redlinegate 0.0.1

package/dist/commands/init.js

@@ -0,0 +1,615 @@
+import { existsSync, readdirSync, readFileSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { isRedlineError, RedlineError } from "../core/errors.js";
+import { CLI_VERSION } from "../core/version.js";
+import { canPromote } from "../enforce/ladder.js";
+import { CAPABILITY_KEYS, CONFIG_FILE, MENU_KEYS, deselectedCapabilities, labelsCarriedByGate, readConfig, writeConfig, } from "../config/redline-json.js";
+import { proposeProfile } from "../detect/stack.js";
+import { scanRepo } from "../detect/scan.js";
+import { loadManifest } from "../render/manifest.js";
+import { resolveProfile } from "../render/profile.js";
+import { render } from "../render/standards.js";
+import { renderCommands, COMMAND_HOSTS } from "../render/commands.js";
+import { LOCAL_RULES_FILE } from "../render/vendors.js";
+import { isPending } from "../platforms/types.js";
+export const DEFAULT_MENU = {
+    blockingGate: false,
+    adrForLargeDiffs: true,
+    accessibility: true,
+    speckit: false,
+    sensitivePathReviewers: true,
+};
+// Named once so the label FLOOR_GATE soft-fails on and the label
+// openPullRequest applies below share one literal instead of two that could
+// drift apart, and so web/components/journey.tsx's hardcoded SYNC_LABEL can
+// be pinned against the real source (cli/render/__tests__/vendors.test.ts).
+export const SYNC_LABEL = 'redline-sync';
+export const DEFAULT_CAPABILITIES = {
+    gate: true,
+    mergePolicy: true,
+    labels: true,
+};
+export const FLOOR_GATE = {
+    adrDiffThreshold: 300,
+    failOnDependencySeverity: 'high',
+    softFailLabels: ['redline-exempt', SYNC_LABEL],
+};
+// Mirrors templates/CODEOWNERS. Two things are load-bearing here.
+//
+// The owner is org-scoped: GitHub reads a bare `@platform-engineering` as a
+// *user*, and a user that does not exist makes GitHub mark the whole
+// CODEOWNERS file erroneous — at which point `require_code_owner_review`
+// degrades to the silent no-op this file exists to prevent. A team must be
+// written `@org/team`.
+//
+// The rendered standards are owned too. Without them a contributor can edit
+// AGENTS.md, CLAUDE.md or the Copilot instructions — the rules their own pull
+// request is reviewed against — and self-merge the weakening.
+//
+// There is deliberately no `*` default-owner line, which templates/CODEOWNERS
+// carries as an `@<org>/<owning-team>` placeholder: the CLI cannot know a
+// repository's owning team, and naming the platform team there would make it
+// a required reviewer on every file in every onboarded repository. The
+// ruleset already requires one approval on every pull request.
+export const SENSITIVE_PATHS = [
+    '/.github/workflows/',
+    '/.github/CODEOWNERS',
+    '/.github/copilot-instructions.md',
+    '/.github/instructions/',
+    '/.github/dependabot.yml',
+    '/AGENTS.md',
+    '/CLAUDE.md',
+    '/infra/',
+    '/terraform/',
+    'Dockerfile',
+];
+export const OWNING_TEAM = 'platform-engineering';
+// Accessibility rules only exist for the stacks that render a user interface,
+// so recording `accessibility: true` on a Terraform or Go repository files a
+// commitment against rules that will never be rendered there.
+const ACCESSIBILITY_STACKS = ['react', 'react-native', 'kotlin', 'swift'];
+// The 2.1 artifact that identifies a repository onboarded by the previous
+// generation. It is NOT in the removal list below: v3's GitHub adapter writes
+// the same path, so removing it would delete the gate this run just installed
+// — and for the same reason its presence alone does not prove a 2.1
+// repository. A v3 repository whose .redline.json was deleted has this file
+// too, and mistaking it for 2.1 would run the removals below against it.
+const LEGACY_MARKER = '.github/workflows/redline.yml';
+// What v3's own caller workflow contains and 2.1's shell rollout could not:
+// the reusable-workflow reference that templates/redline.yml installs.
