@pseolint/core 0.4.1 → 0.5.3

package/dist/ai/manifest/validators/page-changes.js

@@ -0,0 +1,221 @@
+import { load } from "cheerio";
+import { fail, VALID } from "./types.js";
+const REQUIRED_PROPERTIES_BY_TYPE = {
+    Article: ["headline", "datePublished", "author"],
+    NewsArticle: ["headline", "datePublished", "author"],
+    BlogPosting: ["headline", "datePublished", "author"],
+    Product: ["name"],
+    FAQPage: ["mainEntity"],
+    HowTo: ["name", "step"],
+    Recipe: ["name", "recipeIngredient", "recipeInstructions"],
+    Event: ["name", "startDate", "location"],
+    Organization: ["name"],
+    LocalBusiness: ["name", "address"],
+    Person: ["name"],
+    BreadcrumbList: ["itemListElement"],
+    VideoObject: ["name", "description", "thumbnailUrl", "uploadDate"],
+};
+const MARKDOWN_LEAK_RE = /(\*\*|^#{1,6}\s|`{1,3}|\[[^\]]+\]\([^)]+\))/m;
+const PROMO_CTA_RE = /\b(buy now|click here|sign up|subscribe|limited time|act now|don'?t miss|shop now)\b/i;
+const UNSAFE_TAGS = new Set([
+    "script",
+    "iframe",
+    "object",
+    "embed",
+    "form",
+    "input",
+    "button",
+    "textarea",
+    "select",
+    "style",
+    "link",
+    "meta",
+    "base",
+]);
+const UNSAFE_ATTR_VALUE_RE = /^\s*(javascript|data|vbscript):/i;
+function jsonLdTypesOf(block) {
+    const t = block["@type"];
+    if (typeof t === "string")
+        return [t];
+    if (Array.isArray(t))
+        return t.filter((x) => typeof x === "string");
+    return [];
+}
+/** Schema.org required-property check for proposed JSON-LD blocks. */
+export function validateAddJsonLd(c) {
+    if (typeof c.block !== "object" || c.block === null) {
+        return fail("add_jsonld: block must be a JSON object");
+    }
+    const block = c.block;
+    if (block["@context"] === undefined) {
+        return fail("add_jsonld: missing @context");
+    }
+    const types = jsonLdTypesOf(block);
+    if (types.length === 0) {
+        return fail("add_jsonld: missing or invalid @type");
+    }
+    for (const t of types) {
+        const required = REQUIRED_PROPERTIES_BY_TYPE[t];
+        if (!required)
+            continue;
+        const missing = required.filter((p) => block[p] === undefined);
+        if (missing.length > 0) {
+            return fail(`add_jsonld: ${t} missing required properties: ${missing.join(", ")}`);
+        }
+    }
+    return VALID;
+}
+export function validateReplaceH1(c) {
+    if (!c.after.trim())
+        return fail("replace_h1: after-text is empty");
+    if (c.after.length > 200)
+        return fail(`replace_h1: after-text too long (${c.after.length} > 200 chars)`);
+    if (MARKDOWN_LEAK_RE.test(c.after))
+        return fail("replace_h1: after-text contains markdown syntax");
+    if (c.after === c.before)
+        return fail("replace_h1: after-text identical to before-text");
+    return VALID;
+}
+export function validateRewriteMeta(c) {
+    if (!c.after.trim())
+        return fail(`rewrite_meta[${c.field}]: after-text is empty`);
+    if (MARKDOWN_LEAK_RE.test(c.after))
+        return fail(`rewrite_meta[${c.field}]: after-text contains markdown syntax`);
+    if (c.field === "title") {
+        if (c.after.length < 10)
+            return fail(`rewrite_meta[title]: too short (${c.after.length} < 10 chars)`);
+        if (c.after.length > 70)
+            return fail(`rewrite_meta[title]: too long (${c.after.length} > 70 chars)`);
+    }
+    else if (c.field === "description") {
+        if (c.after.length < 50)
+            return fail(`rewrite_meta[description]: too short (${c.after.length} < 50 chars)`);
+        if (c.after.length > 160)
+            return fail(`rewrite_meta[description]: too long (${c.after.length} > 160 chars)`);
+    }
+    return VALID;
+}
+/**
+ * HTML-safety check using a cheerio-based allowlist. Rejects script/iframe/
+ * object/embed/form/style elements and any href/src that uses
+ * javascript:/data:/vbscript: schemes. Defense in depth — the LLM-generated
+ * patch is being prepared for paste into a CMS, not auto-applied, but a
+ * malicious patch in a public manifest is still a footgun.
+ */
+export function validateAddFaqBlock(c) {
+    if (!c.html.trim())
+        return fail("add_faq_block: html is empty");
