@xenos1996/usat 1.0.0

package/dist/cli.js

@@ -0,0 +1,438 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { runAudit } from './engine/audit.js';
+import { loadRulePacks } from './engine/loader.js';
+import { loadDetectorFile } from './detect/index.js';
+import { Project } from './util/project.js';
+import { detect } from './detect/index.js';
+import { renderMarkdown, parseTrailer } from './report/markdown.js';
+import { diffReports } from './engine/diff.js';
+import { EXAMPLE_CONFIG, loadConfig } from './config.js';
+import { evaluateGate } from './engine/gate.js';
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+const DEFAULT_RULES_DIR = path.resolve(HERE, '..', 'rules');
+const VERSION = readVersion();
+const SEVERITY_ORDER = ['CRITICAL', 'HIGH', 'MEDIUM', 'LOW', 'FUTURE'];
+const DEPTHS = ['quick', 'standard', 'deep'];
+const MATURITIES = ['prototype', 'mvp', 'beta', 'production', 'legacy'];
+function parseArgs(argv) {
+    const args = { _: [] };
+    for (let i = 0; i < argv.length; i++) {
+        const tok = argv[i];
+        if (!tok.startsWith('--')) {
+            args._.push(tok);
+            continue;
+        }
+        const body = tok.slice(2);
+        if (body.includes('=')) {
+            const [k, ...rest] = body.split('=');
+            args[k] = rest.join('=');
+            continue;
+        }
+        const next = argv[i + 1];
+        if (next === undefined || next.startsWith('--')) {
+            args[body] = true;
+        }
+        else {
+            args[body] = next;
+            i++;
+        }
+    }
+    return args;
+}
+function str(args, key, fallback) {
+    const v = args[key];
+    return typeof v === 'string' ? v : fallback;
+}
+function bool(args, key) {
+    return args[key] === true || args[key] === 'true';
+}
+function list(args, key) {
+    const v = args[key];
+    if (Array.isArray(v))
+        return v;
+    if (typeof v === 'string')
+        return v
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean);
+    return [];
+}
+/* -------------------------------------------------------------------- main -- */
+const COMMANDS = {
+    audit: cmdAudit,
+    detect: cmdDetect,
+    rules: cmdRules,
+    explain: cmdExplain,
+    diff: cmdDiff,
+    init: cmdInit,
+};
+export function main(argv) {
+    const args = parseArgs(argv);
+    // GNU-style flags never reach `_` (the parser files them under flags), so
+    // check them before the command dispatch: without this, `usat --help`
+    // falls through to the default `audit` command and audits the tree
+    // instead of printing help. The `version`/`--version` cases below exist
+    // for the positional forms (`usat version`); the flags are handled here.
+    if (bool(args, 'help')) {
+        console.log(HELP);
+        return 0;
+    }
+    if (bool(args, 'version')) {
+        console.log(`usat ${VERSION}`);
+        return 0;
+    }
+    const cmd = (args._[0] ?? 'audit');
+    const run = COMMANDS[cmd];
+    if (run)
+        return run(args);
+    switch (cmd) {
+        case 'version':
+        case '--version':
+            console.log(`usat ${VERSION}`);
+            return 0;
+        case 'help':
+        case '--help':
+        case '-h':
+            console.log(HELP);
