openpitstop 1.0.0

package/dist/commands/verify.js

@@ -0,0 +1,381 @@
+import { Command } from "commander";
+import chalk from "chalk";
+import boxen from "boxen";
+import Table from "cli-table3";
+import path from "node:path";
+import fs from "node:fs";
+import { analyzeTests } from "../analyzers/tests.js";
+import { analyzePerf } from "../analyzers/perf.js";
+import { analyzeSecurity } from "../analyzers/security.js";
+import { analyzeDuplication } from "../analyzers/duplication.js";
+import { addEntry } from "../memory/store.js";
+import { newestModifiedFile } from "../analyzers/util.js";
+import { classifyRisk, deltasOf, metricsOf } from "../verify/metrics.js";
+import { computeScore } from "../report/score.js";
+import { getDiff } from "../analyzers/integrity/git.js";
+import { buildIntegrityReport } from "../graph/integrity.js";
+import { seal, checkEvidence } from "../evidence.js";
+/**
+ * Every verify run doubles as an integrity gate: it diffs the working tree
+ * against the last commit (HEAD) and runs the AI-agent-cheat detectors. A
+ * SUSPICIOUS or CONFIRMED_CHEAT verdict BLOCKS the change regardless of test
+ * or perf numbers.
+ */
+function integrityGate(repo) {
+    const changes = getDiff(repo, "HEAD");
+    const report = buildIntegrityReport(repo, "HEAD", "working tree", changes);
+    return { verdict: report.verdict, findings: report.findings, summary: report.summary };
+}
+function readBaseline(repo) {
+    const p = path.join(repo, ".pitstop", "scan-latest.json");
+    if (!fs.existsSync(p))
+        return null;
+    try {
+        // PowerShell (and some editors) write UTF-8 JSON with a BOM; JSON.parse
+        // rejects it, so strip a leading U+FEFF before parsing.
+        const raw = fs.readFileSync(p, "utf8");
+        const clean = raw.charCodeAt(0) === 0xfeff ? raw.slice(1) : raw;
+        return JSON.parse(clean);
+    }
+    catch {
+        return null;
+    }
+}
+async function currentMetrics(repo) {
+    const [tests, perf, security, duplication] = await Promise.all([
+        analyzeTests(repo),
+        analyzePerf(repo),
+        analyzeSecurity(repo),
+        analyzeDuplication(repo),
+    ]);
+    return {
+        tests: {
+            total: tests.total,
+            passed: tests.passed,
+            failed: tests.failed,
+            durationMs: tests.durationMs,
+            coverage: tests.coverage,
+        },
+        perf: {
+            buildTimeMs: perf.buildTimeMs,
+            bundleSizeBytes: perf.bundleSizeBytes,
+        },
+        securityCount: security.issues.length,
+        duplicationCount: duplication.cloneCount,
+    };
+}
+/**
+ * Verify re-measures only the fast metrics (tests/perf/security/dup), so the
+ * "current" OpenPitStop Score is computed from the last scan with exactly those
+ * categories patched in — the other categories keep their scan snapshot.
+ */
+function currentScoreOf(baselineResult, current, integrityPenalty) {
+    // Only patch categories that actually ran in the baseline scan; a category
+    // that printed "skipped" must stay skipped on both sides of the delta,
+    // otherwise the score could move for purely toolchain reasons.
+    const hybrid = { ...baselineResult };
+    if (hybrid.tests.status === "ok") {
+        hybrid.tests = {
+            status: "ok",
+            total: current.tests.total,
+            passed: current.tests.passed,
+            failed: current.tests.failed,
+            durationMs: current.tests.durationMs,
+            coverage: current.tests.coverage,
+        };
+    }
+    if (hybrid.perf.status === "ok") {
+        hybrid.perf = {
+            status: "ok",
+            buildTimeMs: current.perf.buildTimeMs,
+            bundleSizeBytes: current.perf.bundleSizeBytes,
+        };
+    }
+    if (hybrid.security.status === "ok") {
+        const synthetic = Array.from({ length: current.securityCount }, () => ({
+            type: "security",
+            severity: "high",
+            description: "current security findings (from verify)",
+        }));
+        hybrid.security = { status: "ok", issues: synthetic };
