@venizia/dev-configs 0.4.7-0 → 0.4.7-1

package/dist/checks/purity/manifest.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildManifest = exports.assertBrowserEsmEntry = exports.deriveEntries = exports.assertNoWorkspaceExternal = void 0;
+exports.PurityManifest = void 0;
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const DEFAULT_WORKSPACE_SCOPE = '@venizia/';
@@ -10,30 +10,6 @@ const purityError = (message) => new Error(message);
 /** `types` describes the entry, it is not a runtime target; `./package.json` is not code. */
 const NON_RUNTIME_CONDITION = 'types';
 const NON_CODE_SUBPATH = './package.json';
-/**
- * A code-level guard, not just the JSDoc on `external`: it is an escape hatch from this gate, and a
- * hatch with no lock is one bad edit away from hiding a real leak - `external: ['@venizia/ignis-helpers']`
- * on a red entry would silently turn it green by removing the exact root-barrel import this gate
- * exists to catch from the module graph, rather than proving it absent.
- *
- * A plain `Error`, not `getError`: the engine runs from the repository root through `devz`, outside
- * every workspace package, and has no logger to resolve.
- */
-const assertNoWorkspaceExternal = (manifest, workspaceScope = DEFAULT_WORKSPACE_SCOPE) => {
-    for (const row of manifest) {
-        const specifiers = row.external ?? [];
-        for (const specifier of specifiers) {
-            if (!specifier.startsWith(workspaceScope)) {
-                continue;
-            }
-            throw purityError(`[purity][manifest] Entry '${row.label}' externalises '${specifier}', a workspace package ` +
-                `| \`external\` may only exempt THIRD-PARTY packaging, never the repository's own code - doing so ` +
-                `would hide the exact leak this gate exists to catch`);
-        }
-    }
-    return manifest;
-};
-exports.assertNoWorkspaceExternal = assertNoWorkspaceExternal;
 const readExportsMap = (opts) => {
     const manifestPath = (0, node_path_1.join)(opts.root, 'packages', opts.package, 'package.json');
     const manifest = JSON.parse((0, node_fs_1.readFileSync)(manifestPath, 'utf8'));
@@ -71,107 +47,137 @@ const buildLabel = (opts) => {
     const base = `${packageName}${suffix}`;
     return isSoleTarget ? base : `${base} [${condition}]`;
 };
-/**
- * Exported for the tests, which have to drive a claim that no longer matches its package's
- * `exports` map - the staleness guard is the whole point of deriving, and it cannot be asserted
- * through a built manifest, which by construction is never stale.
- */
-const deriveEntries = (opts) => {
-    const { claim, root } = opts;
-    const exportsMap = readExportsMap({ root, package: claim.package });
-    const published = Object.keys(exportsMap).filter((subpath) => subpath !== NON_CODE_SUBPATH);
-    const subpathsList = claim.subpaths ?? [];
-    for (const subpath of subpathsList) {
-        if (published.includes(subpath)) {
-            continue;
+/** Derives the rows of the purity gate from the `exports` map of each claimed package, then runs the guards on them. */
+class PurityManifest {
+    /**
+     * A code-level guard, not just the JSDoc on `external`: it is an escape hatch from this gate, and a
+     * hatch with no lock is one bad edit away from hiding a real leak - `external: ['@venizia/ignis-helpers']`
+     * on a red entry would silently turn it green by removing the exact root-barrel import this gate
+     * exists to catch from the module graph, rather than proving it absent.
+     *
+     * A plain `Error`, not `getError`: the engine runs from the repository root through `devz`, outside
+     * every workspace package, and has no logger to resolve.
+     */
+    static assertNoWorkspaceExternal(opts) {
+        const { manifest, workspaceScope = DEFAULT_WORKSPACE_SCOPE } = opts;
+        for (const row of manifest) {
+            const specifiers = row.external ?? [];
+            for (const specifier of specifiers) {
+                if (!specifier.startsWith(workspaceScope)) {
+                    continue;
+                }
+                throw purityError(`[purity][manifest] Entry '${row.label}' externalises '${specifier}', a workspace package ` +
+                    `| \`external\` may only exempt THIRD-PARTY packaging, never the repository's own code - doing so ` +
+                    `would hide the exact leak this gate exists to catch`);
+            }
         }
-        throw purityError(`[purity][manifest] '${claim.package}' claims '${subpath}', which its \`exports\` map no longer ` +
-            `publishes | Published: ${published.join(', ')} - a renamed sub-path must not silently drop its row`);
+        return manifest;
     }
-    const claimExternalKeys = Object.keys(claim.external ?? {});
-    for (const subpath of claimExternalKeys) {
-        if (published.includes(subpath)) {
-            continue;
+    /**
+     * Public for the tests, which have to drive a claim that no longer matches its package's
+     * `exports` map - the staleness guard is the whole point of deriving, and it cannot be asserted
+     * through a built manifest, which by construction is never stale.