+const V3_CALLER = /\.github\/workflows\/redline-gate\.yml@/;
+// Everything 2.1 left behind that v3 does not write. Rendered vendor artifacts
+// (`.github/instructions/redline-*.instructions.md`, `.cursor/rules/redline-*.mdc`)
+// are not here: render() already prunes those as stale.
+const LEGACY_PATHS = ['.github/workflows/redline-sync.yml'];
+const LEGACY_SCRIPT = /^redline-.*\.sh$/;
+// `scripts/redline-*.sh` is a glob, not a path, and a repository that adopted
+// Redline is exactly the kind that has a hand-written `scripts/redline-deploy.sh`.
+// The brownfield rule applies to files as much as to host objects: what carries
+// no Redline marker belongs to a human and is never deleted.
+const REDLINE_OWNED = /(?:managed|generated|installed) by redline|REDLINE:BEGIN/i;
+export function sensitivePathRules(org) {
+    return SENSITIVE_PATHS.map((pattern) => ({ pattern, owners: [`@${org}/${OWNING_TEAM}`] }));
+}
+export const ONBOARD_BRANCH = 'redline/onboard';
+// Local and free — both adapters read the checkout and nothing else — but the
+// path it reads is whatever is on disk by now, and with the gate deselected
+// `installGate` no longer runs first to meet an unreadable one. Everything it
+// feeds here is advisory output, so a path that cannot be read costs the notes
+// and never the run.
+function observeGateMachinery(platform, cwd) {
+    try {
+        return platform.readGateMachinery(cwd);
+    }
+    catch {
+        return null;
+    }
+}
+// Every other pipeline definition sitting where this host keeps them. Cheap
+// (one readdir) and unambiguous as a statement — it says what is there and
+// nothing about what it does, which is the operator's to know.
+function otherPipelines(cwd, machineryPath) {
+    const slash = machineryPath.lastIndexOf('/');
+    const dir = slash === -1 ? '' : machineryPath.slice(0, slash);
+    const abs = join(cwd, dir);
+    if (!existsSync(abs))
+        return [];
+    return readdirSync(abs)
+        .filter((file) => /\.ya?ml$/.test(file))
+        .map((file) => (dir === '' ? file : `${dir}/${file}`))
+        .filter((relPath) => relPath !== machineryPath);
+}
+// Deleted, not just unwritten: a 2.1 sync workflow left in place keeps running
+// against a repository that has moved to v3. The deletions ride out in the
+// same pull request as the rest of the migration.
+function removeLegacyArtifacts(cwd, dryRun) {
+    const removed = [];
+    const remove = (relPath) => {
+        if (!existsSync(join(cwd, relPath)))
+            return;
+        if (!dryRun)
+            rmSync(join(cwd, relPath));
+        removed.push(relPath);
+    };
+    // Exact paths only: `.github/workflows/redline-sync.yml` is a Redline-named
+    // workflow at a Redline-owned path, not something a human names by accident.
+    for (const relPath of LEGACY_PATHS)
+        remove(relPath);
+    if (existsSync(join(cwd, 'scripts'))) {
+        for (const file of readdirSync(join(cwd, 'scripts'))) {
+            if (!LEGACY_SCRIPT.test(file))
+                continue;
+            if (!REDLINE_OWNED.test(readFileSync(join(cwd, 'scripts', file), 'utf8')))
+                continue;
+            remove(`scripts/${file}`);
+        }
+    }
+    return removed;
+}
+// A 2.1 repository has the caller workflow and no .redline.json. A v3
+// repository whose config was deleted has the caller workflow too — telling
+// them apart is what stops the removals above running on a repository that
+// never saw 2.1.
+function detectMigration(cwd, onboarded) {
+    if (onboarded)
+        return null;
+    const caller = join(cwd, LEGACY_MARKER);
+    if (!existsSync(caller))
+        return null;
+    return V3_CALLER.test(readFileSync(caller, 'utf8')) ? null : '2.1';
+}
+// Detect-before-ask: a repository's existing tooling files pick the default
+// vendor selection, so a Copilot-only team is not handed AGENTS.md and
+// CLAUDE.md on day one. Only used when nothing else has decided already — see
+// the precedence comment on `vendors` in init() below.
