prismatica 0.2.0

package/dist/detect.js

@@ -0,0 +1,495 @@
+/**
+ * Capability detection for adopting a repo: what proof tooling already exists?
+ * Detected tools become enabled checks in config.json; everything absent is
+ * reported as Missing with exact fix steps — configured checks fail closed,
+ * unconfigured ones are reported, never silently skipped.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { execa } from 'execa';
+import * as YAML from 'yaml';
+import { z } from 'zod';
+import { ghApiJson, ghAuthenticated, ghInstalled, githubSlug } from './gh.js';
+function readPackageJson(cwd) {
+    try {
+        return JSON.parse(fs.readFileSync(path.join(cwd, 'package.json'), 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function hasDependency(pkg, name) {
+    return Boolean(pkg?.dependencies?.[name] ?? pkg?.devDependencies?.[name]);
+}
+function hasScript(pkg, name) {
+    return Boolean(pkg?.scripts?.[name]);
+}
+function anyExists(cwd, candidates) {
+    return candidates.some((candidate) => fs.existsSync(path.join(cwd, candidate)));
+}
+async function probeGitleaks() {
+    const result = await execa('gitleaks', ['version'], { reject: false });
+    return !result.failed;
+}
+/**
+ * The exact shapes recognised as a real `prismatica gate` invocation, applied
+ * only to `jobs.*.steps[].run` — never a step's `name` or a YAML comment.
+ * Each pattern is anchored to `^` and tested against one `;`/`&&`/`||`/`|`
+ * -separated command segment at a time (never the whole line), so it can
+ * only match when "prismatica"/"npx"/"node ...dist/cli.js" is the segment's
+ * own first token — never a substring elsewhere in the line (a comment, an
+ * `echo`/`grep`/`printf` argument, "myprismatica gateway").
+ *
+ * Each pattern now also says WHICH reader that segment runs. The pinned form is
+ * tested first, but the order is not load-bearing: the unpinned patterns
+ * require whitespace immediately after `prismatica`, so `prismatica@0.2.0` can
+ * never satisfy one. A half-written pin (`prismatica@ gate`) satisfies neither
+ * and is therefore not recognised as a gate invocation at all — fail closed,
+ * exactly as unparsable YAML does.
+ */
+const GATE_INVOCATION_PATTERNS = [
+    // One exact published version. The capture group is the pinned version.
+    { kind: 'exact-pin', pattern: /^npx\s+(?:--yes\s+|-y\s+)?prismatica@(\S+)\s+gate(?:\s|$)/ },
+    { kind: 'legacy-unpinned', pattern: /^prismatica\s+gate(?:\s|$)/ },
+    { kind: 'legacy-unpinned', pattern: /^npx\s+(?:--yes\s+|-y\s+)?prismatica\s+gate(?:\s|$)/ },
+    // `node <anything>/dist/cli.js gate` — covers both a plain relative path and
+    // the live trusted-main form (`node "$RUNNER_TEMP/prismatica-trusted/dist/cli.js" gate`).
+    { kind: 'self-hosted', pattern: /^node\s+"?[^"\s]*dist\/cli\.js"?\s+gate(?:\s|$)/ },
+];
+/** What this `run` block invokes, or null when nothing in it reaches the gate. */
+function runStepGateInvocation(run) {
+    for (const rawLine of run.split('\n')) {
+        const line = rawLine.trim();
+        if (line === '' || line.startsWith('#')) {
+            continue; // blank or a full-line comment
+        }
+        // Strip a trailing inline comment (conservative: only after whitespace).
+        const command = line.replace(/\s+#.*$/, '');
+        for (const rawSegment of command.split(/[;&|]+/)) {
+            const segment = rawSegment.trim();
+            if (segment === '') {
+                continue;
+            }
+            for (const { kind, pattern } of GATE_INVOCATION_PATTERNS) {
+                const match = pattern.exec(segment);
+                if (match) {
+                    return { kind, pinnedVersion: match[1] };
+                }
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Structurally parses each workflow file (the `yaml` dependency already in
+ * use elsewhere) and inspects only `jobs.*.steps[].run` — never a step's
+ * `name`, a comment, or echoed text. Unparsable YAML is never treated as a
+ * match (fails closed to "missing", not a crash or a false positive).
