plumbbob 0.6.6 → 0.8.3

package/hooks/pre-bash-commit.sh

@@ -0,0 +1,68 @@
+#!/bin/sh
+# pre-bash-commit.sh — the git-commit ask-hook (D66). PreToolUse on Bash: when a
+# step is in flight and the model reaches for a raw `git commit`, turn that commit
+# into a permission *question*, never a wall. checkpoint owns the landing (the latch
+# lives there); this only nudges the human to route through it. ALWAYS exits 0 and
+# never `deny`s — the human decides, C5 stays intact (D66). `plumbbob checkpoint`'s
+# own internal `git commit` spawn never passes through hooks, so nothing self-trips.
+
+# The repo root is the nearest ancestor with an active session — `.plumbbob/STATE`,
+# the sentinel `start` writes and `finish` removes. Present in both the tracked and
+# the `--local` layout (post-edit.sh only fires when STATE is non-empty, i.e. a
+# tracked build; this hook must guard `--local` steps too, so it probes existence).
+find_root() {
+  d=$(pwd -P)
+  while [ -n "$d" ]; do
+    if [ -f "$d/.plumbbob/STATE" ]; then
+      printf '%s' "$d"
+      return 0
+    fi
+    [ "$d" = "/" ] && break
+    d=$(dirname "$d")
+  done
+  return 1
+}
+
+root=$(find_root) || exit 0 # no active session here: nothing to guard
+
+# The in-flight signal is STEP (cleared when the step checkpoints): inside the
+# active build's folder when STATE names one, else the flat sidecar STEP of the
+# `--local` layout. STATE's content IS the cursor (D28) — read the first line, trim
+# whitespace, and treat the legacy `active` sentinel (pre-STATE-cursor) as no cursor.
+slug=$(head -n1 "$root/.plumbbob/STATE" 2>/dev/null | tr -d '[:space:]')
+[ "$slug" = "active" ] && slug=""
+if [ -n "$slug" ]; then
+  step_file="$root/.plumbbob/builds/$slug/STEP"
+else
+  step_file="$root/.plumbbob/STEP"
+fi
+[ -f "$step_file" ] || exit 0 # no step in flight: silent
+
+input=$(cat)
+cmd=$(printf '%s' "$input" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$cmd" ] && cmd=$(printf '%s' "$input" | sed -n 's/.*"command"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -n1)
+[ -z "$cmd" ] && exit 0
+
+# A command *mentioning* "git commit" is prose, not a commit — a grep pattern, an
+# echoed sentence, a checkpoint --body heredoc. Best-effort strip before matching:
+# drop heredoc bodies (everything below the first `<<` line; the operator line
+# itself still counts, so `git commit -F- <<MSG` is caught) and quoted string
+# contents. A real commit that follows a heredoc body in the same command slips
+# through unasked — acceptable for an affordance that never gates.
+stripped=$(printf '%s\n' "$cmd" |
+  awk '{ print } /<</ { exit }' |
+  sed -e "s/'[^']*'//g" -e 's/"[^"]*"//g')
+
+# Match a `git … commit` invocation: `git` as a command word (start or after a
+# non-word char), then — without crossing a shell separator (`&& || ; |`) — the
+# `commit` subcommand as a whole word. This clears `git status`/`git diff`/`git log`
+# (no `commit` word) and `git log --grep=commit` (`=commit`, no space before it),
+# while still catching `git -C path commit` and `git commit -m …`.
+printf '%s' "$stripped" |
+  grep -Eq '(^|[^[:alnum:]_])git[[:space:]]+([^&|;]*[[:space:]])?commit([[:space:]]|$)' || exit 0
+
+# A step is in flight and this is a raw commit: ask (never deny — the human decides).
+# The reason is static, so a plain printf of the literal JSON needs no escaping.
+printf '%s\n' '{"hookSpecificOutput": {"hookEventName": "PreToolUse", "permissionDecision": "ask", "permissionDecisionReason": "plumbbob: a step is in flight — checkpoint owns the landing. Approve only if you asked for this commit."}}'
+
+exit 0

