@metaobjectsdev/cli 0.23.2 → 0.24.0

package/src/lib/migrate-scope.ts

@@ -0,0 +1,102 @@
+// What `meta migrate` and `meta verify --db` SAY about a declared `migrate.scope`.
+//
+// The scope itself needs no adapter: `resolveCollection` hands back
+// `inMigrateScope` already in migrate-ts's predicate shape, so the pattern grammar
+// lives in exactly one place (`matchesScope`, @metaobjectsdev/sdk) and `migrate` and
+// `gen` cannot come to disagree about what `acme::platform::**` means.
+//
+// What DOES need one home is the user-facing language, and both commands import it
+// from here: they govern the identical object set from one declaration, so a note
+// or a refusal that drifted between them would be drift the user reads.
+
+import type { Collection } from "@metaobjectsdev/sdk";
+import type { SchemaProvenance } from "@metaobjectsdev/migrate-ts";
+
+/**
+ * Say what a declared `migrate.scope` left out, for `migrate` and `verify --db`
+ * alike.
+ *
+ * An excluded object produces neither a create nor a drop and is neither checked
+ * nor reported as drift, so without this line "no changes" and "no changes to the
+ * half of the model this run governs" read identically — and an unchecked table is
+ * indistinguishable from a checked-and-clean one.
+ *
+ * One sentence, one definition: the two commands say the same thing about the same
+ * declaration, and this is a string a user reads, so drift between two copies of it
+ * is drift the user sees.
+ */
+export function outOfScopeNote(command: string, names: readonly string[]): string {
+  return (
+    `meta ${command} — ${names.length} object(s) out-of-scope ` +
+    `(outside migrate.scope, governed elsewhere): ${names.join(", ")}`
+  );
+}
+
+/** How many loaded FQNs to name in the refusal below — enough to show the shape
+ *  an author's patterns have to match, short enough to stay readable. */
+const EXAMPLE_FQN_CAP = 3;
+
+/**
+ * The refusal for a `migrate.scope` that matches NOTHING it could govern.
+ *
+ * A scope matching zero of the objects that declare a table or view can never be
+ * what someone meant — it says "every table in this model belongs to somebody
+ * else", which is a project with no schema to migrate at all, expressed the hard
+ * way. In practice it is a typo'd or stale package pattern, or a scope over a
+ * package that holds only value objects and abstracts (shapes that can never
+ * contribute a table or view), and it is silent: migrate reports "no changes"
+ * while having compared nothing.
+ *
+ * It is also actively dangerous, which is why this is a refusal and not a warning.
+ * An empty expected side is what `diff` reads as "no model, govern the whole
+ * database" — the inversion `scopeExpectedSchema`'s `declaredSchemas` closes
+ * structurally (migrate-ts `scope.ts`). This is the second lock on the same door:
+ * the structural fix stops a wrong scope proposing a destructive change, and this
+ * stops the wrong scope going unnoticed in the first place.
+ *
+ * Returns the message to report, or `undefined` when there is nothing to refuse —
+ * no scope declared, or at least one table- or view-declaring object inside it.
+ * Callers report it and exit 2 (a configuration error), rather than this throwing,
+ * so it reads like every other config failure in these commands.
+ */
+export function migrateScopeMismatch(
+  collection: Collection,
+  /**
+   * The UNSCOPED expected schema's provenance (migrate-ts
+   * `buildExpectedSchemaWithProvenance`) — qualified table/view name → declaring
+   * FQN. Supplied lazily because it is consulted only under a declared scope, so
+   * a project with no `migrate.scope` pays nothing for this check and its runs
+   * are byte-for-byte what they always were.
+   */
+  provenance: () => SchemaProvenance,
+): string | undefined {
+  const { inMigrateScope, migrateScopePatterns } = collection;
+  if (inMigrateScope === undefined) return undefined;
+
+  // The declaring FQNs of every table and view the UNSCOPED model contributes —
+  // the same provenance `scopeExpectedSchema` decides scope on, so the refusal
+  // asks exactly the question the run answers. NOT the loaded object set: that
+  // counts value objects and abstracts, which can never declare a table or view
+  // (persistability derives from a declared/inherited writable source, never
+  // from a subtype — #248), so a scope over only those objects passed this
+  // refusal while governing zero tables. And not a fresh walk either: it would
+  // have to re-implement the builder's skip rules (abstract, TPH subtype, no
+  // writable source, `@unmanaged`) and would drift from them.
+  const fqns = [...new Set(provenance().values())];
+  // A model that declares no table or view at all is not a scope error: there is
+  // nothing for a pattern to govern, scoped or not, and an empty schema has its
+  // own (much louder) failure modes downstream.
+  if (fqns.length === 0) return undefined;
+  if (fqns.some(inMigrateScope)) return undefined;
+
+  const patterns = JSON.stringify(migrateScopePatterns ?? []);
+  const examples = fqns.slice(0, EXAMPLE_FQN_CAP).join(", ");
+  const more = fqns.length > EXAMPLE_FQN_CAP ? `, …and ${fqns.length - EXAMPLE_FQN_CAP} more` : "";
+  return (
+    `migrate.scope matched none of the ${fqns.length} object(s) declaring a table or view, ` +
+    `so this run would treat every one of them as another owner's and compare nothing. ` +
+    `Patterns: ${patterns}. Declaring a table or view: ${examples}${more}. ` +
+    `Fix the patterns in .metaobjects/config.json (migrate.scope), or remove the key to ` +
+    `govern everything the model declares.`
+  );
+}

package/src/lib/output.ts

@@ -14,7 +14,7 @@ export interface FormatOptions {
 // gen
 // ---------------------------------------------------------------------------
 
