@vyuhlabs/dxkit 2.4.8 → 2.5.1

package/dist/baseline/check-renderers.js

@@ -0,0 +1,379 @@
+"use strict";
+/**
+ * Output renderers for `vyuh-dxkit guardrail check`.
+ *
+ * Three target surfaces, one shared `GuardrailCheckResult`:
+ *
+ *   - **Console** (`renderConsole`) — human-readable text for
+ *     terminal output. Grouped by verdict (blocking / warning /
+ *     informational), each pair showing status + kind + locator +
+ *     severity + reason chain. Color codes via the shared logger
+ *     palette so output blends with the rest of dxkit's CLI.
+ *
+ *   - **JSON** (`renderJson`) — schema-stable machine-readable
+ *     payload (top-level `schema: 'dxkit.guardrail-check.v1'`).
+ *     Designed for AI agents and CI runners that need to programmatically
+ *     decide what to do. Includes the matcher's per-pair detail,
+ *     classifier verdicts, envelope drift, and the resolved policy.
+ *
+ *   - **Markdown** (`renderMarkdown`) — Phase 4 PR-comment template.
+ *     Compact, table-heavy, status-banner-first. Renders into the
+ *     `dxkit-guardrails.yml` workflow's PR comment unchanged. No
+ *     emojis (bot-friendly; Phase 4 templates can layer presentation
+ *     on top).
+ *
+ * Pure modules. No I/O — callers handle stdout writing, file
+ * writing, or PR-comment posting.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GUARDRAIL_JSON_SCHEMA = void 0;
+exports.renderConsole = renderConsole;
+exports.renderJson = renderJson;
+exports.renderMarkdown = renderMarkdown;
+const logger = __importStar(require("../logger"));
+// ─── Console renderer ─────────────────────────────────────────────────────
+/**
+ * Render the check result as a human-readable text block. Returns a
+ * single multi-line string; callers route it to stdout.
+ */
+function renderConsole(result) {
+    const lines = [];
+    // Verdict banner. Single line at the top so a developer skimming
+    // terminal output sees pass/fail without scrolling.
+    lines.push(verdictBanner(result));
+    lines.push('');
+    // Provenance: what was compared against what. Inline so the user
+    // can verify they're checking against the intended baseline.
+    lines.push(logger.bold('Baseline'));
+    lines.push(`  Path:        ${result.baselinePath}`);
+    lines.push(`  Name:        ${result.baseline.name}`);
+    lines.push(`  Captured:    ${result.baseline.createdAt}`);
+    lines.push(`  Commit:      ${shortSha(result.baseline.repo.commitSha)} (${result.baseline.repo.branch || 'detached'})`);
+    lines.push(`  Findings:    ${result.baseline.findings.length}`);
+    lines.push('');
+    lines.push(logger.bold('Current'));
+    lines.push(`  Commit:      ${shortSha(result.current.repoState.commitSha)}`);
+    lines.push(`  Findings:    ${result.current.findings.length}`);
+    lines.push(`  Matcher:     ${result.matchResult.gitAware ? 'git-aware' : `degraded (${result.matchResult.degradedReason ?? 'unknown reason'})`}`);
+    lines.push('');
+    const driftLines = formatDrift(result.envelopeDrift);
+    if (driftLines.length > 0) {
+        lines.push(logger.bold('Envelope drift'));
+        for (const l of driftLines)
+            lines.push(`  ${l}`);
+        lines.push('');
+    }
+    // Group + render pairs by verdict bucket. Buckets ordered so the
+    // most actionable surfaces first.