+    let $;
+    try {
+        $ = load(c.html, null, false);
+    }
+    catch (e) {
+        return fail(`add_faq_block: html could not be parsed (${e instanceof Error ? e.message : String(e)})`);
+    }
+    // Helper closures: return the offending value or null. Cleaner than
+    // mutating an outer variable inside cheerio's `.each` callback (TS
+    // control-flow analysis can't see callback side effects, so the post-
+    // loop value gets narrowed to `never`).
+    const findUnsafeTag = () => {
+        const matches = [];
+        $("*").each((_, el) => {
+            const tag = (el.tagName ?? "").toLowerCase();
+            if (UNSAFE_TAGS.has(tag))
+                matches.push(tag);
+        });
+        return matches[0] ?? null;
+    };
+    const findUnsafeAttr = () => {
+        const matches = [];
+        $("[href], [src]").each((_, el) => {
+            const attribs = el.attribs ?? {};
+            const href = attribs.href ?? attribs.src ?? "";
+            if (UNSAFE_ATTR_VALUE_RE.test(href))
+                matches.push(href);
+        });
+        return matches[0] ?? null;
+    };
+    const unsafeTag = findUnsafeTag();
+    if (unsafeTag)
+        return fail(`add_faq_block: unsafe tag <${unsafeTag}>`);
+    const unsafeAttr = findUnsafeAttr();
+    if (unsafeAttr)
+        return fail(`add_faq_block: unsafe href/src scheme (${unsafeAttr.slice(0, 30)})`);
+    return VALID;
+}
+export function validateRewriteIntro(c) {
+    const after = c.after.trim();
+    if (after.length < 50)
+        return fail(`rewrite_intro: too short (${after.length} < 50 chars)`);
+    if (after.length > 500)
+        return fail(`rewrite_intro: too long (${after.length} > 500 chars)`);
+    if (PROMO_CTA_RE.test(after))
+        return fail("rewrite_intro: contains promotional CTA language");
+    if (MARKDOWN_LEAK_RE.test(after))
+        return fail("rewrite_intro: contains markdown syntax");
+    return VALID;
+}
+export function validateAddInternalLink(c) {
+    let fromHost;
+    let toHost;
+    try {
+        fromHost = new URL(c.from).hostname;
+    }
+    catch {
+        return fail("add_internal_link: from is not a valid URL");
+    }
+    try {
+        toHost = new URL(c.to).hostname;
+    }
+    catch {
+        return fail("add_internal_link: to is not a valid URL");
+    }
+    if (fromHost !== toHost) {
+        return fail(`add_internal_link: cross-domain (${fromHost} → ${toHost}); this rule emits internal links only`);
+    }
+    if (c.from === c.to) {
+        return fail("add_internal_link: from and to are identical (would create a self-link)");
+    }
+    if (!c.anchor.trim()) {
+        return fail("add_internal_link: anchor text is empty");
+    }
+    if (c.anchor.length > 100) {
+        return fail(`add_internal_link: anchor text too long (${c.anchor.length} > 100 chars)`);
+    }
+    return VALID;
+}
+export function validateRemoveThinBlock(c) {
+    const sel = c.selector.trim();
+    if (!sel)
+        return fail("remove_thin_block: selector is empty");
+    // Smoke-parse via cheerio: load empty doc and call .find(selector); a
+    // throw indicates a malformed selector. Doesn't catch all selector bugs
+    // (e.g. dependent on actual DOM) but rejects the obvious bad ones.
+    try {
+        load("<html></html>")(sel);
+    }
+    catch (e) {
+        return fail(`remove_thin_block: invalid selector (${e instanceof Error ? e.message : String(e)})`);
+    }
+    return VALID;
+}
+/** Dispatcher: routes a `PageChange` to its specific validator. */
+export function validatePageChange(c) {
+    switch (c.type) {
+        case "replace_h1":
+            return validateReplaceH1(c);
+        case "rewrite_meta":
+            return validateRewriteMeta(c);
+        case "add_jsonld":
+            return validateAddJsonLd(c);
+        case "add_faq_block":
+            return validateAddFaqBlock(c);
+        case "rewrite_intro":
+            return validateRewriteIntro(c);
+        case "add_internal_link":
+            return validateAddInternalLink(c);
+        case "remove_thin_block":
+            return validateRemoveThinBlock(c);
+    }
+}
+//# sourceMappingURL=page-changes.js.map

