prismatica 0.2.0

package/dist/commands/rules.js

@@ -0,0 +1,399 @@
+/**
+ * `rules` — review, approve, and verify app Rules: the short, cross-flow list
+ * of things that must stay true across the whole app. One file, one list, one
+ * approval — mirrors `flow` but simpler, since rules carry no steps or status.
+ */
+import { UNDERSTAND_CTA } from '../atlas/labels.js';
+import { renderRulesFileBody } from '../atlas/render.js';
+import { buildRuleView, partitionGuardrails } from '../atlas/presentation.js';
+import { computeRulesHash, deleteRuleProposal, listFlows, listRuleProposals, readRuleProposal, readRulesFile, ruleProposalExists, verifyRulesIntegrity, writeRulesFile, } from '../atlas/store.js';
+import { loadConfig } from '../config.js';
+import { UserError } from '../errors.js';
+import * as git from '../git.js';
+import { signMessage } from '../keys.js';
+import { stableStringify } from '../records/store.js';
+import { RulesFileSchema } from '../records/types.js';
+import * as ui from '../ui.js';
+export async function runRulesList(options) {
+    const repoRoot = await git.mainRepoRoot(options.cwd);
+    const config = loadConfig(repoRoot);
+    const rulesFile = readRulesFile(repoRoot).data;
+    const { proposals, problems } = listRuleProposals(repoRoot);
+    const integrity = rulesFile
+        ? verifyRulesIntegrity(rulesFile, config.mode, config.owner.publicKey)
+        : null;
+    // Which flows cite which rule — the only honest basis for calling a rule
+    // app-wide rather than flow-specific.
+    const { flows } = listFlows(repoRoot);
+    const citedBy = new Map();
+    for (const flow of flows) {
+        for (const reference of flow.truth.rules) {
+            citedBy.set(reference, [...(citedBy.get(reference) ?? []), flow.id]);
+        }
+    }
+    const views = [
+        ...(rulesFile?.rules ?? []).map((rule) => buildRuleView({
+            id: rule.id,
+            kind: 'rule',
+            text: rule.text,
+            evidence: rule.evidence,
+            citedByFlowIds: citedBy.get(rule.id) ?? [],
+        })),
+        ...proposals.map((proposal) => buildRuleView({
+            id: proposal.id,
+            kind: proposal.proposalType === 'draft' ? 'draft' : 'update',
+            text: proposal.text,
+        })),
+    ];
+    views.sort((a, b) => a.id.localeCompare(b.id));
+    return {
+        views,
+        problems,
+        rulesIntegrityOk: integrity ? integrity.ok : true,
+        integrityWarning: integrity && !integrity.ok ? integrity.warning : undefined,
+    };
+}
+const RULE_KIND_SUFFIX = {
+    rule: '',
+    draft: ' (candidate)',
+    update: ' (update)',
+};
+/**
+ * The complete rule text, wrapped — never clipped to a derived label. Rules
+ * are never rewritten. `--details` adds only genuinely additional facts (which
+ * flows cite this rule), since the text itself is always shown in full.
