@ploaness/governance 1.0.0

package/dist/settings.js

@@ -0,0 +1,378 @@
+// Consumer-declared parameters. A project
+// declares them under a `ploaness` key in its package.json. Every field is optional and every default is
+// deliberately strict, so a project that declares nothing still receives the full contract.
+//
+// The set is intentionally small. ploaness owns the rules; a project may declare only the facts ploaness
+// cannot know for it: where its sources live, which generated file a rule must skip, how large its
+// bundle may grow. There is no field that turns a gate off, because "do not disable the failing check"
+// is the contract rather than a preference.
+import { BUNDLE_BUDGET_BYTES } from './bundle-budget.js';
+import { matchesGlob, matchesRole } from './file-roles.js';
+import { GENERATED_ARTEFACTS } from './generated-denial.js';
+// Only string-valued entries survive `asStringRecord`: a non-string would reach `spawn` as a
+// malformed environment.
+import { asRecord, asStringRecord, asText, isArray, isRecord } from './json-shapes.js';
+// Imported rather than recomputed. The same three lines stood here and in `bundle-budget.ts`, which is
+// the module that owns this number - two arithmetic expressions that had to agree, in a package whose
+// own guidance says a value stated twice will not stay stated twice.
+const DEFAULT_BUNDLE_BUDGET_BYTES = BUNDLE_BUDGET_BYTES;
+// The two variables Payload itself requires of every project. They are defaults rather than a hard-coded
+// environment, so a project whose config demands more can add to them, but no project has to restate what
+// Payload already mandates. Both are inert placeholders: no host is contacted and no secret is signed.
+const DEFAULT_ANALYSIS_ENV = {
+    PAYLOAD_SECRET: 'ploaness-static-analysis-placeholder',
+    DATABASE_URL: 'postgres://127.0.0.1:5432/ploaness-static-analysis',
+};
+// Generated artefacts every Payload project carries. They are defaults rather than hard-coded skips, so
+// a project that renames them can declare its own, but no project has to restate the obvious.
+// The scaffolding Payload generates. A project declaring nothing is held to exactly this, which is the
+// set that shipped before the role was declarable.
+const DEFAULT_FRAMEWORK_GLUE = ['src/app/(payload)/**', 'src/payload.config.ts'];
+/** The pure-logic floor a Payload project has by convention. */
+const DEFAULT_PURE_LOGIC_ROOTS = ['src/access', 'src/lib'];
+// `(^|/)` rather than `^`: these are ploaness's own patterns, and they name files RELATIVE TO A MEMBER.
+// The tracked-tree gates walk the whole repository, so anchoring at the repository root would exempt
+// `src/payload-types.ts` in a single-package project and miss `apps/web/src/payload-types.ts` in a
+// workspace - reporting a generated file as a typography defect in one shape and not the other.
+const MEMBER_RELATIVE = '(^|/)';
+const DEFAULT_TYPOGRAPHY_EXCLUSIONS = [
+    String.raw `${MEMBER_RELATIVE}\.claude/`,
+    String.raw `${MEMBER_RELATIVE}src/payload-types\.ts$`,
+    String.raw `${MEMBER_RELATIVE}src/payload-generated-schema\.ts$`,
+    String.raw `importMap\.js$`,
+];
+const DEFAULT_JAVASCRIPT_ALLOWLIST = [
+    String.raw `${MEMBER_RELATIVE}eslint\.config\.mjs$`,
+    String.raw `importMap\.js$`,
+    // ploaness admits Tailwind deliberately - the shipped stylelint configuration lists its at-rules as a
+    // CSS dialect a project may legitimately be written in. Tailwind v4 needs a PostCSS configuration, and
+    // Next reads it only as `.mjs` or `.js`. Anticipating the dialect in one gate while banning the file
+    // it requires in another left a project no move but an allowlist entry claiming a role it does not
+    // have: the file is not hand-written JavaScript by choice.
+    String.raw `${MEMBER_RELATIVE}postcss\.config\.(mjs|js)$`,
+];
+/**
+ * The directories a project holds first-party source in unless it says otherwise.
+ *
+ * Exported because `config-references.ts` built its own alternation out of the same names, and a
+ * project that declared an extra source root got its config carve-outs left unchecked while the two
+ * lists drifted apart in silence.
+ */
+export const DEFAULT_SOURCE_ROOTS = ['src', 'tests', 'scripts'];
+const DEFAULT_SERVER_URL = 'http://localhost:3000';
+// Payload's admin panel and REST API. Neither is a public page, both are reachable from a link on one,
+// and axe run against the admin bundle judges Payload's markup rather than the project's. A project
+// that moved either route adds its own; no project may take these away.
+const DEFAULT_SKIPPED_ROUTES = ['/admin', '/api'];
+// A CMS exists so that people who do not commit can publish pages, so the route count grows without any
+// change to the repository. A cap set where a small site sits therefore fails on an editor's ordinary
+// Tuesday, on a site that is perfectly accessible, and the only valve a project holds is the skip list -
+// which means excusing real public pages from accessibility checking so that the accessibility check
+// passes. That is the wrong trade to leave a team, so the ceiling is set where a growing site lives and
+// the sweep's own clock is bounded separately.
+const DEFAULT_ACCESSIBILITY_ROUTE_BUDGET = 250;
+// Roles that carry no unit-test seam in any Payload application: framework glue verified end to end,
+// generated files, and operational data scripts. A project adds to this; it never shrinks it.
+/**
+ * The files the coverage report measures. Declared here rather than in the Vitest config because two
+ * things need to agree about it: the config that produces the report, and the rule that judges whether
+ * a declared exclusion reaches anything the report measured. Two literals that must stay equal will not.
+ */
+export const COVERAGE_INCLUDE = ['src/**/*.ts', 'scripts/**/*.ts'];
+const DEFAULT_COVERAGE_EXCLUDE = [
+    'src/app/**',
+    'src/payload.config.ts',
+    'src/payload-types.ts',
+    'src/seed/**',
+    'src/**/*.d.ts',
+    'src/**/*.tsx',
+    // Seeded by ploaness rather than written by the project, and verified end to end by
+    // `security-headers.e2e.spec.ts` - an asset ploaness also seeds, and which shipping made the
+    // end-to-end suite mandatory. Without this line every consumer meets a coverage failure on day one,
+    // on a file it did not author, and answers it by restating the same exclusion in its own manifest.
+    // A unit test would assert that the policy builder returns the string it returns; the sweep asks the
+    // running application what it actually sent, which is the question worth failing on.