+    const blocking = result.pairs.filter((p) => p.classification.blocks);
+    const warning = result.pairs.filter((p) => !p.classification.blocks && p.classification.warns);
+    const persisted = result.pairs.filter((p) => !p.classification.blocks &&
+        !p.classification.warns &&
+        (p.classification.status === 'persisted' || p.classification.status === 'relocated'));
+    const removed = result.pairs.filter((p) => p.classification.status === 'removed');
+    if (blocking.length > 0) {
+        lines.push(logger.bold(`Blocking (${blocking.length})`));
+        for (const p of blocking)
+            lines.push(...formatPairLines(p, '  '));
+        lines.push('');
+    }
+    if (warning.length > 0) {
+        lines.push(logger.bold(`Warnings (${warning.length})`));
+        for (const p of warning)
+            lines.push(...formatPairLines(p, '  '));
+        lines.push('');
+    }
+    if (removed.length > 0) {
+        lines.push(logger.bold(`Resolved (${removed.length})`));
+        for (const p of removed)
+            lines.push(...formatPairLines(p, '  '));
+        lines.push('');
+    }
+    // Always show a summary footer — sets expectations for what
+    // happens next (exit code, what to read on a fail).
+    lines.push(logger.bold('Summary'));
+    lines.push(`  Pairs:       ${result.pairs.length} (blocking: ${blocking.length}, ` +
+        `warning: ${warning.length}, persisted: ${persisted.length}, ` +
+        `resolved: ${removed.length})`);
+    lines.push(`  Verdict:     ${result.blocks ? 'BLOCKED' : result.warns ? 'PASSED (with warnings)' : 'PASSED'}`);
+    lines.push(`  Exit code:   ${result.blocks ? 1 : 0}`);
+    if (result.blocks) {
+        lines.push('');
+        lines.push(`  Re-run with --json for a machine-readable payload, or --markdown to capture a PR-comment-friendly report.`);
+    }
+    return lines.join('\n');
+}
+function verdictBanner(result) {
+    if (result.blocks) {
+        const count = result.pairs.filter((p) => p.classification.blocks).length;
+        return logger.bold(`Guardrail BLOCKED — ${count} new regression${count === 1 ? '' : 's'}`);
+    }
+    if (result.warns) {
+        const count = result.pairs.filter((p) => p.classification.warns).length;
+        return logger.bold(`Guardrail PASSED — ${count} warning${count === 1 ? '' : 's'}`);
+    }
+    return logger.bold('Guardrail PASSED');
+}
+function formatPairLines(p, indent) {
+    const out = [];
+    const loc = locatorProse(p);
+    const sev = p.severity ? `[${p.severity}]` : '';
+    const conf = p.pair.confidence < 1 ? ` (${p.pair.confidence.toFixed(2)})` : '';
+    out.push(`${indent}${statusLabel(p.classification.status)} ${sev} ${p.kind} ${loc}${conf}`
+        .replace(/\s+/g, ' ')
+        .trim());
+    for (const r of p.classification.reasons) {
+        out.push(`${indent}  · ${r.code}: ${r.detail}`);
+    }
+    return out;
+}
+function statusLabel(status) {
+    switch (status) {
+        case 'added':
+            return 'ADDED';
+        case 'removed':
+            return 'RESOLVED';
+        case 'persisted':
+            return 'PERSISTED';
+        case 'relocated':
+            return 'RELOCATED';
+        case 'tooling_drift':
+            return 'TOOLING-DRIFT';
+        case 'config_drift':
+            return 'CONFIG-DRIFT';
+        case 'newly_detected':
+            return 'NEWLY-DETECTED';
+        case 'probable_existing':
+            return 'PROBABLE-EXISTING';
+        case 'uncertain':
+            return 'UNCERTAIN';
+        case 'fixed':
+            return 'FIXED';
+    }
+}
+function locatorProse(p) {
+    if (p.file === undefined)
+        return '';
+    return p.line !== undefined && p.line > 0 ? `${p.file}:${p.line}` : p.file;
+}
+function shortSha(sha) {
+    if (!sha)
+        return '(no-commit)';
+    return sha.slice(0, 8);
+}
+function formatDrift(drift) {
+    const out = [];
