mewkit 1.14.1 → 1.16.0

package/NOTICE

@@ -0,0 +1,24 @@
+MeowKit (mewkit)
+Copyright (c) 2026 MeowKit Contributors
+
+This product is licensed under the MIT License (see LICENSE) and includes
+software ported from third-party sources under their own licenses:
+
+------------------------------------------------------------------------
+agent-flow — https://github.com/patoles/agent-flow (commit 59ccf4e)
+Copyright the agent-flow authors
+Licensed under the Apache License, Version 2.0.
+
+Portions of the loopback HTTP server lifecycle, the static-file handler
+(including its path-traversal guard), the cross-platform browser launcher,
+and the token-estimation heuristic were ported from agent-flow. The affected
+files carry an attribution header referencing this NOTICE:
+
+  - src/local-web/local-server.ts
+  - src/local-web/static-handler.ts
+  - src/local-web/open-browser.ts
+  - src/token-estimator/index.ts
+
+A copy of the Apache License, Version 2.0 is available at:
+  https://www.apache.org/licenses/LICENSE-2.0
+------------------------------------------------------------------------

package/README.md

@@ -25,7 +25,8 @@ npx mewkit <command>      # Runtime commands
 | `meowkit status`    | Print version, channel, and config                                |
 | `meowkit task new`  | Create structured task file from template                         |
 | `meowkit task list` | List active tasks with status                                     |
-| `meowkit orchviz`   | Live web visualizer for the active Claude Code session            |
+| `meowkit capabilities` | Resolve installed skills/commands/tools for an intent (`list`, `explain`, `resolve`, `projections`) |
+| `meowkit visual-plan` | Structured visual plan: validate/approve/edit/view + feedback loop |
 | `meowkit pack`      | `list` / `add <pack>` / `remove <pack>` — manage installed domains |
 | `meowkit migrate`   | Export the `.claude/` setup to other coding agents (Codex, Cursor, …) |
 
@@ -59,6 +60,12 @@ What migrates where for Codex:
 | `.claude/hooks/*.cjs`       | `.codex/hooks/` + `hooks.json` (version-gated events) |
 | `.mcp.json` (opt-in)        | `config.toml [mcp_servers]` (`--include-mcp`)       |
 
+For Codex, migration also writes a bounded capability-resolution instruction to
+`AGENTS.md` and a data-only `.codex/capabilities.json` snapshot. This lets an
+agent run `npx mewkit capabilities resolve --intent "..." --provider codex`
+even when the original `.claude/` directory is no longer present. The snapshot
+is resolver data; it is not injected into model context.
+
 Markdown references are rewritten with a fence-aware classifier: inline
 references point at the new locations, runnable fenced commands are only
 rewritten when the referenced asset migrates in the same run (otherwise they
@@ -136,80 +143,39 @@ npx mewkit memory --show        # Display lessons learned
 npx mewkit memory --clear       # Reset memory
 ```
 
-## Visualizer (`meowkit orchviz`)
-
-Live web visualizer for the active Claude Code session. Tails the JSONL
-transcript at `~/.claude/projects/<encoded-cwd>/<session>.jsonl`, parses it
-into structured `AgentEvent`s, and serves them at `http://127.0.0.1:<port>/`
-as a Canvas2D + d3-force interactive graph plus a live transcript panel and
-meowkit-specific overlays (Gate state, model tier, today's tokens, phase).
-
-```bash
-# Default: random port, auto-open browser
-npx mewkit orchviz
-
-# Custom flags
-npx mewkit orchviz --port 3001       # fixed port (0 = random)
-npx mewkit orchviz --no-open         # don't auto-launch browser
-npx mewkit orchviz --session <uuid>  # pin to a single session id
-npx mewkit orchviz --workspace .     # override watched workspace (default: cwd)
-npx mewkit orchviz --verbose         # print sanitized AgentEvents to stderr
-npx mewkit orchviz --log             # persist to .claude/logs/orchviz-<sid>.md
-npx mewkit orchviz --log /tmp/run.md # custom path (must end .md)
-```
-
-**Security:** server binds 127.0.0.1 only; Host-header guarded against DNS
-rebinding; SSE frames sanitized (ANSI strip + strict-prefix secret scrub on
-`sk-…`, `ghp_…`, `AKIA…`, PEM blocks); path traversal blocked.
-
-**Limitations (v1):** simplified canvas renderer (no bloom / detail panels /
-multi-session tabs); v1.1 ports the full agent-flow visualizer. Ported (in
-part) from [`patoles/agent-flow`](https://github.com/patoles/agent-flow)
-under the Apache-2.0 license — see `NOTICE`.