package/node_modules/checkride/CHANGELOG.md

@@ -4,6 +4,114 @@ All notable changes to this project are documented here. The format is based on
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.0] - 2026-07-10
+
+### Added
+
+- **Vacuous-green signal.** `summary.json` gains a top-level `checks_run` count
+  of the checks that actually executed, so "green because everything passed" and
+  "green because nothing ran" are distinguishable by every consumer: `ok: true`
+  with `checks_run: 0` means nothing was verified. A zero-check run now prints a
+  loud warning naming why each slot sat out and how to enable it, and the new
+  `--strict` flag turns that case into exit 2 (for CI and commit-hook gates; the
+  default stays a warned exit 0 so exploring a fresh repo isn't punished).
+  `checks_run` is additive — `schema_version` is unchanged.
+- **A frozen, tested contract.** `docs/contract.md` declares the surfaces
+  consumers may rely on — the exit-code taxonomy, the `summary.json`
+  additive-only discipline, the CLI flags, the programmatic exports, and the
+  pre-1.0 exact-pin policy — each locked by a new `test/contract/` suite that
+  fails the build on drift. The summary shape ships as a published JSON Schema
+  (`schema/checkride.summary.schema.json`).
+- `DEFAULT_TIMEOUT_SECONDS` is now part of the public programmatic surface.
+- New docs: a copy-paste CI guide (`docs/ci.md`), a reliability article
+  (`docs/reliability.md`), and `CONTRIBUTING.md` with the release ritual and
+  succession path.
+
+### Changed
+
+- **Per-check timeouts are on by default** (600s; override per check or globally,
+  `0` to disable). A check that exceeds it is killed (SIGTERM → grace → SIGKILL)
+  and recorded as failed with a "timed out" note — a hung tool can no longer
+  hang the definition of done. Give long-running slots (`test`, `mutation`, …) a
+  higher cap or `0` on large repos.
+- Run artifacts (`summary.json`, the raw slot files, the digest, the baseline)
+  are written atomically (temp file then rename), so a run interrupted mid-write
+  never leaves a consumer a half-written file to parse.
+
+### Fixed
+
+- The supported Node floor is now stated consistently as `>=22.18` across the
+  docs; `docs/tools.md` and `docs/getting-started.md` previously claimed `>=24`,
+  contradicting `package.json` engines.
+
+### Internal
+
+- CI runs the full suite across macOS and Linux at the Node floor (22.18.0) and
+  current (24), and the e2e suite exercises all four package managers
+  (pnpm/npm/yarn/bun) plus an interrupted-run case. Releases now publish with npm
+  provenance, and the README wears the Stryker mutation score.
+
+## [0.2.1] - 2026-07-08
+
+### Fixed
+
+- Every `checkride init` scaffold shipped a `spell` check that failed out of the
+  box: the generated AGENTS.md contract stanza uses the word "baselined", but the
+  scaffolded `cspell.json` dictionary didn't include it, so a freshly generated
+  project's first `checkride` run exited non-zero.
+
+### Internal
+
+- Added a fast local guard (`generated-spell.test.ts`) that runs cspell against an
+  in-process `init` scaffold for each shape, catching this class of drift in
+  `pnpm check` instead of only in the slower end-to-end suite.
+
+## [0.2.0] - 2026-07-08
+
+### Added
+
+- **Baseline** — adopt checkride on an existing repo without turning it into a
+  cleanup project. `checkride baseline` records current diagnostics into a
+  committed `checkride.baseline.json`; a normal run then passes a slot as long as
+  only baselined findings remain, fails listing only genuinely new ones, and
+  *ratchets* the file smaller as findings are fixed — never larger, and never
+  pruned on a partial `--only`/`--skip`/`--changed` run. `checkride init
+  --baseline` grandfathers today's debt instead of disabling failing slots.
+  Grandfathered counts surface in `.check/summary.json` as an additive
+  `baselined` field.
+- **Package-manager-agnostic runs** — checkride detects pnpm, npm, yarn, or bun
+  (from the lockfile or the `packageManager` field) and translates each tool
+  invocation accordingly; the default pnpm behavior is byte-identical to before.
+  `doctor` reports the detected manager. The `security` audit stays pnpm-only
+  until per-manager adapters land.
+- **`checkride agent-setup`** plus an `init` Stop hook — both write an idempotent
+  Claude Code Stop hook to `.claude/settings.json` that runs the gate on the
+  *detected* package manager and blocks a stop while checks are red. `agent-setup`
+  also (re)writes the AGENTS.md contract stanza for a repo set up without a full
+  `init`. Both are opt-out with `--no-hook`.
+- **`format` slot** (opt-in) — a blessed `prettier` adapter (with `biome` as an
+  alternate) that runs before `lint` and is wired into `checkride fix`. Excluded
+  from the default run so upgrading never turns a repo red; `init` can enable it
+  for greenfield projects. The `order: "first"` custom-check hatch still works for
+  bespoke formatters.
+- **`publint` and `attw` slots** (opt-in) — library-publishing checks that make
+  "the published package is correct" part of the definition of done: `publint`
+  lints the `package.json` publishing surface, `attw` verifies types resolve
+  across module systems. Detect-gated so apps that never publish don't run them.
+- **Config presets via `extends`** — `checkride.config.json` accepts `"extends":
+  "<package-or-path>"` (string or array) to inherit a shared base; local keys win,
+  and a missing or circular extend fails with a friendly message.
+- **`--digest`** — writes a token-bounded Markdown excerpt of the failing slots to
+  `.check/digest.md`, each section pointing at the authoritative raw output, so
+  agents spend less context triaging failures on large repos. Absent on a green
+  run.
+- **Custom-check `detect` field** — a custom check can declare `detect:
+  ["<file>"]` so a shared preset skips it when the file is absent and activates it
+  when present, keeping one config safe across heterogeneous repos.
+- **Published JSON Schema** — `schema/checkride.config.schema.json` describes the
+  full config surface and ships in the package; `init` writes a version-pinned
+  `$schema` pointer into generated configs for editor validation.
+
 ## [0.1.6] - 2026-06-30
 
 ### Added
@@ -130,6 +238,9 @@ The first real release. (`0.0.0` was a name-claim placeholder.)
 - Flags: `--only`, `--skip`, `--bail`, `--json`, `--changed`, `--all`,
   `--include`.
 
