@neurcode-ai/cli 0.9.64 → 0.9.65

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (252) hide show
  1. package/LICENSE +201 -0
  2. package/dist/commands/brain.d.ts.map +1 -1
  3. package/dist/commands/brain.js +273 -0
  4. package/dist/commands/brain.js.map +1 -1
  5. package/dist/commands/pilot-report.d.ts +9 -0
  6. package/dist/commands/pilot-report.d.ts.map +1 -0
  7. package/dist/commands/pilot-report.js +176 -0
  8. package/dist/commands/pilot-report.js.map +1 -0
  9. package/dist/commands/remediate-governance.d.ts +54 -0
  10. package/dist/commands/remediate-governance.d.ts.map +1 -0
  11. package/dist/commands/remediate-governance.js +375 -0
  12. package/dist/commands/remediate-governance.js.map +1 -0
  13. package/dist/commands/remediate.d.ts.map +1 -1
  14. package/dist/commands/remediate.js.map +1 -1
  15. package/dist/commands/replay.d.ts.map +1 -1
  16. package/dist/commands/replay.js +30 -0
  17. package/dist/commands/replay.js.map +1 -1
  18. package/dist/commands/verify.d.ts.map +1 -1
  19. package/dist/commands/verify.js +307 -24
  20. package/dist/commands/verify.js.map +1 -1
  21. package/dist/daemon/server.d.ts.map +1 -1
  22. package/dist/daemon/server.js +1078 -0
  23. package/dist/daemon/server.js.map +1 -1
  24. package/dist/explainability/DeterminismClassifier.d.ts +34 -0
  25. package/dist/explainability/DeterminismClassifier.d.ts.map +1 -0
  26. package/dist/explainability/DeterminismClassifier.js +104 -0
  27. package/dist/explainability/DeterminismClassifier.js.map +1 -0
  28. package/dist/explainability/ViolationFormatter.d.ts +32 -0
  29. package/dist/explainability/ViolationFormatter.d.ts.map +1 -0
  30. package/dist/explainability/ViolationFormatter.js +252 -0
  31. package/dist/explainability/ViolationFormatter.js.map +1 -0
  32. package/dist/explainability/index.d.ts +15 -0
  33. package/dist/explainability/index.d.ts.map +1 -0
  34. package/dist/explainability/index.js +94 -0
  35. package/dist/explainability/index.js.map +1 -0
  36. package/dist/explainability/types.d.ts +37 -0
  37. package/dist/explainability/types.d.ts.map +1 -0
  38. package/dist/explainability/types.js +3 -0
  39. package/dist/explainability/types.js.map +1 -0
  40. package/dist/governance/canonical-pipeline.d.ts +38 -0
  41. package/dist/governance/canonical-pipeline.d.ts.map +1 -0
  42. package/dist/governance/canonical-pipeline.js +448 -0
  43. package/dist/governance/canonical-pipeline.js.map +1 -0
  44. package/dist/governance/structural-on-diff.d.ts +13 -0
  45. package/dist/governance/structural-on-diff.d.ts.map +1 -0
  46. package/dist/governance/structural-on-diff.js +35 -0
  47. package/dist/governance/structural-on-diff.js.map +1 -0
  48. package/dist/governance/structural-policy-merge.d.ts +14 -0
  49. package/dist/governance/structural-policy-merge.d.ts.map +1 -0
  50. package/dist/governance/structural-policy-merge.js +25 -0
  51. package/dist/governance/structural-policy-merge.js.map +1 -0
  52. package/dist/index.js +71 -0
  53. package/dist/index.js.map +1 -1
  54. package/dist/integrations/review-compression/index.d.ts +50 -0
  55. package/dist/integrations/review-compression/index.d.ts.map +1 -0
  56. package/dist/integrations/review-compression/index.js +158 -0
  57. package/dist/integrations/review-compression/index.js.map +1 -0
  58. package/dist/intent-engine/domain-taxonomy.d.ts +42 -0
  59. package/dist/intent-engine/domain-taxonomy.d.ts.map +1 -0
  60. package/dist/intent-engine/domain-taxonomy.js +534 -0
  61. package/dist/intent-engine/domain-taxonomy.js.map +1 -0
  62. package/dist/intent-engine/index.d.ts +1 -0
  63. package/dist/intent-engine/index.d.ts.map +1 -1
  64. package/dist/intent-engine/index.js +6 -1
  65. package/dist/intent-engine/index.js.map +1 -1
  66. package/dist/intent-engine/parser.d.ts.map +1 -1
  67. package/dist/intent-engine/parser.js +47 -0
  68. package/dist/intent-engine/parser.js.map +1 -1
  69. package/dist/intent-engine/semantic-expander.d.ts +104 -0
  70. package/dist/intent-engine/semantic-expander.d.ts.map +1 -0
  71. package/dist/intent-engine/semantic-expander.js +480 -0
  72. package/dist/intent-engine/semantic-expander.js.map +1 -0
  73. package/dist/patch-engine/patterns.d.ts.map +1 -1
  74. package/dist/patch-engine/patterns.js +8 -4
  75. package/dist/patch-engine/patterns.js.map +1 -1
  76. package/dist/semantic/index.d.ts +14 -0
  77. package/dist/semantic/index.d.ts.map +1 -0
  78. package/dist/semantic/index.js +30 -0
  79. package/dist/semantic/index.js.map +1 -0
  80. package/dist/semantic/tfidf-engine.d.ts +81 -0
  81. package/dist/semantic/tfidf-engine.d.ts.map +1 -0
  82. package/dist/semantic/tfidf-engine.js +278 -0
  83. package/dist/semantic/tfidf-engine.js.map +1 -0
  84. package/dist/semantic/vector-store.d.ts +108 -0
  85. package/dist/semantic/vector-store.d.ts.map +1 -0
  86. package/dist/semantic/vector-store.js +321 -0
  87. package/dist/semantic/vector-store.js.map +1 -0
  88. package/dist/structural-rules/context-severity.d.ts +46 -0
  89. package/dist/structural-rules/context-severity.d.ts.map +1 -0
  90. package/dist/structural-rules/context-severity.js +115 -0
  91. package/dist/structural-rules/context-severity.js.map +1 -0
  92. package/dist/structural-rules/distributed/DS001-saga-rollback-absence.d.ts +11 -0
  93. package/dist/structural-rules/distributed/DS001-saga-rollback-absence.d.ts.map +1 -0
  94. package/dist/structural-rules/distributed/DS001-saga-rollback-absence.js +212 -0
  95. package/dist/structural-rules/distributed/DS001-saga-rollback-absence.js.map +1 -0
  96. package/dist/structural-rules/distributed/DS002-missing-correlation-id.d.ts +11 -0
  97. package/dist/structural-rules/distributed/DS002-missing-correlation-id.d.ts.map +1 -0
  98. package/dist/structural-rules/distributed/DS002-missing-correlation-id.js +213 -0
  99. package/dist/structural-rules/distributed/DS002-missing-correlation-id.js.map +1 -0
  100. package/dist/structural-rules/distributed/index.d.ts +3 -0
  101. package/dist/structural-rules/distributed/index.d.ts.map +1 -0
  102. package/dist/structural-rules/distributed/index.js +8 -0
  103. package/dist/structural-rules/distributed/index.js.map +1 -0
  104. package/dist/structural-rules/engine.d.ts +25 -0
  105. package/dist/structural-rules/engine.d.ts.map +1 -0
