@rsaglobaltech/specgate 0.25.0 → 0.27.1

package/dist/scripts/lib/live-page.js

@@ -25,12 +25,13 @@ exports.livePage = livePage;
  * The script lives inside this template literal: it uses no backticks, no
  * dollar-brace, and no backslash escapes.
  */
-function livePage(projectName) {
+function livePage(projectName, token = "") {
     const title = String(projectName).replace(/[&<>"']/g, "");
     return `<!doctype html>
 <html lang="en"><head><meta charset="utf-8"/>
 <meta name="viewport" content="width=device-width, initial-scale=1"/>
 <title>Harness live — ${title}</title>
+<meta name="specgate-token" content="${String(token).replace(/[^0-9a-f]/g, "")}"/>
 <style>
   :root{--bg:#f6f8fa;--panel:#ffffff;--line:#d1d9e0;--soft:#eff2f5;--ink:#1f2328;--muted:#59636e;--faint:#8c959f;
     --pass:#1a7f37;--fail:#cf222e;--run:#9a6700;--run-bg:#fff8c5;--accent:#0969da;--sel:#ddf4ff;
@@ -65,8 +66,12 @@ function livePage(projectName) {
   .summary-btn{padding-left:10px;margin-bottom:6px;font-weight:600}
   .qsec{margin:10px 0 14px} .qsec h2{display:flex;align-items:center;gap:8px;margin:0 0 4px;padding:0 10px;font-size:12px;font-weight:600;color:var(--muted);text-transform:uppercase;letter-spacing:.04em}
   .qsec h2 .count{margin-left:auto;font-weight:400;font-variant-numeric:tabular-nums} .qsec .job{padding-left:10px;align-items:flex-start}
-  .qsec .job .ic{margin-top:3px} .job small{display:block;font-size:11.5px;color:var(--muted);font-weight:400}
+  .qsec .job .ic{margin-top:3px} .job small{display:block;font-size:11.5px;color:var(--muted);font-weight:400;white-space:normal;overflow-wrap:anywhere}
   .qsec p{margin:2px 10px 6px;font-size:12.5px} .muted{color:var(--muted)}
+  form.answer{display:flex;flex-wrap:wrap;gap:6px;margin:2px 10px 10px 30px} form.answer textarea{flex:1 1 100%;font:inherit;font-size:12.5px;padding:6px 8px;border:1px solid var(--line);border-radius:6px;background:var(--panel);color:var(--ink);resize:vertical}
+  .oq{margin:4px 10px 12px} .oqh{font-size:12.5px} .oqh b{font-weight:600} .oqt{font-size:13px;margin:2px 0 4px;overflow-wrap:anywhere}
+  .oq form.answer{margin:0}
+  form.answer button{border:1px solid var(--line);background:var(--soft);border-radius:6px;padding:3px 10px;cursor:pointer;font-size:12.5px} form.answer small{flex:1 1 100%}
   .now{border:1px solid var(--run);border-radius:6px;padding:4px 0 8px;background:var(--panel)}
   .kv{display:grid;grid-template-columns:62px minmax(0,1fr);gap:4px 10px;margin:4px 10px 0;font-size:12.5px} .kv dt{color:var(--muted)} .kv dd{margin:0;min-width:0;overflow-wrap:anywhere}
   .ctx{display:flex;flex-direction:column;gap:3px} .ctx .d{font-size:12px;color:var(--muted);font-variant-numeric:tabular-nums}
@@ -256,6 +261,41 @@ function livePage(projectName) {
     b.addEventListener("click", function(){ pick(r.req); });
     return b;
   }
+  /**
+   * Answer the agent's question from here (REQ-201): the same write as
+   * specgate answer, through studio's one POST, with this page's token.
