@jevitate/cli 0.1.0 → 0.3.0

package/dist/exit-codes.js

@@ -0,0 +1,91 @@
+import { MISSION_EXIT_CODES } from "@jevitate/domain";
+/**
+ * THE exit-code table for every `jevitate` command (#210) — documented once, in
+ * docs/outcomes.md "Exit codes", and linked from everywhere else. Every command sets
+ * `process.exitCode` from this table (directly, or through `exitCodeForError` for a refused
+ * command), so CI can tell a typo from a defect from a run that proved nothing:
+ *
+ *  | code | class         | meaning                                                                        |
+ *  |------|---------------|--------------------------------------------------------------------------------|
+ *  | 0    | ok            | clean · succeeded · check passed · fixed · the command did what it was asked   |
+ *  | 1    | defects       | defects found · a gating finding · still reproduces · a success check failed   |
+ *  | 2    | inconclusive  | the run/command could not finish its work (inconclusive, crashed, an item      |
+ *  |      |               | errored, budget exceeded, an unexpected error) — it proves nothing             |
+ *  | 3    | hang          | the app under test hung, and the hang reproduced on replay                     |
+ *  | 4    | intermittent  | a signal fired on some but not every replay                                    |
+ *  | 64   | usage         | bad flags/arguments or unusable input (unknown id, invalid file, missing keys, |
+ *  |      |               | refused target) — nothing ran. `EX_USAGE` from sysexits.h.                     |
+ *  | 130/143 | killed     | SIGINT / SIGTERM (kill-signal.ts); the partial result is still written         |
+ *
+ * 0–4 are the pre-existing mission codes (`MISSION_EXIT_CODES`, @jevitate/domain) unchanged; the
+ * mission outcome → code mapping stays THERE (one place), and this table only names the classes.
+ * Usage errors get 64 rather than the next small integer so a future outcome code (5, 6, …) never
+ * collides with it.
+ */
+export const EXIT_CODES = {
+    ok: 0,
+    defects: 1,
+    inconclusive: 2,
+    hang: 3,
+    intermittent: 4,
+    usage: 64,
+};
+/** A canonical mission outcome's exit code (the domain table; re-exported so commands import one module). */
+export function exitCodeForOutcome(outcome) {
+    return MISSION_EXIT_CODES[outcome];
+}
+/**
+ * Error codes that mean "the invocation or its input was unusable; nothing ran" → `usage` (64).
+ * Matched by suffix/prefix so a new `E_<COMMAND>_ARGS`/`_INPUT`/… code classifies itself.
+ */
+const USAGE_ERROR_PATTERNS = [
+    /_ARGS$/, // E_EXPLORE_ARGS, E_VERIFY_FIX_ARGS, E_JOURNEY_RUN_ARGS, …
+    /_INPUT$/, // E_LEDGER_INPUT, E_REPORT_INPUT, E_VERIFY_FIX_INPUT
+    /_ASSERTION$/, // E_EXPLORE_ASSERTION (an unparseable --success)
+    /_SPEC$/, // E_FIXTURE_SPEC, E_LOG_SPEC, E_LOG_SOURCE_SPEC
+    /_REF$/, // E_FIXTURE_REF
+    /_CONFIG$/, // E_TARGET_CONFIG, E_FILING_CONFIG, E_UX_CONFIG, …
+    /^E_INVALID_/, // E_INVALID_PARAMS, E_INVALID_RECORDING, …
+    /_UNKNOWN(_|$)/, // E_UNKNOWN_JOURNEY, E_SOURCE_UNKNOWN, E_JOURNEY_PUBLISH_UNKNOWN_SOURCE, …
+    /^E_UNKNOWN_/,
+    /_NOT_FOUND$/, // E_LEDGER_NOT_FOUND, E_REGRESSION_NOT_FOUND
+    /_INVARIANTS$/, // E_INVARIANTS, E_EXPLORE_INVARIANTS, E_USABILITY_INVARIANTS (invalid invariant files)
+];
+const USAGE_ERROR_CODES = new Set([
+    "E_CHECK_SUITE", // the suite (or its preflight) was refused
+    "E_AI_SETUP_REQUIRED", // no keys / no gateway selected
+    "E_MISSING_CREDENTIAL",
+    "E_UNAUTHORIZED_EXPLORE_TARGET", // the target is outside the allowlist
+    "E_EXPLORE_FIXTURE", // --fixture names no fixture
+    "E_SELF_HEAL_MODE",
+    "E_UX_MIN_CONFIDENCE",
+    "E_UX_MAX_FINDINGS_PER_PAGE",
+    "E_UX_QUALITY_POLICY",
+    "E_UX_NO_APP_CONTEXT",
+    "E_JOURNEY_REQUIRES_AUTH",
+    "E_ENV_ORIGIN_REFUSED", // #247: a Journey step on an origin the chosen environment does not allow
+    "E_PROFILE_UNKNOWN", // `profile status` named a profile that was never created
+    "E_REGRESSION_EXISTS", // `regression capture --id` already exists; needs --force
+    "E_REGRESSION_HARD_SIGNAL", // `regression capture --fingerprint` names a hard-signal defect; use the ledger instead