  106. package/dist/structural-rules/engine.js +90 -0
  107. package/dist/structural-rules/engine.js.map +1 -0
  108. package/dist/structural-rules/index.d.ts +41 -0
  109. package/dist/structural-rules/index.d.ts.map +1 -0
  110. package/dist/structural-rules/index.js +141 -0
  111. package/dist/structural-rules/index.js.map +1 -0
  112. package/dist/structural-rules/python/PY001-asyncio-task-without-cancel.d.ts +11 -0
  113. package/dist/structural-rules/python/PY001-asyncio-task-without-cancel.d.ts.map +1 -0
  114. package/dist/structural-rules/python/PY001-asyncio-task-without-cancel.js +66 -0
  115. package/dist/structural-rules/python/PY001-asyncio-task-without-cancel.js.map +1 -0
  116. package/dist/structural-rules/python/PY002-unbounded-dict-singleton.d.ts +11 -0
  117. package/dist/structural-rules/python/PY002-unbounded-dict-singleton.d.ts.map +1 -0
  118. package/dist/structural-rules/python/PY002-unbounded-dict-singleton.js +135 -0
  119. package/dist/structural-rules/python/PY002-unbounded-dict-singleton.js.map +1 -0
  120. package/dist/structural-rules/python/PY003-broad-except-clause.d.ts +11 -0
  121. package/dist/structural-rules/python/PY003-broad-except-clause.d.ts.map +1 -0
  122. package/dist/structural-rules/python/PY003-broad-except-clause.js +86 -0
  123. package/dist/structural-rules/python/PY003-broad-except-clause.js.map +1 -0
  124. package/dist/structural-rules/python/PY004-swallowed-async-exception.d.ts +11 -0
  125. package/dist/structural-rules/python/PY004-swallowed-async-exception.d.ts.map +1 -0
  126. package/dist/structural-rules/python/PY004-swallowed-async-exception.js +167 -0
  127. package/dist/structural-rules/python/PY004-swallowed-async-exception.js.map +1 -0
  128. package/dist/structural-rules/python/PY005-fastapi-without-pydantic.d.ts +11 -0
  129. package/dist/structural-rules/python/PY005-fastapi-without-pydantic.d.ts.map +1 -0
  130. package/dist/structural-rules/python/PY005-fastapi-without-pydantic.js +154 -0
  131. package/dist/structural-rules/python/PY005-fastapi-without-pydantic.js.map +1 -0
  132. package/dist/structural-rules/python/PY006-blocking-io-in-async.d.ts +11 -0
  133. package/dist/structural-rules/python/PY006-blocking-io-in-async.d.ts.map +1 -0
  134. package/dist/structural-rules/python/PY006-blocking-io-in-async.js +130 -0
  135. package/dist/structural-rules/python/PY006-blocking-io-in-async.js.map +1 -0
  136. package/dist/structural-rules/python/PY007-sqlalchemy-session-leak.d.ts +11 -0
  137. package/dist/structural-rules/python/PY007-sqlalchemy-session-leak.d.ts.map +1 -0
  138. package/dist/structural-rules/python/PY007-sqlalchemy-session-leak.js +93 -0
  139. package/dist/structural-rules/python/PY007-sqlalchemy-session-leak.js.map +1 -0
  140. package/dist/structural-rules/python/PY008-celery-task-without-retry.d.ts +11 -0
  141. package/dist/structural-rules/python/PY008-celery-task-without-retry.d.ts.map +1 -0
  142. package/dist/structural-rules/python/PY008-celery-task-without-retry.js +154 -0
  143. package/dist/structural-rules/python/PY008-celery-task-without-retry.js.map +1 -0
  144. package/dist/structural-rules/python/PY009-unsafe-pickle-deserialization.d.ts +11 -0
  145. package/dist/structural-rules/python/PY009-unsafe-pickle-deserialization.d.ts.map +1 -0
  146. package/dist/structural-rules/python/PY009-unsafe-pickle-deserialization.js +133 -0
  147. package/dist/structural-rules/python/PY009-unsafe-pickle-deserialization.js.map +1 -0
  148. package/dist/structural-rules/python/PY010-leaked-aiohttp-session.d.ts +11 -0
  149. package/dist/structural-rules/python/PY010-leaked-aiohttp-session.d.ts.map +1 -0
  150. package/dist/structural-rules/python/PY010-leaked-aiohttp-session.js +80 -0
  151. package/dist/structural-rules/python/PY010-leaked-aiohttp-session.js.map +1 -0
  152. package/dist/structural-rules/rules/SR001-swallowed-async-rejection.d.ts +11 -0
  153. package/dist/structural-rules/rules/SR001-swallowed-async-rejection.d.ts.map +1 -0
  154. package/dist/structural-rules/rules/SR001-swallowed-async-rejection.js +145 -0
  155. package/dist/structural-rules/rules/SR001-swallowed-async-rejection.js.map +1 -0
  156. package/dist/structural-rules/rules/SR002-unbounded-collection.d.ts +11 -0
  157. package/dist/structural-rules/rules/SR002-unbounded-collection.d.ts.map +1 -0
  158. package/dist/structural-rules/rules/SR002-unbounded-collection.js +196 -0
  159. package/dist/structural-rules/rules/SR002-unbounded-collection.js.map +1 -0
  160. package/dist/structural-rules/rules/SR003-timer-without-cleanup.d.ts +11 -0
  161. package/dist/structural-rules/rules/SR003-timer-without-cleanup.d.ts.map +1 -0
  162. package/dist/structural-rules/rules/SR003-timer-without-cleanup.js +148 -0
  163. package/dist/structural-rules/rules/SR003-timer-without-cleanup.js.map +1 -0
  164. package/dist/structural-rules/rules/SR004-request-boundary-no-validation.d.ts +11 -0
  165. package/dist/structural-rules/rules/SR004-request-boundary-no-validation.d.ts.map +1 -0
  166. package/dist/structural-rules/rules/SR004-request-boundary-no-validation.js +162 -0
  167. package/dist/structural-rules/rules/SR004-request-boundary-no-validation.js.map +1 -0
  168. package/dist/structural-rules/rules/SR005-halfopen-probe-gate.d.ts +11 -0
  169. package/dist/structural-rules/rules/SR005-halfopen-probe-gate.d.ts.map +1 -0
  170. package/dist/structural-rules/rules/SR005-halfopen-probe-gate.js +150 -0
  171. package/dist/structural-rules/rules/SR005-halfopen-probe-gate.js.map +1 -0
  172. package/dist/structural-rules/rules/SR006-fanout-error-sanitization.d.ts +11 -0
  173. package/dist/structural-rules/rules/SR006-fanout-error-sanitization.d.ts.map +1 -0
  174. package/dist/structural-rules/rules/SR006-fanout-error-sanitization.js +161 -0
  175. package/dist/structural-rules/rules/SR006-fanout-error-sanitization.js.map +1 -0
  176. package/dist/structural-rules/rules/SR007-cross-request-error.d.ts +11 -0
  177. package/dist/structural-rules/rules/SR007-cross-request-error.d.ts.map +1 -0
  178. package/dist/structural-rules/rules/SR007-cross-request-error.js +175 -0
  179. package/dist/structural-rules/rules/SR007-cross-request-error.js.map +1 -0
  180. package/dist/structural-rules/rules/SR008-background-task-orphan.d.ts +11 -0
  181. package/dist/structural-rules/rules/SR008-background-task-orphan.d.ts.map +1 -0
