plumbbob 0.9.3 → 0.9.5

package/node_modules/checkride/dist/pm/tools.js

@@ -0,0 +1,124 @@
+/**
+ * Slot-tool resolution — where a check's tool has to be for the gate to run it,
+ * and how to install it when it isn't.
+ *
+ * `translate.ts` decides *how* a tool is spawned; this decides *whether it may
+ * be*. The two are deliberately separate. `--no-install` bounds the download
+ * but not the launcher's per-user cache, so the spawn alone cannot promise the
+ * tool came from this repo: a copy an unrelated `npx` left behind months ago
+ * satisfies the launcher just as well as a declared dependency. Resolving the
+ * binary in the local tree first is what makes a slot's verdict depend on the
+ * committed lockfile rather than on one machine's accumulated cache — the
+ * property that lets a green run mean the same thing locally and in CI.
+ */
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { LOCKFILE_NAMES } from './detect.js';
+/**
+ * The `<tool>` in a canonical `pnpm exec <tool> …` adapter invocation, or `null`
+ * for anything else — `pnpm audit`, `pnpm run <script>`, a built-in, or a config
+ * custom check's own command. Those either have no tool to resolve or resolve it
+ * themselves, so they are never pre-flighted.
+ *
+ * This is the same prefix test {@link translateExec} keys on, named once so the
+ * run path, the fix path and `doctor` cannot drift on what counts as a tool.
+ */
+export function execTool(command, args) {
+    if (command !== 'pnpm' || args[0] !== 'exec')
+        return null;
+    return args[1] ?? null;
+}
+/**
+ * How each PM installs a tool as a dev dependency — the remediation a missing
+ * tool points at. `bun` spells the flag `-d`; the rest take `-D`.
+ */
+const INSTALL = {
+    pnpm: 'pnpm add -D',
+    npm: 'npm install -D',
+    yarn: 'yarn add -D',
+    bun: 'bun add -d',
+};
+/** The command that would declare `tool` as a dev dependency under `pm`. */
+export function installCommand(pm, tool) {
+    return `${INSTALL[pm]} ${tool}`;
+}
+/**
+ * What marks the top of a repository: its VCS directory, or a lockfile. `.git`
+ * is a file rather than a directory inside a worktree, which `existsSync`
+ * answers the same either way.
+ */
+const ROOT_MARKERS = ['.git', ...LOCKFILE_NAMES];
+/** Is `dir` the top of a repository — the last directory a tool search may look in? */
+function isRepoRoot(dir, exists) {
+    return ROOT_MARKERS.some((m) => exists(join(dir, m)));
+}
+/**
+ * Find `tool`'s binary in the local tree, walking `cwd` upward the way the
+ * package managers themselves do — and stopping at the repo root.
+ *
+ * The walk is what makes this correct in a workspace: pnpm and npm both hoist a
+ * shared tool's bin to the workspace root, so a check running in
+ * `packages/web` finds it two directories up and a root-only check finds it
+ * immediately. Checking `cwd` alone would report every hoisted tool missing in
+ * every monorepo — which is most of the repos with a workspace preset.
+ *
+ * The boundary matters as much as the walk. An unbounded search would accept a
+ * `node_modules/.bin/<tool>` sitting in some parent of the checkout — a stray
+ * install in a home or projects directory — and that is the same defect as
+ * trusting the launcher cache, reached by a different route: the slot passes for
+ * whoever happens to have that directory above their clone and fails on the
+ * clean checkout. Stopping at the root keeps the verdict a property of the repo.
+ * The root itself is searched before the walk ends; a tree with no marker at all
+ * (a synthetic one, or a directory outside any repo) walks to the filesystem
+ * root as before.
+ *
+ * `exists` is injected so the walk is testable against a synthetic tree.
+ */
+export function resolveSlotTool(cwd, tool, exists = existsSync) {
+    let dir = cwd;
+    for (;;) {
+        const bin = join(dir, 'node_modules', '.bin', tool);
+        if (exists(bin))
+            return bin;
+        if (isRepoRoot(dir, exists))
+            return null;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}
+/**
+ * The artifacts a Yarn Plug'n'Play install writes in place of `node_modules/`.
+ * `.pnp.cjs` is the current name, `.pnp.js` the Yarn 2 one; `.pnp.data.json`
+ * rides alongside the loader when the manifest is split out.
+ */
+const PNP_FILES = ['.pnp.cjs', '.pnp.js', '.pnp.data.json'];
+/**
+ * Whether this project is installed under Yarn PnP, where there is no
+ * `node_modules/` tree at all.
+ *
+ * Every path-based test for "is it installed" is wrong here: a healthy PnP repo
+ * has no `node_modules/` and no `node_modules/.bin/<tool>`, so asserting either
+ * reports a correctly installed project as broken. Callers use this to pick a
+ * different question — the install artifact rather than the directory, and the
+ * package manager's own resolution rather than a path — instead of guessing.
+ */
+export function isPnPInstall(cwd, exists = existsSync) {
+    return PNP_FILES.some((f) => exists(join(cwd, f)));
+}
+/**
+ * Whether `pm`'s exec launcher can supply a tool this repo never declared.
+ *
+ * True for exactly the two launchers that keep a per-user package cache: `npx`
+ * and `bunx` will run a cached copy even under `--no-install`. `pnpm exec` and
+ * `yarn` resolve from the project tree only, so they already give the stronger
+ * guarantee and need no pre-flight — and Yarn PnP has no `node_modules/.bin`
+ * to resolve against at all, so pre-flighting it would report every tool
+ * missing. Kept in lockstep with `translate.ts`'s `EXEC` table by a test: any
+ * PM carrying `--no-install` must be listed here.
+ */
+export function execUsesGlobalCache(pm) {
+    return pm === 'npm' || pm === 'bun';
+}
+//# sourceMappingURL=tools.js.map

