prismatica 0.2.0

package/dist/commands/init.js

@@ -0,0 +1,257 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { execa } from 'execa';
+import { UNDERSTAND_CTA, UNDERSTAND_IMPORT_COMMAND } from '../atlas/labels.js';
+import { HOOK_IGNORE_PATHS } from '../claudehook.js';
+import { configExists, loadConfig, writeConfig } from '../config.js';
+import { detectCapabilities } from '../detect.js';
+import { UserError } from '../errors.js';
+import { ensureOwnerKeyPair } from '../keys.js';
+import { deltasDir, flowProposalsDir, flowsDir, ownerPrivateKeyPath, prismaticaDir, registryPath, ruleProposalsDir, RECORD_SUBDIRS, } from '../paths.js';
+import { ConfigSchema, } from '../records/types.js';
+import { registerRepo } from '../registry.js';
+import { gateWorkflowYaml, PRE_PUSH_HOOK_VERSION, prePushHookScript, productMapSkeleton, recognizedPrePushHookVersion, } from '../templates.js';
+import * as ui from '../ui.js';
+async function gitRepoRoot(cwd) {
+    const result = await execa('git', ['rev-parse', '--show-toplevel'], { cwd, reject: false });
+    if (result.failed) {
+        throw new UserError('This folder is not a git repository, and Prismatica keeps every record in git.', {
+            command: 'git init -b main',
+            why: 'creates the repository, so records under .prismatica/ are versioned with the code they describe',
+        });
+    }
+    return result.stdout.trim();
+}
+async function currentBranch(repoRoot) {
+    const result = await execa('git', ['symbolic-ref', '--short', 'HEAD'], {
+        cwd: repoRoot,
+        reject: false,
+    });
+    return result.failed ? 'main' : result.stdout.trim();
+}
+/** Idempotent: existing files and records are always kept, never overwritten. */
+export async function runInit(options) {
+    const repoRoot = await gitRepoRoot(options.cwd);
+    const appName = options.appName ?? path.basename(repoRoot);
+    const mode = options.mode ?? 'govern';
+    const mapOnly = mode === 'map-only';
+    const report = {
+        repoRoot,
+        appName,
+        mode,
+        created: [],
+        kept: [],
+        upgraded: [],
+        notes: [],
+        capabilities: [],
+    };
+    const ensureFile = (relPath, content, fileMode) => {
+        const target = path.join(repoRoot, relPath);
+        if (fs.existsSync(target)) {
+            report.kept.push(relPath);
+            return;
+        }
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.writeFileSync(target, content, fileMode === undefined ? {} : { mode: fileMode });
+        report.created.push(relPath);
+    };
+    const ensureDir = (dir, label) => {
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+            report.created.push(label);
+        }
+        else {
+            report.kept.push(label);
+        }
+        const keep = path.join(dir, '.gitkeep');
+        if (!fs.existsSync(keep)) {
+            fs.writeFileSync(keep, '');
+        }
+    };
+    for (const subdir of RECORD_SUBDIRS) {
+        ensureDir(path.join(prismaticaDir(repoRoot), subdir), `.prismatica/${subdir}/`);
+    }
+    // Atlas dirs: created in BOTH modes — comprehension (flows, rules) is never
+    // gated behind governance.
+    ensureDir(flowsDir(repoRoot), '.prismatica/flows/');
+    ensureDir(flowProposalsDir(repoRoot), '.prismatica/flows/proposals/');
+    ensureDir(ruleProposalsDir(repoRoot), '.prismatica/rules/proposals/');
+    ensureDir(deltasDir(repoRoot), '.prismatica/deltas/');
+    const mainBranch = await currentBranch(repoRoot);
+    // Write the plain files first, so detection below sees the repo as it will be.
+    // product-map.md is legacy once Atlas flows exist — map-only skips it outright
+    // so a fresh map-only app starts straight on flows, never a free-form doc.
