@tyroneross/navgator 0.2.2 → 0.10.0

package/dist/audit/oracles/prisma.js

@@ -0,0 +1,162 @@
+/**
+ * prisma oracle — truth frame: models declared in the Prisma schema.
+ *
+ * Strength:
+ *   'independent' when `@prisma/internals` getDMMF resolves from the TARGET
+ *   repo's node_modules (the compiler's own parse of the schema) — only with
+ *   an explicit opt-in (`--trust-target-deps` / NAVGATOR_TRUST_TARGET_DEPS=1)
+ *   because that is code execution from the audited repo;
+ *   'weak' when we fall back to an independent regex (`^\s*model\s+(\w+)` plus
+ *   `@@map("…")`), which is a re-derivation, not a second source.
+ *
+ * Map side: every `database` component. Prisma-model components (primary
+ * config file ends in .prisma) are matched by model name or @@map table name.
+ * Known client libraries typed `database` (Run 4 finding: @prisma/client,
+ * ioredis, pg, redis, prisma, Supabase) are counted as false positives with
+ * note `client-library-misclassified`; any other non-schema `database`
+ * component is a false positive with note `not-a-schema-model`.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { createRequire } from 'module';
+import { pathToFileURL } from 'url';
+import { isRootPackageDerived, noOracle, setDiffOracle } from './common.js';
+/** Client libraries / hosted DB services the npm and service scanners type as `database`. */
+export const DATABASE_CLIENT_LIBRARIES = new Set([
+    '@prisma/client',
+    'prisma',
+    'ioredis',
+    'redis',
+    'pg',
+    'mysql2',
+    'mongoose',
+    'drizzle-orm',
+    '@supabase/supabase-js',
+    'supabase',
+    'postgresql',
+    'postgres',
+    'mongodb',
+    'sqlite',
+    'better-sqlite3',
+    'knex',
+    'typeorm',
+    'sequelize',
+].map((s) => s.toLowerCase()));
+const DMMF_TIMEOUT_MS = 15_000;
+function findSchemaFiles(root) {
+    const out = [];
+    for (const rel of ['prisma/schema.prisma', 'schema.prisma']) {
+        const abs = path.join(root, rel);
+        if (fs.existsSync(abs))
+            out.push(abs);
+    }
+    // Prisma multi-file schemas: prisma/schema/*.prisma
+    const multi = path.join(root, 'prisma', 'schema');
+    try {
+        for (const f of fs.readdirSync(multi))
+            if (f.endsWith('.prisma'))
+                out.push(path.join(multi, f));
+    }
+    catch {
+        /* no multi-file dir */
+    }
+    return out;
+}
+/** Independent regex parse: `model Name {` … `@@map("table")` inside the block. */
+export function regexModels(datamodel) {
+    const models = [];
+    const re = /^\s*model\s+(\w+)\s*\{([\s\S]*?)^\s*\}/gm;
+    let m;
+    while ((m = re.exec(datamodel)) !== null) {
+        const body = m[2] ?? '';
+        const map = /@@map\(\s*"([^"]+)"\s*\)/.exec(body);
+        models.push({ name: m[1], ...(map ? { dbName: map[1] } : {}) });
+    }
+    return models;
+}
+async function dmmfModels(root, datamodel) {
+    let resolved;
+    try {
+        const req = createRequire(path.join(root, 'package.json'));
+        resolved = req.resolve('@prisma/internals');
+    }
+    catch {
+        return null;
+    }
+    const mod = (await import(pathToFileURL(resolved).href));
+    const getDMMF = mod.getDMMF ?? mod.default?.getDMMF;
+    if (!getDMMF)
+        return null;
+    const timeout = new Promise((_, rej) => setTimeout(() => rej(new Error('getDMMF timeout')), DMMF_TIMEOUT_MS).unref?.());
+    const dmmf = await Promise.race([getDMMF({ datamodel }), timeout]);
+    return dmmf.datamodel.models.map((m) => ({ name: m.name, ...(m.dbName ? { dbName: m.dbName } : {}) }));
+}
+export async function loadPrismaTruth(root, opts = {}) {
+    const files = findSchemaFiles(root);
+    if (files.length === 0)
+        return null;
+    const datamodel = files.map((f) => fs.readFileSync(f, 'utf-8')).join('\n');
+    // Finding (b): importing @prisma/internals from the TARGET repo executes
+    // code from the audited repo (relevant for scan-remote). Off unless the
+    // caller opted in (--trust-target-deps / NAVGATOR_TRUST_TARGET_DEPS=1).
