openpitstop 1.0.0

package/dist/analyzers/ledger/index.js

@@ -0,0 +1,116 @@
+import { discover } from "./discover.js";
+import { startHarness, newEvidencePath, readAbortReason, } from "./harness.js";
+import { runAttacks } from "./attacks.js";
+import { analyzeEvidence, writeEvidenceFile, } from "./evidence.js";
+/**
+ * ledger.ts — orchestrates `pitstop scan --ledger`.
+ *
+ * This is invasive (it boots the app and fires live traffic at it), so it is
+ * ONLY ever invoked from the CLI when the user explicitly passes `--ledger`.
+ * Every outbound HTTP call from the app is routed through a nock sandbox before
+ * it can leave the process; the request/response pairs the "gateway" receives
+ * are recorded so evidence of a double-charge is real, not simulated.
+ */
+export async function runLedgerAnalyzer(repo) {
+    const ts = new Date().toISOString().replace(/[:.]/g, "-");
+    let discovery;
+    try {
+        discovery = discover(repo);
+    }
+    catch (e) {
+        return {
+            status: "error",
+            note: `endpoint discovery failed: ${e.message}`,
+            endpoints: [],
+            evidence: [],
+        };
+    }
+    if (discovery.endpoints.length === 0) {
+        return {
+            status: "ok",
+            note: "no money-moving endpoints discovered (route keywords: charge/capture/payment/" +
+                "transfer/refund/webhook; payment SDKs: razorpay/stripe/braintree)",
+            endpoints: [],
+            evidence: [],
+        };
+    }
+    const harnessResult = await startHarness(repo, discovery.gatewayHosts);
+    if (!harnessResult.harness) {
+        return {
+            status: harnessResult.aborted ? "aborted" : "error",
+            note: harnessResult.abortReason ?? "could not arm the ledger harness",
+            endpoints: discovery.endpoints,
+            evidence: [],
+        };
+    }
+    const harness = harnessResult.harness;
+    let evidenceOut = null;
+    let abortedReason = null;
+    let runError = null;
+    try {
+        const attacks = await runAttacks({
+            baseUrl: harness.baseUrl,
+            endpoints: discovery.endpoints,
+        });
+        evidenceOut = analyzeEvidence({
+            repo,
+            discovery,
+            attacks,
+            gatewayLogPath: harness.gatewayLogPath,
+        });
+        abortedReason = readAbortReason(harness.controlPath);
+    }
+    catch (e) {
+        runError = e.message;
+    }
+    finally {
+        await harness.close();
+    }
+    if (runError) {
+        return {
+            status: "error",
+            note: `attack/evidence phase failed: ${runError}`,
+            endpoints: discovery.endpoints,
+            evidence: [],
+        };
+    }
+    if (abortedReason) {
+        return {
+            status: "aborted",
+            note: abortedReason,
+            endpoints: discovery.endpoints,
+            evidence: [],
+        };
+    }
+    if (!evidenceOut) {
+        return {
+            status: "error",
+            note: "no evidence produced",
+            endpoints: discovery.endpoints,
+            evidence: [],
+        };
+    }
+    const evidenceFile = newEvidencePath(repo, ts);
+    writeEvidenceFile(evidenceFile, evidenceOut.evidence, harness.gatewayLogPath);
+    for (const e of evidenceOut.evidence)
+        e.evidenceFile = evidenceFile;
+    const notes = [];
+    if (evidenceOut.note)
+        notes.push(evidenceOut.note);
+    if (discovery.sdkImports.length === 0) {
+        notes.push("no payment-SDK import detected — route heuristics only; the mock gateway was " +
+            "not pointed at a specific provider");
+    }
+    return {
+        status: "ok",
+        note: notes.length ? notes.join(" · ") : undefined,
+        endpoints: discovery.endpoints,
+        evidence: evidenceOut.evidence,
+        gatewayLogPath: harness.gatewayLogPath,
+        evidenceFile,
+    };
+}
+export { discover } from "./discover.js";
+export { runAttacks } from "./attacks.js";
+export { analyzeEvidence } from "./evidence.js";
+//# sourceMappingURL=index.js.map