+    if (!mapOnly) {
+        ensureFile('.prismatica/product-map.md', productMapSkeleton(appName));
+    }
+    ensureFile('.prismatica/ledger.jsonl', '');
+    if (!mapOnly) {
+        ensureFile('.github/workflows/prismatica-gate.yml', gateWorkflowYaml(mainBranch));
+    }
+    else {
+        report.notes.push('map-only: no gate workflow written — there is nothing to gate yet');
+    }
+    const detection = await detectCapabilities(repoRoot, {
+        branchProtection: mapOnly ? 'skip' : (options.branchProtection ?? 'auto'),
+        gitleaksAvailable: options.gitleaksAvailable,
+        mainBranch,
+    });
+    report.capabilities = detection.capabilities;
+    if (configExists(repoRoot)) {
+        const existing = loadConfig(repoRoot); // validate; a hand-broken config fails loudly here
+        report.appName = existing.app.name;
+        report.mode = existing.mode;
+        if (options.mode && options.mode !== existing.mode) {
+            report.notes.push(`this repo is already "${existing.mode}" — config.json is kept as-is (mode is set once, at creation)`);
+        }
+        // Fills in the release-tracking boundary only when genuinely absent — it
+        // is never advanced or replaced once set, so re-running init cannot make
+        // an already-tracked contract retroactively legacy, or vice versa.
+        if (existing.releaseTrackingSince === undefined) {
+            const releaseTrackingSince = new Date().toISOString();
+            writeConfig(repoRoot, { ...existing, releaseTrackingSince });
+            report.notes.push(`release tracking boundary set to ${releaseTrackingSince} — contracts created before this are legacy: their release proof was never tracked`);
+        }
+        report.kept.push('.prismatica/config.json');
+        report.notes.push('config.json already exists — every setting kept as-is, only genuinely absent fields filled in (prismatica doctor refreshes detection)');
+    }
+    else {
+        // map-only generates no signing key — nothing here is signed; `prismatica
+        // upgrade` creates one when the repo later moves to governed mode.
+        const owner = mapOnly ? { publicKeyPem: undefined, created: false } : ensureOwnerKeyPair();
+        if (owner.created) {
+            report.notes.push(`owner signing key created at ${ownerPrivateKeyPath()} — private, never committed`);
+        }
+        const config = ConfigSchema.parse({
+            version: 1,
+            app: { name: appName },
+            mode,
+            stack: detection.stack,
+            mainBranch,
+            wipLimit: 2,
+            defaultTier: 'normal',
+            tierRules: [
+                // Starter rule: the classic Heavy territory. Owners tune this per repo.
+                { tier: 'heavy', paths: ['**/auth/**', '**/payment*/**', '**/*migration*', '**/*schema*'] },
+            ],
+            checks: detection.checks,
+            owner: { publicKey: owner.publicKeyPem },
+            releaseTrackingSince: new Date().toISOString(),
+        });
+        writeConfig(repoRoot, config);
+        report.created.push('.prismatica/config.json');
+    }
+    // Keep out of git: large evidence blobs (their hashes live in evidence records)
+    // and the lane-local scope hook (regenerated per lane; embeds an absolute path).
+    fs.mkdirSync(path.join(prismaticaDir(repoRoot), 'evidence', 'blobs'), { recursive: true });
+    const gitignorePath = path.join(repoRoot, '.gitignore');
+    const ignoreLines = ['.prismatica/evidence/blobs/', ...HOOK_IGNORE_PATHS];
+    const existingIgnore = fs.existsSync(gitignorePath) ? fs.readFileSync(gitignorePath, 'utf8') : '';
+    const existingSet = new Set(existingIgnore.split('\n').map((line) => line.trim()));
+    const toAdd = ignoreLines.filter((line) => !existingSet.has(line));
+    if (toAdd.length > 0) {
+        const prefix = existingIgnore === '' || existingIgnore.endsWith('\n') ? '' : '\n';
+        fs.appendFileSync(gitignorePath, `${prefix}${toAdd.join('\n')}\n`);
+        report.notes.push(`.gitignore: added ${toAdd.join(', ')}`);
+    }
+    if (mapOnly) {
+        report.notes.push('map-only: no pre-push hook installed — there is nothing to check yet');
+    }
+    else if (options.hooks) {
+        installPrePushHook(repoRoot, report);
+    }
+    else {
+        report.notes.push('pre-push hook not installed — re-run with --hooks to add it');
+    }
+    // The mapping pack is gone. It briefed an agent to write a free-form
+    // `product-map.md`, and structured Flows replaced that job years of records
+    // ago — `prismatica context discover` asks for the same reading and gets back
+    // something the gate can actually reason about. An EXISTING product-map.md is
+    // untouched: `pack` still embeds it when no Flows are approved yet, and
+    // nothing here deletes a file the owner wrote.