+    "E_JOURNEY_ANNOTATIONS_STALE", // `journey annotate --approve`: the Journey changed since the draft; re-draft
+    "E_DEMO_PRODUCTION_ENV", // #249: `demo` refuses an environment flagged production: true
+    "E_DEMO_EXISTS", // #249: `demo` would overwrite an existing Journey / pending demo draft
+    "E_HUMAN_APPROVAL_REQUIRED", // #254: `inbox approve`/`cancel` — human-only, in `jevitate ui` (MCP's human_approval_required)
+    "E_INBOX_INPUT_PENDING", // #254: `inbox command` would consume a human's unread input; pass --reveal to receive it
+    "E_MISSION_QUEUE_REFUSED", // #254: `mission queue` — unknown/unpromoted target, bad shape, over-ceiling budget, invalid invariants
+]);
+/** True when a refused command's error code is a usage/input error (exit 64). */
+export function isUsageErrorCode(code) {
+    return USAGE_ERROR_CODES.has(code) || USAGE_ERROR_PATTERNS.some((p) => p.test(code));
+}
+/** A refused command's exit code: 64 for a usage/input error, else 2 (the command could not finish). */
+export function exitCodeForError(code) {
+    return isUsageErrorCode(code) ? EXIT_CODES.usage : EXIT_CODES.inconclusive;
+}
+/** The exit code for a `{ok, error?}` envelope that carries no verdict of its own. */
+export function exitCodeForEnvelope(envelope) {
+    if (envelope.ok)
+        return EXIT_CODES.ok;
+    return exitCodeForError(envelope.error?.code ?? "");
+}
+//# sourceMappingURL=exit-codes.js.map

package/dist/exit-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAuB,MAAM,kBAAkB,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,EAAE,EAAE,CAAC;IACL,OAAO,EAAE,CAAC;IACV,YAAY,EAAE,CAAC;IACf,IAAI,EAAE,CAAC;IACP,YAAY,EAAE,CAAC;IACf,KAAK,EAAE,EAAE;CACD,CAAC;AAIX,6GAA6G;AAC7G,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,oBAAoB,GAAsB;IAC9C,QAAQ,EAAE,2DAA2D;IACrE,SAAS,EAAE,qDAAqD;IAChE,aAAa,EAAE,iDAAiD;IAChE,QAAQ,EAAE,gDAAgD;IAC1D,OAAO,EAAE,gBAAgB;IACzB,UAAU,EAAE,mDAAmD;IAC/D,aAAa,EAAE,2CAA2C;IAC1D,eAAe,EAAE,2EAA2E;IAC5F,aAAa;IACb,aAAa,EAAE,6CAA6C;IAC5D,cAAc,EAAE,uFAAuF;CACxG,CAAC;AAEF,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IACrD,eAAe,EAAE,2CAA2C;IAC5D,qBAAqB,EAAE,gCAAgC;IACvD,sBAAsB;IACtB,+BAA+B,EAAE,sCAAsC;IACvE,mBAAmB,EAAE,6BAA6B;IAClD,kBAAkB;IAClB,qBAAqB;IACrB,4BAA4B;IAC5B,qBAAqB;IACrB,qBAAqB;IACrB,yBAAyB;IACzB,sBAAsB,EAAE,0EAA0E;IAClG,mBAAmB,EAAE,0DAA0D;IAC/E,qBAAqB,EAAE,0DAA0D;IACjF,0BAA0B,EAAE,wFAAwF;IACpH,6BAA6B,EAAE,8EAA8E;IAC7G,uBAAuB,EAAE,+DAA+D;IACxF,eAAe,EAAE,wEAAwE;IACzF,2BAA2B,EAAE,gGAAgG;IAC7H,uBAAuB,EAAE,0FAA0F;IACnH,yBAAyB,EAAE,wGAAwG;CACpI,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;AAC7E,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,QAA8E;IAChH,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,EAAE,CAAC;IACtC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC"}

package/dist/explore-adversarial.d.ts

@@ -0,0 +1,144 @@
+import type { JudgmentPort, GenerationPort, UsageTracker, UsageCounts } from "@jevitate/ai-core";
+import { type BrowserPort, type EmulationSpec } from "@jevitate/playwright";
+import { type BrowserRunOptions } from "./browser-run-options.js";
+import { type ScreenshotsSpec } from "./run-screenshots.js";
+import { type InvariantSpec } from "@jevitate/recording";
+import type { HostHealthSampler } from "@jevitate/explore";
+import type { EnvironmentDegraded, HostHealthSummary } from "@jevitate/domain";
+import { type Bounds, type AdversarialOutcome, type AdversarialDefect, type MisuseStrategy, type CoverageThresholds } from "@jevitate/explore";
+import { type FilingConfig, type IssueFilerPort, type MissionOutcome } from "@jevitate/domain";
+import { type FindingsIssues } from "./findings-filing.js";
+import { type EngineInfo } from "./engine.js";
+import type { TargetConfig } from "./target-config.js";
+import { MISSION_RESULT_SCHEMA_VERSION } from "./result-schema.js";
+import { type JourneyPrefix } from "./journey-prefix.js";
+import type { JourneyBranchPoint } from "@jevitate/journey";
+import { type ServerLogDefect, type ServerLogsSummary } from "./log-correlation.js";
+import { type ServerLogOptions, type OverflowFlags, type MissionTarget } from "./explore-shared.js";
+/**
+ * The misuse strategies `explore --strategy adversarial` runs, in order — shared with the queue drain
+ * (`jevitate mission run`, #117) so a queued adversarial mission hunts exactly like the CLI's.
