audit-tools 0.28.0

package/dist/audit/extractors/designAssessment.js

@@ -0,0 +1,280 @@
+// ID generation is instance-scoped per build (no shared mutable module state),
+// so repeated/concurrent buildDesignAssessment calls produce independent,
+// non-colliding DA-### sequences.
+function createFindingIdGenerator() {
+    let n = 1;
+    return () => `DA-${String(n++).padStart(3, "0")}`;
+}
+function allEdges(graphBundle) {
+    const edges = [];
+    for (const [key, value] of Object.entries(graphBundle.graphs)) {
+        if (key === "routes" || !Array.isArray(value))
+            continue;
+        for (const edge of value) {
+            if (edge && typeof edge.from === "string" && typeof edge.to === "string") {
+                edges.push(edge);
+            }
+        }
+    }
+    return edges;
+}
+function dfsVisit(node, path, adjacency, visited, stack, cycles) {
+    if (stack.has(node)) {
+        const cycleStart = path.indexOf(node);
+        if (cycleStart >= 0) {
+            cycles.push(path.slice(cycleStart));
+        }
+        return;
+    }
+    if (visited.has(node))
+        return;
+    visited.add(node);
+    stack.add(node);
+    path.push(node);
+    for (const neighbor of adjacency.get(node) ?? []) {
+        dfsVisit(neighbor, path, adjacency, visited, stack, cycles);
+    }
+    path.pop();
+    stack.delete(node);
+}
+function detectCycles(edges) {
+    const adjacency = new Map();
+    for (const edge of edges) {
+        if (!adjacency.has(edge.from))
+            adjacency.set(edge.from, new Set());
+        adjacency.get(edge.from).add(edge.to);
+    }
+    const cycles = [];
+    // Each DFS root gets a fresh per-DFS visited set so that nodes already fully
+    // explored via one root are re-entered from a new root. This is required
+    // because a shared visited set across DFS starts prevents detection of cycles
+    // that are reachable from a later root only through an already-visited node
+    // (the "diamond reachability" case). The stack (current DFS path) is still
+    // per-path-bookkeeping and correctly identifies back-edges within each DFS.
+    for (const node of adjacency.keys()) {
+        const visited = new Set();
+        const stack = new Set();
+        dfsVisit(node, [], adjacency, visited, stack, cycles);
+    }
+    return cycles;
+}
+// Canonicalize a directed cycle by rotating it so the lexicographically
+// smallest node leads, preserving order/direction. Rotation (not sort) keeps
+// distinct directed cycles over the same node set apart (A→B→C→A vs A→C→B→A)
+// while still deduping the same cycle discovered from different DFS start nodes
+// (which differ only by rotation).
+function canonicalCycleKey(cycle) {
+    if (cycle.length === 0)
+        return "";
+    let minIdx = 0;
+    for (let i = 1; i < cycle.length; i++) {
+        if (cycle[i] < cycle[minIdx])
+            minIdx = i;
+    }
+    const rotated = [...cycle.slice(minIdx), ...cycle.slice(0, minIdx)];
+    return rotated.join("\0");
+}
+function deduplicateCycles(cycles) {
+    const seen = new Set();
+    const unique = [];
+    for (const cycle of cycles) {
+        const normalized = canonicalCycleKey(cycle);
+        if (!seen.has(normalized)) {
+            seen.add(normalized);
+            unique.push(cycle);
+        }
+    }
+    return unique;
+}
+function detectCycleFindings(graphBundle, nextId) {
+    const edges = allEdges(graphBundle);
+    const cycles = deduplicateCycles(detectCycles(edges));
+    if (cycles.length === 0)
+        return [];
+    return cycles.slice(0, 10).map((cycle) => ({
+        id: nextId(),
+        title: `Dependency cycle: ${cycle.length} modules`,
+        category: "dependency_cycle",
+        severity: cycle.length > 4 ? "high" : "medium",
+        confidence: "high",
+        lens: "architecture",
+        summary: `Circular dependency among ${cycle.join(" → ")} → ${cycle[0]}. Cycles increase coupling, complicate testing, and can cause initialization-order bugs.`,
+        affected_files: cycle.map((path) => ({ path })),
+        systemic: true,
+    }));
+}
+function detectHubModules(graphBundle, nextId) {
+    const edges = allEdges(graphBundle);
+    const fanIn = new Map();
+    const fanOut = new Map();
+    for (const edge of edges) {
+        fanOut.set(edge.from, (fanOut.get(edge.from) ?? 0) + 1);
+        fanIn.set(edge.to, (fanIn.get(edge.to) ?? 0) + 1);
+    }
+    const allNodes = new Set([...fanIn.keys(), ...fanOut.keys()]);
+    const hubThreshold = Math.max(8, Math.ceil(allNodes.size * 0.15));
+    const findings = [];
+    for (const node of allNodes) {
+        const inCount = fanIn.get(node) ?? 0;
+        const outCount = fanOut.get(node) ?? 0;
+        if (inCount >= hubThreshold && outCount >= hubThreshold) {