+    'src/proxy.ts',
+];
+const isTextArray = (raw) => isArray(raw) && raw.every((entry) => typeof entry === 'string');
+const asStringArray = (raw, fallback) => isTextArray(raw) ? raw : fallback;
+const asPositiveInteger = (raw, fallback) => typeof raw === 'number' && Number.isSafeInteger(raw) && raw > 0 ? raw : fallback;
+// Zero is a meaningful value here, not a missing one: "no suppression is permitted" is a position a
+// project may take, so this cannot reuse asPositiveInteger. Undefined means the project declares no
+// cap of its own and the earned ceiling applies.
+const asNonNegativeInteger = (raw) => typeof raw === 'number' && Number.isSafeInteger(raw) && raw >= 0 ? raw : undefined;
+// An entry without a non-empty reason is dropped rather than honoured: taking over a managed path is a
+// decision the project must record, so an unexplained entry must not weaken the asset gate.
+const asUnmanagedAssets = (raw) => isArray(raw)
+    ? raw.flatMap((entry) => {
+        const record = asRecord(entry);
+        const path = asText(record['path']);
+        const reason = asText(record['reason']);
+        return path.length > 0 && reason.trim().length > 0 ? [{ path, reason }] : [];
+    })
+    : [];
+// Both halves are load-bearing: a command with no url gives Playwright nothing to wait for, and a url
+// with no command names a server nobody starts. An incomplete entry is dropped rather than half-honoured,
+// because starting a process the suite then cannot reach is the one outcome worse than not starting it.
+const asAuxiliaryServers = (raw) => isArray(raw)
+    ? raw.flatMap((entry) => {
+        const record = asRecord(entry);
+        const command = asText(record['command']).trim();
+        const url = asText(record['url']).trim();
+        if (command.length === 0 || url.length === 0) {
+            return [];
+        }
+        // Optional, unlike the two above: a server started in the package under test needs no
+        // directory, and only a sibling application does.
+        const cwd = asText(record['cwd']).trim();
+        return [cwd.length > 0 ? { command, url, cwd } : { command, url }];
+    })
+    : [];
+// An advisory date must be recorded as a date. An entry whose reason or date is missing or malformed is
+// dropped rather than honoured, so a typo re-exposes the finding instead of quietly excusing it.
+const ISO_DATE = /^\d{4}-\d{2}-\d{2}$/;
+const asVulnerabilityAllowlist = (raw) => isArray(raw)
+    ? raw.flatMap((entry) => {
+        const record = asRecord(entry);
+        const advisory = asText(record['advisory']).trim();
+        const reason = asText(record['reason']).trim();
+        const addedOn = asText(record['addedOn']);
+        const isRecorded = advisory.length > 0 && reason.length > 0 && ISO_DATE.test(addedOn);
+        return isRecorded ? [{ advisory, reason, addedOn }] : [];
+    })
+    : [];
+// An unexplained exception is dropped, exactly as an unexplained managed-path takeover is: a fixture
+// credential is a decision the project must record, and a typo must re-expose the finding rather than
+// quietly widen the scan.
+const asSecretAllowlist = (raw) => isArray(raw)
+    ? raw.flatMap((entry) => {
+        const record = asRecord(entry);
+        const filePath = asText(record['path']).trim();
+        const reason = asText(record['reason']).trim();
+        return filePath.length > 0 && reason.length > 0 ? [{ path: filePath, reason }] : [];
+    })
+    : [];
+// Dropped on any missing field, for the reason an unexplained secret exception is dropped: a granted
+// anonymous permission is a decision the project must record, and a typo must re-expose the finding
+// rather than quietly excuse a permission nobody chose.
+const asPublicAccess = (raw) => isArray(raw)
+    ? raw.flatMap((entry) => {
+        const record = asRecord(entry);
+        const entity = asText(record['entity']).trim();
+        const operation = asText(record['operation']).trim();
+        const reason = asText(record['reason']).trim();
+        return entity.length > 0 && operation.length > 0 && reason.length > 0
+            ? [{ entity, operation, reason }]
+            : [];
+    })
+    : [];
+// An exclusion narrows a gate's scope, which is the one thing the standard says a project's settings
+// may not do without the harness's leave. The leave it grants is an exclusion by file role - so an
+// entry states the role it is claiming, and an entry that states none is dropped rather than honoured.
+// A dropped entry makes the gate stricter, which is the safe direction to fail in.
+const asDeclaredExclusions = (raw, setting, kind) => isArray(raw)
+    ? raw.map((entry) => readExclusion(entry, setting, kind))
+    : [];
+// A bare string is kept with an empty reason rather than dropped silently, so the gate can name the
+// entry the project wrote instead of reporting that its exclusions simply stopped applying.
+const readExclusion = (entry, setting, kind) => {
+    if (typeof entry === 'string') {
+        return { setting, pattern: entry, reason: '', kind };
+    }
+    if (!isRecord(entry)) {
+        return { setting, pattern: '', reason: '', kind };
+    }
+    return {
+        setting,
+        pattern: asText(entry['pattern']),
+        reason: asText(entry['reason']).trim(),
+        kind,
+    };
+};
+const honoured = (entries) => entries
+    .filter((entry) => entry.pattern.length > 0 && entry.reason.length > 0)
+    .map((entry) => entry.pattern);
+// The kind travels with the setting because this is the only place the answer is not a guess: by the
+// time a rule holds the entry, `^\.vale/styles/` and `src/app/**` are two strings that look alike.
+const readDeclaredLists = (raw) => ({
+    typography: asDeclaredExclusions(raw['typographyExclusions'], 'typographyExclusions', 'regex'),
+    javascript: asDeclaredExclusions(raw['javascriptAllowlist'], 'javascriptAllowlist', 'regex'),
+    coverage: asDeclaredExclusions(raw['coverageExclude'], 'coverageExclude', 'glob'),
+    routes: asDeclaredExclusions(raw['accessibilitySkipRoutes'], 'accessibilitySkipRoutes', 'route'),
+    glue: asDeclaredExclusions(raw['frameworkGlue'], 'frameworkGlue', 'glob'),
+    generated: asDeclaredExclusions(raw['generatedArtefacts'], 'generatedArtefacts', 'glob'),
+    layers: asDeclaredExclusions(raw['pureLogicRoots'], 'pureLogicRoots', 'glob'),
+});
+/**
+ * Read the `ploaness` key of a parsed package.json into a fully defaulted settings object. A malformed
+ * value falls back to the strict default rather than failing the read, so a typo can never widen a rule.
+ * @param packageJson the parsed package.json of the consuming project.
+ * @returns the effective settings, with every field populated.
