@mmnto/cli 1.105.0 → 1.106.0

package/dist/commands/mail-degraded-e4.test.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Prop 309 P2 degraded-mode test pack — entry E4 (induced-failure).
+ *
+ * Boundary (verbatim scope): ECL/mail poll completeness. Induced faults →
+ * required behavior: "basename collision · own-broadcast exclusion · glob
+ * failure → surfaced or LOUDLY accounted, never silent narrowing."
+ *
+ * Pack contract — every induced-failure test carries three assertions:
+ *   1. The accounting fires (degraded output announces itself — never output
+ *      indistinguishable from a clean poll).
+ *   2. The backstop throws. `totem mail` is a READ-ONLY path, so per
+ *      ADR-115 § 2 the requirement is a DEGRADED/UNVERIFIED-style envelope in
+ *      rendered output — the structured `warnings` channel (rendered as
+ *      `Warning: …` lines by `formatTextResult`) IS that envelope — not a
+ *      nonzero exit. Where this pack pins an exit code it is pinning the
+ *      deliberate exit-0-with-envelope contract, never blessing silence.
+ *   3. Recovery/control: a positive control (healthy fixture poll renders
+ *      everything it should) AND fault-removed-returns-to-green.
+ *
+ * Framing defects:
+ *   - mmnto-ai/totem#2462 — "silent mail-suppression class": the own-broadcast
+ *     exclusion at mail.ts (`if (opts.includeProcessed !== true && toLower ===
+ *     'broadcast' && selfLower.has(senderSeat)) continue;`) assumes SELF is one
+ *     seat; post-dirs-union the default poll resolves ALL resident seats, so a
+ *     resident sender's broadcast is suppressed from every seat's default
+ *     render — silently, no accounting line.
+ *   - mmnto-ai/totem#2509 — the accounting-line gap: the default render gives
+ *     no account of items dropped by the exclusion; the required fix is a
+ *     rendered accounting line when suppression drops files mark-absent for
+ *     ≥1 resident non-sender seat. NOT yet implemented — the required-behavior
+ *     assertion below is `test.fails` with this issue ref (repo rule:
+ *     suppressions carry a ticket-ref comment), written against the REQUIRED
+ *     behavior so it EXECUTES every run and flips the moment the fix lands
+ *     (vitest 4 dropped `test.fixme`; `test.fails` is the in-repo vitest's
+ *     expected-fail primitive — green while the defect stands, loudly red
+ *     once the assertions pass and the marker must be removed).
+ *
+ * Filesystem-driven, hermetic (fresh tmp workspace per test), same fixture
+ * idiom as mail.test.ts. Assertions target the structured `MailPollResult`
+ * (the durable hook contract); the text formatter is human-only.
+ */
+export {};
+//# sourceMappingURL=mail-degraded-e4.test.d.ts.map

package/dist/commands/mail-degraded-e4.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail-degraded-e4.test.d.ts","sourceRoot":"","sources":["../../src/commands/mail-degraded-e4.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG"}

package/dist/commands/mail-degraded-e4.test.js

@@ -0,0 +1,317 @@
+/**
+ * Prop 309 P2 degraded-mode test pack — entry E4 (induced-failure).
+ *
+ * Boundary (verbatim scope): ECL/mail poll completeness. Induced faults →
+ * required behavior: "basename collision · own-broadcast exclusion · glob
+ * failure → surfaced or LOUDLY accounted, never silent narrowing."
+ *
+ * Pack contract — every induced-failure test carries three assertions:
+ *   1. The accounting fires (degraded output announces itself — never output
+ *      indistinguishable from a clean poll).
+ *   2. The backstop throws. `totem mail` is a READ-ONLY path, so per
+ *      ADR-115 § 2 the requirement is a DEGRADED/UNVERIFIED-style envelope in
+ *      rendered output — the structured `warnings` channel (rendered as
+ *      `Warning: …` lines by `formatTextResult`) IS that envelope — not a
+ *      nonzero exit. Where this pack pins an exit code it is pinning the
+ *      deliberate exit-0-with-envelope contract, never blessing silence.
+ *   3. Recovery/control: a positive control (healthy fixture poll renders
+ *      everything it should) AND fault-removed-returns-to-green.
+ *
+ * Framing defects:
+ *   - mmnto-ai/totem#2462 — "silent mail-suppression class": the own-broadcast
+ *     exclusion at mail.ts (`if (opts.includeProcessed !== true && toLower ===
+ *     'broadcast' && selfLower.has(senderSeat)) continue;`) assumes SELF is one
+ *     seat; post-dirs-union the default poll resolves ALL resident seats, so a
+ *     resident sender's broadcast is suppressed from every seat's default
+ *     render — silently, no accounting line.
