redlinegate 0.0.1 → 0.0.3

package/dist/config/redline-json.js

@@ -1,15 +1,28 @@
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { RedlineError } from "../core/errors.js";
-import { ADMIN_CAPABILITIES, HOSTS } from "../platforms/types.js";
+import { ADMIN_CAPABILITIES, HOSTS, } from "../platforms/types.js";
 import { isRung } from "../enforce/ladder.js";
 export const CONFIG_FILE = '.redline.json';
 export const CAPABILITY_KEYS = ['gate', 'mergePolicy', 'labels'];
+// What each menu key means when a repository has not recorded one. Lives here
+// rather than in cli/commands/init.ts so the parser can fill an absent key
+// without importing the command that writes it; init re-exports it as
+// DEFAULT_MENU.
+export const MENU_DEFAULTS = {
+    blockingGate: false,
+    adrForLargeDiffs: true,
+    accessibility: true,
+    speckit: true,
+    tmf: false,
+    sensitivePathReviewers: false,
+};
 export const MENU_KEYS = [
     'blockingGate',
     'adrForLargeDiffs',
     'accessibility',
     'speckit',
+    'tmf',
     'sensitivePathReviewers',
 ];
 // The names an operator types, and where each one is recorded. Review
@@ -34,6 +47,15 @@ export const MANDATORY_CAPABILITIES = {
         'displaced by them',
 };
 export const OPTIONAL_CAPABILITIES = Object.keys(CAPABILITY_NAMES);
+/**
+ * The name an operator types, from the key the config stores.
+ *
+ * `mergePolicy` is an implementation detail of the JSON; `--skip merge-policy`
+ * is what the CLI accepts and what its output must therefore say back.
+ */
+export function capabilityName(key) {
+    return Object.entries(CAPABILITY_NAMES).find(([, stored]) => stored === key)?.[0] ?? key;
+}
 // The gate install is what creates Redline's labels — GitHub pre-declares the
 // gate's soft-fail labels there, and Azure creates pull request labels on use —
 // so a deselected gate takes the labels with it whatever the operator chose for
@@ -113,6 +135,17 @@ export function parseConfig(raw) {
     const menuObj = menuRaw;
     const menu = {};
     for (const key of MENU_KEYS) {
+        // A key this file has never heard of takes its default rather than failing
+        // the parse. Every menu key added since a repository was onboarded is
+        // absent from its `.redline.json`, and rejecting that made a CLI upgrade
+        // invalidate the config of every repository in the estate at once — every
+        // `redline verify` reporting "`.redline.json` is invalid" for a key nobody
+        // had the chance to write. A value that IS present and is not a boolean is
+        // still an error: that is a corrupt file, not an old one.
+        if (menuObj[key] === undefined) {
+            menu[key] = MENU_DEFAULTS[key];
+            continue;
+        }
         if (typeof menuObj[key] !== 'boolean')
             bad(`menu.${key} must be a boolean`);
         menu[key] = menuObj[key];
@@ -166,6 +199,11 @@ export function parseConfig(raw) {
         localRules: o['localRules'] === true,
         capabilities,
         commandFiles,
+        integrations: Array.isArray(o['integrations'])
+            ? o['integrations'].filter((id) => typeof id === 'string')
+            : [],
+        gateSource: o['gateSource'] === 'local' ? 'local' : 'org',
+        gateVersion: typeof o['gateVersion'] === 'string' ? o['gateVersion'] : '',
     };
 }
 export function readConfig(cwd) {
@@ -181,7 +219,30 @@ export function readConfig(cwd) {
     }
     return parseConfig(raw);
 }
+// JSON has no comments, and this file is the only record of what a repository
+// chose and why. Without something in the file itself, the first person to open
+// it after onboarding finds eleven keys and no way to tell which are theirs to
+// change from which are Redline's bookkeeping. `//` is the convention every
+// JSON tool already ignores, and parseConfig ignores unknown keys, so it costs
+// nothing to carry and is rewritten on every run.
+const EXPLAINER = [
+    'Written by `redline init`. Edit with the command, not by hand — the next run rewrites this file.',
+    'menu.blockingGate — the gate blocks a merge rather than reporting. `redline init --blocking`.',
+    'menu.adrForLargeDiffs — a diff over the threshold needs an ADR link in the pull request body.',
+    'menu.accessibility — recorded for a later phase; nothing reads it yet.',
+    'menu.speckit — renders the spec-driven development context into the standards artifacts.',
+    'menu.tmf — renders the TM Forum context. `redline init --tmf` / `--no-tmf`.',
+    'menu.sensitivePathReviewers — writes CODEOWNERS and requires code-owner review on those paths.',
+    'capabilities.* — false means "this repository has its own"; Redline does not install or report it.',
+    'rung — how hard the gate bites: observe, warn, block-blocker, block-high. Promotion needs evidence.',
+    'pendingAdmin — capabilities an administrator still has to grant. Not a failure, a to-do list.',
+    'gateSource — org: the gate lives in the organisation .github repo. local: vendored into this',
+    '  repository, which means a pull request can edit the gate judging it. `--gate-source`.',
+    'gateVersion — the redlinegate version the vendored gate was written by. Empty when not vendored.',
+    'commandFiles, standardsVersion, cliVersion, onboardedAt, lastRunAt — Redline\'s own bookkeeping.',
+];
 export function writeConfig(cwd, config) {
-    writeFileSync(join(cwd, CONFIG_FILE), `${JSON.stringify(config, null, 2)}\n`);
+    const documented = { '//': EXPLAINER, ...config };
+    writeFileSync(join(cwd, CONFIG_FILE), `${JSON.stringify(documented, null, 2)}\n`);
 }
 //# sourceMappingURL=redline-json.js.map