-export type GenFileStatus = "new" | "merged" | "conflict" | "unchanged" | "refused";
+export type GenFileStatus = "new" | "merged" | "conflict" | "unchanged" | "refused" | "removed";
 
 export interface GenFileEntry {
   path: string;
@@ -37,6 +37,7 @@ const GEN_GLYPHS: Record<GenFileStatus, string> = {
   conflict: "✗",
   unchanged: "=",
   refused: "⚠",
+  removed: "−",
 };
 
 const GEN_WORDS: Record<GenFileStatus, string> = {
@@ -45,6 +46,7 @@ const GEN_WORDS: Record<GenFileStatus, string> = {
   conflict: "CONFLICT",
   unchanged: "UNCHANGED",
   refused: "REFUSED",
+  removed: "REMOVED",
 };
 
 export function formatGenResult(result: GenResultShape, opts: FormatOptions): string {
@@ -74,7 +76,7 @@ export function formatGenResult(result: GenResultShape, opts: FormatOptions): st
       acc[f.status] = (acc[f.status] ?? 0) + 1;
       return acc;
     },
-    { new: 0, merged: 0, conflict: 0, unchanged: 0, refused: 0 },
+    { new: 0, merged: 0, conflict: 0, unchanged: 0, refused: 0, removed: 0 },
   );
   const parts: string[] = [];
   if (counts.new > 0) parts.push(`${counts.new} written`);
@@ -82,6 +84,7 @@ export function formatGenResult(result: GenResultShape, opts: FormatOptions): st
   if (counts.conflict > 0) parts.push(`${counts.conflict} conflict`);
   if (counts.unchanged > 0) parts.push(`${counts.unchanged} unchanged`);
   if (counts.refused > 0) parts.push(`${counts.refused} refused`);
+  if (counts.removed > 0) parts.push(`${counts.removed} removed`);
   lines.push("", `  ${parts.join(", ")}`, "");
 
   if (result.warnings.length > 0) {
@@ -180,7 +183,7 @@ export function genResultToData(result: GenResultShape): {
 } {
   const counts = result.files.reduce<Record<GenFileStatus, number>>(
     (a, f) => ((a[f.status] = (a[f.status] ?? 0) + 1), a),
-    { new: 0, merged: 0, conflict: 0, unchanged: 0, refused: 0 },
+    { new: 0, merged: 0, conflict: 0, unchanged: 0, refused: 0, removed: 0 },
   );
   const parts: string[] = [];
   if (counts.new) parts.push(`${counts.new} written`);
@@ -188,11 +191,12 @@ export function genResultToData(result: GenResultShape): {
   if (counts.conflict) parts.push(`${counts.conflict} conflict`);
   if (counts.unchanged) parts.push(`${counts.unchanged} unchanged`);
   if (counts.refused) parts.push(`${counts.refused} refused`);
+  if (counts.removed) parts.push(`${counts.removed} removed`);
   const summary = result.files.length === 0
     ? `no entities to generate in ${result.outDir}`
     : parts.join(", ");
   const help = result.files.length === 0
-    ? ["author entities under metaobjects/ then re-run `meta gen`"]
+    ? ["author entities in this project's metadata sources then re-run `meta gen`"]
     : ["typecheck the generated code with `npx tsc`", "create your database tables with `meta migrate --from-db --db <url> --dialect <sqlite|postgres> --slug init --apply`"];
   return { gen: result.files.map((f) => ({ file: f.path, status: f.status })), summary, help };
 }

package/src/lib/requirement-check.ts

@@ -12,10 +12,9 @@
 //   VERIFY  (conditional)    `@implementedBy` resolution, whose SEVERITY DEPENDS
 //                            ON `@status`. A loader `references` descriptor
 //                            always errors on an unresolved target, and an
-//                            `abandoned` requirement exists precisely to name
-//                            nodes that are gone — declaring it there would make
-//                            the entries carrying the mechanism's only controlled
-//                            evidence fail to load.
+//                            `planned` requirement names nodes that do not exist
+//                            YET — declaring it there would make every recorded
+//                            intention fail to load.
 //
 // Two kinds, opposite checks: `functional` fails when NOTHING implements it;
 // `architectural` fails when something VIOLATES it (v1: an empty claim set on a
@@ -33,7 +32,11 @@ import {
   REQUIREMENT_LEVEL_MEMBER,
   REQUIREMENT_DISPOSITION_DEFERRED,
   REQUIREMENT_STATUSES_REQUIRING_LIVE_NODES,
-  resolveObjectRef,
+  // One shared resolver (FR-038): codegen's requirement-test fan-out needs the same
+  // ADR-0042 package-local binding, so these moved to @metaobjectsdev/metadata rather
+  // than being reimplemented there.
+  resolveClaimTarget,
+  resolveMember,
   didYouMeanHint,
   type MetaData,
   type MetaRequirement,
@@ -148,57 +151,6 @@ function subtreeClaimsAnything(req: MetaRequirement): boolean {
   return false;
 }
 
