@rsaglobaltech/specgate 0.8.1

package/dist/packages/core/src/domain/TraceabilityMerge.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mergeTraceability = mergeTraceability;
+const Reconciliation_1 = require("./Reconciliation");
+const TraceabilityFormat_1 = require("./TraceabilityFormat");
+/**
+ * Merging two versions of `docs/specs/traceability.md`, row by row.
+ *
+ * ## Why this exists
+ *
+ * Run the harness with `--concurrency 3` and you get three green branches, each
+ * having flipped **its own** requirement to `Implemented`. Merge the second one
+ * and git reports a conflict in the matrix — even though no two branches touched
+ * the same row.
+ *
+ * The reason is not concurrency. Git's three-way merge works on lines, and it
+ * needs at least one *unchanged* line between two changed regions to treat them
+ * as independent. Matrix rows are consecutive lines, so two edits one row apart
+ * land in the same hunk. Measured: rows 1 and 2 conflict, rows 1 and 5 merge
+ * clean. Same writers, same file, same concurrency — only the distance differs.
+ *
+ * So the fix is not a lock (there is no race: every worker writes its own
+ * worktree) and not a different diff algorithm (myers, patience, histogram and
+ * minimal all conflict). The fix is to merge the file in the unit it is actually
+ * made of: rows.
+ *
+ * ## How a row is identified
+ *
+ * By `Requirement` + `Scenario ID`, and **never** by anything that changes.
+ *
+ * That is not a stylistic preference, it is the bug that nearly shipped: a first
+ * prototype keyed rows on the first two cells of a two-column test table, where
+ * the second cell *was* the status. A row whose status had changed then looked
+ * like a *different* row, the merge came out "clean", and the other branch's
+ * edit was lost in silence. A merge that loses an edit is worse than one that
+ * refuses, so the key is the pair of columns that a status flip never touches.
+ *
+ * ## What it will and will not do
+ *
+ * It resolves the case it was built for — two branches, two different rows — and
+ * it still **conflicts** when two branches change the same row to different
+ * values. Losing an edit quietly is the one outcome worse than a conflict, so
+ * anything genuinely ambiguous comes back with markers for a human.
+ *
+ * The per-row decision is not reimplemented here: it is `reconcile`, the same
+ * function `specops sync` uses to decide what to do when a pack and a project
+ * have both changed a file. Identical question, one granularity down.
+ */
+/** Conflict markers, in git's own shape so existing tooling recognises them. */
+const OURS_MARK = "<<<<<<<";
+const SPLIT_MARK = "=======";
+const THEIRS_MARK = ">>>>>>>";
+/**
+ * A row key that a status flip cannot change.
+ *
+ * `parseMatrixRows` splits on `|`, which leaves an empty cell at each end, so
+ * `cells[1]` is the first column. `readRowFields` owns that offset for both
+ * matrix shapes; going through it means this module never learns the layout.
+ */
+function rowKey(line, mode) {
+    const cells = line.split("|").map((c) => c.trim());
+    const { requirementId, scenarioId } = (0, TraceabilityFormat_1.readRowFields)(cells, mode);
+    const key = `${requirementId}::${scenarioId}`;
+    return key === "::" ? null : key;
+}
+/** Every data row of a matrix, keyed and in file order. */
+function indexRows(content, mode) {
+    const rows = new Map();
+    for (const line of content.split("\n")) {
+        if (!line.trim().startsWith("|"))
+            continue;
+        if (line.includes("---"))
+            continue;
+        const key = rowKey(line, mode);
+        if (key)
+            rows.set(key, line);
+    }
+    return rows;
+}
+/**
+ * A row both sides changed differently is a conflict, full stop.
+ *
+ * `reconcile` takes a merge function for the case where base, ours and theirs
+ * all differ. One row is a single fact — a status is `Implemented` or it is
+ * `Verified`, there is no blend — so this always reports a conflict and lets
+ * `reconcile` produce the outcome.
+ */
+const rowsDoNotBlend = () => ({ merged: "", conflict: true });
+/**
+ * Three-way merge of a traceability matrix.
+ *
+ * @param base   the common ancestor's content, or "" when git has none
+ * @param ours   the version being merged into
+ * @param theirs the version being merged in
+ */
+function mergeTraceability(base, ours, theirs) {
+    // The mode comes from `ours`: git is merging *into* that file, and a merge is
+    // not the place to convert a project between matrix shapes. A file with
+    // neither header has no rows to key, so the whole merge is handed back
+    // unresolved rather than guessed at.