+            findings.push({
+                id: nextId(),
+                title: `Hub module: ${node}`,
+                category: "hub_module",
+                severity: "medium",
+                confidence: "high",
+                lens: "architecture",
+                summary: `${node} has ${inCount} incoming and ${outCount} outgoing dependencies. Hub modules become change bottlenecks and make the dependency graph fragile.`,
+                affected_files: [{ path: node }],
+                systemic: true,
+            });
+        }
+    }
+    return findings;
+}
+function detectOrphanUnits(unitManifest, graphBundle, nextId) {
+    const edges = allEdges(graphBundle);
+    const connected = new Set();
+    for (const edge of edges) {
+        connected.add(edge.from);
+        connected.add(edge.to);
+    }
+    if (connected.size === 0)
+        return [];
+    const orphans = [];
+    for (const unit of unitManifest.units) {
+        const hasConnection = unit.files.some((file) => connected.has(file));
+        if (!hasConnection && unit.files.length > 0) {
+            orphans.push(unit.unit_id);
+        }
+    }
+    if (orphans.length === 0)
+        return [];
+    if (orphans.length > unitManifest.units.length * 0.5)
+        return [];
+    return [{
+            id: nextId(),
+            title: `${orphans.length} orphan unit(s) with no graph connections`,
+            category: "orphan_units",
+            severity: "low",
+            confidence: "medium",
+            lens: "architecture",
+            summary: `Units [${orphans.join(", ")}] have no import, call, or reference edges in the dependency graph. They may be dead code, or the graph extraction missed their connections.`,
+            affected_files: orphans.map((id) => {
+                const unit = unitManifest.units.find((u) => u.unit_id === id);
+                return { path: unit?.files[0] ?? id };
+            }),
+            systemic: true,
+        }];
+}
+function detectRiskConcentration(riskRegister, unitManifest, nextId) {
+    if (riskRegister.items.length < 4)
+        return [];
+    const sorted = [...riskRegister.items].sort((a, b) => b.risk_score - a.risk_score);
+    const topQuartileSize = Math.max(1, Math.ceil(sorted.length * 0.25));
+    const topQuartile = sorted.slice(0, topQuartileSize);
+    const totalRisk = sorted.reduce((sum, item) => sum + item.risk_score, 0);
+    const topRisk = topQuartile.reduce((sum, item) => sum + item.risk_score, 0);
+    if (totalRisk === 0)
+        return [];
+    const concentration = topRisk / totalRisk;
+    if (concentration < 0.6)
+        return [];
+    return [{
+            id: nextId(),
+            title: "Risk concentrated in top quartile of units",
+            category: "risk_concentration",
+            severity: concentration > 0.8 ? "high" : "medium",
+            confidence: "high",
+            lens: "architecture",
+            summary: `${Math.round(concentration * 100)}% of total risk score is concentrated in the top ${topQuartileSize} of ${sorted.length} units: ${topQuartile.map((i) => i.unit_id).join(", ")}. Consider decomposing high-risk units or adding isolation boundaries.`,
+            affected_files: topQuartile.flatMap((item) => {
+                const unit = unitManifest.units.find((u) => u.unit_id === item.unit_id);
+                return (unit?.files ?? [item.unit_id]).map((path) => ({ path }));
+            }),
+            systemic: true,
+        }];
+}
+function detectUnitSprawl(unitManifest, nextId) {
+    if (unitManifest.units.length < 3)
+        return [];
+    const fileCounts = unitManifest.units.map((u) => u.files.length);
+    const totalFiles = fileCounts.reduce((a, b) => a + b, 0);
+    const maxFiles = fileCounts.reduce((max, n) => n > max ? n : max, 0);
+    const findings = [];
+    const dominantUnit = unitManifest.units.find((u) => u.files.length === maxFiles);
+    if (dominantUnit && maxFiles > totalFiles * 0.5 && totalFiles > 10) {
+        findings.push({
+            id: nextId(),
+            title: `Dominant unit: ${dominantUnit.unit_id}`,
+            category: "monolith_unit",
+            severity: "medium",
+            confidence: "medium",
+            lens: "architecture",
+            summary: `Unit ${dominantUnit.unit_id} contains ${maxFiles} of ${totalFiles} files (${Math.round((maxFiles / totalFiles) * 100)}%). A single unit this large suggests insufficient decomposition.`,
+            affected_files: dominantUnit.files.slice(0, 10).map((path) => ({ path })),
+            systemic: true,
+        });
+    }
+    if (unitManifest.units.length > 50) {
+        const smallUnits = unitManifest.units.filter((u) => u.files.length === 1);
+        if (smallUnits.length > unitManifest.units.length * 0.6) {
