@hawkeyexl/manni 4.5.0 → 4.6.0

package/dist/chunk-XPEWUK7J.js

@@ -0,0 +1,532 @@
+#!/usr/bin/env node
+import {
+  DEFAULT_CAPTURE_DIR,
+  compileRedactPatterns
+} from "./chunk-CU57HT2E.js";
+import {
+  JEV,
+  JEV_OUT_OF_LOOP
+} from "./chunk-BWCWTHYS.js";
+import {
+  TracevalsError
+} from "./chunk-UKZNLVJW.js";
+import {
+  EXECUTION_GRANTS,
+  configuredGrants,
+  isExecutionGrant,
+  unknownGrantsMessage
+} from "./chunk-YNHZHSSM.js";
+import {
+  FAMILY_CONFIG_NAMES,
+  findConfigFileSync,
+  readConfigFileSync
+} from "./chunk-XKBEHKWO.js";
+import {
+  assertKnownProvider
+} from "./chunk-QCHVR4ZM.js";
+import {
+  errorMessage
+} from "./chunk-G3T47CFV.js";
+
+// src/tracevals/core/config.ts
+import { Ajv2020 as Ajv20202 } from "ajv/dist/2020.js";
+
+// src/tracevals/core/config-schema.json
+var config_schema_default = {
+  $schema: "https://json-schema.org/draft/2020-12/schema",
+  $id: "manni:tracevals:config",
+  title: "tracevals section of manni.config.yaml",
+  description: "Settings for manni tracevals, held under the `tracevals` key of the config file shared by the manni family of tools. Sibling keys belong to other tools and are not validated here.",
+  type: "object",
+  additionalProperties: false,
+  properties: {
+    provider: {
+      type: "string",
+      minLength: 1,
+      description: "Which provider judges out of the loop, and extracts rules: auto, anthropic, openai, claude-cli, or llama-cpp. jev only decides, so it is refused here; name it as conformance.hook.provider. Overrides the family's top-level `providers.provider` for tracevals only. Connection settings \u2014 an endpoint, an API key's environment variable, the Claude CLI command \u2014 live in that top-level `providers:` map, never here."
+    },
+    model: {
+      type: "string",
+      minLength: 1,
+      description: "The model within `provider`, which must be named at this level. Unset, the inference library's default for the winning provider is used; manni pins no model id of its own."
+    },
+    judge: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        ensembleRuns: { type: "integer", minimum: 1 },
+        temperature: { type: "number", minimum: 0, maximum: 2 },
+        zones: {
+          type: "object",
+          additionalProperties: false,
+          properties: {
+            autoPass: { type: "number", minimum: 0, maximum: 1 },
+            autoFail: { type: "number", minimum: 0, maximum: 1 }
+          }
+        },
+        cacheDir: { type: "string" },
+        maxTurns: { type: "integer", minimum: 1, description: "Stop after this many ensemble runs. A cached ensemble spends none. Unset means unbounded; the remaining evals report `skipped` with the reason `turn budget` rather than aborting the run." },
+        redact: {
+          type: "array",
+          description: "Extra regular expressions scrubbed from the session digest before it is sent to a judge provider. Applied on top of the built-in secret shapes, never instead of them; each source is compiled with the `g` flag, and a match is replaced with `[redacted]`. Pattern matching is best-effort \u2014 --deterministic-only is the only setting that guarantees nothing leaves the machine.",
+          items: { type: "string", minLength: 1 }
+        }
+      }
+    },
+    execution: {
+      type: "object",
+      additionalProperties: false,
+      description: "Operator grant for executing content-authored code.",
+      properties: {
+        allow: {
+          type: "array",
+          items: { enum: ["frontmatter-commands"] },
+          default: ["frontmatter-commands"],
+          description: "Which content-authored code a run may execute. Absent, every grant holds; list fewer to narrow it, or write [] to run none. frontmatter-commands lets `command` evals declared in an artifact's front matter run; without it they report `skipped` with a reason, never `pass`."
+        }
+      }
+    },
+    render: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        maxBlockChars: { type: "integer", minimum: 100 },
+        maxTotalChars: {
+          type: "integer",
+          minimum: 1e3,
+          description: "Upper bound on the rendered digest, in characters. The timeline always keeps at least 200 characters, so a very long header can push the digest past this bound by up to 200."
+        }
+      }
+    },
+    history: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        file: { type: "string" }
+      }
+    },
+    capture: {
+      type: "object",
+      additionalProperties: false,
+      description: "Session manifests \u2014 sha256 of every instruction artifact plus the git SHA, recorded at session start by `manni tracevals capture` and read back by `run` to make staleness exact instead of an mtime guess. See ADR 01024.",
+      properties: {
+        dir: {
+          type: "string",
+          minLength: 1,
+          description: "Directory manifests are written to and looked for, resolved against the project root. `run` also accepts one placed beside the trace as `<trace>.manifest.json`, and --manifest names one outright."
+        }
+      }
+    },
+    fill: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        confidenceThreshold: { type: "number", minimum: 0, maximum: 1 },
+        maxEvalsPerArtifact: { type: "integer", minimum: 1 },
+        temperature: { type: "number", minimum: 0, maximum: 2 },
+        cacheDir: { type: "string" },
+        maxTurns: { type: "integer", minimum: 1, description: "Stop after this many inference calls, one per artifact filled. A cached artifact spends none. Unset means unbounded." }
+      }
+    },
+    calibrate: {
+      type: "object",
+      additionalProperties: false,
+      description: "Settings for `manni tracevals calibrate` \u2014 measuring the tool's verdicts against a human's answers. See ADR 01022.",
+      properties: {
+        labels: {
+          type: "string",
+          minLength: 1,
+          description: "Default labels sidecar, resolved against this config file's directory. Overridden by --labels."
+        },
+        maxFalsePass: {
+          type: "integer",
+          minimum: 0,
+          description: "Fail the calibration run (exit 1) above this many false passes \u2014 labelled fail, judged pass. Unset by default: a calibration run is a measurement, not a gate."
+        },
+        maxFalseFail: {
+          type: "integer",
+          minimum: 0,
+          description: "Fail the calibration run above this many false fails \u2014 labelled pass, judged fail."
+        },
+        maxReview: {
+          type: "integer",
+          minimum: 0,
+          description: "Fail the calibration run above this many needs-review outcomes across the whole corpus."
+        },
+        sweep: {
+          type: "object",
+          additionalProperties: false,
+          description: "Values --sweep tries on each axis, one axis at a time with the others held at their configured value. The corpus is judged once at the largest ensembleRuns here and every cell is re-scored from those cached runs, so the grid costs nothing beyond that one run.",
+          properties: {
+            ensembleRuns: {
+              type: "array",
+              minItems: 1,
+              items: { type: "integer", minimum: 1 }
+            },
+            autoPass: {
+              type: "array",
+              minItems: 1,
+              items: { type: "number", minimum: 0, maximum: 1 }
+            },
+            autoFail: {
+              type: "array",
+              minItems: 1,
+              items: { type: "number", minimum: 0, maximum: 1 }
+            }
+          }
+        }
+      }
+    },
+    conformance: {
+      type: "object",
+      additionalProperties: false,
+      description: "Checking each turn against the rules the files that govern the agent declare. Present, even as {}, it puts tracevals in play under Claude Code hooks; absent, tracevals stays out of them.",
+      properties: {
+        hook: {
+          type: "object",
+          additionalProperties: false,
+          description: "The judge inside a Stop or SubagentStop hook. Each key falls back to the top-level one of the same name.",
+          properties: {
+            provider: {
+              type: "string",
+              minLength: 1,
+              description: "The provider that judges inside a hook. Default: tracevals.provider. jev is accepted here, and only here."
+            },
+            model: {
+              type: "string",
+              minLength: 1,
+              description: "The model that judges inside a hook. Default: tracevals.model."
+            },
+            runs: {
+              type: "integer",
+              minimum: 1,
+              description: "Judge calls per rule inside a hook. A rule blocks only when every run scores it not followed at the bar. jev makes one call and ignores it. Default 1."
+            }
+          }
+        },
+        include: {
+          type: "array",
+          description: "Globs, relative to the project root, naming files that govern agents beyond the known formats. Each applies to every turn.",
+          items: { type: "string", minLength: 1 }
+        },
+        exclude: {
+          type: "array",
+          description: "Globs, relative to the project root, naming files never treated as rule sources, in any format. It removes plan and spec files too.",
+          items: { type: "string", minLength: 1 }
+        },
+        plans: {
+          type: "array",
+          default: [],
+          description: "Globs, relative to the project root, naming files that say what to build, beyond the known spec formats. Each is a rule source once the session touches it.",
+          items: { type: "string", minLength: 1 }
+        }
+      }
+    },
+    failOnReview: { type: "boolean" },
+    plugins: {
+      type: "array",
+      description: "Modules imported before evals are planned, so one calling registerGrader() can add a grader kind the built-ins do not cover. A relative or absolute path resolves against this file's directory, not the working directory; a bare package name resolves the way an import from this file's directory would. Load order is significant: a later entry wins a colliding kind.",
+      items: { type: "string", minLength: 1 }
+    },
+    reportUnusedArtifacts: {
+      type: "boolean",
+      description: "List every skill and agent the session was offered and never used, rather than only counting them. Off by default: a real roster runs to hundreds of skills."
+    }
+  }
+};
+
+// src/tracevals/calibrate/labels.ts
+import { readFile } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { Ajv2020 } from "ajv/dist/2020.js";
+import { parse as parseYaml } from "yaml";
+
+// src/tracevals/calibrate/labels-schema.json
+var labels_schema_default = {
+  $schema: "https://json-schema.org/draft/2020-12/schema",
+  $id: "manni:tracevals:calibration-labels",
+  title: "manni tracevals calibration labels",
+  description: "Ground truth for `manni tracevals calibrate`: what a human decided a given eval should have produced on a given trace. A sidecar rather than an eval field, because a label belongs to a corpus and a reviewer, not to the artifact \u2014 and because the eval vocabulary is docmeta's, vendored byte-identical, with `inlineEval` closed to additions (ADR 01010).",
+  type: "object",
+  additionalProperties: false,
+  required: ["version", "labels"],
+  properties: {
+    version: {
+      const: 1,
+      description: "Format version. Pinned so a future shape change is an explicit migration rather than a silently-reinterpreted file."