+    if (drift.dxkitVersionChanged)
+        out.push('dxkit version changed since baseline capture');
+    if (drift.toolchainHashChanged)
+        out.push('toolchainHash changed');
+    if (drift.policyHashChanged)
+        out.push('policy hash changed');
+    if (drift.ignoreHashChanged)
+        out.push('.dxkit-ignore changed');
+    if (drift.configHashChanged)
+        out.push('.vyuh-dxkit.json changed');
+    for (const d of drift.toolVersionDiffs) {
+        out.push(`tool drift: ${d.tool} ${d.baselineVersion ?? '(absent)'} → ${d.currentVersion ?? '(absent)'}`);
+    }
+    return out;
+}
+// ─── JSON renderer ────────────────────────────────────────────────────────
+exports.GUARDRAIL_JSON_SCHEMA = 'dxkit.guardrail-check.v1';
+function renderJson(result) {
+    const blocking = result.pairs.filter((p) => p.classification.blocks).length;
+    const warning = result.pairs.filter((p) => !p.classification.blocks && p.classification.warns).length;
+    const persisted = result.pairs.filter((p) => !p.classification.blocks &&
+        !p.classification.warns &&
+        (p.classification.status === 'persisted' || p.classification.status === 'relocated')).length;
+    const resolved = result.pairs.filter((p) => p.classification.status === 'removed').length;
+    return {
+        schema: exports.GUARDRAIL_JSON_SCHEMA,
+        verdict: { blocks: result.blocks, warns: result.warns, exitCode: result.blocks ? 1 : 0 },
+        baseline: {
+            path: result.baselinePath,
+            name: result.baseline.name,
+            createdAt: result.baseline.createdAt,
+            commitSha: result.baseline.repo.commitSha,
+            branch: result.baseline.repo.branch,
+            findingsCount: result.baseline.findings.length,
+        },
+        current: {
+            commitSha: result.current.repoState.commitSha,
+            branch: result.current.repoState.branch,
+            findingsCount: result.current.findings.length,
+        },
+        matcher: {
+            gitAware: result.matchResult.gitAware,
+            ...(result.matchResult.degradedReason
+                ? { degradedReason: result.matchResult.degradedReason }
+                : {}),
+        },
+        envelopeDrift: result.envelopeDrift,
+        policy: {
+            mode: result.policy.mode,
+            block: result.policy.block,
+            warn: result.policy.warn,
+            confidence: result.policy.confidence,
+            blockRules: result.policy.blockRules,
+        },
+        summary: {
+            pairs: result.pairs.length,
+            blocking,
+            warning,
+            persisted,
+            resolved,
+        },
+        pairs: result.pairs.map((p) => ({
+            status: p.classification.status,
+            blocks: p.classification.blocks,
+            warns: p.classification.warns,
+            ...(p.pair.priorId !== undefined ? { priorId: p.pair.priorId } : {}),
+            ...(p.pair.currentId !== undefined ? { currentId: p.pair.currentId } : {}),
+            confidence: p.pair.confidence,
+            kind: p.kind,
+            ...(p.severity !== undefined ? { severity: p.severity } : {}),
+            ...(p.file !== undefined ? { file: p.file } : {}),
+            ...(p.line !== undefined ? { line: p.line } : {}),
+            ...(p.overlapsChangedLines !== undefined
+                ? { overlapsChangedLines: p.overlapsChangedLines }
+                : {}),
+            reasons: p.classification.reasons,
+        })),
+    };
+}
+// ─── Markdown renderer ────────────────────────────────────────────────────
+/**
+ * PR-comment-friendly markdown. Phase 4's GitHub Actions workflow
+ * pastes the output verbatim into a PR comment. Format:
+ *
+ *   ## Guardrail: PASSED / BLOCKED
+ *   one-line summary
+ *   <blocking findings table, when any>
+ *   <warnings collapsible section, when any>
+ *   <drift signal callout, when envelope drifted>
