@orygn/opa-mcp 0.1.14 → 0.1.16

package/dist/tools/evaluation/test-multiroot.js

@@ -0,0 +1,454 @@
+/**
+ * `rego_test_multiroot` -- run Rego tests across multiple independent package roots.
+ *
+ * OPA auto-recurses into subdirectories when given a directory path, which
+ * causes package-conflict errors in repos with multiple independent module
+ * namespaces (OPA issue #4724). This tool runs `opa test` once per root and
+ * aggregates the results, solving the problem at the MCP layer.
+ *
+ * Two modes:
+ *   explicit -- caller supplies the root list; each root can carry per-root
+ *               `include` paths (e.g., shared libraries) and an optional name.
+ *   scan     -- auto-discovers leaf test roots using the leaf rule: a directory
+ *               is a root only if it directly contains `*_test.rego` files AND
+ *               none of its eligible subdirectories do. Prevents OPA's automatic
+ *               recursion from double-running descendant roots.
+ */
+import * as fs from 'node:fs/promises';
+import { join, sep } from 'node:path';
+import { z } from 'zod';
+import { OpaCli } from '../../lib/opa-cli.js';
+import { err, ok } from '../../lib/errors.js';
+import { tryParseJson, validatePaths, withToolEnvelope } from '../../lib/tool-helpers.js';
+const ALWAYS_IGNORE = new Set([
+    '.git',
+    'node_modules',
+    'vendor',
+    '.next',
+    'dist',
+    'build',
+    'target',
+    '__pycache__',
+    '.tox',
+    'coverage',
+]);
+// ─── Input schema ────────────────────────────────────────────────────────────
+const RootEntrySchema = z.object({
+    path: z.string().describe('Absolute or allowed-relative path to the test root directory.'),
+    include: z
+        .array(z.string())
+        .optional()
+        .describe("Extra paths to add to this root's `opa test` invocation (e.g., shared library directories). These paths are passed after the root path so OPA can resolve imports."),
+    name: z.string().optional().describe('Human-readable label for this root (appears in output).'),
+});
+const RegoTestMultirootInput = {
+    roots: z
+        .array(RootEntrySchema)
+        .min(1)
+        .optional()
+        .describe('Explicit list of test root directories. Use when roots are known upfront or when scan mode cannot determine the correct roots. Mutually exclusive with `scanDir`.'),
+    scanDir: z
+        .string()
+        .optional()
+        .describe('Top-level directory to scan for test roots. Uses the leaf rule: a directory is a root only if it directly contains `*_test.rego` files and none of its eligible subdirectories do. Mutually exclusive with `roots`.'),
+    sharedPaths: z
+        .array(z.string())
+        .optional()
+        .describe("Paths added to every root's `opa test` invocation and excluded from auto-discovery. Use for shared library directories that all roots import from."),
+    maxDepth: z
+        .number()
+        .int()
+        .min(1)
+        .max(20)
+        .optional()
+        .describe('Maximum directory depth to scan. Default: 10. Only used with `scanDir`.'),
+    maxRoots: z
+        .number()
+        .int()
+        .min(1)
+        .max(200)
+        .optional()
+        .describe('Maximum number of test roots allowed. Returns INVALID_INPUT if scan finds more. Default: 50. Only used with `scanDir`.'),
+    ignorePatterns: z
+        .array(z.string())
+        .optional()
+        .describe('Additional directory name patterns to skip during scan (e.g., ["vendor", "*.generated"]). Supports `*` wildcards. Only used with `scanDir`.'),
+    verbose: z.boolean().optional().describe('Emit per-test pass/fail details for each root.'),
+    coverage: z
+        .boolean()
+        .optional()
+        .describe('Include per-line coverage data per root. Switches output to coverage-report mode: test record counts are not available, but `coverage`, `coveragePct`, and `overallCoveragePct` fields are populated.'),
+    runPattern: z
+        .string()
+        .optional()
+        .describe('Run only tests whose names match this regular expression (passed as `--run` to each root).'),
+    threshold: z
+        .number()
+        .min(0)
+        .max(100)
+        .optional()
+        .describe('Minimum coverage percentage required per root (0-100). Roots below threshold have `thresholdMet: false` in their result. Implicitly enables coverage-report output mode.'),
+    varValues: z
+        .boolean()
+        .optional()
+        .describe('Include local variable bindings in trace output (`--var-values`). Only useful with `verbose: true`.'),
+};
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+function matchesIgnorePattern(name, patterns) {
+    return patterns.some((p) => {
+        if (p === name)
+            return true;
+        if (p.includes('*')) {
+            const escaped = p.replace(/[.+^${}()|[\]\\]/g, '\\$&').replace(/\*/g, '[^/\\\\]*');
+            return new RegExp(`^${escaped}$`).test(name);
+        }
+        return false;
+    });
+}
+async function walk(dir, depth, opts, state) {
+    if (state.tooMany)
+        return false;
+    // Symlink escape guard: realpath the dir and confirm it stays under scanDirReal.