+ */
+export function printRulesList(result, options = {}) {
+    if (options.json) {
+        console.log(JSON.stringify(result.views, null, 2));
+        return;
+    }
+    const width = options.width ?? ui.terminalWidth();
+    if (result.views.length === 0 && result.problems.length === 0) {
+        console.log(ui.dim('No app rules yet.'));
+        console.log(`${UNDERSTAND_CTA} It proposes candidate rules alongside the Flows.`);
+        return;
+    }
+    if (result.integrityWarning) {
+        console.log(ui.bad(`✗ ${result.integrityWarning}`));
+        console.log('');
+    }
+    const { appWide, flowSpecific } = partitionGuardrails(result.views.filter((view) => view.kind === 'rule'));
+    const proposed = result.views.filter((view) => view.kind !== 'rule');
+    const printGroup = (title, views) => {
+        if (views.length === 0) {
+            return;
+        }
+        console.log(ui.heading(title));
+        for (const view of views) {
+            console.log('');
+            for (const line of ui.wrap(`${view.text}${RULE_KIND_SUFFIX[view.kind]}`, width - 2)) {
+                console.log(`  ${line}`);
+            }
+            const facts = [view.id, view.evidenceLabel].filter(Boolean);
+            if (options.details && view.citedByFlowIds.length > 0) {
+                facts.push(`cited by ${view.citedByFlowIds.join(', ')}`);
+            }
+            console.log(ui.dim(`  ${facts.join(' · ')}`));
+        }
+    };
+    printGroup(flowSpecific.length > 0 ? 'Applies everywhere' : 'Must stay true', appWide);
+    if (flowSpecific.length > 0) {
+        console.log('');
+        printGroup('Applies to specific flows', flowSpecific);
+    }
+    if (proposed.length > 0) {
+        console.log('');
+        printGroup('Waiting for you', proposed);
+    }
+    if (!options.details) {
+        console.log('');
+        console.log(ui.dim('More: prismatica rules list --details'));
+    }
+    if (result.problems.length > 0) {
+        console.log('');
+        console.log(ui.bad(`${result.problems.length} file(s) could not be read:`));
+        for (const problem of result.problems) {
+            console.log(`  ${ui.bad('✗')} ${problem.file} — ${problem.error}`);
+        }
+    }
+}
+function normalizeRuleId(id) {
+    return id.startsWith('r-') ? id : `r-${id}`;
+}
+export async function runRulesApprove(options) {
+    const repoRoot = await git.mainRepoRoot(options.cwd);
+    const config = loadConfig(repoRoot);
+    if (!ruleProposalExists(repoRoot, options.id)) {
+        throw new UserError(`No rule proposal "${options.id}" to approve.`, {
+            command: 'prismatica rules list',
+            why: 'see pending candidate and proposed rules',
+        });
+    }
+    const proposal = readRuleProposal(repoRoot, options.id).data;
+    const existing = readRulesFile(repoRoot).data;
+    const existingRules = existing?.rules ?? [];
+    const ruleId = normalizeRuleId(proposal.id);
+    const alreadyExists = existingRules.some((rule) => rule.id === ruleId);
+    if (proposal.proposalType === 'draft' && alreadyExists) {
+        throw new UserError(`A rule "${ruleId}" already exists — this looks like an update, not a new rule.`, {
+            command: `edit .prismatica/rules/proposals/${options.id}.md and set proposalType: update`,
+            why: 'drafts create new rules; updates change existing ones',
+        });
+    }
+    if (proposal.proposalType === 'update' && !alreadyExists) {
+        throw new UserError(`No existing rule "${ruleId}" to update — this looks like a new rule, not an update.`, {
+            command: `edit .prismatica/rules/proposals/${options.id}.md and set proposalType: draft`,
+            why: 'updates change existing rules; drafts create new ones',
+        });
+    }
+    const createdAt = existingRules.find((rule) => rule.id === ruleId)?.createdAt ?? proposal.createdAt;
+    const newRule = { id: ruleId, text: proposal.text, createdAt };
+    const rules = proposal.proposalType === 'update'
+        ? existingRules.map((rule) => (rule.id === ruleId ? newRule : rule))
+        : [...existingRules, newRule];
+    const hash = computeRulesHash(rules);
+    const at = new Date().toISOString();
+    const by = options.by?.trim() || 'owner';
+    let signature;
+    let publicKey;
+    if (config.mode === 'govern') {
+        const signed = signMessage(hash);
+        signature = signed.signature;
+        publicKey = signed.publicKey;
+    }
+    const rulesFile = RulesFileSchema.parse({
+        rules,
