@openrig/cli 0.4.2 → 0.4.4

package/dist/commands/proof.d.ts

@@ -0,0 +1,54 @@
+import { Command } from "commander";
+/**
+ * `rig proof` — the proof-drop write path (OPR.0.4.4.19 FR-8 + FR-11;
+ * conventions C1 + C2 + C8, D2 attestation).
+ *
+ * CLI-side filesystem only (plan-review + arch-lead confirmed): the drop
+ * validates the C1 header AT THE MOMENT THE EVIDENCE IS IN-HAND, writes the
+ * artifact into the slice's proof/ dir, and echoes the parsed header (the
+ * seat sees what the composer will see). No daemon involvement, no synthetic
+ * qitems, no DB writes.
+ *
+ * LOAD-BEARING boundaries:
+ *   - Validation applies ONLY to drops made through this path. An artifact
+ *     written by any other means (raw file write, existing workflows) is
+ *     NEVER blocked at write time — the backstop is `rig scope audit`
+ *     (FR-10), not a write-path gate on ordinary file I/O.
+ *   - The D2 proof contract + self_check are AGENT JUDGMENT recorded here;
+ *     the drop path ADVISES (exit 0) and never blocks on them. There is no
+ *     configuration that makes any advisory blocking (BR-7).
+ */
+/** C1 ratified closed sets (BR-4 — extending them is a convention change
+ *  owned by pm-lead, not a code decision). */
+export declare const C1_ARTIFACT_TYPES: readonly ["guard", "qa", "rev1-r1", "rev1-r2", "adjudication"];
+export declare const C1_VERDICTS: readonly ["CLEAR", "BLOCKING", "CONCERNING", "PASS", "NOT-CLEAR"];
+export interface C1Header {
+    slice: string;
+    candidate_sha: string;
+    artifact_type: string;
+    verdict: string;
+    money_evidence: string;
+    /** D2 optional attestation fields — advise-never-block. */
+    evidences?: string[];
+    self_check?: string;
+}
+export interface C1ValidationResult {
+    ok: boolean;
+    missing: string[];
+    invalid: Array<{
+        field: string;
+        value: string;
+        allowed: readonly string[];
+    }>;
+}
+/** Validate the five required C1 fields + closed sets. Pure. */
+export declare function validateC1Header(header: Partial<C1Header>): C1ValidationResult;
+/**
+ * Parse the pinned `## Proof contract` section out of a slice's
+ * IMPLEMENTATION-PRD.md (the C7 pinned name; PM-lane authored). Returns the
+ * promised items (checkbox-item form, one promised item per line), or null
+ * when the slice declares no contract (tier-1 degrade — zero noise).
+ */
+export declare function parseProofContract(prdContent: string): string[] | null;
+export declare function proofCommand(): Command;
+//# sourceMappingURL=proof.d.ts.map

package/dist/commands/proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../src/commands/proof.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC;;;;;;;;;;;;;;;;;;GAkBG;AAEH;8CAC8C;AAC9C,eAAO,MAAM,iBAAiB,gEAAiE,CAAC;AAChG,eAAO,MAAM,WAAW,mEAAoE,CAAC;AAK7F,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC9E;AAED,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAc9E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAYtE;AAMD,wBAAgB,YAAY,IAAI,OAAO,CA0PtC"}

package/dist/commands/proof.js

@@ -0,0 +1,311 @@
+import fs from "node:fs";
+import path from "node:path";
+import { Command } from "commander";
+import YAML from "yaml";
+import { findSlice, resolveMissionsRoot } from "../lib/scope/scope-fs.js";
+import { ScopeCliError } from "../lib/scope/types.js";
+/**
+ * `rig proof` — the proof-drop write path (OPR.0.4.4.19 FR-8 + FR-11;
+ * conventions C1 + C2 + C8, D2 attestation).
+ *
+ * CLI-side filesystem only (plan-review + arch-lead confirmed): the drop
+ * validates the C1 header AT THE MOMENT THE EVIDENCE IS IN-HAND, writes the
+ * artifact into the slice's proof/ dir, and echoes the parsed header (the
+ * seat sees what the composer will see). No daemon involvement, no synthetic
+ * qitems, no DB writes.