+    }
+    if (hybrid.duplication.status === "ok") {
+        hybrid.duplication = { status: "ok", cloneCount: current.duplicationCount, clones: [] };
+    }
+    return computeScore(hybrid, { integrityPenalty });
+}
+/**
+ * The shared verify pipeline (also used by `pitstop gate`): re-measure the
+ * fast metrics, diff against the scan baseline, run the integrity gate, check
+ * the baseline's evidence signature, and write a sealed verify report. Returns
+ * everything a renderer needs plus the exit code to propagate.
+ */
+export async function runVerify(repo) {
+    const baselineResult = readBaseline(repo);
+    if (!baselineResult) {
+        return {
+            repo,
+            missingBaseline: true,
+            stale: false,
+            risk: "High",
+            integrity: {
+                verdict: "CLEAN",
+                findings: [],
+                summary: { confirmed: 0, suspicious: 0, total: 0 },
+            },
+            blocked: false,
+            current: {
+                tests: { total: 0, passed: 0, failed: 0, durationMs: 0 },
+                perf: {},
+                securityCount: 0,
+                duplicationCount: 0,
+            },
+            baseline: {
+                tests: { total: 0, passed: 0, failed: 0, durationMs: 0 },
+                perf: {},
+                securityCount: 0,
+                duplicationCount: 0,
+            },
+            deltas: {
+                passed: 0,
+                failed: 0,
+                durationMs: 0,
+                coverage: 0,
+                buildTimeMs: 0,
+                bundleSizeBytes: 0,
+                security: 0,
+                duplication: 0,
+            },
+            baselineScore: { score: 0, grade: "F", categories: [], analyzed: 0, total: 0 },
+            currentScore: { score: 0, grade: "F", categories: [], analyzed: 0, total: 0 },
+            scoreDelta: 0,
+            exitCode: 1,
+        };
+    }
+    // Evidence signature: recompute the digest of the stored scan and compare.
+    // A baseline edited after OpenPitStop wrote it breaks the chain — the score
+    // delta is then computed against a document OpenPitStop cannot vouch for.
+    const evidence = checkEvidence(baselineResult);
+    const baseline = metricsOf(baselineResult);
+    const current = await currentMetrics(repo);
+    const d = deltasOf(baseline, current);
+    // Baseline staleness: if files changed after the baseline scan, the delta
+    // and score are computed against a snapshot that no longer matches the
+    // working tree — warn loudly instead of silently presenting stale math.
+    let staleNote = "";
+    const newest = newestModifiedFile(repo);
+    const baselineAt = Date.parse(baselineResult.timestamp);
+    if (newest && baselineAt && newest.mtimeMs > baselineAt + 1000) {
+        const relFile = path.relative(repo, newest.file) || newest.file;
+        staleNote =
+            `baseline is STALE — ${relFile} changed ${new Date(newest.mtimeMs).toISOString()}, ` +
+                `after the baseline scan (${baselineResult.timestamp}). Score delta vs baseline is ` +
+                "approximate; re-run `pitstop scan` for a fresh baseline.";
+    }
+    const stale = staleNote !== "";
+    const risk = classifyRisk(baseline, current, d);
+    // Integrity gate — runs automatically on every verify, gating the commit.
+    const integrity = integrityGate(repo);
+    const blocked = integrity.verdict === "SUSPICIOUS" || integrity.verdict === "CONFIRMED_CHEAT";
+    const integrityPenalty = blocked
+        ? integrity.verdict === "CONFIRMED_CHEAT"
+            ? 25
+            : 10
+        : 0;
+    const baselineScore = computeScore(baselineResult);
+    const currentScore = currentScoreOf(baselineResult, current, integrityPenalty);
+    const scoreDelta = currentScore.score - baselineScore.score;
+    const outDir = path.join(repo, ".pitstop");
+    fs.mkdirSync(outDir, { recursive: true });
+    const ts = new Date().toISOString().replace(/[:.]/g, "-");
+    const file = path.join(outDir, `verify-${ts}.json`);