+ */
+function findGateWorkflow(cwd) {
+    const workflowsDir = path.join(cwd, '.github', 'workflows');
+    if (!fs.existsSync(workflowsDir)) {
+        return null;
+    }
+    // Sorted, so which invocation is reported never depends on directory order.
+    for (const file of fs.readdirSync(workflowsDir).sort()) {
+        if (!/\.ya?ml$/.test(file)) {
+            continue;
+        }
+        let doc;
+        try {
+            doc = YAML.parse(fs.readFileSync(path.join(workflowsDir, file), 'utf8'));
+        }
+        catch {
+            continue; // malformed YAML is never a match
+        }
+        const jobs = doc && typeof doc === 'object' ? (doc.jobs ?? {}) : {};
+        for (const job of Object.values(jobs)) {
+            const steps = Array.isArray(job?.steps) ? job.steps : [];
+            for (const step of steps) {
+                const found = typeof step?.run === 'string' ? runStepGateInvocation(step.run) : null;
+                if (found) {
+                    return { ...found, workflow: file };
+                }
+            }
+        }
+    }
+    return null;
+}
+const ProtectionSchema = z.looseObject({
+    required_status_checks: z.looseObject({ contexts: z.array(z.string()).default([]) }).nullish(),
+});
+/**
+ * GitHub's own wording when required status checks are not offered for this
+ * repository's plan (notably a private repo on GitHub Free). Deliberately
+ * narrow, and only ever consulted ALONGSIDE an HTTP 403 — a plan limit and a
+ * permissions refusal share a status code, and neither may be guessed from
+ * prose alone.
+ */
+const PLAN_LIMITED_MESSAGE = /upgrade to github (pro|team)|make this repository public/i;
+/**
+ * `GET /repos/{owner}/{repo}/branches/{branch}` — every field but the one we
+ * read is ignored. `protected` is the whole point of asking.
+ */
+const BranchSchema = z.looseObject({ protected: z.boolean() });
+/**
+ * Ask the branch itself whether it is protected — the corroboration without
+ * which a 404 from the protection endpoint proves nothing.
+ *
+ * GitHub documents 404 on `/branches/{branch}/protection` as the generic
+ * "Resource not found", and the endpoint requires Administration-read
+ * permission. So a 404 there is consistent with several different worlds: the
+ * branch really is unprotected; the token cannot see the repository; the
+ * configured branch does not exist. The prerequisites already checked (gh
+ * installed, signed in, an origin remote) establish none of them.
+ *
+ * `GET /repos/{owner}/{repo}/branches/{branch}` narrows that down and — this
+ * is why it is the right second call — needs only ordinary repository READ
+ * access, so it is not a second permission probe that could fail for the same
+ * reason as the first. A 200 proves the repository is visible and the branch
+ * exists, and `protected: false` is GitHub's own answer to the question this
+ * module is asking. Anything else is silence, and silence stays silence: only
+ * `unprotected` may be reported as absence.
+ *
+ * Deliberately NOT done here: reading `permissions.admin` off the repository.
+ * It is a third round-trip, and its absence would prove nothing about a
+ * fine-grained token's scopes.
+ */
+async function probeBranchProtectedFlag(cwd, slug, mainBranch) {
+    const result = await ghApiJson(branchEndpoint(slug, mainBranch), cwd);
+    if (!result.ok) {
+        return 'unknown';
+    }
+    const parsed = BranchSchema.safeParse(result.data);
+    if (!parsed.success) {
+        return 'unknown';
+    }
+    return parsed.data.protected ? 'protected' : 'unprotected';
+}
+/**
+ * Only the branch is encoded: `slug` is `owner/repo`, whose `/` is a real path
+ * separator, while a branch name may legitimately contain `/`
+ * (`release/2026-08`) and every other character a URL reserves. Left raw, such
+ * a branch splits into extra path segments and GitHub answers 404 about an
+ * endpoint that never existed — which, before the corroboration above, was
+ * reported to the owner as an unprotected branch.
