@forumulate/cli 0.8.0 → 0.10.0

package/dist/doctor/page-checks.js

@@ -0,0 +1,200 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rootRedirect = rootRedirect;
+exports.metaDescription = metaDescription;
+exports.favicon = favicon;
+exports.llmsProblems = llmsProblems;
+exports.llmsTxt = llmsTxt;
+const boilerplate_1 = require("./boilerplate");
+const probe_1 = require("./probe");
+/** A redirect needs a Location and nothing else; more than this is a page nobody sees. */
+const REDIRECT_BODY_LIMIT = 1024;
+/**
+ * `root-redirect`: a space's root either renders or moves permanently, cheaply.
+ *
+ * `GET /docs` answered `307` with a 66 KB HTML body and a canonical naming
+ * `/docs` (FMU-B06). A 307 says "this is temporary, keep asking me", so a
+ * crawler keeps the root as the indexed URL and never settles on the page it
+ * lands on; the body is bytes every visitor downloads and throws away. A 301
+ * or 308 with an empty body, or the front page rendered in place, are both fine.
+ */
+async function rootRedirect(get, roots) {
+    const title = 'Space roots render, or redirect permanently with no body';
+    const matters = 'A temporary (302/307) redirect keeps the root as the indexed address and the destination as a guest; a heavy redirect body is downloaded by every visitor and shown to none.';
+    const bad = [];
+    const good = [];
+    for (const root of [...new Set(roots)]) {
+        const p = await get(root, { accept: 'text/html' });
+        if (!p.ok) {
+            bad.push(`${root} → ${p.error}`);
+            continue;
+        }
+        if (p.status === 200) {
+            good.push(`${root} renders`);
+            continue;
+        }
+        if (p.status < 300 || p.status >= 400) {
+            bad.push(`${root} → ${p.status}`);
+            continue;
+        }
+        const to = p.headers.get('location') ?? '';
+        const bytes = Buffer.byteLength(p.text);
+        const problems = [];
+        if (p.status !== 301 && p.status !== 308)
+            problems.push(`${p.status} is temporary`);
+        if (bytes > REDIRECT_BODY_LIMIT)
+            problems.push(`${bytes}-byte body`);
+        if (to) {
+            const target = new URL(to, root).toString();
+            const landed = await get(target, { accept: 'text/html' });
+            const canonical = landed.ok ? (0, probe_1.canonicalOf)(landed.text, target) : undefined;
+            if (canonical && !(0, probe_1.sameUrl)(canonical, target))
+                problems.push(`its target ${target} names canonical ${canonical}`);
+        }
+        if (problems.length)
+            bad.push(`${root} → ${p.status} ${to}: ${problems.join(', ')}`);
+        else
+            good.push(`${root} → ${p.status} ${to}`);
+    }
+    if (bad.length === 0 && good.length === 0)
+        return (0, probe_1.check)('root-redirect', title, 'skip', 'No space root to check.', '');
+    return (0, probe_1.check)('root-redirect', title, bad.length ? 'fail' : 'pass', bad.length ? (0, probe_1.some)(bad) : (0, probe_1.some)(good), bad.length ? matters : '');
+}
+/**
+ * `meta-description`: every page says what it is, in words somebody wrote.
+ *
+ * Checked across the crawl sample, not just the page given, because the
+ * preset fallbacks live on the pages nobody opens while testing — a space
+ * index, a blog home, a generated reference landing (FMU-B08, FMU-B09).
+ */
+function metaDescription(pages) {
+    const title = 'Pages carry a real meta and og:description';
+    const html = pages.filter((p) => p.ok && p.status === 200);
+    if (html.length === 0)
+        return (0, probe_1.check)('meta-description', title, 'skip', 'No page answered 200 to read.', '');
+    const bad = [];
+    for (const p of html) {
+        const meta = (0, boilerplate_1.descriptionProblem)((0, probe_1.metaOf)(p.text, 'description'));
+        const og = (0, boilerplate_1.descriptionProblem)((0, probe_1.metaOf)(p.text, 'og:description'));
+        if (meta)
+            bad.push(`${p.url}: description ${meta}`);
+        else if (og)
+            bad.push(`${p.url}: og:description ${og}`);
+    }
+    return (0, probe_1.check)('meta-description', title, bad.length ? 'fail' : 'pass', bad.length
+        ? `${bad.length} of ${html.length}: ${(0, probe_1.some)(bad)}`
+        : `${html.length} page(s) described.`, bad.length
+        ? 'The description is what a search result and every link preview show. A missing one is chosen by the crawler; a template sentence tells the reader nothing about this page.'
+        : '');
+}
+const IMAGE_TYPE = /^image\/|^application\/octet-stream/i;
+/**
+ * `favicon`: the icons the page and the host advertise are images.
+ *
+ * `GET /docs/favicon.ico` on a customer's domain answered a 404 with a 104 KB
+ * HTML page (FMU-B17). Browsers, feed readers and link unfurlers ask for these
+ * addresses on their own; a 100 KB error page per ask is load, and a missing
+ * icon is a blank tab. An asset-shaped path that is not there should be a tiny
+ * 404, not the site's whole not-found page.
+ */
+async function favicon(get, pageUrl, html, roots) {
+    const title = 'The favicon resolves to an image';
+    const origin = new URL(pageUrl).origin;
+    const declared = (0, probe_1.tags)(html, 'link')
+        .filter((t) => /\bicon\b/i.test((0, probe_1.attr)(t, 'rel') ?? ''))
+        .map((t) => (0, probe_1.attr)(t, 'href'))