package/dist/ai/manifest/validators/page-changes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-changes.js","sourceRoot":"","sources":["../../../../src/ai/manifest/validators/page-changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAyB,MAAM,YAAY,CAAC;AAIhE,MAAM,2BAA2B,GAA6B;IAC5D,OAAO,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,QAAQ,CAAC;IAChD,WAAW,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,QAAQ,CAAC;IACpD,WAAW,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,QAAQ,CAAC;IACpD,OAAO,EAAE,CAAC,MAAM,CAAC;IACjB,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,oBAAoB,CAAC;IAC1D,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC;IACxC,YAAY,EAAE,CAAC,MAAM,CAAC;IACtB,aAAa,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;IAClC,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,cAAc,EAAE,CAAC,iBAAiB,CAAC;IACnC,WAAW,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,CAAC;CACnE,CAAC;AAEF,MAAM,gBAAgB,GAAG,8CAA8C,CAAC;AACxE,MAAM,YAAY,GAAG,uFAAuF,CAAC;AAE7G,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AACH,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAEhE,SAAS,aAAa,CAAC,KAA8B;IACnD,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACjF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,CAA8C;IAC9E,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAgC,CAAC;IACjD,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,eAAe,CAAC,iCAAiC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAA8C;IAC9E,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC,oCAAoC,CAAC,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,CAAC;IACzG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACnG,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAAgD;IAClF,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,wBAAwB,CAAC,CAAC;IAClF,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,wCAAwC,CAAC,CAAC;IACjH,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,CAAC;QACtG,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC,kCAAkC,CAAC,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,CAAC;IACvG,CAAC;SAAM,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACrC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC,yCAAyC,CAAC,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,CAAC;QAC5G,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC,wCAAwC,CAAC,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAiD;IACnF,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAEhE,IAAI,CAAC,CAAC;IACN,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,4CAA4C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzG,CAAC;IAED,oEAAoE;IACpE,mEAAmE;IACnE,sEAAsE;IACtE,wCAAwC;IACxC,MAAM,aAAa,GAAG,GAAkB,EAAE;QACxC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE;YACpB,MAAM,GAAG,GAAG,CAAE,EAA2B,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACvE,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5B,CAAC,CAAC;IACF,MAAM,cAAc,GAAG,GAAkB,EAAE;QACzC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE;YAChC,MAAM,OAAO,GAAI,EAA2C,CAAC,OAAO,IAAI,EAAE,CAAC;YAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;YAC/C,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC,8BAA8B,SAAS,GAAG,CAAC,CAAC;IAEvE,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC,0CAA0C,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAElG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,CAAiD;IACpF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC,6BAA6B,KAAK,CAAC,MAAM,cAAc,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC,4BAA4B,KAAK,CAAC,MAAM,eAAe,CAAC,CAAC;IAC7F,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC9F,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,CAAqD;IAErD,IAAI,QAAgB,CAAC;IACrB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,oCAAoC,QAAQ,MAAM,MAAM,wCAAwC,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,yEAAyE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,4CAA4C,CAAC,CAAC,MAAM,CAAC,MAAM,eAAe,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,CAAqD;IAErD,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC9D,sEAAsE;IACtE,wEAAwE;IACxE,mEAAmE;IACnE,IAAI,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,wCAAwC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAAC,CAAa;IAC9C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,YAAY;YACf,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC9B,KAAK,cAAc;YACjB,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,YAAY;YACf,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC9B,KAAK,eAAe;YAClB,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,eAAe;YAClB,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACjC,KAAK,mBAAmB;YACtB,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC;QACpC,KAAK,mBAAmB;YACtB,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/ai/manifest/validators/types.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Validator result. Patch validators return one of these for each proposed
+ * change; the dispatcher aggregates per-manifest. `reason` is a one-line
+ * human-readable explanation suitable for surfacing in the manifest UI
+ * ("dropped: H1 too long (250 chars > 200)").
+ */
+export interface ValidationOk {
+    valid: true;
+}
+export interface ValidationErr {
+    valid: false;
+    reason: string;
+}
+export type ValidationResult = ValidationOk | ValidationErr;
+export declare const VALID: ValidationOk;
+export declare function fail(reason: string): ValidationErr;
+//# sourceMappingURL=types.d.ts.map

