|setTimeout|\.\s*(?:on|once)\s*\(/;
+/**
+ * Could this source hold a site-shaped entry point at all?
+ *
+ * Parsing all 1458 files under `src/` to answer "no" for most of them costs more
+ * than the whole check; 54 of them contain one of these tokens anywhere, comments
+ * included, and those are the ones that reach the parser.
+ *
+ * Deliberately **over**-inclusive, and only over-inclusive: this is a raw-text
+ * test, so a comment quoting `new Worker(...)` costs one parse and nothing else —
+ * the syntax tree still decides. A second, stripped pass would save four of those
+ * 54 parses and pay for it with the one failure mode this check exists to remove:
+ * a regex-based stripper mangling a line and silently taking a real site out of
+ * the population.
+ */
+function mayHoldSite(source) {
+    return SITE_TOKENS.test(source);
+}
+/**
+ * The `src/` files `package.json` runs as a process of their own.
+ *
+ * Read out of the **command**, not out of the script name: `seed:dev` is
+ * `pnpm run migration:up && tsx --env-file-if-exists=.env src/seeds/…`, so the
+ * entry point is the second of two commands behind three flags. `dist/` paths
+ * are ignored (this check reads sources) and so are `scripts/` paths outside
+ * `src/`, which the walk never sees.
+ */
+export function declaredProgramEntryPoints(packageJson) {
+    const parsed = JSON.parse(packageJson);
+    const found = new Set();
+    for (const command of Object.values(parsed.scripts ?? {})) {
+        for (const match of command.matchAll(/\bsrc\/[\w./@-]+\.ts\b/g))
+            found.add(match[0]);
+    }
+    return [...found].sort();
+}
+const NOTHING_DECLARED = new Set();
+/**
+ * The path as the ledger spells it: everything from the last `/src/` on.
+ * Derived from the path itself rather than from `SRC_ROOT` so the predicates
+ * here are testable without knowing where the checkout lives.
+ *
+ * **It is the default and no longer the only answer** (feature 080, T040a). A
+ * module that has become a workspace package lives at
+ * `packages/modules/<id>/src/…`, where "everything from the last `/src/` on"
+ * drops the module and leaves `src/services/x.ts` — a key two packages would
+ * share. The CLI therefore passes `resolveModuleLayout().displayOf`, which
+ * keeps the application's own spelling byte-for-byte and answers repo-relative
+ * for anything outside it. The default stays for the predicates' own tests,
+ * which have no checkout to resolve.
+ */
+export function relative(file) {
+    const marker = file.lastIndexOf('/src/');
+    return marker === -1 ? file : file.slice(marker + 1);
+}
+/**
+ * Which file-level class this file belongs to, or `null` for neither.
+ *
+ * A file under `scripts/` that is *also* declared stays `cli`: fourteen of the
+ * fifteen are both, and moving them would make the count move for no reason.
+ */
+export function fileLevelKind(file, declared = NOTHING_DECLARED, pathOf = relative) {
+    if (/\/scripts\//.test(file))
+        return 'cli';
+    if (declared.has(pathOf(file)))
+        return 'program';
+    return null;
+}
+/**
+ * Does `root` open a scope — directly, or one local hop down?
+ *
+ * The hop resolves a called identifier against the file's own function bindings,
+ * which is how a `new Worker(QUEUE, processor)` whose `processor` wraps itself is
+ * read correctly. It stops there on purpose; see the header for what that cannot
+ * see, and why every one of those cases fails loudly rather than quietly.