+ *
+ * LOAD-BEARING boundaries:
+ *   - Validation applies ONLY to drops made through this path. An artifact
+ *     written by any other means (raw file write, existing workflows) is
+ *     NEVER blocked at write time — the backstop is `rig scope audit`
+ *     (FR-10), not a write-path gate on ordinary file I/O.
+ *   - The D2 proof contract + self_check are AGENT JUDGMENT recorded here;
+ *     the drop path ADVISES (exit 0) and never blocks on them. There is no
+ *     configuration that makes any advisory blocking (BR-7).
+ */
+/** C1 ratified closed sets (BR-4 — extending them is a convention change
+ *  owned by pm-lead, not a code decision). */
+export const C1_ARTIFACT_TYPES = ["guard", "qa", "rev1-r1", "rev1-r2", "adjudication"];
+export const C1_VERDICTS = ["CLEAR", "BLOCKING", "CONCERNING", "PASS", "NOT-CLEAR"];
+/** Video extensions for the C8 UX advisory (screencast evidence). */
+const VIDEO_EXTENSIONS = new Set([".mp4", ".mov", ".webm", ".m4v", ".avi", ".mkv"]);
+/** Validate the five required C1 fields + closed sets. Pure. */
+export function validateC1Header(header) {
+    const missing = [];
+    for (const field of ["slice", "candidate_sha", "artifact_type", "verdict", "money_evidence"]) {
+        const value = header[field];
+        if (typeof value !== "string" || value.trim().length === 0)
+            missing.push(field);
+    }
+    const invalid = [];
+    if (header.artifact_type && !C1_ARTIFACT_TYPES.includes(header.artifact_type)) {
+        invalid.push({ field: "artifact_type", value: header.artifact_type, allowed: C1_ARTIFACT_TYPES });
+    }
+    if (header.verdict && !C1_VERDICTS.includes(header.verdict)) {
+        invalid.push({ field: "verdict", value: header.verdict, allowed: C1_VERDICTS });
+    }
+    return { ok: missing.length === 0 && invalid.length === 0, missing, invalid };
+}
+/**
+ * Parse the pinned `## Proof contract` section out of a slice's
+ * IMPLEMENTATION-PRD.md (the C7 pinned name; PM-lane authored). Returns the
+ * promised items (checkbox-item form, one promised item per line), or null
+ * when the slice declares no contract (tier-1 degrade — zero noise).
+ */
+export function parseProofContract(prdContent) {
+    const lines = prdContent.split("\n");
+    const start = lines.findIndex((l) => /^##\s+Proof contract\s*$/i.test(l.trim()));
+    if (start === -1)
+        return null;
+    const items = [];
+    for (let i = start + 1; i < lines.length; i++) {
+        const line = lines[i];
+        if (/^##\s/.test(line))
+            break; // next section
+        const m = line.match(/^\s*-\s*(?:\[[ xX]\]\s*)?(.+\S)\s*$/);
+        if (m)
+            items.push(m[1]);
+    }
+    return items;
+}
+function isVideoFile(filePath) {
+    return VIDEO_EXTENSIONS.has(path.extname(filePath).toLowerCase());
+}
+export function proofCommand() {
+    const cmd = new Command("proof").description("Proof artifacts — drop gate/proof evidence into a slice's proof/ dir with the machine-readable C1 header, validated at the natural moment (OPR.0.4.4.19 FR-8). The drop is the SDLC's proof leg: --evidences joins it to the slice's ## Proof contract items (what the Living Notes DELIVERED section pairs + renders); proof-lock afterwards via rig scope slice approve --scope delivery. Conventions SSOT: docs/reference/sdlc-conventions.md.");
+    cmd.option("--workspace <path>", "Override workspace root (else cwd walk or $OPENRIG_WORK_ROOT)");
+    cmd
+        .command("add <slice-path>")
+        .description("Drop a proof artifact: authors the C1 frontmatter from flags, writes <slice>/proof/<name>, echoes the parsed header. Contract/self-check/C8 outputs are advisories (exit 0) — never gates.")