-/**
- * Resolve the owner segment of an `@implementedBy` reference to the node it names.
- *
- * OBJECTS FIRST, through the loader's own resolver, so package-local binding stays the
- * ADR-0042 contract and never a parallel name scan (#228).
- *
- * Then ROOT-LEVEL NON-OBJECT nodes — `template.prompt` and its siblings today. The
- * attribute is documented as naming "the model nodes realising this requirement", and a
- * declared prompt is one: it is the durable artifact a capability like "the game master
- * is told what the party can see" actually lives in. Resolving only objects meant the
- * prompt estate — the thing whose retirement is hardest to see in a model, since a
- * removed prompt leaves no table behind — was the one part of a model that could not
- * carry a status. So L4 means "a declared top-level model node", not "an object".
- *
- * Requirements themselves are excluded: hierarchy is nesting, and a requirement claiming
- * a requirement would be a second, contradictory parent mechanism.
- */
-function resolveClaimTarget(root: MetaData, owner: string, referrerPkg: string): MetaData | undefined {
-  const { node } = resolveObjectRef(root, owner, referrerPkg);
-  if (node !== undefined) return node;
-
-  const candidates = root
-    .children()
-    .filter((c) => c.type !== TYPE_OBJECT && c.type !== TYPE_REQUIREMENT);
-
-  // A fully-qualified reference binds exactly, like every other FQN in the model.
-  if (owner.includes(PACKAGE_SEPARATOR)) {
-    return candidates.find((c) => c.resolutionKey() === owner);
-  }
-  // A bare reference prefers the referrer's own package, then a root-level node of that
-  // bare name. An ambiguous bare name binds NOTHING — same fail-closed rule objects use,
-  // because silently picking one of two same-named nodes is how a claim ends up pointing
-  // at the wrong thing without anyone noticing.
-  const local = referrerPkg === "" ? [] : candidates.filter((c) => c.resolutionKey() === `${referrerPkg}${PACKAGE_SEPARATOR}${owner}`);
-  if (local.length === 1) return local[0];
-  // Root-level (unpackaged) only, matching resolveObjectRef's own bare fallback. A bare
-  // ref must not reach into an arbitrary package just because the name is unique there.
-  const bare = candidates.filter((c) => c.name === owner && c.resolutionKey() === owner);
-  return bare.length === 1 ? bare[0] : undefined;
-}
-
-/** Walk dotted member segments by CHILD NAME from an object node. */
-function resolveMember(obj: MetaData, path: string[]): MetaData | undefined {
-  let cur: MetaData | undefined = obj;
-  for (const seg of path) {
-    if (cur === undefined) return undefined;
-    cur = cur.children().find((c) => c.name === seg);
-  }
-  return cur;
-}
-
 /** Every `requirement.*` node in the tree, at any nesting depth. Hierarchy IS
  *  nesting — an L1 solution contains its L2 segments — so this is a walk, not a
  *  scan of a flat list keyed by a `parent` string. */
@@ -376,8 +328,8 @@ export function checkRequirements(root: MetaData): Diagnostic[] {
       const resolved = node !== undefined && (isObjectRef || resolveMember(node, path) !== undefined);
       if (!resolved) {
         // Severity is CONDITIONAL ON STATUS, and the asymmetry inverts as a pair.
-        // On abandoned/superseded the nodes are SUPPOSED to be gone — that is the
-        // entry doing its job, and the reason this check cannot live in the loader.
+        // On `planned` the nodes do not exist YET — that is the entry doing its
+        // job, and the reason this check cannot live in the loader.
         if (req.requiresLiveNodes()) {
           out.push({
             severity: "error", code: ERR_REQUIREMENT_DANGLING_REF, name: req.name,