+    if (registerRepo(repoRoot, appName).added) {
+        report.notes.push(`registered in ${registryPath()} (read by the board; never in the trust path)`);
+    }
+    return report;
+}
+/**
+ * Idempotent AND safe to upgrade: a hook this CLI itself generated (exact
+ * byte match against a known version) is freely replaced with the current
+ * one; anything else — hand-edited, foreign, or from some other tool — is
+ * left completely untouched, with one exact manual step printed instead.
+ */
+function installPrePushHook(repoRoot, report) {
+    const hookPath = path.join(repoRoot, '.git', 'hooks', 'pre-push');
+    if (!fs.existsSync(hookPath)) {
+        fs.mkdirSync(path.dirname(hookPath), { recursive: true });
+        fs.writeFileSync(hookPath, prePushHookScript(), { mode: 0o755 });
+        report.created.push('.git/hooks/pre-push');
+        return;
+    }
+    const content = fs.readFileSync(hookPath, 'utf8');
+    const version = recognizedPrePushHookVersion(content);
+    if (version === null) {
+        report.notes.push('an existing pre-push hook was left untouched (not a recognised Prismatica hook) — add this line yourself: exec prismatica prepush');
+        return;
+    }
+    if (version === PRE_PUSH_HOOK_VERSION) {
+        report.kept.push('.git/hooks/pre-push');
+        return;
+    }
+    fs.writeFileSync(hookPath, prePushHookScript(), { mode: 0o755 });
+    report.upgraded.push(`.git/hooks/pre-push (v${version} → v${PRE_PUSH_HOOK_VERSION})`);
+}
+const STATUS_LABELS = {
+    enforced: ui.ok('Enforced'),
+    checked: ui.info('Checked'),
+    missing: ui.bad('Missing'),
+    // Neither of these is a shortcoming of the repo: one cannot exist here, the
+    // other was never established. `init` says so rather than printing "Missing".
+    unavailable: ui.dim('Unavailable'),
+    indeterminate: ui.warn('Unknown'),
+};
+export function printInitReport(report) {
+    console.log(ui.heading(`Prismatica — ${report.appName}`));
+    console.log('');
+    for (const item of report.created) {
+        console.log(`  ${ui.ok('created')}   ${item}`);
+    }
+    for (const item of report.upgraded) {
+        console.log(`  ${ui.ok('upgraded')}  ${item}`);
+    }
+    for (const item of report.kept) {
+        console.log(`  ${ui.dim('kept')}      ${item}`);
+    }
+    console.log('');
+    console.log(ui.renderTable(['Check', 'Status', 'Detail'], report.capabilities.map((capability) => [
+        capability.label,
+        STATUS_LABELS[capability.status],
+        capability.fix === undefined
+            ? capability.detail
+            : `${capability.detail} — fix: ${capability.fix}`,
+    ])));
+    console.log('');
+    for (const note of report.notes) {
+        console.log(`  ${ui.warn('note')} ${note}`);
+    }
+    console.log('');
+    console.log(ui.bold('Next steps'));
+    if (report.mode === 'map-only') {
+        console.log('  1. Draft flows from the real code — an agent does the reading, you do the reviewing:');
+        console.log(`     ${UNDERSTAND_CTA} It hands you back:`);
+        console.log(`     ${ui.bold(UNDERSTAND_IMPORT_COMMAND)}`);
+        console.log('  2. Review what it drafts:');
+        console.log(`     ${ui.bold('prismatica flow list')}   or   ${ui.bold('prismatica view')}`);
+        console.log('  3. Commit the records:');
+        console.log(`     ${ui.bold('git add .prismatica .gitignore && git commit -m "chore: adopt prismatica (map-only)"')}`);
+    }
+    else {
+        console.log('  1. Look over .prismatica/config.json — the checks above are what the gate will run.');
+        console.log('  2. Map the app from the real code — your agent does the reading:');
+        console.log(`     ${UNDERSTAND_CTA} It hands you back:`);
+        console.log(`     ${ui.bold(UNDERSTAND_IMPORT_COMMAND)}`);
+        console.log('  3. Commit the records:');
+        console.log(`     ${ui.bold('git add .prismatica .github .gitignore && git commit -m "chore: adopt prismatica"')}`);
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,QAAQ,EACR,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,GAIb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,UAAU,CAAC;AA8B/B,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CACjB,gFAAgF,EAChF;YACE,OAAO,EAAE,kBAAkB;YAC3B,GAAG,EAAE,iGAAiG;SACvG,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB;IAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;QACrE,GAAG,EAAE,QAAQ;QACb,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB;IAChD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAmB,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,KAAK,UAAU,CAAC;IACpC,MAAM,MAAM,GAAe;QACzB,QAAQ;QACR,OAAO;QACP,IAAI;QACJ,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,YAAY,EAAE,EAAE;KACjB,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