+        .option("--mission <name>", "Hint mission when slice-path is just NN-slug")
+        .requiredOption("--artifact-type <type>", `C1 artifact_type, one of: ${C1_ARTIFACT_TYPES.join(" | ")}`)
+        .requiredOption("--verdict <verdict>", `C1 verdict, one of: ${C1_VERDICTS.join(" | ")}`)
+        .requiredOption("--candidate-sha <sha>", "C1 candidate_sha — the join key (convention C2): the proven candidate tip this artifact judges")
+        .requiredOption("--money-evidence <line>", "C1 money_evidence — the one line of money evidence")
+        .option("--slice-id <dot-id>", "C1 slice dot-ID (defaults to the slice frontmatter id)")
+        .option("--file <path>", "Artifact body from a file (mutually exclusive with --body)")
+        .option("--body <text>", "Artifact body inline (mutually exclusive with --file)")
+        .option("--name <filename>", "Artifact filename in proof/ (defaults to the --file basename, else <artifact-type>-<verdict>-<UTC>.md)")
+        .option("--evidences <refs>", "D2 attestation: comma-separated proof-contract item refs this artifact covers (item text or 1-based index)")
+        .option("--self-check <text>", "D2 attestation: the agent's assertion that it LOOKED at the evidence and confirmed it shows the claim")
+        .option("--media <refs>", "Corrective §3.4: comma-separated media refs (relative to the slice proof/ dir) this drop stands behind — appended to the artifact body as markdown refs so the composer curates them into delivered.items[].proof")
+        .option("--json", "JSON output for agents")
+        .action(async (slicePath, opts, command) => {
+        const json = Boolean(opts.json);
+        const advisories = [];
+        const warns = [];
+        try {
+            if (opts.file && opts.body) {
+                throw new ScopeCliError({
+                    fact: "Both --file and --body were provided.",
+                    consequence: "The artifact body is ambiguous.",
+                    action: "Pass exactly one of --file <path> or --body <text>.",
+                });
+            }
+            const parentOpts = (command.parent?.opts() ?? {});
+            const missionsRoot = resolveMissionsRoot({ override: parentOpts.workspace });
+            const slice = findSlice(missionsRoot, slicePath, opts.mission ?? null);
+            // Resolve the artifact body.
+            let body = "";
+            if (opts.file) {
+                if (!fs.existsSync(opts.file)) {
+                    throw new ScopeCliError({
+                        fact: `--file ${opts.file} does not exist.`,
+                        consequence: "No artifact body to drop.",
+                        action: "Point --file at the evidence file, or use --body.",
+                    });
+                }
+                body = fs.readFileSync(opts.file, "utf8");
+            }
+            else if (opts.body) {
+                body = opts.body;
+            }
+            // Corrective §3.4 — attach curated media refs (proof/-relative) to
+            // the artifact body as markdown refs; the composer projects them
+            // into delivered.items[].proof for the covered deliverables. Same
+            // containment discipline as --name: nothing outside the slice dir.
+            const sliceProofDir = path.join(slice.absPath, "proof");
+            const mediaRefs = opts.media
+                ? opts.media.split(",").map((s) => s.trim()).filter(Boolean)
+                : [];
+            const mediaLines = [];
+            for (const ref of mediaRefs) {
+                if (path.isAbsolute(ref)) {
+                    throw new ScopeCliError({
+                        fact: `--media ref '${ref}' is absolute.`,
+                        consequence: "The artifact was NOT dropped — proof media is co-located slice content (FR-5), referenced relative to the slice's proof/ dir.",
+                        action: "Copy the media into the slice's proof/ dir and pass the relative name.",
+                    });
+                }
+                const resolved = path.resolve(sliceProofDir, ref);
+                if (!resolved.startsWith(path.resolve(slice.absPath) + path.sep)) {
+                    throw new ScopeCliError({
+                        fact: `--media ref '${ref}' resolves outside the slice dir.`,
+                        consequence: "The artifact was NOT dropped — out-of-slice media can never be served or frozen with the review (FR-5).",
+                        action: "Move the media under the slice dir (proof/ is the natural home) and re-run.",
+                    });
+                }
+                if (!fs.existsSync(resolved)) {
+                    warns.push(`--media ref '${ref}' does not exist yet (${resolved}) — the review will show it as unavailable until the file lands`);
+                }
+                const ext = path.extname(ref).toLowerCase();
+                if (VIDEO_EXTENSIONS.has(ext))
+                    mediaLines.push(`<video src="${ref}"></video>`);
+                else
+                    mediaLines.push(`![${ref}](${ref})`);
+            }
+            if (mediaLines.length > 0) {
+                body = `${body.trimEnd()}\n\n## Media\n\n${mediaLines.join("\n")}\n`;
+            }
+            // Author the C1 header from flags + slice identity.
