audit-tools 0.42.0 → 0.43.0

package/dist/shared/analyzers/normalizeExternal.js

@@ -1,4 +1,5 @@
 import { hashAnalyzerSnippet, } from "./provenance.js";
+import { normalizeRepoPath } from "../validation/findingGrounding.js";
 function normalizeExternalSeverity(value) {
     switch (value?.toLowerCase()) {
         case "critical": return "critical";
@@ -14,9 +15,51 @@ function normalizeExternalSeverity(value) {
         default: return "info";
     }
 }
+/**
+ * Separator-normalized, `./`-stripped form. This is `normalizeRepoPath` WITHOUT the
+ * case fold — the fold is correct for membership matching and wrong for a path that
+ * will be persisted and later re-read from a case-sensitive filesystem.
+ */
+function posixify(path) {
+    return path.trim().replace(/\\/g, "/").replace(/^\.\//, "");
+}
+/**
+ * Repo-relative form of an analyzer-reported path, case PRESERVED.
+ *
+ * Seven of the twelve candidates hand their tool the ABSOLUTE repository root as a
+ * positional target, so those tools echo absolute paths back. Persisting one makes
+ * the lead machine-specific, un-joinable against every repo-relative consumer, and
+ * unreadable by the provenance reader (`join(root, "/abs/path")` names nothing).
+ * Containment is decided with the shared {@link normalizeRepoPath} (case- and
+ * separator-folded, so win32 drive-letter and case drift still match); the returned
+ * value is sliced out of the ORIGINAL string so on-disk case survives.
+ *
+ * A path outside the repository root is left as-is: it is not repo-relative, and
+ * silently rewriting it would invent an identity the tool never reported.
+ */
+export function toRepoRelativeAnalyzerPath(repoRoot, rawPath) {
+    const path = posixify(rawPath);
+    if (!repoRoot || path.length === 0)
+        return path;
+    const root = posixify(repoRoot).replace(/\/+$/, "");
+    if (root.length === 0)
+        return path;
+    const foldedRoot = normalizeRepoPath(root);
+    const foldedPath = normalizeRepoPath(path);
+    if (foldedPath === foldedRoot)
+        return "";
+    if (!foldedPath.startsWith(`${foldedRoot}/`))
+        return path;
+    return path.slice(root.length + 1);
+}
 export function normalizeGenericExternalResults(tool, items, options = {}) {
-    const valid = items.filter((item) => item.path && item.summary);
-    const dropped = items.length - valid.length;
+    // Repo-relative FIRST: every downstream step — validity, provenance read, and the
+    // persisted `path` — must see the same normalized identity.
+    const normalizedItems = items.map((item) => typeof item?.path === "string"
+        ? { ...item, path: toRepoRelativeAnalyzerPath(options.repoRoot, item.path) }
+        : item);
+    const valid = normalizedItems.filter((item) => item.path && item.summary);
+    const dropped = normalizedItems.length - valid.length;
     if (dropped > 0) {
         process.stderr.write(JSON.stringify({
             event: "normalizer_findings_dropped",
@@ -34,12 +77,20 @@ export function normalizeGenericExternalResults(tool, items, options = {}) {
             sourceCache.set(path, options.readSource(path));
         return sourceCache.get(path);
     };
+    // An item with BOTH a path and a line number is anchorable; if its source cannot
+    // be read, provenance is lost for a reason the operator can act on. An item with
+    // no line number simply has no anchor — a different, benign state. Counting only
+    // the first keeps the two apart (they are byte-identical in the results array).