+        .filter((h) => !!h)
+        .map((h) => new URL(h, pageUrl).toString());
+    const required = [...new Set([`${origin}/favicon.ico`, ...declared])];
+    // Under a mount the host's own favicon is the customer's, but the mount's
+    // asset paths are ours: they must at least not answer with a page.
+    const mounted = [...new Set(roots.map((r) => `${r.replace(/\/+$/, '')}/favicon.ico`))].filter((u) => !required.includes(u));
+    const bad = [];
+    for (const url of required) {
+        const p = await get(url, { accept: 'image/*' });
+        const type = p.ok ? (p.headers.get('content-type') ?? '') : '';
+        if (!p.ok || p.status !== 200 || !IMAGE_TYPE.test(type))
+            bad.push(`${url} → ${(0, probe_1.describeProbe)(p)}${type ? ` ${type}` : ''}${p.ok ? ` (${Buffer.byteLength(p.text)} bytes)` : ''}`);
+    }
+    for (const url of mounted) {
+        const p = await get(url, { accept: 'image/*' });
+        if (!p.ok)
+            continue;
+        const type = p.headers.get('content-type') ?? '';
+        const bytes = Buffer.byteLength(p.text);
+        if (p.status === 200 && IMAGE_TYPE.test(type))
+            continue;
+        if (/html/i.test(type) && bytes > 2048)
+            bad.push(`${url} → ${p.status} with a ${bytes}-byte HTML page`);
+    }
+    return (0, probe_1.check)('favicon', title, bad.length ? 'fail' : 'pass', bad.length ? (0, probe_1.some)(bad) : `${required.length + mounted.length} icon address(es) answered.`, bad.length
+        ? 'Browsers and link previews fetch the icon on their own; an HTML error page in its place is a blank tab and wasted bytes on every request.'
+        : '');
+}
+/** `Title (some-slug)`: the generator disambiguated two titles with a slug a reader never sees. */
+const SLUG_LEAK = /\[[^\]]*\(([a-z0-9]+(?:-[a-z0-9]+)+)\)\]/;
+/** One llms.txt judged against the llmstxt.org shape. */
+function llmsProblems(text, url, platformHost) {
+    const lines = text.split(/\r?\n/);
+    const first = lines.find((l) => l.trim());
+    const out = [];
+    if (!first || !/^#\s+\S/.test(first))
+        out.push('does not open with an H1 title');
+    const quote = lines.find((l) => /^>\s*/.test(l));
+    const summary = quote?.replace(/^>\s*/, '').trim();
+    if (summary && (0, boilerplate_1.isPresetDescription)(summary))
+        out.push(`summary is preset text "${summary}"`);
+    const links = [...text.matchAll(/^\s*[-*]\s*\[([^\]]*)\]\(([^)\s]+)\)(.*)$/gm)];
+    if (links.length === 0)
+        out.push('lists no links');
+    // Links elsewhere are fine (a GitHub repo, a status page). Links back to
+    // the PLATFORM from a file on the customer's own domain are the leak: the
+    // agent is sent to a host the customer did not publish on (FMU-B15/B16).
+    const host = (0, probe_1.hostOf)(url);
+    const platform = platformHost?.toLowerCase();
+    const foreign = platform && host !== platform
+        ? links
+            .map((m) => m[2])
+            .filter((href) => /^https?:/i.test(href) && (0, probe_1.hostOf)(href)?.replace(/^www\./, '') === platform)
+        : [];
+    if (foreign.length)
+        out.push(`links to the platform host: ${(0, probe_1.some)(foreign, 3)}`);
+    const leaks = links.filter((m) => SLUG_LEAK.test(`[${m[1]}]`)).map((m) => m[1]);
+    if (leaks.length)
+        out.push(`titles carry slugs: ${(0, probe_1.some)(leaks, 3)}`);
+    const sections = lines.filter((l) => /^##\s+\S/.test(l)).length;
+    const described = links.filter((m) => /^\s*:\s*\S/.test(m[3] ?? '')).length;
+    if (links.length > 0 && sections === 0 && described === 0)
+        out.push(`${links.length} links in one flat list with no sections and no descriptions`);
+    return out;
+}
+/**
+ * `llms-txt`: the file an AI agent reads first exists and is shaped for one.
+ *
+ * The space's llms.txt opened with "Published documentation for API Docs.",
+ * listed pages in recent-edit order with no descriptions, and titled a clash
+ * "Authentication (ref-authentication)" (FMU-B16). An agent picks pages from
+ * this list by their descriptions; without them it fetches at random.
+ */
+async function llmsTxt(get, origin, roots, platformHost) {
+    const title = 'llms.txt is present and follows llmstxt.org';
+    const candidates = [
+        ...new Set([`${origin}/llms.txt`, ...roots.map((r) => `${r.replace(/\/+$/, '')}/llms.txt`)]),
+    ];
+    const found = [];
+    const bad = [];
+    for (const url of candidates) {
+        const p = await get(url, { accept: 'text/plain,text/markdown' });
+        if (!p.ok || p.status !== 200)
+            continue;
+        found.push(url);
+        for (const problem of llmsProblems(p.text, url, platformHost))
+            bad.push(`${url} ${problem}`);
+    }
+    if (found.length === 0)
+        return (0, probe_1.check)('llms-txt', title, 'fail', `None of ${candidates.join(', ')} answered 200.`, 'Agents look for /llms.txt before anything else; without it they crawl HTML and guess.');
+    return (0, probe_1.check)('llms-txt', title, bad.length ? 'fail' : 'pass', bad.length ? (0, probe_1.some)(bad) : `${found.join(', ')}: well formed.`, bad.length
+        ? 'An agent chooses which pages to read from this list; links with no descriptions, or back to the platform’s host, send it to the wrong ones.'
+        : '');
+}
+//# sourceMappingURL=page-checks.js.map