+ *   <provenance footnote>
+ */
+function renderMarkdown(result) {
+    const lines = [];
+    const blocking = result.pairs.filter((p) => p.classification.blocks);
+    const warning = result.pairs.filter((p) => !p.classification.blocks && p.classification.warns);
+    const resolved = result.pairs.filter((p) => p.classification.status === 'removed');
+    const verdict = result.blocks ? 'BLOCKED' : result.warns ? 'PASSED (with warnings)' : 'PASSED';
+    lines.push(`## Guardrail: ${verdict}`);
+    lines.push('');
+    lines.push(summarySentence(result, blocking.length, warning.length, resolved.length));
+    lines.push('');
+    if (blocking.length > 0) {
+        lines.push('### Blocking findings');
+        lines.push('');
+        lines.push('| Status | Kind | Severity | Location | Reason |');
+        lines.push('|---|---|---|---|---|');
+        for (const p of blocking)
+            lines.push(markdownPairRow(p));
+        lines.push('');
+    }
+    if (warning.length > 0) {
+        lines.push('<details>');
+        lines.push(`<summary>Warnings (${warning.length})</summary>`);
+        lines.push('');
+        lines.push('| Status | Kind | Severity | Location | Reason |');
+        lines.push('|---|---|---|---|---|');
+        for (const p of warning)
+            lines.push(markdownPairRow(p));
+        lines.push('');
+        lines.push('</details>');
+        lines.push('');
+    }
+    const driftLines = formatDrift(result.envelopeDrift);
+    if (driftLines.length > 0) {
+        lines.push('### Envelope drift');
+        lines.push('');
+        for (const l of driftLines)
+            lines.push(`- ${l}`);
+        lines.push('');
+    }
+    if (resolved.length > 0) {
+        lines.push('<details>');
+        lines.push(`<summary>Resolved (${resolved.length})</summary>`);
+        lines.push('');
+        lines.push('| Kind | Location |');
+        lines.push('|---|---|');
+        for (const p of resolved) {
+            lines.push(`| ${escapeMd(p.kind)} | ${escapeMd(locatorProse(p) || '—')} |`);
+        }
+        lines.push('');
+        lines.push('</details>');
+        lines.push('');
+    }
+    lines.push('---');
+    lines.push('');
+    lines.push(`_Baseline_: \`${escapeMd(result.baseline.name)}\` @ ${shortSha(result.baseline.repo.commitSha)} · ` +
+        `_Current_: ${shortSha(result.current.repoState.commitSha)} · ` +
+        `_Matcher_: ${result.matchResult.gitAware ? 'git-aware' : 'degraded'} · ` +
+        `_dxkit_: ${escapeMd(result.current.analysisMeta.dxkitVersion)}`);
+    return lines.join('\n');
+}
+function summarySentence(result, blockingCount, warningCount, resolvedCount) {
+    const parts = [];
+    if (blockingCount > 0) {
+        parts.push(`${blockingCount} new regression${blockingCount === 1 ? '' : 's'}`);
+    }
+    if (warningCount > 0)
+        parts.push(`${warningCount} warning${warningCount === 1 ? '' : 's'}`);
+    if (resolvedCount > 0)
+        parts.push(`${resolvedCount} resolved`);
+    if (parts.length === 0) {
+        return `No changes from baseline (${result.pairs.length} pair${result.pairs.length === 1 ? '' : 's'} checked).`;
+    }
+    return parts.join(', ') + '.';
+}
+function markdownPairRow(p) {
+    const status = escapeMd(statusLabel(p.classification.status));
+    const kind = escapeMd(p.kind);
+    const sev = escapeMd(p.severity ?? '—');
+    const loc = escapeMd(locatorProse(p) || '—');
+    const reasonProse = p.classification.reasons.map((r) => `${r.code}: ${r.detail}`).join('; ');
+    return `| ${status} | ${kind} | ${sev} | ${loc} | ${escapeMd(reasonProse) || '—'} |`;
+}
+function escapeMd(s) {
+    // Pipe and backtick are the table-breaking characters; escape only
+    // those to keep the rendered output readable. Backslash-escape
+    // doesn't survive inside table cells in some renderers, so use a
+    // visually-similar replacement for pipes.