+    const mode = (0, TraceabilityFormat_1.detectTraceabilityMode)(ours);
+    if (mode === null) {
+        return { content: ours, conflicts: ["(traceability.md has no recognisable matrix header)"] };
+    }
+    const baseRows = indexRows(base, mode);
+    const ourRows = indexRows(ours, mode);
+    const theirRows = indexRows(theirs, mode);
+    const conflicts = [];
+    const emitted = new Set();
+    const out = [];
+    for (const line of ours.split("\n")) {
+        const key = line.trim().startsWith("|") && !line.includes("---") ? rowKey(line, mode) : null;
+        if (!key) {
+            out.push(line); // header, separator, prose — carried through untouched
+            continue;
+        }
+        emitted.add(key);
+        const ourRow = ourRows.get(key) ?? line;
+        const baseRow = baseRows.get(key) ?? null;
+        const theirRow = theirRows.get(key);
+        if (theirRow === undefined) {
+            // They do not have this row. Either we added it, or they deleted it.
+            if (baseRow === null || baseRow === ourRow) {
+                // We added it (no base), or they deleted a row we left alone. Keeping
+                // ours in the first case is right; in the second, honouring a deletion
+                // would drop a requirement during a merge, which is a decision no
+                // driver should make silently — so the row stays and `validate` on the
+                // result is what tells the truth.
+                out.push(ourRow);
+            }
+            else {
+                // We changed it, they deleted it. Nothing here can be right by itself.
+                conflicts.push(key);
+                out.push(conflictBlock(ourRow, "(row deleted on the other side)"));
+            }
+            continue;
+        }
+        const decision = (0, Reconciliation_1.reconcile)(baseRow, ourRow, theirRow, {}, rowsDoNotBlend);
+        if (decision.outcome === "conflict" || decision.outcome === "conflict-no-base") {
+            conflicts.push(key);
+            out.push(conflictBlock(ourRow, theirRow));
+            continue;
+        }
+        // `write === null` means "leave ours alone" — unchanged, or their side did
+        // not move. Anything else is the row to take.
+        out.push(decision.write ?? ourRow);
+    }
+    // Rows only they have. Appended after the last row rather than interleaved:
+    // the matrix has no total order the driver could honour, and inventing one
+    // would reshuffle a file nobody asked to reshuffle. `specgate req` owns ordering.
+    const added = [...theirRows].filter(([key]) => !emitted.has(key)).map(([, line]) => line);
+    if (added.length > 0) {
+        const lastRow = lastRowIndex(out, mode);
+        out.splice(lastRow + 1, 0, ...added);
+    }
+    return { content: out.join("\n"), conflicts };
+}
+/** Where the final data row sits, so appended rows land inside the table. */
+function lastRowIndex(lines, mode) {
+    for (let i = lines.length - 1; i >= 0; i -= 1) {
+        const line = lines[i];
+        if (line.trim().startsWith("|") && !line.includes("---") && rowKey(line, mode))
+            return i;
+    }
+    return lines.length - 1;
+}
+/**
+ * One row, both versions, in git's marker shape.
+ *
+ * **How to resolve one of these by hand:** the two lines are the same row as the
+ * two branches left it. Delete the three marker lines and the version you do not
+ * want, keeping exactly one row. Then run `specgate validate <project>` — it checks
+ * the statuses are legal and that no scenario id is duplicated, which is what
+ * catches a half-finished resolution. Do not keep both lines: a duplicated
+ * requirement is the one shape of corruption this file must never have.
