@mmnto/cli 1.101.1 → 1.102.0

package/dist/commands/shield-generated.d.ts

@@ -0,0 +1,145 @@
+/**
+ * Generated-artifact exclusion for the review synthesis input (mmnto-ai/totem#2398).
+ *
+ * `totem review` used to send generated-artifact bytes (lockfiles,
+ * `compiled-rules.json`, `dist/**`, `*.wasm`, regenerated dashboards) to the LLM
+ * as part of the review diff. The only exclusion mechanism was `ignorePatterns`
+ * — opt-in, empty by default, and a **silent drop**: an excluded file simply
+ * vanished from the payload, losing the signal that it changed at all.
+ *
+ * This module classifies generated artifacts by default and replaces their
+ * bytes with a per-file SUMMARY (path, change shape, size delta, semantic hash)
+ * injected into the synthesis input. The reviewer keeps the "this regenerated"
+ * signal without paying review-context tokens for bytes no reviewer should read.
+ *
+ * Cautionary sibling #2329: the injected summary is CLEARLY LABELLED as a
+ * Totem-generated summarization artifact (a distinct XML tag + a preamble that
+ * says "not diff content") so the model cannot mistake it for real diff content
+ * the way secret-redaction's env-var rewriting was mistaken for a real read.
+ *
+ * Aligns with the Prop 297 taxonomy (GENERATED spans take regeneration-diff
+ * treatment, never prose review — mmnto-ai/totem-strategy#639 operating spec).
+ */
+/**
+ * The default generated-artifact classification for the review payload. Seeded
+ * globs covering the classes the issue names (lockfiles, `compiled-rules.json`,
+ * `dist/**`, `*.wasm`) plus the conventional build-output + compiled-web set.
+ *
+ * These globs use `matchesGlob` semantics (see `@mmnto/totem` `matchesGlob`):
+ * `**​/name` matches `name` at any depth, `**​/dir/**` matches a directory tree
+ * at any depth, `*.ext` matches an extension anywhere.
+ *
+ * A false positive here strips a real-code file from LLM review — but it is
+ * NEVER a silent drop: every excluded file is loudly named in the injected
+ * summary (path + hash), and a repo un-marks a false positive Git-natively via
+ * `.gitattributes` `linguist-generated=false` (honored below). Repos extend the
+ * set the same way (`path/to/thing linguist-generated`).
+ */
+export declare const DEFAULT_GENERATED_ARTIFACT_GLOBS: readonly string[];
+/**
+ * Patterns parsed from a repo's `.gitattributes` `linguist-generated` markers:
+ *   - `generated` — patterns marked `linguist-generated` or `linguist-generated=true`
+ *     (ADD to the classification).
+ *   - `notGenerated` — patterns marked `linguist-generated=false` (an explicit
+ *     un-mark that OVERRIDES a default-glob match — the Git-native escape hatch).
+ */
+export interface GitattributesGeneratedPatterns {
+    generated: string[];
+    notGenerated: string[];
+}
+/**
+ * Translate a `.gitattributes` path pattern into a `matchesGlob`-compatible glob.
+ *
+ * Full gitattributes/gitignore pattern fidelity is out of scope; this covers the
+ * common forms the classification cares about:
+ *   - a leading `/` (root-anchored) is stripped — `matchesGlob` treats a
+ *     slash-bearing literal as repo-root-relative already;
+ *   - a trailing `/` (directory) becomes `<dir>/**` so the tree is matched;
+ *   - bare patterns (`*.lock`, `foo.map`) pass through — `matchesGlob` already
+ *     matches those at any depth.
+ */
+export declare function gitattributesPatternToGlob(pattern: string): string;
+/**
+ * Parse `.gitattributes` at the repo root for `linguist-generated` markers.
+ * Returns empty pattern lists when the file is absent or unreadable (best-effort
+ * enrichment — a missing `.gitattributes` is never an error). Comment lines
+ * (`#…`) and macro lines (`[attr]…`) are ignored.
+ */
+export declare function readGitattributesGeneratedPatterns(cwd: string): GitattributesGeneratedPatterns;
+export type GeneratedChangeShape = 'added' | 'deleted' | 'regenerated';
+/**
+ * A per-file summary of an excluded generated artifact. `addedLines` /
+ * `removedLines` are the unified-diff insertion/deletion counts (the available
+ * size-delta proxy, since the bytes themselves are excluded by design);
+ * `binary` marks a file git reported as a binary change (no line counts).