+    let sourceReadFailures = 0;
     const provenanceFor = (item) => {
         if (!item.path || item.line_start === undefined)
             return undefined;
         const source = readCached(item.path);
-        if (source === undefined)
+        if (source === undefined) {
+            if (options.readSource)
+                sourceReadFailures += 1;
             return undefined;
+        }
         const snippet_hash = hashAnalyzerSnippet(source, item.line_start, item.line_end);
         if (snippet_hash === undefined)
             return undefined;
@@ -50,24 +101,29 @@ export function normalizeGenericExternalResults(tool, items, options = {}) {
             snippet_hash,
         };
     };
+    const results = valid.map((item, index) => {
+        const provenance = provenanceFor(item);
+        return {
+            id: item.id ?? `${tool}-${index + 1}`,
+            category: item.category ?? "unknown",
+            severity: normalizeExternalSeverity(item.severity),
+            path: item.path,
+            line_start: item.line_start,
+            line_end: item.line_end,
+            summary: item.summary,
+            rule: item.rule,
+            raw: item.raw,
+            ...(provenance !== undefined ? { provenance } : {}),
+        };
+    });
+    options.onDiagnostics?.({
+        dropped_items: dropped,
+        source_read_failures: sourceReadFailures,
+    });
     return {
         tool,
         generated_at: new Date().toISOString(),
-        results: valid.map((item, index) => {
-            const provenance = provenanceFor(item);
-            return {
-                id: item.id ?? `${tool}-${index + 1}`,
-                category: item.category ?? "unknown",
-                severity: normalizeExternalSeverity(item.severity),
-                path: item.path,
-                line_start: item.line_start,
-                line_end: item.line_end,
-                summary: item.summary,
-                rule: item.rule,
-                raw: item.raw,
-                ...(provenance !== undefined ? { provenance } : {}),
-            };
-        }),
+        results,
     };
 }
 function clampUnitInterval(value) {

package/dist/shared/analyzers/normalizeExternal.js.map

@@ -1 +1 @@
-{"version":3,"file":"normalizeExternal.js","sourceRoot":"","sources":["../../../src/shared/analyzers/normalizeExternal.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,mBAAmB,GAEpB,MAAM,iBAAiB,CAAC;AAIzB,SAAS,yBAAyB,CAAC,KAAyB;IAC1D,QAAQ,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;QACnC,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;QAC3B,KAAK,SAAS,CAAC;QACf,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,KAAK,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC;QACzB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;QAC3B,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC;IACzB,CAAC;AACH,CAAC;AAaD,MAAM,UAAU,+BAA+B,CAC7C,IAAY,EACZ,KAUE,EACF,UAAoC,EAAE;IAEtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,6BAA6B;YACpC,IAAI;YACJ,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,MAAM,EAAE,yBAAyB;SAClC,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC1D,MAAM,UAAU,GAAG,CAAC,IAAY,EAAsB,EAAE;QACtD,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,IAKtB,EAAsC,EAAE;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAClE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACjD,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY;SACb,CAAC;IACJ,CAAC,CAAC;IACF,OAAO;QACL,IAAI;QACJ,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE;gBACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;gBACpC,QAAQ,EAAE,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAClD,IAAI,EAAE,IAAI,CAAC,IAAc;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAiB;gBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAME;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC7D,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,SAAS;QAC1D,MAAM,IAAI,GAAG,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,EAAE,GAAG,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAClE,MAAM,IAAI,GACR,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACpE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;YACvB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,MAAM,GACV,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACxE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YACzB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,IAAI,GAA8B,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrD,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzC,IAAI,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC3D,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAC7C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"normalizeExternal.js","sourceRoot":"","sources":["../../../src/shared/analyzers/normalizeExternal.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,mBAAmB,GAEpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAItE,SAAS,yBAAyB,CAAC,KAAyB;IAC1D,QAAQ,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;QACnC,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;QAC3B,KAAK,SAAS,CAAC;QACf,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,KAAK,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC;QACzB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;QAC3B,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAA4B,EAC5B,OAAe;IAEf,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAqCD,MAAM,UAAU,+BAA+B,CAC7C,IAAY,EACZ,KAAmC,EACnC,UAAoC,EAAE;IAEtC,kFAAkF;IAClF,4DAA4D;IAC5D,MAAM,eAAe,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ;QAC5B,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5E,CAAC,CAAC,IAAI,CACT,CAAC;IACF,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACtD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,6BAA6B;YACpC,IAAI;YACJ,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,MAAM,EAAE,yBAAyB;SAClC,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC1D,MAAM,UAAU,GAAG,CAAC,IAAY,EAAsB,EAAE;QACtD,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,gFAAgF;IAChF,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,MAAM,aAAa,GAAG,CAAC,IAKtB,EAAsC,EAAE;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAClE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,UAAU;gBAAE,kBAAkB,IAAI,CAAC,CAAC;YAChD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACjD,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY;SACb,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACtC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE;YACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;YACpC,QAAQ,EAAE,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAClD,IAAI,EAAE,IAAI,CAAC,IAAc;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAiB;YAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,OAAO,CAAC,aAAa,EAAE,CAAC;QACtB,aAAa,EAAE,OAAO;QACtB,oBAAoB,EAAE,kBAAkB;KACzC,CAAC,CAAC;IACH,OAAO;QACL,IAAI;QACJ,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAME;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC7D,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,SAAS;QAC1D,MAAM,IAAI,GAAG,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,EAAE,GAAG,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAClE,MAAM,IAAI,GACR,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACpE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;YACvB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,MAAM,GACV,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACxE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YACzB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,IAAI,GAA8B,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrD,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzC,IAAI,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC3D,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAC7C,CAAC;AACJ,CAAC"}

package/dist/shared/analyzers/rubocop.d.ts

@@ -1,18 +1,19 @@
-import type { ExternalAnalyzerResults } from "./types.js";
+import type { ExternalAnalyzerParsedItem, ExternalAnalyzerParseReport, ExternalAnalyzerResults } from "./types.js";
 /**
- * Parse rubocop's `--format json` stdout into the generic item shape. Degrades
- * to `[]` on empty/malformed input or a missing `files` array.