+     */
+    static deriveEntries(opts) {
+        const { claim, root } = opts;
+        const exportsMap = readExportsMap({ root, package: claim.package });
+        const published = Object.keys(exportsMap).filter((subpath) => subpath !== NON_CODE_SUBPATH);
+        const subpathsList = claim.subpaths ?? [];
+        for (const subpath of subpathsList) {
+            if (published.includes(subpath)) {
+                continue;
+            }
+            throw purityError(`[purity][manifest] '${claim.package}' claims '${subpath}', which its \`exports\` map no longer ` +
+                `publishes | Published: ${published.join(', ')} - a renamed sub-path must not silently drop its row`);
         }
-        throw purityError(`[purity][manifest] '${claim.package}' declares \`external\` for '${subpath}', which its ` +
-            `\`exports\` map no longer publishes | An external that outlives its entry is a waiver ` +
-            `nobody is reading`);
-    }
-    const claimed = claim.subpaths ?? published;
-    const claimImpureKeys = Object.keys(claim.impure ?? {});
-    for (const subpath of claimImpureKeys) {
-        if (claimed.includes(subpath)) {
-            continue;
+        const claimExternalKeys = Object.keys(claim.external ?? {});
+        for (const subpath of claimExternalKeys) {
+            if (published.includes(subpath)) {
+                continue;
+            }
+            throw purityError(`[purity][manifest] '${claim.package}' declares \`external\` for '${subpath}', which its ` +
+                `\`exports\` map no longer publishes | An external that outlives its entry is a waiver ` +
+                `nobody is reading`);
         }
-        throw purityError(`[purity][manifest] '${claim.package}' waives '${subpath}' as impure, but that sub-path is not ` +
-            `claimed | Claimed: ${claimed.join(', ')} - a waiver against nothing is one nobody is reading`);
-    }
-    const entries = [];
-    for (const subpath of claimed) {
-        const targets = listConditionTargets(exportsMap[subpath]);
-        const conditions = claim.impure?.[subpath] ?? [];
-        for (const condition of conditions) {
-            if (targets.some((target) => target.condition === condition)) {
+        const claimed = claim.subpaths ?? published;
+        const claimImpureKeys = Object.keys(claim.impure ?? {});
+        for (const subpath of claimImpureKeys) {
+            if (claimed.includes(subpath)) {
                 continue;
             }
-            throw purityError(`[purity][manifest] '${claim.package}' waives '${subpath}' under condition '${condition}', ` +
-                `which its \`exports\` map does not publish | Published: ${targets.map((t) => t.condition).join(', ')}`);
+            throw purityError(`[purity][manifest] '${claim.package}' waives '${subpath}' as impure, but that sub-path is not ` +
+                `claimed | Claimed: ${claimed.join(', ')} - a waiver against nothing is one nobody is reading`);
         }
-        for (const { condition, file } of targets) {
-            entries.push({
-                label: buildLabel({
+        const entries = [];
+        for (const subpath of claimed) {
+            const targets = listConditionTargets(exportsMap[subpath]);
+            const conditions = claim.impure?.[subpath] ?? [];
+            for (const condition of conditions) {
+                if (targets.some((target) => target.condition === condition)) {
+                    continue;
+                }
+                throw purityError(`[purity][manifest] '${claim.package}' waives '${subpath}' under condition '${condition}', ` +
+                    `which its \`exports\` map does not publish | Published: ${targets.map((t) => t.condition).join(', ')}`);
+            }
+            for (const { condition, file } of targets) {
+                entries.push({
+                    label: buildLabel({
+                        package: claim.package,
+                        subpath,
+                        condition,
+                        isSoleTarget: targets.length === 1,
+                    }),
                     package: claim.package,
-                    subpath,
-                    condition,
-                    isSoleTarget: targets.length === 1,
-                }),
-                package: claim.package,
-                entry: (0, node_path_1.join)('packages', claim.package, file),
-                ...(claim.external?.[subpath] ? { external: claim.external[subpath] } : {}),
-                ...(claim.impure?.[subpath]?.includes(condition) ? { expectImpure: true } : {}),
-            });
+                    entry: (0, node_path_1.join)('packages', claim.package, file),
+                    ...(claim.external?.[subpath] ? { external: claim.external[subpath] } : {}),
+                    ...(claim.impure?.[subpath]?.includes(condition) ? { expectImpure: true } : {}),
+                });
+            }
         }
+        return entries;
     }
-    return entries;
-};
-exports.deriveEntries = deriveEntries;
-/**
- * A browser claim is only honest if a browser bundler can actually consume the entry. A CommonJS
- * entry forces every consumer into a workaround, so the claim carries the obligation: every claimed
- * sub-path must publish its runtime entries below `esmEntryPrefix`. Checked here rather than trusted
- * to a comment, for the same reason as {@link assertNoWorkspaceExternal} - the failure is otherwise
- * invisible until someone tries to bundle the package downstream.
- */
-const assertBrowserEsmEntry = (opts) => {
-    const { claims, root, esmEntryPrefix } = opts;
-    for (const claim of claims) {
-        const exportsMap = readExportsMap({ root, package: claim.package });
-        const claimed = claim.subpaths ?? Object.keys(exportsMap).filter((s) => s !== NON_CODE_SUBPATH);
-        for (const subpath of claimed) {
-            const target = exportsMap[subpath];
-            const runtimeTargets = typeof target === 'object' && target !== null
-                ? Object.entries(target)
-                    .filter(([condition]) => condition !== NON_RUNTIME_CONDITION)
-                    .map(([, file]) => file)
-                : [];
-            if (runtimeTargets.length > 0 &&
-                runtimeTargets.every((file) => file.startsWith(esmEntryPrefix))) {
-                continue;
+    /**
+     * A browser claim is only honest if a browser bundler can actually consume the entry. A CommonJS
+     * entry forces every consumer into a workaround, so the claim carries the obligation: every claimed
+     * sub-path must publish its runtime entries below `esmEntryPrefix`. Checked here rather than trusted
+     * to a comment, for the same reason as {@link PurityManifest.assertNoWorkspaceExternal} - the failure is otherwise
+     * invisible until someone tries to bundle the package downstream.
