@neurcode-ai/cli 0.16.7 → 0.16.8

package/dist/utils/enterprise-eval-report.js

@@ -0,0 +1,402 @@
+"use strict";
+/**
+ * Enterprise evaluator report + dashboard summary — pure builders.
+ *
+ * The `neurcode eval demo` runner (utils/eval-demo.ts) drives a complete, safe,
+ * local governance loop against a throwaway fixture and gathers a single
+ * source-free facts object: {@link EvalDemoFacts}. This module turns that facts
+ * object into the two shareable artifacts a first-time enterprise evaluator
+ * needs:
+ *
+ *   1. {@link buildEnterpriseEvalReport} / {@link renderEnterpriseEvalReportMarkdown}
+ *      — a polished, source-free report an engineering manager can read. It is
+ *      deliberately honest: deterministic path/symbol/graph/policy facts are
+ *      separated from advisory inference, and the trust posture never claims
+ *      public-key signing when only an HMAC backend receipt (or self-attested
+ *      local record) exists.
+ *
+ *   2. {@link buildEvalDemoSummary} — a compact machine-readable JSON the hosted
+ *      dashboard can import (paste / upload). It carries completion status,
+ *      pass/fail checkpoints, the boundary/approval/neighbor facts, the trust
+ *      posture, the recommended next command, and a design-partner-pilot verdict.
+ *
+ * Everything here is pure (no I/O) and source-free. The orchestration engine
+ * runs {@link assertEnterpriseEvalSourceFree} over the rendered artifacts before
+ * anything is written, and the harness/tests assert the same contract.
+ *
+ * Keep the truth tiers and step ids in lockstep with utils/guided-eval.ts and
+ * the dashboard mirrors (web/dashboard/src/lib/guidedEval.ts + evalDemoImport.ts).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CORE_CHECKPOINT_IDS = exports.ENTERPRISE_EVAL_REPORT_SCHEMA_VERSION = exports.EVAL_DEMO_SUMMARY_SCHEMA_VERSION = void 0;
+exports.deriveVerdict = deriveVerdict;
+exports.buildEnterpriseEvalReport = buildEnterpriseEvalReport;
+exports.renderEnterpriseEvalReportMarkdown = renderEnterpriseEvalReportMarkdown;
+exports.buildEvalDemoSummary = buildEvalDemoSummary;
+exports.assertEnterpriseEvalSourceFree = assertEnterpriseEvalSourceFree;
+const guided_eval_1 = require("./guided-eval");
+exports.EVAL_DEMO_SUMMARY_SCHEMA_VERSION = 'neurcode.eval-demo-summary.v1';
+exports.ENTERPRISE_EVAL_REPORT_SCHEMA_VERSION = 'neurcode.enterprise-eval-report.v1';
+/** The deterministic core loop that must hold for the demo to be meaningful. */
+exports.CORE_CHECKPOINT_IDS = [
+    'safe_edit_allowed',
+    'boundary_block',
+    'exact_approval',
+    'approved_path_allowed',
+    'neighbor_contained',
+    'ai_change_record',
+];
+function deriveVerdict(checkpoints, facts) {
+    const byId = new Map(checkpoints.map((c) => [c.id, c]));
+    const corePassed = exports.CORE_CHECKPOINT_IDS.every((id) => byId.get(id)?.status === 'pass');
+    const criticalFailures = checkpoints.filter((c) => c.critical && c.status === 'fail');
+    const reasons = [];
+    if (!corePassed || criticalFailures.length > 0) {
+        const failed = [
+            ...exports.CORE_CHECKPOINT_IDS.filter((id) => byId.get(id)?.status !== 'pass'),
+            ...criticalFailures.map((c) => c.id).filter((id) => !exports.CORE_CHECKPOINT_IDS.includes(id)),
+        ];
+        reasons.push(`Core governance loop did not fully hold: ${Array.from(new Set(failed)).join(', ')}.`);
+        return {
+            founderDemo: 'not_ready',
+            designPartnerPilot: 'not_ready',
+            seriousEnterprisePilot: 'not_ready',
+            reasons,
+        };
+    }
+    reasons.push('Safe edit allowed, protected boundary blocked, exact-path approval contained, neighbor stayed blocked, and a source-free AI Change Record was exported.');
+    // Backend receipt custody is the gate between design-partner and serious enterprise.