+ * Parse rubocop's `--format json` stdout, REPORTING a degradation rather than
+ * swallowing it: unparsable JSON or a payload with no `files` array comes back as
+ * `parse_failed`, which the acquisition engine classifies `parse_error`. Before
+ * this, a rubocop invocation that crashed or printed a non-JSON banner produced the
+ * same `{results: []}` as a genuinely clean Ruby tree — the one signal the status
+ * contract was designed to carry was unreachable from this adapter.
  */
-export declare function parseRubocop(stdout: string): Array<{
-    id?: string;
-    category?: string;
-    severity?: string;
-    path?: string;
-    line_start?: number;
-    line_end?: number;
-    summary?: string;
-    rule?: string;
-}>;
+export declare function parseRubocopOutcome(stdout: string): ExternalAnalyzerParseReport;
+/**
+ * The item-list view of {@link parseRubocopOutcome}, for the audit/adapters
+ * normalization seam, which consumes items and reports coverage elsewhere. One
+ * implementation, two views — never two parsers that can drift.
+ */
+export declare function parseRubocop(stdout: string): ExternalAnalyzerParsedItem[];
 /**
  * Dedicated severity adapter: route rubocop's parsed items through the shared
  * generic normalizer so its output matches the exact ExternalAnalyzerResults

package/dist/shared/analyzers/rubocop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rubocop.d.ts","sourceRoot":"","sources":["../../../src/shared/analyzers/rubocop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAgD1D;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IAClD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC,CAsDD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,CAE5E"}
+{"version":3,"file":"rubocop.d.ts","sourceRoot":"","sources":["../../../src/shared/analyzers/rubocop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAgDpB;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,2BAA2B,CAwD/E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,0BAA0B,EAAE,CAEzE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,CAE5E"}

package/dist/shared/analyzers/rubocop.js

@@ -11,18 +11,33 @@ function mapRubocopSeverity(severity) {
     }
 }
 /**
- * Parse rubocop's `--format json` stdout into the generic item shape. Degrades
- * to `[]` on empty/malformed input or a missing `files` array.
+ * Parse rubocop's `--format json` stdout, REPORTING a degradation rather than
+ * swallowing it: unparsable JSON or a payload with no `files` array comes back as
+ * `parse_failed`, which the acquisition engine classifies `parse_error`. Before
+ * this, a rubocop invocation that crashed or printed a non-JSON banner produced the
+ * same `{results: []}` as a genuinely clean Ruby tree — the one signal the status
+ * contract was designed to carry was unreachable from this adapter.
  */
-export function parseRubocop(stdout) {
+export function parseRubocopOutcome(stdout) {
     let payload;
     try {
         payload = JSON.parse(stdout || "{}");
     }
     catch {
-        return [];
+        return {
+            items: [],
+            parse_failed: true,
+            note: "rubocop: output is not valid JSON",
+        };
+    }
+    if (!payload || typeof payload !== "object" || !Array.isArray(payload.files)) {
+        return {
+            items: [],
+            parse_failed: true,
+            note: "rubocop: output has no `files` array",
+        };
     }
-    const files = Array.isArray(payload.files) ? payload.files : [];
+    const files = payload.files;
     const items = [];
     for (const file of files) {
         if (!file || typeof file !== "object")
@@ -59,7 +74,15 @@ export function parseRubocop(stdout) {
             });
         }
     }
-    return items;
+    return { items };
+}
+/**
+ * The item-list view of {@link parseRubocopOutcome}, for the audit/adapters
+ * normalization seam, which consumes items and reports coverage elsewhere. One
+ * implementation, two views — never two parsers that can drift.