package/node_modules/checkride/dist/pm/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/pm/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,IAAuB;IAC/D,IAAI,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,GAAmC;IAC9C,IAAI,EAAE,aAAa;IACnB,GAAG,EAAE,gBAAgB;IACrB,IAAI,EAAE,aAAa;IACnB,GAAG,EAAE,YAAY;CAClB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,EAAkB,EAAE,IAAY;IAC7D,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,YAAY,GAAsB,CAAC,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC;AAEpE,uFAAuF;AACvF,SAAS,UAAU,CAAC,GAAW,EAAE,MAA8B;IAC7D,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,IAAY,EAAE,SAAiC,UAAU;IACpG,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAC5B,IAAI,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAU,CAAC;AAErE;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,SAAiC,UAAU;IACnF,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAkB;IACpD,OAAO,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,KAAK,CAAC;AACtC,CAAC"}

package/node_modules/checkride/dist/pm/translate.d.ts

@@ -2,11 +2,11 @@
  * Exec-prefix translation.
  *
  * The adapter registry keeps its canonical `pnpm exec <tool>` / `pnpm run
- * <script>` form (D5/D13); this is the single seam that rewrites that prefix for
+ * <script>` form; this is the single seam that rewrites that prefix for
  * whichever package manager a repo actually uses. Only the `pnpm exec` and `pnpm
  * run` prefixes are translated — `pnpm audit`, custom-check commands, and
- * built-ins pass through untouched, so the default pnpm run is byte-identical to
- * before.
+ * built-ins pass through untouched. Under pnpm itself the prefix is unchanged
+ * and only {@link VERIFY_DEPS_OFF} is prepended.
  */
 import type { PackageManager } from './detect.js';
 /**
@@ -15,21 +15,47 @@ import type { PackageManager } from './detect.js';
  * check's own command, a built-in) is returned unchanged, and so is every
  * invocation under `pnpm` itself — the default stays exactly as it was.
  *
- * `exec` swaps the launcher and drops the keyword (`pnpm exec oxlint` → `npx
- * oxlint`); `run` keeps its keyword and only swaps the launcher, since all four
- * package managers spell it `<pm> run <script>` (`pnpm run build` → `npm run
- * build`).
+ * `exec` swaps the launcher, drops the keyword, and prepends the launcher's own
+ * flags (`pnpm exec oxlint` → `npx --no-install oxlint`); `run` keeps its
+ * keyword and only swaps the launcher, since all four package managers spell it
+ * `<pm> run <script>` (`pnpm run build` → `npm run build`). Under pnpm the
+ * invocation is unchanged but for `VERIFY_DEPS_OFF`, which keeps pnpm's
+ * dependency-check narration off the tool's stdout.
  */
 export declare function translateExec(command: string, args: readonly string[], pm: PackageManager): {
     command: string;
     args: string[];
 };
+/**
+ * How `pm` invokes a package.json script, as a command line.
+ *
+ * Bare `pnpm <script>` is pnpm's own shorthand and the form checkride's docs
+ * use; the other three need the `run` keyword, and not merely for tidiness —
+ * `npm check` is not a command at all, and `yarn check` resolves to Yarn 1's
+ * built-in integrity checker rather than the repo's script, so both fail in a
+ * way that looks like checkride is broken. `<pm> run <script>` is correct
+ * everywhere, which is why it is the fallback for all of them.
+ */
+export declare function runScript(pm: PackageManager, script: string): string;
+/**
+ * A canonical `pnpm exec <tool> …` rendered as one command line for `pm`.
+ *
+ * `quiet` decides whether {@link VERIFY_DEPS_OFF} survives into the rendered
+ * string, and the two callers want opposite answers. A generated script whose
+ * stdout checkride parses needs it, or pnpm's narration lands in front of the
+ * JSON. Prose — the AGENTS.md stanza, a doc — does not: nothing parses that
+ * output, and a documented command carrying
+ * `--config.verify-deps-before-run=false` is a line nobody wants to retype.
+ */
+export declare function execCommand(pm: PackageManager, args: readonly string[], opts?: {
+    quiet?: boolean;
+}): string;
 /**
  * Can this adapter run under `pm`? Audit is package-manager-specific — its
  * flags and JSON shape don't port — so `pnpm audit` (the `security` slot) is
- * unavailable on a non-pnpm PM until a per-PM audit adapter lands (b5). The
+ * unavailable on a non-pnpm PM until a per-PM audit adapter lands. The
  * `pack` slot's built-in speaks only npm's and pnpm's `pack --dry-run --json`
- * (yarn/bun pack differently) — unavailable-until-adapter, same precedent (D10).
+ * (yarn/bun pack differently) — unavailable-until-adapter, same precedent.
  * Everything else is PM-agnostic once its exec prefix is translated.
  */
 export declare function isAvailableUnder(command: string, args: readonly string[], pm: PackageManager): boolean;

package/node_modules/checkride/dist/pm/translate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"translate.d.ts","sourceRoot":"","sources":["../../src/pm/translate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AASlD;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,cAAc,GACjB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAOrC;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAItG"}
+{"version":3,"file":"translate.d.ts","sourceRoot":"","sources":["../../src/pm/translate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA6BlD;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,cAAc,GACjB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAQrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAI/G;AAYD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAItG"}