+    },
+    labels: {
+      type: "array",
+      minItems: 1,
+      description: "One entry per (trace, artifact, eval) you have judged by hand.",
+      items: {
+        type: "object",
+        additionalProperties: false,
+        required: ["trace", "artifact", "eval", "expected"],
+        properties: {
+          trace: {
+            type: "string",
+            minLength: 1,
+            description: "Path to the trace file, resolved against this file's own directory \u2014 not the working directory."
+          },
+          artifact: {
+            type: "string",
+            minLength: 1,
+            description: "Artifact name as the report shows it: a skill name, a subagent_type, or a project-rules filename such as CLAUDE.md."
+          },
+          type: {
+            enum: ["skill", "agent", "project-rules", "slash-command"],
+            description: "Optional disambiguator, needed when one name resolves to two kinds of artifact \u2014 a skill and an agent, or a skill and the slash command that types it. Every `ArtifactType` the resolver can produce belongs here: a label whose type this rejects has no way to name the artifact it means."
+          },
+          eval: {
+            type: "string",
+            minLength: 1,
+            description: "The eval's id. Shorthand entries with no declared id get a positional one (eval-1, eval-2, ...), so labelling those is only as stable as the order they are written in."
+          },
+          expected: {
+            enum: ["pass", "fail", "needs-review"],
+            description: "What you decided. `needs-review` means you found it genuinely ambiguous and want the tool to defer too."
+          },
+          note: {
+            type: "string",
+            description: "Why you decided that. Carried into the disagreement report, where it is the whole reason a disagreement is actionable."
+          }
+        }
+      }
+    }
+  }
+};
+
+// src/tracevals/calibrate/labels.ts
+var labelsSchema = labels_schema_default;
+var DEFAULT_LABELS_FILE = "tracevals/labels.yaml";
+var ajv = new Ajv2020({ allErrors: true });
+var validate = ajv.compile(labelsSchema);
+var labelKey = (traceFile, artifact, evalName, type) => `${traceFile}\0${type ?? ""}\0${artifact}\0${evalName}`;
+function parseLabels(text, file) {
+  let raw;
+  try {
+    raw = parseYaml(text);
+  } catch (err) {
+    throw new TracevalsError(
+      `could not parse ${file}: ${errorMessage(err)}`
+    );
+  }
+  if (raw === null || raw === void 0) {
+    throw new TracevalsError(`invalid labels file ${file}: it is empty`);
+  }
+  if (!validate(raw)) {
+    const detail = (validate.errors ?? []).map((e) => `${e.instancePath || "/"} ${e.message ?? "invalid"}`).join("; ");
+    const empty = (validate.errors ?? []).some(
+      (e) => e.instancePath === "/labels" && e.keyword === "minItems"
+    );
+    throw new TracevalsError(
+      empty ? `invalid labels file ${file}: it must carry at least one label \u2014 an empty one measures nothing` : `invalid labels file ${file}: ${detail}`
+    );
+  }
+  const base = dirname(resolve(file));
+  const labels = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const entry of raw.labels) {
+    const traceFile = resolve(base, entry.trace);
+    const type = entry.type;
+    const key = labelKey(
+      traceFile,
+      entry.artifact,
+      entry.eval,
+      type
+    );
+    if (seen.has(key)) {
+      throw new TracevalsError(
+        `invalid labels file ${file}: duplicate label for ${entry.artifact ?? "?"} \u203A ${entry.eval ?? "?"} on ${entry.trace ?? "?"}`
+      );
+    }
+    seen.add(key);
+    labels.push({
+      trace: entry.trace,
+      traceFile,
+      artifact: entry.artifact,
+      ...type !== void 0 ? { type } : {},
+      eval: entry.eval,
+      expected: entry.expected,
+      ...entry.note !== void 0 ? { note: entry.note } : {}
+    });
+  }
+  return labels;
+}
+async function loadLabels(file) {
+  let text;
+  try {
+    text = await readFile(file, "utf-8");
+  } catch (err) {
+    throw new TracevalsError(
+      `could not read labels file ${file}: ${errorMessage(err)}`
+    );
+  }
+  return parseLabels(text, file);
+}
+
+// src/tracevals/core/config.ts
+var configSchema = config_schema_default;
+var DEFAULT_CONFIG_FILENAME = FAMILY_CONFIG_NAMES[0] ?? "manni.config.yaml";
+var CONFIG_SECTION_KEY = "tracevals";
+var CONFIG_SECTION_KEY_PATH = `/${CONFIG_SECTION_KEY}`;
+var CONFIG_FILE = {
+  section: CONFIG_SECTION_KEY,
+  legacyNames: [],
+  toError: (message) => new TracevalsError(message)
+};
+var ajv2 = new Ajv20202({ allErrors: true, verbose: true });
+var validate2 = ajv2.compile(configSchema);
+function camelCaseHint(key, parentSchema) {
+  const camel = key.replace(/-([a-z0-9])/g, (_, c) => c.toUpperCase());
+  if (camel === key || parentSchema === null || typeof parentSchema !== "object") {
+    return "";
+  }
+  const properties = parentSchema.properties;
+  return properties !== null && typeof properties === "object" && Object.hasOwn(properties, camel) ? `; did you mean "${camel}"?` : "";
+}
+function movedProviderHint(instancePath, keyword) {
+  return instancePath === "/provider" && keyword === "type" ? `; "provider" is now a provider name; per-provider settings moved to the top-level providers: map` : "";
+}
+function parseConfig(raw, file = {}) {
+  const source = file.source ?? DEFAULT_CONFIG_FILENAME;
+  const unknownGrants = configuredGrants(raw).filter((g) => !isExecutionGrant(g));
+  if (unknownGrants.length > 0) {
+    throw new TracevalsError(`${source}: ${unknownGrantsMessage(unknownGrants)}`);
+  }
+  if (!validate2(raw)) {
+    const detail = (validate2.errors ?? []).map((e) => {
+      const extra = e.keyword === "additionalProperties" ? e.params.additionalProperty : void 0;
+      return extra !== void 0 ? `unknown key "${extra}"${camelCaseHint(extra, e.parentSchema)}` : `${CONFIG_SECTION_KEY_PATH}${e.instancePath} ${e.message ?? "is invalid"}` + movedProviderHint(e.instancePath, e.keyword);
+    }).join("; ");
+    throw new TracevalsError(`${source}: ${detail}`);
+  }
+  const r = raw;
+  const provider = r.provider ?? null;
+  if (provider !== null) {
+    if (provider === JEV) throw new TracevalsError(JEV_OUT_OF_LOOP);
+    assertKnownProvider(provider, (message) => new TracevalsError(message));
+  }
+  const hookProvider = r.conformance?.hook?.provider ?? null;
+  if (hookProvider !== null) {
+    assertKnownProvider(hookProvider, (message) => new TracevalsError(message), { decisions: true });
+  }
+  const config = {
+    provider,
+    model: r.model ?? null,
+    providers: file.providers ?? {},
+    configSource: source,
+    judge: {
+      ensembleRuns: r.judge?.ensembleRuns ?? 3,
+      temperature: r.judge?.temperature ?? 0,
+      zones: {
+        autoPass: r.judge?.zones?.autoPass ?? 0.8,
+        autoFail: r.judge?.zones?.autoFail ?? 0.8
+      },
+      cacheDir: r.judge?.cacheDir ?? ".manni/tracevals/cache",
+      // `null`, not a number: unbounded is a state, and any number here would
+      // be a ceiling nobody asked for.
+      maxTurns: r.judge?.maxTurns ?? null,
+      // Always a list: the render site concatenates nothing onto it, but a
+      // hole here would be a special case in every consumer.
+      redact: [...r.judge?.redact ?? []]
+    },
+    render: {
+      maxBlockChars: r.render?.maxBlockChars ?? 2e3,
+      maxTotalChars: r.render?.maxTotalChars ?? 15e4
+    },
+    execution: { allow: [...r.execution?.allow ?? EXECUTION_GRANTS] },
+    history: {
+      file: r.history?.file ?? ".manni/tracevals/history.jsonl"
+    },
+    capture: {
+      // Beside the judge cache, under the state directory that already travels
+      // with the project — which is what puts a manifest next to its trace in
+      // the CI patterns the docs describe.
+      dir: r.capture?.dir ?? DEFAULT_CAPTURE_DIR
+    },
+    fill: {
+      // 0.7 matches the manuscript's calibration bar for judged agreement.
+      confidenceThreshold: r.fill?.confidenceThreshold ?? 0.7,
+      maxEvalsPerArtifact: r.fill?.maxEvalsPerArtifact ?? 8,
+      temperature: r.fill?.temperature ?? 0,
+      // Separate from the judge cache: different key scheme and value shape.
+      cacheDir: r.fill?.cacheDir ?? ".manni/tracevals/cache/fill",
+      maxTurns: r.fill?.maxTurns ?? null
+    },
+    calibrate: {
+      labels: r.calibrate?.labels ?? DEFAULT_LABELS_FILE,
+      sweep: {
+        // Spans the range rather than filling it: the first sweep judges the
+        // corpus at the largest value here, so a wide grid is the one part of
+        // calibration that does cost money.
+        ensembleRuns: [...r.calibrate?.sweep?.ensembleRuns ?? [1, 3, 5]],
+        autoPass: [
+          ...r.calibrate?.sweep?.autoPass ?? [0.5, 0.6, 0.7, 0.8, 0.9, 0.95]
+        ],
+        autoFail: [
+          ...r.calibrate?.sweep?.autoFail ?? [0.5, 0.6, 0.7, 0.8, 0.9, 0.95]
+        ]
+      }
+    },
+    failOnReview: r.failOnReview ?? true,
+    // Always a list, never undefined: the read site concatenates `--require`
+    // onto it, and a hole there would be a special case in every caller.
+    plugins: [...r.plugins ?? []],
+    // An observation, not a gate: listing it is opt-in because a real roster
+    // runs to hundreds of skills (ADR 01016).