package/dist/ai/manifest/validators/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/ai/manifest/validators/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,IAAI,CAAC;CACb;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,aAAa,CAAC;AAE5D,eAAO,MAAM,KAAK,EAAE,YAA8B,CAAC;AAEnD,wBAAgB,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAElD"}

package/dist/ai/manifest/validators/types.js

@@ -0,0 +1,5 @@
+export const VALID = { valid: true };
+export function fail(reason) {
+    return { valid: false, reason };
+}
+//# sourceMappingURL=types.js.map

package/dist/ai/manifest/validators/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/ai/manifest/validators/types.ts"],"names":[],"mappings":"AAiBA,MAAM,CAAC,MAAM,KAAK,GAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAEnD,MAAM,UAAU,IAAI,CAAC,MAAc;IACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC"}

package/dist/ai/orchestrate.d.ts

@@ -0,0 +1,74 @@
+import type { LanguageModel } from "ai";
+import { type ManifestValidationReport } from "./manifest/validate-manifest.js";
+import { type ManifestDiff } from "./manifest/diff.js";
+import type { FixManifest } from "./orchestrator/finish-tool.js";
+import type { EventSink } from "./orchestrator/log.js";
+import type { BudgetCaps, SessionResult } from "./orchestrator/types.js";
+import type { AiOptions } from "../types.js";
+export interface OrchestrateOptions {
+    /** Site to audit. Origin (e.g. https://example.com) is fine; the orchestrator's first move is fetching the sitemap. */
+    domain: string;
+    /** Caller identity. Persisted on the session row in the web app's DB; stub allowed for CLI/dogfood use. */
+    userId: string;
+    /**
+     * AI provider configuration. Falls through to `createLanguageModel`'s
+     * auto-detection when omitted (env-var based: `ANTHROPIC_API_KEY`, etc.).
+     */
+    ai?: AiOptions;
+    /** Override default budget caps. Merge with `DEFAULT_BUDGET`. */
+    budget?: Partial<BudgetCaps>;
+    /** Optional path for durable NDJSON session log. */
+    ndjsonPath?: string;
+    /** Optional event sink — SSE/R2 fanout in the web app, console.log in the CLI. */
+    onEvent?: EventSink;
+    /** External abort signal. */
+    signal?: AbortSignal;
+    /** Per-model-call retry count for transient errors. Default 2. */
+    maxRetries?: number;
+    /**
+     * @internal Test-only escape hatch — inject a pre-resolved model to skip
+     * `createLanguageModel`. Production callers always go through `ai`.
+     */
+    _resolvedModel?: {
+        model: LanguageModel;
+        providerId: string;
+        modelId: string;
+    };
+}
+export interface OrchestrateResult {
+    /** Raw session output: events, usage, stop reason. */
+    session: SessionResult;
+    /** Final manifest if the LLM called `finish_audit`; null otherwise. */
+    manifest: FixManifest | null;
+    /** Patch-by-patch validation report. Null when no manifest was produced. */
+    validation: ManifestValidationReport | null;
+    /** Structured diff projection of the manifest. Null when no manifest was produced. */
+    diff: ManifestDiff | null;
+}
+/**
+ * Public entry point that ties Phases 1–6 together. One call audits a
+ * domain, validates every patch, and emits structured diffs:
+ *
+ * ```ts
+ * const { manifest, validation, diff } = await orchestrate({
+ *   domain: "https://example.com",
+ *   userId: "demo",
+ *   onEvent: (e) => console.log(e),
+ * });
+ * ```
+ *
+ * Composition (the elegant part):
+ *   1. Resolve provider via existing `createLanguageModel`
+ *   2. Drive the LLM tool loop via `runOrchestrator`
+ *   3. Validate every patch the LLM proposed via `validateManifest`
+ *   4. Produce structured diffs for every patch via `diffManifest`
+ *
+ * Each layer is independently testable; this function exists to give
+ * callers (web app, CLI, MCP, scripts) one stable API surface.
+ *
+ * Returns null `manifest`/`validation`/`diff` when the session terminated
+ * for any reason other than `finish_audit` (budget breach, abort, error).
+ * Callers should branch on `session.reason` to handle these.
+ */
+export declare function orchestrate(opts: OrchestrateOptions): Promise<OrchestrateResult>;
+//# sourceMappingURL=orchestrate.d.ts.map

package/dist/ai/orchestrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrate.d.ts","sourceRoot":"","sources":["../../src/ai/orchestrate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAExC,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAErE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,kBAAkB;IACjC,uHAAuH;IACvH,MAAM,EAAE,MAAM,CAAC;IACf,2GAA2G;IAC3G,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,iEAAiE;IACjE,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7B,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE;QAAE,KAAK,EAAE,aAAa,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF;AAED,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,OAAO,EAAE,aAAa,CAAC;IACvB,uEAAuE;IACvE,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IAC7B,4EAA4E;IAC5E,UAAU,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC5C,sFAAsF;IACtF,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA0BtF"}

