comber 0.1.0

package/dist/sinks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sinks/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAwB,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAwB,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/dist/sinks/multi.js

@@ -0,0 +1,40 @@
+import { FileSink } from "./file.js";
+import { HttpSink } from "./http.js";
+/**
+ * Fan-out sink. Opt-in via env; an empty MultiSink is a no-op so env-unset runs stay
+ * byte-identical to local-only today. Each sink is error-swallowed individually —
+ * persistence NEVER breaks a run. All adapters are generic and dependency-light; no
+ * vendor/internal coupling lives in the baseline (a RADLAB overlay layers those on via
+ * its own Sink implementations).
+ *
+ * Env wiring:
+ *   COMBER_SINK_FILE   → FileSink JSONL path (one redacted run-summary record per line)
+ *   COMBER_SINK_DIR    → FileSink screenshot output directory (per-run subfolder)
+ *   COMBER_SINK_URL    → HttpSink webhook URL (POST redacted run record)
+ *   COMBER_SINK_TOKEN  → HttpSink Bearer token (header only; never logged, never in body)
+ */
+export class MultiSink {
+    sinks;
+    constructor(sinks) {
+        this.sinks = sinks;
+    }
+    static fromEnv(env = process.env) {
+        const sinks = [];
+        const file = env.COMBER_SINK_FILE?.trim();
+        const dir = env.COMBER_SINK_DIR?.trim();
+        if (file || dir) {
+            sinks.push(new FileSink({ filePath: file || undefined, screenshotDir: dir || undefined }));
+        }
+        const url = env.COMBER_SINK_URL?.trim();
+        if (url) {
+            sinks.push(new HttpSink({ url, token: env.COMBER_SINK_TOKEN?.trim() || undefined }));
+        }
+        return new MultiSink(sinks);
+    }
+    get active() {
+        return this.sinks.map((s) => s.name);
+    }
+    async recordRun(result, meta) {
+        await Promise.all(this.sinks.map((s) => s.recordRun(result, meta).catch((e) => console.error(`[sink:${s.name}] ${String(e).slice(0, 160)}`))));
+    }
+}

package/dist/sinks/multi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi.js","sourceRoot":"","sources":["../../src/sinks/multi.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,SAAS;IACA;IAApB,YAAoB,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAErC,MAAM,CAAC,OAAO,CAAC,MAAyB,OAAO,CAAC,GAAG;QACjD,MAAM,KAAK,GAAW,EAAE,CAAC;QAEzB,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,SAAS,EAAE,aAAa,EAAE,GAAG,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,EAAE,CAAC;YACR,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAmB,EAAE,IAAa;QAChD,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnB,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CACrG,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/sinks/paths.js

@@ -0,0 +1,32 @@
+import { basename, resolve, sep } from "node:path";
+/**
+ * Normalize an operator-configured sink path to an absolute path, rejecting empty or
+ * NUL-byte values. A configured sink target is operator-supplied (env), so this is a
+ * light sanity guard rather than a sandbox — the real traversal guard is
+ * `safeJoinWithin`, which gates every UNTRUSTED leaf name written under a base dir.
+ */
+export function resolveConfiguredPath(p) {
+    if (!p || p.includes("\0"))
+        throw new Error(`invalid sink path: ${JSON.stringify(p)}`);
+    return resolve(p);
+}
+/**
+ * Join an untrusted leaf name under a trusted base directory, guaranteeing the result
+ * cannot escape the base via path traversal. Only the basename is used (any directory
+ * components / "../" are stripped) and the resolved path is asserted to stay within
+ * `baseDir`. Used when copying screenshots whose source filenames the sink does not own.
+ */
+export function safeJoinWithin(baseDir, untrustedLeaf) {
+    if (untrustedLeaf.includes("\0"))
+        throw new Error("unsafe filename: NUL byte");
+    const base = resolve(baseDir);
+    const leaf = basename(untrustedLeaf); // collapses "../foo", "/etc/x", "a/b" → a single leaf
+    if (!leaf || leaf === "." || leaf === "..")
+        throw new Error(`unsafe filename: ${JSON.stringify(untrustedLeaf)}`);
+    const full = resolve(base, leaf);
+    const prefix = base.endsWith(sep) ? base : base + sep;
+    if (full !== base && !full.startsWith(prefix)) {
+        throw new Error(`path escapes base dir: ${JSON.stringify(untrustedLeaf)}`);
+    }
+    return full;
+}