+    const report = {
+        timestamp: new Date().toISOString(),
+        repo,
+        baselineTimestamp: baselineResult.timestamp,
+        risk,
+        blocked,
+        stale,
+        staleNote: stale ? staleNote : undefined,
+        evidence,
+        status: blocked ? "BLOCKED" : evidence.status === "tampered" ? "SUSPICIOUS_EVIDENCE" : "OK",
+        exitCode: blocked
+            ? integrity.verdict === "CONFIRMED_CHEAT"
+                ? 2
+                : 1
+            : risk === "High"
+                ? 1
+                : 0,
+        integrity,
+        deltas: d,
+        baseline,
+        current,
+        score: {
+            baseline: baselineScore.score,
+            current: currentScore.score,
+            delta: scoreDelta,
+            grade: currentScore.grade,
+        },
+    };
+    fs.writeFileSync(file, JSON.stringify(seal(report, `pitstop verify result for ${repo}`), null, 2));
+    return {
+        repo,
+        missingBaseline: false,
+        baselineTimestamp: baselineResult.timestamp,
+        evidence,
+        stale,
+        staleNote: stale ? staleNote : undefined,
+        risk,
+        integrity,
+        blocked,
+        current,
+        baseline,
+        deltas: d,
+        baselineScore,
+        currentScore,
+        scoreDelta,
+        exitCode: blocked
+            ? integrity.verdict === "CONFIRMED_CHEAT"
+                ? 2
+                : 1
+            : risk === "High"
+                ? 1
+                : 0,
+        file,
+    };
+}
+function fmtBundle(b) {
+    return b == null ? "—" : `${(b / 1024).toFixed(1)} KB`;
+}
+function fmtMs(n) {
+    return n == null ? "—" : `${n} ms`;
+}
+function fmtPct(n) {
+    return n == null ? "—" : `${n.toFixed(1)}%`;
+}
+function signed(n) {
+    return n > 0 ? `+${n}` : `${n}`;
+}
+function deltaBytes(n) {
+    if (n === 0)
+        return "0";
+    return `${n > 0 ? "+" : ""}${(n / 1024).toFixed(1)} KB`;
+}
+function deltaMs(n) {
+    if (n === 0)
+        return "0";
+    return `${n > 0 ? "+" : ""}${n} ms`;
+}
+function deltaPct(n) {
+    if (n === 0)
+        return "0";
+    return `${n > 0 ? "+" : ""}${n.toFixed(1)}%`;
+}
+function evidenceLine(ev) {
+    if (!ev || ev.status === "missing") {
+        return chalk.dim(`evidence: untracked (baseline carries no OpenPitStop signature)`);
+    }
+    if (ev.status === "verified") {
+        return chalk.green(`evidence: ✓ signed ${ev.digest.slice(0, 12)}…`);
+    }
+    return chalk.red(`evidence: ✗ TAMPERED — ${ev.reason ?? "digest mismatch"} ` +
+        `(expected ${ev.expected?.slice(0, 12)}…, got ${ev.digest.slice(0, 12)}…)`);
+}
+function renderVerifyBox(o) {
+    const d = o.deltas;
+    const baseline = o.baseline;
+    const current = o.current;
+    const baselineScore = o.baselineScore;
+    const currentScore = o.currentScore;
+    const table = new Table({
+        head: ["Metric", "Baseline", "Current", "Δ"],
+        style: { head: ["cyan"], border: [] },
+    });
+    const row = (name, baseStr, curStr, deltaNum, deltaStr, higherIsBetter) => {
+        const col = deltaNum === 0
+            ? chalk.dim
+            : (higherIsBetter ? deltaNum > 0 : deltaNum < 0)
+                ? chalk.green
+                : chalk.red;
+        table.push([chalk.bold(name), baseStr, curStr, col(deltaStr)]);
+    };
+    row("Tests passed", String(baseline.tests.passed), String(current.tests.passed), d.passed, signed(d.passed), true);
+    row("Tests failed", String(baseline.tests.failed), String(current.tests.failed), d.failed, signed(d.failed), false);
+    row("Duration", fmtMs(baseline.tests.durationMs), fmtMs(current.tests.durationMs), d.durationMs, deltaMs(d.durationMs), false);
+    row("Coverage", fmtPct(baseline.tests.coverage), fmtPct(current.tests.coverage), d.coverage, deltaPct(d.coverage), true);
+    row("Build time", fmtMs(baseline.perf.buildTimeMs), fmtMs(current.perf.buildTimeMs), d.buildTimeMs, deltaMs(d.buildTimeMs), false);