package/dist/config/redline-json.js.map

@@ -1 +1 @@
-{"version":3,"file":"redline-json.js","sourceRoot":"","sources":["../../cli/config/redline-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAmC,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAE,MAAM,EAAa,MAAM,sBAAsB,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AA8B3C,MAAM,CAAC,MAAM,eAAe,GAAmC,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AA0CjG,MAAM,CAAC,MAAM,SAAS,GAA6B;IACjD,cAAc;IACd,kBAAkB;IAClB,eAAe;IACf,SAAS;IACT,wBAAwB;CACzB,CAAC;AAEF,sEAAsE;AACtE,+EAA+E;AAC/E,2DAA2D;AAC3D,MAAM,gBAAgB,GAAmE;IACvF,IAAI,EAAE,MAAM;IACZ,cAAc,EAAE,aAAa;IAC7B,MAAM,EAAE,QAAQ;IAChB,kBAAkB,EAAE,iBAAiB;CACtC,CAAC;AAEF,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,gBAAgB,EACd,4FAA4F;QAC5F,wFAAwF;QACxF,mBAAmB;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAEnE,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,yBAAyB;AACzB,MAAM,UAAU,mBAAmB,CAAC,YAAkC;IACpE,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,oEAAoE;AACpE,MAAM,UAAU,sBAAsB,CACpC,IAAoB,EACpB,YAAkC;IAElC,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,iBAAiB;YAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC;QACnE,IAAI,GAAG,KAAK,QAAQ;YAAE,OAAO,CAAC,YAAY,CAAC,MAAM,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvF,OAAO,GAAG,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,+EAA+E;AAC/E,+EAA+E;AAC/E,YAAY;AACZ,MAAM,UAAU,mBAAmB,CAAC,IAAc,EAAE,IAAc;IAChE,MAAM,KAAK,GAAoB,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,IAAI,IAAI,+DAA+D,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI;QACxB,CAAC,IAAI,EAAE,KAAK,CAAC;QACb,CAAC,IAAI,EAAE,IAAI,CAAC;KACJ,EAAE,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,EAAE;oBAAE,SAAS,CAAC,4BAA4B;gBAC9C,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,IAAI,IAAI,4BAA4B,SAAS,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,uBAAuB,IAAI,aAAa,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3E,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,KAAK,iBAAiB;gBAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,EAAE,CAAC;;gBACjE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,IAAY,EAAS,EAAE;IAClC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,WAAW,gBAAgB,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC7F,MAAM,CAAC,GAAG,GAA8B,CAAC;IAEzC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAU,EAAE,CAClC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,6BAA6B,CAAC,CAAC;IAE9G,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAE,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,uBAAuB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjG,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,OAAkC,CAAC;IACnD,MAAM,IAAI,GAAG,EAAoB,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,oBAAoB,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,OAAoB,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAE,kBAAwC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,gDAAgD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,2CAA2C;IAC3C,MAAM,aAAa,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,aAAa,GACjB,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAC1F,CAAC,CAAE,aAAyC;QAC5C,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GAAG,EAA0B,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,eAAe;QAAE,YAAY,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;IAEpF,MAAM,UAAU,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAqC,CAAC,EAAE,CAAC;YAC/E,IAAI,OAAO,EAAE,KAAK,QAAQ;gBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAS,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzD,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;IAEjG,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,CAAC;QACzC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC;QAC7B,IAAI,EAAE,IAAY;QAClB,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC;QACvB,OAAO,EAAE,OAAmB;QAC5B,IAAI;QACJ,YAAY,EAAE,OAA4B;QAC1C,WAAW;QACX,SAAS;QACT,IAAI;QACJ,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,IAAI;QACpC,YAAY;QACZ,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,WAAW,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,MAAqB;IAC5D,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC"}
+{"version":3,"file":"redline-json.js","sourceRoot":"","sources":["../../cli/config/redline-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,kBAAkB,EAClB,KAAK,GAIN,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAa,MAAM,sBAAsB,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AAiC3C,MAAM,CAAC,MAAM,eAAe,GAAmC,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AAkEjG,8EAA8E;AAC9E,2EAA2E;AAC3E,sEAAsE;AACtE,gBAAgB;AAChB,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,YAAY,EAAE,KAAK;IACnB,gBAAgB,EAAE,IAAI;IACtB,aAAa,EAAE,IAAI;IACnB,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,KAAK;IACV,sBAAsB,EAAE,KAAK;CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAA6B;IACjD,cAAc;IACd,kBAAkB;IAClB,eAAe;IACf,SAAS;IACT,KAAK;IACL,wBAAwB;CACzB,CAAC;AAEF,sEAAsE;AACtE,+EAA+E;AAC/E,2DAA2D;AAC3D,MAAM,gBAAgB,GAAmE;IACvF,IAAI,EAAE,MAAM;IACZ,cAAc,EAAE,aAAa;IAC7B,MAAM,EAAE,QAAQ;IAChB,kBAAkB,EAAE,iBAAiB;CACtC,CAAC;AAEF,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,gBAAgB,EACd,4FAA4F;QAC5F,wFAAwF;QACxF,mBAAmB;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;AAC3F,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,yBAAyB;AACzB,MAAM,UAAU,mBAAmB,CAAC,YAAkC;IACpE,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,oEAAoE;AACpE,MAAM,UAAU,sBAAsB,CACpC,IAAoB,EACpB,YAAkC;IAElC,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,iBAAiB;YAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC;QACnE,IAAI,GAAG,KAAK,QAAQ;YAAE,OAAO,CAAC,YAAY,CAAC,MAAM,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvF,OAAO,GAAG,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,+EAA+E;AAC/E,+EAA+E;AAC/E,YAAY;AACZ,MAAM,UAAU,mBAAmB,CAAC,IAAc,EAAE,IAAc;IAChE,MAAM,KAAK,GAAoB,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,IAAI,IAAI,+DAA+D,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI;QACxB,CAAC,IAAI,EAAE,KAAK,CAAC;QACb,CAAC,IAAI,EAAE,IAAI,CAAC;KACJ,EAAE,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,EAAE;oBAAE,SAAS,CAAC,4BAA4B;gBAC9C,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,IAAI,IAAI,4BAA4B,SAAS,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,uBAAuB,IAAI,aAAa,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3E,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,KAAK,iBAAiB;gBAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,EAAE,CAAC;;gBACjE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,IAAY,EAAS,EAAE;IAClC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,WAAW,gBAAgB,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC7F,MAAM,CAAC,GAAG,GAA8B,CAAC;IAEzC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAU,EAAE,CAClC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,6BAA6B,CAAC,CAAC;IAE9G,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAE,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,uBAAuB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjG,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,OAAkC,CAAC;IACnD,MAAM,IAAI,GAAG,EAAoB,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,2EAA2E;QAC3E,sEAAsE;QACtE,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,0DAA0D;QAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,oBAAoB,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,OAAoB,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAE,kBAAwC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,gDAAgD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,2CAA2C;IAC3C,MAAM,aAAa,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,aAAa,GACjB,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAC1F,CAAC,CAAE,aAAyC;QAC5C,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GAAG,EAA0B,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,eAAe;QAAE,YAAY,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;IAEpF,MAAM,UAAU,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAqC,CAAC,EAAE,CAAC;YAC/E,IAAI,OAAO,EAAE,KAAK,QAAQ;gBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAS,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzD,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;IAEjG,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,CAAC;QACzC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC;QAC7B,IAAI,EAAE,IAAY;QAClB,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC;QACvB,OAAO,EAAE,OAAmB;QAC5B,IAAI;QACJ,YAAY,EAAE,OAA4B;QAC1C,WAAW;QACX,SAAS;QACT,IAAI;QACJ,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,IAAI;QACpC,YAAY;QACZ,YAAY;QACZ,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;YACxE,CAAC,CAAC,EAAE;QACN,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;QACzD,WAAW,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;KAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,WAAW,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,kDAAkD;AAClD,MAAM,SAAS,GAAsB;IACnC,kGAAkG;IAClG,+FAA+F;IAC/F,+FAA+F;IAC/F,wEAAwE;IACxE,0FAA0F;IAC1F,6EAA6E;IAC7E,gGAAgG;IAChG,oGAAoG;IACpG,qGAAqG;IACrG,+FAA+F;IAC/F,8FAA8F;IAC9F,yFAAyF;IACzF,kGAAkG;IAClG,kGAAkG;CACnG,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,MAAqB;IAC5D,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC;IAClD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACpF,CAAC"}