package/dist/sinks/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/sinks/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAAS;IAC7C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,aAAqB;IACnE,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,sDAAsD;IAC5F,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC;IACtD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/sinks/record.js

@@ -0,0 +1,58 @@
+import { redactResult } from "../core/redact.js";
+/**
+ * Build the canonical REDACTED run-summary record.
+ *
+ * CRITICAL: the record is derived from `redactResult(result)`, so no secret from the
+ * checked target — finding urls/messages, the start URL, link-audit URLs, signed-URL
+ * params, OAuth fragments — can reach any sink (file line OR HTTP body). Only the
+ * caller-supplied `meta` (runId/app/mode/gitSha), which originates locally rather than
+ * from the crawled target, is recorded as-is.
+ */
+export function buildRunRecord(result, meta) {
+    const r = redactResult(result);
+    const failCount = r.findings.filter((f) => f.severity === "fail").length;
+    const warnCount = r.findings.filter((f) => f.severity === "warn").length;
+    const infoCount = r.findings.filter((f) => f.severity === "info").length;
+    return {
+        runId: meta.runId,
+        app: meta.app,
+        mode: meta.mode,
+        gitSha: meta.gitSha,
+        recordedAt: new Date().toISOString(),
+        target: r.startUrl,
+        durationMs: r.durationMs,
+        states: r.visitedStates,
+        actions: r.actionsTaken,
+        failCount,
+        warnCount,
+        infoCount,
+        tokenIn: r.tokenSpend.input,
+        tokenOut: r.tokenSpend.output,
+        cappedBy: r.cappedBy,
+        coverage: r.coverage
+            ? {
+                elementCoveragePct: r.coverage.elementCoveragePct,
+                statesVisited: r.coverage.statesVisited,
+                elementsDiscovered: r.coverage.elementsDiscovered,
+                elementsExercised: r.coverage.elementsExercised,
+                elementsSkipped: r.coverage.elementsSkipped,
+                frameBlindSpots: r.coverage.frameBlindSpots,
+                exhaustiveClaimAllowed: r.coverage.exhaustiveClaimAllowed,
+                blindSpotSummary: r.coverage.blindSpotSummary,
+                cappedNotExhaustive: r.coverage.cappedNotExhaustive,
+                extra: r.coverage.extra,
+            }
+            : undefined,
+        baseline: r.baseline ? r.baseline.summary : undefined,
+        findings: r.findings.map((f) => ({
+            signature: f.signature,
+            severity: f.severity,
+            kind: f.kind,
+            url: f.url,
+            message: f.message,
+            count: f.count,
+            verdictReal: f.verdict?.real,
+            verdictReason: f.verdict?.reason,
+        })),
+    };
+}

package/dist/sinks/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/sinks/record.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAoDjD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmB,EAAE,IAAa;IAC/D,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACzE,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM,EAAE,CAAC,CAAC,QAAQ;QAClB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,aAAa;QACvB,OAAO,EAAE,CAAC,CAAC,YAAY;QACvB,SAAS;QACT,SAAS;QACT,SAAS;QACT,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK;QAC3B,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;QAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YAClB,CAAC,CAAC;gBACE,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB;gBACjD,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa;gBACvC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB;gBACjD,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAiB;gBAC/C,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe;gBAC3C,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe;gBAC3C,sBAAsB,EAAE,CAAC,CAAC,QAAQ,CAAC,sBAAsB;gBACzD,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,gBAAgB;gBAC7C,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB;gBACnD,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;aACxB;YACH,CAAC,CAAC,SAAS;QACb,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACrD,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI;YAC5B,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM;SACjC,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/sinks/types.js