package/dist/ai/orchestrate.js

@@ -0,0 +1,54 @@
+import { createLanguageModel } from "./adapters/index.js";
+import { validateManifest, } from "./manifest/validate-manifest.js";
+import { diffManifest } from "./manifest/diff.js";
+import { runOrchestrator } from "./orchestrator/runner.js";
+/**
+ * Public entry point that ties Phases 1–6 together. One call audits a
+ * domain, validates every patch, and emits structured diffs:
+ *
+ * ```ts
+ * const { manifest, validation, diff } = await orchestrate({
+ *   domain: "https://example.com",
+ *   userId: "demo",
+ *   onEvent: (e) => console.log(e),
+ * });
+ * ```
+ *
+ * Composition (the elegant part):
+ *   1. Resolve provider via existing `createLanguageModel`
+ *   2. Drive the LLM tool loop via `runOrchestrator`
+ *   3. Validate every patch the LLM proposed via `validateManifest`
+ *   4. Produce structured diffs for every patch via `diffManifest`
+ *
+ * Each layer is independently testable; this function exists to give
+ * callers (web app, CLI, MCP, scripts) one stable API surface.
+ *
+ * Returns null `manifest`/`validation`/`diff` when the session terminated
+ * for any reason other than `finish_audit` (budget breach, abort, error).
+ * Callers should branch on `session.reason` to handle these.
+ */
+export async function orchestrate(opts) {
+    const resolved = opts._resolvedModel ?? (await createLanguageModel(opts.ai ?? {}));
+    const session = await runOrchestrator({
+        domain: opts.domain,
+        userId: opts.userId,
+        model: resolved.model,
+        providerId: resolved.providerId,
+        modelId: resolved.modelId,
+        budget: opts.budget,
+        ndjsonPath: opts.ndjsonPath,
+        onEvent: opts.onEvent,
+        signal: opts.signal,
+        maxRetries: opts.maxRetries,
+    });
+    if (!session.manifest) {
+        return { session, manifest: null, validation: null, diff: null };
+    }
+    return {
+        session,
+        manifest: session.manifest,
+        validation: validateManifest(session.manifest),
+        diff: diffManifest(session.manifest),
+    };
+}
+//# sourceMappingURL=orchestrate.js.map

package/dist/ai/orchestrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrate.js","sourceRoot":"","sources":["../../src/ai/orchestrate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,gBAAgB,GAEjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AA4C3D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAwB;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;QACpC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC9C,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC;KACrC,CAAC;AACJ,CAAC"}

package/dist/ai/orchestrator/budget.d.ts

@@ -0,0 +1,57 @@
+import type { BudgetCaps, StopReason, UsageSnapshot } from "./types.js";
+/**
+ * Tracks per-session usage against `BudgetCaps`. Consumed by the runner's
+ * step boundary: after every LLM step + tool batch, we record the usage and
+ * ask `nextStopReason()` whether to terminate.
+ *
+ * Wall time is measured from `start()`. Cost is estimated using the existing
+ * `estimateCostUsd` table; for unknown providers/models, cost defaults to 0
+ * which means USD caps don't fire — caller is responsible for ensuring
+ * provider/model are recognized when USD enforcement matters.
+ */
+export declare class BudgetTracker {
+    private readonly caps;
+    private readonly providerId;
+    private readonly modelId;
+    private inputTokens;
+    private outputTokens;
+    private toolCallCount;
+    private externalUsd;
+    private startedAt;
+    /** Largest observed input-token count for any single step. Drives the projection. */
+    private maxStepInputTokens;
+    private maxStepOutputTokens;
+    private stepCount;
+    constructor(caps: BudgetCaps, providerId: string, modelId: string);
+    start(): void;
+    recordStepUsage(usage: {
+        inputTokens?: number;
+        outputTokens?: number;
+    }): number;
+    recordToolCalls(n: number): void;
+    /**
+     * Record a non-LLM external API cost (SerpAPI calls, AI-engine probes,
+     * etc.) so the session budget accurately reflects total spend, not just
+     * orchestrator-LLM tokens.
+     */
+    recordExternalCost(usd: number): void;
+    estimatedUsd(): number;
+    snapshot(): UsageSnapshot;
+    /**
+     * Returns the StopReason that fires now, or null when no cap is breached.
+     * Order matters — earlier checks take priority when multiple caps exceed
+     * simultaneously (most informative reason wins).
+     */
+    nextStopReason(): StopReason | null;
+    /**
+     * Pre-flight projection: would executing one more step at the worst-case
+     * (max observed) per-step cost push us over the USD or input-token cap?
+     * Used by `stopWhen` to refuse the next step before it overshoots, rather
+     * than reactively after.
+     *
+     * Returns null until at least one step has completed — we have nothing
+     * to project from before that.
+     */
+    projectedNextStopReason(): StopReason | null;
+}
+//# sourceMappingURL=budget.d.ts.map