+ */
+function conflictBlock(ourRow, theirRow) {
+    return [`${OURS_MARK} ours`, ourRow, SPLIT_MARK, theirRow, `${THEIRS_MARK} theirs`].join("\n");
+}
+//# sourceMappingURL=TraceabilityMerge.js.map

package/dist/packages/core/src/domain/TraceabilityMerge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TraceabilityMerge.js","sourceRoot":"","sources":["../../../../../packages/core/src/domain/TraceabilityMerge.ts"],"names":[],"mappings":";;AAsGA,8CAoEC;AA1KD,qDAAsD;AACtD,6DAA6E;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,gFAAgF;AAChF,MAAM,SAAS,GAAG,SAAS,CAAC;AAC5B,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,WAAW,GAAG,SAAS,CAAC;AAS9B;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,IAAY,EAAE,IAAuB;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,IAAA,kCAAa,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,GAAG,aAAa,KAAK,UAAU,EAAE,CAAC;IAC9C,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;AACnC,CAAC;AAED,2DAA2D;AAC3D,SAAS,SAAS,CAAC,OAAe,EAAE,IAAuB;IACzD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,cAAc,GAAY,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvE;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc;IAC1E,8EAA8E;IAC9E,wEAAwE;IACxE,uEAAuE;IACvE,qCAAqC;IACrC,MAAM,IAAI,GAAG,IAAA,2CAAsB,EAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,qDAAqD,CAAC,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE1C,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7F,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,uDAAuD;YACvE,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,qEAAqE;YACrE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC3C,sEAAsE;gBACtE,uEAAuE;gBACvE,kEAAkE;gBAClE,uEAAuE;gBACvE,kCAAkC;gBAClC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,uEAAuE;gBACvE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;YACrE,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,0BAAS,EAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,OAAO,KAAK,UAAU,IAAI,QAAQ,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;YAC/E,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,8CAA8C;QAC9C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,kFAAkF;IAClF,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxC,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AAChD,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,KAAwB,EAAE,IAAuB;IACrE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,MAAc,EAAE,QAAgB;IACrD,OAAO,CAAC,GAAG,SAAS,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,WAAW,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjG,CAAC"}

package/dist/packages/core/src/domain/ValidationReport.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidationReport = void 0;
+class ValidationReport {
+    findings = [];
+    get valid() {
+        return !this.findings.some((f) => f.severity === "error");
+    }
+    get errors() {
+        return this.findings.filter((f) => f.severity === "error");
+    }
+    get warnings() {
+        return this.findings.filter((f) => f.severity === "warning");
+    }
+    addError(code, message, opts = {}) {
+        this.findings.push({
+            severity: "error",
+            code,
+            message,
+            file: opts.file,
+            line: opts.line,
+            target: opts.target,
+            fix: opts.fix,
+            fixLines: opts.fixLines,
+        });
+    }
+    addWarning(code, message, opts = {}) {
+        this.findings.push({
+            severity: "warning",
+            code,
+            message,
+            file: opts.file,
+            line: opts.line,
+            target: opts.target,
+            fix: opts.fix,
+            fixLines: opts.fixLines,
+        });
+    }
+    addInfo(code, message, opts = {}) {
+        this.findings.push({
+            severity: "info",
+            code,
+            message,
+            file: opts.file,
+            line: opts.line,
+            target: opts.target,
+            fix: opts.fix,
+            fixLines: opts.fixLines,
+        });
+    }
+}
+exports.ValidationReport = ValidationReport;
+//# sourceMappingURL=ValidationReport.js.map

package/dist/packages/core/src/domain/ValidationReport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ValidationReport.js","sourceRoot":"","sources":["../../../../../packages/core/src/domain/ValidationReport.ts"],"names":[],"mappings":";;;AAoBA,MAAa,gBAAgB;IACpB,QAAQ,GAAwB,EAAE,CAAC;IAE1C,IAAW,KAAK;QACd,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAC/D,CAAC;IAEM,QAAQ,CAAC,IAAY,EAAE,OAAe,EAAE,OAAuB,EAAE;QACtE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,QAAQ,EAAE,OAAO;YACjB,IAAI;YACJ,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;IAEM,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,OAAuB,EAAE;QACxE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,QAAQ,EAAE,SAAS;YACnB,IAAI;YACJ,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;IAEM,OAAO,CAAC,IAAY,EAAE,OAAe,EAAE,OAAuB,EAAE;QACrE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,QAAQ,EAAE,MAAM;YAChB,IAAI;YACJ,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;CACF;AArDD,4CAqDC"}

package/dist/packages/core/src/domain/ValueAnnotations.js

@@ -0,0 +1,138 @@
+"use strict";
+/**
+ * Does the value a spec declares match the value the code declares?
+ * (`PLAN_PREDICTABLE_CODE_EVOLUTION.md` §8.6.)
+ *
+ * ## The gap this closes
+ *
+ * `--strict-requirements` (F6) checks that a requirement's prose states an
+ * obligation. `--strict-links` checks that a declared file still exists.
+ * Neither checks what Predictable Code's own page uses as its example:
+ * *"session timeout is 30m but spec requires 15m"*. This module compares an
+ * explicit value on each side — no AST, no unit inference, no guessing a
+ * variable's name from a requirement's prose.