+ */
+export function parseRubocop(stdout) {
+    return parseRubocopOutcome(stdout).items;
 }
 /**
  * Dedicated severity adapter: route rubocop's parsed items through the shared

package/dist/shared/analyzers/rubocop.js.map

@@ -1 +1 @@
-{"version":3,"file":"rubocop.js","sourceRoot":"","sources":["../../../src/shared/analyzers/rubocop.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAmCzE,SAAS,kBAAkB,CAAC,QAA4B;IACtD,QAAQ,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC;QAChC,KAAK,OAAO,CAAC;QACb,KAAK,OAAO;YACV,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IAUzC,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAgB,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,KAAK,GASN,EAAE,CAAC;IACR,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,SAAS;YACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;YACxC,MAAM,SAAS,GACb,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;gBACrC,CAAC,CAAC,QAAQ,CAAC,UAAU;gBACrB,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;oBACjC,CAAC,CAAC,QAAQ,CAAC,IAAI;oBACf,CAAC,CAAC,SAAS,CAAC;YAClB,MAAM,OAAO,GAAG,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACjE,CAAC,CAAC,OAAO,CAAC,QAAQ;gBAClB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBACtE,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,IAAI,CAAC;YACX,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,WAAW,IAAI,IAAI,IAAI,IAAI,SAAS,IAAI,CAAC,EAAE;gBAC/C,QAAQ,EAAE,iBAAiB;gBAC3B,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC9C,IAAI;gBACJ,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,OAAO;gBACjB,OAAO;gBACP,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,+BAA+B,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"rubocop.js","sourceRoot":"","sources":["../../../src/shared/analyzers/rubocop.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAmCzE,SAAS,kBAAkB,CAAC,QAA4B;IACtD,QAAQ,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC;QAChC,KAAK,OAAO,CAAC;QACb,KAAK,OAAO;YACV,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAgB,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,KAAK,EAAE,EAAE;YACT,YAAY,EAAE,IAAI;YAClB,IAAI,EAAE,mCAAmC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO;YACL,KAAK,EAAE,EAAE;YACT,YAAY,EAAE,IAAI;YAClB,IAAI,EAAE,sCAAsC;SAC7C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAiC,EAAE,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,SAAS;YACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;YACxC,MAAM,SAAS,GACb,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;gBACrC,CAAC,CAAC,QAAQ,CAAC,UAAU;gBACrB,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;oBACjC,CAAC,CAAC,QAAQ,CAAC,IAAI;oBACf,CAAC,CAAC,SAAS,CAAC;YAClB,MAAM,OAAO,GAAG,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACjE,CAAC,CAAC,OAAO,CAAC,QAAQ;gBAClB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBACtE,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,IAAI,CAAC;YACX,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,WAAW,IAAI,IAAI,IAAI,IAAI,SAAS,IAAI,CAAC,EAAE;gBAC/C,QAAQ,EAAE,iBAAiB;gBAC3B,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC9C,IAAI;gBACJ,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,OAAO;gBACjB,OAAO;gBACP,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,+BAA+B,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1E,CAAC"}

package/dist/shared/analyzers/types.d.ts

@@ -111,17 +111,93 @@ export declare const ExternalAnalyzerOwnershipRootSchema: z.ZodObject<{
     confidence?: number | undefined;
     kind?: string | undefined;
 }>;
+/**
+ * The analyzer status vocabulary, single-sourced (artifact:analyzer-status-vocabulary).
+ * The zod enum below is BUILT from this tuple, so there is exactly one place a member
+ * is added — and {@link EXTERNAL_ANALYZER_STATUS_CLASSIFICATION} below is an exhaustive
+ * `Record` over it, so widening the tuple without classifying the new member is a
+ * COMPILE error rather than a silent fall-through to "the run was fine".