package/dist/ai/orchestrator/budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../../src/ai/orchestrator/budget.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAExE;;;;;;;;;GASG;AACH,qBAAa,aAAa;IAYtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAb1B,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,SAAS,CAAK;IACtB,qFAAqF;IACrF,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,SAAS,CAAK;gBAGH,IAAI,EAAE,UAAU,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM;IAGlC,KAAK,IAAI,IAAI;IAIb,eAAe,CAAC,KAAK,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAW/E,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI;IAIhC;;;;OAIG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIrC,YAAY,IAAI,MAAM;IAStB,QAAQ,IAAI,aAAa;IAUzB;;;;OAIG;IACH,cAAc,IAAI,UAAU,GAAG,IAAI;IAUnC;;;;;;;;OAQG;IACH,uBAAuB,IAAI,UAAU,GAAG,IAAI;CAe7C"}

package/dist/ai/orchestrator/budget.js

@@ -0,0 +1,114 @@
+import { estimateCostUsd } from "../cost.js";
+/**
+ * Tracks per-session usage against `BudgetCaps`. Consumed by the runner's
+ * step boundary: after every LLM step + tool batch, we record the usage and
+ * ask `nextStopReason()` whether to terminate.
+ *
+ * Wall time is measured from `start()`. Cost is estimated using the existing
+ * `estimateCostUsd` table; for unknown providers/models, cost defaults to 0
+ * which means USD caps don't fire — caller is responsible for ensuring
+ * provider/model are recognized when USD enforcement matters.
+ */
+export class BudgetTracker {
+    caps;
+    providerId;
+    modelId;
+    inputTokens = 0;
+    outputTokens = 0;
+    toolCallCount = 0;
+    externalUsd = 0;
+    startedAt = 0;
+    /** Largest observed input-token count for any single step. Drives the projection. */
+    maxStepInputTokens = 0;
+    maxStepOutputTokens = 0;
+    stepCount = 0;
+    constructor(caps, providerId, modelId) {
+        this.caps = caps;
+        this.providerId = providerId;
+        this.modelId = modelId;
+    }
+    start() {
+        this.startedAt = Date.now();
+    }
+    recordStepUsage(usage) {
+        const input = usage.inputTokens ?? 0;
+        const output = usage.outputTokens ?? 0;
+        this.inputTokens += input;
+        this.outputTokens += output;
+        if (input > this.maxStepInputTokens)
+            this.maxStepInputTokens = input;
+        if (output > this.maxStepOutputTokens)
+            this.maxStepOutputTokens = output;
+        this.stepCount += 1;
+        return this.estimatedUsd();
+    }
+    recordToolCalls(n) {
+        this.toolCallCount += n;
+    }
+    /**
+     * Record a non-LLM external API cost (SerpAPI calls, AI-engine probes,