+    let seriousEnterprisePilot;
+    if (facts.backendReceipt.verified) {
+        seriousEnterprisePilot = 'ready_with_caveats';
+        reasons.push('A signed backend receipt verified under the configured key (integrity + issuance, not source correctness).');
+    }
+    else {
+        seriousEnterprisePilot = 'not_ready';
+        reasons.push('Evidence is self-attested / local in this run — a serious enterprise pilot needs the backend signing key configured so receipts verify in production custody.');
+    }
+    return {
+        founderDemo: 'ready',
+        designPartnerPilot: 'ready_with_caveats',
+        seriousEnterprisePilot,
+        reasons,
+    };
+}
+const REPORT_EXCLUDES = [
+    'source code',
+    'diff hunks',
+    'patch bodies',
+    'raw prompts',
+    'secrets',
+    'private file contents',
+];
+function trustStatement(receipt) {
+    if (receipt.verified) {
+        return `Backend-signed receipt verified under the configured signing key (${receipt.provenance}). This proves the record was issued under that key and was not altered — it does NOT prove source correctness or vulnerability absence. The signature is an HMAC backend receipt, not public-key cryptographic signing.`;
+    }
+    if (receipt.configured) {
+        return `A signing key was configured but the receipt did not verify in this run (${receipt.provenance}). Treat the evidence as self-attested until a receipt verifies.`;
+    }
+    return `No backend signing key was configured, so the AI Change Record is a self-attested local record (${receipt.provenance}). It is useful, honest routing metadata — not cryptographic proof that governance ran. Configure the backend signing key to upgrade to verifiable receipts.`;
+}
+function buildEnterpriseEvalReport(facts, checkpoints) {
+    const passed = checkpoints.filter((c) => c.status === 'pass').length;
+    const criticalFailures = checkpoints.filter((c) => c.critical && c.status === 'fail').length;
+    const verdict = deriveVerdict(checkpoints, facts);
+    const deterministicFacts = [
+        `Safe in-scope edit was allowed without a block (${facts.safeEditAllowed ? 'observed' : 'NOT observed'}).`,
+        `Protected boundary ${facts.boundaryBlockPath ?? 'src/billing/charge.py'} was blocked before the write landed${facts.boundaryOwners.length ? ` (owner ${facts.boundaryOwners.join(', ')})` : ''}.`,
+        `Exact-path approval granted exactly one path: ${facts.exactApprovalPath ?? 'none'} (exact-only: ${facts.exactApprovalOnly ? 'yes' : 'no'}).`,
+        `Approved path was allowed after approval: ${facts.approvedPathAllowedAfter ? 'yes' : 'no'}.`,
+        `Neighbor ${facts.neighborPath ?? 'src/billing/refund.py'} stayed blocked after the approval: ${facts.neighborContained ? 'yes' : 'no'}.`,
+        `A source-free AI Change Record / admission record was exported${facts.aiChangeRecordRelativePath ? ` (${facts.aiChangeRecordRelativePath})` : ''}.`,
+    ];
+    if (facts.admissionBlockedCount != null && facts.admissionApprovedCount != null) {
+        deterministicFacts.push(`Admission record counts: ${facts.admissionBlockedCount} blocked path(s), ${facts.admissionApprovedCount} exact approval(s).`);
+    }
+    const advisoryFacts = [];
+    if (facts.repoBrain.status === 'measured') {
+        advisoryFacts.push(`Repo brain indexed ${facts.repoBrain.filesIndexed ?? 'n/a'} files; owner boundaries: ${facts.repoBrain.ownerBoundaries.map((b) => `${b.pattern} → ${b.owners.join('/')}`).join('; ') || 'none'}.`);
+        if (facts.repoBrain.reuseAdvisories.length > 0) {
+            advisoryFacts.push(`Reuse / duplication advisories (fingerprint resemblance, can be false positive): ${facts.repoBrain.reuseAdvisories
+                .map((r) => `${r.symbolName ?? 'symbol'} [${r.severity}]`)
+                .join('; ')}.`);
+        }
+        if (facts.repoBrain.highFanOutSymbols.length > 0) {
+            advisoryFacts.push(`High fan-out surfaces worth reviewing first: ${facts.repoBrain.highFanOutSymbols
+                .map((h) => `${h.file} (${h.importFanIn} callers)`)
+                .join('; ')}.`);
+        }
+    }
+    else {
+        advisoryFacts.push(`Repo brain was not indexed in this run — run \`${facts.repoBrain.recoveryCommand}\` to populate owner mapping, sensitive surfaces, and reuse advisories.`);
+    }
+    const whatThisProves = [
+        'The runtime allowed a safe, in-scope edit (no false positive) and denied a protected-boundary write before it landed.',
+        'An exact-path approval widened scope to exactly one file and no further.',
+        'A file adjacent to the approved path stayed blocked — approval did not silently widen.',
+        'A source-free AI Change Record was produced that carries paths, owners, verdicts, counts, and hashes only.',
+        'The governance loop runs locally and deterministically without GitHub Actions or cloud authentication.',
+    ];
+    const whatThisDoesNotProve = [
+        'It does not prove the source code is correct, secure, or free of vulnerabilities.',
+        'It does not prove the AI "semantically understands" the repository — reuse/architecture signals are advisory and can be false positives.',
+        facts.backendReceipt.verified
+            ? 'A verified receipt confirms issuance under the configured key (HMAC backend receipt) and integrity — not source correctness, and not public-key cryptographic signing.'
+            : 'No backend receipt was verified in this run, so evidence is self-attested/local — not cryptographic proof that governance ran.',
+        'It is a controlled fixture, not your real repository. Re-run on a real repo to see your owners, surfaces, and reuse signals.',
+    ];
+    const nextStepForRealRepo = [
+        `Run \`neurcode eval start --agent ${facts.agent}\` in your real repository (read-only — it never edits your source).`,
+        'Run `neurcode brain index` to map your owners, sensitive surfaces, and high fan-out symbols.',
+        facts.agent === 'claude'
+            ? 'Activate Claude Code hooks (`neurcode activate claude --dir .`) so the same boundary is a hard pre-write deny in a live session.'