+            findings.push({
+                id: nextId(),
+                title: "Excessive single-file units",
+                category: "unit_fragmentation",
+                severity: "low",
+                confidence: "medium",
+                lens: "architecture",
+                summary: `${smallUnits.length} of ${unitManifest.units.length} units contain only a single file. This fragmentation may indicate that the unit grouping is too granular to reflect meaningful architectural boundaries.`,
+                affected_files: smallUnits.slice(0, 5).map((u) => ({ path: u.files[0] })),
+                systemic: true,
+            });
+        }
+    }
+    return findings;
+}
+function detectFlowGaps(criticalFlows, graphBundle, nextId) {
+    const edges = allEdges(graphBundle);
+    const connected = new Set();
+    for (const edge of edges) {
+        connected.add(edge.from);
+        connected.add(edge.to);
+    }
+    const findings = [];
+    for (const flow of criticalFlows.flows) {
+        const disconnected = flow.paths.filter((path) => !connected.has(path));
+        if (disconnected.length > 0 &&
+            disconnected.length > flow.paths.length * 0.5) {
+            findings.push({
+                id: nextId(),
+                title: `Critical flow "${flow.name}" has weak graph coverage`,
+                category: "flow_gap",
+                severity: "medium",
+                confidence: "low",
+                lens: "architecture",
+                summary: `${disconnected.length} of ${flow.paths.length} files in flow "${flow.name}" have no dependency graph edges. The flow's structural integrity cannot be verified through static analysis alone.`,
+                affected_files: disconnected.map((path) => ({ path })),
+                systemic: true,
+            });
+        }
+    }
+    return findings;
+}
+export function buildDesignAssessment(params) {
+    const nextId = createFindingIdGenerator();
+    const findings = [
+        ...detectCycleFindings(params.graphBundle, nextId),
+        ...detectHubModules(params.graphBundle, nextId),
+        ...detectOrphanUnits(params.unitManifest, params.graphBundle, nextId),
+        ...detectRiskConcentration(params.riskRegister, params.unitManifest, nextId),
+        ...detectUnitSprawl(params.unitManifest, nextId),
+        ...detectFlowGaps(params.criticalFlows, params.graphBundle, nextId),
+    ];
+    return {
+        generated_at: new Date().toISOString(),
+        findings,
+    };
+}
+//# sourceMappingURL=designAssessment.js.map

package/dist/audit/extractors/designAssessment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"designAssessment.js","sourceRoot":"","sources":["../../../src/audit/extractors/designAssessment.ts"],"names":[],"mappings":"AAIA,+EAA+E;AAC/E,0EAA0E;AAC1E,kCAAkC;AAClC,SAAS,wBAAwB;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,EAAE,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,QAAQ,CAAC,WAAwB;IACxC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACzE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CACf,IAAY,EACZ,IAAc,EACd,SAAmC,EACnC,OAAoB,EACpB,KAAkB,EAClB,MAAkB;IAElB,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAE9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEhB,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,KAAkB;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACnE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,6EAA6E;IAC7E,yEAAyE;IACzE,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,6EAA6E;AAC7E,6EAA6E;AAC7E,gFAAgF;AAChF,mCAAmC;AACnC,SAAS,iBAAiB,CAAC,KAAe;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,MAAM,CAAE;YAAE,MAAM,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAC1B,WAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,EAAE,EAAE,MAAM,EAAE;QACZ,KAAK,EAAE,qBAAqB,KAAK,CAAC,MAAM,UAAU;QAClD,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QAC9C,UAAU,EAAE,MAAM;QAClB,IAAI,EAAE,cAAuB;QAC7B,OAAO,EAAE,6BAA6B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,0FAA0F;QAC/J,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CACvB,WAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO,IAAI,YAAY,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,MAAM,EAAE;gBACZ,KAAK,EAAE,eAAe,IAAI,EAAE;gBAC5B,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,MAAM;gBAClB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,GAAG,IAAI,QAAQ,OAAO,iBAAiB,QAAQ,sGAAsG;gBAC9J,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAChC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CACxB,YAA0B,EAC1B,WAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC;IAEhE,OAAO,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,2CAA2C;YACnE,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8