+    let realDir;
+    try {
+        realDir = await fs.realpath(dir);
+    }
+    catch {
+        return false;
+    }
+    if (realDir !== opts.scanDirReal && !realDir.startsWith(opts.scanDirReal + sep)) {
+        return false;
+    }
+    // Skip if this directory is or lives under a sharedPath (handled separately).
+    for (const sp of opts.sharedPathsResolved) {
+        if (dir === sp || dir.startsWith(sp + sep)) {
+            return false;
+        }
+    }
+    let entries;
+    try {
+        // Cast: readdir with withFileTypes always returns name-addressable Dirent objects;
+        // the as-unknown-as-DirEntry[] cast avoids the Dirent<Buffer> vs Dirent<string>
+        // overload ambiguity present in newer @types/node versions.
+        entries = await fs.readdir(dir, { withFileTypes: true });
+    }
+    catch {
+        return false;
+    }
+    const hasDirectTestFiles = entries.some((e) => e.isFile() && e.name.endsWith('_test.rego'));
+    const subdirs = entries.filter((e) => {
+        if (!e.isDirectory())
+            return false;
+        if (e.name.startsWith('.'))
+            return false;
+        if (ALWAYS_IGNORE.has(e.name))
+            return false;
+        if (matchesIgnorePattern(e.name, opts.ignorePatterns))
+            return false;
+        return true;
+    });
+    let descendantsHaveTestFiles = false;
+    if (depth < opts.maxDepth) {
+        for (const subdir of subdirs) {
+            if (state.tooMany)
+                break;
+            const subdirPath = join(dir, subdir.name);
+            const subHas = await walk(subdirPath, depth + 1, opts, state);
+            if (subHas)
+                descendantsHaveTestFiles = true;
+        }
+    }
+    if (hasDirectTestFiles) {
+        if (!descendantsHaveTestFiles) {
+            // Leaf rule: has test files directly; no eligible descendant has test files.
+            if (state.roots.length >= opts.maxRoots) {
+                state.tooMany = true;
+                return true;
+            }
+            state.roots.push(dir);
+        }
+        else {
+            // Ancestor: has test files alongside descendant test dirs. Running `opa test`
+            // from here would double-execute descendant tests -- record as skipped.
+            state.ancestorSkipped.push(dir);
+        }
+    }
+    return hasDirectTestFiles || descendantsHaveTestFiles;
+}
+async function discoverLeafTestRoots(scanDir, opts) {
+    let scanDirReal;
+    try {
+        scanDirReal = await fs.realpath(scanDir);
+    }
+    catch {
+        scanDirReal = scanDir;
+    }
+    const state = { roots: [], ancestorSkipped: [], tooMany: false };
+    await walk(scanDir, 0, { ...opts, scanDirReal }, state);
+    return { roots: state.roots, tooMany: state.tooMany, ancestorSkipped: state.ancestorSkipped };
+}
+function processRootOutput(result, coverageMode, threshold) {
+    if (coverageMode) {
+        if (result.exitCode === 0) {
+            const coverageData = tryParseJson(result.stdout);
+            return {
+                passed: 0,
+                failed: 0,
+                skipped: 0,
+                total: 0,
+                results: [],
+                coverage: coverageData,
+                coveragePct: coverageData?.coverage,
+                thresholdMet: threshold !== undefined ? true : undefined,
+            };
+        }
+        const stderrTrimmed = result.stderr.trim();
+        const thresholdMatch = /got\s+([\d.]+)\s+instead\s+of\s+([\d.]+)/i.exec(stderrTrimmed);
+        if (thresholdMatch) {
+            const actualCoverage = parseFloat(thresholdMatch[1]);
+            const requiredThreshold = parseFloat(thresholdMatch[2]);
+            return {
+                passed: 0,
+                failed: 0,
+                skipped: 0,
+                total: 0,
+                results: [],
+                coveragePct: actualCoverage,
+                thresholdMet: false,
+                error: {
+                    code: 'COVERAGE_BELOW_THRESHOLD',
+                    message: stderrTrimmed,
+                    hint: `Increase test coverage to at least ${requiredThreshold}%. Currently at ${actualCoverage}%.`,
+                },
+            };
+        }
+        return {
+            passed: 0,
+            failed: 0,
+            skipped: 0,
+            total: 0,
+            results: [],
+            error: {
+                code: 'EVAL_ERROR',
+                message: stderrTrimmed || 'One or more tests failed.',
+                hint: 'Fix failing tests then re-run. Use verbose: true for trace output.',
+            },
+        };
+    }
+    // Normal mode -- parse test record array from stdout.