+ *   - mmnto-ai/totem#2509 — the accounting-line gap: the default render gives
+ *     no account of items dropped by the exclusion; the required fix is a
+ *     rendered accounting line when suppression drops files mark-absent for
+ *     ≥1 resident non-sender seat. NOT yet implemented — the required-behavior
+ *     assertion below is `test.fails` with this issue ref (repo rule:
+ *     suppressions carry a ticket-ref comment), written against the REQUIRED
+ *     behavior so it EXECUTES every run and flips the moment the fix lands
+ *     (vitest 4 dropped `test.fixme`; `test.fails` is the in-repo vitest's
+ *     expected-fail primitive — green while the defect stands, loudly red
+ *     once the assertions pass and the marker must be removed).
+ *
+ * Filesystem-driven, hermetic (fresh tmp workspace per test), same fixture
+ * idiom as mail.test.ts. Assertions target the structured `MailPollResult`
+ * (the durable hook contract); the text formatter is human-only.
+ */
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it, test, vi } from 'vitest';
+// Mock node:fs so spyOn works in ESM — same pattern as core's session-id.test.ts.
+// Passthrough spread: every call behaves identically to real fs until a test
+// installs a targeted spy (and restores it in `finally`).
+vi.mock('node:fs', async () => {
+    const actual = await vi.importActual('node:fs');
+    return { ...actual, default: actual };
+});
+import * as fs from 'node:fs';
+import { cleanTmpDir } from '../test-utils.js';
+import { pollMail, resolveMailExitCode } from './mail.js';
+// ─── Fixture helpers ────────────────────────────────────
+let tmpRoot;
+let workspace;
+function mkDir(p) {
+    fs.mkdirSync(p, { recursive: true });
+    return p;
+}
+/** `<repo>/.totem/orchestration/<senderAgent>/outbox/<file>.md` — same shape as mail.test.ts. */
+function writeOutbox(repo, senderAgent, files) {
+    const outbox = path.join(workspace, repo, '.totem', 'orchestration', senderAgent, 'outbox');
+    mkDir(outbox);
+    for (const f of files) {
+        const content = [
+            '---',
+            `from: ${f.from ?? senderAgent}`,
+            `to: ${f.to}`,
+            `date: ${f.date ?? '2026-07-20T1700Z'}`,
+            `subject: ${f.subject ?? '(no subject)'}`,
+            '---',
+            '',
+            'Body text.',
+            '',
+        ].join('\n');
+        fs.writeFileSync(path.join(outbox, f.name), content, 'utf-8');
+    }
+}
+/**
+ * The `totem` basename pre-resolves to [totem-claude, totem-gemini] via the
+ * cohort map; materializing the seat dirs puts resolution on the
+ * post-dirs-union DEFAULT path (source 'dirs', no env override) — the exact
+ * multi-seat condition of mmnto-ai/totem#2462: the default poll resolves ALL
+ * resident seats, and the own-broadcast exclusion assumes SELF is one seat.
+ */
+function selfRepoRootWithSeats(seats) {
+    const root = mkDir(path.join(workspace, 'totem'));
+    // The #2312 walk-up needs a `.totem` marker to anchor the repo root on.
+    const orchDir = mkDir(path.join(root, '.totem', 'orchestration'));
+    for (const seat of seats)
+        mkDir(path.join(orchDir, seat));
+    return root;
+}
+beforeEach(() => {
+    tmpRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'totem-mail-e4-'));
+    workspace = mkDir(path.join(tmpRoot, 'workspace'));
+});
+afterEach(() => {
+    cleanTmpDir(tmpRoot);
+});
+// ─── Fault 1: basename collision ────────────────────────
+// Two seats converge on one addressed-inbound basename. Required: surface
+// both or loudly account — never silently narrow/merge/drop one.
+describe('E4 fault 1 — basename collision is surfaced AND loudly accounted', () => {
+    const NAME = '2026-07-20T1717Z-totem-claude-round-reply.md';
+    it('both colliding dispatches surface AND the collision warning names every seat path (regression lock)', () => {
+        // Cross-repo variant: distinct outbox-owner seats in distinct repos.
+        writeOutbox('totem-strategy', 'strategy-claude', [{ name: NAME, to: 'totem-claude' }]);
+        writeOutbox('liquid-city', 'lc-claude', [{ name: NAME, to: 'totem-claude' }]);
+        const result = pollMail({ repoRoot: selfRepoRootWithSeats([]), workspace, env: {} });
+        // Pack 1 — the accounting fires: the degraded envelope announces itself.
+        const collisionWarnings = result.warnings.filter((w) => w.startsWith('cross-sender basename collision'));
+        expect(collisionWarnings).toHaveLength(1);
+        expect(collisionWarnings[0]).toContain(NAME);
+        expect(collisionWarnings[0]).toContain('totem-strategy/strategy-claude');
+        expect(collisionWarnings[0]).toContain('liquid-city/lc-claude');
+        // Pack 2 — backstop for a read-only path (ADR-115 § 2): no silent
+        // narrowing — BOTH dispatches render; the warnings envelope (not an exit
+        // code) is the loud announcement. Load-bearing downstream: the same
+        // warnings channel reds the `ecl-gc --compact` A2.2 completeness gate
+        // (`warnings.length === 0` arm, mmnto-ai/totem#2309).