+     */
+    static assertBrowserEsmEntry(opts) {
+        const { claims, root, esmEntryPrefix } = opts;
+        for (const claim of claims) {
+            const exportsMap = readExportsMap({ root, package: claim.package });
+            const claimed = claim.subpaths ?? Object.keys(exportsMap).filter((s) => s !== NON_CODE_SUBPATH);
+            for (const subpath of claimed) {
+                const target = exportsMap[subpath];
+                const runtimeTargets = typeof target === 'object' && target !== null
+                    ? Object.entries(target)
+                        .filter(([condition]) => condition !== NON_RUNTIME_CONDITION)
+                        .map(([, file]) => file)
+                    : [];
+                if (runtimeTargets.length > 0 &&
+                    runtimeTargets.every((file) => file.startsWith(esmEntryPrefix))) {
+                    continue;
+                }
+                throw purityError(`[purity][manifest] '${claim.package}' claims browser purity for '${subpath}' but its runtime ` +
+                    `entry is not in ${esmEntryPrefix.replace(/^\.\//, '')} | A browser bundler needs an ES module, so the claim ` +
+                    `cannot be consumed - build the package as ES modules`);
             }
-            throw purityError(`[purity][manifest] '${claim.package}' claims browser purity for '${subpath}' but its runtime ` +
-                `entry is not in ${esmEntryPrefix.replace(/^\.\//, '')} | A browser bundler needs an ES module, so the claim ` +
-                `cannot be consumed - build the package as ES modules`);
         }
+        return claims;
     }
-    return claims;
-};
-exports.assertBrowserEsmEntry = assertBrowserEsmEntry;
-/** The rows of a whole repository: every claim derived from its package's `exports`, then the guards. */
-const buildManifest = (opts) => {
-    const { claims, root, options = {} } = opts;
-    const { esmEntryPrefix, workspaceScope = DEFAULT_WORKSPACE_SCOPE } = options;
-    const checked = esmEntryPrefix === undefined ? claims : (0, exports.assertBrowserEsmEntry)({ claims, root, esmEntryPrefix });
-    return (0, exports.assertNoWorkspaceExternal)(checked.flatMap((claim) => (0, exports.deriveEntries)({ claim, root })), workspaceScope);
-};
-exports.buildManifest = buildManifest;
+    /** The rows of a whole repository: every claim derived from its package's `exports`, then the guards. */
+    static build(opts) {
+        const { claims, root, options = {} } = opts;
+        const { esmEntryPrefix, workspaceScope = DEFAULT_WORKSPACE_SCOPE } = options;
+        const checked = esmEntryPrefix === undefined
+            ? claims
+            : PurityManifest.assertBrowserEsmEntry({ claims, root, esmEntryPrefix });
+        return PurityManifest.assertNoWorkspaceExternal({
+            manifest: checked.flatMap((claim) => PurityManifest.deriveEntries({ claim, root })),
+            workspaceScope,
+        });
+    }
+}
+exports.PurityManifest = PurityManifest;
 //# sourceMappingURL=manifest.js.map

package/dist/checks/purity/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/checks/purity/manifest.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,yCAAiC;AA8DjC,MAAM,uBAAuB,GAAG,WAAW,CAAC;AAE5C,wIAAwI;AACxI,sGAAsG;AACtG,MAAM,WAAW,GAAG,CAAC,OAAe,EAAS,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAEnE,6FAA6F;AAC7F,MAAM,qBAAqB,GAAG,OAAO,CAAC;AACtC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAE1C;;;;;;;;GAQG;AACI,MAAM,yBAAyB,GAAG,CACvC,QAAwB,EACxB,iBAAyB,uBAAuB,EAChC,EAAE;IAClB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QACtC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YAED,MAAM,WAAW,CACf,6BAA6B,GAAG,CAAC,KAAK,mBAAmB,SAAS,yBAAyB;gBACzF,mGAAmG;gBACnG,qDAAqD,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AApBW,QAAA,yBAAyB,6BAoBpC;AAIF,MAAM,cAAc,GAAG,CAAC,IAGvB,EAAkC,EAAE;IACnC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,YAAY,EAAE,MAAM,CAAC,CAE7D,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,WAAW,CACf,uBAAuB,IAAI,CAAC,OAAO,2DAA2D;YAC5F,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAC3B,MAAsB,EACsB,EAAE;IAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAA+C,EAAE,CAAC;IAE/D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9C,IAAI,SAAS,KAAK,qBAAqB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,IAKnB,EAAU,EAAE;IACX,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,GAAG,WAAW,GAAG,MAAM,EAAE,CAAC;IAEvC,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,SAAS,GAAG,CAAC;AACxD,CAAC,CAAC;AAEF;;;;GAIG;AACI,MAAM,aAAa,GAAG,CAAC,IAA2C,EAAkB,EAAE;IAC3F,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC;IAE5F,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,aAAa,OAAO,yCAAyC;YAC/F,0BAA0B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD,CACvG,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,gCAAgC,OAAO,eAAe;YACxF,wFAAwF;YACxF,mBAAmB,CACtB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC;IAE5C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACxD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,aAAa,OAAO,wCAAwC;YAC9F,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,oBAAoB,CAAC,UAAU,CAAC,OAAO,CAAE,CAAC,CAAC;QAE3D,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC7D,SAAS;YACX,CAAC;YAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,aAAa,OAAO,sBAAsB,SAAS,KAAK;gBAC1F,2DAA2D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1G,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,UAAU,CAAC;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,OAAO;oBACP,SAAS;oBACT,YAAY,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;iBACnC,CAAC;gBACF,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC5C,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AA9EW,QAAA,aAAa,iBA8ExB;AAEF;;;;;;GAMG;AACI,MAAM,qBAAqB,GAAG,CAAC,IAIrC,EAAkB,EAAE;IACnB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC;QAEhG,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAEnC,MAAM,cAAc,GAClB,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;qBACnB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,KAAK,qBAAqB,CAAC;qBAC5D,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,EAAE,CAAC;YAET,IACE,cAAc,CAAC,MAAM,GAAG,CAAC;gBACzB,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,EAC/D,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,gCAAgC,OAAO,oBAAoB;gBAC7F,mBAAmB,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,wDAAwD;gBAC9G,sDAAsD,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AArCW,QAAA,qBAAqB,yBAqChC;AAEF,yGAAyG;AAClG,MAAM,aAAa,GAAG,CAAC,IAI7B,EAAkB,EAAE;IACnB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAC5C,MAAM,EAAE,cAAc,EAAE,cAAc,GAAG,uBAAuB,EAAE,GAAG,OAAO,CAAC;IAE7E,MAAM,OAAO,GACX,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,6BAAqB,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IAElG,OAAO,IAAA,iCAAyB,EAC9B,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,qBAAa,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAC1D,cAAc,CACf,CAAC;AACJ,CAAC,CAAC;AAfW,QAAA,aAAa,iBAexB","sourcesContent":["import { readFileSync } from 'node:fs';\nimport { join } from 'node:path';\n\nexport interface IPurityEntry {\n  label: string;\n  package: string;\n  /** Repository-relative path to the built file the `exports` map points at. */\n  entry: string;\n  /**\n   * Specifiers to pass through as `bun build --external`. Only for a third-party dependency whose\n   * OWN packaging is out of this gate's remit - e.g. one that relies on its `package.json` `browser`\n   * field remap, which the downstream app's bundler (Vite, ...) honours and `bun build` does not.