@jeger-ai/opengantry 3.3.0 → 3.4.0

package/README.md

@@ -194,8 +194,9 @@ Violations carry `file` and `line` for the failure envelope.
 ### 5. Mission + verify
 
 ```bash
-gantry legislate "add feature X" --msn MSN-0042 --skill-key gantry
-# Planner commits [MSN-0042] mission YAML
+gantry legislate --from-intent "add feature X" --msn MSN-0042 --skill-key gantry
+# or: gantry contract propose "add feature X" --skill-key gantry
+# Planner commits [MSN-0042] mission YAML (seals contract + contract_sha256)
 eval "$(gantry runtime env --mission .gitagent/missions/MSN-0042.yaml)"
 # ... do work, append trace to EXECUTOR_LOG.md ...
 gantry verify --mission .gitagent/missions/MSN-0042.yaml --json
@@ -213,6 +214,8 @@ On failure, external agents ingest `findings[]`:
 }
 ```
 
+**Mission contracts (v3.4.0):** Planner-sealed inline `contract` + `contract_sha256` on the mission YAML (tighten-only TMVC / forbidden / import cage). `gantry contract propose|check|show`, `gantry legislate --from-intent`, MCP `gxt_propose_contract`. Verify runs a `contract` phase after git-proof; `gantry runtime env` exports `GXT_ALLOWED_IMPORTS` / `GXT_BANNED_IMPORTS`; `runtime exec` reports `contract_violation` ([ADR-0045](.gitagent/out-of-scope/ADR-0045-mission-contracts.md)).
+
 **Org control plane (v3.3.0):** pin a signed org policy repo with `.gitagent/foreman/POLICY.pointer.json` and `gantry policy pull` (doctor/verify stay offline). Enable `ledger.mode: local` to append digest-only entries to `refs/gxt/ledger` (`gantry ledger verify` / `export --format soc2-pack`). Cross-repo gates use mission `depends_on[]` plus `gantry deps fetch` before verify ([ADR-0042](.gitagent/out-of-scope/ADR-0042-org-policy-bundle.md), [ADR-0043](.gitagent/out-of-scope/ADR-0043-compliance-ledger-git-ref.md), [ADR-0044](.gitagent/out-of-scope/ADR-0044-cross-repo-mission-dependencies.md)). Receipt schema stays 0.2.0.
 
 **Kernel (v3.3.0 breaking):** `import { verifyMission } from "@jeger-ai/opengantry/kernel"` now returns a Promise — always `await`. `verifyMissionAsync` is a deprecated alias (`DeprecationWarning` `GXT_DEP_VERIFY_MISSION_ASYNC`, removed in 4.0). CLI `--json-out` is unchanged.

package/dist/cli/commands/contract.d.ts

@@ -0,0 +1,21 @@
+export interface ContractCheckCliOptions {
+    mission?: string;
+    json?: boolean;
+    /** Restrict the import scan to these repo-relative files. */
+    files?: string[];
+}
+/** Read-only: resolve the effective cage for a mission and scan import sites (ADR-0022 containment). */
+export declare function runContractCheck(options: ContractCheckCliOptions): void;
+export interface ContractProposeCliOptions {
+    intent: string;
+    skillKey?: string;
+    paths?: string[];
+    json?: boolean;
+}
+export declare function runContractPropose(options: ContractProposeCliOptions): void;
+export interface ContractShowCliOptions {
+    mission?: string;
+    json?: boolean;
+}
+export declare function runContractShow(options: ContractShowCliOptions): void;
+//# sourceMappingURL=contract.d.ts.map

package/dist/cli/commands/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/contract.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AA4BD,wGAAwG;AACxG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAgCvE;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAkC3E;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAcrE"}