  182. package/dist/structural-rules/rules/SR008-background-task-orphan.js +176 -0
  183. package/dist/structural-rules/rules/SR008-background-task-orphan.js.map +1 -0
  184. package/dist/structural-rules/rules/SR009-missing-retry-backoff.d.ts +11 -0
  185. package/dist/structural-rules/rules/SR009-missing-retry-backoff.d.ts.map +1 -0
  186. package/dist/structural-rules/rules/SR009-missing-retry-backoff.js +168 -0
  187. package/dist/structural-rules/rules/SR009-missing-retry-backoff.js.map +1 -0
  188. package/dist/structural-rules/rules/SR010-retry-storm.d.ts +11 -0
  189. package/dist/structural-rules/rules/SR010-retry-storm.d.ts.map +1 -0
  190. package/dist/structural-rules/rules/SR010-retry-storm.js +181 -0
  191. package/dist/structural-rules/rules/SR010-retry-storm.js.map +1 -0
  192. package/dist/structural-rules/rules/SR011-event-listener-leak.d.ts +11 -0
  193. package/dist/structural-rules/rules/SR011-event-listener-leak.d.ts.map +1 -0
  194. package/dist/structural-rules/rules/SR011-event-listener-leak.js +208 -0
  195. package/dist/structural-rules/rules/SR011-event-listener-leak.js.map +1 -0
  196. package/dist/structural-rules/rules/SR012-promise-race-leak.d.ts +11 -0
  197. package/dist/structural-rules/rules/SR012-promise-race-leak.d.ts.map +1 -0
  198. package/dist/structural-rules/rules/SR012-promise-race-leak.js +191 -0
  199. package/dist/structural-rules/rules/SR012-promise-race-leak.js.map +1 -0
  200. package/dist/structural-rules/rules/SR013-missing-idempotency-key.d.ts +11 -0
  201. package/dist/structural-rules/rules/SR013-missing-idempotency-key.d.ts.map +1 -0
  202. package/dist/structural-rules/rules/SR013-missing-idempotency-key.js +219 -0
  203. package/dist/structural-rules/rules/SR013-missing-idempotency-key.js.map +1 -0
  204. package/dist/structural-rules/rules/SR014-mutable-closure-async.d.ts +11 -0
  205. package/dist/structural-rules/rules/SR014-mutable-closure-async.d.ts.map +1 -0
  206. package/dist/structural-rules/rules/SR014-mutable-closure-async.js +208 -0
  207. package/dist/structural-rules/rules/SR014-mutable-closure-async.js.map +1 -0
  208. package/dist/structural-rules/rules/SR015-dangling-abort-controller.d.ts +11 -0
  209. package/dist/structural-rules/rules/SR015-dangling-abort-controller.d.ts.map +1 -0
  210. package/dist/structural-rules/rules/SR015-dangling-abort-controller.js +190 -0
  211. package/dist/structural-rules/rules/SR015-dangling-abort-controller.js.map +1 -0
  212. package/dist/structural-rules/rules/SR016-unsafe-json-parse.d.ts +11 -0
  213. package/dist/structural-rules/rules/SR016-unsafe-json-parse.d.ts.map +1 -0
  214. package/dist/structural-rules/rules/SR016-unsafe-json-parse.js +187 -0
  215. package/dist/structural-rules/rules/SR016-unsafe-json-parse.js.map +1 -0
  216. package/dist/structural-rules/suppressions.d.ts +43 -0
  217. package/dist/structural-rules/suppressions.d.ts.map +1 -0
  218. package/dist/structural-rules/suppressions.js +115 -0
  219. package/dist/structural-rules/suppressions.js.map +1 -0
  220. package/dist/structural-rules/types.d.ts +43 -0
  221. package/dist/structural-rules/types.d.ts.map +1 -0
  222. package/dist/structural-rules/types.js +3 -0
  223. package/dist/structural-rules/types.js.map +1 -0
  224. package/dist/utils/brain-cache.d.ts +100 -0
  225. package/dist/utils/brain-cache.d.ts.map +1 -0
  226. package/dist/utils/brain-cache.js +346 -0
  227. package/dist/utils/brain-cache.js.map +1 -0
  228. package/dist/utils/governance-provenance.d.ts +95 -0
  229. package/dist/utils/governance-provenance.d.ts.map +1 -0
  230. package/dist/utils/governance-provenance.js +187 -0
  231. package/dist/utils/governance-provenance.js.map +1 -0
  232. package/dist/utils/pilot-metrics.d.ts +46 -0
  233. package/dist/utils/pilot-metrics.d.ts.map +1 -0
  234. package/dist/utils/pilot-metrics.js +240 -0
  235. package/dist/utils/pilot-metrics.js.map +1 -0
  236. package/dist/utils/replay-runtime.d.ts +34 -0
  237. package/dist/utils/replay-runtime.d.ts.map +1 -1
  238. package/dist/utils/replay-runtime.js +207 -0
  239. package/dist/utils/replay-runtime.js.map +1 -1
  240. package/dist/workspace/cross-repo-graph.d.ts +111 -0
  241. package/dist/workspace/cross-repo-graph.d.ts.map +1 -0
  242. package/dist/workspace/cross-repo-graph.js +450 -0
  243. package/dist/workspace/cross-repo-graph.js.map +1 -0
  244. package/dist/workspace/federated-context.d.ts +144 -0
  245. package/dist/workspace/federated-context.d.ts.map +1 -0
  246. package/dist/workspace/federated-context.js +347 -0
  247. package/dist/workspace/federated-context.js.map +1 -0
  248. package/dist/workspace/index.d.ts +38 -0
  249. package/dist/workspace/index.d.ts.map +1 -0
  250. package/dist/workspace/index.js +48 -0
  251. package/dist/workspace/index.js.map +1 -0
  252. package/package.json +9 -9
@@ -0,0 +1,448 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.findingFromStructural = findingFromStructural;
4
+ exports.findingFromPolicyEngine = findingFromPolicyEngine;
5
+ exports.findingFromIntentIssue = findingFromIntentIssue;
6
+ exports.findingFromFlowIssue = findingFromFlowIssue;
7
+ exports.findingFromRegression = findingFromRegression;
8
+ exports.findingFromScope = findingFromScope;
9
+ exports.findingFromGovernanceConstraint = findingFromGovernanceConstraint;
10
+ exports.buildGovernanceVerificationEnvelope = buildGovernanceVerificationEnvelope;
11
+ exports.attachCanonicalGovernance = attachCanonicalGovernance;
12
+ exports.evaluateGovernanceReplayIntegrity = evaluateGovernanceReplayIntegrity;
13
+ const crypto_1 = require("crypto");
14
+ const contracts_1 = require("@neurcode-ai/contracts");
15
+ function stableFindingId(parts) {
16
+ return (0, crypto_1.createHash)('sha256').update(parts.join('\x1e')).digest('hex').slice(0, 32);
17
+ }
18
+ function rankDeterminism(d) {
19
+ switch (d) {
20
+ case 'deterministic-structural':
21
+ return 4;
22
+ case 'deterministic-semantic':
23
+ return 3;
24
+ case 'heuristic-advisory':
25
+ return 2;
26
+ case 'llm-assisted-planning':
27
+ return 1;
28
+ default:
29
+ return 0;
30
+ }
31
+ }
32
+ function pickStricterDeterminism(a, b) {
33
+ return rankDeterminism(a) >= rankDeterminism(b) ? a : b;
34
+ }
35
+ function mapStructuralDeterminism(v) {
36
+ if (v.determinism === 'heuristic-advisory')