+ * `hash` is a semantic hash: sha256 (first 12 hex) over the file's own diff
+ * segment — a stable fingerprint of exactly what was excluded.
+ */
+export interface GeneratedArtifactSummary {
+    file: string;
+    shape: GeneratedChangeShape;
+    addedLines: number;
+    removedLines: number;
+    binary: boolean;
+    hash: string;
+}
+export interface GeneratedArtifactClassification {
+    /** Repo-relative paths classified as generated artifacts (bytes excluded). */
+    artifactFiles: string[];
+    /** Per-file summaries, in diff order. */
+    summaries: GeneratedArtifactSummary[];
+    /** The diff with every generated-artifact section removed (byte-identical to the input when none matched). */
+    keptDiff: string;
+    /** `changedFiles` minus the generated artifacts. */
+    keptFiles: string[];
+}
+export interface ClassifyGeneratedArtifactsParams {
+    diff: string;
+    changedFiles: string[];
+    /** Positive globs (defaults + `.gitattributes` generated). Defaults to {@link DEFAULT_GENERATED_ARTIFACT_GLOBS}. */
+    generatedGlobs?: readonly string[];
+    /** Un-mark globs (`.gitattributes` `linguist-generated=false`) — a match here is NEVER a generated artifact. */
+    excludeGlobs?: readonly string[];
+}
+/**
+ * A single file's section of a unified diff, with its destination path.
+ * `file` is `null` for a leading preamble section (the text before the first
+ * `diff --git`, normally empty) or a section whose header does not parse.
+ */
+interface DiffFileSection {
+    file: string | null;
+    section: string;
+}
+/**
+ * Split a unified diff into per-file sections at `diff --git` boundaries and
+ * extract each section's destination (`b/`) path. Mirrors the split + path
+ * extraction that `filterDiffByPatterns` / `extractChangedFiles` use so the two
+ * agree on file identity. Joining `section` values back reconstructs the input
+ * exactly (the zero-width split consumes no characters).
+ */
+export declare function splitDiffIntoFileSections(diff: string): DiffFileSection[];
+/** Semantic hash of an excluded artifact's diff segment: sha256, first 12 hex chars. */
+export declare function hashDiffSection(section: string): string;
+/**
+ * Classify the changed files into generated artifacts vs. kept files, remove the
+ * artifact sections from the diff, and build a per-file summary of each excluded
+ * artifact. A file is a generated artifact iff it matches ANY positive glob AND
+ * matches NO un-mark (exclude) glob.
+ *
+ * When no artifact matches, `keptDiff === diff` and `keptFiles === changedFiles`
+ * (order preserved) — the legacy review payload is byte-identical, so callers
+ * can gate the new path on `summaries.length > 0`.
+ */
+export declare function classifyGeneratedArtifacts(params: ClassifyGeneratedArtifactsParams): GeneratedArtifactClassification;
+/** One operator-visible / prompt line for an excluded artifact. Paths are sanitized. */
+export declare function formatGeneratedArtifactLine(summary: GeneratedArtifactSummary): string;
+/**
+ * Build the synthesis-input section for the excluded generated artifacts.
+ * Returns `''` when there are no artifacts (so the caller injects nothing on the
+ * legacy path). The body is wrapped in a distinct XML tag and the preamble
+ * states plainly that these lines are a Totem-generated summary, NOT diff
+ * content — the #2329 mislabel guard.
+ */
+export declare function buildGeneratedArtifactSection(summaries: GeneratedArtifactSummary[]): string;
+export {};
+//# sourceMappingURL=shield-generated.d.ts.map

package/dist/commands/shield-generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-generated.d.ts","sourceRoot":"","sources":["../../src/commands/shield-generated.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EA4B7D,CAAC;AAOF;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKlE;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAAC,GAAG,EAAE,MAAM,GAAG,8BAA8B,CAmC9F;AAID,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,oBAAoB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,+BAA+B;IAC9C,8EAA8E;IAC9E,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,yCAAyC;IACzC,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,8GAA8G;IAC9G,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,gCAAgC;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oHAAoH;IACpH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,gHAAgH;IAChH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;GAIG;AACH,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAgBzE;AAED,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEvD;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,gCAAgC,GACvC,+BAA+B,CA+BjC;AAUD,wFAAwF;AACxF,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAGrF;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,wBAAwB,EAAE,GAAG,MAAM,CAiB3F"}

package/dist/commands/shield-generated.js

@@ -0,0 +1,266 @@
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+// Imported from the CLI's own `utils` re-export barrel (NOT '@mmnto/totem'
+// directly) so this command module avoids a static top-level import of the
+// heavy core barrel at startup (mmnto-ai/totem#2339).