package/node_modules/checkride/dist/pm/translate.js

@@ -2,46 +2,106 @@
  * Exec-prefix translation.
  *
  * The adapter registry keeps its canonical `pnpm exec <tool>` / `pnpm run
- * <script>` form (D5/D13); this is the single seam that rewrites that prefix for
+ * <script>` form; this is the single seam that rewrites that prefix for
  * whichever package manager a repo actually uses. Only the `pnpm exec` and `pnpm
  * run` prefixes are translated — `pnpm audit`, custom-check commands, and
- * built-ins pass through untouched, so the default pnpm run is byte-identical to
- * before.
- */
-/** The exec command each non-pnpm PM uses in place of `pnpm exec`. */
-const EXEC_COMMAND = {
-    npm: 'npx',
-    yarn: 'yarn',
-    bun: 'bunx',
+ * built-ins pass through untouched. Under pnpm itself the prefix is unchanged
+ * and only {@link VERIFY_DEPS_OFF} is prepended.
+ */
+/**
+ * What each non-pnpm PM uses in place of `pnpm exec`, and the flags that ride
+ * along. `--no-install` is load-bearing: `npx` and `bunx` otherwise fetch a
+ * missing tool from the registry and run it, and a check has no TTY to be
+ * prompted through — so the gate would silently execute an unpinned `latest`.
+ * It bounds the download, not every fallback: a copy already in the launcher's
+ * global cache still runs (see `docs/tools.md` §Package managers). `yarn`
+ * neither auto-installs nor accepts the flag.
+ */
+const EXEC = {
+    npm: { command: 'npx', flags: ['--no-install'] },
+    yarn: { command: 'yarn', flags: [] },
+    bun: { command: 'bunx', flags: ['--no-install'] },
 };
+/**
+ * Keeps pnpm's dependency-check narration (`Already up to date`) off **stdout**,
+ * where it would land in front of a tool's JSON and make it unparseable.
+ *
+ * This exact spelling, in this position, is the only form that works — not
+ * `--silent`, not the environment variable, and not after `exec`. Applied to
+ * every supported pnpm rather than version-gated. The full account, including
+ * the failure that found it, is in `docs/tools.md` §Launcher quirks; read it
+ * before touching this line.
+ */
+const VERIFY_DEPS_OFF = '--config.verify-deps-before-run=false';
 /**
  * Rewrite a canonical `pnpm exec <tool> …` or `pnpm run <script>` invocation for
  * `pm`. Anything that is not one of those prefixes (a `pnpm audit`, a custom
  * check's own command, a built-in) is returned unchanged, and so is every
  * invocation under `pnpm` itself — the default stays exactly as it was.
  *
- * `exec` swaps the launcher and drops the keyword (`pnpm exec oxlint` → `npx
- * oxlint`); `run` keeps its keyword and only swaps the launcher, since all four
- * package managers spell it `<pm> run <script>` (`pnpm run build` → `npm run
- * build`).
+ * `exec` swaps the launcher, drops the keyword, and prepends the launcher's own
+ * flags (`pnpm exec oxlint` → `npx --no-install oxlint`); `run` keeps its
+ * keyword and only swaps the launcher, since all four package managers spell it
+ * `<pm> run <script>` (`pnpm run build` → `npm run build`). Under pnpm the
+ * invocation is unchanged but for `VERIFY_DEPS_OFF`, which keeps pnpm's
+ * dependency-check narration off the tool's stdout.
  */
 export function translateExec(command, args, pm) {
-    if (command !== 'pnpm' || pm === 'pnpm')