-
-### orchviz API Endpoints (v1.2)
-
-The orchviz server exposes these HTTP endpoints on `http://127.0.0.1:<port>`:
-
-**GET /api/plans** — list non-archived plans sorted by mtime (newest first):
-```bash
-curl http://127.0.0.1:3001/api/plans
-# { "plans": [{ "slug": "260501-my-plan", "title": "...", "status": "draft", ... }] }
-```
-
-**GET /api/plan?slug=\<slug\>** — full plan state with per-phase ETags:
-```bash
-curl "http://127.0.0.1:3001/api/plan?slug=260501-my-plan"
-# { "plan": { ... }, "phaseEtags": { "1": "<hex64>", "2": "<hex64>" }, "readonly": true }
-# Omit ?slug= to get the most-recently-modified plan.
-```
+## Visual Plan (`meowkit visual-plan`)
 
-**Read-only by default.** The visualizer is a viewer, not an editor — graph,
-plan tree, and todos all render read-only. The hamburger drawer browses the
-plan tree (plan → phase → todo) without exposing edit affordances. To opt
-into write mode (legacy todo-toggle endpoint), launch with
-`MEOWKIT_ORCHVIZ_WRITABLE=1`. The legacy `MEOWKIT_ORCHVIZ_READONLY=0` flag
-also opts in for backwards compatibility; `MEOWKIT_ORCHVIZ_READONLY=1`
-forces read-only as a defensive lock.
+Structured visual review for UI-bearing plans. A plan's `visual-plan/plan.json`
+(schema `visual-plan/v1`) is a coverage ledger + canvas (lanes, surface-locked
+artboards, semantic-HTML wireframes, connectors, annotations). The CLI validates
+and gates it; a transient 127.0.0.1 React studio renders and edits it.
 
-**POST /api/plan/todo** — toggle a todo checkbox (write mode only):
 ```bash
-# Default (no env): returns 405 { "error": "readonly" }
-MEOWKIT_ORCHVIZ_WRITABLE=1 npx mewkit orchviz   # opt in to write mode
-
-curl -X POST http://127.0.0.1:3001/api/plan/todo \
-  -H "Content-Type: application/json" \
-  -H "Origin: http://127.0.0.1:3001" \
-  -d '{"slug":"260501-my-plan","phase":1,"todoIdx":0,"checked":true,"etag":"<hex64>"}'
-# 200: { "ok": true, "changed": true, "etag": "<new-hex64>", "archived": false }
-# 409: { "error": "stale", "currentEtag": "<latest-hex64>" }  → re-fetch and retry
-# 403: Origin header missing or not in allowlist
-# 405: server is in read-only mode (the default)
+# Deterministic contract commands
+npx mewkit visual-plan validate <plan-dir> [--json]     # schema + coverage + refs + safe-HTML + hashes
+npx mewkit visual-plan status <plan-dir> [--json]       # coverage summary + review status
+npx mewkit visual-plan approve <plan-dir> --revision <n> # single writer of review.status (Gate 1)
+npx mewkit visual-plan rehash <plan-dir>                # refresh source hashes (clears approval)
+npx mewkit visual-plan export <plan-dir> --format html  # self-contained plan.html from the artifact
+
+# Transient studio (127.0.0.1, exits with the process)
+npx mewkit visual-plan view <plan-dir> [--no-open] [--port N]   # read-only
+npx mewkit visual-plan edit <plan-dir> [--force]               # editable (single-editor lock)
+
+# Feedback loop
+npx mewkit visual-plan prepare-feedback <plan-dir> --ops <f.json>          # freeze an immutable batch
+npx mewkit visual-plan apply-feedback <plan-dir> --batch <id> --check      # pre-apply stale gate
+npx mewkit visual-plan apply-feedback <plan-dir> --batch <id> --receipt <f> # record per-op outcomes
+npx mewkit visual-plan patch <plan-dir> --op <op.json>                     # apply one typed visual op
 ```
 
-**Origin requirement:** POST requests must include `Origin: http://127.0.0.1:<port>`
-or `Origin: http://localhost:<port>`. This prevents cross-origin writes from
-browser tabs served by other origins.
+**Security:** the studio server binds 127.0.0.1 only, Host-header guarded against
+DNS rebinding, path-traversal blocked, with a strict CSP (`script-src 'self'`).