package/dist/src/lib/verified-by-scan.d.ts

@@ -1,20 +0,0 @@
-import { type MetaData } from "@metaobjectsdev/metadata";
-export declare const ERR_REQUIREMENT_TEST_MISSING = "ERR_REQUIREMENT_TEST_MISSING";
-export declare const WARN_REQUIREMENT_TEST_SKIPPED = "WARN_REQUIREMENT_TEST_SKIPPED";
-export declare const WARN_REQUIREMENT_TEST_COMMENT_ONLY = "WARN_REQUIREMENT_TEST_COMMENT_ONLY";
-export declare const WARN_REQUIREMENT_TEST_UNCLASSIFIED = "WARN_REQUIREMENT_TEST_UNCLASSIFIED";
-export interface VerifiedByDiagnostic {
-    severity: "error" | "warn";
-    code: string;
-    name?: string;
-    message: string;
-}
-/**
- * Check every `@verifiedBy` name against the project's test corpus.
- *
- * Severity mirrors `@implementedBy`: a broken claim is an ERROR on `live`/`partial`
- * and silent on `abandoned`/`superseded`, because a retired requirement naming a
- * deleted test is the entry doing its job, not drift.
- */
-export declare function checkVerifiedBy(root: MetaData, cwd: string, testFiles?: string[]): VerifiedByDiagnostic[];
-//# sourceMappingURL=verified-by-scan.d.ts.map

package/dist/src/lib/verified-by-scan.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verified-by-scan.d.ts","sourceRoot":"","sources":["../../../src/lib/verified-by-scan.ts"],"names":[],"mappings":"AA2CA,OAAO,EAEL,KAAK,QAAQ,EAEd,MAAM,0BAA0B,CAAC;AAElC,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AAC3E,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAC7E,eAAO,MAAM,kCAAkC,uCAAuC,CAAC;AACvF,eAAO,MAAM,kCAAkC,uCAAuC,CAAC;AAEvF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAwMD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,MAAM,EACX,SAAS,CAAC,EAAE,MAAM,EAAE,GACnB,oBAAoB,EAAE,CAwGxB"}