package/dist/core/git.js

@@ -1,6 +1,42 @@
 import { execFileSync } from 'node:child_process';
 import { RedlineError } from "./errors.js";
-export const execGit = (args, cwd) => execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }).trim();
+// Every git call here runs with stdin ignored and stderr captured, so anything
+// git decides to ASK rather than answer has nowhere to print the question and
+// nowhere to read the reply — it simply waits. A real onboarding sat on
+// "committing and opening the pull request" forever because `git push` reached
+// an ssh that wanted a passphrase, and the spinner kept turning over a process
+// that was never going to finish.
+//
+// So the prompts are switched off rather than hidden: git fails immediately and
+// says why, and `push()` below turns that into an error naming the branch the
+// work is already committed on. An operator's own GIT_SSH_COMMAND wins — a
+// repository reached through a custom ssh wrapper is a deliberate arrangement,
+// and overriding it would break a working setup to fix a hanging one.
+const NON_INTERACTIVE = {
+    // Suppresses the username/password prompt on an HTTPS remote.
+    GIT_TERMINAL_PROMPT: '0',
+    // BatchMode stops ssh asking for a passphrase or an unknown host key;
+    // ConnectTimeout stops a silently dropped connection replacing the prompt
+    // with an equally invisible wait.
+    GIT_SSH_COMMAND: 'ssh -o BatchMode=yes -o ConnectTimeout=10',
+};
+/**
+ * The environment git runs in: prompts off, unless the operator has already
+ * said otherwise.
+ *
+ * Exported to be asserted on. Which side of the merge wins is the whole
+ * decision — spread the defaults last and a custom ssh wrapper is silently
+ * replaced, which breaks a working setup in order to fix a hanging one.
+ */
+export function gitEnv(from = process.env) {
+    return { ...NON_INTERACTIVE, ...from };
+}
+export const execGit = (args, cwd) => execFileSync('git', args, {
+    cwd,
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+    env: gitEnv(),
+}).trim();
 // git is a real system boundary: a rejected push, a protected branch, an
 // expired credential and a failing pre-commit hook are all routine, and
 // execFileSync reports them as a raw "Command failed: git push …" that the
@@ -111,7 +147,16 @@ export function createGit(cwd, run = execGit) {
         stagePaths(paths) {
             if (paths.length === 0)
                 return;
-            g('add', '--', ...paths);
+            try {
+                g('add', '--', ...paths);
+            }
+            catch (error) {
+                // Reached when a caller listed a path nothing actually wrote, which
+                // git reports as `fatal: pathspec ... did not match any files`. The
+                // raw execFileSync message leaks the whole argv, so it is replaced
+                // with the failure and where the run left the operator.
+                throw new RedlineError('host', `could not stage the Redline changes: ${gitFailure(error)}`, 'nothing was committed and no pull request was opened — the path above was listed but never written, so re-run and report it if it recurs');
+            }
         },
         hasStagedChanges() {
             try {
@@ -144,7 +189,9 @@ export function createGit(cwd, run = execGit) {
                 if (NON_FAST_FORWARD.test(stderrText(error))) {
                     throw new RedlineError('failed', `origin already has a "${branch}" branch this push cannot fast-forward: ${gitFailure(error)}`, `a previous run left it behind — delete it (git push origin --delete ${branch}) or merge its open pull request, then re-run`);
                 }
-                throw new RedlineError('permission', `could not push "${branch}" to origin: ${gitFailure(error)}`, `the Redline changes are committed locally on "${branch}" — push that branch and open the pull request yourself, or get push access and re-run`);
+                throw new RedlineError('permission', `could not push "${branch}" to origin: ${gitFailure(error)}`, `the Redline changes are committed locally on "${branch}" — push that branch and open the pull request yourself, or get push access and re-run. ` +
+                    'Redline runs ssh in batch mode so a credential prompt cannot hang the run: if the error above is about a key or a host key, ' +
+                    'add the key to your agent (ssh-add) or accept the host once by hand, then re-run');
             }
         },
     };