@@ -0,0 +1 @@
+export {};

package/dist/sinks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sinks/types.ts"],"names":[],"mappings":""}

package/dist/web/breakage.js

@@ -0,0 +1,210 @@
+import { createHash } from "node:crypto";
+/**
+ * Console / framework regression canaries. A match turns the crawl into a true
+ * regression detector, not just a "did the page render" check. A curated Next.js
+ * canary set plus general fatal-error patterns.
+ */
+export const CONSOLE_CANARIES = [
+    /params should be awaited/i,
+    /cookies\(\) should be awaited/i,
+    /sync access to (params|cookies|headers)/i,
+    /hydration|did not match|text content does not match/i,
+    /NEXT_PUBLIC\w*.*(undefined|is not defined)/i,
+    /Cannot read propert(y|ies) of (undefined|null)/i,
+    /is not a function/i,
+    /Unexpected (token|end of)/i,
+];
+/** Collapse volatile substrings so near-identical errors share a signature. */
+function normalize(message) {
+    return message
+        .replace(/0x[0-9a-f]+/gi, "0xN")
+        .replace(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/gi, "UUID")
+        .replace(/\b\d+\b/g, "N")
+        .replace(/\s+/g, " ")
+        .trim()
+        .slice(0, 280);
+}
+function pathOf(url) {
+    try {
+        return new URL(url).pathname;
+    }
+    catch {
+        return url;
+    }
+}
+export function signatureOf(kind, message, url) {
+    return createHash("sha1")
+        .update(`${kind}|${pathOf(url)}|${normalize(message)}`)
+        .digest("hex")
+        .slice(0, 12);
+}
+function mk(kind, severity, message, url) {
+    return { kind, severity, message: message.slice(0, 500), url, signature: signatureOf(kind, message, url) };
+}
+export function isIconImageUrl(src) {
+    const fallbackPath = src.split(/[?#]/)[0] ?? "";
+    try {
+        return new URL(src, "https://comber.local").pathname.toLowerCase().endsWith(".ico");
+    }
+    catch {
+        return fallbackPath.toLowerCase().endsWith(".ico");
+    }
+}
+/**
+ * Wire deterministic, near-zero-false-positive breakage listeners onto a page.
+ * Pushed signals are the raw stream; dedupe + triage happen downstream.
+ */
+export function attachBreakageListeners(page, push) {
+    page.on("console", (msg) => {
+        const text = msg.text();
+        if (msg.type() === "error") {
+            push(mk("console-error", "warn", text, page.url()));
+        }
+        for (const canary of CONSOLE_CANARIES) {
+            if (canary.test(text)) {
+                push(mk("regression-canary", "fail", text, page.url()));
+                break;
+            }
+        }
+    });
+    page.on("pageerror", (err) => {
+        push(mk("uncaught-exception", "fail", `${err.name}: ${err.message}`, page.url()));
+    });
+    page.on("requestfailed", (req) => {
+        const failure = req.failure()?.errorText ?? "request failed";
+        // ERR_ABORTED is navigation-caused, not breakage — the crawler aborts in-flight
+        // requests every time it navigates between states. Filtering it kills the single
+        // biggest false-positive source an exhaustive crawl creates.
+        if (/ERR_ABORTED/i.test(failure))
+            return;
+        if (["document", "script", "stylesheet", "fetch", "xhr"].includes(req.resourceType())) {
+            push(mk("request-failed", "warn", `${req.resourceType()} ${req.url()} — ${failure}`, page.url()));
+        }
+    });
+    page.on("response", (res) => {
+        const status = res.status();
+        const url = res.url();
+        if (status >= 500) {
+            push(mk("http-5xx", "fail", `${status} ${url}`, page.url()));
+        }
+        else if (status >= 400 && status !== 401 && status !== 429 && res.request().resourceType() === "document") {
+            // 4xx on a top-level navigation = a broken page (404 etc.). 401/429 excluded
+            // (auth walls / rate limits are not breakage). Sub-resource 4xx is too noisy.
+            push(mk("http-4xx-nav", status === 404 ? "fail" : "warn", `${status} navigation ${url}`, page.url()));
+        }
+        // Mixed content: an http:// subresource on an https:// page.
+        if (/^http:\/\//i.test(url) && /^https:\/\//i.test(page.url())) {
+            push(mk("mixed-content", "warn", `insecure resource ${url} on https page`, page.url()));
+        }
+    });
+}
+/**
+ * Init scripts that run before page JS: route unhandledrejection through console.error
+ * (so the existing console listener catches it) and stamp a flag we can read in auditDom.
+ */
+export async function attachInitScripts(page) {
+    await page
+        .addInitScript(`
+      window.addEventListener("unhandledrejection", (e) => {
+        try { console.error("[unhandled-rejection] " + (e.reason && e.reason.message ? e.reason.message : String(e.reason))); } catch (x) {}
+      });
+    `)
+        .catch(() => { });
+}
+/**
+ * One string-body DOM sweep for snapshot-time defects: broken images, empty/void links,
+ * missing alt, unlabeled fields, duplicate ids, tiny tap targets, i18n missing-keys, and
+ * error-boundary screens. Each kind capped to avoid count explosions. Never throws.
+ */
+export async function auditDom(page) {
+    const js = `(() => {
+    const CAP = 20; const out = [];
+    const add = (kind, sev, msg) => { if (out.filter((o) => o.kind === kind).length < CAP) out.push({ kind, sev, msg: String(msg).slice(0, 180) }); };