+        approval: { hash, at, by, signature, publicKey },
+    });
+    writeRulesFile(repoRoot, rulesFile, renderRulesFileBody(rulesFile));
+    deleteRuleProposal(repoRoot, options.id);
+    return { rule: newRule, created: !alreadyExists, signed: Boolean(signature) };
+}
+export function printRulesApproveResult(result) {
+    console.log(ui.ok(`✓ ${result.created ? 'added' : 'updated'} rule "${result.rule.id}"`));
+    console.log(`  ${result.rule.text}`);
+    console.log(`  ${ui.bold('signed')}  ${result.signed ? ui.ok('yes (governed)') : ui.dim('no (map-only — hash only)')}`);
+}
+// ── dismiss ──────────────────────────────────────────────────────────────────
+export async function runRulesDismiss(options) {
+    const repoRoot = await git.mainRepoRoot(options.cwd);
+    loadConfig(repoRoot);
+    if (!ruleProposalExists(repoRoot, options.id)) {
+        return { dismissed: false };
+    }
+    deleteRuleProposal(repoRoot, options.id);
+    return { dismissed: true };
+}
+export function printRulesDismissResult(id, result) {
+    console.log(result.dismissed
+        ? ui.ok(`✓ dismissed the proposal for "${id}" — the current rules are unchanged`)
+        : ui.dim(`no pending proposal for "${id}"`));
+}
+// ── verify (manual evidence for one rule) ─────────────────────────────────────
+export async function runRulesVerify(options) {
+    const repoRoot = await git.mainRepoRoot(options.cwd);
+    loadConfig(repoRoot);
+    const existing = readRulesFile(repoRoot).data;
+    const rule = existing?.rules.find((entry) => entry.id === options.id);
+    if (!existing || !rule) {
+        throw new UserError(`No rule "${options.id}" to verify.`, {
+            command: 'prismatica rules list',
+            why: 'only approved rules can be verified',
+        });
+    }
+    let commit;
+    try {
+        commit = await git.revParse(repoRoot, 'HEAD');
+    }
+    catch {
+        commit = undefined;
+    }
+    const updatedRule = {
+        ...rule,
+        evidence: { method: 'manual', at: new Date().toISOString(), commit },
+    };
+    const rules = existing.rules.map((entry) => (entry.id === options.id ? updatedRule : entry));
+    // Evidence is excluded from the rules hash, so the existing approval stays valid.
+    const rulesFile = { ...existing, rules };
+    writeRulesFile(repoRoot, rulesFile, renderRulesFileBody(rulesFile));
+    return { rule: updatedRule };
+}
+export function printRulesVerifyResult(result) {
+    console.log(ui.ok(`✓ marked "${result.rule.id}" manually verified`));
+}
+export async function runRulesApproveAll(options) {
+    const repoRoot = await git.mainRepoRoot(options.cwd);
+    const config = loadConfig(repoRoot);
+    const { proposals, problems } = listRuleProposals(repoRoot);
+    if (problems.length > 0) {
+        throw new UserError(`Some rule proposals could not be read, so the batch cannot be previewed honestly:\n${problems
+            .map((problem) => `  - ${problem.id}: ${problem.error}`)
+            .join('\n')}`, { command: 'prismatica rules list', why: 'fix or remove the unreadable proposal first' });
+    }
+    if (proposals.length === 0) {
+        return { completed: [], remaining: [], confirmed: false, signed: false };
+    }
+    const existing = readRulesFile(repoRoot).data;
+    const existingRules = existing?.rules ?? [];
+    const existingIds = new Set(existingRules.map((rule) => rule.id));
+    // The canonical state the whole batch is computed against. Rebound after the
+    // owner confirms: all rules share ONE signed file, so a concurrent approval
+    // between preview and write would otherwise be silently overwritten by a
+    // list assembled from stale bytes.
+    const existingHash = existing ? computeRulesHash(existingRules) : null;
+    const preview = proposals.map((proposal) => {
+        const id = normalizeRuleId(proposal.id);
+        const current = existingRules.find((rule) => rule.id === id);
+        return {
+            id,
+            action: existingIds.has(id) ? 'update' : 'new',
+            text: proposal.text,
+            createdAt: proposal.createdAt,
+            proposalFingerprint: stableStringify(proposal),
+            previousText: current?.text,
+            alreadyApplied: current?.text === proposal.text &&
+                (proposal.proposalType === 'update' || current.createdAt === proposal.createdAt),
+        };
+    });
+    // Prevalidate the whole batch: label coherence, and no two proposals racing
+    // for the same rule id (which would silently make one of them win).
