@ploaness/config 1.0.0 → 1.2.0

package/biome-core.json

@@ -62,7 +62,7 @@
                   "kind": "objectLiteralProperty"
                 },
                 "match": "_*(.+)",
-                "formats": ["camelCase", "CONSTANT_CASE", "PascalCase"]
+                "formats": ["camelCase", "CONSTANT_CASE", "PascalCase", "snake_case"]
               },
               {
                 "selector": {
@@ -93,7 +93,8 @@
       },
       "performance": {
         "noBarrelFile": "off",
-        "noJsxPropsBind": "off"
+        "noJsxPropsBind": "off",
+        "noAccumulatingSpread": "off"
       },
       "suspicious": {
         "noDoubleEquals": "error",

package/dist/a11y.d.ts

@@ -1,3 +1,27 @@
+export type { HitTargetClassification, HitTargetProbe, HitTargetVerdict, } from '@ploaness/governance';
+export { classifyHitTarget, findDefiniteIncomplete } from '@ploaness/governance';
+import type { Page } from '@playwright/test';
 export declare const SKIPPED_ROUTE_PREFIXES: readonly string[];
 export declare const MAX_SWEEP_ROUTES: number;
+/**
+ * Wait for a page to finish rendering, before anything measures it.
+ *
+ * Call it after a navigation, and after a state change a scan is about to judge. A still document
+ * costs two animation frames; one that is animating costs however long its animations have left; a
+ * document that never stops changing costs the budget and no more, so a page nobody can settle slows
+ * the sweep rather than hanging it.
+ * @param page the page about to be scanned, left on whatever route it holds.
+ * @returns nothing. It resolves whether the page settled or the budget ran out.
+ */
+export declare const settleForScan: (page: Page) => Promise<void>;
+/**
+ * The pages this project declares that the sweep did not cover, each with what to do about it.
+ *
+ * Answers with nothing when the member declares no application routes at all, which is the honest
+ * result for a package that has no app directory rather than a claim that its pages are covered.
+ * @param visitedRoutes the addresses the crawl reached and scanned.
+ * @param answeredRoutes the addresses that answered, forwarding ones included.
+ * @returns one sentence per uncovered page, ready to be shown as a failure.
+ */
+export declare const unsweptRoutes: (visitedRoutes: readonly string[], answeredRoutes: readonly string[]) => readonly string[];
 //# sourceMappingURL=a11y.d.ts.map

package/dist/a11y.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"a11y.d.ts","sourceRoot":"","sources":["../src/a11y.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAA4C,CAAA;AAEhG,eAAO,MAAM,gBAAgB,EAAE,MAAiD,CAAA"}
+{"version":3,"file":"a11y.d.ts","sourceRoot":"","sources":["../src/a11y.ts"],"names":[],"mappings":"AAkBA,YAAY,EACV,uBAAuB,EACvB,cAAc,EACd,gBAAgB,GACjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAIhF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAW5C,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAA4C,CAAA;AAEhG,eAAO,MAAM,gBAAgB,EAAE,MAAiD,CAAA;AA8IhF;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,GAAU,MAAM,IAAI,KAAG,OAAO,CAAC,IAAI,CAU5D,CAAA;AAyDD;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,GACxB,eAAe,SAAS,MAAM,EAAE,EAChC,gBAAgB,SAAS,MAAM,EAAE,KAChC,SAAS,MAAM,EAgBjB,CAAA"}