package/dist/cli/commands/contract.js

@@ -0,0 +1,113 @@
+import { setExitCode } from "../lib/cli-io.js";
+import { runUserCommand } from "../lib/command-boundary.js";
+import { contractViolationCode, formatContractViolation, scanContractImports } from "../lib/contract/contract-scan.js";
+import { resolveEffectiveScope, resolveEffectiveScopeForMission } from "../lib/contract/effective-scope.js";
+import { GantryUserError } from "../lib/errors.js";
+import { parseMissionFile, resolvePinnedMission } from "../lib/missions/parser.js";
+import { contractSha256, normalizeContract } from "../lib/contract/contract-hash.js";
+import { formatContractBlock, formatEffectiveScope } from "../lib/contract/format.js";
+import { proposeContract } from "../lib/contract/propose.js";
+import { resolveSkillKeyForLegislation } from "../lib/legislate.js";
+import { loadWorkspace } from "../lib/workspace.js";
+function scopeJson(scope) {
+    return {
+        tmvc_roots: scope.tmvcRoots,
+        forbidden_zones: scope.forbiddenZones,
+        allowed_imports: scope.allowedImports,
+        banned_imports: scope.bannedImports,
+        allow_dynamic_specifiers: scope.allowDynamicSpecifiers,
+        strict_relative_imports: scope.strictRelativeImports,
+        has_contract: scope.hasContract,
+    };
+}
+function humanLines(missionRel, scope, violations) {
+    const lines = [
+        `contract check: ${missionRel}${scope.hasContract ? "" : " (no contract block — effective scope from skill/policy)"}`,
+        formatEffectiveScope(scope),
+    ];
+    if (violations.length === 0) {
+        lines.push("contract check: OK — no import-site violations");
+        return lines;
+    }
+    lines.push(`contract check: ${String(violations.length)} violation(s):`);
+    for (const v of violations)
+        lines.push(`  ${formatContractViolation(v)}`);
+    return lines;
+}
+/** Read-only: resolve the effective cage for a mission and scan import sites (ADR-0022 containment). */
+export function runContractCheck(options) {
+    runUserCommand({ json: options.json }, () => {
+        const workspace = loadWorkspace();
+        const missionRel = options.mission?.trim() || resolvePinnedMission(workspace.root);
+        if (!missionRel) {
+            throw new GantryUserError("MISSION_REQUIRED", "gantry contract check: pass --mission <path> or pin a mission first", "gantry pin --mission .gitagent/missions/<file>.yaml", 2);
+        }
+        const mission = parseMissionFile(workspace.root, missionRel);
+        const scope = resolveEffectiveScopeForMission(workspace.root, workspace.manifest, mission);
+        const violations = scanContractImports(workspace.root, scope, options.files && options.files.length > 0 ? { files: options.files } : {});
+        if (violations.length > 0)
+            setExitCode(1);
+        return {
+            json: {
+                ok: violations.length === 0,
+                mission: missionRel,
+                msn_id: mission.msnId,
+                contract_sha256: mission.contractSha256,
+                scope: scopeJson(scope),
+                violations: violations.map((v) => ({ ...v, code: contractViolationCode(v.kind) })),
+            },
+            human: humanLines(missionRel, scope, violations),
+        };
+    });
+}
+export function runContractPropose(options) {
+    runUserCommand({ json: options.json }, () => {
+        const workspace = loadWorkspace();
+        const resolved = resolveSkillKeyForLegislation({
+            root: workspace.root,
+            manifest: workspace.manifest,
+            intent: options.intent,
+            skillKey: options.skillKey,
+        });
+        if (!resolved.ok) {
+            throw new GantryUserError("INVALID_ARGUMENT", `contract propose: ${resolved.reason}`, undefined, 2);
+        }
+        const proposed = proposeContract({
+            root: workspace.root,
+            manifest: workspace.manifest,
+            intent: options.intent,
+            skillKey: resolved.skillKey,
+            paths: options.paths,
+        });
+        const contract = normalizeContract(proposed.contract);
+        resolveEffectiveScope({ manifest: workspace.manifest, skillKey: resolved.skillKey, contract });
+        return {
+            json: {
+                ok: true,
+                skill_key: resolved.skillKey,
+                contract,
+                contract_sha256: contractSha256(contract),
+                gate: proposed.gate,
+                rationale: proposed.rationale,
+                block: formatContractBlock(contract, proposed.gate),
+            },
+            human: [formatContractBlock(contract, proposed.gate), "", "Rationale:", ...proposed.rationale.map((r) => `  - ${r}`)],
+        };
+    });
+}
+export function runContractShow(options) {
+    runUserCommand({ json: options.json }, () => {
+        const workspace = loadWorkspace();
+        const missionRel = options.mission?.trim() || resolvePinnedMission(workspace.root);
+        if (!missionRel) {
+            throw new GantryUserError("MISSION_REQUIRED", "gantry contract show: pass --mission <path> or pin a mission first", undefined, 2);
+        }
+        const mission = parseMissionFile(workspace.root, missionRel);
+        const contract = mission.contract ?? {};
+        return {
+            json: { ok: true, mission: missionRel, msn_id: mission.msnId, contract, contract_sha256: mission.contractSha256 },
+            human: formatContractBlock(contract, mission.gate ? { command: mission.gate.command, successSubstring: mission.gate.successSubstring } : null),
+        };
+    });
+}
+//# sourceMappingURL=contract.js.map