+    row("Bundle size", fmtBundle(baseline.perf.bundleSizeBytes), fmtBundle(current.perf.bundleSizeBytes), d.bundleSizeBytes, deltaBytes(d.bundleSizeBytes), false);
+    row("Security findings", String(baseline.securityCount), String(current.securityCount), d.security, signed(d.security), false);
+    row("Duplication clones", String(baseline.duplicationCount), String(current.duplicationCount), d.duplication, signed(d.duplication), false);
+    row("OpenPitStop score", `${baselineScore.score}/100 (${baselineScore.grade})`, `${currentScore.score}/100 (${currentScore.grade})`, o.scoreDelta, o.scoreDelta > 0 ? `+${o.scoreDelta} pts` : `${o.scoreDelta} pts`, true);
+    const riskColor = o.risk === "High" ? chalk.red : o.risk === "Medium" ? chalk.yellow : chalk.green;
+    let riskLine;
+    if (o.blocked) {
+        riskLine = `${chalk.bold("Regression risk:")} ${chalk.red("BLOCKED — integrity violation")} (${o.integrity.verdict})`;
+    }
+    else {
+        riskLine = `${chalk.bold("Regression risk:")} ${riskColor(o.risk.toUpperCase())}`;
+    }
+    const integrityParts = [];
+    if (o.blocked) {
+        integrityParts.push(chalk.red(`${chalk.bold("Integrity gate:")} ${o.integrity.verdict} — ` +
+            `${o.integrity.summary.confirmed} confirmed · ${o.integrity.summary.suspicious} suspicious`));
+        for (const f of o.integrity.findings) {
+            const tag = f.confidence === "confirmed" ? chalk.red("CONFIRMED") : chalk.yellow("SUSPICIOUS");
+            const loc = f.line ? `${f.file}:${f.line}` : f.file;
+            integrityParts.push(`  ${tag} ${chalk.bold(f.detector)} / ${f.pattern} @ ${chalk.cyan(loc)}`, `    ${f.evidence}`);
+        }
+    }
+    const contentParts = [];
+    if (o.stale) {
+        contentParts.push(chalk.yellow(`⚠ ${o.staleNote}`));
+    }
+    contentParts.push(evidenceLine(o.evidence));
+    if (o.evidence && o.evidence.status === "tampered") {
+        contentParts.push(chalk.red(`${chalk.bold("Evidence gate:")} the baseline was edited after OpenPitStop signed it — ` +
+            "score delta is against an untrustworthy snapshot. Re-run `pitstop scan`."));
+    }
+    if (o.stale)
+        contentParts.push("");
+    contentParts.push(...integrityParts, riskLine);
+    contentParts.push("", table.toString());
+    const content = contentParts.join("\n");
+    const color = o.blocked ? "red" : o.risk === "High" ? "red" : o.risk === "Medium" ? "yellow" : "green";
+    return {
+        text: content,
+        color,
+    };
+}
+export const verify = new Command("verify")
+    .description("Re-run tests/perf, diff against the last scan baseline, AND gate on the integrity diff since HEAD — " +
+    "SUSPICIOUS/CONFIRMED_CHEAT verifies exit 1/2 with 'BLOCKED — integrity violation'.")
+    .argument("[repo]", "path to the repo to verify", ".")
+    .action(async (repoArg) => {
+    const repo = path.resolve(repoArg);
+    console.log(chalk.cyan(`\nVerifying ${repo} ...\n`));
+    const outcome = await runVerify(repo);
+    if (outcome.missingBaseline) {
+        console.log(chalk.red("no baseline found — run `pitstop scan` first to create .pitstop/scan-latest.json"));
+        process.exitCode = 1;
+        return;
+    }
+    const { text, color } = renderVerifyBox(outcome);
+    console.log(boxen(text, {
+        title: " PITSTOP — Verify ",
+        titleAlignment: "center",
+        borderStyle: "double",
+        padding: 1,
+        borderColor: color,
+    }));
+    console.log(chalk.dim(`\nReport written to ${outcome.file}\n`));
+    const summary = outcome.blocked
+        ? `verify BLOCKED (integrity ${outcome.integrity.verdict})`
+        : `verify ${outcome.risk}: score ${outcome.currentScore.score}/100 (${outcome.currentScore.grade}) · tests ${signed(outcome.deltas.failed)} fail, bundle ${deltaBytes(outcome.deltas.bundleSizeBytes)}, security ${signed(outcome.deltas.security)}`;
+    addEntry(repo, {
+        type: "fix",
+        summary,
+        context: `verify against baseline ${outcome.baselineTimestamp} — integrity ${outcome.integrity.verdict}`,
+    });
+    process.exitCode = outcome.exitCode;
+});
+//# sourceMappingURL=verify.js.map