package/dist/a11y.js

@@ -1,9 +1,228 @@
-// The two facts the shipped accessibility sweep cannot know about the project it runs in.
+// What the shipped accessibility sweep cannot know about the project it runs in, and the two decisions
+// it must not make for itself.
 //
-// The sweep itself is a managed file, byte-identical in every consumer, so this module is the whole of
-// its configuration surface. Both entries are one-directional: a project may add a route prefix the
-// crawl must not follow and may lower the route ceiling, and can do neither in the other direction.
+// The sweep is a managed file, byte-identical in every consumer, so this module is the whole of its
+// configuration surface. The first two entries are one-directional: a project may add a route prefix
+// the crawl must not follow and may lower the route ceiling, and can do neither in the other
+// direction.
+//
+// The last two are not configuration at all. They are rules, so they live in `@ploaness/governance`
+// where a spec exercises them against captured axe output and against probe shapes no browser has to
+// produce on demand, and they are re-exported here because the sweep imports through one entry point.
+//
+// `settleForScan` is a third kind again: neither a setting nor a rule, but the one piece of I/O the
+// sweep cannot do without and cannot keep to itself. It is here rather than in `@ploaness/governance`
+// because that package forbids I/O, and here rather than inside the sweep because a project has to
+// write its own scans for the pages the crawl cannot discover - an unlinked page, a custom admin view -
+// and two definitions of "the page is ready" would drift.
+export { classifyHitTarget, findDefiniteIncomplete } from '@ploaness/governance';
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { appRootOf, declaredRoutesOf, findUnsweptRoutes, } from '@ploaness/governance';
 import { projectSettings } from './project-settings.js';
 export const SKIPPED_ROUTE_PREFIXES = projectSettings.accessibilitySkipRoutes;
 export const MAX_SWEEP_ROUTES = projectSettings.accessibilityRouteBudget;
+// Why a scan needs a wait at all: `page.goto` resolves at the `load` event, and a React application
+// hydrates after that. axe measured in between reads a tree still being assembled - a heading whose
+// level has not resolved lands in `incomplete`, which a consuming project saw on one run in three -
+// and reads contrast against text the final font has not laid out yet.
+//
+// WHAT IT WAITS FOR, in this order: the document's font set has answered; the element count has held
+// steady across two consecutive animation frames; every animation that will ever end has ended; and
+// the count has held steady once more. Fonts first, because contrast is measured on rendered pixels
+// and a face that arrives late reflows the text being judged. The count before the animations rather
+// than after, for the reason written beside it - an animation cannot be waited for until something has
+// created it, and on a hydrating page the mount is what creates it. Two frames rather than one,
+// because React yields between hydration segments and a
+// yield that happens to straddle a frame boundary is indistinguishable from a finished render if only
+// one frame is asked. A fixed count of frames was the first draft and was wrong in the direction that
+// matters: it settles the pages that were never the problem and gives up on a heavy panel exactly
+// where the defect lives.
+//
+// WHY ANIMATIONS ARE PART OF IT. An element count cannot see an opacity. A page that fades its content
+// in changes no element while it does so, so the count was steady two frames after hydration and a
+// scan then measured a half-transparent paragraph - and axe blends a partial opacity toward the
+// background exactly as an eye does, so it reported a contrast this page never actually renders at
+// rest. That is the harmless direction. The other one is why this is a correctness fix rather than a
+// convenience: text animating TOWARDS a colour too pale to read was measured at its opening frame and
+// PASSED, so the sweep built to catch contrast defects returned green on a page whose resting state is
+// a defect. Waiting for the animations to end measures the state a reader is left looking at.
+//
+// An animation that never ends is excluded rather than waited on, and the distinction is the whole
+// reason this does not simply cost the budget. A spinner has no resting state to wait for, so awaiting
+// it would spend the ceiling below on every settle of every control of every route, in exchange for
+// nothing. `finished` never resolves for one, which is a hang the ceiling would absorb silently. The
+// test for it is `iterations`, which a spinner reports as `Infinity`; a paused or already-finished
+// animation is excluded too, because it is showing the frame a reader is looking at right now.
+//
+// A cancelled animation REJECTS `finished` rather than resolving, and that rejection is swallowed. A
+// cancellation is a state change like any other and the element-count check notices it; ending the
+// whole settle over one cancelled transition would report nothing useful about the page.
+//
+// The two callbacks below are written inline rather than named, which is not a style preference: a
+// named helper closing over nothing is one the shipped rules ask to be hoisted to the outer scope, and
+// the outer scope is the one place this function may not reach.
+//
+// WHY NOT `networkidle`. Playwright's own documentation discourages it; it throws on expiry rather
+// than resolving; and it answers a different question. A page can be network-idle and mid-hydration.
+// It is also unusable here in particular: the sweep runs against `next dev`, whose every page holds a
+// hot-reload socket open, so no page it ever visits goes idle.
+//
+// WHY THE CEILING IS A TIMER. `requestAnimationFrame` does not fire in a page the browser has
+// backgrounded, so a frame-counted ceiling is not a ceiling. A throttled background timer still fires.
+// The race is inside the page for the same reason the hit-target probe does its work in one
+// `evaluate`: a Node-side race would leave the in-page promise pending against a context the next
+// navigation destroys.
+const SETTLE_BUDGET_MS = 1000;
+// Everything this function needs is inside it. Playwright ships a page function to the browser as its
+// own source text, so a reference to anything at module scope here would be a ReferenceError in the
+// page rather than a compile error in this file - the one mistake this shape cannot be checked for.
+// It is also why the animation wait below is written inline rather than as a helper of its own.
+const settleInPage = async (budgetMs) => {
+    const quietFrames = 2;
+    // Recursive rather than a loop over a counter, because there is no mutable binding to count with:
+    // this repository bans `let` and in-place mutation in its own source as well as in a consumer's. Each
+    // step awaits a frame, so what grows is frames rather than stack - an awaited recursion returns to
+    // the microtask queue every time. The frame is awaited inline because this is its only caller.
+    const stable = async (previous, remaining) => {
