@vyuhlabs/dxkit 2.4.7 → 2.5.0

package/dist/baseline/baseline-file.js

@@ -0,0 +1,110 @@
+"use strict";
+/**
+ * On-disk baseline file — `.dxkit/baselines/<name>.json`.
+ *
+ * The baseline file is the durable contract between today's scan
+ * and tomorrow's guardrail check. It carries:
+ *
+ *   - Per-finding identities (`BaselineEntry[]`) for cross-run
+ *     matching.
+ *   - Repo state at capture time (commit SHA, branch) so the
+ *     git-aware matcher knows what to diff against.
+ *   - Analysis-environment metadata (dxkit version, tool versions,
+ *     policy hash, config hashes) so the policy classifier can
+ *     reclassify newly-detected findings as `tooling_drift` or
+ *     `config_drift` rather than blocking them as regressions.
+ *   - The salt-resolution mode used to derive any secret-HMAC
+ *     entries, so the matcher knows whether HMAC comparison is
+ *     available on the current run.
+ *
+ * Raw finding payloads (titles, secret values, source excerpts) are
+ * NEVER stored. The file is committable to git: a leak surfaces
+ * identity fingerprints + locations, but no exploitable content.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_BASELINE_DIR = exports.DEFAULT_BASELINE_NAME = exports.BASELINE_SCHEMA_VERSION = void 0;
+exports.pathForBaseline = pathForBaseline;
+exports.writeBaselineFile = writeBaselineFile;
+exports.readBaselineFile = readBaselineFile;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/** Banner stamped on every baseline file. Bump when the on-disk
+ *  shape changes incompatibly so readers can refuse old / new files
+ *  rather than silently mis-parse them. */
+exports.BASELINE_SCHEMA_VERSION = 'dxkit-baseline/v1';
+/** Default baseline name when the user doesn't pass `--name`. */
+exports.DEFAULT_BASELINE_NAME = 'main';
+/** Default storage directory. Lives under `.dxkit/` alongside the
+ *  generated reports + the salt file. */
+exports.DEFAULT_BASELINE_DIR = path.join('.dxkit', 'baselines');
+/** Absolute path for a named baseline inside `cwd`. */
+function pathForBaseline(cwd, name) {
+    return path.join(cwd, exports.DEFAULT_BASELINE_DIR, `${name}.json`);
+}
+/**
+ * Write a baseline file. Creates the parent directory when missing.
+ * Pretty-printed JSON for git-friendly diffs.
+ */
+function writeBaselineFile(filePath, file) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    fs.writeFileSync(filePath, JSON.stringify(file, null, 2) + '\n', 'utf8');
+}
+/**
+ * Read + validate a baseline file. Throws when the schema banner is
+ * missing or unrecognized — fail fast rather than letting the
+ * matcher consume a malformed file and produce wrong verdicts.
+ */
+function readBaselineFile(filePath) {
+    const raw = fs.readFileSync(filePath, 'utf8');
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`baseline file is not valid JSON: ${filePath} (${err.message})`);
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error(`baseline file root is not an object: ${filePath}`);
+    }
+    const obj = parsed;
+    if (obj.schemaVersion !== exports.BASELINE_SCHEMA_VERSION) {
+        throw new Error(`baseline file schemaVersion is ${JSON.stringify(obj.schemaVersion)}; ` +
+            `this dxkit understands ${JSON.stringify(exports.BASELINE_SCHEMA_VERSION)} only ` +
+            `(${filePath})`);
+    }
+    return parsed;
+}
+//# sourceMappingURL=baseline-file.js.map

package/dist/baseline/baseline-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-file.js","sourceRoot":"","sources":["../../src/baseline/baseline-file.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFH,0CAEC;AAMD,8CAGC;AAOD,4CAoBC;AApHD,uCAAyB;AACzB,2CAA6B;AAI7B;;2CAE2C;AAC9B,QAAA,uBAAuB,GAAG,mBAA4B,CAAC;AAGpE,iEAAiE;AACpD,QAAA,qBAAqB,GAAG,MAAe,CAAC;AA6DrD;yCACyC;AAC5B,QAAA,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAErE,uDAAuD;AACvD,SAAgB,eAAe,CAAC,GAAW,EAAE,IAAY;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,4BAAoB,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,IAAkB;IACpE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,KAAM,GAAa,CAAC,OAAO,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,MAAqC,CAAC;IAClD,IAAI,GAAG,CAAC,aAAa,KAAK,+BAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI;YACrE,0BAA0B,IAAI,CAAC,SAAS,CAAC,+BAAuB,CAAC,QAAQ;YACzE,IAAI,QAAQ,GAAG,CAClB,CAAC;IACJ,CAAC;IACD,OAAO,MAAsB,CAAC;AAChC,CAAC"}

package/dist/baseline/check-renderers.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Output renderers for `vyuh-dxkit guardrail check`.