+            const header = {
+                slice: opts.sliceId ?? (typeof slice.id === "string" ? slice.id : undefined),
+                candidate_sha: opts.candidateSha,
+                artifact_type: opts.artifactType,
+                verdict: opts.verdict,
+                money_evidence: opts.moneyEvidence,
+            };
+            const evidences = opts.evidences
+                ? opts.evidences.split(",").map((s) => s.trim()).filter(Boolean)
+                : undefined;
+            if (evidences && evidences.length > 0)
+                header.evidences = evidences;
+            if (opts.selfCheck)
+                header.self_check = opts.selfCheck;
+            // Validate the closed sets AT DROP TIME (while the evidence is
+            // in-hand) — the one REJECTING validation this path performs.
+            const validation = validateC1Header(header);
+            if (!validation.ok) {
+                const parts = [];
+                if (validation.missing.length > 0)
+                    parts.push(`missing required C1 field(s): ${validation.missing.join(", ")}`);
+                for (const inv of validation.invalid) {
+                    parts.push(`${inv.field}='${inv.value}' is not in the ratified closed set (${inv.allowed.join(" | ")})`);
+                }
+                throw new ScopeCliError({
+                    fact: `C1 header invalid — ${parts.join("; ")}.`,
+                    consequence: "The artifact was NOT dropped (post-hoc reconstruction is the failure mode this fights).",
+                    action: "Provide the named fields with allowed values and re-run while the evidence is in-hand. Extending the closed sets is a pm-lead convention change (BR-4).",
+                });
+            }
+            // D2 — validate evidences refs against the slice's declared proof
+            // contract (unknown refs = a named WARN, never a rejection), and
+            // emit the coverage/self_check ADVISORY when a contract exists.
+            const prdPath = path.join(slice.absPath, "IMPLEMENTATION-PRD.md");
+            const contractItems = fs.existsSync(prdPath)
+                ? parseProofContract(fs.readFileSync(prdPath, "utf8"))
+                : null;
+            let coveredItems = [];
+            if (contractItems && contractItems.length > 0) {
+                if (evidences && evidences.length > 0) {
+                    for (const ref of evidences) {
+                        const byIndex = /^\d+$/.test(ref) ? contractItems[Number.parseInt(ref, 10) - 1] : undefined;
+                        const byText = contractItems.find((item) => item === ref);
+                        const match = byText ?? byIndex;
+                        if (match)
+                            coveredItems.push(match);
+                        else
+                            warns.push(`evidences ref '${ref}' matches no declared proof-contract item (known items: ${contractItems.map((_, i) => i + 1).join(", ")} or exact text)`);
+                    }
+                }
+                if (coveredItems.length === 0 || !header.self_check) {
+                    const uncovered = contractItems.filter((item) => !coveredItems.includes(item));
+                    const reasons = [];
+                    if (coveredItems.length === 0)
+                        reasons.push("this drop covers no declared contract item");
+                    if (!header.self_check)
+                        reasons.push("self_check attestation omitted");
+                    advisories.push(`ADVISORY (D2, advise-never-block): ${reasons.join(" and ")}. ` +
+                        `Uncovered contract item(s): ${uncovered.map((u) => `"${u}"`).join(", ")}. ` +
+                        `The Packet-2 promised→delivered join will show these as MISSING (the ▲ insufficient-proof signal).`);
+                }
+            }
+            // FR-11 / C8 — the UX-slice video advisory (SHOULD/steer, exit 0,
+            // no configuration can make it blocking). Trigger: slice frontmatter
+            // ux-change: true (spec-time flag; never a qitem tag, never
+            // diff-inference). Satisfied when this drop is a video or the
+            // proof/ dir already holds one.