+        await new Promise((resolve) => {
+            requestAnimationFrame(() => {
+                resolve();
+            });
+        });
+        const current = document.querySelectorAll('*').length;
+        if (current !== previous) {
+            await stable(current, quietFrames);
+            return;
+        }
+        if (remaining > 1) {
+            await stable(current, remaining - 1);
+        }
+    };
+    const settled = async () => {
+        // The optional call covers a document carrying no font set at all, which must skip the wait
+        // rather than fail the settle.
+        await document.fonts?.ready;
+        // The element count FIRST, and this order is the whole of it. An animation does not exist until
+        // something creates it, and on a hydrating page that something is the mount: measured before the
+        // framework has mounted, `getAnimations` answers an honest empty list, and a settle that believed
+        // it would scan the very frame the animation is about to start from. Waiting for the tree to stop
+        // changing is waiting for the mount, which is what puts the animations on the page to be found.
+        await stable(document.querySelectorAll('*').length, quietFrames);
+        await Promise.all((document.getAnimations?.() ?? [])
+            .filter((animation) => animation.playState === 'running' &&
+            animation.effect !== null &&
+            Number.isFinite(animation.effect.getComputedTiming().iterations))
+            .map(async (animation) => {
+            try {
+                await animation.finished;
+            }
+            catch {
+                // A cancelled animation rejects rather than resolving. The cancellation is a state change
+                // like any other and the count below is what notices it.
+            }
+        }));
+        // And again afterwards, because an animation that ends by revealing a panel adds elements as it
+        // finishes. This pass costs two frames on a page where nothing moved.
+        await stable(document.querySelectorAll('*').length, quietFrames);
+    };
+    const deadline = async () => {
+        await new Promise((resolve) => {
+            setTimeout(() => {
+                resolve();
+            }, budgetMs);
+        });
+    };
+    await Promise.race([settled(), deadline()]);
+};
+/**
+ * Wait for a page to finish rendering, before anything measures it.
+ *
+ * Call it after a navigation, and after a state change a scan is about to judge. A still document
+ * costs two animation frames; one that is animating costs however long its animations have left; a
+ * document that never stops changing costs the budget and no more, so a page nobody can settle slows
+ * the sweep rather than hanging it.
+ * @param page the page about to be scanned, left on whatever route it holds.
+ * @returns nothing. It resolves whether the page settled or the budget ran out.
+ */
+export const settleForScan = async (page) => {
+    try {
+        await page.evaluate(settleInPage, SETTLE_BUDGET_MS);
+    }
+    catch {
+        // A route that redirects on mount destroys the execution context while this is in flight, and a
+        // closed page cannot be asked anything. Neither is an accessibility finding, and neither should end
+        // a sweep: the scan that follows then runs on whatever the page holds, which is what every call
+        // site did before this function existed. A page that is genuinely broken still fails at `analyze`,
+        // with an axe result to read rather than a protocol error naming no route.
+    }
+};
+// What the sweep cannot work out from inside the browser: which pages this project declares.
+//
+// The crawl knows what it reached. Only the file tree knows what exists, so the completeness check
+// needs both, and reading the tree is I/O - which is why the walk is here and every DECISION it feeds
+// is in `@ploaness/governance`, where a coverage floor measures it. What follows is a directory walk
+// and two file reads; which file is a route file, and what address it answers at, are not decided
+// here.
+//
+// This is a function rather than the module-scope constants above it, and that is load-bearing.
+// `ploaness/a11y` is imported by a project's own specs too - that is why `settleForScan` lives here -
+// and a recursive walk evaluated at import time would run once per spec module, in every worker.
+// Where a project's own code can be. Walking from the member root would descend into `node_modules`
+// and `.next`, which are large, and into `dist`, which holds a compiled copy of the same routes.
+const WALKED_ROOTS = ['src', 'app', 'tests'];
+// The extensions a route file or a specification can have. Filtering here rather than in the rule
+// keeps the corpus small; the rule still decides what a `page.tsx` means.
+const READ_EXTENSIONS = ['.ts', '.tsx', '.jsx', '.js', '.mdx'];
+/** Where a project's specifications live, which is a ploaness convention rather than a setting. */
+const SPEC_ROOT = 'tests/';
+const filesUnder = (root, relative) => {
+    const entries = readdirSync(path.join(root, relative), {
+        withFileTypes: true,
+    });
+    return entries.flatMap((entry) => {
+        // Forward slashes throughout, because the rules receive these paths as addresses-in-waiting and a
+        // backslash from a Windows walk would split into segments nothing matches.
+        const child = relative === '' ? entry.name : `${relative}/${entry.name}`;
+        if (entry.isDirectory()) {
+            return filesUnder(root, child);
+        }
+        return READ_EXTENSIONS.some((extension) => child.endsWith(extension))
+            ? [child]
+            : [];
+    });
+};
+const projectFiles = (root) => WALKED_ROOTS.flatMap((walked) => existsSync(path.join(root, walked)) ? filesUnder(root, walked) : []);
+const readSpecs = (root, paths) => paths
+    .filter((file) => file.startsWith(SPEC_ROOT))
+    .map((file) => ({
+    path: file,
+    source: readFileSync(path.join(root, file), 'utf8'),
+}));
+/**
+ * The pages this project declares that the sweep did not cover, each with what to do about it.
+ *
+ * Answers with nothing when the member declares no application routes at all, which is the honest
+ * result for a package that has no app directory rather than a claim that its pages are covered.
+ * @param visitedRoutes the addresses the crawl reached and scanned.
+ * @param answeredRoutes the addresses that answered, forwarding ones included.
+ * @returns one sentence per uncovered page, ready to be shown as a failure.
+ */
+export const unsweptRoutes = (visitedRoutes, answeredRoutes) => {
+    const root = process.cwd();
+    const paths = projectFiles(root);
+    const appRoot = appRootOf(paths);
+    if (appRoot === undefined) {
+        return [];
+    }
+    const specs = readSpecs(root, paths);
+    return findUnsweptRoutes({
+        declaredRoutes: declaredRoutesOf(paths, appRoot),
+        visitedRoutes,
+        answeredRoutes,
+        skippedPrefixes: SKIPPED_ROUTE_PREFIXES,
+        specs,
+        everyFile: specs,
+    }).map((unswept) => `${unswept.file} [${unswept.rule}] ${unswept.reason}`);
+};
 //# sourceMappingURL=a11y.js.map