\n   * Never for the repository's own source: an external hides that file from the module graph\n   * entirely, so using it on our own code would let a real leak through unseen rather than prove\n   * anything pure. Enforced by {@link assertNoWorkspaceExternal}, not left to this comment alone.\n   */\n  external?: string[];\n  /**\n   * This row is EXPECTED to be impure, so failing is its passing state. Derived from\n   * {@link IPurityClaim.impure} - never authored on a row directly.\n   */\n  expectImpure?: boolean;\n}\n\n/**\n * A package whose published entry points carry a browser-purity claim.\n *\n * The ROW SET IS NEVER AUTHORED. It is read from the package's own `exports` map, so a sub-path\n * added to a manifest is probed the moment it is published.\n */\nexport interface IPurityClaim {\n  /** Directory under `packages/`, and the token `devz check purity <token>` filters on. */\n  package: string;\n  /**\n   * Sub-paths (as spelled in `exports`) when the claim covers only PART of the published surface.\n   * Omit it and the whole surface is claimed. Every sub-path named here must still exist in\n   * `exports`; a rename fails the derivation loudly rather than quietly dropping a row.\n   */\n  subpaths?: string[];\n  /** `external` for one sub-path - see {@link IPurityEntry.external}. Keyed as spelled in `exports`. */\n  external?: Record<string, string[]>;\n  /**\n   * Entries that CANNOT be browser-pure, keyed as spelled in `exports`, valued by the conditions\n   * that are impure. The waiver is exact in BOTH directions: a listed entry that turns out to be\n   * pure fails as loudly as an unlisted one that is not. Deriving still owns the ROW SET, so a\n   * sub-path added later is claimed pure by default and has to earn its line here.\n   */\n  impure?: Record<string, string[]>;\n}\n\n/** What a repository may tune about the engine; everything else is the engine's contract. */\nexport interface IPurityOptions {\n  /**\n   * When set, every claimed sub-path must publish its runtime entries below this prefix (for\n   * example `./dist/esm/`): a browser bundler needs an ES module, so a CommonJS-only entry makes\n   * the claim unconsumable. Omit it for a repository that publishes a single build.\n   */\n  esmEntryPrefix?: string;\n\n  /** Package-name prefix of this repository's own packages; an `external` may never start with it. Default `@venizia/`. */\n  workspaceScope?: string;\n}\n\nconst DEFAULT_WORKSPACE_SCOPE = '@venizia/';\n\n/** The one place this engine builds an `Error`: `getError` would make dev-configs depend on inversion, which depends on dev-configs. */\n// eslint-disable-next-line venizia/no-new-error -- getError would be a dev-configs -> inversion cycle\nconst purityError = (message: string): Error => new Error(message);\n\n/** `types` describes the entry, it is not a runtime target; `./package.json` is not code. */\nconst NON_RUNTIME_CONDITION = 'types';\nconst NON_CODE_SUBPATH = './package.json';\n\n/**\n * A code-level guard, not just the JSDoc on `external`: it is an escape hatch from this gate, and a\n * hatch with no lock is one bad edit away from hiding a real leak - `external: ['@venizia/ignis-helpers']`\n * on a red entry would silently turn it green by removing the exact root-barrel import this gate\n * exists to catch from the module graph, rather than proving it absent.\n *\n * A plain `Error`, not `getError`: the engine runs from the repository root through `devz`, outside\n * every workspace package, and has no logger to resolve.\n */\nexport const assertNoWorkspaceExternal = (\n  manifest: IPurityEntry[],\n  workspaceScope: string = DEFAULT_WORKSPACE_SCOPE,\n): IPurityEntry[] => {\n  for (const row of manifest) {\n    const specifiers = row.external ?? [];\n    for (const specifier of specifiers) {\n      if (!specifier.startsWith(workspaceScope)) {\n        continue;\n      }\n\n      throw purityError(\n        `[purity][manifest] Entry '${row.label}' externalises '${specifier}', a workspace package ` +\n          `| \\`external\\` may only exempt THIRD-PARTY packaging, never the repository's own code - doing so ` +\n          `would hide the exact leak this gate exists to catch`,\n      );\n    }\n  }\n\n  return manifest;\n};\n\ntype TExportsTarget = string | Record<string, string>;\n\nconst readExportsMap = (opts: {\n  root: string;\n  package: string;\n}): Record<string, TExportsTarget> => {\n  const manifestPath = join(opts.root, 'packages', opts.package, 'package.json');\n  const manifest = JSON.parse(readFileSync(manifestPath, 'utf8')) as {\n    exports?: Record<string, TExportsTarget>;\n  };\n\n  if (!manifest.exports) {\n    throw purityError(\n      `[purity][manifest] '${opts.package}' claims browser purity but publishes no \\`exports\\` map ` +\n        `| There is nothing to derive rows from - remove the claim or add the map`,\n    );\n  }\n\n  return manifest.exports;\n};\n\n/**\n * `exports` may spell one sub-path as several conditions pointing at different builds - the dual\n * CJS/ESM packages do exactly that - and each is a separately resolvable file that a consumer can\n * end up importing, so each is probed. `default` normally repeats `require`, so files are deduped\n * and the FIRST condition naming a file is the one that labels it.\n */\nconst listConditionTargets = (\n  target: TExportsTarget,\n): Array<{ condition: string; file: string }> => {\n  if (typeof target === 'string') {\n    return [{ condition: 'default', file: target }];\n  }\n\n  const seen = new Set<string>();\n  const targets: Array<{ condition: string; file: string }> = [];\n\n  const targetEntries = Object.entries(target);\n  for (const [condition, file] of targetEntries) {\n    if (condition === NON_RUNTIME_CONDITION || seen.has(file)) {\n      continue;\n    }\n\n    seen.add(file);\n    targets.push({ condition, file });\n  }\n\n  return targets;\n};\n\nconst buildLabel = (opts: {\n  package: string;\n  subpath: string;\n  condition: string;\n  isSoleTarget: boolean;\n}): string => {\n  const { package: packageName, subpath, condition, isSoleTarget } = opts;\n  const suffix = subpath === '.' ? '' : subpath.slice(1);\n  const base = `${packageName}${suffix}`;\n\n  return isSoleTarget ? base : `${base} [${condition}]`;\n};\n\n/**\n * Exported for the tests, which have to drive a claim that no longer matches its package's\n * `exports` map - the staleness guard is the whole point of deriving, and it cannot be asserted\n * through a built manifest, which by construction is never stale.