package/dist/analyzers/ledger/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analyzers/ledger/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,iBAAiB,GAElB,MAAM,eAAe,CAAC;AAEvB;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE1D,IAAI,SAAS,CAAC;IACd,IAAI,CAAC;QACH,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,8BAA+B,CAAW,CAAC,OAAO,EAAE;YAC1D,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,IAAI,EACF,+EAA+E;gBAC/E,mEAAmE;YACrE,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;IACvE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YACnD,IAAI,EAAE,aAAa,CAAC,WAAW,IAAI,kCAAkC;YACrE,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;IAEtC,IAAI,WAAW,GAA0B,IAAI,CAAC;IAC9C,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC;YAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,CAAC,CAAC;QACH,WAAW,GAAG,eAAe,CAAC;YAC5B,IAAI;YACJ,SAAS;YACT,OAAO;YACP,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;QACH,aAAa,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,GAAI,CAAW,CAAC,OAAO,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,iCAAiC,QAAQ,EAAE;YACjD,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,sBAAsB;YAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/C,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,QAAQ;QAAE,CAAC,CAAC,YAAY,GAAG,YAAY,CAAC;IAEpE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,+EAA+E;YAC7E,oCAAoC,CACvC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;QAClD,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,YAAY;KACb,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/dist/analyzers/ledger/types.d.ts

@@ -0,0 +1,31 @@
+import type { LedgerEndpoint, LedgerScenario } from "../types.js";
+export type { LedgerEndpoint, LedgerScenario };
+/** A single scenario run against one endpoint. */
+export interface ScenarioRun {
+    scenario: LedgerScenario;
+    endpointIndex: number;
+    orderId: string;
+    idempotencyKey: string | null;
+    /** Every identifier that could surface on the wire (order id, idem key, payment id). */
+    identifiers: string[];
+}
+export interface AttackReport {
+    runs: ScenarioRun[];
+}
+export interface Harness {
+    port: number;
+    baseUrl: string;
+    /** Absolute path of the gateway receipt log (JSONL) written by the preload. */
+    gatewayLogPath: string;
+    /** Absolute path of the control stream (JSONL) written by the preload. */
+    controlPath: string;
+    /** Cleanup: kill the app, remove temp files. */
+    close(): Promise<void>;
+}
+export interface HarnessResult {
+    harness: Harness | null;
+    /** When the harness could not be armed safely. */
+    abortReason?: string;
+    /** True when the app reported a safety abort (uninterceptable traffic detected). */
+    aborted: boolean;
+}

package/dist/analyzers/ledger/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/analyzers/ledger/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/analyzers/ledger/types.ts"],"names":[],"mappings":""}

package/dist/analyzers/perf.d.ts

@@ -0,0 +1,2 @@
+import type { PerfResult } from "./types.js";
+export declare function analyzePerf(repo: string): Promise<PerfResult>;

