cascivo 0.8.1 → 1.0.0

package/dist/{audit-C4ul-2Ix.mjs → audit-DbYrV9SC.mjs}

@@ -1,7 +1,6 @@
 import { fileURLToPath } from "node:url";
-import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { dirname, extname, join } from "node:path";
-import { tmpdir } from "node:os";
 //#region src/utils/contract-pure.ts
 /** Normalize a color/size value for catalog comparison: lowercase, strip spaces. */
 function normalizeValue(value) {
@@ -808,19 +807,31 @@ function findRegistry(startDir) {
 }
 const CONTRACT_URL = "https://cascivo.com/audit-contract.json";
 /**
-* Download the contract, caching it by version so a second run is offline-fast. Returns
-* null on any failure — the audit must never hard-depend on the network.
+* Shape-check a contract payload, returning null when it does not hold.
+*
+* The contract arrives from the network, from an explicit `--contract` path, or
+* from the copy bundled in this package. `fromBundled` indexes into `tokens`
+* and `components` directly, so a payload missing either produced a TypeError
+* deep in the audit instead of a message naming the bad file.
+*/
+function asBundledContract(raw) {
+	if (typeof raw !== "object" || raw === null) return null;
+	const o = raw;
+	if (typeof o["version"] !== "string") return null;
+	if (!Array.isArray(o["tokens"]) || !Array.isArray(o["components"])) return null;
+	if (!Array.isArray(o["content"])) return null;
+	return raw;
+}
+/**
+* Download the contract. Returns null on any failure — the audit must never
+* hard-depend on the network.
 */
 async function fetchContract(report) {
 	try {
 		const response = await fetch(CONTRACT_URL, { signal: AbortSignal.timeout(5e3) });
 		if (!response.ok) return null;
-		const bundled = await response.json();
-		try {
-			const target = cachePath(bundled.version);
-			mkdirSync(dirname(target), { recursive: true });
-			writeFileSync(target, JSON.stringify(bundled));
-		} catch {}
+		const bundled = asBundledContract(await response.json());
+		if (!bundled) return null;
 		report(`network: ${CONTRACT_URL}`);
 		return fromBundled(bundled);
 	} catch {
@@ -840,17 +851,13 @@ function fromBundled(bundled) {
 		...bundled.contentPrimitives ? { contentPrimitives: bundled.contentPrimitives } : {}
 	});
 }
-/** Where the network fallback caches a downloaded contract. */
-function cachePath(version) {
-	return join(process.env["XDG_CACHE_HOME"] ?? join(process.env["HOME"] ?? tmpdir(), ".cache"), "cascivo", `audit-contract-${version}.json`);
-}
 /**
 * Load the cascade contract. Resolution order, first hit wins:
 *
 *   1. an explicit path (`--contract <file>` / `options.contractPath`)
 *   2. the dev-monorepo artifacts (`apps/site/public/…` + `registry.json`)
 *   3. the contract bundled in this package  ← what makes `audit` work in a real project
-*   4. `https://cascivo.com/audit-contract.json`, cached under `~/.cache/cascivo/`
+*   4. `https://cascivo.com/audit-contract.json`
 *
 * (3) is why this exists: the walk-up in (2) only ever finds anything inside this monorepo,
 * so `cascivo audit --ai` died with "token catalog not found" in every consumer project —
@@ -862,7 +869,9 @@ async function loadContract(options) {
 	if (options?.contractPath) {
 		if (!existsSync(options.contractPath)) throw new Error(`contract file not found: ${options.contractPath}`);
 		report(`explicit: ${options.contractPath}`);
-		return fromBundled(JSON.parse(readFileSync(options.contractPath, "utf8")));
+		const explicit = asBundledContract(JSON.parse(readFileSync(options.contractPath, "utf8")));
+		if (!explicit) throw new Error(`not a valid audit contract: ${options.contractPath}`);
+		return fromBundled(explicit);
 	}
 	const docsPublic = findDocsPublic(HERE) ?? findDocsPublic(process.cwd());
 	const catalogPath = options?.catalogPath ?? (docsPublic ? join(docsPublic, "tokens.catalog.json") : null);
@@ -873,7 +882,9 @@ async function loadContract(options) {
 		const bundledDist = join(HERE, "..", "generated", "audit-contract.json");
 		for (const candidate of [bundled, bundledDist]) if (existsSync(candidate)) {
 			report(`bundled: ${candidate}`);
-			return fromBundled(JSON.parse(readFileSync(candidate, "utf8")));
+			const shipped = asBundledContract(JSON.parse(readFileSync(candidate, "utf8")));
+			if (!shipped) throw new Error(`not a valid audit contract: ${candidate}`);
+			return fromBundled(shipped);
 		}
 		const fetched = await fetchContract(report);
 		if (fetched) return fetched;
@@ -1080,4 +1091,4 @@ async function audit(args, _config) {
 //#endregion
 export { audit };
 
-//# sourceMappingURL=audit-C4ul-2Ix.mjs.map
+//# sourceMappingURL=audit-DbYrV9SC.mjs.map