+    if (command !== 'pnpm')
         return { command, args: [...args] };
-    // Drop 'exec'; keep <tool> and its arguments, e.g. `npx oxlint --type-aware`.
+    if (pm === 'pnpm')
+        return { command, args: quieted(args) };
+    // Drop 'exec'; keep <tool> and its arguments, e.g. `npx --no-install oxlint --type-aware`.
     if (args[0] === 'exec')
-        return { command: EXEC_COMMAND[pm], args: args.slice(1) };
+        return { command: EXEC[pm].command, args: [...EXEC[pm].flags, ...args.slice(1)] };
     // `<pm> run <script>` is universal; only the launcher changes.
     if (args[0] === 'run')
         return { command: pm, args: [...args] };
     return { command, args: [...args] };
 }
+/**
+ * How `pm` invokes a package.json script, as a command line.
+ *
+ * Bare `pnpm <script>` is pnpm's own shorthand and the form checkride's docs
+ * use; the other three need the `run` keyword, and not merely for tidiness —
+ * `npm check` is not a command at all, and `yarn check` resolves to Yarn 1's
+ * built-in integrity checker rather than the repo's script, so both fail in a
+ * way that looks like checkride is broken. `<pm> run <script>` is correct
+ * everywhere, which is why it is the fallback for all of them.
+ */
+export function runScript(pm, script) {
+    return pm === 'pnpm' ? `${pm} ${script}` : `${pm} run ${script}`;
+}
+/**
+ * A canonical `pnpm exec <tool> …` rendered as one command line for `pm`.
+ *
+ * `quiet` decides whether {@link VERIFY_DEPS_OFF} survives into the rendered
+ * string, and the two callers want opposite answers. A generated script whose
+ * stdout checkride parses needs it, or pnpm's narration lands in front of the
+ * JSON. Prose — the AGENTS.md stanza, a doc — does not: nothing parses that
+ * output, and a documented command carrying
+ * `--config.verify-deps-before-run=false` is a line nobody wants to retype.
+ */
+export function execCommand(pm, args, opts = {}) {
+    const translated = translateExec('pnpm', ['exec', ...args], pm);
+    const rest = opts.quiet === true ? translated.args : translated.args.filter((a) => a !== VERIFY_DEPS_OFF);
+    return [translated.command, ...rest].join(' ');
+}
+/**
+ * Prepend `VERIFY_DEPS_OFF` to the two pnpm subcommands that verify first.
+ * `pnpm audit` and `pnpm pack` never do, so they are left exactly as written —
+ * the flag is added where it changes something, not everywhere it is harmless.
+ */
+function quieted(args) {
+    const verifies = args[0] === 'exec' || args[0] === 'run';
+    return verifies ? [VERIFY_DEPS_OFF, ...args] : [...args];
+}
 /**
  * Can this adapter run under `pm`? Audit is package-manager-specific — its
  * flags and JSON shape don't port — so `pnpm audit` (the `security` slot) is
- * unavailable on a non-pnpm PM until a per-PM audit adapter lands (b5). The
+ * unavailable on a non-pnpm PM until a per-PM audit adapter lands. The
  * `pack` slot's built-in speaks only npm's and pnpm's `pack --dry-run --json`
- * (yarn/bun pack differently) — unavailable-until-adapter, same precedent (D10).
+ * (yarn/bun pack differently) — unavailable-until-adapter, same precedent.
  * Everything else is PM-agnostic once its exec prefix is translated.
  */
 export function isAvailableUnder(command, args, pm) {