+ */
+export declare const CLI_ADVERSARIAL_STRATEGIES: readonly MisuseStrategy[];
+/**
+ * Options for the additive adversarial CLI mission. Mirrors `runExploration`'s
+ * fail-closed discipline: the authorized-target guard runs FIRST, before any
+ * browser is opened, so an unauthorized origin never launches Chromium.
+ */
+export interface RunAdversarialCliMissionOptions {
+    /** Test seam (#203): the run's host-health sampler (a deterministic fake host). Default: this host's. */
+    readonly hostHealth?: HostHealthSampler;
+    readonly seedUrl: string;
+    readonly allowlist: readonly string[];
+    readonly strategies: readonly MisuseStrategy[];
+    readonly judgment: JudgmentPort;
+    readonly generation: GenerationPort;
+    /** Usage accounting (#100): see `RunExplorationOptions.usage`. */
+    readonly usage?: UsageTracker;
+    /** Step/action budget (CLI `--max-decisions` / `--max-actions`). */
+    readonly bounds?: Partial<Bounds>;
+    /** Testing seam — defaults to a real `PlaywrightBrowserPort`. */
+    readonly browserPortFactory?: () => BrowserPort;
+    /** How Chromium is launched (executable/channel/extra args) and shown (#245 demo mode). Default: pinned Chromium, headless. */
+    readonly browser?: BrowserRunOptions;
+    /** #251 `--screenshots`: masked screenshots (one per distinct screen, or per step) + `index.md`. */
+    readonly screenshots?: ScreenshotsSpec;
+    /**
+     * #250 `--evidence-video`: after the result is written, each defect's minimal repro is replayed
+     * with captions (the failing step marked) into a masked clip + before/at screenshots, attached as
+     * `defects[].evidence` (and to its issue draft).
+     */
+    readonly evidenceVideo?: boolean;
+    /**
+     * Playwright storageState JSON to seed the session from (CLI `--storage-state`) —
+     * the deterministic authenticated pre-step. Contains live session cookies: it is
+     * handed only to the browser, never to a model or a Recording.
+     */
+    readonly storageState?: string;
+    /**
+     * Writes the browser context's storageState (cookies + origin storage) here when the run ends
+     * (CLI `--save-storage-state`) — so a rotating refresh token stays usable across runs instead of
+     * invalidating `--storage-state`'s file on first use. The file holds live session credentials:
+     * written with mode 0600, and its contents are never logged. See
+     * `RunExplorationOptions.saveStorageState`'s own doc for the full behaviour (#159: written on
+     * every exit path including a crash/kill signal, never over a lost/logged-out session).