package/dist/src/lib/verified-by-scan.js

@@ -1,344 +0,0 @@
-// `meta verify` — the `@verifiedBy` check.
-//
-// A requirement's `@verifiedBy` names the tests that prove the behaviour. verify
-// checks each name EXISTS and is NOT SKIPPED; it never runs them. Running them is
-// the test runner's job, and a requirement gate that shelled out to one would be
-// slow, ecosystem-specific, and wrong in CI.
-//
-// Until this existed, `@verifiedBy` was registered vocabulary that nothing read —
-// the precise pattern ADR-0007 Amendment 2 and the `@role` shrink exist to punish.
-// An attribute the loader accepts and no consumer dispatches on teaches authors
-// that declaring is free and means nothing.
-//
-// PRECISION OVER RECALL, deliberately. The scan matches a name anywhere in the
-// test corpus, as a whole word, in any language. That is the most generous
-// possible reading, so a "missing" verdict means the name appears in NO test file
-// at all — which is a broken claim in any ecosystem. The repo's standing rule for
-// drift checks is to bias toward under-flagging, and a nagging gate gets disabled,
-// which costs more than the misses.
-//
-// FAIL-OPEN ON INABILITY. If the project has no test files this scan can see, it
-// says NOTHING rather than reporting every name missing. Absence of evidence is
-// not evidence of absence, and a monorepo whose tests live outside `--cwd` must
-// not be told its requirements are unverified.
-//
-// WHAT COUNTS AS A TEST FILE IS THE PROJECT'S CALL, NOT OURS. The built-in patterns
-// below are a convenience for the ecosystems this repo ports to, and they are a GUESS
-// about someone else's repository. They were wrong on a mainstream case from the day
-// they shipped: Maven Failsafe names integration tests `FooIT.java`, which matched
-// nothing, so a JVM project naming a real integration test got a confident
-// "the claim was never true".
-//
-// Two consequences, both deliberate:
-//   - `testFiles` (config: `verify.testFiles`) lets a project declare its own
-//     conventions, unioned with the built-ins. Nothing here can be authoritative
-//     about a convention we have never seen.
-//   - the fail-open above is extended from "no test files at all" to the case that
-//     actually bites: a name we cannot find in the corpus, which IS present in a file
-//     the corpus definition did not classify. That is our ignorance, not a broken
-//     claim, and it is reported as such (WARN_REQUIREMENT_TEST_UNCLASSIFIED) rather
-//     than as an error. The error is reserved for a name that appears NOWHERE.
-import { readdirSync, readFileSync, statSync } from "node:fs";
-import { join, relative, sep } from "node:path";
-import { TYPE_REQUIREMENT, } from "@metaobjectsdev/metadata";
-export const ERR_REQUIREMENT_TEST_MISSING = "ERR_REQUIREMENT_TEST_MISSING";
-export const WARN_REQUIREMENT_TEST_SKIPPED = "WARN_REQUIREMENT_TEST_SKIPPED";
-export const WARN_REQUIREMENT_TEST_COMMENT_ONLY = "WARN_REQUIREMENT_TEST_COMMENT_ONLY";
-export const WARN_REQUIREMENT_TEST_UNCLASSIFIED = "WARN_REQUIREMENT_TEST_UNCLASSIFIED";
-const IGNORE_SEGMENTS = new Set([
-    "node_modules", ".git", "dist", "build", "out", ".next", "coverage",
-    ".metaobjects", "generated", "target", "bin", "obj", "__pycache__", ".venv", "venv",
-]);
-/**
- * Test files across the five ecosystems this project ports to — a CONVENIENCE DEFAULT,
- * never an authority. A project whose conventions differ declares them via
- * `verify.testFiles`; see the module header.
- *
- * The `IT` entries are Maven Failsafe's own defaults (`IT*`, `*IT`, `*ITCase`), which
- * is how every JVM project in the wild names an integration test. Their absence is the
- * bug that motivated making this list extensible in the first place.
- */
-const TEST_FILE = new RegExp([
-    "\\.(?:test|spec)\\.[cm]?[jt]sx?$", // bun / jest / vitest / mocha
-    "(?:^|[./_-])[Tt]est[^/]*\\.java$", // JUnit — TestFoo.java
-    "[A-Za-z0-9]Test(?:s)?\\.java$", //     JUnit — FooTest.java / FooTests.java
-    "[A-Za-z0-9]IT(?:Case)?\\.java$", //    Failsafe — FooIT.java / FooITCase.java
-    "^IT[A-Za-z0-9][^/]*\\.java$", //       Failsafe — ITFoo.java
-    "[A-Za-z0-9]Tests?\\.cs$", //           xUnit / NUnit
-    "^test_[^/]*\\.py$", //                 pytest
-    "[^/]*_test\\.py$", //                  pytest, trailing convention
-    "[A-Za-z0-9]Test(?:s)?\\.kt$", //       Kotlin
-    "[A-Za-z0-9]IT(?:Case)?\\.kt$", //      Failsafe under Kotlin — FooIT.kt
-].join("|"));
-/** Files worth searching when a name is missing from the corpus, to tell "nowhere" from
- *  "somewhere I did not classify". Source-ish only; a match in a lockfile proves nothing. */
-const SOURCE_FILE = /\.(?:[cm]?[jt]sx?|java|kt|kts|cs|py|rb|go|rs|scala|groovy|feature)$/;
-/**
- * A glob as permissive as the ones adopters actually write (`**​/*IT.kt`, `*.feature`),
- * anchored at the project root and matched against forward-slash relative paths.
- *
- * Deliberately small: `**` spans separators, `*` does not, `?` is one non-separator
- * character. Anything richer belongs to a glob library, and pulling one in for a config
- * knob this narrow is not worth the dependency.
- */
-function globToRegExp(glob) {
-    let out = "";
-    for (let i = 0; i < glob.length; i++) {
-        const c = glob[i];
-        if (c === "*") {
-            if (glob[i + 1] === "*") {
-                // `**/` may match zero segments, so `**/*.feature` matches a root-level file.
-                if (glob[i + 2] === "/") {
-                    out += "(?:.*/)?";
-                    i += 2;
-                }
-                else {
-                    out += ".*";
-                    i += 1;
-                }
-            }
-            else
-                out += "[^/]*";