package/dist/audit-DbYrV9SC.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-DbYrV9SC.mjs","names":["MESSAGE"],"sources":["../src/utils/contract-pure.ts","../src/audit-ai/css-literals.ts","../src/audit-ai/jsx-props.ts","../src/audit-ai/raw-strings.ts","../src/audit-ai/required-props.ts","../src/utils/css-layers.ts","../src/audit-ai/unlayered.ts","../src/audit-ai/vendor-css.ts","../src/audit-ai/suppress.ts","../src/utils/contract.ts","../src/commands/audit.ts"],"sourcesContent":["export interface PropInfo {\n  name: string\n  type: string\n  required: boolean\n}\n\nexport interface ComponentInfo {\n  props: PropInfo[]\n  /** True if any prop has required: true */\n  hasRequiredProps: boolean\n  /**\n   * Props that have required: true, EXCLUDING `children`. A component's children arrive as\n   * JSX element content, not as an attribute, and the audit's prop scan only ever sees the\n   * opening tag — so a required `children` reported every correct usage as missing. It is\n   * checked separately, via the self-closing flag.\n   */\n  requiredProps: string[]\n  /** True when the component's manifest marks `children` required. */\n  requiresChildren: boolean\n  /** True if the component declares user-facing chrome text (intent.content) */\n  hasContent: boolean\n  /**\n   * True for a typography primitive whose children are authored page prose rather than\n   * chrome the component owns. The `raw-string` rule skips these — otherwise every\n   * sentence on every page warns and the real findings are buried.\n   */\n  isContentPrimitive: boolean\n  /**\n   * Number of distinct registry entries that share this display name. More than one means\n   * the name is ambiguous (`AppShell` is both the npm component and the copy-paste\n   * `layout/app-shell`, with different prop surfaces) and the props below are the UNION —\n   * see `buildContract`.\n   */\n  entryCount: number\n}\n\nexport interface Contract {\n  /** Map from normalized color/size value → token names */\n  tokensByValue: Map<string, string[]>\n  /** Map from component name (PascalCase) → component info */\n  components: Map<string, ComponentInfo>\n  /**\n   * DOM attribute names cascivo components inherit from a React `*HTMLAttributes` base and\n   * spread onto their element — resolved from the types at contract-generation time, not\n   * hand-listed. Empty when reading an older contract that predates the field.\n   */\n  domAttributes: Set<string>\n}\n\ninterface TokenEntry {\n  name: string\n  resolvedDefault: string | null\n}\n\ninterface CatalogFile {\n  tokens: TokenEntry[]\n}\n\ninterface RegistryPropMeta {\n  name: string\n  type?: string\n  required?: boolean\n}\n\ninterface RegistryComponentMeta {\n  name: string\n  props?: RegistryPropMeta[]\n}\n\ninterface RegistryEntry {\n  meta?: RegistryComponentMeta\n}\n\ninterface RegistryFile {\n  components: RegistryEntry[]\n}\n\ninterface ContextComponentEntry {\n  name: string\n  intent?: { content?: unknown }\n}\n\ninterface ContextFile {\n  components: ContextComponentEntry[]\n}\n\nexport interface BuildContractInput {\n  catalog: CatalogFile\n  registry: RegistryFile\n  context: ContextFile\n  /** Inherited DOM attributes, from the shipped contract. Absent in older contracts. */\n  domAttributes?: string[]\n  /** Typography-primitive names, from the shipped contract. Absent in older contracts. */\n  contentPrimitives?: string[]\n}\n\n/** Normalize a color/size value for catalog comparison: lowercase, strip spaces. */\nexport function normalizeValue(value: string): string {\n  return value.toLowerCase().replace(/\\s+/g, '')\n}\n\n/** Pure builder — assemble a Contract from already-parsed JSON. Testable without fs. */\nexport function buildContract(input: BuildContractInput): Contract {\n  const tokensByValue = new Map<string, string[]>()\n  for (const token of input.catalog.tokens) {\n    if (token.resolvedDefault == null) continue\n    const key = normalizeValue(token.resolvedDefault)\n    const list = tokensByValue.get(key)\n    if (list) list.push(token.name)\n    else tokensByValue.set(key, [token.name])\n  }\n\n  const contentNames = new Set<string>()\n  const primitiveNames = new Set<string>(input.contentPrimitives ?? [])\n  for (const c of input.context.components) {\n    if (c.intent?.content) contentNames.add(c.name)\n  }\n\n  // Several registry entries share a display name — `AppShell` is both the npm component\n  // (props: header/nav/children/…) and the copy-paste `layout/app-shell` (props:\n  // header/sideNav/aside/persistKey/…), and `Calendar` is both the component and the chart.\n  // Keying a Map by name meant the last one won, so every adopter of `@cascivo/react`'s\n  // AppShell was audited against a component they don't have: `nav` came back as an\n  // \"unknown prop\" and `sideNav` was the only recognised slot.\n  //\n  // A JSX name alone cannot tell the entries apart, so the contract merges them: props are\n  // the UNION (no false `unknown-prop`), and `required` only survives when EVERY entry with\n  // that name requires it (no false `missing-prop`).\n  const byName = new Map<string, RegistryComponentMeta[]>()\n  for (const entry of input.registry.components) {\n    const meta = entry.meta\n    if (!meta?.name) continue\n    const list = byName.get(meta.name)\n    if (list) list.push(meta)\n    else byName.set(meta.name, [meta])\n  }\n\n  const components = new Map<string, ComponentInfo>()\n  for (const [name, metas] of byName) {\n    const props = new Map<string, PropInfo>()\n    for (const meta of metas) {\n      for (const p of meta.props ?? []) {\n        const existing = props.get(p.name)\n        // Required only if required in every entry that declares the prop.\n        const required = (existing?.required ?? true) && p.required === true\n        props.set(p.name, { name: p.name, type: p.type ?? 'unknown', required })\n      }\n    }\n    // A prop absent from one of the entries can't be required overall.\n    if (metas.length > 1) {\n      for (const [propName, info] of props) {\n        const inEvery = metas.every((m) => (m.props ?? []).some((p) => p.name === propName))\n        if (!inEvery) props.set(propName, { ...info, required: false })\n      }\n    }\n    const all = [...props.values()]\n    // `children` is element content, not an attribute — tracked separately.\n    const requiredProps = all.filter((p) => p.required && p.name !== 'children').map((p) => p.name)\n    components.set(name, {\n      props: all,\n      requiredProps,\n      hasRequiredProps: requiredProps.length > 0,\n      requiresChildren: all.some((p) => p.name === 'children' && p.required),\n      hasContent: contentNames.has(name),\n      isContentPrimitive: primitiveNames.has(name),\n      entryCount: metas.length,\n    })\n  }\n\n  return { tokensByValue, components, domAttributes: new Set(input.domAttributes ?? []) }\n}\n","import type { Contract } from '../utils/contract-pure.js'\nimport { normalizeValue } from '../utils/contract-pure.js'\n\nexport interface LiteralFinding {\n  file: string\n  line: number\n  property: string\n  value: string\n  level: 'error' | 'warn' | 'info'\n  rule: 'hardcoded-value'\n  /** only when exactly one catalog match */\n  suggestedToken?: string\n  /** when multiple catalog matches → info */\n  allMatches?: string[]\n}\n\n/** Visual CSS properties whose literal values should be tokens. */\nconst VISUAL_PROPS = new Set([\n  'color',\n  'background',\n  'background-color',\n  'border-color',\n  'box-shadow',\n  'border-radius',\n  'font-size',\n  'gap',\n  'padding',\n  'margin',\n  'width',\n  'height',\n])\n\n/** Inline-style camelCase → kebab-case for the props we care about. */\nconst INLINE_PROP_MAP: Record<string, string> = {\n  color: 'color',\n  background: 'background',\n  backgroundColor: 'background-color',\n  borderColor: 'border-color',\n  boxShadow: 'box-shadow',\n  borderRadius: 'border-radius',\n  fontSize: 'font-size',\n  gap: 'gap',\n  padding: 'padding',\n  margin: 'margin',\n  width: 'width',\n  height: 'height',\n}\n\n/** A literal value worth checking: hex, oklch/rgb/hsl(a), or px/rem number. */\nfunction isLiteralValue(value: string): boolean {\n  const v = value.trim()\n  if (v.includes('var(')) return false\n  if (/^#[0-9a-fA-F]{3,8}$/.test(v)) return true\n  if (/^(oklch|oklab|rgb|rgba|hsl|hsla)\\(/i.test(v)) return true\n  if (/^-?\\d*\\.?\\d+(px|rem)$/.test(v)) return true\n  return false\n}\n\nfunction classify(\n  value: string,\n  contract: Contract,\n): Pick<LiteralFinding, 'level' | 'suggestedToken' | 'allMatches'> | null {\n  const matches = contract.tokensByValue.get(normalizeValue(value))\n  if (!matches || matches.length === 0) return null\n  const first = matches[0]\n  if (matches.length === 1 && first) return { level: 'error', suggestedToken: first }\n  return { level: 'info', allMatches: matches }\n}\n\n/**\n * Character ranges covered by a JSX `style={{ … }}` object.\n *\n * The inline-style scan used to run over every `prop: 'value'` pair in a `.tsx` file, so a\n * plain data object was audited as if it were CSS: a `DataTable` column's\n * `width: '3rem'` was reported as a hardcoded value that should be `--cascivo-space-12`.\n * A spacing token is not the right unit for a table column, and the object was never a\n * style in the first place — the rule was matching the literal, not the context.\n */\nfunction styleObjectRanges(source: string): Array<[number, number]> {\n  const ranges: Array<[number, number]> = []\n  const re = /style\\s*=\\s*\\{/g\n  for (const m of source.matchAll(re)) {\n    let depth = 0\n    let quote = ''\n    for (let i = m.index! + m[0].length - 1; i < source.length; i++) {\n      const ch = source[i]\n      if (quote) {\n        if (ch === quote) quote = ''\n        continue\n      }\n      if (ch === '\"' || ch === \"'\" || ch === '`') {\n        quote = ch\n        continue\n      }\n      if (ch === '{') depth++\n      else if (ch === '}') {\n        depth--\n        if (depth === 0) {\n          ranges.push([m.index!, i])\n          break\n        }\n      }\n    }\n  }\n  return ranges\n}\n\n/**\n * Detect literal color/size values in CSS declarations and TSX inline styles\n * that exactly match a known cascade token. Heuristic, line-based — no full\n * CSS/JS parse. Values with no catalog match are NOT flagged (arbitrary brand\n * values are allowed).\n */\nexport function findCssLiteralViolations(\n  source: string,\n  filename: string,\n  contract: Contract,\n): LiteralFinding[] {\n  const findings: LiteralFinding[] = []\n  const lines = source.split('\\n')\n  const styleRanges = styleObjectRanges(source)\n  // Absolute offset of the start of each line, so a match can be tested against the ranges.\n  const lineStarts: number[] = []\n  let offset = 0\n  for (const line of lines) {\n    lineStarts.push(offset)\n    offset += line.length + 1\n  }\n  const inStyleObject = (absolute: number): boolean =>\n    styleRanges.some(([start, end]) => absolute >= start && absolute <= end)\n\n  // CSS declaration: `property: value;` (also matches the kebab props inside style=\"...\")\n  const cssDecl = /(^|[;{\\s])([a-z-]+)\\s*:\\s*([^;}{]+?)\\s*(?=[;}]|$)/gi\n  // Inline JSX style object: `color: '#fff'` or `color: \"#fff\"`\n  const inlineDecl = /([A-Za-z][A-Za-z]*)\\s*:\\s*(['\"])([^'\"]+)\\2/g\n\n  for (let i = 0; i < lines.length; i++) {\n    const line = lines[i]\n    if (line === undefined) continue\n    const seen = new Set<string>()\n\n    for (const m of line.matchAll(cssDecl)) {\n      if (m[2] === undefined || m[3] === undefined) continue\n      const prop = m[2].toLowerCase()\n      const rawValue = m[3].trim()\n      if (!VISUAL_PROPS.has(prop)) continue\n      if (!isLiteralValue(rawValue)) continue\n      const cls = classify(rawValue, contract)\n      if (!cls) continue\n      const key = `${prop}|${rawValue}`\n      seen.add(key)\n      findings.push({\n        file: filename,\n        line: i + 1,\n        property: prop,\n        value: rawValue,\n        rule: 'hardcoded-value',\n        ...cls,\n      })\n    }\n\n    for (const m of line.matchAll(inlineDecl)) {\n      if (m[1] === undefined || m[3] === undefined) continue\n      const prop = INLINE_PROP_MAP[m[1]]\n      if (!prop) continue\n      // Only inside an actual `style={{ … }}`; a data object that happens to have a\n      // `width` key is not CSS.\n      if (!inStyleObject((lineStarts[i] ?? 0) + (m.index ?? 0))) continue\n      const rawValue = m[3].trim()\n      if (!isLiteralValue(rawValue)) continue\n      const key = `${prop}|${rawValue}`\n      if (seen.has(key)) continue\n      const cls = classify(rawValue, contract)\n      if (!cls) continue\n      // Inline TSX `style={{…}}` overrides are a sanctioned fast-prototyping escape\n      // hatch — surface a gentle `warn` (not a loop-blocking `error`) so an agent can\n      // finish. `.css`-file literals stay `error`: there the fix is mechanical (`--fix`).\n      const inlineCls = cls.level === 'error' ? { ...cls, level: 'warn' as const } : cls\n      findings.push({\n        file: filename,\n        line: i + 1,\n        property: prop,\n        value: rawValue,\n        rule: 'hardcoded-value',\n        ...inlineCls,\n      })\n    }\n  }\n\n  return findings\n}\n","import type { Contract } from '../utils/contract-pure.js'\n\nexport interface PropFinding {\n  file: string\n  line: number\n  component: string\n  prop: string\n  level: 'error' | 'info'\n  rule: 'unknown-prop' | 'spread-suppressed'\n  message: string\n}\n\n/** Props always allowed on any cascade component (DOM passthrough / React intrinsics). */\nexport const PASSTHROUGH = new Set(['className', 'style', 'id', 'ref', 'key', 'children'])\n\n/**\n * Standard HTML/React DOM attributes. Every cascade component extends an\n * `HTMLAttributes` interface and spreads `{...props}` onto its element (verified\n * in button.tsx, card.tsx, …), so these are valid at runtime even though the\n * hand-written `*.meta.ts` prop lists (the audit contract) don't enumerate them.\n * Without this set, a legitimate `type`/`name`/`title`/`tabIndex` on a Button is\n * a non-suppressible `unknown-prop` error — the audit-loop deadlock.\n */\nexport const HTML_PASSTHROUGH = new Set([\n  'type',\n  'name',\n  'value',\n  'defaultValue',\n  'checked',\n  'defaultChecked',\n  'placeholder',\n  'title',\n  'role',\n  'tabIndex',\n  'form',\n  'href',\n  'target',\n  'rel',\n  'download',\n  'src',\n  'alt',\n  'width',\n  'height',\n  'loading',\n  'autoComplete',\n  'autoFocus',\n  'required',\n  'readOnly',\n  'min',\n  'max',\n  'step',\n  'rows',\n  'cols',\n  'wrap',\n  'maxLength',\n  'minLength',\n  'pattern',\n  'multiple',\n  'accept',\n  'size',\n  'dir',\n  'lang',\n  'hidden',\n  'draggable',\n  'spellCheck',\n  'contentEditable',\n  'inputMode',\n  'enterKeyHint',\n  'htmlFor',\n  'slot',\n  'disabled',\n  'open',\n])\n\nfunction isPassthrough(prop: string, contract?: Contract): boolean {\n  if (PASSTHROUGH.has(prop)) return true\n  // Resolved from the component types at contract-generation time. `HTML_PASSTHROUGH` below\n  // is the pre-contract fallback for an older shipped contract that lacks the field.\n  if (contract?.domAttributes.has(prop) === true) return true\n  if (HTML_PASSTHROUGH.has(prop)) return true\n  if (prop.startsWith('data-')) return true\n  if (prop.startsWith('aria-')) return true\n  if (/^on[A-Z]/.test(prop)) return true\n  return false\n}\n\n/**\n * Local JSX names bound to a cascade component, mapped to the contract name they refer to.