+            return 0;
+        default:
+            console.error(`Unknown command: ${cmd}\n`);
+            console.error(HELP);
+            return 2;
+    }
+}
+function readAuditOptions(args) {
+    return {
+        target: args._[1] ?? '.',
+        rulesDir: path.resolve(str(args, 'rules-dir', DEFAULT_RULES_DIR) ?? DEFAULT_RULES_DIR),
+        depth: str(args, 'depth', 'standard') ?? 'standard',
+        profileArg: str(args, 'profile', 'auto') ?? 'auto',
+        out: str(args, 'out', 'AUDIT.md') ?? 'AUDIT.md',
+        failOn: (str(args, 'fail-on', 'none') ?? 'none').toLowerCase(),
+        quiet: bool(args, 'quiet'),
+    };
+}
+function validateAuditOptions(o) {
+    if (!DEPTHS.includes(o.depth))
+        return `--depth must be one of ${DEPTHS.join('|')}`;
+    if (o.profileArg !== 'auto' && !MATURITIES.includes(o.profileArg)) {
+        return `--profile must be auto or one of ${MATURITIES.join('|')}`;
+    }
+    return null;
+}
+function cmdAudit(args) {
+    const o = readAuditOptions(args);
+    const invalid = validateAuditOptions(o);
+    if (invalid) {
+        console.error(invalid);
+        return 2;
+    }
+    if (!fs.existsSync(o.target)) {
+        console.error(`Target path does not exist: ${o.target}`);
+        return 2;
+    }
+    let config;
+    try {
+        config = loadConfig(o.target, str(args, 'config'));
+    }
+    catch (err) {
+        console.error(err.message);
+        return 2;
+    }
+    if (config.facts)
+        config.facts = [...config.facts, ...list(args, 'fact')];
+    const { report, warnings, profile } = runAudit({
+        target: o.target,
+        rulesDir: o.rulesDir,
+        depth: o.depth,
+        profile: o.profileArg,
+        config,
+        allowCommands: bool(args, 'allow-commands'),
+        usatVersion: VERSION,
+        includePacks: list(args, 'include'),
+        excludePacks: list(args, 'exclude'),
+    });
+    for (const w of warnings)
+        console.error(`warning: ${w}`);
+    const markdown = renderMarkdown(report, profile);
+    fs.writeFileSync(o.out, markdown, 'utf8');
+    if (!o.quiet) {
+        console.log(summaryLine(report));
+        console.log(`  report → ${o.out}`);
+    }
+    return evaluateGate(report, o.failOn, o.quiet);
+}
+function summaryLine(report) {
+    const s = report.score.severityCounts;
+    const parts = SEVERITY_ORDER.filter((k) => s[k] > 0)
+        .map((k) => `${k.toLowerCase()} ${s[k]}`)
+        .join(' · ');
+    return (`usat ${report.score.overall}/100 (${report.detection.maturity}) — ` +
+        `${report.score.counts.PASS} passed, ` +
+        (parts ? `open: ${parts}` : 'no open findings') +
+        `, ${report.score.counts.UNKNOWN} to review` +
+        ` (${report.score.automationCoverage}% verified automatically)`);
+}
+/* ----------------------------------------------------------------- detect -- */
+function cmdDetect(args) {
+    const target = args._[1] ?? '.';
+    const rulesDir = path.resolve(str(args, 'rules-dir', DEFAULT_RULES_DIR) ?? DEFAULT_RULES_DIR);
+    const config = loadConfig(target, str(args, 'config'));
+    // Honour `ignore:`, so detecting a repo whose own files (rule packs, docs)
+    // mention every technology under the sun does not light up the whole map.