package/dist/a11y.js.map

@@ -1 +1 @@
-{"version":3,"file":"a11y.js","sourceRoot":"","sources":["../src/a11y.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,EAAE;AACF,uGAAuG;AACvG,oGAAoG;AACpG,oGAAoG;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,CAAC,MAAM,sBAAsB,GAAsB,eAAe,CAAC,uBAAuB,CAAA;AAEhG,MAAM,CAAC,MAAM,gBAAgB,GAAW,eAAe,CAAC,wBAAwB,CAAA"}
+{"version":3,"file":"a11y.js","sourceRoot":"","sources":["../src/a11y.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,+BAA+B;AAC/B,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,6FAA6F;AAC7F,aAAa;AACb,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,sGAAsG;AACtG,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,mGAAmG;AACnG,wGAAwG;AACxG,0DAA0D;AAO1D,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAEhF,OAAO,EAAe,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAGlB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,CAAC,MAAM,sBAAsB,GAAsB,eAAe,CAAC,uBAAuB,CAAA;AAEhG,MAAM,CAAC,MAAM,gBAAgB,GAAW,eAAe,CAAC,wBAAwB,CAAA;AAEhF,oGAAoG;AACpG,oGAAoG;AACpG,oGAAoG;AACpG,uEAAuE;AACvE,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,oGAAoG;AACpG,qGAAqG;AACrG,uGAAuG;AACvG,gGAAgG;AAChG,wDAAwD;AACxD,sGAAsG;AACtG,sGAAsG;AACtG,kGAAkG;AAClG,0BAA0B;AAC1B,EAAE;AACF,uGAAuG;AACvG,mGAAmG;AACnG,gGAAgG;AAChG,mGAAmG;AACnG,qGAAqG;AACrG,sGAAsG;AACtG,uGAAuG;AACvG,8FAA8F;AAC9F,EAAE;AACF,mGAAmG;AACnG,uGAAuG;AACvG,oGAAoG;AACpG,qGAAqG;AACrG,mGAAmG;AACnG,+FAA+F;AAC/F,EAAE;AACF,qGAAqG;AACrG,mGAAmG;AACnG,yFAAyF;AACzF,EAAE;AACF,mGAAmG;AACnG,uGAAuG;AACvG,gEAAgE;AAChE,EAAE;AACF,mGAAmG;AACnG,qGAAqG;AACrG,sGAAsG;AACtG,+DAA+D;AAC/D,EAAE;AACF,8FAA8F;AAC9F,uGAAuG;AACvG,4FAA4F;AAC5F,kGAAkG;AAClG,uBAAuB;AACvB,MAAM,gBAAgB,GAAW,IAAI,CAAA;AAuBrC,sGAAsG;AACtG,oGAAoG;AACpG,oGAAoG;AACpG,gGAAgG;AAChG,MAAM,YAAY,GAAG,KAAK,EAAE,QAAgB,EAAiB,EAAE;IAC7D,MAAM,WAAW,GAAW,CAAC,CAAA;IAC7B,kGAAkG;IAClG,sGAAsG;IACtG,mGAAmG;IACnG,+FAA+F;IAC/F,MAAM,MAAM,GAAG,KAAK,EAAE,QAAgB,EAAE,SAAiB,EAAiB,EAAE;QAC1E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;YACpD,qBAAqB,CAAC,GAAS,EAAE;gBAC/B,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAW,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAC7D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAClC,OAAM;QACR,CAAC;QACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;QACtC,CAAC;IACH,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,4FAA4F;QAC5F,+BAA+B;QAC/B,MAAM,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;QAC3B,gGAAgG;QAChG,iGAAiG;QACjG,kGAAkG;QAClG,kGAAkG;QAClG,gGAAgG;QAChG,MAAM,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAChE,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC;aAC/B,MAAM,CACL,CAAC,SAAwB,EAAW,EAAE,CACpC,SAAS,CAAC,SAAS,KAAK,SAAS;YACjC,SAAS,CAAC,MAAM,KAAK,IAAI;YACzB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,CACnE;aACA,GAAG,CAAC,KAAK,EAAE,SAAwB,EAAiB,EAAE;YACrD,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,QAAQ,CAAA;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,0FAA0F;gBAC1F,yDAAyD;YAC3D,CAAC;QACH,CAAC,CAAC,CACL,CAAA;QACD,gGAAgG;QAChG,sEAAsE;QACtE,MAAM,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAClE,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;YACpD,UAAU,CAAC,GAAS,EAAE;gBACpB,OAAO,EAAE,CAAA;YACX,CAAC,EAAE,QAAQ,CAAC,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;AAC7C,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAU,EAAiB,EAAE;IAC/D,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,gGAAgG;QAChG,oGAAoG;QACpG,gGAAgG;QAChG,mGAAmG;QACnG,2EAA2E;IAC7E,CAAC;AACH,CAAC,CAAA;AAED,6FAA