,QAAiB,EAAQ,EAAE;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,eAAe,MAAM,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,4EAA4E;IAC5E,2BAA2B;IAC3B,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACpD,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACtE,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACtE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEjD,+EAA+E;IAC/E,+EAA+E;IAC/E,2EAA2E;IAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,UAAU,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,UAAU,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,UAAU,CAAC,uCAAuC,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE;QACnD,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;QACzE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,UAAU;KACX,CAAC,CAAC;IACH,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;IAE7C,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,mDAAmD;QAC1F,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QACnC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC5B,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,yBAAyB,QAAQ,CAAC,IAAI,+DAA+D,CACtG,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,oBAAoB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACtD,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,oCAAoC,oBAAoB,oFAAoF,CAC7I,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,uIAAuI,CACxI,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAC3F,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,gCAAgC,mBAAmB,EAAE,6BAA6B,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAW,YAAY,CAAC,KAAK,CAAC;YACxC,OAAO,EAAE,CAAC;YACV,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACtB,IAAI;YACJ,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,UAAU;YACV,QAAQ,EAAE,CAAC;YACX,WAAW,EAAE,QAAQ;YACrB,SAAS,EAAE;gBACT,wEAAwE;gBACxE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAAE;aAC5F;YACD,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE;YACxC,oBAAoB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC/C,CAAC,CAAC;QACH,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC;IAED,gFAAgF;IAChF,iFAAiF;IACjF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,CAAC,6BAA6B,EAAE,GAAG,iBAAiB,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,cAAc,KAAK,EAAE,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IAC5F,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACzB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IACnF,CAAC;IAED,qEAAqE;IACrE,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,+CAA+C;IAE/C,IAAI,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,iBAAiB,YAAY,EAAE,+CAA+C,CAC/E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,QAAgB,EAAE,MAAkB;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,mIAAmI,CACpI,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,OAAO,OAAO,qBAAqB,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,aAAa,GAAyC;IAC1D,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC;IAC3B,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;IAC3B,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;IAC1B,4EAA4E;IAC5E,8EAA8E;IAC9E,WAAW,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;IAClC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;CAClC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,gBAAgB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,WAAW,CACZ,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAC7B,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,UAAU,CAAC,KAAK;QAChB,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC;QAChC,UAAU,CAAC,GAAG,KAAK,SAAS;YAC1B,CAAC,CAAC,UAAU,CAAC,MAAM;YACnB,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,WAAW,UAAU,CAAC,GAAG,EAAE;KACpD,CAAC,CACH,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CACT,wFAAwF,CACzF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,QAAQ,cAAc,qBAAqB,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CACT,QAAQ,EAAE,CAAC,IAAI,CAAC,sFAAsF,CAAC,EAAE,CAC1G,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,uFAAuF,CACxF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,QAAQ,cAAc,qBAAqB,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CACT,QAAQ,EAAE,CAAC,IAAI,CAAC,mFAAmF,CAAC,EAAE,CACvG,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/commands/merge.js

@@ -0,0 +1,188 @@
+/**
+ * `merge` — the exact-SHA, owner-guarded merge. It resolves the expected PR,
+ * rejects every state short of "safe to merge right now" (draft, missing,
+ * closed, pending, failed, stale, ambiguous, offline-uncertain), requires a
+ * successful `prismatica-gate` check result for the EXACT current head OID,
+ * then calls `gh pr merge --merge --match-head-commit <oid>` — never squash,
+ * never rebase, and gh itself refuses if the head has moved since we looked.