+            : `Activate supervised guard mode (\`neurcode activate ${facts.agent} --dir .\`) and drive a bounded task through \`neurcode agent guard\`.`,
+        'Trigger one real boundary block + exact approval, then `neurcode eval export` to share a source-free report.',
+        'Configure the backend signing key to upgrade self-attested records into verifiable receipts.',
+    ];
+    return {
+        schemaVersion: exports.ENTERPRISE_EVAL_REPORT_SCHEMA_VERSION,
+        generatedAt: facts.generatedAt,
+        agent: facts.agent,
+        enforcement: facts.enforcement,
+        enforcementLabel: facts.enforcementLabel,
+        enforcementMethod: facts.enforcementMethod,
+        mode: facts.mode,
+        durationMs: facts.durationMs,
+        repo: { rootHash: facts.repoRootHash, fixtureRelativeDir: facts.fixtureRelativeDir },
+        result: { complete: criticalFailures === 0, passed, total: checkpoints.length, criticalFailures },
+        checkpoints: checkpoints.map((c) => ({
+            ...c,
+            truthTierLabel: guided_eval_1.GUIDED_EVAL_TRUTH_TIERS[c.truthTier].label,
+        })),
+        whatThisProves,
+        whatThisDoesNotProve,
+        deterministicFacts,
+        advisoryFacts,
+        boundaryTimeline: facts.boundaryTimeline,
+        exactApprovalContainment: {
+            approvedPath: facts.exactApprovalPath,
+            exactOnly: facts.exactApprovalOnly,
+            allowedAfterApproval: facts.approvedPathAllowedAfter,
+            owners: facts.boundaryOwners,
+        },
+        neighborContainment: {
+            neighborPath: facts.neighborPath,
+            stayedBlocked: facts.neighborContained,
+        },
+        repoBrain: facts.repoBrain,
+        evidenceTrustPosture: {
+            aiChangeRecord: {
+                sessionId: facts.aiChangeRecordSessionId,
+                relativePath: facts.aiChangeRecordRelativePath,
+            },
+            backendReceipt: facts.backendReceipt,
+            statement: trustStatement(facts.backendReceipt),
+        },
+        commandsRun: facts.commandsRun,
+        nextStepForRealRepo,
+        verdict,
+        truthTaxonomy: Object.fromEntries(Object.keys(guided_eval_1.GUIDED_EVAL_TRUTH_TIERS).map((k) => [
+            k,
+            guided_eval_1.GUIDED_EVAL_TRUTH_TIERS[k].label,
+        ])),
+        privacy: { sourceFree: true, excludes: REPORT_EXCLUDES },
+    };
+}
+const CHECKPOINT_GLYPH = {
+    pass: '✓',
+    fail: '✗',
+    advisory: '~',
+    skipped: '–',
+};
+const PHASE_LABEL = {
+    safe_edit: 'Safe edit',
+    boundary_block: 'Protected boundary',
+    post_approval_allow: 'After exact approval',
+    neighbor_block: 'Neighbor file',
+};
+const READINESS_LABEL = {
+    ready: 'Ready',
+    ready_with_caveats: 'Ready with caveats',
+    not_ready: 'Not ready',
+};
+function renderEnterpriseEvalReportMarkdown(report) {
+    const lines = [];
+    lines.push('# Enterprise Self-Serve Evaluation — Report');
+    lines.push('');
+    lines.push(`Generated: ${report.generatedAt}`);
+    lines.push(`Agent: ${report.agent} · Enforcement: ${report.enforcementLabel}`);
+    lines.push(`Method: ${report.enforcementMethod}`);
+    lines.push(`Mode: ${report.mode} · Repo identity: ${report.repo.rootHash} (path hash — no source) · Fixture: ${report.repo.fixtureRelativeDir}`);
+    lines.push(`Result: ${report.result.passed}/${report.result.total} checkpoints passed${report.result.complete
+        ? ' — core governance loop held'
+        : ` — ${report.result.criticalFailures} critical failure(s)`}`);
+    lines.push('');
+    lines.push('## What this proves');
+    lines.push('');
+    for (const item of report.whatThisProves)
+        lines.push(`- ${item}`);
+    lines.push('');
+    lines.push('## What this does NOT prove');
+    lines.push('');
+    for (const item of report.whatThisDoesNotProve)
+        lines.push(`- ${item}`);
+    lines.push('');
+    lines.push('## Checkpoints');
+    lines.push('');
+    lines.push('| | Checkpoint | Tier | Status | Observed |');
+    lines.push('|---|---|---|---|---|');
+    for (const c of report.checkpoints) {
+        lines.push(`| ${CHECKPOINT_GLYPH[c.status]} | ${c.title} | ${c.truthTierLabel} | ${c.status} | ${c.observed} |`);
+    }
+    lines.push('');
+    lines.push('## Deterministic facts');
+    lines.push('');
+    lines.push('_Compiled path / symbol / graph / policy facts. They prove the structural statement, not source correctness._');
+    lines.push('');
+    for (const item of report.deterministicFacts)
+        lines.push(`- ${item}`);
+    lines.push('');
+    lines.push('## Advisory facts');
+    lines.push('');