+ */
+export declare const EXTERNAL_ANALYZER_TOOL_STATUSES: readonly ["skipped", "success", "findings", "not_resolved", "spawn_error", "parse_error", "failed", "checksum_mismatch"];
+export type ExternalAnalyzerToolStatusValue = (typeof EXTERNAL_ANALYZER_TOOL_STATUSES)[number];
+/**
+ * What each status says about COVERAGE — the question every consumer of a status
+ * record is really asking. `clean` is the ONLY value that may be read as "this tool
+ * ran and found nothing"; `degraded` means the tool ran but its output cannot be
+ * trusted as coverage; `not_run` means no coverage was produced at all.
+ *
+ * Exhaustive by construction: adding a member to
+ * {@link EXTERNAL_ANALYZER_TOOL_STATUSES} without adding its row here fails
+ * `npm run check`, so a new status can never default into `clean`.
+ */
+/**
+ * What a status says about coverage. Named as a type so the vocabulary has ONE
+ * home and every consumer of the classification speaks it by name.
+ */
+export type ExternalAnalyzerCoverage = "clean" | "findings" | "degraded" | "not_run";
+/**
+ * True when a coverage class means NO trustworthy coverage was produced — the
+ * single member-level answer. Both consumers ask it here rather than each
+ * re-typing `=== "degraded" || === "not_run"`, so widening the coverage
+ * vocabulary is one edit guarded by a compile error, never a silent divergence
+ * between two copies of the same comparison.
+ */
+export declare function isNonCleanAnalyzerCoverage(coverage: ExternalAnalyzerCoverage): boolean;
+export declare const EXTERNAL_ANALYZER_STATUS_CLASSIFICATION: Record<ExternalAnalyzerToolStatusValue, ExternalAnalyzerCoverage>;
+/**
+ * True when a RECORD means "this tool did not produce trustworthy coverage".
+ *
+ * The status member alone cannot answer this, because degradation is not always
+ * terminal: a run can exit non-zero, fail to parse, or drop rows and STILL surface
+ * some items, which lands it on `findings` — an affirmative member describing a
+ * partially-crashed run. Asking the member in isolation reports such a run as
+ * trustworthy, which is the same success-shaped-empty mistake one level up.
+ *
+ * So the question is asked of the whole record: degraded when the member says so, OR
+ * when the record carries a marker that findings were LOST —
+ *  - a non-zero exit, or a NULL exit (killed by a signal, never exited on its own);
+ *  - `dropped_rows` (parser rows plus normalizer items the run failed to report).
+ *
+ * `source_read_failures` is deliberately NOT in that set. Provenance is optional
+ * everywhere on this contract: an item whose anchor could not be resolved is still a
+ * fully reported lead, so an unresolved anchor is a weaker join key, not lost
+ * coverage. It stays on the record because it is worth surfacing; it just does not
+ * make the run untrustworthy.
+ *
+ * {@link EXTERNAL_ANALYZER_STATUS_CLASSIFICATION} remains the status-MEMBER map and
+ * the compile gate; this is the consumer-facing answer.
+ */
+export declare function isDegradedExternalAnalyzerStatus(record: Pick<ExternalAnalyzerToolStatus, "status" | "exit_code" | "dropped_rows">): boolean;
 export declare const ExternalAnalyzerToolStatusSchema: z.ZodObject<{
     tool: z.ZodString;
     command: z.ZodOptional<z.ZodString>;
     resolved: z.ZodBoolean;
-    status: z.ZodEnum<["skipped", "success", "findings", "not_resolved", "spawn_error", "parse_error", "failed"]>;
+    status: z.ZodEnum<["skipped", "success", "findings", "not_resolved", "spawn_error", "parse_error", "failed", "checksum_mismatch"]>;
     exit_code: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     error: z.ZodOptional<z.ZodString>;
     output_snippet: z.ZodOptional<z.ZodString>;
+    /**
+     * The tool's own stderr, bounded. Present whenever stderr carried text — it is
+     * the only post-run evidence of WHY a non-zero exit or a stderr-only run failed.
+     */
+    stderr_snippet: z.ZodOptional<z.ZodString>;
+    /**
+     * Everything this run failed to report, as ONE count: rows the parser understood
+     * the shape of but could not use (malformed CSV/JSON rows), PLUS items the
+     * normalizer discarded for a missing path or summary. The engine merges the two
+     * because they are the same question to a consumer — how much did this run lose?
+     * A non-zero count means the run under-reports; it is never a clean scan.