package/dist/core/git.js.map

@@ -1 +1 @@
-{"version":3,"file":"git.js","sourceRoot":"","sources":["../../cli/core/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,MAAM,CAAC,MAAM,OAAO,GAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAC9C,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAuBjG,yEAAyE;AACzE,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,gCAAgC;AAChC,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAE,KAAiC,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,OAAO,MAAM,KAAK,QAAQ;QAC/B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,CAAC,CAAC,KAAK,YAAY,KAAK;gBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1E,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,yDAAyD;AACzD,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEzD,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,MAAiB,OAAO;IAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAc,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,GAAW,EAAE;QACjC,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;YACJ,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,WAAW,EAAE,uBAAuB,CAAC,KAAK,MAAM,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,SAAS,CAAC,MAAM,GAAG,QAAQ;YACzB,mEAAmE;YACnE,iEAAiE;YACjE,2DAA2D;YAC3D,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,aAAa;YACX,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,aAAa;QACb,IAAI,CAAC,KAAK;YACR,IAAI,CAAC;gBACH,oEAAoE;gBACpE,kDAAkD;gBAClD,OAAO,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,eAAe,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE,EAC5C,gFAAgF,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,SAAS,CAAC,GAAG;YACX,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,mCAAmC,GAAG,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE,EAC9D,+DAA+D,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU;YACR,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,gCAAgC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,iBAAiB,CAAC,IAAI;YACpB,IAAI,CAAC;gBACH,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,gCAAgC,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,EAC7D,qBAAqB,aAAa,EAAE,gEAAgE,CACrG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,cAAc,CAAC,IAAI;YACjB,IAAI,CAAC;gBACH,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,6BAA6B,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,EAC1D,eAAe,aAAa,EAAE,+CAA+C,IAAI,EAAE,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,CAAC,KAAK;YACd,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC/B,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,gBAAgB;YACd,IAAI,CAAC;gBACH,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;gBACjC,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,CAAC,OAAO;YACZ,IAAI,CAAC;gBACH,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,yCAAyC,UAAU,CAAC,KAAK,CAAC,EAAE,EAC5D,oCAAoC,aAAa,EAAE,+DAA+D,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,8DAA8D;QAC9D,IAAI,CAAC,MAAM;YACT,IAAI,CAAC;gBACH,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,YAAY,CACpB,QAAQ,EACR,yBAAyB,MAAM,2CAA2C,UAAU,CAAC,KAAK,CAAC,EAAE,EAC7F,uEAAuE,MAAM,+CAA+C,CAC7H,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,YAAY,CACpB,YAAY,EACZ,mBAAmB,MAAM,gBAAgB,UAAU,CAAC,KAAK,CAAC,EAAE,EAC5D,iDAAiD,MAAM,wFAAwF,CAChJ,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../cli/core/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,+EAA+E;AAC/E,8EAA8E;AAC9E,wEAAwE;AACxE,+EAA+E;AAC/E,+EAA+E;AAC/E,kCAAkC;AAClC,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,sEAAsE;AACtE,MAAM,eAAe,GAAG;IACtB,8DAA8D;IAC9D,mBAAmB,EAAE,GAAG;IACxB,sEAAsE;IACtE,0EAA0E;IAC1E,kCAAkC;IAClC,eAAe,EAAE,2CAA2C;CACpD,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,OAA0B,OAAO,CAAC,GAAG;IAC1D,OAAO,EAAE,GAAG,eAAe,EAAE,GAAG,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAC9C,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;IACxB,GAAG;IACH,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;IACjC,GAAG,EAAE,MAAM,EAAE;CACd,CAAC,CAAC,IAAI,EAAE,CAAC;AAuBZ,yEAAyE;AACzE,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,gCAAgC;AAChC,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAE,KAAiC,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,OAAO,MAAM,KAAK,QAAQ;QAC/B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,CAAC,CAAC,KAAK,YAAY,KAAK;gBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1E,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,yDAAyD;AACzD,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEzD,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,MAAiB,OAAO;IAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAc,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,GAAW,EAAE;QACjC,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;YACJ,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,WAAW,EAAE,uBAAuB,CAAC,KAAK,MAAM,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,SAAS,CAAC,MAAM,GAAG,QAAQ;YACzB,mEAAmE;YACnE,iEAAiE;YACjE,2DAA2D;YAC3D,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,aAAa;YACX,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,aAAa;QACb,IAAI,CAAC,KAAK;YACR,IAAI,CAAC;gBACH,oEAAoE;gBACpE,kDAAkD;gBAClD,OAAO,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,eAAe,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE,EAC5C,gFAAgF,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,SAAS,CAAC,GAAG;YACX,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,mCAAmC,GAAG,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE,EAC9D,+DAA+D,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU;YACR,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,gCAAgC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,iBAAiB,CAAC,IAAI;YACpB,IAAI,CAAC;gBACH,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,gCAAgC,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,EAC7D,qBAAqB,aAAa,EAAE,gEAAgE,CACrG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,cAAc,CAAC,IAAI;YACjB,IAAI,CAAC;gBACH,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,6BAA6B,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,EAC1D,eAAe,aAAa,EAAE,+CAA+C,IAAI,EAAE,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,CAAC,KAAK;YACd,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC/B,IAAI,CAAC;gBACH,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,oEAAoE;gBACpE,oEAAoE;gBACpE,mEAAmE;gBACnE,wDAAwD;gBACxD,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,wCAAwC,UAAU,CAAC,KAAK,CAAC,EAAE,EAC3D,0IAA0I,CAC3I,CAAC;YACJ,CAAC;QACH,CAAC;QACD,gBAAgB;YACd,IAAI,CAAC;gBACH,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;gBACjC,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,CAAC,OAAO;YACZ,IAAI,CAAC;gBACH,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,yCAAyC,UAAU,CAAC,KAAK,CAAC,EAAE,EAC5D,oCAAoC,aAAa,EAAE,+DAA+D,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,8DAA8D;QAC9D,IAAI,CAAC,MAAM;YACT,IAAI,CAAC;gBACH,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,YAAY,CACpB,QAAQ,EACR,yBAAyB,MAAM,2CAA2C,UAAU,CAAC,KAAK,CAAC,EAAE,EAC7F,uEAAuE,MAAM,+CAA+C,CAC7H,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,YAAY,CACpB,YAAY,EACZ,mBAAmB,MAAM,gBAAgB,UAAU,CAAC,KAAK,CAAC,EAAE,EAC5D,iDAAiD,MAAM,0FAA0F;oBAC/I,8HAA8H;oBAC9H,kFAAkF,CACrF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/version.js

