@kernlang/review 3.3.8 → 3.4.0

package/dist/concept-rules/root-cause.js

@@ -0,0 +1,31 @@
+function methodKey(method, fallback = 'GET') {
+    return (method ?? fallback).toUpperCase();
+}
+export function apiCallRootCause(clientNode, normalizedPath, method, routeNode) {
+    const httpMethod = methodKey(method);
+    const routePart = routeNode ? ` route=${routeNode.id}` : '';
+    return {
+        kind: 'api-call',
+        key: `api-call client=${clientNode.id} method=${httpMethod} path=${normalizedPath}${routePart}`,
+        facets: {
+            clientNodeId: clientNode.id,
+            method: httpMethod,
+            path: normalizedPath,
+            ...(routeNode ? { routeNodeId: routeNode.id } : {}),
+        },
+    };
+}
+export function routeRootCause(routeNode, method) {
+    const name = routeNode.payload.kind === 'entrypoint' ? routeNode.payload.name : routeNode.id;
+    const httpMethod = methodKey(method, 'ANY');
+    return {
+        kind: 'route',
+        key: `route node=${routeNode.id} method=${httpMethod} path=${name}`,
+        facets: {
+            routeNodeId: routeNode.id,
+            method: httpMethod,
+            path: name,
+        },
+    };
+}
+//# sourceMappingURL=root-cause.js.map

package/dist/concept-rules/root-cause.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-cause.js","sourceRoot":"","sources":["../../src/concept-rules/root-cause.ts"],"names":[],"mappings":"AAGA,SAAS,SAAS,CAAC,MAA0B,EAAE,QAAQ,GAAG,KAAK;IAC7D,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,UAAuB,EACvB,cAAsB,EACtB,MAAe,EACf,SAAuB;IAEvB,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,mBAAmB,UAAU,CAAC,EAAE,WAAW,UAAU,SAAS,cAAc,GAAG,SAAS,EAAE;QAC/F,MAAM,EAAE;YACN,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,cAAc;YACpB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAsB,EAAE,MAAe;IACpE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;IAC7F,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,cAAc,SAAS,CAAC,EAAE,WAAW,UAAU,SAAS,IAAI,EAAE;QACnE,MAAM,EAAE;YACN,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,IAAI;SACX;KACF,CAAC;AACJ,CAAC"}

package/dist/concept-rules/unbounded-collection-query.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Rule: unbounded-collection-query
+ *
+ * Cross-stack rule — fires when a client calls a list endpoint without
+ * page/cursor/limit parameters and the matching server route appears to return
+ * a DB-backed collection without a bound.
+ */
+import type { ReviewFinding } from '../types.js';
+import type { ConceptRuleContext } from './index.js';
+export declare function unboundedCollectionQuery(ctx: ConceptRuleContext): ReviewFinding[];