+        expect(result.mail).toHaveLength(2);
+        expect(result.mail.map((m) => m.file)).toEqual([NAME, NAME]);
+    });
+    it('positive control + fault-removed: distinct basenames render clean with zero warnings', () => {
+        writeOutbox('totem-strategy', 'strategy-claude', [
+            { name: '2026-07-20T1717Z-totem-claude-round-reply.md', to: 'totem-claude' },
+        ]);
+        writeOutbox('liquid-city', 'lc-claude', [
+            { name: '2026-07-20T1718Z-totem-claude-lane-note.md', to: 'totem-claude' },
+        ]);
+        const result = pollMail({ repoRoot: selfRepoRootWithSeats([]), workspace, env: {} });
+        expect(result.mail).toHaveLength(2);
+        expect(result.warnings).toEqual([]);
+        expect(resolveMailExitCode(result)).toBe(0);
+    });
+});
+// ─── Fault 2: own-broadcast exclusion ───────────────────
+// A broadcast from a RESIDENT sender seat, unread for a non-sender resident
+// seat. Required: render it, or print an accounting line naming the
+// suppression (mmnto-ai/totem#2509 — unimplemented today).
+describe('E4 fault 2 — own-broadcast suppression is never silent (mmnto-ai/totem#2462, #2509)', () => {
+    const BCAST = '2026-07-20T2326Z-broadcast-cohort-note.md';
+    const RESIDENT_SEATS = ['totem-claude', 'totem-gemini'];
+    /** Default-resolution poll (no env override) over the two-seat fixture. */
+    function pollTwoSeat(opts = {}) {
+        return pollMail({
+            repoRoot: selfRepoRootWithSeats(RESIDENT_SEATS),
+            workspace,
+            env: {},
+            ...opts,
+        });
+    }
+    // RED ROW — required behavior, unimplemented. `test.fails` carries the
+    // ticket ref per the repo rule (suppressions need a ticket-ref comment);
+    // the body is written against the REQUIRED behavior so it EXECUTES every
+    // run (an expected failure while #2509 stands) and flips the run loudly
+    // red the moment the fix lands and the marker must be removed. (vitest 4
+    // dropped `test.fixme`; `test.fails` is this repo's vitest's expected-fail
+    // primitive.)
+    //
+    // Today's actual behavior (regression-documented, NOT locked): mail.ts's
+    // own-broadcast exclusion hits `continue` with no warning and no accounting
+    // line, so the default two-seat poll returns `mail: []`, `warnings: []` —
+    // rendered as "No unread mail addressed to totem-claude, totem-gemini or
+    // broadcast." That is the #2462 silent-suppression class: the dispatch is
+    // mark-absent for the resident NON-sender seat (totem-gemini), yet the
+    // render is indistinguishable from a genuinely clean inbox.
+    test.fails('REQUIRED (mmnto-ai/totem#2509): a resident-sender broadcast unread for a non-sender seat is rendered OR loudly accounted — never silently dropped', () => {
+        writeOutbox('totem', 'totem-claude', [
+            { name: BCAST, to: 'broadcast', subject: 'cohort note' },
+        ]);
+        // No sanity assertion in this body, deliberately: `test.fails` is
+        // satisfied by ANY failure, so an extra assertion here would let an
+        // unrelated seat-resolution regression keep the marker green without
+        // the #2509 assertion ever running (CR round-1 catch). The two-seat
+        // resolution is asserted by the positive control below on the same
+        // fixture shape, where a regression fails loudly as a real failure.
+        const result = pollTwoSeat();
+        // Pack 1 + 2 — accounting fires / degraded envelope: the poll must
+        // either render the dispatch (to the non-sender seat) or name the
+        // suppression in the warnings channel — the read-only path's
+        // DEGRADED-style announcement per ADR-115 § 2. The exact accounting
+        // wording is #2509's to define; the assertion keys on the suppressed
+        // basename so any honest accounting line satisfies it.
+        const renderedToNonSender = result.mail.some((m) => m.file === BCAST);
+        const accounted = result.warnings.some((w) => w.includes(BCAST));
+        expect(renderedToNonSender || accounted).toBe(true);
+    });
+    it('positive control: a NON-resident sender broadcast surfaces to the same two-seat default poll', () => {
+        // Healthy-fixture control: the same poll renders everything it should
+        // when the sender is NOT a resident seat (the exclusion arm cannot fire).
+        writeOutbox('totem-strategy', 'strategy-claude', [
+            { name: BCAST, to: 'broadcast', subject: 'theirs' },
+        ]);
+        const result = pollTwoSeat();
+        expect(result.selfAgents.agents).toEqual(['totem-claude', 'totem-gemini']);
+        expect(result.mail).toHaveLength(1);
+        expect(result.mail[0].file).toBe(BCAST);
+        expect(result.warnings).toEqual([]);
+    });
+    it('fault-removed control: removing the sender from the resident set surfaces the identical broadcast', () => {
+        // Same dispatch, same fixture — but SELF is restricted to the non-sender
+        // seat, so the exclusion arm (`selfLower.has(senderSeat)`) cannot fire.