37
+ return 'heuristic-advisory';
38
+ if (v.determinism === 'deterministic-semantic')
39
+ return 'deterministic-semantic';
40
+ if (v.determinism === 'llm-assisted-planning')
41
+ return 'llm-assisted-planning';
42
+ return 'deterministic-structural';
43
+ }
44
+ function mapStructuralSeverity(v) {
45
+ return v.severity === 'BLOCKING' ? 'BLOCKING' : 'ADVISORY';
46
+ }
47
+ function findingFromStructural(v) {
48
+ const determinismClassification = mapStructuralDeterminism(v);
49
+ const id = stableFindingId([
50
+ 'structural',
51
+ v.ruleId,
52
+ v.filePath,
53
+ String(v.line),
54
+ String(v.column),
55
+ v.evidence,
56
+ ]);
57
+ return {
58
+ id,
59
+ category: 'structural',
60
+ sourceSystem: 'structural-rules',
61
+ determinismClassification,
62
+ severity: mapStructuralSeverity(v),
63
+ confidence: v.confidence,
64
+ title: `${v.ruleId} · ${v.ruleName}`,
65
+ evidence: {
66
+ excerpt: v.evidence,
67
+ filePath: v.filePath,
68
+ line: v.line,
69
+ column: v.column,
70
+ structuralHint: v.ruleId,
71
+ },
72
+ operationalImplication: v.operationalRisk,
73
+ remediation: v.remediation,
74
+ structuralMetadata: {
75
+ ruleId: v.ruleId,
76
+ ruleName: v.ruleName,
77
+ policyRef: v.policyRef,
78
+ language: v.language,
79
+ },
80
+ };
81
+ }
82
+ function findingFromPolicyEngine(v) {
83
+ const file = v.file || 'unknown';
84
+ const rule = v.rule || 'policy';
85
+ const id = stableFindingId(['policy-engine', rule, file, String(v.line ?? 0), v.message || '']);
86
+ const blocking = v.severity === 'block';
87
+ return {
88
+ id,
89
+ category: 'policy-engine',
90
+ sourceSystem: 'policy-engine',
91
+ determinismClassification: 'heuristic-advisory',
92
+ severity: blocking ? 'BLOCKING' : 'ADVISORY',
93
+ confidence: blocking ? 0.72 : 0.55,
94
+ title: `Policy · ${rule}`,
95
+ evidence: {
96
+ excerpt: v.message || rule,
97
+ filePath: file,
98
+ line: v.line,
99
+ column: v.column,
100
+ },
101
+ operationalImplication: blocking
102
+ ? 'Change may violate org policy gates (sensitive paths, secrets heuristics, size limits, or custom pack rules).'
103
+ : 'Policy advisory: review before merge.',
104
+ remediation: 'Adjust the change, update policy exception through approved workflow, or narrow diff scope.',
105
+ };
106
+ }
107
+ function findingFromIntentIssue(i) {
108
+ const file = i.files?.[0] ?? 'intent-analysis';
109
+ const id = stableFindingId(['intent', i.rule, file, i.message]);
110
+ return {
111
+ id,
112
+ category: 'intent-conditioned',
113
+ sourceSystem: 'intent-engine',
114
+ determinismClassification: 'deterministic-semantic',
115
+ severity: i.severity === 'high' ? 'BLOCKING' : 'ADVISORY',
116
+ confidence: i.severity === 'high' ? 0.78 : 0.62,
117
+ title: `Intent · ${i.rule}`,
118
+ evidence: { excerpt: i.message, filePath: file },
119
+ operationalImplication: 'Implementation may not match stated intent; risk of shipping incomplete auth, validation, or error handling.',
120
+ remediation: 'Align code with plan intent or update the plan / intent artifact.',
121
+ };
122
+ }
123
+ function findingFromFlowIssue(f) {
124
+ const file = f.files?.[0] ?? 'flow-analysis';
125
+ const id = stableFindingId(['flow', f.rule, file, f.message]);
126
+ return {
127
+ id,
128
+ category: 'flow-connectivity',
129
+ sourceSystem: 'intent-engine',
130
+ determinismClassification: 'deterministic-semantic',
131
+ severity: f.severity === 'high' ? 'BLOCKING' : 'ADVISORY',
132
+ confidence: f.severity === 'high' ? 0.74 : 0.58,
133
+ title: `Flow · ${f.rule}`,
134
+ evidence: { excerpt: f.message, filePath: file },
135
+ operationalImplication: 'Cross-component wiring gap; can cause runtime failures or silent omission of critical paths.',
136
+ remediation: 'Connect required components or document explicit bypass with governance approval.',
137
+ };
138
+ }
139
+ function findingFromRegression(r) {
140
+ const id = stableFindingId(['regression', r.rule, r.message]);
141
+ return {
142
+ id,
143
+ category: 'regression',
144
+ sourceSystem: 'intent-engine',
145
+ determinismClassification: 'deterministic-semantic',
146
+ severity: 'BLOCKING',
147
+ confidence: 0.7,
148
+ title: `Regression · ${r.rule}`,
149
+ evidence: { excerpt: r.message, filePath: 'regression-analysis' },
150
+ operationalImplication: 'Previously covered behaviour appears degraded relative to last verified state.',
151
+ remediation: 'Restore prior safeguards or update signed intent / waiver with rationale.',
152
+ };
153
+ }
154
+ function findingFromScope(file, message) {
155
+ const id = stableFindingId(['scope', file, message]);
156
+ return {
157
+ id,
158
+ category: 'scope',
159
+ sourceSystem: 'policy-engine',
160
+ determinismClassification: 'deterministic-semantic',
161
+ severity: 'BLOCKING',
162
+ confidence: 0.88,
163
+ title: 'Scope guard',
164
+ evidence: { excerpt: message, filePath: file },
165
+ operationalImplication: 'Unplanned files changed; increases blast radius and review load.',
166
+ remediation: 'Limit diff to planned scope or expand plan through governed workflow.',
167
+ };
168
+ }
169
+ function findingFromGovernanceConstraint(message, fileHint) {
170
+ const id = stableFindingId(['constraint', fileHint, message]);
171
+ return {
172
+ id,
173
+ category: 'governance-constraint',
174
+ sourceSystem: 'governance-runtime',
175
+ determinismClassification: 'deterministic-semantic',
176
+ severity: 'BLOCKING',
177
+ confidence: 0.9,
178
+ title: 'Deterministic constraint',
179
+ evidence: { excerpt: message, filePath: fileHint },
180
+ operationalImplication: 'Compiled intent/policy constraint violated; deterministic mismatch with approved artifacts.',
181
+ remediation: 'Fix code to satisfy constraint or regenerate compiled policy with explicit approval.',
182
+ };
183
+ }
184
+ function behavioralClusterKey(finding) {
185
+ const text = `${finding.title} ${finding.operationalImplication}`.toLowerCase();
186
+ if (text.includes('queue') || text.includes('retry') || text.includes('async')) {
187
+ return 'async-failure-propagation-risk';
188
+ }
189
+ if (text.includes('scope') || text.includes('blast radius') || text.includes('plan')) {
190
+ return 'scope-and-blast-radius-risk';
191
+ }
192
+ if (text.includes('auth') || text.includes('identity') || text.includes('token')) {
193
+ return 'auth-trust-boundary-risk';
194
+ }
195