+   */
+  function answerForm(q){
+    var f = el("form", "answer"), ta = el("textarea"), go = el("button", "", "Answer"), msg = el("small", "muted");
+    ta.placeholder = "Your answer to " + q.id; ta.rows = 2; go.type = "submit";
+    f.append(ta, go, msg);
+    var post = function(body){
+      var tok = (document.querySelector('meta[name="specgate-token"]') || {}).content || "";
+      return fetch("live/answer", {method:"POST", headers:{"content-type":"application/json", "x-specgate-token":tok}, body:JSON.stringify(body)})
+        .then(function(x){ return x.json(); });
+    };
+    f.addEventListener("submit", function(ev){
+      ev.preventDefault();
+      if (!ta.value.trim()) return;
+      go.disabled = true;
+      post({question:q.id, change:q.change === "project" ? undefined : q.change, answer:ta.value}).then(function(r){
+        go.disabled = false;
+        if (!r.ok) { msg.textContent = r.message || "Not answered."; return; }
+        msg.textContent = q.id + " answered; " + r.assumption + " to review" + (r.revise && r.revise.length ? " — revise " + r.revise.join(", ") : "") + ".";
+        ta.remove(); go.remove();
+        var rv = el("button", "", "Mark reviewed"); rv.type = "button";
+        rv.addEventListener("click", function(){
+          post({question:q.id, change:q.change === "project" ? undefined : q.change, reviewed:true}).then(function(x){
+            msg.textContent = x.ok ? q.id + " reviewed: the specification reflects it." : (x.message || "Not reviewed.");
+            if (x.ok) rv.remove();
+          });
+        });
+        f.appendChild(rv);
+      }).catch(function(){ go.disabled = false; msg.textContent = "Studio did not answer."; });
+    });
+    return f;
+  }
+
   function block(title, count){
     var d = el("section", "qsec"), h = el("h2"); h.append(el("span", "", title));
     if (count !== undefined) h.appendChild(el("span", "count", String(count)));
@@ -299,7 +339,7 @@ function livePage(projectName) {
     matrix.forEach(function(m){ if (m.status === "Needs Clarification" && !byReq[m.requirement] && !seenB[m.requirement]) { seenB[m.requirement] = 1;
       need.push({r:{req:m.requirement, title:m.title, state:"idle"}, note:"blocked · needs clarification", st:"idle"}); } });
     var n1 = block("Needs attention", need.length);
-    need.forEach(function(x){ n1.appendChild(jobBtn(x.r, sel, x.note, x.st)); });
+    need.forEach(function(x){ n1.appendChild(jobBtn(x.r, sel, x.note, x.st)); if (x.st === "question" && x.r.question && x.r.question.id) n1.appendChild(answerForm(x.r.question)); });
     if (!need.length) n1.appendChild(el("p", "muted", "Nothing failed or blocked."));
     box.appendChild(n1);
 
@@ -314,6 +354,26 @@ function livePage(projectName) {
     if (!next.length) n2.appendChild(el("p", "muted", (model.queue || []).length ? "The queue is done." : "No queue recorded for this run."));
     box.appendChild(n2);
 
+    // REQ-203: every open question, not only the agent's, answered from here.
+    var shown = {};
+    need.forEach(function(x){ if (x.r.question && x.r.question.id) shown[x.r.question.change + ":" + x.r.question.id] = 1; });
+    var oq = (model.questions && model.questions.open || []).filter(function(q){ return !shown[q.change + ":" + q.id]; });
+    var wq = model.questions && model.questions.waitingWithoutQuestion || [];
+    var n4 = block("Open questions", oq.length + wq.length);
+    oq.forEach(function(q){
+      var row = el("div", "oq"), h = el("div", "oqh");
+      h.append(el("b", "", q.id), el("span", "muted", " " + (q.change === "project" ? "project" : q.change) + (q.blocks.length ? " · blocks " + q.blocks.join(", ") : "")));
+      row.append(h, el("div", "oqt", q.text), answerForm(q));
+      n4.appendChild(row);
+    });
+    wq.forEach(function(r){
+      var row = el("div", "oq");
+      row.append(el("div", "oqh", r.requirement + " " + (r.title || "")), el("small", "muted", "Needs Clarification with no question: specgate ask " + r.requirement + ' "…"'));
+      n4.appendChild(row);
+    });
+    if (!oq.length && !wq.length) n4.appendChild(el("p", "muted", "Nothing waits for an answer."));
+    box.appendChild(n4);
+
     var recent = list.filter(function(r){ return r.state === "pass"; }).sort(function(a, b){ return b.updated - a.updated; }).slice(0, 5);
     var n3 = block("Finished recently");
     recent.forEach(function(r){ n3.appendChild(jobBtn(r, sel, dur(r.elapsed) + (r.usage && r.usage.cost !== null ? " · " + usd(r.usage.cost) : ""), "pass")); });
@@ -323,17 +383,18 @@ function livePage(projectName) {
   }
 
   function summary(list){
-    var p = 0, f = 0, run = 0, first = 0, last = 0;
-    list.forEach(function(r){ if (r.state === "pass") p++; else if (r.state === "fail" || r.state === "question") f++; else run++;
+    var p = 0, f = 0, run = 0, asks = 0, first = 0, last = 0;
+    // A question waits for a person: neither a failure nor work in progress (REQ-201).