package/dist/cli/commands/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../src/cli/commands/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAA4B,MAAM,4BAA4B,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvH,OAAO,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AAC5G,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AASpD,SAAS,SAAS,CAAC,KAAqB;IACtC,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,wBAAwB,EAAE,KAAK,CAAC,sBAAsB;QACtD,uBAAuB,EAAE,KAAK,CAAC,qBAAqB;QACpD,YAAY,EAAE,KAAK,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,KAAqB,EAAE,UAA8C;IAC3G,MAAM,KAAK,GAAG;QACZ,mBAAmB,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0DAA0D,EAAE;QACrH,oBAAoB,CAAC,KAAK,CAAC;KAC5B,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAwB,EAAE;QAC/D,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,qEAAqE,EACrE,qDAAqD,EACrD,CAAC,CACF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,+BAA+B,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3F,MAAM,UAAU,GAAG,mBAAmB,CACpC,SAAS,CAAC,IAAI,EACd,KAAK,EACL,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAC1E,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE;gBACJ,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;gBAC3B,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,OAAO,CAAC,KAAK;gBACrB,eAAe,EAAE,OAAO,CAAC,cAAc;gBACvC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;gBACvB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACnF;YACD,KAAK,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC;SACjD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AASD,MAAM,UAAU,kBAAkB,CAAC,OAAkC;IACnE,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAwB,EAAE;QAC/D,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,6BAA6B,CAAC;YAC7C,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC;YAC/B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtD,qBAAqB,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/F,OAAO;YACL,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI;gBACR,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,QAAQ;gBACR,eAAe,EAAE,cAAc,CAAC,QAAQ,CAAC;gBACzC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,KAAK,EAAE,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;aACpD;YACD,KAAK,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SACtH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAwB,EAAE;QAC/D,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,oEAAoE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACpI,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,cAAc,EAAE;YACjH,KAAK,EAAE,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAC/I,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/tmvc-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tmvc-guard.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/tmvc-guard.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAQD,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CA+D/D"}
+{"version":3,"file":"tmvc-guard.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/tmvc-guard.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAQD,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAgE/D"}

package/dist/cli/commands/tmvc-guard.js

@@ -30,6 +30,7 @@ export function runTmvcGuard(options) {
             repoRoot: workspace.root,
             manifest: workspace.manifest,
             skillKey: resolved.skill_key,
+            scope: resolved.scope,
         });
         const strict = options.strict === true || process.env.GXT_TMVC_GUARD_STRICT === "1";
         if (options.json) {

package/dist/cli/commands/tmvc-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"tmvc-guard.js","sourceRoot":"","sources":["../../../src/cli/commands/tmvc-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAQtE,SAAS,gBAAgB,CAAC,KAAwB;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QAC1C,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAE3F,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,gEAAgE,CAAC;YAC7E,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,WAAW,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,QAAQ,EAAE,SAAS,CAAC,IAAI;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,QAAQ,CAAC,SAAS;SAC7B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,CAAC;QAEpF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,WAAW,CAAC;gBACV,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;gBACpC,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,eAAe,EAAE,MAAM,CAAC,cAAc;gBACtC,OAAO,EAAE,QAAQ,CAAC,YAAY;gBAC9B,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B,CAAC,CAAC;YACH,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAC/C,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACnD,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE;gBAC/B,UAAU,EAAE,cAAc;gBAC1B,eAAe,EAAE,qBAAqB,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC;gBAC3D,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,SAAS;gBACpC,OAAO,EAAE;oBACP,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO;oBACpC,MAAM;oBACN,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;oBACzC,MAAM,EAAE,YAAY;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;YAC5C,WAAW,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"tmvc-guard.js","sourceRoot":"","sources":["../../../src/cli/commands/tmvc-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAQtE,SAAS,gBAAgB,CAAC,KAAwB;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QAC1C,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAE3F,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,gEAAgE,CAAC;YAC7E,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,WAAW,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,QAAQ,EAAE,SAAS,CAAC,IAAI;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,CAAC;QAEpF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,WAAW,CAAC;gBACV,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;gBACpC,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,eAAe,EAAE,MAAM,CAAC,cAAc;gBACtC,OAAO,EAAE,QAAQ,CAAC,YAAY;gBAC9B,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B,CAAC,CAAC;YACH,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAC/C,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACnD,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE;gBAC/B,UAAU,EAAE,cAAc;gBAC1B,eAAe,EAAE,qBAAqB,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC;gBAC3D,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,SAAS;gBACpC,OAAO,EAAE;oBACP,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO;oBACpC,MAAM;oBACN,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;oBACzC,MAAM,EAAE,YAAY;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;YAC5C,WAAW,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/lib/contract/approve-prompt.d.ts