+    const invalid = [];
+    const seen = new Set();
+    for (const [index, proposal] of proposals.entries()) {
+        const item = preview[index];
+        if (item.alreadyApplied) {
+            // The canonical rule already IS this text. Label coherence is moot —
+            // there is nothing to write, only a leftover file to clear. The duplicate
+            // check below still applies.
+            if (seen.has(item.id)) {
+                invalid.push(`two proposals both target "${item.id}"`);
+            }
+            seen.add(item.id);
+            continue;
+        }
+        if (proposal.proposalType === 'draft' && item.action === 'update') {
+            invalid.push(`"${item.id}" is labelled a new rule, but one already exists`);
+        }
+        if (proposal.proposalType === 'update' && item.action === 'new') {
+            invalid.push(`"${item.id}" is labelled an update, but no such rule exists`);
+        }
+        if (seen.has(item.id)) {
+            invalid.push(`two proposals both target "${item.id}"`);
+        }
+        seen.add(item.id);
+    }
+    if (invalid.length > 0) {
+        throw new UserError(`The batch was not approved — ${invalid.length} proposal(s) are inconsistent:\n${invalid
+            .map((why) => `  - ${why}`)
+            .join('\n')}`, { command: 'prismatica rules list', why: 'nothing was written; fix these and re-run' });
+    }
+    const confirmed = await options.confirm(preview);
+    if (!confirmed) {
+        return {
+            completed: [],
+            remaining: preview.map((item) => ({ id: item.id, why: 'not confirmed' })),
+            confirmed: false,
+            signed: false,
+        };
+    }
+    // Rebind to the exact state the preview was computed from, immediately before
+    // signing. Canonical rules and every complete parsed proposal are checked:
+    // the owner may only sign the list they actually read.
+    const nowRules = readRulesFile(repoRoot).data;
+    const nowHash = nowRules ? computeRulesHash(nowRules.rules) : null;
+    if (nowHash !== existingHash) {
+        throw new UserError('The app rules changed while this batch was being reviewed.', {
+            command: 'prismatica rules approve --all',
+            why: 'nothing was written — review the batch against the rules as they are now',
+        });
+    }
+    const nowBatch = listRuleProposals(repoRoot);
+    if (nowBatch.problems.length > 0) {
+        throw new UserError('A rule proposal became unreadable while this batch was being reviewed.', {
+            command: 'prismatica rules approve --all',
+            why: 'nothing was written — review the batch again after fixing the proposal',
+        });
+    }
+    const nowById = new Map(nowBatch.proposals.map((proposal) => [normalizeRuleId(proposal.id), stableStringify(proposal)]));
+    const previewIds = new Set(preview.map((item) => item.id));
+    const driftedIds = new Set(preview
+        .filter((item) => nowById.get(item.id) !== item.proposalFingerprint)
+        .map((item) => item.id));
+    for (const proposal of nowBatch.proposals) {
+        const id = normalizeRuleId(proposal.id);
+        if (!previewIds.has(id)) {
+            driftedIds.add(id);
+        }
+    }
+    if (nowBatch.proposals.length !== preview.length && driftedIds.size === 0) {
+        driftedIds.add('proposal set');
+    }
+    if (driftedIds.size > 0) {
+        throw new UserError(`The proposal(s) changed while this batch was being reviewed: ${[...driftedIds]
+            .sort()
+            .map((id) => `"${id}"`)
+            .join(', ')}.`, {
+            command: 'prismatica rules approve --all',
+            why: 'nothing was written — only what you actually read may be signed',
+        });
+    }
+    // Build the final list in memory, then sign and write it ONCE.