+    let records = [];
+    const arrayParsed = tryParseJson(result.stdout);
+    if (Array.isArray(arrayParsed)) {
+        records = arrayParsed;
+    }
+    else {
+        for (const line of result.stdout.split(/\r?\n/)) {
+            const trimmed = line.trim();
+            if (trimmed.length === 0)
+                continue;
+            const parsed = tryParseJson(trimmed);
+            if (parsed)
+                records.push(parsed);
+        }
+    }
+    if (records.length === 0) {
+        if (result.exitCode === 0) {
+            return {
+                passed: 0,
+                failed: 0,
+                skipped: 0,
+                total: 0,
+                results: [],
+                error: {
+                    code: 'NO_TESTS_FOUND',
+                    message: 'opa test did not discover any test rules in the provided paths.',
+                    hint: 'Tests live in *_test.rego files with rules named test_*.',
+                },
+            };
+        }
+        // Non-zero exit with no records: package conflict, import error, parse error, etc.
+        return {
+            passed: 0,
+            failed: 0,
+            skipped: 0,
+            total: 0,
+            results: [],
+            error: {
+                code: 'EVAL_ERROR',
+                message: result.stderr.trim() || `opa test exited with code ${result.exitCode}.`,
+                hint: 'Check for package conflicts, import errors, or syntax errors in this root.',
+            },
+        };
+    }
+    const failed = records.filter((r) => r.fail).length;
+    const skipped = records.filter((r) => r.skip).length;
+    const passed = records.length - failed - skipped;
+    return { passed, failed, skipped, total: records.length, results: records };
+}
+function computeOverallCoveragePct(roots) {
+    const values = roots.filter((r) => r.coveragePct !== undefined).map((r) => r.coveragePct);
+    if (values.length === 0)
+        return undefined;
+    const mean = values.reduce((s, v) => s + v, 0) / values.length;
+    return Math.round(mean * 100) / 100;
+}
+// ─── Registration ─────────────────────────────────────────────────────────────
+export function registerRegoTestMultiroot(server, config) {
+    const opa = new OpaCli(config);
+    server.registerTool('rego_test_multiroot', {
+        title: 'Run Rego tests across multiple roots',
+        description: "Run `opa test` once per root and aggregate results. Solves the package-conflict problem that occurs when `opa test .` is run on a repo with multiple independent package namespaces (OPA issue #4724). Two modes: `explicit` (supply root list with optional per-root `include` paths for shared libraries) and `scan` (auto-discover leaf test roots using the leaf rule -- a directory is a root only if it directly contains `*_test.rego` files and none of its eligible subdirectories do, preventing OPA's automatic recursion from double-running tests). Use `sharedPaths` in scan mode to add shared library directories to every root's invocation without including them in discovery. Coverage and threshold work per-root; `overallCoveragePct` is the mean across roots that have coverage data.",
+        inputSchema: RegoTestMultirootInput,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async ({ roots, scanDir, sharedPaths, maxDepth, maxRoots, ignorePatterns, verbose, coverage, runPattern, threshold, varValues, }, { signal }) => {
+        return withToolEnvelope(config, async () => {
+            // Exactly one of roots or scanDir is required.
+            const hasRoots = roots !== undefined && roots.length > 0;
+            const hasScanDir = scanDir !== undefined && scanDir.length > 0;
+            if (!hasRoots && !hasScanDir) {
+                return err('INVALID_INPUT', 'rego_test_multiroot requires either `roots` or `scanDir`.', {
+                    hint: 'Provide an explicit root list via `roots` or a top-level scan directory via `scanDir`.',
+                });
+            }
+            if (hasRoots && hasScanDir) {
+                return err('INVALID_INPUT', 'rego_test_multiroot accepts either `roots` or `scanDir`, not both.');
+            }
+            const coverageMode = coverage === true || threshold !== undefined;
+            const warnings = [];
+            let resolvedRoots;
+            let mode;
+            let ancestorSkippedPaths;
+            if (hasRoots) {
+                // Explicit mode: validate each root path and its include paths.
+                mode = 'explicit';
+                resolvedRoots = [];
+                for (const root of roots) {
+                    const pathValidation = validatePaths([root.path], config, { mustExist: true });
+                    if (!pathValidation.ok)
+                        return pathValidation.error;
+                    const resolvedPath = pathValidation.resolved[0];
+                    const resolvedIncludes = [];
+                    if (root.include?.length) {
+                        const includeValidation = validatePaths(root.include, config, { mustExist: true });
+                        if (!includeValidation.ok)
+                            return includeValidation.error;
+                        resolvedIncludes.push(...includeValidation.resolved);
+                    }
+                    resolvedRoots.push({ path: resolvedPath, name: root.name, include: resolvedIncludes });
+                }
+            }
+            else {
+                // Scan mode: validate scanDir and sharedPaths, then discover leaf roots.