+    if (!opts.trustTargetDeps) {
+        return {
+            models: regexModels(datamodel),
+            strength: 'weak',
+            files,
+            note: 'regex oracle; pass --trust-target-deps (or NAVGATOR_TRUST_TARGET_DEPS=1) to parse with @prisma/internals from the target repo',
+        };
+    }
+    try {
+        const viaDmmf = await dmmfModels(root, datamodel);
+        if (viaDmmf)
+            return { models: viaDmmf, strength: 'independent', files };
+    }
+    catch (err) {
+        return {
+            models: regexModels(datamodel),
+            strength: 'weak',
+            files,
+            note: `@prisma/internals getDMMF failed (${err.message}); regex fallback`,
+        };
+    }
+    return { models: regexModels(datamodel), strength: 'weak', files, note: '@prisma/internals not resolvable from target node_modules; regex fallback' };
+}
+export async function prismaOracle(input, opts = {}) {
+    const truthInfo = await loadPrismaTruth(input.projectRoot, opts);
+    if (!truthInfo)
+        return noOracle('prisma', 'infra', 'no prisma schema found (prisma/schema.prisma, schema.prisma, prisma/schema/*.prisma)');
+    const truth = new Set(truthInfo.models.map((m) => m.name));
+    const tableToModel = new Map();
+    for (const m of truthInfo.models)
+        if (m.dbName)
+            tableToModel.set(m.dbName, m.name);
+    const map = new Set();
+    const clientLibs = [];
+    const notModels = [];
+    for (const c of input.components) {
+        if (c.type !== 'database')
+            continue;
+        const primary = c.source?.config_files?.[0] ?? '';
+        if (primary.endsWith('.prisma')) {
+            map.add(truth.has(c.name) ? c.name : (tableToModel.get(c.name) ?? c.name));
+            continue;
+        }
+        if (DATABASE_CLIENT_LIBRARIES.has(c.name.toLowerCase()) || isRootPackageDerived(c))
+            clientLibs.push(c.name);
+        else
+            notModels.push(c.name);
+    }
+    const notes = [
+        `truth = ${truthInfo.models.length} models from ${truthInfo.files.map((f) => path.relative(input.projectRoot, f)).join(', ')}`,
+        'map = all `database` components; prisma-model components matched by name or @@map table',
+    ];
+    if (truthInfo.note)
+        notes.push(truthInfo.note);
+    if (clientLibs.length > 0)
+        notes.push(`client-library-misclassified: ${clientLibs.join(', ')}`);
+    if (notModels.length > 0)
+        notes.push(`not-a-schema-model: ${notModels.join(', ')}`);
+    return setDiffOracle('prisma', 'infra', truthInfo.strength, truth, map, notes, [...clientLibs, ...notModels]);
+}
+//# sourceMappingURL=prisma.js.map

package/dist/audit/oracles/prisma.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma.js","sourceRoot":"","sources":["../../../src/audit/oracles/prisma.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAuC,MAAM,aAAa,CAAC;AAEjH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAC9C;IACE,gBAAgB;IAChB,QAAQ;IACR,SAAS;IACT,OAAO;IACP,IAAI;IACJ,QAAQ;IACR,UAAU;IACV,aAAa;IACb,uBAAuB;IACvB,UAAU;IACV,YAAY;IACZ,UAAU;IACV,SAAS;IACT,QAAQ;IACR,gBAAgB;IAChB,MAAM;IACN,SAAS;IACT,WAAW;CACZ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC9B,CAAC;AAEF,MAAM,eAAe,GAAG,MAAM,CAAC;AAS/B,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,eAAe,CAAC,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,oDAAoD;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,MAAM,GAA6C,EAAE,CAAC;IAC5D,MAAM,EAAE,GAAG,0CAA0C,CAAC;IACtD,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,SAAiB;IACvD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3D,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAGtD,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/H,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