+    list.forEach(function(r){ if (r.state === "pass") p++; else if (r.state === "fail") f++; else if (r.state === "question") asks++; else run++;
       if (!first || r.started < first) first = r.started; last = Math.max(last, r.state === "running" ? now() : r.updated); });
-    var state = run ? "running" : f ? "fail" : list.length ? "pass" : "running";
+    var state = run ? "running" : f ? "fail" : asks ? "running" : list.length ? "pass" : "running";
     $("runBadge").className = "badge " + state;
-    $("runState").textContent = run ? "In progress" : f ? "Failed" : list.length ? "Completed" : "Waiting";
+    $("runState").textContent = run ? "In progress" : f ? "Failed" : asks ? "Waiting for an answer" : list.length ? "Completed" : "Waiting";
     var cur = list.filter(function(r){ return r.state === "running"; })[0];
     $("runTitle").textContent = cur ? cap(cur.group) + " · " + cur.req + " " + (cur.title || "") : groups(list).map(function(g){ return cap(g.name); }).join(", ") || "Harness run";
     var box = $("progress"); box.replaceChildren();
     [["Started", first ? stamp(first) : "—"], ["Duration", first ? dur(last - first) : "—"],
-     ["Requirements", p + " passed · " + run + " running · " + f + " failed"],
+     ["Requirements", p + " passed · " + run + " running · " + f + " failed" + (asks ? " · " + asks + " waiting for an answer" : "")],
      ["Agent time", dur(list.reduce(function(a, r){ return a + elapsed(r); }, 0))]].concat(model.totals && (model.totals.input || model.totals.output) ? [
      ["Tokens", kt(model.totals.input + model.totals.cacheRead + model.totals.cacheWrite) + " in · " + kt(model.totals.output) + " out"],
      ["Cost", usd(model.totals.cost)]] : []).forEach(function(x){
@@ -368,12 +429,12 @@ function livePage(projectName) {
     ["", "Module", "Requirements", "Passed", "Time"].forEach(function(h, i){ var c = el("span", i >= 3 ? "num" : "", h); head.appendChild(c); });
     box.appendChild(head);
     order.forEach(function(g){
-      var rs = rowsBy[g], pass = 0, fail = 0, run = 0, time = 0;
+      var rs = rowsBy[g], pass = 0, fail = 0, run = 0, asked = 0, time = 0;
       var row = el("div", "mm-row"), bar = el("span", "mm-bar");
       rs.forEach(function(q){
         var ev = byReq[q.req], st = ev ? ev.state : (q.status === "Implemented" || q.status === "Verified" || q.status === "Released") ? "pass"
           : q.status === "Needs Clarification" ? "blocked" : "queued";
-        if (st === "pass") pass++; else if (st === "fail" || st === "question") fail++; else if (st === "running") run++;
+        if (st === "pass") pass++; else if (st === "fail") fail++; else if (st === "running") run++; else if (st === "question") asked++;
         if (ev) time += elapsed(ev);
         var seg = el("button", "seg " + st + (sel && sel.req === q.req ? " on" : "")); seg.type = "button";
         seg.title = q.req + " — " + (q.title || "") + " · " + (ev ? st + " · " + dur(elapsed(ev)) : st);
@@ -381,7 +442,7 @@ function livePage(projectName) {
         seg.addEventListener("click", function(){ pick(q.req); });
         bar.appendChild(seg);
       });
-      var state = fail ? "fail" : run ? "running" : pass === rs.length ? "pass" : "idle";
+      var state = fail ? "fail" : asked ? "question" : run ? "running" : pass === rs.length ? "pass" : "idle";
       if (fail) row.classList.add("has-fail"); else if (run) row.classList.add("has-run"); else if (state === "idle" && !pass) row.classList.add("queued");
       row.append(icon(state), el("b", "", cap(g === "spec" ? "" : g)), bar, el("span", "num", pass + "/" + rs.length), el("span", "num muted", time ? dur(time) : pass === rs.length ? "earlier" : "queued"));
       box.appendChild(row);

package/dist/scripts/lib/live-page.js.map

@@ -1 +1 @@
-{"version":3,"file":"live-page.js","sourceRoot":"","sources":["../../../scripts/lib/live-page.ts"],"names":[],"mappings":";;AAwBA,4BAolBC;AA5mBD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,QAAQ,CAAC,WAAmB;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO;;;wBAGe,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+Gb,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA+dN,CAAC;AAChB,CAAC"}