+            const uxChange = slice.frontmatter["ux-change"] === true;
+            if (uxChange) {
+                const proofDir = path.join(slice.absPath, "proof");
+                const existingVideo = fs.existsSync(proofDir)
+                    && fs.readdirSync(proofDir).some((f) => isVideoFile(f));
+                const droppingVideo = (opts.file ? isVideoFile(opts.file) : false) || mediaRefs.some((r) => isVideoFile(r));
+                if (!existingVideo && !droppingVideo) {
+                    advisories.push("ADVISORY (C8, SHOULD/steer): this slice is UX-tagged (ux-change: true) and its proof set has no video. " +
+                        "UX-change slices SHOULD produce screenshot + video together — capture a screencast via the agent-browser-screencast method " +
+                        "and hold it to the money-shot-edit bar. This never blocks a drop.");
+                }
+            }
+            // Write the artifact: YAML frontmatter + body into proof/.
+            const proofDir = path.join(slice.absPath, "proof");
+            const defaultName = `${opts.artifactType}-${opts.verdict}-${new Date().toISOString().replace(/[:.]/g, "-")}.md`;
+            const fileName = opts.name ?? (opts.file ? path.basename(opts.file) : defaultName);
+            // rev1-r2 BLOCKING fix (a7dedd93 review): --name is a FILENAME, never
+            // a path. Reject separators / dot-dot / absolute shapes BEFORE any
+            // filesystem effect, so the drop can only land inside proof/ (the
+            // FR-8 contract) — a traversal name like ../README.md must not reach
+            // slice control files.
+            if (fileName.includes("/") || fileName.includes("\\") || fileName.startsWith("..") || path.isAbsolute(fileName)) {
+                throw new ScopeCliError({
+                    fact: `--name '${fileName}' is not a plain filename (path separators, '..', and absolute paths are rejected).`,
+                    consequence: "The artifact was NOT dropped — proof drops land inside the slice proof/ dir only (FR-8).",
+                    action: "Pass a bare filename like qa-clear.md; the drop path owns the directory.",
+                });
+            }
+            const target = path.resolve(proofDir, fileName);
+            // Defense-in-depth: even a name that slips the shape check must
+            // resolve INSIDE proof/ (same containment discipline as
+            // scope-approve's path-escape guard).
+            if (!target.startsWith(path.resolve(proofDir) + path.sep)) {
+                throw new ScopeCliError({
+                    fact: `--name '${fileName}' resolves outside the slice proof/ dir.`,
+                    consequence: "The artifact was NOT dropped.",
+                    action: "Pass a bare filename; the drop path owns the directory.",
+                });
+            }
+            fs.mkdirSync(proofDir, { recursive: true });
+            const frontmatter = YAML.stringify(header).trimEnd();
+            fs.writeFileSync(target, `---\n${frontmatter}\n---\n\n${body}`, "utf8");
+            // Echo the parsed header — the seat sees what the composer will see.
+            const echo = {
+                dropped: path.relative(process.cwd(), target),
+                header: header,
+                contractItemsDeclared: contractItems?.length ?? 0,
+                contractItemsCovered: coveredItems,
+                mediaRefs,
+                warnings: warns,
+                advisories,
+            };
+            if (json) {
+                console.log(JSON.stringify(echo, null, 2));
+            }
+            else {
+                console.log(`Dropped: ${echo.dropped}`);
+                console.log(`Parsed C1 header:\n${frontmatter}`);
+                if (contractItems)
+                    console.log(`Proof contract: ${coveredItems.length}/${contractItems.length} item(s) covered by this drop.`);
+                for (const w of warns)
+                    console.error(`warning: ${w}`);
+                for (const a of advisories)
+                    console.error(a);
+            }
+            // Advisories + warns NEVER change the exit code (BR-7).