6F;AAC7F,EAAE;AACF,mGAAmG;AACnG,sGAAsG;AACtG,qGAAqG;AACrG,kGAAkG;AAClG,QAAQ;AACR,EAAE;AACF,gGAAgG;AAChG,sGAAsG;AACtG,iGAAiG;AAEjG,oGAAoG;AACpG,iGAAiG;AACjG,MAAM,YAAY,GAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;AAE/D,kGAAkG;AAClG,0EAA0E;AAC1E,MAAM,eAAe,GAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;AAEjF,mGAAmG;AACnG,MAAM,SAAS,GAAW,QAAQ,CAAA;AAElC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAqB,EAAE;IACvE,MAAM,OAAO,GAAsB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;QACxE,aAAa,EAAE,IAAI;KACpB,CAAC,CAAA;IACF,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,KAAa,EAAqB,EAAE;QAC1D,kGAAkG;QAClG,2EAA2E;QAC3E,MAAM,KAAK,GAAW,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAA;QAChF,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAChC,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,SAAiB,EAAW,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC,KAAK,CAAC;YACT,CAAC,CAAC,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,IAAY,EAAqB,EAAE,CACvD,YAAY,CAAC,OAAO,CAAC,CAAC,MAAc,EAAqB,EAAE,CACzD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACpE,CAAA;AAEH,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAwB,EAAyB,EAAE,CAClF,KAAK;KACF,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;KAC7D,GAAG,CACF,CAAC,IAAY,EAAc,EAAE,CAAC,CAAC;IAC7B,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC;CACpD,CAAC,CACH,CAAA;AAEL;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,aAAgC,EAChC,cAAiC,EACd,EAAE;IACrB,MAAM,IAAI,GAAW,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,MAAM,KAAK,GAAsB,YAAY,CAAC,IAAI,CAAC,CAAA;IACnD,MAAM,OAAO,GAAuB,SAAS,CAAC,KAAK,CAAC,CAAA;IACpD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,KAAK,GAA0B,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC3D,OAAO,iBAAiB,CAAC;QACvB,cAAc,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC;QAChD,aAAa;QACb,cAAc;QACd,eAAe,EAAE,sBAAsB;QACvC,KAAK;QACL,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC,GAAG,CAAC,CAAC,OAAqB,EAAU,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;AAClG,CAAC,CAAA"}

package/dist/access.d.ts

@@ -1,4 +1,18 @@
-import type { PublicAccess } from '@ploaness/governance';
-export { type AccessReport, undeclaredGrants } from '@ploaness/governance';
+import { type DatalessFields, type PublicAccess } from '@ploaness/governance';
+export { type AccessReport, type DatalessFields, staleDeclarations, undeclaredGrants, } from '@ploaness/governance';
 export declare const PUBLIC_ACCESS: readonly PublicAccess[];
+/**
+ * Every field path the project's Payload configuration reports but stores nothing behind.
+ *
+ * Resolved from the working directory, which in the Playwright worker is the project root: the
+ * `@payload-config` alias in the project tsconfig names the file, and the environment the configuration
+ * validates at module scope has already been loaded by the shipped Playwright config.
+ *
+ * A configuration that cannot be read or imported yields nothing, which judges every reported path and
+ * so errs on the side of more findings rather than fewer - the sweep is a security boundary, and a
+ * failure here must never quietly widen it. It is also not this sweep's report to make: `payload-defaults`
+ * boots the same configuration and names an unbuildable one far better than a browser test could.
+ * @returns the dataless paths of each entity that has any, keyed by slug; empty when unreadable.
+ */
+export declare const datalessFields: () => Promise<DatalessFields>;
 //# sourceMappingURL=access.d.ts.map