package/dist/doctor/page-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-checks.js","sourceRoot":"","sources":["../../src/doctor/page-checks.ts"],"names":[],"mappings":";;AA4BA,oCA4CC;AASD,0CAuBC;AAaD,0BA8CC;AAMD,oCA+BC;AAUD,0BAmCC;AApPD,+CAAwE;AACxE,mCAYiB;AAEjB,0FAA0F;AAC1F,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC;;;;;;;;GAQG;AACI,KAAK,UAAU,YAAY,CAAC,GAAQ,EAAE,KAAe;IAC1D,MAAM,KAAK,GAAG,0DAA0D,CAAC;IACzE,MAAM,OAAO,GACX,8KAA8K,CAAC;IACjL,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC;QACpF,IAAI,KAAK,GAAG,mBAAmB;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;QACrE,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3E,IAAI,SAAS,IAAI,CAAC,IAAA,eAAO,EAAC,SAAS,EAAE,MAAM,CAAC;gBAC1C,QAAQ,CAAC,IAAI,CAAC,cAAc,MAAM,oBAAoB,SAAS,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;YAChF,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACvC,OAAO,IAAA,aAAK,EAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,IAAA,aAAK,EACV,eAAe,EACf,KAAK,EACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC5B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,YAAI,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,YAAI,EAAC,IAAI,CAAC,EACnC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,KAAc;IAC5C,MAAM,KAAK,GAAG,4CAA4C,CAAC;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;IAC9F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACnB,OAAO,IAAA,aAAK,EAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAA,gCAAkB,EAAC,IAAA,cAAM,EAAC,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,IAAA,gCAAkB,EAAC,IAAA,cAAM,EAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAChE,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,iBAAiB,IAAI,EAAE,CAAC,CAAC;aAC/C,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAA,aAAK,EACV,kBAAkB,EAClB,KAAK,EACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC5B,GAAG,CAAC,MAAM;QACR,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,KAAK,IAAA,YAAI,EAAC,GAAG,CAAC,EAAE;QACjD,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,qBAAqB,EACvC,GAAG,CAAC,MAAM;QACR,CAAC,CAAC,4KAA4K;QAC9K,CAAC,CAAC,EAAE,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAE1D;;;;;;;;GAQG;AACI,KAAK,UAAU,OAAO,CAC3B,GAAQ,EACR,OAAe,EACf,IAAY,EACZ,KAAe;IAEf,MAAM,KAAK,GAAG,kCAAkC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAA,YAAI,EAAC,IAAI,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAA,YAAI,EAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;SACrD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,YAAI,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,cAAc,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtE,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAC3F,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC7B,CAAC;IACF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YACrD,GAAG,CAAC,IAAI,CACN,GAAG,GAAG,MAAM,IAAA,qBAAa,EAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9G,CAAC;IACN,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,SAAS;QACpB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACxD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,WAAW,KAAK,iBAAiB,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,IAAA,aAAK,EACV,SAAS,EACT,KAAK,EACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC5B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,YAAI,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,6BAA6B,EACzF,GAAG,CAAC,MAAM;QACR,CAAC,CAAC,2IAA2I;QAC7I,CAAC,CAAC,EAAE,CACP,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,SAAS,GAAG,0CAA0C,CAAC;AAE7D,yDAAyD;AACzD,SAAgB,YAAY,CAAC,IAAY,EAAE,GAAW,EAAE,YAAqB;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,OAAO,IAAI,IAAA,iCAAmB,EAAC,OAAO,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,2BAA2B,OAAO,GAAG,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnD,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,IAAI,GAAG,IAAA,cAAM,EAAC,GAAG,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,YAAY,EAAE,WAAW,EAAE,CAAC;IAC7C,MAAM,OAAO,GACX,QAAQ,IAAI,IAAI,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK;aACF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;aACjB,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAA,cAAM,EAAC,IAAI,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,QAAQ,CACrF;QACL,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,OAAO,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,+BAA+B,IAAA,YAAI,EAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACjF,IAAI,KAAK,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAA,YAAI,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,8DAA8D,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,OAAO,CAC3B,GAAQ,EACR,MAAc,EACd,KAAe,EACf,YAAqB;IAErB,MAAM,KAAK,GAAG,6CAA6C,CAAC;IAC5D,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,WAAW,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;KAC7F,CAAC;IACF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;YAAE,SAAS;QACxC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,IAAA,aAAK,EACV,UAAU,EACV,KAAK,EACL,MAAM,EACN,WAAW,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAChD,uFAAuF,CACxF,CAAC;IACJ,OAAO,IAAA,aAAK,EACV,UAAU,EACV,KAAK,EACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC5B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,YAAI,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAC5D,GAAG,CAAC,MAAM;QACR,CAAC,CAAC,6IAA6I;QAC/I,CAAC,CAAC,EAAE,CACP,CAAC;AACJ,CAAC"}