+ *
+ * ## Why explicit annotation, and not something smarter
+ *
+ * The comparison is exact string equality between two things a human (or an
+ * agent) wrote on purpose:
+ *
+ *   spec:  `<!-- csda:trace uc=Login value_session_timeout=15m -->`
+ *   code:  `// csda:value session_timeout=15m`
+ *
+ * `csda:value` is a plain literal string, not a language-specific comment
+ * form — the same reason `csda:trace` works identically in every markdown
+ * file without knowing anything about markdown grammar. It is found by
+ * scanning line by line, so it reads the same inside `//`, `#`, `--`, or no
+ * comment marker at all. Interpreting units (`15m` vs `900000`) is exactly
+ * the claim `PLAN_PREDICTABLE_CODE_EVOLUTION.md` §5 refuses to make — that is
+ * the H13 trap, a check asserting authority over a grammar it does not parse.
+ *
+ * ## Why this is a report, not a gate
+ *
+ * See §8.6: annotating every checkable fact by hand does not scale with
+ * project size, and the fraction of requirements that reduce to a scalar
+ * value shrinks as a system gets more complex. `compareDeclaredValues` never
+ * decides pass/fail — it classifies. The caller (`ReportCommand.ts`) turns
+ * that into a coverage-style report section, the same shape as `needsTest`
+ * or `orphanFeatures`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.declaredSpecValues = declaredSpecValues;
+exports.declaredCodeValues = declaredCodeValues;
+exports.compareDeclaredValues = compareDeclaredValues;
+const VALUE_PREFIX = "value_";
+/**
+ * Every `value_<id>=<literal>` key in an already-parsed `csda:trace` comment.
+ *
+ * `SpecParser.parseTraceComment` already accepts any `[a-z_]+` key — this
+ * reads the convention out of the flat object it returns. No parser change,
+ * no new field.
+ */
+function declaredSpecValues(trace) {
+    const out = [];
+    if (!trace)
+        return out;
+    for (const key of Object.keys(trace)) {
+        if (key.length > VALUE_PREFIX.length && key.startsWith(VALUE_PREFIX)) {
+            out.push({ id: key.slice(VALUE_PREFIX.length), value: trace[key] });
+        }
+    }
+    return out;
+}
+/**
+ * Every `csda:value <id>=<literal>` marker in a source file's text.
+ *
+ * Line-oriented, not language-aware — the marker is found by scanning text,
+ * not by parsing whatever comment syntax the file uses. `id` is restricted to
+ * `[a-z_]+`, the same identifier space `csda:trace` keys use, so a name is
+ * either checkable on both sides or on neither.
+ */
+function declaredCodeValues(source) {
+    const out = [];
+    const re = /csda:value\s+([a-z_]+)\s*=\s*(\S+)/i;
+    const lines = String(source || "").split(/\r?\n/);
+    for (let i = 0; i < lines.length; i++) {
+        const m = re.exec(lines[i]);
+        if (m)
+            out.push({ id: m[1].toLowerCase(), value: m[2], line: i + 1 });
+    }
+    return out;
+}
+/**
+ * Compares one requirement's spec-declared values against the code values
+ * found in the file(s) that requirement's matrix row points at.
+ *
+ * Scoped per requirement, not global: two unrelated requirements reusing the
+ * same id (`session_timeout`) are never compared against each other, because
+ * the caller only ever passes one requirement's code entries at a time.
+ *
+ * A repeated code id (the same marker in two files) keeps its first
+ * occurrence, in the order the caller supplied — deterministic, not
+ * "whichever file happened to be read last".