+        }
+        catch (err) {
+            if (err instanceof ScopeCliError) {
+                if (json) {
+                    console.log(JSON.stringify({ ok: false, error: { fact: err.fact, consequence: err.consequence, action: err.action } }, null, 2));
+                }
+                else {
+                    console.error(`${err.fact}\n${err.consequence}\n${err.action}`);
+                }
+                process.exitCode = 1;
+                return;
+            }
+            throw err;
+        }
+    });
+    return cmd;
+}
+//# sourceMappingURL=proof.js.map

package/dist/commands/proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.js","sourceRoot":"","sources":["../../src/commands/proof.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;;;;;;;;;;;;;;;;GAkBG;AAEH;8CAC8C;AAC9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,CAAU,CAAC;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,CAAU,CAAC;AAE7F,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAmBpF,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,MAAyB;IACxD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACtG,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,IAAI,MAAM,CAAC,aAAa,IAAI,CAAE,iBAAuC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACrG,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,IAAI,CAAE,WAAiC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjF,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,eAAe;QAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC5D,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAC1C,mbAAmb,CACpb,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,+DAA+D,CAAC,CAAC;IAElG,GAAG;SACA,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,4LAA4L,CAAC;SACzM,MAAM,CAAC,kBAAkB,EAAE,8CAA8C,CAAC;SAC1E,cAAc,CAAC,wBAAwB,EAAE,6BAA6B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;SACtG,cAAc,CAAC,qBAAqB,EAAE,uBAAuB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;SACvF,cAAc,CAAC,uBAAuB,EAAE,gGAAgG,CAAC;SACzI,cAAc,CAAC,yBAAyB,EAAE,oDAAoD,CAAC;SAC/F,MAAM,CAAC,qBAAqB,EAAE,wDAAwD,CAAC;SACvF,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,eAAe,EAAE,uDAAuD,CAAC;SAChF,MAAM,CAAC,mBAAmB,EAAE,wGAAwG,CAAC;SACrI,MAAM,CAAC,oBAAoB,EAAE,4GAA4G,CAAC;SAC1I,MAAM,CAAC,qBAAqB,EAAE,uGAAuG,CAAC;SACtI,MAAM,CAAC,gBAAgB,EAAE,mNAAmN,CAAC;SAC7O,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,IAcjC,EAAE,OAAgB,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CAAC;oBACtB,IAAI,EAAE,uCAAuC;oBAC7C,WAAW,EAAE,iCAAiC;oBAC9C,MAAM,EAAE,qDAAqD;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAA2B,CAAC;YAC5E,MAAM,YAAY,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;YAC7E,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;YAEvE,6BAA6B;YAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,aAAa,CAAC;wBACtB,IAAI,EAAE,UAAU,IAAI,CAAC,IAAI,kBAAkB;wBAC3C,WAAW,EAAE,2BAA2B;wBACxC,MAAM,EAAE,mDAAmD;qBAC5D,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC;YAED,mEAAmE;YACnE,iEAAiE;YACjE,kEAAkE;YAClE,mEAAmE;YACnE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK;gBAC1B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC5D,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,aAAa,CAAC;wBACtB,IAAI,EAAE,gBAAgB,GAAG,gBAAgB;wBACzC,WAAW,EAAE,+HAA+H;wBAC5I,MAAM,EAAE,wEAAwE;qBACjF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjE,MAAM,IAAI,aAAa,CAAC;wBACtB,IAAI,EAAE,gBAAgB,GAAG,mCAAmC;wBAC5D,WAAW,EAAE,yGAAyG;wBACtH,MAAM,EAAE,6EAA6E;qBACtF,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,yBAAyB,QAAQ,iEAAiE,CAAC,CAAC;gBACpI,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC5C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,eAAe,GAAG,YAAY,CAAC,CAAC;;oBAC1E,UAAU,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,mBAAmB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,CAAC;YAED,oDAAoD;YACpD,MAAM,MAAM,GAAsB;gBAChC,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC5E,aAAa,EAAE,IAAI,CAAC,YAAY;gBAChC,aAAa,EAAE,IAAI,CAAC,YAAY;gBAChC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,cAAc,EAAE,IAAI,CAAC,aAAa;aACnC,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS;gBAC9B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAChE,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YACpE,IAAI,IAAI,CAAC,SAAS;gBAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YAEvD,+DAA+D;YAC/D,8DAA8D;YAC9D,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,iCAAiC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChH,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;oBACrC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,wCAAwC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3G,CAAC;gBACD,MAAM