+    lines.push('_Semantic / reuse / architecture inference. Worth a human look; explicitly NOT a deterministic guarantee._');
+    lines.push('');
+    for (const item of report.advisoryFacts)
+        lines.push(`- ${item}`);
+    lines.push('');
+    lines.push('## Boundary decision timeline');
+    lines.push('');
+    lines.push('| # | Phase | Path | Tool | Decision | Owner |');
+    lines.push('|---|---|---|---|---|---|');
+    for (const e of report.boundaryTimeline) {
+        lines.push(`| ${e.order} | ${PHASE_LABEL[e.phase]} | ${e.path} | ${e.toolName} | ${e.decision} | ${e.owners.join(', ') || '—'} |`);
+    }
+    lines.push('');
+    lines.push('## Exact approval containment');
+    lines.push('');
+    lines.push(`- Approved path: ${report.exactApprovalContainment.approvedPath ?? 'none'}`);
+    lines.push(`- Exactly one path approved: ${report.exactApprovalContainment.exactOnly ? 'yes' : 'no'}`);
+    lines.push(`- Allowed after approval: ${report.exactApprovalContainment.allowedAfterApproval ? 'yes' : 'no'}`);
+    lines.push(`- Boundary owner: ${report.exactApprovalContainment.owners.join(', ') || 'not recorded'}`);
+    lines.push('');
+    lines.push('## Neighbor containment');
+    lines.push('');
+    lines.push(`- Neighbor path: ${report.neighborContainment.neighborPath ?? 'none'}`);
+    lines.push(`- Stayed blocked after approval: ${report.neighborContainment.stayedBlocked ? 'yes — approval did not widen scope' : 'no'}`);
+    lines.push('');
+    lines.push('## Repo brain / reuse intelligence summary');
+    lines.push('');
+    if (report.repoBrain.status === 'measured') {
+        lines.push(`- Files indexed: ${report.repoBrain.filesIndexed ?? 'n/a'}`);
+        lines.push(`- Sensitive surfaces: ${report.repoBrain.sensitiveSurfaces.join(', ') || 'none'}`);
+        lines.push(`- Owner boundaries: ${report.repoBrain.ownerBoundaries.map((b) => `${b.pattern} → ${b.owners.join('/')}`).join('; ') || 'none'}`);
+        lines.push(`- High fan-out symbols (advisory): ${report.repoBrain.highFanOutSymbols.map((h) => `${h.file} (${h.importFanIn} callers)`).join('; ') || 'none'}`);
+        lines.push(`- Reuse advisories (advisory): ${report.repoBrain.reuseAdvisories.map((r) => `${r.symbolName ?? 'symbol'} [${r.severity}]`).join('; ') || 'none'}`);
+    }
+    else {
+        lines.push(`- Not indexed in this run — run \`${report.repoBrain.recoveryCommand}\` on the target repo to populate.`);
+    }
+    lines.push('');
+    lines.push('## Evidence trust posture');
+    lines.push('');
+    lines.push(`- AI Change Record: ${report.evidenceTrustPosture.aiChangeRecord.relativePath ?? 'none'} (session ${report.evidenceTrustPosture.aiChangeRecord.sessionId ?? 'n/a'})`);
+    lines.push(`- Backend receipt: configured ${report.evidenceTrustPosture.backendReceipt.configured ? 'yes' : 'no'}, verified ${report.evidenceTrustPosture.backendReceipt.verified ? 'yes' : 'no'} (${report.evidenceTrustPosture.backendReceipt.provenance})`);
+    lines.push(`- ${report.evidenceTrustPosture.statement}`);
+    lines.push('');
+    lines.push('## Commands that were run');
+    lines.push('');
+    lines.push('```');
+    for (const cmd of report.commandsRun)
+        lines.push(cmd);
+    lines.push('```');
+    lines.push('');
+    lines.push('## Design-partner pilot readiness');
+    lines.push('');
+    lines.push(`- Founder demo: ${READINESS_LABEL[report.verdict.founderDemo]}`);
+    lines.push(`- Design-partner pilot: ${READINESS_LABEL[report.verdict.designPartnerPilot]}`);
+    lines.push(`- Serious enterprise pilot: ${READINESS_LABEL[report.verdict.seriousEnterprisePilot]}`);
+    for (const reason of report.verdict.reasons)
+        lines.push(`  - ${reason}`);
+    lines.push('');
+    lines.push('## Next step for a real repo');
+    lines.push('');
+    for (const item of report.nextStepForRealRepo)
+        lines.push(`- ${item}`);
+    lines.push('');
+    lines.push(`_Source-free: paths, owners, symbol names, hashes, verdicts, and tiers only. Excludes: ${report.privacy.excludes.join(', ')}._`);
+    lines.push('');
+    return lines.join('\n');
+}
+function trustLabel(receipt) {
+    if (receipt.verified) {
+        return 'Backend-signed receipt verified (HMAC backend receipt, integrity + issuance — not source correctness)';
+    }
+    if (receipt.configured)
+        return 'Signing key configured but receipt unverified — treat as self-attested';
+    return 'Self-attested local record (no backend signing key configured)';
+}
+function buildEvalDemoSummary(facts, checkpoints) {
+    const passed = checkpoints.filter((c) => c.status === 'pass').length;