+    const vis = (el) => { try { const r = el.getBoundingClientRect(); const s = getComputedStyle(el); return r.width > 0 && r.height > 0 && s.display !== "none" && s.visibility !== "hidden"; } catch (e) { return false; } };
+    // broken images
+    document.querySelectorAll("img").forEach((img) => {
+      const src = img.currentSrc || img.src || img.getAttribute("src") || "";
+      const cleanSrc = String(src).split(/[?#]/)[0].toLowerCase();
+      if (img.complete && img.naturalWidth === 0 && src && !cleanSrc.endsWith(".ico")) add("broken-image", "fail", "broken <img> " + src);
+      if (vis(img) && !img.hasAttribute("alt")) add("missing-alt", "warn", "<img> without alt: " + (img.src || "").slice(0, 80));
+    });
+    // empty / void links
+    document.querySelectorAll("a[href]").forEach((a) => {
+      const h = a.getAttribute("href");
+      if (h === "#" || h === "" || /^javascript:\\s*(void\\(0\\))?;?\\s*$/i.test(h)) { if (vis(a)) add("empty-link", "warn", 'link "' + (a.innerText || "").trim().slice(0, 40) + '" has placeholder href ' + h); }
+    });
+    // unlabeled form fields
+    document.querySelectorAll("input,select,textarea").forEach((el) => {
+      const t = (el.type || "").toLowerCase();
+      if (["hidden","submit","button","reset","image"].includes(t) || !vis(el)) return;
+      const labelled = (el.id && document.querySelector("label[for='" + (window.CSS && CSS.escape ? CSS.escape(el.id) : el.id) + "']")) || el.getAttribute("aria-label") || el.getAttribute("aria-labelledby") || el.getAttribute("placeholder") || el.getAttribute("title");
+      if (!labelled) add("unlabeled-field", "warn", "form field without a label: " + (el.name || el.tagName).slice(0, 40));
+    });
+    // duplicate ids
+    const seen = {}; document.querySelectorAll("[id]").forEach((el) => { const id = el.id; if (!id) return; seen[id] = (seen[id] || 0) + 1; });
+    Object.keys(seen).forEach((id) => { if (seen[id] > 1) add("duplicate-id", "warn", 'id "' + id + '" used ' + seen[id] + " times"); });
+    // tiny tap targets (interactive < 24px)
+    document.querySelectorAll("button, [role=button], [role=checkbox], [role=switch], input[type=checkbox], input[type=radio]").forEach((el) => {
+      if (!vis(el)) return; const r = el.getBoundingClientRect();
+      // icon-like targets small in BOTH dimensions — wide-but-short text links are fine.
+      if (r.width > 0 && r.width < 24 && r.height < 24) add("tiny-target", "warn", "tap target " + Math.round(r.width) + "x" + Math.round(r.height) + 'px: "' + (el.innerText || el.getAttribute("aria-label") || "").trim().slice(0, 30) + '"');
+    });
+    // i18n missing keys + error boundaries in visible text
+    const bodyText = (document.body && document.body.innerText) || "";
+    const i18n = bodyText.match(/\\[MISSING[_ ]?KEY[^\\]]*\\]|\\{\\{[\\w.]+\\}\\}|missing translation/i);
+    if (i18n) add("i18n-missing-key", "fail", "untranslated key visible: " + i18n[0]);
+    if (/(something went wrong|application error|client-side exception|this page (could|couldn't) load|an unexpected error)/i.test(bodyText)) add("error-boundary", "fail", "error-boundary copy visible on page");
+    return out;
+  })()`;
+    try {
+        const rows = (await page.evaluate(js));
+        return rows.map((r) => mk(r.kind, r.sev, r.msg, page.url()));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * After a navigation/action, detect a session bounce (redirect to a login wall / 401 page)
+ * so the crawl HALTS instead of crawling 50 login screens. Returns a signal or null.
+ */
+export async function sessionLivenessProbe(page) {
+    try {
+        const url = page.url();
+        if (/\/(login|signin|sign-in|auth)(\b|\/|\?)/i.test(url)) {
+            // Only when it looks like a bounce: a login form is present and little else.
+            const looksLikeWall = (await page.evaluate(`(() => { const hasPw = !!document.querySelector('input[type=password]'); const forms = document.querySelectorAll('form').length; return hasPw && forms <= 2; })()`));
+            if (looksLikeWall) {
+                return mk("session-expired", "warn", `bounced to a login wall at ${url} — session may be missing/expired`, url);
+            }
+        }
+    }
+    catch {
+        /* ignore */
+    }
+    return null;
+}
+/**
+ * Run axe-core against the live page for accessibility-critical violations.
+ * Judged tier (not auto-fail). Returns signals; never throws.
+ */
+export async function runAxe(page) {
+    try {
+        // axe-core ships a browser bundle; inject it then evaluate.
+        const axeSource = (await import("axe-core")).source;
+        if (!axeSource)
+            return [];
+        await page.addScriptTag({ content: axeSource });
+        // String body (not a closure) to avoid tsx/esbuild __name injection in the browser.
+        const violations = (await page.evaluate(`(async () => {
+        const result = await window.axe.run(document, { runOnly: ["wcag2a", "wcag2aa"] });
+        return result.violations
+          .filter((v) => v.impact === "critical")
+          .map((v) => ({ id: v.id, description: v.description }));
+      })()`));
+        return violations.map((v) => mk("a11y-critical", "warn", `${v.id}: ${v.description}`, page.url()));
+    }
+    catch {
+        return [];
+    }
+}