+ *
+ * Three target surfaces, one shared `GuardrailCheckResult`:
+ *
+ *   - **Console** (`renderConsole`) — human-readable text for
+ *     terminal output. Grouped by verdict (blocking / warning /
+ *     informational), each pair showing status + kind + locator +
+ *     severity + reason chain. Color codes via the shared logger
+ *     palette so output blends with the rest of dxkit's CLI.
+ *
+ *   - **JSON** (`renderJson`) — schema-stable machine-readable
+ *     payload (top-level `schema: 'dxkit.guardrail-check.v1'`).
+ *     Designed for AI agents and CI runners that need to programmatically
+ *     decide what to do. Includes the matcher's per-pair detail,
+ *     classifier verdicts, envelope drift, and the resolved policy.
+ *
+ *   - **Markdown** (`renderMarkdown`) — Phase 4 PR-comment template.
+ *     Compact, table-heavy, status-banner-first. Renders into the
+ *     `dxkit-guardrails.yml` workflow's PR comment unchanged. No
+ *     emojis (bot-friendly; Phase 4 templates can layer presentation
+ *     on top).
+ *
+ * Pure modules. No I/O — callers handle stdout writing, file
+ * writing, or PR-comment posting.
+ */
+import type { EnvelopeDrift, GuardrailCheckResult } from './check';
+import type { BrownfieldPolicy } from './policy';
+import type { FindingStatus, MatchReason } from './types';
+/**
+ * Render the check result as a human-readable text block. Returns a
+ * single multi-line string; callers route it to stdout.
+ */
+export declare function renderConsole(result: GuardrailCheckResult): string;
+export declare const GUARDRAIL_JSON_SCHEMA: "dxkit.guardrail-check.v1";
+/**
+ * Schema-stable machine-readable payload. `schema` at the top level
+ * lets downstream tooling version-gate before reading further fields;
+ * bump it when the shape changes incompatibly.
+ */
+export interface GuardrailJsonPayload {
+    readonly schema: typeof GUARDRAIL_JSON_SCHEMA;
+    readonly verdict: {
+        readonly blocks: boolean;
+        readonly warns: boolean;
+        readonly exitCode: 0 | 1;
+    };
+    readonly baseline: {
+        readonly path: string;
+        readonly name: string;
+        readonly createdAt: string;
+        readonly commitSha: string;
+        readonly branch: string;
+        readonly findingsCount: number;
+    };
+    readonly current: {
+        readonly commitSha: string;
+        readonly branch: string;
+        readonly findingsCount: number;
+    };
+    readonly matcher: {
+        readonly gitAware: boolean;
+        readonly degradedReason?: string;
+    };
+    readonly envelopeDrift: EnvelopeDrift;
+    readonly policy: {
+        readonly mode: BrownfieldPolicy['mode'];
+        readonly block: ReadonlyArray<FindingStatus>;
+        readonly warn: ReadonlyArray<FindingStatus>;
+        readonly confidence: BrownfieldPolicy['confidence'];
+        readonly blockRules: BrownfieldPolicy['blockRules'];
+    };
+    readonly summary: {
+        readonly pairs: number;
+        readonly blocking: number;
+        readonly warning: number;
+        readonly persisted: number;
+        readonly resolved: number;
+    };
+    readonly pairs: ReadonlyArray<{
+        readonly status: FindingStatus;
+        readonly blocks: boolean;
+        readonly warns: boolean;
+        readonly priorId?: string;
+        readonly currentId?: string;
+        readonly confidence: number;
+        readonly kind: string;
+        readonly severity?: string;
+        readonly file?: string;
+        readonly line?: number;
+        readonly overlapsChangedLines?: boolean;
+        readonly reasons: ReadonlyArray<MatchReason>;
+    }>;
+}
+export declare function renderJson(result: GuardrailCheckResult): GuardrailJsonPayload;
+/**
+ * PR-comment-friendly markdown. Phase 4's GitHub Actions workflow
+ * pastes the output verbatim into a PR comment. Format:
+ *
+ *   ## Guardrail: PASSED / BLOCKED
+ *   one-line summary
+ *   <blocking findings table, when any>
+ *   <warnings collapsible section, when any>
+ *   <drift signal callout, when envelope drifted>
+ *   <provenance footnote>
+ */
+export declare function renderMarkdown(result: GuardrailCheckResult): string;
+//# sourceMappingURL=check-renderers.d.ts.map