+const VENDOR_MARKERS = [
+    { vendor: 'copilot', paths: ['.github/copilot-instructions.md', '.github/instructions'] },
+    { vendor: 'claude', paths: ['CLAUDE.md', '.claude'] },
+    { vendor: 'agents', paths: ['AGENTS.md'] },
+    { vendor: 'cursor', paths: ['.cursor/rules'] },
+];
+// A repository with none of these markers gets `orgDefault` (every
+// org-enabled vendor) rather than an empty selection — that is the greenfield
+// case the standard is written for, not a repository that opted out of all of
+// them.
+function detectVendors(cwd, orgDefault) {
+    const found = VENDOR_MARKERS.filter((marker) => marker.paths.some((relPath) => existsSync(join(cwd, relPath)))).map((marker) => marker.vendor);
+    return found.length > 0 ? found : orgDefault;
+}
+// `pendingAdmin` records one fact and one only: a WRITE this run attempted was
+// refused. Every entry is produced by `outcomes.filter(isPending)` further
+// down, off what the four install calls returned. No read revises it, in either
+// direction, for any capability — not `labels`, `review-ownership`,
+// `repo-property` or `gate` (which have no read side at all), not
+// `merge-policy` (whose `readPolicy` answers "a ruleset with Redline's name
+// exists", never "this token may write one" — on GitHub those split exactly
+// along GET /rulesets versus PUT /rulesets/{id}), and not the three security
+// capabilities either.
+//
+// The security three look reconcilable and are not. `readSecurityState`
+// answers "is the setting on?"; the record answers "was this token allowed to
+// set it?". A fine-grained GitHub token with `administration: read` reads
+// GET /vulnerability-alerts as 204 while PUT /automated-security-fixes answers
+// 403; an Azure PAT with `vso.advsec` but no Project Administrator role reads
+// `advSecEnabled: true` while the PATCH is refused, for all three at once.
+// Letting the read clear or create an entry made the settled path disagree
+// with what the apply path would record, so the two answers chased each other:
+// the read cleared the entry, the refused write re-recorded it, and every run
+// re-applied four host mutations and pushed another commit onto the onboarding
+// pull request, exiting 0 throughout.
+//
+// The accepted cost of the uniform rule: a recorded entry survives even after
+// an administrator grants the rights, because nothing re-applies and nothing
+// reads write-permission back. `redline init --repair` is the sanctioned way
+// out — it is what `redline verify`'s pending-admin finding points at — and
+// the already-onboarded output qualifies the list as recorded at the last run.
+export async function init(platform, opts) {
+    const { cwd, root } = opts;
+    const dryRun = opts.dryRun === true;
+    const repair = opts.repair === true;
+    const manifest = loadManifest(root);
+    const now = opts.now ?? (() => new Date());
+    // Profile resolution happens before any host call or write: a bad --profile
+    // flag must fail clean, with nothing on disk and nothing sent to the host.
+    const detected = opts.profile ?? proposeProfile(scanRepo(cwd)).profile;
+    const { profile, stacks } = resolveProfile(manifest, detected);
+    const existing = readConfig(cwd);
+    const migratedFrom = detectMigration(cwd, existing !== null);
+    // DEFAULT_MENU <- what this repository already chose <- the flags the caller
+    // actually typed. Rebuilding the menu from flag defaults alone demoted a
+    // `--blocking` repository back to advisory on the next plain `redline init`
+    // — and did it before the no-op check, so even a run with nothing to commit
+    // rewrote the live ruleset while .redline.json still claimed blocking.
+    const menu = {
+        ...DEFAULT_MENU,
+        accessibility: stacks.some((stack) => ACCESSIBILITY_STACKS.includes(stack)),
+        ...existing?.menu,
+        ...opts.menu,
+    };
+    // DEFAULT_CAPABILITIES <- what this repository already chose <- what the
+    // caller typed, the same precedence the menu resolves under.
+    const capabilities = {
+        ...DEFAULT_CAPABILITIES,
+        ...existing?.capabilities,
+        ...opts.capabilities,
+    };
+    // The rung, resolved before anything is written. A run that says nothing about
+    // enforcement keeps what the repository already had: a re-run for an unrelated
+    // reason silently promoting a repository is how a ladder loses the trust it
+    // exists to build.