-            continue;
-        }
-        if (c === "?") {
-            out += "[^/]";
-            continue;
-        }
-        out += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
-    }
-    return new RegExp(`^${out}$`);
-}
-/** Markers that a test exists but is disabled, across the same ecosystems. */
-const SKIP_MARKER = new RegExp([
-    "\\b(?:it|test|describe)\\.(?:skip|todo)\\b", // jest/vitest/bun
-    "\\bx(?:it|test|describe)\\b", //               mocha/jasmine
-    "@Disabled\\b", //                              JUnit 5
-    "@Ignore\\b", //                                JUnit 4 / Kotlin
-    "@pytest\\.mark\\.skip", //                     pytest
-    "\\[Ignore[\\](]", //                           MSTest / NUnit
-    "\\bSkip\\s*=", //                              xUnit  [Fact(Skip = "...")]
-].join("|"));
-function walk(dir, root, acc, isTestFile, depth = 0) {
-    if (depth > 12)
-        return; // pathological trees; the scan is advisory, not exhaustive
-    let entries;
-    try {
-        entries = readdirSync(dir, { withFileTypes: true });
-    }
-    catch {
-        return;
-    }
-    for (const e of entries) {
-        if (e.isDirectory()) {
-            if (IGNORE_SEGMENTS.has(e.name) || e.name.startsWith("."))
-                continue;
-            walk(join(dir, e.name), root, acc, isTestFile, depth + 1);
-            continue;
-        }
-        if (!e.isFile())
-            continue;
-        const abs = join(dir, e.name);
-        const rel = relative(root, abs).split(sep).join("/");
-        if (!isTestFile(rel, e.name)) {
-            if (SOURCE_FILE.test(e.name) && acc.unclassified.length < 20_000)
-                acc.unclassified.push(rel);
-            continue;
-        }
-        try {
-            if (statSync(abs).size > 512 * 1024)
-                continue;
-            acc.byFile.set(rel, readFileSync(abs, "utf8").split("\n"));
-            acc.files++;
-        }
-        catch {
-            /* unreadable file is not a finding */
-        }
-    }
-}
-/** Does this path or body look like a test the corpus definition simply did not match?
- *  Deliberately narrow: living under a test directory, or containing an assertion/test
- *  declaration. Without this, a name occurring anywhere in PRODUCTION source downgrades a
- *  genuinely broken claim to a warning — the exact failure the comment-only check exists
- *  to catch. */
-const TESTISH_PATH = /(^|\/)(tests?|spec|__tests__|src\/test)(\/|$)/i;
-const TESTISH_BODY = /\b(assert\w*|expect|should|@Test|def test_|it\(|test\(|describe\()/;
-/** Test by LOCATION or by CONTENT — either is enough. Production source with a matching
- *  name satisfies neither, which is the case that must stay a hard error. */
-function looksLikeTest(rel, lines) {
-    return TESTISH_PATH.test(rel) || lines.some((l) => TESTISH_BODY.test(l));
-}
-/**
- * Where does this name live, if not in the test corpus?
- *
- * Only ever called on the miss path, so the cost is paid per BROKEN claim rather than
- * per run. Returns the first unclassified source file containing the name, which is
- * enough to tell the author which pattern they are missing.
- */
-function findOutsideCorpus(name, root, files) {
-    const rx = wordRx(name);
-    for (const rel of files) {
-        try {
-            const abs = join(root, ...rel.split("/"));
-            if (statSync(abs).size > 512 * 1024)
-                continue;
-            const lines = readFileSync(abs, "utf8").split("\n");
-            for (let i = 0; i < lines.length; i++) {
-                const line = lines[i] ?? "";
-                if (rx.test(line) && !isCommentLine(line, rel) && looksLikeTest(rel, lines))
-                    return rel;
-            }
-        }
-        catch {
-            /* unreadable file is not a finding */
-        }
-    }
-    return undefined;
-}
-/** Every `requirement.*` node in the tree, at any nesting depth. */
-function collect(root) {
-    const out = [];
-    const rec = (n) => {
-        for (const c of n.children()) {
-            if (c.type === TYPE_REQUIREMENT)
-                out.push(c);
-            rec(c);
-        }
-    };
-    rec(root);
-    return out;
-}
-/**
- * A whole-word match, so `OrderServiceTest` never satisfies a claim naming `Order`.
- *
- * `_` counts as a SEPARATOR, not a word character: pytest's `def test_OrderServiceTest`
- * plainly is the test a claim naming `OrderServiceTest` means, and refusing it would
- * emit the confident false error this scan is built to avoid. Camel-case boundaries
- * stay strict, which is what actually prevents a short name matching a longer one.
- */
-/**
- * Is this whole line a comment?
- *
- * WHOLE-LINE ONLY, deliberately. Stripping from the first `//` would truncate a code
- * line containing one inside a string — a test titled with a URL is the obvious case —
- * and turn a real match into a confident false error, which is the failure this scan is
- * built to avoid. A trailing comment after code therefore still counts as code; that
- * under-flags, which is the repo's standing bias for drift checks.
- *
- * `#` is Python-only: in TypeScript it opens a private field, not a comment.
- */
-function isCommentLine(line, file) {
-    const t = line.trimStart();
-    if (t.startsWith("//") || t.startsWith("/*") || t.startsWith("*"))
-        return true;
-    return file.endsWith(".py") && t.startsWith("#");
-}
-function wordRx(name) {
-    return new RegExp(`(?:^|[^A-Za-z0-9])${name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9])`);
-}
-/**
- * Check every `@verifiedBy` name against the project's test corpus.
- *
- * Severity mirrors `@implementedBy`: a broken claim is an ERROR on `live`/`partial`
- * and silent on `abandoned`/`superseded`, because a retired requirement naming a