\n */\nexport const deriveEntries = (opts: { claim: IPurityClaim; root: string }): IPurityEntry[] => {\n  const { claim, root } = opts;\n  const exportsMap = readExportsMap({ root, package: claim.package });\n  const published = Object.keys(exportsMap).filter((subpath) => subpath !== NON_CODE_SUBPATH);\n\n  const subpathsList = claim.subpaths ?? [];\n  for (const subpath of subpathsList) {\n    if (published.includes(subpath)) {\n      continue;\n    }\n\n    throw purityError(\n      `[purity][manifest] '${claim.package}' claims '${subpath}', which its \\`exports\\` map no longer ` +\n        `publishes | Published: ${published.join(', ')} - a renamed sub-path must not silently drop its row`,\n    );\n  }\n\n  const claimExternalKeys = Object.keys(claim.external ?? {});\n  for (const subpath of claimExternalKeys) {\n    if (published.includes(subpath)) {\n      continue;\n    }\n\n    throw purityError(\n      `[purity][manifest] '${claim.package}' declares \\`external\\` for '${subpath}', which its ` +\n        `\\`exports\\` map no longer publishes | An external that outlives its entry is a waiver ` +\n        `nobody is reading`,\n    );\n  }\n\n  const claimed = claim.subpaths ?? published;\n\n  const claimImpureKeys = Object.keys(claim.impure ?? {});\n  for (const subpath of claimImpureKeys) {\n    if (claimed.includes(subpath)) {\n      continue;\n    }\n\n    throw purityError(\n      `[purity][manifest] '${claim.package}' waives '${subpath}' as impure, but that sub-path is not ` +\n        `claimed | Claimed: ${claimed.join(', ')} - a waiver against nothing is one nobody is reading`,\n    );\n  }\n\n  const entries: IPurityEntry[] = [];\n\n  for (const subpath of claimed) {\n    const targets = listConditionTargets(exportsMap[subpath]!);\n\n    const conditions = claim.impure?.[subpath] ?? [];\n    for (const condition of conditions) {\n      if (targets.some((target) => target.condition === condition)) {\n        continue;\n      }\n\n      throw purityError(\n        `[purity][manifest] '${claim.package}' waives '${subpath}' under condition '${condition}', ` +\n          `which its \\`exports\\` map does not publish | Published: ${targets.map((t) => t.condition).join(', ')}`,\n      );\n    }\n\n    for (const { condition, file } of targets) {\n      entries.push({\n        label: buildLabel({\n          package: claim.package,\n          subpath,\n          condition,\n          isSoleTarget: targets.length === 1,\n        }),\n        package: claim.package,\n        entry: join('packages', claim.package, file),\n        ...(claim.external?.[subpath] ? { external: claim.external[subpath] } : {}),\n        ...(claim.impure?.[subpath]?.includes(condition) ? { expectImpure: true } : {}),\n      });\n    }\n  }\n\n  return entries;\n};\n\n/**\n * A browser claim is only honest if a browser bundler can actually consume the entry. A CommonJS\n * entry forces every consumer into a workaround, so the claim carries the obligation: every claimed\n * sub-path must publish its runtime entries below `esmEntryPrefix`. Checked here rather than trusted\n * to a comment, for the same reason as {@link assertNoWorkspaceExternal} - the failure is otherwise\n * invisible until someone tries to bundle the package downstream.\n */\nexport const assertBrowserEsmEntry = (opts: {\n  claims: IPurityClaim[];\n  root: string;\n  esmEntryPrefix: string;\n}): IPurityClaim[] => {\n  const { claims, root, esmEntryPrefix } = opts;\n\n  for (const claim of claims) {\n    const exportsMap = readExportsMap({ root, package: claim.package });\n    const claimed = claim.subpaths ?? Object.keys(exportsMap).filter((s) => s !== NON_CODE_SUBPATH);\n\n    for (const subpath of claimed) {\n      const target = exportsMap[subpath];\n\n      const runtimeTargets =\n        typeof target === 'object' && target !== null\n          ? Object.entries(target)\n              .filter(([condition]) => condition !== NON_RUNTIME_CONDITION)\n              .map(([, file]) => file)\n          : [];\n\n      if (\n        runtimeTargets.length > 0 &&\n        runtimeTargets.every((file) => file.startsWith(esmEntryPrefix))\n      ) {\n        continue;\n      }\n\n      throw purityError(\n        `[purity][manifest] '${claim.package}' claims browser purity for '${subpath}' but its runtime ` +\n          `entry is not in ${esmEntryPrefix.replace(/^\\.\\//, '')} | A browser bundler needs an ES module, so the claim ` +\n          `cannot be consumed - build the package as ES modules`,\n      );\n    }\n  }\n\n  return claims;\n};\n\n/** The rows of a whole repository: every claim derived from its package's `exports`, then the guards. */\nexport const buildManifest = (opts: {\n  claims: IPurityClaim[];\n  root: string;\n  options?: IPurityOptions;\n}): IPurityEntry[] => {\n  const { claims, root, options = {} } = opts;\n  const { esmEntryPrefix, workspaceScope = DEFAULT_WORKSPACE_SCOPE } = options;\n\n  const checked =\n    esmEntryPrefix === undefined ? claims : assertBrowserEsmEntry({ claims, root, esmEntryPrefix });\n\n  return assertNoWorkspaceExternal(\n    checked.flatMap((claim) => deriveEntries({ claim, root })),\n    workspaceScope,\n  );\n};\n"]}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/checks/purity/manifest.