+ */
+export const readSettings = (packageJson) => readRawSettings(ploanessBlock(packageJson));
+/** The raw `ploaness` block of a manifest, before any default is applied. */
+export const ploanessBlock = (packageJson) => asRecord(asRecord(packageJson)['ploaness']);
+// Every numeric ceiling is read this way, and the shared reading IS the rule: a project may hold itself
+// to a smaller number, and can never buy a pass by declaring a bigger one. Stating it once is what stops
+// the second ceiling drifting from the first - the same drift `STRICTEST_NUMBER` guards one level up,
+// where a workspace member could otherwise widen what the root declared.
+const clampedCeiling = (declared, shipped) => Math.min(shipped, asPositiveInteger(declared, shipped));
+/**
+ * Read an already-layered raw settings block into a fully defaulted settings object.
+ * @param raw the raw block, after any layering.
+ * @returns the effective settings, with every field populated.
+ */
+export const readRawSettings = (raw) => {
+    const { typography: declaredTypography, javascript: declaredJavascript, coverage: declaredCoverage, routes: declaredRoutes, glue: declaredGlue, generated: declaredGenerated, layers: declaredLayers, } = readDeclaredLists(raw);
+    return {
+        // Additive, like every other list field. Replacing the default let a project declare `["src"]` and
+        // silently drop `tests` and `scripts` from the conventions, payload-rules, suppressions, css and
+        // architecture gates - a scope narrowing the harness is supposed to refuse.
+        sourceRoots: [
+            ...new Set([...DEFAULT_SOURCE_ROOTS, ...asStringArray(raw['sourceRoots'], [])]),
+        ],
+        unmanagedAssets: asUnmanagedAssets(raw['unmanagedAssets']),
+        typographyExclusions: [...DEFAULT_TYPOGRAPHY_EXCLUSIONS, ...honoured(declaredTypography)],
+        frameworkGlue: [...DEFAULT_FRAMEWORK_GLUE, ...honoured(declaredGlue)],
+        generatedArtefacts: [...GENERATED_ARTEFACTS, ...honoured(declaredGenerated)],
+        pureLogicRoots: [...DEFAULT_PURE_LOGIC_ROOTS, ...layerRoots(declaredLayers)],
+        declaredExclusions: [
+            ...declaredTypography,
+            ...declaredJavascript,
+            ...declaredCoverage,
+            ...declaredRoutes,
+            ...declaredGlue,
+            ...declaredGenerated,
+            ...declaredLayers,
+        ],
+        javascriptAllowlist: [...DEFAULT_JAVASCRIPT_ALLOWLIST, ...honoured(declaredJavascript)],
+        coverageExclude: [...DEFAULT_COVERAGE_EXCLUDE, ...honoured(declaredCoverage)],
+        bundleBudgetBytes: clampedCeiling(raw['bundleBudgetBytes'], DEFAULT_BUNDLE_BUDGET_BYTES),
+        maxSuppressions: asNonNegativeInteger(raw['maxSuppressions']),
+        vulnerabilitySeverity: typeof raw['vulnerabilitySeverity'] === 'string' ? raw['vulnerabilitySeverity'] : undefined,
+        vulnerabilityAllowlist: asVulnerabilityAllowlist(raw['vulnerabilityAllowlist']),
+        secretAllowlist: asSecretAllowlist(raw['secretAllowlist']),
+        publicAccess: asPublicAccess(raw['publicAccess']),
+        pretest: asStringArray(raw['pretest'], []),
+        testWrapper: asStringArray(raw['testWrapper'], []),
+        serverUrl: typeof raw['serverUrl'] === 'string' ? raw['serverUrl'] : DEFAULT_SERVER_URL,
+        auxiliaryServers: asAuxiliaryServers(raw['auxiliaryServers']),
+        accessibilitySkipRoutes: [...DEFAULT_SKIPPED_ROUTES, ...honoured(declaredRoutes)],
+        accessibilityRouteBudget: clampedCeiling(raw['accessibilityRouteBudget'], DEFAULT_ACCESSIBILITY_ROUTE_BUDGET),
+        analysisEnv: { ...DEFAULT_ANALYSIS_ENV, ...asStringRecord(raw['analysisEnv']) },
+    };
+};
+/**
+ * Report every declared exclusion the harness cannot honour.
+ *
+ * This once also refused an entry whose pattern named a single existing file, on the reading that one
+ * path is not a role. The governing standard now judges an exclusion by what it REACHES rather than by
+ * how specific it looks, and `findUnreachedExclusions` below is that rule. A named file the report
+ * measured excludes something; the defect the standard names is an entry that excludes nothing.
+ * @param entries the exclusions the project declared.
+ * @returns one message per entry that states no role.
+ */
+export const findConvenienceExclusions = (entries) => entries.flatMap((entry) => entry.reason.length === 0
+    ? [
+        `${entry.setting} entry "${entry.pattern}" states no reason; ` +
+            'an exclusion is granted by file role, so the role must be written down',
+    ]
+    : []);
+/**
+ * Report every declared exclusion that matches none of the paths it could have excluded.
+ *
+ * An exclusion that reaches nothing leaves the report reading exactly as it would have read without it,
+ * so it records a decision nobody can see the effect of - and it outlives the file it was written for,
+ * which is how a stale carve-out survives the rename that made it meaningless. A route exclusion is
+ * skipped: it names a URL the crawl must not follow, and no path in the repository can confirm it.
+ * @param entries the exclusions the project declared.
+ * @param candidates the repo-relative paths the corresponding gate would otherwise have judged.
+ * @returns one message per entry that reaches nothing.
+ */
+export const findUnreachedExclusions = (entries, candidates) => entries
+    .filter((entry) => entry.kind !== 'route' && entry.pattern.length > 0 && entry.reason.length > 0)
+    .filter((entry) => !reachesAny(entry, candidates))
+    .map((entry) => `${entry.setting} entry "${entry.pattern}" excludes nothing; ` +
+    'it matches no file the gate would have judged, so it records a decision with no effect');
+const reachesAny = (entry, candidates) => candidates.some((candidate) => entry.kind === 'glob'
+    ? matchesGlob(entry.pattern, candidate)
+    : matchesRole(candidate, [entry.pattern]));
+/**
+ * The setting whose patterns are matched against the files the coverage report measures, rather than
+ * against every tracked file.
+ */
+const COVERAGE_SETTING = 'coverageExclude';
+/**
+ * A directory path without its trailing slashes.
+ *
+ * Written as a recursion rather than as `/\/+$/`, which backtracks super-linearly on a pathological
+ * input - a rule this repository holds itself to.
+ * @param value the declared path.
+ * @returns the same path with every trailing slash removed.