package/dist/baseline/check-renderers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-renderers.d.ts","sourceRoot":"","sources":["../../src/baseline/check-renderers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAkB,aAAa,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAI1D;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAkFlE;AAkFD,eAAO,MAAM,qBAAqB,EAAG,0BAAmC,CAAC;AAEzE;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,OAAO,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;QAC7C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;QAC5C,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;KACrD,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;QACxC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;KAC9C,CAAC,CAAC;CACJ;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,oBAAoB,CAmE7E;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAiEnE"}

package/dist/baseline/check-renderers.js

@@ -0,0 +1,379 @@
+"use strict";
+/**
+ * Output renderers for `vyuh-dxkit guardrail check`.
+ *
+ * Three target surfaces, one shared `GuardrailCheckResult`:
+ *
+ *   - **Console** (`renderConsole`) — human-readable text for
+ *     terminal output. Grouped by verdict (blocking / warning /
+ *     informational), each pair showing status + kind + locator +
+ *     severity + reason chain. Color codes via the shared logger
+ *     palette so output blends with the rest of dxkit's CLI.
+ *
+ *   - **JSON** (`renderJson`) — schema-stable machine-readable
+ *     payload (top-level `schema: 'dxkit.guardrail-check.v1'`).
+ *     Designed for AI agents and CI runners that need to programmatically
+ *     decide what to do. Includes the matcher's per-pair detail,
+ *     classifier verdicts, envelope drift, and the resolved policy.
+ *
+ *   - **Markdown** (`renderMarkdown`) — Phase 4 PR-comment template.
+ *     Compact, table-heavy, status-banner-first. Renders into the
+ *     `dxkit-guardrails.yml` workflow's PR comment unchanged. No
+ *     emojis (bot-friendly; Phase 4 templates can layer presentation
+ *     on top).
+ *
+ * Pure modules. No I/O — callers handle stdout writing, file
+ * writing, or PR-comment posting.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GUARDRAIL_JSON_SCHEMA = void 0;
+exports.renderConsole = renderConsole;
+exports.renderJson = renderJson;
+exports.renderMarkdown = renderMarkdown;
+const logger = __importStar(require("../logger"));
+// ─── Console renderer ─────────────────────────────────────────────────────
+/**
+ * Render the check result as a human-readable text block. Returns a
+ * single multi-line string; callers route it to stdout.
+ */
+function renderConsole(result) {
+    const lines = [];
+    // Verdict banner. Single line at the top so a developer skimming
+    // terminal output sees pass/fail without scrolling.
+    lines.push(verdictBanner(result));
+    lines.push('');
+    // Provenance: what was compared against what. Inline so the user
+    // can verify they're checking against the intended baseline.
+    lines.push(logger.bold('Baseline'));
+    lines.push(`  Path:        ${result.baselinePath}`);
+    lines.push(`  Name:        ${result.baseline.name}`);
+    lines.push(`  Captured:    ${result.baseline.createdAt}`);
+    lines.push(`  Commit:      ${shortSha(result.baseline.repo.commitSha)} (${result.baseline.repo.branch || 'detached'})`);
+    lines.push(`  Findings:    ${result.baseline.findings.length}`);
+    lines.push('');
+    lines.push(logger.bold('Current'));
+    lines.push(`  Commit:      ${shortSha(result.current.repoState.commitSha)}`);
+    lines.push(`  Findings:    ${result.current.findings.length}`);
+    lines.push(`  Matcher:     ${result.matchResult.gitAware ? 'git-aware' : `degraded (${result.matchResult.degradedReason ?? 'unknown reason'})`}`);
+    lines.push('');
+    const driftLines = formatDrift(result.envelopeDrift);
+    if (driftLines.length > 0) {
+        lines.push(logger.bold('Envelope drift'));
+        for (const l of driftLines)
+            lines.push(`  ${l}`);
+        lines.push('');
+    }
+    // Group + render pairs by verdict bucket. Buckets ordered so the
+    // most actionable surfaces first.