+    const currentRung = existing?.rung ?? 'observe';
+    const rungNotes = [];
+    let rung = currentRung;
+    if (opts.rung !== undefined && opts.rung !== currentRung) {
+        const check = canPromote(currentRung, opts.rung, opts.evidence ?? { seedRecall: null, actedOnRate: null, sampleSize: 0, falsePositives: null }, opts.marketFloor ?? 'observe');
+        if (check.eligible) {
+            rung = opts.rung;
+            rungNotes.push(`enforcement: ${currentRung} -> ${rung}`);
+        }
+        else {
+            // Refused, and the run continues. Everything else this command does is
+            // still worth doing, and failing the whole onboarding over a rung the
+            // repository cannot reach yet would teach people to stop asking.
+            rungNotes.push(`enforcement stays at ${currentRung} — cannot move to ${opts.rung}:`);
+            for (const blocker of check.blockers)
+                rungNotes.push(`  ${blocker}`);
+        }
+    }
+    // Refused before a host is contacted or a byte is written, because the state
+    // it describes cannot be recovered from by re-running: with no gate
+    // machinery nothing in the repository publishes the required check, and a
+    // blocking policy that requires a check nothing publishes blocks every pull
+    // request in the repository forever. A repository that runs its own gate
+    // wants its own branch policy too — `--skip gate --skip merge-policy` — or
+    // an advisory Redline policy alongside it.
+    if (!capabilities.gate && capabilities.mergePolicy && menu.blockingGate) {
+        throw new RedlineError('usage', 'the merge gate is deselected, so nothing in this repository publishes the check a blocking ' +
+            'policy would require — every pull request would be blocked', 'either keep the gate, or add --skip merge-policy so this repository keeps its own branch policy');
+    }
+    // A dry run must work offline and with an unscoped token: repoRef() is a
+    // live GET, so the plan is built from what the local clone already knows.
+    const ref = dryRun ? platform.localRef(cwd) : await platform.repoRef(cwd);
+    // detected <- what this repository already recorded <- what the caller
+    // typed, the same precedence the menu resolves under. The org ceiling is
+    // deliberately not applied to the RECORD: render() enforces it on every call
+    // it makes (including verify's), so a recorded selection can outlive an
+    // org-side disablement without this function needing to track that.
+    const orgVendors = Object.entries(manifest.vendors)
+        .filter(([, v]) => v.enabled)
+        .map(([k]) => k);
+    const vendors = opts.vendors ?? existing?.vendors ?? detectVendors(cwd, orgVendors);
+    const gateOptions = {
+        ...FLOOR_GATE,
+        ...(menu.adrForLargeDiffs ? {} : { adrDiffThreshold: Number.MAX_SAFE_INTEGER }),
+        ...(opts.adoptCaller === true ? { adoptCaller: true } : {}),
+        ...(capabilities.labels ? {} : { manageLabels: false }),
+        // Written into the caller workflow, so the gate blocks or reports according
+        // to the rung recorded here rather than needing a second source of truth.
+        rung,
+    };
+    const ownershipRules = sensitivePathRules(ref.org);
+    // The gate and ownership file diffs are computed in check mode FIRST, before
+    // a single host setting is touched. Without it there was no way to know a
+    // re-run had nothing to do until four host objects had already been
+    // rewritten — and the answer itself was wrong, because alreadyOnboarded read
+    // only the rendered files and never these two.
+    //
+    // It also runs before the first byte reaches the working tree. `installGate`
+    // refuses rather than clobber a gate machinery file it cannot attribute to
+    // Redline, and its message says nothing was written; planning after the
+    // render made that untrue, leaving every vendor artifact and command file on
+    // disk with no .redline.json, no branch and no pull request to carry them.
+    const gatePlan = capabilities.gate
+        ? await platform.installGate(ref, cwd, gateOptions, true)
+        : { files: [], outcomes: [] };
+    const ownershipPlan = menu.sensitivePathReviewers
+        ? await platform.ensureReviewOwnership(ref, cwd, ownershipRules, true)
+        : { files: [], outcomes: [] };
+    // Everything this run observed and thinks the operator should know, without
+    // acting on any of it. Detection informs; it does not decide.
+    const machinery = observeGateMachinery(platform, cwd);
+    const notes = [...rungNotes];
+    // Detection, not a decision. `readGateMachinery` is local and free, and what
+    // it gives that nothing else here has is the path this host runs its gate
+    // from — so the only claim made is what else is already sitting in that
+    // directory. It is offered while Redline's own gate is still absent and
+    // never after, because a repository that already has it has answered the
+    // question.