+ */
+function opensScope(root, bindings, search) {
+    let found = false;
+    const visit = (node) => {
+        if (found || search.skip.has(node))
+            return;
+        if (ts.isCallExpression(node)) {
+            const name = calleeName(node);
+            if (name !== null) {
+                if (SCOPE_ENTRY_FUNCTIONS.has(name)) {
+                    found = true;
+                    return;
+                }
+                if (search.depth > 0 && ts.isIdentifier(node.expression)) {
+                    const target = bindings.get(name);
+                    if (target !== undefined && opensScope(target, bindings, { ...search, depth: 0 })) {
+                        found = true;
+                        return;
+                    }
+                }
+            }
+        }
+        node.forEachChild(visit);
+    };
+    visit(root);
+    return found;
+}
+/** Every `new Worker(...)`, pub/sub handler and process-lifecycle handler in a file. */
+function findConstructedSites(sf, bindings) {
+    const sites = [];
+    const at = (node) => ({
+        line: sf.getLineAndCharacterOfPosition(node.getStart(sf)).line + 1,
+        scheduler: enclosingName(node) ?? MODULE_SCOPE,
+    });
+    const visit = (node) => {
+        if (ts.isNewExpression(node) &&
+            ts.isIdentifier(node.expression) &&
+            node.expression.text === 'Worker') {
+            sites.push({
+                kind: 'worker',
+                construct: 'new Worker',
+                node,
+                // BullMQ's processor is the second argument; the first is the queue name.
+                callback: callbackOf(node.arguments?.[1], bindings),
+                ...at(node),
+            });
+        }
+        if (ts.isCallExpression(node)) {
+            const name = calleeName(node);
+            const event = node.arguments[0] === undefined ? null : stringLiteralOf(node.arguments[0]);
+            if (name === 'on' && event === 'message') {
+                sites.push({
+                    kind: 'message',
+                    construct: "on('message')",
+                    node,
+                    callback: callbackOf(node.arguments[1], bindings),
+                    ...at(node),
+                });
+            }
+            else if ((name === 'on' || name === 'once') &&
+                receiverName(node) === 'process' &&
+                // An event this cannot read as a literal is *in* — `container.ts` loops
+                // over its signals, and a population that required a literal would have
+                // no site for the one file that motivated the class.
+                (event === null || PROCESS_EVENTS.has(event))) {
+                sites.push({
+                    kind: 'process',
+                    construct: name === 'on' ? 'process.on' : 'process.once',
+                    node,
+                    callback: callbackOf(node.arguments[1], bindings),
+                    ...at(node),
+                });
+            }
+        }
+        node.forEachChild(visit);
+    };
+    sf.forEachChild(visit);
+    return sites;
+}
+/**
+ * Every entry site in one file, with its own scope answer.
+ *
+ * The top of the analysis: source **text** in, sites out. A caller — a test
+ * especially — decides what the repository says it runs by passing `declared`,
+ * the set `declaredProgramEntryPoints` returned.
+ */
+export function findEntrySites(file, source, declared = NOTHING_DECLARED, pathOf = relative) {
+    const fileKind = fileLevelKind(file, declared, pathOf);
+    if (fileKind === null && !mayHoldSite(source))
+        return [];
+    const path = pathOf(file);
+    const sf = parseScript(file, source);
+    const bindings = localFunctions(sf);
+    const raw = [
+        ...findRepeatingTimerSites(sf).map((timer) => ({
+            kind: 'interval',
+            construct: timer.construct,
+            node: timer.call,
+            callback: timer.callback,
+            line: timer.line,
+            scheduler: timer.scheduler,
+        })),
+        ...findConstructedSites(sf, bindings),
+    ];
+    const sites = raw.map((site) => ({
+        file: path,
+        kind: site.kind,
+        construct: site.construct,
+        scheduler: site.scheduler,
+        line: site.line,
+        // A callback this cannot bind to a function in this file is not vouched for.
+        scoped: site.callback !== null &&
+            opensScope(site.callback, bindings, { depth: 1, skip: new Set() }),
+    }));
+    if (fileKind !== null) {
+        // The file's own top-level execution, asked over everything **except** the
+        // bodies that belong to the sites above: a program that reads as scoped off
+        // the `enterSystemScope` inside its Worker is the file-level disjunction
+        // this check was rewritten to remove.