package/dist/concept-rules/unbounded-collection-query.js

@@ -0,0 +1,58 @@
+/**
+ * Rule: unbounded-collection-query
+ *
+ * Cross-stack rule — fires when a client calls a list endpoint without
+ * page/cursor/limit parameters and the matching server route appears to return
+ * a DB-backed collection without a bound.
+ */
+import { createFingerprint } from '../types.js';
+import { CROSS_STACK_HEURISTIC_CONFIDENCE, collectRoutesAcrossGraph, findHighConfidenceRouteForMethod, findMatchingRouteForMethod, normalizeClientUrl, } from './cross-stack-utils.js';
+import { apiCallRootCause } from './root-cause.js';
+const PAGINATION_QUERY_PARAMS = new Set(['limit', 'take', 'page', 'pageSize', 'perPage', 'cursor', 'offset', 'skip']);
+export function unboundedCollectionQuery(ctx) {
+    if (!ctx.allConcepts || ctx.allConcepts.size === 0)
+        return [];
+    const serverRoutes = collectRoutesAcrossGraph(ctx.allConcepts);
+    if (serverRoutes.length === 0)
+        return [];
+    const findings = [];
+    const localConcepts = ctx.allConcepts.get(ctx.filePath) ?? ctx.concepts;
+    for (const node of localConcepts.nodes) {
+        if (node.kind !== 'effect' || node.payload.kind !== 'effect' || node.payload.subtype !== 'network')
+            continue;
+        if (node.payload.queryParamsResolved !== true)
+            continue;
+        if (hasPaginationParam(node.payload.queryParams ?? []))
+            continue;
+        const target = node.payload.target;
+        if (typeof target !== 'string')
+            continue;
+        const normalized = normalizeClientUrl(target);
+        if (!normalized)
+            continue;
+        const route = ctx.crossStackMode === 'audit'
+            ? findMatchingRouteForMethod(normalized, node.payload.method, serverRoutes)
+            : findHighConfidenceRouteForMethod(normalized, node.payload.method, serverRoutes);
+        if (route?.node?.payload.kind !== 'entrypoint')
+            continue;
+        if (route.node.payload.hasUnboundedCollectionQuery !== true)
+            continue;
+        findings.push({
+            source: 'kern',
+            ruleId: 'unbounded-collection-query',
+            severity: 'warning',
+            category: 'bug',
+            message: `Client calls list endpoint \`${target}\` without page/cursor/limit parameters, and the matching server route appears to return an unbounded DB collection. Add pagination on both sides before this endpoint grows.`,
+            primarySpan: node.primarySpan,
+            relatedSpans: [route.node.primarySpan],
+            fingerprint: createFingerprint('unbounded-collection-query', node.primarySpan.startLine, node.primarySpan.startCol),
+            confidence: node.confidence * CROSS_STACK_HEURISTIC_CONFIDENCE,
+            rootCause: apiCallRootCause(node, normalized, node.payload.method, route.node),
+        });
+    }
+    return findings;
+}
+function hasPaginationParam(params) {
+    return params.some((param) => PAGINATION_QUERY_PARAMS.has(param));
+}
+//# sourceMappingURL=unbounded-collection-query.js.map

package/dist/concept-rules/unbounded-collection-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbounded-collection-query.js","sourceRoot":"","sources":["../../src/concept-rules/unbounded-collection-query.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,gCAAgC,EAChC,wBAAwB,EACxB,gCAAgC,EAChC,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtH,MAAM,UAAU,wBAAwB,CAAC,GAAuB;IAC9D,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE9D,MAAM,YAAY,GAAG,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;IAExE,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,SAAS;QAC7G,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI;YAAE,SAAS;QACxD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;YAAE,SAAS;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAS;QACzC,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU;YAAE,SAAS;QAE1B,MAAM,KAAK,GACT,GAAG,CAAC,cAAc,KAAK,OAAO;YAC5B,CAAC,CAAC,0BAA0B,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;YAC3E,CAAC,CAAC,gCAAgC,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtF,IAAI,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,YAAY;YAAE,SAAS;QACzD,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,KAAK,IAAI;YAAE,SAAS;QAEtE,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,4BAA4B;YACpC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,gCAAgC,MAAM,+KAA+K;YAC9N,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YACtC,WAAW,EAAE,iBAAiB,CAC5B,4BAA4B,EAC5B,IAAI,CAAC,WAAW,CAAC,SAAS,EAC1B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAC1B;YACD,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,gCAAgC;YAC9D,SAAS,EAAE,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAyB;IACnD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC"}

package/dist/concept-rules/unhandled-api-error-shape.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Rule: unhandled-api-error-shape
+ *
+ * Cross-stack rule — fires when a client calls a matching project API route
+ * without a visible error path while the backend route can explicitly return
+ * an error status such as 401/403/404/422/500.
+ */
+import type { ReviewFinding } from '../types.js';
+import type { ConceptRuleContext } from './index.js';
+export declare function unhandledApiErrorShape(ctx: ConceptRuleContext): ReviewFinding[];