+    const alreadyWired = capabilities.gate && machinery !== null && !machinery.present
+        ? otherPipelines(cwd, machinery.path)
+        : [];
+    if (alreadyWired.length > 0) {
+        notes.push(`this repository already has ${alreadyWired.join(', ')} — if one of them is already your ` +
+            'merge gate, re-run with --skip gate and Redline will leave it in charge rather than ' +
+            'writing a second one beside it');
+    }
+    // Deselecting the gate does not delete the workflow an earlier run installed
+    // — deleting a repository's files is not Redline's to do — so it is still
+    // there and still firing on every pull request. Saying only "opted out: gate"
+    // beside a running gate describes a state this repository is not in, and
+    // invites the operator to go and delete it by hand.
+    if (!capabilities.gate && machinery !== null && machinery.present) {
+        notes.push(`${machinery.path} from an earlier run is still in this repository and still publishes ` +
+            `${machinery.expected} — Redline no longer maintains it; it is yours to keep or delete`);
+    }
+    // The other half of the deadlock guard, and the half a refusal cannot cover:
+    // the guard only sees a blocking policy this run would apply, so deselecting
+    // the merge policy walks straight past it and leaves a Redline ruleset
+    // blocking on a check that, with the gate deselected too, nothing will ever
+    // publish. The policy is the repository's now, so this is not a refusal — but
+    // it is the last place anyone hears about it before a pull request hangs.
+    if (!capabilities.mergePolicy &&
+        menu.blockingGate &&
+        existing !== null &&
+        !existing.pendingAdmin.includes('merge-policy')) {
+        notes.push('the merge policy Redline applied here is blocking and is no longer maintained by Redline — ' +
+            'it still requires the Redline gate check, so relax or delete it on the host unless ' +
+            'something in this repository still publishes that check');
+    }
+    if (labelsCarriedByGate(capabilities)) {
+        notes.push("labels are created by the gate install, so a deselected gate takes Redline's labels with " +
+            'it — the selection recorded in .redline.json is unchanged, and re-selecting the gate ' +
+            'brings them back');
+    }
+    // Files next, host settings after: a denied host call must never cost the
+    // file-level work that already succeeded.
+    const rendered = render({ root, profile, out: cwd, vendors, check: dryRun });
+    // The ceiling render() applies internally, applied here too. renderCommands
+    // cannot enforce it for itself: COMMAND_HOSTS carries hosts the vendor
+    // manifest has no entry for at all (opencode), which is not the same thing
+    // as a vendor the org switched off. Without this, `redline init --vendors
+    // copilot,cursor` skipped .cursor/rules/ and still wrote .cursor/commands/,
+    // delivering half of a vendor the org had disabled.
+    const commands = renderCommands({
+        root,
+        out: cwd,
+        hosts: vendors.flatMap((v) => (orgVendors.includes(v) && v in COMMAND_HOSTS ? [v] : [])),
+        check: dryRun,
+        known: existing?.commandFiles ?? {},
+    });
+    const legacyRemovals = migratedFrom === '2.1' ? removeLegacyArtifacts(cwd, dryRun) : [];
+    // render() prunes stale vendor files with rmSync; those deletions must ride
+    // along in the same file list as the writes, or the PR never reflects them.
+    const removals = [
+        ...(dryRun ? rendered.staleRemovals : rendered.removed),
+        ...commands.removed,
+        ...legacyRemovals,
+    ];
+    const changedFiles = [
+        ...(dryRun ? rendered.staleWritten : rendered.written),
+        ...removals,
+        ...commands.written,
+        ...gatePlan.files,
+        ...ownershipPlan.files,
+    ];
+    // A menu change moves no file of its own (the gate template already diffs
+    // adrForLargeDiffs), but it is exactly what `redline init --blocking` on a
+    // settled repository is for: swallowing it as "nothing to change" would drop
+    // the promotion silently.
+    const menuChanged = existing !== null && MENU_KEYS.some((key) => existing.menu[key] !== menu[key]);
+    // Same shape as menuChanged: a vendor deselect that has nothing left on
+    // disk to remove (the file was already gone) moves no file of its own, and
+    // swallowing it as "nothing to change" would leave .redline.json recording
+    // a selection this run was explicitly told to drop.