IAA8I;YACnL,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBACjC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;gBAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,CAAC,CAAC;YACF,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAC9B,YAA0B,EAC1B,YAA0B,EAC1B,MAAoB;IAEpB,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7C,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CACtC,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAE5E,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;IAE1C,IAAI,aAAa,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC;IAEnC,OAAO,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,4CAA4C;YACnD,QAAQ,EAAE,oBAAoB;YAC9B,QAAQ,EAAE,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACjD,UAAU,EAAE,MAAM;YAClB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,oDAAoD,eAAe,OAAO,MAAM,CAAC,MAAM,WAAW,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wEAAwE;YACjQ,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxE,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC;YACF,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,YAA0B,EAC1B,MAAoB;IAEpB,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CACnC,CAAC;IACF,IAAI,YAAY,IAAI,QAAQ,GAAG,UAAU,GAAG,GAAG,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,kBAAkB,YAAY,CAAC,OAAO,EAAE;YAC/C,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,QAAQ,YAAY,CAAC,OAAO,aAAa,QAAQ,OAAO,UAAU,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,mEAAmE;YAClM,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QAC1E,IAAI,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,MAAM,EAAE;gBACZ,KAAK,EAAE,6BAA6B;gBACpC,QAAQ,EAAE,oBAAoB;gBAC9B,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,QAAQ;gBACpB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,GAAG,UAAU,CAAC,MAAM,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,2JAA2J;gBACxN,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CACrB,aAAmC,EACnC,WAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IACE,YAAY,CAAC,MAAM,GAAG,CAAC;YACvB,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,EAC7C,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,MAAM,EAAE;gBACZ,KAAK,EAAE,kBAAkB,IAAI,CAAC,IAAI,2BAA2B;gBAC7D,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,KAAK;gBACjB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,mBAAmB,IAAI,CAAC,IAAI,qHAAqH;gBACxM,cAAc,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAKrC;IACC,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;IAE1C,MAAM,QAAQ,GAAc;QAC1B,GAAG,mBAAmB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;QAClD,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;QAC/C,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;QACrE,GAAG,uBAAuB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QAC5E,GAAG,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QAChD,GAAG,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;KACpE,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/audit/extractors/disposition.d.ts

@@ -0,0 +1,76 @@
+import type { SpawnSyncOptionsWithStringEncoding, SpawnSyncReturns } from "node:child_process";
+import type { RepoManifest } from "../types.js";
+import type { FileDisposition, FileDispositionStatus } from "audit-tools/shared";
+/**
+ * Explicit out-of-scope reason for files excluded because the repository's own
+ * VCS ignore rules (.gitignore et al.) cover them.
+ */
+export declare const VCS_IGNORED_REASON = "vcs_ignored";
+/**
+ * At or below this many vcs-ignored files, the disposition carries one
+ * per-file record per ignored file. Above it, ignored files are aggregated by
+ * directory prefix so file_disposition.json stays bounded regardless of how
+ * many files the ignore rules cover.
+ */
+export declare const VCS_IGNORED_PER_FILE_LIMIT = 200;
+/**
+ * Guard threshold: when `git check-ignore` reports more than this share of all
+ * candidate files as ignored, the gitignore rule is skipped (guard branch
+ * `share_exceeded`) and only the existing targeted exclusions apply. A share
+ * of exactly 1.0 means the audit root itself is effectively ignored (guard
+ * branch `root_ignored`).
+ */
+export declare const VCS_IGNORED_MAX_SHARE = 0.9;
+export type VcsIgnoreGuardBranch = "root_ignored" | "share_exceeded";
+/** Bounded directory-prefix aggregate used above VCS_IGNORED_PER_FILE_LIMIT. */
+export interface VcsIgnoredAggregate {
+    /** Top-level directory prefix ("." for root-level files). */
+    prefix: string;
+    /** Number of vcs-ignored files under the prefix. */
+    count: number;
+    reason: typeof VCS_IGNORED_REASON;
+}
+/**
+ * Outcome record for the gitignore disposition rule, persisted alongside the
+ * per-file records so the scope pre-digest / intent checkpoint can surface
+ * skipped-rule and guard decisions.