@@ -0,0 +1,22 @@
+import type { MissionContract } from "./contract-types.js";
+import type { ProposedGate } from "./propose-gate.js";
+export type ContractApproval = {
+    action: "approve";
+    contract: MissionContract;
+} | {
+    action: "quit";
+};
+export interface ApproveContractInput {
+    contract: MissionContract;
+    gate?: ProposedGate;
+    rationale?: string[];
+    yes?: boolean;
+    stdin?: NodeJS.ReadStream;
+    stdout?: NodeJS.WriteStream;
+}
+/**
+ * TTY [a]pprove / [e]dit in $EDITOR / [q]uit. `--yes` skips the prompt. Non-TTY without `--yes`
+ * exits 2 — CI must pass `--yes` or `--contract-file`.
+ */
+export declare function approveContractPrompt(input: ApproveContractInput): Promise<ContractApproval>;
+//# sourceMappingURL=approve-prompt.d.ts.map

package/dist/cli/lib/contract/approve-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-prompt.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/approve-prompt.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,GAChD;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;CAC7B;AAyBD;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsClG"}

package/dist/cli/lib/contract/approve-prompt.js

@@ -0,0 +1,71 @@
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import readline from "node:readline/promises";
+import YAML from "yaml";
+import { GantryUserError } from "../errors.js";
+import { formatContractBlock } from "./format.js";
+import { normalizeContract, parseContractYaml } from "./contract-hash.js";
+function parseEditedContract(body) {
+    return parseContractYaml(body);
+}
+function editInEditor(contract) {
+    const editor = process.env.VISUAL?.trim() || process.env.EDITOR?.trim() || "vi";
+    const tmp = path.join(os.tmpdir(), `gantry-contract-${process.pid}.yaml`);
+    fs.writeFileSync(tmp, YAML.stringify({ contract }), "utf8");
+    try {
+        const r = spawnSync(editor, [tmp], { stdio: "inherit" });
+        if (r.status !== 0) {
+            throw new GantryUserError("INVALID_ARGUMENT", `editor ${editor} exited ${String(r.status ?? "null")}`, undefined, 2);
+        }
+        return parseEditedContract(fs.readFileSync(tmp, "utf8"));
+    }
+    finally {
+        try {
+            fs.unlinkSync(tmp);
+        }
+        catch {
+            /* tmp cleanup is best-effort */
+        }
+    }
+}
+/**
+ * TTY [a]pprove / [e]dit in $EDITOR / [q]uit. `--yes` skips the prompt. Non-TTY without `--yes`
+ * exits 2 — CI must pass `--yes` or `--contract-file`.
+ */
+export async function approveContractPrompt(input) {
+    if (input.yes === true)
+        return { action: "approve", contract: normalizeContract(input.contract) };
+    const stdin = input.stdin ?? process.stdin;
+    const stdout = input.stdout ?? process.stdout;
+    if (!stdin.isTTY || !stdout.isTTY) {
+        throw new GantryUserError("INVALID_ARGUMENT", "gantry legislate --from-intent requires a TTY, or pass --yes / --contract-file", "Re-run in an interactive terminal, or gantry legislate --from-intent --yes …", 2);
+    }
+    let current = normalizeContract(input.contract);
+    const rl = readline.createInterface({ input: stdin, output: stdout });
+    try {
+        for (;;) {
+            stdout.write(`${formatContractBlock(current, input.gate)}\n`);
+            if (input.rationale && input.rationale.length > 0) {
+                stdout.write(`Rationale:\n${input.rationale.map((r) => `  - ${r}`).join("\n")}\n`);
+            }
+            const answer = (await rl.question("[a]pprove / [e]dit in $EDITOR / [q]uit: ")).trim().toLowerCase();
+            if (answer === "a" || answer === "approve" || answer === "yes" || answer === "y") {
+                return { action: "approve", contract: current };
+            }
+            if (answer === "q" || answer === "quit" || answer === "n" || answer === "no") {
+                return { action: "quit" };
+            }
+            if (answer === "e" || answer === "edit") {
+                current = editInEditor(current);
+                continue;
+            }
+            stdout.write("Enter a, e, or q.\n");
+        }
+    }
+    finally {
+        rl.close();
+    }
+}
+//# sourceMappingURL=approve-prompt.js.map

package/dist/cli/lib/contract/approve-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-prompt.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/approve-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,QAAQ,MAAM,wBAAwB,CAAC;AAC9C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAiB1E,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CAAC,QAAyB;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAChF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IAC1E,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,UAAU,MAAM,WAAW,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACvH,CAAC;QACD,OAAO,mBAAmB,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAA2B;IACrE,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IAElG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,gFAAgF,EAChF,8EAA8E,EAC9E,CAAC,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,CAAC,KAAK,CAAC,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,MAAM,CAAC,KAAK,CAAC,eAAe,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAClD,CAAC;YACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC5B,CAAC;YACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACxC,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/cli/lib/contract/contract-hash.d.ts