- * deleted test is the entry doing its job, not drift.
- */
-export function checkVerifiedBy(root, cwd, testFiles) {
-    const reqs = collect(root).filter((r) => r.verifiedBy().length > 0);
-    if (reqs.length === 0)
-        return []; // opt-in by declaration
-    // Project-declared conventions ADD to the built-ins: the failure being fixed is
-    // under-matching, and a project that names an extra convention is telling us
-    // something we did not know — not asking us to forget what we did.
-    const declared = (testFiles ?? []).map(globToRegExp);
-    const isTestFile = (rel, base) => TEST_FILE.test(base) || declared.some((rx) => rx.test(rel));
-    const corpus = { files: 0, byFile: new Map(), unclassified: [] };
-    walk(cwd, cwd, corpus, isTestFile);
-    if (corpus.files === 0)
-        return []; // fail open: nothing to judge against
-    const out = [];
-    for (const req of reqs) {
-        for (const test of req.verifiedBy()) {
-            const rx = wordRx(test);
-            let foundIn;
-            let skippedAt;
-            // #293-adjacent (the `verifiedBy` audit): a name that occurs ONLY in comments
-            // satisfied this scan, because the match is line-agnostic. That is how a claim
-            // came to name `mountCrudRoutes`, whose single occurrence in an entire corpus was
-            // inside a `// via mountCrudRoutes(...)` note. Tracked separately so the name can
-            // still be reported as found (it is) while saying what it was found in.
-            let commentOnlyAt;
-            for (const [file, lines] of corpus.byFile) {
-                for (let i = 0; i < lines.length; i++) {
-                    if (!rx.test(lines[i] ?? ""))
-                        continue;
-                    if (isCommentLine(lines[i] ?? "", file)) {
-                        commentOnlyAt ??= `${file}:${i + 1}`;
-                        continue;
-                    }
-                    foundIn ??= file;
-                    // a decorator/annotation sits above the declaration it disables
-                    const window = lines.slice(Math.max(0, i - 3), i + 1).join("\n");
-                    if (SKIP_MARKER.test(window))
-                        skippedAt ??= `${file}:${i + 1}`;
-                }
-                if (foundIn !== undefined && skippedAt !== undefined)
-                    break;
-            }
-            // Found, but only ever in prose. Not an error — the scan's job is to catch a name
-            // that has gone missing, and this one has not — but a comment proves nothing, so
-            // the claim is reported rather than silently accepted.
-            if (foundIn === undefined && commentOnlyAt !== undefined) {
-                out.push({
-                    severity: "warn",
-                    code: WARN_REQUIREMENT_TEST_COMMENT_ONLY,
-                    name: req.name,
-                    message: `'verifiedBy' names '${test}', which appears only in a comment (${commentOnlyAt}) ` +
-                        `and in no test declaration. A comment proves nothing — name the test that asserts it.`,
-                });
-                continue;
-            }
-            if (foundIn === undefined) {
-                if (req.requiresLiveNodes()) {
-                    // Before calling a claim broken, rule out the likelier explanation: that this
-                    // project names its tests in a way the corpus definition does not know. A name
-                    // sitting in an unclassified source file is OUR ignorance, and saying "the claim
-                    // was never true" about it is the tool being confidently wrong.
-                    const elsewhere = findOutsideCorpus(test, cwd, corpus.unclassified);
-                    out.push(elsewhere !== undefined
-                        ? {
-                            severity: "warn",
-                            code: WARN_REQUIREMENT_TEST_UNCLASSIFIED,
-                            name: req.name,
-                            message: `'verifiedBy' names '${test}', which is not in any of the ${corpus.files} ` +
-                                `file(s) recognised as tests, but DOES appear in ${elsewhere}. That file is ` +
-                                `probably a test this scan does not know how to recognise — declare the ` +
-                                `convention in metaobjects.config.ts (verify.testFiles, e.g. ` +
-                                `["**/*IT.kt"]) and this becomes a real check instead of a guess.`,
-                        }
-                        : {
-                            severity: "error",
-                            code: ERR_REQUIREMENT_TEST_MISSING,
-                            name: req.name,
-                            message: `'verifiedBy' names '${test}', which appears in none of the ` +
-                                `${corpus.files} test file(s) found under this project, and in no other ` +
-                                `source file either. Either the test was renamed or removed, or the ` +
-                                `claim was never true.`,
-                        });
-                }
-                continue;
-            }
-            if (skippedAt !== undefined) {
-                out.push({
-                    severity: "warn",
-                    code: WARN_REQUIREMENT_TEST_SKIPPED,
-                    name: req.name,
-                    message: `'verifiedBy' names '${test}', but it is disabled at ${skippedAt}. ` +
-                        `A skipped test proves nothing — the requirement reads as verified and is not.`,
-                });
-            }
-        }
-    }
-    return out;
-}
-//# sourceMappingURL=verified-by-scan.js.map