,OAAsC,EAAE;IAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC;YAC9B,QAAQ,EAAE,MAAM;YAChB,KAAK;YACL,IAAI,EAAE,+HAA+H;SACtI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC;YAC9B,QAAQ,EAAE,MAAM;YAChB,KAAK;YACL,IAAI,EAAE,qCAAsC,GAAa,CAAC,OAAO,mBAAmB;SACrF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2EAA2E,EAAE,CAAC;AACxJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAkB,EAAE,OAAsC,EAAE;IAC7F,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,sFAAsF,CAAC,CAAC;IAE3I,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM;QAAE,IAAI,CAAC,CAAC,MAAM;YAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAEnF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QACpC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,IAAI,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,oBAAoB,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;;YACvG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,WAAW,SAAS,CAAC,MAAM,CAAC,MAAM,gBAAgB,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC9H,yFAAyF;KAC1F,CAAC;IACF,IAAI,SAAS,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,iCAAiC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEpF,OAAO,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;AAChH,CAAC"}

package/dist/audit/oracles/queue.d.ts

@@ -0,0 +1,22 @@
+/**
+ * queue oracle — truth frame: `new Queue('name')` / `new Worker('name')` /
+ * `new Bull('name')` string literals found by an INDEPENDENT source walk (not
+ * the scanner's file list). A queue declared only on its consumer side
+ * (`new Worker`) is still a real queue.
+ *
+ * Strength is 'weak' by design: a string literal is the same evidence class
+ * the scanner uses (packet §5.3 — string-literal inference is a 15–20%
+ * precision problem for shipping tools), so this oracle re-derives rather
+ * than corroborates. It still catches queues the scanner dropped or invented.
+ *
+ * Map side: `queue` components NOT sourced from package.json (the npm scanner
+ * also types `bullmq` / `bull` as `queue`; those are packages, not queues).
+ */
+import { type OracleInput, type OracleResult } from './common.js';
+export declare function queueLiterals(root: string): {
+    names: Set<string>;
+    files: number;
+    unresolved: string[];
+};
+export declare function queueOracle(input: OracleInput): OracleResult;
+//# sourceMappingURL=queue.d.ts.map

package/dist/audit/oracles/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/audit/oracles/queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAkE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AA0ClI,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CA6BvG;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CAe5D"}

package/dist/audit/oracles/queue.js

@@ -0,0 +1,114 @@
+/**
+ * queue oracle — truth frame: `new Queue('name')` / `new Worker('name')` /
+ * `new Bull('name')` string literals found by an INDEPENDENT source walk (not
+ * the scanner's file list). A queue declared only on its consumer side
+ * (`new Worker`) is still a real queue.
+ *
+ * Strength is 'weak' by design: a string literal is the same evidence class
+ * the scanner uses (packet §5.3 — string-literal inference is a 15–20%
+ * precision problem for shipping tools), so this oracle re-derives rather
+ * than corroborates. It still catches queues the scanner dropped or invented.
+ *
+ * Map side: `queue` components NOT sourced from package.json (the npm scanner
+ * also types `bullmq` / `bull` as `queue`; those are packages, not queues).
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { isRootPackageDerived, noOracle, setDiffOracle, walkSourceFiles } from './common.js';
+// `new Queue<T>('name', …)` — generic params, newlines after `(` and any quote style.