+{"version":3,"file":"live-page.js","sourceRoot":"","sources":["../../../scripts/lib/live-page.ts"],"names":[],"mappings":";;AAwBA,4BAipBC;AAzqBD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,QAAQ,CAAC,WAAmB,EAAE,KAAK,GAAG,EAAE;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO;;;wBAGe,KAAK;uCACU,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAmH9D,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAuhBN,CAAC;AAChB,CAAC"}

package/dist/scripts/lib/quality-presets.js

@@ -0,0 +1,378 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IMAGES = void 0;
+exports.detectStacks = detectStacks;
+exports.javaVersion = javaVersion;
+exports.presetYaml = presetYaml;
+exports.withPreset = withPreset;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+/** Images, pinned. Refreshed with the presets, in a release. */
+exports.IMAGES = {
+    gitleaks: "ghcr.io/gitleaks/gitleaks:v8.24.3",
+    semgrep: "semgrep/semgrep:1.99.0",
+    osv: "ghcr.io/google/osv-scanner:v2.0.2",
+    node: "node:22",
+};
+const read = (dir, rel) => {
+    try {
+        return fs.readFileSync(path.join(dir, rel), "utf8");
+    }
+    catch {
+        return "";
+    }
+};
+/** The stacks a project's build files give away, in the order presets are written. */
+function detectStacks(projectDir) {
+    const has = (rel) => fs.existsSync(path.join(projectDir, rel));
+    const out = [];
+    if (has("pom.xml"))
+        out.push("maven");
+    if (has("build.gradle") || has("build.gradle.kts"))
+        out.push("gradle");
+    if (has("package.json"))
+        out.push("node");
+    return out;
+}
+/** The JDK a Java build declares (release, source or java.version), 21 when it says none. */
+function javaVersion(projectDir) {
+    const text = `${read(projectDir, "pom.xml")}\n${read(projectDir, "build.gradle")}\n${read(projectDir, "build.gradle.kts")}`;
+    const m = /<maven\.compiler\.(?:release|source)>(\d+)</.exec(text) ||
+        /<java\.version>(\d+)</.exec(text) ||
+        /languageVersion\s*(?:=|\.set\()\s*JavaLanguageVersion\.of\((\d+)\)/.exec(text) ||
+        /sourceCompatibility\s*=\s*(?:JavaVersion\.VERSION_)?['"]?(\d+)/.exec(text);
+    const v = m ? Number(m[1]) : 21;
+    return [17, 21, 25].includes(v) ? v : v < 17 ? 17 : 21;
+}
+/** The lockfile and how to install in a node container. */
+function nodeInstall(projectDir) {
+    const has = (rel) => fs.existsSync(path.join(projectDir, rel));
+    if (has("pnpm-lock.yaml"))
+        return {
+            lock: "pnpm-lock.yaml",
+            install: "corepack enable && pnpm install --frozen-lockfile --reporter=silent",
+        };
+    if (has("yarn.lock"))
+        return {
+            lock: "yarn.lock",
+            install: "corepack enable && yarn install --frozen-lockfile --silent",
+        };
+    return { lock: "package-lock.json", install: "npm ci --no-audit --no-fund --silent" };
+}
+const q = (s) => JSON.stringify(s);
+function render(c) {
+    const lines = [
+        `  - name: ${c.name}`,
+        `    run: ${q(c.run)}`,
+        `    when: ${c.when}`,
+        ...(c.gate === false ? ["    gate: false"] : []),
+        "    runner: docker",
+        `    image: ${c.image}`,
+        ...(c.network === false ? ["    network: false"] : []),
+        ...(c.volumes && c.volumes.length ? [`    volumes: [${c.volumes.join(", ")}]`] : []),
+        ...(c.sarif ? [`    sarif: ${c.sarif}`] : []),
+        ...(c.report ? [`    report: ${c.report}`] : []),
+        ...(c.scope ? [`    scope: ${c.scope}`] : []),
+        ...(c.timeout ? [`    timeout: ${c.timeout}`] : []),
+    ];
+    return c.missing ? [`  # ${c.missing}`, ...lines.map((l) => `  #${l.slice(1)}`)] : lines;
+}
+/** The secrets and dependency checks every stack shares. */
+function shared(projectDir, level, depsLock) {
+    // osv-scanner reads a lockfile (or pom.xml); without one it finds nothing to
+    // scan and writes no SARIF, so the check would fail on every run.