+        const skip = new Set(raw.map((site) => site.callback).filter((cb) => cb !== null));
+        sites.unshift({
+            file: path,
+            kind: fileKind,
+            construct: fileKind,
+            scheduler: FILE_SCOPE,
+            line: 1,
+            scoped: opensScope(sf, bindings, { depth: 0, skip }),
+        });
+    }
+    sites.sort((a, b) => a.line - b.line);
+    return sites;
+}
+export function violationsOf(sites, allowed) {
+    return sites.filter((site) => !site.scoped && allowed[keyOf(site)] === undefined);
+}
+/** Ledger entries that no longer name an unscoped entry site. */
+export function staleAllowances(sites, allowed) {
+    const unscoped = new Set(sites.filter((site) => !site.scoped).map(keyOf));
+    return Object.keys(allowed).filter((key) => !unscoped.has(key));
+}
+//# sourceMappingURL=entry-scope.js.map

package/dist/rules/entry-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry-scope.js","sourceRoot":"","sources":["../../src/rules/entry-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6HG;AACH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EACL,UAAU,EACV,UAAU,EACV,aAAa,EACb,uBAAuB,EAEvB,cAAc,EACd,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,eAAe,GAChB,MAAM,4BAA4B,CAAC;AAEpC,oFAAoF;AACpF,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,oBAAoB;IACpB,kBAAkB;CACnB,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,YAAY;IACZ,MAAM;IACN,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AAsBH,mFAAmF;AACnF,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC;AAcnC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,KAAK,CAAC,IAAe;IACnC,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW,EAAE,MAAgB,EAAE;IACtE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAS;YACzD,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6FAA6F;AAC7F,MAAM,WAAW,GAAG,yDAAyD,CAAC;AAE9E;;;;;;;;;;;;;GAaG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAyC,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,gBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC;AAKD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAgC,gBAAgB,EAChD,SAAuB,QAAQ;IAE/B,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AASD;;;;;;;GAOG;AACH,SAAS,UAAU,CACjB,IAAa,EACb,QAA2C,EAC3C,MAAmB;IAEnB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC3C,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpC,KAAK,GAAG,IAAI,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAClC,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;wBAClF,KAAK,GAAG,IAAI,CAAC;wBACb,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,KAAK,CAAC;AACf,CAAC;AAaD,wFAAwF;AACxF,SAAS,oBAAoB,CAAC,EAAiB,EAAE,QAA2C;IAC1F,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,CAAC,IAAa,EAAuC,EAAE,CAAC,CAAC;QAClE,IAAI,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAClE,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,YAAY;KAC/C,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IACE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;YACxB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;YAChC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,EACjC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,YAAY;gBACvB,IAAI;gBACJ,0EAA0E;gBAC1E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;gBACnD,GAAG,EAAE,CAAC,IAAI,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;QACD,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,eAAe;oBAC1B,IAAI;oBACJ,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;oBACjD,GAAG,EAAE,CAAC,IAAI,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;iBAAM,IACL,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,CAAC;gBAClC,YAAY,CAAC,IAAI,CAAC,KAAK,SAAS;gBAChC,wEAAwE;gBACxE,wEAAwE;gBACxE,qDAAqD;gBACrD,CAAC,KAAK,KAAK,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAC7C,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc;oBACxD,IAAI;oBACJ,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;oBACjD,GAAG,EAAE,CAAC,IAAI,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,MAAc,EACd,WAAgC,gBAAgB,EAChD,SAAuB,QAAQ;IAE/B,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAEpC,MAAM,GAAG,GAAc;QACrB,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC,GAAG,CAChC,CAAC,KAAK,EAAW,EAAE,CAAC,CAAC;YACnB,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CACH;QACD,GAAG,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC;KACtC,CAAC;IAEF,MAAM,KAAK,GAAgB,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,6EAA6E;QAC7E,MAAM,EACJ,IAAI,CAAC,QAAQ,KAAK,IAAI;YACtB,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;KACrE,CAAC,CAAC,CAAC;IAEJ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,sCAAsC;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAiB,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;QAClG,KAAK,CAAC,OAAO,CAAC;YACZ,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,UAAU;YACrB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAA2B,EAC3B,OAAyC;IAEzC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;AACpF,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,KAA2B,EAC3B,OAAyC;IAEzC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/rules/env-inputs.d.ts

@@ -0,0 +1,222 @@
+import ts from 'typescript';
+import { type EnvironmentConsumer, type EnvironmentInput, type EnvironmentInputOwner } from '@endora-commerce/contracts';
+/** The log prefix both hosts print under — one grammar, one spelling. */
+export declare const PREFIX = "[env-inputs]";
+export type EnvInputFindingKind = 'undeclared-input' | 'undeclared-module-input' | 'unread-input' | 'foreign-input' | 'module-declares-a-platform-input' | 'unresolvable-input-name' | 'generable-without-secret' | 'requirement-without-a-consequence' | 'module-input-without-a-settings-verdict' | 'stale-settings-verdict';
+/** What to do about each kind, printed above the findings of that kind. */
+export declare const REMEDIES: Readonly<Record<EnvInputFindingKind, string>>;
+/** One `process.env` / `import.meta.env` member access the walk saw. */
+export interface EnvironmentRead {
+    /** The variable, or `null` where the name could not be resolved to a literal. */
+    readonly name: string | null;
+    /** Repository-relative, POSIX separators. */
+    readonly file: string;
+    readonly line: number;
+    /** Which tree the file belongs to. */
+    readonly consumer: EnvironmentConsumer;
+    /** How the name was written, for the message. */
+    readonly shape: 'literal' | 'const' | 'imported-const' | 'computed';
+    /**
+     * The module whose sources the file is, or `undefined` for an application's
+     * own file.