+Wireframe HTML is DOMPurify-sanitized at both save and render time via one shared
+allowlist. Writes use optimistic concurrency (`PATCH` requires `If-Match`; 409 on
+stale). These loopback primitives live in `src/local-web/`, ported in part from
+[`patoles/agent-flow`](https://github.com/patoles/agent-flow) under Apache-2.0 —
+see `NOTICE`.
 
 ## Related
 

package/dist/commands/capabilities.d.ts

@@ -0,0 +1,13 @@
+import type { AvailabilityProbes } from "../core/availability.js";
+interface CapabilitiesOptions {
+    subcommand?: string;
+    target?: string;
+    json?: boolean;
+    intent?: string;
+    provider?: string;
+    write?: boolean;
+}
+export declare function capabilities(args?: CapabilitiesOptions): Promise<void>;
+export declare function hostProbes(projectRoot: string): AvailabilityProbes;
+export {};
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/commands/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/commands/capabilities.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AASlE,UAAU,mBAAmB;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,YAAY,CAAC,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiFhF;AAoDD,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,CA0ClE"}

package/dist/commands/capabilities.js

@@ -0,0 +1,230 @@
+// `mewkit capabilities list|explain` — read-only inspection of the model-agnostic
+// capability manifest. The manifest is on-disk CLI data; it is NEVER injected into a
+// model session and does not constitute agent discovery (that is Phase 3's projection).
+import fs from "node:fs";
+import path from "node:path";
+import pc from "picocolors";
+import { validateCapabilities } from "../core/validate-capabilities.js";
+import { resolveWithHost } from "../core/resolve-capabilities.js";
+import { renderCapabilityView } from "../core/generate-capability-view.js";
+import { renderBootstrap, BOOTSTRAP_FILENAME } from "../core/bootstrap.js";
+import { PROVIDER_PROJECTIONS, isProjectedProvider } from "../core/provider-projection.js";
+import { findCapabilitySource } from "../core/capability-snapshot.js";
+import { commandExists } from "./setup.js";
+function findClaudeDir() {
+    const candidate = path.join(process.cwd(), ".claude");
+    return fs.existsSync(candidate) && fs.statSync(candidate).isDirectory() ? candidate : null;
+}
+export async function capabilities(args = {}) {
+    const sub = args.subcommand ?? "list";
+    // `projections` reports how the capability surface reaches each provider — static.
+    if (sub === "projections") {
+        projections(args.json ?? false);
+        return;
+    }
+    // `bootstrap` is a static trusted constant — no `.claude/` scan required.
+    if (sub === "bootstrap") {
+        const provider = args.provider ?? "claude-code";
+        if (!isProjectedProvider(provider)) {
+            console.error(pc.red(`No bootstrap projection for provider "${provider}" (report-only). Projected: ${Object.keys(PROVIDER_PROJECTIONS).join(", ")}.`));
+            process.exit(1);
+        }
+        const text = renderBootstrap(provider);
+        if (args.write) {
+            // Regenerate the committed file the SessionStart hook emits. Requires .claude/.
+            const dir = findClaudeDir();
+            if (!dir) {
+                console.error(pc.red("Could not find .claude/ directory to write the bootstrap file."));
+                process.exit(1);
+            }
+            const dest = path.join(dir, BOOTSTRAP_FILENAME);
+            fs.writeFileSync(dest, text + "\n", "utf-8");
+            console.log(pc.green(`Wrote ${path.relative(process.cwd(), dest)}`));
+            return;
+        }
+        console.log(text);
+        return;
+    }
+    const source = findCapabilitySource();
+    if (!source) {
+        console.error(pc.red("Could not find a capability source. Expected .claude/ or a Codex projection at .codex/capabilities.json. Run `npx mewkit init` or `npx mewkit migrate codex`."));
+        process.exit(1);
+    }
+    const entries = source.entries;
+    if (sub === "explain") {
+        explain(entries, args.target, args.json ?? false);
+        return;
+    }
+    if (sub === "resolve") {
+        resolve(entries, args.intent ?? args.target, args.provider ?? null, process.cwd(), args.json ?? false);
+        return;
+    }
+    if (sub === "view") {
+        // Generated compatible portion of the trigger registry (maintainer/CI diffs it in).