@@ -12,4 +12,10 @@ export function parseVersion(raw) {
 }
 const pkg = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8'));
 export const CLI_VERSION = parseVersion(pkg);
+// What package.json carries between releases: semantic-release stamps the real
+// version at publish time, so a CLI running from a checkout reports this. Any
+// artifact that pins the CLI has to recognise it, or a development run writes
+// `redlinegate@0.0.0-development` into a real repository's gate — a pin to a
+// version npm has never heard of, which fails every pull request it reaches.
+export const UNPUBLISHED_VERSION = '0.0.0-development';
 //# sourceMappingURL=version.js.map

package/dist/core/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../cli/core/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAI,GAA+B,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,kDAAkD,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtG,MAAM,CAAC,MAAM,WAAW,GAAW,YAAY,CAAC,GAAG,CAAC,CAAC"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../cli/core/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAI,GAA+B,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,kDAAkD,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtG,MAAM,CAAC,MAAM,WAAW,GAAW,YAAY,CAAC,GAAG,CAAC,CAAC;AAErD,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC"}

package/dist/detect/existing.js

@@ -0,0 +1,151 @@
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+export const TOOL_PROBES = [
+    {
+        id: 'sonarqube',
+        label: 'SonarQube',
+        paths: ['sonar-project.properties', 'sonar-project-enterprise.properties'],
+        inCi: ['sonarqube', 'sonarcloud', 'SonarQubePrepare', 'sonar-scanner'],
+        // SonarQube is a static analyser: it overlaps Redline's deterministic
+        // policy tier, not its secret or dependency scanning.
+        standsDown: 'policy',
+    },
+    {
+        id: 'mend',
+        label: 'Mend',
+        paths: ['.whitesource', '.mend', 'mend.config.json'],
+        inCi: ['mend', 'whitesource'],
+        standsDown: 'dependencies',
+    },
+    {
+        id: 'snyk',
+        label: 'Snyk',
+        paths: ['.snyk'],
+        inCi: ['snyk'],
+        standsDown: 'dependencies',
+    },
+    {
+        id: 'dependabot',
+        label: 'Dependabot',
+        paths: ['.github/dependabot.yml', '.github/dependabot.yaml'],
+        standsDown: 'dependencies',
+    },
+    {
+        id: 'renovate',
+        label: 'Renovate',
+        paths: ['renovate.json', '.renovaterc', '.renovaterc.json', '.github/renovate.json'],
+        inCi: ['renovate'],
+        // Renovate raises upgrade pull requests; it does not fail a build on a
+        // vulnerable dependency entering one. It is reported so the operator knows
+        // Redline saw it, and stands nothing down.
+        standsDown: null,
+    },
+    {
+        id: 'gitleaks',
+        label: 'gitleaks',
+        paths: ['.gitleaks.toml', '.gitleaksignore'],
+        inCi: ['gitleaks'],
+        standsDown: 'secrets',
+    },
+    {
+        id: 'trufflehog',
+        label: 'trufflehog',
+        inCi: ['trufflehog', 'trufflesecurity'],
+        standsDown: 'secrets',
+    },
+    {
+        id: 'codeql',
+        label: 'CodeQL',
+        inCi: ['github/codeql-action', 'codeql'],
+        standsDown: 'policy',
+    },
+];
+// Where CI definitions live. Azure Pipelines has no fixed location — VOXI keeps
+// its stages under `cicd/` and its pull request template under `.vsts/` — so
+// this is a list of the conventional homes rather than a spec. A repository
+// that keeps its pipelines somewhere else is not detected, reports nothing, and
+// gets the full install: the safe direction, because an undetected tool means
+// Redline offers a check the repository may already have, which the operator
+// can decline, rather than skipping one it does not.
+const CI_DIRS = ['.github/workflows', 'cicd', '.azuredevops', '.vsts', '.pipelines', 'ci'];
+const CI_ROOT_FILES = ['azure-pipelines.yml', 'azure-pipelines.yaml', '.gitlab-ci.yml'];
+// A pipeline definition is YAML and small. The cap is here so that a repository
+// with a generated or vendored file under one of these directories cannot turn
+// onboarding into a full-tree read.
+const MAX_CI_BYTES = 256 * 1024;
+function readCiText(cwd) {
+    const parts = [];
+    const readFile = (abs) => {
+        try {
+            if (statSync(abs).size > MAX_CI_BYTES)
+                return;
+            parts.push(readFileSync(abs, 'utf8').toLowerCase());
+        }
+        catch {