+    const lockMissing = !fs.existsSync(path.join(projectDir, depsLock))
+        ? `Dependencies need ${depsLock}, which this project does not have yet; once it does, uncomment:`
+        : undefined;
+    return [
+        {
+            name: "secrets",
+            run: "gitleaks dir . --no-banner --report-format sarif --report-path .specgate/quality/gitleaks.sarif",
+            when: "attempt",
+            image: exports.IMAGES.gitleaks,
+            network: false,
+            sarif: ".specgate/quality/gitleaks.sarif",
+        },
+        {
+            name: "dependencies",
+            run: `/osv-scanner scan source -L ${depsLock} --format sarif --output .specgate/quality/osv.sarif`,
+            when: level === "strict" ? "attempt" : "end",
+            image: exports.IMAGES.osv,
+            sarif: ".specgate/quality/osv.sarif",
+            scope: "all",
+            missing: lockMissing,
+        },
+    ];
+}
+function maven(projectDir, level) {
+    const pom = read(projectDir, "pom.xml");
+    const image = `maven:3.9-eclipse-temurin-${javaVersion(projectDir)}`;
+    const m2 = ["specgate-m2:/root/.m2"];
+    const mvn = "mvn -B -q";
+    const checks = [
+        ...shared(projectDir, level, "pom.xml"),
+        {
+            name: "coverage",
+            run: `${mvn} org.jacoco:jacoco-maven-plugin:0.8.12:prepare-agent test org.jacoco:jacoco-maven-plugin:0.8.12:report`,
+            when: "attempt",
+            image,
+            volumes: m2,
+            report: "jacoco:target/site/jacoco/jacoco.xml",
+            timeout: 1800,
+        },
+        {
+            name: "spotbugs",
+            run: `${mvn} compile com.github.spotbugs:spotbugs-maven-plugin:4.8.6.6:spotbugs -Dspotbugs.sarifOutput=true`,
+            when: level === "strict" ? "attempt" : "end",
+            image,
+            volumes: m2,
+            sarif: "target/spotbugsSarif.json",
+        },
+    ];
+    if (level === "strict") {
+        checks.push({
+            name: "pmd",
+            run: `${mvn} org.apache.maven.plugins:maven-pmd-plugin:3.26.0:pmd -Dformat=net.sourceforge.pmd.renderers.SarifRenderer -DlinkXRef=false`,
+            when: "attempt",
+            image,
+            volumes: m2,
+            sarif: "target/pmd.sarif.json",
+        }, {
+            name: "semgrep",
+            run: "semgrep scan --config p/java --sarif --output .specgate/quality/semgrep.sarif --metrics off --quiet",
+            when: "end",
+            image: exports.IMAGES.semgrep,
+            sarif: ".specgate/quality/semgrep.sarif",
+        }, {
+            name: "mutation",
+            run: `${mvn} test-compile org.pitest:pitest-maven:mutationCoverage -DtargetClasses={changed_classes} -DoutputFormats=XML -DtimestampedReports=false`,
+            when: "end",
+            image,
+            volumes: m2,
+            report: "pit:target/pit-reports/mutations.xml",
+            timeout: 3600,
+            missing: /pitest-maven/.test(pom)
+                ? undefined
+                : "Mutation needs pitest-maven with pitest-junit5-plugin declared in pom.xml (JUnit 5 cannot be added from the command line); add them and uncomment:",
+        });
+    }
+    return checks;
+}
+function gradle(projectDir, level) {
+    const build = `${read(projectDir, "build.gradle")}\n${read(projectDir, "build.gradle.kts")}`;
+    // osv-scanner reads Gradle's lockfile, not the build script: dependency locking must be on.
+    const lock = "gradle.lockfile";
+    const image = `gradle:8-jdk${javaVersion(projectDir)}`;
+    const cache = ["specgate-gradle:/home/gradle/.gradle"];
+    const checks = [
+        ...shared(projectDir, level, lock),
+        {
+            name: "coverage",
+            run: "gradle --no-daemon -q test jacocoTestReport",
+            when: "attempt",
+            image,
+            volumes: cache,
+            report: "jacoco:build/reports/jacoco/test/jacocoTestReport.xml",
+            timeout: 1800,
+            missing: /\bjacoco\b/.test(build)
+                ? undefined
+                : "Coverage needs the jacoco plugin applied, with reports { xml.required = true }; add it and uncomment:",
+        },
+    ];
+    if (level === "strict") {
+        checks.push({
+            name: "semgrep",
+            run: "semgrep scan --config p/java --sarif --output .specgate/quality/semgrep.sarif --metrics off --quiet",
+            when: "end",
+            image: exports.IMAGES.semgrep,
+            sarif: ".specgate/quality/semgrep.sarif",
+        });
+    }
+    return checks;
+}
+function node(projectDir, level) {
+    let pkg = {};
+    try {
+        pkg = JSON.parse(read(projectDir, "package.json") || "{}");
+    }
+    catch {
+        pkg = {};
+    }
+    const deps = { ...(pkg.dependencies || {}), ...(pkg.devDependencies || {}) };
+    const { lock, install } = nodeInstall(projectDir);
+    const slug = path
+        .basename(projectDir)
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-|-$/g, "") || "project";
+    // node_modules lives in a volume: the host's may hold another platform's binaries.