+        console.log(renderCapabilityView(entries));
+        return;
+    }
+    if (sub !== "list") {
+        console.error(pc.red(`Unknown capabilities subcommand "${sub}". Expected list|explain|resolve|view|bootstrap|projections.`));
+        process.exit(1);
+    }
+    if (args.json) {
+        console.log(JSON.stringify({ schemaVersion: "1.0", entries }, null, 2));
+        return;
+    }
+    console.log(pc.bold(pc.cyan("MeowKit Capabilities")));
+    const issues = source.kind === "claude-directory" ? validateCapabilities(source.path) : [];
+    const errors = issues.filter((i) => i.level === "error");
+    const warns = issues.filter((i) => i.level === "warn");
+    console.log(pc.dim(`${entries.length} capabilities — ${errors.length} error(s), ${warns.length} warning(s)\n`));
+    const byKind = new Map();
+    for (const e of entries)
+        byKind.set(e.kind, [...(byKind.get(e.kind) ?? []), e]);
+    for (const [kind, list] of [...byKind].sort((a, b) => (a[0] < b[0] ? -1 : 1))) {
+        console.log(pc.bold(kind));
+        for (const e of list)
+            console.log(`  ${e.id}${e.description ? pc.dim(` — ${e.description}`) : ""}`);
+        console.log();
+    }
+    for (const i of errors)
+        console.log(`  [${pc.red("ERROR")}] ${i.capabilityId ?? "-"}: ${i.message}`);
+    for (const i of warns)
+        console.log(`  [${pc.yellow("WARN")}] ${i.capabilityId ?? "-"}: ${i.message}`);
+    if (errors.length > 0)
+        process.exit(1);
+}
+function explain(entries, target, json) {
+    if (!target) {
+        console.error(pc.red("`capabilities explain` requires a capability id."));
+        process.exit(1);
+    }
+    const entry = entries.find((e) => e.id === target);
+    if (!entry) {
+        console.error(pc.red(`No capability with id "${target}".`));
+        process.exit(1);
+    }
+    if (json) {
+        console.log(JSON.stringify(entry, null, 2));
+        return;
+    }
+    console.log(pc.bold(pc.cyan(`Capability: ${entry.id}`)));
+    console.log(`  kind:        ${entry.kind}`);
+    console.log(`  description: ${entry.description || pc.dim("(none)")}`);
+    console.log(`  source:      ${entry.sourcePath ?? pc.dim("(authored, no disk artifact)")}`);
+    console.log(`  owner:       ${entry.owner || pc.dim("(unknown)")} / ${entry.installedState}`);
+    console.log(`  invocation:  ${entry.invocation.kind}:${entry.invocation.id}`);
+    console.log(`  intents:     ${entry.intents.length ? entry.intents.join(", ") : pc.dim("(none)")}`);
+    console.log(`  requires:    ${entry.requirements.length ? entry.requirements.map((r) => `${r.type}:${r.id}`).join(", ") : pc.dim("(none)")}`);
+    console.log(`  verify:      ${entry.verification.kind}${entry.verification.id ? `:${entry.verification.id}` : ""}`);
+    console.log(`  provenance:  ${Object.entries(entry.provenance).map(([k, v]) => `${k}=${v}`).join(", ") || pc.dim("(none)")}`);
+}
+/**
+ * Real host-availability probes for the CLI. External binaries via PATH; MCP/apps via
+ * `.mcp.json` presence (no secrets read); files via a containment-checked existence probe
+ * that returns `null` for a bare, absent id (a logical name we can't resolve to a path),
+ * so it surfaces as `unknown` rather than a false `unavailable`.
+ */
+/** Report how the capability surface projects into each provider + the four support levels. */
+function projections(json) {
+    const all = Object.values(PROVIDER_PROJECTIONS);
+    if (json) {
+        console.log(JSON.stringify(all, null, 2));
+        return;
+    }
+    console.log(pc.bold(pc.cyan("Capability provider projections")));
+    console.log(pc.dim("Four independent levels; `enforceable` is claimed only where a real gating hook exists.\n"));
+    for (const p of all) {
+        console.log(`${pc.bold(p.provider)} ${pc.dim(`(${p.status}, placement: ${p.bootstrapPlacement})`)}`);
+        const l = p.levels;
+        console.log(`  discoverable=${l.discoverable}  selectable=${l.selectable}  invocable=${l.invocable}  enforceable=${l.enforceable}`);
+        console.log(pc.dim(`  ${p.evidence}\n`));
+    }
+    console.log(pc.dim("Providers not listed are report-only — no capability behavior is claimed for them."));
+}
+export function hostProbes(projectRoot) {
+    return {
+        // NOTE: PATH-only binary detection under-reports package-local CLIs (e.g. a `mewkit`
+        // runnable via `npx`/workspace bin but not on global PATH reads as not-found). The
+        // per-requirement evidence stays truthful ("PATH lookup: not found").