+        // Proves the dispatch is deliverable and the suppression is specifically
+        // the resident-sender arm, not a fixture artifact.
+        writeOutbox('totem', 'totem-claude', [{ name: BCAST, to: 'broadcast' }]);
+        const result = pollMail({
+            repoRoot: selfRepoRootWithSeats(RESIDENT_SEATS),
+            workspace,
+            env: { TOTEM_SELF_AGENT: 'totem-gemini' },
+        });
+        expect(result.mail).toHaveLength(1);
+        expect(result.mail[0].file).toBe(BCAST);
+    });
+    it('over-correction guard: a single-seat poll where SELF IS the sender still excludes its own broadcast (mmnto-ai/totem#2364, intended)', () => {
+        // The #2509 fix must not over-correct into surfacing a seat's OWN
+        // broadcast back to the sender itself — that exclusion is the shipped
+        // #2364 behavior. Lock it so the accounting-line fix stays scoped to
+        // non-sender seats.
+        writeOutbox('totem', 'totem-claude', [{ name: BCAST, to: 'broadcast' }]);
+        const result = pollMail({
+            repoRoot: selfRepoRootWithSeats(RESIDENT_SEATS),
+            workspace,
+            env: { TOTEM_SELF_AGENT: 'totem-claude' },
+        });
+        expect(result.mail).toEqual([]);
+    });
+});
+// ─── Fault 3: glob/scan failure ─────────────────────────
+// The scan resolves zero repos/dirs while dispatches exist on disk.
+// Required: refuse a silently-clean inbox over an incomplete scan — announce
+// the degradation.
+describe('E4 fault 3 — scan failure announces itself, never a silent clean inbox', () => {
+    const MAIL_A = '2026-07-20T1800Z-totem-claude-from-strategy.md';
+    const MAIL_B = '2026-07-20T1801Z-totem-claude-from-lc.md';
+    function writeHealthyFixture() {
+        writeOutbox('totem-strategy', 'strategy-claude', [{ name: MAIL_A, to: 'totem-claude' }]);
+        writeOutbox('liquid-city', 'lc-claude', [{ name: MAIL_B, to: 'totem-claude' }]);
+    }
+    it('workspace scan root unresolvable (ENOTDIR) with dispatches on disk → degraded envelope, empty mail, exit 0', () => {
+        writeHealthyFixture();
+        // Positive control (pack 3): the healthy fixture renders everything.
+        const healthy = pollMail({ repoRoot: selfRepoRootWithSeats([]), workspace, env: {} });
+        expect(healthy.mail).toHaveLength(2);
+        expect(healthy.warnings).toEqual([]);
+        // Induce: point the scan root at a FILE — fs.existsSync passes,
+        // readdirSync throws ENOTDIR, enumerateOutboxes resolves ZERO repos while
+        // the dispatches exist on disk under the real workspace. No mocks: the
+        // real errno drives the real catch arm.
+        const brokenRoot = path.join(tmpRoot, 'workspace-as-file');
+        fs.writeFileSync(brokenRoot, 'not a directory', 'utf-8');
+        const degraded = pollMail({
+            repoRoot: selfRepoRootWithSeats([]),
+            workspace: brokenRoot,
+            env: {},
+        });
+        // Pack 1 — the accounting fires: the scan failure is named in the
+        // warnings channel, so the rendered output carries `Warning: workspace
+        // scan failed: …` lines and is distinguishable from a clean poll.
+        expect(degraded.warnings.some((w) => w.startsWith('workspace scan failed'))).toBe(true);
+        // Pack 2 — backstop for a read-only path (ADR-115 § 2): the envelope is
+        // the announcement; the exit code stays 0 by the deliberate
+        // `resolveMailExitCode` contract (only an UNRESOLVED self is exit 2 — a
+        // scan failure still resolved self, and the warnings channel is the
+        // DEGRADED envelope). Pinning exit 0 here pins that contract, not the
+        // silence. The poll also asserts nothing it cannot back: no mail entries
+        // are fabricated over the incomplete scan.
+        expect(degraded.mail).toEqual([]);
+        expect(degraded.scanned).toBe(0);
+        expect(resolveMailExitCode(degraded)).toBe(0);
+        // Fault-removed-returns-to-green (pack 3): repoint at the healthy scan
+        // root and the same fixture polls clean.
+        const recovered = pollMail({ repoRoot: selfRepoRootWithSeats([]), workspace, env: {} });
+        expect(recovered.mail).toHaveLength(2);
+        expect(recovered.warnings).toEqual([]);
+    });
+    it('one repo orchestration scan fails (EACCES) → failure named, healthy sibling still surfaces; fault-removed returns to green', () => {
+        writeHealthyFixture();
+        // Induce: targeted readdirSync failure on ONE repo's orchestration dir —
+        // the exact path mail.ts scans (`<workspace>/totem-strategy/.totem/
+        // orchestration`). Path-conditional passthrough keeps every other fs call
+        // real. (fs spy pattern: core session-id.test.ts.)