package/dist/access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAGxD,OAAO,EAAE,KAAK,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE1E,eAAO,MAAM,aAAa,EAAE,SAAS,YAAY,EAAiC,CAAA"}
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAqBA,OAAO,EACL,KAAK,cAAc,EAEnB,KAAK,YAAY,EAIlB,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,sBAAsB,CAAA;AAE7B,eAAO,MAAM,aAAa,EAAE,SAAS,YAAY,EAAiC,CAAA;AAElF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,cAAc,CAa7D,CAAA"}

package/dist/access.js

@@ -1,4 +1,52 @@
+// The one fact the shipped access-boundary sweep cannot know about the project it runs in, and the
+// decision it makes about what the running application answered.
+//
+// The sweep itself is a managed file, byte-identical in every consumer, so this module is the whole of
+// its configuration surface. It cannot loosen the sweep in the way an exclusion loosens a gate: every
+// entry names one permission the project grants on purpose and says why, and the sweep still reports
+// every other anonymous permission it finds. A project that declares nothing is judged most strictly.
+//
+// The verdict travels with the setting because the sweep is a spec no unit test can reach: what it does
+// with Payload's answer is decided in `access-boundary.ts` and re-exported here, leaving the spec
+// holding the HTTP call and the assertion.
+//
+// The other fact the sweep needs is which reported fields hold no data. `/api/access` cannot say: a
+// `type: 'ui'` field is reported exactly as a real column is, and no rule can be written against one.
+// Only the BUILT configuration can tell them apart, so it is imported here - the same way the
+// `payload-defaults` probe imports it, and for the same reason, that the configuration Payload boots is
+// the only place the answer exists. Reading it is filesystem work, which is why it sits in this package
+// rather than in the dependency-free judging layer.
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { datalessFieldsIn, parseJsonc, payloadConfigPathOf, readKey, } from '@ploaness/governance';
 import { projectSettings } from './project-settings.js';
-export { undeclaredGrants } from '@ploaness/governance';
+export { staleDeclarations, undeclaredGrants, } from '@ploaness/governance';
 export const PUBLIC_ACCESS = projectSettings.publicAccess;
+/**
+ * Every field path the project's Payload configuration reports but stores nothing behind.
+ *
+ * Resolved from the working directory, which in the Playwright worker is the project root: the
+ * `@payload-config` alias in the project tsconfig names the file, and the environment the configuration
+ * validates at module scope has already been loaded by the shipped Playwright config.
+ *
+ * A configuration that cannot be read or imported yields nothing, which judges every reported path and
+ * so errs on the side of more findings rather than fewer - the sweep is a security boundary, and a
+ * failure here must never quietly widen it. It is also not this sweep's report to make: `payload-defaults`
+ * boots the same configuration and names an unbuildable one far better than a browser test could.
+ * @returns the dataless paths of each entity that has any, keyed by slug; empty when unreadable.
+ */
+export const datalessFields = async () => {
+    try {
+        const root = process.cwd();
+        const tsconfig = parseJsonc(readFileSync(path.join(root, 'tsconfig.json'), 'utf8')).value;
+        const configFile = path.join(root, payloadConfigPathOf(tsconfig));
+        const configModule = await import(pathToFileURL(configFile).href);
+        // Awaited either way: `buildConfig` returns a promise, and a plain object is read the same.
+        return datalessFieldsIn(await readKey(configModule, 'default'));
+    }
+    catch {
+        return {};
+    }
+};
 //# sourceMappingURL=access.js.map

package/dist/access.js.map

@@ -1 +1 @@
-{"version":3,"file":"access.js","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,OAAO,EAAqB,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE1E,MAAM,CAAC,MAAM,aAAa,GAA4B,eAAe,CAAC,YAAY,CAAA"}
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,iEAAiE;AACjE,EAAE;AACF,uGAAuG;AACvG,sGAAsG;AACtG,qGAAqG;AACrG,sGAAsG;AACtG,EAAE;AACF,wGAAwG;AACxG,kGAAkG;AAClG,2CAA2C;AAC3C,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,8FAA8F;AAC9F,wGAAwG;AACxG,wGAAwG;AACxG,oDAAoD;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAEL,gBAAgB,EAEhB,UAAU,EACV,mBAAmB,EACnB,OAAO,GACR,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,OAAO,EAGL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,sBAAsB,CAAA;AAE7B,MAAM,CAAC,MAAM,aAAa,GAA4B,eAAe,CAAC,YAAY,CAAA;AAElF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,IAA6B,EAAE;IAChE,IAAI,CAAC;QACH,MAAM,IAAI,GAAW,OAAO,CAAC,GAAG,EAAE,CAAA;QAClC,MAAM,QAAQ,GAAY,UAAU,CAClC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CACvD,CAAC,KAAK,CAAA;QACP,MAAM,UAAU,GAAW,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAA;QACzE,MAAM,YAAY,GAAY,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAA;QAC1E,4FAA4F;QAC5F,OAAO,gBAAgB,CAAC,MAAM,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAA;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA"}