+        commandExists: (cmd) => commandExists(cmd),
+        containedFileExists: (id) => {
+            if (!id || id === ".")
+                return null; // not a concrete requirement path
+            const abs = path.resolve(projectRoot, id);
+            const escapes = (from, to) => {
+                const rel = path.relative(from, to);
+                return rel === ".." || rel.startsWith(".." + path.sep) || path.isAbsolute(rel);
+            };
+            if (escapes(projectRoot, abs))
+                return false; // lexical escape
+            if (fs.existsSync(abs)) {
+                // True containment: resolve symlinks so an in-root link pointing outside the
+                // tree is rejected, not followed (a lexical check alone would pass it).
+                try {
+                    if (escapes(fs.realpathSync(projectRoot), fs.realpathSync(abs)))
+                        return false;
+                }
+                catch {
+                    return false;
+                }
+                return true;
+            }
+            // Absent: a path-shaped id is definitively absent; a bare logical id is undetermined
+            // (→ unknown). Extensionless real-file names (Makefile, .gitignore) also read as bare
+            // here — an accepted bias toward `unknown` over a false `unavailable`.
+            const looksLikePath = id.includes("/") || id.includes("\\") || path.extname(id) !== "";
+            return looksLikePath ? false : null;
+        },
+        mcpServerConfigured: (id) => {
+            const mcpPath = path.join(projectRoot, ".mcp.json");
+            if (!fs.existsSync(mcpPath))
+                return null;
+            try {
+                const parsed = JSON.parse(fs.readFileSync(mcpPath, "utf-8"));
+                const servers = parsed.mcpServers ?? parsed.servers ?? {};
+                return Object.prototype.hasOwnProperty.call(servers, id);
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+}
+function resolve(entries, intent, provider, projectRoot, json) {
+    if (!intent) {
+        console.error(pc.red("`capabilities resolve` requires an intent (--intent \"…\" or a positional phrase)."));
+        process.exit(1);
+    }
+    const ctx = { provider: provider ?? "claude-code", checkedAt: new Date().toISOString(), probes: hostProbes(projectRoot) };
+    const result = resolveWithHost(entries, intent, ctx);
+    if (json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    console.log(pc.bold(pc.cyan(`Resolve: "${intent}" (host: ${ctx.provider}) — status: ${result.status}`)));
+    if (result.candidates.length === 0) {
+        console.log(pc.yellow("  No capability matched this intent."));
+        return;
+    }
+    for (const c of result.candidates) {
+        console.log(`  ${c.id} ${pc.dim(`(${c.kind}, score ${c.score})`)} — ${c.reason}`);
+        console.log(pc.dim(`      invocable: ${c.invocable}; verify: ${c.verification.kind}`));
+        for (const a of c.availability) {
+            console.log(pc.dim(`      • ${a.requirementType}:${a.id} → ${a.status}`));
+        }
+    }
+    // When the selected candidate needs task-scoped repo context, show HOW this provider acquires
+    // it (Phase 5). The agent runs these host-native tools, then records via `context record`.
+    const top = result.candidates[0];
+    if (top?.contextRequirement) {
+        const acq = result.acquisition;
+        console.log(pc.bold(`  needs repo context (${top.contextRequirement.reason}) — acquire via ${acq.provider} [${acq.status}]:`));
+        console.log(pc.dim(`      read:   ${acq.read ? `${acq.read.tool} — ${acq.read.note}` : "(no read surface — host-provided paths only)"}`));
+        console.log(pc.dim(`      search: ${acq.search ? `${acq.search.tool} — ${acq.search.note}` : "(no search surface — report-only)"}`));
+    }
+    // Self-auditing: cite the adapter + evidence behind this result's provider claims (Phase 6).