+    const blocking = result.pairs.filter((p) => p.classification.blocks);
+    const warning = result.pairs.filter((p) => !p.classification.blocks && p.classification.warns);
+    const persisted = result.pairs.filter((p) => !p.classification.blocks &&
+        !p.classification.warns &&
+        (p.classification.status === 'persisted' || p.classification.status === 'relocated'));
+    const removed = result.pairs.filter((p) => p.classification.status === 'removed');
+    if (blocking.length > 0) {
+        lines.push(logger.bold(`Blocking (${blocking.length})`));
+        for (const p of blocking)
+            lines.push(...formatPairLines(p, '  '));
+        lines.push('');
+    }
+    if (warning.length > 0) {
+        lines.push(logger.bold(`Warnings (${warning.length})`));
+        for (const p of warning)
+            lines.push(...formatPairLines(p, '  '));
+        lines.push('');
+    }
+    if (removed.length > 0) {
+        lines.push(logger.bold(`Resolved (${removed.length})`));
+        for (const p of removed)
+            lines.push(...formatPairLines(p, '  '));
+        lines.push('');
+    }
+    // Always show a summary footer — sets expectations for what
+    // happens next (exit code, what to read on a fail).
+    lines.push(logger.bold('Summary'));
+    lines.push(`  Pairs:       ${result.pairs.length} (blocking: ${blocking.length}, ` +
+        `warning: ${warning.length}, persisted: ${persisted.length}, ` +
+        `resolved: ${removed.length})`);
+    lines.push(`  Verdict:     ${result.blocks ? 'BLOCKED' : result.warns ? 'PASSED (with warnings)' : 'PASSED'}`);
+    lines.push(`  Exit code:   ${result.blocks ? 1 : 0}`);
+    if (result.blocks) {
+        lines.push('');
+        lines.push(`  Re-run with --json for a machine-readable payload, or --markdown to capture a PR-comment-friendly report.`);
+    }
+    return lines.join('\n');
+}
+function verdictBanner(result) {
+    if (result.blocks) {
+        const count = result.pairs.filter((p) => p.classification.blocks).length;
+        return logger.bold(`Guardrail BLOCKED — ${count} new regression${count === 1 ? '' : 's'}`);
+    }
+    if (result.warns) {
+        const count = result.pairs.filter((p) => p.classification.warns).length;
+        return logger.bold(`Guardrail PASSED — ${count} warning${count === 1 ? '' : 's'}`);
+    }
+    return logger.bold('Guardrail PASSED');
+}
+function formatPairLines(p, indent) {
+    const out = [];
+    const loc = locatorProse(p);
+    const sev = p.severity ? `[${p.severity}]` : '';
+    const conf = p.pair.confidence < 1 ? ` (${p.pair.confidence.toFixed(2)})` : '';
+    out.push(`${indent}${statusLabel(p.classification.status)} ${sev} ${p.kind} ${loc}${conf}`
+        .replace(/\s+/g, ' ')
+        .trim());
+    for (const r of p.classification.reasons) {
+        out.push(`${indent}  · ${r.code}: ${r.detail}`);
+    }
+    return out;
+}
+function statusLabel(status) {
+    switch (status) {
+        case 'added':
+            return 'ADDED';
+        case 'removed':
+            return 'RESOLVED';
+        case 'persisted':
+            return 'PERSISTED';
+        case 'relocated':
+            return 'RELOCATED';
+        case 'tooling_drift':
+            return 'TOOLING-DRIFT';
+        case 'config_drift':
+            return 'CONFIG-DRIFT';
+        case 'newly_detected':
+            return 'NEWLY-DETECTED';
+        case 'probable_existing':
+            return 'PROBABLE-EXISTING';
+        case 'uncertain':
+            return 'UNCERTAIN';
+        case 'fixed':
+            return 'FIXED';
+    }
+}
+function locatorProse(p) {
+    if (p.file === undefined)
+        return '';
+    return p.line !== undefined && p.line > 0 ? `${p.file}:${p.line}` : p.file;
+}
+function shortSha(sha) {
+    if (!sha)
+        return '(no-commit)';
+    return sha.slice(0, 8);
+}
+function formatDrift(drift) {
+    const out = [];