package/dist/web/breakage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"breakage.js","sourceRoot":"","sources":["../../src/web/breakage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAa;IACxC,2BAA2B;IAC3B,gCAAgC;IAChC,0CAA0C;IAC1C,sDAAsD;IACtD,6CAA6C;IAC7C,iDAAiD;IACjD,oBAAoB;IACpB,4BAA4B;CAC7B,CAAC;AAEF,+EAA+E;AAC/E,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,OAAO;SACX,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC;SAC/B,OAAO,CAAC,gEAAgE,EAAE,MAAM,CAAC;SACjF,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe,EAAE,GAAW;IACpE,OAAO,UAAU,CAAC,MAAM,CAAC;SACtB,MAAM,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;SACtD,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,EAAE,CAAC,IAAY,EAAE,QAAwB,EAAE,OAAe,EAAE,GAAW;IAC9E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAU,EAAE,IAAiC;IACnF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,EAAE,CAAC,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE;QAC3B,IAAI,CAAC,EAAE,CAAC,oBAAoB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,IAAI,gBAAgB,CAAC;QAC7D,gFAAgF;QAChF,iFAAiF;QACjF,6DAA6D;QAC7D,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO;QACzC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;QACtB,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,KAAK,UAAU,EAAE,CAAC;YAC5G,6EAA6E;YAC7E,8EAA8E;YAC9E,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,eAAe,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC;QACD,6DAA6D;QAC7D,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,qBAAqB,GAAG,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,MAAM,IAAI;SACP,aAAa,CAAC;;;;KAId,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAU;IACvC,MAAM,EAAE,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCN,CAAC;IACN,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAyD,CAAC;QAC/F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAU;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzD,6EAA6E;YAC7E,MAAM,aAAa,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CACxC,mKAAmK,CACpK,CAAY,CAAC;YACd,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,8BAA8B,GAAG,mCAAmC,EAAE,GAAG,CAAC,CAAC;YAClH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAU;IACrC,IAAI,CAAC;QACH,4DAA4D;QAC5D,MAAM,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAA4B,CAAC;QAC1E,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,oFAAoF;QACpF,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CACrC;;;;;WAKK,CACN,CAA0C,CAAC;QAC5C,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/web/controls.js