package/dist/commands/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/commands/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAgD,MAAM,gBAAgB,CAAC;AA8BnG;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,wEAAwE;QACxE,wDAAwD;QACxD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAEtB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC7D,YAAY,CAAC,IAAI,CAAC;QAClB,WAAW,CAAC,IAAI,CAAC;QACjB,eAAe,CAAC,IAAI,CAAC;QACrB,kBAAkB,CAAC,IAAI,CAAC;KACzB,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;QACD,IAAI,EAAE;YACJ,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC;QACD,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;QACrC,gBAAgB,EAAE,WAAW,CAAC,UAAU;KACzC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,cAA0B,EAC1B,OAAsB,EACtB,gBAAwB;IAExB,2EAA2E;IAC3E,uEAAuE;IACvE,+DAA+D;IAC/D,MAAM,MAAM,GAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,GAAG;YACb,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;YAC1B,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;SACjC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,GAAG;YACZ,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW;YACrC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe;SAC9C,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,SAAS,GAAgB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAClF,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,yCAAyC;SACvD,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;YACL,IAAI;YACJ,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE;gBACT,OAAO,EAAE,OAAO;gBAChB,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;aACnD;YACD,OAAO,EAAE,KAAK;YACd,OAAO,EAAE;gBACP,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;gBACxD,IAAI,EAAE,EAAE;gBACR,aAAa,EAAE,CAAC;gBAChB,gBAAgB,EAAE,CAAC;aACpB;YACD,QAAQ,EAAE;gBACR,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;gBACxD,IAAI,EAAE,EAAE;gBACR,aAAa,EAAE,CAAC;gBAChB,gBAAgB,EAAE,CAAC;aACpB;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,CAAC;gBACT,UAAU,EAAE,CAAC;gBACb,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,CAAC;gBACd,eAAe,EAAE,CAAC;gBAClB,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,CAAC;aACf;YACD,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YAC9E,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YAC7E,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEtC,0EAA0E;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,IAAI,UAAU,IAAI,MAAM,CAAC,OAAO,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;QAChE,SAAS;YACP,uBAAuB,OAAO,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,IAAI;gBACpF,4BAA4B,cAAc,CAAC,SAAS,gCAAgC;gBACpF,0DAA0D,CAAC;IAC/D,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,KAAK,EAAE,CAAC;IAE/B,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAEhD,0EAA0E;IAC1E,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GACX,SAAS,CAAC,OAAO,KAAK,YAAY,IAAI,SAAS,CAAC,OAAO,KAAK,iBAAiB,CAAC;IAChF,MAAM,gBAAgB,GAAG,OAAO;QAC9B,CAAC,CAAC,SAAS,CAAC,OAAO,KAAK,iBAAiB;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,CAAC,CAAC;IAEN,MAAM,aAAa,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,cAAc,CACjC,cAAc,EACd,OAAO,EACP,gBAAgB,CACjB,CAAC;IACF,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;IAE5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI;QACJ,iBAAiB,EAAE,cAAc,CAAC,SAAS;QAC3C,IAAI;QACJ,OAAO;QACP,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACxC,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI;QAC3F,QAAQ,EAAE,OAAO;YACf,CAAC,CAAC,SAAS,CAAC,OAAO,KAAK,iBAAiB;gBACvC,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,IAAI,KAAK,MAAM;gBACf,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC;QACP,SAAS;QACT,MAAM,EAAE,CAAC;QACT,QAAQ;QACR,OAAO;QACP,KAAK,EAAE;YACL,QAAQ,EAAE,aAAa,CAAC,KAAK;YAC7B,OAAO,EAAE,YAAY,CAAC,KAAK;YAC3B,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,YAAY,CAAC,KAAK;SAC1B;KACF,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,6BAA6B,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnG,OAAO;QACL,IAAI;QACJ,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,cAAc,CAAC,SAAS;QAC3C,QAAQ;QACR,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACxC,IAAI;QACJ,SAAS;QACT,OAAO;QACP,OAAO;QACP,QAAQ;QACR,MAAM,EAAE,CAAC;QACT,aAAa;QACb,YAAY;QACZ,UAAU;QACV,QAAQ,EAAE,OAAO;YACf,CAAC,CAAC,SAAS,CAAC,OAAO,KAAK,iBAAiB;gBACvC,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,IAAI,KAAK,MAAM;gBACf,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC;QACP,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,CAAU;IAC3B,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AACzD,CAAC;AACD,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;AACrC,CAAC;AACD,SAAS,MAAM,CAAC,CAAU;IACxB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC;AACD,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AAClC,CAAC;AACD,