\n *\n * Two rules, both learned from false positives on correct code:\n *\n * 1. **Track the LOCAL binding, not the imported name.** `import { Link as CascadeLink }`\n *    used to register `Link`, so the scan then matched the *router's* `<Link to=…>` and\n *    reported `to` as an unknown prop. For a router-based app that collateral is close to\n *    guaranteed.\n * 2. **Never audit a name this file also imports from somewhere else.** A bare-name clash\n *    (`Link` from `@tanstack/react-router`) must not be audited against cascivo's contract\n *    even when nothing is aliased.\n */\nexport function importedCascadeComponents(source: string): Map<string, string> {\n  const names = new Map<string, string>()\n  const foreign = new Set<string>()\n\n  const importRe = /import\\s*(?:type\\s*)?\\{([^}]*)\\}\\s*from\\s*['\"]([^'\"]+)['\"]/g\n  for (const m of source.matchAll(importRe)) {\n    const [, group, specifier] = m\n    if (group === undefined || specifier === undefined) continue\n    const isCascade = specifier === '@cascivo/react'\n    for (const raw of group.split(',')) {\n      const parts = raw.trim().split(/\\s+as\\s+/)\n      const imported = parts[0]?.trim().replace(/^type\\s+/, '')\n      const local = (parts[1] ?? parts[0])?.trim()\n      if (!imported || !local) continue\n      if (isCascade) names.set(local, imported)\n      else foreign.add(local)\n    }\n  }\n  // A default import (`import Link from 'next/link'`) also shadows the name.\n  for (const m of source.matchAll(\n    /import\\s+(\\w+)\\s*(?:,\\s*\\{[^}]*\\})?\\s*from\\s*['\"]([^'\"]+)['\"]/g,\n  )) {\n    if (m[2] !== '@cascivo/react' && m[1]) foreign.add(m[1])\n  }\n\n  for (const local of foreign) names.delete(local)\n  return names\n}\n\n/** Find each opening tag for `comp`, returning its attribute substring + start index. */\nexport interface OpeningTag {\n  attrs: string\n  index: number\n  hasSpread: boolean\n  /** `<Foo />` — the one shape that genuinely cannot have children. */\n  selfClosing: boolean\n}\n\nexport function findOpeningTags(source: string, comp: string): OpeningTag[] {\n  const tags: OpeningTag[] = []\n  const re = new RegExp(`<${comp}(?=[\\\\s/>])`, 'g')\n  for (const m of source.matchAll(re)) {\n    const start = m.index ?? 0\n    // Walk forward to the matching '>' that closes the opening tag, respecting\n    // nested braces (JSX expressions) and quoted strings.\n    let i = start + m[0].length\n    let depth = 0\n    let quote = ''\n    let attrs = ''\n    let closed = false\n    for (; i < source.length; i++) {\n      const ch = source[i]\n      if (quote) {\n        if (ch === quote) quote = ''\n        attrs += ch\n        continue\n      }\n      if (ch === '\"' || ch === \"'\" || ch === '`') {\n        quote = ch\n        attrs += ch\n        continue\n      }\n      if (ch === '{') depth++\n      else if (ch === '}') depth--\n      else if (ch === '>' && depth === 0) {\n        closed = true\n        break\n      }\n      attrs += ch\n    }\n    if (!closed) continue\n    const selfClosing = /\\/\\s*$/.test(attrs)\n    const cleanAttrs = attrs.replace(/\\/\\s*$/, '')\n    tags.push({\n      attrs: cleanAttrs,\n      index: start,\n      hasSpread: /\\{\\s*\\.\\.\\./.test(cleanAttrs),\n      selfClosing,\n    })\n  }\n  return tags\n}\n\n/** Extract top-level attribute names from an opening-tag attribute string. */\nexport function extractAttrNames(attrs: string): string[] {\n  const names: string[] = []\n  let depth = 0\n  let quote = ''\n  let token = ''\n  const flush = () => {\n    const name = token.trim().split('=')[0]?.trim()\n    if (name && /^[A-Za-z]/.test(name)) names.push(name)\n    token = ''\n  }\n  for (let i = 0; i < attrs.length; i++) {\n    const ch = attrs[i]\n    if (ch === undefined) continue\n    if (quote) {\n      if (ch === quote) quote = ''\n      continue\n    }\n    if (ch === '\"' || ch === \"'\" || ch === '`') {\n      quote = ch\n      continue\n    }\n    if (ch === '{') {\n      depth++\n      continue\n    }\n    if (ch === '}') {\n      depth--\n      continue\n    }\n    if (depth > 0) continue\n    if (ch === '=') {\n      flush()\n      // skip the value: handled by quote/brace state on next chars; reset token\n      token = ''\n      continue\n    }\n    if (/\\s/.test(ch)) {\n      if (token.trim()) flush()\n      continue\n    }\n    token += ch\n  }\n  if (token.trim()) flush()\n  return names\n}\n\nexport function lineOf(source: string, index: number): number {\n  let line = 1\n  for (let i = 0; i < index && i < source.length; i++) {\n    if (source[i] === '\\n') line++\n  }\n  return line\n}\n\n/**\n * Check JSX usages of imported cascade components for unknown props.\n * Heuristic — regex/brace-aware scan, not a full AST. Elements using a spread\n * (`{...rest}`) are reported as info and skipped (props can't be statically known).\n */\nexport function findJsxPropViolations(\n  source: string,\n  filename: string,\n  contract: Contract,\n): PropFinding[] {\n  const findings: PropFinding[] = []\n  const tracked = importedCascadeComponents(source)\n\n  for (const [comp, contractName] of tracked) {\n    const info = contract.components.get(contractName)\n    if (!info) continue\n    const known = new Set(info.props.map((p) => p.name))\n\n    for (const tag of findOpeningTags(source, comp)) {\n      const line = lineOf(source, tag.index)\n      if (tag.hasSpread) {\n        findings.push({\n          file: filename,\n          line,\n          component: comp,\n          prop: '...',\n          level: 'info',\n          rule: 'spread-suppressed',\n          message: `<${comp}> uses a spread — prop checks skipped`,\n        })\n        continue\n      }\n      for (const name of extractAttrNames(tag.attrs)) {\n        if (isPassthrough(name, contract)) continue\n        if (known.has(name)) continue\n        findings.push({\n          file: filename,\n          line,\n          component: comp,\n          prop: name,\n          level: 'error',\n          rule: 'unknown-prop',\n          message:\n            `<${comp}> has unknown prop \"${name}\". ` +\n            'style/className pass through on every component (see the override ladder in ' +\n            'docs/AI-RULES.md); for an intentional one-off add `/* cascivo-audit: allow unknown-prop */`.',\n        })\n      }\n    }\n  }\n\n  return findings\n}\n","import type { Contract } from '../utils/contract-pure.js'\nimport { findOpeningTags, importedCascadeComponents, lineOf } from './jsx-props.js'\n\nexport interface RawStringFinding {\n  file: string\n  line: number\n  component: string\n  text: string\n  level: 'warn'\n  rule: 'raw-string'\n  message: string\n}\n\n/** Looks like English prose worth flagging: ≥2 whitespace-separated words, letters/spaces only. */\nfunction looksLikeProse(text: string): boolean {\n  const trimmed = text.trim()\n  if (!/^[A-Za-z][A-Za-z\\s]*$/.test(trimmed)) return false\n  return trimmed.split(/\\s+/).length >= 2\n}\n\n/**\n * Conservative raw-string check: for cascade components that own user-facing\n * chrome text (intent.content), warn when a literal multi-word English child\n * appears, suggesting the labels prop / i18n. Never errors. Only inspects the\n * immediate text directly after the opening tag (no nested element traversal).\n *\n * Typography primitives (`intent.content.contentPrimitive`) are excluded: their children\n * are page copy, not component chrome.\n */\nexport function findRawStringViolations(\n  source: string,\n  filename: string,\n  contract: Contract,\n): RawStringFinding[] {\n  const findings: RawStringFinding[] = []\n  const tracked = importedCascadeComponents(source)\n\n  for (const [comp, contractName] of tracked) {\n    const info = contract.components.get(contractName)\n    if (!info?.hasContent) continue\n    // A typography primitive's children ARE the page's authored prose, so \"use the labels\n    // prop / i18n\" is advice with no target — `Text` has no labels prop. Warning here fires\n    // once per sentence in a real app, which trains adopters to ignore the rule and buries\n    // the chrome-label findings it exists to surface.\n    if (info.isContentPrimitive) continue\n\n    for (const tag of findOpeningTags(source, comp)) {\n      // Locate the end of this opening tag in the source.\n      const openEnd = source.indexOf('>', tag.index)\n      if (openEnd === -1) continue\n      if (source[openEnd - 1] === '/') continue // self-closing, no children\n\n      // Grab text up to the next tag/expression boundary.\n      const after = source.slice(openEnd + 1)\n      const stop = after.search(/[<{]/)\n      const child = (stop === -1 ? after : after.slice(0, stop)).trim()\n      if (!child || !looksLikeProse(child)) continue\n\n      findings.push({\n        file: filename,\n        line: lineOf(source, openEnd),\n        component: comp,\n        text: child,\n        level: 'warn',\n        rule: 'raw-string',\n        message: `<${comp}> raw text \"${child}\" — use the labels prop / i18n`,\n      })\n    }\n  }\n\n  return findings\n}\n","import type { Contract } from '../utils/contract-pure.js'\nimport {\n  extractAttrNames,\n  findOpeningTags,\n  importedCascadeComponents,\n  lineOf,\n} from './jsx-props.js'\n\nexport interface RequiredPropFinding {\n  file: string\n  line: number\n  component: string\n  prop: string\n  level: 'error'\n  rule: 'missing-prop'\n  message: string\n}\n\n/**\n * Flag cascade elements that omit a prop the component marks required.\n * Elements using a spread are skipped (the prop may arrive via the spread).\n */\nexport function findRequiredPropViolations(\n  source: string,\n  filename: string,\n  contract: Contract,\n): RequiredPropFinding[] {\n  const findings: RequiredPropFinding[] = []\n  const tracked = importedCascadeComponents(source)\n\n  for (const [comp, contractName] of tracked) {\n    const info = contract.components.get(contractName)\n    if (!info) continue\n\n    for (const tag of findOpeningTags(source, comp)) {\n      if (tag.hasSpread) continue\n      const present = new Set(extractAttrNames(tag.attrs))\n      const line = lineOf(source, tag.index)\n      for (const req of info.requiredProps) {\n        if (present.has(req)) continue\n        findings.push({\n          file: filename,\n          line,\n          component: comp,\n          prop: req,\n          level: 'error',\n          rule: 'missing-prop',\n          message: `<${comp}> requires \"${req}\"`,\n        })\n      }\n      // `children` is element content, not an attribute. The scan only ever sees the\n      // opening tag, so treating it like a prop reported EVERY correct usage as missing —\n      // `<AppShell>{children}</AppShell>` and `<Field label=\"…\"><Input/></Field>` both.\n      // A self-closing tag is the one shape that genuinely has no children.\n      if (info.requiresChildren && tag.selfClosing && !present.has('children')) {\n        findings.push({\n          file: filename,\n          line,\n          component: comp,\n          prop: 'children',\n          level: 'error',\n          rule: 'missing-prop',\n          message: `<${comp} /> is self-closing but requires children`,\n        })\n      }\n    }\n  }\n\n  return findings\n}\n","/**\n * Zero-dependency scanner for **unlayered style rules** in a CSS source.\n *\n * cascivo ships everything inside `@layer` blocks. Unlayered author CSS beats\n * every layered rule regardless of specificity (CSS cascade-layer semantics), so\n * a single unlayered style rule silently overrides the whole design system. This\n * scanner finds top-level style rules that live outside any `@layer` block.\n *\n * It is line-based and brace-tracking, not a full CSS parse — good enough because\n * we only need to know, for each `{`, whether an `@layer` block is an ancestor.\n *\n * Transparent to layering: `@media`, `@container`, `@supports`, `@scope` — a rule\n * inside these is layered iff the group is inside a layer. Ignored entirely:\n * `@keyframes`/`@font-face`/`@property`/`@page`/etc. (their inner blocks are not\n * style rules we govern). `@import`/`@charset`/`@layer;` statements are not blocks.\n */\n\nexport interface UnlayeredRule {\n  /** 1-indexed line of the rule's selector. */\n  line: number\n  /** The selector text (trimmed, truncated) for the report. */\n  selector: string\n}\n\n/** Replace comment bodies and string contents with spaces, preserving newlines. */\nfunction blankCommentsAndStrings(source: string): string {\n  let out = ''\n  let i = 0\n  const n = source.length\n  while (i < n) {\n    const c = source[i]!\n    const next = source[i + 1]\n    if (c === '/' && next === '*') {\n      out += '  '\n      i += 2\n      while (i < n && !(source[i] === '*' && source[i + 1] === '/')) {\n        out += source[i] === '\\n' ? '\\n' : ' '\n        i++\n      }\n      out += '  '\n      i += 2\n    } else if (c === '\"' || c === \"'\") {\n      const quote = c\n      out += ' '\n      i++\n      while (i < n && source[i] !== quote) {\n        if (source[i] === '\\\\') {\n          out += '  '\n          i += 2\n          continue\n        }\n        out += source[i] === '\\n' ? '\\n' : ' '\n        i++\n      }\n      out += ' '\n      i++\n    } else {\n      out += c\n      i++\n    }\n  }\n  return out\n}\n\ntype FrameKind = 'layer' | 'group' | 'style' | 'other'\n\n/**\n * Accessibility / user-preference media features whose overrides MUST win over\n * everything — including a consumer's `cascivo.override` layer — so they are\n * legitimately placed unlayered (top-level). A `@media (forced-colors: active)`\n * block outside `@layer` is the sanctioned cascade idiom, not a hotfix leak.\n */\nconst A11Y_GUARANTEE_RE =\n  /@media[^{]*\\b(forced-colors|prefers-contrast|prefers-reduced-motion|prefers-reduced-transparency|inverted-colors)\\b/\n\nfunction classifyPrelude(prelude: string): FrameKind {\n  const p = prelude.trim().toLowerCase()\n  if (p.startsWith('@layer')) return 'layer'\n  // A11y-guarantee media queries are an exempt (non-flagging) context.\n  if (A11Y_GUARANTEE_RE.test(p)) return 'other'\n  if (\n    p.startsWith('@media') ||\n    p.startsWith('@container') ||\n    p.startsWith('@supports') ||\n    p.startsWith('@scope')\n  ) {\n    return 'group'\n  }\n  if (p.startsWith('@')) return 'other'\n  return 'style'\n}\n\n/**\n * Return every top-level style rule that is NOT inside an `@layer` block. Only the\n * outermost unlayered rule is reported (nested rules inside it are implied).\n */\nexport function findUnlayeredRules(source: string): UnlayeredRule[] {\n  const clean = blankCommentsAndStrings(source)\n  const rules: UnlayeredRule[] = []\n  const stack: FrameKind[] = []\n\n  let preludeStart = 0\n  const lineStarts: number[] = [0]\n  for (let i = 0; i < clean.length; i++) {\n    if (clean[i] === '\\n') lineStarts.push(i + 1)\n  }\n  const lineOf = (idx: number): number => {\n    // binary search over lineStarts\n    let lo = 0\n    let hi = lineStarts.length - 1\n    while (lo < hi) {\n      const mid = (lo + hi + 1) >> 1\n      if (lineStarts[mid]! <= idx) lo = mid\n      else hi = mid - 1\n    }\n    return lo + 1\n  }\n\n  const hasAncestor = (kind: FrameKind): boolean => stack.includes(kind)\n\n  for (let i = 0; i < clean.length; i++) {\n    const c = clean[i]\n    if (c === '{') {\n      const prelude = clean.slice(preludeStart, i)\n      const kind = classifyPrelude(prelude)\n      if (\n        kind === 'style' &&\n        !hasAncestor('layer') &&\n        !hasAncestor('other') &&\n        !hasAncestor('style')\n      ) {\n        const trimmed = prelude.trim().replace(/\\s+/g, ' ')\n        const startIdx = preludeStart + (prelude.length - prelude.trimStart().length)\n        rules.push({\n          line: lineOf(startIdx),\n          selector: trimmed.length > 60 ? `${trimmed.slice(0, 57)}…` : trimmed,\n        })\n      }\n      stack.push(kind)\n      preludeStart = i + 1\n    } else if (c === '}') {\n      stack.pop()\n      preludeStart = i + 1\n    } else if (c === ';') {\n      // A statement terminator (@import, `@layer a, b;`, or a declaration inside a\n      // block). Reset the prelude window so the next `{` sees a clean selector.