+     * etc.) so the session budget accurately reflects total spend, not just
+     * orchestrator-LLM tokens.
+     */
+    recordExternalCost(usd) {
+        if (usd > 0)
+            this.externalUsd += usd;
+    }
+    estimatedUsd() {
+        const llmUsd = estimateCostUsd(this.providerId, this.modelId, {
+            input: this.inputTokens,
+            output: this.outputTokens,
+        }) ?? 0;
+        return llmUsd + this.externalUsd;
+    }
+    snapshot() {
+        return {
+            inputTokens: this.inputTokens,
+            outputTokens: this.outputTokens,
+            estimatedUsd: this.estimatedUsd(),
+            toolCallCount: this.toolCallCount,
+            elapsedMs: this.startedAt === 0 ? 0 : Date.now() - this.startedAt,
+        };
+    }
+    /**
+     * Returns the StopReason that fires now, or null when no cap is breached.
+     * Order matters — earlier checks take priority when multiple caps exceed
+     * simultaneously (most informative reason wins).
+     */
+    nextStopReason() {
+        if (this.toolCallCount >= this.caps.maxToolCalls)
+            return "tool_call_limit";
+        if (this.inputTokens >= this.caps.maxInputTokensTotal)
+            return "input_token_limit";
+        if (this.estimatedUsd() >= this.caps.maxSessionUsd)
+            return "usd_limit";
+        if (this.startedAt > 0 && Date.now() - this.startedAt >= this.caps.maxWallSeconds * 1000) {
+            return "wall_time_limit";
+        }
+        return null;
+    }
+    /**
+     * Pre-flight projection: would executing one more step at the worst-case
+     * (max observed) per-step cost push us over the USD or input-token cap?
+     * Used by `stopWhen` to refuse the next step before it overshoots, rather
+     * than reactively after.
+     *
+     * Returns null until at least one step has completed — we have nothing
+     * to project from before that.
+     */
+    projectedNextStopReason() {
+        if (this.stepCount === 0)
+            return null;
+        const projectedInput = this.inputTokens + this.maxStepInputTokens;
+        if (projectedInput >= this.caps.maxInputTokensTotal)
+            return "input_token_limit";
+        const projectedLlmUsd = estimateCostUsd(this.providerId, this.modelId, {
+            input: projectedInput,
+            output: this.outputTokens + this.maxStepOutputTokens,
+        }) ?? 0;
+        if (projectedLlmUsd + this.externalUsd >= this.caps.maxSessionUsd)
+            return "usd_limit";
+        return null;
+    }
+}
+//# sourceMappingURL=budget.js.map