package/dist/analyzers/perf.js

@@ -0,0 +1,106 @@
+import fs from "node:fs";
+import path from "node:path";
+import { commandExists, detectLanguage, dirSize, safeExecAsync } from "./util.js";
+export async function analyzePerf(repo) {
+    const lang = detectLanguage(repo);
+    if (lang === "js")
+        return jsPerf(repo);
+    if (lang === "go")
+        return nativePerf(repo, "go", ["build", "./..."], null);
+    if (lang === "rust")
+        return nativePerf(repo, "cargo", ["build"], null);
+    if (lang === "dart")
+        return nativePerf(repo, "flutter", ["build", "web"], "build/web");
+    if (lang === "dotnet")
+        return nativePerf(repo, "dotnet", ["build"], "bin");
+    if (lang === "java") {
+        if (fs.existsSync(path.join(repo, "pom.xml"))) {
+            return nativePerf(repo, "mvn", ["package", "-DskipTests"], "target");
+        }
+        const gradle = gradleCmd(repo);
+        if (gradle)
+            return nativePerf(repo, gradle, ["assemble"], "build/libs");
+        return { status: "skipped", note: "no java build tool found (mvn or gradle)" };
+    }
+    return { status: "skipped", note: "no build command for this language" };
+}
+function gradleCmd(repo) {
+    const wrapperName = process.platform === "win32" ? "gradlew.bat" : "gradlew";
+    const wrapper = path.join(repo, wrapperName);
+    if (fs.existsSync(wrapper))
+        return wrapper;
+    return commandExists("gradle") ? "gradle" : null;
+}
+/**
+ * Generic build-timing for non-JS stacks. `sizeDir` is an output directory
+ * relative to the repo (measured when it exists) — some toolchains only expose
+ * a meaningful build artifact size after the build.
+ */
+async function nativePerf(repo, cmd, args, sizeDir) {
+    if (!commandExists(cmd) && !path.isAbsolute(cmd)) {
+        return { status: "skipped", note: `${cmd} not found on PATH` };
+    }
+    const start = performance.now();
+    const build = await safeExecAsync(cmd, args, repo, 360000);
+    if (build.code !== 0) {
+        return {
+            status: "skipped",
+            note: `${cmd} ${args.join(" ")} failed (see stderr)`,
+            stderr: build.stderr,
+        };
+    }
+    const buildTimeMs = Math.round(performance.now() - start);
+    let bundleSizeBytes;
+    if (sizeDir) {
+        const outAbs = path.resolve(repo, sizeDir);
+        if (fs.existsSync(outAbs))
+            bundleSizeBytes = dirSize(outAbs);
+    }
+    return { status: "ok", buildTimeMs, bundleSizeBytes };
+}
+async function jsPerf(repo) {
+    const pkgPath = path.join(repo, "package.json");
+    if (!fs.existsSync(pkgPath)) {
+        return { status: "skipped", note: "no package.json" };
+    }
+    let pkg = {};
+    try {
+        pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+    }
+    catch {
+        return { status: "skipped", note: "unreadable package.json" };
+    }
+    const buildScript = pkg.scripts?.build;
+    if (!buildScript) {
+        return { status: "skipped", note: "no build script" };
+    }
+    const start = performance.now();
+    const build = await safeExecAsync("npm", ["run", "build"], repo, 240000);
+    if (build.code !== 0) {
+        return {
+            status: "skipped",
+            note: "build script present but `npm run build` failed (see stderr)",
+            stderr: build.stderr,
+        };
+    }
+    const buildTimeMs = Math.round(performance.now() - start);
+    let outDir = "dist";
+    const tsconfigPath = path.join(repo, "tsconfig.json");
+    if (fs.existsSync(tsconfigPath)) {
+        try {
+            const tc = JSON.parse(fs.readFileSync(tsconfigPath, "utf8"));
+            if (typeof tc.compilerOptions?.outDir === "string") {
+                outDir = tc.compilerOptions.outDir;
+            }
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    const outAbs = path.resolve(repo, outDir);
+    let bundleSizeBytes;
+    if (fs.existsSync(outAbs))
+        bundleSizeBytes = dirSize(outAbs);
+    return { status: "ok", buildTimeMs, bundleSizeBytes };
+}
+//# sourceMappingURL=perf.js.map

package/dist/analyzers/perf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"perf.js","sourceRoot":"","sources":["../../src/analyzers/perf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAGlF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;IACvF,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM;YAAE,OAAO,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;QACxE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,0CAA0C,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,GAAW,EACX,IAAc,EACd,OAAsB;IAEtB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,oBAAoB,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB;YACpD,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IAE1D,IAAI,eAAmC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,GAAG,GAAQ,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;IACvC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,8DAA8D;YACpE,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IAE1D,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACtD,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7D,IAAI,OAAO,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACnD,MAAM,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC;YACrC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,eAAmC,CAAC;IACxC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;AACxD,CAAC"}

package/dist/analyzers/reliability.d.ts

@@ -0,0 +1,22 @@
+import type { ReliabilityResult } from "./types.js";
+/**
+ * Reliability analysis.
+ *
+ * HONEST CAVEATS (heuristics, never certainty):
+ *
+ * - Flaky-test detection works by running the suite `runs` times IN SEQUENCE and
+ *   flagging any test whose pass/fail changed between runs. Running the suite
+ *   multiple times can itself perturb results (cache warm-up, shuffle order), and a
+ *   genuinely flaky test may not flake within the runs executed — absence of a
+ *   finding is NOT proof the suite is stable. We only run this when the suite is
+ *   fast (<60s); a slow suite is skipped with a note. With `runs < 2` the flaky
+ *   detector cannot run (it needs two observed outcomes), so only the race-smell
+ *   heuristic is reported and the note says so.
+ * - The race-condition "smells" (timer-based waits, module-scope mutable state
+ *   reassigned near async code) are a cheap static grep. Every one of them is
+ *   labeled "heuristic, needs human review". A smell is a hint to look, not an
+ *   assertion that a bug exists.
+ */
+export declare function analyzeReliability(repo: string, opts?: {
+    runs?: number;
+}): Promise<ReliabilityResult>;