+    const criticalFailures = checkpoints.filter((c) => c.critical && c.status === 'fail').length;
+    const total = checkpoints.length;
+    const percent = total === 0 ? 0 : Math.round((passed / total) * 100);
+    const verdict = deriveVerdict(checkpoints, facts);
+    const recommendedNextCommand = criticalFailures > 0
+        ? `neurcode eval doctor --agent ${facts.agent}`
+        : `neurcode eval start --agent ${facts.agent}   # then run it on your real repo`;
+    return {
+        schemaVersion: exports.EVAL_DEMO_SUMMARY_SCHEMA_VERSION,
+        generatedAt: facts.generatedAt,
+        agent: facts.agent,
+        enforcement: facts.enforcement,
+        enforcementLabel: facts.enforcementLabel,
+        mode: facts.mode,
+        repo: { rootHash: facts.repoRootHash },
+        completion: { complete: criticalFailures === 0, passed, total, percent },
+        checkpoints: checkpoints.map((c) => ({
+            id: c.id,
+            title: c.title,
+            truthTier: c.truthTier,
+            status: c.status,
+            observed: c.observed,
+        })),
+        facts: {
+            boundaryBlock: {
+                path: facts.boundaryBlockPath,
+                owners: facts.boundaryOwners,
+                blockType: facts.boundaryBlockType,
+            },
+            exactApproval: {
+                path: facts.exactApprovalPath,
+                exactOnly: facts.exactApprovalOnly,
+                allowedAfter: facts.approvedPathAllowedAfter,
+            },
+            neighbor: { path: facts.neighborPath, contained: facts.neighborContained },
+            aiChangeRecord: {
+                sessionId: facts.aiChangeRecordSessionId,
+                relativePath: facts.aiChangeRecordRelativePath,
+            },
+        },
+        sourceFree: true,
+        trustPosture: {
+            backendReceiptConfigured: facts.backendReceipt.configured,
+            backendReceiptVerified: facts.backendReceipt.verified,
+            label: trustLabel(facts.backendReceipt),
+            provenance: facts.backendReceipt.provenance,
+        },
+        recommendedNextCommand,
+        verdict,
+        privacy: { sourceFree: true, excludes: REPORT_EXCLUDES },
+    };
+}
+// ── Source-free backstop ──────────────────────────────────────────────────────
+/** Throw if a would-be enterprise artifact contains source/diff/secret shapes. */
+function assertEnterpriseEvalSourceFree(value, label = 'enterprise-eval artifact') {
+    const text = typeof value === 'string' ? value : JSON.stringify(value);
+    const leaks = (0, guided_eval_1.findSourceLeaks)(text);
+    if (leaks.length > 0) {
+        throw new Error(`${label} failed source-free scan: ${leaks.join(', ')}`);
+    }
+}
+//# sourceMappingURL=enterprise-eval-report.js.map

package/dist/utils/enterprise-eval-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterprise-eval-report.js","sourceRoot":"","sources":["../../src/utils/enterprise-eval-report.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AA+HH,sCA0CC;AA+DD,8DAsIC;AAsBD,gFAoJC;AA8CD,oDAwDC;AAKD,wEAMC;AAvoBD,+CAOuB;AAEV,QAAA,gCAAgC,GAAG,+BAAwC,CAAC;AAC5E,QAAA,qCAAqC,GAAG,oCAA6C,CAAC;AAyGnG,gFAAgF;AACnE,QAAA,mBAAmB,GAAG;IACjC,mBAAmB;IACnB,gBAAgB;IAChB,gBAAgB;IAChB,uBAAuB;IACvB,oBAAoB;IACpB,kBAAkB;CACV,CAAC;AAEX,SAAgB,aAAa,CAAC,WAA6B,EAAE,KAAoB;IAC/E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,2BAAmB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;IACtF,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACtF,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG;YACb,GAAG,2BAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;YACtE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAE,2BAAyC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;SAC9G,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,4CAA4C,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpG,OAAO;YACL,WAAW,EAAE,WAAW;YACxB,kBAAkB,EAAE,WAAW;YAC/B,sBAAsB,EAAE,WAAW;YACnC,OAAO;SACR,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,IAAI,CACV,yJAAyJ,CAC1J,CAAC;IAEF,qFAAqF;IACrF,IAAI,sBAAsC,CAAC;IAC3C,IAAI,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QAClC,sBAAsB,GAAG,oBAAoB,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,4GAA4G,CAAC,CAAC;IAC7H,CAAC;SAAM,CAAC;QACN,sBAAsB,GAAG,WAAW,CAAC;QACrC,OAAO,CAAC,IAAI,CACV,+JAA+J,CAChK,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,OAAO;QACpB,kBAAkB,EAAE,oBAAoB;QACxC,sBAAsB;QACtB,OAAO;KACR,CAAC;AACJ,CAAC;AA4CD,MAAM,eAAe,GAAG;IACtB,aAAa;IACb,YAAY;IACZ,cAAc;IACd,aAAa;IACb,SAAS;IACT,uBAAuB;CACxB,CAAC;AAEF,SAAS,cAAc,CAAC,OAA+B;IACrD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,qEAAqE,OAAO,CAAC,UAAU,0NAA0N,CAAC;IAC3T,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,4EAA4E,OAAO,CAAC,UAAU,kEAAkE,CAAC;IAC1K,CAAC;IACD,OAAO,mGAAmG,OAAO,CAAC,UAAU,8JAA8J,CAAC;AAC7R,CAAC;AAED,SAAgB,yBAAyB,CACvC,KAAoB,EACpB,WAA6B;IAE7B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC7F,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAElD,MAAM,kBAAkB,GAAa;QACnC,mDAAmD,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,IAAI;QAC1G,sBAAsB,KAAK,CAAC,iBAAiB,IAAI,uBAAuB,uCACtE,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAChF,GAAG;QACH,iDAAiD,KAAK,CAAC,iBAAiB,IAAI,MAAM,iBAChF,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IACpC,IAAI;QACJ,6CAA6C,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG;QAC7F,YAAY,KAAK,CAAC,YAAY,IAAI,uBAAuB,uCACvD,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IACpC,GAAG;QACH,iEACE,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,0BAA0B,GAAG,CAAC,CAAC,CAAC,EAChF,GAAG;KACJ,CAAC;IACF,IAAI,KAAK,CAAC,qBAAqB,IAAI,IAAI,IAAI,KAAK,CAAC,sBAAsB,IAAI,IAAI,EAAE,CAAC;QAChF,kBAAkB,CAAC,IAAI,CACrB,4BAA4B,KAAK,CAAC,qBAAqB,qBAAqB,KAAK,CAAC,sBAAsB,qBAAqB,CAC9H,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1C,aAAa,CAAC,IAAI,CAChB,sBAAsB,KAAK,CAAC,SAAS,CAAC,YAAY,IAAI,KAAK,6BACzD,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MACnG,GAAG,CACJ,CAAC;QACF,IAAI,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,aAAa,CAAC,IAAI,CAChB,oFAAoF,KAAK,CAAC,SAAS,CAAC,eAAe;iBAChH,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,QAAQ,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC;iBACzD,IAAI,CAAC,IAAI,CAAC,GAAG,CACjB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,aAAa,CAAC,IAAI,CAChB,gDAAgD,KAAK,CAAC,SAAS,CAAC,iBAAiB;iBAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,WAAW,CAAC;iBAClD,IAAI,CAAC,IAAI,CAAC,GAAG,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,IAAI,CAChB,kDAAkD,KAAK,CAAC,SAAS,CAAC,eAAe,yEAAyE,CAC3J,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG;QACrB,uHAAuH;QACvH,0EAA0E;QAC1E,wFAAwF;QACxF,4GAA4G;QAC5G,wGAAwG;KACzG,CAAC;IAEF,MAAM,oBAAoB,GAAG;QAC3B,mFAAmF;QACnF,0IAA0I;QAC1I,KAAK,CAAC,cAAc,CAAC,QAAQ;YAC3B,CAAC,CAAC,wKAAwK;YAC1K,CAAC,CAAC,gIAAgI;QACpI,8HAA8H;KAC/H,CAAC;IAEF,MAAM,mBAAmB,GAAG;QAC1B,qCAAqC,KAAK,CAAC,KAAK,sEAAsE;QACtH,8FAA8F;QAC9F,KAAK,CAAC,KAAK,KAAK,QAAQ;YACtB,CAAC,CAAC,kIAAkI;YACpI,CAAC,CAAC,uDAAuD,KAAK,CAAC,KAAK,wEAAwE;QAC9I,8GAA8G;QAC9G,8FAA8F;KAC/F,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,6CAAqC;QACpD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;QACpF,MAAM,EAAE,EAAE,QAAQ,EAAE,gBAAgB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE;QACjG,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,GAAG,CAAC;YACJ,cAAc,EAAE,qCAAuB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK;SAC3D,CAAC,CAAC;QACH,cAAc;QACd,oBAAoB;QACpB,kBAAkB;QAClB,aAAa;QACb,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,wBAAwB,EAAE;YACxB,YAAY,EAAE,KAAK,CAAC,iBAAiB;YACrC,SAAS,EAAE,KAAK,CAAC,iBAAiB;YAClC,oBAAoB,EAAE,KAAK,CAAC,wBAAwB;YACpD,MAAM,EAAE,KAAK,CAAC,cAAc;SAC7B;QACD,mBAAmB,EAAE;YACnB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,aAAa,EAAE,KAAK,CAAC,iBAAiB;SACvC;QACD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,oBAAoB,EAAE;YACpB,cAAc,EAAE;gBACd,SAAS,EAAE,KAAK,CAAC,uBAAuB;gBACxC,YAAY,EAAE,KAAK,CAAC,0BAA0B;aAC/C;YACD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC;SAChD;QACD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,mBAAmB;QACnB,OAAO;QACP,aAAa,EAAE,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,IAAI,CAAC,qCAAuB,CAA2B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACzE,CAAC;YACD,qCAAuB,CAAC,CAAC,CAAC,CAAC,KAAK;SACjC,CAAC,CACoC;QACxC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAyC;IAC7D,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,GAAG;CACb,CAAC;AAEF,MAAM,WAAW,GAAkC;IACjD,SAAS,EAAE,WAAW;IACtB,cAAc,EAAE,oBAAoB;IACpC,mBAAmB,EAAE,sBAAsB;IAC3C,cAAc,EAAE,eAAe;CAChC,CAAC;AAEF,MAAM,eAAe,GAAmC;IACtD,KAAK,EAAE,OAAO;IACd,kBAAkB,EAAE,oBAAoB;IACxC,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,SAAgB,kCAAkC,CAAC,MAA4B;IAC7E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,KAAK,mBAAmB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CACR,SAAS,MAAM,CAAC,IAAI,qBAAqB,MAAM,CAAC,IAAI,CAAC,QAAQ,uCAAuC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,CACrI,CAAC;IACF,KAAK,CAAC,IAAI,CACR,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,sBACpD,MAAM,CAAC,MAAM,CAAC,QAAQ;QACpB,CAAC,CAAC,8BAA8B;QAChC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,sBAC1C,EAAE,CACH,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,oBAAoB;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,cAAc,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;IACnH