package/dist/src/lib/verified-by-scan.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verified-by-scan.js","sourceRoot":"","sources":["../../../src/lib/verified-by-scan.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AACjF,6CAA6C;AAC7C,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,mFAAmF;AACnF,oCAAoC;AACpC,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,+CAA+C;AAC/C,EAAE;AACF,oFAAoF;AACpF,sFAAsF;AACtF,qFAAqF;AACrF,mFAAmF;AACnF,2EAA2E;AAC3E,8BAA8B;AAC9B,EAAE;AACF,qCAAqC;AACrC,8EAA8E;AAC9E,iFAAiF;AACjF,6CAA6C;AAC7C,mFAAmF;AACnF,sFAAsF;AACtF,kFAAkF;AAClF,oFAAoF;AACpF,+EAA+E;AAE/E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,gBAAgB,GAGjB,MAAM,0BAA0B,CAAC;AAElC,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAC7E,MAAM,CAAC,MAAM,kCAAkC,GAAG,oCAAoC,CAAC;AACvF,MAAM,CAAC,MAAM,kCAAkC,GAAG,oCAAoC,CAAC;AASvF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU;IACnE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM;CACpF,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,SAAS,GAAG,IAAI,MAAM,CAC1B;IACE,kCAAkC,EAAE,8BAA8B;IAClE,kCAAkC,EAAE,uBAAuB;IAC3D,+BAA+B,EAAE,2CAA2C;IAC5E,gCAAgC,EAAE,4CAA4C;IAC9E,6BAA6B,EAAE,8BAA8B;IAC7D,yBAAyB,EAAE,0BAA0B;IACrD,mBAAmB,EAAE,yBAAyB;IAC9C,kBAAkB,EAAE,+CAA+C;IACnE,6BAA6B,EAAE,eAAe;IAC9C,8BAA8B,EAAE,wCAAwC;CACzE,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AAEF;6FAC6F;AAC7F,MAAM,WAAW,GAAG,qEAAqE,CAAC;AAE1F;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,8EAA8E;gBAC9E,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,GAAG,IAAI,UAAU,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;qBAAM,CAAC;oBAAC,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;YACvF,CAAC;;gBAAM,GAAG,IAAI,OAAO,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,GAAG,IAAI,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3C,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,MAAM,WAAW,GAAG,IAAI,MAAM,CAC5B;IACE,4CAA4C,EAAE,kBAAkB;IAChE,6BAA6B,EAAE,8BAA8B;IAC7D,cAAc,EAAE,uCAAuC;IACvD,YAAY,EAAE,kDAAkD;IAChE,uBAAuB,EAAE,6BAA6B;IACtD,iBAAiB,EAAE,2CAA2C;IAC9D,cAAc,EAAE,2DAA2D;CAC5E,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AAWF,SAAS,IAAI,CACX,GAAW,EACX,IAAY,EACZ,GAAe,EACf,UAAkD,EAClD,KAAK,GAAG,CAAC;IAET,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,CAAC,2DAA2D;IACnF,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;YAAE,SAAS;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,MAAM;gBAAE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;gBAAE,SAAS;YAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;gBAIgB;AAChB,MAAM,YAAY,GAAG,gDAAgD,CAAC;AACtE,MAAM,YAAY,GAAG,oEAAoE,CAAC;AAE1F;6EAC6E;AAC7E,SAAS,aAAa,CAAC,GAAW,EAAE,KAAe;IACjD,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAY,EAAE,KAAe;IACpE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;gBAAE,SAAS;YAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;oBAAE,OAAO,GAAG,CAAC;YAC1F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,SAAS,OAAO,CAAC,IAAc;IAC7B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,CAAW,EAAQ,EAAE;QAChC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAoB,CAAC,CAAC;YAChE,GAAG,CAAC,CAAC,CAAC,CAAC;QACT,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,CAAC;IACV,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,MAAM,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;AACvG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAc,EACd,GAAW,EACX,SAAoB;IAEpB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,wBAAwB;IAE1D,gFAAgF;IAChF,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAY,EAAW,EAAE,CACxD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAe,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC7E,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,sCAAsC;IAEzE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,OAA2B,CAAC;YAChC,IAAI,SAA6B,CAAC;YAClC,8EAA8E;YAC9E,+EAA+E;YAC/E,kFAAkF;YAClF,kFAAkF;YAClF,wEAAwE;YACxE,IAAI,aAAiC,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;wBAAE,SAAS;oBACvC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;wBACxC,aAAa,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBACrC,SAAS;oBACX,CAAC;oBACD,OAAO,KAAK,IAAI,CAAC;oBACjB,gEAAgE;oBAChE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjE,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;wBAAE,SAAS,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjE,CAAC;gBACD,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;oBAAE,MAAM;YAC9D,CAAC;YAED,kFAAkF;YAClF,iFAAiF;YACjF,uDAAuD;YACvD,IAAI,OAAO,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC;oBACP,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,kCAAkC;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EACL,uBAAuB,IAAI,uCAAuC,aAAa,IAAI;wBACnF,uFAAuF;iBAC1F,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;oBAC5B,8EAA8E;oBAC9E,+EAA+E;oBAC/E,iFAAiF;oBACjF,gEAAgE;oBAChE,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;oBACpE,GAAG,CAAC,IAAI,CACN,SAAS,KAAK,SAAS;wBACrB,CAAC,CAAC;4BACE,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,kCAAkC;4BACxC,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,OAAO,EACL,uBAAuB,IAAI,iCAAiC,MAAM,CAAC,KAAK,GAAG;gCAC3E,mDAAmD,SAAS,iBAAiB;gCAC7E,yEAAyE;gCACzE,8DAA8D;gCAC9D,kEAAkE;yBACrE;wBACH,CAAC,CAAC;4BACE,QAAQ,EAAE,OAAO;4BACjB,IAAI,EAAE,4BAA4B;4BAClC,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,OAAO,EACL,uBAAuB,IAAI,kCAAkC;gCAC7D,GAAG,MAAM,CAAC,KAAK,0DAA0D;gCACzE,qEAAqE;gCACrE,uBAAuB;yBAC1B,CACN,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC;oBACP,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,6BAA6B;oBACnC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EACL,uBAAuB,IAAI,4BAA4B,SAAS,IAAI;wBACpE,+EAA+E;iBAClF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}