\n      preludeStart = i + 1\n    }\n  }\n\n  return rules\n}\n","import { findUnlayeredRules } from '../utils/css-layers.js'\n\nexport interface UnlayeredFinding {\n  file: string\n  line: number\n  selector: string\n  level: 'warn'\n  rule: 'unlayered-css'\n  message: string\n}\n\nconst MESSAGE =\n  'Unlayered CSS beats every cascivo layer regardless of specificity. ' +\n  'For a one-off override use `@layer cascivo.override { … }`; for app styles declare ' +\n  'an app layer (e.g. cascivo.example) in your order statement. See docs/CSS-LAYERS-PITFALL.md.'\n\n/**\n * Warn on top-level style rules that live outside any `@layer` block. This is the\n * consumer-facing half of the zero-unlayered guard: it teaches the fix rather than\n * failing the build, because `docs/USING-WITH-TAILWIND.md` blesses deliberate\n * unlayered CSS as a valid interop escape hatch. Accessibility-guarantee media\n * queries (`forced-colors`, `prefers-contrast`, …) are exempt — see css-layers.ts.\n */\nexport function findUnlayeredViolations(source: string, filename: string): UnlayeredFinding[] {\n  return findUnlayeredRules(source).map((rule) => ({\n    file: filename,\n    line: rule.line,\n    selector: rule.selector,\n    level: 'warn',\n    rule: 'unlayered-css',\n    message: MESSAGE,\n  }))\n}\n","import { lineOf } from './jsx-props.js'\n\nexport interface VendorCssFinding {\n  file: string\n  line: number\n  specifier: string\n  level: 'warn'\n  rule: 'vendor-css-import'\n  message: string\n}\n\n// `import '<spec>'` or `import x from '<spec>'` where <spec> ends in .css\n// (optionally with a ?query / #hash). Captures the specifier.\nconst CSS_IMPORT_RE = /import\\s+(?:[^'\"]*?\\bfrom\\s+)?(['\"])([^'\"]+\\.css(?:[?#][^'\"]*)?)\\1/g\n\n/** A bare specifier resolves into node_modules (not a relative or absolute path). */\nfunction isBareSpecifier(spec: string): boolean {\n  return !spec.startsWith('.') && !spec.startsWith('/')\n}\n\nconst MESSAGE =\n  'CSS imported from a package through JS/TS cannot be wrapped in an @layer, so if this ' +\n  'package ships unlayered global CSS it beats every cascivo layer. Route it through a CSS ' +\n  'file (`@import url(\"<pkg>/styles.css\") layer(vendor);`) or add @cascivo/vite-plugin ' +\n  '(`cascivoLayers({ imports: { \"<pkg>/styles.css\": \"vendor\" } })`). See docs/THIRD-PARTY-CSS.md.'\n\n/**\n * Warn on bare (node_modules) `*.css` imports in JS/TS. Relative imports (the\n * consumer's own CSS modules) and cascivo's own already-layered `@cascivo/*`\n * stylesheets are exempt. Level `warn` — teaches the layer(vendor) recipe.\n */\nexport function findVendorCssImports(source: string, filename: string): VendorCssFinding[] {\n  const findings: VendorCssFinding[] = []\n  for (const m of source.matchAll(CSS_IMPORT_RE)) {\n    const spec = m[2]\n    if (spec === undefined) continue\n    if (!isBareSpecifier(spec)) continue\n    // cascivo's own stylesheets ship the layer statement + fully-layered rules.\n    if (spec.startsWith('@cascivo/')) continue\n    findings.push({\n      file: filename,\n      line: lineOf(source, m.index ?? 0),\n      specifier: spec,\n      level: 'warn',\n      rule: 'vendor-css-import',\n      message: MESSAGE,\n    })\n  }\n  return findings\n}\n","/**\n * Inline suppression directives for `cascivo audit --ai`.\n *\n * A comment `cascivo-audit: allow <rule-id>[, <rule-id>…]` (or `allow all`) on the\n * same line as, or the line immediately preceding, a finding downgrades that\n * finding: it is marked `suppressed` so it no longer counts toward the error/warn\n * exit gate, while still being printed so it stays visible. This is the guaranteed\n * loop-breaker for an AI agent — the one escape hatch that no rule can override.\n */\n\n/** Rule ids a directive may name (the user-facing error/warn rules). */\nexport const AUDIT_RULES = new Set<string>([\n  'unknown-prop',\n  'hardcoded-value',\n  'missing-prop',\n  'raw-string',\n  'unlayered-css',\n  'vendor-css-import',\n])\n\nexport interface DirectiveFinding {\n  file: string\n  line: number\n  level: 'warn'\n  rule: 'audit-directive'\n  message: string\n}\n\ninterface Directive {\n  line: number\n  rules: 'all' | Set<string>\n}\n\nconst DIRECTIVE_RE = /cascivo-audit:\\s*allow\\s+([^\\n]+)/i\n\n/**\n * Scan a source file for suppression directives. Returns the parsed directives\n * plus `warn`-level findings for any unknown rule id (so typos surface rather\n * than silently failing to suppress).\n */\nexport function parseDirectives(\n  source: string,\n  file: string,\n): { directives: Directive[]; findings: DirectiveFinding[] } {\n  const directives: Directive[] = []\n  const findings: DirectiveFinding[] = []\n  const lines = source.split('\\n')\n  for (let i = 0; i < lines.length; i++) {\n    const m = lines[i]?.match(DIRECTIVE_RE)\n    if (!m || m[1] === undefined) continue\n    // Strip trailing comment terminators (`*/`, `-->`) and whitespace.\n    const raw = m[1]\n      .replace(/\\*\\/.*$/, '')\n      .replace(/-->.*$/, '')\n      .trim()\n    const ids = raw.split(/[\\s,]+/).filter(Boolean)\n    const line = i + 1\n    if (ids.includes('all')) {\n      directives.push({ line, rules: 'all' })\n      continue\n    }\n    const valid = new Set<string>()\n    const unknown: string[] = []\n    for (const id of ids) {\n      if (AUDIT_RULES.has(id)) valid.add(id)\n      else unknown.push(id)\n    }\n    if (valid.size > 0) directives.push({ line, rules: valid })\n    if (unknown.length > 0) {\n      findings.push({\n        file,\n        line,\n        level: 'warn',\n        rule: 'audit-directive',\n        message:\n          `unknown audit rule id${unknown.length > 1 ? 's' : ''} in directive: ${unknown.join(', ')}. ` +\n          `valid ids: ${[...AUDIT_RULES].join(', ')}.`,\n      })\n    }\n  }\n  return { directives, findings }\n}\n\n/**\n * Mark findings covered by a directive as `suppressed`. A directive on line L\n * applies to findings on line L (inline comment) or line L+1 (comment above the\n * code). Level is left unchanged; callers exclude `suppressed` findings from the\n * exit gate.\n */\nexport function applySuppressions<T extends { line: number; rule: string }>(\n  findings: T[],\n  directives: Directive[],\n): Array<T & { suppressed?: boolean }> {\n  if (directives.length === 0) return findings\n  return findings.map((f) => {\n    const covered = directives.some(\n      (d) =>\n        (d.line === f.line || d.line === f.line - 1) && (d.rules === 'all' || d.rules.has(f.rule)),\n    )\n    return covered ? { ...f, suppressed: true } : f\n  })\n}\n","import { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\nimport { fileURLToPath } from 'node:url'\n\nexport type { BuildContractInput, ComponentInfo, Contract, PropInfo } from './contract-pure.js'\nexport { buildContract, normalizeValue } from './contract-pure.js'\nimport type { Contract } from './contract-pure.js'\nimport { buildContract } from './contract-pure.js'\n\nconst HERE = dirname(fileURLToPath(import.meta.url))\n\n/** Walk up from a start directory looking for the apps/site/public dir. */\nfunction findDocsPublic(startDir: string): string | null {\n  let dir = startDir\n  for (let i = 0; i < 10; i++) {\n    const candidate = join(dir, 'apps', 'site', 'public')\n    if (existsSync(candidate)) return candidate\n    dir = join(dir, '..')\n  }\n  return null\n}\n\n/** Walk up from a start directory looking for registry.json at the repo root. */\nfunction findRegistry(startDir: string): string | null {\n  let dir = startDir\n  for (let i = 0; i < 10; i++) {\n    const candidate = join(dir, 'registry.json')\n    if (existsSync(candidate)) return candidate\n    dir = join(dir, '..')\n  }\n  return null\n}\n\nconst CONTRACT_URL = 'https://cascivo.com/audit-contract.json'\n\n/**\n * Shape-check a contract payload, returning null when it does not hold.\n *\n * The contract arrives from the network, from an explicit `--contract` path, or\n * from the copy bundled in this package. `fromBundled` indexes into `tokens`\n * and `components` directly, so a payload missing either produced a TypeError\n * deep in the audit instead of a message naming the bad file.\n */\nfunction asBundledContract(raw: unknown): BundledContract | null {\n  if (typeof raw !== 'object' || raw === null) return null\n  const o = raw as Record<string, unknown>\n  if (typeof o['version'] !== 'string') return null\n  if (!Array.isArray(o['tokens']) || !Array.isArray(o['components'])) return null\n  if (!Array.isArray(o['content'])) return null\n  return raw as BundledContract\n}\n\n/**\n * Download the contract. Returns null on any failure — the audit must never\n * hard-depend on the network.\n */\nasync function fetchContract(report: (source: string) => void): Promise<Contract | null> {\n  try {\n    const response = await fetch(CONTRACT_URL, { signal: AbortSignal.timeout(5000) })\n    if (!response.ok) return null\n    const bundled = asBundledContract(await response.json())\n    if (!bundled) return null\n    report(`network: ${CONTRACT_URL}`)\n    return fromBundled(bundled)\n  } catch {\n    return null\n  }\n}\n\n/** The reduced contract shipped inside this package (scripts/registry/audit-contract.ts). */\ninterface BundledContract {\n  version: string\n  tokens: { name: string; resolvedDefault: string | null }[]\n  components: { name: string; props: { name: string; type: string; required: boolean }[] }[]\n  /** Absent in contracts cut before the hand-listed passthrough set was replaced. */\n  domAttributes?: string[]\n  content: string[]\n  /** Absent in contracts cut before typography primitives were distinguished. */\n  contentPrimitives?: string[]\n}\n\n/** Adapt the bundled shape to `buildContract`'s three-artifact input. */\nfunction fromBundled(bundled: BundledContract): Contract {\n  return buildContract({\n    catalog: { tokens: bundled.tokens },\n    registry: { components: bundled.components.map((c) => ({ meta: c })) },\n    context: { components: bundled.content.map((name) => ({ name, intent: { content: true } })) },\n    ...(bundled.domAttributes ? { domAttributes: bundled.domAttributes } : {}),\n    ...(bundled.contentPrimitives ? { contentPrimitives: bundled.contentPrimitives } : {}),\n  })\n}\n\n/**\n * Load the cascade contract. Resolution order, first hit wins:\n *\n *   1. an explicit path (`--contract <file>` / `options.contractPath`)\n *   2. the dev-monorepo artifacts (`apps/site/public/…` + `registry.json`)\n *   3. the contract bundled in this package  ← what makes `audit` work in a real project\n *   4. `https://cascivo.com/audit-contract.json`\n *\n * (3) is why this exists: the walk-up in (2) only ever finds anything inside this monorepo,\n * so `cascivo audit --ai` died with \"token catalog not found\" in every consumer project —\n * a documented, working feature that nobody outside this repo could run. (4) is best-effort\n * and never required: `audit` works offline.\n */\nexport async function loadContract(options?: {\n  catalogPath?: string\n  contextPath?: string\n  registryPath?: string\n  /** Explicit contract file — either the bundled shape or a docs-public directory. */\n  contractPath?: string\n  /** Report which tier answered (used by `--verbose`). */\n  onResolve?: (source: string) => void\n}): Promise<Contract> {\n  const report = options?.onResolve ?? (() => {})\n\n  // 1. Explicit path.\n  if (options?.contractPath) {\n    if (!existsSync(options.contractPath)) {\n      throw new Error(`contract file not found: ${options.contractPath}`)\n    }\n    report(`explicit: ${options.contractPath}`)\n    const explicit = asBundledContract(JSON.parse(readFileSync(options.contractPath, 'utf8')))\n    if (!explicit) throw new Error(`not a valid audit contract: ${options.contractPath}`)\n    return fromBundled(explicit)\n  }\n\n  // 2. Dev monorepo — unchanged, so in-repo behavior and its tests are untouched.\n  const docsPublic = findDocsPublic(HERE) ?? findDocsPublic(process.cwd())\n  const catalogPath =\n    options?.catalogPath ?? (docsPublic ? join(docsPublic, 'tokens.catalog.json') : null)\n  const contextPath = options?.contextPath ?? (docsPublic ? join(docsPublic, 'context.json') : null)\n  const registryPath = options?.registryPath ?? findRegistry(HERE) ?? findRegistry(process.cwd())\n  const haveMonorepo =\n    catalogPath &&\n    existsSync(catalogPath) &&\n    registryPath &&\n    existsSync(registryPath) &&\n    contextPath &&\n    existsSync(contextPath)\n\n  if (!haveMonorepo) {\n    // 3. Bundled contract.\n    const bundled = join(HERE, 'generated', 'audit-contract.json')\n    const bundledDist = join(HERE, '..', 'generated', 'audit-contract.json')\n    for (const candidate of [bundled, bundledDist]) {\n      if (existsSync(candidate)) {\n        report(`bundled: ${candidate}`)\n        const shipped = asBundledContract(JSON.parse(readFileSync(candidate, 'utf8')))\n        if (!shipped) throw new Error(`not a valid audit contract: ${candidate}`)\n        return fromBundled(shipped)\n      }\n    }\n\n    // 4. Network, with a local cache. Best-effort: a failure falls through to the error below.\n    const fetched = await fetchContract(report)\n    if (fetched) return fetched\n\n    throw new Error(\n      'cascivo contract unavailable. Pass --contract <path> to a downloaded ' +\n        'audit-contract.json, or run inside the cascivo monorepo. ' +\n        '(The CLI normally ships one; this build appears to be missing it.)',\n    )\n  }\n  report('monorepo artifacts')\n\n  const catalog = JSON.parse(readFileSync(catalogPath, 'utf8')) as Parameters<\n    typeof buildContract\n  >[0]['catalog']\n  const registry = JSON.parse(readFileSync(registryPath, 'utf8')) as Parameters<\n    typeof buildContract\n  >[0]['registry']\n  const context = JSON.parse(readFileSync(contextPath, 'utf8')) as Parameters<\n    typeof buildContract\n  >[0]['context']\n\n  // The DOM-attribute set is derived by the contract generator (it needs the type checker),\n  // so even the monorepo path reads it from the generated artifact rather than recomputing.\n  let domAttributes: string[] | undefined\n  let contentPrimitives: string[] | undefined\n  try {\n    const generated = JSON.parse(\n      readFileSync(join(docsPublic!, 'audit-contract.json'), 'utf8'),\n    ) as { domAttributes?: string[]; contentPrimitives?: string[] }\n    domAttributes = generated.domAttributes\n    contentPrimitives = generated.contentPrimitives\n  } catch {\n    domAttributes = undefined\n    contentPrimitives = undefined\n  }\n\n  return buildContract({\n    catalog,\n    registry,\n    context,\n    ...(domAttributes ? { domAttributes } : {}),\n    ...