+        const brokenMarker = path.join('totem-strategy', '.totem', 'orchestration');
+        const realReaddirSync = fs.readdirSync;
+        const spy = vi.spyOn(fs, 'readdirSync').mockImplementation((target, options) => {
+            if (String(target).endsWith(brokenMarker)) {
+                const err = new Error(`EACCES: permission denied, scandir '${String(target)}'`);
+                err.code = 'EACCES';
+                throw err;
+            }
+            return realReaddirSync(target, options);
+        });
+        try {
+            const degraded = pollMail({ repoRoot: selfRepoRootWithSeats([]), workspace, env: {} });
+            // Pack 1 — the accounting fires: the failed repo is NAMED.
+            expect(degraded.warnings.some((w) => w.startsWith('orchestration scan failed (totem-strategy)'))).toBe(true);
+            // Pack 2 — backstop: skip-don't-abort, never silent narrowing — the
+            // healthy sibling repo's dispatch still surfaces, and the failed repo's
+            // absence is announced (above) rather than folded into a fake-clean
+            // inbox. Exit stays 0 per the read-only degraded-envelope contract.
+            expect(degraded.mail.map((m) => m.file)).toEqual([MAIL_B]);
+            expect(resolveMailExitCode(degraded)).toBe(0);
+        }
+        finally {
+            spy.mockRestore();
+        }
+        // Pack 3 — fault-removed-returns-to-green: with the scan healthy again,
+        // BOTH dispatches surface with zero warnings.
+        const recovered = pollMail({ repoRoot: selfRepoRootWithSeats([]), workspace, env: {} });
+        expect(recovered.mail.map((m) => m.file).sort()).toEqual([MAIL_A, MAIL_B].sort());
+        expect(recovered.warnings).toEqual([]);
+    });
+});
+//# sourceMappingURL=mail-degraded-e4.test.js.map

package/dist/commands/mail-degraded-e4.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail-degraded-e4.test.js","sourceRoot":"","sources":["../../src/commands/mail-degraded-e4.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE/E,kFAAkF;AAClF,6EAA6E;AAC7E,0DAA0D;AAC1D,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAA2B,SAAS,CAAC,CAAC;IAC1E,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAE1D,2DAA2D;AAE3D,IAAI,OAAe,CAAC;AACpB,IAAI,SAAiB,CAAC;AAEtB,SAAS,KAAK,CAAC,CAAS;IACtB,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC;AACX,CAAC;AAUD,iGAAiG;AACjG,SAAS,WAAW,CAAC,IAAY,EAAE,WAAmB,EAAE,KAAmB;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5F,KAAK,CAAC,MAAM,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG;YACd,KAAK;YACL,SAAS,CAAC,CAAC,IAAI,IAAI,WAAW,EAAE;YAChC,OAAO,CAAC,CAAC,EAAE,EAAE;YACb,SAAS,CAAC,CAAC,IAAI,IAAI,kBAAkB,EAAE;YACvC,YAAY,CAAC,CAAC,OAAO,IAAI,cAAc,EAAE;YACzC,KAAK;YACL,EAAE;YACF,YAAY;YACZ,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,KAAe;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,wEAAwE;IACxE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACnE,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,WAAW,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,2DAA2D;AAC3D,0EAA0E;AAC1E,iEAAiE;AAEjE,QAAQ,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAChF,MAAM,IAAI,GAAG,8CAA8C,CAAC;IAE5D,EAAE,CAAC,qGAAqG,EAAE,GAAG,EAAE;QAC7G,qEAAqE;QACrE,WAAW,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QACvF,WAAW,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAErF,yEAAyE;QACzE,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACrD,CAAC,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAChD,CAAC;QACF,MAAM,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QACzE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAChE,kEAAkE;QAClE,yEAAyE;QACzE,oEAAoE;QACpE,sEAAsE;QACtE,sDAAsD;QACtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,WAAW,CAAC,gBAAgB,EAAE,iBAAiB,EAAE;YAC/C,EAAE,IAAI,EAAE,8CAA8C,EAAE,EAAE,EAAE,cAAc,EAAE;SAC7E,CAAC,CAAC;QACH,WAAW,CAAC,aAAa,EAAE,WAAW,EAAE;YACtC,EAAE,IAAI,EAAE,4CAA4C,EAAE,EAAE,EAAE,cAAc,EAAE;SAC3E,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAErF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2DAA2D;AAC3D,4EAA4E;AAC5E,oEAAoE;AACpE,2DAA2D;AAE3D,QAAQ,CAAC,qFAAqF,EAAE,GAAG,EAAE;IACnG,MAAM,KAAK,GAAG,2CAA2C,CAAC;IAC1D,MAAM,cAAc,GAAG,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAExD,2EAA2E;IAC3E,SAAS,WAAW,CAAC,OAAuC,EAAE;QAC5D,OAAO,QAAQ,CAAC;YACd,QAAQ,EAAE,qBAAqB,CAAC,cAAc,CAAC;YAC/C,SAAS;YACT,GAAG,EAAE,EAAE;YACP,GAAG,IAAI;SACR,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,cAAc;IACd,EAAE;IACF,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,CAAC,KAAK,CACR,mJAAmJ,EACnJ,GAAG,EAAE;QACH,WAAW,CAAC,OAAO,EAAE,cAAc,EAAE;YACnC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE;SACzD,CAAC,CAAC;QACH,kEAAkE;QAClE,oEAAoE;QACpE,qEAAqE;QACrE,oEAAoE;QACpE,mEAAmE;QACnE,oEAAoE;QACpE,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAE7B,mEAAmE;QACnE,kEAAkE;QAClE,6DAA6D;QAC7D,oEAAoE;QACpE,qEAAqE;QACrE,uDAAuD;QACvD,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,mBAAmB,IAAI,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,8FAA8F,EAAE,GAAG,EAAE;QACtG,sEAAsE;QACtE,0EAA0E;QAC1E,WAAW,CAAC,gBAAgB,EAAE,iBAAiB,EAAE;YAC/C,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE;SACpD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mGAAmG,EAAE,GAAG,EAAE;QAC3G,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,mDAAmD;QACnD,WAAW,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,QAAQ,CAAC;YACtB,QAAQ,EAAE,qBAAqB,CAAC,cAAc,CAAC;YAC/C,SAAS;YACT,GAAG,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qIAAqI,EAAE,GAAG,EAAE;QAC7I,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,oBAAoB;QACpB,WAAW,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,QAAQ,CAAC;YACtB,QAAQ,EAAE,qBAAqB,CAAC,cAAc,CAAC;YAC/C,SAAS;YACT,GAAG,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2DAA2D;AAC3D,oEAAoE;AACpE,6EAA6E;AAC7E,mBAAmB;AAEnB,QAAQ,CAAC,wEAAwE,EAAE,GAAG,EAAE;IACtF,MAAM,MAAM,GAAG,gDAAgD,CAAC;IAChE,MAAM,MAAM,GAAG,0CAA0C,CAAC;IAE1D,SAAS,mBAAmB;QAC1B,WAAW,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QACzF,WAAW,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,EAAE,CAAC,4GAA4G,EAAE,GAAG,EAAE;QACpH,mBAAmB,EAAE,CAAC;QACtB,qEAAqE;QACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAErC,gEAAgE;QAChE,0EAA0E;QAC1E,uEAAuE;QACvE,wCAAwC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAC3D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC;YACxB,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,kEAAkE;QAClE,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,wEAAwE;QACxE,4DAA4D;QAC5D,wEAAwE;QACxE,oEAAoE;QACpE,sEAAsE;QACtE,yEAAyE;QACzE,2CAA2C;QAC3C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE9C,uEAAuE;QACvE,yCAAyC;QACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4HAA4H,EAAE,GAAG,EAAE;QACpI,mBAAmB,EAAE,CAAC;QACtB,yEAAyE;QACzE,oEAAoE;QACpE,0EAA0E;QAC1E,mDAAmD;QACnD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,eAAe,GAAG,EAAE,CAAC,WAAW,CAAC;QACvC,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YAC7E,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,uCAAuC,MAAM,CAAC,MAAM,CAAC,GAAG,CAChC,CAAC;gBAC3B,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACpB,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,eAAe,CAAC,MAAM,EAAE,OAAgB,CAAU,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YACvF,2DAA2D;YAC3D,MAAM,CACJ,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAC,CAC1F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,oEAAoE;YACpE,wEAAwE;YACxE,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,CAAC;QAED,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/run-compiled-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-compiled-rules.d.ts","sourceRoot":"","sources":["../../src/commands/run-compiled-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAEZ,kBAAkB,EAClB,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACV,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIhD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACtC,iDAAiD;IACjD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAC/B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;;OAIG;IACH,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;CAC5C;AA6FD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,sBAAsB,CAAC,CA8nBjC"}
+{"version":3,"file":"run-compiled-rules.d.ts","sourceRoot":"","sources":["../../src/commands/run-compiled-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAEZ,kBAAkB,EAClB,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACV,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIhD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACtC,iDAAiD;IACjD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAC/B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;;OAIG;IACH,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;CAC5C;AA6OD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,sBAAsB,CAAC,CAwoBjC"}

package/dist/commands/run-compiled-rules.js

@@ -82,6 +82,130 @@ async function countLessonCorpusFiles(config, projectRoot) {
     }
     return matched.size;
 }
+// ─── Target-mismatch derivation (mmnto-ai/totem-strategy#971, Prop 309 Class 7) ─
+/**
+ * Hard-error when a loaded AST rule can never execute because NONE of its
+ * declared `fileGlobs` targets an extension the engine has a registered
+ * Tree-sitter language for (mmnto-ai/totem-strategy#971, Prop 309 Class 7).