+     */
+    readonly saveStorageState?: string;
+    /** Registered secret values (`--secret`): kept out of the transcript, Recording and issue drafts. */
+    readonly secrets?: readonly string[];
+    /** #303 `--action-deltas` (opt-in): record what each action changed (code verdict) — evidence only. */
+    readonly actionDeltas?: boolean;
+    /** Issue filing (off unless enabled + a repo is configured). Default: drafts only. */
+    readonly filing?: FilingConfig;
+    /** Creates the filer — called only when filing is enabled. */
+    readonly issueFiler?: () => IssueFilerPort;
+    /** Fresh-context replays that confirm a hang (default 2). */
+    readonly hangReplays?: number;
+    /** Where the Recording and decision transcript are written. Default `.jevitate/logs/<date>` (project, else `~/.jevitate`). */
+    readonly outDir?: string;
+    /** ISO clock for the transcript filename. Default `Date.now()`. */
+    readonly nowIso?: () => string;
+    /** The target's settle/hang configuration (`~/.jevitate/targets.json` + flags). */
+    readonly target?: TargetConfig;
+    /** Extra in-scope route globs (`--route`); the start URL's route is always in scope. */
+    readonly routeGlobs?: readonly string[];
+    /** Coverage a silent run needs to be `clean` (`--min-control-coverage`, `--no-require-form-submit`). */
+    readonly coverageThresholds?: Partial<CoverageThresholds>;
+    /** App-declared invariants (`--invariants`, #86), already validated against the allowlist. */
+    readonly invariants?: InvariantSpec;
+    /** Backend log sources (`--log-source`/`--log-defect`, #142), already validated. */
+    readonly serverLog?: ServerLogOptions;
+    /** Resolved `authFrom.secret` refs (#135) a declared probe may use: `env:VAR` → its value. */
+    readonly invariantAuthTokens?: ReadonlyMap<string, string>;
+    /** Per-mission viewport/device emulation (#149); see `RunExplorationOptions.emulation`. */
+    readonly emulation?: EmulationSpec;
+    /** Horizontal-overflow hard signal (#149, CLI `--check-overflow` / `--ignore-overflow`). */
+    readonly overflow?: OverflowFlags;
+    /**
+     * #293 `--from-journey`/`--at-step`: replayed into the session before the mission, which then starts
+     * on the live page it left (never a fresh navigation). `seedUrl` is only the expected landing.
+     */
+    readonly journeyPrefix?: JourneyPrefix;
+}
+export type AdversarialCliMissionResult = Omit<AdversarialOutcome, "defects"> & {
+    /** The result schema's version (#195): the common fields are filled the same way by every strategy. */
+    readonly schemaVersion: typeof MISSION_RESULT_SCHEMA_VERSION;
+    readonly strategy: "adversarial";
+    /** The portable verdict (equal to `outcome`, which an adversarial run already states as a `MissionOutcome`). */
+    readonly missionOutcome: MissionOutcome;
+    /** EVERY defect the run found (#195): hard-signal and declared-invariant defects, then `server-log` defects (#142). */
+    readonly defects: Array<AdversarialDefect | ServerLogDefect>;
+    /** Every Recording the run wrote (#195: one list on every strategy) — an adversarial run writes one. */
+    readonly recordingPaths: string[];
+    /** #245: `--record-video` files, finalized before this result was written (absent when not recording). */
+    readonly videoPaths?: string[];
+    readonly target: MissionTarget;
+    /** One ready-to-file draft per defect (and per crash), written next to the Recording. */
+    readonly issues: FindingsIssues;
+    /** The persisted typed result (`<recording>.result.json`), readable via MCP `get_mission_result`. */
+    readonly resultPath: string;
+    readonly transcriptPath: string;
+    /** Process exit code for `outcome` (see `missionExitCode`). */
+    readonly exitCode: number;
+    /** Which build produced this result (issue #83): `{version, commit, builtAt}`. */
+    readonly engine: EngineInfo;
+    /** The declared spec the run evaluated (#86) — persisted so `verify-fix` re-checks the same one. */
+    readonly invariantSpec?: InvariantSpec;
+    /** Judgment/generation call counts and tokens for this run (#100); present only when `opts.usage` was supplied. */
+    readonly usage?: UsageCounts;
+    /** Backend log correlation summary (#142) — present only when `--log-source` was given. */
+    readonly serverLogs?: ServerLogsSummary;
+    /** The host's health over the run (#203): peaks, the slowest render, starved steps. */
+    readonly hostHealth: HostHealthSummary;
+    /** Findings met while the host was starved (#203) — advisory, never a defect/hang, never failing the run. */
+    readonly environmentDegraded: EnvironmentDegraded[];
+    /** #293: the Journey step a journey-anchored run branched from (absent on a bare-URL run). */
+    readonly branch?: JourneyBranchPoint;
+};
+/**
+ * Runs `@jevitate/explore`'s adversarial "try to break it" mission behind the
+ * CLI. Guardrail #1 is enforced BEFORE opening a browser (fail-closed); the
+ * session is always torn down. The stop-on-defect decision is the mission's
+ * own trusted hard-signal oracle — never Jev's `Noul` (guardrail #4).