+            // Unreadable is not a finding about the repository: a probe that cannot
+            // read a file reports nothing rather than claiming the tool is absent.
+        }
+    };
+    for (const dir of CI_DIRS) {
+        const abs = join(cwd, dir);
+        if (!existsSync(abs))
+            continue;
+        let entries;
+        try {
+            entries = readdirSync(abs);
+        }
+        catch {
+            continue;
+        }
+        for (const name of entries) {
+            if (!/\.ya?ml$/i.test(name))
+                continue;
+            readFile(join(abs, name));
+        }
+    }
+    for (const name of CI_ROOT_FILES) {
+        const abs = join(cwd, name);
+        if (existsSync(abs))
+            readFile(abs);
+    }
+    return parts.join('\n');
+}
+/**
+ * What the repository already runs, from the checkout alone.
+ *
+ * Deliberately no host calls: this decides what `redline init --dry-run` offers,
+ * and dry-run contacts no host and needs no credential. A survey that needed a
+ * token would make the safest way to preview onboarding the one that requires
+ * the most trust.
+ */
+export function surveyRepo(cwd) {
+    const ci = readCiText(cwd);
+    const tools = [];
+    for (const probe of TOOL_PROBES) {
+        let evidence = null;
+        for (const path of probe.paths ?? []) {
+            if (existsSync(join(cwd, path))) {
+                evidence = path;
+                break;
+            }
+        }
+        if (evidence === null && ci !== '') {
+            for (const needle of probe.inCi ?? []) {
+                if (ci.includes(needle.toLowerCase())) {
+                    evidence = `"${needle}" in this repository's CI definitions`;
+                    break;
+                }
+            }
+        }
+        if (evidence === null)
+            continue;
+        tools.push({ id: probe.id, label: probe.label, evidence, standsDown: probe.standsDown });
+    }
+    const standDown = [
+        ...new Set(tools
+            .map((tool) => tool.standsDown)
+            .filter((job) => job !== null)),
+    ];
+    return { tools, standDown };
+}
+//# sourceMappingURL=existing.js.map

package/dist/detect/existing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"existing.js","sourceRoot":"","sources":["../../cli/detect/existing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA6CjC,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,CAAC,0BAA0B,EAAE,qCAAqC,CAAC;QAC1E,IAAI,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,eAAe,CAAC;QACtE,sEAAsE;QACtE,sDAAsD;QACtD,UAAU,EAAE,QAAQ;KACrB;IACD;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,kBAAkB,CAAC;QACpD,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,UAAU,EAAE,cAAc;KAC3B;IACD;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,UAAU,EAAE,cAAc;KAC3B;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;QAC5D,UAAU,EAAE,cAAc;KAC3B;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,uBAAuB,CAAC;QACpF,IAAI,EAAE,CAAC,UAAU,CAAC;QAClB,uEAAuE;QACvE,2EAA2E;QAC3E,2CAA2C;QAC3C,UAAU,EAAE,IAAI;KACjB;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC;QAClB,UAAU,EAAE,SAAS;KACtB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;QACvC,UAAU,EAAE,SAAS;KACtB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,CAAC,sBAAsB,EAAE,QAAQ,CAAC;QACxC,UAAU,EAAE,QAAQ;KACrB;CACF,CAAC;AAEF,gFAAgF;AAChF,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,qDAAqD;AACrD,MAAM,OAAO,GAAG,CAAC,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;AAC3F,MAAM,aAAa,GAAG,CAAC,qBAAqB,EAAE,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;AAExF,gFAAgF;AAChF,+EAA+E;AAC/E,oCAAoC;AACpC,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC;AAEhC,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAQ,EAAE;QACrC,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,YAAY;gBAAE,OAAO;YAC9C,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,uEAAuE;QACzE,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAiBD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAmB,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBAChC,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACnC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACtC,QAAQ,GAAG,IAAI,MAAM,uCAAuC,CAAC;oBAC7D,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,SAAS,GAAG;QAChB,GAAG,IAAI,GAAG,CACR,KAAK;aACF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;aAC9B,MAAM,CAAC,CAAC,GAAG,EAAoC,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CACnE;KACF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC"}