+import { matchesGlob, sanitize, wrapXml } from '../utils.js';
+/**
+ * Generated-artifact exclusion for the review synthesis input (mmnto-ai/totem#2398).
+ *
+ * `totem review` used to send generated-artifact bytes (lockfiles,
+ * `compiled-rules.json`, `dist/**`, `*.wasm`, regenerated dashboards) to the LLM
+ * as part of the review diff. The only exclusion mechanism was `ignorePatterns`
+ * — opt-in, empty by default, and a **silent drop**: an excluded file simply
+ * vanished from the payload, losing the signal that it changed at all.
+ *
+ * This module classifies generated artifacts by default and replaces their
+ * bytes with a per-file SUMMARY (path, change shape, size delta, semantic hash)
+ * injected into the synthesis input. The reviewer keeps the "this regenerated"
+ * signal without paying review-context tokens for bytes no reviewer should read.
+ *
+ * Cautionary sibling #2329: the injected summary is CLEARLY LABELLED as a
+ * Totem-generated summarization artifact (a distinct XML tag + a preamble that
+ * says "not diff content") so the model cannot mistake it for real diff content
+ * the way secret-redaction's env-var rewriting was mistaken for a real read.
+ *
+ * Aligns with the Prop 297 taxonomy (GENERATED spans take regeneration-diff
+ * treatment, never prose review — mmnto-ai/totem-strategy#639 operating spec).
+ */
+// ─── Default seeded globs ────────────────────────────────
+/**
+ * The default generated-artifact classification for the review payload. Seeded
+ * globs covering the classes the issue names (lockfiles, `compiled-rules.json`,
+ * `dist/**`, `*.wasm`) plus the conventional build-output + compiled-web set.
+ *
+ * These globs use `matchesGlob` semantics (see `@mmnto/totem` `matchesGlob`):
+ * `**​/name` matches `name` at any depth, `**​/dir/**` matches a directory tree
+ * at any depth, `*.ext` matches an extension anywhere.
+ *
+ * A false positive here strips a real-code file from LLM review — but it is
+ * NEVER a silent drop: every excluded file is loudly named in the injected
+ * summary (path + hash), and a repo un-marks a false positive Git-natively via
+ * `.gitattributes` `linguist-generated=false` (honored below). Repos extend the
+ * set the same way (`path/to/thing linguist-generated`).
+ */
+export const DEFAULT_GENERATED_ARTIFACT_GLOBS = [
+    // Dependency lockfiles — machine-regenerated, never meaningfully hand-authored.
+    '**/package-lock.json',
+    '**/pnpm-lock.yaml',
+    '**/yarn.lock',
+    '**/npm-shrinkwrap.json',
+    '**/bun.lockb',
+    '**/Cargo.lock',
+    '**/poetry.lock',
+    '**/composer.lock',
+    '**/Gemfile.lock',
+    '**/go.sum',
+    '**/flake.lock',
+    // Totem compiled artifacts (issue-named).
+    '**/.totem/compiled-rules.json',
+    '**/.totem/compile-manifest.json',
+    // Conventional build-output directories.
+    '**/dist/**',
+    '**/build/**',
+    '**/out/**',
+    '**/.next/**',
+    '**/coverage/**',
+    // Compiled / minified / binary web + WASM artifacts (issue-named `*.wasm`).
+    '**/*.wasm',
+    '**/*.min.js',
+    '**/*.min.css',
+    '**/*.map',
+    '**/*.tsbuildinfo',
+];
+// ─── .gitattributes linguist-generated ──────────────────
+/** Cap on the `.gitattributes` bytes read — a defensive bound, real files are tiny. */
+const MAX_GITATTRIBUTES_BYTES = 256 * 1024;
+/**
+ * Translate a `.gitattributes` path pattern into a `matchesGlob`-compatible glob.