package/dist/concept-rules/unhandled-api-error-shape.js

@@ -0,0 +1,59 @@
+/**
+ * Rule: unhandled-api-error-shape
+ *
+ * Cross-stack rule — fires when a client calls a matching project API route
+ * without a visible error path while the backend route can explicitly return
+ * an error status such as 401/403/404/422/500.
+ */
+import { createFingerprint } from '../types.js';
+import { CROSS_STACK_EXACT_CONFIDENCE, collectRoutesAcrossGraph, findHighConfidenceRouteForMethod, findMatchingRouteForMethod, normalizeClientUrl, } from './cross-stack-utils.js';
+import { apiCallRootCause } from './root-cause.js';
+const ERROR_STATUS_CODES = new Set([401, 403, 404, 422, 500]);
+export function unhandledApiErrorShape(ctx) {
+    if (!ctx.allConcepts || ctx.allConcepts.size === 0)
+        return [];
+    const serverRoutes = collectRoutesAcrossGraph(ctx.allConcepts);
+    if (serverRoutes.length === 0)
+        return [];
+    const findings = [];
+    const localConcepts = ctx.allConcepts.get(ctx.filePath) ?? ctx.concepts;
+    for (const node of localConcepts.nodes) {
+        if (node.kind !== 'effect' || node.payload.kind !== 'effect' || node.payload.subtype !== 'network')
+            continue;
+        if (node.payload.handlesApiErrors !== false)
+            continue;
+        const target = node.payload.target;
+        if (typeof target !== 'string')
+            continue;
+        const normalized = normalizeClientUrl(target);
+        if (!normalized)
+            continue;
+        if (!isRawFetchEffect(node.evidence))
+            continue;
+        const route = ctx.crossStackMode === 'audit'
+            ? findMatchingRouteForMethod(normalized, node.payload.method, serverRoutes)
+            : findHighConfidenceRouteForMethod(normalized, node.payload.method, serverRoutes);
+        const statusCodes = route?.node?.payload.kind === 'entrypoint' ? route.node.payload.errorStatusCodes : undefined;
+        const relevantCodes = (statusCodes ?? []).filter((code) => ERROR_STATUS_CODES.has(code));
+        if (relevantCodes.length === 0)
+            continue;
+        const codeList = relevantCodes.join('/');
+        findings.push({
+            source: 'kern',
+            ruleId: 'unhandled-api-error-shape',
+            severity: 'warning',
+            category: 'bug',
+            message: `Client calls \`${target}\` with only the success path handled, but the matching server route can return ${codeList}. Add a \`response.ok\`/status branch, catch path, or error UI for the API error shape.`,
+            primarySpan: node.primarySpan,
+            relatedSpans: route?.node ? [route.node.primarySpan] : undefined,
+            fingerprint: createFingerprint('unhandled-api-error-shape', node.primarySpan.startLine, node.primarySpan.startCol),
+            confidence: node.confidence * CROSS_STACK_EXACT_CONFIDENCE,
+            rootCause: apiCallRootCause(node, normalized, node.payload.method, route?.node),
+        });
+    }
+    return findings;
+}
+function isRawFetchEffect(evidence) {
+    return /^\s*(?:await\s+)?fetch\s*\(/.test(evidence);
+}
+//# sourceMappingURL=unhandled-api-error-shape.js.map

package/dist/concept-rules/unhandled-api-error-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unhandled-api-error-shape.js","sourceRoot":"","sources":["../../src/concept-rules/unhandled-api-error-shape.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,gCAAgC,EAChC,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE9D,MAAM,UAAU,sBAAsB,CAAC,GAAuB;IAC5D,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE9D,MAAM,YAAY,GAAG,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;IAExE,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,SAAS;QAC7G,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,KAAK,KAAK;YAAE,SAAS;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAS;QACzC,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QAE/C,MAAM,KAAK,GACT,GAAG,CAAC,cAAc,KAAK,OAAO;YAC5B,CAAC,CAAC,0BAA0B,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;YAC3E,CAAC,CAAC,gCAAgC,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtF,MAAM,WAAW,GAAG,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;QACjH,MAAM,aAAa,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEzC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,2BAA2B;YACnC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,kBAAkB,MAAM,mFAAmF,QAAQ,yFAAyF;YACrN,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,WAAW,EAAE,iBAAiB,CAC5B,2BAA2B,EAC3B,IAAI,CAAC,WAAW,CAAC,SAAS,EAC1B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAC1B;YACD,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,4BAA4B;YAC1D,SAAS,EAAE,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC;SAChF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACtD,CAAC"}