+ */
+export declare function runAdversarialCliMission(opts: RunAdversarialCliMissionOptions): Promise<AdversarialCliMissionResult>;

package/dist/explore-adversarial.js

@@ -0,0 +1,227 @@
+/** The adversarial strategy runner behind `jevitate explore --strategy adversarial`. */
+import { logsDirFor } from "./project-dir.js";
+import { join, resolve as resolvePath } from "node:path";
+import { PlaywrightBrowserPort, resolveEmulation } from "@jevitate/playwright";
+import { closeOnce, demoOverlayOf, extensionsStamp, finalizeVideos, runVideoDir, sessionLaunchOptions } from "./browser-run-options.js";
+import { runCaptureFor } from "./run-screenshots.js";
+import { evidenceOf, withRunEvidence } from "./defect-evidence.js";
+import { CastActor, BrowseTheWeb } from "@jevitate/screenplay";
+import { runAdversarialMission, assertAuthorizedExploreTarget, startRouteGlobs, draftForCrash, draftForDefect, draftForHang, } from "@jevitate/explore";
+import { clock, } from "@jevitate/domain";
+import { processIssueDrafts } from "./findings-filing.js";
+import { currentEngineInfo } from "./engine.js";
+import { MissionJournal, artifactStamp, closeQuietly, resultPathFor, writeMissionResult } from "./mission-journal.js";
+import { MISSION_RESULT_SCHEMA_VERSION, unifiedDefects } from "./result-schema.js";
+import { missionExitCode } from "./mission-exit.js";
+import { launchArmed } from "./launch-armed.js";
+import { branchFields, startFromJourney } from "./journey-prefix.js";
+import { finishHostHealth } from "./host-health-run.js";
+import { applyServerLogOutcome, openServerLogRuntime, } from "./log-correlation.js";
+import { serverLogResult, recordingEmulation, DRAFTS_ONLY, NO_FILER, draftContext, freshSessionOpener, currentUrlSafe, assertSaveStorageStateOutsideProject, persistStorageState, browserVersionOf, serverLogRuntimeOptions, } from "./explore-shared.js";
+/**
+ * The misuse strategies `explore --strategy adversarial` runs, in order — shared with the queue drain
+ * (`jevitate mission run`, #117) so a queued adversarial mission hunts exactly like the CLI's.
+ */
+export const CLI_ADVERSARIAL_STRATEGIES = [
+    // Form-aware misuse around submitting (#64): most app pages are forms.
+    "double-submit",
+    "boundary-submit",
+    "edit-cancel-save",
+    "navigate-away-unsaved",
+    "act-while-pending",
+    // Coverage: act on every target control once.
+    "exercise-controls",
+    "ordering-violation",
+    "repeat-rapid",
+    "boundary-input",
+    "contradictory-actions",
+    "nav-during-pending",
+    // Keep hunting on other routes (within the target's scope) after and between defects.
+    "visit-route",
+];
+/**
+ * Runs `@jevitate/explore`'s adversarial "try to break it" mission behind the
+ * CLI. Guardrail #1 is enforced BEFORE opening a browser (fail-closed); the
+ * session is always torn down. The stop-on-defect decision is the mission's
+ * own trusted hard-signal oracle — never Jev's `Noul` (guardrail #4).
+ */
+export async function runAdversarialCliMission(opts) {
+    // Guardrail #1 — authorize BEFORE opening a browser. Throws on refusal.
+    const origin = assertAuthorizedExploreTarget(opts.seedUrl, opts.allowlist);
+    assertSaveStorageStateOutsideProject(opts.saveStorageState);
+    // #224: the shared default scope (the start URL's route) must be derivable — refused up front.
+    startRouteGlobs(opts.seedUrl);
+    // #149: refused BEFORE any browser opens.
+    const resolvedEmulation = resolveEmulation(opts.emulation);
+    // #250/#251: a recorded or screenshotted run's sessions carry the live pixel mask from their first
+    // paint; `--screenshots` captures after each step (the Recording path names their folder).
+    const capture = runCaptureFor({
+        recordsVideo: opts.browser?.recordVideo !== undefined,
+        screenshots: opts.screenshots,
+        secrets: opts.secrets ?? [],
+        artifactPath: () => journal.recordingPath,
+        title: `adversarial run of ${opts.seedUrl}`,
+    });
+    const portFactory = capture.wrap(opts.browserPortFactory ?? (() => new PlaywrightBrowserPort()));
+    const port = portFactory();
+    const outDir = opts.outDir ?? logsDirFor();
+    const iso = (opts.nowIso ?? (() => clock.nowIso()))();
+    // Crash-safe: the transcript and partial Recording are flushed after every step.
+    const journal = new MissionJournal(join(outDir, `adversarial-${artifactStamp(iso)}.json`));
+    // #245: the mission session and every hang-replay session are shown/recorded alike.
+    const videoDir = runVideoDir(opts.browser, journal.recordingPath);
+    const launch = {
+        ...sessionLaunchOptions(opts.browser, videoDir),
+        allowedOrigins: [...opts.allowlist],
+        baseUrl: origin,
+        ...opts.emulation,
+        ...(opts.storageState !== undefined ? { storageState: opts.storageState } : {}),
+    };
+    // #163: this run's own share of a (possibly shared) tracker: its usage and sidecar.