@@ -0,0 +1,19 @@
+import { type MissionContract } from "./contract-types.js";
+/**
+ * POSIX separators, no leading `./`, collapsed slashes. Directory-like segments get a single
+ * trailing `/` so `src/ui` and `src/ui/` hash alike; last-segment file names (contain `.`) do not.
+ */
+export declare function normalizeContractPath(raw: string): string;
+/**
+ * Canonical contract form: path lists normalized + sorted + deduped, import lists trimmed +
+ * sorted + deduped, empty lists and false booleans omitted. This is the only form written to
+ * mission YAML and the only form hashed, so key or array order can never produce a false
+ * GXT_CONTRACT_TAMPERED.
+ */
+export declare function normalizeContract(contract: MissionContract): MissionContract;
+export declare function contractSha256(contract: MissionContract): string;
+/** True when the contract has no effective constraint at all. */
+export declare function isEmptyContract(contract: MissionContract): boolean;
+/** Accept a bare contract object or `{ contract: … }` YAML document. */
+export declare function parseContractYaml(body: string): MissionContract;
+//# sourceMappingURL=contract-hash.d.ts.map

package/dist/cli/lib/contract/contract-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-hash.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/contract-hash.ts"],"names":[],"mappings":"AAIA,OAAO,EAA8C,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEvG;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQzD;AAUD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,eAAe,GAAG,eAAe,CAa5E;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAEhE;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAElE;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAO/D"}

package/dist/cli/lib/contract/contract-hash.js

@@ -0,0 +1,67 @@
+import crypto from "node:crypto";
+import YAML from "yaml";
+import { canonicalJson } from "../canonical-json.js";
+import { GantryUserError } from "../errors.js";
+import { CONTRACT_ARRAY_KEYS, CONTRACT_BOOLEAN_KEYS } from "./contract-types.js";
+/**
+ * POSIX separators, no leading `./`, collapsed slashes. Directory-like segments get a single
+ * trailing `/` so `src/ui` and `src/ui/` hash alike; last-segment file names (contain `.`) do not.
+ */
+export function normalizeContractPath(raw) {
+    let p = raw.trim().replace(/\\/g, "/").replace(/\/{2,}/g, "/");
+    while (p.startsWith("./"))
+        p = p.slice(2);
+    if (p.length > 1)
+        p = p.replace(/\/+$/, "");
+    if (p.length === 0)
+        return p;
+    const last = p.split("/").pop() ?? p;
+    const looksLikeFile = last.includes(".") && last !== "." && last !== "..";
+    return looksLikeFile || p.endsWith("/") ? p : `${p}/`;
+}
+function normalizeSpecifier(raw) {
+    return raw.trim();
+}
+function sortedUnique(values) {
+    return [...new Set(values.filter((v) => v.length > 0))].sort();
+}
+/**
+ * Canonical contract form: path lists normalized + sorted + deduped, import lists trimmed +
+ * sorted + deduped, empty lists and false booleans omitted. This is the only form written to
+ * mission YAML and the only form hashed, so key or array order can never produce a false
+ * GXT_CONTRACT_TAMPERED.
+ */
+export function normalizeContract(contract) {
+    const out = {};
+    for (const key of CONTRACT_ARRAY_KEYS) {
+        const raw = contract[key];
+        if (!Array.isArray(raw) || raw.length === 0)
+            continue;
+        const isPathList = key === "tmvc_roots" || key === "forbidden_zones";
+        const values = sortedUnique(raw.map((v) => (isPathList ? normalizeContractPath(v) : normalizeSpecifier(v))));
+        if (values.length > 0)
+            out[key] = values;
+    }
+    for (const key of CONTRACT_BOOLEAN_KEYS) {
+        if (contract[key] === true)
+            out[key] = true;
+    }
+    return out;
+}
+export function contractSha256(contract) {
+    return crypto.createHash("sha256").update(canonicalJson(normalizeContract(contract)), "utf8").digest("hex");
+}
+/** True when the contract has no effective constraint at all. */
+export function isEmptyContract(contract) {
+    return Object.keys(normalizeContract(contract)).length === 0;
+}
+/** Accept a bare contract object or `{ contract: … }` YAML document. */
+export function parseContractYaml(body) {
+    const doc = YAML.parse(body);
+    if (!doc || typeof doc !== "object") {
+        throw new GantryUserError("INVALID_ARGUMENT", "contract YAML is not an object", undefined, 2);
+    }
+    const block = "contract" in doc && doc.contract ? doc.contract : doc;
+    return normalizeContract(block);
+}
+//# sourceMappingURL=contract-hash.js.map