package/node_modules/checkride/dist/pm/translate.js.map

@@ -1 +1 @@
-{"version":3,"file":"translate.js","sourceRoot":"","sources":["../../src/pm/translate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,sEAAsE;AACtE,MAAM,YAAY,GAAoD;IACpE,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;CACZ,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,IAAuB,EACvB,EAAkB;IAElB,IAAI,OAAO,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAC7E,8EAA8E;IAC9E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,+DAA+D;IAC/D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAuB,EAAE,EAAkB;IAC3F,IAAI,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,MAAM,CAAC;IACpE,IAAI,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"translate.js","sourceRoot":"","sources":["../../src/pm/translate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH;;;;;;;;GAQG;AACH,MAAM,IAAI,GAA2F;IACnG,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE;IAChD,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;IACpC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE;CAClD,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,eAAe,GAAG,uCAAuC,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,IAAuB,EACvB,EAAkB;IAElB,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAC5D,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3D,2FAA2F;IAC3F,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,+DAA+D;IAC/D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,EAAkB,EAAE,MAAc;IAC1D,OAAO,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,MAAM,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,EAAkB,EAAE,IAAuB,EAAE,OAA4B,EAAE;IACrG,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC;IAC1G,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,IAAuB;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;IACzD,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAuB,EAAE,EAAkB;IAC3F,IAAI,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,MAAM,CAAC;IACpE,IAAI,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/checkride/dist/proc.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Killing a spawned check, and everything it started.
+ *
+ * Every subprocess checkride spawns is `detached`, so it leads its own process
+ * group and a negated-pid signal reaches the whole tree — a wrapper's
+ * grandchildren included. That is the difference between a timed-out
+ * `sh -c 'slow-tool …'` leaving its real worker orphaned and alive, and taking
+ * the tree down with it.
+ *
+ * Both spawners need the same two-step escalation (SIGTERM, then SIGKILL after
+ * a grace), so it lives here rather than in either of them: the orchestrator's
+ * per-check timeout and fatal-signal reaping (`../orchestrator.ts`), and the
+ * triage reader's gate budget (`./triage/env.ts`).
+ */
+/** Grace between SIGTERM and SIGKILL when a process group won't die politely. */
+export declare const KILL_GRACE_SECONDS = 5;
+/**
+ * Signal a spawned process's whole group. ESRCH is swallowed: the group racing
+ * to exit on its own before we signal is success, not an error (and `pid` is
+ * absent only when the spawn itself failed).
+ */
+export declare function killGroup(pid: number | undefined, signal: NodeJS.Signals): void;
+/**
+ * Ask a process group to stop, then insist. SIGTERM now; SIGKILL after
+ * {@link KILL_GRACE_SECONDS} if it is still there. Returns the escalation
+ * timer so the caller can clear it when the process closes first — a pending
+ * timer would otherwise hold the event loop open past the run.
+ */
+export declare function killGroupEscalating(pid: number | undefined): ReturnType<typeof setTimeout>;
+//# sourceMappingURL=proc.d.ts.map