,IAAI,aAAa,CAAC;oBACtB,IAAI,EAAE,uBAAuB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAChD,WAAW,EAAE,yFAAyF;oBACtG,MAAM,EAAE,yJAAyJ;iBAClK,CAAC,CAAC;YACL,CAAC;YAED,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;YAClE,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC1C,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtD,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,YAAY,GAAa,EAAE,CAAC;YAChC,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;wBAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBAC5F,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;wBAC1D,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC;wBAChC,IAAI,KAAK;4BAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;4BAC/B,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,2DAA2D,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;oBAClK,CAAC;gBACH,CAAC;gBACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACpD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC/E,MAAM,OAAO,GAAa,EAAE,CAAC;oBAC7B,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;oBAC1F,IAAI,CAAC,MAAM,CAAC,UAAU;wBAAE,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;oBACvE,UAAU,CAAC,IAAI,CACb,sCAAsC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;wBAC/D,+BAA+B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;wBAC5E,oGAAoG,CACrG,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,kEAAkE;YAClE,qEAAqE;YACrE,4DAA4D;YAC5D,8DAA8D;YAC9D,gCAAgC;YAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;YACzD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;uBACxC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5G,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE,CAAC;oBACrC,UAAU,CAAC,IAAI,CACb,yGAAyG;wBACzG,6HAA6H;wBAC7H,mEAAmE,CACpE,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC;YAChH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACnF,sEAAsE;YACtE,mEAAmE;YACnE,kEAAkE;YAClE,qEAAqE;YACrE,uBAAuB;YACvB,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChH,MAAM,IAAI,aAAa,CAAC;oBACtB,IAAI,EAAE,WAAW,QAAQ,qFAAqF;oBAC9G,WAAW,EAAE,0FAA0F;oBACvG,MAAM,EAAE,0EAA0E;iBACnF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChD,gEAAgE;YAChE,wDAAwD;YACxD,sCAAsC;YACtC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,aAAa,CAAC;oBACtB,IAAI,EAAE,WAAW,QAAQ,0CAA0C;oBACnE,WAAW,EAAE,+BAA+B;oBAC5C,MAAM,EAAE,yDAAyD;iBAClE,CAAC,CAAC;YACL,CAAC;YACD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YACrD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,WAAW,YAAY,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;YAExE,qEAAqE;YACrE,MAAM,IAAI,GAAG;gBACX,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC;gBAC7C,MAAM,EAAE,MAAkB;gBAC1B,qBAAqB,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;gBACjD,oBAAoB,EAAE,YAAY;gBAClC,SAAS;gBACT,QAAQ,EAAE,KAAK;gBACf,UAAU;aACX,CAAC;YACF,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;gBACjD,IAAI,aAAa;oBAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,YAAY,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,gCAAgC,CAAC,CAAC;gBAC/H,KAAK,MAAM,CAAC,IAAI,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBACtD,KAAK,MAAM,CAAC,IAAI,UAAU;oBAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,wDAAwD;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,IAAI,IAAI,EAAE,CAAC;oBACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACnI,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/ps.d.ts

@@ -2,6 +2,27 @@ import { Command } from "commander";
 import type { StatusDeps } from "./status.js";
 import { loadHostRegistry } from "../host-registry.js";
 import { runCrossHostCommand, type RunCrossHostCommandOpts } from "../cross-host-executor.js";
+interface PsCliOptions {
+    json?: boolean;
+    nodes?: boolean;
+    full?: boolean;
+    verbose?: boolean;
+    limit?: string;
+    fields?: string;
+    summary?: boolean;
+    filter?: string;
+    host?: string;
+    allHosts?: boolean;
+    hosts?: string;
+    active?: boolean;
+    running?: boolean;
+    allRigs?: boolean;
+    rig?: string;
+    session?: string;
+    /** OPR.0.3.3.19 - include archived rigs (default excludes them). Parity
+     *  with `rig stream list --include-archived`. */
+    includeArchived?: boolean;
+}
 export interface PsDeps extends StatusDeps {
     /**
      * Cross-host hooks. Both default to the production loaders/executors; tests
@@ -13,14 +34,27 @@ export interface PsDeps extends StatusDeps {
     crossHostRun?: (host: Parameters<typeof runCrossHostCommand>[0], argv: readonly string[], opts?: RunCrossHostCommandOpts) => ReturnType<typeof runCrossHostCommand>;
 }
 /**
- * `rig ps` — list running rigs and optionally their nodes.