+    const runUsage = opts.usage?.scope();
+    // #226: the kill switch is armed BEFORE the host sampler and the browser launch (see launch-armed.ts).
+    const { disarmKillSwitch, health, session, snapshotter } = await launchArmed({
+        hostHealth: opts.hostHealth,
+        saveStorageState: opts.saveStorageState !== undefined,
+        open: () => port.open(launch),
+        mission: (hooks) => ({
+            // #220: the killed run's partial result carries the unified schema's common fields too.
+            strategy: "adversarial",
+            target: { seedUrl: opts.seedUrl, allowlist: [...opts.allowlist], ...(opts.storageState !== undefined ? { storageStatePath: resolvePath(opts.storageState) } : {}) },
+            recordingPath: journal.recordingPath,
+            hostHealth: hooks.hostHealth,
+            ...(videoDir === undefined ? {} : { videoDir }),
+            transcriptPath: journal.transcriptPath,
+            transcript: () => journal.transcript,
+            ...(runUsage === undefined ? {} : { usage: runUsage }),
+            ...(opts.saveStorageState === undefined ? {} : { storageState: { path: opts.saveStorageState, snapshot: hooks.snapshot } }),
+        }),
+    });
+    const serverLog = openServerLogRuntime({
+        ...serverLogRuntimeOptions(opts.serverLog),
+        secrets: opts.secrets ?? [],
+        onTranscriptEntry: journal.onTranscriptEntry,
+    });
+    // #204: every request's correlation ids, from before the first navigation.
+    serverLog?.observe(session.page);
+    const onTranscriptEntry = (entry, all) => {
+        capture.noteEntry(session.page, entry);
+        health.noteStep(entry);
+        (serverLog?.onTranscriptEntry ?? journal.onTranscriptEntry)(entry, all);
+        snapshotter.noteSettledStep(currentUrlSafe(session));
+    };
+    // #159/#245: persisted and closed once — early (before the result is written) when recording video.
+    const closeSession = closeOnce(async () => {
+        await persistStorageState(session, opts.saveStorageState, snapshotter);
+        await closeQuietly(session);
+    });
+    try {
+        // #293: a journey-anchored run first replays its Journey's prefix into this very session.
+        const start = await startFromJourney(opts.journeyPrefix, session, opts.seedUrl, opts.allowlist, opts.browser);
+        const actor = CastActor.named("adversarial-mission").whoCan(new BrowseTheWeb(session, [...opts.allowlist]));
+        const outcome = await runAdversarialMission({
+            hostHealth: health,
+            demoOverlay: demoOverlayOf(opts.browser),
+            ...(opts.target?.timing === undefined ? {} : { timingConfig: opts.target.timing }),
+            ...(opts.target?.settle === undefined ? {} : { settle: opts.target.settle }),
+            ...(opts.target?.hangs === undefined ? {} : { hangs: opts.target.hangs }),
+            ...(opts.target?.safety === undefined ? {} : { safety: opts.target.safety }),
+            page: session.page,
+            actor,
+            judgment: opts.judgment,
+            generation: opts.generation,
+            seedUrl: start.url,
+            ...(start.branch === undefined ? {} : { startInPlace: true }),
+            // #293: a reset re-replays the Journey prefix (counted against --max-actions), never just the URL.
+            ...(start.restart ?? {}),
+            allowlist: opts.allowlist,
+            strategies: opts.strategies,
+            ...(opts.routeGlobs === undefined ? {} : { routeGlobs: opts.routeGlobs }),
+            ...(opts.coverageThresholds === undefined ? {} : { coverageThresholds: opts.coverageThresholds }),
+            site: origin,
+            ...(opts.bounds === undefined ? {} : { bounds: opts.bounds }),
+            ...(opts.secrets === undefined ? {} : { secrets: opts.secrets }),
+            ...(opts.actionDeltas === true ? { actionDeltas: true } : {}),
+            // A hang is reproduced by replaying its steps in fresh contexts (same auth).