+                mode = 'scan';
+                const scanDirValidation = validatePaths([scanDir], config, { mustExist: true });
+                if (!scanDirValidation.ok)
+                    return scanDirValidation.error;
+                const resolvedScanDir = scanDirValidation.resolved[0];
+                const resolvedSharedPaths = [];
+                if (sharedPaths?.length) {
+                    const spValidation = validatePaths(sharedPaths, config, { mustExist: true });
+                    if (!spValidation.ok)
+                        return spValidation.error;
+                    resolvedSharedPaths.push(...spValidation.resolved);
+                }
+                const effectiveMaxRoots = maxRoots ?? 50;
+                const discovery = await discoverLeafTestRoots(resolvedScanDir, {
+                    maxDepth: maxDepth ?? 10,
+                    maxRoots: effectiveMaxRoots,
+                    ignorePatterns: ignorePatterns ?? [],
+                    sharedPathsResolved: resolvedSharedPaths,
+                });
+                if (discovery.tooMany) {
+                    return err('INVALID_INPUT', `Scan found more than ${effectiveMaxRoots} test roots in ${scanDir}. Narrow the scan with a more specific scanDir, sharedPaths, or ignorePatterns, or raise maxRoots.`, { hint: 'Use explicit roots mode to enumerate roots manually.' });
+                }
+                if (discovery.roots.length === 0) {
+                    return err('NO_TESTS_FOUND', `No test roots found under ${scanDir}. Ensure *_test.rego files exist.`, {
+                        hint: 'Tests live in *_test.rego files with rules named test_*. If shared libraries hold tests, list them explicitly with `roots`.',
+                    });
+                }
+                if (discovery.ancestorSkipped.length > 0) {
+                    const count = discovery.ancestorSkipped.length;
+                    warnings.push(`${count} director${count === 1 ? 'y has' : 'ies have'} test files alongside subdirectories that also have test files and were skipped to avoid double-running: ${discovery.ancestorSkipped.join(', ')}. Use explicit roots mode with per-root include paths to run these.`);
+                    ancestorSkippedPaths = discovery.ancestorSkipped;
+                }
+                resolvedRoots = discovery.roots.map((r) => ({
+                    path: r,
+                    include: resolvedSharedPaths,
+                }));
+            }
+            // Sequential per-root execution.
+            const rootResults = [];
+            let abortedAt;
+            for (let i = 0; i < resolvedRoots.length; i++) {
+                if (signal?.aborted) {
+                    abortedAt = i;
+                    break;
+                }
+                const root = resolvedRoots[i];
+                const paths = [root.path, ...root.include];
+                const result = await opa.test({ paths, verbose, coverage: coverageMode, runPattern, varValues, threshold }, signal);
+                // Client cancellation: break loop and return partial results with a warning.
+                if (result.aborted) {
+                    abortedAt = i;
+                    break;
+                }
+                // Systemic failures (binary missing, timeout) abort the entire run.
+                if (result.exitCode === null) {
+                    return err('OPA_BINARY_NOT_FOUND', `opa binary unreachable: ${result.stderr || 'spawn failed'}`, {
+                        hint: 'Install OPA (https://www.openpolicyagent.org/docs/latest/) or set OPA_BINARY to the absolute path of the binary.',
+                    });
+                }
+                if (result.timedOut) {
+                    return err('TIMEOUT', 'opa subprocess exceeded the configured timeout (OPA_MCP_TIMEOUT_MS).', { details: { durationMs: result.durationMs } });
+                }
+                const outcome = processRootOutput(result, coverageMode, threshold);
+                const rootResult = {
+                    path: root.path,
+                    ...outcome,
+                };
+                if (root.name !== undefined)
+                    rootResult.name = root.name;
+                if (root.include.length > 0)
+                    rootResult.include = root.include;
+                rootResults.push(rootResult);
+            }
+            if (abortedAt !== undefined) {
+                warnings.push(`Run was cancelled after ${rootResults.length} of ${resolvedRoots.length} root${resolvedRoots.length === 1 ? '' : 's'}.`);
+            }
+            // Aggregate totals across all roots.