+ if (text.includes('flow') || text.includes('connect')) {
196
+ return 'service-flow-connectivity-risk';
197
+ }
198
+ return 'operational-governance-risk';
199
+ }
200
+ function compressByLocation(findings) {
201
+ const buckets = new Map();
202
+ for (const f of findings) {
203
+ const fp = f.evidence.filePath ?? 'unknown';
204
+ const ln = f.evidence.line ?? 0;
205
+ const sev = f.severity;
206
+ const behavior = behavioralClusterKey(f);
207
+ const key = `${fp}\x00${ln}\x00${sev}\x00${behavior}`;
208
+ const list = buckets.get(key) ?? [];
209
+ list.push(f);
210
+ buckets.set(key, list);
211
+ }
212
+ const merged = [];
213
+ let duplicateCount = 0;
214
+ for (const [, group] of buckets) {
215
+ if (group.length === 1) {
216
+ merged.push(group[0]);
217
+ continue;
218
+ }
219
+ const systems = new Set(group.map((g) => g.sourceSystem));
220
+ if (systems.size < 2) {
221
+ merged.push(...group);
222
+ continue;
223
+ }
224
+ duplicateCount += group.length - 1;
225
+ let primary = group[0];
226
+ for (const next of group.slice(1)) {
227
+ const det = pickStricterDeterminism(primary.determinismClassification, next.determinismClassification);
228
+ const conf = Math.min(primary.confidence, next.confidence);
229
+ const mergedFrom = [...(primary.mergedFrom ?? [primary.id]), ...(next.mergedFrom ?? [next.id])];
230
+ primary = {
231
+ ...primary,
232
+ id: stableFindingId(mergedFrom.sort()),
233
+ determinismClassification: det,
234
+ confidence: conf,
235
+ title: `${primary.title} + ${next.title}`,
236
+ operationalImplication: `${primary.operationalImplication} | ${next.operationalImplication}`,
237
+ remediation: `${primary.remediation} | ${next.remediation}`,
238
+ mergedFrom,
239
+ evidence: {
240
+ ...primary.evidence,
241
+ excerpt: `${primary.evidence.excerpt}\n---\n${next.evidence.excerpt}`,
242
+ },
243
+ };
244
+ }
245
+ merged.push(primary);
246
+ }
247
+ return { merged, duplicateCount };
248
+ }
249
+ function buildReviewerSummary(findings, maxLines = 12) {
250
+ const blocking = findings.filter((f) => f.severity === 'BLOCKING');
251
+ const lines = [];
252
+ const clusters = new Map();
253
+ for (const f of blocking) {
254
+ const key = behavioralClusterKey(f);
255
+ clusters.set(key, (clusters.get(key) ?? 0) + 1);
256
+ }
257
+ for (const [cluster, count] of [...clusters.entries()].sort((a, b) => b[1] - a[1]).slice(0, 4)) {
258
+ lines.push(`Operational cluster: ${cluster} (${count} finding(s))`);
259
+ }
260
+ for (const f of blocking.slice(0, maxLines)) {
261
+ const det = f.determinismClassification;
262
+ const fp = f.evidence.filePath ?? '?';
263
+ const ln = f.evidence.line != null ? `:${f.evidence.line}` : '';
264
+ lines.push(`[${det}] ${fp}${ln} — ${f.title}`);
265
+ }
266
+ if (blocking.length > maxLines) {
267
+ lines.push(`… ${blocking.length - maxLines} more blocking finding(s) omitted from summary`);
268
+ }
269
+ return lines;
270
+ }
271
+ function buildGovernanceVerificationEnvelope(input) {
272
+ const raw = [];
273
+ for (const v of input.structuralViolations ?? []) {
274
+ raw.push(findingFromStructural(v));
275
+ }
276
+ for (const v of input.policyViolations ?? []) {
277
+ raw.push(findingFromPolicyEngine(v));
278
+ }
279
+ for (const i of input.intentIssues ?? []) {
280
+ raw.push(findingFromIntentIssue(i));
281
+ }
282
+ for (const f of input.flowIssues ?? []) {
283
+ raw.push(findingFromFlowIssue(f));
284
+ }
285
+ for (const r of input.regressions ?? []) {
286
+ raw.push(findingFromRegression(r));
287
+ }
288
+ for (const s of input.scopeFiles ?? []) {
289
+ raw.push(findingFromScope(s.file, s.message ?? 'Out of scope'));
290
+ }
291
+ for (const c of input.constraintMessages ?? []) {
292
+ raw.push(findingFromGovernanceConstraint(c.message, c.file ?? '.neurcode/policy-compiled'));
293
+ }
294
+ for (const f of raw) {
295
+ if (input.provenance && !f.provenanceMetadata) {
296
+ f.provenanceMetadata = { ...input.provenance };
297
+ }
298
+ }
299
+ const { merged, duplicateCount } = compressByLocation(raw);
300
+ return {
301
+ schemaVersion: contracts_1.GOVERNANCE_FINDINGS_SCHEMA_VERSION,
302
+ generatedAt: new Date().toISOString(),
303
+ findings: merged,
304
+ compressedDuplicateCount: duplicateCount,
305
+ reviewerSummary: buildReviewerSummary(merged),
306
+ };
307
+ }
308
+ function asStructuralViolations(raw) {
309
+ if (!Array.isArray(raw))
310
+ return [];
311
+ return raw;
312
+ }
313
+ function asRuleViolationsFromPayloadViolations(payload) {
314
+ const violations = payload.violations;
315
+ if (!Array.isArray(violations))
316
+ return [];
317
+ const out = [];
318
+ for (const item of violations) {
319
+ if (!item || typeof item !== 'object' || Array.isArray(item))
320
+ continue;
321
+ const rec = item;
322
+ const rule = typeof rec.rule === 'string' ? rec.rule : typeof rec.policy === 'string' ? rec.policy : 'unknown';
323
+ const file = typeof rec.file === 'string' ? rec.file : 'unknown';
324
+ const sevRaw = typeof rec.severity === 'string' ? rec.severity.toLowerCase() : 'warn';
325
+ const severity = sevRaw === 'block' || sevRaw === 'critical' || sevRaw === 'high' ? 'block' : 'warn';
326
+ const message = typeof rec.message === 'string' ? rec.message : undefined;
327
+ const line = typeof rec.line === 'number'
328
+ ? rec.line
329
+ : typeof rec.startLine === 'number'
330
+ ? rec.startLine
331
+ : undefined;
332
+ if (String(rule).startsWith('structural:')) {
333
+ continue;
334
+ }
335
+ out.push({ rule, file, severity, message, line });
336
+ }
337
+ return out;
338
+ }
339
+ function scopeHintsFromPayload(payload) {
340
+ const scopeIssues = payload.scopeIssues;
341
+ const bloatFiles = payload.bloatFiles;
342
+ const out = [];
343
+ if (Array.isArray(scopeIssues)) {
344
+ for (const item of scopeIssues) {
345
+ if (item && typeof item === 'object' && !Array.isArray(item)) {
346
+ const rec = item;
347
+ if (typeof rec.file === 'string') {
348
+ out.push({ file: rec.file, message: typeof rec.message === 'string' ? rec.message : undefined });
349
+ }
350
+ }
351
+ }
352
+ }
353
+ if (Array.isArray(bloatFiles)) {
354
+ for (const f of bloatFiles) {
355
+ if (typeof f === 'string')
356
+ out.push({ file: f, message: 'File modified outside the plan' });
357
+ }
358
+ }
359
+ return out;
360
+ }
361
+ /**
362
+ * Merge canonical governance envelope onto a verify JSON payload (mutates copy).