+     *
+     * It is what makes the resolution rule — *the platform's declaration, the
+     * application's, and the reading module's own, never another module's* —
+     * expressible at all (`specs/117-instance-bring-up/` T3-B). Without it a read
+     * is only ever a `(name, consumer)` pair, and one module's declaration
+     * silently covers every other module's read of the same name: a client
+     * installing the reader and not the declarer would then be short a variable
+     * this check had reported green.
+     */
+    readonly module?: string | undefined;
+}
+/** One author's declaration, as the host loaded it. */
+export interface DeclarationSource {
+    /** The author shipping it — what `owner` is reconciled against. */
+    readonly author: EnvironmentInputOwner;
+    /** Repository-relative path, for the message. */
+    readonly file: string;
+    readonly inputs: readonly EnvironmentInput[];
+}
+export interface EnvInputFinding {
+    readonly kind: EnvInputFindingKind;
+    /** The variable, or the declaration that has no name to give. */
+    readonly name: string;
+    /** Where it was found — a source file for a read, a declaration otherwise. */
+    readonly where: string;
+    readonly detail: string;
+}
+/**
+ * What a module's environment input is, once somebody has judged it
+ * (`contracts/environment-inputs.md` §4.2).
+ *
+ * `bootstrap` is a value the platform needs **before the settings store can be
+ * read**; `configuration` is a knob that belongs to the Settings module and is
+ * wearing an environment variable. The second is not an exemption — it is debt
+ * with an owner, and the ledger exists to make the population drainable rather
+ * than to bless it (§4.3, §4.4).
+ */
+export interface ModuleEnvironmentVerdict {
+    readonly classification: 'bootstrap' | 'configuration';
+    /** Why it is not a Setting. One question, answered in a sentence. */
+    readonly reason: string;
+}
+/** One module's shard of the Settings-debt ledger, as the host loaded it. */
+export interface ModuleVerdictShard {
+    readonly moduleId: string;
+    /** Keyed by the variable's name. */
+    readonly entries: Readonly<Record<string, ModuleEnvironmentVerdict>>;
+}
+export interface EnvInputsInput {
+    readonly declarations: readonly DeclarationSource[];
+    readonly reads: readonly EnvironmentRead[];
+    /**
+     * The Settings-debt ledger, or `undefined` where the caller is not asking.
+     *
+     * The two states are deliberately distinct. `[]` is *"the ledger was read and
+     * holds nothing"*, under which every module-owned declaration lacks a verdict;
+     * `undefined` is *"this caller is not reconciling the ledger"*, which is what
+     * a red proof about some other finding wants. Collapsing them would make a
+     * fixture that says nothing about the ledger report on it anyway.
+     *
+     * The host always passes it, and refuses a ledger directory that is not there
+     * rather than passing `undefined` — a missing ledger must never be the quiet
+     * path.