+const QUEUE_LITERAL = /new\s+(?:Queue|Bull|Worker|QueueScheduler|QueueEvents)(?:<[^>()]*>)?\s*\(\s*(['"`])([^'"`$\n]+)\1/g;
+// `new Queue(QUEUE_NAME, …)` / `new Queue(queueConfigs.summaries.name, …)` — identifier args to resolve.
+const QUEUE_IDENT = /new\s+(?:Queue|Bull|Worker|QueueScheduler|QueueEvents)(?:<[^>()]*>)?\s*\(\s*([A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)*)\s*[,)]/g;
+const CTOR_HINT = /new\s+(?:Queue|Bull|Worker)/;
+function escapeRe(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * Resolve an identifier argument to a string literal:
+ *   IDENT            → `IDENT = 'lit'` in the same file, else anywhere in the walk
+ *   a.b.name / a.b   → `b: { … name: 'lit' … }` anywhere in the walk (config objects)
+ */
+function resolveIdent(ident, sameFile, corpus) {
+    const parts = ident.split('.');
+    if (parts.length === 1) {
+        const re = new RegExp(`\\b${escapeRe(ident)}\\s*(?::\\s*string)?\\s*=\\s*(['"\`])([^'"\`$\\n]+)\\1`);
+        const local = re.exec(sameFile);
+        if (local)
+            return local[2];
+        // Cross-file resolution only for SCREAMING_CASE constants; a bare `name` or
+        // `queueName` would match unrelated assignments elsewhere in the repo.
+        if (!/^[A-Z][A-Z0-9_]+$/.test(ident))
+            return null;
+        for (const c of corpus) {
+            const m = re.exec(c);
+            if (m)
+                return m[2];
+        }
+        return null;
+    }
+    // Object path: take the segment before a trailing `.name` (or the last segment).
+    const key = parts[parts.length - 1] === 'name' && parts.length >= 2 ? parts[parts.length - 2] : parts[parts.length - 1];
+    const re = new RegExp(`\\b${escapeRe(key)}\\s*:\\s*\\{[^}]*?\\bname\\s*:\\s*(['"\`])([^'"\`$\\n]+)\\1`);
+    for (const c of [sameFile, ...corpus]) {
+        const m = re.exec(c);
+        if (m)
+            return m[2];
+    }
+    return null;
+}
+export function queueLiterals(root) {
+    const names = new Set();
+    const unresolved = [];
+    const files = walkSourceFiles(root);
+    const contents = [];
+    const hinted = [];
+    for (const abs of files) {
+        let content;
+        try {
+            content = fs.readFileSync(abs, 'utf-8');
+        }
+        catch {
+            continue;
+        }
+        contents.push(content);
+        if (CTOR_HINT.test(content))
+            hinted.push({ content });
+    }
+    for (const { content } of hinted) {
+        QUEUE_LITERAL.lastIndex = 0;
+        let m;
+        while ((m = QUEUE_LITERAL.exec(content)) !== null)
+            names.add(m[2].trim());
+        QUEUE_IDENT.lastIndex = 0;
+        while ((m = QUEUE_IDENT.exec(content)) !== null) {
+            const ident = m[1];
+            const lit = resolveIdent(ident, content, contents);
+            if (lit)
+                names.add(lit.trim());
+            else
+                unresolved.push(ident);
+        }
+    }
+    return { names, files: files.length, unresolved: [...new Set(unresolved)] };
+}
+export function queueOracle(input) {
+    const { names: truth, files, unresolved } = queueLiterals(input.projectRoot);
+    const map = new Set();
+    for (const c of input.components) {
+        if (c.type !== 'queue')
+            continue;
+        if (isRootPackageDerived(c))
+            continue;
+        if ((c.source?.config_files ?? []).some((f) => path.basename(f) === 'package.json'))
+            continue;
+        map.add(c.name);
+    }
+    if (truth.size === 0 && map.size === 0)