+ *
+ * The failure this closes: `resolveAstGrepLangs` (ast-grep-query.ts) silently
+ * falls back to `Lang.Tsx` when no glob resolves, so a target-mismatched rule
+ * looks healthy at load. It then detonates at RUN time — `rule-engine.ts`'s
+ * language check throws `TotemParseError` the first time a diff happens to
+ * contain a file the rule's globs match, and that throw escapes the per-file
+ * loop and aborts the WHOLE lint. The observed specimen was an `ast-grep` rule
+ * whose four globs all pointed at `.json` files, which no language registration
+ * covers. Diff-dependent detonation is the worst property: the gate is green on
+ * every run until the one run where it isn't.
+ *
+ * The guard converts that into a deterministic load-time failure. It runs on
+ * EVERY invocation regardless of the diff, and — unlike the corpus-bearing gate
+ * above — it is deliberately NOT gated on `options.config`. That opt-out exists
+ * because zero-rules is genuinely ambiguous (empty-corpus repo vs disarmed gate)
+ * and the config is the only discriminator. Target-mismatch is unambiguous from
+ * the manifest alone: no discriminator is needed, so there is nothing to opt out
+ * of and `shield estimate` gets the same protection. The one escape is the
+ * pre-existing `--ast-parse-mode lenient` operator flag (see the branch below),
+ * which is opt-in and leaves the strict default fail-closed.
+ *
+ * Scope matches the abort seam exactly. `rule-engine.ts` searches the
+ * `allAstRules` union (Tree-sitter `'ast'` ∪ `'ast-grep'`) for a rule whose
+ * globs claim the unparseable file, so BOTH engines are validated here.
+ *
+ * Two shapes stay permitted:
+ *
+ *   - **Globless rules** (`fileGlobs` absent or empty). The documented
+ *     `Lang.Tsx` fallback is their intended behavior — many pre-1.16 rules ship
+ *     unscoped — and `rule-engine.ts` only throws for a rule with non-empty
+ *     `fileGlobs`, so a globless rule cannot arm the landmine.
+ *   - **Extensionless positive globs** — a recursive `src/**`, a bare-star
+ *     leaf, or a brace-set leaf like `.{ts,json}` (glob literals are omitted
+ *     here because a star-slash pair would close this comment).
+ *     `TRAILING_EXT_RE` extracts nothing from these, but at run time they can
+ *     and do match `.ts` files and dispatch correctly. Absence of a trailing
+ *     extension is absence of evidence, not proof of mismatch — treating it as
+ *     unresolvable would hard-error legitimately broad rules. A rule is only
+ *     condemned when EVERY positive glob names a concrete extension and NOT ONE
+ *     of those extensions resolves.
+ *
+ * Lifecycle status needs no filtering here: `loadCompiledRules` has already
+ * dropped `archived` / `untested-against-codebase` / `pending-verification`
+ * (compiler.ts), so an archived specimen never reaches this function — which is
+ * exactly why archiving is the offered remedy.
+ *
+ * Pack-contributed languages are honored: CLI commands call `bootstrapEngine`
+ * (→ `loadInstalledPacks`) before this point, so a pack that registers `.rs`
+ * has already populated the registry when the check reads it.
+ */
+async function assertRulesCanTargetTheirGlobs(rules, astParseMode, onWarn) {
+    const { extensionToLanguage, registeredExtensions, sanitizeForTerminal, TotemError, TRAILING_EXT_RE, } = await import('@mmnto/totem');
+    const offenders = [];
+    for (const rule of rules) {
+        if (rule.engine !== 'ast-grep' && rule.engine !== 'ast')
+            continue;
+        const globs = rule.fileGlobs;
+        if (!globs || globs.length === 0)
+            continue;
+        // Negations describe files the rule must NOT match, so they never carry a
+        // dispatch target — same skip `resolveAstGrepLangs` performs.
+        const positive = globs.filter((g) => typeof g === 'string' && !g.startsWith('!'));
+        // An all-negation glob list matches every file (see the zero-match
+        // derivation below, where `positive.length === 0` matches unconditionally),
+        // so it necessarily reaches resolvable files. Permitted.
+        if (positive.length === 0)
+            continue;
+        const extensions = [];
+        let resolvable = false;
+        for (const glob of positive) {
+            const match = glob.match(TRAILING_EXT_RE);
+            if (!match) {
+                // Extensionless positive glob — unprovable, therefore permitted.
+                resolvable = true;
+                break;
+            }
+            const ext = `.${match[1].toLowerCase()}`;
+            if (extensionToLanguage(ext)) {
+                resolvable = true;
+                break;
+            }
+            if (!extensions.includes(ext))
+                extensions.push(ext);
+        }
+        if (!resolvable)
+            offenders.push({ rule, globs: positive, extensions });
+    }
+    if (offenders.length === 0)
+        return;
+    // Deterministic detail line per offender — corpus order, every field the
+    // operator needs to act without opening the manifest.