+    const project = new Project(target, config.ignore ?? []);
+    const git = project.gitInfo();
+    const detection = detect(project, loadDetectorFile(rulesDir), git, [
+        ...list(args, 'fact'),
+        ...(config.facts ?? []),
+    ]);
+    const grouped = groupFlagsByNamespace(detection.facts.flags);
+    console.log(`# Detection: ${path.resolve(target)}`);
+    console.log();
+    console.log(`maturity: ${detection.maturity}`);
+    for (const [ns, values] of [...grouped.entries()].sort()) {
+        console.log(`${ns}: ${[...new Set(values)].sort().join(', ')}`);
+    }
+    console.log();
+    console.log('metrics:');
+    for (const [k, v] of Object.entries(detection.facts.metrics))
+        console.log(`  ${k}: ${v}`);
+    console.log();
+    console.log('maturity signals:');
+    for (const s of detection.maturitySignals)
+        console.log(`  ${s}`);
+    return 0;
+}
+function groupFlagsByNamespace(flags) {
+    const grouped = new Map();
+    for (const f of flags) {
+        const [ns, value] = f.split(':');
+        const key = value === undefined ? 'other' : ns;
+        const list2 = grouped.get(key) ?? [];
+        list2.push(value === undefined ? f : value);
+        grouped.set(key, list2);
+    }
+    return grouped;
+}
+/* ------------------------------------------------------------------ rules -- */
+function cmdRules(args) {
+    const rulesDir = path.resolve(str(args, 'rules-dir', DEFAULT_RULES_DIR) ?? DEFAULT_RULES_DIR);
+    const { packs } = loadRulePacks(rulesDir);
+    const filter = str(args, 'section');
+    let total = 0;
+    for (const pack of packs) {
+        const rules = filter ? pack.rules.filter((r) => r.section === filter) : pack.rules;
+        if (filter && rules.length === 0)
+            continue;
+        console.log(`\n## ${pack.id} — ${pack.title} (${rules.length} rules)`);
+        if (pack.description)
+            console.log(`   ${pack.description}`);
+        for (const r of rules) {
+            total++;
+            console.log(`   ${r.id.padEnd(10)} ${r.severity.padEnd(8)} ${r.ruleClass.padEnd(16)} ${r.title}`);
+        }
+    }
+    console.log(`\n${total} rule(s) across ${packs.length} pack(s).`);
+    return 0;
+}
+/* ---------------------------------------------------------------- explain -- */
+function cmdExplain(args) {
+    const id = args._[1];
+    if (!id) {
+        console.error('Usage: usat explain <RULE-ID>');
+        return 2;
+    }
+    const rulesDir = path.resolve(str(args, 'rules-dir', DEFAULT_RULES_DIR) ?? DEFAULT_RULES_DIR);
+    const { packs } = loadRulePacks(rulesDir);
+    for (const pack of packs) {
+        const rule = pack.rules.find((r) => r.id.toLowerCase() === id.toLowerCase());
+        if (!rule)
+            continue;
+        printRuleDetail(pack.id, rule);
+        return 0;
+    }
+    console.error(`Rule not found: ${id}`);
+    return 1;
+}
+function printRuleDetail(packId, rule) {
+    console.log(`# ${rule.id} — ${rule.title}`);
+    console.log();
+    console.log(`pack      : ${packId}`);
+    console.log(`section   : ${rule.section} ${rule.sectionTitle ?? ''}`);
+    console.log(`severity  : ${rule.severity} (when violated)`);
+    console.log(`class     : ${rule.ruleClass}`);
+    console.log(`weight    : ${rule.weight ?? 'default'}`);
+    console.log(`depths    : ${rule.depths?.join(', ') ?? 'all'}`);
+    console.log(`check     : ${JSON.stringify(rule.check)}`);
+    printRuleOptional(rule);
+}
+function printRuleOptional(rule) {
+    if (rule.appliesWhen)
+        console.log(`applies   : ${JSON.stringify(rule.appliesWhen)}`);
+    if (rule.why)
+        console.log(`\nwhy:\n  ${rule.why}`);
+    if (rule.evidence)
+        console.log(`\nevidence:\n  ${rule.evidence}`);
+    if (rule.remediation)
+        console.log(`\nfix:\n  ${rule.remediation}`);
+    if (rule.references?.length)
+        console.log(`\nreferences:\n  ${rule.references.join('\n  ')}`);
+}
+/* ------------------------------------------------------------------- diff -- */
+function cmdDiff(args) {
+    const beforePath = args._[1];
+    const afterPath = args._[2];
+    if (!beforePath || !afterPath) {
+        console.error('Usage: usat diff <before.md> <after.md> [--out DIFF.md]');
+        return 2;
+    }
+    const readTrailer = (file) => {
+        const text = fs.readFileSync(file, 'utf8');