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,yCAAiC;AA8DjC,MAAM,uBAAuB,GAAG,WAAW,CAAC;AAE5C,wIAAwI;AACxI,sGAAsG;AACtG,MAAM,WAAW,GAAG,CAAC,OAAe,EAAS,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAEnE,6FAA6F;AAC7F,MAAM,qBAAqB,GAAG,OAAO,CAAC;AACtC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAI1C,MAAM,cAAc,GAAG,CAAC,IAGvB,EAAkC,EAAE;IACnC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,YAAY,EAAE,MAAM,CAAC,CAE7D,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,WAAW,CACf,uBAAuB,IAAI,CAAC,OAAO,2DAA2D;YAC5F,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAC3B,MAAsB,EACsB,EAAE;IAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAA+C,EAAE,CAAC;IAE/D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9C,IAAI,SAAS,KAAK,qBAAqB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,IAKnB,EAAU,EAAE;IACX,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,GAAG,WAAW,GAAG,MAAM,EAAE,CAAC;IAEvC,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,SAAS,GAAG,CAAC;AACxD,CAAC,CAAC;AAEF,wHAAwH;AACxH,MAAa,cAAc;IACzB;;;;;;;;OAQG;IACH,MAAM,CAAC,yBAAyB,CAAC,IAGhC;QACC,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,uBAAuB,EAAE,GAAG,IAAI,CAAC;QAEpE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;YACtC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC1C,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,CACf,6BAA6B,GAAG,CAAC,KAAK,mBAAmB,SAAS,yBAAyB;oBACzF,mGAAmG;oBACnG,qDAAqD,CACxD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,aAAa,CAAC,IAA2C;QAC9D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAC7B,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC;QAE5F,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,SAAS;YACX,CAAC;YAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,aAAa,OAAO,yCAAyC;gBAC/F,0BAA0B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD,CACvG,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,SAAS;YACX,CAAC;YAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,gCAAgC,OAAO,eAAe;gBACxF,wFAAwF;gBACxF,mBAAmB,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC;QAE5C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,aAAa,OAAO,wCAAwC;gBAC9F,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD,CACjG,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAmB,EAAE,CAAC;QAEnC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,oBAAoB,CAAC,UAAU,CAAC,OAAO,CAAE,CAAC,CAAC;YAE3D,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACjD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;oBAC7D,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,aAAa,OAAO,sBAAsB,SAAS,KAAK;oBAC1F,2DAA2D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1G,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,UAAU,CAAC;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,OAAO;wBACP,SAAS;wBACT,YAAY,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;qBACnC,CAAC;oBACF,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;oBAC5C,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3E,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,qBAAqB,CAAC,IAI5B;QACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;QAE9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,MAAM,OAAO,GACX,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC;YAElF,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;gBAEnC,MAAM,cAAc,GAClB,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;oBAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;yBACnB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,KAAK,qBAAqB,CAAC;yBAC5D,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;oBAC5B,CAAC,CAAC,EAAE,CAAC;gBAET,IACE,cAAc,CAAC,MAAM,GAAG,CAAC;oBACzB,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,EAC/D,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,CACf,uBAAuB,KAAK,CAAC,OAAO,gCAAgC,OAAO,oBAAoB;oBAC7F,mBAAmB,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,wDAAwD;oBAC9G,sDAAsD,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yGAAyG;IACzG,MAAM,CAAC,KAAK,CAAC,IAIZ;QACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;QAC5C,MAAM,EAAE,cAAc,EAAE,cAAc,GAAG,uBAAuB,EAAE,GAAG,OAAO,CAAC;QAE7E,MAAM,OAAO,GACX,cAAc,KAAK,SAAS;YAC1B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAE7E,OAAO,cAAc,CAAC,yBAAyB,CAAC;YAC9C,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,cAAc;SACf,CAAC,CAAC;IACL,CAAC;CACF;AAzLD,wCAyLC","sourcesContent":["import { readFileSync } from 'node:fs';\nimport { join } from 'node:path';\n\nexport interface IPurityEntry {\n  label: string;\n  package: string;\n  /** Repository-relative path to the built file the `exports` map points at. */\n  entry: string;\n  /**\n   * Specifiers to pass through as `bun build --external`. Only for a third-party dependency whose\n   * OWN packaging is out of this gate's remit - e.g. one that relies on its `package.json` `browser`\n   * field remap, which the downstream app's bundler (Vite, ...) honours and `bun build` does not.\n   * Never for the repository's own source: an external hides that file from the module graph\n   * entirely, so using it on our own code would let a real leak through unseen rather than prove\n   * anything pure. Enforced by {@link PurityManifest.assertNoWorkspaceExternal}, not left to this comment alone.\n   */\n  external?: string[];\n  /**\n   * This row is EXPECTED to be impure, so failing is its passing state. Derived from\n   * {@link IPurityClaim.impure} - never authored on a row directly.\n   */\n  expectImpure?: boolean;\n}\n\n/**\n * A package whose published entry points carry a browser-purity claim.\n *\n * The ROW SET IS NEVER AUTHORED. It is read from the package's own `exports` map, so a sub-path\n * added to a manifest is probed the moment it is published.\n */\nexport interface IPurityClaim {\n  /** Directory under `packages/`, and the token `devz check purity <token>` filters on. */\n  package: string;\n  /**\n   * Sub-paths (as spelled in `exports`) when the claim covers only PART of the published surface.\n   * Omit it and the whole surface is claimed. Every sub-path named here must still exist in\n   * `exports`; a rename fails the derivation loudly rather than quietly dropping a row.\n   */\n  subpaths?: string[];\n  /** `external` for one sub-path - see {@link IPurityEntry.external}. Keyed as spelled in `exports`. */\n  external?: Record<string, string[]>;\n  /**\n   * Entries that CANNOT be browser-pure, keyed as spelled in `exports`, valued by the conditions\n   * that are impure. The waiver is exact in BOTH directions: a listed entry that turns out to be\n   * pure fails as loudly as an unlisted one that is not. Deriving still owns the ROW SET, so a\n   * sub-path added later is claimed pure by default and has to earn its line here.\n   */\n  impure?: Record<string, string[]>;\n}\n\n/** What a repository may tune about the engine; everything else is the engine's contract. */\nexport interface IPurityOptions {\n  /**\n   * When set, every claimed sub-path must publish its runtime entries below this prefix (for\n   * example `./dist/esm/`): a browser bundler needs an ES module, so a CommonJS-only entry makes\n   * the claim unconsumable. Omit it for a repository that publishes a single build.