+            openFreshSession: freshSessionOpener(portFactory, launch, opts.allowlist),
+            ...(opts.hangReplays === undefined ? {} : { hangReplays: opts.hangReplays }),
+            onTranscriptEntry,
+            onRecording: journal.onRecording,
+            ...(opts.invariants === undefined ? {} : { invariants: opts.invariants }),
+            ...(opts.invariantAuthTokens === undefined ? {} : { invariantAuthTokens: opts.invariantAuthTokens }),
+            overflow: {
+                ...(opts.overflow?.checkOverflow === undefined ? {} : { checkOverflow: opts.overflow.checkOverflow }),
+                ...(opts.overflow?.toleranceCss === undefined ? {} : { toleranceCss: opts.overflow.toleranceCss }),
+                ...(opts.overflow?.ignoreSelectors === undefined ? {} : { ignoreSelectors: opts.overflow.ignoreSelectors }),
+                ...(opts.emulation?.device === undefined ? {} : { device: opts.emulation.device }),
+            },
+        });
+        const serverLogRun = serverLog === undefined ? undefined : await serverLog.finish(outcome.transcript);
+        // `AdversarialOutcome.transcript` is a mutable `TranscriptEntry[]`; the correlated array only
+        // ADDS an optional `serverLogs` field per entry (`TranscriptEntryWithLogs extends TranscriptEntry`).
+        const transcript = (serverLogRun?.transcript ?? outcome.transcript);
+        journal.writeRecording(outcome.recording);
+        journal.writeTranscript(transcript);
+        // #142 follow-up: a server-log defect counts as `defects-found`; an unreadable `--log-defect`
+        // oracle turns an otherwise-`clean` run `inconclusive` — never a false clean.
+        const host = await finishHostHealth(health, applyServerLogOutcome(outcome.outcome, serverLogRun));
+        const missionOutcome = host.outcome;
+        const exitCode = missionExitCode(missionOutcome);
+        const resultPath = resultPathFor(journal.recordingPath);
+        const engine = currentEngineInfo();
+        const ctx = draftContext(origin, journal, opts.secrets ?? [], browserVersionOf(session.page), engine);
+        const drafts = outcome.defects.map((d) => draftForDefect(d, { ...ctx, verifyCommand: `jevitate verify-fix --result ${resultPath} --fingerprint ${d.fingerprint}` }));
+        for (const h of outcome.hangs) {
+            drafts.push(draftForHang(h, { ...ctx, verifyCommand: `jevitate verify-fix --result ${resultPath} --fingerprint ${h.fingerprint}` }));
+        }
+        if (outcome.crash !== undefined)
+            drafts.push(draftForCrash(outcome.crash, transcript, ctx));
+        const issues = await processIssueDrafts(journal.recordingPath, drafts, opts.filing ?? DRAFTS_ONLY, opts.issueFiler ?? NO_FILER, iso);
+        // #245: every context closed (videos finalized) before the result naming them is written.
+        const shotFields = await capture.finish();
+        const videos = await finalizeVideos(videoDir, closeSession);
+        const result = {
+            ...outcome,
+            schemaVersion: MISSION_RESULT_SCHEMA_VERSION,
+            strategy: "adversarial",
+            missionOutcome,
+            recordingPaths: [journal.recordingPath],
+            ...videos,
+            ...shotFields,
+            // #149: stamped with the emulation the mission ran under, so verify-fix replays under it by default.
+            recording: {
+                ...(resolvedEmulation === undefined ? outcome.recording : { ...outcome.recording, emulation: recordingEmulation(resolvedEmulation) }),
+                ...extensionsStamp(opts.browser), // #256
+            },
+            outcome: missionOutcome,
+            transcript,
+            transcriptPath: journal.transcriptPath,
+            exitCode,
+            issues,
+            // What `verify-fix` needs to replay a defect later: where, which origins, which session file
+            // (the storageState PATH only — its cookies never enter an artifact).
+            target: {
+                seedUrl: start.url,
+                allowlist: [...opts.allowlist],
+                ...(opts.storageState !== undefined ? { storageStatePath: resolvePath(opts.storageState) } : {}),
+            },
+            ...branchFields(start),
+            engine,
+            ...(opts.invariants === undefined ? {} : { invariantSpec: opts.invariants }),
+            ...(runUsage === undefined ? {} : { usage: runUsage.snapshot() }),
+            ...serverLogResult(serverLogRun),
+            defects: unifiedDefects(outcome.defects, serverLogRun?.defects),
+            resultPath,
+            ...(host.failure === undefined || outcome.failure !== undefined ? {} : { failure: host.failure }),
+            ...host.fields,
+        };
+        return await withRunEvidence({ ...result, resultPath: writeMissionResult(journal.recordingPath, missionOutcome, exitCode, result, runUsage) }, evidenceOf(opts, opts.secrets ?? []));
+    }
+    finally {
+        disarmKillSwitch();
+        health.stop();
+        await serverLog?.abort();
+        await closeSession();
+    }
+}
+//# sourceMappingURL=explore-adversarial.js.map