package/dist/analyzers/reliability.js

@@ -0,0 +1,339 @@
+import fs from "node:fs";
+import path from "node:path";
+import { commandExists, safeExecAsync, walkFiles, lineOf, detectLanguage } from "./util.js";
+import { runNonJsSuite } from "./suiteRunner.js";
+/** Only bother with flakiness detection when the suite is fast enough. */
+const MAX_SUITE_MS = 60_000;
+/**
+ * Sequential runs; we deliberately run serially so runs perturb each other as
+ * little as possible. 2 runs is the minimum that can detect a changed outcome;
+ * pass a higher `runs` for a stronger signal (cost: N× suite time).
+ */
+const DEFAULT_RUNS = 2;
+const MIN_RUNS_FOR_FLAKY = 2;
+const MAX_FLAKY_REPORTED = 20;
+const JS_EXTS = [".js", ".jsx", ".ts", ".tsx"];
+/**
+ * Reliability analysis.
+ *
+ * HONEST CAVEATS (heuristics, never certainty):
+ *
+ * - Flaky-test detection works by running the suite `runs` times IN SEQUENCE and
+ *   flagging any test whose pass/fail changed between runs. Running the suite
+ *   multiple times can itself perturb results (cache warm-up, shuffle order), and a
+ *   genuinely flaky test may not flake within the runs executed — absence of a
+ *   finding is NOT proof the suite is stable. We only run this when the suite is
+ *   fast (<60s); a slow suite is skipped with a note. With `runs < 2` the flaky
+ *   detector cannot run (it needs two observed outcomes), so only the race-smell
+ *   heuristic is reported and the note says so.
+ * - The race-condition "smells" (timer-based waits, module-scope mutable state
+ *   reassigned near async code) are a cheap static grep. Every one of them is
+ *   labeled "heuristic, needs human review". A smell is a hint to look, not an
+ *   assertion that a bug exists.
+ */
+export async function analyzeReliability(repo, opts = {}) {
+    const runsRequested = Math.max(1, Math.floor(opts.runs ?? DEFAULT_RUNS));
+    const skipped = (note) => ({
+        status: "skipped",
+        note,
+        runs: 0,
+        durationMs: 0,
+        flakyTests: [],
+        raceSmells: [],
+    });
+    // Race-smell grep is independent of the test runner and always attempted.
+    const raceSmells = scanRaceSmells(repo);
+    const first = await runSuite(repo);
+    if (!first) {
+        // No runnable suite — but surface races if any were found.
+        return raceSmells.length > 0
+            ? {
+                status: "ok",
+                note: "no runnable test suite; race-smell heuristic only",
+                runs: 0,
+                durationMs: 0,
+                flakyTests: [],
+                raceSmells,
+            }
+            : skipped("no runnable test suite");
+    }
+    if (first.durationMs >= MAX_SUITE_MS) {
+        return {
+            status: raceSmells.length > 0 ? "ok" : "skipped",
+            note: `test suite took ${first.durationMs}ms (>= 60s) — too slow to run ${runsRequested}x; only the race-smell heuristic ran`,
+            runs: 1,
+            durationMs: first.durationMs,
+            suiteDurationMs: first.durationMs,
+            flakyTests: [],
+            raceSmells,
+        };
+    }
+    // Flaky detection needs at least two observed outcomes per test.
+    const runs = [first];
+    for (let i = 1; i < runsRequested; i++) {
+        const r = await runSuite(repo);
+        if (r)
+            runs.push(r);
+    }
+    let note;
+    if (runs.length < MIN_RUNS_FOR_FLAKY) {
+        note =
+            "flaky detection needs >= 2 suite runs; runs=1 means only the race-smell heuristic was checked";
+    }
+    else if (raceSmells.length > 0 || detectFlaky(runs).length > 0) {
+        note = "findings are heuristics — confirm each before acting";
+    }
+    const flakyTests = detectFlaky(runs);
+    const totalDuration = runs.reduce((n, r) => n + r.durationMs, 0);
+    return {
+        status: "ok",
+        note,
+        runs: runs.length,
+        durationMs: totalDuration,
+        suiteDurationMs: first.durationMs,
+        flakyTests,
+        raceSmells,
+    };
+}
+function runSuite(repo) {
+    const lang = detectLanguage(repo);
+    if (lang === "unknown")
+        return Promise.resolve(null);
+    if (lang === "python")