+     */
+    readonly settingsVerdicts?: readonly ModuleVerdictShard[] | undefined;
+}
+export interface EnvInputsResult {
+    readonly findings: readonly EnvInputFinding[];
+    /** Every declared input, across authors. */
+    readonly declared: number;
+    /** Consumers that contributed both a declaration and at least one read site. */
+    readonly consumersCovered: readonly EnvironmentConsumer[];
+    /** Inputs declared by a module author, of {@link EnvInputsResult.declared}. */
+    readonly declaredByModules: number;
+    /** Module ids that declare at least one input. */
+    readonly modulesDeclaring: readonly string[];
+}
+/** The whole rule, pure over the record, so a proof enters where a run does. */
+export declare function checkEnvironmentInputs(input: EnvInputsInput): EnvInputsResult;
+/** A file the walk opened, with the tree it belongs to. */
+export interface EnvSourceFile {
+    /** Repository-relative, POSIX separators. */
+    readonly path: string;
+    readonly text: string;
+    readonly consumer: EnvironmentConsumer;
+    /** The module this file belongs to, where the host could attribute it. */
+    readonly module?: string | undefined;
+}
+/**
+ * The prefix Vite requires on a variable it takes from the environment.
+ *
+ * Vite's own `envPrefix`, at its default. A name without it is one of Vite's
+ * build-mode constants and is not an operator input — see the header.
+ */
+export declare const VITE_ENVIRONMENT_PREFIX = "VITE_";
+/**
+ * Every string constant a file exports or declares at module scope.
+ *
+ * Only a bare `const X = '…'`, deliberately. A `let`, a computed initialiser
+ * and a member of an object literal are all outside it: each is a value that
+ * can differ from what the reader sees, and the whole point of resolving a
+ * constant here is that its value is decidable from the text.
+ */
+export declare function stringConstants(source: ts.SourceFile): ReadonlyMap<string, string>;
+/**
+ * Resolve a relative import specifier against the importing file's directory,
+ * in the walk's own key space.
+ *
+ * POSIX-only and extension-tolerant: the tree writes `./env.mjs` from a `.ts`
+ * file (ESM's own rule) and `./env.js` where the target is `env.ts`. A bare
+ * specifier resolves to nothing here, which is right — a constant published by
+ * a package is not text this walk read.
+ */
+export declare function resolveRelative(fromFile: string, specifier: string): string | null;
+/**
+ * Every environment read in the walk, with its name resolved where it can be.
+ *
+ * The file text is the entry point (issue #130), so a red proof drives exactly
+ * what a real run drives.
+ */
+export declare function collectEnvironmentReads(files: readonly EnvSourceFile[]): readonly EnvironmentRead[];
+/** Raised when a declaration file cannot be read as one; a caller turns it into exit 2. */
+export declare class DeclarationUnreadableError extends Error {
+    readonly name = "DeclarationUnreadableError";
+}
+/**
+ * A declaration read out of its own **source text**, never out of a build.
+ *
+ * ## Why not `import()` the emitted module
+ *
+ * A module package resolves through its `exports` map at its build output
+ * (D-164), so a check that imported one would answer about the previous build —
+ * the `stale-artefact` class `check:action-route-permissions` had to grow a
+ * refusal for, measured three times as a **false green** on that check. Reading
+ * the text removes the question rather than guarding it: the bytes this run
+ * judged are the bytes on disk, and the check needs no build to run at all.
+ * The `exports` subpath is still the path the *runtime* readers take, and
+ * `test/unit/packages/platform-env-subpath.test.ts` is what holds it open.
+ *
+ * ## What it evaluates, and what it refuses
+ *
+ * A declaration is data: an array of object literals over strings, booleans,
+ * arrays and nested objects. Nothing else is accepted — no identifier, no
+ * spread, no call, no concatenation — and an expression outside that grammar is
+ * a refusal rather than a value guessed at, because a declaration this analysis
+ * cannot read in full is one it must not report on (issue #113).
+ *
+ * A string is taken literally, so `'\n'` and a template literal with no
+ * substitution both arrive as the text they denote. `as const` is unwrapped:
+ * it changes a type and no value.
+ */
+export declare function evaluateDeclarationArray(text: string, fileName: string, exportName: string): readonly unknown[];
+/**
+ * A module's `env` declaration, read out of its `manifest.ts` **source text**.