+    let rules = [...existingRules];
+    const completed = [];
+    for (const [index, proposal] of proposals.entries()) {
+        const item = preview[index];
+        const createdAt = rules.find((rule) => rule.id === item.id)?.createdAt ?? proposal.createdAt;
+        const rule = { id: item.id, text: proposal.text, createdAt };
+        rules =
+            item.action === 'update' ? rules.map((r) => (r.id === item.id ? rule : r)) : [...rules, rule];
+        completed.push({ id: item.id, action: item.action });
+    }
+    const hash = computeRulesHash(rules);
+    // A batch that is entirely `alreadyApplied` rebuilds a list identical to the
+    // one on disk. Rules live in ONE aggregate signed file, so — unlike a flow —
+    // "write nothing" is not automatic here: signing again would produce a fresh
+    // signature and timestamp over unchanged content, making an interrupted run's
+    // recovery look like a new owner decision in the record. Comparing the
+    // rebuilt hash to the canonical one keeps the finishing half of an
+    // interrupted run genuinely inert, which is what "re-running is safe" has to
+    // mean. The leftover proposals below are still cleared.
+    const unchanged = hash === existingHash;
+    let signature;
+    if (!unchanged) {
+        let publicKey;
+        if (config.mode === 'govern') {
+            const signed = signMessage(hash);
+            signature = signed.signature;
+            publicKey = signed.publicKey;
+        }
+        const rulesFile = RulesFileSchema.parse({
+            rules,
+            approval: {
+                hash,
+                at: new Date().toISOString(),
+                by: options.by?.trim() || 'owner',
+                signature,
+                publicKey,
+            },
+        });
+        // Canonical success precedes proposal removal, exactly as single approval
+        // does: if the write throws, every proposal is still on disk and re-running
+        // repeats the whole batch safely.
+        writeRulesFile(repoRoot, rulesFile, renderRulesFileBody(rulesFile));
+    }
+    const remaining = [];
+    for (const proposal of proposals) {
+        try {
+            deleteRuleProposal(repoRoot, proposal.id);
+        }
+        catch (error) {
+            remaining.push({
+                id: proposal.id,
+                why: `approved and written, but the proposal file could not be removed: ${error instanceof Error ? error.message : String(error)}`,
+            });
+        }
+    }
+    return { completed, remaining, confirmed: true, signed: Boolean(signature) };
+}
+//# sourceMappingURL=rules.js.map

package/dist/commands/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/commands/rules.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAiB,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,GAEf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAgD,MAAM,qBAAqB,CAAC;AACpG,OAAO,KAAK,EAAE,MAAM,UAAU,CAAC;AAY/B,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAwB;IACzD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC/C,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE5D,MAAM,SAAS,GAAG,SAAS;QACzB,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;QACtE,CAAC,CAAC,IAAI,CAAC;IAET,yEAAyE;IACzE,sCAAsC;IACtC,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAe;QACxB,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC,aAAa,CAAC;YACZ,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;SAC3C,CAAC,CACH;QACD,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC5B,aAAa,CAAC;YACZ,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;YAC5D,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC,CACH;KACF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,OAAO;QACL,KAAK;QACL,QAAQ;QACR,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QACjD,gBAAgB,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAqC;IACzD,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,cAAc;IACrB,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAsB,EACtB,UAAiE,EAAE;IAEnE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC;IAClD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,GAAG,cAAc,mDAAmD,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,mBAAmB,CACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CACpD,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAErE,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,KAAiB,EAAE,EAAE;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;gBACpF,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;IAEF,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACvF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,UAAU,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,UAAU,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,6BAA6B,CAAC,CAAC,CAAC;QAC5E,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAUD,SAAS,eAAe,CAAC,EAAU;IACjC,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAIrC;IACC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEpC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,qBAAqB,OAAO,CAAC,EAAE,eAAe,EAAE;YAClE,OAAO,EAAE,uBAAuB;YAChC,GAAG,EAAE,0CAA0C;SAChD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAiB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;IAC3E,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC9C,MAAM,aAAa,GAAG,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAEvE,IAAI,QAAQ,CAAC,YAAY,KAAK,OAAO,IAAI,aAAa,EAAE,CAAC;QACvD,MAAM,IAAI,SAAS,CACjB,WAAW,MAAM,+DAA+D,EAChF;YACE,OAAO,EAAE,oCAAoC,OAAO,CAAC,EAAE,kCAAkC;YACzF,GAAG,EAAE,uDAAuD;SAC7D,CACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CACjB,qBAAqB,MAAM,0DAA0D,EACrF;YACE,OAAO,EAAE,oCAAoC,OAAO,CAAC,EAAE,iCAAiC;YACxF,GAAG,EAAE,uDAAuD;SAC7D,CACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GACb,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;IACpF,MAAM,OAAO,GAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACrE,MAAM,KAAK,GACT,QAAQ,CAAC,YAAY,KAAK,QAAQ;QAChC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,OAAO,CAAC,CAAC;IAElC,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;IACzC,IAAI,SAA6B,CAAC;IAClC,IAAI,SAA6B,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7B,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAc,eAAe,CAAC,KAAK,CAAC;QACjD,KAAK;QACL,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;KACjD,CAAC,CAAC;IACH,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACpE,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAEzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IAChE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,UAAU,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAC3G,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAGrC;IACC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrB,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAU,EAAE,MAA8B;IAChF,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,SAAS;QACd,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,iCAAiC,EAAE,qCAAqC,CAAC;QACjF,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAGpC;IACC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,YAAY,OAAO,CAAC,EAAE,cAAc,EAAE;YACxD,OAAO,EAAE,uBAAuB;YAChC,GAAG,EAAE,qCAAqC;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,WAAW,GAAS;QACxB,GAAG,IAAI;QACP,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE;KACrE,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7F,kFAAkF;IAClF,MAAM,SAAS,GAAc,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC;IACpD,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAsB;IAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;AACvE,CAAC;AAmDD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA0B;IACjE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEpC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CACjB,sFAAsF,QAAQ;aAC3F,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;aACvD,IAAI,CAAC,IAAI,CAAC,EAAE,EACf,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,6CAA6C,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC9C,MAAM,aAAa,GAAG,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAElE,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,mCAAmC;IACnC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvE,MAAM,OAAO,GAAwB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9D,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,OAAO;YACL,EAAE;YACF,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;YAC9C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,mBAAmB,EAAE,eAAe,CAAC,QAAQ,CAAC;YAC9C,YAAY,EAAE,OAAO,EAAE,IAAI;YAC3B,cAAc,EACZ,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,IAAI;gBAC/B,CAAC,QAAQ,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC;SACnF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,qEAAqE;YACrE,0EAA0E;YAC1E,6BAA6B;YAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,YAAY,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,kDAAkD,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,kDAAkD,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CACjB,gCAAgC,OAAO,CAAC,MAAM,mCAAmC,OAAO;aACrF,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC;aAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,EACf,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,2CAA2C,EAAE,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YACzE,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,uDAAuD;IACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,4DAA4D,EAAE;YAChF,OAAO,EAAE,gCAAgC;YACzC,GAAG,EAAE,0EAA0E;SAChF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,wEAAwE,EAAE;YAC5F,OAAO,EAAE,gCAAgC;YACzC,GAAG,EAAE,wEAAwE;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAChG,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,OAAO;SACJ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC;SACnE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAC1B,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1E,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CACjB,gEAAgE,CAAC,GAAG,UAAU,CAAC;aAC5E,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;aACtB,IAAI,CAAC,IAAI,CAAC,GAAG,EAChB;YACE,OAAO,EAAE,gCAAgC;YACzC,GAAG,EAAE,iEAAiE;SACvE,CACF,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,IAAI,KAAK,GAAW,CAAC,GAAG,aAAa,CAAC,CAAC;IACvC,MAAM,SAAS,GAA+C,EAAE,CAAC;IACjE,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;QAC7F,MAAM,IAAI,GAAS,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACnE,KAAK;YACH,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC;QAChG,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAErC,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,uEAAuE;IACvE,mEAAmE;IACnE,6EAA6E;IAC7E,wDAAwD;IACxD,MAAM,SAAS,GAAG,IAAI,KAAK,YAAY,CAAC;IACxC,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,SAA6B,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACjC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC7B,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC/B,CAAC;QACD,MAAM,SAAS,GAAc,eAAe,CAAC,KAAK,CAAC;YACjD,KAAK;YACL,QAAQ,EAAE;gBACR,IAAI;gBACJ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,OAAO;gBACjC,SAAS;gBACT,SAAS;aACV;SACF,CAAC,CAAC;QAEH,0EAA0E;QAC1E,4EAA4E;QAC5E,kCAAkC;QAClC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAkC,EAAE,CAAC;IACpD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,IAAI,CAAC;gBACb,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,GAAG,EAAE,qEAAqE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aACnI,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;AAC/E,CAAC"}

package/dist/commands/seal.js

@@ -0,0 +1,52 @@
+/**
+ * `seal` — recompute the change's patch-id and compare it to the one the review
+ * was bound to. If the code changed since the review, the seal fails and demands
+ * a re-review. If it matches, the review is sealed to that exact diff.