package/dist/cli/lib/contract/contract-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-hash.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/contract-hash.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAwB,MAAM,qBAAqB,CAAC;AAEvG;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;IAC1E,OAAO,aAAa,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;AACxD,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB;IAC7C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAyB;IACzD,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACtD,MAAM,UAAU,GAAG,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,iBAAiB,CAAC;QACrE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7G,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAyB;IACtD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9G,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,QAAyB;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4D,CAAC;IACxF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,gCAAgC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,GAAuB,CAAC;IAC1F,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC"}

package/dist/cli/lib/contract/contract-scan.d.ts

@@ -0,0 +1,27 @@
+import { type GxtErrorCode } from "../gxt-error-codes.js";
+import type { ContractImportViolation, ContractViolationKind, EffectiveScope } from "./contract-types.js";
+import { type TsconfigPaths } from "./resolve-specifier.js";
+export declare function isScannableSource(fileRel: string): boolean;
+/** Repo-relative source files under the effective TMVC roots (sorted, deduped). */
+export declare function listSourcesUnderRoots(repoRoot: string, roots: readonly string[]): string[];
+/**
+ * Dirty sources: `git diff --name-only HEAD` ∪ untracked. On an unborn branch (no HEAD) the
+ * index (`ls-files --cached`) stands in for the diff. Every argv ends with `--` so a path that
+ * looks like a flag is never parsed as one. Missing/deleted paths are dropped.
+ */
+export declare function listChangedSourceFiles(repoRoot: string): string[];
+export declare function contractViolationCode(kind: ContractViolationKind): GxtErrorCode;
+/** Scan a single source file's import sites against the effective scope. */
+export declare function scanFileImports(repoRoot: string, fileRel: string, scope: EffectiveScope, ts?: TsconfigPaths | null): ContractImportViolation[];
+export interface ScanContractImportsOptions {
+    /** Explicit repo-relative files; defaults to every source file under the effective TMVC roots. */
+    files?: readonly string[];
+}
+/**
+ * Import-site scan for the effective cage: banned / unlisted bare specifiers, non-literal dynamic
+ * specifiers, and relative or alias imports resolving into forbidden zones (or outside TMVC when
+ * `strict_relative_imports`). Deterministic ordering by file, line, column.
+ */
+export declare function scanContractImports(repoRoot: string, scope: EffectiveScope, options?: ScanContractImportsOptions): ContractImportViolation[];
+export declare function formatContractViolation(v: ContractImportViolation): string;
+//# sourceMappingURL=contract-scan.d.ts.map

package/dist/cli/lib/contract/contract-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-scan.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/contract/contract-scan.ts"],"names":[],"mappings":"AAKA,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrE,OAAO,KAAK,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1G,OAAO,EAAwC,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAKlG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG1D;AAqBD,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAI1F;AASD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CASjE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,GAAG,YAAY,CAe/E;AAgED,4EAA4E;AAC5E,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,cAAc,EACrB,EAAE,GAAE,aAAa,GAAG,IAAkC,GACrD,uBAAuB,EAAE,CAU3B;AAED,MAAM,WAAW,0BAA0B;IACzC,kGAAkG;IAClG,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,cAAc,EACrB,OAAO,GAAE,0BAA+B,GACvC,uBAAuB,EAAE,CAU3B;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,uBAAuB,GAAG,MAAM,CAE1E"}