+            const totalPassed = rootResults.reduce((s, r) => s + (r.error ? 0 : r.passed), 0);
+            const totalFailed = rootResults.reduce((s, r) => s + (r.error ? 0 : r.failed), 0);
+            const totalSkipped = rootResults.reduce((s, r) => s + (r.error ? 0 : r.skipped), 0);
+            const totalTests = rootResults.reduce((s, r) => s + (r.error ? 0 : r.total), 0);
+            const rootsWithErrors = rootResults.filter((r) => r.error !== undefined).length;
+            const rootsWithFailures = rootResults.filter((r) => r.error === undefined && r.failed > 0).length;
+            const output = {
+                mode,
+                roots: rootResults,
+                totalPassed,
+                totalFailed,
+                totalSkipped,
+                totalTests,
+                rootsRun: rootResults.length,
+                rootsWithErrors,
+                rootsWithFailures,
+            };
+            if (coverageMode) {
+                const overallCoveragePct = computeOverallCoveragePct(rootResults);
+                if (overallCoveragePct !== undefined) {
+                    output.overallCoveragePct = overallCoveragePct;
+                }
+            }
+            if (ancestorSkippedPaths !== undefined && ancestorSkippedPaths.length > 0) {
+                output.ancestorSkipped = ancestorSkippedPaths;
+            }
+            return ok(output, warnings.length > 0 ? warnings : undefined);
+        });
+    });
+}
+//# sourceMappingURL=test-multiroot.js.map

package/dist/tools/evaluation/test-multiroot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-multiroot.js","sourceRoot":"","sources":["../../../src/tools/evaluation/test-multiroot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAiB1F,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM;IACN,cAAc;IACd,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,aAAa;IACb,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AAiEH,gFAAgF;AAEhF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;IAC1F,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,oKAAoK,CACrK;IACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;CAChG,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG;IAC7B,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,eAAe,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,mKAAmK,CACpK;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,qNAAqN,CACtN;IACH,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,oJAAoJ,CACrJ;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;SACV,QAAQ,CAAC,yEAAyE,CAAC;IACtF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,wHAAwH,CACzH;IACH,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,6IAA6I,CAC9I;IACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAC1F,QAAQ,EAAE,CAAC;SACR,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,uMAAuM,CACxM;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,4FAA4F,CAC7F;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,0KAA0K,CAC3K;IACH,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,qGAAqG,CACtG;CACJ,CAAC;AAEF,gFAAgF;AAEhF,SAAS,oBAAoB,CAAC,IAAY,EAAE,QAAkB;IAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACzB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACnF,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,GAAW,EACX,KAAa,EACb,IAAc,EACd,KAAgB;IAEhB,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAEhC,iFAAiF;IACjF,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8EAA8E;IAC9E,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1C,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,mFAAmF;QACnF,gFAAgF;QAChF,4DAA4D;QAC5D,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAE5F,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACnC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC;YAAE,OAAO,KAAK,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,IAAI,wBAAwB,GAAG,KAAK,CAAC;IAErC,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,MAAM;gBAAE,wBAAwB,GAAG,IAAI,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACvB,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC9B,6EAA6E;YAC7E,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACxC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,8EAA8E;YAC9E,wEAAwE;YACxE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,IAAI,wBAAwB,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAe,EACf,IAKC;IAED,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,MAAM,KAAK,GAAc,EAAE,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5E,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IACxD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAmB,EACnB,YAAqB,EACrB,SAA6B;IAE7B,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,YAAY,GAAG,YAAY,CAAiB,MAAM,CAAC,MAAM,CAAC,CAAC;YACjE,OAAO;gBACL,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,YAAY;gBACtB,WAAW,EAAE,YAAY,EAAE,QAAQ;gBACnC,YAAY,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,2CAA2C,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvF,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;YACtD,MAAM,iBAAiB,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;YACzD,OAAO;gBACL,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,cAAc;gBAC3B,YAAY,EAAE,KAAK;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,aAAa;oBACtB,IAAI,EAAE,sCAAsC,iBAAiB,mBAAmB,cAAc,IAAI;iBACnG;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,EAAE;YACX,