+[0.3.0]: https://www.npmjs.com/package/checkride/v/0.3.0
+[0.2.1]: https://www.npmjs.com/package/checkride/v/0.2.1
+[0.2.0]: https://www.npmjs.com/package/checkride/v/0.2.0
 [0.1.6]: https://www.npmjs.com/package/checkride/v/0.1.6
 [0.1.5]: https://www.npmjs.com/package/checkride/v/0.1.5
 [0.1.4]: https://www.npmjs.com/package/checkride/v/0.1.4

package/node_modules/checkride/README.md

@@ -35,17 +35,28 @@ pnpm exec checkride init   # set up a project (new or existing, auto-detected)
 ```
 
 `init` writes a `"check": "checkride"` alias, so daily usage is `pnpm check`
-regardless of the tool's name.
+regardless of the tool's name. It also writes the agent contract: an AGENTS.md
+stanza (the "exit 0 = done" rule) and a Claude Code **Stop hook** in
+`.claude/settings.json` that blocks an agent from finishing while the pipeline is
+red. The hook uses your detected package manager (`pnpm`/`npm`/`yarn`/`bun run
+check`); skip it with `--no-hook`, or add both to a repo you already set up with
+`checkride agent-setup`.
 
 ## Commands
 
 ```text
 checkride              Run the default checks. Exit 0 pass / 1 fail / 2 error.
   --only <a,b>  --skip <a,b>  --bail  --json  --changed  --all  --include <a,b>
+  --digest  --strict (zero checks running = exit 2 — use wherever checkride gates)
 checkride init         Set up a project (new or existing — auto-detected).
   --shape flat|monorepo|hybrid  --name <n>  --scope <@s>  --license <id>  --dry-run
+  --baseline   (existing mode) grandfather current debt instead of disabling slots
+  --no-hook    skip writing the Claude Code Stop hook
 checkride doctor       Verify environment + every slot's status (read-only, exit 0/1).
 checkride fix          Run every active adapter's fix command (oxlint --fix, ...).
+checkride baseline     Record current diagnostics as a committed baseline.
+checkride agent-setup  Add the AGENTS.md stanza + Claude Code Stop hook to a repo.
+  --no-hook    skip the Stop hook (write only the stanza)
 ```
 
 During iteration, narrow the loop: `checkride --bail`, `checkride --only
@@ -66,6 +77,7 @@ generates config for the blessed default.
 | Slot       | Role                                   | Blessed default     | Alternates       |
 | ---------- | -------------------------------------- | ------------------- | ---------------- |
 | `types`    | Type checking                          | `tsc --build`       | —                |
+| `format`   | Formatting (opt-in)                    | `prettier`          | `biome`          |
 | `lint`     | Linting                                | `oxlint`            | `biome`, `eslint`|
 | `struct`   | Structural rules (deep modules)        | `ast-grep`          | —                |
 | `dead`     | Dead code, deps, cycles, boundaries    | `fallow`            | `knip`           |
@@ -75,16 +87,47 @@ generates config for the blessed default.
 | `spell`    | Spelling                               | `cspell`            | —                |
 | `mutation` | Mutation testing (opt-in)              | `stryker`           | —                |
 | `security` | Dependency audit (opt-in)              | `pnpm audit`        | —                |
+| `publint`  | Package publishing lint (opt-in)       | `publint`           | —                |
+| `attw`     | Type resolution across module systems (opt-in) | `attw --pack`| —                |
 
 Zero-config: for each slot, checkride runs the first adapter whose config file
 exists, and skips slots with no detected tool. The core has **no runtime
-dependency** on any checked tool — it spawns `pnpm exec <tool>`; the project
+dependency** on any checked tool — it spawns `<pm> exec <tool>`; the project
 owns the pinned tool versions.
 
+**Opt-in slots** (`format`, `mutation`, `security`, `publint`, `attw`) stay out of the
+default run so adopting checkride — or bumping its version — never turns a repo red on a
+check it didn't ask for. Turn one on with `--include <slot>` (or `--all`), or by **naming
+it in `checks`**: an explicit entry like `"format": "prettier"` opts the slot into every
+run. `checkride fix` then runs its write form (e.g. `prettier --write`) alongside the
+other fixers. `format` sits before `lint` so the tree is tidy before the linters look.
+
+`publint` and `attw` are the **library-publishing** pair — turn them on for a package you
+ship to npm to make "the published artifact is correct" part of your definition of done.
+`publint` lints `package.json`'s publishing surface (exports, files, types); `attw` runs
+`attw --pack` to check that your types resolve under every module system (`--format json`,
+captured to `.check/attw.json`). Both stay opt-in so apps that never publish don't run
+them.
+
+### Package managers
+
+checkride is package-manager-agnostic. It detects the repo's package manager
+from the `packageManager` field or the lockfile (`pnpm-lock.yaml`,
+`package-lock.json`, `yarn.lock`, `bun.lock`), defaulting to **pnpm**, and
+translates each adapter's canonical `pnpm exec <tool>` into that manager's form
+(`npx`, `yarn`, or `bunx`). The default pnpm run is unchanged; `doctor` reports
+the detected manager. One exception: the opt-in `security` slot is `pnpm audit`,
+whose flags and JSON shape are pnpm-specific, so it is **unavailable on a
+non-pnpm manager** until a per-manager audit adapter lands.
+
 ## The `.check/` contract
 
-Every run writes to `.check/`. This is a public API for agents; treat schema
-changes as breaking.
+Every run writes to `.check/`. This is a public API for agents — the promised
+surfaces (exit codes, summary shape, flags, exports) are spelled out in
+[docs/contract.md](./docs/contract.md) and locked by a `test/contract/` suite.
+The summary shape is published as a JSON Schema at
+[`schema/checkride.summary.schema.json`](./schema/checkride.summary.schema.json);
+fields are additive-only under a given `schema_version`.
 
 - `summary.json` — the aggregate report:
 
@@ -93,6 +136,7 @@ changes as breaking.
     "schema_version": 1,
     "timestamp": "…",
     "ok": true,
+    "checks_run": 8, // checks that actually executed; 0 + ok = vacuous green
     "total_duration_ms": 4200,
     "checks": [
       { "name": "lint", "adapter": "oxlint", "description": "…",
@@ -101,12 +145,32 @@ changes as breaking.
   }
   ```
 