+ *
+ * ## Why text and not the built manifest
+ *
+ * The same reason {@link evaluateDeclarationArray} gives, with more force: a
+ * module package resolves through its own `exports` map at its build output
+ * (D-164), so a reader that imported one would answer about the previous build.
+ * That is the `stale-artefact` class `check:action-route-permissions` had to
+ * grow a refusal for after three measured false greens — an `env` entry edited
+ * and not rebuilt would be judged as though it were not there, which for *this*
+ * check is a false green in the direction that matters: a declaration the author
+ * just wrote, reported as missing, or one they just deleted, reported as
+ * present. Reading the text removes the question instead of guarding it, and the
+ * run needs no build at all.
+ *
+ * ## What it reads, and what it refuses
+ *
+ * Only the `env` property of the object literal handed to `defineModuleManifest`,
+ * and only as data. Everything else in the file is ignored, which is not a
+ * convenience: `cms`' manifest reads `process.env['CMS_PB_BREAKPOINT_TABLET_MIN']`
+ * in its own settings defaults, so a manifest is **not** a literal file and a
+ * reader that demanded one would refuse the very module whose declaration this
+ * feature exists to collect.
+ *
+ * `null` is "this module declares no environment input", which is true of most
+ * modules and is not a finding. A manifest with **no** `defineModuleManifest`
+ * call is a {@link DeclarationUnreadableError}: a module whose manifest this run
+ * cannot find is one it cannot report on, and reading that as "declares nothing"
+ * is the silent skip the estate is against (issue #113).
+ */
+export declare function evaluateManifestEnvDeclaration(text: string, fileName: string): readonly unknown[] | null;
+/**
+ * The Settings-debt ledger, read off disk one shard per module
+ * (`contracts/environment-inputs.md` §4.2).
+ *
+ * Sharded because the debt is the module's: a repair that moves
+ * `INVENTORY_LOW_STOCK_RECIPIENT` into Settings touches `inventory`'s manifest
+ * and `inventory`'s shard, and nothing else. It is `check:module-boundary`'s
+ * shape, one population over.
+ *
+ * Throws rather than returning a partial answer, and every throw is a caller's
+ * exit 2: a ledger this run could not read in full is one it must not report
+ * on, because the missing half reads as *"nobody has judged this"* for one
+ * direction and as *"this entry describes nothing"* for the other — two
+ * confident findings out of one silence.
+ */
+export declare function loadModuleVerdictShards(directory: string): Promise<ModuleVerdictShard[]>;
+//# sourceMappingURL=env-inputs.d.ts.map

package/dist/rules/env-inputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-inputs.d.ts","sourceRoot":"","sources":["../../src/rules/env-inputs.ts"],"names":[],"mappings":"AA2GA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,4BAA4B,CAAC;AAEpC,yEAAyE;AACzE,eAAO,MAAM,MAAM,iBAAiB,CAAC;AAErC,MAAM,MAAM,mBAAmB,GAC3B,kBAAkB,GAClB,yBAAyB,GACzB,cAAc,GACd,eAAe,GACf,kCAAkC,GAClC,yBAAyB,GACzB,0BAA0B,GAC1B,mCAAmC,GACnC,yCAAyC,GACzC,wBAAwB,CAAC;AAE7B,2EAA2E;AAC3E,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAmElE,CAAC;AAEF,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,gBAAgB,GAAG,UAAU,CAAC;IACpE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,uDAAuD;AACvD,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,cAAc,EAAE,WAAW,GAAG,eAAe,CAAC;IACvD,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,YAAY,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,CAAC;CACvE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC1D,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,kDAAkD;IAClD,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAiDD,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CAkT7E;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAQD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAU/C;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBlF;AA8BD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWlF;AAKD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,aAAa,EAAE,GAC9B,SAAS,eAAe,EAAE,CAyH5B;AAED,2FAA2F;AAC3F,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,SAAkB,IAAI,gCAAgC;CACvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,SAAS,OAAO,EAAE,CA6BpB;AA0DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,SAAS,OAAO,EAAE,GAAG,IAAI,CAoD3B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAwC9F"}