package/dist/default-export.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Default-export resolver — bridges the gap between how seeds express
+ * "this file's default export is public" (`{filePath}#default`) and how
+ * the call graph indexes the same symbol internally.
+ *
+ * For `export default function Page() {}`, the call graph stores the
+ * function under its declaration name (`Page`). The framework seed
+ * (Next.js page convention, etc.) uses `default`. Without a bridge, the
+ * (filePath, 'Page') dead-export check looks up (filePath, 'default') in
+ * the seed map and misses — flagging Page as dead. This module returns
+ * the call-graph-internal name so the caller can also accept that.
+ *
+ * Step 9b wires this into the dead-export rule. Splitting it lets us
+ * test the resolver against every TypeScript default-export shape in
+ * isolation — there are five distinct cases and getting any one wrong
+ * silently re-introduces FPs.
+ */
+import { type SourceFile } from 'ts-morph';
+/**
+ * Resolve the call-graph-internal name of a source file's default export.
+ *
+ * Returns the identifier the call graph would track the symbol under —
+ * `'Page'` for `export default function Page() {}`, `'x'` for
+ * `export default x` or `export { x as default }`, and `undefined` for
+ * anonymous defaults (`export default function () {}` / `export default 42`)
+ * or files with no default export at all.
+ *
+ * The five cases red-team #11 enumerated:
+ *   1. `export default function Page() {}` → `'Page'`
+ *   2. `export default class Page {}` → `'Page'`
+ *   3. `export default x` (where x is a local identifier) → `'x'`
+ *   4. `export { x as default }` → `'x'`
+ *   5. anonymous (`export default function () {}`, `export default 42`,
+ *      `export default { ... }`) → undefined
+ *
+ * `undefined` callers should fall back to the literal `'default'` —
+ * that's how the call graph keys anonymous defaults internally
+ * (resolveDefaultExportBinding in call-graph.ts uses 'default' as the
+ * fallback name when the symbol carries no identifier).
+ */
+export declare function resolveDefaultExportName(sourceFile: SourceFile): string | undefined;