package/dist/doctor/probe.d.ts

@@ -0,0 +1,63 @@
+import type { Check } from '../conformance';
+/**
+ * The HTTP and HTML plumbing every doctor check shares.
+ *
+ * One `get`, so every request the doctor makes has the same three properties:
+ * it never follows a redirect on its own (a redirect is usually the thing being
+ * checked, and `fetch`'s default hides both the status and the body), it gives
+ * up after a fixed time (one hung address must not hang a CI job), and it never
+ * throws (a refused connection is a finding, not a crash).
+ */
+export type Probe = {
+    ok: true;
+    url: string;
+    status: number;
+    headers: Headers;
+    text: string;
+} | {
+    ok: false;
+    url: string;
+    error: string;
+};
+export interface ProbeOptions {
+    fetchImpl: typeof fetch;
+    /** Per-request budget. A crawl of a hundred pages must not wait on one forever. */
+    timeoutMs?: number;
+}
+export declare const DEFAULT_TIMEOUT_MS = 15000;
+export declare function makeGet(opts: ProbeOptions): (url: string, headers?: Record<string, string>) => Promise<Probe>;
+export type Get = ReturnType<typeof makeGet>;
+/**
+ * Run `fn` over `items`, at most `limit` at a time, in input order.
+ *
+ * Bounded on purpose: the doctor runs from a laptop or a CI runner against a
+ * customer's production site, and a hundred simultaneous requests is how a
+ * health check becomes the incident it was meant to catch.
+ */
+export declare function pool<T, R>(items: T[], limit: number, fn: (t: T) => Promise<R>): Promise<R[]>;
+/** Follow redirects by hand (bounded), keeping every hop — the hops are what a check judges. */
+export declare function follow(get: Get, url: string, headers?: Record<string, string>, maxHops?: number): Promise<{
+    hops: Probe[];
+    final: Probe;
+}>;
+/** One attribute's value from one tag's source, quoted or not. */
+declare function attrOf(tag: string, name: string): string | undefined;
+export declare function tags(html: string, name: string): string[];
+export declare const attr: typeof attrOf;
+/** `<link rel="canonical">`, absolute against `base`, or undefined. */
+export declare function canonicalOf(html: string, base: string): string | undefined;
+/** `<meta name|property=X content=…>`. */
+export declare function metaOf(html: string, key: string): string | undefined;
+/** The document's declared language (`<html lang>`), lower-cased, or undefined. */
+export declare function htmlLang(html: string): string | undefined;
+export declare function decodeEntities(s: string): string;
+export declare function hostOf(href: string): string | undefined;
+/** Compare two URLs the way a search engine would: no fragment, no trailing slash. */
+export declare function sameUrl(a: string | undefined, b: string | undefined): boolean;
+export declare function describeProbe(p: Probe): string;
+/** A check under construction: the shape `runDoctor` reports. */
+export declare function check(id: string, title: string, state: Check['state'], detail: string, matters?: string): Check;
+/** At most `n` items of a list in a detail line, and how many were left out. */
+export declare function some(list: string[], n?: number): string;
+export {};
+//# sourceMappingURL=probe.d.ts.map