363
+ */
364
+ function attachCanonicalGovernance(payload) {
365
+ const structuralViolations = asStructuralViolations(payload.structuralViolations);
366
+ const policyViolations = asRuleViolationsFromPayloadViolations(payload);
367
+ const intentIssues = Array.isArray(payload.intentIssues) ? payload.intentIssues : [];
368
+ const flowIssues = Array.isArray(payload.flowIssues) ? payload.flowIssues : [];
369
+ const regressions = Array.isArray(payload.regressions) ? payload.regressions : [];
370
+ const scopeFiles = scopeHintsFromPayload(payload);
371
+ const planId = typeof payload.planId === 'string' ? payload.planId : null;
372
+ const verificationSource = typeof payload.verificationSource === 'string' ? payload.verificationSource : undefined;
373
+ const envelope = buildGovernanceVerificationEnvelope({
374
+ structuralViolations,
375
+ policyViolations,
376
+ intentIssues,
377
+ flowIssues,
378
+ regressions,
379
+ scopeFiles,
380
+ provenance: {
381
+ planId,
382
+ verificationSource,
383
+ generatedAt: new Date().toISOString(),
384
+ },
385
+ });
386
+ return {
387
+ ...payload,
388
+ governanceVerification: envelope,
389
+ governanceFindings: envelope.findings,
390
+ };
391
+ }
392
+ function evaluateGovernanceReplayIntegrity(input) {
393
+ const missingArtifacts = [];
394
+ const provenanceMismatches = [];
395
+ const graphMismatches = [];
396
+ const semanticTruncationMismatches = [];
397
+ const notes = [];
398
+ const ev = input.evidencePayload.governanceVerification;
399
+ const rec = input.reconstructedPayload?.governanceVerification;
400
+ if (!ev && !rec) {
401
+ notes.push('No canonical governance envelope present on evidence or reconstruction.');
402
+ return {
403
+ status: 'bounded-degradation',
404
+ missingArtifacts,
405
+ provenanceMismatches,
406
+ graphMismatches,
407
+ semanticTruncationMismatches,
408
+ notes,
409
+ };
410
+ }
411
+ if (ev && !rec) {
412
+ missingArtifacts.push('governanceVerification missing from reconstructed payload');
413
+ }
414
+ else if (ev && rec) {
415
+ if (ev.schemaVersion !== rec.schemaVersion) {
416
+ provenanceMismatches.push(`schemaVersion drift: evidence=${ev.schemaVersion} replay=${rec.schemaVersion}`);
417
+ }
418
+ if (ev.findings.length !== rec.findings.length) {
419
+ provenanceMismatches.push(`findings count drift: evidence=${ev.findings.length} replay=${rec.findings.length}`);
420
+ }
421
+ const evIds = new Set(ev.findings.map((f) => f.id));
422
+ for (const f of rec.findings) {
423
+ if (!evIds.has(f.id)) {
424
+ provenanceMismatches.push(`unexpected finding id in replay: ${f.id}`);
425
+ }
426
+ }
427
+ }
428
+ const trunc = input.evidencePayload.semanticTruncation
429
+ ?? input.reconstructedPayload?.semanticTruncation;
430
+ if (trunc === true) {
431
+ semanticTruncationMismatches.push('Semantic or index truncation flagged on payload');
432
+ }
433
+ const status = missingArtifacts.length === 0
434
+ && provenanceMismatches.length === 0
435
+ && graphMismatches.length === 0
436
+ && semanticTruncationMismatches.length === 0
437
+ ? 'exact'
438
+ : 'bounded-degradation';
439
+ return {
440
+ status,
441
+ missingArtifacts,
442
+ provenanceMismatches,
443
+ graphMismatches,
444
+ semanticTruncationMismatches,
445
+ notes,
446
+ };
447
+ }
448
+ //# sourceMappingURL=canonical-pipeline.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"canonical-pipeline.js","sourceRoot":"","sources":["../../src/governance/canonical-pipeline.ts"],"names":[],"mappings":";;AAiDA,sDAkCC;AAED,0DAyBC;AAED,wDAgBC;AAED,oDAeC;AAED,sDAcC;AAED,4CAcC;AAED,0EAcC;AAmGD,kFAmDC;AA0DD,8DA+BC;AAED,8EAiEC;AAnfD,mCAAoC;AAQpC,sDAA4E;AAO5E,SAAS,eAAe,CAAC,KAAe;IACtC,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,eAAe,CAAC,CAA4B;IACnD,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,0BAA0B;YAC7B,OAAO,CAAC,CAAC;QACX,KAAK,wBAAwB;YAC3B,OAAO,CAAC,CAAC;QACX,KAAK,oBAAoB;YACvB,OAAO,CAAC,CAAC;QACX,KAAK,uBAAuB;YAC1B,OAAO,CAAC,CAAC;QACX;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,CAA4B,EAAE,CAA4B;IACzF,OAAO,eAAe,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,wBAAwB,CAAC,CAAsB;IACtD,IAAI,CAAC,CAAC,WAAW,KAAK,oBAAoB;QAAE,OAAO,oBAAoB,CAAC;IACxE,IAAI,CAAC,CAAC,WAAW,KAAK,wBAAwB;QAAE,OAAO,wBAAwB,CAAC;IAChF,IAAI,CAAC,CAAC,WAAW,KAAK,uBAAuB;QAAE,OAAO,uBAAuB,CAAC;IAC9E,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAsB;IACnD,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7D,CAAC;AAED,SAAgB,qBAAqB,CAAC,CAAsB;IAC1D,MAAM,yBAAyB,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,YAAY;QACZ,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,QAAQ;QACV,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACd,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAChB,CAAC,CAAC,QAAQ;KACX,CAAC,CAAC;IACH,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,kBAAkB;QAChC,yBAAyB;QACzB,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAClC,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE;QACpC,QAAQ,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,QAAQ;YACnB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,cAAc,EAAE,CAAC,CAAC,MAAM;SACzB;QACD,sBAAsB,EAAE,CAAC,CAAC,eAAe;QACzC,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,kBAAkB,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CAAC,CAAgB;IACtD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC;IAChC,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;IACxC,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,eAAe;QACzB,YAAY,EAAE,eAAe;QAC7B,yBAAyB,EAAE,oBAAoB;QAC/C,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QAC5C,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAClC,KAAK,EAAE,YAAY,IAAI,EAAE;QACzB,QAAQ,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;YAC1B,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB;QACD,sBAAsB,EACpB,QAAQ;YACN,CAAC,CAAC,+GAA+G;YACjH,CAAC,CAAC,uCAAuC;QAC7C,WAAW,EAAE,6FAA6F;KAC3G,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CAAC,CAAc;IACnD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC;IAC/C,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,oBAAoB;QAC9B,YAAY,EAAE,eAAe;QAC7B,yBAAyB,EAAE,wBAAwB;QACnD,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QACzD,UAAU,EAAE,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC/C,KAAK,EAAE,YAAY,CAAC,CAAC,IAAI,EAAE;QAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;QAChD,sBAAsB,EACpB,8GAA8G;QAChH,WAAW,EAAE,mEAAmE;KACjF,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAAC,CAAY;IAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC;IAC7C,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,eAAe;QAC7B,yBAAyB,EAAE,wBAAwB;QACnD,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QACzD,UAAU,EAAE,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC/C,