+ */
+export const withoutTrailingSlash = (value) => value.endsWith('/') ? withoutTrailingSlash(value.slice(0, -1)) : value;
+/** The floor a project declared, normalised: the renderer appends the slash, so a written one goes. */
+const layerRoots = (declared) => honoured(declared).map((root) => withoutTrailingSlash(root));
+/**
+ * The settings whose patterns name a DIRECTORY rather than a file.
+ *
+ * `pureLogicRoots` names the directories forming the architecture floor. Matched against tracked FILE
+ * paths it can never reach anything, so a project declaring a floor that exists was told its declaration
+ * excluded nothing - while the only pattern that satisfied that check, `src/config/**`, is spliced into
+ * a regex by `pureLogicRule` and produces `^(src/config/**\/)`, which is not a valid regular expression.
+ * Between them the two rules left the setting with no legal value at all.
+ */
+const DIRECTORY_SETTINGS = new Set(['pureLogicRoots']);
+/**
+ * Every directory that holds a tracked file, at every depth.
+ *
+ * Derived from the file list rather than read from disk, so the answer covers exactly what is committed:
+ * a directory that exists only in a working tree is not part of the repository a gate judges.
+ * @param tracked the repo-relative paths of the tracked files.
+ * @returns each containing directory once, without a trailing slash.
+ */
+export const trackedDirectories = (tracked) => [
+    ...new Set(tracked.flatMap((file) => {
+        const segments = file.split('/').slice(0, -1);
+        return segments.map((_, index) => segments.slice(0, index + 1).join('/'));
+    })),
+];
+const measuredByCoverage = (tracked) => tracked.filter((file) => COVERAGE_INCLUDE.some((pattern) => matchesGlob(pattern, file)));
+/**
+ * Which paths a setting's exclusions have to reach.
+ *
+ * The file set is decided by the SETTING an entry came from, never by how its pattern is written.
+ * Partitioning on the pattern's shape was right while `coverageExclude` was the only glob-shaped
+ * setting, and wrong the moment a second one arrived: it asks a coverage carve-out whether a generated
+ * artefact appears in the coverage report, which is precisely where it does not, and it asks a
+ * directory declaration to name a file.
+ */
+const candidatesFor = (setting, tracked) => {
+    if (setting === COVERAGE_SETTING) {
+        return measuredByCoverage(tracked);
+    }
+    return DIRECTORY_SETTINGS.has(setting) ? trackedDirectories(tracked) : tracked;
+};
+/**
+ * Report every declared exclusion that reaches none of the paths ITS OWN setting could have excluded.
+ *
+ * A composition over `findUnreachedExclusions`: it groups the entries by setting and hands each group
+ * the candidate set that setting governs, so a caller supplies the tracked file list and nothing else.
+ * @param entries the exclusions the project declared, across every setting.
+ * @param tracked the repo-relative paths of the tracked files.
+ * @returns one message per entry that reaches nothing.
+ */
+export const findUnreachedExclusionsBySetting = (entries, tracked) => [...new Set(entries.map((entry) => entry.setting))].flatMap((setting) => findUnreachedExclusions(entries
+    .filter((entry) => entry.setting === setting)
+    .map((entry) => normalised(entry)), candidatesFor(setting, tracked)));
+/**
+ * A directory setting tolerates a trailing slash, because the renderer that consumes it appends one.
+ *
+ * Normalising here rather than in each consumer is what keeps the two from disagreeing: `pureLogicRule`
+ * already accepted `src/lib/` and this rule already reported it, which is the same contradiction the
+ * partition above exists to remove, one size smaller.
+ */
+const normalised = (entry) => DIRECTORY_SETTINGS.has(entry.setting)
+    ? { ...entry, pattern: withoutTrailingSlash(entry.pattern) }
+    : entry;
+//# sourceMappingURL=settings.js.map

package/dist/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,yGAAyG;AACzG,4FAA4F;AAC5F,EAAE;AACF,yGAAyG;AACzG,mGAAmG;AACnG,uGAAuG;AACvG,4CAA4C;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,6FAA6F;AAC7F,yBAAyB;AACzB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAqKtF,uGAAuG;AACvG,sGAAsG;AACtG,qEAAqE;AACrE,MAAM,2BAA2B,GAAW,mBAAmB,CAAA;AAE/D,yGAAyG;AACzG,0GAA0G;AAC1G,uGAAuG;AACvG,MAAM,oBAAoB,GAAqC;IAC7D,cAAc,EAAE,sCAAsC;IACtD,YAAY,EAAE,oDAAoD;CACnE,CAAA;AAED,wGAAwG;AACxG,8FAA8F;AAC9F,uGAAuG;AACvG,mDAAmD;AACnD,MAAM,sBAAsB,GAAsB,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAA;AAEnG,gEAAgE;AAChE,MAAM,wBAAwB,GAAsB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;AAE7E,wGAAwG;AACxG,qGAAqG;AACrG,mGAAmG;AACnG,gGAAgG;AAChG,MAAM,eAAe,GAAW,OAAO,CAAA;AAEvC,MAAM,6BAA6B,GAAsB;IACvD,MAAM,CAAC,GAAG,CAAA,GAAG,eAAe,WAAW;IACvC,MAAM,CAAC,GAAG,CAAA,GAAG,eAAe,wBAAwB;IACpD,MAAM,CAAC,GAAG,CAAA,GAAG,eAAe,mCAAmC;IAC/D,MAAM,CAAC,GAAG,CAAA,gBAAgB;CAC3B,CAAA;AAED,MAAM,4BAA4B,GAAsB;IACtD,MAAM,CAAC,GAAG,CAAA,GAAG,eAAe,sBAAsB;IAClD,MAAM,CAAC,GAAG,CAAA,gBAAgB;IAC1B,sGAAsG;IACtG,uGAAuG;IACvG,qGAAqG;IACrG,mGAAmG;IACnG,2DAA2D;IAC3D,MAAM,CAAC,GAAG,CAAA,GAAG,eAAe,4BAA4B;CACzD,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;AAElF,MAAM,kBAAkB,GAAW,uBAAuB,CAAA;AAE1D,uGAAuG;AACvG,oGAAoG;AACpG,wEAAwE;AACxE,MAAM,sBAAsB,GAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;AAEpE,wGAAwG;AACxG,sGAAsG;AACtG,yGAAyG;AACzG,qGAAqG;AACrG,wGAAwG;AACxG,+CAA+C;AAC/C,MAAM,kCAAkC,GAAW,GAAG,CAAA;AAEtD,qGAAqG;AACrG,8FAA8F;AAC9F;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAsB,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;AAErF,MAAM,wBAAwB,GAAsB;IAClD,YAAY;IACZ,uBAAuB;IACvB,sBAAsB;IACtB,aAAa;IACb,eAAe;IACf,cAAc;IACd,oFAAoF;IACpF,6FAA6F;IAC7F,oGAAoG;IACpG,mGAAmG;IACnG,qGAAqG;IACrG,qFAAqF;IACrF,cAAc;CACf,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,GAAY,EAA4B,EAAE,CAC7D,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,KAAc,EAAW,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAA;AAEnF,MAAM,aAAa,GAAG,CAAC,GAAY,EAAE,QAA2B,EAAqB,EAAE,CACrF,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAA;AAEnC,MAAM,iBAAiB,GAAG,CAAC,GAAY,EAAE,QAAgB,EAAU,EAAE,CACnE,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAA;AAElF,oGAAoG;AACpG,oGAAoG;AACpG,iDAAiD;AACjD,MAAM,oBAAoB,GAAG,CAAC,GAAY,EAAsB,EAAE,CAChE,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AAEpF,uGAAuG;AACvG,4FAA4F;AAC5F,MAAM,iBAAiB,GAAG,CAAC,GAAY,EAA6B,EAAE,CACpE,OAAO,CAAC,GAAG,CAAC;IACV,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAc,EAA6B,EAAE;QACxD,MAAM,MAAM,GAA4B,QAAQ,CAAC,KAAK,CAAC,CAAA;QACvD,MAAM,IAAI,GAAW,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAW,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9E,CAAC,CAAC;IACJ,CAAC,CAAC,EAAE,CAAA;AAER,sGAAsG;AACtG,0GAA0G;AAC1G,wGAAwG;AACxG,MAAM,kBAAkB,GAAG,CAAC,GAAY,EAA8B,EAAE,CACtE,OAAO,CAAC,GAAG,CAAC;IACV,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAc,EAA8B,EAAE;QACzD,MAAM,MAAM,GAA4B,QAAQ,CAAC,KAAK,CAAC,CAAA;QACvD,MAAM,OAAO,GAAW,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACxD,MAAM,GAAG,GAAW,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,CAAA;QACX,CAAC;QACD,sFAAsF;QACtF,kDAAkD;QAClD,MAAM,GAAG,GAAW,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAChD,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;IACpE,CAAC,CAAC;IACJ,CAAC,CAAC,EAAE,CAAA;AAER,wGAAwG;AACxG,iGAAiG;AACjG,MAAM,QAAQ,GAAW,qBAAqB,CAAA;AAE9C,MAAM,wBAAwB,GAAG,CAAC,GAAY,EAAqC,EAAE,CACnF,OAAO,CAAC,GAAG,CAAC;IACV,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAc,EAAqC,EAAE;QAChE,MAAM,MAAM,GAA4B,QAAQ,CAAC,KAAK,CAAC,CAAA;QACvD,MAAM,QAAQ,GAAW,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1D,MAAM,MAAM,GAAW,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,OAAO,GAAW,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;QACjD,MAAM,UAAU,GACd,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1D,CAAC,CAAC;IACJ,CAAC,CAAC,EAAE,CAAA;AAER,qGAAqG;AACrG,sGAAsG;AACtG,0BAA0B;AAC1B,MAAM,iBAAiB,GAAG,CAAC,GAAY,EAA8B,EAAE,CACrE,OAAO,CAAC,GAAG,CAAC;IACV,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAc,EAA8B,EAAE;QACzD,MAAM,MAAM,GAA4B,QAAQ,CAAC,KAAK,CAAC,CAAA;QACvD,MAAM,QAAQ,GAAW,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,MAAM,GAAW,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACrF,CAAC,CAAC;IACJ,CAAC,CAAC,EAAE,CAAA;AAER,qGAAqG;AACrG,oGAAoG;AACpG,wDAAwD;AACxD,MAAM,cAAc,GAAG,CAAC,GAAY,EAA2B,EAAE,CAC/D,OAAO,CAAC,GAAG,CAAC;IACV,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAc,EAA2B,EAAE;QACtD,MAAM,MAAM,GAA4B,QAAQ,CAAC,KAAK,CAAC,CAAA;QACvD,MAAM,MAAM,GAAW,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,SAAS,GAAW,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5D,MAAM,MAAM,GAAW,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YACjC,CAAC,CAAC,EAAE,CAAA;IACR,CAAC,CAAC;IACJ,CAAC,CAAC,EAAE,CAAA;AAER,qGAAqG;AACrG,mGAAmG;AACnG,uGAAuG;AACvG,mFAAmF;AACnF,MAAM,oBAAoB,GAAG,CAC3B,GAAY,EACZ,OAAe,EACf,IAAmB,EACW,EAAE,CAChC,OAAO,CAAC,GAAG,CAAC;IACV,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAc,EAAqB,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACrF,CAAC,CAAC,EAAE,CAAA;AAER,oGAAoG;AACpG,4FAA4F;AAC5F,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,OAAe,EAAE,IAAmB,EAAqB,EAAE;IAChG,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACtD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACnD,CAAC;IACD,OAAO;QACL,OAAO;QACP,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE;QACtC,IAAI;KACL,CAAA;AACH,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,OAAqC,EAAqB,EAAE,CAC5E,OAAO;KACJ,MAAM,CACL,CAAC,KAAwB,EAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAC3F;KACA,GAAG,CAAC,CAAC,KAAwB,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;AAa7D,qGAAqG;AACrG,mGAAmG;AACnG,MAAM,iBAAiB,GAAG,CAAC,GAA4B,EAAiB,EAAE,CAAC,CAAC;IAC1E,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC;IAC9F,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC;IAC5F,QAAQ,EAAE,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC;IACjF,MAAM,EAAE,oBAAoB,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,yBAAyB,EAAE,OAAO,CAAC;IAChG,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC;IACzE,SAAS,EAAE,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC;IACxF,MAAM,EAAE,oBAAoB,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC;CAC9E,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,WAAoB,EAAY,EAAE,CAC7D,eAAe,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAA;AAE7C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,WAAoB,EAA2B,EAAE,CAC7E,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;AAE7C,wGAAwG;AACxG,yGAAyG;AACzG,sGAAsG;AACtG,yEAAyE;AACzE,MAAM,cAAc,GAAG,CAAC,QAAiB,EAAE,OAAe,EAAU,EAAE,CACpE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAA4B,EAAY,EAAE;IACxE,MAAM,EACJ,UAAU,EAAE,kBAAkB,EAC9B,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,iBAAiB,EAC5B,MAAM,EAAE,cAAc,GACvB,GAAkB,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACzC,OAAO;QACL,mGAAmG;QACnG,iGAAiG;QACjG,4EAA4E;QAC5E,WAAW,EAAE;YACX,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,oBAAoB,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SACxF;QACD,eAAe,EAAE,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1D,oBAAoB,EAAE,CAAC,GAAG,6BAA6B,EAAE,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACzF,aAAa,EAAE,CAAC,GAAG,sBAAsB,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACrE,kBAAkB,EAAE,CAAC,GAAG,mBAAmB,EAAE,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAC5E,cAAc,EAAE,CAAC,GAAG,wBAAwB,EAAE,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;QAC5E,kBAAkB,EAAE;YAClB,GAAG,kBAAkB;YACrB,GAAG,kBAAkB;YACrB,GAAG,gBAAgB;YACnB,GAAG,cAAc;YACjB,GAAG,YAAY;YACf,GAAG,iBAAiB;YACpB,GAAG,cAAc;SAClB;QACD,mBAAmB,EAAE,CAAC,GAAG,4BAA4B,EAAE,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACvF,eAAe,EAAE,CAAC,GAAG,wBAAwB,EAAE,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC7E,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,2BAA2B,CAAC;QACxF,eAAe,EAAE,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC7D,qBAAqB,EACnB,OAAO,GAAG,CAAC,uBAAuB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7F,sBAAsB,EAAE,wBAAwB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC/E,eAAe,EAAE,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1D,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACjD,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAC1C,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QAClD,SAAS,EAAE,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,kBAAkB;QACvF,gBAAgB,EAAE,kBAAkB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC7D,uBAAuB,EAAE,CAAC,GAAG,sBAAsB,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;QACjF,wBAAwB,EAAE,cAAc,CACtC,GAAG,CAAC,0BAA0B,CAAC,EAC/B,kCAAkC,CACnC;QACD,WAAW,EAAE,EAAE,GAAG,oBAAoB,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE;KAChF,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,OAAqC,EAClB,EAAE,CACrB,OAAO,CAAC,OAAO,CAAC,CAAC,KAAwB,EAAqB,EAAE,CAC9D,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;IACvB,CAAC,CAAC;QACE,GAAG,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,OAAO,sBAAsB;YAC5D,wEAAwE;KAC3E;IACH,CAAC,CAAC,EAAE,CACP,CAAA;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAAqC,EACrC,UAA6B,EACV,EAAE,CACrB,OAAO;KACJ,MAAM,CACL,CAAC,KAAwB,EAAW,EAAE,CACpC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAChF;KACA,MAAM,CAAC,CAAC,KAAwB,EAAW,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;KAC7E,GAAG,CACF,CAAC,KAAwB,EAAU,EAAE,CACnC,GAAG,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,OAAO,sBAAsB;IAC9D,wFAAwF,CAC3F,CAAA;AAEL,MAAM,UAAU,GAAG,CAAC,KAAwB,EAAE,UAA6B,EAAW,EAAE,CACtF,UAAU,CAAC,IAAI,CAAC,CAAC,SAAiB,EAAW,EAAE,CAC7C,KAAK,CAAC,IAAI,KAAK,MAAM;IACnB,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;IACvC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAC5C,CAAA;AAEH;;;GAGG;AACH,MAAM,gBAAgB,GAAW,iBAAiB,CAAA;AAElD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAU,EAAE,CAC5D,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAExE,uGAAuG;AACvG,MAAM,UAAU,GAAG,CAAC,QAAsC,EAAqB,EAAE,CAC/E,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAA;AAE9E;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAS,CAAC,gBAAgB,CAAC,CAAC,CAAA;AAEnF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAA0B,EAAqB,EAAE,CAAC;IACnF,GAAG,IAAI,GAAG,CACR,OAAO,CAAC,OAAO,CAAC,CAAC,IAAY,EAAqB,EAAE;QAClD,MAAM,QAAQ,GAAsB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAChE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,KAAa,EAAU,EAAE,CACvD,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACvC,CAAA;IACH,CAAC,CAAC,CACH;CACF,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,OAA0B,EAAqB,EAAE,CAC3E,OAAO,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CACvC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAe,EAAW,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAChF,CAAA;AAEH;;;;;;;;GAQG;AACH,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,OAA0B,EAAqB,EAAE;IACvF,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;IACD,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AAChF,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,OAAqC,EACrC,OAA0B,EACP,EAAE,CACrB,CAAC,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,GAAG,CAAC,CAAC,KAAwB,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAC5F,CAAC,OAAe,EAAqB,EAAE,CACrC,uBAAuB,CACrB,OAAO;KACJ,MAAM,CAAC,CAAC,KAAwB,EAAW,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC;KACxE,GAAG,CAAC,CAAC,KAAwB,EAAqB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAC1E,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAChC,CACJ,CAAA;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,KAAwB,EAAqB,EAAE,CACjE,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;IACnC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;IAC5D,CAAC,CAAC,KAAK,CAAA"}

package/dist/skill-manifest.d.ts

@@ -0,0 +1,18 @@
+/** A SKILL.md frontmatter defect that would impair the skill's discovery or invocation. */
+export interface SkillViolation {
+    readonly rule: 'frontmatter' | 'name' | 'description' | 'keys';
+    readonly reason: string;
+}
+/** Inputs for {@link findSkillManifestViolations}: the file's text and its parent directory name. */
+interface SkillManifestInputs {
+    readonly content: string;
+    readonly directoryName: string;
+}
+/**
+ * Return every frontmatter defect in a SKILL.md: missing frontmatter, a missing/non-kebab-case name, a
+ * name that does not match its directory, a description that omits a when-to-use clause, or an unknown
+ * key. An empty array means the skill's frontmatter contract is sound.
+ */
+export declare const findSkillManifestViolations: (inputs: SkillManifestInputs) => readonly SkillViolation[];
+export {};
+//# sourceMappingURL=skill-manifest.d.ts.map

package/dist/skill-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-manifest.d.ts","sourceRoot":"","sources":["../src/skill-manifest.ts"],"names":[],"mappings":"AAQA,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,aAAa,GAAG,MAAM,CAAA;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,qGAAqG;AACrG,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AA4HD;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,GACtC,QAAQ,mBAAmB,KAC1B,SAAS,cAAc,EAUzB,CAAA"}

package/dist/skill-manifest.js

@@ -0,0 +1,125 @@
+// Skill-manifest policy: the pure rules that validate a Claude Code SKILL.md's frontmatter contract.
+// The `skills` gate in packages/cli/src/checks/references.ts walks the filesystem.