+     */
+    dropped_rows: z.ZodOptional<z.ZodNumber>;
+    /**
+     * Items that named a path + line but whose source could not be read, so their
+     * content-anchored provenance was dropped. Distinguishes a broken read seam from
+     * a tool that legitimately reports no line numbers.
+     */
+    source_read_failures: z.ZodOptional<z.ZodNumber>;
     duration_ms: z.ZodOptional<z.ZodNumber>;
 }, "strict", z.ZodTypeAny, {
-    status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+    status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
     resolved: boolean;
     tool: string;
     error?: string | undefined;
@@ -129,8 +205,11 @@ export declare const ExternalAnalyzerToolStatusSchema: z.ZodObject<{
     duration_ms?: number | undefined;
     exit_code?: number | null | undefined;
     output_snippet?: string | undefined;
+    stderr_snippet?: string | undefined;
+    dropped_rows?: number | undefined;
+    source_read_failures?: number | undefined;
 }, {
-    status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+    status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
     resolved: boolean;
     tool: string;
     error?: string | undefined;
@@ -138,8 +217,50 @@ export declare const ExternalAnalyzerToolStatusSchema: z.ZodObject<{
     duration_ms?: number | undefined;
     exit_code?: number | null | undefined;
     output_snippet?: string | undefined;
+    stderr_snippet?: string | undefined;
+    dropped_rows?: number | undefined;
+    source_read_failures?: number | undefined;
 }>;
 export type ExternalAnalyzerToolStatus = z.infer<typeof ExternalAnalyzerToolStatusSchema>;
+/**
+ * The generic pre-normalization item shape every analyzer parser emits. `from`/`to`
+ * are the optional dataflow-edge endpoints `normalizeGenericExternalEdges` reads.
+ */
+export interface ExternalAnalyzerParsedItem {
+    id?: string;
+    category?: string;
+    severity?: string;
+    path?: string;
+    line_start?: number;
+    line_end?: number;
+    summary?: string;
+    rule?: string;
+    raw?: unknown;
+    from?: unknown;
+    to?: unknown;
+}
+/**
+ * A parse that can SAY it degraded. A bare `[]` cannot distinguish "the tool found
+ * nothing" from "the payload was unparseable" or "half the rows were malformed", and
+ * that ambiguity is what makes a broken analyzer read as a clean scan downstream.
+ */
+export interface ExternalAnalyzerParseReport {
+    items: ExternalAnalyzerParsedItem[];
+    /** The payload could not be parsed at all (bad JSON/CSV, or the wrong top-level shape). */
+    parse_failed?: boolean;
+    /** Rows recognised but unusable — counted, never silently dropped. */
+    dropped_rows?: number;
+    /** Human-readable cause, carried onto the status record. */
+    note?: string;
+}
+/**
+ * What `ExternalAnalyzerCandidate.parse` returns. A plain array is the "nothing to
+ * report beyond the items" form; the report form is how a parser reports degradation.
+ * Read both through {@link readParseOutcome} so no consumer has to branch.
+ */
+export type ExternalAnalyzerParseOutcome = ExternalAnalyzerParsedItem[] | ExternalAnalyzerParseReport;
+/** Normalize either parse-outcome form into the report form. */
+export declare function readParseOutcome(outcome: ExternalAnalyzerParseOutcome | undefined | null): Required<Pick<ExternalAnalyzerParseReport, "items">> & Omit<ExternalAnalyzerParseReport, "items">;
 /** Imported analyzer output captured at a single generation time. */
 export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
     tool: z.ZodString;
@@ -190,13 +311,32 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         tool: z.ZodString;
         command: z.ZodOptional<z.ZodString>;
         resolved: z.ZodBoolean;
-        status: z.ZodEnum<["skipped", "success", "findings", "not_resolved", "spawn_error", "parse_error", "failed"]>;
+        status: z.ZodEnum<["skipped", "success", "findings", "not_resolved", "spawn_error", "parse_error", "failed", "checksum_mismatch"]>;
         exit_code: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         error: z.ZodOptional<z.ZodString>;
         output_snippet: z.ZodOptional<z.ZodString>;
+        /**
+         * The tool's own stderr, bounded. Present whenever stderr carried text — it is
+         * the only post-run evidence of WHY a non-zero exit or a stderr-only run failed.