package/node_modules/checkride/dist/proc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proc.d.ts","sourceRoot":"","sources":["../src/proc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAO/E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAG1F"}

package/node_modules/checkride/dist/proc.js

@@ -0,0 +1,42 @@
+/**
+ * Killing a spawned check, and everything it started.
+ *
+ * Every subprocess checkride spawns is `detached`, so it leads its own process
+ * group and a negated-pid signal reaches the whole tree — a wrapper's
+ * grandchildren included. That is the difference between a timed-out
+ * `sh -c 'slow-tool …'` leaving its real worker orphaned and alive, and taking
+ * the tree down with it.
+ *
+ * Both spawners need the same two-step escalation (SIGTERM, then SIGKILL after
+ * a grace), so it lives here rather than in either of them: the orchestrator's
+ * per-check timeout and fatal-signal reaping (`../orchestrator.ts`), and the
+ * triage reader's gate budget (`./triage/env.ts`).
+ */
+/** Grace between SIGTERM and SIGKILL when a process group won't die politely. */
+export const KILL_GRACE_SECONDS = 5;
+/**
+ * Signal a spawned process's whole group. ESRCH is swallowed: the group racing
+ * to exit on its own before we signal is success, not an error (and `pid` is
+ * absent only when the spawn itself failed).
+ */
+export function killGroup(pid, signal) {
+    if (pid === undefined)
+        return;
+    try {
+        process.kill(-pid, signal);
+    }
+    catch {
+        // Group already gone (raced with a clean exit) — nothing left to kill.
+    }
+}
+/**
+ * Ask a process group to stop, then insist. SIGTERM now; SIGKILL after
+ * {@link KILL_GRACE_SECONDS} if it is still there. Returns the escalation
+ * timer so the caller can clear it when the process closes first — a pending
+ * timer would otherwise hold the event loop open past the run.
+ */
+export function killGroupEscalating(pid) {
+    killGroup(pid, 'SIGTERM');
+    return setTimeout(() => { killGroup(pid, 'SIGKILL'); }, KILL_GRACE_SECONDS * 1000);
+}
+//# sourceMappingURL=proc.js.map

package/node_modules/checkride/dist/proc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proc.js","sourceRoot":"","sources":["../src/proc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAuB,EAAE,MAAsB;IACvE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAuB;IACzD,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1B,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC,CAAC;AACrF,CAAC"}

package/node_modules/checkride/dist/qa/cli.d.ts

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+/**
+ * Executable form of the quality reader — what the bundled `/checkride:qa`
+ * skill invokes:
+ *
+ * ```
+ * node <plugin-root>/dist/qa/cli.js [cwd]
+ * ```
+ *
+ * It ships in the package's existing `dist/`, so both the published tarball and
+ * an installed plugin cache already carry it and no consumer build step exists.
+ * It adds no CLI command, flag or config to checkride itself: `dist/cli.js`
+ * knows nothing about this file.
+ *
+ * Exit code 0 means *a report was rendered* — including one whose every
+ * artifact is missing, which is a legitimate answer about a repo and not a
+ * reader failure. Unlike the triage reader, this one spawns nothing at all.
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/node_modules/checkride/dist/qa/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/qa/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG"}