+//
+// Scope is deliberately the HIGH-SIGNAL, false-positive-free subset of an agentic-skill linter: the
+// frontmatter Claude Code actually relies on to DISCOVER and INVOKE a skill. Body style (line length,
+// prose-vs-commands, token budget) is intentionally NOT checked - a SKILL.md is a knowledge file with
+// lookup tables and code examples, not a command manifesto, so those rules would reject valid skills.
+// The frontmatter keys Claude Code recognises; anything else is dead metadata that should not accrue.
+// `model`, `argument-hint` and `disable-model-invocation` are as real as the rest: leaving them out
+// reported a valid manifest as carrying an unknown key, which is a rule teaching a project to write a
+// worse file.
+const ALLOWED_KEYS = new Set([
+    'name',
+    'description',
+    'license',
+    'allowed-tools',
+    'argument-hint',
+    'disable-model-invocation',
+    'model',
+    'metadata',
+]);
+const KEBAB_CASE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const FRONTMATTER = /^---\n([\s\S]*?)\n---/;
+const TOP_LEVEL_KEY = /^([\w-]+):[ \t]?(.*)$/;
+// A folded or literal block scalar carries its text on the lines beneath the key, indented. Reading
+// only the key's own line yielded ">-" as the description, which then failed every check below it -
+// and a block scalar is simply how a description longer than one line is written.
+const BLOCK_SCALAR = /^[>|][-+]?\d*$/;
+const CONTINUATION = /^\s+\S/;
+// The description must tell the agent WHEN to reach for the skill; a "when ..." clause is that signal.
+// The word is not required to end there: "whenever the user asks" says exactly the same thing, and a
+// trailing word boundary rejected the single most common way of phrasing it.
+const WHEN_TO_USE = /\bwhen/i;
+// Parse only flat, top-level `key: value` lines (column 0). Indented lines under a nested key such as
+// `metadata:` start with whitespace, fail TOP_LEVEL_KEY, and are ignored - so nesting is never flagged.
+// How many of the lines after a block-scalar key belong to it: every indented one, up to the next key.
+const continuationCount = (rest) => {
+    const end = rest.findIndex((line) => !CONTINUATION.test(line));
+    return end === -1 ? rest.length : end;
+};
+// A key's value, folded together with the indented lines beneath it when the value is a block scalar.
+const valueAt = (lines, index, raw) => {
+    if (!BLOCK_SCALAR.test(raw)) {
+        return raw;
+    }
+    const rest = lines.slice(index + 1);
+    return rest
+        .slice(0, continuationCount(rest))
+        .map((line) => line.trim())
+        .join(' ');
+};
+const parseFrontmatter = (content) => {
+    // Line endings are normalised first. The pattern below is written with `\n`, so a CRLF manifest
+    // matched nothing at all and was reported as having no frontmatter - a message that sends the author
+    // looking at the three dashes, which were never the problem.
+    const match = FRONTMATTER.exec(content.replaceAll('\r\n', '\n'));
+    if (match === null) {
+        return { present: false, keys: new Map(), keyNames: [] };
+    }
+    const lines = (match[1] ?? '').split('\n');
+    const entries = lines
+        .map((line, index) => [
+        TOP_LEVEL_KEY.exec(line),
+        index,
+    ])
+        .filter((entry) => entry[0] !== null)
+        .map((entry) => [
+        entry[0][1] ?? '',
+        valueAt(lines, entry[1], (entry[0][2] ?? '').trim()).trim(),
+    ]);
+    return {
+        present: true,
+        keys: new Map(entries),
+        keyNames: entries.map((entry) => entry[0]),
+    };
+};
+const checkName = (name, directoryName) => {
+    if (name === undefined) {
+        return [{ rule: 'name', reason: 'frontmatter has no "name" key' }];
+    }
+    const kebab = KEBAB_CASE.test(name)
+        ? []
+        : [{ rule: 'name', reason: `name "${name}" must be kebab-case` }];
+    const directoryViolations = name === directoryName
+        ? []
+        : [{ rule: 'name', reason: `name "${name}" must equal parent directory "${directoryName}"` }];
+    return [...kebab, ...directoryViolations];
+};
+const checkDescription = (description) => {
+    if (description === undefined || description.length === 0) {
+        return [{ rule: 'description', reason: 'frontmatter has no "description" key' }];
+    }
+    if (!WHEN_TO_USE.test(description)) {
+        return [
+            {
+                rule: 'description',
+                reason: 'description must say when to use the skill ("when ..." clause)',
+            },
+        ];
+    }
+    return [];
+};
+const checkKeys = (keyNames) => keyNames
+    .filter((key) => !ALLOWED_KEYS.has(key))
+    .map((key) => ({
+    rule: 'keys',
+    reason: `unknown frontmatter key "${key}"`,
+}));
+/**
+ * Return every frontmatter defect in a SKILL.md: missing frontmatter, a missing/non-kebab-case name, a
+ * name that does not match its directory, a description that omits a when-to-use clause, or an unknown
+ * key. An empty array means the skill's frontmatter contract is sound.