+ */
+export interface VcsIgnoreSummary {
+    /** True when gitignore-based exclusions were applied to the disposition. */
+    applied: boolean;
+    /** Number of candidate files `git check-ignore` reported as ignored. */
+    ignored_count: number;
+    /** Why the gitignore rule was skipped (clean fallback or guard). */
+    skipped_reason?: string;
+    /** Which guard branch fired when a guard skipped the rule. */
+    guard_branch?: VcsIgnoreGuardBranch;
+    /** Directory-prefix aggregates emitted above VCS_IGNORED_PER_FILE_LIMIT. */
+    aggregates?: VcsIgnoredAggregate[];
+}
+/** FileDisposition enriched with the gitignore-rule outcome record. */
+export interface FileDispositionWithVcsIgnore extends FileDisposition {
+    vcs_ignore?: VcsIgnoreSummary;
+}
+/** Injection seam for the single batched `git check-ignore` spawn (tests). */
+export type CheckIgnoreSpawn = (command: string, args: readonly string[], options: SpawnSyncOptionsWithStringEncoding) => SpawnSyncReturns<string>;
+export interface BuildFileDispositionOptions {
+    /**
+     * Audit root. When provided (and a git work tree), enables the batched
+     * `git check-ignore --stdin` pass that classifies vcs-ignored files
+     * out of scope. Omit for the heuristics-only disposition.
+     */
+    root?: string;
+    /** Test seam: replacement for child_process.spawnSync. */
+    spawn?: CheckIgnoreSpawn;
+}
+/**
+ * Applies shared path heuristics to mark files that should be excluded or
+ * down-scoped before audit planning begins. When `options.root` is provided,
+ * additionally classifies vcs-ignored files out of scope via one batched
+ * `git check-ignore --stdin` pass, with clean fallback to the heuristics-only
+ * disposition whenever git is unavailable or a safety guard fires.
+ */
+export declare function buildFileDisposition(repoManifest: RepoManifest, options?: BuildFileDispositionOptions): FileDispositionWithVcsIgnore;
+export declare function buildDispositionMap(disposition?: FileDisposition): Map<string, FileDispositionStatus>;
+export declare function isAuditExcludedStatus(status: FileDispositionStatus): status is Exclude<FileDispositionStatus, "included">;
+//# sourceMappingURL=disposition.d.ts.map

package/dist/audit/extractors/disposition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disposition.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/disposition.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kCAAkC,EAClC,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAuB,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAgHtG;;;GAGG;AACH,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAErE,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,kBAAkB,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,4EAA4E;IAC5E,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACpC;AAED,uEAAuE;AACvE,MAAM,WAAW,4BAA6B,SAAQ,eAAe;IACnE,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED,8EAA8E;AAC9E,MAAM,MAAM,gBAAgB,GAAG,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,kCAAkC,KACxC,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE9B,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AA6FD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,YAAY,EAC1B,OAAO,GAAE,2BAAgC,GACxC,4BAA4B,CA+F9B;AAED,wBAAgB,mBAAmB,CACjC,WAAW,CAAC,EAAE,eAAe,GAC5B,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAIpC;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,GAC5B,MAAM,IAAI,OAAO,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAQtD"}

package/dist/audit/extractors/disposition.js

@@ -0,0 +1,265 @@
+import { spawnSync } from "node:child_process";
+import { isNodeModulesOrGit, isPackageManagerCachePath, isTmpPath, isBuildOutput, isVendorPath, isBinaryArtifact, isLicensePath, isLockfilePath, isLogPath, isDocPath, isGeneratedPath, isAuditArtifactPath, isAuditToolOutputArtifact, isGeneratedTestArtifactPath, isGeneratedInstallArtifactPath, isExamplesOrFixturesPath, normalizeExtractorPath, } from "./pathPatterns.js";
+function inferDisposition(path) {
+    const normalized = normalizeExtractorPath(path);
+    if (isNodeModulesOrGit(normalized)) {
+        return { path, status: "excluded", reason: "node_modules or .git excluded by convention." };
+    }
+    if (isPackageManagerCachePath(normalized)) {
+        return {
+            path,
+            status: "excluded",
+            reason: "Package-manager cache (npm _cacache/npm-cache) excluded by convention.",
+        };
+    }
+    if (isTmpPath(normalized)) {
+        return {
+            path,
+            status: "excluded",
+            reason: "Temporary/bundled artifact directory (.tmp) excluded by convention.",
+        };