+    const volumes = [`specgate-nm-${slug}:/src/node_modules`, "specgate-npm:/root/.npm"];
+    const inNode = (cmd) => `${install} && ${cmd}`;
+    const tsconfig = fs.existsSync(path.join(projectDir, "tsconfig.json"));
+    const runner = deps.vitest ? "vitest" : deps.jest ? "jest" : "";
+    const checks = [...shared(projectDir, level, lock)];
+    if (tsconfig) {
+        checks.push({
+            name: "types",
+            run: inNode("npx --no-install tsc --noEmit"),
+            when: "attempt",
+            image: exports.IMAGES.node,
+            volumes,
+        });
+    }
+    if (deps.eslint) {
+        checks.push({
+            name: "lint",
+            run: inNode("npx --no-install eslint ."),
+            when: "attempt",
+            image: exports.IMAGES.node,
+            volumes,
+        });
+    }
+    checks.push({
+        name: "coverage",
+        run: inNode(runner === "jest"
+            ? "npx --no-install jest --coverage --coverageReporters=lcov"
+            : "npx --no-install vitest run --coverage --coverage.reporter=lcov"),
+        when: "attempt",
+        image: exports.IMAGES.node,
+        volumes,
+        report: "lcov:coverage/lcov.info",
+        timeout: 1800,
+        missing: runner
+            ? runner === "vitest" && !deps["@vitest/coverage-v8"] && !deps["@vitest/coverage-istanbul"]
+                ? "Coverage needs @vitest/coverage-v8 in devDependencies; add it and uncomment:"
+                : undefined
+            : "Coverage needs Vitest or Jest; with one installed, uncomment:",
+    });
+    if (level === "strict") {
+        checks.push({
+            name: "semgrep",
+            run: "semgrep scan --config p/typescript --config p/react --sarif --output .specgate/quality/semgrep.sarif --metrics off --quiet",
+            when: "end",
+            image: exports.IMAGES.semgrep,
+            sarif: ".specgate/quality/semgrep.sarif",
+        }, {
+            name: "mutation",
+            run: inNode("npx --no-install stryker run --mutate {changed_src} --reporters json"),
+            when: "end",
+            image: exports.IMAGES.node,
+            volumes,
+            report: "stryker:reports/mutation/mutation.json",
+            timeout: 3600,
+            missing: deps["@stryker-mutator/core"]
+                ? undefined
+                : "Mutation needs @stryker-mutator/core and its runner in devDependencies; add them and uncomment:",
+        });
+    }
+    return checks;
+}
+/** The `quality:` block a level writes for a project, as YAML lines. */
+function presetYaml(projectDir, level) {
+    const stacks = detectStacks(projectDir);
+    const lines = [
+        "# Quality and security checks (ADR-0040), written by `specgate quality init`.",
+        "# Every check runs in Docker, with tools that need no account. Take the",
+        "# baseline once (`specgate quality baseline`) so only new findings fail.",
+        `quality: ${level}`,
+        "checks:",
+        // REQ-234: Specgate checks this itself — no tool, so no container either.
+        "  - name: commits",
+        '    run: "builtin:commits"',
+        "    when: attempt",
+        "    runner: local",
+    ];
+    const sonar = [
+        "  # SonarQube Community in Docker (REQ-226): starts a local server on first use",
+        "  # (about 2 GB of memory) at http://127.0.0.1:9123, login admin/admin. Uncomment:",
+        "  # - name: sonar",
+        '  #   run: "builtin:sonar"',
+        "  #   when: end",
+        "  #   runner: docker",
+        "  #   sarif: .specgate/quality/sonar.sarif",
+        "  #   timeout: 1800",
+        // REQ-227: a second agent reads the change against the requirement; it advises.
+        "  - name: review",
+        '    run: "builtin:review"',
+        "    when: end",
+        "    gate: false",
+        "    runner: local",
+    ];
+    const seen = new Set(["commits"]);
+    for (const stack of stacks.length ? stacks : ["node"]) {
+        const checks = stack === "maven"
+            ? maven(projectDir, level)
+            : stack === "gradle"
+                ? gradle(projectDir, level)
+                : node(projectDir, level);
+        for (const c of checks) {
+            // One secrets scan for the whole repository; per-stack checks get the stack's name.