package/dist/eslint-core.d.ts

@@ -1,5 +1,6 @@
 import type { Linter } from 'eslint';
 import { defineConfig } from 'eslint/config';
+import { type RestrictedSyntax } from './eslint-security.js';
 /**
  * One flat-config block, described by its shape rather than by the plugins' own declarations.
  *
@@ -20,11 +21,6 @@ export type FlatConfigBlock = Readonly<Record<string, unknown>>;
  * because an assertion is uncovered by the type coverage measurement this repository holds at 100%.
  */
 export type RuleTable = Partial<Linter.RulesRecord>;
-/** One `no-restricted-syntax` entry: the shape to reject, and what to say when it appears. */
-export interface RestrictedSyntax {
-    readonly selector: string;
-    readonly message: string;
-}
 /**
  * A whole `no-restricted-syntax` setting: the severity first, then the shapes.
  *
@@ -64,6 +60,8 @@ declare const NO_LITERAL_ASSERTIONS: readonly RestrictedSyntax[];
 export declare const compose: typeof defineConfig;
 /** Formatting is Biome's job; this disables every conflicting stylistic rule and must stay last. */
 export declare const prettierLast: FlatConfigBlock;
+/** The same layer with every rule it declares raised to `error`; a rule it turns off stays off. */
+export declare const withoutWarnings: (layer: object) => FlatConfigBlock;
 /** The preset layers every ploaness-governed project runs, none of which may report at `warn`. */
 export declare const baseLayers: readonly FlatConfigBlock[];
 /**
@@ -90,11 +88,15 @@ export declare const testIntegrityRules: RuleTable;
 /**
  * The framework idiom a spec is written in, which the production rules were never aimed at.
  *
- * Only idiom is relaxed. Every rule that carries a rule of the governing standard - the size caps, the
- * explicitness rules, the ban on a non-null assertion, the unsafe-any family - stays ON, because the
- * standard says test code passes the same static-analysis checks as production code. A relaxation that
- * made a test easier to write by making it less checked would exempt the suite from the contract it
- * exists to enforce.
+ * Only idiom is relaxed. Every rule that carries a rule of the governing standard - the explicitness
+ * rules, the ban on a non-null assertion, the unsafe-any family, and every size cap but one - stays ON,
+ * because the standard says test code passes the same static-analysis checks as production code. A
+ * relaxation that made a test easier to write by making it less checked would exempt the suite from the
+ * contract it exists to enforce.
+ *
+ * The one exception is `max-lines-per-function`, and it is a role distinction rather than a relaxation:
+ * the cap bounds a unit of logic, and a `describe` body is a list of independent declarations. The file
+ * cap still applies. See the entry itself for the argument.
  *
  * Shared by every shipped config rather than stated in each, because what earns the exemption is being a
  * SPEC rather than being a Payload application's spec. Stated twice it drifted: a library consumer's
@@ -162,6 +164,16 @@ export declare const processConfigBlock: () => FlatConfigBlock;
  * catch.
  */
 export declare const specEnvironmentBlock: () => FlatConfigBlock;
+/**
+ * The hook directories' role, which is to carry a request's state between Payload hooks.
+ *
+ * Mounted by the Payload configuration alone: a library has no request to carry state on. Built with the
+ * shared constructor, so the base carve-out survives the replacement a block that sets this rule
+ * performs, and with the plugin re-mounted, for the reason `processConfigBlock` states.
+ * @param files the globs the project's hooks live under.
+ */
+export declare const hookContextBlock: (files: readonly string[]) => FlatConfigBlock;
+export type { RestrictedSyntax } from './eslint-security.js';
 /** The shared selectors, re-exported so a scoped block can spread rather than restate them. */
 export { NO_FAST_CHECK_SEED, NO_INHERITANCE, NO_LITERAL_ASSERTIONS, NO_MOCK_PROPERTIES, NO_NETWORK_GUARD_ESCAPE, NO_TEST_ORDER_ESCAPE, };
 //# sourceMappingURL=eslint-core.d.ts.map