package/dist/default-export.js

@@ -0,0 +1,76 @@
+/**
+ * Default-export resolver — bridges the gap between how seeds express
+ * "this file's default export is public" (`{filePath}#default`) and how
+ * the call graph indexes the same symbol internally.
+ *
+ * For `export default function Page() {}`, the call graph stores the
+ * function under its declaration name (`Page`). The framework seed
+ * (Next.js page convention, etc.) uses `default`. Without a bridge, the
+ * (filePath, 'Page') dead-export check looks up (filePath, 'default') in
+ * the seed map and misses — flagging Page as dead. This module returns
+ * the call-graph-internal name so the caller can also accept that.
+ *
+ * Step 9b wires this into the dead-export rule. Splitting it lets us
+ * test the resolver against every TypeScript default-export shape in
+ * isolation — there are five distinct cases and getting any one wrong
+ * silently re-introduces FPs.
+ */
+import { SyntaxKind } from 'ts-morph';
+/**
+ * Resolve the call-graph-internal name of a source file's default export.
+ *
+ * Returns the identifier the call graph would track the symbol under —
+ * `'Page'` for `export default function Page() {}`, `'x'` for
+ * `export default x` or `export { x as default }`, and `undefined` for
+ * anonymous defaults (`export default function () {}` / `export default 42`)
+ * or files with no default export at all.
+ *
+ * The five cases red-team #11 enumerated:
+ *   1. `export default function Page() {}` → `'Page'`
+ *   2. `export default class Page {}` → `'Page'`
+ *   3. `export default x` (where x is a local identifier) → `'x'`
+ *   4. `export { x as default }` → `'x'`
+ *   5. anonymous (`export default function () {}`, `export default 42`,
+ *      `export default { ... }`) → undefined
+ *
+ * `undefined` callers should fall back to the literal `'default'` —
+ * that's how the call graph keys anonymous defaults internally
+ * (resolveDefaultExportBinding in call-graph.ts uses 'default' as the
+ * fallback name when the symbol carries no identifier).
+ */
+export function resolveDefaultExportName(sourceFile) {
+    const symbol = sourceFile.getDefaultExportSymbol();
+    if (!symbol)
+        return undefined;
+    for (const decl of symbol.getDeclarations()) {
+        const kind = decl.getKind();
+        // Case 3 + 4: `export default x` and `export { x as default }`.
+        // Both surface as ExportAssignment in ts-morph; getExpression() is
+        // the identifier when a name is in play.
+        if (kind === SyntaxKind.ExportAssignment) {
+            const expr = decl.getExpression();
+            if (expr.getKind() === SyntaxKind.Identifier) {
+                const text = expr.getText();
+                if (text)
+                    return text;
+            }
+            // Anything else under an ExportAssignment is anonymous (literal,
+            // object expression, function expression without a name, …).
+            // Fall through to the next declaration just in case (rare for
+            // ExportSpecifier-style aliasing the symbol resolved to).
+            continue;
+        }
+        // Cases 1 + 2 + the named-function-expression form of 5: anything
+        // with a `getName()` method (FunctionDeclaration, ClassDeclaration,
+        // FunctionExpression, ClassExpression). Anonymous functions/classes
+        // declared inline via `export default function () {}` have no name.
+        const named = decl;
+        if (typeof named.getName === 'function') {
+            const name = named.getName();
+            if (name)
+                return name;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=default-export.js.map

package/dist/default-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-export.js","sourceRoot":"","sources":["../src/default-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAqD,UAAU,EAAE,MAAM,UAAU,CAAC;AAEzF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAsB;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,sBAAsB,EAAE,CAAC;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAE5B,gEAAgE;QAChE,mEAAmE;QACnE,yCAAyC;QACzC,IAAI,IAAI,KAAK,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACzC,MAAM,IAAI,GAAI,IAAyB,CAAC,aAAa,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC5B,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC;YACxB,CAAC;YACD,iEAAiE;YACjE,6DAA6D;YAC7D,8DAA8D;YAC9D,0DAA0D;YAC1D,SAAS;QACX,CAAC;QAED,kEAAkE;QAClE,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,KAAK,GAAG,IAAqD,CAAC;QACpE,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/eval.d.ts