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1D,CAAC;AACD,SAAS,OAAO,CAAC,CAAS;IACxB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;AACtC,CAAC;AACD,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,EAA6B;IACjD,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CACd,0BAA0B,EAAE,CAAC,MAAM,IAAI,iBAAiB,GAAG;QACzD,aAAa,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,CAAgB;IACvC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,MAAM,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;IACtC,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IAEpC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC;QAC5C,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;KACtC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,CACV,IAAY,EACZ,OAAe,EACf,MAAc,EACd,QAAgB,EAChB,QAAgB,EAChB,cAAuB,EACvB,EAAE;QACF,MAAM,GAAG,GACP,QAAQ,KAAK,CAAC;YACZ,CAAC,CAAC,KAAK,CAAC,GAAG;YACX,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAC9C,CAAC,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACnH,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACpH,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/H,GAAG,CACD,UAAU,EACV,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC/B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC9B,CAAC,CAAC,QAAQ,EACV,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EACpB,IAAI,CACL,CAAC;IACF,GAAG,CACD,YAAY,EACZ,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAChC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAC/B,CAAC,CAAC,WAAW,EACb,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,EACtB,KAAK,CACN,CAAC;IACF,GAAG,CACD,aAAa,EACb,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,EACxC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EACvC,CAAC,CAAC,eAAe,EACjB,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,EAC7B,KAAK,CACN,CAAC;IACF,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/H,GAAG,CACD,oBAAoB,EACpB,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACjC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAChC,CAAC,CAAC,WAAW,EACb,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EACrB,KAAK,CACN,CAAC;IACF,GAAG,CACD,mBAAmB,EACnB,GAAG,aAAa,CAAC,KAAK,SAAS,aAAa,CAAC,KAAK,GAAG,EACrD,GAAG,YAAY,CAAC,KAAK,SAAS,YAAY,CAAC,KAAK,GAAG,EACnD,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,MAAM,EACjE,IAAI,CACL,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACnG,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,QAAQ,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC;IACxH,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,cAAc,CAAC,IAAI,CACjB,KAAK,CAAC,GAAG,CACP,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,KAAK;YAC1D,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,gBAAgB,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,aAAa,CAC9F,CACF,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,GAAG,GACP,CAAC,CAAC,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACrF,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpD,cAAc,CAAC,IAAI,CACjB,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EACxE,OAAO,CAAC,CAAC,QAAQ,EAAE,CACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE5C,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnD,YAAY,CAAC,IAAI,CACf,KAAK,CAAC,GAAG,CACP,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,yDAAyD;YACtF,0EAA0E,CAC7E,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,KAAK;QAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,YAAY,CAAC,IAAI,CAAC,GAAG,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC/C,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IACvG,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACxC,WAAW,CACV,sGAAsG;IACpG,oFAAoF,CACvF;KACA,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,EAAE,GAAG,CAAC;KACrD,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,EAAE;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,QAAQ,CAAC,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAC9F,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAEjD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,EAAE;QACV,KAAK,EAAE,oBAAoB;QAC3B,cAAc,EAAE,QAAQ;QACxB,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,KAAK;KACnB,CAAC,CACH,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAEhE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;QAC7B,CAAC,CAAC,6BAA6B,OAAO,CAAC,SAAS,CAAC,OAAO,GAAG;QAC3D,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,WAAW,OAAO,CAAC,YAAY,CAAC,KAAK,SAAS,OAAO,CAAC,YAAY,CAAC,KAAK,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvP,QAAQ,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,KAAK;QACX,OAAO;QACP,OAAO,EAAE,2BAA2B,OAAO,CAAC,iBAAiB,gBAAgB,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE;KACzG,CAAC,CAAC;IAEH,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;AACtC,CAAC,CAAC,CAAC"}