+    const detail = offenders
+        .map((o) => `'${o.rule.lessonHash}' (${o.rule.lessonHeading}) engine '${o.rule.engine}' fileGlobs [${o.globs.join(', ')}] → unregistered extension(s) ${o.extensions.join(', ')}`)
+        .join('; ');
+    // Manifest-derived fields (lessonHash, lessonHeading, fileGlobs) are
+    // repo-controlled text reaching operator terminals and CI logs — sanitize the
+    // whole rendered summary so a corrupted or hostile manifest cannot inject
+    // control sequences through the guard's own report. The remedy line is
+    // engine-derived only and needs no sanitizing.
+    const summary = sanitizeForTerminal(`${offenders.length} active AST rule(s) declare fileGlobs whose extensions have no registered Tree-sitter language, so they can never match and instead abort the entire lint on first contact with a file they claim — ${detail}.`);
+    // Three remedies, deliberately un-ranked: the manifest alone cannot tell a
+    // permanently-broken rule (`.json`, which no pack will ever register) from an
+    // incomplete environment (`.rs`, which a pack provides but which has not been
+    // installed/synced here). Leading with "archive it" would misdiagnose the
+    // second case, which `rule-engine.ts`'s STALE_MANIFEST path handles well.
+    const remedy = `Install or sync the pack that provides the language ('totem sync --packs-only'), archive each rule (set status: 'archived'), or correct its fileGlobs/engine so at least one positive glob targets a registered extension. Registered now: ${registeredExtensions().join(', ')}.`;
+    if (astParseMode === 'lenient') {
+        // Honor the operator escape (mmnto-ai/totem#1982). `--ast-parse-mode lenient`
+        // already means "an AST language the engine cannot parse degrades this run
+        // instead of failing it", and a target-mismatched rule is exactly that class
+        // — it simply fails at load rather than at dispatch. Without this branch the
+        // guard would REMOVE the only escape for a repo whose rules target a pack
+        // language it has not installed, leaving the operator no way to lint at all.
+        // The rules stay inert either way, so lenient loses no enforcement it had.
+        onWarn(`AST rules target-mismatched (--ast-parse-mode lenient): ${summary} ${remedy}`);
+        return;
+    }
+    throw new TotemError('LINT_LESSONS_FAILED', `Enforcement disarmed: ${summary}`, remedy);
+}
 // ─── Core logic ─────────────────────────────────────
 /**
  * Compiled-rules execution engine used by `totem lint`. Loads rules, extracts additions, enriches
@@ -163,6 +287,17 @@ export async function runCompiledRules(options) {
         log.info(tag, `No compiled rules at ${totemDir}/${COMPILED_RULES_FILE} — skipping (empty-corpus repo). Run 'totem lesson compile' once you have lessons.`);
         return emptyResult;
     }
+    // mmnto-ai/totem#1982. Resolved here rather than at the AST dispatch site
+    // because the rule-load guard below shares the mode (CLI flag > env > strict).
+    const effectiveAstParseMode = astParseMode ??
+        // totem-context: reading Node's process.env (cleaned by the runtime), not parsing a custom .env file; CRLF/quote-stripping rule doesn't apply.
+        (process.env['TOTEM_LINT_AST_PARSE_MODE'] === 'lenient' ? 'lenient' : 'strict');
+    // Rule-LOAD validation (mmnto-ai/totem-strategy#971, Prop 309 Class 7). Runs
+    // before any diff is touched so a rule whose engine cannot process ANY of its
+    // declared globs fails on every run, not on the unlucky run whose diff happens
+    // to contain a file it claims. Ordered AFTER the corpus-bearing block so a
+    // missing/unloadable manifest still reports its own (more fundamental) cause.
+    await assertRulesCanTargetTheirGlobs(rules, effectiveAstParseMode, (msg) => log.warn(tag, msg));
     log.info(tag, `Running ${rules.length} rules (zero LLM)...`);
     // Extract additions, exclude compiled rules file, export targets, and binary files
     const BINARY_EXTENSIONS = new Set([
@@ -297,11 +432,8 @@ export async function runCompiledRules(options) {
     const astRules = rules.filter((r) => r.engine === 'ast' || r.engine === 'ast-grep');
     let astViolations = [];
     const astParseFailures = [];
-    // mmnto-ai/totem#1982. Resolve effective mode with env override (matches
-    // the operator escape pattern: CLI flag > env var > default 'strict').
-    const effectiveAstParseMode = astParseMode ??
-        // totem-context: reading Node's process.env (cleaned by the runtime), not parsing a custom .env file; CRLF/quote-stripping rule doesn't apply.
-        (process.env['TOTEM_LINT_AST_PARSE_MODE'] === 'lenient' ? 'lenient' : 'strict');
+    // `effectiveAstParseMode` (mmnto-ai/totem#1982) is resolved above the rule-load
+    // guard, which shares the same operator escape.
     if (astRules.length > 0) {
         log.dim(tag, `Running ${astRules.length} AST rule(s)...`);
         try {