+         */
+        stderr_snippet: z.ZodOptional<z.ZodString>;
+        /**
+         * Everything this run failed to report, as ONE count: rows the parser understood
+         * the shape of but could not use (malformed CSV/JSON rows), PLUS items the
+         * normalizer discarded for a missing path or summary. The engine merges the two
+         * because they are the same question to a consumer — how much did this run lose?
+         * A non-zero count means the run under-reports; it is never a clean scan.
+         */
+        dropped_rows: z.ZodOptional<z.ZodNumber>;
+        /**
+         * Items that named a path + line but whose source could not be read, so their
+         * content-anchored provenance was dropped. Distinguishes a broken read seam from
+         * a tool that legitimately reports no line numbers.
+         */
+        source_read_failures: z.ZodOptional<z.ZodNumber>;
         duration_ms: z.ZodOptional<z.ZodNumber>;
     }, "strict", z.ZodTypeAny, {
-        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
         resolved: boolean;
         tool: string;
         error?: string | undefined;
@@ -204,8 +344,11 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         duration_ms?: number | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
+        stderr_snippet?: string | undefined;
+        dropped_rows?: number | undefined;
+        source_read_failures?: number | undefined;
     }, {
-        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
         resolved: boolean;
         tool: string;
         error?: string | undefined;
@@ -213,6 +356,9 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         duration_ms?: number | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
+        stderr_snippet?: string | undefined;
+        dropped_rows?: number | undefined;
+        source_read_failures?: number | undefined;
     }>, "many">>;
     results: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -310,7 +456,7 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         kind?: string | undefined;
     }[] | undefined;
     tool_statuses?: {
-        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
         resolved: boolean;
         tool: string;
         error?: string | undefined;
@@ -318,6 +464,9 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         duration_ms?: number | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
+        stderr_snippet?: string | undefined;
+        dropped_rows?: number | undefined;
+        source_read_failures?: number | undefined;
     }[] | undefined;
 }, {
     tool: string;
@@ -354,7 +503,7 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         kind?: string | undefined;
     }[] | undefined;
     tool_statuses?: {
-        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
         resolved: boolean;
         tool: string;
         error?: string | undefined;
@@ -362,6 +511,9 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         duration_ms?: number | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
+        stderr_snippet?: string | undefined;
+        dropped_rows?: number | undefined;
+        source_read_failures?: number | undefined;
     }[] | undefined;
 }>;
 export type ExternalAnalyzerResults = z.infer<typeof ExternalAnalyzerResultsSchema>;
@@ -384,13 +536,32 @@ export declare const ExternalAnalyzerAcquisitionMarkerSchema: z.ZodObject<{
         tool: z.ZodString;
         command: z.ZodOptional<z.ZodString>;
         resolved: z.ZodBoolean;
-        status: z.ZodEnum<["skipped", "success", "findings", "not_resolved", "spawn_error", "parse_error", "failed"]>;
+        status: z.ZodEnum<["skipped", "success", "findings", "not_resolved", "spawn_error", "parse_error", "failed", "checksum_mismatch"]>;
         exit_code: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         error: z.ZodOptional<z.ZodString>;
         output_snippet: z.ZodOptional<z.ZodString>;
+        /**
+         * The tool's own stderr, bounded. Present whenever stderr carried text — it is
+         * the only post-run evidence of WHY a non-zero exit or a stderr-only run failed.
+         */
+        stderr_snippet: z.ZodOptional<z.ZodString>;
+        /**
+         * Everything this run failed to report, as ONE count: rows the parser understood
+         * the shape of but could not use (malformed CSV/JSON rows), PLUS items the
+         * normalizer discarded for a missing path or summary. The engine merges the two
+         * because they are the same question to a consumer — how much did this run lose?
+         * A non-zero count means the run under-reports; it is never a clean scan.
+         */
+        dropped_rows: z.ZodOptional<z.ZodNumber>;
+        /**
+         * Items that named a path + line but whose source could not be read, so their
+         * content-anchored provenance was dropped. Distinguishes a broken read seam from
+         * a tool that legitimately reports no line numbers.