+    const vendorsChanged = existing !== null &&
+        (existing.vendors.length !== vendors.length ||
+            [...existing.vendors].sort().join('') !== [...vendors].sort().join(''));
+    // Same shape again: deselecting a capability moves no file of its own, and
+    // swallowing it as "nothing to change" would leave .redline.json recording a
+    // capability the operator just switched off — with Redline still maintaining it.
+    const capabilitiesChanged = existing !== null &&
+        CAPABILITY_KEYS.some((key) => existing.capabilities[key] !== capabilities[key]);
+    // "Zero host calls on a settled repository" means zero host *mutations*.
+    // Reading is how the run finds out whether the repository is settled at all:
+    // without it, an operator who loosened the ruleset by hand got "already
+    // onboarded — nothing to change" from `redline init` AND from
+    // `redline init --blocking` (the config already said blocking, so nothing
+    // looked changed), and the only recovery was deleting .redline.json — which
+    // destroys onboardedAt, the recorded menu, and makes this run look like a
+    // 2.1 migration.
+    //
+    // The read happens only when nothing else has already settled the question.
+    // It exists to decide whether a run with no other work to do is genuinely
+    // finished, so a run that already has work does not need it — and must not
+    // be aborted by it: a 502 on GET /rulesets, or a token that can write but
+    // cannot list rulesets, would otherwise exit 4 on a run that had real work
+    // and had already written the rendered files.
+    // `--repair` exists precisely to bypass the settled verdict below, so
+    // computing it here would spend a host GET whose answer nothing then reads:
+    // `alreadyOnboarded` is forced false for a repair run further down, never
+    // mind what the read would have said.
+    const settledOnFiles = existing !== null &&
+        changedFiles.length === 0 &&
+        !menuChanged &&
+        !vendorsChanged &&
+        !capabilitiesChanged;
+    let settledOnHost = true;
+    if (existing !== null && settledOnFiles && !dryRun && !repair) {
+        // Not read at all when the repository manages its own merge policy: what
+        // is on the host then is a human's, and comparing Redline's menu against
+        // it would report the repository's own deliberate configuration as drift.
+        const policy = capabilities.mergePolicy ? await platform.readPolicy(ref) : null;
+        // A null policy read is not by itself drift. A repository onboarded
+        // without admin rights never got a ruleset — that refusal is exactly what
+        // `merge-policy` in pendingAdmin records — so null is its settled state.
+        // Where the record says the ruleset was applied, null means it vanished.
+        settledOnHost = !capabilities.mergePolicy
+            ? true
+            : policy === null
+                ? existing.pendingAdmin.includes('merge-policy')
+                : policy.blocking === menu.blockingGate;
+    }
+    // `--repair` skips the short-circuit outright: it exists for exactly the
+    // capabilities this settled verdict would otherwise call done forever —
+    // labels, review-ownership, repo-property, gate, and merge-policy's own
+    // null branch above — none of which a plain re-run can ever re-check.
+    // A rung change is work, so it must not be swallowed by the settled verdict.
+    // Without this an operator promoting an already-onboarded repository gets
+    // "nothing to change" and a rung that never moved — the flag silently doing
+    // nothing, which is worse than refusing.
+    const rungRequested = rung !== currentRung || rungNotes.length > 0;
+    const alreadyOnboarded = !repair && !rungRequested && settledOnFiles && settledOnHost;
+    const optedOut = deselectedCapabilities(menu, capabilities);
+    const hostPlan = [
+        ...(capabilities.gate ? [`merge gate machinery on ${platform.host}`] : []),
+        ...(menu.sensitivePathReviewers ? ['review ownership for the sensitive paths'] : []),
+        'security floor: secret scanning, push protection, dependency alerts',
+        ...(capabilities.mergePolicy
+            ? [`branch policy: 1 approval, gate ${menu.blockingGate ? 'blocking' : 'advisory'}`]
+            : []),
+        `pull request on ${ONBOARD_BRANCH}`,
+    ];
+    if (alreadyOnboarded) {
+        return {
+            profile,
+            files: [],
+            removals: [],
+            outcomes: [],
+            // Exactly what .redline.json records, because this run attempted no
+            // write and only a write answers the question the record asks. `bin`
+            // marks it as recorded rather than measured.