package/dist/doctor/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/doctor/probe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,MAAM,KAAK,GACb;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,OAAO,KAAK,CAAC;IACxB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,wBAAgB,OAAO,CAAC,IAAI,EAAE,YAAY,IAE1B,KAAK,MAAM,EAAE,UAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,KAAG,OAAO,CAAC,KAAK,CAAC,CA0BjF;AAED,MAAM,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAE7C;;;;;;GAMG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,EAAE,CAAC,CAWd;AAED,gGAAgG;AAChG,wBAAsB,MAAM,CAC1B,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACpC,OAAO,SAAI,GACV,OAAO,CAAC;IAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC,CAY1C;AAED,kEAAkE;AAClE,iBAAS,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG7D;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEzD;AAED,eAAO,MAAM,IAAI,eAAS,CAAC;AAE3B,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAa1E;AAED,0CAA0C;AAC1C,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMpE;AAED,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGzD;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAOhD;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMvD;AAED,sFAAsF;AACtF,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAY7E;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAE9C;AAED,iEAAiE;AACjE,wBAAgB,KAAK,CACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EACrB,MAAM,EAAE,MAAM,EACd,OAAO,SAAK,GACX,KAAK,CAEP;AAED,gFAAgF;AAChF,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,SAAI,GAAG,MAAM,CAGlD"}

package/dist/doctor/probe.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.attr = exports.DEFAULT_TIMEOUT_MS = void 0;
+exports.makeGet = makeGet;
+exports.pool = pool;
+exports.follow = follow;
+exports.tags = tags;
+exports.canonicalOf = canonicalOf;
+exports.metaOf = metaOf;
+exports.htmlLang = htmlLang;
+exports.decodeEntities = decodeEntities;
+exports.hostOf = hostOf;
+exports.sameUrl = sameUrl;
+exports.describeProbe = describeProbe;
+exports.check = check;
+exports.some = some;
+exports.DEFAULT_TIMEOUT_MS = 15_000;
+function makeGet(opts) {
+    const timeoutMs = opts.timeoutMs ?? exports.DEFAULT_TIMEOUT_MS;
+    return async (url, headers = {}) => {
+        const ctl = typeof AbortController === 'function' ? new AbortController() : undefined;
+        const timer = ctl ? setTimeout(() => ctl.abort(), timeoutMs) : undefined;
+        try {
+            const res = await opts.fetchImpl(url, {
+                headers,
+                redirect: 'manual',
+                ...(ctl ? { signal: ctl.signal } : {}),
+            });
+            const text = await res.text();
+            return { ok: true, url, status: res.status, headers: res.headers, text };
+        }
+        catch (e) {
+            const aborted = e instanceof Error && e.name === 'AbortError';
+            return {
+                ok: false,
+                url,
+                error: aborted
+                    ? `no answer within ${timeoutMs} ms`
+                    : e instanceof Error
+                        ? e.message
+                        : String(e),
+            };
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    };
+}
+/**
+ * Run `fn` over `items`, at most `limit` at a time, in input order.
+ *
+ * Bounded on purpose: the doctor runs from a laptop or a CI runner against a
+ * customer's production site, and a hundred simultaneous requests is how a
+ * health check becomes the incident it was meant to catch.
+ */
+async function pool(items, limit, fn) {
+    const out = new Array(items.length);
+    let next = 0;
+    const workers = Array.from({ length: Math.max(1, Math.min(limit, items.length)) }, async () => {
+        while (next < items.length) {
+            const i = next++;
+            out[i] = await fn(items[i]);
+        }
+    });
+    await Promise.all(workers);
+    return out;
+}
+/** Follow redirects by hand (bounded), keeping every hop — the hops are what a check judges. */
+async function follow(get, url, headers = {}, maxHops = 5) {
+    const hops = [];
+    let at = url;
+    for (let i = 0; i <= maxHops; i++) {
+        const p = await get(at, headers);
+        hops.push(p);
+        if (!p.ok || p.status < 300 || p.status >= 400)
+            return { hops, final: p };
+        const loc = p.headers.get('location');
+        if (!loc)
+            return { hops, final: p };
+        at = new URL(loc, at).toString();
+    }
+    return { hops, final: hops[hops.length - 1] };
+}
+/** One attribute's value from one tag's source, quoted or not. */
+function attrOf(tag, name) {
+    const m = new RegExp(`\\b${name}\\s*=\\s*(?:"([^"]*)"|'([^']*)'|([^\\s>]+))`, 'i').exec(tag);
+    return m ? (m[1] ?? m[2] ?? m[3]) : undefined;
+}
+function tags(html, name) {
+    return html.match(new RegExp(`<${name}\\b[^>]*>`, 'gi')) ?? [];
+}
+exports.attr = attrOf;
+/** `<link rel="canonical">`, absolute against `base`, or undefined. */
+function canonicalOf(html, base) {
+    for (const t of tags(html, 'link')) {
+        const rel = (attrOf(t, 'rel') ?? '').toLowerCase().split(/\s+/);
+        if (!rel.includes('canonical'))
+            continue;
+        const href = attrOf(t, 'href');
+        if (!href)
+            continue;
+        try {
+            return new URL(decodeEntities(href), base).toString();
+        }
+        catch {
+            return href;
+        }
+    }
+    return undefined;
+}
+/** `<meta name|property=X content=…>`. */
+function metaOf(html, key) {
+    for (const t of tags(html, 'meta')) {
+        const k = (attrOf(t, 'name') ?? attrOf(t, 'property') ?? '').toLowerCase();
+        if (k === key.toLowerCase())
+            return decodeEntities(attrOf(t, 'content') ?? '');
+    }
+    return undefined;
+}
+/** The document's declared language (`<html lang>`), lower-cased, or undefined. */
+function htmlLang(html) {
+    const t = tags(html, 'html')[0];
+    return t ? attrOf(t, 'lang')?.toLowerCase() : undefined;
+}
+function decodeEntities(s) {
+    return s
+        .replace(/&amp;/g, '&')
+        .replace(/&quot;/g, '"')
+        .replace(/&#x27;|&#39;/g, "'")
+        .replace(/&lt;/g, '<')
+        .replace(/&gt;/g, '>');
+}
+function hostOf(href) {
+    try {
+        return new URL(href).host.toLowerCase();
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Compare two URLs the way a search engine would: no fragment, no trailing slash. */
+function sameUrl(a, b) {
+    if (!a || !b)
+        return false;
+    const norm = (u) => {
+        try {
+            const x = new URL(u);
+            x.hash = '';
+            return `${x.protocol}//${x.host.toLowerCase()}${x.pathname.replace(/\/+$/, '') || '/'}${x.search}`;
+        }
+        catch {
+            return u;
+        }
+    };
+    return norm(a) === norm(b);
+}
+function describeProbe(p) {
+    return p.ok ? `${p.status}` : p.error;
+}
+/** A check under construction: the shape `runDoctor` reports. */
+function check(id, title, state, detail, matters = '') {
+    return { id, title, state, detail, matters };
+}
+/** At most `n` items of a list in a detail line, and how many were left out. */
+function some(list, n = 5) {
+    const shown = list.slice(0, n).join('; ');
+    return list.length > n ? `${shown}; …and ${list.length - n} more` : shown;
+}
+//# sourceMappingURL=probe.js.map