+        return noOracle('queue', 'infra', `no queue literals in ${files} source files and no queue components`);
+    return setDiffOracle('queue', 'infra', 'weak', truth, map, [
+        `truth = new Queue/Worker/Bull('…') literals from an independent walk of ${files} source files (same evidence class as the scanner → weak)`,
+        'map = queue components not sourced from package.json',
+        ...(unresolved.length > 0 ? [`${unresolved.length} constructor arguments could not be resolved to a literal: ${unresolved.slice(0, 5).join(', ')}`] : []),
+    ]);
+}
+//# sourceMappingURL=queue.js.map

package/dist/audit/oracles/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../../src/audit/oracles/queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAuC,MAAM,aAAa,CAAC;AAElI,sFAAsF;AACtF,MAAM,aAAa,GAAG,oGAAoG,CAAC;AAC3H,yGAAyG;AACzG,MAAM,WAAW,GAAG,+HAA+H,CAAC;AACpJ,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAEhD,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,QAAgB,EAAE,MAA6B;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC;QAC5B,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;QACtB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,iFAAiF;IACjF,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC1H,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,EAAE,CAAC;QACjC,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACpB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACnD,IAAI,GAAG;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;;gBAC1B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACjC,IAAI,oBAAoB,CAAC,CAAC,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC;YAAE,SAAS;QAC9F,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,wBAAwB,KAAK,uCAAuC,CAAC,CAAC;IAChJ,OAAO,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE;QACzD,2EAA2E,KAAK,2DAA2D;QAC3I,sDAAsD;QACtD,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,8DAA8D,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1J,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/sampler.d.ts

@@ -0,0 +1,166 @@
+/**
+ * NavGator audit sampler — Run 2 / D1
+ *
+ * Pure-math statistical sampling helpers. Zero deps.
+ *
+ * References:
+ *   - NIST/SEMATECH e-Handbook §6.2.2-3 (acceptance sampling, attributes)
+ *   - Wald 1945 — Sequential analysis (SPRT)
+ *   - Cochran 1977 — Sampling techniques (FPC, Neyman allocation)
+ */
+/** Standard normal quantiles for common confidence levels. */
+export declare const Z: {
+    /** 90% two-sided CI / 95% one-sided */
+    readonly Z_90: 1.645;
+    /** 95% two-sided CI */
+    readonly Z_95: 1.96;
+    /** 99% two-sided CI */
+    readonly Z_99: 2.576;
+};
+/**
+ * Binomial CDF P(X ≤ c) where X ~ Binomial(n, p).
+ * Used for OC-curve calc: probability of acceptance at proportion-defective p.
+ */
+export declare function binomialCDF(n: number, p: number, c: number): number;
+interface AQLPlan {
+    n: number;
+    c: number;
+    plan: 'AQL';
+    codeLetter: string;
+    lotRange: string;
+}
+/** Pick an AQL=2.5% sampling plan based on lot size. */
+export declare function chooseAQLPlan(lotSize: number): AQLPlan;
+export type SprtVerdict = 'accept' | 'reject' | 'continue';
+export interface SprtStep {
+    verdict: SprtVerdict;
+    /** ln of the likelihood ratio after the latest observation. */
+    logLR: number;
+    /** Upper bound A = (1-β)/α. */
+    A: number;
+    /** Lower bound B = β/(1-α). */
+    B: number;
+}
+/**
+ * Run SPRT given the full observation sequence (1 = defect, 0 = clean).
+ * Continue while B < Λ < A. Accept H0 (p=p0) when Λ ≤ B; reject (p=p1) when Λ ≥ A.