+    }
+    if (isBuildOutput(normalized)) {
+        return { path, status: "generated", reason: "Build output path." };
+    }
+    if (isVendorPath(normalized)) {
+        return { path, status: "vendor", reason: "Vendor or third-party path." };
+    }
+    if (isBinaryArtifact(normalized)) {
+        return {
+            path,
+            status: "binary",
+            reason: "Non-source binary-like artifact.",
+        };
+    }
+    if (isLogPath(normalized)) {
+        return { path, status: "generated", reason: "Runtime log artifact." };
+    }
+    if (isLicensePath(normalized)) {
+        return { path, status: "doc_only", reason: "License file is not auditable code." };
+    }
+    if (isLockfilePath(normalized)) {
+        return { path, status: "generated", reason: "Lockfile excluded from code audit scope." };
+    }
+    if (isAuditArtifactPath(normalized)) {
+        return {
+            path,
+            status: "generated",
+            reason: "Generated audit artifact.",
+        };
+    }
+    if (isAuditToolOutputArtifact(normalized)) {
+        return {
+            path,
+            status: "generated",
+            reason: "audit-tools pipeline output (findings/report) — a data deliverable, not source.",
+        };
+    }
+    if (isGeneratedPath(normalized)) {
+        return {
+            path,
+            status: "generated",
+            reason: "Generated artifact path.",
+        };
+    }
+    if (isGeneratedTestArtifactPath(normalized)) {
+        return {
+            path,
+            status: "generated",
+            reason: "Generated test artifact.",
+        };
+    }
+    if (isDocPath(normalized)) {
+        return { path, status: "doc_only", reason: "Documentation artifact." };
+    }
+    if (isGeneratedInstallArtifactPath(normalized)) {
+        return {
+            path,
+            status: "generated",
+            reason: "Generated install/bootstrap artifact.",
+        };
+    }
+    if (isExamplesOrFixturesPath(normalized)) {
+        return { path, status: "doc_only", reason: "Examples and fixtures are support artifacts, not auditable code." };
+    }
+    return {
+        path,
+        status: "included",
+        reason: "Default included source or config artifact.",
+    };
+}
+/**
+ * Explicit out-of-scope reason for files excluded because the repository's own
+ * VCS ignore rules (.gitignore et al.) cover them.
+ */
+export const VCS_IGNORED_REASON = "vcs_ignored";
+/**
+ * At or below this many vcs-ignored files, the disposition carries one
+ * per-file record per ignored file. Above it, ignored files are aggregated by
+ * directory prefix so file_disposition.json stays bounded regardless of how
+ * many files the ignore rules cover.
+ */
+export const VCS_IGNORED_PER_FILE_LIMIT = 200;
+/**
+ * Guard threshold: when `git check-ignore` reports more than this share of all
+ * candidate files as ignored, the gitignore rule is skipped (guard branch
+ * `share_exceeded`) and only the existing targeted exclusions apply. A share
+ * of exactly 1.0 means the audit root itself is effectively ignored (guard
+ * branch `root_ignored`).
+ */
+export const VCS_IGNORED_MAX_SHARE = 0.9;
+function toPosixPath(path) {
+    return path.replace(/\\/g, "/");
+}
+/**
+ * Evaluates every candidate path through ONE batched
+ * `git check-ignore --stdin -z` invocation (never per-file). Exit-code
+ * contract: 0 = some paths ignored, 1 = none ignored (success, empty set),
+ * anything else (128 / git absent / not a work tree) = clean fallback —
+ * the caller keeps only the existing targeted exclusions. Never throws.
+ */
+function evaluateVcsIgnored(root, candidatePosixPaths, spawn) {
+    if (candidatePosixPaths.length === 0) {
+        return { ok: true, ignored: new Set() };
+    }
+    let result;
+    try {
+        result = spawn("git", ["check-ignore", "--stdin", "-z"], {
+            cwd: root,
+            input: candidatePosixPaths.map((path) => `${path}\0`).join(""),
+            encoding: "utf8",
+            maxBuffer: 256 * 1024 * 1024,
+            windowsHide: true,
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return { ok: false, reason: `git check-ignore spawn failed: ${message}` };
+    }
+    if (result.error) {
+        const code = result.error.code;
+        return {
+            ok: false,
+            reason: code === "ENOENT"
+                ? "git executable not found (ENOENT)"
+                : `git check-ignore failed to start: ${result.error.message}`,
+        };
+    }
+    if (result.status === 0 || result.status === 1) {
+        // 0 = some paths ignored (stdout has the set); 1 = no paths ignored.