+        return commandExists("pytest") ? runPytest(repo) : Promise.resolve(null);
+    if (lang !== "js") {
+        // Go/Rust/Flutter/.NET/Java: shared runner, per-test outcomes when the
+        // runner exposes them (go -json, cargo json, flutter --machine), whole-suite
+        // pseudo-test otherwise (dotnet/maven/gradle text/XML summaries).
+        return runNonJsSuite(repo).then((sr) => sr
+            ? {
+                tests: sr.tests,
+                passed: sr.passed,
+                failed: sr.failed,
+                durationMs: sr.durationMs,
+            }
+            : null);
+    }
+    if (!fs.existsSync(path.join(repo, "package.json"))) {
+        return Promise.resolve(null);
+    }
+    let pkg = {};
+    try {
+        pkg = JSON.parse(fs.readFileSync(path.join(repo, "package.json"), "utf8"));
+    }
+    catch {
+        pkg = {};
+    }
+    const deps = { ...(pkg.dependencies ?? {}), ...(pkg.devDependencies ?? {}) };
+    const hasBin = (name) => commandExists(name) || fs.existsSync(path.join(repo, "node_modules", ".bin", name));
+    if (deps.jest && hasBin("jest"))
+        return runJest(repo);
+    if (deps.vitest && hasBin("vitest"))
+        return runVitest(repo);
+    if (commandExists("pytest"))
+        return runPytest(repo);
+    return Promise.resolve(null);
+}
+async function runJest(repo) {
+    let cmd;
+    let args;
+    const local = path.join(repo, "node_modules", "jest", "bin", "jest.js");
+    if (fs.existsSync(local)) {
+        cmd = "node";
+        args = [local];
+    }
+    else if (commandExists("jest")) {
+        cmd = "jest";
+        args = [];
+    }
+    else {
+        return null;
+    }
+    const start = performance.now();
+    const cacheDir = path.join(repo, ".pitstop", "cache", "jest");
+    fs.mkdirSync(cacheDir, { recursive: true });
+    const r = await safeExecAsync(cmd, [...args, "--json", "--cacheDirectory", cacheDir], repo, 180000);
+    const durationMs = Math.round(performance.now() - start);
+    // jest exits 0 on pass, 1 on failure — both are valid outputs.
+    if (r.code !== 0 && r.code !== 1)
+        return null;
+    let json;
+    try {
+        json = JSON.parse(r.stdout);
+    }
+    catch {
+        return null;
+    }
+    const tests = [];
+    for (const tr of json.testResults ?? []) {
+        for (const a of tr.assertionResults ?? []) {
+            tests.push({
+                name: a.fullName ?? a.title ?? "",
+                file: tr.name,
+                status: a.status === "passed" ? "passed" : "failed",
+            });
+        }
+    }
+    return {
+        tests,
+        passed: json.numPassedTests ?? 0,
+        failed: json.numFailedTests ?? 0,
+        durationMs,
+    };
+}
+async function runVitest(repo) {
+    let cmd;
+    let args;
+    const local = path.join(repo, "node_modules", "vitest", "vitest.mjs");
+    if (fs.existsSync(local)) {
+        cmd = "node";
+        args = [local];
+    }
+    else if (commandExists("vitest")) {
+        cmd = "vitest";
+        args = [];
+    }
+    else {
+        return null;
+    }
+    const tmp = path.join(repo, ".pitstop", "vitest-reliability.json");
+    fs.mkdirSync(path.dirname(tmp), { recursive: true });
+    const start = performance.now();
+    await safeExecAsync(cmd, [...args, "run", "--reporter=json", "--outputFile", tmp], repo, 180000);
+    const durationMs = Math.round(performance.now() - start);
+    let json;
+    if (fs.existsSync(tmp)) {
+        try {
+            json = JSON.parse(fs.readFileSync(tmp, "utf8"));
+        }
+        catch {
+            json = undefined;
+        }
+    }
+    if (!json)
+        return null;
+    const tests = [];
+    for (const tr of json.testResults ?? []) {
+        for (const a of tr.assertionResults ?? []) {
+            tests.push({
+                name: a.fullName ?? a.title ?? "",
+                file: tr.name,
+                status: a.status === "passed" ? "passed" : "failed",
+            });
+        }
+    }
+    return {
+        tests,
+        passed: json.numPassedTests ?? 0,
+        failed: json.numFailedTests ?? 0,
+        durationMs,
+    };
+}
+/**
+ * pytest: `-q` only exposes per-suite counts, not per-test names. We model the