package/node_modules/checkride/dist/qa/cli.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+/**
+ * Executable form of the quality reader — what the bundled `/checkride:qa`
+ * skill invokes:
+ *
+ * ```
+ * node <plugin-root>/dist/qa/cli.js [cwd]
+ * ```
+ *
+ * It ships in the package's existing `dist/`, so both the published tarball and
+ * an installed plugin cache already carry it and no consumer build step exists.
+ * It adds no CLI command, flag or config to checkride itself: `dist/cli.js`
+ * knows nothing about this file.
+ *
+ * Exit code 0 means *a report was rendered* — including one whose every
+ * artifact is missing, which is a legitimate answer about a repo and not a
+ * reader failure. Unlike the triage reader, this one spawns nothing at all.
+ */
+import { qaExtract } from './qa.js';
+import { renderQa } from './render.js';
+const [, , cwdArg] = process.argv;
+const report = await qaExtract(cwdArg ?? process.cwd());
+process.stdout.write(`${renderQa(report)}\n`);
+//# sourceMappingURL=cli.js.map

package/node_modules/checkride/dist/qa/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/qa/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,CAAC,EAAE,AAAD,EAAG,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;AAClC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC"}

package/node_modules/checkride/dist/qa/dead.d.ts

@@ -0,0 +1,39 @@
+/**
+ * `dead.json` — fallow's dead-code report, whose shape is ~35 top-level arrays
+ * of which almost all are empty almost always.
+ *
+ * That shape is the extraction problem: printing the report's own summary block
+ * means printing 35 zeroes to say "clean", and printing the arrays means
+ * printing whatever the biggest one holds. So the fold is "non-empty buckets
+ * only", discovered by iterating the arrays rather than matching a hand-kept
+ * list of category names — fallow adds categories in minor releases, and a
+ * reader with a fixed list would silently omit a new finding type.
+ *
+ * `total_issues` stays the authoritative count (it is what checkride gates on),
+ * and the buckets explain it. Each bucket carries a couple of sample labels so
+ * the finding has a location without the file being opened.
+ *
+ * The `../qa` barrel is this module's only public surface.
+ */
+/** One non-empty finding category. */
+export type DeadBucket = {
+    /** fallow's own key: `unused_exports`, `circular_dependencies`, … */
+    name: string;
+    count: number;
+    /** A few findings, labelled `path:symbol` where the shape allows. */
+    samples: string[];
+};
+export type DeadExtract = {
+    /** fallow's authoritative count — the number checkride gates the slot on. */
+    totalIssues: number | null;
+    entryPoints: number | null;
+    buckets: DeadBucket[];
+    omittedBuckets: number;
+};
+/**
+ * Fold a parsed `dead.json` into the report model, or `null` when it carries no
+ * issue count in either place fallow writes one — a report whose count cannot
+ * be read must not be summarized as clean.
+ */
+export declare function extractDead(value: Record<string, unknown>): DeadExtract | null;
+//# sourceMappingURL=dead.d.ts.map

package/node_modules/checkride/dist/qa/dead.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dead.d.ts","sourceRoot":"","sources":["../../src/qa/dead.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,sCAAsC;AACtC,MAAM,MAAM,UAAU,GAAG;IACvB,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,6EAA6E;IAC7E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAiDF;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,GAAG,IAAI,CAY9E"}