package/dist/eslint-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eslint-core.d.ts","sourceRoot":"","sources":["../src/eslint-core.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAU5C;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAEnD,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC,CAAA;AAE/E,kGAAkG;AAClG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,+DAA+D;AAC/D,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,SAAS,OAAO,EAAE,KAAK,SAAS,eAAe,EAAE,CAAA;AAuDnF,QAAA,MAAM,kBAAkB,EAAE,SAAS,kBAAkB,EAIlD,CAAA;AAEH,QAAA,MAAM,cAAc,EAAE,uBAUrB,CAAA;AAOD,QAAA,MAAM,qBAAqB,EAAE,SAAS,gBAAgB,EAarD,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,OAAO,EAAE,OAAO,YAA2B,CAAA;AAExD,oGAAoG;AACpG,eAAO,MAAM,YAAY,EAAE,eAA0B,CAAA;AA2CrD,kGAAkG;AAClG,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EAWgB,CAAA;AAEjE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,eAAe,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAC/C,eAED,CAAA;AAEF,+FAA+F;AAC/F,eAAO,MAAM,cAAc,EAAE,SA0N5B,CAAA;AASD;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAExE,eAAO,MAAM,YAAY,EAAE,YAAqB,CAAA;AAEhD,qGAAqG;AACrG,eAAO,MAAM,kBAAkB,EAAE,SAmBhC,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc,EAAE,SAU5B,CAAA;AAUD,QAAA,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EASlD,CAAA;AAOD,QAAA,MAAM,uBAAuB,EAAE,SAAS,gBAAgB,EAuEvD,CAAA;AAKD,QAAA,MAAM,oBAAoB,EAAE,SAAS,gBAAgB,EAoBpD,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAQlC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,SAAS,MAAM,EAAE,KAAG,eAgCzD,CAAA;AAkDF,uGAAuG;AACvG,eAAO,MAAM,iBAAiB,GAC5B,OAAO,SAAS,MAAM,EAAE,EACxB,SAAS,SAAS,MAAM,EAAE,KACzB,eAQD,CAAA;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAAO,eAUpC,CAAA;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,oBAAoB,QAAO,eAQtC,CAAA;AAEF,+FAA+F;AAC/F,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,GACrB,CAAA"}
+{"version":3,"file":"eslint-core.d.ts","sourceRoot":"","sources":["../src/eslint-core.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAS5C,OAAO,EAAE,KAAK,gBAAgB,EAAyB,MAAM,sBAAsB,CAAA;AAEnF;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAEnD;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC,CAAA;AAE/E,kGAAkG;AAClG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,+DAA+D;AAC/D,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,SAAS,OAAO,EAAE,KAAK,SAAS,eAAe,EAAE,CAAA;AAsEnF,QAAA,MAAM,kBAAkB,EAAE,SAAS,kBAAkB,EAIlD,CAAA;AAEH,QAAA,MAAM,cAAc,EAAE,uBAUrB,CAAA;AAiBD,QAAA,MAAM,qBAAqB,EAAE,SAAS,gBAAgB,EAerD,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,OAAO,EAAE,OAAO,YAA2B,CAAA;AAExD,oGAAoG;AACpG,eAAO,MAAM,YAAY,EAAE,eAA0B,CAAA;AA8BrD,mGAAmG;AACnG,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,KAAG,eAe/C,CAAA;AAED,kGAAkG;AAClG,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EAWgB,CAAA;AAEjE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,eAAe,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAC/C,eAED,CAAA;AAEF,+FAA+F;AAC/F,eAAO,MAAM,cAAc,EAAE,SAkU5B,CAAA;AASD;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAExE,eAAO,MAAM,YAAY,EAAE,YAAqB,CAAA;AAEhD,qGAAqG;AACrG,eAAO,MAAM,kBAAkB,EAAE,SAwBhC,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,cAAc,EAAE,SAgB5B,CAAA;AAUD,QAAA,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EASlD,CAAA;AAOD,QAAA,MAAM,uBAAuB,EAAE,SAAS,gBAAgB,EAuEvD,CAAA;AAKD,QAAA,MAAM,oBAAoB,EAAE,SAAS,gBAAgB,EAoBpD,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,EAAE,SASlC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,SAAS,MAAM,EAAE,KAAG,eAgCzD,CAAA;AA6DF,uGAAuG;AACvG,eAAO,MAAM,iBAAiB,GAC5B,OAAO,SAAS,MAAM,EAAE,EACxB,SAAS,SAAS,MAAM,EAAE,KACzB,eAQD,CAAA;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAAO,eAUpC,CAAA;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,oBAAoB,QAAO,eAQtC,CAAA;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAAI,OAAO,SAAS,MAAM,EAAE,KAAG,eAM1D,CAAA;AAEF,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,+FAA+F;AAC/F,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,GACrB,CAAA"}