+ */
+function compareDeclaredValues(specEntries, codeEntries) {
+    const codeById = new Map();
+    for (const entry of codeEntries) {
+        if (!codeById.has(entry.id))
+            codeById.set(entry.id, entry);
+    }
+    const out = [];
+    const specIds = new Set(specEntries.map((e) => e.id));
+    for (const spec of specEntries) {
+        const code = codeById.get(spec.id);
+        if (!code) {
+            out.push({
+                id: spec.id,
+                specValue: spec.value,
+                codeValue: null,
+                codeFile: null,
+                codeLine: null,
+                status: "spec_only",
+            });
+            continue;
+        }
+        out.push({
+            id: spec.id,
+            specValue: spec.value,
+            codeValue: code.value,
+            codeFile: code.file,
+            codeLine: code.line,
+            status: code.value === spec.value ? "matched" : "diverging",
+        });
+    }
+    for (const code of codeById.values()) {
+        if (!specIds.has(code.id)) {
+            out.push({
+                id: code.id,
+                specValue: null,
+                codeValue: code.value,
+                codeFile: code.file,
+                codeLine: code.line,
+                status: "code_only",
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=ValueAnnotations.js.map

package/dist/packages/core/src/domain/ValueAnnotations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ValueAnnotations.js","sourceRoot":"","sources":["../../../../../packages/core/src/domain/ValueAnnotations.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;;AAoCH,gDAWC;AAUD,gDASC;AAcD,sDAiDC;AAtGD,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAChC,KAAgD;IAEhD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,qCAAqC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,qBAAqB,CACnC,WAAsC,EACtC,WAAoE;IAEpE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6C,CAAC;IACtE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,SAAS,EAAE,IAAI,CAAC,KAAK;gBACrB,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,KAAK;gBACrB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/packages/core/src/domain/WriteScope.js

@@ -0,0 +1,155 @@
+"use strict";
+/**
+ * What the agent was allowed to write — checked, not merely asked for (A1, H16).
+ *
+ * ## The hole this closes
+ *
+ * The prompt tells the agent not to touch the spec. Nothing verified it. An
+ * agent that cannot make a scenario pass can instead relax the scenario, or add
+ * a permissive line to `AI_RULES.md`, and the gate approves: `validate
+ * --strict-tdd` checks that the feature **exists** and is in the matrix, never
+ * that it still **says what it said before**.
+ *
+ * That is not a hypothetical. It is precisely the failure this product claims
+ * to prevent — "specs as executable contracts" stops being true the moment the
+ * executor can edit the contract. Same family as H1, H14 and H15: the gate
+ * approving without having verified.
+ *
+ * ## Why a new file is not a violation
+ *
+ * A requirement in category `NEEDS_FEATURE` is *supposed* to create its feature
+ * file, so a blanket ban on `features/**` would fail the legitimate case. The
+ * distinction A1 asks for — creating a file that did not exist is fine,
+ * modifying one that did is not — is one git already draws for us: an untracked
+ * path is new, a tracked change is an edit. No heuristics required.
+ *
+ * The exception is safe in the direction that matters. A matrix row points the
+ * gate at one specific feature file, so a *new* file cannot loosen the contract
+ * the gate is running; deleting the declared feature and writing a fresh one in
+ * its place shows up as a tracked deletion, and is refused.
+ *
+ * ## Why this module holds no git
+ *
+ * Deciding whether `features/core/health.feature` is protected is a rule.
+ * Finding out which paths changed is I/O. Keeping them apart is what lets every
+ * case below be tested without a repository, an agent, or twenty minutes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_PROTECTED_PATHS = void 0;
+exports.matchesGlob = matchesGlob;
+exports.protectingPattern = protectingPattern;
+exports.checkWriteScope = checkWriteScope;
+exports.parseGitStatus = parseGitStatus;
+/**
+ * Protected unless the project says otherwise.
+ *
+ * Everything here is a term of the contract the agent is working *against*:
+ * the business manifesto, the execution rules, the scenarios that decide pass
+ * or fail, the specification documents, the pack lockfile, and the harness
+ * configuration itself — an agent that may edit `harness.config.yaml` may
+ * disable its own gate.
+ */
+exports.DEFAULT_PROTECTED_PATHS = Object.freeze([
+    "spec.md",
+    "AI_RULES.md",
+    "features/**/*.feature",
+    "docs/specs/**",
+    ".specops.lock",
+    "harness.config.yaml",
+]);
+/**
+ * Glob matching, in the small dialect these patterns actually use.
+ *
+ * `**` crosses directory separators, `*` does not, `?` is one character. Enough
+ * for `features/**\/*.feature` and `docs/specs/**`, and no more: this package
+ * has no runtime dependencies (the CLI runs through `npx` on other people's
+ * machines), so a matcher is written rather than installed.
+ *
+ * A pattern naming a directory — `docs/specs/**` — also matches the directory
+ * itself, because a person writing that means "this subtree".