+            const name = seen.has(c.name) ? `${c.name}-${stack}` : c.name;
+            if (seen.has(c.name) && (c.name === "secrets" || c.name === "semgrep"))
+                continue;
+            seen.add(name);
+            lines.push(...render({ ...c, name }));
+        }
+    }
+    if (level === "strict")
+        lines.push(...sonar);
+    return lines.join("\n") + "\n";
+}
+/** Keys the quality block owns in harness.config.yaml. */
+const OWNED = ["quality", "diff_coverage", "mutation_score", "checks"];
+/**
+ * harness.config.yaml with its quality block replaced by this one: every
+ * other line kept, the block's own comment lines dropped with it.
+ */
+function withPreset(config, preset) {
+    const lines = config.replace(/\r\n/g, "\n").split("\n");
+    const out = [];
+    let skipping = false;
+    for (const line of lines) {
+        const top = /^([a-z_]+):/.exec(line);
+        if (top)
+            skipping = OWNED.includes(top[1]);
+        else if (skipping && !/^(\s|#|$)/.test(line))
+            skipping = false;
+        if (skipping)
+            continue;
+        if (/^# (Quality and security checks|Every check runs in Docker|baseline once)/.test(line))
+            continue;
+        out.push(line);
+    }
+    return `${out.join("\n").trimEnd()}\n\n${preset}`;
+}
+//# sourceMappingURL=quality-presets.js.map

package/dist/scripts/lib/quality-presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality-presets.js","sourceRoot":"","sources":["../../../scripts/lib/quality-presets.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,oCAOC;AAGD,kCASC;AAkQD,gCAgDC;AASD,gCAcC;AA5XD,4CAA8B;AAC9B,gDAAkC;AAclC,gEAAgE;AACnD,QAAA,MAAM,GAAG;IACpB,QAAQ,EAAE,mCAAmC;IAC7C,OAAO,EAAE,wBAAwB;IACjC,GAAG,EAAE,mCAAmC;IACxC,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAAW,EAAE,EAAE;IACxC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF,sFAAsF;AACtF,SAAgB,YAAY,CAAC,UAAkB;IAC7C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,IAAI,GAAG,CAAC,SAAS,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,cAAc,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6FAA6F;AAC7F,SAAgB,WAAW,CAAC,UAAkB;IAC5C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,CAAC;IAC5H,MAAM,CAAC,GACL,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC;QACxD,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/E,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,2DAA2D;AAC3D,SAAS,WAAW,CAAC,UAAkB;IACrC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,gBAAgB,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,qEAAqE;SAC/E,CAAC;IACJ,IAAI,GAAG,CAAC,WAAW,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,4DAA4D;SACtE,CAAC;IACJ,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;AACxF,CAAC;AAkBD,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAE3C,SAAS,MAAM,CAAC,CAAc;IAC5B,MAAM,KAAK,GAAG;QACZ,aAAa,CAAC,CAAC,IAAI,EAAE;QACrB,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;QACtB,aAAa,CAAC,CAAC,IAAI,EAAE;QACrB,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,oBAAoB;QACpB,cAAc,CAAC,CAAC,KAAK,EAAE;QACvB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;IACF,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3F,CAAC;AAED,4DAA4D;AAC5D,SAAS,MAAM,CAAC,UAAkB,EAAE,KAAY,EAAE,QAAgB;IAChE,6EAA6E;IAC7E,kEAAkE;IAClE,MAAM,WAAW,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC,CAAC,qBAAqB,QAAQ,kEAAkE;QACjG,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL;YACE,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,iGAAiG;YACtG,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,cAAM,CAAC,QAAQ;YACtB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC;SAC1C;QACD;YACE,IAAI,EAAE,cAAc;YACpB,GAAG,EAAE,+BAA+B,QAAQ,sDAAsD;YAClG,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;YAC5C,KAAK,EAAE,cAAM,CAAC,GAAG;YACjB,KAAK,EAAE,6BAA6B;YACpC,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,WAAW;SACrB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,UAAkB,EAAE,KAAY;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,6BAA6B,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;IACrE,MAAM,EAAE,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,WAAW,CAAC;IACxB,MAAM,MAAM,GAAkB;QAC5B,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC;QACvC;YACE,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,GAAG,GAAG,wGAAwG;YACnH,IAAI,EAAE,SAAS;YACf,KAAK;YACL,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,sCAAsC;YAC9C,OAAO,EAAE,IAAI;SACd;QACD;YACE,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,GAAG,GAAG,iGAAiG;YAC5G,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;YAC5C,KAAK;YACL,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,2BAA2B;SACnC;KACF,CAAC;IACF,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CACT;YACE,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,GAAG