+    reportUnusedArtifacts: r.reportUnusedArtifacts ?? false,
+    conformance: r.conformance === void 0 ? null : {
+      hook: {
+        provider: hookProvider,
+        model: r.conformance.hook?.model ?? null,
+        runs: r.conformance.hook?.runs ?? 1
+      },
+      include: [...r.conformance.include ?? []],
+      exclude: [...r.conformance.exclude ?? []],
+      plans: [...r.conformance.plans ?? []]
+    }
+  };
+  compileRedactPatterns(config.judge.redact);
+  for (const key of ["maxFalsePass", "maxFalseFail", "maxReview"]) {
+    if (typeof r.calibrate?.[key] === "number") {
+      config.calibrate[key] = r.calibrate[key];
+    }
+  }
+  return config;
+}
+async function discoverConfig(dir = process.cwd(), lookup = {}) {
+  if (lookup.noConfig === true) {
+    return { config: parseConfig({}), dir, collections: [] };
+  }
+  const file = await Promise.resolve().then(
+    () => lookup.configPath === void 0 ? findConfigFileSync(dir, CONFIG_FILE) : readConfigFileSync(lookup.configPath, dir, CONFIG_FILE)
+  );
+  if (file === null) return { config: parseConfig({}), dir, collections: [] };
+  return {
+    config: parseConfig(file.value ?? {}, {
+      source: file.source,
+      ...file.providers !== void 0 ? { providers: file.providers } : {}
+    }),
+    dir: file.dir,
+    collections: file.collections,
+    path: file.path
+  };
+}
+async function loadConfig(dir = process.cwd(), lookup = {}) {
+  return (await discoverConfig(dir, lookup)).config;
+}
+
+export {
+  DEFAULT_LABELS_FILE,
+  labelKey,
+  parseLabels,
+  loadLabels,
+  DEFAULT_CONFIG_FILENAME,
+  CONFIG_SECTION_KEY,
+  parseConfig,
+  discoverConfig,
+  loadConfig
+};
+//# sourceMappingURL=chunk-XPEWUK7J.js.map

package/dist/chunk-XPEWUK7J.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tracevals/core/config.ts","../src/tracevals/core/config-schema.json","../src/tracevals/calibrate/labels.ts","../src/tracevals/calibrate/labels-schema.json"],"sourcesContent":["/**\n * Config loading. Every knob flows config → Ajv validate → defaults → CLI\n * override (`??` at the read site) → runtime; parseConfig() fills every\n * default so downstream code never re-applies one.\n *\n * Settings live under a `tracevals:` key in `manni.config.yaml`, one file\n * shared by the whole manni family. Sibling keys belong to other tools and are\n * ignored here, so parseConfig() validates the section — never the file root.\n * Finding the file is the shared loader's job (`src/shared/config-file.ts`).\n */\nimport { Ajv2020 } from \"ajv/dist/2020.js\";\nimport configSchemaJson from \"./config-schema.json\" with { type: \"json\" };\nimport {\n  FAMILY_CONFIG_NAMES,\n  findConfigFileSync,\n  readConfigFileSync,\n  type ConfigFileOptions,\n} from \"../../shared/config-file.js\";\nimport type { CollectionConfig } from \"../../shared/collections.js\";\nimport {\n  assertKnownProvider,\n  type ProvidersConfig,\n} from \"../../shared/providers.js\";\nimport { compileRedactPatterns } from \"../judge/redact.js\";\nimport { JEV, JEV_OUT_OF_LOOP } from \"../judge/provider.js\";\nimport { DEFAULT_CAPTURE_DIR } from \"../capture/types.js\";\nimport { DEFAULT_LABELS_FILE } from \"../calibrate/labels.js\";\nimport { TracevalsError } from \"../types.js\";\nimport {\n  configuredGrants,\n  EXECUTION_GRANTS,\n  isExecutionGrant,\n  unknownGrantsMessage,\n  type ExecutionGrant,\n} from \"../../shared/execution.js\";\n\nconst configSchema = configSchemaJson as Record<string, unknown>;\n\nexport const DEFAULT_CONFIG_FILENAME =\n  FAMILY_CONFIG_NAMES[0] ?? \"manni.config.yaml\";\n\n/**\n * Top-level key holding this tool's settings inside the shared family config.\n * Sibling tools (meta, docevals) own their own keys in the same file.\n */\nexport const CONFIG_SECTION_KEY = \"tracevals\";\n\n/**\n * The section key as an error's instance path spells it. The schema describes\n * the section rather than the file, so Ajv's own paths start below it; a\n * message that said `/provider` would name a key nobody writes at the root.\n */\nconst CONFIG_SECTION_KEY_PATH = `/${CONFIG_SECTION_KEY}`;\n\n/**\n * No legacy filename. The family file is the only one read, so a file named\n * for the tool is not config however it is spelled, and nothing warns about\n * one because nothing looks for it.\n */\nconst CONFIG_FILE: ConfigFileOptions = {\n  section: CONFIG_SECTION_KEY,\n  legacyNames: [],\n  toError: (message) => new TracevalsError(message),\n};\n\nexport interface TracevalsConfig {\n  /**\n   * Which provider judges, as `tracevals.provider` names it. `null` when the\n   * key is absent, which defers to the family's `providers.provider`. The\n   * connection settings are never here: they are `providers` below.\n   */\n  provider: string | null;\n  /** The model within `provider`; `null` when unset. manni pins none. */\n  model: string | null;\n  /** The family's top-level `providers:` map, parsed by the shared loader. */\n  providers: ProvidersConfig;\n  /** The file as the user would name it, for messages. */\n  configSource: string;\n  judge: {\n    ensembleRuns: number;\n    temperature: number;\n    zones: { autoPass: number; autoFail: number };\n    cacheDir: string;\n    /**\n     * Ensemble runs this invocation may spend, or `null` for unbounded. A\n     * cached ensemble spends none, and an eval the budget cannot cover is\n     * `skipped` with the `turn budget` reason rather than dropped.\n     */\n    maxTurns: number | null;\n    /**\n     * Extra patterns scrubbed from the session digest before it reaches a\n     * provider, applied *on top of* the built-in secret shapes (ADR 01020).\n     * Always a list; validated for compilability at load time.\n     */\n    redact: string[];\n  };\n  render: {\n    maxBlockChars: number;\n    maxTotalChars: number;\n  };\n  /**\n   * What content-authored code a run may execute: the grants it holds, every\n   * one unless the operator narrows it (proposal 0075). A `command` eval runs\n   * only under `frontmatter-commands`; `[]` runs none and reports them\n   * `skipped`.\n   */\n  execution: { allow: ExecutionGrant[] };\n  history: {\n    file: string;\n  };\n  /**\n   * Session manifests (ADR 01024). `capture` writes one here; `run` looks here\n   * for the trace's own, and reports a `skipped` hash check when there is none.\n   */\n  capture: {\n    /** Resolved against the project root, not the working directory. */\n    dir: string;\n  };\n  fill: {\n    /** Minimum self-reported confidence a proposal needs to be written. */\n    confidenceThreshold: number;\n    maxEvalsPerArtifact: number;\n    temperature: number;\n    cacheDir: string;\n    /** Inference calls this invocation may spend, or `null` for unbounded. */\n    maxTurns: number | null;\n  };\n  /**\n   * `calibrate` — measuring the judge against a human's answers (ADR 01022).\n   * The sweep grid lives here rather than behind flags because the useful\n   * range is a property of a corpus, and a corpus outlives an invocation.\n   */\n  calibrate: {\n    /** Labels sidecar, resolved against the config file's directory. */\n    labels: string;\n    /** Thresholds. Unset means the run measures without gating. */\n    maxFalsePass?: number;\n    maxFalseFail?: number;\n    maxReview?: number;\n    sweep: {\n      ensembleRuns: number[];\n      autoPass: number[];\n      autoFail: number[];\n    };\n  };\n  failOnReview: boolean;\n  /**\n   * Module specifiers imported before evals are planned, so a `registerGrader`\n   * call from outside this package lands in time (ADR 01017). Resolved against\n   * the config file's directory, in order — a later entry wins a colliding\n   * kind. `--require` appends to this list rather than replacing it.\n   */\n  plugins: string[];\n  /** List offered-but-unused artifacts in coverage, not just count them. */\n  reportUnusedArtifacts: boolean;\n  /**\n   * Checking each turn against its rule sources (proposal 0079). `null` when\n   * the section is absent, which keeps tracevals out of every hook; `{}` puts\n   * it in play with these defaults.\n   */\n  conformance: ConformanceConfig | null;\n}\n\nexport interface ConformanceConfig {\n  /** The in-loop judge. `null` falls back to `tracevals.provider` / `model`. */\n  hook: { provider: string | null; model: string | null; runs: number };\n  /** Globs of designated rule sources, in scope once read. */\n  include: string[];\n  /** Globs never treated as rule sources. */\n  exclude: string[];\n  /** Globs of files that say what to build, in scope once touched (proposal 0080). */\n  plans: string[];\n}\n\n// `verbose` puts the parent schema on each error, so an unknown key can be\n// checked against the keys its section does have.