+ *
+ * This is "Checked — owner-guarded", never "server-enforced": the guard is
+ * this command's own verification before it asks gh to merge, not something
+ * GitHub's branch protection is enforcing (GitHub Free private repos don't
+ * support required-status-check protection at all — this command works the
+ * same whether or not that's true, and never claims otherwise).
+ */
+import { resolveChangeHome, resolveContractId } from '../change.js';
+import { loadConfig } from '../config.js';
+import { UserError } from '../errors.js';
+import * as git from '../git.js';
+import { ghAuthenticated, ghInstalled, ghPrChecks, ghPrMerge, ghPrView, } from '../gh.js';
+import { contractExists, readContract } from '../records/store.js';
+import * as ui from '../ui.js';
+/**
+ * Matches the gate's own job/check name EXACTLY (case-insensitive, hyphen or
+ * space) — anchored so an unrelated check merely containing the phrase
+ * (e.g. "npm-prismatica-gate-lint") can never be mistaken for the real gate.
+ * Exported so `next` classifies the same PR check state without a second,
+ * possibly-divergent pattern.
+ */
+export const GATE_CHECK_PATTERN = /^prismatica[-\s]gate$/i;
+/**
+ * The ONE reading of a PR's check list for the `prismatica-gate` result.
+ *
+ * `merge` asks it before merging; `ship --verify` asks it after, about the
+ * PR that already merged. That second caller is why this is shared rather
+ * than duplicated: without server-side branch protection, a PR merged in the
+ * GitHub UI never had to satisfy any check at all, so "did the gate actually
+ * pass on this exact head" is a real question after the merge and not a
+ * formality. Two readings of the same evidence would eventually disagree, and
+ * the one that mattered would be whichever was laxer.
+ *
+ * Every ambiguity is a refusal: no check, more than one match, still running,
+ * any non-pass bucket, or gh unable to answer.
+ */
+export function classifyGateCheck(checks, prUrl) {
+    if (checks === null) {
+        return {
+            verdict: 'unavailable',
+            reason: `gh could not report check status for PR ${prUrl} (offline-uncertain).`,
+        };
+    }
+    const gateChecks = checks.filter((check) => GATE_CHECK_PATTERN.test(check.name));
+    if (gateChecks.length > 1) {
+        return {
+            verdict: 'ambiguous',
+            reason: `PR ${prUrl} has ${gateChecks.length} checks matching "prismatica gate" — ambiguous, refusing to guess which one governs.`,
+        };
+    }
+    const gate = gateChecks[0];
+    if (!gate) {
+        return { verdict: 'missing', reason: `PR ${prUrl} has no "prismatica-gate" check yet.` };
+    }
+    if (gate.bucket === 'pending') {
+        return {
+            verdict: 'pending',
+            reason: `The prismatica-gate check on PR ${prUrl} is still pending.`,
+        };
+    }
+    if (gate.bucket !== 'pass') {
+        return {
+            verdict: 'failed',
+            reason: `The prismatica-gate check on PR ${prUrl} did not pass (${gate.bucket}).`,
+        };
+    }
+    return { verdict: 'pass', name: gate.name };
+}
+/**
+ * Whether `view` is a normal, mergeable-right-now OPEN PR: not a draft,
+ * targeting the expected base from the expected head, with a clean merge
+ * state. Deliberately does NOT special-case `MERGED` (callers that treat
+ * "already merged" as a distinct, non-blocking state — `next` recommending
+ * `close` — must check `view.state === 'MERGED'` themselves, first).