+ *
+ * Full gitattributes/gitignore pattern fidelity is out of scope; this covers the
+ * common forms the classification cares about:
+ *   - a leading `/` (root-anchored) is stripped — `matchesGlob` treats a
+ *     slash-bearing literal as repo-root-relative already;
+ *   - a trailing `/` (directory) becomes `<dir>/**` so the tree is matched;
+ *   - bare patterns (`*.lock`, `foo.map`) pass through — `matchesGlob` already
+ *     matches those at any depth.
+ */
+export function gitattributesPatternToGlob(pattern) {
+    let p = pattern.trim();
+    if (p.startsWith('/'))
+        p = p.slice(1);
+    if (p.endsWith('/'))
+        p = `${p}**`;
+    return p;
+}
+/**
+ * Parse `.gitattributes` at the repo root for `linguist-generated` markers.
+ * Returns empty pattern lists when the file is absent or unreadable (best-effort
+ * enrichment — a missing `.gitattributes` is never an error). Comment lines
+ * (`#…`) and macro lines (`[attr]…`) are ignored.
+ */
+export function readGitattributesGeneratedPatterns(cwd) {
+    const generated = [];
+    const notGenerated = [];
+    const file = path.join(cwd, '.gitattributes');
+    let raw;
+    try {
+        const stat = fs.statSync(file);
+        if (!stat.isFile() || stat.size > MAX_GITATTRIBUTES_BYTES) {
+            return { generated, notGenerated };
+        }
+        raw = fs.readFileSync(file, 'utf-8');
+        // totem-context: intentional cleanup — an absent / unreadable .gitattributes is honest-absent (the seeded default globs still apply); this best-effort enrichment read must never crash the review, so degrading to "no repo-declared patterns" is correct, not a swallowed error (mmnto-ai/totem#2398).
+    }
+    catch {
+        return { generated, notGenerated };
+    }
+    for (const line of raw.split(/\r?\n/)) {
+        const trimmed = line.trim();
+        if (trimmed.length === 0 || trimmed.startsWith('#') || trimmed.startsWith('['))
+            continue;
+        // A gitattributes line is `<pattern> <attr> <attr> …`. Split on whitespace;
+        // the first token is the pattern, the rest are attributes.
+        const tokens = trimmed.split(/\s+/);
+        const pattern = tokens[0];
+        if (pattern === undefined || pattern.length === 0)
+            continue;
+        const attrs = tokens.slice(1);
+        for (const attr of attrs) {
+            if (attr === 'linguist-generated' || attr === 'linguist-generated=true') {
+                generated.push(gitattributesPatternToGlob(pattern));
+            }
+            else if (attr === '-linguist-generated' || attr === 'linguist-generated=false') {
+                // `-attr` and `attr=false` both UNSET the attribute in git's model.
+                notGenerated.push(gitattributesPatternToGlob(pattern));
+            }
+        }
+    }
+    return { generated, notGenerated };
+}
+/**
+ * Split a unified diff into per-file sections at `diff --git` boundaries and
+ * extract each section's destination (`b/`) path. Mirrors the split + path
+ * extraction that `filterDiffByPatterns` / `extractChangedFiles` use so the two
+ * agree on file identity. Joining `section` values back reconstructs the input
+ * exactly (the zero-width split consumes no characters).
+ */
+export function splitDiffIntoFileSections(diff) {
+    const rawSections = diff.split(/^(?=diff --git )/m);
+    return rawSections
+        .filter((section) => section.length > 0)
+        .map((section) => {
+        // A section with no newline at all (a truncated diff tail) must use the
+        // WHOLE section as its first line — indexOf's -1 would otherwise slice
+        // off the final character and break the $-anchored filename match (GCA
+        // round on #2443).