+ */
+function branchEndpoint(slug, mainBranch) {
+    return `repos/${slug}/branches/${encodeURIComponent(mainBranch)}`;
+}
+async function probeBranchProtection(cwd, mainBranch) {
+    const base = { id: 'branch-protection', label: 'Branch protection' };
+    if (!(await ghInstalled())) {
+        return {
+            outcome: 'prerequisite-missing',
+            capability: {
+                ...base,
+                status: 'missing',
+                detail: 'the gh CLI is not installed, so branch protection cannot be checked or managed',
+                fix: 'brew install gh   (then: gh auth login)',
+            },
+        };
+    }
+    if (!(await ghAuthenticated())) {
+        return {
+            outcome: 'prerequisite-missing',
+            capability: {
+                ...base,
+                status: 'missing',
+                detail: 'gh is installed but not signed in to GitHub',
+                fix: 'gh auth login',
+            },
+        };
+    }
+    const slug = await githubSlug(cwd);
+    if (!slug) {
+        return {
+            outcome: 'prerequisite-missing',
+            capability: {
+                ...base,
+                status: 'missing',
+                detail: 'no GitHub remote named origin yet',
+                fix: 'gh repo create --source . --private --push   (or git remote add origin <url>)',
+            },
+        };
+    }
+    const result = await ghApiJson(`${branchEndpoint(slug, mainBranch)}/protection`, cwd);
+    const enableFix = `on GitHub: Settings → Branches → add a rule for "${mainBranch}" that requires the "prismatica-gate" status check`;
+    if (!result.ok) {
+        // A 404 here is NOT an answer — it is GitHub's generic "Resource not
+        // found", and this endpoint needs Administration-read to answer at all.
+        // Only the branch's own `protected` flag can turn it into one.
+        if (result.status === 404) {
+            const flag = await probeBranchProtectedFlag(cwd, slug, mainBranch);
+            if (flag === 'unprotected') {
+                return {
+                    outcome: 'absent',
+                    capability: {
+                        ...base,
+                        status: 'missing',
+                        detail: `"${mainBranch}" on ${slug} has no branch protection — the gate can be bypassed`,
+                        fix: enableFix,
+                    },
+                };
+            }
+            return {
+                outcome: 'unreachable',
+                capability: {
+                    ...base,
+                    status: 'indeterminate',
+                    detail: flag === 'protected'
+                        ? `"${mainBranch}" on ${slug} reports itself protected, but GitHub would not say which checks it requires — this is NOT evidence that the gate is unrequired`
+                        : `GitHub returned 404 for "${mainBranch}" on ${slug}, and could not confirm that the branch exists and is visible — a missing branch and a token that cannot see the repository answer identically, so this is NOT evidence that it is unprotected`,
+                },
+            };
+        }
+        // A 403 the plan itself explains. There is nothing the owner can switch on
+        // here, so printing a settings fix would be an impossible instruction.
+        if (result.status === 403 && PLAN_LIMITED_MESSAGE.test(result.message ?? '')) {
+            return {
+                outcome: 'unavailable-on-plan',
+                capability: {
+                    ...base,
+                    status: 'unavailable',
+                    detail: `required status checks are not available for ${slug} on this plan — \`prismatica merge\` is the guard instead (see \`prismatica guide mergepath\`)`,
+                },
+            };
+        }
+        // Everything else — a generic 403, a 5xx, an unreadable body, a network
+        // drop — leaves the question genuinely open. Say so; never call it absent.