@@ -0,0 +1,102 @@
+import { signatureOf } from "./breakage.js";
+import { restoreFingerprint } from "./fingerprint.js";
+const CONTROL_KINDS = new Set([
+    "toggle",
+    "tab",
+    "accordion",
+    "disclosure",
+    "dialog-trigger",
+    "select",
+    "combobox",
+    "slider",
+    "menuitem",
+]);
+export function isControl(kind) {
+    return CONTROL_KINDS.has(kind);
+}
+function sig(kind, severity, message, el, url) {
+    return { kind, severity, message: message.slice(0, 220), url, signature: signatureOf(kind, el.domPath, url) };
+}
+/** Re-read an element's current state by stable domPath after an interaction. */
+async function reread(driver, el) {
+    const s = await driver.webSnapshot().catch(() => null);
+    if (!s)
+        return undefined;
+    return s.interactive.find((e) => e.domPath === el.domPath && (e.framePath?.[0] ?? "") === (el.framePath?.[0] ?? ""));
+}
+/**
+ * Exercise a stateful control with the assert-changed contract: act → assert a concrete
+ * aria/value fact changed → (self-restore where cheap). A control whose click changes
+ * nothing observable is a dead-* finding. Modals are opened, counted, and Escape-closed
+ * (a dialog that won't close is dialog-stuck = fail / focus-trap).
+ */
+export async function exerciseControl(driver, el) {
+    const url = driver.currentUrl();
+    switch (el.kind) {
+        case "toggle": {
+            const before = el.checkedState ?? (el.ariaPressed === undefined ? undefined : String(el.ariaPressed));
+            await driver.act(el);
+            const after = await reread(driver, el);
+            const now = after?.checkedState ?? (after?.ariaPressed === undefined ? undefined : String(after.ariaPressed));
+            const changed = after !== undefined && now !== before;
+            if (changed)
+                await driver.act(el); // self-restore (toggle back)
+            return { changed, modalOpened: false, signals: changed ? [] : [sig("dead-toggle", "warn", `toggle "${el.name}" click did not flip checked state`, el, url)] };
+        }
+        case "tab": {
+            await driver.act(el);
+            const after = await reread(driver, el);
+            const changed = after?.ariaSelected === "true" || (after !== undefined && after.ariaSelected !== el.ariaSelected);
+            return { changed, modalOpened: false, signals: changed ? [] : [sig("dead-tab", "warn", `tab "${el.name}" did not become selected`, el, url)] };
+        }
+        case "accordion":
+        case "disclosure": {
+            const before = el.ariaExpanded;
+            await driver.act(el);
+            const after = await reread(driver, el);
+            const changed = after !== undefined && after.ariaExpanded !== before;
+            if (changed && after?.ariaExpanded)
+                await driver.act(el); // collapse back
+            return { changed, modalOpened: false, signals: changed ? [] : [sig("dead-disclosure", "warn", `disclosure "${el.name}" aria-expanded did not change`, el, url)] };
+        }
+        case "dialog-trigger": {
+            const fp0 = restoreFingerprint(await driver.webSnapshot());
+            await driver.act(el);
+            const fp1 = restoreFingerprint(await driver.webSnapshot());
+            if (fp1 === fp0) {
+                return { changed: false, modalOpened: false, signals: [sig("dead-dialog-trigger", "warn", `dialog trigger "${el.name}" opened nothing`, el, url)] };
+            }
+            await driver.pressKey("Escape");
+            const fp2 = restoreFingerprint(await driver.webSnapshot());
+            const closed = fp2 === fp0;
+            return {
+                changed: true,
+                modalOpened: true,
+                signals: closed ? [] : [sig("dialog-stuck", "fail", `dialog from "${el.name}" did not close on Escape (focus-trap?)`, el, url)],
+            };
+        }
+        case "select":
+        case "combobox": {
+            if (el.kind === "select" && (el.optionCount ?? 0) === 0) {
+                return { changed: false, modalOpened: false, signals: [sig("empty-listbox", "warn", `select "${el.name}" has no options`, el, url)] };
+            }
+            const before = el.valueNow;
+            await driver.selectOption(el);
+            const after = await reread(driver, el);
+            const changed = after !== undefined && after.valueNow !== before;
+            return { changed, modalOpened: false, signals: changed ? [] : [sig("dead-select", "warn", `select/combobox "${el.name}" value did not change`, el, url)] };
+        }
+        case "slider": {
+            const before = el.valueNow;
+            await driver.nudge(el);
+            const after = await reread(driver, el);
+            const changed = after !== undefined && after.valueNow !== before;
+            return { changed, modalOpened: false, signals: changed ? [] : [sig("dead-slider", "warn", `slider "${el.name}" value did not change on ArrowRight`, el, url)] };
+        }
+        case "menuitem":
+        default: {
+            await driver.act(el);
+            return { changed: true, modalOpened: false, signals: [] };
+        }
+    }
+}