@@ -0,0 +1,67 @@
+import type { ReviewConfig, ReviewFinding, ReviewReport } from './types.js';
+export interface ReviewEvalFindingExpectation {
+    ruleId: string;
+    file?: string;
+    severity?: ReviewFinding['severity'];
+    messageIncludes?: string;
+    rootCauseKind?: NonNullable<ReviewFinding['rootCause']>['kind'];
+    minCount?: number;
+}
+export interface ReviewEvalExpectations {
+    present?: ReviewEvalFindingExpectation[];
+    absent?: ReviewEvalFindingExpectation[];
+    maxFindings?: number;
+    maxErrors?: number;
+    maxWarnings?: number;
+    maxDurationMs?: number;
+}
+export interface ReviewEvalCaseConfig {
+    target?: string;
+    policy?: ReviewConfig['policy'];
+    crossStackMode?: ReviewConfig['crossStackMode'];
+    minConfidence?: number;
+    maxErrors?: number;
+    maxWarnings?: number;
+    disabledRules?: string[];
+    strict?: ReviewConfig['strict'];
+    strictParse?: boolean;
+    requireConfidenceAnnotations?: boolean;
+}
+export interface ReviewEvalCase {
+    name: string;
+    files: string[];
+    graph?: boolean;
+    maxDepth?: number;
+    config?: ReviewEvalCaseConfig;
+    expect: ReviewEvalExpectations;
+}
+export interface ReviewEvalManifest {
+    schemaVersion?: 1;
+    cases: ReviewEvalCase[];
+}
+export interface ReviewEvalCaseResult {
+    name: string;
+    passed: boolean;
+    files: string[];
+    findings: number;
+    errors: number;
+    warnings: number;
+    notes: number;
+    durationMs?: number;
+    failures: string[];
+}
+export interface ReviewEvalSummary {
+    passed: boolean;
+    cases: number;
+    passedCases: number;
+    failedCases: number;
+    failures: number;
+    results: ReviewEvalCaseResult[];
+}
+export interface ReviewEvalRunMetadata {
+    durationMs?: number;
+}
+export declare function normalizeReviewEvalManifest(value: unknown): ReviewEvalManifest;
+export declare function evaluateReviewReports(testCase: ReviewEvalCase, reports: readonly ReviewReport[], metadata?: ReviewEvalRunMetadata): ReviewEvalCaseResult;
+export declare function summarizeReviewEvalResults(results: readonly ReviewEvalCaseResult[]): ReviewEvalSummary;
+export declare function formatReviewEvalSummary(summary: ReviewEvalSummary): string;