+        return {
+            outcome: 'unreachable',
+            capability: {
+                ...base,
+                status: 'indeterminate',
+                detail: `GitHub could not answer whether "${mainBranch}" on ${slug} is protected${result.status ? ` (HTTP ${result.status})` : ''} — this is NOT evidence that it is unprotected`,
+            },
+        };
+    }
+    const parsed = ProtectionSchema.safeParse(result.data);
+    if (!parsed.success) {
+        return {
+            outcome: 'unreachable',
+            capability: {
+                ...base,
+                status: 'indeterminate',
+                detail: `GitHub answered about "${mainBranch}" on ${slug} in a shape this version does not understand — this is NOT evidence that it is unprotected`,
+            },
+        };
+    }
+    const contexts = parsed.data.required_status_checks?.contexts ?? [];
+    if (contexts.includes('prismatica-gate')) {
+        return {
+            outcome: 'required',
+            capability: {
+                ...base,
+                status: 'enforced',
+                detail: `"${mainBranch}" on ${slug} requires the prismatica-gate check before merge`,
+            },
+        };
+    }
+    return {
+        outcome: 'protected-not-required',
+        capability: {
+            ...base,
+            status: 'checked',
+            detail: `"${mainBranch}" on ${slug} is protected, but prismatica-gate is not a required check`,
+            fix: enableFix,
+        },
+    };
+}
+export async function detectCapabilities(cwd, options = {}) {
+    const pkg = readPackageJson(cwd);
+    const capabilities = [];
+    const stack = [];
+    const mainBranch = options.mainBranch ?? 'main';
+    // Typecheck
+    const hasTypescript = anyExists(cwd, ['tsconfig.json']) || hasDependency(pkg, 'typescript');
+    const typecheckCommand = hasScript(pkg, 'typecheck') ? 'npm run typecheck' : 'npx tsc --noEmit';
+    if (hasTypescript) {
+        stack.push('typescript');
+        capabilities.push({
+            id: 'typecheck',
+            label: 'Typecheck',
+            status: 'checked',
+            detail: typecheckCommand,
+        });
+    }
+    else {
+        capabilities.push({
+            id: 'typecheck',
+            label: 'Typecheck',
+            status: 'missing',
+            detail: 'no tsconfig.json or typescript dependency found',
+            fix: 'npm install -D typescript && npx tsc --init',
+        });
+    }
+    // Lint
+    const hasEslint = hasDependency(pkg, 'eslint') ||
+        anyExists(cwd, [
+            'eslint.config.js',
+            'eslint.config.mjs',
+            'eslint.config.cjs',
+            'eslint.config.ts',
+            '.eslintrc.json',
+            '.eslintrc.js',
+            '.eslintrc.cjs',
+            '.eslintrc.yml',
+        ]);
+    const lintCommand = hasScript(pkg, 'lint') ? 'npm run lint' : 'npx eslint .';
+    if (hasEslint) {
+        stack.push('eslint');
+        capabilities.push({ id: 'lint', label: 'Lint', status: 'checked', detail: lintCommand });
+    }
+    else {
+        capabilities.push({
+            id: 'lint',
+            label: 'Lint',
+            status: 'missing',
+            detail: 'no eslint config or dependency found',
+            fix: 'npm init @eslint/config@latest',
+        });
+    }
+    // Unit tests — always run with the JSON reporter so results are parseable proof.
+    const hasVitest = hasDependency(pkg, 'vitest') ||
+        anyExists(cwd, ['vitest.config.ts', 'vitest.config.js', 'vitest.config.mts']);
+    if (hasVitest) {
+        stack.push('vitest');
+        capabilities.push({
+            id: 'unit',
+            label: 'Unit tests',
+            status: 'checked',
+            detail: 'npx vitest run --reporter=json',
+        });
+    }
+    else {
+        capabilities.push({
+            id: 'unit',
+            label: 'Unit tests',
+            status: 'missing',
+            detail: 'no vitest config or dependency found',
+            fix: 'npm install -D vitest   (then add tests next to your modules)',
+        });
+    }
+    // Build
+    const hasBuild = hasScript(pkg, 'build');
+    if (hasBuild) {
+        capabilities.push({ id: 'build', label: 'Build', status: 'checked', detail: 'npm run build' });
+    }
+    else {
+        capabilities.push({
+            id: 'build',
+            label: 'Build',
+            status: 'missing',
+            detail: 'package.json has no "build" script',
+            fix: 'add a "build" script to package.json so the gate can prove the app compiles',
+        });
+    }
+    // Browser journeys
+    const hasPlaywright = hasDependency(pkg, '@playwright/test') ||
+        anyExists(cwd, ['playwright.config.ts', 'playwright.config.js']);
+    if (hasPlaywright) {
+        stack.push('playwright');
+        capabilities.push({
+            id: 'journeys',
+            label: 'Browser journeys',
+            status: 'checked',
+            detail: 'npx playwright test',
+        });
+    }
+    else {
+        capabilities.push({
+            id: 'journeys',
+            label: 'Browser journeys',
+            status: 'missing',
+            detail: 'no Playwright config or dependency found',
+            fix: 'npm install -D @playwright/test && npx playwright install',
+        });
+    }
+    // Secret scan — the regex fallback means this is never missing, only weaker.
+    const gitleaks = options.gitleaksAvailable ?? (await probeGitleaks());
+    capabilities.push({
+        id: 'secret-scan',
+        label: 'Secret scan',
+        status: 'checked',
+        detail: gitleaks
+            ? 'gitleaks'
+            : 'built-in regex fallback (install gitleaks for stronger scanning: brew install gitleaks)',
+    });
+    // Gate workflow. The capability row is derived from whether an invocation was
+    // recognised AT ALL — provenance is reported separately (`gateInvocation`) and
+    // deliberately moves no status: an unpinned gate is still a running gate.