+    const cite = result.adapterCitation;
+    console.log(pc.dim(`  adapter: ${cite.provider} [${cite.projectionStatus}] — ${cite.projectionEvidence}`));
+    console.log(pc.dim(`  can gate on: ${cite.gatingEvents.length ? cite.gatingEvents.join(", ") : "no events (advisory host)"}`));
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/commands/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/commands/capabilities.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,qFAAqF;AACrF,wFAAwF;AACxF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAA0B,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C,SAAS,aAAa;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5F,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;IAEtC,mFAAmF;IACnF,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;QAChC,OAAO;IACR,CAAC;IAED,0EAA0E;IAC1E,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,yCAAyC,QAAQ,+BAA+B,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACvJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,QAA6B,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,gFAAgF;YAChF,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC,CAAC;gBACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAChD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,OAAO;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,+JAA+J,CAAC,CAAC,CAAC;QACvL,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAE/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;QAClD,OAAO;IACR,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;QACvG,OAAO;IACR,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACpB,oFAAoF;QACpF,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,OAAO;IACR,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,oCAAoC,GAAG,8DAA8D,CAAC,CAAC,CAAC;QAC7H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO;IACR,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,mBAAmB,MAAM,CAAC,MAAM,cAAc,KAAK,CAAC,MAAM,eAAe,CAAC,CAAC,CAAC;IAEhH,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpG,OAAO,CAAC,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACrG,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACtG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,OAA0B,EAAE,MAA0B,EAAE,IAAa;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,0BAA0B,MAAM,IAAI,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO;IACR,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9F,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9I,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpH,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC/H,CAAC;AAED;;;;;GAKG;AACH,+FAA+F;AAC/F,SAAS,WAAW,CAAC,IAAa;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChD,IAAI,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO;IACR,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2FAA2F,CAAC,CAAC,CAAC;IACjH,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,YAAY,gBAAgB,CAAC,CAAC,UAAU,eAAe,CAAC,CAAC,SAAS,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACpI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC7C,OAAO;QACN,qFAAqF;QACrF,mFAAmF;QACnF,sEAAsE;QACtE,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC;QAC1C,mBAAmB,EAAE,CAAC,EAAE,EAAE,EAAE;YAC3B,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;YACtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAU,EAAW,EAAE;gBACrD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACpC,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAChF,CAAC,CAAC;YACF,IAAI,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,iBAAiB;YAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,6EAA6E;gBAC7E,wEAAwE;gBACxE,IAAI,CAAC;oBACJ,IAAI,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;wBAAE,OAAO,KAAK,CAAC;gBAC/E,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,KAAK,CAAC;gBACd,CAAC;gBACD,OAAO,IAAI,CAAC;YACb,CAAC;YACD,qFAAqF;YACrF,sFAAsF;YACtF,uEAAuE;YACvE,MAAM,aAAa,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YACvF,OAAO,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACrC,CAAC;QACD,mBAAmB,EAAE,CAAC,EAAE,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzC,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAgF,CAAC;gBAC5I,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1D,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,OAA0B,EAAE,MAA0B,EAAE,QAAuB,EAAE,WAAmB,EAAE,IAAa;IACnI,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC,CAAC;QAC5G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,QAAQ,IAAI,aAAa,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;IAC1H,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,IAAI,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACR,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,MAAM,YAAY,GAAG,CAAC,QAAQ,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC/D,OAAO;IACR,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,SAAS,aAAa,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IACD,8FAA8F;IAC9F,2FAA2F;IAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,GAAG,EAAE,kBAAkB,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,GAAG,CAAC,kBAAkB,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAC/H,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;QAC1I,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;IACtI,CAAC;IACD,6FAA6F;IAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,gBAAgB,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAC3G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAChI,CAAC"}

package/dist/commands/context.d.ts

@@ -0,0 +1,10 @@
+export interface ContextOptions {
+    subcommand?: string;
+    target?: string;
+    root?: string;
+    /** `context record`: the active durable task id to merge the envelope's evidence into. */
+    task?: string;
+    json?: boolean;
+}
+export declare function context(args?: ContextOptions): Promise<void>;
+//# sourceMappingURL=context.d.ts.map

package/dist/commands/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,cAAc;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CACf;AAED,wBAAsB,OAAO,CAAC,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkHtE"}

package/dist/commands/context.js

@@ -0,0 +1,125 @@
+// `mewkit context resolve|check|record` — inspect + record the repository-context evidence
+// ledger (Phase 5). `resolve` builds an evidence ref for a path (owning repo, revision, hash,
+// redaction); `check` re-hashes a recorded envelope's evidence and reports per-path freshness;
+// `record` merges an envelope's owning repos + evidence paths into an active durable task record
+// (advisory, best-effort). MeowKit records + verifies evidence; the host's own tools acquire it.