+ * Exported so `merge` and `next` can never disagree about what "ready to
+ * merge" actually requires.
+ */
+export function checkPrReadiness(view, mainBranch, branch) {
+    if (view.isDraft) {
+        return { ok: false, reason: `PR ${view.url} is a draft — merge refuses a draft PR.` };
+    }
+    if (view.state === 'CLOSED') {
+        return { ok: false, reason: `PR ${view.url} is closed, not merged.` };
+    }
+    if (view.state !== 'OPEN') {
+        return { ok: false, reason: `PR ${view.url} is in an ambiguous state ("${view.state}").` };
+    }
+    if (view.baseRefName !== mainBranch) {
+        return {
+            ok: false,
+            reason: `PR ${view.url} targets "${view.baseRefName}", not the configured main branch "${mainBranch}".`,
+        };
+    }
+    if (view.headRefName !== branch) {
+        return {
+            ok: false,
+            reason: `PR ${view.url}'s head branch ("${view.headRefName}") does not match the contract's branch ("${branch}").`,
+        };
+    }
+    // Allowlist, not a denylist: CLEAN is the only state that actually means
+    // "safe to merge right now" — BEHIND/BLOCKED/DIRTY/DRAFT/HAS_HOOKS/
+    // UNKNOWN/UNSTABLE all mean something is unresolved (default to "not
+    // ready" rather than enumerate every non-CLEAN value as its own case).
+    if (view.mergeStateStatus !== 'CLEAN') {
+        return {
+            ok: false,
+            reason: `PR ${view.url}'s merge state is "${view.mergeStateStatus}", not CLEAN — resolve it before merging.`,
+        };
+    }
+    return { ok: true };
+}
+function requireOpenAndTargeted(view, mainBranch, branch) {
+    if (view.state === 'MERGED') {
+        throw new UserError(`PR ${view.url} is already merged.`);
+    }
+    const readiness = checkPrReadiness(view, mainBranch, branch);
+    if (!readiness.ok) {
+        throw new UserError(readiness.reason ?? `PR ${view.url} is not ready to merge.`);
+    }
+}
+export async function runMerge(options) {
+    const mainRoot = await git.mainRepoRoot(options.cwd);
+    const config = loadConfig(mainRoot);
+    const contractId = await resolveContractId(options.cwd, config.mainBranch, options.contractId);
+    const home = await resolveChangeHome(options.cwd, contractId);
+    if (!contractExists(home, contractId)) {
+        throw new UserError(`No contract "${contractId}" to merge.`);
+    }
+    const { data: contract } = readContract(home, contractId);
+    if (!(await ghInstalled()) || !(await ghAuthenticated())) {
+        throw new UserError('gh is unavailable to resolve the PR or its checks (offline-uncertain) — merge fails closed.', { command: 'gh auth login', why: 'merge never guesses at GitHub state it cannot verify' });
+    }
+    const view = await ghPrView(home, contract.branch);
+    if (!view) {
+        throw new UserError(`No PR found for branch "${contract.branch}".`, {
+            command: `prismatica ship ${contractId}`,
+            why: 'merge only acts on a PR that actually exists',
+        });
+    }
+    requireOpenAndTargeted(view, config.mainBranch, contract.branch);
+    // Stale: the PR's reported head no longer matches this lane's current
+    // HEAD — someone pushed since, or this lane is behind. Never merge a head
+    // that isn't the one we just verified.
+    const laneHead = await git.revParse(home, 'HEAD');
+    if (view.headRefOid !== laneHead) {
+        throw new UserError(`PR ${view.url}'s head (${view.headRefOid}) does not match this lane's current HEAD (${laneHead}) — stale.`, { command: `prismatica ship ${contractId}`, why: 'push the latest commit before merging it' });
+    }
+    const evidence = classifyGateCheck(await ghPrChecks(home, view.number), view.url);
+    if (evidence.verdict === 'missing') {
+        throw new UserError(evidence.reason, {
+            command: `gh pr checks ${view.number}`,
+            why: 'merge requires a successful gate result for this exact head',
+        });
+    }
+    if (evidence.verdict !== 'pass') {
+        throw new UserError(evidence.reason);
+    }
+    // Exact-SHA guarded merge: --match-head-commit makes gh itself refuse if
+    // the head has moved since view.headRefOid was read above. Always --merge
+    // — never a silent fallback to squash or rebase.