\nconst ajv = new Ajv2020({ allErrors: true, verbose: true });\nconst validate = ajv.compile(configSchema);\n\n/**\n * `; did you mean \"ensembleRuns\"?` when `key` is the kebab spelling of a key\n * its section has. Only the exact counterpart: a guess at a near miss is\n * advice that can be wrong, and the kebab spelling is the one mistake a\n * reader of the frontmatter vocabulary is likely to make here.\n */\nfunction camelCaseHint(key: string, parentSchema: unknown): string {\n  const camel = key.replace(/-([a-z0-9])/g, (_, c: string) => c.toUpperCase());\n  if (camel === key || parentSchema === null || typeof parentSchema !== \"object\") {\n    return \"\";\n  }\n  const properties = (parentSchema as { properties?: unknown }).properties;\n  return properties !== null &&\n    typeof properties === \"object\" &&\n    Object.hasOwn(properties, camel)\n    ? `; did you mean \"${camel}\"?`\n    : \"\";\n}\n\n/**\n * The hint on an old `provider:` object. The key used to hold a `default` and\n * a section per provider; it is now the provider's name, as `docevals.provider`\n * and `fill.provider` are, and the connection settings moved to the family's\n * top-level `providers:` map, which every tool reads. Ajv's own message says\n * it must be a string, which is true and leaves the reader to find out where\n * the settings went.\n */\nfunction movedProviderHint(instancePath: string, keyword: string): string {\n  return instancePath === \"/provider\" && keyword === \"type\"\n    ? `; \"provider\" is now a provider name; per-provider settings moved to the top-level providers: map`\n    : \"\";\n}\n\n/**\n * The section as the schema admits it: every key optional, because\n * `parseConfig` supplies the defaults. Ajv has checked the document against\n * `config-schema.json` before it is read as this, so the one cast below is\n * where the validated document becomes a typed one.\n */\ninterface RawConfig {\n  provider?: string;\n  model?: string;\n  judge?: {\n    ensembleRuns?: number;\n    temperature?: number;\n    zones?: { autoPass?: number; autoFail?: number };\n    cacheDir?: string;\n    maxTurns?: number;\n    redact?: string[];\n  };\n  render?: { maxBlockChars?: number; maxTotalChars?: number };\n  execution?: { allow?: ExecutionGrant[] };\n  history?: { file?: string };\n  capture?: { dir?: string };\n  fill?: {\n    confidenceThreshold?: number;\n    maxEvalsPerArtifact?: number;\n    temperature?: number;\n    cacheDir?: string;\n    maxTurns?: number;\n  };\n  calibrate?: {\n    labels?: string;\n    maxFalsePass?: number;\n    maxFalseFail?: number;\n    maxReview?: number;\n    sweep?: { ensembleRuns?: number[]; autoPass?: number[]; autoFail?: number[] };\n  };\n  failOnReview?: boolean;\n  plugins?: string[];\n  reportUnusedArtifacts?: boolean;\n  conformance?: {\n    hook?: { provider?: string; model?: string; runs?: number };\n    include?: string[];\n    exclude?: string[];\n    plans?: string[];\n  };\n}\n\n/** What the file the section came from carries beside it. */\nexport interface ConfigFileContext {\n  /** The file as the user would name it, for messages. */\n  source?: string;\n  /** The file's top-level `providers:`; `{}` when it declares none. */\n  providers?: ProvidersConfig;\n}\n\nexport function parseConfig(\n  raw: unknown,\n  file: ConfigFileContext = {},\n): TracevalsConfig {\n  const source = file.source ?? DEFAULT_CONFIG_FILENAME;\n  // Before the schema: Ajv's enum error names neither the value nor the\n  // grants that exist, and a grant is the key where a misreading costs most.\n  const unknownGrants = configuredGrants(raw).filter((g) => !isExecutionGrant(g));\n  if (unknownGrants.length > 0) {\n    throw new TracevalsError(`${source}: ${unknownGrantsMessage(unknownGrants)}`);\n  }\n  if (!validate(raw)) {\n    const detail = (validate.errors ?? [])\n      .map((e) => {\n        // Ajv reports an unknown key against the *parent* object, so the bare\n        // message (\"must NOT have additional properties\") leaves the reader to\n        // diff their file against the schema to find which key it meant. Name\n        // it: the common case is a removed key in an unmigrated config —\n        // `judge.maxCostUsd` after the turn budget landed, say — and a\n        // migration error that makes you guess is one people work around.\n        const extra =\n          e.keyword === \"additionalProperties\"\n            ? (e.params as { additionalProperty?: string }).additionalProperty\n            : undefined;\n        return extra !== undefined\n          ? `unknown key \"${extra}\"${camelCaseHint(extra, e.parentSchema)}`\n          : `${CONFIG_SECTION_KEY_PATH}${e.instancePath} ${e.message ?? \"is invalid\"}` +\n              movedProviderHint(e.instancePath, e.keyword);\n      })\n      .join(\"; \");\n    throw new TracevalsError(`${source}: ${detail}`);\n  }\n  const r = raw as RawConfig;\n  // Checked here, with the message every other tool in the family gives, so a\n  // typo is caught by every verb and not only the ones that reach a model.\n  // Whether a model has a provider to own it waits for the flags: a\n  // `--provider`, or the family's `providers.provider`, can supply the\n  // provider a configured model needs.\n  const provider = r.provider ?? null;\n  if (provider !== null) {\n    // jev only decides. Out of the loop a provider extracts rules and writes\n    // verdicts, which are generations.\n    if (provider === JEV) throw new TracevalsError(JEV_OUT_OF_LOOP);\n    assertKnownProvider(provider, (message) => new TracevalsError(message));\n  }\n  const hookProvider = r.conformance?.hook?.provider ?? null;\n  if (hookProvider !== null) {\n    assertKnownProvider(hookProvider, (message) => new TracevalsError(message), { decisions: true });\n  }\n  const config: TracevalsConfig = {\n    provider,\n    model: r.model ?? null,\n    providers: file.providers ?? {},\n    configSource: source,\n    judge: {\n      ensembleRuns: r.judge?.ensembleRuns ?? 3,\n      temperature: r.judge?.temperature ?? 0,\n      zones: {\n        autoPass: r.judge?.zones?.autoPass ?? 0.8,\n        autoFail: r.judge?.zones?.autoFail ?? 0.8,\n      },\n      cacheDir: r.judge?.cacheDir ?? \".manni/tracevals/cache\",\n      // `null`, not a number: unbounded is a state, and any number here would\n      // be a ceiling nobody asked for.\n      maxTurns: r.judge?.maxTurns ?? null,\n      // Always a list: the render site concatenates nothing onto it, but a\n      // hole here would be a special case in every consumer.\n      redact: [...(r.judge?.redact ?? [])],\n    },\n    render: {\n      maxBlockChars: r.render?.maxBlockChars ?? 2000,\n      maxTotalChars: r.render?.maxTotalChars ?? 150000,\n    },\n    execution: { allow: [...(r.execution?.allow ?? EXECUTION_GRANTS)] },\n    history: {\n      file: r.history?.file ?? \".manni/tracevals/history.jsonl\",\n    },\n    capture: {\n      // Beside the judge cache, under the state directory that already travels\n      // with the project — which is what puts a manifest next to its trace in\n      // the CI patterns the docs describe.\n      dir: r.capture?.dir ?? DEFAULT_CAPTURE_DIR,\n    },\n    fill: {\n      // 0.7 matches the manuscript's calibration bar for judged agreement.\n      confidenceThreshold: r.fill?.confidenceThreshold ?? 0.7,\n      maxEvalsPerArtifact: r.fill?.maxEvalsPerArtifact ?? 8,\n      temperature: r.fill?.temperature ?? 0,\n      // Separate from the judge cache: different key scheme and value shape.\n      cacheDir: r.fill?.cacheDir ?? \".manni/tracevals/cache/fill\",\n      maxTurns: r.fill?.maxTurns ?? null,\n    },\n    calibrate: {\n      labels: r.calibrate?.labels ?? DEFAULT_LABELS_FILE,\n      sweep: {\n        // Spans the range rather than filling it: the first sweep judges the\n        // corpus at the largest value here, so a wide grid is the one part of\n        // calibration that does cost money.\n        ensembleRuns: [...(r.calibrate?.sweep?.ensembleRuns ?? [1, 3, 5])],\n        autoPass: [\n          ...(r.calibrate?.sweep?.autoPass ?? [0.5, 0.6, 0.7, 0.8, 0.9, 0.95]),\n        ],\n        autoFail: [\n          ...(r.calibrate?.sweep?.autoFail ?? [0.5, 0.6, 0.7, 0.8, 0.9, 0.95]),\n        ],\n      },\n    },\n    failOnReview: r.failOnReview ?? true,\n    // Always a list, never undefined: the read site concatenates `--require`\n    // onto it, and a hole there would be a special case in every caller.\n    plugins: [...