+ *
+ * @param observations  array of 0/1 outcomes
+ * @param p0  null-hypothesis defect rate (e.g. 0.01)
+ * @param p1  alternative defect rate (e.g. 0.05)
+ * @param alpha  type-I error (default 0.05)
+ * @param beta  type-II error (default 0.05)
+ */
+export declare function sprtNext(observations: ReadonlyArray<0 | 1>, p0: number, p1: number, alpha?: number, beta?: number): SprtStep;
+/**
+ * Cochran's sample-size formula:  n = Z² · p(1-p) / e²
+ *   With finite-population correction (FPC) when populationSize given:
+ *   n_adj = n / (1 + (n-1) / N)
+ *
+ * @param p  expected proportion (use 0.5 for max variance / worst-case)
+ * @param e  margin of error (e.g., 0.05 for ±5%)
+ * @param z  z-score for desired confidence (default 1.96 for 95%)
+ * @param populationSize  optional finite-N for FPC adjustment
+ */
+export declare function cochranSize(p: number, e: number, z?: number, populationSize?: number): number;
+/**
+ * Neyman optimal allocation:
+ *   n_h = n · (N_h · σ_h) / Σ (N_i · σ_i)
+ *
+ * Returns per-stratum sample sizes. Rounds in a way that preserves Σ n_h = n.
+ *
+ * @param n  total sample size
+ * @param strataSizes  N_h per stratum
+ * @param strataStdDevs  σ_h per stratum (use √(p(1-p)) for proportions)
+ */
+export declare function neymanAllocate(n: number, strataSizes: ReadonlyArray<number>, strataStdDevs: ReadonlyArray<number>): number[];
+/**
+ * Pick `count` items from `items` without replacement (Fisher-Yates partial shuffle).
+ */
+export declare function sampleWithoutReplacement<T>(items: ReadonlyArray<T>, count: number, rand?: () => number): T[];
+/**
+ * Stratified sample selection.
+ *
+ * @param items        full population
+ * @param totalN       desired total sample
+ * @param strataKey    function (item) → stratum label
+ * @param priorRates   optional Record<stratum, defectRate> for variance estimation
+ * @param rand         RNG (test injection)
+ */
+export declare function selectAuditSample<T>(items: ReadonlyArray<T>, totalN: number, strataKey: (item: T) => string, priorRates?: Record<string, number>, rand?: () => number): {
+    samples: T[];
+    byStratum: Record<string, {
+        sampled: number;
+        total: number;
+    }>;
+};
+export interface ProportionInterval {
+    lower: number;
+    upper: number;
+    method: 'wilson' | 'clopper-pearson';
+}
+/**
+ * Wilson score interval (NIST §7.2.4, source [7]):
+ *
+ *        p̂ + z²/(2n) ± z·sqrt( p̂(1−p̂)/n + z²/(4n²) )
+ *   CI = ------------------------------------------------
+ *                        1 + z²/n
+ *
+ * Lower limit cannot be negative (NIST's stated advantage over Wald).
+ */
+export declare function wilsonInterval(x: number, n: number, z?: number): ProportionInterval;
+/**
+ * Clopper-Pearson "exact" interval (NIST §7.2.4, source [7]), solved by
+ * bisection on the binomial CDF:
+ *   Σ_{k≤x}   C(n,k) p_U^k (1−p_U)^(n−k) = α/2
+ *   Σ_{k≤x−1} C(n,k) p_L^k (1−p_L)^(n−k) = 1 − α/2
+ * Closed forms at the boundaries: x=0 → p_U = 1 − (α/2)^(1/n); x=n → p_L = (α/2)^(1/n).
+ */
+export declare function clopperPearsonInterval(x: number, n: number, alpha?: number): ProportionInterval;
+/**
+ * Default reporting interval (protocol step 9, sources [7][17]): Wilson,
+ * except at x=0 or x=n where Clopper-Pearson is the honest exact bound.
+ */
+export declare function proportionInterval(x: number, n: number): ProportionInterval;
+/**
+ * c=0 plan size (packet §1.2, sources [1][2][16]):  n = ⌈ ln β / ln(1 − LTPD) ⌉.