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;IAC5H,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,kBAAkB;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,4GAA4G,CAAC,CAAC;IACzH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,CAAC,KAAK,MAAM,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CACvH,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,wBAAwB,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvG,KAAK,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/G,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;IACvG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,mBAAmB,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CACR,oCACE,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,IACpF,EAAE,CACH,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,SAAS,CAAC,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAC/F,KAAK,CAAC,IAAI,CACR,uBACE,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MACpG,EAAE,CACH,CAAC;QACF,KAAK,CAAC,IAAI,CACR,sCACE,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MACtG,EAAE,CACH,CAAC;QACF,KAAK,CAAC,IAAI,CACR,kCACE,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,QAAQ,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAC3G,EAAE,CACH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,qCAAqC,MAAM,CAAC,SAAS,CAAC,eAAe,oCAAoC,CAAC,CAAC;IACxH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,uBAAuB,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,YAAY,IAAI,MAAM,aACtF,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,SAAS,IAAI,KAC1D,GAAG,CACJ,CAAC;IACF,KAAK,CAAC,IAAI,CACR,iCAAiC,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,cACnG,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAChE,KAAK,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,UAAU,GAAG,CAC9D,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,2BAA2B,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,CAAC,+BAA+B,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACpG,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,mBAAmB;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CACR,0FAA0F,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CACpH,IAAI,CACL,IAAI,CACN,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAsCD,SAAS,UAAU,CAAC,OAA+B;IACjD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,uGAAuG,CAAC;IACjH,CAAC;IACD,IAAI,OAAO,CAAC,UAAU;QAAE,OAAO,wEAAwE,CAAC;IACxG,OAAO,gEAAgE,CAAC;AAC1E,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAoB,EAAE,WAA6B;IACtF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC7F,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAElD,MAAM,sBAAsB,GAC1B,gBAAgB,GAAG,CAAC;QAClB,CAAC,CAAC,gCAAgC,KAAK,CAAC,KAAK,EAAE;QAC/C,CAAC,CAAC,+BAA+B,KAAK,CAAC,KAAK,oCAAoC,CAAC;IAErF,OAAO;QACL,aAAa,EAAE,wCAAgC;QAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE;QACtC,UAAU,EAAE,EAAE,QAAQ,EAAE,gBAAgB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;QACxE,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;QACH,KAAK,EAAE;YACL,aAAa,EAAE;gBACb,IAAI,EAAE,KAAK,CAAC,iBAAiB;gBAC7B,MAAM,EAAE,KAAK,CAAC,cAAc;gBAC5B,SAAS,EAAE,KAAK,CAAC,iBAAiB;aACnC;YACD,aAAa,EAAE;gBACb,IAAI,EAAE,KAAK,CAAC,iBAAiB;gBAC7B,SAAS,EAAE,KAAK,CAAC,iBAAiB;gBAClC,YAAY,EAAE,KAAK,CAAC,wBAAwB;aAC7C;YACD,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,iBAAiB,EAAE;YAC1E,cAAc,EAAE;gBACd,SAAS,EAAE,KAAK,CAAC,uBAAuB;gBACxC,YAAY,EAAE,KAAK,CAAC,0BAA0B;aAC/C;SACF;QACD,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE;YACZ,wBAAwB,EAAE,KAAK,CAAC,cAAc,CAAC,UAAU;YACzD,sBAAsB,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ;YACrD,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC;YACvC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,UAAU;SAC5C;QACD,sBAAsB;QACtB,OAAO;QACP,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE;KACzD,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,kFAAkF;AAClF,SAAgB,8BAA8B,CAAC,KAAc,EAAE,KAAK,GAAG,0BAA0B;IAC/F,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,IAAA,6BAAe,EAAC,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}

package/dist/utils/eval-demo.d.ts

@@ -0,0 +1,97 @@
+/**
+ * `neurcode eval demo` — the one-command local enterprise demo runner.
+ *
+ * Drives a complete, safe, deterministic governance loop against a throwaway
+ * fixture repository and produces a source-free enterprise report + dashboard
+ * summary. A first-time engineering manager or senior engineer can run a single
+ * command, watch the runtime allow a safe edit, block a protected boundary,
+ * contain an exact-path approval, keep a neighbor blocked, and export a
+ * source-free AI Change Record — without founder handholding, GitHub Actions, or
+ * cloud authentication.