+        const newlineIdx = section.indexOf('\n');
+        const firstLine = newlineIdx === -1 ? section : section.slice(0, newlineIdx);
+        const quoted = firstLine.match(/^diff --git "a\/.*?" "b\/(.*?)"$/);
+        const unquoted = firstLine.match(/^diff --git a\/\S+ b\/(.+)$/);
+        const file = quoted?.[1] ?? unquoted?.[1] ?? null;
+        return { file, section };
+    });
+}
+/** Semantic hash of an excluded artifact's diff segment: sha256, first 12 hex chars. */
+export function hashDiffSection(section) {
+    return crypto.createHash('sha256').update(section, 'utf-8').digest('hex').slice(0, 12);
+}
+/** Summarize one generated-artifact diff section (shape + size delta + hash). */
+function summarizeSection(file, section) {
+    const shape = /^new file mode /m.test(section)
+        ? 'added'
+        : /^deleted file mode /m.test(section)
+            ? 'deleted'
+            : 'regenerated';
+    const binary = /^Binary files /m.test(section) || /^GIT binary patch/m.test(section);
+    let addedLines = 0;
+    let removedLines = 0;
+    if (!binary) {
+        for (const line of section.split('\n')) {
+            // Skip the `+++ `/`--- ` file-header lines (always a space or /dev/null
+            // after the triple marker); a bare `+++`/`---` prefix check would also
+            // swallow real hunk content like `++i;` → `+++i;` (GCA round on #2443).
+            if (line.startsWith('+') && !line.startsWith('+++ '))
+                addedLines++;
+            else if (line.startsWith('-') && !line.startsWith('--- '))
+                removedLines++;
+        }
+    }
+    return { file, shape, addedLines, removedLines, binary, hash: hashDiffSection(section) };
+}
+/**
+ * Classify the changed files into generated artifacts vs. kept files, remove the
+ * artifact sections from the diff, and build a per-file summary of each excluded
+ * artifact. A file is a generated artifact iff it matches ANY positive glob AND
+ * matches NO un-mark (exclude) glob.
+ *
+ * When no artifact matches, `keptDiff === diff` and `keptFiles === changedFiles`
+ * (order preserved) — the legacy review payload is byte-identical, so callers
+ * can gate the new path on `summaries.length > 0`.
+ */
+export function classifyGeneratedArtifacts(params) {
+    const generatedGlobs = params.generatedGlobs ?? DEFAULT_GENERATED_ARTIFACT_GLOBS;
+    const excludeGlobs = params.excludeGlobs ?? [];
+    const isGenerated = (file) => generatedGlobs.some((g) => matchesGlob(file, g)) &&
+        !excludeGlobs.some((g) => matchesGlob(file, g));
+    const artifactSet = new Set();
+    const summaries = [];
+    const keptSections = [];
+    for (const { file, section } of splitDiffIntoFileSections(params.diff)) {
+        if (file !== null && isGenerated(file)) {
+            artifactSet.add(file);
+            summaries.push(summarizeSection(file, section));
+        }
+        else {
+            keptSections.push(section);
+        }
+    }
+    // Derive kept files from the ORIGINAL changedFiles (preserves order + covers
+    // any file the diff-section parse might miss), subtracting the classified set.
+    const keptFiles = params.changedFiles.filter((f) => !artifactSet.has(f));
+    return {
+        artifactFiles: [...artifactSet],
+        summaries,
+        keptDiff: keptSections.join(''), // totem-ignore (#669) — joining diff sections, not text fragments
+        keptFiles,
+    };
+}
+// ─── Summary rendering ───────────────────────────────────
+const SHAPE_LABEL = {
+    added: 'added',
+    deleted: 'deleted',
+    regenerated: 'regenerated',
+};
+/** One operator-visible / prompt line for an excluded artifact. Paths are sanitized. */
+export function formatGeneratedArtifactLine(summary) {
+    const delta = summary.binary ? 'binary' : `+${summary.addedLines}/-${summary.removedLines} lines`;
+    return `- ${sanitize(summary.file)} — ${SHAPE_LABEL[summary.shape]}, ${delta}, hash ${summary.hash}`;
+}
+/**
+ * Build the synthesis-input section for the excluded generated artifacts.
+ * Returns `''` when there are no artifacts (so the caller injects nothing on the
+ * legacy path). The body is wrapped in a distinct XML tag and the preamble
+ * states plainly that these lines are a Totem-generated summary, NOT diff
+ * content — the #2329 mislabel guard.