+        return parseTrailer(text) ?? text; // tolerate a raw YAML trailer file
+    };
+    try {
+        const md = diffReports(readTrailer(beforePath), readTrailer(afterPath));
+        const out = str(args, 'out');
+        if (out)
+            fs.writeFileSync(out, md, 'utf8');
+        console.log(md);
+        return 0;
+    }
+    catch (err) {
+        console.error(err.message);
+        return 2;
+    }
+}
+/* ------------------------------------------------------------------- init -- */
+function cmdInit(args) {
+    const target = args._[1] ?? '.';
+    fs.mkdirSync(target, { recursive: true });
+    const configPath = path.join(target, '.usat.yaml');
+    if (fs.existsSync(configPath)) {
+        console.error(`${configPath} already exists — leaving it alone.`);
+    }
+    else {
+        fs.writeFileSync(configPath, EXAMPLE_CONFIG, 'utf8');
+        console.log(`created ${configPath}`);
+    }
+    const workflowDir = path.join(target, '.github', 'workflows');
+    const workflowPath = path.join(workflowDir, 'usat.yml');
+    if (fs.existsSync(workflowPath)) {
+        console.error(`${workflowPath} already exists — leaving it alone.`);
+    }
+    else {
+        fs.mkdirSync(workflowDir, { recursive: true });
+        fs.writeFileSync(workflowPath, WORKFLOW_TEMPLATE, 'utf8');
+        console.log(`created ${workflowPath}`);
+    }
+    console.log('\nNext: run `npx usat audit .` or `usat audit . --depth standard`.');
+    return 0;
+}
+/* ------------------------------------------------------------------ utils -- */
+function readVersion() {
+    const candidates = [
+        path.resolve(HERE, '..', 'package.json'),
+        path.resolve(HERE, '..', '..', 'package.json'),
+    ];
+    for (const c of candidates) {
+        try {
+            const pkg = JSON.parse(fs.readFileSync(c, 'utf8'));
+            if (pkg.version)
+                return pkg.version;
+        }
+        catch {
+            /* fall through */
+        }
+    }
+    return '0.0.0';
+}
+const HELP = `
+usat — Universal Software Audit Template
+
+  usat audit [path]              Audit a project and write a Markdown report
+  usat detect [path]             Print the auto-detected facts and maturity
+  usat rules [--section S2]      List all loaded rule packs and rules
+  usat explain <RULE-ID>         Show everything about one rule
+  usat diff <before> <after>     Compare two previously generated reports
+  usat init [path]               Scaffold .usat.yaml + a GitHub Actions workflow
+
+audit options
+  --out <file>        Report path (default AUDIT.md)
+  --depth <level>     quick | standard | deep          (default standard)
+  --profile <stage>   auto | prototype | mvp | beta | production | legacy
+  --rules-dir <dir>   Rule pack directory             (default bundled rules/)
+  --config <file>     Explicit .usat.yaml location
+  --include <packs>   Force these packs on (comma separated)
+  --exclude <packs>   Force these packs off
+  --fact <ns:value>   Assert a fact detection missed, e.g. --fact has:database
+  --allow-commands    Run \`command:\` checks (shells out; off by default)
+  --fail-on <sev>     Exit 1 on findings >= sev: critical|high|medium|low|none
+  --quiet             Only errors
+
+examples
+  usat audit . --depth deep
+  usat audit ../api --profile production --fail-on high
+  usat audit . --out reports/audit-$(date +%F).md
+`.trim();
+const WORKFLOW_TEMPLATE = `# USAT — Universal Software Audit Template
+# Runs on every PR and pushes a Markdown summary you can read in the Actions UI.
+name: USAT Audit
+
+on:
+  pull_request:
+  push:
+    branches: [master]
+  workflow_dispatch:
+    inputs:
+      depth:
+        description: Audit depth
+        required: false
+        default: standard
+        type: choice
+        options: [quick, standard, deep]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Run USAT
+        id: usat
+        run: |
+          npx --yes usat@latest audit . \\
+            --depth \${{ inputs.depth || 'standard' }} \\
+            --out AUDIT.md
+
+      - name: Publish to job summary
+        if: always()
+        run: cat AUDIT.md >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Upload report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: usat-audit
+          path: AUDIT.md
+
+      # Uncomment to gate the merge on HIGH findings.