,GAAG,6HAA6H;YACxI,IAAI,EAAE,SAAS;YACf,KAAK;YACL,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,uBAAuB;SAC/B,EACD;YACE,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,qGAAqG;YAC1G,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,cAAM,CAAC,OAAO;YACrB,KAAK,EAAE,iCAAiC;SACzC,EACD;YACE,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,GAAG,GAAG,yIAAyI;YACpJ,IAAI,EAAE,KAAK;YACX,KAAK;YACL,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,sCAAsC;YAC9C,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC/B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,oJAAoJ;SACzJ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,UAAkB,EAAE,KAAY;IAC9C,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,CAAC;IAC7F,4FAA4F;IAC5F,MAAM,IAAI,GAAG,iBAAiB,CAAC;IAC/B,MAAM,KAAK,GAAG,eAAe,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,CAAC,sCAAsC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAkB;QAC5B,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC;QAClC;YACE,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,6CAA6C;YAClD,IAAI,EAAE,SAAS;YACf,KAAK;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,uDAAuD;YAC/D,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC/B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,uGAAuG;SAC5G;KACF,CAAC;IACF,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,qGAAqG;YAC1G,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,cAAM,CAAC,OAAO;YACrB,KAAK,EAAE,iCAAiC;SACzC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,IAAI,CAAC,UAAkB,EAAE,KAAY;IAC5C,IAAI,GAAG,GAAwF,EAAE,CAAC;IAClG,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,IAAI,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,IAAI,GACR,IAAI;SACD,QAAQ,CAAC,UAAU,CAAC;SACpB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IACxC,mFAAmF;IACnF,MAAM,OAAO,GAAG,CAAC,eAAe,IAAI,oBAAoB,EAAE,yBAAyB,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,OAAO,OAAO,GAAG,EAAE,CAAC;IACvD,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,MAAM,GAAkB,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,MAAM,CAAC,+BAA+B,CAAC;YAC5C,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,cAAM,CAAC,IAAI;YAClB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,MAAM,CAAC,2BAA2B,CAAC;YACxC,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,cAAM,CAAC,IAAI;YAClB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,MAAM,CACT,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,iEAAiE,CACtE;QACD,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,cAAM,CAAC,IAAI;QAClB,OAAO;QACP,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC;gBACzF,CAAC,CAAC,8EAA8E;gBAChF,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,+DAA+D;KACpE,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CACT;YACE,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,4HAA4H;YACjI,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,cAAM,CAAC,OAAO;YACrB,KAAK,EAAE,iCAAiC;SACzC,EACD;YACE,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,MAAM,CAAC,sEAAsE,CAAC;YACnF,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,cAAM,CAAC,IAAI;YAClB,OAAO;YACP,MAAM,EAAE,wCAAwC;YAChD,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI,CAAC,uBAAuB,CAAC;gBACpC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,iGAAiG;SACtG,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,SAAgB,UAAU,CAAC,UAAkB,EAAE,KAAY;IACzD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG;QACZ,+EAA+E;QAC/E,yEAAyE;QACzE,0EAA0E;QAC1E,YAAY,KAAK,EAAE;QACnB,SAAS;QACT,0EAA0E;QAC1E,mBAAmB;QACnB,4BAA4B;QAC5B,mBAAmB;QACnB,mBAAmB;KACpB,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,iFAAiF;QACjF,oFAAoF;QACpF,mBAAmB;QACnB,4BAA4B;QAC5B,iBAAiB;QACjB,sBAAsB;QACtB,4CAA4C;QAC5C,qBAAqB;QACrB,gFAAgF;QAChF,kBAAkB;QAClB,2BAA2B;QAC3B,eAAe;QACf,iBAAiB;QACjB,mBAAmB;KACpB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,CAAa,EAAE,CAAC;QACnE,MAAM,MAAM,GACV,KAAK,KAAK,OAAO;YACf,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC;YAC1B,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAClB,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;gBAC3B,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,oFAAoF;YACpF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9D,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;gBAAE,SAAS;YACjF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,0DAA0D;AAC1D,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AAEvE;;;GAGG;AACH,SAAgB,UAAU,CAAC,MAAc,EAAE,MAAc;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,GAAG;YAAE,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aACtC,IAAI,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,QAAQ,GAAG,KAAK,CAAC;QAC/D,IAAI,QAAQ;YAAE,SAAS;QACvB,IAAI,2EAA2E,CAAC,IAAI,CAAC,IAAI,CAAC;YACxF,SAAS;QACX,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,MAAM,EAAE,CAAC;AACpD,CAAC"}