package/dist/doctor/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/doctor/probe.ts"],"names":[],"mappings":";;;AAuBA,0BA4BC;AAWD,oBAeC;AAGD,wBAiBC;AAQD,oBAEC;AAKD,kCAaC;AAGD,wBAMC;AAGD,4BAGC;AAED,wCAOC;AAED,wBAMC;AAGD,0BAYC;AAED,sCAEC;AAGD,sBAQC;AAGD,oBAGC;AA5KY,QAAA,kBAAkB,GAAG,MAAM,CAAC;AAEzC,SAAgB,OAAO,CAAC,IAAkB;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,0BAAkB,CAAC;IACvD,OAAO,KAAK,EAAE,GAAW,EAAE,UAAkC,EAAE,EAAkB,EAAE;QACjF,MAAM,GAAG,GAAG,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACpC,OAAO;gBACP,QAAQ,EAAE,QAAQ;gBAClB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;YAC9D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,GAAG;gBACH,KAAK,EAAE,OAAO;oBACZ,CAAC,CAAC,oBAAoB,SAAS,KAAK;oBACpC,CAAC,CAAC,CAAC,YAAY,KAAK;wBAClB,CAAC,CAAC,CAAC,CAAC,OAAO;wBACX,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAChB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAID;;;;;;GAMG;AACI,KAAK,UAAU,IAAI,CACxB,KAAU,EACV,KAAa,EACb,EAAwB;IAExB,MAAM,GAAG,GAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QAC5F,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gGAAgG;AACzF,KAAK,UAAU,MAAM,CAC1B,GAAQ,EACR,GAAW,EACX,UAAkC,EAAE,EACpC,OAAO,GAAG,CAAC;IAEX,MAAM,IAAI,GAAY,EAAE,CAAC;IACzB,IAAI,EAAE,GAAG,GAAG,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpC,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,EAAE,CAAC;AACjD,CAAC;AAED,kEAAkE;AAClE,SAAS,MAAM,CAAC,GAAW,EAAE,IAAY;IACvC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,6CAA6C,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,SAAgB,IAAI,CAAC,IAAY,EAAE,IAAY;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACjE,CAAC;AAEY,QAAA,IAAI,GAAG,MAAM,CAAC;AAE3B,uEAAuE;AACvE,SAAgB,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0CAA0C;AAC1C,SAAgB,MAAM,CAAC,IAAY,EAAE,GAAW;IAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3E,IAAI,CAAC,KAAK,GAAG,CAAC,WAAW,EAAE;YAAE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,SAAgB,QAAQ,CAAC,IAAY;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAgB,cAAc,CAAC,CAAS;IACtC,OAAO,CAAC;SACL,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,MAAM,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,SAAgB,OAAO,CAAC,CAAqB,EAAE,CAAqB;IAClE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;YACZ,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACrG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,aAAa,CAAC,CAAQ;IACpC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACxC,CAAC;AAED,iEAAiE;AACjE,SAAgB,KAAK,CACnB,EAAU,EACV,KAAa,EACb,KAAqB,EACrB,MAAc,EACd,OAAO,GAAG,EAAE;IAEZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,SAAgB,IAAI,CAAC,IAAc,EAAE,CAAC,GAAG,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5E,CAAC"}