+import fs from "node:fs";
+import path from "node:path";
+import pc from "picocolors";
+import { buildEvidenceRef, checkEvidenceFreshness, ContextEnvelopeSchema, distinctRepos, isWithinBoundary, } from "../core/repo-context.js";
+import { recordContextEvidence } from "../core/task-record.js";
+export async function context(args = {}) {
+    const sub = args.subcommand ?? "resolve";
+    const boundary = args.root ? path.resolve(args.root) : process.cwd();
+    if (sub === "resolve") {
+        if (!args.target) {
+            console.error(pc.red("`context resolve` requires a path."));
+            process.exit(1);
+        }
+        const abs = path.resolve(boundary, args.target);
+        if (!isWithinBoundary(boundary, abs)) {
+            console.error(pc.red(`Path escapes the boundary root: ${args.target}`));
+            process.exit(1);
+        }
+        const ref = buildEvidenceRef(abs, boundary);
+        if (args.json) {
+            console.log(JSON.stringify(ref, null, 2));
+            return;
+        }
+        console.log(pc.bold(pc.cyan(`Evidence: ${path.relative(boundary, abs) || abs}`)));
+        console.log(`  owning repo: ${ref.owningRepoIdentity}`);
+        console.log(`  revision:    ${ref.revision ?? pc.dim("(non-git / unresolved)")}`);
+        console.log(`  content:     ${ref.contentHash ?? pc.yellow("(missing)")}`);
+        console.log(`  redacted:    ${ref.redacted ? pc.yellow("yes (secret-shaped path)") : "no"}`);
+        return;
+    }
+    if (sub === "check") {
+        if (!args.target) {
+            console.error(pc.red("`context check` requires an envelope JSON path."));
+            process.exit(1);
+        }
+        const envPath = path.resolve(boundary, args.target);
+        if (!fs.existsSync(envPath)) {
+            console.error(pc.red(`Envelope not found: ${args.target}`));
+            process.exit(1);
+        }
+        let envelope;
+        try {
+            envelope = ContextEnvelopeSchema.parse(JSON.parse(fs.readFileSync(envPath, "utf-8")));
+        }
+        catch (err) {
+            console.error(pc.red(`Invalid context envelope: ${err.message.split("\n")[0]}`));
+            process.exit(1);
+        }
+        // Boundary-scope the freshness check: an untrusted envelope's evidence paths are never
+        // stat-ed/hashed outside the boundary (no arbitrary-path existence/hash oracle).
+        const results = checkEvidenceFreshness(envelope.evidence, boundary);
+        // Pair each result with its evidence ref (1:1, same order) to group BY OWNING REPO.
+        const paired = results.map((r, i) => ({ ...r, ref: envelope.evidence[i] }));
+        if (args.json) {
+            console.log(JSON.stringify({ boundaryRoot: envelope.boundaryRoot, repos: distinctRepos(envelope.evidence), results }, null, 2));
+            return;
+        }
+        const tagFor = (s) => s === "fresh" ? pc.green("fresh") : s === "stale" ? pc.yellow("stale") : s === "out-of-scope" ? pc.red("out-of-scope") : pc.red("missing");
+        console.log(pc.bold(pc.cyan(`Context freshness — scope: ${envelope.boundaryRoot}`)));
+        // Per-repo grouping: each owning repo (with its own revision) is reported separately, so a
+        // multi-repo task never loses which repo an evidence file — and its freshness — belongs to.
+        for (const repo of distinctRepos(envelope.evidence)) {
+            console.log(pc.bold(`  ${repo.identity} ${pc.dim(`@ ${repo.revision ?? "(non-git)"}`)}`));
+            for (const p of paired.filter((x) => x.ref.owningRepoIdentity === repo.identity)) {
+                console.log(`    [${tagFor(p.status)}] ${p.ref.path}`);
+            }
+        }
+        const needsAction = results.filter((r) => r.status !== "fresh");
+        if (needsAction.length > 0) {
+            console.log(pc.dim(`\n  ${needsAction.length} evidence path(s) need reacquisition or are out of scope.`));
+            process.exit(1);
+        }
+        return;
+    }
+    if (sub === "record") {
+        if (!args.task) {
+            console.error(pc.red("`context record` requires --task <id> (the active durable task to record into)."));
+            process.exit(1);
+        }
+        if (!args.target) {
+            console.error(pc.red("`context record` requires an envelope JSON path."));
+            process.exit(1);
+        }
+        const envPath = path.resolve(boundary, args.target);
+        if (!fs.existsSync(envPath)) {
+            console.error(pc.red(`Envelope not found: ${args.target}`));
+            process.exit(1);
+        }
+        let envelope;
+        try {
+            envelope = ContextEnvelopeSchema.parse(JSON.parse(fs.readFileSync(envPath, "utf-8")));
+        }
+        catch (err) {
+            console.error(pc.red(`Invalid context envelope: ${err.message.split("\n")[0]}`));
+            process.exit(1);
+        }
+        // Advisory + best-effort (task-state-emission Rule 3): merge the envelope's owning repos +
+        // evidence paths into the CONSUMER PROJECT's task record (cwd-keyed, per task-record.ts).