+ */
+import fs from 'node:fs';
+import { resolveChangeHome, resolveContractId } from '../change.js';
+import { loadConfig } from '../config.js';
+import { UserError } from '../errors.js';
+import * as git from '../git.js';
+import { readContract, readReview, reviewPath } from '../records/store.js';
+import { writeMarkdownRecord } from '../records/store.js';
+import { ReviewSchema } from '../records/types.js';
+import * as ui from '../ui.js';
+export async function runSeal(options) {
+    const mainRoot = await git.mainRepoRoot(options.cwd);
+    const config = loadConfig(mainRoot);
+    const contractId = await resolveContractId(options.cwd, config.mainBranch, options.contractId);
+    const home = await resolveChangeHome(options.cwd, contractId);
+    if (!fs.existsSync(reviewPath(home, contractId))) {
+        throw new UserError(`No review to seal for "${contractId}".`, {
+            command: `prismatica review ${contractId}`,
+            why: 'draft a review before sealing it',
+        });
+    }
+    const { data: contract } = readContract(home, contractId);
+    const { data: review, body } = readReview(home, contractId);
+    const patchId = await git.computePatchId(home, contract.baseline.commit, git.EXCLUDE_RECORDS);
+    if (patchId !== review.patchId) {
+        throw new UserError('The code changed since this review — the seal does not match. The review must be redone.', {
+            command: `prismatica review ${options.contractId}`,
+            why: 'a sealed review must bind to the exact diff that ships (the maths checks, not the chat)',
+        });
+    }
+    const sealed = ReviewSchema.parse({
+        ...review,
+        state: 'sealed',
+        verdict: options.verdict ?? 'approve',
+        sealedAt: new Date().toISOString(),
+    });
+    writeMarkdownRecord(reviewPath(home, review.id), sealed, body);
+    return { review: sealed, patchId };
+}
+export function printSealResult(result) {
+    console.log(ui.ok(`✓ review sealed for ${result.review.contractId}`));
+    console.log('');
+    console.log(`  ${ui.bold('verdict')}    ${result.review.verdict}`);
+    console.log(`  ${ui.bold('bound to')}   ${result.patchId}`);
+    console.log('');
+    console.log(ui.dim('  the gate will accept this review only while the diff matches.'));
+}
+//# sourceMappingURL=seal.js.map

package/dist/commands/seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.js","sourceRoot":"","sources":["../../src/commands/seal.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAe,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,UAAU,CAAC;AAc/B,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB;IAChD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAE9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,0BAA0B,UAAU,IAAI,EAAE;YAC5D,OAAO,EAAE,qBAAqB,UAAU,EAAE;YAC1C,GAAG,EAAE,kCAAkC;SACxC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAE5D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9F,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CACjB,0FAA0F,EAC1F;YACE,OAAO,EAAE,qBAAqB,OAAO,CAAC,UAAU,EAAE;YAClD,GAAG,EAAE,yFAAyF;SAC/F,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAW,YAAY,CAAC,KAAK,CAAC;QACxC,GAAG,MAAM;QACT,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;QACrC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC,CAAC;IACH,mBAAmB,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAE/D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,uBAAuB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC,CAAC;AACzF,CAAC"}