+        const ignored = new Set((result.stdout ?? "").split("\0").filter((path) => path.length > 0));
+        return { ok: true, ignored };
+    }
+    const stderrFirstLine = (result.stderr ?? "").trim().split(/\r?\n/, 1)[0] ?? "";
+    return {
+        ok: false,
+        reason: `git check-ignore exited ${result.status ?? "by signal"}` +
+            (stderrFirstLine ? `: ${stderrFirstLine}` : ""),
+    };
+}
+function topLevelPrefix(posixPath) {
+    const slash = posixPath.indexOf("/");
+    return slash === -1 ? "." : posixPath.slice(0, slash);
+}
+function aggregateByPrefix(posixPaths) {
+    const counts = new Map();
+    for (const path of posixPaths) {
+        const prefix = topLevelPrefix(path);
+        counts.set(prefix, (counts.get(prefix) ?? 0) + 1);
+    }
+    return [...counts.entries()]
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+        .map(([prefix, count]) => ({ prefix, count, reason: VCS_IGNORED_REASON }));
+}
+/**
+ * Build a skipped VcsIgnoreSummary for any guard branch or clean fallback.
+ * All three skip return sites share the same shape; centralising here means
+ * future guard additions only need to call this helper.
+ */
+function skippedVcsIgnore(skipped_reason, ignored_count = 0, guard_branch) {
+    return { applied: false, ignored_count, skipped_reason, guard_branch };
+}
+/**
+ * Applies shared path heuristics to mark files that should be excluded or
+ * down-scoped before audit planning begins. When `options.root` is provided,
+ * additionally classifies vcs-ignored files out of scope via one batched
+ * `git check-ignore --stdin` pass, with clean fallback to the heuristics-only
+ * disposition whenever git is unavailable or a safety guard fires.
+ */
+export function buildFileDisposition(repoManifest, options = {}) {
+    const baseline = repoManifest.files.map((file) => inferDisposition(file.path));
+    if (!options.root) {
+        return { files: baseline };
+    }
+    const candidatePosix = repoManifest.files.map((file) => toPosixPath(file.path));
+    const evaluation = evaluateVcsIgnored(options.root, candidatePosix, options.spawn ?? spawnSync);
+    if (!evaluation.ok) {
+        // Clean fallback: keep the existing targeted exclusions only.
+        return {
+            files: baseline,
+            vcs_ignore: skippedVcsIgnore(`gitignore rule skipped: ${evaluation.reason}`),
+        };
+    }
+    const total = candidatePosix.length;
+    const ignoredCount = candidatePosix.filter((path) => evaluation.ignored.has(path)).length;
+    // Root-ignored guard: every candidate ignored means the audit root itself is
+    // (effectively) ignored — applying the rule would empty the audit scope.
+    if (total > 0 && ignoredCount === total) {
+        return {
+            files: baseline,
+            vcs_ignore: skippedVcsIgnore("gitignore rule skipped: audit root itself is ignored (every candidate file matched ignore rules)", ignoredCount, "root_ignored"),
+        };
+    }
+    // Share guard: an ignore rule that would exclude more than
+    // VCS_IGNORED_MAX_SHARE of candidates is more likely a mis-scope than a
+    // legitimate exclusion — skip it and surface the decision.
+    if (total > 0 && ignoredCount / total > VCS_IGNORED_MAX_SHARE) {
+        return {
+            files: baseline,
+            vcs_ignore: skippedVcsIgnore(`gitignore rule skipped: ignored share ${(ignoredCount / total).toFixed(3)} ` +
+                `exceeds VCS_IGNORED_MAX_SHARE (${VCS_IGNORED_MAX_SHARE})`, ignoredCount, "share_exceeded"),
+        };
+    }
+    // Existing targeted exclusions take precedence; the gitignore rule only
+    // re-classifies files the heuristics would otherwise include.
+    const newlyIgnoredPosix = [];
+    for (let i = 0; i < baseline.length; i++) {
+        if (baseline[i].status === "included" &&
+            evaluation.ignored.has(candidatePosix[i])) {
+            newlyIgnoredPosix.push(candidatePosix[i]);
+        }
+    }
+    if (newlyIgnoredPosix.length <= VCS_IGNORED_PER_FILE_LIMIT) {
+        const newlyIgnoredSet = new Set(newlyIgnoredPosix);
+        const files = baseline.map((item, i) => newlyIgnoredSet.has(candidatePosix[i]) && item.status === "included"
+            ? { path: item.path, status: "excluded", reason: VCS_IGNORED_REASON }
+            : item);
+        return {
+            files,
+            vcs_ignore: { applied: true, ignored_count: ignoredCount },
+        };
+    }
+    // Bounded representation: above the per-file limit, drop per-file records
+    // for vcs-ignored files and emit directory-prefix aggregates instead.