package/dist/eval.js

@@ -0,0 +1,177 @@
+export function normalizeReviewEvalManifest(value) {
+    if (!isRecord(value))
+        throw new Error('eval manifest must be an object');
+    const rawCases = value.cases;
+    if (!Array.isArray(rawCases) || rawCases.length === 0) {
+        throw new Error('eval manifest must contain a non-empty cases array');
+    }
+    return {
+        schemaVersion: value.schemaVersion === undefined ? undefined : 1,
+        cases: rawCases.map((entry, index) => normalizeReviewEvalCase(entry, index)),
+    };
+}
+export function evaluateReviewReports(testCase, reports, metadata = {}) {
+    const findings = reports.flatMap((report) => report.findings);
+    const failures = [];
+    const expected = testCase.expect ?? {};
+    for (const expectation of expected.present ?? []) {
+        const count = countMatches(findings, expectation);
+        const minCount = expectation.minCount ?? 1;
+        if (count < minCount) {
+            failures.push(`expected ${describeExpectation(expectation)} at least ${minCount} time(s), found ${count}`);
+        }
+    }
+    for (const expectation of expected.absent ?? []) {
+        const count = countMatches(findings, expectation);
+        if (count > 0) {
+            failures.push(`expected no ${describeExpectation(expectation)}, found ${count}`);
+        }
+    }
+    if (expected.maxFindings !== undefined && findings.length > expected.maxFindings) {
+        failures.push(`expected at most ${expected.maxFindings} finding(s), found ${findings.length}`);
+    }
+    const errors = findings.filter((finding) => finding.severity === 'error').length;
+    const warnings = findings.filter((finding) => finding.severity === 'warning').length;
+    const notes = findings.filter((finding) => finding.severity === 'info').length;
+    if (expected.maxErrors !== undefined && errors > expected.maxErrors) {
+        failures.push(`expected at most ${expected.maxErrors} error(s), found ${errors}`);
+    }
+    if (expected.maxWarnings !== undefined && warnings > expected.maxWarnings) {
+        failures.push(`expected at most ${expected.maxWarnings} warning(s), found ${warnings}`);
+    }
+    if (expected.maxDurationMs !== undefined &&
+        metadata.durationMs !== undefined &&
+        metadata.durationMs > expected.maxDurationMs) {
+        failures.push(`expected duration <= ${expected.maxDurationMs}ms, observed ${metadata.durationMs}ms`);
+    }
+    return {
+        name: testCase.name,
+        passed: failures.length === 0,
+        files: testCase.files,
+        findings: findings.length,
+        errors,
+        warnings,
+        notes,
+        ...(metadata.durationMs !== undefined ? { durationMs: metadata.durationMs } : {}),
+        failures,
+    };
+}
+export function summarizeReviewEvalResults(results) {
+    const failedCases = results.filter((result) => !result.passed).length;
+    return {
+        passed: failedCases === 0,
+        cases: results.length,
+        passedCases: results.length - failedCases,
+        failedCases,
+        failures: results.reduce((sum, result) => sum + result.failures.length, 0),
+        results: [...results],
+    };
+}
+export function formatReviewEvalSummary(summary) {
+    const lines = [
+        'KERN Review Eval',
+        '',
+        `Cases: ${summary.passedCases}/${summary.cases} passed`,
+        `Failures: ${summary.failures}`,
+    ];
+    for (const result of summary.results) {
+        const status = result.passed ? 'PASS' : 'FAIL';
+        const duration = result.durationMs !== undefined ? `, ${result.durationMs}ms` : '';
+        lines.push('', `${status} ${result.name} (${result.findings} findings${duration})`);
+        for (const failure of result.failures) {
+            lines.push(`  - ${failure}`);
+        }
+    }
+    return lines.join('\n');
+}
+function normalizeReviewEvalCase(value, index) {
+    if (!isRecord(value))
+        throw new Error(`eval case ${index + 1} must be an object`);
+    if (typeof value.name !== 'string' || value.name.length === 0) {
+        throw new Error(`eval case ${index + 1} must declare a non-empty name`);
+    }
+    if (!Array.isArray(value.files) || value.files.some((file) => typeof file !== 'string')) {
+        throw new Error(`eval case '${value.name}' must declare a files string array`);
+    }
+    if (!isRecord(value.expect)) {
+        throw new Error(`eval case '${value.name}' must declare expect`);
+    }
+    return {
+        name: value.name,
+        files: value.files,
+        ...(value.graph !== undefined ? { graph: Boolean(value.graph) } : {}),
+        ...(typeof value.maxDepth === 'number' ? { maxDepth: value.maxDepth } : {}),
+        ...(isRecord(value.config) ? { config: value.config } : {}),
+        expect: normalizeExpectations(value.expect),
+    };
+}
+function normalizeExpectations(value) {
+    return {
+        ...(Array.isArray(value.present)
+            ? { present: value.present.map((entry) => normalizeFindingExpectation(entry)) }
+            : {}),
+        ...(Array.isArray(value.absent) ? { absent: value.absent.map((entry) => normalizeFindingExpectation(entry)) } : {}),
+        ...(typeof value.maxFindings === 'number' ? { maxFindings: value.maxFindings } : {}),
+        ...(typeof value.maxErrors === 'number' ? { maxErrors: value.maxErrors } : {}),
+        ...(typeof value.maxWarnings === 'number' ? { maxWarnings: value.maxWarnings } : {}),
+        ...(typeof value.maxDurationMs === 'number' ? { maxDurationMs: value.maxDurationMs } : {}),
+    };
+}
+function normalizeFindingExpectation(value) {
+    if (typeof value === 'string')
+        return { ruleId: value };
+    if (!isRecord(value) || typeof value.ruleId !== 'string') {
+        throw new Error('finding expectation must be a rule id string or object with ruleId');
+    }
+    return {
+        ruleId: value.ruleId,
+        ...(typeof value.file === 'string' ? { file: value.file } : {}),
+        ...(isSeverity(value.severity) ? { severity: value.severity } : {}),
+        ...(typeof value.messageIncludes === 'string' ? { messageIncludes: value.messageIncludes } : {}),
+        ...(typeof value.rootCauseKind === 'string'
+            ? { rootCauseKind: value.rootCauseKind }
+            : {}),
+        ...(typeof value.minCount === 'number' ? { minCount: value.minCount } : {}),
+    };
+}
+function countMatches(findings, expectation) {
+    return findings.filter((finding) => findingMatches(finding, expectation)).length;
+}
+function findingMatches(finding, expectation) {
+    if (finding.ruleId !== expectation.ruleId)
+        return false;
+    if (expectation.severity && finding.severity !== expectation.severity)
+        return false;
+    if (expectation.messageIncludes && !finding.message.includes(expectation.messageIncludes))
+        return false;
+    if (expectation.rootCauseKind && finding.rootCause?.kind !== expectation.rootCauseKind)
+        return false;
+    if (expectation.file && !pathMatches(finding.primarySpan.file, expectation.file))
+        return false;
+    return true;
+}
+function pathMatches(actual, expected) {
+    const normalizedActual = normalizePath(actual);
+    const normalizedExpected = normalizePath(expected);
+    return normalizedActual === normalizedExpected || normalizedActual.endsWith(`/${normalizedExpected}`);
+}
+function normalizePath(path) {
+    return path.replace(/\\/g, '/').replace(/^\/+/, '');
+}
+function describeExpectation(expectation) {
+    const parts = [expectation.ruleId];
+    if (expectation.file)
+        parts.push(`in ${expectation.file}`);
+    if (expectation.severity)
+        parts.push(`severity=${expectation.severity}`);
+    if (expectation.rootCauseKind)
+        parts.push(`rootCause=${expectation.rootCauseKind}`);
+    return parts.join(' ');
+}
+function isSeverity(value) {
+    return value === 'error' || value === 'warning' || value === 'info';
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+//# sourceMappingURL=eval.js.map