package/dist/doctor/reader-auth-atlas.d.ts

@@ -0,0 +1,18 @@
+import type { Check } from '../conformance';
+import type { Http } from '../api/http';
+export declare const READER_AUTH_ATLAS_CHECK = "reader-auth-atlas";
+/**
+ * `reader-auth-atlas` (FMU-X01): does this organization sign its readers in
+ * the recommended way?
+ *
+ * The rule is the API's, not the CLI's: `GET /orgs/{org}/reader-auth`
+ * answers `recommendations`, computed from the org's own configuration (an
+ * Atlas issuer on an `external_jwt` provider, a linked Atlas instance), and
+ * the manifest plan answers the same list. This prints what it says.
+ *
+ * Advice, like `robots-params`: a recommendation is a SKIP with the steps,
+ * never a FAIL, because signing readers in from your own app is a supported
+ * setup and a scheduled doctor must not fail CI over it.
+ */
+export declare function readerAuthAtlasCheck(http: Http, org: string): Promise<Check>;
+//# sourceMappingURL=reader-auth-atlas.d.ts.map

package/dist/doctor/reader-auth-atlas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader-auth-atlas.d.ts","sourceRoot":"","sources":["../../src/doctor/reader-auth-atlas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAGxC,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAe3D;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAsClF"}

package/dist/doctor/reader-auth-atlas.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.READER_AUTH_ATLAS_CHECK = void 0;
+exports.readerAuthAtlasCheck = readerAuthAtlasCheck;
+const probe_1 = require("./probe");
+exports.READER_AUTH_ATLAS_CHECK = 'reader-auth-atlas';
+const TITLE = 'Readers sign in with the Atlas reader provider when the organization uses Atlas';
+const MATTERS = 'A hand-rolled external_jwt route is code you maintain that the Atlas provider does for you: Forumulate verifies Atlas’s own reader token and keys members on (iss, sub).';
+/**
+ * `reader-auth-atlas` (FMU-X01): does this organization sign its readers in
+ * the recommended way?
+ *
+ * The rule is the API's, not the CLI's: `GET /orgs/{org}/reader-auth`
+ * answers `recommendations`, computed from the org's own configuration (an
+ * Atlas issuer on an `external_jwt` provider, a linked Atlas instance), and
+ * the manifest plan answers the same list. This prints what it says.
+ *
+ * Advice, like `robots-params`: a recommendation is a SKIP with the steps,
+ * never a FAIL, because signing readers in from your own app is a supported
+ * setup and a scheduled doctor must not fail CI over it.
+ */
+async function readerAuthAtlasCheck(http, org) {
+    let body;
+    try {
+        body = (await http.send({ method: 'GET', path: `/orgs/${encodeURIComponent(org)}/reader-auth` }))
+            .data;
+    }
+    catch (e) {
+        const err = e;
+        return (0, probe_1.check)(exports.READER_AUTH_ATLAS_CHECK, TITLE, 'skip', `Could not read the organization's reader sign-in (${err.status ?? 'error'}): it needs a token with org.manage_settings.`, '');
+    }
+    const rec = (body.recommendations ?? []).find((r) => r.code === 'reader_auth.use_atlas');
+    if (!rec) {
+        const methods = (body.providers ?? []).map((p) => p.method);
+        return (0, probe_1.check)(exports.READER_AUTH_ATLAS_CHECK, TITLE, 'pass', methods.includes('atlas_byo')
+            ? 'atlas_byo is configured.'
+            : `Nothing to recommend${methods.length ? ` (${methods.join(', ')})` : ''}.`, '');
+    }
+    const lines = [
+        `Recommended — ${rec.message}`,
+        rec.relink
+            ? `  1. Relink the members: POST /orgs/${org}/members/relink ${JSON.stringify({ from: rec.relink.from, to: rec.relink.to })} (dry run first; ?apply=true writes)`
+            : null,
+        `  ${rec.relink ? '2' : '1'}. Switch: PATCH /orgs/${org}/reader-auth ${JSON.stringify(rec.patch)}`,
+        `     or in a manifest (version 2): ${JSON.stringify(rec.manifest)}`,
+        rec.docs ? `  See ${rec.docs}` : null,
+    ].filter((l) => l !== null);
+    return (0, probe_1.check)(exports.READER_AUTH_ATLAS_CHECK, TITLE, 'skip', lines.join('\n'), MATTERS);
+}
+//# sourceMappingURL=reader-auth-atlas.js.map