+    return s.replace(/\|/g, '\\|').replace(/`/g, "'");
+}
+//# sourceMappingURL=check-renderers.js.map

package/dist/baseline/check-renderers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-renderers.js","sourceRoot":"","sources":["../../src/baseline/check-renderers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaH,sCAkFC;AAgJD,gCAmEC;AAeD,wCAiEC;AAhYD,kDAAoC;AAKpC,6EAA6E;AAE7E;;;GAGG;AACH,SAAgB,aAAa,CAAC,MAA4B;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,iEAAiE;IACjE,oDAAoD;IACpD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,iEAAiE;IACjE,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CACR,kBAAkB,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,GAAG,CAC5G,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,kBAAkB,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CACR,kBAAkB,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,WAAW,CAAC,cAAc,IAAI,gBAAgB,GAAG,EAAE,CACtI,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,iEAAiE;IACjE,kCAAkC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM;QACxB,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK;QACvB,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,WAAW,CAAC,CACvF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,4DAA4D;IAC5D,oDAAoD;IACpD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CACR,kBAAkB,MAAM,CAAC,KAAK,CAAC,MAAM,eAAe,QAAQ,CAAC,MAAM,IAAI;QACrE,YAAY,OAAO,CAAC,MAAM,gBAAgB,SAAS,CAAC,MAAM,IAAI;QAC9D,aAAa,OAAO,CAAC,MAAM,GAAG,CACjC,CAAC;IACF,KAAK,CAAC,IAAI,CACR,kBAAkB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,QAAQ,EAAE,CACnG,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,MAA4B;IACjD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QACzE,OAAO,MAAM,CAAC,IAAI,CAAC,uBAAuB,KAAK,kBAAkB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACxE,OAAO,MAAM,CAAC,IAAI,CAAC,sBAAsB,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,CAAiB,EAAE,MAAc;IACxD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,GAAG,CAAC,IAAI,CACN,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,EAAE;SAC9E,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CACV,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC;QACpB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;QACzB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB,KAAK,gBAAgB;YACnB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,mBAAmB;YACtB,OAAO,mBAAmB,CAAC;QAC7B,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAiB;IACrC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,aAAa,CAAC;IAC/B,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,mBAAmB;QAAE,GAAG,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACxF,IAAI,KAAK,CAAC,oBAAoB;QAAE,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CACN,eAAe,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,eAAe,IAAI,UAAU,MAAM,CAAC,CAAC,cAAc,IAAI,UAAU,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6EAA6E;AAEhE,QAAA,qBAAqB,GAAG,0BAAmC,CAAC;AA8DzE,SAAgB,UAAU,CAAC,MAA4B;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,CAC1D,CAAC,MAAM,CAAC;IACT,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM;QACxB,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK;QACvB,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,WAAW,CAAC,CACvF,CAAC,MAAM,CAAC;IACT,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAE1F,OAAO;QACL,MAAM,EAAE,6BAAqB;QAC7B,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QACxF,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,YAAY;YACzB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;YAC1B,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;YACpC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS;YACzC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM;YACnC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;SAC/C;QACD,OAAO,EAAE;YACP,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS;YAC7C,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;YACvC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM;SAC9C;QACD,OAAO,EAAE;YACP,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ;YACrC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc;gBACnC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE;gBACvD,CAAC,CAAC,EAAE,CAAC;SACR;QACD,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;YACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;SACrC;QACD,OAAO,EAAE;YACP,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAC1B,QAAQ;YACR,OAAO;YACP,SAAS;YACT,QAAQ;SACT;QACD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,MAAM,EAAE,CAAC,CAAC,cAAc,CAAC,MAAM;YAC/B,MAAM,EAAE,CAAC,CAAC,cAAc,CAAC,MAAM;YAC/B,KAAK,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK;YAC7B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU;YAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,oBAAoB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC,OAAO;SAClC,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;;GAUG;AACH,SAAgB,cAAc,CAAC,MAA4B;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/F,KAAK,CAAC,IAAI,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,MAAM,aAAa,CAAC,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,iBAAiB,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK;QAClG,cAAc,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK;QAC/D,cAAc,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,KAAK;QACzE,YAAY,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CACnE,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CACtB,MAA4B,EAC5B,aAAqB,EACrB,YAAoB,EACpB,aAAqB;IAErB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,kBAAkB,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,YAAY,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,IAAI,aAAa,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,WAAW,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,6BAA6B,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;IAClH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,CAAiB;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7F,OAAO,KAAK,MAAM,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC;AACvF,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,mEAAmE;IACnE,+DAA+D;IAC/D,iEAAiE;IACjE,0CAA0C;IAC1C,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC"}

package/dist/baseline/check.d.ts

@@ -0,0 +1,127 @@
+/**
+ * `dxkit guardrail check` orchestrator.