+            pendingAdmin: existing.pendingAdmin,
+            pullRequest: null,
+            pullRequestError: null,
+            migratedFrom,
+            alreadyOnboarded: true,
+            dryRun,
+            menu,
+            capabilities,
+            optedOut,
+            notes,
+            hostPlan,
+        };
+    }
+    const files = [...changedFiles, CONFIG_FILE];
+    if (dryRun) {
+        return {
+            profile,
+            files,
+            removals,
+            // installGate's plan reports no outcome (it made no host call);
+            // ensureReviewOwnership's are decided locally and worth printing.
+            outcomes: [...gatePlan.outcomes, ...ownershipPlan.outcomes],
+            pendingAdmin: [],
+            pullRequest: null,
+            pullRequestError: null,
+            migratedFrom,
+            alreadyOnboarded: false,
+            dryRun: true,
+            menu,
+            capabilities,
+            optedOut,
+            notes,
+            hostPlan,
+        };
+    }
+    const gate = capabilities.gate
+        ? await platform.installGate(ref, cwd, gateOptions)
+        : { files: [], outcomes: [] };
+    const ownership = menu.sensitivePathReviewers
+        ? await platform.ensureReviewOwnership(ref, cwd, ownershipRules)
+        : { files: [], outcomes: [] };
+    const security = await platform.enableSecurityFloor(ref);
+    const policy = capabilities.mergePolicy
+        ? await platform.applyPolicy(ref, {
+            requiredApprovals: 1,
+            dismissStaleReviews: true,
+            requireCodeOwnerReview: menu.sensitivePathReviewers,
+            requireThreadResolution: true,
+            // Empty by design: the required check is the host's own gate check
+            // name, and each adapter supplies it (GitHub's REQUIRED_CHECK, Azure's
+            // AZURE_STATUS_NAME/GENRE). requiredChecks is the read side of
+            // MergePolicy — what verify reports back off the host.
+            requiredChecks: [],
+            blocking: menu.blockingGate,
+        })
+        : { outcomes: [], policy: null };
+    // denied -> pendingAdmin work for an administrator; unsupported -> the
+    // capability doesn't exist on this repository (e.g. Advanced Security is
+    // unlicensed) and must never be reported as permanently half-onboarded.
+    const outcomes = [...gate.outcomes, ...ownership.outcomes, ...security.outcomes, ...policy.outcomes];
+    const pendingAdmin = outcomes.filter(isPending).map((o) => o.capability);
+    writeConfig(cwd, {
+        standardsVersion: manifest.version,
+        cliVersion: CLI_VERSION,
+        host: platform.host,
+        profile,
+        vendors,
+        menu,
+        capabilities,
+        pendingAdmin,
+        // When the repository joined, not when it was last touched: overwriting
+        // this on every run erased the only record of when the standard landed.
+        onboardedAt: existing?.onboardedAt ?? now().toISOString(),
+        lastRunAt: now().toISOString(),
+        localRules: existsSync(join(cwd, LOCAL_RULES_FILE)),
+        commandFiles: commands.contentIds,
+        // The rung the repository asked for, or the one it already had, or the
+        // bottom. A run that says nothing about enforcement must never change it:
+        // a re-run for an unrelated reason silently promoting a repository is how a
+        // ladder loses the trust it exists to build.
+        rung,
+    });
+    let pullRequest = null;
+    let pullRequestError = null;
+    try {
+        pullRequest = await platform.openPullRequest(ref, cwd, {
+            branch: ONBOARD_BRANCH,
+            title: `chore(redline): onboard to standards v${manifest.version}`,
+            body: onboardBody(profile, manifest.version, pendingAdmin),
+            labels: capabilities.labels ? [SYNC_LABEL] : [],
+            files,
+        });
+    }
+    catch (error) {
+        // A usage refusal — a dirty git index — happens before any branch exists
+        // and before anything is pushed. That stays the caller's input error, not
+        // a half-finished onboarding.
+        if (isRedlineError(error) && error.kind === 'usage')
+            throw error;
+        // Everything else: the host mutations and .redline.json above are real and
+        // must not be thrown away. The operator is told where the work sits.
+        pullRequestError = error instanceof Error ? error.message : String(error);
+    }
+    // Work that only exists once the pull request does — labelling it. It is
+    // reported, but it cannot reach pendingAdmin: .redline.json records that
+    // list and is itself part of the pull request, so it was written above.