+    const newlyIgnoredSet = new Set(newlyIgnoredPosix);
+    const files = baseline.filter((item, i) => !(item.status === "included" && newlyIgnoredSet.has(candidatePosix[i])));
+    return {
+        files,
+        vcs_ignore: {
+            applied: true,
+            ignored_count: ignoredCount,
+            aggregates: aggregateByPrefix(newlyIgnoredPosix),
+        },
+    };
+}
+export function buildDispositionMap(disposition) {
+    return new Map(disposition?.files.map((item) => [item.path, item.status]) ?? []);
+}
+export function isAuditExcludedStatus(status) {
+    return (status === "excluded" ||
+        status === "generated" ||
+        status === "vendor" ||
+        status === "binary" ||
+        status === "doc_only");
+}
+//# sourceMappingURL=disposition.js.map

package/dist/audit/extractors/disposition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disposition.js","sourceRoot":"","sources":["../../../src/audit/extractors/disposition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAO/C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,SAAS,EACT,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,SAAS,EACT,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,8BAA8B,EAC9B,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAEhD,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,wEAAwE;SACjF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,qEAAqE;SAC9E,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,kCAAkC;SAC3C,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,2BAA2B;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,iFAAiF;SAC1F,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,0BAA0B;SACnC,CAAC;IACJ,CAAC;IACD,IAAI,2BAA2B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,0BAA0B;SACnC,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,8BAA8B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,uCAAuC;SAChD,CAAC;IACJ,CAAC;IACD,IAAI,wBAAwB,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;IAClH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,6CAA6C;KACtD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAsDzC,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC;AAMD;;;;;;GAMG;AACH,SAAS,kBAAkB,CACzB,IAAY,EACZ,mBAAsC,EACtC,KAAuB;IAEvB,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,MAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;YACvD,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;YAC5B,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,OAAO,EAAE,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,GAAI,MAAM,CAAC,KAA+B,CAAC,IAAI,CAAC;QAC1D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,IAAI,KAAK,QAAQ;gBACf,CAAC,CAAC,mCAAmC;gBACrC,CAAC,CAAC,qCAAqC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;SAClE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CACpE,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EACJ,2BAA2B,MAAM,CAAC,MAAM,IAAI,WAAW,EAAE;YACzD,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,UAA6B;IACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACzB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CACvB,cAAsB,EACtB,aAAa,GAAG,CAAC,EACjB,YAAmC;IAEnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAA0B,EAC1B,UAAuC,EAAE;IAEzC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACrD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CACvB,CAAC;IACF,MAAM,UAAU,GAAG,kBAAkB,CACnC,OAAO,CAAC,IAAI,EACZ,cAAc,EACd,OAAO,CAAC,KAAK,IAAI,SAAS,CAC3B,CAAC;IAEF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,8DAA8D;QAC9D,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,gBAAgB,CAAC,2BAA2B,UAAU,CAAC,MAAM,EAAE,CAAC;SAC7E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC;IACpC,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAClD,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAC7B,CAAC,MAAM,CAAC;IAET,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,KAAK,GAAG,CAAC,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,gBAAgB,CAC1B,kGAAkG,EAClG,YAAY,EACZ,cAAc,CACf;SACF,CAAC;IACJ,CAAC;IACD,2DAA2D;IAC3D,wEAAwE;IACxE,2DAA2D;IAC3D,IAAI,KAAK,GAAG,CAAC,IAAI,YAAY,GAAG,KAAK,GAAG,qBAAqB,EAAE,CAAC;QAC9D,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,gBAAgB,CAC1B,yCAAyC,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;gBAC3E,kCAAkC,qBAAqB,GAAG,EAC5D,YAAY,EACZ,gBAAgB,CACjB;SACF,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,8DAA8D;IAC9D,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IACE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU;YACjC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EACzC,CAAC;YACD,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,IAAI,0BAA0B,EAAE,CAAC;QAC3D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CACrC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAClE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAmB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC9E,CAAC,CAAC,IAAI,CACT,CAAC;QACF,OAAO;YACL,KAAK;YACL,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE;SAC3D,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1E,CAAC;IACF,OAAO;QACL,KAAK;QACL,UAAU,EAAE;YACV,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,YAAY;YAC3B,UAAU,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;SACjD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,WAA6B;IAE7B,OAAO,IAAI,GAAG,CACZ,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAA6B;IAE7B,OAAO,CACL,MAAM,KAAK,UAAU;QACrB,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,UAAU,CACtB,CAAC;AACJ,CAAC"}