+ *
+ * The matcher (`gitAwareMatch`) and classifier (`classify`) are pure
+ * modules that already exist. This file wires them together with the
+ * baseline file format, the producer pipeline, and the per-pair
+ * context lookups (severity, drift signals, changed-line overlap)
+ * the classifier needs to make policy decisions.
+ *
+ * Pipeline:
+ *
+ *   1. Load the prior baseline file.
+ *   2. Re-run every analyzer (via `gatherCurrentScan`) to produce the
+ *      current side of the diff.
+ *   3. Convert both sides to `LocatedIdentity[]` and run the
+ *      git-aware matcher.
+ *   4. Build per-pair classify context:
+ *        - severity from the current security aggregate or per-kind
+ *          defaults
+ *        - kind from the matched BaselineEntry
+ *        - scannerVersionDiffers from per-kind tool version compare
+ *        - configDiffers from envelope hash compare
+ *        - overlapsChangedLines from `git diff base..HEAD` hunks
+ *          intersected with the finding's line
+ *   5. Run the brownfield policy classifier over every pair.
+ *   6. Optionally filter via `--changed-only`: drop pairs whose
+ *      locator falls outside the diff. Non-locator pairs (dep-vuln,
+ *      license, duplication, etc.) are always kept — their
+ *      "semantic" identity doesn't map cleanly to changed lines.
+ *   7. Compose a `GuardrailCheckResult` with a deterministic
+ *      blocks/warns verdict so the CLI can pick exit code + render.
+ *
+ * Drift signals come from comparing the baseline's `analysis` /
+ * `tools` envelope against the freshly-gathered envelope. Per-kind
+ * tool attribution uses the current run's `SecurityAggregate.provenance`
+ * — the cleaner alternative to a hardcoded kind→tool table.
+ */
+import type { CurrentScan } from './create';
+import type { BaselineFile } from './baseline-file';
+import type { BrownfieldPolicy, ClassifyResult } from './policy';
+import type { BaselineEntry, FindingSeverity, MatchPair, MatchResult } from './types';
+export interface RunGuardrailCheckOptions {
+    /** Repo root being checked. Caller should pass an absolute path. */
+    readonly cwd: string;
+    /** Baseline name to read from `.dxkit/baselines/<name>.json`.
+     *  Defaults to `'main'`. */
+    readonly name?: string;
+    /** Explicit baseline file path. Overrides `name` when supplied —
+     *  lets callers diff against a baseline stored outside the default
+     *  directory (e.g. an artifact downloaded from CI). */
+    readonly baselinePath?: string;
+    /** When true, drop pairs whose locator falls outside the diff.