+ *
+ * The loop is driven by self-spawning the *real* built CLI against the fixture,
+ * so what an evaluator sees is the actual product enforcing — not a re-implemented
+ * mock. Every expected assertion is checked; any critical failure fails the run
+ * loudly and the report records exactly which checkpoint did not hold.
+ *
+ * Hard rules (shared with utils/guided-eval.ts):
+ *   - Source-free: only paths, owners, symbol names, counts, verdicts, hashes,
+ *     and tier labels are read or emitted. {@link assertEnterpriseEvalSourceFree}
+ *     is the backstop before anything is written.
+ *   - Honest trust posture: self-attested local record unless a backend signing
+ *     key is configured and a receipt actually verifies. Never claims public-key
+ *     cryptographic signing for an HMAC backend receipt.
+ *   - The only writers are the fixture scaffold and the `.neurcode/eval/`
+ *     report/summary artifacts (gitignored). User source is never touched.
+ */
+import { type GuidedEvalAgent, type GuidedEvalEnforcement } from './guided-eval';
+import { type DemoCheckpoint, type EnterpriseEvalReport, type EvalDemoFacts, type EvalDemoSummary } from './enterprise-eval-report';
+export declare const EVAL_DEMO_RUN_SCHEMA_VERSION: "neurcode.eval-demo-run.v1";
+/**
+ * Resolve the entry of the *running* CLI so the demo drives the real product.
+ * Works under a global install, `npx`, and local development. Prefers the
+ * compiled layout (dist/commands/eval-demo.js → ../index.js), then argv[1].
+ */
+export declare function resolveCliEntry(): string;
+export type PreflightStatus = 'ok' | 'warn' | 'info';
+export interface PreflightCheck {
+    id: string;
+    label: string;
+    status: PreflightStatus;
+    detail: string;
+    recovery?: string;
+}
+export interface EvalDemoPreflight {
+    schemaVersion: 'neurcode.eval-preflight.v1';
+    generatedAt: string;
+    agent: GuidedEvalAgent;
+    ok: boolean;
+    checks: PreflightCheck[];
+    backendSigningConfigured: boolean;
+}
+/**
+ * Buyer-friendly preflight: Node/npm, CLI version + multiple-install recovery,
+ * repo + fixture state, GitHub Actions (explicitly not required), and whether
+ * evidence will be backend-signed or self-attested. Short and honest.
+ */
+export declare function buildEvalDemoPreflight(repoRoot: string, options?: {
+    agent?: GuidedEvalAgent;
+    generatedAt?: string;
+}): EvalDemoPreflight;
+export interface RunEvalDemoOptions {
+    repoRoot: string;
+    agent?: string;
+    /** Skip the actual loop and only return preflight (used by --preflight). */
+    preflightOnly?: boolean;
+    generatedAt?: string;
+    /** Test seam: override the CLI entry that gets self-spawned. */
+    cliEntry?: string;
+    /** Emit per-step progress lines. */
+    onStep?: (line: string) => void;
+}
+export interface EvalDemoArtifacts {
+    reportMarkdownPath: string;
+    reportJsonPath: string;
+    summaryJsonPath: string;
+    guidedReportMarkdownPath: string;
+}
+export interface EvalDemoRunResult {
+    schemaVersion: typeof EVAL_DEMO_RUN_SCHEMA_VERSION;
+    ok: boolean;
+    agent: GuidedEvalAgent;
+    enforcement: GuidedEvalEnforcement;
+    preflight: EvalDemoPreflight;
+    checkpoints: DemoCheckpoint[];
+    facts: EvalDemoFacts;
+    report: EnterpriseEvalReport;
+    summary: EvalDemoSummary;
+    artifacts: EvalDemoArtifacts;
+}
+/**
+ * Run the complete one-command enterprise demo. Returns a structured result; the
+ * command layer renders it and sets the exit code. Throws only on a programming
+ * error — expected governance failures are recorded as failed checkpoints with
+ * `ok: false`, so the report still explains exactly what did not hold.
+ */
+export declare function runEvalDemo(options: RunEvalDemoOptions): EvalDemoRunResult;
+//# sourceMappingURL=eval-demo.d.ts.map

package/dist/utils/eval-demo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-demo.d.ts","sourceRoot":"","sources":["../../src/utils/eval-demo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,OAAO,EAUL,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAE3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAOL,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAEzB,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAElC,eAAO,MAAM,4BAA4B,EAAG,2BAAoC,CAAC;AAUjF;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAaxC;AAkCD,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,4BAA4B,CAAC;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,eAAe,CAAC;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,wBAAwB,EAAE,OAAO,CAAC;CACnC;AAoCD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,eAAe,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9D,iBAAiB,CAkHnB;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,OAAO,4BAA4B,CAAC;IACnD,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,EAAE,qBAAqB,CAAC;IACnC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,OAAO,EAAE,eAAe,CAAC;IACzB,SAAS,EAAE,iBAAiB,CAAC;CAC9B;AAgCD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,CAgZ1E"}