+ */
+export const findSkillManifestViolations = (inputs) => {
+    const frontmatter = parseFrontmatter(inputs.content);
+    if (!frontmatter.present) {
+        return [{ rule: 'frontmatter', reason: 'file must open with valid "---" frontmatter' }];
+    }
+    return [
+        ...checkName(frontmatter.keys.get('name'), inputs.directoryName),
+        ...checkDescription(frontmatter.keys.get('description')),
+        ...checkKeys(frontmatter.keyNames),
+    ];
+};
+//# sourceMappingURL=skill-manifest.js.map

package/dist/skill-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-manifest.js","sourceRoot":"","sources":["../src/skill-manifest.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,mFAAmF;AACnF,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,sGAAsG;AACtG,sGAAsG;AActG,sGAAsG;AACtG,oGAAoG;AACpG,sGAAsG;AACtG,cAAc;AACd,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,MAAM;IACN,aAAa;IACb,SAAS;IACT,eAAe;IACf,eAAe;IACf,0BAA0B;IAC1B,OAAO;IACP,UAAU;CACX,CAAC,CAAA;AACF,MAAM,UAAU,GAAW,4BAA4B,CAAA;AACvD,MAAM,WAAW,GAAW,uBAAuB,CAAA;AACnD,MAAM,aAAa,GAAW,uBAAuB,CAAA;AACrD,oGAAoG;AACpG,oGAAoG;AACpG,kFAAkF;AAClF,MAAM,YAAY,GAAW,gBAAgB,CAAA;AAC7C,MAAM,YAAY,GAAW,QAAQ,CAAA;AACrC,uGAAuG;AACvG,qGAAqG;AACrG,6EAA6E;AAC7E,MAAM,WAAW,GAAW,SAAS,CAAA;AAQrC,sGAAsG;AACtG,wGAAwG;AACxG,uGAAuG;AACvG,MAAM,iBAAiB,GAAG,CAAC,IAAuB,EAAU,EAAE;IAC5D,MAAM,GAAG,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACvF,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAA;AACvC,CAAC,CAAA;AAED,sGAAsG;AACtG,MAAM,OAAO,GAAG,CAAC,KAAwB,EAAE,KAAa,EAAE,GAAW,EAAU,EAAE;IAC/E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,MAAM,IAAI,GAAsB,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACtD,OAAO,IAAI;SACR,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1C,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAe,EAAE;IACxD,gGAAgG;IAChG,qGAAqG;IACrG,6DAA6D;IAC7D,MAAM,KAAK,GAA2B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;IACxF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,EAAkB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAC1E,CAAC;IACD,MAAM,KAAK,GAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7D,MAAM,OAAO,GAA2C,KAAK;SAC1D,GAAG,CAAC,CAAC,IAAY,EAAE,KAAa,EAA6C,EAAE,CAAC;QAC/E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,KAAK;KACN,CAAC;SACD,MAAM,CACL,CACE,KAAgD,EACH,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CACpE;SACA,GAAG,CAAC,CAAC,KAAyC,EAA6B,EAAE,CAAC;QAC7E,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACjB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KAC5D,CAAC,CAAA;IACJ,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC;QACtB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAgC,EAAU,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KAC9E,CAAA;AACH,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAAC,IAAwB,EAAE,aAAqB,EAA6B,EAAE;IAC/F,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,KAAK,GAA8B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5D,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,IAAI,sBAAsB,EAAE,CAAC,CAAA;IACnE,MAAM,mBAAmB,GACvB,IAAI,KAAK,aAAa;QACpB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,IAAI,kCAAkC,aAAa,GAAG,EAAE,CAAC,CAAA;IACjG,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,mBAAmB,CAAC,CAAA;AAC3C,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,CAAC,WAA+B,EAA6B,EAAE;IACtF,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,OAAO;YACL;gBACE,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,gEAAgE;aACzE;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAAC,QAA2B,EAA6B,EAAE,CAC3E,QAAQ;KACL,MAAM,CAAC,CAAC,GAAW,EAAW,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KACxD,GAAG,CACF,CAAC,GAAW,EAAkB,EAAE,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,4BAA4B,GAAG,GAAG;CAC3C,CAAC,CACH,CAAA;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,MAA2B,EACA,EAAE;IAC7B,MAAM,WAAW,GAAgB,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACjE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,OAAO;QACL,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;QAChE,GAAG,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACxD,GAAG,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC;KACnC,CAAA;AACH,CAAC,CAAA"}

package/dist/source-text.d.ts

@@ -0,0 +1,83 @@
+/** The offset `at` reads to reach the final element. */
+export declare const LAST_CHARACTER: number;
+/** The value `indexOf` and this module's readers return when there is nothing to point at. */
+export declare const NOT_FOUND: number;
+/**
+ * The one-based line a source offset falls on.
+ * @param source the file contents.
+ * @param index the offset.
+ * @returns the line number, counting from one.
+ */
+export declare const lineOf: (source: string, index: number) => number;
+/** What a fold step produced, and whether the walk should stop there. */
+export interface Folded<State> {
+    readonly state: State;
+    readonly stop: boolean;
+}
+/**
+ * Blank every comment and regular-expression literal to spaces, leaving newlines intact so reported line
+ * numbers still point at real source positions. Without this, prose that merely names a banned construct
+ * would be reported as the construct itself, which is the difference between a gate that is trusted and
+ * one that is worked around.
+ * @param source the file contents.
+ * @returns the source with comments and regex literals replaced by spaces of equal length.
+ */
+export declare const stripComments: (source: string) => string;
+/**
+ * The source with every string literal replaced by filler of equal length, on top of what
+ * {@link stripComments} erases.
+ *
+ * A mask, for a caller that must locate syntax without reading inside a string. Offsets still line up
+ * with the source, so a position found here names the same character there, and a masked string is
+ * still a token rather than a gap. `parseJsonc` is that caller: it removed trailing commas from the
+ * document itself, so a comma sitting inside a string before a closing bracket - as a brace-expansion
+ * glob ending in one carries - was deleted from the parsed value, and nothing said so.
+ * @param source the file contents.
+ * @returns the source with comments erased, strings filled, and newlines intact.
+ */
+export declare const maskLiterals: (source: string) => string;
+/** One character of a delimiter-aware scan, with the bracket depth that holds once it is applied. */
+export interface ScanStep {
+    readonly character: string;
+    readonly index: number;
+    readonly depth: number;
+}
+/**
+ * Walk `source` from `start`, tracking string literals and bracket nesting so that a bracket or a quote
+ * inside a string cannot unbalance the scan. Every reader below needs exactly this bookkeeping and they
+ * differ only in what they do with each character, so it lives here once rather than in each of them.
+ * @param source the text to walk.
+ * @param start the index to begin at.
+ * @param fold called for every character outside a string literal; return stop to end the walk.
+ * @param initial the state the fold begins with.
+ */
+export declare const scanDelimited: <State>(source: string, start: number, fold: (state: State, step: ScanStep) => Folded<State>, initial: State) => State;
+/**
+ * Read the text between the parenthesis at `open` and its match.
+ * @param source the file contents.
+ * @param open the index of the opening parenthesis.
+ * @returns the argument text, or undefined when the call is unterminated (a parse error another gate reports).
+ */
+export declare const balancedArguments: (source: string, open: number) => string | undefined;
+/**
+ * Reduce an argument list to the characters sitting directly inside its outermost object literal, so a
+ * key nested in a `where` clause is not mistaken for a bound declared on the call itself.
+ * @param argumentText the text between a call's parentheses.
+ * @returns the depth-one characters, with nested structures elided.
+ */
+export declare const topLevelSlice: (argumentText: string) => string;
+/**
+ * Every offset at which `needle` occurs literally.
+ * @param source the text to search.
+ * @param needle the literal to find; its punctuation is not read as pattern syntax.
+ * @returns the offsets, in reading order.
+ */
+export declare const occurrences: (source: string, needle: string) => readonly number[];
+/**
+ * The keys sitting directly inside the object literal that opens after `index`.
+ * @param source the text to read.
+ * @param index where to look for the opening brace.
+ * @returns the depth-one key names, with every nested structure elided.
+ */
+export declare const topLevelKeys: (source: string, index: number) => readonly string[];
+//# sourceMappingURL=source-text.d.ts.map