+  `ok: true` with `checks_run: 0` means **nothing was verified** — every slot
+  sat out (no tool detected, disabled, or skipped). The run warns loudly on
+  stderr when that happens, and `--strict` turns it into exit 2, so a gate can
+  never mistake "nothing ran" for "everything passed". Anything that gates on
+  checkride (CI, commit hooks) should pass `--strict`.
+
 - `<slot>.json` — the raw tool JSON when stdout parses as JSON; otherwise
   `<slot>.stdout.txt` / `<slot>.stderr.txt`. Tools that write their own files
   (vitest `--outputFile`, stryker) keep doing so.
 
+When a [baseline](#baseline) masks a slot's findings, that check gains an additive
+`"baselined": <n>` field counting the grandfathered diagnostics; it is absent on
+runs with no baseline, so `schema_version` is unchanged.
+
+- `digest.md` — written only under `--digest`: a **token-bounded** Markdown
+  excerpt of the *failing* slots, so an agent working through a big red repo
+  reads a capped index instead of every raw file. Each section lists the first few
+  findings (reusing the baseline fingerprint extractors, or a tail of raw text
+  for slots without one) and links the authoritative `.check/<slot>.json`, which
+  is never modified. It **truncates, never normalizes**; a green run leaves no
+  digest (any stale one is removed), so its presence always means "this run
+  failed". It is a file, never stdout — the machine-output split holds.
+
 To debug a failure: read `summary.json` to find the failing slot, then read that
-slot's raw output for structured diagnostics.
+slot's raw output for structured diagnostics. On a large repo, `--digest` writes
+`digest.md` as a capped starting point.
 
 ## Configuration
 
@@ -114,14 +178,17 @@ slot's raw output for structured diagnostics.
 
 ```jsonc
 {
-  "timeout": 600,           // global per-check timeout in seconds (off by default)
+  "$schema": "https://raw.githubusercontent.com/robmclarty/checkride/v0.2.1/schema/checkride.config.schema.json",
+  "extends": "@acme/checkride-preset", // inherit a shared preset, then override below
+  "timeout": 1200,          // global per-check timeout in seconds (default: 600)
   "checks": {
+    "format": "prettier",   // enable the opt-in format slot (blessed: prettier)
     "lint": "biome",        // pick an alternate adapter
     "spell": false,         // disable a slot
     "test": { "use": "vitest", "timeout": 0, "changedArgs": ["--changed", "origin/master"] },
-    "format": {             // a custom check that runs FIRST, ahead of the built-ins
+    "tidy": {           // a bespoke custom check that runs FIRST, ahead of the built-ins
       "command": "pnpm",
-      "args": ["exec", "biome", "format", "--write"],
+      "args": ["exec", "some-formatter", "--write"],
       "order": "first"
     },
     "licenses": {           // a custom check (runs last by default)
@@ -132,19 +199,101 @@ slot's raw output for structured diagnostics.
 }
 ```
 