+ * OPR.0.4.4.21 FR-2/FR-3 — THE centralized disclosure-ladder validator.
+ * Runs BEFORE the local/HTTP-host/SSH/fan-out dispatch split so every path
+ * obeys one grammar (qa1 plan-review: remote mode bypassed the session-rig
+ * injection and fanned wide). Principle (arch-ratified): IMPLICIT SCOPE
+ * DEFAULTS DON'T CROSS HOST BOUNDARIES — the session-rig default has no
+ * stable referent on a remote host (a same-named rig there would silently
+ * misresolve), so remote per-node views are explicit-or-error.
+ * Returns the teaching error text, or null when the invocation is valid.
+ */
+export declare function validatePsLadder(opts: PsCliOptions, callerRig: string | undefined): string | null;
+/**
+ * `rig ps` — the consolidated fleet map + explicit disclosure ladder.
  *
- * L3-followup adds CLI-side shaping flags (`--limit`, `--fields`, `--summary`,
- * `--filter`, `--full`) for context-window-safe output on large hosts. Default
- * `rig ps` (human) truncates to ~50 rigs with an explicit footer naming totals
- * and the `--full` opt-out. Default `rig ps --json` keeps the bare-array shape
- * for back-compat; the truncation/envelope shape only applies when at least
- * one of `--limit`/`--summary`/`--fields`/`--filter` is specified.
+ * OPR.0.4.4.21: the default is ALL active rigs, one compact O(rigs) row each
+ * (the current-rig-only default is retired). The token-safety invariant: no
+ * invocation returns per-node detail across all rigs unless explicitly
+ * flagged (--nodes -A), and even then rows are projected unless --full.
+ * Default `rig ps --json` keeps the bare-array shape for back-compat; the
+ * truncation/envelope shape only applies when at least one of
+ * `--limit`/`--summary`/`--fields`/`--filter` is specified.
  */
 export declare function psCommand(depsOverride?: PsDeps): Command;
+export {};
 //# sourceMappingURL=ps.d.ts.map

package/dist/commands/ps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ps.d.ts","sourceRoot":"","sources":["../../src/commands/ps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAsH,MAAM,qBAAqB,CAAC;AAC3K,OAAO,EAAE,mBAAmB,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAqM9F,MAAM,WAAW,MAAO,SAAQ,UAAU;IACxC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAC/D,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC/C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,CAAC,EAAE,uBAAuB,KAC3B,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAC7C;AAgSD;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CA4RxD"}
+{"version":3,"file":"ps.d.ts","sourceRoot":"","sources":["../../src/commands/ps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAsH,MAAM,qBAAqB,CAAC;AAC3K,OAAO,EAAE,mBAAmB,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAuL9F,UAAU,YAAY;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;qDACiD;IACjD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,MAAO,SAAQ,UAAU;IACxC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAC/D,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC/C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,CAAC,EAAE,uBAAuB,KAC3B,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAC7C;AAwOD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CA4CjG;AA8HD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAyUxD"}