package/dist/eval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval.js","sourceRoot":"","sources":["../src/eval.ts"],"names":[],"mappings":"AAwEA,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAChE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAwB,EACxB,OAAgC,EAChC,WAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;IAEvC,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,YAAY,mBAAmB,CAAC,WAAW,CAAC,aAAa,QAAQ,mBAAmB,KAAK,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAED,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAClD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,eAAe,mBAAmB,CAAC,WAAW,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACjF,QAAQ,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,WAAW,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACjF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACrF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAE/E,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpE,QAAQ,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,SAAS,oBAAoB,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,WAAW,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IACE,QAAQ,CAAC,aAAa,KAAK,SAAS;QACpC,QAAQ,CAAC,UAAU,KAAK,SAAS;QACjC,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,aAAa,EAC5C,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,wBAAwB,QAAQ,CAAC,aAAa,gBAAgB,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;IACvG,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,MAAM;QACN,QAAQ;QACR,KAAK;QACL,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAwC;IACjF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACtE,OAAO;QACL,MAAM,EAAE,WAAW,KAAK,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,WAAW,EAAE,OAAO,CAAC,MAAM,GAAG,WAAW;QACzC,WAAW;QACX,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA0B;IAChE,MAAM,KAAK,GAAG;QACZ,kBAAkB;QAClB,EAAE;QACF,UAAU,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,SAAS;QACvD,aAAa,OAAO,CAAC,QAAQ,EAAE;KAChC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,YAAY,QAAQ,GAAG,CAAC,CAAC;QACpF,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,KAAa;IAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,IAAI,qCAAqC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,IAAI,uBAAuB,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAiB;QAC9B,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAA8B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA8B;IAC3D,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,EAAE;YAC/E,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnH,GAAG,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,GAAG,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;YACzC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAA8D,EAAE;YACzF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAkC,EAAE,WAAyC;IACjG,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,OAAsB,EAAE,WAAyC;IACvF,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,WAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,WAAW,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACxG,IAAI,WAAW,CAAC,aAAa,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,KAAK,WAAW,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACrG,IAAI,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,QAAgB;IACnD,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,kBAAkB,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,gBAAgB,KAAK,kBAAkB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAyC;IACpE,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,WAAW,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,WAAW,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzE,IAAI,WAAW,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}