+The `"$schema"` pointer is optional but recommended: it turns on validation and
+autocompletion for `checkride.config.json` in editors that understand JSON
+Schema (VS Code and friends). `checkride init` writes a version-pinned pointer
+into the config it generates; the schema itself ships in the package at
+[`schema/checkride.config.schema.json`](./schema/checkride.config.schema.json).
+
+Use `"extends"` to inherit a shared preset — a file path (`"./base.json"`) or an
+installed package (`"@acme/checkride-preset"`), or an array of them to layer
+several. Bases merge left to right and your local config wins over all of them:
+objects deep-merge (so overriding one field of a check keeps the rest), while
+arrays and scalars replace outright — arrays are **not** concatenated. Pair it
+with `detect` above to publish one org-wide preset that stays safe across repos
+that don't all use the same tools. An `extends` that can't be found, or a config
+that extends itself in a loop, fails fast with
+`invalid checkride.config.json: <reason>`.
+
 A custom check (one keyed by a name that isn't a built-in slot) runs *after* the
 built-in catalogue by default. Set `"order": "first"` to run it ahead of every
-built-in check instead — handy for a formatter like `biome format --write` that
-should normalize the tree before the linters and tests look at it. `"order":
-"last"` is the explicit form of the default. Within each group, custom checks
-run in the order they appear in the config.
-
-A per-check timeout guards against a hung tool. It is **off by default** — a cap
-short enough to catch a hang on a small repo is short enough to kill a legitimate
-slow run on a large one, and CI job timeouts already bound true hangs. Set a
-global `timeout` (seconds) to opt in, override it per check (`"timeout": <n>`),
-and use `"timeout": 0` to exempt a slot. Leave `dead`, `test`, and `mutation`
-generous or uncapped — they legitimately run long.
+built-in check instead — handy for a **bespoke** formatter that should normalize
+the tree before the linters and tests look at it. `"order": "last"` is the explicit
+form of the default. Within each group, custom checks run in the order they appear
+in the config.
+
+For formatting, the blessed `format` slot (prettier, or biome) is the paved road —
+enable it with `"format": "prettier"` and `checkride fix` writes formatting for you.
+The `order: "first"` custom-check hatch coexists with it, for a one-off formatter the
+slot doesn't cover; the slot didn't retire it.
+
+Add `"detect": ["<file>", …]` to a custom check to gate it on marker files: it
+runs only when at least one listed file exists in the repo, and is skipped —
+skipped, not failed — otherwise. This keeps a shared config safe across repos
+that don't all use the same tools: a check for a tool a given repo lacks quietly
+stands down instead of lighting up red. `detect` applies only to custom checks
+that run alongside the catalogue; a custom check that fills a built-in slot
+always runs.
+
+A per-check timeout guards against a hung tool, and it is **on by default**: a
+definition-of-done gate that can hang forever fails its one job on the worst
+day. The default cap is a generous **600 seconds per check**; a check that hits
+it gets SIGTERM (then SIGKILL after a short grace) and is recorded as failed
+with a `timed out after 600s` note — red, never vacuous. Tune it with a global
+`timeout` (seconds), override it per check (`"timeout": <n>`), or set
+`"timeout": 0` (globally or per check) to disable the cap. Give `dead`, `test`,
+and `mutation` a higher cap — or `0` — on a large repo where they legitimately
+run long.
+
+## Baseline
+
+Adopting checkride on an existing repo shouldn't be a cleanup project. A
+**baseline** grandfathers the diagnostics a repo has *today* so day-one runs pass,
+while any *new* diagnostic still fails — "don't make it worse" as the definition of
+done for legacy code.
+
+```bash
+checkride baseline        # record current diagnostics into checkride.baseline.json
+```
+
+`checkride.baseline.json` lives at the repo root beside `checkride.config.json` and
+**is committed** — it must be in version control to work. It records a per-slot set
+of stable *fingerprints* (a `file:rule:message` key that survives line moves), not
+raw output:
+
+```jsonc
+{
+  "schema_version": 1,
+  "slots": {
+    "lint":  ["src/legacy.ts:no-explicit-any:Unexpected any"],
+    "spell": ["docs/old.md::teh"]
+  }
+}
+```
+
+Once it exists, every normal run is **baseline-aware**:
+
+- Each slot's current findings have the grandfathered ones subtracted. A slot is
+  **green when only baselined findings remain**, and **fails listing only the new
+  ones** — the raw `.check/<slot>.json` still holds everything, and the failing
+  check gains a `"baselined": <n>` count.
+- The baseline is a **ratchet**: fixing a grandfathered finding prunes it from the
+  file (it only ever shrinks), so debt can't silently creep back. A partial run
+  (`--only`, `--skip`, `--changed`, or a `--bail` that stops early) never prunes —
+  it can't tell an unobserved finding from a fixed one, so it leaves the baseline
+  untouched.
+- Never add to the baseline to make a check pass; fix the finding, or re-run
+  `checkride baseline` deliberately to re-grandfather.
+
+Only slots whose tool has a fingerprint extractor participate (currently `lint` via
+oxlint, `struct` via ast-grep, `spell` via cspell); other slots (`types`, `dead`,
+`test`, …) never appear in the baseline. A crash or empty output is never masked —
+a slot only goes green when there are findings and all of them are grandfathered.
+
+To adopt on an existing repo, `checkride init --baseline` grandfathers today's
+failing (fingerprintable) slots into the baseline and keeps them enabled, instead of
+writing them off as `false`; a failing slot with no extractor still falls back to a
+disable.
 