+ */
+function matchesGlob(filePath, pattern) {
+    const normalise = (p) => p.replace(/\\/g, "/").replace(/^\.\//, "");
+    const target = normalise(filePath);
+    const glob = normalise(pattern);
+    const source = glob.split("").reduce((acc, _ch, i, chars) => {
+        if (i < acc.i)
+            return acc;
+        const rest = chars.slice(i).join("");
+        if (rest.startsWith("**/"))
+            return { out: acc.out + "(?:.*/)?", i: i + 3 };
+        if (rest.startsWith("**"))
+            return { out: acc.out + ".*", i: i + 2 };
+        const ch = chars[i];
+        if (ch === "*")
+            return { out: acc.out + "[^/]*", i: i + 1 };
+        if (ch === "?")
+            return { out: acc.out + "[^/]", i: i + 1 };
+        return { out: acc.out + ch.replace(/[.+^${}()|[\]\\]/g, "\\$&"), i: i + 1 };
+    }, { out: "", i: 0 }).out;
+    if (new RegExp(`^${source}$`).test(target))
+        return true;
+    // `docs/specs/**` means the subtree, and a person writing it means the
+    // directory too. Without this, `docs/specs` itself slips through.
+    if (glob.endsWith("/**")) {
+        const dir = glob.slice(0, -3);
+        return target === dir || target.startsWith(`${dir}/`);
+    }
+    return false;
+}
+/** The first protecting pattern, or `null` when the path is not protected. */
+function protectingPattern(filePath, rules = {}) {
+    const allow = rules.allowPaths || [];
+    if (allow.some((pattern) => matchesGlob(filePath, pattern)))
+        return null;
+    const guarded = rules.protectedPaths || exports.DEFAULT_PROTECTED_PATHS;
+    return guarded.find((pattern) => matchesGlob(filePath, pattern)) || null;
+}
+/**
+ * Which of the agent's writes were out of scope.
+ *
+ * `added` paths are never violations — see the module note on `NEEDS_FEATURE`.
+ * Ordered by path so a report reads the same twice.
+ */
+function checkWriteScope(changes, rules = {}) {
+    const violations = [];
+    for (const filePath of [...changes.modified].sort()) {
+        const pattern = protectingPattern(filePath, rules);
+        if (pattern)
+            violations.push({ path: filePath, pattern });
+    }
+    return violations;
+}
+/**
+ * `git status --porcelain`, split into what was edited and what is new.
+ *
+ * Parsing the status codes rather than guessing from the path is the lesson
+ * `change author` taught the hard way: it ran `git checkout` on everything and
+ * deleted the files that had never been tracked. `??` means new; every other
+ * code means the file existed and the agent changed it — including `D`
+ * (deleted) and both halves of a rename, which are edits to the contract by any
+ * reading.
+ */
+function parseGitStatus(porcelain) {
+    const modified = [];
+    const added = [];
+    for (const raw of porcelain.split("\n")) {
+        if (!raw.trim())
+            continue;
+        const code = raw.slice(0, 2);
+        const rest = raw.slice(3);
+        if (code === "??") {
+            added.push(rest.trim());
+            continue;
+        }
+        // `R  old -> new`: both sides are edits to something that existed.
+        if (rest.includes(" -> ")) {
+            const [from, to] = rest.split(" -> ");
+            modified.push(from.trim(), to.trim());
+            continue;
+        }
+        modified.push(rest.trim());
+    }
+    return { modified, added };
+}
+//# sourceMappingURL=WriteScope.js.map

package/dist/packages/core/src/domain/WriteScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WriteScope.js","sourceRoot":"","sources":["../../../../../packages/core/src/domain/WriteScope.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAkDH,kCA4BC;AAGD,8CAMC;AAQD,0CAUC;AAYD,wCAqBC;AAxID;;;;;;;;GAQG;AACU,QAAA,uBAAuB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACtE,SAAS;IACT,aAAa;IACb,uBAAuB;IACvB,eAAe;IACf,eAAe;IACf,qBAAqB;CACtB,CAAC,CAAC;AAqBH;;;;;;;;;;GAUG;AACH,SAAgB,WAAW,CAAC,QAAgB,EAAE,OAAe;IAC3D,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAClC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE;QACrB,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9E,CAAC,EACD,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAClB,CAAC,GAAG,CAAC;IAEN,IAAI,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAExD,uEAAuE;IACvE,kEAAkE;IAClE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,QAAyB,EAAE;IAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzE,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,IAAI,+BAAuB,CAAC;IAChE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAC7B,OAA0B,EAC1B,QAAyB,EAAE;IAE3B,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,OAAO;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAAC,SAAiB;IAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,SAAS;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,mEAAmE;QACnE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}