(r.plugins ?? [])],\n    // An observation, not a gate: listing it is opt-in because a real roster\n    // runs to hundreds of skills (ADR 01016).\n    reportUnusedArtifacts: r.reportUnusedArtifacts ?? false,\n    conformance:\n      r.conformance === undefined\n        ? null\n        : {\n            hook: {\n              provider: hookProvider,\n              model: r.conformance.hook?.model ?? null,\n              runs: r.conformance.hook?.runs ?? 1,\n            },\n            include: [...(r.conformance.include ?? [])],\n            exclude: [...(r.conformance.exclude ?? [])],\n            plans: [...(r.conformance.plans ?? [])],\n          },\n  };\n  // Compilability is not expressible in JSON Schema, and a pattern that cannot\n  // compile must fail here rather than at the moment a digest is about to be\n  // sent — a dropped redaction pattern is a silent leak.\n  compileRedactPatterns(config.judge.redact);\n  // Left absent rather than defaulted to a number: `0` is a meaningful limit\n  // (\"no false pass at all\"), so it cannot double as \"unset\".\n  for (const key of [\"maxFalsePass\", \"maxFalseFail\", \"maxReview\"] as const) {\n    if (typeof r.calibrate?.[key] === \"number\") {\n      config.calibrate[key] = r.calibrate[key];\n    }\n  }\n  return config;\n}\n\n/** This tool's config, and the directory its relative paths resolve from. */\nexport interface LoadedConfig {\n  config: TracevalsConfig;\n  /**\n   * The directory holding the config file, or `dir` when none was found.\n   * Plugin specifiers and the labels default resolve against it, so a\n   * committed config means the same thing from any working directory.\n   */\n  dir: string;\n  /**\n   * The file's top-level `collections:` (proposal 0041); `[]` with no config.\n   *\n   * Collections never choose tracevals' inputs — `run` and `calibrate` take\n   * traces, `fill` detects artifacts under `--project` — and there is no\n   * `--collection`. What they say is *where a relocated `metadata` block\n   * lives*, so a declared manifest is read for the evals an artifact no longer\n   * carries inline (proposals 0047 and 0049 §1).\n   */\n  collections: CollectionConfig[];\n  /**\n   * The config file's absolute path; absent when there is none. A keyless\n   * manifest owns what an artifact's schemas mark external (proposal 0068),\n   * and those schemas are read from meta's section of this same file.\n   */\n  path?: string;\n}\n\n/** How a command was told to find its config: `-c` and `--no-config`. */\nexport interface ConfigLookup {\n  /** `-c/--config`: read this file instead of discovering one. */\n  configPath?: string;\n  /** `--no-config`: skip discovery and run on the built-in defaults. */\n  noConfig?: boolean;\n}\n\n/**\n * Discover the family config from `dir` (cwd by default) upward to the\n * repository root and return this tool's section (`src/shared/config-file.ts`:\n * `manni.config.yaml` read at its `tracevals:` key, with the family's\n * top-level `providers:` beside it). An absent file — or one that carries only\n * other tools' sections — yields defaults.\n *\n * `-c` names a file and skips the walk; `--no-config` skips the file\n * altogether and runs on the built-in defaults, with `dir` still anchoring\n * whatever the config would otherwise have anchored.\n */\nexport async function discoverConfig(\n  dir = process.cwd(),\n  lookup: ConfigLookup = {},\n): Promise<LoadedConfig> {\n  if (lookup.noConfig === true) {\n    // No config means no collections, so no manifest owns anything and every\n    // artifact's evals are its own front matter's — the same rule cite states.\n    return { config: parseConfig({}), dir, collections: [] };\n  }\n  const file = await Promise.resolve().then(() =>\n    lookup.configPath === undefined\n      ? findConfigFileSync(dir, CONFIG_FILE)\n      : readConfigFileSync(lookup.configPath, dir, CONFIG_FILE),\n  );\n  if (file === null) return { config: parseConfig({}), dir, collections: [] };\n  return {\n    config: parseConfig(file.value ?? {}, {\n      source: file.source,\n      ...(file.providers !== undefined ? { providers: file.providers } : {}),\n    }),\n    dir: file.dir,\n    collections: file.collections,\n    path: file.path,\n  };\n}\n\n/** `discoverConfig`, for callers that only want the settings. */\nexport async function loadConfig(\n  dir = process.cwd(),\n  lookup: ConfigLookup = {},\n): Promise<TracevalsConfig> {\n  return (await discoverConfig(dir, lookup)).config;\n}\n","{\n  \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n  \"$id\": \"manni:tracevals:config\",\n  \"title\": \"tracevals section of manni.config.yaml\",\n  \"description\": \"Settings for manni tracevals, held under the `tracevals` key of the config file shared by the manni family of tools. Sibling keys belong to other tools and are not validated here.\",\n  \"type\": \"object\",\n  \"additionalProperties\": false,\n  \"properties\": {\n    \"provider\": {\n      \"type\": \"string\",\n      \"minLength\": 1,\n      \"description\": \"Which provider judges out of the loop, and extracts rules: auto, anthropic, openai, claude-cli, or llama-cpp. jev only decides, so it is refused here; name it as conformance.hook.provider. Overrides the family's top-level `providers.provider` for tracevals only. Connection settings — an endpoint, an API key's environment variable, the Claude CLI command — live in that top-level `providers:` map, never here.\"\n    },\n    \"model\": {\n      \"type\": \"string\",\n      \"minLength\": 1,\n      \"description\": \"The model within `provider`, which must be named at this level. Unset, the inference library's default for the winning provider is used; manni pins no model id of its own.\"\n    },\n    \"judge\": {\n      \"type\": \"object\",\n      \"additionalProperties\": false,\n      \"properties\": {\n        \"ensembleRuns\": { \"type\": \"integer\", \"minimum\": 1 },\n        \"temperature\": { \"type\": \"number\", \"minimum\": 0, \"maximum\": 2 },\n        \"zones\": {\n          \"type\": \"object\",\n          \"additionalProperties\": false,\n          \"properties\": {\n            \"autoPass\": { \"type\": \"number\", \"minimum\": 0, \"maximum\": 1 },\n            \"autoFail\": { \"type\": \"number\", \"minimum\": 0, \"maximum\": 1 }\n          }\n        },\n        \"cacheDir\": { \"type\": \"string\" },\n        \"maxTurns\": { \"type\": \"integer\", \"minimum\": 1, \"description\": \"Stop after this many ensemble runs. A cached ensemble spends none. Unset means unbounded; the remaining evals report `skipped` with the reason `turn budget` rather than aborting the run.\" },\n        \"redact\": {\n          \"type\": \"array\",\n          \"description\": \"Extra regular expressions scrubbed from the session digest before it is sent to a judge provider. Applied on top of the built-in secret shapes, never instead of them; each source is compiled with the `g` flag, and a match is replaced with `[redacted]`. Pattern matching is best-effort — --deterministic-only is the only setting that guarantees nothing leaves the machine.\",\n          \"items\": { \"type\": \"string\", \"minLength\": 1 }\n        }\n      }\n    },\n    \"execution\": {\n      \"type\": \"object\",\n      \"additionalProperties\": false,\n      \"description\": \"Operator grant for executing content-authored code.\",\n      \"properties\": {\n        \"allow\": {\n          \"type\": \"array\",\n          \"items\": { \"enum\": [\"frontmatter-commands\"] },\n          \"default\": [\"frontmatter-commands\"],\n          \"description\": \"Which content-authored code a run may execute. Absent, every grant holds; list fewer to narrow it, or write [] to run none. frontmatter-commands lets `command` evals declared in an artifact's front matter run; without it they report `skipped` with a reason, never `pass`.\"\n        }\n      }\n    },\n    \"render\": {\n      \"type\": \"object\",\n      \"additionalProperties\": false,\n      \"properties\": {\n        \"maxBlockChars\": { \"type\": \"integer\", \"minimum\": 100 },\n        \"maxTotalChars\": {\n          \"type\": \"integer\",\n          \"minimum\": 1000,\n          \"description\": \"Upper bound on the rendered digest, in characters. The timeline always keeps at least 200 characters, so a very long header can push the digest past this bound by up to 200.\"\n        }\n      }\n    },\n    \"history\": {\n      \"type\": \"object\",\n      \"additionalProperties\": false,\n      \"properties\": {\n        \"file\": { \"type\": \"string\" }\n      }\n    },\n    \"capture\": {\n      \"type\": \"object\",\n      \"additionalProperties\": false,\n      \"description\": \"Session manifests — sha256 of every instruction artifact plus the git SHA, recorded at session start by `manni tracevals capture` and read back by `run` to make staleness exact instead of an mtime guess. See ADR 01024.