+    const gateInvocation = findGateWorkflow(cwd);
+    capabilities.push(gateInvocation
+        ? {
+            id: 'gate-workflow',
+            label: 'Gate workflow',
+            status: 'checked',
+            detail: '.github/workflows runs prismatica gate on pull requests',
+        }
+        : {
+            id: 'gate-workflow',
+            label: 'Gate workflow',
+            status: 'missing',
+            detail: 'no GitHub Action runs prismatica gate yet',
+            fix: 'prismatica init   (writes .github/workflows/prismatica-gate.yml)',
+        });
+    // Branch protection — the difference between "checked" and "enforced", and
+    // between both of those and never having asked. A skipped probe is
+    // indeterminate, not missing: we learned nothing, so we assert nothing.
+    const protection = options.branchProtection === 'skip'
+        ? {
+            outcome: 'not-probed',
+            capability: {
+                id: 'branch-protection',
+                label: 'Branch protection',
+                status: 'indeterminate',
+                detail: 'not probed (GitHub was skipped) — run `prismatica doctor` to ask GitHub',
+            },
+        }
+        : await probeBranchProtection(cwd, mainBranch);
+    capabilities.push(protection.capability);
+    // Docs
+    const hasReadme = anyExists(cwd, ['README.md', 'readme.md', 'README']);
+    capabilities.push(hasReadme
+        ? { id: 'docs', label: 'Docs', status: 'checked', detail: 'README present' }
+        : {
+            id: 'docs',
+            label: 'Docs',
+            status: 'missing',
+            detail: 'no README found',
+            fix: 'add a README.md — the docs-delta check needs somewhere to land',
+        });
+    if (fs.existsSync(path.join(cwd, '.github', 'workflows'))) {
+        stack.push('github-actions');
+    }
+    if (hasDependency(pkg, 'prettier')) {
+        stack.push('prettier');
+    }
+    const checks = {
+        typecheck: hasTypescript
+            ? { enabled: true, command: typecheckCommand }
+            : { enabled: false, note: 'not detected at init — see the Missing table' },
+        lint: hasEslint
+            ? { enabled: true, command: lintCommand }
+            : { enabled: false, note: 'not detected at init — see the Missing table' },
+        unit: hasVitest
+            ? { enabled: true, command: 'npx vitest run --reporter=json' }
+            : { enabled: false, note: 'not detected at init — see the Missing table' },
+        build: hasBuild
+            ? { enabled: true, command: 'npm run build' }
+            : { enabled: false, note: 'not detected at init — see the Missing table' },
+        journeys: hasPlaywright
+            ? { enabled: true, command: 'npx playwright test' }
+            : { enabled: false, note: 'not detected at init — see the Missing table' },
+        secrets: { enabled: true, mode: gitleaks ? 'gitleaks' : 'regex' },
+    };
+    return {
+        capabilities,
+        checks,
+        stack,
+        branchProtection: protection.outcome,
+        gateInvocation,
+    };
+}
+//# sourceMappingURL=detect.js.map

package/dist/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AA6F9E,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAuB,EAAE,IAAY;IAC1D,OAAO,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB,EAAE,IAAY;IACtD,OAAO,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,UAAoB;IAClD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,wBAAwB,GAAoD;IAChF,wEAAwE;IACxE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2DAA2D,EAAE;IAC3F,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IAClE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAC3F,6EAA6E;IAC7E,0FAA0F;IAC1F,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iDAAiD,EAAE;CACpF,CAAC;AAEF,kFAAkF;AAClF,SAAS,qBAAqB,CAC5B,GAAW;IAEX,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS,CAAC,+BAA+B;QAC3C,CAAC;QACD,yEAAyE;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,wBAAwB,EAAE,CAAC;gBACzD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACpC,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,GAAiB,CAAC;QACtB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAiB,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,kCAAkC;QAC9C,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAkB,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,KAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,OAAO,IAAI,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrF,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC;IACrC,sBAAsB,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/F,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,2DAA2D,CAAC;AAEzF;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAK/D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,KAAK,UAAU,wBAAwB,CACrC,GAAW,EACX,IAAY,EACZ,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,UAAkB;IACtD,OAAO,SAAS,IAAI,aAAa,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;AACpE,CAAC;AAOD,KAAK,UAAU,qBAAqB,CAClC,GAAW,EACX,UAAkB;IAElB,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,EAAW,CAAC;IAC9E,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,OAAO,EAAE,sBAAsB;YAC/B,UAAU,EAAE;gBACV,GAAG,IAAI;gBACP,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,gFAAgF;gBACxF,GAAG,EAAE,yCAAyC;aAC/C;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,eAAe,EAAE,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,sBAAsB;YAC/B,UAAU,EAAE;gBACV,GAAG,IAAI;gBACP,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,6CAA6C;gBACrD,GAAG,EAAE,eAAe;aACrB;SACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,OAAO,EAAE,sBAAsB;YAC/B,UAAU,EAAE;gBACV,GAAG,IAAI;gBACP,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,mCAAmC;gBAC3C,GAAG,EAAE,+EAA+E;aACrF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,oDAAoD,UAAU,oDAAoD,CAAC;IAErI,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,qEAAqE;QACrE,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACnE,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,UAAU,EAAE;wBACV,GAAG,IAAI;wBACP,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,IAAI,UAAU,QAAQ,IAAI,sDAAsD;wBACxF,GAAG,EAAE,SAAS;qBACf;iBACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,aAAa;gBACtB,UAAU,EAAE;oBACV,GAAG,IAAI;oBACP,MAAM,EAAE,eAAe;oBACvB,MAAM,EACJ,IAAI,KAAK,WAAW;wBAClB,CAAC,CAAC,IAAI,UAAU,QAAQ,IAAI,iIAAiI;wBAC7J,CAAC,CAAC,4BAA4B,UAAU,QAAQ,IAAI,gMAAgM;iBACzP;aACF,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7E,OAAO;gBACL,OAAO,EAAE,qBAAqB;gBAC9B,UAAU,EAAE;oBACV,GAAG,IAAI;oBACP,MAAM,EAAE,aAAa;oBACrB,MAAM,EAAE,gDAAgD,IAAI,gGAAgG;iBAC7J;aACF,CAAC;QACJ,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,UAAU,EAAE;gBACV,GAAG,IAAI;gBACP,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,oCAAoC,UAAU,QAAQ,IAAI,gBAAgB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,gDAAgD;aAClL;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,UAAU,EAAE;gBACV,GAAG,IAAI;gBACP,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,0BAA0B,UAAU,QAAQ,IAAI,4FAA4F;aACrJ;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,QAAQ,IAAI,EAAE,CAAC;IACpE,IAAI,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,UAAU,EAAE;gBACV,GAAG,IAAI;gBACP,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,IAAI,UAAU,QAAQ,IAAI,kDAAkD;aACrF;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,wBAAwB;QACjC,UAAU,EAAE;YACV,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,IAAI,UAAU,QAAQ,IAAI,4DAA4D;YAC9F,GAAG,EAAE,SAAS;SACf;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,UAAyB,EAAE;IAE3B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,YAAY,GAAiB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAEhD,YAAY;IACZ,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5F,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAChG,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,YAAY,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,WAAW;YACf,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,WAAW;YACf,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iDAAiD;YACzD,GAAG,EAAE,6CAA6C;SACnD,CAAC,CAAC;IACL,CAAC;IAED,OAAO;IACP,MAAM,SAAS,GACb,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC5B,SAAS,CAAC,GAAG,EAAE;YACb,kBAAkB;YAClB,mBAAmB;YACnB,mBAAmB;YACnB,kBAAkB;YAClB,gBAAgB;YAChB,cAAc;YACd,eAAe;YACf,eAAe;SAChB,CAAC,CAAC;IACL,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;IAC7E,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3F,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,MAAM;YACV,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,sCAAsC;YAC9C,GAAG,EAAE,gCAAgC;SACtC,CAAC,CAAC;IACL,CAAC;IAED,iFAAiF;IACjF,MAAM,SAAS,GACb,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC5B,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAChF,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,MAAM;YACV,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,gCAAgC;SACzC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,MAAM;YACV,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,sCAAsC;YAC9C,GAAG,EAAE,+DAA+D;SACrE,CAAC,CAAC;IACL,CAAC;IAED,QAAQ;IACR,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACjG,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,OAAO;YACX,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,oCAAoC;YAC5C,GAAG,EAAE,6EAA6E;SACnF,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,MAAM,aAAa,GACjB,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC;QACtC,SAAS,CAAC,GAAG,EAAE,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACnE,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,YAAY,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,0CAA0C;YAClD,GAAG,EAAE,2DAA2D;SACjE,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,iBAAiB,IAAI,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC;IACtE,YAAY,CAAC,IAAI,CAAC;QAChB,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,yFAAyF;KAC9F,CAAC,CAAC;IAEH,8EAA8E;IAC9E,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,YAAY,CAAC,IAAI,CACf,cAAc;QACZ,CAAC,CAAC;YACE,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,yDAAyD;SAClE;QACH,CAAC,CAAC;YACE,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,2CAA2C;YACnD,GAAG,EAAE,kEAAkE;SACxE,CACN,CAAC;IAEF,2EAA2E;IAC3E,mEAAmE;IACnE,wEAAwE;IACxE,MAAM,UAAU,GACd,OAAO,CAAC,gBAAgB,KAAK,MAAM;QACjC,CAAC,CAAC;YACE,OAAO,EAAE,YAAY;YACrB,UAAU,EAAE;gBACV,EAAE,EAAE,mBAAmB;gBACvB,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,yEAAyE;aAClF;SACF;QACH,CAAC,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnD,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAEzC,OAAO;IACP,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,YAAY,CAAC,IAAI,CACf,SAAS;QACP,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE;QAC5E,CAAC,CAAC;YACE,EAAE,EAAE,MAAM;YACV,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iBAAiB;YACzB,GAAG,EAAE,gEAAgE;SACtE,CACN,CAAC;IAEF,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,SAAS,EAAE,aAAa;YACtB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE;YAC9C,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,8CAA8C,EAAE;QAC5E,IAAI,EAAE,SAAS;YACb,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE;YACzC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,8CAA8C,EAAE;QAC5E,IAAI,EAAE,SAAS;YACb,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE;YAC9D,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,8CAA8C,EAAE;QAC5E,KAAK,EAAE,QAAQ;YACb,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE;YAC7C,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,8CAA8C,EAAE;QAC5E,QAAQ,EAAE,aAAa;YACrB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE;YACnD,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,8CAA8C,EAAE;QAC5E,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE;KAClE,CAAC;IAEF,OAAO;QACL,YAAY;QACZ,MAAM;QACN,KAAK;QACL,gBAAgB,EAAE,UAAU,CAAC,OAAO;QACpC,cAAc;KACf,CAAC;AACJ,CAAC"}

package/dist/errors.js

@@ -0,0 +1,13 @@
+/**
+ * An expected, user-actionable failure. The CLI prints the message plus the exact
+ * next command — never a stack trace.
+ */
+export class UserError extends Error {
+    fix;
+    constructor(message, fix) {
+        super(message);
+        this.name = 'UserError';
+        this.fix = fix;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,GAAG,CAAO;IAEnB,YAAY,OAAe,EAAE,GAAS;QACpC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF"}

package/dist/evidence.js

@@ -0,0 +1,20 @@
+/**
+ * Evidence records: the durable log of what a check run found, written into the
+ * change's `.prismatica/evidence/<id>/`. Evidence is a record of what happened —
+ * the gate never trusts committed evidence, it re-runs the checks.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { prismaticaDir } from './paths.js';
+function evidenceDir(home, contractId) {
+    return path.join(prismaticaDir(home), 'evidence', contractId);
+}
+export function writeCheckEvidence(home, evidence) {
+    const dir = evidenceDir(home, evidence.contractId);
+    fs.mkdirSync(dir, { recursive: true });
+    const stamp = evidence.at.replace(/[:.]/g, '-');
+    const file = path.join(dir, `${evidence.event}-${stamp}.json`);
+    fs.writeFileSync(file, JSON.stringify(evidence, null, 2) + '\n');
+    return file;
+}
+//# sourceMappingURL=evidence.js.map

package/dist/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../src/evidence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAmB3C,SAAS,WAAW,CAAC,IAAY,EAAE,UAAkB;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAuB;IACtE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,IAAI,KAAK,OAAO,CAAC,CAAC;IAC/D,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC"}