+    if (drift.dxkitVersionChanged)
+        out.push('dxkit version changed since baseline capture');
+    if (drift.toolchainHashChanged)
+        out.push('toolchainHash changed');
+    if (drift.policyHashChanged)
+        out.push('policy hash changed');
+    if (drift.ignoreHashChanged)
+        out.push('.dxkit-ignore changed');
+    if (drift.configHashChanged)
+        out.push('.vyuh-dxkit.json changed');
+    for (const d of drift.toolVersionDiffs) {
+        out.push(`tool drift: ${d.tool} ${d.baselineVersion ?? '(absent)'} → ${d.currentVersion ?? '(absent)'}`);
+    }
+    return out;
+}
+// ─── JSON renderer ────────────────────────────────────────────────────────
+exports.GUARDRAIL_JSON_SCHEMA = 'dxkit.guardrail-check.v1';
+function renderJson(result) {
+    const blocking = result.pairs.filter((p) => p.classification.blocks).length;
+    const warning = result.pairs.filter((p) => !p.classification.blocks && p.classification.warns).length;
+    const persisted = result.pairs.filter((p) => !p.classification.blocks &&
+        !p.classification.warns &&
+        (p.classification.status === 'persisted' || p.classification.status === 'relocated')).length;
+    const resolved = result.pairs.filter((p) => p.classification.status === 'removed').length;
+    return {
+        schema: exports.GUARDRAIL_JSON_SCHEMA,
+        verdict: { blocks: result.blocks, warns: result.warns, exitCode: result.blocks ? 1 : 0 },
+        baseline: {
+            path: result.baselinePath,
+            name: result.baseline.name,
+            createdAt: result.baseline.createdAt,
+            commitSha: result.baseline.repo.commitSha,
+            branch: result.baseline.repo.branch,
+            findingsCount: result.baseline.findings.length,
+        },
+        current: {
+            commitSha: result.current.repoState.commitSha,
+            branch: result.current.repoState.branch,
+            findingsCount: result.current.findings.length,
+        },
+        matcher: {
+            gitAware: result.matchResult.gitAware,
+            ...(result.matchResult.degradedReason
+                ? { degradedReason: result.matchResult.degradedReason }
+                : {}),
+        },
+        envelopeDrift: result.envelopeDrift,
+        policy: {
+            mode: result.policy.mode,
+            block: result.policy.block,
+            warn: result.policy.warn,
+            confidence: result.policy.confidence,
+            blockRules: result.policy.blockRules,
+        },
+        summary: {
+            pairs: result.pairs.length,
+            blocking,
+            warning,
+            persisted,
+            resolved,
+        },
+        pairs: result.pairs.map((p) => ({
+            status: p.classification.status,
+            blocks: p.classification.blocks,
+            warns: p.classification.warns,
+            ...(p.pair.priorId !== undefined ? { priorId: p.pair.priorId } : {}),
+            ...(p.pair.currentId !== undefined ? { currentId: p.pair.currentId } : {}),
+            confidence: p.pair.confidence,
+            kind: p.kind,
+            ...(p.severity !== undefined ? { severity: p.severity } : {}),
+            ...(p.file !== undefined ? { file: p.file } : {}),
+            ...(p.line !== undefined ? { line: p.line } : {}),
+            ...(p.overlapsChangedLines !== undefined
+                ? { overlapsChangedLines: p.overlapsChangedLines }
+                : {}),
+            reasons: p.classification.reasons,
+        })),
+    };
+}
+// ─── Markdown renderer ────────────────────────────────────────────────────
+/**
+ * PR-comment-friendly markdown. Phase 4's GitHub Actions workflow
+ * pastes the output verbatim into a PR comment. Format:
+ *
+ *   ## Guardrail: PASSED / BLOCKED
+ *   one-line summary
+ *   <blocking findings table, when any>
+ *   <warnings collapsible section, when any>
+ *   <drift signal callout, when envelope drifted>