package/dist/commands/watch.d.ts

@@ -0,0 +1,10 @@
+import { Command } from "commander";
+/**
+ * `pitstop watch` — the live shield.
+ *
+ * Polls the working tree; the moment a file changes it runs the fast static
+ * pass and prints the score delta + any new security issues. A dev server's
+ * worth of feedback with a `try`-scan's worth of cost. Ctrl+C stops it.
+ */
+export declare const watch: Command;
+export default watch;

package/dist/commands/watch.js

@@ -0,0 +1,70 @@
+import { Command } from "commander";
+import chalk from "chalk";
+import path from "node:path";
+import { performance } from "node:perf_hooks";
+import { newestModifiedFile } from "../analyzers/util.js";
+import { tryScan } from "./try.js";
+import { persistScan } from "./scan.js";
+import { stampFindings } from "../repro/ids.js";
+import { correlate } from "../graph/correlate.js";
+import { computeScore } from "../report/score.js";
+/**
+ * `pitstop watch` — the live shield.
+ *
+ * Polls the working tree; the moment a file changes it runs the fast static
+ * pass and prints the score delta + any new security issues. A dev server's
+ * worth of feedback with a `try`-scan's worth of cost. Ctrl+C stops it.
+ */
+export const watch = new Command("watch")
+    .description("Live shield: poll the repo and re-run the fast static pass whenever a file changes, " +
+    "printing the score delta and any new security issues. Ctrl+C stops.")
+    .argument("[repo]", "path to the repo to watch (default: current dir)", ".")
+    .option("--interval <ms>", "poll interval in ms (default 10000)", "10000")
+    .action(async (repoArg, options) => {
+    const repo = path.resolve(repoArg);
+    const interval = Math.max(2000, Math.floor(Number(options.interval) || 10000));
+    let lastMtime = newestModifiedFile(repo)?.mtimeMs ?? 0;
+    let lastScore = null;
+    let lastSecrets = 0;
+    console.log(chalk.cyan(`\nWatching ${repo} (every ${interval}ms — Ctrl+C to stop)\n`));
+    const tick = async () => {
+        const now = newestModifiedFile(repo);
+        if (!now || now.mtimeMs === lastMtime)
+            return;
+        lastMtime = now.mtimeMs;
+        const changed = path.relative(repo, now.file).replace(/\\/g, "/");
+        const t0 = performance.now();
+        let line;
+        try {
+            const result = await tryScan(repo);
+            stampFindings(result);
+            result.clusters = correlate(repo, result).clusters;
+            persistScan(repo, result);
+            const sc = computeScore(result);
+            const secrets = result.security.status === "ok" ? result.security.issues.length : 0;
+            const newSecrets = secrets > lastSecrets ? ` · ${chalk.red(`+${secrets - lastSecrets} security`)}` : "";
+            const delta = lastScore != null
+                ? sc.score - lastScore >= 0
+                    ? chalk.green(`(+${sc.score - lastScore})`)
+                    : chalk.red(`(${sc.score - lastScore})`)
+                : "";
+            line = `${new Date().toISOString().slice(11, 19)} score ${sc.score}/100 (${sc.grade})${delta} · security ${secrets}${newSecrets} · changed ${changed} · ${Math.round(performance.now() - t0)}ms`;
+            lastScore = sc.score;
+            lastSecrets = secrets;
+        }
+        catch (err) {
+            line = `${new Date().toISOString().slice(11, 19)} scan failed on ${changed}: ${err.message}`;
+        }
+        console.log(line);
+    };
+    await new Promise((resolve) => {
+        const timer = setInterval(() => void tick(), interval);
+        process.on("SIGINT", () => {
+            clearInterval(timer);
+            console.log(chalk.dim("\nwatch stopped — baseline refreshed with every change."));
+            resolve();
+        });
+    });
+});
+export default watch;
+//# sourceMappingURL=watch.js.map

package/dist/commands/watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/commands/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KACtC,WAAW,CACV,sFAAsF;IACpF,qEAAqE,CACxE;KACA,QAAQ,CAAC,QAAQ,EAAE,kDAAkD,EAAE,GAAG,CAAC;KAC3E,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,EAAE,OAAO,CAAC;KACzE,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,OAA8B,EAAE,EAAE;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IAE/E,IAAI,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC;IACvD,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,WAAW,QAAQ,wBAAwB,CAAC,CAC1E,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO;QAC9C,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAElE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC;YACnD,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAE1B,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,MAAM,UAAU,GAAG,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,WAAW,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxG,MAAM,KAAK,GACT,SAAS,IAAI,IAAI;gBACf,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,SAAS,IAAI,CAAC;oBACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,GAAG,SAAS,GAAG,CAAC;oBAC3C,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,GAAG,SAAS,GAAG,CAAC;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC,KAAK,IAAI,KAAK,eAAe,OAAO,GAAG,UAAU,cAAc,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC;YACjM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC;YACrB,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,mBAAmB,OAAO,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC;QAC1G,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QACvD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC,CAAC;YAClF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,eAAe,KAAK,CAAC"}