+ */
+export function buildGeneratedArtifactSection(summaries) {
+    if (summaries.length === 0)
+        return '';
+    const lines = summaries.map(formatGeneratedArtifactLine).join('\n');
+    const preamble = 'The files below changed but their BYTES WERE EXCLUDED from this review because ' +
+        'they are generated artifacts (lockfiles, compiled outputs, build products). ' +
+        'This block is a TOTEM-GENERATED SUMMARY, not diff content — do NOT treat these ' +
+        'lines as code under review, and do NOT emit findings about them. Their ' +
+        'correctness is the job of deterministic regeneration gates (e.g. `totem lint`, ' +
+        'lockfile-sync), not prose review. Each line is: path — change shape, size ' +
+        'delta (unified-diff insert/delete counts), semantic hash (sha256/12 of the ' +
+        "excluded file's diff segment).";
+    return [
+        '\n=== EXCLUDED GENERATED ARTIFACTS (TOTEM SUMMARY — NOT DIFF CONTENT) ===',
+        preamble,
+        wrapXml('generated_artifacts_summary', lines),
+    ].join('\n');
+}
+//# sourceMappingURL=shield-generated.js.map

package/dist/commands/shield-generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-generated.js","sourceRoot":"","sources":["../../src/commands/shield-generated.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,2EAA2E;AAC3E,2EAA2E;AAC3E,sDAAsD;AACtD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,4DAA4D;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAsB;IACjE,gFAAgF;IAChF,sBAAsB;IACtB,mBAAmB;IACnB,cAAc;IACd,wBAAwB;IACxB,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;IACjB,WAAW;IACX,eAAe;IACf,0CAA0C;IAC1C,+BAA+B;IAC/B,iCAAiC;IACjC,yCAAyC;IACzC,YAAY;IACZ,aAAa;IACb,WAAW;IACX,aAAa;IACb,gBAAgB;IAChB,4EAA4E;IAC5E,WAAW;IACX,aAAa;IACb,cAAc;IACd,UAAU;IACV,kBAAkB;CACnB,CAAC;AAEF,2DAA2D;AAE3D,uFAAuF;AACvF,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAC;AAc3C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IAClC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAAC,GAAW;IAC5D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC9C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,uBAAuB,EAAE,CAAC;YAC1D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;QACrC,CAAC;QACD,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,ySAAyS;IAC3S,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACzF,4EAA4E;QAC5E,2DAA2D;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACxE,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;YACtD,CAAC;iBAAM,IAAI,IAAI,KAAK,qBAAqB,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;gBACjF,oEAAoE;gBACpE,YAAY,CAAC,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACrC,CAAC;AAqDD;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACpD,OAAO,WAAW;SACf,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,mBAAmB;QACnB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACP,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe;IACrD,MAAM,KAAK,GAAyB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAClE,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,aAAa,CAAC;IACpB,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAErF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,wEAAwE;YACxE,uEAAuE;YACvE,wEAAwE;YACxE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,UAAU,EAAE,CAAC;iBAC9D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,YAAY,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAwC;IAExC,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,gCAAgC,CAAC;IACjF,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IAE/C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAW,EAAE,CAC5C,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAElD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,SAAS,GAA+B,EAAE,CAAC;IACjD,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,IAAI,IAAI,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzE,OAAO;QACL,aAAa,EAAE,CAAC,GAAG,WAAW,CAAC;QAC/B,SAAS;QACT,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,kEAAkE;QACnG,SAAS;KACV,CAAC;AACJ,CAAC;AAED,4DAA4D;AAE5D,MAAM,WAAW,GAAyC;IACxD,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CAAC,OAAiC;IAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,YAAY,QAAQ,CAAC;IAClG,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;AACvG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAqC;IACjF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,QAAQ,GACZ,iFAAiF;QACjF,8EAA8E;QAC9E,iFAAiF;QACjF,yEAAyE;QACzE,iFAAiF;QACjF,4EAA4E;QAC5E,6EAA6E;QAC7E,gCAAgC,CAAC;IACnC,OAAO;QACL,2EAA2E;QAC3E,QAAQ;QACR,OAAO,CAAC,6BAA6B,EAAE,KAAK,CAAC;KAC9C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/commands/shield-generated.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shield-generated.test.d.ts.map

package/dist/commands/shield-generated.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-generated.test.d.ts","sourceRoot":"","sources":["../../src/commands/shield-generated.test.ts"],"names":[],"mappings":""}