+      # - name: Quality gate
+      #   run: npx --yes usat@latest audit . --fail-on high
+`.trimStart();
+/* Entrypoint. */
+const isDirectRun = process.argv[1] ? /usat|cli\.(ts|js)$/.test(process.argv[1]) : false;
+if (isDirectRun) {
+    process.exitCode = main(process.argv.slice(2));
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5D,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;AAE9B,MAAM,cAAc,GAAe,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACnF,MAAM,MAAM,GAAY,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AACtD,MAAM,UAAU,GAAe,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AASpF,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,CAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAClB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,GAAG,CAAC,IAAU,EAAE,GAAW,EAAE,QAAiB;IACrD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9C,CAAC;AACD,SAAS,IAAI,CAAC,IAAU,EAAE,GAAW;IACnC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC;AACpD,CAAC;AACD,SAAS,IAAI,CAAC,IAAU,EAAE,GAAW;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ;QACvB,OAAO,CAAC;aACL,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,kFAAkF;AAElF,MAAM,QAAQ,GAA2C;IACvD,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;CACd,CAAC;AAEF,MAAM,UAAU,IAAI,CAAC,IAAc;IACjC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,0EAA0E;IAC1E,sEAAsE;IACtE,mEAAmE;IACnE,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAW,CAAC;IAE7C,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,WAAW;YACd,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,CAAC;QACX;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;YAC3C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAcD,SAAS,gBAAgB,CAAC,IAAU;IAClC,OAAO;QACL,MAAM,EAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAwB,IAAI,GAAG;QAChD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,IAAI,iBAAiB,CAAC;QACtF,KAAK,EAAG,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAW,IAAI,UAAU;QAC9D,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM;QAClD,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,UAAU;QAC/C,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE;QAC9D,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAkB;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,0BAA0B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnF,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAsB,CAAC,EAAE,CAAC;QAC9E,OAAO,oCAAoC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAU;IAC1B,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAE1E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,OAAO,EAAE,CAAC,CAAC,UAA+B;QAC1C,MAAM;QACN,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC3C,WAAW,EAAE,OAAO;QACpB,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACnC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;KACpC,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE1C,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC;IACtC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,IAAI,CAAC,KAAK,CAAC,CAAC;IACf,OAAO,CACL,QAAQ,MAAM,CAAC,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,SAAS,CAAC,QAAQ,MAAM;QACpE,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,WAAW;QACtC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC/C,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,YAAY;QAC5C,KAAK,MAAM,CAAC,KAAK,CAAC,kBAAkB,2BAA2B,CAChE,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS,CAAC,IAAU;IAC3B,MAAM,MAAM,GAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAwB,IAAI,GAAG,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,IAAI,iBAAiB,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE;QACjE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;KACxB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,eAAe;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAuB;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAG,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iFAAiF;AAEjF,SAAS,QAAQ,CAAC,IAAU;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,IAAI,iBAAiB,CAAC,CAAC;IAC9F,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnF,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC3C,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,mBAAmB,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,iFAAiF;AAEjF,SAAS,UAAU,CAAC,IAAU;IAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAuB,CAAC;IAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,IAAI,iBAAiB,CAAC,CAAC;IAC9F,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,IAAU;IACjD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,QAAQ,kBAAkB,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzD,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAU;IACnC,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,iFAAiF;AAEjF,SAAS,OAAO,CAAC,IAAU;IACzB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAuB,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAuB,CAAC;IAClD,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,mCAAmC;IACxE,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,IAAI,GAAG;YAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,OAAO,CAAC,IAAU;IACzB,MAAM,MAAM,GAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAwB,IAAI,GAAG,CAAC;IACxD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,GAAG,UAAU,qCAAqC,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,qCAAqC,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,WAAW,YAAY,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,iFAAiF;AAEjF,SAAS,WAAW;IAClB,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;KAC/C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;YAC3E,IAAI,GAAG,CAAC,OAAO;gBAAE,OAAO,GAAG,CAAC,OAAO,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BZ,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoDzB,CAAC,SAAS,EAAE,CAAC;AAEd,iBAAiB;AACjB,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1F,IAAI,WAAW,EAAE,CAAC;IAChB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,7 @@
+import type { UsatConfig } from './types.js';
+export declare const CONFIG_FILE = ".usat.yaml";
+export declare const EMPTY_CONFIG: UsatConfig;
+/** Loads `<target>/.usat.yaml` when present. Missing config is not an error. */
+export declare function loadConfig(target: string, explicit?: string): UsatConfig;
+export declare const EXAMPLE_CONFIG = "# USAT project configuration \u2014 commit this file.\n# Docs: docs/configuration.md\nversion: 1\n\n# Force a lifecycle stage instead of auto-detecting (prototype|mvp|beta|production|legacy).\n# maturity: production\n\n# Rule packs to force on or off, regardless of auto-detection.\n# include: [stacks/node-typescript]\n# exclude: [stacks/solidity]\n\n# Per-rule overrides. Every entry should carry a reason \u2014 this file is audited too.\nrules:\n  # DOC-003:\n  #   severity: LOW\n  #   reason: \"Docs live in Notion, not the repo (decision: ADR-014)\"\n  # SEC-042:\n  #   disabled: true\n  #   reason: \"Not applicable \u2014 no user-facing auth in this worker\"\n\n# Accepted risk. USAT still lists these, but excludes them from the score.\nsuppressions:\n  # - rule: PERF-005\n  #   reason: \"Known N+1 in the admin panel; 40 rows max. Revisit Q4.\"\n  #   until: \"2026-12-31\"\n\n# Extra globs to exclude from indexing (on top of .gitignore + USAT defaults).\nignore: []\n\n# Assert facts detection could not infer. Useful for non-standard layouts.\nfacts: []\n";
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC,eAAO,MAAM,YAAY,EAAE,UAA2B,CAAC;AAEvD,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,CA4BxE;AAED,eAAO,MAAM,cAAc,ojCA+B1B,CAAC"}

package/dist/config.js

@@ -0,0 +1,72 @@
+import { parse as parseYaml } from 'yaml';
+import fs from 'node:fs';
+import path from 'node:path';
+import { asMap, maps, str, strList } from './util/yaml.js';
+export const CONFIG_FILE = '.usat.yaml';
+export const EMPTY_CONFIG = { version: 1 };
+/** Loads `<target>/.usat.yaml` when present. Missing config is not an error. */
+export function loadConfig(target, explicit) {
+    const file = explicit ?? path.join(target, CONFIG_FILE);
+    if (!fs.existsSync(file))
+        return { ...EMPTY_CONFIG };
+    try {
+        const raw = parseYaml(fs.readFileSync(file, 'utf8'));
+        if (raw === null || typeof raw === 'undefined')
+            return { ...EMPTY_CONFIG };
+        if (typeof raw !== 'object' || Array.isArray(raw)) {
+            throw new Error(`${file}: expected a YAML mapping at the top level`);
+        }
+        const doc = raw;
+        return {
+            version: 1,
+            maturity: str(doc.maturity),
+            include: strList(doc.include),
+            exclude: strList(doc.exclude),
+            rules: asMap(doc.rules),
+            suppressions: maps(doc.suppressions).map((s) => ({
+                rule: String(s.rule ?? ''),
+                reason: str(s.reason) ?? 'no reason recorded',
+                until: str(s.until),
+            })),
+            ignore: strList(doc.ignore),
+            facts: strList(doc.facts),
+            sections: strList(doc.sections),
+        };
+    }
+    catch (err) {
+        throw new Error(`Could not parse ${file}: ${err.message}`, { cause: err });
+    }
+}
+export const EXAMPLE_CONFIG = `# USAT project configuration — commit this file.