 ## Project shapes
 
@@ -171,7 +320,23 @@ Module boundaries, enforced by `ast-grep` and `fallow`:
 - Named exports only; no classes; `.js` extensions on relative imports
   (NodeNext); tests colocated with the code they cover.
 
-See [AGENTS.md](./AGENTS.md) for the contract agents follow, and
+## Tested envelope
+
+Every push runs the full suite — unit, contract, and end-to-end (generated
+projects, installed and checked for real) — on **macOS and Linux**, at **Node
+22.18.0 (the exact supported floor) and Node 24**, and the e2e suite exercises
+the full package-manager quartet: **pnpm, npm, yarn, and bun**. Windows is not
+tested and not claimed; it waits for a real consumer who needs it.
+
+The promised surfaces (exit codes, `summary.json` shape, flags, exports) are
+locked by a dedicated [contract suite](./test/contract/) — see
+[docs/contract.md](./docs/contract.md). Beyond line coverage (enforced at 70%),
+the test suite is itself tested: Stryker mutation testing runs with a hard
+floor of 55; the current mutation score is **67%** (`pnpm mutation` to
+reproduce).
+
+See [AGENTS.md](./AGENTS.md) for the contract agents follow,
+[CONTRIBUTING.md](./CONTRIBUTING.md) for the release ritual, and
 [CHANGELOG.md](./CHANGELOG.md) for release notes.
 
 ## License

package/node_modules/checkride/dist/adapters.d.ts

@@ -6,8 +6,9 @@
  * data only: no logic lives here. Resolution (config vs detection) lives in
  * `../config`, and execution lives in `../orchestrator`.
  *
- * Phase 1 ships the blessed defaults plus the two opt-in slots. Alternates
- * (biome, knip, eslint, jest) land in Phase 2.
+ * Phase 1 ships the blessed defaults plus the opt-in slots (format, mutation,
+ * security, and the library-publishing pair publint + attw). Alternates (biome,
+ * knip, eslint, jest) land in Phase 2.
  */
 /** The aggregate-report schema version written to `.check/summary.json`. */
 export declare const SCHEMA_VERSION = 1;
@@ -15,7 +16,11 @@ export declare const SCHEMA_VERSION = 1;
 export type Slot = {
     /** Stable slot name, e.g. `'lint'`. Used by `--only`/`--skip` and the report. */
     name: string;
-    /** Opt-in slots are excluded from the default run (need `--all`/`--include`). */
+    /**
+     * Opt-in slots are excluded from the default run. Enable one with
+     * `--all`/`--include <slot>`, or by naming it in `checks` (an explicit config
+     * entry opts you in — see `resolveChecks`/`selectChecks`).
+     */
     optIn?: boolean;
 };
 /** A concrete tool that can fill a slot. */
@@ -38,7 +43,7 @@ export type Adapter = {
     changedArgs?: string[];
     /** Used by `checkride fix`. */
     fixArgs?: string[];
-    /** Per-check timeout in seconds; `0` disables the cap. Falls back to the config-level `timeout`. */
+    /** Per-check timeout in seconds; `0` disables the cap. Falls back to the config-level `timeout`, then the built-in 600s default. */
     timeout?: number;
     /** In-process check id (e.g. `'links'`); when set, the orchestrator runs it directly. */
     builtin?: string;

package/node_modules/checkride/dist/adapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,8BAA8B;AAC9B,MAAM,MAAM,IAAI,GAAG;IACjB,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,OAAO,GAAG;IACpB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,qFAAqF;IACrF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,oGAAoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,KAAK,EAAE,SAAS,IAAI,EAWhC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EA0LtC,CAAC"}
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,8BAA8B;AAC9B,MAAM,MAAM,IAAI,GAAG;IACjB,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,OAAO,GAAG;IACpB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,qFAAqF;IACrF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,oIAAoI;IACpI,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,KAAK,EAAE,SAAS,IAAI,EAchC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EAkPtC,CAAC"}