+         */
+        source_read_failures: z.ZodOptional<z.ZodNumber>;
         duration_ms: z.ZodOptional<z.ZodNumber>;
     }, "strict", z.ZodTypeAny, {
-        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
         resolved: boolean;
         tool: string;
         error?: string | undefined;
@@ -398,8 +569,11 @@ export declare const ExternalAnalyzerAcquisitionMarkerSchema: z.ZodObject<{
         duration_ms?: number | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
+        stderr_snippet?: string | undefined;
+        dropped_rows?: number | undefined;
+        source_read_failures?: number | undefined;
     }, {
-        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
         resolved: boolean;
         tool: string;
         error?: string | undefined;
@@ -407,11 +581,14 @@ export declare const ExternalAnalyzerAcquisitionMarkerSchema: z.ZodObject<{
         duration_ms?: number | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
+        stderr_snippet?: string | undefined;
+        dropped_rows?: number | undefined;
+        source_read_failures?: number | undefined;
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
     enabled: boolean;
     tool_statuses: {
-        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
         resolved: boolean;
         tool: string;
         error?: string | undefined;
@@ -419,12 +596,15 @@ export declare const ExternalAnalyzerAcquisitionMarkerSchema: z.ZodObject<{
         duration_ms?: number | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
+        stderr_snippet?: string | undefined;
+        dropped_rows?: number | undefined;
+        source_read_failures?: number | undefined;
     }[];
     generated_at?: string | undefined;
 }, {
     enabled: boolean;
     tool_statuses: {
-        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error";
+        status: "failed" | "findings" | "skipped" | "spawn_error" | "success" | "not_resolved" | "parse_error" | "checksum_mismatch";
         resolved: boolean;
         tool: string;
         error?: string | undefined;
@@ -432,6 +612,9 @@ export declare const ExternalAnalyzerAcquisitionMarkerSchema: z.ZodObject<{
         duration_ms?: number | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
+        stderr_snippet?: string | undefined;
+        dropped_rows?: number | undefined;
+        source_read_failures?: number | undefined;
     }[];
     generated_at?: string | undefined;
 }>;

package/dist/shared/analyzers/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/analyzers/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,sFAAsF;AACtF,eAAO,MAAM,gCAAgC;;;;;;;;;IAUzC,iFAAiF;;IAEjF,yEAAyE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGlE,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;EAQjC,CAAC;AACZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;EAQrC,CAAC;AAEZ,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBlC,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;IAKtC;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA5EH,iFAAiF;;QAEjF,yEAAyE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+ElE,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMzC,CAAC;AACZ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,SAAS,EAC/C,QAAQ,EAAE,uBAAuB,GAChC,uBAAuB,EAAE,CAI3B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/analyzers/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,sFAAsF;AACtF,eAAO,MAAM,gCAAgC;;;;;;;;;IAUzC,iFAAiF;;IAEjF,yEAAyE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGlE,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;EAQjC,CAAC;AACZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;EAQrC,CAAC;AAEZ;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,0HAUlC,CAAC;AAEX,MAAM,MAAM,+BAA+B,GACzC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD;;;;;;;;;GASG;AACH;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAcrF;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAEtF;AAED,eAAO,MAAM,uCAAuC,EAAE,MAAM,CAC1D,+BAA+B,EAC/B,wBAAwB,CAUzB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,GAAG,WAAW,GAAG,cAAc,CAAC,GAChF,OAAO,CAOT;AAED,eAAO,MAAM,gCAAgC;;;;;;;;IASzC;;;OAGG;;IAEH;;;;;;OAMG;;IAEH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;EAII,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,0BAA0B,EAAE,CAAC;IACpC,2FAA2F;IAC3F,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,MAAM,4BAA4B,GACpC,0BAA0B,EAAE,GAC5B,2BAA2B,CAAC;AAEhC,gEAAgE;AAChE,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,4BAA4B,GAAG,SAAS,GAAG,IAAI,GACvD,QAAQ,CAAC,IAAI,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC,GACrD,IAAI,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAe3C;AAED,qEAAqE;AACrE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;IAKtC;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAlGH;;;WAGG;;QAEH;;;;;;WAMG;;QAEH;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAlLH,iFAAiF;;QAEjF,yEAAyE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsQlE,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uCAAuC;;;;;;;;;;;QAxHhD;;;WAGG;;QAEH;;;;;;WAMG;;QAEH;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6GI,CAAC;AACZ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,SAAS,EAC/C,QAAQ,EAAE,uBAAuB,GAChC,uBAAuB,EAAE,CAI3B"}