+ *   <provenance footnote>
+ */
+function renderMarkdown(result) {
+    const lines = [];
+    const blocking = result.pairs.filter((p) => p.classification.blocks);
+    const warning = result.pairs.filter((p) => !p.classification.blocks && p.classification.warns);
+    const resolved = result.pairs.filter((p) => p.classification.status === 'removed');
+    const verdict = result.blocks ? 'BLOCKED' : result.warns ? 'PASSED (with warnings)' : 'PASSED';
+    lines.push(`## Guardrail: ${verdict}`);
+    lines.push('');
+    lines.push(summarySentence(result, blocking.length, warning.length, resolved.length));
+    lines.push('');
+    if (blocking.length > 0) {
+        lines.push('### Blocking findings');
+        lines.push('');
+        lines.push('| Status | Kind | Severity | Location | Reason |');
+        lines.push('|---|---|---|---|---|');
+        for (const p of blocking)
+            lines.push(markdownPairRow(p));
+        lines.push('');
+    }
+    if (warning.length > 0) {
+        lines.push('<details>');
+        lines.push(`<summary>Warnings (${warning.length})</summary>`);
+        lines.push('');
+        lines.push('| Status | Kind | Severity | Location | Reason |');
+        lines.push('|---|---|---|---|---|');
+        for (const p of warning)
+            lines.push(markdownPairRow(p));
+        lines.push('');
+        lines.push('</details>');
+        lines.push('');
+    }
+    const driftLines = formatDrift(result.envelopeDrift);
+    if (driftLines.length > 0) {
+        lines.push('### Envelope drift');
+        lines.push('');
+        for (const l of driftLines)
+            lines.push(`- ${l}`);
+        lines.push('');
+    }
+    if (resolved.length > 0) {
+        lines.push('<details>');
+        lines.push(`<summary>Resolved (${resolved.length})</summary>`);
+        lines.push('');
+        lines.push('| Kind | Location |');
+        lines.push('|---|---|');
+        for (const p of resolved) {
+            lines.push(`| ${escapeMd(p.kind)} | ${escapeMd(locatorProse(p) || '—')} |`);
+        }
+        lines.push('');
+        lines.push('</details>');
+        lines.push('');
+    }
+    lines.push('---');
+    lines.push('');
+    lines.push(`_Baseline_: \`${escapeMd(result.baseline.name)}\` @ ${shortSha(result.baseline.repo.commitSha)} · ` +
+        `_Current_: ${shortSha(result.current.repoState.commitSha)} · ` +
+        `_Matcher_: ${result.matchResult.gitAware ? 'git-aware' : 'degraded'} · ` +
+        `_dxkit_: ${escapeMd(result.current.analysisMeta.dxkitVersion)}`);
+    return lines.join('\n');
+}
+function summarySentence(result, blockingCount, warningCount, resolvedCount) {
+    const parts = [];
+    if (blockingCount > 0) {
+        parts.push(`${blockingCount} new regression${blockingCount === 1 ? '' : 's'}`);
+    }
+    if (warningCount > 0)
+        parts.push(`${warningCount} warning${warningCount === 1 ? '' : 's'}`);
+    if (resolvedCount > 0)
+        parts.push(`${resolvedCount} resolved`);
+    if (parts.length === 0) {
+        return `No changes from baseline (${result.pairs.length} pair${result.pairs.length === 1 ? '' : 's'} checked).`;
+    }
+    return parts.join(', ') + '.';
+}
+function markdownPairRow(p) {
+    const status = escapeMd(statusLabel(p.classification.status));
+    const kind = escapeMd(p.kind);
+    const sev = escapeMd(p.severity ?? '—');
+    const loc = escapeMd(locatorProse(p) || '—');
+    const reasonProse = p.classification.reasons.map((r) => `${r.code}: ${r.detail}`).join('; ');
+    return `| ${status} | ${kind} | ${sev} | ${loc} | ${escapeMd(reasonProse) || '—'} |`;
+}
+function escapeMd(s) {
+    // Pipe and backtick are the table-breaking characters; escape only
+    // those to keep the rendered output readable. Backslash-escape
+    // doesn't survive inside table cells in some renderers, so use a
+    // visually-similar replacement for pipes.