(contentPrimitives ? { contentPrimitives } : {}),\n  })\n}\n","import { existsSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs'\nimport { extname, join } from 'node:path'\nimport type { LiteralFinding } from '../audit-ai/css-literals.js'\nimport { findCssLiteralViolations } from '../audit-ai/css-literals.js'\nimport type { PropFinding } from '../audit-ai/jsx-props.js'\nimport { findJsxPropViolations } from '../audit-ai/jsx-props.js'\nimport type { RawStringFinding } from '../audit-ai/raw-strings.js'\nimport { findRawStringViolations } from '../audit-ai/raw-strings.js'\nimport type { RequiredPropFinding } from '../audit-ai/required-props.js'\nimport { findRequiredPropViolations } from '../audit-ai/required-props.js'\nimport type { UnlayeredFinding } from '../audit-ai/unlayered.js'\nimport { findUnlayeredViolations } from '../audit-ai/unlayered.js'\nimport type { VendorCssFinding } from '../audit-ai/vendor-css.js'\nimport { findVendorCssImports } from '../audit-ai/vendor-css.js'\nimport type { DirectiveFinding } from '../audit-ai/suppress.js'\nimport { applySuppressions, parseDirectives } from '../audit-ai/suppress.js'\nimport type { CascadeConfig } from '../utils/config.js'\nimport type { Contract } from '../utils/contract.js'\nimport { loadContract } from '../utils/contract.js'\n\nexport type Finding =\n  | LiteralFinding\n  | PropFinding\n  | RequiredPropFinding\n  | RawStringFinding\n  | UnlayeredFinding\n  | VendorCssFinding\n  | DirectiveFinding\n\n/** A finding after suppression directives have been applied. */\nexport type AuditedFinding = Finding & { suppressed?: boolean }\n\nconst SKIP_DIRS = new Set(['node_modules', 'dist', '.git', 'build', '.next', 'coverage'])\n\nfunction collectFiles(paths: string[]): string[] {\n  const out: string[] = []\n  const walk = (p: string) => {\n    if (!existsSync(p)) return\n    const s = statSync(p)\n    if (s.isDirectory()) {\n      const base = p.split('/').pop() ?? ''\n      if (SKIP_DIRS.has(base)) return\n      for (const entry of readdirSync(p)) walk(join(p, entry))\n      return\n    }\n    const ext = extname(p)\n    if (ext === '.css' || ext === '.tsx' || ext === '.ts') out.push(p)\n  }\n  for (const p of paths) walk(p)\n  return out\n}\n\nfunction findingsFor(file: string, source: string, contract: Contract): Finding[] {\n  const ext = extname(file)\n  const findings: Finding[] = []\n  if (ext === '.css') {\n    findings.push(...findCssLiteralViolations(source, file, contract))\n    findings.push(...findUnlayeredViolations(source, file))\n  } else if (ext === '.tsx' || ext === '.ts') {\n    findings.push(...findCssLiteralViolations(source, file, contract))\n    findings.push(...findJsxPropViolations(source, file, contract))\n    findings.push(...findRequiredPropViolations(source, file, contract))\n    findings.push(...findRawStringViolations(source, file, contract))\n    findings.push(...findVendorCssImports(source, file))\n  }\n  return findings\n}\n\nfunction detail(f: Finding): string {\n  switch (f.rule) {\n    case 'hardcoded-value':\n      if (f.suggestedToken) return `${f.value} → var(${f.suggestedToken})`\n      return `${f.value} → ${f.allMatches?.join(' | ') ?? '(ambiguous)'}`\n    case 'unknown-prop':\n      return `<${f.component} ${f.prop}>`\n    case 'spread-suppressed':\n      return `<${f.component} {...}> (props not checked)`\n    case 'missing-prop':\n      return `<${f.component}> requires \"${f.prop}\"`\n    case 'raw-string':\n      return `\"${f.text}\" → use labels prop / i18n`\n    case 'unlayered-css':\n      return `${f.selector} { … } → wrap in @layer`\n    case 'vendor-css-import':\n      return `import '${f.specifier}' → @import url(…) layer(vendor)`\n    case 'audit-directive':\n      return f.message\n  }\n}\n\nfunction levelLabel(level: Finding['level']): string {\n  return level === 'warn' ? 'warn' : level\n}\n\nfunction renderFindings(findings: AuditedFinding[]): void {\n  if (findings.length === 0) {\n    console.log('cascade audit --ai: no findings.')\n    return\n  }\n  const rows = findings.map((f) => ({\n    loc: `${f.file}:${f.line}`,\n    level: f.suppressed ? 'suppressed' : levelLabel(f.level),\n    rule: f.rule,\n    detail: detail(f),\n  }))\n  const locW = Math.max(...rows.map((r) => r.loc.length), 8)\n  const lvlW = Math.max(...rows.map((r) => r.level.length), 5)\n  const ruleW = Math.max(...rows.map((r) => r.rule.length), 4)\n  for (const r of rows) {\n    console.log(\n      `${r.loc.padEnd(locW)}  ${r.level.padEnd(lvlW)}  ${r.rule.padEnd(ruleW)}  ${r.detail}`,\n    )\n  }\n  console.log('---')\n  const active = findings.filter((f) => !f.suppressed)\n  const errors = active.filter((f) => f.level === 'error').length\n  const warnings = active.filter((f) => f.level === 'warn').length\n  const infos = active.filter((f) => f.level === 'info').length\n  const suppressed = findings.filter((f) => f.suppressed).length\n  const parts = [\n    `${errors} error${errors === 1 ? '' : 's'}`,\n    `${warnings} warning${warnings === 1 ? '' : 's'}`,\n  ]\n  if (infos) parts.push(`${infos} info`)\n  if (suppressed) parts.push(`${suppressed} suppressed`)\n  console.log(parts.join(', '))\n}\n\nfunction escapeRe(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n}\n\n/**\n * Pure literal→token rewrite. Only rewrites simple `property: #hex;` style\n * declarations where exactly one token matches. Returns the new source and how\n * many findings were resolved (verified by re-running the checker).\n */\nexport function fixCssLiterals(\n  source: string,\n  file: string,\n  contract: Contract,\n): { source: string; fixed: number } {\n  const fixable = findCssLiteralViolations(source, file, contract).filter(\n    (f) => f.level === 'error' && f.suggestedToken && /^#[0-9a-fA-F]{3,8}$/.test(f.value),\n  )\n  let next = source\n  for (const f of fixable) {\n    // Only rewrite a full-value declaration: `prop: #hex;` (or end of block).\n    const re = new RegExp(`(${escapeRe(f.property)}\\\\s*:\\\\s*)${escapeRe(f.value)}(\\\\s*[;}])`, 'gi')\n    next = next.replace(re, `$1var(${f.suggestedToken})$2`)\n  }\n  if (next === source) return { source, fixed: 0 }\n  const remaining = findCssLiteralViolations(next, file, contract).filter(\n    (f) => f.level === 'error' && f.suggestedToken,\n  ).length\n  return { source: next, fixed: fixable.length - remaining }\n}\n\n/** Apply {@link fixCssLiterals} to each .css file on disk. */\nfunction applyFixes(files: string[], contract: Contract): number {\n  let fixed = 0\n  for (const file of files) {\n    if (extname(file) !== '.css') continue\n    const { source, fixed: n } = fixCssLiterals(readFileSync(file, 'utf8'), file, contract)\n    if (n > 0) {\n      writeFileSync(file, source)\n      fixed += n\n    }\n  }\n  return fixed\n}\n\nexport async function audit(args: string[], _config: CascadeConfig): Promise<void> {\n  if (!args.includes('--ai')) {\n    console.log('cascivo audit: use --ai to audit AI-generated code against the cascivo contract')\n    console.log('  --ai [paths…]      audit files against the cascivo contract')\n    console.log('  --fix              rewrite hardcoded values to tokens where unambiguous')\n    console.log('  --json             machine-readable findings')\n    console.log('  --level <level>    minimum level to report (error|warning|info)')\n    console.log('  --contract <path>  use this audit-contract.json instead of the bundled one')\n    console.log('  --verbose          report which contract source was used')\n    return\n  }\n\n  const jsonOutput = args.includes('--json')\n  const fixMode = args.includes('--fix')\n  const verbose = args.includes('--verbose')\n  const levelIdx = args.indexOf('--level')\n  const minLevel = levelIdx >= 0 ? (args[levelIdx + 1] ?? 'error') : 'error'\n  const contractIdx = args.indexOf('--contract')\n  const contractPath = contractIdx >= 0 ? args[contractIdx + 1] : undefined\n\n  const paths = args.filter((a, i) => {\n    if (a.startsWith('--')) return false\n    if (levelIdx >= 0 && i === levelIdx + 1) return false\n    if (contractIdx >= 0 && i === contractIdx + 1) return false\n    return true\n  })\n\n  let contract: Contract\n  try {\n    contract = await loadContract({\n      ...(contractPath ? { contractPath } : {}),\n      ...(verbose ? { onResolve: (source: string) => console.error(`contract ← ${source}`) } : {}),\n    })\n  } catch (e) {\n    console.error(`Contract unavailable: ${e instanceof Error ? e.message : String(e)}`)\n    process.exitCode = 2\n    return\n  }\n\n  const files = collectFiles(paths.length ? paths : [process.cwd()])\n\n  if (fixMode) {\n    const n = applyFixes(files, contract)\n    console.log(`cascade audit --ai --fix: rewrote ${n} literal${n === 1 ? '' : 's'} to tokens.`)\n  }\n\n  const allFindings: AuditedFinding[] = []\n  for (const file of files) {\n    const source = readFileSync(file, 'utf8')\n    const { directives, findings: directiveFindings } = parseDirectives(source, file)\n    allFindings.push(...applySuppressions(findingsFor(file, source, contract), directives))\n    allFindings.push(...directiveFindings)\n  }\n\n  if (jsonOutput) {\n    console.log(JSON.stringify(allFindings, null, 2))\n  } else {\n    renderFindings(allFindings)\n  }\n\n  // Suppressed findings never fail the run — that is the escape hatch's whole point.\n  const active = allFindings.filter((f) => !f.suppressed)\n  const hasErrors = active.some((f) => f.level === 'error')\n  if (minLevel === 'error' && hasErrors) process.exitCode = 1\n  if (minLevel === 'warn' && active.some((f) => f.level !== 'info')) process.exitCode = 1\n}\n"],"mappings":";;;;;AAiGA,SAAgB,eAAe,OAAuB;CACpD,OAAO,MAAM,YAAY,CAAC,CAAC,QAAQ,QAAQ,EAAE;AAC/C;;AAGA,SAAgB,cAAc,OAAqC;CACjE,MAAM,gCAAgB,IAAI,IAAsB;CAChD,KAAK,MAAM,SAAS,MAAM,QAAQ,QAAQ;EACxC,IAAI,MAAM,mBAAmB,MAAM;EACnC,MAAM,MAAM,eAAe,MAAM,eAAe;EAChD,MAAM,OAAO,cAAc,IAAI,GAAG;EAClC,IAAI,MAAM,KAAK,KAAK,MAAM,IAAI;OACzB,cAAc,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;CAC1C;CAEA,MAAM,+BAAe,IAAI,IAAY;CACrC,MAAM,iBAAiB,IAAI,IAAY,MAAM,qBAAqB,CAAC,CAAC;CACpE,KAAK,MAAM,KAAK,MAAM,QAAQ,YAC5B,IAAI,EAAE,QAAQ,SAAS,aAAa,IAAI,EAAE,IAAI;CAahD,MAAM,yBAAS,IAAI,IAAqC;CACxD,KAAK,MAAM,SAAS,MAAM,SAAS,YAAY;EAC7C,MAAM,OAAO,MAAM;EACnB,IAAI,CAAC,MAAM,MAAM;EACjB,MAAM,OAAO,OAAO,IAAI,KAAK,IAAI;EACjC,IAAI,MAAM,KAAK,KAAK,IAAI;OACnB,OAAO,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;CACnC;CAEA,MAAM,6BAAa,IAAI,IAA2B;CAClD,KAAK,MAAM,CAAC,MAAM,UAAU,QAAQ;EAClC,MAAM,wBAAQ,IAAI,IAAsB;EACxC,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,KAAK,KAAK,SAAS,CAAC,GAAG;GAGhC,MAAM,YAFW,MAAM,IAAI,EAAE,IAEJ,CAAC,EAAE,YAAY,SAAS,EAAE,aAAa;GAChE,MAAM,IAAI,EAAE,MAAM;IAAE,MAAM,EAAE;IAAM,MAAM,EAAE,QAAQ;IAAW;GAAS,CAAC;EACzE;EAGF,IAAI,MAAM,SAAS;QACZ,MAAM,CAAC,UAAU,SAAS,OAE7B,IAAI,CADY,MAAM,OAAO,OAAO,EAAE,SAAS,CAAC,EAAA,CAAG,MAAM,MAAM,EAAE,SAAS,QAAQ,CACvE,GAAG,MAAM,IAAI,UAAU;IAAE,GAAG;IAAM,UAAU;GAAM,CAAC;EAAA;EAGlE,MAAM,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC;EAE9B,MAAM,gBAAgB,IAAI,QAAQ,MAAM,EAAE,YAAY,EAAE,SAAS,UAAU,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI;EAC9F,WAAW,IAAI,MAAM;GACnB,OAAO;GACP;GACA,kBAAkB,cAAc,SAAS;GACzC,kBAAkB,IAAI,MAAM,MAAM,EAAE,SAAS,cAAc,EAAE,QAAQ;GACrE,YAAY,aAAa,IAAI,IAAI;GACjC,oBAAoB,eAAe,IAAI,IAAI;GAC3C,YAAY,MAAM;EACpB,CAAC;CACH;CAEA,OAAO;EAAE;EAAe;EAAY,eAAe,IAAI,IAAI,MAAM,iBAAiB,CAAC,CAAC;CAAE;AACxF;;;;ACzJA,MAAM,eAAe,IAAI,IAAI;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAGD,MAAM,kBAA0C;CAC9C,OAAO;CACP,YAAY;CACZ,iBAAiB;CACjB,aAAa;CACb,WAAW;CACX,cAAc;CACd,UAAU;CACV,KAAK;CACL,SAAS;CACT,QAAQ;CACR,OAAO;CACP,QAAQ;AACV;;AAGA,SAAS,eAAe,OAAwB;CAC9C,MAAM,IAAI,MAAM,KAAK;CACrB,IAAI,EAAE,SAAS,MAAM,GAAG,OAAO;CAC/B,IAAI,sBAAsB,KAAK,CAAC,GAAG,OAAO;CAC1C,IAAI,sCAAsC,KAAK,CAAC,GAAG,OAAO;CAC1D,IAAI,wBAAwB,KAAK,CAAC,GAAG,OAAO;CAC5C,OAAO;AACT;AAEA,SAAS,SACP,OACA,UACwE;CACxE,MAAM,UAAU,SAAS,cAAc,IAAI,eAAe,KAAK,CAAC;CAChE,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO;CAC7C,MAAM,QAAQ,QAAQ;CACtB,IAAI,QAAQ,WAAW,KAAK,OAAO,OAAO;EAAE,OAAO;EAAS,gBAAgB;CAAM;CAClF,OAAO;EAAE,OAAO;EAAQ,YAAY;CAAQ;AAC9C;;;;;;;;;;AAWA,SAAS,kBAAkB,QAAyC;CAClE,MAAM,SAAkC,CAAC;CAEzC,KAAK,MAAM,KAAK,OAAO,SAAS,iBAAE,GAAG;EACnC,IAAI,QAAQ;EACZ,IAAI,QAAQ;EACZ,KAAK,IAAI,IAAI,EAAE,QAAS,EAAE,EAAE,CAAC,SAAS,GAAG,IAAI,OAAO,QAAQ,KAAK;GAC/D,MAAM,KAAK,OAAO;GAClB,IAAI,OAAO;IACT,IAAI,OAAO,OAAO,QAAQ;IAC1B;GACF;GACA,IAAI,OAAO,QAAO,OAAO,OAAO,OAAO,KAAK;IAC1C,QAAQ;IACR;GACF;GACA,IAAI,OAAO,KAAK;QACX,IAAI,OAAO,KAAK;IACnB;IACA,IAAI,UAAU,GAAG;KACf,OAAO,KAAK,CAAC,EAAE,OAAQ,CAAC,CAAC;KACzB;IACF;GACF;EACF;CACF;CACA,OAAO;AACT;;;;;;;AAQA,SAAgB,yBACd,QACA,UACA,UACkB;CAClB,MAAM,WAA6B,CAAC;CACpC,MAAM,QAAQ,OAAO,MAAM,IAAI;CAC/B,MAAM,cAAc,kBAAkB,MAAM;CAE5C,MAAM,aAAuB,CAAC;CAC9B,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OAAO;EACxB,WAAW,KAAK,MAAM;EACtB,UAAU,KAAK,SAAS;CAC1B;CACA,MAAM,iBAAiB,aACrB,YAAY,MAAM,CAAC,OAAO,SAAS,YAAY,SAAS,YAAY,GAAG;CAGzE,MAAM,UAAU;CAEhB,MAAM,aAAa;CAEnB,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,OAAO,MAAM;EACnB,IAAI,SAAS,KAAA,GAAW;EACxB,MAAM,uBAAO,IAAI,IAAY;EAE7B,KAAK,MAAM,KAAK,KAAK,SAAS,OAAO,GAAG;GACtC,IAAI,EAAE,OAAO,KAAA,KAAa,EAAE,OAAO,KAAA,GAAW;GAC9C,MAAM,OAAO,EAAE,EAAE,CAAC,YAAY;GAC9B,MAAM,WAAW,EAAE,EAAE,CAAC,KAAK;GAC3B,IAAI,CAAC,aAAa,IAAI,IAAI,GAAG;GAC7B,IAAI,CAAC,eAAe,QAAQ,GAAG;GAC/B,MAAM,MAAM,SAAS,UAAU,QAAQ;GACvC,IAAI,CAAC,KAAK;GACV,MAAM,MAAM,GAAG,KAAK,GAAG;GACvB,KAAK,IAAI,GAAG;GACZ,SAAS,KAAK;IACZ,MAAM;IACN,MAAM,IAAI;IACV,UAAU;IACV,OAAO;IACP,MAAM;IACN,GAAG;GACL,CAAC;EACH;EAEA,KAAK,MAAM,KAAK,KAAK,SAAS,UAAU,GAAG;GACzC,IAAI,EAAE,OAAO,KAAA,KAAa,EAAE,OAAO,KAAA,GAAW;GAC9C,MAAM,OAAO,gBAAgB,EAAE;GAC/B,IAAI,CAAC,MAAM;GAGX,IAAI,CAAC,eAAe,WAAW,MAAM,MAAM,EAAE,SAAS,EAAE,GAAG;GAC3D,MAAM,WAAW,EAAE,EAAE,CAAC,KAAK;GAC3B,IAAI,CAAC,eAAe,QAAQ,GAAG;GAC/B,MAAM,MAAM,GAAG,KAAK,GAAG;GACvB,IAAI,KAAK,IAAI,GAAG,GAAG;GACnB,MAAM,MAAM,SAAS,UAAU,QAAQ;GACvC,IAAI,CAAC,KAAK;GAIV,MAAM,YAAY,IAAI,UAAU,UAAU;IAAE,GAAG;IAAK,OAAO;GAAgB,IAAI;GAC/E,SAAS,KAAK;IACZ,MAAM;IACN,MAAM,IAAI;IACV,UAAU;IACV,OAAO;IACP,MAAM;IACN,GAAG;GACL,CAAC;EACH;CACF;CAEA,OAAO;AACT;;;;ACjLA,MAAa,cAAc,IAAI,IAAI;CAAC;CAAa;CAAS;CAAM;CAAO;CAAO;AAAU,CAAC;;;;;;;;;AAUzF,MAAa,mBAAmB,IAAI,IAAI;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,cAAc,MAAc,UAA8B;CACjE,IAAI,YAAY,IAAI,IAAI,GAAG,OAAO;CAGlC,IAAI,UAAU,cAAc,IAAI,IAAI,MAAM,MAAM,OAAO;CACvD,IAAI,iBAAiB,IAAI,IAAI,GAAG,OAAO;CACvC,IAAI,KAAK,WAAW,OAAO,GAAG,OAAO;CACrC,IAAI,KAAK,WAAW,OAAO,GAAG,OAAO;CACrC,IAAI,WAAW,KAAK,IAAI,GAAG,OAAO;CAClC,OAAO;AACT;;;;;;;;;;;;;;AAeA,SAAgB,0BAA0B,QAAqC;CAC7E,MAAM,wBAAQ,IAAI,IAAoB;CACtC,MAAM,0BAAU,IAAI,IAAY;CAGhC,KAAK,MAAM,KAAK,OAAO,SAAS,6DAAQ,GAAG;EACzC,MAAM,GAAG,OAAO,aAAa;EAC7B,IAAI,UAAU,KAAA,KAAa,cAAc,KAAA,GAAW;EACpD,MAAM,YAAY,cAAc;EAChC,KAAK,MAAM,OAAO,MAAM,MAAM,GAAG,GAAG;GAClC,MAAM,QAAQ,IAAI,KAAK,CAAC,CAAC,MAAM,UAAU;GACzC,MAAM,WAAW,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,YAAY,EAAE;GACxD,MAAM,SAAS,MAAM,MAAM,MAAM,GAAA,EAAK,KAAK;GAC3C,IAAI,CAAC,YAAY,CAAC,OAAO;GACzB,IAAI,WAAW,MAAM,IAAI,OAAO,QAAQ;QACnC,QAAQ,IAAI,KAAK;EACxB;CACF;CAEA,KAAK,MAAM,KAAK,OAAO,SACrB,gEACF,GACE,IAAI,EAAE,OAAO,oBAAoB,EAAE,IAAI,QAAQ,IAAI,EAAE,EAAE;CAGzD,KAAK,MAAM,SAAS,SAAS,MAAM,OAAO,KAAK;CAC/C,OAAO;AACT;AAWA,SAAgB,gBAAgB,QAAgB,MAA4B;CAC1E,MAAM,OAAqB,CAAC;CAC5B,MAAM,KAAK,IAAI,OAAO,IAAI,KAAK,cAAc,GAAG;CAChD,KAAK,MAAM,KAAK,OAAO,SAAS,EAAE,GAAG;EACnC,MAAM,QAAQ,EAAE,SAAS;EAGzB,IAAI,IAAI,QAAQ,EAAE,EAAE,CAAC;EACrB,IAAI,QAAQ;EACZ,IAAI,QAAQ;EACZ,IAAI,QAAQ;EACZ,IAAI,SAAS;EACb,OAAO,IAAI,OAAO,QAAQ,KAAK;GAC7B,MAAM,KAAK,OAAO;GAClB,IAAI,OAAO;IACT,IAAI,OAAO,OAAO,QAAQ;IAC1B,SAAS;IACT;GACF;GACA,IAAI,OAAO,QAAO,OAAO,OAAO,OAAO,KAAK;IAC1C,QAAQ;IACR,SAAS;IACT;GACF;GACA,IAAI,OAAO,KAAK;QACX,IAAI,OAAO,KAAK;QAChB,IAAI,OAAO,OAAO,UAAU,GAAG;IAClC,SAAS;IACT;GACF;GACA,SAAS;EACX;EACA,IAAI,CAAC,QAAQ;EACb,MAAM,cAAc,SAAS,KAAK,KAAK;EACvC,MAAM,aAAa,MAAM,QAAQ,UAAU,EAAE;EAC7C,KAAK,KAAK;GACR,OAAO;GACP,OAAO;GACP,WAAW,cAAc,KAAK,UAAU;GACxC;EACF,CAAC;CACH;CACA,OAAO;AACT;;AAGA,SAAgB,iBAAiB,OAAyB;CACxD,MAAM,QAAkB,CAAC;CACzB,IAAI,QAAQ;CACZ,IAAI,QAAQ;CACZ,IAAI,QAAQ;CACZ,MAAM,cAAc;EAClB,MAAM,OAAO,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK;EAC9C,IAAI,QAAQ,YAAY,KAAK,IAAI,GAAG,MAAM,KAAK,IAAI;EACnD,QAAQ;CACV;CACA,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,KAAK,MAAM;EACjB,IAAI,OAAO,KAAA,GAAW;EACtB,IAAI,OAAO;GACT,IAAI,OAAO,OAAO,QAAQ;GAC1B;EACF;EACA,IAAI,OAAO,QAAO,OAAO,OAAO,OAAO,KAAK;GAC1C,QAAQ;GACR;EACF;EACA,IAAI,OAAO,KAAK;GACd;GACA;EACF;EACA,IAAI,OAAO,KAAK;GACd;GACA;EACF;EACA,IAAI,QAAQ,GAAG;EACf,IAAI,OAAO,KAAK;GACd,MAAM;GAEN,QAAQ;GACR;EACF;EACA,IAAI,KAAK,KAAK,EAAE,GAAG;GACjB,IAAI,MAAM,KAAK,GAAG,MAAM;GACxB;EACF;EACA,SAAS;CACX;CACA,IAAI,MAAM,KAAK,GAAG,MAAM;CACxB,OAAO;AACT;AAEA,SAAgB,OAAO,QAAgB,OAAuB;CAC5D,IAAI,OAAO;CACX,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,IAAI,OAAO,QAAQ,KAC9C,IAAI,OAAO,OAAO,MAAM;CAE1B,OAAO;AACT;;;;;;AAOA,SAAgB,sBACd,QACA,UACA,UACe;CACf,MAAM,WAA0B,CAAC;CACjC,MAAM,UAAU,0BAA0B,MAAM;CAEhD,KAAK,MAAM,CAAC,MAAM,iBAAiB,SAAS;EAC1C,MAAM,OAAO,SAAS,WAAW,IAAI,YAAY;EACjD,IAAI,CAAC,MAAM;EACX,MAAM,QAAQ,IAAI,IAAI,KAAK,MAAM,KAAK,MAAM,EAAE,IAAI,CAAC;EAEnD,KAAK,MAAM,OAAO,gBAAgB,QAAQ,IAAI,GAAG;GAC/C,MAAM,OAAO,OAAO,QAAQ,IAAI,KAAK;GACrC,IAAI,IAAI,WAAW;IACjB,SAAS,KAAK;KACZ,MAAM;KACN;KACA,WAAW;KACX,MAAM;KACN,OAAO;KACP,MAAM;KACN,SAAS,IAAI,KAAK;IACpB,CAAC;IACD;GACF;GACA,KAAK,MAAM,QAAQ,iBAAiB,IAAI,KAAK,GAAG;IAC9C,IAAI,cAAc,MAAM,QAAQ,GAAG;IACnC,IAAI,MAAM,IAAI,IAAI,GAAG;IACrB,SAAS,KAAK;KACZ,MAAM;KACN;KACA,WAAW;KACX,MAAM;KACN,OAAO;KACP,MAAM;KACN,SACE,IAAI,KAAK,sBAAsB,KAAK;IAGxC,CAAC;GACH;EACF;CACF;CAEA,OAAO;AACT;;;;ACnRA,SAAS,eAAe,MAAuB;CAC7C,MAAM,UAAU,KAAK,KAAK;CAC1B,IAAI,CAAC,wBAAwB,KAAK,OAAO,GAAG,OAAO;CACnD,OAAO,QAAQ,MAAM,KAAK,CAAC,CAAC,UAAU;AACxC;;;;;;;;;;AAWA,SAAgB,wBACd,QACA,UACA,UACoB;CACpB,MAAM,WAA+B,CAAC;CACtC,MAAM,UAAU,0BAA0B,MAAM;CAEhD,KAAK,MAAM,CAAC,MAAM,iBAAiB,SAAS;EAC1C,MAAM,OAAO,SAAS,WAAW,IAAI,YAAY;EACjD,IAAI,CAAC,MAAM,YAAY;EAKvB,IAAI,KAAK,oBAAoB;EAE7B,KAAK,MAAM,OAAO,gBAAgB,QAAQ,IAAI,GAAG;GAE/C,MAAM,UAAU,OAAO,QAAQ,KAAK,IAAI,KAAK;GAC7C,IAAI,YAAY,IAAI;GACpB,IAAI,OAAO,UAAU,OAAO,KAAK;GAGjC,MAAM,QAAQ,OAAO,MAAM,UAAU,CAAC;GACtC,MAAM,OAAO,MAAM,OAAO,MAAM;GAChC,MAAM,SAAS,SAAS,KAAK,QAAQ,MAAM,MAAM,GAAG,IAAI,EAAA,CAAG,KAAK;GAChE,IAAI,CAAC,SAAS,CAAC,eAAe,KAAK,GAAG;GAEtC,SAAS,KAAK;IACZ,MAAM;IACN,MAAM,OAAO,QAAQ,OAAO;IAC5B,WAAW;IACX,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS,IAAI,KAAK,cAAc,MAAM;GACxC,CAAC;EACH;CACF;CAEA,OAAO;AACT;;;;;;;ACjDA,SAAgB,2BACd,QACA,UACA,UACuB;CACvB,MAAM,WAAkC,CAAC;CACzC,MAAM,UAAU,0BAA0B,MAAM;CAEhD,KAAK,MAAM,CAAC,MAAM,iBAAiB,SAAS;EAC1C,MAAM,OAAO,SAAS,WAAW,IAAI,YAAY;EACjD,IAAI,CAAC,MAAM;EAEX,KAAK,MAAM,OAAO,gBAAgB,QAAQ,IAAI,GAAG;GAC/C,IAAI,IAAI,WAAW;GACnB,MAAM,UAAU,IAAI,IAAI,iBAAiB,IAAI,KAAK,CAAC;GACnD,MAAM,OAAO,OAAO,QAAQ,IAAI,KAAK;GACrC,KAAK,MAAM,OAAO,KAAK,eAAe;IACpC,IAAI,QAAQ,IAAI,GAAG,GAAG;IACtB,SAAS,KAAK;KACZ,MAAM;KACN;KACA,WAAW;KACX,MAAM;KACN,OAAO;KACP,MAAM;KACN,SAAS,IAAI,KAAK,cAAc,IAAI;IACtC,CAAC;GACH;GAKA,IAAI,KAAK,oBAAoB,IAAI,eAAe,CAAC,QAAQ,IAAI,UAAU,GACrE,SAAS,KAAK;IACZ,MAAM;IACN;IACA,WAAW;IACX,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS,IAAI,KAAK;GACpB,CAAC;EAEL;CACF;CAEA,OAAO;AACT;;;;AC5CA,SAAS,wBAAwB,QAAwB;CACvD,IAAI,MAAM;CACV,IAAI,IAAI;CACR,MAAM,IAAI,OAAO;CACjB,OAAO,IAAI,GAAG;EACZ,MAAM,IAAI,OAAO;EACjB,MAAM,OAAO,OAAO,IAAI;EACxB,IAAI,MAAM,OAAO,SAAS,KAAK;GAC7B,OAAO;GACP,KAAK;GACL,OAAO,IAAI,KAAK,EAAE,OAAO,OAAO,OAAO,OAAO,IAAI,OAAO,MAAM;IAC7D,OAAO,OAAO,OAAO,OAAO,OAAO;IACnC;GACF;GACA,OAAO;GACP,KAAK;EACP,OAAO,IAAI,MAAM,QAAO,MAAM,KAAK;GACjC,MAAM,QAAQ;GACd,OAAO;GACP;GACA,OAAO,IAAI,KAAK,OAAO,OAAO,OAAO;IACnC,IAAI,OAAO,OAAO,MAAM;KACtB,OAAO;KACP,KAAK;KACL;IACF;IACA,OAAO,OAAO,OAAO,OAAO,OAAO;IACnC;GACF;GACA,OAAO;GACP;EACF,OAAO;GACL,OAAO;GACP;EACF;CACF;CACA,OAAO;AACT;;;;;;;AAUA,MAAM,oBACJ;AAEF,SAAS,gBAAgB,SAA4B;CACnD,MAAM,IAAI,QAAQ,KAAK,CAAC,CAAC,YAAY;CACrC,IAAI,EAAE,WAAW,QAAQ,GAAG,OAAO;CAEnC,IAAI,kBAAkB,KAAK,CAAC,GAAG,OAAO;CACtC,IACE,EAAE,WAAW,QAAQ,KACrB,EAAE,WAAW,YAAY,KACzB,EAAE,WAAW,WAAW,KACxB,EAAE,WAAW,QAAQ,GAErB,OAAO;CAET,IAAI,EAAE,WAAW,GAAG,GAAG,OAAO;CAC9B,OAAO;AACT;;;;;AAMA,SAAgB,mBAAmB,QAAiC;CAClE,MAAM,QAAQ,wBAAwB,MAAM;CAC5C,MAAM,QAAyB,CAAC;CAChC,MAAM,QAAqB,CAAC;CAE5B,IAAI,eAAe;CACnB,MAAM,aAAuB,CAAC,CAAC;CAC/B,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAChC,IAAI,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,CAAC;CAE9C,MAAM,UAAU,QAAwB;EAEtC,IAAI,KAAK;EACT,IAAI,KAAK,WAAW,SAAS;EAC7B,OAAO,KAAK,IAAI;GACd,MAAM,MAAO,KAAK,KAAK,KAAM;GAC7B,IAAI,WAAW,QAAS,KAAK,KAAK;QAC7B,KAAK,MAAM;EAClB;EACA,OAAO,KAAK;CACd;CAEA,MAAM,eAAe,SAA6B,MAAM,SAAS,IAAI;CAErE,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,IAAI,MAAM;EAChB,IAAI,MAAM,KAAK;GACb,MAAM,UAAU,MAAM,MAAM,cAAc,CAAC;GAC3C,MAAM,OAAO,gBAAgB,OAAO;GACpC,IACE,SAAS,WACT,CAAC,YAAY,OAAO,KACpB,CAAC,YAAY,OAAO,KACpB,CAAC,YAAY,OAAO,GACpB;IACA,MAAM,UAAU,QAAQ,KAAK,CAAC,CAAC,QAAQ,QAAQ,GAAG;IAClD,MAAM,WAAW,gBAAgB,QAAQ,SAAS,QAAQ,UAAU,CAAC,CAAC;IACtE,MAAM,KAAK;KACT,MAAM,OAAO,QAAQ;KACrB,UAAU,QAAQ,SAAS,KAAK,GAAG,QAAQ,MAAM,GAAG,EAAE,EAAE,KAAK;IAC/D,CAAC;GACH;GACA,MAAM,KAAK,IAAI;GACf,eAAe,IAAI;EACrB,OAAO,IAAI,MAAM,KAAK;GACpB,MAAM,IAAI;GACV,eAAe,IAAI;EACrB,OAAO,IAAI,MAAM,KAGf,eAAe,IAAI;CAEvB;CAEA,OAAO;AACT;;;AC5IA,MAAMA,YACJ;;;;;;;;AAWF,SAAgB,wBAAwB,QAAgB,UAAsC;CAC5F,OAAO,mBAAmB,MAAM,CAAC,CAAC,KAAK,UAAU;EAC/C,MAAM;EACN,MAAM,KAAK;EACX,UAAU,KAAK;EACf,OAAO;EACP,MAAM;EACN,SAASA;CACX,EAAE;AACJ;;;ACnBA,MAAM,gBAAgB;;AAGtB,SAAS,gBAAgB,MAAuB;CAC9C,OAAO,CAAC,KAAK,WAAW,GAAG,KAAK,CAAC,KAAK,WAAW,GAAG;AACtD;AAEA,MAAM,UACJ;;;;;;AAUF,SAAgB,qBAAqB,QAAgB,UAAsC;CACzF,MAAM,WAA+B,CAAC;CACtC,KAAK,MAAM,KAAK,OAAO,SAAS,aAAa,GAAG;EAC9C,MAAM,OAAO,EAAE;EACf,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,CAAC,gBAAgB,IAAI,GAAG;EAE5B,IAAI,KAAK,WAAW,WAAW,GAAG;EAClC,SAAS,KAAK;GACZ,MAAM;GACN,MAAM,OAAO,QAAQ,EAAE,SAAS,CAAC;GACjC,WAAW;GACX,OAAO;GACP,MAAM;GACN,SAAS;EACX,CAAC;CACH;CACA,OAAO;AACT;;;;;;;;;;;;;ACtCA,MAAa,cAAc,IAAI,IAAY;CACzC;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAeD,MAAM,eAAe;;;;;;AAOrB,SAAgB,gBACd,QACA,MAC2D;CAC3D,MAAM,aAA0B,CAAC;CACjC,MAAM,WAA+B,CAAC;CACtC,MAAM,QAAQ,OAAO,MAAM,IAAI;CAC/B,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,IAAI,MAAM,EAAE,EAAE,MAAM,YAAY;EACtC,IAAI,CAAC,KAAK,EAAE,OAAO,KAAA,GAAW;EAM9B,MAAM,MAJM,EAAE,EAAE,CACb,QAAQ,WAAW,EAAE,CAAC,CACtB,QAAQ,UAAU,EAAE,CAAC,CACrB,KACW,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,OAAO,OAAO;EAC9C,MAAM,OAAO,IAAI;EACjB,IAAI,IAAI,SAAS,KAAK,GAAG;GACvB,WAAW,KAAK;IAAE;IAAM,OAAO;GAAM,CAAC;GACtC;EACF;EACA,MAAM,wBAAQ,IAAI,IAAY;EAC9B,MAAM,UAAoB,CAAC;EAC3B,KAAK,MAAM,MAAM,KACf,IAAI,YAAY,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE;OAChC,QAAQ,KAAK,EAAE;EAEtB,IAAI,MAAM,OAAO,GAAG,WAAW,KAAK;GAAE;GAAM,OAAO;EAAM,CAAC;EAC1D,IAAI,QAAQ,SAAS,GACnB,SAAS,KAAK;GACZ;GACA;GACA,OAAO;GACP,MAAM;GACN,SACE,wBAAwB,QAAQ,SAAS,IAAI,MAAM,GAAG,iBAAiB,QAAQ,KAAK,IAAI,EAAE,eAC5E,CAAC,GAAG,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE;EAC9C,CAAC;CAEL;CACA,OAAO;EAAE;EAAY;CAAS;AAChC;;;;;;;AAQA,SAAgB,kBACd,UACA,YACqC;CACrC,IAAI,WAAW,WAAW,GAAG,OAAO;CACpC,OAAO,SAAS,KAAK,MAAM;EAKzB,OAJgB,WAAW,MACxB,OACE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,OAAO,EAAE,UAAU,SAAS,EAAE,MAAM,IAAI,EAAE,IAAI,EAE/E,IAAI;GAAE,GAAG;GAAG,YAAY;EAAK,IAAI;CAChD,CAAC;AACH;;;AC5FA,MAAM,OAAO,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC;;AAGnD,SAAS,eAAe,UAAiC;CACvD,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EAC3B,MAAM,YAAY,KAAK,KAAK,QAAQ,QAAQ,QAAQ;EACpD,IAAI,WAAW,SAAS,GAAG,OAAO;EAClC,MAAM,KAAK,KAAK,IAAI;CACtB;CACA,OAAO;AACT;;AAGA,SAAS,aAAa,UAAiC;CACrD,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EAC3B,MAAM,YAAY,KAAK,KAAK,eAAe;EAC3C,IAAI,WAAW,SAAS,GAAG,OAAO;EAClC,MAAM,KAAK,KAAK,IAAI;CACtB;CACA,OAAO;AACT;AAEA,MAAM,eAAe;;;;;;;;;AAUrB,SAAS,kBAAkB,KAAsC;CAC/D,IAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM,OAAO;CACpD,MAAM,IAAI;CACV,IAAI,OAAO,EAAE,eAAe,UAAU,OAAO;CAC7C,IAAI,CAAC,MAAM,QAAQ,EAAE,SAAS,KAAK,CAAC,MAAM,QAAQ,EAAE,aAAa,GAAG,OAAO;CAC3E,IAAI,CAAC,MAAM,QAAQ,EAAE,UAAU,GAAG,OAAO;CACzC,OAAO;AACT;;;;;AAMA,eAAe,cAAc,QAA4D;CACvF,IAAI;EACF,MAAM,WAAW,MAAM,MAAM,cAAc,EAAE,QAAQ,YAAY,QAAQ,GAAI,EAAE,CAAC;EAChF,IAAI,CAAC,SAAS,IAAI,OAAO;EACzB,MAAM,UAAU,kBAAkB,MAAM,SAAS,KAAK,CAAC;EACvD,IAAI,CAAC,SAAS,OAAO;EACrB,OAAO,YAAY,cAAc;EACjC,OAAO,YAAY,OAAO;CAC5B,QAAQ;EACN,OAAO;CACT;AACF;;AAeA,SAAS,YAAY,SAAoC;CACvD,OAAO,cAAc;EACnB,SAAS,EAAE,QAAQ,QAAQ,OAAO;EAClC,UAAU,EAAE,YAAY,QAAQ,WAAW,KAAK,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;EACrE,SAAS,EAAE,YAAY,QAAQ,QAAQ,KAAK,UAAU;GAAE;GAAM,QAAQ,EAAE,SAAS,KAAK;EAAE,EAAE,EAAE;EAC5F,GAAI,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,cAAc,IAAI,CAAC;EACxE,GAAI,QAAQ,oBAAoB,EAAE,mBAAmB,QAAQ,kBAAkB,IAAI,CAAC;CACtF,CAAC;AACH;;;;;;;;;;;;;;AAeA,eAAsB,aAAa,SAQb;CACpB,MAAM,SAAS,SAAS,oBAAoB,CAAC;CAG7C,IAAI,SAAS,cAAc;EACzB,IAAI,CAAC,WAAW,QAAQ,YAAY,GAClC,MAAM,IAAI,MAAM,4BAA4B,QAAQ,cAAc;EAEpE,OAAO,aAAa,QAAQ,cAAc;EAC1C,MAAM,WAAW,kBAAkB,KAAK,MAAM,aAAa,QAAQ,cAAc,MAAM,CAAC,CAAC;EACzF,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,+BAA+B,QAAQ,cAAc;EACpF,OAAO,YAAY,QAAQ;CAC7B;CAGA,MAAM,aAAa,eAAe,IAAI,KAAK,eAAe,QAAQ,IAAI,CAAC;CACvE,MAAM,cACJ,SAAS,gBAAgB,aAAa,KAAK,YAAY,qBAAqB,IAAI;CAClF,MAAM,cAAc,SAAS,gBAAgB,aAAa,KAAK,YAAY,cAAc,IAAI;CAC7F,MAAM,eAAe,SAAS,gBAAgB,aAAa,IAAI,KAAK,aAAa,QAAQ,IAAI,CAAC;CAS9F,IAAI,EAPF,eACA,WAAW,WAAW,KACtB,gBACA,WAAW,YAAY,KACvB,eACA,WAAW,WAAW,IAEL;EAEjB,MAAM,UAAU,KAAK,MAAM,aAAa,qBAAqB;EAC7D,MAAM,cAAc,KAAK,MAAM,MAAM,aAAa,qBAAqB;EACvE,KAAK,MAAM,aAAa,CAAC,SAAS,WAAW,GAC3C,IAAI,WAAW,SAAS,GAAG;GACzB,OAAO,YAAY,WAAW;GAC9B,MAAM,UAAU,kBAAkB,KAAK,MAAM,aAAa,WAAW,MAAM,CAAC,CAAC;GAC7E,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,+BAA+B,WAAW;GACxE,OAAO,YAAY,OAAO;EAC5B;EAIF,MAAM,UAAU,MAAM,cAAc,MAAM;EAC1C,IAAI,SAAS,OAAO;EAEpB,MAAM,IAAI,MACR,kMAGF;CACF;CACA,OAAO,oBAAoB;CAE3B,MAAM,UAAU,KAAK,MAAM,aAAa,aAAa,MAAM,CAAC;CAG5D,MAAM,WAAW,KAAK,MAAM,aAAa,cAAc,MAAM,CAAC;CAG9D,MAAM,UAAU,KAAK,MAAM,aAAa,aAAa,MAAM,CAAC;CAM5D,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,MAAM,YAAY,KAAK,MACrB,aAAa,KAAK,YAAa,qBAAqB,GAAG,MAAM,CAC/D;EACA,gBAAgB,UAAU;EAC1B,oBAAoB,UAAU;CAChC,QAAQ;EACN,gBAAgB,KAAA;EAChB,oBAAoB,KAAA;CACtB;CAEA,OAAO,cAAc;EACnB;EACA;EACA;EACA,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;EACzC,GAAI,oBAAoB,EAAE,kBAAkB,IAAI,CAAC;CACnD,CAAC;AACH;;;ACtKA,MAAM,YAAY,IAAI,IAAI;CAAC;CAAgB;CAAQ;CAAQ;CAAS;CAAS;AAAU,CAAC;AAExF,SAAS,aAAa,OAA2B;CAC/C,MAAM,MAAgB,CAAC;CACvB,MAAM,QAAQ,MAAc;EAC1B,IAAI,CAAC,WAAW,CAAC,GAAG;EAEpB,IADU,SAAS,CACf,CAAC,CAAC,YAAY,GAAG;GACnB,MAAM,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;GACnC,IAAI,UAAU,IAAI,IAAI,GAAG;GACzB,KAAK,MAAM,SAAS,YAAY,CAAC,GAAG,KAAK,KAAK,GAAG,KAAK,CAAC;GACvD;EACF;EACA,MAAM,MAAM,QAAQ,CAAC;EACrB,IAAI,QAAQ,UAAU,QAAQ,UAAU,QAAQ,OAAO,IAAI,KAAK,CAAC;CACnE;CACA,KAAK,MAAM,KAAK,OAAO,KAAK,CAAC;CAC7B,OAAO;AACT;AAEA,SAAS,YAAY,MAAc,QAAgB,UAA+B;CAChF,MAAM,MAAM,QAAQ,IAAI;CACxB,MAAM,WAAsB,CAAC;CAC7B,IAAI,QAAQ,QAAQ;EAClB,SAAS,KAAK,GAAG,yBAAyB,QAAQ,MAAM,QAAQ,CAAC;EACjE,SAAS,KAAK,GAAG,wBAAwB,QAAQ,IAAI,CAAC;CACxD,OAAO,IAAI,QAAQ,UAAU,QAAQ,OAAO;EAC1C,SAAS,KAAK,GAAG,yBAAyB,QAAQ,MAAM,QAAQ,CAAC;EACjE,SAAS,KAAK,GAAG,sBAAsB,QAAQ,MAAM,QAAQ,CAAC;EAC9D,SAAS,KAAK,GAAG,2BAA2B,QAAQ,MAAM,QAAQ,CAAC;EACnE,SAAS,KAAK,GAAG,wBAAwB,QAAQ,MAAM,QAAQ,CAAC;EAChE,SAAS,KAAK,GAAG,qBAAqB,QAAQ,IAAI,CAAC;CACrD;CACA,OAAO;AACT;AAEA,SAAS,OAAO,GAAoB;CAClC,QAAQ,EAAE,MAAV;EACE,KAAK;GACH,IAAI,EAAE,gBAAgB,OAAO,GAAG,EAAE,MAAM,SAAS,EAAE,eAAe;GAClE,OAAO,GAAG,EAAE,MAAM,KAAK,EAAE,YAAY,KAAK,KAAK,KAAK;EACtD,KAAK,gBACH,OAAO,IAAI,EAAE,UAAU,GAAG,EAAE,KAAK;EACnC,KAAK,qBACH,OAAO,IAAI,EAAE,UAAU;EACzB,KAAK,gBACH,OAAO,IAAI,EAAE,UAAU,cAAc,EAAE,KAAK;EAC9C,KAAK,cACH,OAAO,IAAI,EAAE,KAAK;EACpB,KAAK,iBACH,OAAO,GAAG,EAAE,SAAS;EACvB,KAAK,qBACH,OAAO,WAAW,EAAE,UAAU;EAChC,KAAK,mBACH,OAAO,EAAE;CACb;AACF;AAEA,SAAS,WAAW,OAAiC;CACnD,OAAO,UAAU,SAAS,SAAS;AACrC;AAEA,SAAS,eAAe,UAAkC;CACxD,IAAI,SAAS,WAAW,GAAG;EACzB,QAAQ,IAAI,kCAAkC;EAC9C;CACF;CACA,MAAM,OAAO,SAAS,KAAK,OAAO;EAChC,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE;EACpB,OAAO,EAAE,aAAa,eAAe,WAAW,EAAE,KAAK;EACvD,MAAM,EAAE;EACR,QAAQ,OAAO,CAAC;CAClB,EAAE;CACF,MAAM,OAAO,KAAK,IAAI,GAAG,KAAK,KAAK,MAAM,EAAE,IAAI,MAAM,GAAG,CAAC;CACzD,MAAM,OAAO,KAAK,IAAI,GAAG,KAAK,KAAK,MAAM,EAAE,MAAM,MAAM,GAAG,CAAC;CAC3D,MAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,KAAK,MAAM,EAAE,KAAK,MAAM,GAAG,CAAC;CAC3D,KAAK,MAAM,KAAK,MACd,QAAQ,IACN,GAAG,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,EAAE,MAAM,OAAO,IAAI,EAAE,IAAI,EAAE,KAAK,OAAO,KAAK,EAAE,IAAI,EAAE,QAChF;CAEF,QAAQ,IAAI,KAAK;CACjB,MAAM,SAAS,SAAS,QAAQ,MAAM,CAAC,EAAE,UAAU;CACnD,MAAM,SAAS,OAAO,QAAQ,MAAM,EAAE,UAAU,OAAO,CAAC,CAAC;CACzD,MAAM,WAAW,OAAO,QAAQ,MAAM,EAAE,UAAU,MAAM,CAAC,CAAC;CAC1D,MAAM,QAAQ,OAAO,QAAQ,MAAM,EAAE,UAAU,MAAM,CAAC,CAAC;CACvD,MAAM,aAAa,SAAS,QAAQ,MAAM,EAAE,UAAU,CAAC,CAAC;CACxD,MAAM,QAAQ,CACZ,GAAG,OAAO,QAAQ,WAAW,IAAI,KAAK,OACtC,GAAG,SAAS,UAAU,aAAa,IAAI,KAAK,KAC9C;CACA,IAAI,OAAO,MAAM,KAAK,GAAG,MAAM,MAAM;CACrC,IAAI,YAAY,MAAM,KAAK,GAAG,WAAW,YAAY;CACrD,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC;AAC9B;AAEA,SAAS,SAAS,GAAmB;CACnC,OAAO,EAAE,QAAQ,uBAAuB,MAAM;AAChD;;;;;;AAOA,SAAgB,eACd,QACA,MACA,UACmC;CACnC,MAAM,UAAU,yBAAyB,QAAQ,MAAM,QAAQ,CAAC,CAAC,QAC9D,MAAM,EAAE,UAAU,WAAW,EAAE,kBAAkB,sBAAsB,KAAK,EAAE,KAAK,CACtF;CACA,IAAI,OAAO;CACX,KAAK,MAAM,KAAK,SAAS;EAEvB,MAAM,KAAK,IAAI,OAAO,IAAI,SAAS,EAAE,QAAQ,EAAE,YAAY,SAAS,EAAE,KAAK,EAAE,aAAa,IAAI;EAC9F,OAAO,KAAK,QAAQ,IAAI,SAAS,EAAE,eAAe,IAAI;CACxD;CACA,IAAI,SAAS,QAAQ,OAAO;EAAE;EAAQ,OAAO;CAAE;CAC/C,MAAM,YAAY,yBAAyB,MAAM,MAAM,QAAQ,CAAC,CAAC,QAC9D,MAAM,EAAE,UAAU,WAAW,EAAE,cAClC,CAAC,CAAC;CACF,OAAO;EAAE,QAAQ;EAAM,OAAO,QAAQ,SAAS;CAAU;AAC3D;;AAGA,SAAS,WAAW,OAAiB,UAA4B;CAC/D,IAAI,QAAQ;CACZ,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,QAAQ,IAAI,MAAM,QAAQ;EAC9B,MAAM,EAAE,QAAQ,OAAO,MAAM,eAAe,aAAa,MAAM,MAAM,GAAG,MAAM,QAAQ;EACtF,IAAI,IAAI,GAAG;GACT,cAAc,MAAM,MAAM;GAC1B,SAAS;EACX;CACF;CACA,OAAO;AACT;AAEA,eAAsB,MAAM,MAAgB,SAAuC;CACjF,IAAI,CAAC,KAAK,SAAS,MAAM,GAAG;EAC1B,QAAQ,IAAI,iFAAiF;EAC7F,QAAQ,IAAI,+DAA+D;EAC3E,QAAQ,IAAI,2EAA2E;EACvF,QAAQ,IAAI,gDAAgD;EAC5D,QAAQ,IAAI,mEAAmE;EAC/E,QAAQ,IAAI,8EAA8E;EAC1F,QAAQ,IAAI,4DAA4D;EACxE;CACF;CAEA,MAAM,aAAa,KAAK,SAAS,QAAQ;CACzC,MAAM,UAAU,KAAK,SAAS,OAAO;CACrC,MAAM,UAAU,KAAK,SAAS,WAAW;CACzC,MAAM,WAAW,KAAK,QAAQ,SAAS;CACvC,MAAM,WAAW,YAAY,IAAK,KAAK,WAAW,MAAM,UAAW;CACnE,MAAM,cAAc,KAAK,QAAQ,YAAY;CAC7C,MAAM,eAAe,eAAe,IAAI,KAAK,cAAc,KAAK,KAAA;CAEhE,MAAM,QAAQ,KAAK,QAAQ,GAAG,MAAM;EAClC,IAAI,EAAE,WAAW,IAAI,GAAG,OAAO;EAC/B,IAAI,YAAY,KAAK,MAAM,WAAW,GAAG,OAAO;EAChD,IAAI,eAAe,KAAK,MAAM,cAAc,GAAG,OAAO;EACtD,OAAO;CACT,CAAC;CAED,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,aAAa;GAC5B,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;GACvC,GAAI,UAAU,EAAE,YAAY,WAAmB,QAAQ,MAAM,cAAc,QAAQ,EAAE,IAAI,CAAC;EAC5F,CAAC;CACH,SAAS,GAAG;EACV,QAAQ,MAAM,yBAAyB,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,GAAG;EACnF,QAAQ,WAAW;EACnB;CACF;CAEA,MAAM,QAAQ,aAAa,MAAM,SAAS,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC;CAEjE,IAAI,SAAS;EACX,MAAM,IAAI,WAAW,OAAO,QAAQ;EACpC,QAAQ,IAAI,qCAAqC,EAAE,UAAU,MAAM,IAAI,KAAK,IAAI,YAAY;CAC9F;CAEA,MAAM,cAAgC,CAAC;CACvC,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,SAAS,aAAa,MAAM,MAAM;EACxC,MAAM,EAAE,YAAY,UAAU,sBAAsB,gBAAgB,QAAQ,IAAI;EAChF,YAAY,KAAK,GAAG,kBAAkB,YAAY,MAAM,QAAQ,QAAQ,GAAG,UAAU,CAAC;EACtF,YAAY,KAAK,GAAG,iBAAiB;CACvC;CAEA,IAAI,YACF,QAAQ,IAAI,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;MAEhD,eAAe,WAAW;CAI5B,MAAM,SAAS,YAAY,QAAQ,MAAM,CAAC,EAAE,UAAU;CACtD,MAAM,YAAY,OAAO,MAAM,MAAM,EAAE,UAAU,OAAO;CACxD,IAAI,aAAa,WAAW,WAAW,QAAQ,WAAW;CAC1D,IAAI,aAAa,UAAU,OAAO,MAAM,MAAM,EAAE,UAAU,MAAM,GAAG,QAAQ,WAAW;AACxF"}