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE;QACzB,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;QAChD,sBAAsB,EAAE,8FAA8F;QACtH,WAAW,EAAE,mFAAmF;KACjG,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CAAC,CAAkB;IACtD,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,eAAe;QAC7B,yBAAyB,EAAE,wBAAwB;QACnD,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,GAAG;QACf,KAAK,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE;QAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE;QACjE,sBAAsB,EAAE,gFAAgF;QACxG,WAAW,EAAE,2EAA2E;KACzF,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,eAAe;QAC7B,yBAAyB,EAAE,wBAAwB;QACnD,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,aAAa;QACpB,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9C,sBAAsB,EAAE,kEAAkE;QAC1F,WAAW,EAAE,uEAAuE;KACrF,CAAC;AACJ,CAAC;AAED,SAAgB,+BAA+B,CAAC,OAAe,EAAE,QAAgB;IAC/E,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,uBAAuB;QACjC,YAAY,EAAE,oBAAoB;QAClC,yBAAyB,EAAE,wBAAwB;QACnD,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,GAAG;QACf,KAAK,EAAE,0BAA0B;QACjC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE;QAClD,sBAAsB,EAAE,6FAA6F;QACrH,WAAW,EAAE,sFAAsF;KACpG,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA0B;IACtD,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC,WAAW,EAAE,CAAC;IAChF,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjF,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IACD,OAAO,6BAA6B,CAAC;AACvC,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA6B;IAIvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC;QAC5C,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC;QACvB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QAED,cAAc,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,uBAAuB,CAAC,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACvG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChG,OAAO,GAAG;gBACR,GAAG,OAAO;gBACV,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACtC,yBAAyB,EAAE,GAAG;gBAC9B,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,EAAE;gBACzC,sBAAsB,EAAE,GAAG,OAAO,CAAC,sBAAsB,MAAM,IAAI,CAAC,sBAAsB,EAAE;gBAC5F,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,MAAM,IAAI,CAAC,WAAW,EAAE;gBAC3D,UAAU;gBACV,QAAQ,EAAE;oBACR,GAAG,OAAO,CAAC,QAAQ;oBACnB,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,UAAU,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;iBACtE;aACF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,oBAAoB,CAAC,QAA6B,EAAE,QAAQ,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/F,KAAK,CAAC,IAAI,CAAC,wBAAwB,OAAO,KAAK,KAAK,cAAc,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,CAAC,CAAC,yBAAyB,CAAC;QACxC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC;QACtC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,MAAM,GAAG,QAAQ,gDAAgD,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,mCAAmC,CACjD,KASC;IAED,MAAM,GAAG,GAAwB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,IAAI,2BAA2B,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;YAC9C,CAAC,CAAC,kBAAkB,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAE3D,OAAO;QACL,aAAa,EAAE,8CAAkC;QACjD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,QAAQ,EAAE,MAAM;QAChB,wBAAwB,EAAE,cAAc;QACxC,eAAe,EAAE,oBAAoB,CAAC,MAAM,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAY;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,GAA4B,CAAC;AACtC,CAAC;AAED,SAAS,qCAAqC,CAAC,OAAgC;IAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACvE,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/G,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACrG,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC1B,CAAC,CAAC,GAAG,CAAC,IAAI;YACV,CAAC,CAAC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;gBACjC,CAAC,CAAC,GAAG,CAAC,SAAS;gBACf,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgC;IAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,GAAG,GAA8C,EAAE,CAAC;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,MAAM,GAAG,GAAG,IAA+B,CAAC;gBAC5C,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACjC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBACnG,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,SAAgB,yBAAyB,CAAC,OAAgC;IACxE,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClF,MAAM,gBAAgB,GAAG,qCAAqC,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,YAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;IACxG,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,UAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,WAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAElD,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,kBAAkB,GACtB,OAAO,OAAO,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1F,MAAM,QAAQ,GAAG,mCAAmC,CAAC;QACnD,oBAAoB;QACpB,gBAAgB;QAChB,YAAY;QACZ,UAAU;QACV,WAAW;QACX,UAAU;QACV,UAAU,EAAE;YACV,MAAM;YACN,kBAAkB;YAClB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,OAAO;QACV,sBAAsB,EAAE,QAAQ;QAChC,kBAAkB,EAAE,QAAQ,CAAC,QAAQ;KACtC,CAAC;AACJ,CAAC;AAED,SAAgB,iCAAiC,CAAC,KAGjD;IACC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAC1C,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,4BAA4B,GAAa,EAAE,CAAC;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC,sBAAoE,CAAC;IACtG,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,EAAE,sBAAoE,CAAC;IAE7G,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACtF,OAAO;YACL,MAAM,EAAE,qBAAqB;YAC7B,gBAAgB;YAChB,oBAAoB;YACpB,eAAe;YACf,4BAA4B;YAC5B,KAAK;SACN,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACf,gBAAgB,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,EAAE,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC;YAC3C,oBAAoB,CAAC,IAAI,CAAC,iCAAiC,EAAE,CAAC,aAAa,WAAW,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC/C,oBAAoB,CAAC,IAAI,CAAC,kCAAkC,EAAE,CAAC,QAAQ,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrB,oBAAoB,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GACR,KAAK,CAAC,eAAe,CAAC,kBAA0C;WAC7D,KAAK,CAAC,oBAAoB,EAAE,kBAA0C,CAAC;IAC7E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,4BAA4B,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,MAAM,GACV,gBAAgB,CAAC,MAAM,KAAK,CAAC;WAC1B,oBAAoB,CAAC,MAAM,KAAK,CAAC;WACjC,eAAe,CAAC,MAAM,KAAK,CAAC;WAC5B,4BAA4B,CAAC,MAAM,KAAK,CAAC;QAC1C,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,qBAAqB,CAAC;IAE5B,OAAO;QACL,MAAM;QACN,gBAAgB;QAChB,oBAAoB;QACpB,eAAe;QACf,4BAA4B;QAC5B,KAAK;KACN,CAAC;AACJ,CAAC"}
@@ -0,0 +1,13 @@
1
+ import { type StructuralViolation } from '../structural-rules';
2
+ export interface StructuralOnDiffResult {
3
+ violations: StructuralViolation[];
4
+ rulesApplied: string[];
5
+ suppressedCount: number;
6
+ }
7
+ /**
8
+ * Run the default structural rule set on files touched by the diff. No I/O beyond reads.