package/dist/cli/lib/contract/contract-scan.js

@@ -0,0 +1,167 @@
+import fs from "node:fs";
+import path from "node:path";
+import { importMatchesBan } from "../ast-discovery.js";
+import { toPosixRel } from "../cli-io.js";
+import { gitRunOk } from "../git.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { extractImportSites } from "../import-scanner.js";
+import { isPathUnderRoot, normalizeRepoRelativePath } from "../tmvc-path.js";
+import { classifySpecifier, loadTsconfigPaths } from "./resolve-specifier.js";
+const SOURCE_EXT = new Set([".ts", ".tsx", ".mts", ".cts", ".js", ".jsx", ".mjs", ".cjs"]);
+const SKIP_DIRS = new Set(["node_modules", "dist", "build", "coverage"]);
+export function isScannableSource(fileRel) {
+    const ext = path.extname(fileRel).toLowerCase();
+    return SOURCE_EXT.has(ext) && !fileRel.endsWith(".d.ts");
+}
+function walkSources(repoRoot, absRoot, out) {
+    if (!fs.existsSync(absRoot))
+        return;
+    const stat = fs.statSync(absRoot);
+    if (stat.isFile()) {
+        if (isScannableSource(absRoot))
+            out.push(toPosixRel(repoRoot, absRoot));
+        return;
+    }
+    if (!stat.isDirectory())
+        return;
+    for (const ent of fs.readdirSync(absRoot, { withFileTypes: true })) {
+        const child = path.join(absRoot, ent.name);
+        if (ent.isDirectory()) {
+            if (SKIP_DIRS.has(ent.name) || ent.name.startsWith("."))
+                continue;
+            walkSources(repoRoot, child, out);
+        }
+        else if (ent.isFile() && isScannableSource(ent.name)) {
+            out.push(toPosixRel(repoRoot, child));
+        }
+    }
+}
+/** Repo-relative source files under the effective TMVC roots (sorted, deduped). */
+export function listSourcesUnderRoots(repoRoot, roots) {
+    const out = [];
+    for (const root of roots)
+        walkSources(repoRoot, path.join(repoRoot, root), out);
+    return [...new Set(out)].sort();
+}
+function addGitNames(repoRoot, args, out) {
+    const r = gitRunOk(repoRoot, [...args, "--"]);
+    if (!r.ok)
+        return false;
+    for (const line of r.stdout.split(/\r?\n/))
+        if (line.trim())
+            out.add(line.trim());
+    return true;
+}
+/**
+ * Dirty sources: `git diff --name-only HEAD` ∪ untracked. On an unborn branch (no HEAD) the
+ * index (`ls-files --cached`) stands in for the diff. Every argv ends with `--` so a path that
+ * looks like a flag is never parsed as one. Missing/deleted paths are dropped.
+ */
+export function listChangedSourceFiles(repoRoot) {
+    const out = new Set();
+    if (!addGitNames(repoRoot, ["diff", "--name-only", "HEAD"], out)) {
+        addGitNames(repoRoot, ["ls-files", "--cached"], out);
+    }
+    addGitNames(repoRoot, ["ls-files", "--others", "--exclude-standard"], out);
+    return [...out]
+        .filter((rel) => isScannableSource(rel) && fs.existsSync(path.join(repoRoot, rel)))
+        .sort();
+}
+export function contractViolationCode(kind) {
+    switch (kind) {
+        case "banned":
+            return GXT_ERROR.CONTRACT_IMPORT_BANNED;
+        case "unlisted":
+            return GXT_ERROR.CONTRACT_IMPORT_UNLISTED;
+        case "dynamic":
+            return GXT_ERROR.CONTRACT_IMPORT_DYNAMIC;
+        case "scope_escape":
+            return GXT_ERROR.CONTRACT_SCOPE_ESCAPE;
+        default: {
+            const _exhaustive = kind;
+            return _exhaustive;
+        }
+    }
+}
+function violation(kind, file, site, specifier, detail) {
+    return { kind, file, line: site.line, column: site.column, specifier, detail };
+}
+function checkBareSpecifier(scope, file, site, spec) {
+    const banned = scope.bannedImports.find((b) => importMatchesBan(spec, b));
+    if (banned) {
+        return violation("banned", file, site, spec, `import of banned specifier "${spec}" (banned: ${banned})`);
+    }
+    if (scope.allowedImports.length > 0 && !scope.allowedImports.some((a) => importMatchesBan(spec, a))) {
+        return violation("unlisted", file, site, spec, `import "${spec}" is not in contract.allowed_imports`);
+    }
+    return null;
+}
+function checkResolvedPath(scope, file, site, spec, resolvedRepoRel) {
+    const forbidden = scope.forbiddenZones.find((fz) => isPathUnderRoot(resolvedRepoRel, fz));
+    if (forbidden) {
+        return violation("scope_escape", file, site, spec, `import resolves into forbidden zone ${forbidden} (${resolvedRepoRel})`);
+    }
+    if (scope.strictRelativeImports && scope.tmvcRoots.length > 0) {
+        const inside = scope.tmvcRoots.some((r) => isPathUnderRoot(resolvedRepoRel, r));
+        if (!inside) {
+            return violation("scope_escape", file, site, spec, `import resolves outside effective TMVC roots (${resolvedRepoRel})`);
+        }
+    }
+    return null;
+}
+function checkSite(scope, file, site, ts) {
+    if (site.spec === null) {
+        if (scope.allowDynamicSpecifiers)
+            return null;
+        return violation("dynamic", file, site, site.expression ?? "", `non-literal ${site.kind === "require_expr" ? "require" : "import"}(${site.expression ?? ""}) is not allowed (contract.allow_dynamic_specifiers=false)`);
+    }
+    const cls = classifySpecifier(site.spec, file, ts);
+    switch (cls.kind) {
+        case "builtin":
+            return null;
+        case "bare":
+            return checkBareSpecifier(scope, file, site, cls.specifier);
+        case "relative":
+        case "alias":
+            return checkResolvedPath(scope, file, site, cls.specifier, cls.resolvedRepoRel);
+        default: {
+            const _exhaustive = cls;
+            return _exhaustive;
+        }
+    }
+}
+/** Scan a single source file's import sites against the effective scope. */
+export function scanFileImports(repoRoot, fileRel, scope, ts = loadTsconfigPaths(repoRoot)) {
+    const abs = path.join(repoRoot, fileRel);
+    if (!fs.existsSync(abs) || !fs.statSync(abs).isFile())
+        return [];
+    const norm = normalizeRepoRelativePath(fileRel);
+    const out = [];
+    for (const site of extractImportSites(fs.readFileSync(abs, "utf8"))) {
+        const v = checkSite(scope, norm, site, ts);
+        if (v)
+            out.push(v);
+    }
+    return out;
+}
+/**
+ * Import-site scan for the effective cage: banned / unlisted bare specifiers, non-literal dynamic
+ * specifiers, and relative or alias imports resolving into forbidden zones (or outside TMVC when
+ * `strict_relative_imports`). Deterministic ordering by file, line, column.
+ */
+export function scanContractImports(repoRoot, scope, options = {}) {
+    const files = options.files
+        ? [...new Set(options.files.map(normalizeRepoRelativePath))].filter(isScannableSource).sort()
+        : scope.tmvcRoots.length > 0
+            ? listSourcesUnderRoots(repoRoot, scope.tmvcRoots)
+            : listChangedSourceFiles(repoRoot);
+    const ts = loadTsconfigPaths(repoRoot);
+    const out = [];
+    for (const file of files)
+        out.push(...scanFileImports(repoRoot, file, scope, ts));
+    return out.sort((a, b) => a.file.localeCompare(b.file) || a.line - b.line || a.column - b.column);
+}
+export function formatContractViolation(v) {
+    return `[${contractViolationCode(v.kind)}] ${v.file}:${v.line}:${v.column} ${v.detail}`;
+}
+//# sourceMappingURL=contract-scan.js.map