package/dist/{drift-B02BbFN_.mjs → drift-BO1p0THo.mjs}

@@ -1,5 +1,5 @@
-import { t as readFileSafe } from "./fs-m7ZvuBBm.mjs";
-import { c as findComponent, n as readLock, o as fetchRegistry, r as sha256 } from "./lock-CW8UuEPJ.mjs";
+import { n as readFileSafe } from "./fs-C2lsyHs9.mjs";
+import { c as findComponent, n as readLock, o as fetchRegistry, r as sha256 } from "./lock-D0OBNNbk.mjs";
 import { t as checkPeerVersions } from "./peer-versions-Cep8Brn3.mjs";
 //#region src/commands/drift.ts
 async function runDoctorDrift(config, cwd = process.cwd()) {
@@ -61,4 +61,4 @@ async function runDoctorDrift(config, cwd = process.cwd()) {
 //#endregion
 export { runDoctorDrift };
 
-//# sourceMappingURL=drift-B02BbFN_.mjs.map
+//# sourceMappingURL=drift-BO1p0THo.mjs.map

package/dist/{drift-B02BbFN_.mjs.map → drift-BO1p0THo.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"drift-B02BbFN_.mjs","names":[],"sources":["../src/commands/drift.ts"],"sourcesContent":["import type { CascadeConfig } from '../utils/config.js'\nimport { readFileSafe } from '../utils/fs.js'\nimport { readLock, sha256 } from '../utils/lock.js'\nimport { checkPeerVersions } from '../utils/peer-versions.js'\nimport { fetchRegistry, findComponent } from '../utils/registry.js'\n\n/**\n * `cascivo doctor --drift` — compares installed components against the\n * registry. Two drift classes:\n *\n *  1. Local-edit drift: an installed file's content no longer matches what\n *     was copied at install time (hand edits, or deleted after install).\n *  2. Peer-version drift: the currently-registered component source needs a\n *     newer `@cascivo/*` peer package (per `peerVersions`) than what's\n *     actually installed in node_modules — the dashboard-feedback failure\n *     mode (DataTable referencing an i18n builtin key an older published\n *     @cascivo/i18n build doesn't have).\n */\n/**\n * What a drift run actually managed to do.\n *\n * `runDoctorDrift` used to return void, so the default `cascivo doctor` could not run it and\n * still say something honest. That is how \"No violations found.\" got printed by a run that\n * had never looked: the two were disjoint branches, and `--drift` reported five real issues\n * on the same project.\n */\nexport interface DriftOutcome {\n  /** False when the check could not run at all (no lockfile, offline, unreachable registry). */\n  ran: boolean\n  /** Why it could not run — printed instead of an unqualified \"clean\". */\n  reason?: string\n  issues: number\n}\n\nexport async function runDoctorDrift(\n  config: CascadeConfig,\n  cwd: string = process.cwd(),\n): Promise<DriftOutcome> {\n  const lock = await readLock(cwd)\n  if (!lock || Object.keys(lock.items).length === 0) {\n    console.log('No installed components found in cascivo.lock.')\n    return {\n      ran: false,\n      reason: 'no components installed (cascivo.lock is empty or missing)',\n      issues: 0,\n    }\n  }\n\n  let registry: Awaited<ReturnType<typeof fetchRegistry>>\n  try {\n    registry = await fetchRegistry(config.registry)\n  } catch (error) {\n    const reason = `could not reach the registry (${error instanceof Error ? error.message : String(error)})`\n    console.log(`Drift check skipped: ${reason}`)\n    return { ran: false, reason, issues: 0 }\n  }\n  let driftCount = 0\n\n  for (const [name, entry] of Object.entries(lock.items)) {\n    const current = findComponent(registry, name)\n    if (!current) continue\n\n    for (const [path, lockedHash] of Object.entries(entry.files)) {\n      const content = await readFileSafe(path)\n      if (content === null) {\n        console.log(`${name}: ${path} is missing (installed, then deleted)`)\n        driftCount++\n        continue\n      }\n      if (sha256(content) !== lockedHash) {\n        console.log(`${name}: ${path} has local edits (differs from the version installed)`)\n        driftCount++\n      }\n    }\n\n    if (current.peerVersions) {\n      const violations = await checkPeerVersions(cwd, current.peerVersions)\n      for (const v of violations) {\n        const installedDesc = v.installed ? `${v.installed} is installed` : 'it is not installed'\n        console.log(`${name}: needs ${v.pkg} ${v.required}, but ${installedDesc}.`)\n        driftCount++\n      }\n    }\n  }\n\n  if (driftCount > 0) {\n    console.log(`\\n${driftCount} drift issue(s) found.`)\n    process.exitCode = 1\n  } else {\n    console.log('No drift detected — installed components match the registry.')\n  }\n  return { ran: true, issues: driftCount }\n}\n"],"mappings":";;;;AAkCA,eAAsB,eACpB,QACA,MAAc,QAAQ,IAAI,GACH;CACvB,MAAM,OAAO,MAAM,SAAS,GAAG;CAC/B,IAAI,CAAC,QAAQ,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,WAAW,GAAG;EACjD,QAAQ,IAAI,gDAAgD;EAC5D,OAAO;GACL,KAAK;GACL,QAAQ;GACR,QAAQ;EACV;CACF;CAEA,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,cAAc,OAAO,QAAQ;CAChD,SAAS,OAAO;EACd,MAAM,SAAS,iCAAiC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;EACvG,QAAQ,IAAI,wBAAwB,QAAQ;EAC5C,OAAO;GAAE,KAAK;GAAO;GAAQ,QAAQ;EAAE;CACzC;CACA,IAAI,aAAa;CAEjB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,KAAK,KAAK,GAAG;EACtD,MAAM,UAAU,cAAc,UAAU,IAAI;EAC5C,IAAI,CAAC,SAAS;EAEd,KAAK,MAAM,CAAC,MAAM,eAAe,OAAO,QAAQ,MAAM,KAAK,GAAG;GAC5D,MAAM,UAAU,MAAM,aAAa,IAAI;GACvC,IAAI,YAAY,MAAM;IACpB,QAAQ,IAAI,GAAG,KAAK,IAAI,KAAK,sCAAsC;IACnE;IACA;GACF;GACA,IAAI,OAAO,OAAO,MAAM,YAAY;IAClC,QAAQ,IAAI,GAAG,KAAK,IAAI,KAAK,sDAAsD;IACnF;GACF;EACF;EAEA,IAAI,QAAQ,cAAc;GACxB,MAAM,aAAa,MAAM,kBAAkB,KAAK,QAAQ,YAAY;GACpE,KAAK,MAAM,KAAK,YAAY;IAC1B,MAAM,gBAAgB,EAAE,YAAY,GAAG,EAAE,UAAU,iBAAiB;IACpE,QAAQ,IAAI,GAAG,KAAK,UAAU,EAAE,IAAI,GAAG,EAAE,SAAS,QAAQ,cAAc,EAAE;IAC1E;GACF;EACF;CACF;CAEA,IAAI,aAAa,GAAG;EAClB,QAAQ,IAAI,KAAK,WAAW,uBAAuB;EACnD,QAAQ,WAAW;CACrB,OACE,QAAQ,IAAI,8DAA8D;CAE5E,OAAO;EAAE,KAAK;EAAM,QAAQ;CAAW;AACzC"}
+{"version":3,"file":"drift-BO1p0THo.mjs","names":[],"sources":["../src/commands/drift.ts"],"sourcesContent":["import type { CascadeConfig } from '../utils/config.js'\nimport { readFileSafe } from '../utils/fs.js'\nimport { readLock, sha256 } from '../utils/lock.js'\nimport { checkPeerVersions } from '../utils/peer-versions.js'\nimport { fetchRegistry, findComponent } from '../utils/registry.js'\n\n/**\n * `cascivo doctor --drift` — compares installed components against the\n * registry. Two drift classes:\n *\n *  1. Local-edit drift: an installed file's content no longer matches what\n *     was copied at install time (hand edits, or deleted after install).\n *  2. Peer-version drift: the currently-registered component source needs a\n *     newer `@cascivo/*` peer package (per `peerVersions`) than what's\n *     actually installed in node_modules — the dashboard-feedback failure\n *     mode (DataTable referencing an i18n builtin key an older published\n *     @cascivo/i18n build doesn't have).\n */\n/**\n * What a drift run actually managed to do.\n *\n * `runDoctorDrift` used to return void, so the default `cascivo doctor` could not run it and\n * still say something honest. That is how \"No violations found.\" got printed by a run that\n * had never looked: the two were disjoint branches, and `--drift` reported five real issues\n * on the same project.\n */\nexport interface DriftOutcome {\n  /** False when the check could not run at all (no lockfile, offline, unreachable registry). */\n  ran: boolean\n  /** Why it could not run — printed instead of an unqualified \"clean\". */\n  reason?: string\n  issues: number\n}\n\nexport async function runDoctorDrift(\n  config: CascadeConfig,\n  cwd: string = process.cwd(),\n): Promise<DriftOutcome> {\n  const lock = await readLock(cwd)\n  if (!lock || Object.keys(lock.items).length === 0) {\n    console.log('No installed components found in cascivo.lock.')\n    return {\n      ran: false,\n      reason: 'no components installed (cascivo.lock is empty or missing)',\n      issues: 0,\n    }\n  }\n\n  let registry: Awaited<ReturnType<typeof fetchRegistry>>\n  try {\n    registry = await fetchRegistry(config.registry)\n  } catch (error) {\n    const reason = `could not reach the registry (${error instanceof Error ? error.message : String(error)})`\n    console.log(`Drift check skipped: ${reason}`)\n    return { ran: false, reason, issues: 0 }\n  }\n  let driftCount = 0\n\n  for (const [name, entry] of Object.entries(lock.items)) {\n    const current = findComponent(registry, name)\n    if (!current) continue\n\n    for (const [path, lockedHash] of Object.entries(entry.files)) {\n      const content = await readFileSafe(path)\n      if (content === null) {\n        console.log(`${name}: ${path} is missing (installed, then deleted)`)\n        driftCount++\n        continue\n      }\n      if (sha256(content) !== lockedHash) {\n        console.log(`${name}: ${path} has local edits (differs from the version installed)`)\n        driftCount++\n      }\n    }\n\n    if (current.peerVersions) {\n      const violations = await checkPeerVersions(cwd, current.peerVersions)\n      for (const v of violations) {\n        const installedDesc = v.installed ? `${v.installed} is installed` : 'it is not installed'\n        console.log(`${name}: needs ${v.pkg} ${v.required}, but ${installedDesc}.`)\n        driftCount++\n      }\n    }\n  }\n\n  if (driftCount > 0) {\n    console.log(`\\n${driftCount} drift issue(s) found.`)\n    process.exitCode = 1\n  } else {\n    console.log('No drift detected — installed components match the registry.')\n  }\n  return { ran: true, issues: driftCount }\n}\n"],"mappings":";;;;AAkCA,eAAsB,eACpB,QACA,MAAc,QAAQ,IAAI,GACH;CACvB,MAAM,OAAO,MAAM,SAAS,GAAG;CAC/B,IAAI,CAAC,QAAQ,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,WAAW,GAAG;EACjD,QAAQ,IAAI,gDAAgD;EAC5D,OAAO;GACL,KAAK;GACL,QAAQ;GACR,QAAQ;EACV;CACF;CAEA,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,cAAc,OAAO,QAAQ;CAChD,SAAS,OAAO;EACd,MAAM,SAAS,iCAAiC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;EACvG,QAAQ,IAAI,wBAAwB,QAAQ;EAC5C,OAAO;GAAE,KAAK;GAAO;GAAQ,QAAQ;EAAE;CACzC;CACA,IAAI,aAAa;CAEjB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,KAAK,KAAK,GAAG;EACtD,MAAM,UAAU,cAAc,UAAU,IAAI;EAC5C,IAAI,CAAC,SAAS;EAEd,KAAK,MAAM,CAAC,MAAM,eAAe,OAAO,QAAQ,MAAM,KAAK,GAAG;GAC5D,MAAM,UAAU,MAAM,aAAa,IAAI;GACvC,IAAI,YAAY,MAAM;IACpB,QAAQ,IAAI,GAAG,KAAK,IAAI,KAAK,sCAAsC;IACnE;IACA;GACF;GACA,IAAI,OAAO,OAAO,MAAM,YAAY;IAClC,QAAQ,IAAI,GAAG,KAAK,IAAI,KAAK,sDAAsD;IACnF;GACF;EACF;EAEA,IAAI,QAAQ,cAAc;GACxB,MAAM,aAAa,MAAM,kBAAkB,KAAK,QAAQ,YAAY;GACpE,KAAK,MAAM,KAAK,YAAY;IAC1B,MAAM,gBAAgB,EAAE,YAAY,GAAG,EAAE,UAAU,iBAAiB;IACpE,QAAQ,IAAI,GAAG,KAAK,UAAU,EAAE,IAAI,GAAG,EAAE,SAAS,QAAQ,cAAc,EAAE;IAC1E;GACF;EACF;CACF;CAEA,IAAI,aAAa,GAAG;EAClB,QAAQ,IAAI,KAAK,WAAW,uBAAuB;EACnD,QAAQ,WAAW;CACrB,OACE,QAAQ,IAAI,8DAA8D;CAE5E,OAAO;EAAE,KAAK;EAAM,QAAQ;CAAW;AACzC"}

package/dist/{eject-Br8V7I3m.mjs → eject-DI2hfDdV.mjs}

@@ -1,4 +1,4 @@
-import { t as fetchJson } from "./http-CJZ5W0Fa.mjs";
+import { t as fetchJson } from "./http-DYn1TvDz.mjs";
 import { fileURLToPath } from "node:url";
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -42,15 +42,48 @@ function findUp(startDir, rel) {
 	}
 	return null;
 }
-function loadRegistry(config) {
+/**
+* `eject` reads two payloads to build a token-override stylesheet. Both may come
+* over the network, and both are indexed straight afterwards — a missing array
+* used to surface as "cannot read properties of undefined" with no clue which
+* of the two files was wrong.
+*/
+function asArrayOf(raw, key, source) {
+	if (typeof raw !== "object" || raw === null) throw new Error(`Invalid response from ${source}: expected an object`);
+	const list = raw[key];
+	if (!Array.isArray(list)) throw new Error(`Invalid response from ${source}: "${key}" must be an array`);
+	return list.filter((e) => typeof e === "object" && e !== null);
+}
+async function loadRegistry(config) {
 	const local = findUp(HERE, "registry.json") ?? findUp(process.cwd(), "registry.json");
-	if (local) return JSON.parse(readFileSync(local, "utf8"));
-	return fetchJson(config.registry);
+	const source = local ?? config.registry;
+	return { components: asArrayOf(local ? JSON.parse(readFileSync(local, "utf8")) : await fetchJson(source), "components", source).flatMap((c) => {
+		if (typeof c["name"] !== "string") return [];
+		const entry = { name: c["name"] };
+		if (typeof c["type"] === "string") entry.type = c["type"];
+		const meta = c["meta"];
+		if (typeof meta === "object" && meta !== null) {
+			const m = meta;
+			const name = typeof m["name"] === "string" ? m["name"] : c["name"];
+			const tokens = Array.isArray(m["tokens"]) ? m["tokens"].filter((t) => typeof t === "string") : void 0;
+			entry.meta = tokens ? {
+				name,
+				tokens
+			} : { name };
+		}
+		return [entry];
+	}) };
 }
-function loadCatalog(config) {
+async function loadCatalog(config) {
 	const local = findUp(HERE, join("apps", "site", "public", "tokens.catalog.json")) ?? findUp(process.cwd(), join("apps", "site", "public", "tokens.catalog.json"));
-	if (local) return JSON.parse(readFileSync(local, "utf8"));
-	return fetchJson(config.registry.replace(/registry\.json$/, "tokens.catalog.json"));
+	const source = local ?? config.registry.replace(/registry\.json$/, "tokens.catalog.json");
+	return { tokens: asArrayOf(local ? JSON.parse(readFileSync(local, "utf8")) : await fetchJson(source), "tokens", source).flatMap((t) => {
+		if (typeof t["name"] !== "string") return [];
+		const entry = { name: t["name"] };
+		if (typeof t["value"] === "string") entry.value = t["value"];
+		if (typeof t["resolvedDefault"] === "string" || t["resolvedDefault"] === null) entry.resolvedDefault = t["resolvedDefault"];
+		return [entry];
+	}) };
 }
 /**
 * `cascivo eject <component> [--tokens a,b] [--scope sel] [--out file]`
@@ -113,4 +146,4 @@ async function eject(args, config, options = {}) {
 //#endregion
 export { eject };
 