+ * whole run as one pseudo-test so a changing pass/fail between runs still flags.
+ */
+async function runPytest(repo) {
+    const start = performance.now();
+    const r = await safeExecAsync("pytest", ["-q", "--tb=no"], repo, 180000);
+    const durationMs = Math.round(performance.now() - start);
+    const passed = Number((r.stdout.match(/(\d+)\s+passed/) ?? [])[1] ?? 0);
+    const failed = Number((r.stdout.match(/(\d+)\s+failed/) ?? [])[1] ?? 0);
+    // Distinguish "no tests collected" from a real clean run.
+    if (passed === 0 && failed === 0 && !/passed|failed/.test(r.stdout))
+        return null;
+    const tests = [
+        {
+            name: failed > 0 ? "(pytest suite: failures)" : "(pytest suite)",
+            status: failed > 0 ? "failed" : "passed",
+        },
+    ];
+    return { tests, passed, failed, durationMs };
+}
+function detectFlaky(runs) {
+    const byKey = new Map();
+    for (const run of runs) {
+        for (const t of run.tests) {
+            const key = `${t.file ?? ""}::${t.name}`;
+            if (!byKey.has(key)) {
+                byKey.set(key, { name: t.name, file: t.file, statuses: [] });
+            }
+            byKey.get(key).statuses.push(t.status);
+        }
+    }
+    const flaky = [];
+    for (const v of byKey.values()) {
+        const distinct = new Set(v.statuses);
+        if (v.statuses.length >= 2 && distinct.has("passed") && distinct.has("failed")) {
+            flaky.push({ name: v.name, file: v.file, statuses: v.statuses });
+        }
+    }
+    flaky.sort((a, b) => b.statuses.length - a.statuses.length);
+    return flaky.slice(0, MAX_FLAKY_REPORTED);
+}
+/* ------------------------------------------------------------------ */
+/* Race-condition smell heuristics (labeled, never certain)             */
+/* ------------------------------------------------------------------ */
+const TEST_FILE_RE = /(?:\.(?:test|spec)\.(?:js|jsx|ts|tsx)$)|(?:[\\/](?:__tests__|test|tests|spec)[\\/])/;
+function scanRaceSmells(repo) {
+    const issues = [];
+    for (const f of walkFiles(repo, JS_EXTS)) {
+        let content;
+        try {
+            content = fs.readFileSync(f, "utf8");
+        }
+        catch {
+            continue;
+        }
+        const rel = path.relative(repo, f);
+        if (TEST_FILE_RE.test(rel)) {
+            issues.push(...timerSmells(content, f));
+        }
+        else {
+            issues.push(...moduleStateSmells(content, f));
+        }
+    }
+    return issues;
+}
+function timerSmells(content, file) {
+    const out = [];
+    const re = /\b(?:setTimeout|setInterval)\s*\(/g;
+    let m;
+    while ((m = re.exec(content)) !== null) {
+        out.push({
+            type: "race-condition",
+            severity: "warning",
+            file,
+            line: lineOf(content, m.index),
+            description: "test uses a timer-based wait (setTimeout/setInterval) — flaky-risk; prefer event- or poll-until helpers. heuristic, needs human review",
+        });
+    }
+    return out;
+}
+/** Module-scope let/var at column 0 that is reassigned in a file with async code. */
+function moduleStateSmells(content, file) {
+    const out = [];
+    const declRe = /^(?:export\s+)?(?:let|var)\s+([A-Za-z_$][\w$]*)/gm;
+    let d;
+    while ((d = declRe.exec(content)) !== null) {
+        const name = d[1];
+        // Only flag when the module also has async/await or Promise usage nearby.
+        if (!/\basync\b|\bawait\b|\bPromise\b/.test(content))
+            continue;
+        const reassign = new RegExp(`\\b${name}\\s*=(?!=)`, "g");
+        // Skip the declaration itself; look for a second assignment.
+        const count = (content.match(reassign) ?? []).length;
+        if (count > 1) {
+            out.push({
+                type: "race-condition",
+                severity: "warning",
+                file,
+                line: lineOf(content, d.index),
+                description: `module-level mutable state \`${name}\` is reassigned in a file that also has async code — ` +
+                    "may race across concurrent tasks. heuristic, needs human review",
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=reliability.js.map