package/dist/ai/orchestrator/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../../src/ai/orchestrator/budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C;;;;;;;;;GASG;AACH,MAAM,OAAO,aAAa;IAYL;IACA;IACA;IAbX,WAAW,GAAG,CAAC,CAAC;IAChB,YAAY,GAAG,CAAC,CAAC;IACjB,aAAa,GAAG,CAAC,CAAC;IAClB,WAAW,GAAG,CAAC,CAAC;IAChB,SAAS,GAAG,CAAC,CAAC;IACtB,qFAAqF;IAC7E,kBAAkB,GAAG,CAAC,CAAC;IACvB,mBAAmB,GAAG,CAAC,CAAC;IACxB,SAAS,GAAG,CAAC,CAAC;IAEtB,YACmB,IAAgB,EAChB,UAAkB,EAClB,OAAe;QAFf,SAAI,GAAJ,IAAI,CAAY;QAChB,eAAU,GAAV,UAAU,CAAQ;QAClB,YAAO,GAAP,OAAO,CAAQ;IAC/B,CAAC;IAEJ,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,eAAe,CAAC,KAAsD;QACpE,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;QAC1B,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;QAC5B,IAAI,KAAK,GAAG,IAAI,CAAC,kBAAkB;YAAE,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;QACrE,IAAI,MAAM,GAAG,IAAI,CAAC,mBAAmB;YAAE,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACzE,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAED,eAAe,CAAC,CAAS;QACvB,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,GAAW;QAC5B,IAAI,GAAG,GAAG,CAAC;YAAE,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC;IACvC,CAAC;IAED,YAAY;QACV,MAAM,MAAM,GACV,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE;YAC7C,KAAK,EAAE,IAAI,CAAC,WAAW;YACvB,MAAM,EAAE,IAAI,CAAC,YAAY;SAC1B,CAAC,IAAI,CAAC,CAAC;QACV,OAAO,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IACnC,CAAC;IAED,QAAQ;QACN,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;YACjC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;SAClE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,iBAAiB,CAAC;QAC3E,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAAE,OAAO,mBAAmB,CAAC;QAClF,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,WAAW,CAAC;QACvE,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,CAAC;YACzF,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,uBAAuB;QACrB,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClE,IAAI,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAAE,OAAO,mBAAmB,CAAC;QAEhF,MAAM,eAAe,GACnB,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE;YAC7C,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,mBAAmB;SACrD,CAAC,IAAI,CAAC,CAAC;QACV,IAAI,eAAe,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,WAAW,CAAC;QAEtF,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}