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,aAAa,IAAI,2BAA2B;gBACrD,IAAI,EAAE,oEAAoE;aAC3E;SACF,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,IAAI,OAAO,GAAiB,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,YAAY,CAAe,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,OAAO,GAAG,WAAW,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,MAAM,MAAM,GAAG,YAAY,CAAa,OAAO,CAAC,CAAC;YACjD,IAAI,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iEAAiE;oBAC1E,IAAI,EAAE,0DAA0D;iBACjE;aACF,CAAC;QACJ,CAAC;QACD,mFAAmF;QACnF,OAAO;YACL,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,EAAE;YACX,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,6BAA6B,MAAM,CAAC,QAAQ,GAAG;gBAChF,IAAI,EAAE,4EAA4E;aACnF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAuB;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAY,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACtC,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,yBAAyB,CAAC,MAAiB,EAAE,MAAc;IACzE,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,gxBAAgxB;QAClxB,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EACH,EACE,KAAK,EACL,OAAO,EACP,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,OAAO,EACP,QAAQ,EACR,UAAU,EACV,SAAS,EACT,SAAS,GACV,EACD,EAAE,MAAM,EAAE,EACV,EAAE;QACF,OAAO,gBAAgB,CAAsB,MAAM,EAAE,KAAK,IAAI,EAAE;YAC9D,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACzD,MAAM,UAAU,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAE/D,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC7B,OAAO,GAAG,CAAC,eAAe,EAAE,2DAA2D,EAAE;oBACvF,IAAI,EAAE,wFAAwF;iBAC/F,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC3B,OAAO,GAAG,CACR,eAAe,EACf,oEAAoE,CACrE,CAAC;YACJ,CAAC;YAED,MAAM,YAAY,GAAG,QAAQ,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,CAAC;YAClE,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,aAA6B,CAAC;YAClC,IAAI,IAAyB,CAAC;YAC9B,IAAI,oBAA0C,CAAC;YAE/C,IAAI,QAAQ,EAAE,CAAC;gBACb,gEAAgE;gBAChE,IAAI,GAAG,UAAU,CAAC;gBAClB,aAAa,GAAG,EAAE,CAAC;gBACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC/E,IAAI,CAAC,cAAc,CAAC,EAAE;wBAAE,OAAO,cAAc,CAAC,KAAK,CAAC;oBACpD,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;oBAEjD,MAAM,gBAAgB,GAAa,EAAE,CAAC;oBACtC,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;wBACzB,MAAM,iBAAiB,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACnF,IAAI,CAAC,iBAAiB,CAAC,EAAE;4BAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC;wBAC1D,gBAAgB,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;oBACvD,CAAC;oBAED,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,yEAAyE;gBACzE,IAAI,GAAG,MAAM,CAAC;gBAEd,MAAM,iBAAiB,GAAG,aAAa,CAAC,CAAC,OAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjF,IAAI,CAAC,iBAAiB,CAAC,EAAE;oBAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC;gBAC1D,MAAM,eAAe,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;gBAEvD,MAAM,mBAAmB,GAAa,EAAE,CAAC;gBACzC,IAAI,WAAW,EAAE,MAAM,EAAE,CAAC;oBACxB,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7E,IAAI,CAAC,YAAY,CAAC,EAAE;wBAAE,OAAO,YAAY,CAAC,KAAK,CAAC;oBAChD,mBAAmB,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACrD,CAAC;gBAED,MAAM,iBAAiB,GAAG,QAAQ,IAAI,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,eAAe,EAAE;oBAC7D,QAAQ,EAAE,QAAQ,IAAI,EAAE;oBACxB,QAAQ,EAAE,iBAAiB;oBAC3B,cAAc,EAAE,cAAc,IAAI,EAAE;oBACpC,mBAAmB,EAAE,mBAAmB;iBACzC,CAAC,CAAC;gBAEH,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;oBACtB,OAAO,GAAG,CACR,eAAe,EACf,wBAAwB,iBAAiB,kBAAkB,OAAO,oGAAoG,EACtK,EAAE,IAAI,EAAE,sDAAsD,EAAE,CACjE,CAAC;gBACJ,CAAC;gBAED,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjC,OAAO,GAAG,CACR,gBAAgB,EAChB,6BAA6B,OAAO,mCAAmC,EACvE;wBACE,IAAI,EAAE,6HAA6H;qBACpI,CACF,CAAC;gBACJ,CAAC;gBAED,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzC,MAAM,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC;oBAC/C,QAAQ,CAAC,IAAI,CACX,GAAG,KAAK,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,4GAA4G,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,qEAAqE,CAC5Q,CAAC;oBACF,oBAAoB,GAAG,SAAS,CAAC,eAAe,CAAC;gBACnD,CAAC;gBAED,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC1C,IAAI,EAAE,CAAC;oBACP,OAAO,EAAE,mBAAmB;iBAC7B,CAAC,CAAC,CAAC;YACN,CAAC;YAED,iCAAiC;YACjC,MAAM,WAAW,GAAqB,EAAE,CAAC;YACzC,IAAI,SAA6B,CAAC;YAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9C,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;oBACpB,SAAS,GAAG,CAAC,CAAC;oBACd,MAAM;gBACR,CAAC;gBAED,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;gBAE3C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,EAC5E,MAAM,CACP,CAAC;gBAEF,6EAA6E;gBAC7E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,SAAS,GAAG,CAAC,CAAC;oBACd,MAAM;gBACR,CAAC;gBACD,oEAAoE;gBACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAC7B,OAAO,GAAG,CACR,sBAAsB,EACtB,2BAA2B,MAAM,CAAC,MAAM,IAAI,cAAc,EAAE,EAC5D;wBACE,IAAI,EAAE,kHAAkH;qBACzH,CACF,CAAC;gBACJ,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,OAAO,GAAG,CACR,SAAS,EACT,sEAAsE,EACtE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAC/C,CAAC;gBACJ,CAAC;gBAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBACnE,MAAM,UAAU,GAAmB;oBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,OAAO;iBACX,CAAC;gBACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;oBAAE,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACzD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBAAE,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC/D,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;YAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CACX,2BAA2B,WAAW,CAAC,MAAM,OAAO,aAAa,CAAC,MAAM,QAAQ,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CACzH,CAAC;YACJ,CAAC;YAED,qCAAqC;YACrC,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAClF,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAClF,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACpF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAChF,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;YAChF,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAC7C,CAAC,MAAM,CAAC;YAET,MAAM,MAAM,GAAwB;gBAClC,IAAI;gBACJ,KAAK,EAAE,WAAW;gBAClB,WAAW;gBACX,WAAW;gBACX,YAAY;gBACZ,UAAU;gBACV,QAAQ,EAAE,WAAW,CAAC,MAAM;gBAC5B,eAAe;gBACf,iBAAiB;aAClB,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;gBAClE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;gBACjD,CAAC;YACH,CAAC;YAED,IAAI,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1E,MAAM,CAAC,eAAe,GAAG,oBAAoB,CAAC;YAChD,CAAC;YAED,OAAO,EAAE,CAAsB,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/evaluation/test.d.ts

@@ -1,6 +1,6 @@
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { Config } from '../../config.js';
-interface TestRecord {
+export interface TestRecord {
     location?: {
         file?: string;
         row?: number;
@@ -57,6 +57,15 @@ export interface RegoTestOutput {
     coveragePct?: number;
     /** Present when `threshold` is set and the threshold was met. */
     thresholdMet?: boolean;
+    /**
+     * Groups of parameterized test cases. When OPA runs `test_X[case]`-style
+     * parametrized rules, each case appears as a separate record like
+     * `test_X[{"role":"admin"}]`. This field maps the base test name (e.g.
+     * `test_X`) to all of its case records, making it easy to see which specific
+     * inputs triggered a failure. Only present when at least one parametrized
+     * group is detected.
+     */
+    parameterizedGroups?: Record<string, TestRecord[]>;
 }
 export declare function registerRegoTest(server: McpServer, config: Config): void;
 export {};

package/dist/tools/evaluation/test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../../src/tools/evaluation/test.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AA4C9C,UAAU,UAAU;IAClB,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,aAAa;IACrB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,GAAG,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,UAAU,mBAAmB;IAC3B,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,0GAA0G;IAC1G,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAiDxE"}
+{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../../src/tools/evaluation/test.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAsE9C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,aAAa;IACrB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,GAAG,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,UAAU,mBAAmB;IAC3B,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,0GAA0G;IAC1G,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;CACpD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAuExE"}

package/dist/tools/evaluation/test.js

@@ -34,12 +34,30 @@ const RegoTestInput = {
         .boolean()
         .optional()
         .describe('Include local variable bindings in trace output (`--var-values`). When a table-driven test using `every tc in cases { ... }` fails, the trace shows which `tc` triggered the failure. Has no effect unless `verbose: true` is also set (OPA only emits trace entries in verbose mode).'),
+    ignorePatterns: z
+        .array(z.string())
+        .optional()
+        .describe('Glob patterns for files to exclude from the test run (`--ignore <pattern>`). Pass one pattern per array element. Useful for excluding generated or fixture files that contain no tests (e.g. `["*_generated.rego", "fixtures/**"]`).'),
+    bundle: z
+        .boolean()
+        .optional()
+        .describe('Load paths as OPA bundle roots (`--bundle`). Required when testing policies structured as bundles with a `manifest.json` at the root. Not needed for plain policy directories.'),
+    count: z
+        .number()
+        .int()
+        .min(1)
+        .optional()
+        .describe('Number of times to repeat each test (`--count N`). Default is 1. Useful for measuring repeatability or catching flaky tests under load.'),
+    timeout: z
+        .string()
+        .optional()
+        .describe('Per-test timeout as a Go duration string, e.g. `"30s"` or `"2m"` (`--timeout`). OPA\'s default is 5s. Increase for tests that load large policy sets or call slow built-ins.'),
 };
 export function registerRegoTest(server, config) {
     const opa = new OpaCli(config);
     server.registerTool('rego_test', {
         title: 'Run Rego tests',
-        description: 'Run Rego unit tests with `opa test`. Returns aggregate pass/fail counts plus per-test records. Tests live in `*_test.rego` files; rule names beginning with `test_` are picked up. Use `runPattern` to filter by name regex. Use `threshold` to gate on a minimum coverage percentage (returns COVERAGE_BELOW_THRESHOLD on failure). Use `varValues: true` with `verbose: true` to include local variable bindings in the trace -- essential for debugging table-driven tests written with `every tc in cases { ... }` to identify which case caused a failure. Note: enabling `coverage` or `threshold` switches OPA to coverage-report output mode -- per-test counts are unavailable but `coverage` and `coveragePct` fields are populated.',