\n   */\n  esmEntryPrefix?: string;\n\n  /** Package-name prefix of this repository's own packages; an `external` may never start with it. Default `@venizia/`. */\n  workspaceScope?: string;\n}\n\nconst DEFAULT_WORKSPACE_SCOPE = '@venizia/';\n\n/** The one place this engine builds an `Error`: `getError` would make dev-configs depend on inversion, which depends on dev-configs. */\n// eslint-disable-next-line venizia/no-new-error -- getError would be a dev-configs -> inversion cycle\nconst purityError = (message: string): Error => new Error(message);\n\n/** `types` describes the entry, it is not a runtime target; `./package.json` is not code. */\nconst NON_RUNTIME_CONDITION = 'types';\nconst NON_CODE_SUBPATH = './package.json';\n\ntype TExportsTarget = string | Record<string, string>;\n\nconst readExportsMap = (opts: {\n  root: string;\n  package: string;\n}): Record<string, TExportsTarget> => {\n  const manifestPath = join(opts.root, 'packages', opts.package, 'package.json');\n  const manifest = JSON.parse(readFileSync(manifestPath, 'utf8')) as {\n    exports?: Record<string, TExportsTarget>;\n  };\n\n  if (!manifest.exports) {\n    throw purityError(\n      `[purity][manifest] '${opts.package}' claims browser purity but publishes no \\`exports\\` map ` +\n        `| There is nothing to derive rows from - remove the claim or add the map`,\n    );\n  }\n\n  return manifest.exports;\n};\n\n/**\n * `exports` may spell one sub-path as several conditions pointing at different builds - the dual\n * CJS/ESM packages do exactly that - and each is a separately resolvable file that a consumer can\n * end up importing, so each is probed. `default` normally repeats `require`, so files are deduped\n * and the FIRST condition naming a file is the one that labels it.\n */\nconst listConditionTargets = (\n  target: TExportsTarget,\n): Array<{ condition: string; file: string }> => {\n  if (typeof target === 'string') {\n    return [{ condition: 'default', file: target }];\n  }\n\n  const seen = new Set<string>();\n  const targets: Array<{ condition: string; file: string }> = [];\n\n  const targetEntries = Object.entries(target);\n  for (const [condition, file] of targetEntries) {\n    if (condition === NON_RUNTIME_CONDITION || seen.has(file)) {\n      continue;\n    }\n\n    seen.add(file);\n    targets.push({ condition, file });\n  }\n\n  return targets;\n};\n\nconst buildLabel = (opts: {\n  package: string;\n  subpath: string;\n  condition: string;\n  isSoleTarget: boolean;\n}): string => {\n  const { package: packageName, subpath, condition, isSoleTarget } = opts;\n  const suffix = subpath === '.' ? '' : subpath.slice(1);\n  const base = `${packageName}${suffix}`;\n\n  return isSoleTarget ? base : `${base} [${condition}]`;\n};\n\n/** Derives the rows of the purity gate from the `exports` map of each claimed package, then runs the guards on them. */\nexport class PurityManifest {\n  /**\n   * A code-level guard, not just the JSDoc on `external`: it is an escape hatch from this gate, and a\n   * hatch with no lock is one bad edit away from hiding a real leak - `external: ['@venizia/ignis-helpers']`\n   * on a red entry would silently turn it green by removing the exact root-barrel import this gate\n   * exists to catch from the module graph, rather than proving it absent.\n   *\n   * A plain `Error`, not `getError`: the engine runs from the repository root through `devz`, outside\n   * every workspace package, and has no logger to resolve.\n   */\n  static assertNoWorkspaceExternal(opts: {\n    manifest: IPurityEntry[];\n    workspaceScope?: string;\n  }): IPurityEntry[] {\n    const { manifest, workspaceScope = DEFAULT_WORKSPACE_SCOPE } = opts;\n\n    for (const row of manifest) {\n      const specifiers = row.external ?? [];\n      for (const specifier of specifiers) {\n        if (!specifier.startsWith(workspaceScope)) {\n          continue;\n        }\n\n        throw purityError(\n          `[purity][manifest] Entry '${row.label}' externalises '${specifier}', a workspace package ` +\n            `| \\`external\\` may only exempt THIRD-PARTY packaging, never the repository's own code - doing so ` +\n            `would hide the exact leak this gate exists to catch`,\n        );\n      }\n    }\n\n    return manifest;\n  }\n\n  /**\n   * Public for the tests, which have to drive a claim that no longer matches its package's\n   * `exports` map - the staleness guard is the whole point of deriving, and it cannot be asserted\n   * through a built manifest, which by construction is never stale.\n   */\n  static deriveEntries(opts: { claim: IPurityClaim; root: string }): IPurityEntry[] {\n    const { claim, root } = opts;\n    const exportsMap = readExportsMap({ root, package: claim.package });\n    const published = Object.keys(exportsMap).filter((subpath) => subpath !== NON_CODE_SUBPATH);\n\n    const subpathsList = claim.subpaths ?? [];\n    for (const subpath of subpathsList) {\n      if (published.includes(subpath)) {\n        continue;\n      }\n\n      throw purityError(\n        `[purity][manifest] '${claim.package}' claims '${subpath}', which its \\`exports\\` map no longer ` +\n          `publishes | Published: ${published.join(', ')} - a renamed sub-path must not silently drop its row`,\n      );\n    }\n\n    const claimExternalKeys = Object.keys(claim.external ?? {});\n    for (const subpath of claimExternalKeys) {\n      if (published.includes(subpath)) {\n        continue;\n      }\n\n      throw purityError(\n        `[purity][manifest] '${claim.package}' declares \\`external\\` for '${subpath}', which its ` +\n          `\\`exports\\` map no longer publishes | An external that outlives its entry is a waiver ` +\n          `nobody is reading`,\n      );\n    }\n\n    const claimed = claim.subpaths ?? published;\n\n    const claimImpureKeys = Object.keys(claim.impure ?? {});\n    for (const subpath of claimImpureKeys) {\n      if (claimed.includes(subpath)) {\n        continue;\n      }\n\n      throw purityError(\n        `[purity][manifest] '${claim.package}' waives '${subpath}' as impure, but that sub-path is not ` +\n          `claimed | Claimed: ${claimed.join(', ')} - a waiver against nothing is one nobody is reading`,\n      );\n    }\n\n    const entries: IPurityEntry[] = [];\n\n    for (const subpath of claimed) {\n      const targets = listConditionTargets(exportsMap[subpath]!);\n\n      const conditions = claim.impure?.[subpath] ?? [];\n      for (const condition of conditions) {\n        if (targets.some((target) => target.condition === condition)) {\n          continue;\n        }\n\n        throw purityError(\n          `[purity][manifest] '${claim.package}' waives '${subpath}' under condition '${condition}', ` +\n            `which its \\`exports\\` map does not publish | Published: ${targets.map((t) => t.condition).join(', ')}`,\n        );\n      }\n\n      for (const { condition, file } of targets) {\n        entries.push({\n          label: buildLabel({\n            package: claim.package,\n            subpath,\n            condition,\n            isSoleTarget: targets.length === 1,\n          }),\n          package: claim.package,\n          entry: join('packages', claim.package, file),\n          ...(claim.external?.[subpath] ? { external: claim.external[subpath] } : {}),\n          ...(claim.impure?.