package/dist/web/controls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controls.js","sourceRoot":"","sources":["../../src/web/controls.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAYtD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS;IACpC,QAAQ;IACR,KAAK;IACL,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAQD,SAAS,GAAG,CAAC,IAAY,EAAE,QAAwB,EAAE,OAAe,EAAE,EAAiB,EAAE,GAAW;IAClG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;AAChH,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,MAAM,CAAC,MAAsB,EAAE,EAAiB;IAC7D,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,CAAC,CAAC,WAAW,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAC1F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAsB,EAAE,EAAiB;IAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YACtG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,KAAK,EAAE,YAAY,IAAI,CAAC,KAAK,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YAC9G,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,CAAC;YACtD,IAAI,OAAO;gBAAE,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,6BAA6B;YAChE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,oCAAoC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAChK,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,KAAK,EAAE,YAAY,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;YAClH,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,2BAA2B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACjJ,CAAC;QAED,KAAK,WAAW,CAAC;QACjB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC;YAC/B,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC;YACrE,IAAI,OAAO,IAAI,KAAK,EAAE,YAAY;gBAAE,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB;YAC1E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,IAAI,gCAAgC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACpK,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3D,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3D,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,qBAAqB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,IAAI,kBAAkB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACtJ,CAAC;YACD,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,IAAI,yCAAyC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;aAChI,CAAC;QACJ,CAAC;QAED,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,kBAAkB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACxI,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC;YAC3B,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,IAAI,wBAAwB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7J,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC;YAC3B,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,sCAAsC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAClK,CAAC;QAED,KAAK,UAAU,CAAC;QAChB,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;AACH,CAAC"}