+# Docs: docs/configuration.md
+version: 1
+
+# Force a lifecycle stage instead of auto-detecting (prototype|mvp|beta|production|legacy).
+# maturity: production
+
+# Rule packs to force on or off, regardless of auto-detection.
+# include: [stacks/node-typescript]
+# exclude: [stacks/solidity]
+
+# Per-rule overrides. Every entry should carry a reason — this file is audited too.
+rules:
+  # DOC-003:
+  #   severity: LOW
+  #   reason: "Docs live in Notion, not the repo (decision: ADR-014)"
+  # SEC-042:
+  #   disabled: true
+  #   reason: "Not applicable — no user-facing auth in this worker"
+
+# Accepted risk. USAT still lists these, but excludes them from the score.
+suppressions:
+  # - rule: PERF-005
+  #   reason: "Known N+1 in the admin panel; 40 rows max. Revisit Q4."
+  #   until: "2026-12-31"
+
+# Extra globs to exclude from indexing (on top of .gitignore + USAT defaults).
+ignore: []
+
+# Assert facts detection could not infer. Useful for non-standard layouts.
+facts: []
+`;
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE3D,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;AAExC,MAAM,CAAC,MAAM,YAAY,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAEvD,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,QAAiB;IAC1D,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,WAAW;YAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;QAC3E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,GAAG,GAA4B,GAA8B,CAAC;QACpE,OAAO;YACL,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAA2B;YACrD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAwB;YAC9C,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/C,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,oBAAoB;gBAC7C,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;aACpB,CAAC,CAAC;YACH,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YACzB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;SAChC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+B7B,CAAC"}

package/dist/detect/index.d.ts

@@ -0,0 +1,58 @@
+import type { Facts, Maturity } from '../types.js';
+import { Project } from '../util/project.js';
+interface DetectorMatch {
+    any_file?: string[];
+    file_exists?: string[];
+    dir_exists?: string[];
+    content?: {
+        include: string[];
+        pattern: string;
+    };
+    manifest?: {
+        file: string;
+        key: string;
+        contains?: string;
+    };
+    metric?: {
+        name: string;
+        min?: number;
+        max?: number;
+    };
+    any_of?: DetectorMatch[];
+    all_of?: DetectorMatch[];
+}
+interface Detector {
+    fact: string;
+    category: string;
+    title: string;
+    match?: DetectorMatch;
+    implies?: string[];
+}
+export interface DetectionResult {
+    facts: Facts;
+    detectorsFired: {
+        fact: string;
+        title: string;
+        category: string;
+    }[];
+    maturity: Maturity;
+    maturitySignals: string[];
+}
+/** Load the detector registry. */
+export declare function loadDetectors(file: string): Detector[];
+/** Run every detector against the project and derive the fact set. */
+export declare function detect(project: Project, detectors: Detector[], git: ReturnType<Project['gitInfo']>, extraFacts?: string[]): DetectionResult;
+/**
+ * Lifecycle classification. Deliberately conservative: a project is only
+ * called "production" when it has release tags, CI, tests and recent activity.
+ * The result drives severity dampening so a prototype is not graded like a
+ * bank.
+ */
+export declare function classifyMaturity(flags: Set<string>, metrics: Record<string, number>, project?: Project): {
+    maturity: Maturity;
+    signals: string[];
+};
+export declare function factsByPrefix(facts: Facts, prefix: string): string[];
+export declare function loadDetectorFile(rulesDir: string): Detector[];
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/detect/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/detect/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAI7C,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAmCD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpE,QAAQ,EAAE,QAAQ,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,kCAAkC;AAClC,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,CAStD;AAED,sEAAsE;AACtE,wBAAgB,MAAM,CACpB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,QAAQ,EAAE,EACrB,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EACnC,UAAU,GAAE,MAAM,EAAO,GACxB,eAAe,CAgCjB;AAwND;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,CAAC,EAAE,OAAO,GAChB;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAuC3C;AA+BD,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAMpE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,EAAE,CAE7D"}