package/dist/doctor/reader-auth-atlas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader-auth-atlas.js","sourceRoot":"","sources":["../../src/doctor/reader-auth-atlas.ts"],"names":[],"mappings":";;;AAgCA,oDAsCC;AApED,mCAAgC;AAEnB,QAAA,uBAAuB,GAAG,mBAAmB,CAAC;AAE3D,MAAM,KAAK,GAAG,iFAAiF,CAAC;AAChG,MAAM,OAAO,GACX,0KAA0K,CAAC;AAW7K;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,oBAAoB,CAAC,IAAU,EAAE,GAAW;IAChE,IAAI,IAA8E,CAAC;IACnF,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,kBAAkB,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;aAC9F,IAAmB,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAA0C,CAAC;QACvD,OAAO,IAAA,aAAK,EACV,+BAAuB,EACvB,KAAK,EACL,MAAM,EACN,qDAAqD,GAAG,CAAC,MAAM,IAAI,OAAO,+CAA+C,EACzH,EAAE,CACH,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;IACzF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5D,OAAO,IAAA,aAAK,EACV,+BAAuB,EACvB,KAAK,EACL,MAAM,EACN,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC3B,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,uBAAuB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAC9E,EAAE,CACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,iBAAiB,GAAG,CAAC,OAAO,EAAE;QAC9B,GAAG,CAAC,MAAM;YACR,CAAC,CAAC,uCAAuC,GAAG,mBAAmB,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,sCAAsC;YACjK,CAAC,CAAC,IAAI;QACR,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,yBAAyB,GAAG,gBAAgB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QAClG,sCAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QACpE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;KACtC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACzC,OAAO,IAAA,aAAK,EAAC,+BAAuB,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC"}

package/dist/doctor/robots-params.d.ts

@@ -0,0 +1,36 @@
+import type { Check } from '../conformance';
+/**
+ * `robots-params`: the `Disallow` lines that keep crawlers off the re-cut
+ * addresses of a mounted space's lists (SEO spec §1, item 5).
+ *
+ * A reader page offers its sort, order, scope, period, filter, solved and
+ * range choices as GET forms, which crawlers do not submit — but an address
+ * already in a crawler's queue, a backlink, or another site's
+ * `?sort=name&order=desc` link still reaches it. Those copies say `noindex`
+ * (or name the uncut page as canonical), and are still a crawl each. The host's
+ * robots.txt is the one place that can say "do not even fetch these", and for
+ * a space mounted on somebody else's domain (`acme.com/community`) it is THEIR
+ * file — we cannot write it. So the doctor prints the lines to paste.
+ *
+ * Advisory, never a failure: a site that wants those copies crawled is making
+ * a choice. Passes once every line for this host is already in its robots.txt.
+ * Judged by HTTP alone, so it is the same for any host the doctor is pointed at.
+ */
+/**
+ * The query keys a reader list is re-cut by — the web reader's
+ * `VARIANT_PARAMS` (apps/web/src/lib/reader-variant-robots.ts). Never `page`
+ * (a page of a list is a document of its own) and never a search.
+ */
+export declare const VARIANT_PARAMS: readonly ["sort", "order", "scope", "period", "window", "filter", "solved", "range", "replies", "release"];
+/**
+ * The lines for one mount. `*` and the `?` are robots wildcards (RFC 9309 §2.2.3
+ * — Google, Bing and every major crawler read them): `/community*?*sort=` is any
+ * address under the mount whose query names `sort`, first or not.
+ */
+export declare function disallowLines(mountPath: string): string[];
+/** The roots grouped by the origin whose robots.txt would carry them. */
+export declare function linesByOrigin(roots: readonly string[]): Map<string, string[]>;
+export declare function robotsParams(roots: readonly string[], 
+/** The origin whose robots.txt was read. */
+origin: string, robots: string | undefined): Check;
+//# sourceMappingURL=robots-params.d.ts.map

package/dist/doctor/robots-params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"robots-params.d.ts","sourceRoot":"","sources":["../../src/doctor/robots-params.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAG5C;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;GAIG;AACH,eAAO,MAAM,cAAc,4GAWjB,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAIzD;AAED,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAc7E;AAUD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,SAAS,MAAM,EAAE;AACxB,4CAA4C;AAC5C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,KAAK,CAuBP"}