package/dist/detect/setup.js

@@ -0,0 +1,200 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+// Dependabot's ecosystem ids, keyed by the file that proves the ecosystem is
+// used here. A manifest is the only evidence taken: guessing an ecosystem from a
+// file extension produces a config that opens pull requests against nothing.
+const ECOSYSTEMS = [
+    ['package.json', 'npm', '/'],
+    ['requirements.txt', 'pip', '/'],
+    ['pyproject.toml', 'pip', '/'],
+    ['go.mod', 'gomod', '/'],
+    ['pom.xml', 'maven', '/'],
+    ['build.gradle', 'gradle', '/'],
+    ['build.gradle.kts', 'gradle', '/'],
+    ['Gemfile', 'bundler', '/'],
+    ['Cargo.toml', 'cargo', '/'],
+    ['composer.json', 'composer', '/'],
+    ['Dockerfile', 'docker', '/'],
+];
+function ecosystemsIn(cwd) {
+    const found = new Map();
+    for (const [marker, ecosystem, directory] of ECOSYSTEMS) {
+        if (existsSync(join(cwd, marker)))
+            found.set(ecosystem, directory);
+    }
+    // Always present on a repository Redline gates: it installs the workflow that
+    // the gate runs on, and an unpatched action is as much a dependency as a
+    // package is.
+    if (existsSync(join(cwd, '.github', 'workflows')))
+        found.set('github-actions', '/');
+    return [...found].map(([ecosystem, directory]) => ({ ecosystem, directory }));
+}
+// CodeQL's language ids, from the stacks the chosen profile renders. Derived
+// from the profile rather than from a file walk so it matches what the standards
+// are actually reviewing.
+const CODEQL_LANGUAGES = {
+    javascript: 'javascript-typescript',
+    react: 'javascript-typescript',
+    'react-native': 'javascript-typescript',
+    angular: 'javascript-typescript',
+    vue: 'javascript-typescript',
+    svelte: 'javascript-typescript',
+    dom: 'javascript-typescript',
+    nodejs: 'javascript-typescript',
+    python: 'python',
+    go: 'go',
+    java: 'java-kotlin',
+    kotlin: 'java-kotlin',
+    csharp: 'csharp',
+    swift: 'swift',
+};
+export const INSTALLABLE = [
+    {
+        id: 'dependabot',
+        label: 'Dependabot version updates',
+        hint: 'writes .github/dependabot.yml — weekly, minor and patch grouped into one PR',
+        hosts: ['github'],
+        plan: (cwd) => {
+            const ecosystems = ecosystemsIn(cwd);
+            if (ecosystems.length === 0)
+                return null;
+            const blocks = ecosystems
+                .map(({ ecosystem, directory }) => [
+                `  - package-ecosystem: "${ecosystem}"`,
+                `    directory: "${directory}"`,
+                '    schedule:',
+                '      interval: "weekly"',
+                '    open-pull-requests-limit: 5',
+                '    groups:',
+                // One pull request a week for the routine bumps. Ungrouped, a repo
+                // with a real dependency tree gets a dozen, which is how a team
+                // learns to close Dependabot pull requests without reading them.
+                '      minor-and-patch:',
+                '        update-types:',
+                '          - "minor"',
+                '          - "patch"',
+            ].join('\n'))
+                .join('\n\n');
+            return {
+                path: '.github/dependabot.yml',
+                contents: [
+                    '# Managed by Redline. Security alerts are enabled separately, by the',
+                    '# security floor — this file is the version updates the floor does not cover.',
+                    'version: 2',
+                    'updates:',
+                    blocks,
+                    '',
+                ].join('\n'),
+            };
+        },
+    },
+    {
+        id: 'renovate',
+        label: 'Renovate',
+        hint: 'writes renovate.json — needs the Renovate app installed on the organisation',
+        hosts: ['github'],
+        plan: () => ({
+            path: 'renovate.json',
+            contents: JSON.stringify({
+                $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+                extends: ['config:recommended'],
+                schedule: ['before 9am on monday'],
+                packageRules: [
+                    {
+                        matchUpdateTypes: ['minor', 'patch'],
+                        groupName: 'minor and patch',
+                    },
+                ],
+            }, null, 2) + '\n',
+        }),
+    },
+    {
+        id: 'codeql',
+        label: 'CodeQL',
+        hint: 'writes .github/workflows/codeql.yml — needs Advanced Security on a private repo',
+        hosts: ['github'],
+        plan: (_cwd, stacks) => {
+            const languages = [
+                ...new Set(stacks.flatMap((stack) => CODEQL_LANGUAGES[stack] ?? [])),
+            ];
+            if (languages.length === 0)
+                return null;
+            return {
+                path: '.github/workflows/codeql.yml',
+                contents: [
+                    '# Managed by Redline.',
+                    'name: CodeQL',
+                    '',
+                    'on:',
+                    '  push:',
+                    '    branches: [main, master]',
+                    '  pull_request:',
+                    '  schedule:',
+                    "    - cron: '0 3 * * 1'",
+                    '',
+                    'permissions:',
+                    '  contents: read',
+                    '  security-events: write',
+                    '',
+                    'jobs:',
+                    '  analyze:',
+                    '    runs-on: ubuntu-latest',
+                    '    strategy:',
+                    '      fail-fast: false',
+                    '      matrix:',
+                    `        language: [${languages.join(', ')}]`,
+                    '    steps:',
+                    // Pinned to the major tag, which is what GitHub's own documented
+                    // workflow uses: a floating v3 takes security fixes to the scanner
+                    // without a pull request, and a SHA pin here would go stale silently
+                    // in every onboarded repository at once.
+                    '      - uses: actions/checkout@v4',
+                    '      - uses: github/codeql-action/init@v3',
+                    '        with:',
+                    '          languages: ${{ matrix.language }}',
+                    '      - uses: github/codeql-action/autobuild@v3',
+                    '      - uses: github/codeql-action/analyze@v3',
+                    '',
+                ].join('\n'),
+            };
+        },
+    },
+];
+/** What this host and this checkout can actually be offered. */
+export function offerable(cwd, host, stacks) {
+    return INSTALLABLE.flatMap((integration) => {
+        if (!integration.hosts.includes(host))
+            return [];
+        const file = integration.plan(cwd, stacks);
+        return file === null ? [] : [{ integration, file }];
+    });
+}
+/**
+ * Write the chosen files, skipping any that already exist.
+ *
+ * Never overwrites: a repository with its own `renovate.json` has a considered
+ * one, and replacing it with a generated default is the kind of "help" that
+ * loses a team a week of tuning. The caller reports what was skipped.
+ */
+export function applySetup(cwd, chosen, dryRun) {
+    const written = [];
+    const skipped = [];
+    for (const { file } of chosen) {
+        const absolute = join(cwd, file.path);
+        if (existsSync(absolute)) {
+            // Identical content is not a conflict, it is a no-op — a re-run must not
+            // report work it is not doing.
+            const current = readFileSync(absolute, 'utf8');
+            if (current !== file.contents)
+                skipped.push(file.path);
+            continue;
+        }
+        if (!dryRun) {
+            mkdirSync(dirname(absolute), { recursive: true });
+            writeFileSync(absolute, file.contents, 'utf8');
+        }
+        written.push(file.path);
+    }
+    return { written, skipped };
+}
+//# sourceMappingURL=setup.js.map