package/dist/analyzers/reliability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reliability.js","sourceRoot":"","sources":["../../src/analyzers/reliability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjD,0EAA0E;AAC1E,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B;;;;GAIG;AACH,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAE/C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,OAA0B,EAAE;IAE5B,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,CAAC,IAAY,EAAqB,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,SAAS;QACjB,IAAI;QACJ,IAAI,EAAE,CAAC;QACP,UAAU,EAAE,CAAC;QACb,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,EAAE;KACf,CAAC,CAAC;IAEH,0EAA0E;IAC1E,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,2DAA2D;QAC3D,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC;gBACE,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,mDAAmD;gBACzD,IAAI,EAAE,CAAC;gBACP,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,EAAE;gBACd,UAAU;aACX;YACH,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,IAAI,YAAY,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAChD,IAAI,EAAE,mBAAmB,KAAK,CAAC,UAAU,iCAAiC,aAAa,sCAAsC;YAC7H,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,eAAe,EAAE,KAAK,CAAC,UAAU;YACjC,UAAU,EAAE,EAAE;YACd,UAAU;SACX,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,IAAwB,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACrC,IAAI;YACF,+FAA+F,CAAC;IACpG,CAAC;SAAM,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,IAAI,GAAG,sDAAsD,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAEjE,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,UAAU,EAAE,aAAa;QACzB,eAAe,EAAE,KAAK,CAAC,UAAU;QACjC,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC;AAaD,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAErD,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,uEAAuE;QACvE,6EAA6E;QAC7E,kEAAkE;QAClE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CACrC,EAAE;YACA,CAAC,CAAC;gBACE,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,UAAU,EAAE,EAAE,CAAC,UAAU;aAC1B;YACH,CAAC,CAAC,IAAI,CACT,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,GAAG,GAAQ,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAEtF,IAAI,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,IAAI,GAAW,CAAC;IAChB,IAAI,IAAc,CAAC;IACnB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACxE,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,GAAG,MAAM,CAAC;QACb,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;SAAM,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,GAAG,GAAG,MAAM,CAAC;QACb,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9D,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACpG,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IACzD,+DAA+D;IAC/D,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE;gBACjC,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,MAAM,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;QAChC,UAAU;KACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,IAAI,GAAW,CAAC;IAChB,IAAI,IAAc,CAAC;IACnB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACtE,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,GAAG,MAAM,CAAC;QACb,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;SAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,GAAG,GAAG,QAAQ,CAAC;QACf,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,yBAAyB,CAAC,CAAC;IACnE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,aAAa,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IACzD,IAAI,IAAS,CAAC;IACd,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE;gBACjC,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,MAAM,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;QAChC,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,0DAA0D;IAC1D,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,KAAK,GAAuB;QAChC;YACE,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,gBAAgB;YAChE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;SACzC;KACF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,IAAiB;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8E,CAAC;IACpG,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC5C,CAAC;AAED,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AAExE,MAAM,YAAY,GAChB,qFAAqF,CAAC;AAExF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QACzC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,IAAY;IAChD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,oCAAoC,CAAC;IAChD,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,SAAS;YACnB,IAAI;YACJ,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;YAC9B,WAAW,EACT,wIAAwI;SAC3I,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qFAAqF;AACrF,SAAS,iBAAiB,CAAC,OAAe,EAAE,IAAY;IACtD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,mDAAmD,CAAC;IACnE,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,0EAA0E;QAC1E,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAC/D,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,YAAY,EAAE,GAAG,CAAC,CAAC;QACzD,6DAA6D;QAC7D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACrD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,SAAS;gBACnB,IAAI;gBACJ,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;gBAC9B,WAAW,EACT,gCAAgC,IAAI,wDAAwD;oBAC5F,iEAAiE;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}