\",\n      \"properties\": {\n        \"dir\": {\n          \"type\": \"string\",\n          \"minLength\": 1,\n          \"description\": \"Directory manifests are written to and looked for, resolved against the project root. `run` also accepts one placed beside the trace as `<trace>.manifest.json`, and --manifest names one outright.\"\n        }\n      }\n    },\n    \"fill\": {\n      \"type\": \"object\",\n      \"additionalProperties\": false,\n      \"properties\": {\n        \"confidenceThreshold\": { \"type\": \"number\", \"minimum\": 0, \"maximum\": 1 },\n        \"maxEvalsPerArtifact\": { \"type\": \"integer\", \"minimum\": 1 },\n        \"temperature\": { \"type\": \"number\", \"minimum\": 0, \"maximum\": 2 },\n        \"cacheDir\": { \"type\": \"string\" },\n        \"maxTurns\": { \"type\": \"integer\", \"minimum\": 1, \"description\": \"Stop after this many inference calls, one per artifact filled. A cached artifact spends none. Unset means unbounded.\" }\n      }\n    },\n    \"calibrate\": {\n      \"type\": \"object\",\n      \"additionalProperties\": false,\n      \"description\": \"Settings for `manni tracevals calibrate` — measuring the tool's verdicts against a human's answers. See ADR 01022.\",\n      \"properties\": {\n        \"labels\": {\n          \"type\": \"string\",\n          \"minLength\": 1,\n          \"description\": \"Default labels sidecar, resolved against this config file's directory. Overridden by --labels.\"\n        },\n        \"maxFalsePass\": {\n          \"type\": \"integer\",\n          \"minimum\": 0,\n          \"description\": \"Fail the calibration run (exit 1) above this many false passes — labelled fail, judged pass. Unset by default: a calibration run is a measurement, not a gate.\"\n        },\n        \"maxFalseFail\": {\n          \"type\": \"integer\",\n          \"minimum\": 0,\n          \"description\": \"Fail the calibration run above this many false fails — labelled pass, judged fail.\"\n        },\n        \"maxReview\": {\n          \"type\": \"integer\",\n          \"minimum\": 0,\n          \"description\": \"Fail the calibration run above this many needs-review outcomes across the whole corpus.\"\n        },\n        \"sweep\": {\n          \"type\": \"object\",\n          \"additionalProperties\": false,\n          \"description\": \"Values --sweep tries on each axis, one axis at a time with the others held at their configured value. The corpus is judged once at the largest ensembleRuns here and every cell is re-scored from those cached runs, so the grid costs nothing beyond that one run.\",\n          \"properties\": {\n            \"ensembleRuns\": {\n              \"type\": \"array\",\n              \"minItems\": 1,\n              \"items\": { \"type\": \"integer\", \"minimum\": 1 }\n            },\n            \"autoPass\": {\n              \"type\": \"array\",\n              \"minItems\": 1,\n              \"items\": { \"type\": \"number\", \"minimum\": 0, \"maximum\": 1 }\n            },\n            \"autoFail\": {\n              \"type\": \"array\",\n              \"minItems\": 1,\n              \"items\": { \"type\": \"number\", \"minimum\": 0, \"maximum\": 1 }\n            }\n          }\n        }\n      }\n    },\n    \"conformance\": {\n      \"type\": \"object\",\n      \"additionalProperties\": false,\n      \"description\": \"Checking each turn against the rules the files that govern the agent declare. Present, even as {}, it puts tracevals in play under Claude Code hooks; absent, tracevals stays out of them.\",\n      \"properties\": {\n        \"hook\": {\n          \"type\": \"object\",\n          \"additionalProperties\": false,\n          \"description\": \"The judge inside a Stop or SubagentStop hook. Each key falls back to the top-level one of the same name.\",\n          \"properties\": {\n            \"provider\": {\n              \"type\": \"string\",\n              \"minLength\": 1,\n              \"description\": \"The provider that judges inside a hook. Default: tracevals.provider. jev is accepted here, and only here.\"\n            },\n            \"model\": {\n              \"type\": \"string\",\n              \"minLength\": 1,\n              \"description\": \"The model that judges inside a hook. Default: tracevals.model.\"\n            },\n            \"runs\": {\n              \"type\": \"integer\",\n              \"minimum\": 1,\n              \"description\": \"Judge calls per rule inside a hook. A rule blocks only when every run scores it not followed at the bar. jev makes one call and ignores it. Default 1.\"\n            }\n          }\n        },\n        \"include\": {\n          \"type\": \"array\",\n          \"description\": \"Globs, relative to the project root, naming files that govern agents beyond the known formats. Each applies to every turn.\",\n          \"items\": { \"type\": \"string\", \"minLength\": 1 }\n        },\n        \"exclude\": {\n          \"type\": \"array\",\n          \"description\": \"Globs, relative to the project root, naming files never treated as rule sources, in any format. It removes plan and spec files too.\",\n          \"items\": { \"type\": \"string\", \"minLength\": 1 }\n        },\n        \"plans\": {\n          \"type\": \"array\",\n          \"default\": [],\n          \"description\": \"Globs, relative to the project root, naming files that say what to build, beyond the known spec formats. Each is a rule source once the session touches it.\",\n          \"items\": { \"type\": \"string\", \"minLength\": 1 }\n        }\n      }\n    },\n    \"failOnReview\": { \"type\": \"boolean\" },\n    \"plugins\": {\n      \"type\": \"array\",\n      \"description\": \"Modules imported before evals are planned, so one calling registerGrader() can add a grader kind the built-ins do not cover. A relative or absolute path resolves against this file's directory, not the working directory; a bare package name resolves the way an import from this file's directory would. Load order is significant: a later entry wins a colliding kind.\",\n      \"items\": { \"type\": \"string\", \"minLength\": 1 }\n    },\n    \"reportUnusedArtifacts\": {\n      \"type\": \"boolean\",\n      \"description\": \"List every skill and agent the session was offered and never used, rather than only counting them. Off by default: a real roster runs to hundreds of skills.\"\n    }\n  }\n}\n","/**\n * The calibration labels sidecar (ADR 01022).\n *\n * A label is a human's answer for one `(trace, artifact, eval)`. It lives in\n * its own file rather than in the eval entry for two reasons: the vendored\n * `artifact-evals` vocabulary is docmeta's and `inlineEval` is closed to\n * additions (ADR 01010), and — more importantly — a label is a property of a\n * *corpus and a reviewer*, not of the artifact. Two teams calibrating the same\n * skill against different sessions hold different ground truth, and neither\n * belongs in the SKILL.md.\n */\nimport { readFile } from \"node:fs/promises\";\nimport { dirname, resolve } from \"node:path\";\nimport { Ajv2020 } from \"ajv/dist/2020.js\";\nimport { parse as parseYaml } from \"yaml\";\nimport labelsSchemaJson from \"./labels-schema.json\" with { type: \"json\" };\nimport { errorMessage } from \"../../shared/errors.js\";\nimport { TracevalsError } from \"../types.js\";\nimport type { ArtifactType } from \"../artifacts/types.js\";\n\nconst labelsSchema = labelsSchemaJson as Record<string, unknown>;\n\n/** Conventional location inside a project; overridable with `--labels`. */\nexport const DEFAULT_LABELS_FILE = \"tracevals/labels.yaml\";\n\n/**\n * What a human decided. `needs-review` is a legitimate label, not a cop-out:\n * an eval you found genuinely ambiguous is the one that tells you whether the\n * review band is set sensibly, and the docs have always asked for a couple.\n */\nexport type LabelOutcome = \"pass\" | \"fail\" | \"needs-review\";\n\nexport interface EvalLabel {\n  /** Path exactly as written in the file, for error messages. */\n  trace: string;\n  /** Resolved absolute path — the join key against the batch corpus. */\n  traceFile: string;\n  artifact: string;\n  /** Only when the file disambiguates a name shared by two artifact kinds. */\n  type?: ArtifactType;\n  eval: string;\n  expected: LabelOutcome;\n  note?: string;\n}\n\nconst ajv = new Ajv2020({ allErrors: true });\nconst validate = ajv.compile(labelsSchema);\n\n/**\n * Stable identity for one label, and the duplicate-detection key.