package/node_modules/checkride/dist/qa/dead.js

@@ -0,0 +1,88 @@
+/**
+ * `dead.json` — fallow's dead-code report, whose shape is ~35 top-level arrays
+ * of which almost all are empty almost always.
+ *
+ * That shape is the extraction problem: printing the report's own summary block
+ * means printing 35 zeroes to say "clean", and printing the arrays means
+ * printing whatever the biggest one holds. So the fold is "non-empty buckets
+ * only", discovered by iterating the arrays rather than matching a hand-kept
+ * list of category names — fallow adds categories in minor releases, and a
+ * reader with a fixed list would silently omit a new finding type.
+ *
+ * `total_issues` stays the authoritative count (it is what checkride gates on),
+ * and the buckets explain it. Each bucket carries a couple of sample labels so
+ * the finding has a location without the file being opened.
+ *
+ * The `../qa` barrel is this module's only public surface.
+ */
+import { asNumberOrNull, asRecord, asStringOrNull, isRecord } from '../artifacts/index.js';
+/** Buckets listed; the rest are counted. */
+const TOP_BUCKETS = 8;
+/** Sample labels per bucket. */
+const SAMPLES_PER_BUCKET = 3;
+/**
+ * Arrays that are report metadata rather than findings. `next_steps` is
+ * fallow's advice list; it is not a finding and does not count toward
+ * `total_issues`.
+ */
+const NON_FINDING_ARRAYS = new Set(['next_steps']);
+/** Where a finding says it is, and what it says it is about. */
+const FILE_FIELDS = ['path', 'file'];
+const SYMBOL_FIELDS = ['export_name', 'name', 'dependency'];
+/** The first of `fields` holding a non-empty string, or `''` when none does. */
+function firstString(item, fields) {
+    for (const field of fields) {
+        const value = asStringOrNull(item[field]);
+        if (value !== null && value !== '')
+            return value;
+    }
+    return '';
+}
+/**
+ * A finding's display label: its file, plus whichever symbol field this
+ * category happens to use. Purely for reading — unlike the baseline's
+ * fingerprint it needs no stability across edits, so a finding with no symbol
+ * falls back to a line number rather than to a synthesized identity.
+ */
+function label(item) {
+    if (!isRecord(item))
+        return '(unreadable finding)';
+    const file = firstString(item, FILE_FIELDS);
+    const symbol = firstString(item, SYMBOL_FIELDS);
+    const where = [file, symbol].filter(Boolean).join(':');
+    if (where === '')
+        return '(no location)';
+    if (symbol !== '')
+        return where;
+    const line = asNumberOrNull(item['line']);
+    return line === null ? where : `${where}:${line}`;
+}
+/** Every non-empty finding array, biggest first. */
+function collectBuckets(value) {
+    const buckets = [];
+    for (const [name, entry] of Object.entries(value)) {
+        if (!Array.isArray(entry) || entry.length === 0 || NON_FINDING_ARRAYS.has(name))
+            continue;
+        buckets.push({ name, count: entry.length, samples: entry.slice(0, SAMPLES_PER_BUCKET).map(label) });
+    }
+    return buckets.toSorted((a, b) => b.count - a.count || a.name.localeCompare(b.name));
+}
+/**
+ * Fold a parsed `dead.json` into the report model, or `null` when it carries no
+ * issue count in either place fallow writes one — a report whose count cannot
+ * be read must not be summarized as clean.
+ */
+export function extractDead(value) {
+    const summary = asRecord(value['summary']);
+    const totalIssues = asNumberOrNull(summary['total_issues']) ?? asNumberOrNull(value['total_issues']);
+    if (totalIssues === null)
+        return null;
+    const buckets = collectBuckets(value);
+    return {
+        totalIssues,
+        entryPoints: asNumberOrNull(asRecord(value['entry_points'])['total']),
+        buckets: buckets.slice(0, TOP_BUCKETS),
+        omittedBuckets: Math.max(0, buckets.length - TOP_BUCKETS),
+    };
+}
+//# sourceMappingURL=dead.js.map

package/node_modules/checkride/dist/qa/dead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dead.js","sourceRoot":"","sources":["../../src/qa/dead.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE3F,4CAA4C;AAC5C,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,gCAAgC;AAChC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAmB7B;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAEnD,gEAAgE;AAChE,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,CAAU,CAAC;AAC9C,MAAM,aAAa,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC;AAErE,gFAAgF;AAChF,SAAS,WAAW,CAAC,IAA6B,EAAE,MAAyB;IAC3E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,KAAK,CAAC,IAAa;IAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,sBAAsB,CAAC;IACnD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,eAAe,CAAC;IACzC,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,oDAAoD;AACpD,SAAS,cAAc,CAAC,KAA8B;IACpD,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1F,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAA8B;IACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACrG,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO;QACL,WAAW;QACX,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACrE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;QACtC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;KAC1D,CAAC;AACJ,CAAC"}