+    const result = await ghPrMerge(home, view.number, view.headRefOid);
+    if (!result.ok) {
+        throw new UserError(`gh pr merge failed: ${result.error ?? 'unknown error'}`);
+    }
+    return {
+        contractId,
+        prUrl: view.url,
+        headOid: view.headRefOid,
+        assurance: 'Checked — owner-guarded',
+    };
+}
+export function printMergeResult(result) {
+    console.log(ui.ok(`✓ merged ${result.contractId}`));
+    console.log('');
+    console.log(`  ${ui.bold('PR')}          ${result.prUrl}`);
+    console.log(`  ${ui.bold('head')}        ${result.headOid}`);
+    console.log(`  ${ui.bold('assurance')}   ${result.assurance}`);
+    console.log('');
+    console.log(ui.dim('  next: prismatica close, then deploy and run `ship --verify`.'));
+}
+//# sourceMappingURL=merge.js.map

package/dist/commands/merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge.js","sourceRoot":"","sources":["../../src/commands/merge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,eAAe,EACf,WAAW,EACX,UAAU,EACV,SAAS,EACT,QAAQ,GAGT,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,UAAU,CAAC;AAgB/B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAyB3D;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA2B,EAAE,KAAa;IAC1E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,2CAA2C,KAAK,uBAAuB;SAChF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,MAAM,KAAK,QAAQ,UAAU,CAAC,MAAM,sFAAsF;SACnI,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,KAAK,sCAAsC,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,mCAAmC,KAAK,oBAAoB;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,mCAAmC,KAAK,kBAAkB,IAAI,CAAC,MAAM,IAAI;SAClF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc,EAAE,UAAkB,EAAE,MAAc;IACjF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,yCAAyC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,yBAAyB,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,+BAA+B,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,aAAa,IAAI,CAAC,WAAW,sCAAsC,UAAU,IAAI;SACxG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,oBAAoB,IAAI,CAAC,WAAW,6CAA6C,MAAM,KAAK;SACnH,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,oEAAoE;IACpE,qEAAqE;IACrE,uEAAuE;IACvE,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,sBAAsB,IAAI,CAAC,gBAAgB,2CAA2C;SAC7G,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAc,EAAE,UAAkB,EAAE,MAAc;IAChF,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC,GAAG,yBAAyB,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAqB;IAClD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAE9D,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,SAAS,CAAC,gBAAgB,UAAU,aAAa,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAE1D,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,eAAe,EAAE,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CACjB,6FAA6F,EAC7F,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,sDAAsD,EAAE,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,2BAA2B,QAAQ,CAAC,MAAM,IAAI,EAAE;YAClE,OAAO,EAAE,mBAAmB,UAAU,EAAE;YACxC,GAAG,EAAE,8CAA8C;SACpD,CAAC,CAAC;IACL,CAAC;IACD,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEjE,sEAAsE;IACtE,0EAA0E;IAC1E,uCAAuC;IACvC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CACjB,MAAM,IAAI,CAAC,GAAG,YAAY,IAAI,CAAC,UAAU,8CAA8C,QAAQ,YAAY,EAC3G,EAAE,OAAO,EAAE,mBAAmB,UAAU,EAAE,EAAE,GAAG,EAAE,0CAA0C,EAAE,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAO,EAAE;YACpC,OAAO,EAAE,gBAAgB,IAAI,CAAC,MAAM,EAAE;YACtC,GAAG,EAAE,6DAA6D;SACnE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAO,CAAC,CAAC;IACxC,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,uBAAuB,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,OAAO;QACL,UAAU;QACV,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,OAAO,EAAE,IAAI,CAAC,UAAU;QACxB,SAAS,EAAE,yBAAyB;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAmB;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC,CAAC;AACxF,CAAC"}