+        description: "Run Rego unit tests with `opa test`. Returns aggregate pass/fail counts plus per-test records. Tests live in `*_test.rego` files; rule names beginning with `test_` are picked up automatically. Use `runPattern` to filter by name regex; when no tests match, the error hint includes the pattern you supplied. Use `threshold` to gate on minimum coverage (returns COVERAGE_BELOW_THRESHOLD on failure). Use `varValues: true` with `verbose: true` to include local variable bindings in the trace -- essential for debugging table-driven tests written with `every tc in cases { ... }` to identify which case caused a failure. When tests use the `test_X[case]` parametrized form, the output includes `parameterizedGroups` mapping each base test name to its case records. Use `ignorePatterns` to exclude generated or fixture files. Use `bundle: true` when testing bundle-structured policy directories. Use `timeout` to raise the per-test limit beyond OPA's default 5s. Note: enabling `coverage` or `threshold` switches OPA to coverage-report output mode -- per-test counts are unavailable but `coverage` and `coveragePct` fields are populated.",
         inputSchema: RegoTestInput,
         annotations: {
             readOnlyHint: true,
@@ -47,11 +65,14 @@ export function registerRegoTest(server, config) {
             idempotentHint: true,
             openWorldHint: false,
         },
-    }, async ({ paths, verbose, coverage, runPattern, threshold, varValues }, { signal }) => {
+    }, async ({ paths, verbose, coverage, runPattern, threshold, varValues, ignorePatterns, bundle, count, timeout, }, { signal }) => {
         return withToolEnvelope(config, async () => {
             const validation = validatePaths(paths, config, { mustExist: true });
             if (!validation.ok)
                 return validation.error;
+            if (count !== undefined && count < 1) {
+                return err('INVALID_INPUT', '`count` must be at least 1.');
+            }
             // When coverage or threshold is set, OPA changes its output format:
             // stdout becomes a coverage JSON object instead of a test-record array.
             const coverageMode = coverage === true || threshold !== undefined;
@@ -62,6 +83,10 @@ export function registerRegoTest(server, config) {
                 runPattern,
                 varValues,
                 threshold,
+                ignorePatterns,
+                bundle,
+                count,
+                timeout,
             }, signal);
             const subprocessFailure = mapSubprocessFailure(result, 'opa');
             if (subprocessFailure)
@@ -69,7 +94,7 @@ export function registerRegoTest(server, config) {
             if (coverageMode) {
                 return handleCoverageMode(result.stdout, result.stderr, result.exitCode, threshold);
             }
-            return handleTestRecordsMode(result.stdout, result.exitCode);
+            return handleTestRecordsMode(result.stdout, result.exitCode, runPattern);
         });
     });
 }
@@ -129,7 +154,7 @@ function handleCoverageMode(stdout, stderr, exitCode, threshold) {
  *   0 -- all tests pass
  *   2 -- one or more tests failed (failed records still appear in the JSON array)
  */
-function handleTestRecordsMode(stdout, exitCode) {
+function handleTestRecordsMode(stdout, exitCode, runPattern) {
     let records = [];
     // OPA emits a JSON array. Older versions may emit NDJSON (one object per line).
     const arrayParsed = tryParseJson(stdout);
@@ -147,8 +172,11 @@ function handleTestRecordsMode(stdout, exitCode) {
         }
     }
     if (records.length === 0 && exitCode === 0) {
+        const hint = runPattern
+            ? `No tests matched the pattern "${runPattern}". Verify the regex against your test rule names. Tests live in *_test.rego files with rules named test_*.`
+            : 'Tests live in *_test.rego files with rules named test_*.';
         return err('NO_TESTS_FOUND', 'opa test did not discover any test rules in the provided paths.', {
-            hint: 'Tests live in *_test.rego files with rules named test_*.',
+            hint,
         });
     }
     // OPA does NOT emit `pass: true` for passing tests; only `fail: true` for
@@ -156,12 +184,26 @@ function handleTestRecordsMode(stdout, exitCode) {
     const failed = records.filter((r) => r.fail).length;
     const skipped = records.filter((r) => r.skip).length;
     const passed = records.length - failed - skipped;
+    // Group parametrized test cases. OPA names them like `test_X[{"key":"val"}]`;
+    // extract the base name and bucket records for at-a-glance failure analysis.
+    const parameterizedGroups = {};
+    for (const record of records) {
+        if (record.name) {
+            const match = /^(test_[a-zA-Z0-9_]+)\[/.exec(record.name);
+            if (match) {
+                const baseName = match[1];
+                (parameterizedGroups[baseName] ??= []).push(record);
+            }
+        }
+    }
+    const hasGroups = Object.keys(parameterizedGroups).length > 0;
     return ok({
         passed,
         failed,
         skipped,
         total: records.length,
         results: records,
+        ...(hasGroups ? { parameterizedGroups } : {}),
     });
 }
 //# sourceMappingURL=test.js.map