-//# sourceMappingURL=eject-Br8V7I3m.mjs.map
+//# sourceMappingURL=eject-DI2hfDdV.mjs.map

package/dist/eject-DI2hfDdV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"eject-DI2hfDdV.mjs","names":[],"sources":["../src/commands/eject.ts"],"sourcesContent":["import { existsSync, readFileSync } from 'node:fs'\nimport { mkdir, writeFile } from 'node:fs/promises'\nimport { dirname, join } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport type { CascadeConfig } from '../utils/config.js'\nimport { fetchJson } from '../utils/http.js'\n\nconst HERE = dirname(fileURLToPath(import.meta.url))\n\nexport interface EjectToken {\n  name: string\n  /** Resolved starting value (light theme), or null when unknown. */\n  value: string | null\n}\n\ninterface RegistryComponentMeta {\n  name: string\n  tokens?: string[]\n}\ninterface RegistryEntry {\n  name: string\n  type?: string\n  meta?: RegistryComponentMeta\n}\ninterface RegistryFile {\n  components: RegistryEntry[]\n}\ninterface CatalogEntry {\n  name: string\n  value?: string\n  resolvedDefault?: string | null\n}\ninterface CatalogFile {\n  tokens: CatalogEntry[]\n}\n\n/**\n * Build a scoped, locally-owned token-override stylesheet. The component itself\n * stays imported from `@cascivo/react`; only the listed token values are\n * ejected so they can be tuned without copying the whole component in.\n *\n * The block is intentionally *unlayered*: unlayered declarations win over the\n * themed `@layer cascivo.theme` values, so the override always takes effect.\n */\nexport function buildOverrideCss(opts: {\n  component: string\n  scope: string\n  tokens: EjectToken[]\n}): string {\n  const { component, scope, tokens } = opts\n  const lines: string[] = []\n  lines.push(`/* cascivo eject — ${component}`)\n  lines.push(' *')\n  lines.push(` * Locally-owned token overrides. ${component} is still imported from`)\n  lines.push(' * @cascivo/react — only these token values are ejected so you can tune them')\n  lines.push(' * without copying the whole component into your repo.')\n  lines.push(' *')\n  lines.push(' * Unlayered, so these win over the themed layer values. Apply the scope by')\n  lines.push(` * adding the selector to the subtree you want to affect, e.g.`)\n  lines.push(` *   <div data-cascivo-eject=\"${component}\">…</div>`)\n  lines.push(' */')\n  lines.push(`${scope} {`)\n  for (const t of tokens) {\n    if (t.value === null) {\n      lines.push(`  /* ${t.name}: set a value — resolves per theme by default */`)\n    } else {\n      lines.push(`  ${t.name}: ${t.value};`)\n    }\n  }\n  lines.push('}')\n  return lines.join('\\n') + '\\n'\n}\n\n/** Walk up from a start dir looking for a file/dir match. */\nfunction findUp(startDir: string, rel: string): string | null {\n  let dir = startDir\n  for (let i = 0; i < 10; i++) {\n    const candidate = join(dir, rel)\n    if (existsSync(candidate)) return candidate\n    dir = join(dir, '..')\n  }\n  return null\n}\n\n/**\n * `eject` reads two payloads to build a token-override stylesheet. Both may come\n * over the network, and both are indexed straight afterwards — a missing array\n * used to surface as \"cannot read properties of undefined\" with no clue which\n * of the two files was wrong.\n */\nfunction asArrayOf(raw: unknown, key: string, source: string): Record<string, unknown>[] {\n  if (typeof raw !== 'object' || raw === null) {\n    throw new Error(`Invalid response from ${source}: expected an object`)\n  }\n  const list = (raw as Record<string, unknown>)[key]\n  if (!Array.isArray(list)) {\n    throw new Error(`Invalid response from ${source}: \"${key}\" must be an array`)\n  }\n  return list.filter((e): e is Record<string, unknown> => typeof e === 'object' && e !== null)\n}\n\nasync function loadRegistry(config: CascadeConfig): Promise<RegistryFile> {\n  const local = findUp(HERE, 'registry.json') ?? findUp(process.cwd(), 'registry.json')\n  const source = local ?? config.registry\n  const raw: unknown = local ? JSON.parse(readFileSync(local, 'utf8')) : await fetchJson(source)\n  const components = asArrayOf(raw, 'components', source).flatMap<RegistryEntry>((c) => {\n    if (typeof c['name'] !== 'string') return []\n    const entry: RegistryEntry = { name: c['name'] }\n    if (typeof c['type'] === 'string') entry.type = c['type']\n    const meta = c['meta']\n    if (typeof meta === 'object' && meta !== null) {\n      const m = meta as Record<string, unknown>\n      const name = typeof m['name'] === 'string' ? m['name'] : c['name']\n      const tokens = Array.isArray(m['tokens'])\n        ? m['tokens'].filter((t): t is string => typeof t === 'string')\n        : undefined\n      entry.meta = tokens ? { name, tokens } : { name }\n    }\n    return [entry]\n  })\n  return { components }\n}\n\nasync function loadCatalog(config: CascadeConfig): Promise<CatalogFile> {\n  const local =\n    findUp(HERE, join('apps', 'site', 'public', 'tokens.catalog.json')) ??\n    findUp(process.cwd(), join('apps', 'site', 'public', 'tokens.catalog.json'))\n  const source = local ?? config.registry.replace(/registry\\.json$/, 'tokens.catalog.json')\n  const raw: unknown = local ? JSON.parse(readFileSync(local, 'utf8')) : await fetchJson(source)\n  const tokens = asArrayOf(raw, 'tokens', source).flatMap<CatalogEntry>((t) => {\n    if (typeof t['name'] !== 'string') return []\n    const entry: CatalogEntry = { name: t['name'] }\n    if (typeof t['value'] === 'string') entry.value = t['value']\n    if (typeof t['resolvedDefault'] === 'string' || t['resolvedDefault'] === null) {\n      entry.resolvedDefault = t['resolvedDefault']\n    }\n    return [entry]\n  })\n  return { tokens }\n}\n\ninterface EjectOptions {\n  tokens?: string[]\n  scope?: string\n  out?: string\n  dryRun?: boolean\n}\n\n/**\n * `cascivo eject <component> [--tokens a,b] [--scope sel] [--out file]`\n *\n * Ejects a targeted slice of a component — specific design tokens — into a\n * scoped local override file, instead of copying the whole component.\n */\nexport async function eject(\n  args: string[],\n  config: CascadeConfig,\n  options: EjectOptions = {},\n): Promise<void> {\n  const component = args.find((a) => !a.startsWith('--'))\n  if (!component) {\n    console.error(\n      'Usage: cascivo eject <component> [--tokens a,b] [--scope <selector>] [--out <file>]',\n    )\n    process.exitCode = 1\n    return\n  }\n\n  const registry = await loadRegistry(config)\n  const entry = registry.components.find((c) => c.name === component)\n  if (!entry) {\n    console.error(`Component \"${component}\" not found in the registry.`)\n    process.exitCode = 1\n    return\n  }\n\n  const available = entry.meta?.tokens ?? []\n  if (available.length === 0) {\n    console.error(`Component \"${component}\" declares no tokens to eject.`)\n    process.exitCode = 1\n    return\n  }\n\n  let selected = available\n  if (options.tokens && options.tokens.length > 0) {\n    const unknown = options.tokens.filter((t) => !available.includes(t))\n    if (unknown.length > 0) {\n      console.error(\n        `These tokens are not used by \"${component}\": ${unknown.join(', ')}\\n` +\n          `Available: ${available.join(', ')}`,\n      )\n      process.exitCode = 1\n      return\n    }\n    selected = options.tokens\n  }\n\n  const catalog = await loadCatalog(config)\n  const valueOf = new Map(\n    catalog.tokens.map((t) => [t.name, t.resolvedDefault ?? t.value ?? null] as const),\n  )\n  const tokens: EjectToken[] = selected.map((name) => ({ name, value: valueOf.get(name) ?? null }))\n\n  const scope = options.scope ?? `[data-cascivo-eject='${component}']`\n  const css = buildOverrideCss({ component, scope, tokens })\n\n  if (options.dryRun) {\n    console.log(css)\n    return\n  }\n\n  const out = options.out ?? join('src', 'styles', `cascivo-${component}.overrides.css`)\n  await mkdir(dirname(out), { recursive: true })\n  await writeFile(out, css)\n  console.log(`Ejected ${tokens.length} token(s) for \"${component}\" → ${out}`)\n  console.log(`Import it after your theme CSS, then add the scope:`)\n  console.log(`  import './${out.replace(/\\\\/g, '/')}'`)\n  console.log(`  <div data-cascivo-eject=\"${component}\">…</div>`)\n}\n"],"mappings":";;;;;;AAOA,MAAM,OAAO,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC;;;;;;;;;AAqCnD,SAAgB,iBAAiB,MAItB;CACT,MAAM,EAAE,WAAW,OAAO,WAAW;CACrC,MAAM,QAAkB,CAAC;CACzB,MAAM,KAAK,sBAAsB,WAAW;CAC5C,MAAM,KAAK,IAAI;CACf,MAAM,KAAK,qCAAqC,UAAU,wBAAwB;CAClF,MAAM,KAAK,8EAA8E;CACzF,MAAM,KAAK,wDAAwD;CACnE,MAAM,KAAK,IAAI;CACf,MAAM,KAAK,6EAA6E;CACxF,MAAM,KAAK,gEAAgE;CAC3E,MAAM,KAAK,iCAAiC,UAAU,UAAU;CAChE,MAAM,KAAK,KAAK;CAChB,MAAM,KAAK,GAAG,MAAM,GAAG;CACvB,KAAK,MAAM,KAAK,QACd,IAAI,EAAE,UAAU,MACd,MAAM,KAAK,QAAQ,EAAE,KAAK,iDAAiD;MAE3E,MAAM,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,MAAM,EAAE;CAGzC,MAAM,KAAK,GAAG;CACd,OAAO,MAAM,KAAK,IAAI,IAAI;AAC5B;;AAGA,SAAS,OAAO,UAAkB,KAA4B;CAC5D,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EAC3B,MAAM,YAAY,KAAK,KAAK,GAAG;EAC/B,IAAI,WAAW,SAAS,GAAG,OAAO;EAClC,MAAM,KAAK,KAAK,IAAI;CACtB;CACA,OAAO;AACT;;;;;;;AAQA,SAAS,UAAU,KAAc,KAAa,QAA2C;CACvF,IAAI,OAAO,QAAQ,YAAY,QAAQ,MACrC,MAAM,IAAI,MAAM,yBAAyB,OAAO,qBAAqB;CAEvE,MAAM,OAAQ,IAAgC;CAC9C,IAAI,CAAC,MAAM,QAAQ,IAAI,GACrB,MAAM,IAAI,MAAM,yBAAyB,OAAO,KAAK,IAAI,mBAAmB;CAE9E,OAAO,KAAK,QAAQ,MAAoC,OAAO,MAAM,YAAY,MAAM,IAAI;AAC7F;AAEA,eAAe,aAAa,QAA8C;CACxE,MAAM,QAAQ,OAAO,MAAM,eAAe,KAAK,OAAO,QAAQ,IAAI,GAAG,eAAe;CACpF,MAAM,SAAS,SAAS,OAAO;CAiB/B,OAAO,EAAE,YAfU,UADE,QAAQ,KAAK,MAAM,aAAa,OAAO,MAAM,CAAC,IAAI,MAAM,UAAU,MAAM,GAC3D,cAAc,MAAM,CAAC,CAAC,SAAwB,MAAM;EACpF,IAAI,OAAO,EAAE,YAAY,UAAU,OAAO,CAAC;EAC3C,MAAM,QAAuB,EAAE,MAAM,EAAE,QAAQ;EAC/C,IAAI,OAAO,EAAE,YAAY,UAAU,MAAM,OAAO,EAAE;EAClD,MAAM,OAAO,EAAE;EACf,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM;GAC7C,MAAM,IAAI;GACV,MAAM,OAAO,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,EAAE;GAC3D,MAAM,SAAS,MAAM,QAAQ,EAAE,SAAS,IACpC,EAAE,SAAS,CAAC,QAAQ,MAAmB,OAAO,MAAM,QAAQ,IAC5D,KAAA;GACJ,MAAM,OAAO,SAAS;IAAE;IAAM;GAAO,IAAI,EAAE,KAAK;EAClD;EACA,OAAO,CAAC,KAAK;CACf,CACkB,EAAE;AACtB;AAEA,eAAe,YAAY,QAA6C;CACtE,MAAM,QACJ,OAAO,MAAM,KAAK,QAAQ,QAAQ,UAAU,qBAAqB,CAAC,KAClE,OAAO,QAAQ,IAAI,GAAG,KAAK,QAAQ,QAAQ,UAAU,qBAAqB,CAAC;CAC7E,MAAM,SAAS,SAAS,OAAO,SAAS,QAAQ,mBAAmB,qBAAqB;CAWxF,OAAO,EAAE,QATM,UADM,QAAQ,KAAK,MAAM,aAAa,OAAO,MAAM,CAAC,IAAI,MAAM,UAAU,MAAM,GAC/D,UAAU,MAAM,CAAC,CAAC,SAAuB,MAAM;EAC3E,IAAI,OAAO,EAAE,YAAY,UAAU,OAAO,CAAC;EAC3C,MAAM,QAAsB,EAAE,MAAM,EAAE,QAAQ;EAC9C,IAAI,OAAO,EAAE,aAAa,UAAU,MAAM,QAAQ,EAAE;EACpD,IAAI,OAAO,EAAE,uBAAuB,YAAY,EAAE,uBAAuB,MACvE,MAAM,kBAAkB,EAAE;EAE5B,OAAO,CAAC,KAAK;CACf,CACc,EAAE;AAClB;;;;;;;AAeA,eAAsB,MACpB,MACA,QACA,UAAwB,CAAC,GACV;CACf,MAAM,YAAY,KAAK,MAAM,MAAM,CAAC,EAAE,WAAW,IAAI,CAAC;CACtD,IAAI,CAAC,WAAW;EACd,QAAQ,MACN,qFACF;EACA,QAAQ,WAAW;EACnB;CACF;CAGA,MAAM,SAAQ,MADS,aAAa,MAAM,EAAA,CACnB,WAAW,MAAM,MAAM,EAAE,SAAS,SAAS;CAClE,IAAI,CAAC,OAAO;EACV,QAAQ,MAAM,cAAc,UAAU,6BAA6B;EACnE,QAAQ,WAAW;EACnB;CACF;CAEA,MAAM,YAAY,MAAM,MAAM,UAAU,CAAC;CACzC,IAAI,UAAU,WAAW,GAAG;EAC1B,QAAQ,MAAM,cAAc,UAAU,+BAA+B;EACrE,QAAQ,WAAW;EACnB;CACF;CAEA,IAAI,WAAW;CACf,IAAI,QAAQ,UAAU,QAAQ,OAAO,SAAS,GAAG;EAC/C,MAAM,UAAU,QAAQ,OAAO,QAAQ,MAAM,CAAC,UAAU,SAAS,CAAC,CAAC;EACnE,IAAI,QAAQ,SAAS,GAAG;GACtB,QAAQ,MACN,iCAAiC,UAAU,KAAK,QAAQ,KAAK,IAAI,EAAE,eACnD,UAAU,KAAK,IAAI,GACrC;GACA,QAAQ,WAAW;GACnB;EACF;EACA,WAAW,QAAQ;CACrB;CAEA,MAAM,UAAU,MAAM,YAAY,MAAM;CACxC,MAAM,UAAU,IAAI,IAClB,QAAQ,OAAO,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,IAAI,CAAU,CACnF;CACA,MAAM,SAAuB,SAAS,KAAK,UAAU;EAAE;EAAM,OAAO,QAAQ,IAAI,IAAI,KAAK;CAAK,EAAE;CAGhG,MAAM,MAAM,iBAAiB;EAAE;EAAW,OAD5B,QAAQ,SAAS,wBAAwB,UAAU;EAChB;CAAO,CAAC;CAEzD,IAAI,QAAQ,QAAQ;EAClB,QAAQ,IAAI,GAAG;EACf;CACF;CAEA,MAAM,MAAM,QAAQ,OAAO,KAAK,OAAO,UAAU,WAAW,UAAU,eAAe;CACrF,MAAM,MAAM,QAAQ,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAC7C,MAAM,UAAU,KAAK,GAAG;CACxB,QAAQ,IAAI,WAAW,OAAO,OAAO,iBAAiB,UAAU,MAAM,KAAK;CAC3E,QAAQ,IAAI,qDAAqD;CACjE,QAAQ,IAAI,eAAe,IAAI,QAAQ,OAAO,GAAG,EAAE,EAAE;CACrD,QAAQ,IAAI,8BAA8B,UAAU,UAAU;AAChE"}

package/dist/fs-C2lsyHs9.mjs

@@ -0,0 +1,40 @@
+import { dirname, join, resolve, sep } from "node:path";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+//#region src/utils/fs.ts
+/**
+* Throw unless `target` lands inside `root`.
+*
+* The last line of defense for registry-supplied paths. `parseItem` rejects an
+* unsafe `name`/`target` at the network boundary, but that only protects call
+* sites that go through it — this protects the write itself, so a future code
+* path that resolves a destination some other way still cannot escape the
+* directory it is supposed to write into.
+*/
+function assertInside(root, target) {
+	const base = resolve(root);
+	const full = resolve(target);
+	if (full !== base && !full.startsWith(base + sep)) throw new Error(`Refusing to write outside ${base}: ${full}`);
+	return full;
+}
+/** Resolve where a component file should be written. */
+function resolveOutputPath(outputDir, component, file, cwd = process.cwd()) {
+	const root = resolve(cwd, outputDir);
+	return assertInside(root, join(root, component, file));
+}
+/** Write a file, creating parent directories as needed. */
+async function writeFileSafe(path, content) {
+	await mkdir(dirname(path), { recursive: true });
+	await writeFile(path, content, "utf8");
+}
+/** Read a file, returning null if it does not exist. */
+async function readFileSafe(path) {
+	try {
+		return await readFile(path, "utf8");
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { writeFileSafe as i, readFileSafe as n, resolveOutputPath as r, assertInside as t };
+
+//# sourceMappingURL=fs-C2lsyHs9.mjs.map

package/dist/fs-C2lsyHs9.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-C2lsyHs9.mjs","names":[],"sources":["../src/utils/fs.ts"],"sourcesContent":["import { mkdir, readFile, writeFile } from 'node:fs/promises'\nimport { dirname, join, resolve, sep } from 'node:path'\n\n/**\n * Throw unless `target` lands inside `root`.\n *\n * The last line of defense for registry-supplied paths. `parseItem` rejects an\n * unsafe `name`/`target` at the network boundary, but that only protects call\n * sites that go through it — this protects the write itself, so a future code\n * path that resolves a destination some other way still cannot escape the\n * directory it is supposed to write into.\n */\nexport function assertInside(root: string, target: string): string {\n  const base = resolve(root)\n  const full = resolve(target)\n  if (full !== base && !full.startsWith(base + sep)) {\n    throw new Error(`Refusing to write outside ${base}: ${full}`)\n  }\n  return full\n}\n\n/** Resolve where a component file should be written. */\nexport function resolveOutputPath(\n  outputDir: string,\n  component: string,\n  file: string,\n  cwd: string = process.cwd(),\n): string {\n  const root = resolve(cwd, outputDir)\n  return assertInside(root, join(root, component, file))\n}\n\n/** Write a file, creating parent directories as needed. */\nexport async function writeFileSafe(path: string, content: string): Promise<void> {\n  await mkdir(dirname(path), { recursive: true })\n  await writeFile(path, content, 'utf8')\n}\n\n/** Read a file, returning null if it does not exist. */\nexport async function readFileSafe(path: string): Promise<string | null> {\n  try {\n    return await readFile(path, 'utf8')\n  } catch {\n    return null\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAYA,SAAgB,aAAa,MAAc,QAAwB;CACjE,MAAM,OAAO,QAAQ,IAAI;CACzB,MAAM,OAAO,QAAQ,MAAM;CAC3B,IAAI,SAAS,QAAQ,CAAC,KAAK,WAAW,OAAO,GAAG,GAC9C,MAAM,IAAI,MAAM,6BAA6B,KAAK,IAAI,MAAM;CAE9D,OAAO;AACT;;AAGA,SAAgB,kBACd,WACA,WACA,MACA,MAAc,QAAQ,IAAI,GAClB;CACR,MAAM,OAAO,QAAQ,KAAK,SAAS;CACnC,OAAO,aAAa,MAAM,KAAK,MAAM,WAAW,IAAI,CAAC;AACvD;;AAGA,eAAsB,cAAc,MAAc,SAAgC;CAChF,MAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC9C,MAAM,UAAU,MAAM,SAAS,MAAM;AACvC;;AAGA,eAAsB,aAAa,MAAsC;CACvE,IAAI;EACF,OAAO,MAAM,SAAS,MAAM,MAAM;CACpC,QAAQ;EACN,OAAO;CACT;AACF"}