package/dist/evidence.d.ts

@@ -0,0 +1,37 @@
+/**
+ * evidence.ts — OpenPitStop's tamper-evident evidence chain.
+ *
+ * Every scan/cluster/verify document OpenPitStop writes carries a deterministic
+ * cryptographic digest of its own content. If anyone edits the JSON after the
+ * fact — a score inflated, a finding deleted — the digest stops matching and
+ * OpenPitStop reports the chain as broken. No key material is involved: this is
+ * not "who signed this" but "not a byte changed since OpenPitStop wrote it",
+ * which is the property that makes agent report honesty checkable.
+ */
+export interface OpenPitStopEvidence {
+    scheme: "pitstop-canonical-sha256-v1";
+    /** sha256 hex over the canonical JSON of the document (evidence excluded). */
+    digest: string;
+    /** Human description of what the digest covers. */
+    of: string;
+    signedAt: string;
+}
+/** Canonical JSON: keys sorted recursively, no whitespace, floats verbatim. */
+export declare function canonicalize(value: unknown): string;
+export declare function digestOf(value: unknown): string;
+/** Attach a signed evidence block to a document (returns the document itself). */
+export declare function seal<T extends object>(doc: T, of: string): T & {
+    evidence: OpenPitStopEvidence;
+};
+export type EvidenceStatus = "verified" | "tampered" | "missing";
+export interface EvidenceCheck {
+    status: EvidenceStatus;
+    digest: string;
+    expected?: string;
+    reason?: string;
+}
+/**
+ * Recompute the digest over a sealed document (excluding its own evidence
+ * field) and compare against the claimed signature.
+ */
+export declare function checkEvidence(value: unknown): EvidenceCheck;

package/dist/evidence.js

@@ -0,0 +1,61 @@
+import { createHash } from "node:crypto";
+/** The evidence field itself is never part of the digest it protects. */
+const EXCLUDED_KEYS = new Set(["evidence"]);
+/** Canonical JSON: keys sorted recursively, no whitespace, floats verbatim. */
+export function canonicalize(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return "[" + value.map((v) => canonicalize(v)).join(",") + "]";
+    const obj = value;
+    const parts = [];
+    for (const key of Object.keys(obj).sort()) {
+        if (EXCLUDED_KEYS.has(key))
+            continue;
+        if (obj[key] === undefined)
+            continue; // JSON.stringify drops these on write
+        parts.push(JSON.stringify(key) + ":" + canonicalize(obj[key]));
+    }
+    return "{" + parts.join(",") + "}";
+}
+export function digestOf(value) {
+    return createHash("sha256").update(canonicalize(value), "utf8").digest("hex");
+}
+/** Attach a signed evidence block to a document (returns the document itself). */
+export function seal(doc, of) {
+    const evidence = {
+        scheme: "pitstop-canonical-sha256-v1",
+        digest: digestOf(doc),
+        of,
+        signedAt: new Date().toISOString(),
+    };
+    return { ...doc, evidence };
+}
+/**
+ * Recompute the digest over a sealed document (excluding its own evidence
+ * field) and compare against the claimed signature.
+ */
+export function checkEvidence(value) {
+    const ev = value?.evidence;
+    const digest = digestOf(value);
+    if (!ev || !ev.digest) {
+        return {
+            status: "missing",
+            digest,
+            reason: "document carries no OpenPitStop evidence block — written by a non-OpenPitStop tool or pre-0.6.0",
+        };
+    }
+    if (ev.scheme !== "pitstop-canonical-sha256-v1") {
+        return { status: "tampered", digest, expected: ev.digest, reason: `unrecognized scheme "${ev.scheme}"` };
+    }
+    if (digest !== ev.digest) {
+        return {
+            status: "tampered",
+            digest,
+            expected: ev.digest,
+            reason: "digest does not match document content — evidence was edited after OpenPitStop wrote it",
+        };
+    }
+    return { status: "verified", digest };
+}
+//# sourceMappingURL=evidence.js.map

package/dist/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../src/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAsBzC,yEAAyE;AACzE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAE5C,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACzF,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACrC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS,CAAC,sCAAsC;QAC5E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,IAAI,CAAmB,GAAM,EAAE,EAAU;IACvD,MAAM,QAAQ,GAAwB;QACpC,MAAM,EAAE,6BAA6B;QACrC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;QACrB,EAAE;QACF,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,OAAO,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,EAAE,GAAI,KAA4C,EAAE,QAAQ,CAAC;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM;YACN,MAAM,EAAE,iGAAiG;SAC1G,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,MAAM,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM;YACN,QAAQ,EAAE,EAAE,CAAC,MAAM;YACnB,MAAM,EAAE,yFAAyF;SAClG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC"}

package/dist/graph/correlate.d.ts

@@ -0,0 +1,7 @@
+import type { ScanResult, Cluster, ClusterFinding } from "../analyzers/types.js";
+/** Flatten Phase-1 results into a list of file-based findings. */
+export declare function collectFindings(repo: string, r: ScanResult): ClusterFinding[];
+export declare function correlate(repo: string, r: ScanResult): {
+    clusters: Cluster[];
+    findings: ClusterFinding[];
+};