9
+ */
10
+ export declare function runStructuralOnDiffFiles(projectRoot: string, diffFiles: Array<{
11
+ path: string;
12
+ }>): StructuralOnDiffResult;
13
+ //# sourceMappingURL=structural-on-diff.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"structural-on-diff.d.ts","sourceRoot":"","sources":["../../src/governance/structural-on-diff.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqC,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAElG,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACjC,sBAAsB,CAsBxB"}
@@ -0,0 +1,35 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.runStructuralOnDiffFiles = runStructuralOnDiffFiles;
4
+ const fs_1 = require("fs");
5
+ const path_1 = require("path");
6
+ const structural_rules_1 = require("../structural-rules");
7
+ /**
8
+ * Run the default structural rule set on files touched by the diff. No I/O beyond reads.
9
+ */
10
+ function runStructuralOnDiffFiles(projectRoot, diffFiles) {
11
+ const engine = (0, structural_rules_1.createDefaultStructuralRuleEngine)();
12
+ const filesToAnalyze = [];
13
+ for (const df of diffFiles) {
14
+ const absPath = (0, path_1.join)(projectRoot, df.path);
15
+ if (!(0, fs_1.existsSync)(absPath))
16
+ continue;
17
+ try {
18
+ const sourceText = (0, fs_1.readFileSync)(absPath, 'utf-8');
19
+ filesToAnalyze.push({ filePath: df.path, sourceText });
20
+ }
21
+ catch {
22
+ // skip unreadable
23
+ }
24
+ }
25
+ if (filesToAnalyze.length === 0) {
26
+ return { violations: [], rulesApplied: [], suppressedCount: 0 };
27
+ }
28
+ const result = engine.analyze(filesToAnalyze);
29
+ return {
30
+ violations: result.violations,
31
+ rulesApplied: result.rulesApplied,
32
+ suppressedCount: result.suppressedCount,
33
+ };
34
+ }
35
+ //# sourceMappingURL=structural-on-diff.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"structural-on-diff.js","sourceRoot":"","sources":["../../src/governance/structural-on-diff.ts"],"names":[],"mappings":";;AAaA,4DAyBC;AAtCD,2BAA8C;AAC9C,+BAA4B;AAC5B,0DAAkG;AAQlG;;GAEG;AACH,SAAgB,wBAAwB,CACtC,WAAmB,EACnB,SAAkC;IAElC,MAAM,MAAM,GAAG,IAAA,oDAAiC,GAAE,CAAC;IACnD,MAAM,cAAc,GAAoD,EAAE,CAAC;IAC3E,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAA,iBAAY,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,cAAc,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9C,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC;AACJ,CAAC"}
@@ -0,0 +1,14 @@
1
+ import type { StructuralViolation } from '../structural-rules';
2
+ export type PolicyViolationRow = {
3
+ rule: string;
4
+ file: string;
5
+ severity: string;
6
+ message?: string;
7
+ line?: number;
8
+ };
9
+ /**
10
+ * Append structural violations to policy-engine rows so verdicts and JSON violations stay aligned.
11
+ * Dedupes identical structural rule + file + line.
12
+ */
13
+ export declare function mergeStructuralIntoPolicyViolations(policyViolations: PolicyViolationRow[], structuralViolations: StructuralViolation[]): void;
14
+ //# sourceMappingURL=structural-policy-merge.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"structural-policy-merge.d.ts","sourceRoot":"","sources":["../../src/governance/structural-policy-merge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,gBAAgB,EAAE,kBAAkB,EAAE,EACtC,oBAAoB,EAAE,mBAAmB,EAAE,GAC1C,IAAI,CAiBN"}
@@ -0,0 +1,25 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.mergeStructuralIntoPolicyViolations = mergeStructuralIntoPolicyViolations;
4
+ /**
5
+ * Append structural violations to policy-engine rows so verdicts and JSON violations stay aligned.
6
+ * Dedupes identical structural rule + file + line.
7
+ */
8
+ function mergeStructuralIntoPolicyViolations(policyViolations, structuralViolations) {
9
+ const seen = new Set(policyViolations.map((v) => `${v.rule}|${v.file}|${v.line ?? 0}`));
10
+ for (const sv of structuralViolations) {
11
+ const rule = `structural:${sv.ruleId}`;
12
+ const key = `${rule}|${sv.filePath}|${sv.line}`;
13
+ if (seen.has(key))
14
+ continue;
15
+ seen.add(key);
16
+ policyViolations.push({
17
+ file: sv.filePath,
18
+ rule,
19
+ severity: sv.severity === 'BLOCKING' ? 'block' : 'warn',
20
+ message: `[${sv.ruleId}] ${sv.ruleName}: ${sv.operationalRisk}`,
21
+ line: sv.line,
22
+ });
23
+ }
24
+ }
25
+ //# sourceMappingURL=structural-policy-merge.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"structural-policy-merge.js","sourceRoot":"","sources":["../../src/governance/structural-policy-merge.ts"],"names":[],"mappings":";;AAcA,kFAoBC;AAxBD;;;GAGG;AACH,SAAgB,mCAAmC,CACjD,gBAAsC,EACtC,oBAA2C;IAE3C,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAClE,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,gBAAgB,CAAC,IAAI,CAAC;YACpB,IAAI,EAAE,EAAE,CAAC,QAAQ;YACjB,IAAI;YACJ,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YACvD,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC,eAAe,EAAE;YAC/D,IAAI,EAAE,EAAE,CAAC,IAAI;SACd,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}