package/dist/detect/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../cli/detect/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkC1C,6EAA6E;AAC7E,iFAAiF;AACjF,6EAA6E;AAC7E,MAAM,UAAU,GAAmD;IACjE,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC;IAC5B,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,CAAC;IAChC,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,CAAC;IAC9B,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC;IACxB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC;IACzB,CAAC,cAAc,EAAE,QAAQ,EAAE,GAAG,CAAC;IAC/B,CAAC,kBAAkB,EAAE,QAAQ,EAAE,GAAG,CAAC;IACnC,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC;IAC3B,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC;IAC5B,CAAC,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC;IAClC,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC;CAC9B,CAAC;AAEF,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;QACxD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;IACD,8EAA8E;IAC9E,yEAAyE;IACzE,cAAc;IACd,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,6EAA6E;AAC7E,iFAAiF;AACjF,0BAA0B;AAC1B,MAAM,gBAAgB,GAA2B;IAC/C,UAAU,EAAE,uBAAuB;IACnC,KAAK,EAAE,uBAAuB;IAC9B,cAAc,EAAE,uBAAuB;IACvC,OAAO,EAAE,uBAAuB;IAChC,GAAG,EAAE,uBAAuB;IAC5B,MAAM,EAAE,uBAAuB;IAC/B,GAAG,EAAE,uBAAuB;IAC5B,MAAM,EAAE,uBAAuB;IAC/B,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,aAAa;IACnB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,4BAA4B;QACnC,IAAI,EAAE,6EAA6E;QACnF,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;YACZ,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzC,MAAM,MAAM,GAAG,UAAU;iBACtB,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAChC;gBACE,2BAA2B,SAAS,GAAG;gBACvC,mBAAmB,SAAS,GAAG;gBAC/B,eAAe;gBACf,0BAA0B;gBAC1B,iCAAiC;gBACjC,aAAa;gBACb,mEAAmE;gBACnE,gEAAgE;gBAChE,iEAAiE;gBACjE,wBAAwB;gBACxB,uBAAuB;gBACvB,qBAAqB;gBACrB,qBAAqB;aACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb;iBACA,IAAI,CAAC,MAAM,CAAC,CAAC;YAChB,OAAO;gBACL,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE;oBACR,sEAAsE;oBACtE,+EAA+E;oBAC/E,YAAY;oBACZ,UAAU;oBACV,MAAM;oBACN,EAAE;iBACH,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,CAAC;QACJ,CAAC;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,6EAA6E;QACnF,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACX,IAAI,EAAE,eAAe;YACrB,QAAQ,EACN,IAAI,CAAC,SAAS,CACZ;gBACE,OAAO,EAAE,mDAAmD;gBAC5D,OAAO,EAAE,CAAC,oBAAoB,CAAC;gBAC/B,QAAQ,EAAE,CAAC,sBAAsB,CAAC;gBAClC,YAAY,EAAE;oBACZ;wBACE,gBAAgB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;wBACpC,SAAS,EAAE,iBAAiB;qBAC7B;iBACF;aACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI;SACX,CAAC;KACH;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,iFAAiF;QACvF,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG;gBAChB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;aACrE,CAAC;YACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxC,OAAO;gBACL,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE;oBACR,uBAAuB;oBACvB,cAAc;oBACd,EAAE;oBACF,KAAK;oBACL,SAAS;oBACT,8BAA8B;oBAC9B,iBAAiB;oBACjB,aAAa;oBACb,yBAAyB;oBACzB,EAAE;oBACF,cAAc;oBACd,kBAAkB;oBAClB,0BAA0B;oBAC1B,EAAE;oBACF,OAAO;oBACP,YAAY;oBACZ,4BAA4B;oBAC5B,eAAe;oBACf,wBAAwB;oBACxB,eAAe;oBACf,sBAAsB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC7C,YAAY;oBACZ,iEAAiE;oBACjE,mEAAmE;oBACnE,qEAAqE;oBACrE,yCAAyC;oBACzC,mCAAmC;oBACnC,4CAA4C;oBAC5C,eAAe;oBACf,6CAA6C;oBAC7C,iDAAiD;oBACjD,+CAA+C;oBAC/C,EAAE;iBACH,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,CAAC;QACJ,CAAC;KACF;CACF,CAAC;AAEF,gEAAgE;AAChE,MAAM,UAAU,SAAS,CACvB,GAAW,EACX,IAAwB,EACxB,MAAyB;IAEzB,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;QACzC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,GAAW,EACX,MAAgE,EAChE,MAAe;IAEf,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,yEAAyE;YACzE,+BAA+B;YAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,OAAO,KAAK,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}