[subpath]?.includes(condition) ? { expectImpure: true } : {}),\n        });\n      }\n    }\n\n    return entries;\n  }\n\n  /**\n   * A browser claim is only honest if a browser bundler can actually consume the entry. A CommonJS\n   * entry forces every consumer into a workaround, so the claim carries the obligation: every claimed\n   * sub-path must publish its runtime entries below `esmEntryPrefix`. Checked here rather than trusted\n   * to a comment, for the same reason as {@link PurityManifest.assertNoWorkspaceExternal} - the failure is otherwise\n   * invisible until someone tries to bundle the package downstream.\n   */\n  static assertBrowserEsmEntry(opts: {\n    claims: IPurityClaim[];\n    root: string;\n    esmEntryPrefix: string;\n  }): IPurityClaim[] {\n    const { claims, root, esmEntryPrefix } = opts;\n\n    for (const claim of claims) {\n      const exportsMap = readExportsMap({ root, package: claim.package });\n      const claimed =\n        claim.subpaths ?? Object.keys(exportsMap).filter((s) => s !== NON_CODE_SUBPATH);\n\n      for (const subpath of claimed) {\n        const target = exportsMap[subpath];\n\n        const runtimeTargets =\n          typeof target === 'object' && target !== null\n            ? Object.entries(target)\n                .filter(([condition]) => condition !== NON_RUNTIME_CONDITION)\n                .map(([, file]) => file)\n            : [];\n\n        if (\n          runtimeTargets.length > 0 &&\n          runtimeTargets.every((file) => file.startsWith(esmEntryPrefix))\n        ) {\n          continue;\n        }\n\n        throw purityError(\n          `[purity][manifest] '${claim.package}' claims browser purity for '${subpath}' but its runtime ` +\n            `entry is not in ${esmEntryPrefix.replace(/^\\.\\//, '')} | A browser bundler needs an ES module, so the claim ` +\n            `cannot be consumed - build the package as ES modules`,\n        );\n      }\n    }\n\n    return claims;\n  }\n\n  /** The rows of a whole repository: every claim derived from its package's `exports`, then the guards. */\n  static build(opts: {\n    claims: IPurityClaim[];\n    root: string;\n    options?: IPurityOptions;\n  }): IPurityEntry[] {\n    const { claims, root, options = {} } = opts;\n    const { esmEntryPrefix, workspaceScope = DEFAULT_WORKSPACE_SCOPE } = options;\n\n    const checked =\n      esmEntryPrefix === undefined\n        ? claims\n        : PurityManifest.assertBrowserEsmEntry({ claims, root, esmEntryPrefix });\n\n    return PurityManifest.assertNoWorkspaceExternal({\n      manifest: checked.flatMap((claim) => PurityManifest.deriveEntries({ claim, root })),\n      workspaceScope,\n    });\n  }\n}\n"]}

package/dist/checks/purity/probe.d.ts

@@ -41,28 +41,32 @@ export type TProbeSeverity = Extract<(typeof ProbeSeverities)[keyof typeof Probe
  * gate cry wolf on a dependency; the unguarded `process.` and `globalThis.process.` forms stay
  * fatal, and those are the ones that are unambiguously browser-breaking.
  *
- * Exported for `probe.test.ts` to assert against directly, alongside {@link stripBundlerPathComments}.
+ * Exported for `probe.test.ts` to assert against directly, alongside {@link PurityProbe.stripBundlerPathComments}.
  */
 export declare const GLOBAL_PATTERNS: Array<{
     name: string;
     pattern: RegExp;
     severity: TProbeSeverity;
 }>;
-/**
- * Exported so `probe.test.ts` can assert against the literal collision string directly, without
- * spawning `bun build` - a fixture whose OWN entry-path comment happens to reproduce the collision
- * is not something a filename choice can be relied on to keep reproducing.
- */
-export declare const stripBundlerPathComments: (text: string) => string;
-/**
- * The CLI, not `Bun.build()`: the in-process bundler resolves this workspace's symlinked
- * dependencies to directories and dies on them.
- */
-export declare const probeEntry: (opts: {
-    entry: string;
-    cwd: string;
-    external?: string[];
-    /** Defaults to {@link PURITY_SCRATCH_DIR} under `cwd`. */
-    scratchDir?: string;
-}) => Promise<IPurityResult>;
+export declare class PurityProbe {
+    /**
+     * Public so `probe.test.ts` can assert against the literal collision string directly, without
+     * spawning `bun build` - a fixture whose OWN entry-path comment happens to reproduce the collision
+     * is not something a filename choice can be relied on to keep reproducing.
+     */
+    static stripBundlerPathComments(opts: {
+        text: string;
+    }): string;
+    /**
+     * The CLI, not `Bun.build()`: the in-process bundler resolves this workspace's symlinked
+     * dependencies to directories and dies on them.
+     */
+    static probeEntry(opts: {
+        entry: string;
+        cwd: string;
+        external?: string[];
+        /** Defaults to {@link PURITY_SCRATCH_DIR} under `cwd`. */
+        scratchDir?: string;
+    }): Promise<IPurityResult>;
+}
 //# sourceMappingURL=probe.d.ts.map

package/dist/checks/purity/probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../../src/checks/purity/probe.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+EAA+E;IAC/E,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kIAAkI;AAClI,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AAStD,wFAAwF;AACxF,qBAAa,eAAe;IAC1B,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IAEpC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAA+C;IAEzE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc;CAGvD;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,CAClC,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,EACtD,MAAM,CACP,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAgCA,CAAC;AAaF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAAI,MAAM,MAAM,KAAG,MAEvD,CAAC;AAsIF;;;GAGG;AACH,eAAO,MAAM,UAAU,GAAU,MAAM;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,KAAG,OAAO,CAAC,aAAa,CA6GxB,CAAC"}
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../../src/checks/purity/probe.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+EAA+E;IAC/E,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kIAAkI;AAClI,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AAStD,wFAAwF;AACxF,qBAAa,eAAe;IAC1B,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IAEpC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAA+C;IAEzE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc;CAGvD;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,CAClC,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,EACtD,MAAM,CACP,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAgCA,CAAC;AAiJF,qBAAa,WAAW;IACtB;;;;OAIG;IACH,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAI/D;;;OAGG;WACU,UAAU,CAAC,IAAI,EAAE;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,0DAA0D;QAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,aAAa,CAAC;CA8G3B"}