+ * LTPD 5%, β 10% → 45. The hypergeometric solution for N ≥ 3,000 is also 45,
+ * so no finite-population correction is applied.
+ */
+export declare function zeroAcceptanceN(ltpd?: number, beta?: number): number;
+/** Zero defects in n → one-sided upper bound at confidence `conf`: 1 − (1−conf)^(1/n). n=45 → 0.0644 (packet §1.3). */
+export declare function zeroDefectUpperBound(n: number, conf?: number): number;
+/** Producer's risk of a c=0 plan at true rate p: 1 − (1−p)^n. n=45, p=0.01 → 0.364 (packet §1.4). */
+export declare function producersRisk(n: number, p: number): number;
+/**
+ * Neyman allocation with a per-stratum floor (protocol step 8):
+ *   n_h = min(N_h, max(floor, n · N_h σ_h / Σ N_i σ_i))
+ * Strata with N_h < floor are sampled in full and flagged `pooled` so their
+ * chart series is aggregated under `__pooled`. The floor is applied AFTER
+ * Neyman so the total may exceed `n`; that overrun is the price of keeping
+ * small heuristic strata estimable.
+ */
+export declare function neymanAllocateWithFloor(n: number, strataSizes: ReadonlyArray<number>, strataStdDevs: ReadonlyArray<number>, floor?: number): {
+    alloc: number[];
+    pooled: boolean[];
+};
+/**
+ * Stratified sample with floor + pooling flags (Run 4). Same contract as
+ * selectAuditSample plus `byStratum[label].pooled`.
+ */
+export declare function selectStratifiedSample<T>(items: ReadonlyArray<T>, totalN: number, strataKey: (item: T) => string, opts?: {
+    floor?: number;
+    priorRates?: Record<string, number>;
+    rand?: () => number;
+    exclude?: Set<string>;
+    idOf?: (item: T) => string;
+}): {
+    samples: T[];
+    byStratum: Record<string, {
+        sampled: number;
+        total: number;
+        pooled: boolean;
+    }>;
+};
+export {};
+//# sourceMappingURL=sampler.d.ts.map

package/dist/audit/sampler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.d.ts","sourceRoot":"","sources":["../../src/audit/sampler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,8DAA8D;AAC9D,eAAO,MAAM,CAAC;IACZ,uCAAuC;;IAEvC,uBAAuB;;IAEvB,uBAAuB;;CAEf,CAAC;AAmCX;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAiBnE;AAUD,UAAU,OAAO;IACf,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAwBD,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAetD;AAMD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE3D,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,CAAC,EAAE,MAAM,CAAC;IACV,+BAA+B;IAC/B,CAAC,EAAE,MAAM,CAAC;CACX;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CACtB,YAAY,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,EAClC,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,KAAK,SAAO,EACZ,IAAI,SAAO,GACV,QAAQ,CAyBV;AAMD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,CAAC,GAAE,MAAe,EAClB,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAWR;AAMD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,CAAC,EAAE,MAAM,EACT,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,EAClC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,GACnC,MAAM,EAAE,CAgEV;AAMD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,eAAc,GAAG,CAAC,EAAE,CAc3G;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,EACvB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,EAC9B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,IAAI,eAAc,GACjB;IAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAwCjF;AAcD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,GAAG,iBAAiB,CAAC;CACtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAE,MAAe,GAAG,kBAAkB,CAY3F;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,SAAO,GAAG,kBAAkB,CAiB7F;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAI3E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,SAAO,EAAE,IAAI,SAAO,GAAG,MAAM,CAKhE;AAED,uHAAuH;AACvH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,SAAO,GAAG,MAAM,CAGnE;AAED,qGAAqG;AACrG,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,CAAC,EAAE,MAAM,EACT,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,EAClC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,EACpC,KAAK,SAAK,GACT;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAQxC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,EACvB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,EAC9B,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,CAAA;CAAO,GACzI;IAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAAE,CAkClG"}