package/node_modules/checkride/dist/adapters.js

@@ -6,14 +6,16 @@
  * data only: no logic lives here. Resolution (config vs detection) lives in
  * `../config`, and execution lives in `../orchestrator`.
  *
- * Phase 1 ships the blessed defaults plus the two opt-in slots. Alternates
- * (biome, knip, eslint, jest) land in Phase 2.
+ * Phase 1 ships the blessed defaults plus the opt-in slots (format, mutation,
+ * security, and the library-publishing pair publint + attw). Alternates (biome,
+ * knip, eslint, jest) land in Phase 2.
  */
 /** The aggregate-report schema version written to `.check/summary.json`. */
 export const SCHEMA_VERSION = 1;
 /** Pipeline order. Cheapest first so `--bail` fails fast. */
 export const SLOTS = [
     { name: 'types' },
+    { name: 'format', optIn: true },
     { name: 'lint' },
     { name: 'struct' },
     { name: 'dead' },
@@ -23,6 +25,8 @@ export const SLOTS = [
     { name: 'spell' },
     { name: 'mutation', optIn: true },
     { name: 'security', optIn: true },
+    { name: 'publint', optIn: true },
+    { name: 'attw', optIn: true },
 ];
 /**
  * Adapter registry. The FIRST adapter for a slot is its blessed default: it
@@ -40,6 +44,42 @@ export const ADAPTERS = [
         outputFile: null,
         devDeps: { typescript: '6.0.3', '@types/node': '22.20.0' },
     },
+    {
+        name: 'prettier',
+        slot: 'format',
+        description: 'Prettier formatting check',
+        detect: [
+            '.prettierrc',
+            '.prettierrc.json',
+            '.prettierrc.yml',
+            '.prettierrc.yaml',
+            '.prettierrc.json5',
+            '.prettierrc.js',
+            '.prettierrc.cjs',
+            '.prettierrc.mjs',
+            '.prettierrc.toml',
+            'prettier.config.js',
+            'prettier.config.cjs',
+            'prettier.config.mjs',
+            'prettier.config.ts',
+        ],
+        command: 'pnpm',
+        args: ['exec', 'prettier', '--check', '.'],
+        outputFile: null,
+        fixArgs: ['exec', 'prettier', '--write', '.'],
+        devDeps: { prettier: '3.6.2' },
+    },
+    {
+        name: 'biome-format',
+        slot: 'format',
+        description: 'Biome formatting check',
+        detect: ['biome.json', 'biome.jsonc'],
+        command: 'pnpm',
+        args: ['exec', 'biome', 'format', '.'],
+        outputFile: null,
+        fixArgs: ['exec', 'biome', 'format', '--write', '.'],
+        devDeps: { '@biomejs/biome': '2.2.4' },
+    },
     {
         name: 'oxlint',
         slot: 'lint',
@@ -215,5 +255,25 @@ export const ADAPTERS = [
         outputFile: 'security.json',
         devDeps: {},
     },
+    {
+        name: 'publint',
+        slot: 'publint',
+        description: 'publint: package.json publishing correctness',
+        detect: [],
+        command: 'pnpm',
+        args: ['exec', 'publint'],
+        outputFile: null,
+        devDeps: { publint: '0.3.21' },
+    },
+    {
+        name: 'attw',
+        slot: 'attw',
+        description: 'Are the types wrong? (type resolution across module systems)',
+        detect: [],
+        command: 'pnpm',
+        args: ['exec', 'attw', '--pack', '.', '--format', 'json'],
+        outputFile: 'attw.json',
+        devDeps: { '@arethetypeswrong/cli': '0.18.4' },
+    },
 ];
 //# sourceMappingURL=adapters.js.map