\n *\n * The separator is written as a backslash-u escape, never as a literal NUL:\n * the runtime value is identical, but a literal one makes git call the file\n * binary — its diff renders as `Bin 0 -> N bytes` and cannot be reviewed or\n * three-way merged, and `grep` answers `Binary file … matches` and stops.\n * `test/unit/source-text-safety.test.ts` holds the whole tree to this.\n */\nexport const labelKey = (\n  traceFile: string,\n  artifact: string,\n  evalName: string,\n  type?: ArtifactType,\n): string => `${traceFile}\\u0000${type ?? \"\"}\\u0000${artifact}\\u0000${evalName}`;\n\n/**\n * Validate a labels document and resolve its trace paths.\n *\n * `file` is the path the text came from; trace paths resolve against **its**\n * directory rather than the working directory, matching how `plugins` resolves\n * against the config file that names them. A labels file travels with its\n * corpus, so it must mean the same thing from any cwd.\n */\nexport function parseLabels(text: string, file: string): EvalLabel[] {\n  let raw: unknown;\n  try {\n    raw = parseYaml(text);\n  } catch (err) {\n    throw new TracevalsError(\n      `could not parse ${file}: ${errorMessage(err)}`,\n    );\n  }\n  if (raw === null || raw === undefined) {\n    throw new TracevalsError(`invalid labels file ${file}: it is empty`);\n  }\n  if (!validate(raw)) {\n    const detail = (validate.errors ?? [])\n      .map((e) => `${e.instancePath || \"/\"} ${e.message ?? \"invalid\"}`)\n      .join(\"; \");\n    // The empty-list case gets its own wording: \"must NOT have fewer than 1\n    // items\" describes the schema, not the mistake.\n    const empty = (validate.errors ?? []).some(\n      (e) => e.instancePath === \"/labels\" && e.keyword === \"minItems\",\n    );\n    throw new TracevalsError(\n      empty\n        ? `invalid labels file ${file}: it must carry at least one label — an empty one measures nothing`\n        : `invalid labels file ${file}: ${detail}`,\n    );\n  }\n\n  const base = dirname(resolve(file));\n  const labels: EvalLabel[] = [];\n  const seen = new Set<string>();\n  for (const entry of (raw as { labels: Record<string, string>[] }).labels) {\n    const traceFile = resolve(base, entry.trace as string);\n    const type = entry.type as ArtifactType | undefined;\n    const key = labelKey(\n      traceFile,\n      entry.artifact as string,\n      entry.eval as string,\n      type,\n    );\n    if (seen.has(key)) {\n      // Two answers for one question is not a merge problem to resolve at run\n      // time — whichever won would silently decide the measurement.\n      throw new TracevalsError(\n        `invalid labels file ${file}: duplicate label for ${entry.artifact ?? \"?\"} › ${entry.eval ?? \"?\"} on ${entry.trace ?? \"?\"}`,\n      );\n    }\n    seen.add(key);\n    labels.push({\n      trace: entry.trace as string,\n      traceFile,\n      artifact: entry.artifact as string,\n      ...(type !== undefined ? { type } : {}),\n      eval: entry.eval as string,\n      expected: entry.expected as LabelOutcome,\n      ...(entry.note !== undefined ? { note: entry.note } : {}),\n    });\n  }\n  return labels;\n}\n\nexport async function loadLabels(file: string): Promise<EvalLabel[]> {\n  let text: string;\n  try {\n    text = await readFile(file, \"utf-8\");\n  } catch (err) {\n    throw new TracevalsError(\n      `could not read labels file ${file}: ${errorMessage(err)}`,\n    );\n  }\n  return parseLabels(text, file);\n}\n","{\n  \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n  \"$id\": \"manni:tracevals:calibration-labels\",\n  \"title\": \"manni tracevals calibration labels\",\n  \"description\": \"Ground truth for `manni tracevals calibrate`: what a human decided a given eval should have produced on a given trace. A sidecar rather than an eval field, because a label belongs to a corpus and a reviewer, not to the artifact — and because the eval vocabulary is docmeta's, vendored byte-identical, with `inlineEval` closed to additions (ADR 01010).\",\n  \"type\": \"object\",\n  \"additionalProperties\": false,\n  \"required\": [\"version\", \"labels\"],\n  \"properties\": {\n    \"version\": {\n      \"const\": 1,\n      \"description\": \"Format version. Pinned so a future shape change is an explicit migration rather than a silently-reinterpreted file.\"\n    },\n    \"labels\": {\n      \"type\": \"array\",\n      \"minItems\": 1,\n      \"description\": \"One entry per (trace, artifact, eval) you have judged by hand.\",\n      \"items\": {\n        \"type\": \"object\",\n        \"additionalProperties\": false,\n        \"required\": [\"trace\", \"artifact\", \"eval\", \"expected\"],\n        \"properties\": {\n          \"trace\": {\n            \"type\": \"string\",\n            \"minLength\": 1,\n            \"description\": \"Path to the trace file, resolved against this file's own directory — not the working directory.\"\n          },\n          \"artifact\": {\n            \"type\": \"string\",\n            \"minLength\": 1,\n            \"description\": \"Artifact name as the report shows it: a skill name, a subagent_type, or a project-rules filename such as CLAUDE.md.\"\n          },\n          \"type\": {\n            \"enum\": [\"skill\", \"agent\", \"project-rules\", \"slash-command\"],\n            \"description\": \"Optional disambiguator, needed when one name resolves to two kinds of artifact — a skill and an agent, or a skill and the slash command that types it. Every `ArtifactType` the resolver can produce belongs here: a label whose type this rejects has no way to name the artifact it means.\"\n          },\n          \"eval\": {\n            \"type\": \"string\",\n            \"minLength\": 1,\n            \"description\": \"The eval's id. Shorthand entries with no declared id get a positional one (eval-1, eval-2, ...), so labelling those is only as stable as the order they are written in.\"\n          },\n          \"expected\": {\n            \"enum\": [\"pass\", \"fail\", \"needs-review\"],\n            \"description\": \"What you decided. `needs-review` means you found it genuinely ambiguous and want the tool to defer too.\"\n          },\n          \"note\": {\n            \"type\": \"string\",\n            \"description\": \"Why you decided that. Carried into the disagreement report, where it is the whole reason a disagreement is actionable.\"\n          }\n        }\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,SAAS,WAAAA,gBAAe;;;ACVxB;AAAA,EACE,SAAW;AAAA,EACX,KAAO;AAAA,EACP,OAAS;AAAA,EACT,aAAe;AAAA,EACf,MAAQ;AAAA,EACR,sBAAwB;AAAA,EACxB,YAAc;AAAA,IACZ,UAAY;AAAA,MACV,MAAQ;AAAA,MACR,WAAa;AAAA,MACb,aAAe;AAAA,IACjB;AAAA,IACA,OAAS;AAAA,MACP,MAAQ;AAAA,MACR,WAAa;AAAA,MACb,aAAe;AAAA,IACjB;AAAA,IACA,OAAS;AAAA,MACP,MAAQ;AAAA,MACR,sBAAwB;AAAA,MACxB,YAAc;AAAA,QACZ,cAAgB,EAAE,MAAQ,WAAW,SAAW,EAAE;AAAA,QAClD,aAAe,EAAE,MAAQ,UAAU,SAAW,GAAG,SAAW,EAAE;AAAA,QAC9D,OAAS;AAAA,UACP,MAAQ;AAAA,UACR,sBAAwB;AAAA,UACxB,YAAc;AAAA,YACZ,UAAY,EAAE,MAAQ,UAAU,SAAW,GAAG,SAAW,EAAE;AAAA,YAC3D,UAAY,EAAE,MAAQ,UAAU,SAAW,GAAG,SAAW,EAAE;AAAA,UAC7D;AAAA,QACF;AAAA,QACA,UAAY,EAAE,MAAQ,SAAS;AAAA,QAC/B,UAAY,EAAE,MAAQ,WAAW,SAAW,GAAG,aAAe,6LAA6L;AAAA,QAC3P,QAAU;AAAA,UACR,MAAQ;AAAA,UACR,aAAe;AAAA,UACf,OAAS,EAAE,MAAQ,UAAU,WAAa,EAAE;AAAA,QAC9C;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAa;AAAA,MACX,MAAQ;AAAA,MACR,sBAAwB;AAAA,MACxB,aAAe;AAAA,MACf,YAAc;AAAA,QACZ,OAAS;AAAA,UACP,MAAQ;AAAA,UACR,OAAS,EAAE,MAAQ,CAAC,sBAAsB,EAAE;AAAA,UAC5C,SAAW,CAAC,sBAAsB;AAAA,UAClC,aAAe;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAU;AAAA,MACR,MAAQ;AAAA,MACR,sBAAwB;AAAA,MACxB,YAAc;AAAA,QACZ,eAAiB,EAAE,MAAQ,WAAW,SAAW,IAAI;AAAA,QACrD,eAAiB;AAAA,UACf,MAAQ;AAAA,UACR,SAAW;AAAA,UACX,aAAe;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAAA,IACA,SAAW;AAAA,MACT,MAAQ;AAAA,MACR,sBAAwB;AAAA,MACxB,YAAc;AAAA,QACZ,MAAQ,EAAE,MAAQ,SAAS;AAAA,MAC7B;AAAA,IACF;AAAA,IACA,SAAW;AAAA,MACT,MAAQ;AAAA,MACR,sBAAwB;AAAA,MACxB,aAAe;AAAA,MACf,YAAc;AAAA,QACZ,KAAO;AAAA,UACL,MAAQ;AAAA,UACR,WAAa;AAAA,UACb,aAAe;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAQ;AAAA,MACN,MAAQ;AAAA,MACR,sBAAwB;AAAA,MACxB,YAAc;AAAA,QACZ,qBAAuB,EAAE,MAAQ,UAAU,SAAW,GAAG,SAAW,EAAE;AAAA,QACtE,qBAAuB,EAAE,MAAQ,WAAW,SAAW,EAAE;AAAA,QACzD,aAAe,EAAE,MAAQ,UAAU,SAAW,GAAG,SAAW,EAAE;AAAA,QAC9D,UAAY,EAAE,MAAQ,SAAS;AAAA,QAC/B,UAAY,EAAE,MAAQ,WAAW,SAAW,GAAG,aAAe,uHAAuH;AAAA,MACvL;AAAA,IACF;AAAA,IACA,WAAa;AAAA,MACX,MAAQ;AAAA,MACR,sBAAwB;AAAA,MACxB,aAAe;AAAA,MACf,YAAc;AAAA,QACZ,QAAU;AAAA,UACR,MAAQ;AAAA,UACR,WAAa;AAAA,UACb,aAAe;AAAA,QACjB;AAAA,QACA,cAAgB;AAAA,UACd,MAAQ;AAAA,UACR,SAAW;AAAA,UACX,aAAe;AAAA,QACjB;AAAA,QACA,cAAgB;AAAA,UACd,MAAQ;AAAA,UACR,SAAW;AAAA,UACX,aAAe;AAAA,QACjB;AAAA,QACA,WAAa;AAAA,UACX,MAAQ;AAAA,UACR,SAAW;AAAA,UACX,aAAe;AAAA,QACjB;AAAA,QACA,OAAS;AAAA,UACP,MAAQ;AAAA,UACR,sBAAwB;AAAA,UACxB,aAAe;AAAA,UACf,YAAc;AAAA,YACZ,cAAgB;AAAA,cACd,MAAQ;AAAA,cACR,UAAY;AAAA,cACZ,OAAS,EAAE,MAAQ,WAAW,SAAW,EAAE;AAAA,YAC7C;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,cACR,UAAY;AAAA,cACZ,OAAS,EAAE,MAAQ,UAAU,SAAW,GAAG,SAAW,EAAE;AAAA,YAC1D;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,cACR,UAAY;AAAA,cACZ,OAAS,EAAE,MAAQ,UAAU,SAAW,GAAG,SAAW,EAAE;AAAA,YAC1D;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,aAAe;AAAA,MACb,MAAQ;AAAA,MACR,sBAAwB;AAAA,MACxB,aAAe;AAAA,MACf,YAAc;AAAA,QACZ,MAAQ;AAAA,UACN,MAAQ;AAAA,UACR,sBAAwB;AAAA,UACxB,aAAe;AAAA,UACf,YAAc;AAAA,YACZ,UAAY;AAAA,cACV,MAAQ;AAAA,cACR,WAAa;AAAA,cACb,aAAe;AAAA,YACjB;AAAA,YACA,OAAS;AAAA,cACP,MAAQ;AAAA,cACR,WAAa;AAAA,cACb,aAAe;AAAA,YACjB;AAAA,YACA,MAAQ;AAAA,cACN,MAAQ;AAAA,cACR,SAAW;AAAA,cACX,aAAe;AAAA,YACjB;AAAA,UACF;AAAA,QACF;AAAA,QACA,SAAW;AAAA,UACT,MAAQ;AAAA,UACR,aAAe;AAAA,UACf,OAAS,EAAE,MAAQ,UAAU,WAAa,EAAE;AAAA,QAC9C;AAAA,QACA,SAAW;AAAA,UACT,MAAQ;AAAA,UACR,aAAe;AAAA,UACf,OAAS,EAAE,MAAQ,UAAU,WAAa,EAAE;AAAA,QAC9C;AAAA,QACA,OAAS;AAAA,UACP,MAAQ;AAAA,UACR,SAAW,CAAC;AAAA,UACZ,aAAe;AAAA,UACf,OAAS,EAAE,MAAQ,UAAU,WAAa,EAAE;AAAA,QAC9C;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAgB,EAAE,MAAQ,UAAU;AAAA,IACpC,SAAW;AAAA,MACT,MAAQ;AAAA,MACR,aAAe;AAAA,MACf,OAAS,EAAE,MAAQ,UAAU,WAAa,EAAE;AAAA,IAC9C;AAAA,IACA,uBAAyB;AAAA,MACvB,MAAQ;AAAA,MACR,aAAe;AAAA,IACjB;AAAA,EACF;AACF;;;AC9LA,SAAS,gBAAgB;AACzB,SAAS,SAAS,eAAe;AACjC,SAAS,eAAe;AACxB,SAAS,SAAS,iBAAiB;;;ACdnC;AAAA,EACE,SAAW;AAAA,EACX,KAAO;AAAA,EACP,OAAS;AAAA,EACT,aAAe;AAAA,EACf,MAAQ;AAAA,EACR,sBAAwB;AAAA,EACxB,UAAY,CAAC,WAAW,QAAQ;AAAA,EAChC,YAAc;AAAA,IACZ,SAAW;AAAA,MACT,OAAS;AAAA,MACT,aAAe;AAAA,IACjB;AAAA,IACA,QAAU;AAAA,MACR,MAAQ;AAAA,MACR,UAAY;AAAA,MACZ,aAAe;AAAA,MACf,OAAS;AAAA,QACP,MAAQ;AAAA,QACR,sBAAwB;AAAA,QACxB,UAAY,CAAC,SAAS,YAAY,QAAQ,UAAU;AAAA,QACpD,YAAc;AAAA,UACZ,OAAS;AAAA,YACP,MAAQ;AAAA,YACR,WAAa;AAAA,YACb,aAAe;AAAA,UACjB;AAAA,UACA,UAAY;AAAA,YACV,MAAQ;AAAA,YACR,WAAa;AAAA,YACb,aAAe;AAAA,UACjB;AAAA,UACA,MAAQ;AAAA,YACN,MAAQ,CAAC,SAAS,SAAS,iBAAiB,eAAe;AAAA,YAC3D,aAAe;AAAA,UACjB;AAAA,UACA,MAAQ;AAAA,YACN,MAAQ;AAAA,YACR,WAAa;AAAA,YACb,aAAe;AAAA,UACjB;AAAA,UACA,UAAY;AAAA,YACV,MAAQ,CAAC,QAAQ,QAAQ,cAAc;AAAA,YACvC,aAAe;AAAA,UACjB;AAAA,UACA,MAAQ;AAAA,YACN,MAAQ;AAAA,YACR,aAAe;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ADjCA,IAAM,eAAe;AAGd,IAAM,sBAAsB;AAsBnC,IAAM,MAAM,IAAI,QAAQ,EAAE,WAAW,KAAK,CAAC;AAC3C,IAAM,WAAW,IAAI,QAAQ,YAAY;AAWlC,IAAM,WAAW,CACtB,WACA,UACA,UACA,SACW,GAAG,SAAS,KAAS,QAAQ,EAAE,KAAS,QAAQ,KAAS,QAAQ;AAUvE,SAAS,YAAY,MAAc,MAA2B;AACnE,MAAI;AACJ,MAAI;AACF,UAAM,UAAU,IAAI;AAAA,EACtB,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,mBAAmB,IAAI,KAAK,aAAa,GAAG,CAAC;AAAA,IAC/C;AAAA,EACF;AACA,MAAI,QAAQ,QAAQ,QAAQ,QAAW;AACrC,UAAM,IAAI,eAAe,uBAAuB,IAAI,eAAe;AAAA,EACrE;AACA,MAAI,CAAC,SAAS,GAAG,GAAG;AAClB,UAAM,UAAU,SAAS,UAAU,CAAC,GACjC,IAAI,CAAC,MAAM,GAAG,EAAE,gBAAgB,GAAG,IAAI,EAAE,WAAW,SAAS,EAAE,EAC/D,KAAK,IAAI;AAGZ,UAAM,SAAS,SAAS,UAAU,CAAC,GAAG;AAAA,MACpC,CAAC,MAAM,EAAE,iBAAiB,aAAa,EAAE,YAAY;AAAA,IACvD;AACA,UAAM,IAAI;AAAA,MACR,QACI,uBAAuB,IAAI,4EAC3B,uBAAuB,IAAI,KAAK,MAAM;AAAA,IAC5C;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,QAAQ,IAAI,CAAC;AAClC,QAAM,SAAsB,CAAC;AAC7B,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,SAAU,IAA6C,QAAQ;AACxE,UAAM,YAAY,QAAQ,MAAM,MAAM,KAAe;AACrD,UAAM,OAAO,MAAM;AACnB,UAAM,MAAM;AAAA,MACV;AAAA,MACA,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,IACF;AACA,QAAI,KAAK,IAAI,GAAG,GAAG;AAGjB,YAAM,IAAI;AAAA,QACR,uBAAuB,IAAI,yBAAyB,MAAM,YAAY,GAAG,WAAM,MAAM,QAAQ,GAAG,OAAO,MAAM,SAAS,GAAG;AAAA,MAC3H;AAAA,IACF;AACA,SAAK,IAAI,GAAG;AACZ,WAAO,KAAK;AAAA,MACV,OAAO,MAAM;AAAA,MACb;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,MACrC,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,IACzD,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,eAAsB,WAAW,MAAoC;AACnE,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,SAAS,MAAM,OAAO;AAAA,EACrC,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,8BAA8B,IAAI,KAAK,aAAa,GAAG,CAAC;AAAA,IAC1D;AAAA,EACF;AACA,SAAO,YAAY,MAAM,IAAI;AAC/B;;;AF3GA,IAAM,eAAe;AAEd,IAAM,0BACX,oBAAoB,CAAC,KAAK;AAMrB,IAAM,qBAAqB;AAOlC,IAAM,0BAA0B,IAAI,kBAAkB;AAOtD,IAAM,cAAiC;AAAA,EACrC,SAAS;AAAA,EACT,aAAa,CAAC;AAAA,EACd,SAAS,CAAC,YAAY,IAAI,eAAe,OAAO;AAClD;AAiHA,IAAMC,OAAM,IAAIC,SAAQ,EAAE,WAAW,MAAM,SAAS,KAAK,CAAC;AAC1D,IAAMC,YAAWF,KAAI,QAAQ,YAAY;AAQzC,SAAS,cAAc,KAAa,cAA+B;AACjE,QAAM,QAAQ,IAAI,QAAQ,gBAAgB,CAAC,GAAG,MAAc,EAAE,YAAY,CAAC;AAC3E,MAAI,UAAU,OAAO,iBAAiB,QAAQ,OAAO,iBAAiB,UAAU;AAC9E,WAAO;AAAA,EACT;AACA,QAAM,aAAc,aAA0C;AAC9D,SAAO,eAAe,QACpB,OAAO,eAAe,YACtB,OAAO,OAAO,YAAY,KAAK,IAC7B,mBAAmB,KAAK,OACxB;AACN;AAUA,SAAS,kBAAkB,cAAsB,SAAyB;AACxE,SAAO,iBAAiB,eAAe,YAAY,SAC/C,qGACA;AACN;AAwDO,SAAS,YACd,KACA,OAA0B,CAAC,GACV;AACjB,QAAM,SAAS,KAAK,UAAU;AAG9B,QAAM,gBAAgB,iBAAiB,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAC9E,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,IAAI,eAAe,GAAG,MAAM,KAAK,qBAAqB,aAAa,CAAC,EAAE;AAAA,EAC9E;AACA,MAAI,CAACE,UAAS,GAAG,GAAG;AAClB,UAAM,UAAUA,UAAS,UAAU,CAAC,GACjC,IAAI,CAAC,MAAM;AAOV,YAAM,QACJ,EAAE,YAAY,yBACT,EAAE,OAA2C,qBAC9C;AACN,aAAO,UAAU,SACb,gBAAgB,KAAK,IAAI,cAAc,OAAO,EAAE,YAAY,CAAC,KAC7D,GAAG,uBAAuB,GAAG,EAAE,YAAY,IAAI,EAAE,WAAW,YAAY,KACtE,kBAAkB,EAAE,cAAc,EAAE,OAAO;AAAA,IACnD,CAAC,EACA,KAAK,IAAI;AACZ,UAAM,IAAI,eAAe,GAAG,MAAM,KAAK,MAAM,EAAE;AAAA,EACjD;AACA,QAAM,IAAI;AAMV,QAAM,WAAW,EAAE,YAAY;AAC/B,MAAI,aAAa,MAAM;AAGrB,QAAI,aAAa,IAAK,OAAM,IAAI,eAAe,eAAe;AAC9D,wBAAoB,UAAU,CAAC,YAAY,IAAI,eAAe,OAAO,CAAC;AAAA,EACxE;AACA,QAAM,eAAe,EAAE,aAAa,MAAM,YAAY;AACtD,MAAI,iBAAiB,MAAM;AACzB,wBAAoB,cAAc,CAAC,YAAY,IAAI,eAAe,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACjG;AACA,QAAM,SAA0B;AAAA,IAC9B;AAAA,IACA,OAAO,EAAE,SAAS;AAAA,IAClB,WAAW,KAAK,aAAa,CAAC;AAAA,IAC9B,cAAc;AAAA,IACd,OAAO;AAAA,MACL,cAAc,EAAE,OAAO,gBAAgB;AAAA,MACvC,aAAa,EAAE,OAAO,eAAe;AAAA,MACrC,OAAO;AAAA,QACL,UAAU,EAAE,OAAO,OAAO,YAAY;AAAA,QACtC,UAAU,EAAE,OAAO,OAAO,YAAY;AAAA,MACxC;AAAA,MACA,UAAU,EAAE,OAAO,YAAY;AAAA;AAAA;AAAA,MAG/B,UAAU,EAAE,OAAO,YAAY;AAAA;AAAA;AAAA,MAG/B,QAAQ,CAAC,GAAI,EAAE,OAAO,UAAU,CAAC,CAAE;AAAA,IACrC;AAAA,IACA,QAAQ;AAAA,MACN,eAAe,EAAE,QAAQ,iBAAiB;AAAA,MAC1C,eAAe,EAAE,QAAQ,iBAAiB;AAAA,IAC5C;AAAA,IACA,WAAW,EAAE,OAAO,CAAC,GAAI,EAAE,WAAW,SAAS,gBAAiB,EAAE;AAAA,IAClE,SAAS;AAAA,MACP,MAAM,EAAE,SAAS,QAAQ;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA;AAAA;AAAA;AAAA,MAIP,KAAK,EAAE,SAAS,OAAO;AAAA,IACzB;AAAA,IACA,MAAM;AAAA;AAAA,MAEJ,qBAAqB,EAAE,MAAM,uBAAuB;AAAA,MACpD,qBAAqB,EAAE,MAAM,uBAAuB;AAAA,MACpD,aAAa,EAAE,MAAM,eAAe;AAAA;AAAA,MAEpC,UAAU,EAAE,MAAM,YAAY;AAAA,MAC9B,UAAU,EAAE,MAAM,YAAY;AAAA,IAChC;AAAA,IACA,WAAW;AAAA,MACT,QAAQ,EAAE,WAAW,UAAU;AAAA,MAC/B,OAAO;AAAA;AAAA;AAAA;AAAA,QAIL,cAAc,CAAC,GAAI,EAAE,WAAW,OAAO,gBAAgB,CAAC,GAAG,GAAG,CAAC,CAAE;AAAA,QACjE,UAAU;AAAA,UACR,GAAI,EAAE,WAAW,OAAO,YAAY,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI;AAAA,QACpE;AAAA,QACA,UAAU;AAAA,UACR,GAAI,EAAE,WAAW,OAAO,YAAY,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI;AAAA,QACpE;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc,EAAE,gBAAgB;AAAA;AAAA;AAAA,IAGhC,SAAS,CAAC,GAAI,EAAE,WAAW,CAAC,CAAE;AAAA;AAAA;AAAA,IAG9B,uBAAuB,EAAE,yBAAyB;AAAA,IAClD,aACE,EAAE,gBAAgB,SACd,OACA;AAAA,MACE,MAAM;AAAA,QACJ,UAAU;AAAA,QACV,OAAO,EAAE,YAAY,MAAM,SAAS;AAAA,QACpC,MAAM,EAAE,YAAY,MAAM,QAAQ;AAAA,MACpC;AAAA,MACA,SAAS,CAAC,GAAI,EAAE,YAAY,WAAW,CAAC,CAAE;AAAA,MAC1C,SAAS,CAAC,GAAI,EAAE,YAAY,WAAW,CAAC,CAAE;AAAA,MAC1C,OAAO,CAAC,GAAI,EAAE,YAAY,SAAS,CAAC,CAAE;AAAA,IACxC;AAAA,EACR;AAIA,wBAAsB,OAAO,MAAM,MAAM;AAGzC,aAAW,OAAO,CAAC,gBAAgB,gBAAgB,WAAW,GAAY;AACxE,QAAI,OAAO,EAAE,YAAY,GAAG,MAAM,UAAU;AAC1C,aAAO,UAAU,GAAG,IAAI,EAAE,UAAU,GAAG;AAAA,IACzC;AAAA,EACF;AACA,SAAO;AACT;AAgDA,eAAsB,eACpB,MAAM,QAAQ,IAAI,GAClB,SAAuB,CAAC,GACD;AACvB,MAAI,OAAO,aAAa,MAAM;AAG5B,WAAO,EAAE,QAAQ,YAAY,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,EAAE;AAAA,EACzD;AACA,QAAM,OAAO,MAAM,QAAQ,QAAQ,EAAE;AAAA,IAAK,MACxC,OAAO,eAAe,SAClB,mBAAmB,KAAK,WAAW,IACnC,mBAAmB,OAAO,YAAY,KAAK,WAAW;AAAA,EAC5D;AACA,MAAI,SAAS,KAAM,QAAO,EAAE,QAAQ,YAAY,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,EAAE;AAC1E,SAAO;AAAA,IACL,QAAQ,YAAY,KAAK,SAAS,CAAC,GAAG;AAAA,MACpC,QAAQ,KAAK;AAAA,MACb,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,IACtE,CAAC;AAAA,IACD,KAAK,KAAK;AAAA,IACV,aAAa,KAAK;AAAA,IAClB,MAAM,KAAK;AAAA,EACb;AACF;AAGA,eAAsB,WACpB,MAAM,QAAQ,IAAI,GAClB,SAAuB,CAAC,GACE;AAC1B,UAAQ,MAAM,eAAe,KAAK,MAAM,GAAG;AAC7C;","names":["Ajv2020","ajv","Ajv2020","validate"]}