+        // A missing/incompatible record surfaces non-zero but is never fatal to the caller's flow.
+        try {
+            const rec = await recordContextEvidence(process.cwd(), args.task, envelope, new Date().toISOString());
+            if (args.json) {
+                console.log(JSON.stringify({ taskId: rec.taskId, repos: rec.repos, evidenceRefs: rec.evidenceRefs }, null, 2));
+                return;
+            }
+            console.log(pc.bold(pc.cyan(`Recorded context evidence → task ${rec.taskId}`)));
+            for (const r of rec.repos)
+                console.log(`  repo: ${r.identity} ${pc.dim(`@ ${r.revision ?? "(non-git)"}`)}`);
+            console.log(pc.dim(`  ${rec.evidenceRefs.length} evidence path(s) tracked`));
+            return;
+        }
+        catch (err) {
+            console.error(pc.yellow(`context record skipped (advisory): ${err.message}`));
+            process.exit(1);
+        }
+    }
+    console.error(pc.red(`Unknown context subcommand "${sub}". Expected resolve|check|record.`));
+    process.exit(1);
+}
+//# sourceMappingURL=context.js.map

package/dist/commands/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,8FAA8F;AAC9F,+FAA+F;AAC/F,iGAAiG;AACjG,iGAAiG;AACjG,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACN,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAW/D,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAErE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,mCAAmC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7F,OAAO;IACR,CAAC;IAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,6BAA8B,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,uFAAuF;QACvF,iFAAiF;QACjF,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,oFAAoF;QACpF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChI,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CACpC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5I,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,8BAA8B,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;QACrF,2FAA2F;QAC3F,4FAA4F;QAC5F,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClF,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;QACF,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QAChE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,WAAW,CAAC,MAAM,2DAA2D,CAAC,CAAC,CAAC;YAC1G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,OAAO;IACR,CAAC;IAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC,CAAC;YACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,6BAA8B,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,2FAA2F;QAC3F,0FAA0F;QAC1F,2FAA2F;QAC3F,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACtG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/G,OAAO;YACR,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YAChF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC;YAC7E,OAAO;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,sCAAuC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,GAAG,mCAAmC,CAAC,CAAC,CAAC;IAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC"}

package/dist/commands/doctor.d.ts

@@ -3,5 +3,32 @@ export declare function doctor(args?: {
     providers?: boolean;
     state?: boolean;
     hardGates?: boolean;
+    provenance?: boolean;
+    explain?: boolean;
+    consolidation?: boolean;
 }): Promise<void>;
+/** A file's provenance verifiability, decided only from locally available evidence. */
+type ProvenanceClass = "verified" | "known-modified" | "unknown";
+/**
+ * Classify one installed entry's provenance from metadata alone (no fetching).
+ * `trustedBaseline` is true only when the `baseChecksum` is a real as-shipped hash
+ * (canonical `new` metadata). Legacy sources reconstruct `baseChecksum` from the disk
+ * itself, so a `checksum === baseChecksum` match proves nothing about what shipped —
+ * such kit files are `unknown`, never `verified`.
+ */
+export declare function classifyProvenance(entry: {
+    owner: string;
+    checksum: string;
+    baseChecksum: string;
+}, trustedBaseline: boolean): ProvenanceClass;
+/**
+ * Read-only `doctor provenance --explain`. Reports what provenance can and cannot be
+ * proven from locally available evidence, in three honest classes: verified (as-shipped
+ * identity provable), known-modified (diverged from a KNOWN baseline), and unknown (no
+ * baseline recorded). It NEVER fetches a release, and it proposes a repair only when an
+ * exact trusted payload is locally available — doctor has none on disk, so it proposes
+ * none and says so, rather than relabeling or reconstructing silently.
+ */
+export declare function explainProvenance(root: string | null, explain: boolean): void;
+export {};
 //# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AA8DA,wBAAsB,MAAM,CAAC,IAAI,CAAC,EAAE;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoGhB"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AA+DA,wBAAsB,MAAM,CAAC,IAAI,CAAC,EAAE;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6GhB;AA4CD,uFAAuF;AACvF,KAAK,eAAe,GAAG,UAAU,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CACjC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAChE,eAAe,EAAE,OAAO,GACtB,eAAe,CASjB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CA0E7E"}