package/dist/explore-adversarial.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explore-adversarial.js","sourceRoot":"","sources":["../src/explore-adversarial.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAwC,MAAM,sBAAsB,CAAC;AACrH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,oBAAoB,EAA0B,MAAM,0BAA0B,CAAC;AAChK,OAAO,EAAE,aAAa,EAAwB,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAI/D,OAAO,EACL,qBAAqB,EACrB,6BAA6B,EAK7B,eAAe,EAGf,aAAa,EACb,cAAc,EACd,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIgB,KAAK,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAuB,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAmB,MAAM,aAAa,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACtH,OAAO,EAAE,6BAA6B,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAsB,MAAM,qBAAqB,CAAC;AAEzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAGrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,eAAe,EAEf,kBAAkB,EAClB,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,oCAAoC,EACpC,mBAAmB,EACnB,gBAAgB,EAEhB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA8B;IACnE,uEAAuE;IACvE,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,8CAA8C;IAC9C,mBAAmB;IACnB,oBAAoB;IACpB,cAAc;IACd,gBAAgB;IAChB,uBAAuB;IACvB,oBAAoB;IACpB,sFAAsF;IACtF,aAAa;CACd,CAAC;AAuHF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAqC;IAErC,wEAAwE;IACxE,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3E,oCAAoC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5D,+FAA+F;IAC/F,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,0CAA0C;IAC1C,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3D,mGAAmG;IACnG,2FAA2F;IAC3F,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,KAAK,SAAS;QACrD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa;QACzC,KAAK,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;KAC5C,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;IACtD,iFAAiF;IACjF,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3F,oFAAoF;IACpF,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG;QACb,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC/C,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QACnC,OAAO,EAAE,MAAM;QACf,GAAG,IAAI,CAAC,SAAS;QACjB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;IACF,oFAAoF;IACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;IACrC,uGAAuG;IACvG,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,WAAW,CAAC;QAC3E,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,KAAK,SAAS;QACrD,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACnB,wFAAwF;YACxF,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACnK,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU;YACpC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;SAC5H,CAAC;KACH,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,GAAG,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,CAAC,CAAC;IACH,2EAA2E;IAC3E,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,iBAAiB,GAAG,CAAC,KAAsB,EAAE,GAA+B,EAAQ,EAAE;QAC1F,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,SAAS,EAAE,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxE,WAAW,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,oGAAoG;IACpG,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE;QACxC,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QACvE,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,0FAA0F;QAC1F,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9G,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,UAAU,EAAE,MAAM;YAClB,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAClF,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5E,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5E,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,KAAK,CAAC,GAAG;YAClB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YAC7D,mGAAmG;YACnG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACjG,IAAI,EAAE,MAAM;YACZ,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,6EAA6E;YAC7E,gBAAgB,EAAE,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5E,iBAAiB;YACjB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACpG,QAAQ,EAAE;gBACR,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACrG,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAClG,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;gBAC3G,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;aACnF;SACF,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtG,8FAA8F;QAC9F,qGAAqG;QACrG,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,CAAsB,CAAC;QACzF,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACpC,8FAA8F;QAC9F,8EAA8E;QAC9E,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAClG,MAAM,cAAc,GAAmB,IAAI,CAAC,OAAO,CAAC;QACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACtG,MAAM,MAAM,GAAiB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrD,cAAc,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,gCAAgC,UAAU,kBAAkB,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAC1H,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,gCAAgC,UAAU,kBAAkB,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACvI,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,OAAO,CAAC,aAAa,EACrB,MAAM,EACN,IAAI,CAAC,MAAM,IAAI,WAAW,EAC1B,IAAI,CAAC,UAAU,IAAI,QAAQ,EAC3B,GAAG,CACJ,CAAC;QACF,0FAA0F;QAC1F,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG;YACb,GAAG,OAAO;YACV,aAAa,EAAE,6BAA6B;YAC5C,QAAQ,EAAE,aAAsB;YAChC,cAAc;YACd,cAAc,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;YACvC,GAAG,MAAM;YACT,GAAG,UAAU;YACb,qGAAqG;YACrG,SAAS,EAAE;gBACT,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACrI,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO;aAC1C;YACD,OAAO,EAAE,cAAc;YACvB,UAAU;YACV,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,QAAQ;YACR,MAAM;YACN,6FAA6F;YAC7F,sEAAsE;YACtE,MAAM,EAAE;gBACN,OAAO,EAAE,KAAK,CAAC,GAAG;gBAClB,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjG;YACD,GAAG,YAAY,CAAC,KAAK,CAAC;YACtB,MAAM;YACN,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5E,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;YACjE,GAAG,eAAe,CAAC,YAAY,CAAC;YAChC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC;YAC/D,UAAU;YACV,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACjG,GAAG,IAAI,CAAC,MAAM;SACf,CAAC;QACF,OAAO,MAAM,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACvL,CAAC;YAAS,CAAC;QACT,gBAAgB,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,SAAS,EAAE,KAAK,EAAE,CAAC;QACzB,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}