+    return s.replace(/\|/g, '\\|').replace(/`/g, "'");
+}
+//# sourceMappingURL=check-renderers.js.map

package/dist/baseline/check-renderers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-renderers.js","sourceRoot":"","sources":["../../src/baseline/check-renderers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaH,sCAkFC;AAgJD,gCAmEC;AAeD,wCAiEC;AAhYD,kDAAoC;AAKpC,6EAA6E;AAE7E;;;GAGG;AACH,SAAgB,aAAa,CAAC,MAA4B;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,iEAAiE;IACjE,oDAAoD;IACpD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,iEAAiE;IACjE,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CACR,kBAAkB,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,GAAG,CAC5G,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,kBAAkB,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CACR,kBAAkB,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,WAAW,CAAC,cAAc,IAAI,gBAAgB,GAAG,EAAE,CACtI,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,iEAAiE;IACjE,kCAAkC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM;QACxB,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK;QACvB,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,WAAW,CAAC,CACvF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,4DAA4D;IAC5D,oDAAoD;IACpD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CACR,kBAAkB,MAAM,CAAC,KAAK,CAAC,MAAM,eAAe,QAAQ,CAAC,MAAM,IAAI;QACrE,YAAY,OAAO,CAAC,MAAM,gBAAgB,SAAS,CAAC,MAAM,IAAI;QAC9D,aAAa,OAAO,CAAC,MAAM,GAAG,CACjC,CAAC;IACF,KAAK,CAAC,IAAI,CACR,kBAAkB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,QAAQ,EAAE,CACnG,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,MAA4B;IACjD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QACzE,OAAO,MAAM,CAAC,IAAI,CAAC,uBAAuB,KAAK,kBAAkB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACxE,OAAO,MAAM,CAAC,IAAI,CAAC,sBAAsB,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,CAAiB,EAAE,MAAc;IACxD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,GAAG,CAAC,IAAI,CACN,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,EAAE;SAC9E,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CACV,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC;QACpB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;QACzB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB,KAAK,gBAAgB;YACnB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,mBAAmB;YACtB,OAAO,mBAAmB,CAAC;QAC7B,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAiB;IACrC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,aAAa,CAAC;IAC/B,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,mBAAmB;QAAE,GAAG,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACxF,IAAI,KAAK,CAAC,oBAAoB;QAAE,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CACN,eAAe,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,eAAe,IAAI,UAAU,MAAM,CAAC,CAAC,cAAc,IAAI,UAAU,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6EAA6E;AAEhE,QAAA,qBAAqB,GAAG,0BAAmC,CAAC;AA8DzE,SAAgB,UAAU,CAAC,MAA4B;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,CAC1D,CAAC,MAAM,CAAC;IACT,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM;QACxB,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK;QACvB,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,WAAW,CAAC,CACvF,CAAC,MAAM,CAAC;IACT,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAE1F,OAAO;QACL,MAAM,EAAE,6BAAqB;QAC7B,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QACxF,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,YAAY;YACzB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;YAC1B,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;YACpC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS;YACzC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM;YACnC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;SAC/C;QACD,OAAO,EAAE;YACP,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS;YAC7C,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;YACvC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM;SAC9C;QACD,OAAO,EAAE;YACP,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ;YACrC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc;gBACnC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE;gBACvD,CAAC,CAAC,EAAE,CAAC;SACR;QACD,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;YACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;SACrC;QACD,OAAO,EAAE;YACP,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAC1B,QAAQ;YACR,OAAO;YACP,SAAS;YACT,QAAQ;SACT;QACD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,MAAM,EAAE,CAAC,CAAC,cAAc,CAAC,MAAM;YAC/B,MAAM,EAAE,CAAC,CAAC,cAAc,CAAC,MAAM;YAC/B,KAAK,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK;YAC7B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU;YAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,oBAAoB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC,OAAO;SAClC,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;;GAUG;AACH,SAAgB,cAAc,CAAC,MAA4B;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/F,KAAK,CAAC,IAAI,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,MAAM,aAAa,CAAC,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,iBAAiB,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK;QAClG,cAAc,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK;QAC/D,cAAc,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,KAAK;QACzE,YAAY,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CACnE,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CACtB,MAA4B,EAC5B,aAAqB,EACrB,YAAoB,EACpB,aAAqB;IAErB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,kBAAkB,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,YAAY,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,IAAI,aAAa,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,WAAW,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,6BAA6B,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;IAClH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,CAAiB;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7F,OAAO,KAAK,MAAM,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC;AACvF,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,mEAAmE;IACnE,+DAA+D;IAC/D,iEAAiE;IACjE,0CAA0C;IAC1C,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC"}