package/node_modules/checkride/dist/adapters.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAsChC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,KAAK,GAAoB;IACpC,EAAE,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,MAAM,EAAE;IAChB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAClB,EAAE,IAAI,EAAE,MAAM,EAAE;IAChB,EAAE,IAAI,EAAE,MAAM,EAAE;IAChB,EAAE,IAAI,EAAE,MAAM,EAAE;IAChB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;IACjC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;CAClC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAuB;IAC1C;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,gEAAgE;QAC7E,MAAM,EAAE,CAAC,eAAe,CAAC;QACzB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;QAChC,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE;KAC3D;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,uCAAuC;QACpD,MAAM,EAAE,CAAC,gBAAgB,CAAC;QAC1B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC;QACzD,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC;QACpD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE;KAC3D;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,2BAA2B;QACxC,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QACrC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC;QACnD,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;QAC9C,OAAO,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE;KACvC;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE;YACN,kBAAkB;YAClB,mBAAmB;YACnB,mBAAmB;YACnB,kBAAkB;YAClB,gBAAgB;YAChB,eAAe;YACf,cAAc;SACf;QACD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC;QACjD,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACzC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;KAC9B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,6BAA6B;QAC1C,MAAM,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;QACzC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,CAAC;QACpD,UAAU,EAAE,aAAa;QACzB,OAAO,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE;KACvC;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,gEAAgE;QAC7E,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC;QAC5C,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;QAClC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;KAC9B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,CAAC;QACrF,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC;QAC5C,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;QAClC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC5B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,4BAA4B;QACzC,MAAM,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,CAAC;QAC1F,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,MAAM,EAAE,QAAQ,EAAE,KAAK;YACvB,YAAY;YACZ,oBAAoB;YACpB,iBAAiB;YACjB,+BAA+B;SAChC;QACD,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;QACzC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE;KAC7D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE;YACN,gBAAgB;YAChB,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,kBAAkB;SACnB;QACD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,+BAA+B,CAAC;QACzE,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,CAAC,gBAAgB,EAAE,aAAa,CAAC;QAC9C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC5B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE;YACN,0BAA0B;YAC1B,yBAAyB;YACzB,yBAAyB;YACzB,wBAAwB;YACxB,wBAAwB;SACzB;QACD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,mBAAmB,CAAC;QACnC,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC;QAC/C,OAAO,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE;KAC3C;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE;YACN,aAAa;YACb,cAAc;YACd,oBAAoB;YACpB,oBAAoB;YACpB,mBAAmB;YACnB,mBAAmB;SACpB;QACD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,CAAC;QAC/E,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;KAC9B;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,wCAAwC;QACrD,MAAM,EAAE,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,iBAAiB,CAAC;QAC7F,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC;QAChC,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE;YACP,uBAAuB,EAAE,OAAO;YAChC,gCAAgC,EAAE,OAAO;SAC1C;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,+BAA+B;QAC5C,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,CAAC;QAC/C,UAAU,EAAE,eAAe;QAC3B,OAAO,EAAE,EAAE;KACZ;CACF,CAAC"}
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AA0ChC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,KAAK,GAAoB;IACpC,EAAE,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;IAC/B,EAAE,IAAI,EAAE,MAAM,EAAE;IAChB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAClB,EAAE,IAAI,EAAE,MAAM,EAAE;IAChB,EAAE,IAAI,EAAE,MAAM,EAAE;IAChB,EAAE,IAAI,EAAE,MAAM,EAAE;IAChB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;IACjC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;IACjC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE;IAChC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE;CAC9B,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAuB;IAC1C;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,gEAAgE;QAC7E,MAAM,EAAE,CAAC,eAAe,CAAC;QACzB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;QAChC,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE;KAC3D;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,2BAA2B;QACxC,MAAM,EAAE;YACN,aAAa;YACb,kBAAkB;YAClB,iBAAiB;YACjB,kBAAkB;YAClB,mBAAmB;YACnB,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,kBAAkB;YAClB,oBAAoB;YACpB,qBAAqB;YACrB,qBAAqB;YACrB,oBAAoB;SACrB;QACD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC;QAC1C,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC;QAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,wBAAwB;QACrC,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QACrC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC;QACtC,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC;QACpD,OAAO,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE;KACvC;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,uCAAuC;QACpD,MAAM,EAAE,CAAC,gBAAgB,CAAC;QAC1B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC;QACzD,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC;QACpD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE;KAC3D;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,2BAA2B;QACxC,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QACrC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC;QACnD,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;QAC9C,OAAO,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE;KACvC;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE;YACN,kBAAkB;YAClB,mBAAmB;YACnB,mBAAmB;YACnB,kBAAkB;YAClB,gBAAgB;YAChB,eAAe;YACf,cAAc;SACf;QACD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC;QACjD,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACzC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;KAC9B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,6BAA6B;QAC1C,MAAM,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;QACzC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,CAAC;QACpD,UAAU,EAAE,aAAa;QACzB,OAAO,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE;KACvC;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,gEAAgE;QAC7E,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC;QAC5C,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;QAClC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;KAC9B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,CAAC;QACrF,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC;QAC5C,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;QAClC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC5B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,4BAA4B;QACzC,MAAM,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,CAAC;QAC1F,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,MAAM,EAAE,QAAQ,EAAE,KAAK;YACvB,YAAY;YACZ,oBAAoB;YACpB,iBAAiB;YACjB,+BAA+B;SAChC;QACD,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;QACzC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE;KAC7D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE;YACN,gBAAgB;YAChB,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,kBAAkB;SACnB;QACD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,+BAA+B,CAAC;QACzE,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,CAAC,gBAAgB,EAAE,aAAa,CAAC;QAC9C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC5B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE;YACN,0BAA0B;YAC1B,yBAAyB;YACzB,yBAAyB;YACzB,wBAAwB;YACxB,wBAAwB;SACzB;QACD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,mBAAmB,CAAC;QACnC,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC;QAC/C,OAAO,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE;KAC3C;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE;YACN,aAAa;YACb,cAAc;YACd,oBAAoB;YACpB,oBAAoB;YACpB,mBAAmB;YACnB,mBAAmB;SACpB;QACD,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,CAAC;QAC/E,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;KAC9B;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,wCAAwC;QACrD,MAAM,EAAE,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,iBAAiB,CAAC;QAC7F,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC;QAChC,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE;YACP,uBAAuB,EAAE,OAAO;YAChC,gCAAgC,EAAE,OAAO;SAC1C;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,+BAA+B;QAC5C,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,CAAC;QAC/C,UAAU,EAAE,eAAe;QAC3B,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QACzB,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,8DAA8D;QAC3E,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC;QACzD,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE;KAC/C;CACF,CAAC"}