package/dist/cli/lib/contract/contract-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-scan.js","sourceRoot":"","sources":["../../../../src/cli/lib/contract/contract-scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,SAAS,EAAqB,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAmB,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAsB,MAAM,wBAAwB,CAAC;AAElG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAEzE,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe,EAAE,GAAa;IACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IACpC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,IAAI,iBAAiB,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO;IAChC,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClE,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,KAAwB;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAc,EAAE,GAAgB;IACrE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACjE,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,GAAG,CAAC;SACZ,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;SAClF,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAA2B;IAC/D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,sBAAsB,CAAC;QAC1C,KAAK,UAAU;YACb,OAAO,SAAS,CAAC,wBAAwB,CAAC;QAC5C,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC,uBAAuB,CAAC;QAC3C,KAAK,cAAc;YACjB,OAAO,SAAS,CAAC,qBAAqB,CAAC;QACzC,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC;YAChC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,IAA2B,EAC3B,IAAY,EACZ,IAAgB,EAChB,SAAiB,EACjB,MAAc;IAEd,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAqB,EAAE,IAAY,EAAE,IAAgB,EAAE,IAAY;IAC7F,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,+BAA+B,IAAI,cAAc,MAAM,GAAG,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,OAAO,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,IAAI,sCAAsC,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAqB,EACrB,IAAY,EACZ,IAAgB,EAChB,IAAY,EACZ,eAAuB;IAEvB,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,uCAAuC,SAAS,KAAK,eAAe,GAAG,CAAC,CAAC;IAC9H,CAAC;IACD,IAAI,KAAK,CAAC,qBAAqB,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,iDAAiD,eAAe,GAAG,CAAC,CAAC;QAC1H,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAqB,EAAE,IAAY,EAAE,IAAgB,EAAE,EAAwB;IAChG,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,sBAAsB;YAAE,OAAO,IAAI,CAAC;QAC9C,OAAO,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,eAAe,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,4DAA4D,CAAC,CAAC;IAC1N,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACnD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,KAAK,UAAU,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,GAAG,CAAC;YAC/B,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,OAAe,EACf,KAAqB,EACrB,KAA2B,iBAAiB,CAAC,QAAQ,CAAC;IAEtD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,KAAqB,EACrB,UAAsC,EAAE;IAExC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK;QACzB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE;QAC7F,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;YAClD,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAClF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAA0B;IAChE,OAAO,IAAI,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1F,CAAC"}