+     *  Non-locator findings (dep-vuln, license, duplication, etc.) are
+     *  always kept. */
+    readonly changedOnly?: boolean;
+    /** Path to a `.dxkit/policy.json` override. The on-disk shape
+     *  matches `BrownfieldPolicy` (modulo readonly markers); unknown
+     *  fields are preserved but not type-checked here — the policy
+     *  classifier reads only the fields it knows. When omitted, a
+     *  `<cwd>/.dxkit/policy.json` is auto-loaded if it exists; otherwise
+     *  the compiled-in defaults apply. */
+    readonly policyPath?: string;
+    /** Forwarded to the underlying analyzers for per-tool timing logs. */
+    readonly verbose?: boolean;
+}
+/**
+ * Per-pair entry the CLI renderers consume. Carries the raw
+ * `MatchPair`, the classifier verdict, and enough context to render
+ * a meaningful diagnostic (which side the entry lives on, kind,
+ * severity, file/line locator).
+ */
+export interface ClassifiedPair {
+    readonly pair: MatchPair;
+    readonly classification: ClassifyResult;
+    /** Resolved severity (or undefined when the pair has no current-
+     *  side entry to attribute to — `removed` pairs typically). */
+    readonly severity?: FindingSeverity;
+    /** Kind of the pair's anchor entry (prior for `removed`, current
+     *  for everything else). */
+    readonly kind: BaselineEntry['kind'];
+    /** Locator info for renderers — populated when the anchor entry
+     *  carries `file` / `line`. */
+    readonly file?: string;
+    readonly line?: number;
+    /** True when the anchor entry's line falls inside the diff
+     *  between baseline and HEAD. Undefined when the pair has no
+     *  line locator (dep-vuln, license, etc.) or when git history
+     *  isn't reachable. Drives `--changed-only` filtering and the
+     *  `newSevereQualityIssueInChangedFiles` / `newUntestedChangedSource`
+     *  block rules. */
+    readonly overlapsChangedLines?: boolean;
+}
+export interface EnvelopeDrift {
+    readonly toolchainHashChanged: boolean;
+    readonly policyHashChanged: boolean;
+    readonly ignoreHashChanged: boolean;
+    readonly configHashChanged: boolean;
+    readonly dxkitVersionChanged: boolean;
+    /** Per-tool version drift. Empty when `tools` maps agree. */
+    readonly toolVersionDiffs: ReadonlyArray<{
+        readonly tool: string;
+        readonly baselineVersion: string | undefined;
+        readonly currentVersion: string | undefined;
+    }>;
+}
+export interface GuardrailCheckResult {
+    readonly baselinePath: string;
+    readonly baseline: BaselineFile;
+    readonly current: CurrentScan;
+    readonly matchResult: MatchResult;
+    readonly pairs: ReadonlyArray<ClassifiedPair>;
+    readonly envelopeDrift: EnvelopeDrift;
+    readonly policy: BrownfieldPolicy;
+    /** True when at least one classified pair blocks. The CLI maps
+     *  this to exit code 1. */
+    readonly blocks: boolean;
+    /** True when at least one pair warns. Informational; doesn't
+     *  affect exit code by itself. */
+    readonly warns: boolean;
+}
+/**
+ * Run the guardrail-check pipeline. Pure-orchestrator: loads the
+ * baseline, gathers current state, runs the matcher + classifier,
+ * and returns a structured result. Renderers + CLI are downstream.
+ */
+export declare function runGuardrailCheck(options: RunGuardrailCheckOptions): Promise<GuardrailCheckResult>;
+//# sourceMappingURL=check.d.ts.map

package/dist/baseline/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/baseline/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAKpD,OAAO,KAAK,EAAE,gBAAgB,EAAmB,cAAc,EAAE,MAAM,UAAU,CAAC;AAClF,OAAO,KAAK,EAAE,aAAa,EAAa,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGjG,MAAM,WAAW,wBAAwB;IACvC,oEAAoE;IACpE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;gCAC4B;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;2DAEuD;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;uBAEmB;IACnB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;0CAKsC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC;mEAC+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC;gCAC4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC;mCAC+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;uBAKmB;IACnB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,6DAA6D;IAC7D,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC;QACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;KAC7C,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC;+BAC2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;sCACkC;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAoBD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,oBAAoB,CAAC,CA+H/B"}