+    if (pullRequest?.outcomes)
+        outcomes.push(...pullRequest.outcomes);
+    return {
+        profile,
+        files,
+        removals,
+        outcomes,
+        pendingAdmin,
+        pullRequest,
+        pullRequestError,
+        migratedFrom,
+        alreadyOnboarded: false,
+        dryRun: false,
+        menu,
+        capabilities,
+        optedOut,
+        notes,
+        hostPlan,
+    };
+}
+function onboardBody(profile, version, pendingAdmin) {
+    const pending = pendingAdmin.length === 0
+        ? 'Everything that needed repository settings was applied.'
+        : `A repository administrator still needs to enable: ${pendingAdmin.join(', ')}. ` +
+            `Until then this repository shows as partially onboarded.`;
+    return [
+        `Onboards this repository to Redline standards \`v${version}\` (profile: \`${profile}\`).`,
+        '',
+        'The merge gate runs **advisory** — it reports, it does not block. Promotion to blocking is a',
+        'deliberate second step after a soak period.',
+        '',
+        'Generated content sits inside `<!-- REDLINE:BEGIN -->` markers; anything outside them is yours',
+        'and was preserved. If a rule is wrong for this repository, raise it in the Redline source repo',
+        'rather than editing it here, so every repository benefits.',
+        '',
+        pending,
+    ].join('\n');
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../cli/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAA4B,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,WAAW,EACX,SAAS,EACT,sBAAsB,EACtB,mBAAmB,EACnB,UAAU,EACV,WAAW,GAGZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAWlD,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,YAAY,EAAE,KAAK;IACnB,gBAAgB,EAAE,IAAI;IACtB,aAAa,EAAE,IAAI;IACnB,OAAO,EAAE,KAAK;IACd,sBAAsB,EAAE,IAAI;CAC7B,CAAC;AAEF,iEAAiE;AACjE,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC;AAEzC,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,IAAI,EAAE,IAAI;IACV,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAgB;IACrC,gBAAgB,EAAE,GAAG;IACrB,wBAAwB,EAAE,MAAM;IAChC,cAAc,EAAE,CAAC,gBAAgB,EAAE,UAAU,CAAC;CAC/C,CAAC;AAEF,kEAAkE;AAClE,EAAE;AACF,4EAA4E;AAC5E,qEAAqE;AACrE,yEAAyE;AACzE,2EAA2E;AAC3E,uBAAuB;AACvB,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,8DAA8D;AAC9D,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,uEAAuE;AACvE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,qBAAqB;IACrB,qBAAqB;IACrB,kCAAkC;IAClC,wBAAwB;IACxB,yBAAyB;IACzB,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,aAAa;IACb,YAAY;CACJ,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAElD,8EAA8E;AAC9E,6EAA6E;AAC7E,8DAA8D;AAC9D,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE1E,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,oEAAoE;AACpE,4EAA4E;AAC5E,yEAAyE;AACzE,MAAM,aAAa,GAAG,+BAA+B,CAAC;AACtD,4EAA4E;AAC5E,uEAAuE;AACvE,MAAM,SAAS,GAAG,yCAAyC,CAAC;AAE5D,+EAA+E;AAC/E,oFAAoF;AACpF,wDAAwD;AACxD,MAAM,YAAY,GAAG,CAAC,oCAAoC,CAAC,CAAC;AAC5D,MAAM,aAAa,GAAG,kBAAkB,CAAC;AACzC,8EAA8E;AAC9E,mFAAmF;AACnF,gFAAgF;AAChF,6DAA6D;AAC7D,MAAM,aAAa,GAAG,2DAA2D,CAAC;AAElF,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEhD,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,qBAAqB;AACrB,SAAS,oBAAoB,CAAC,QAAkB,EAAE,GAAW;IAC3D,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,2EAA2E;AAC3E,+DAA+D;AAC/D,SAAS,cAAc,CAAC,GAAW,EAAE,aAAqB;IACxD,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;SACrD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC;AACpD,CAAC;AAED,+EAA+E;AAC/E,2EAA2E;AAC3E,kDAAkD;AAClD,SAAS,qBAAqB,CAAC,GAAW,EAAE,MAAe;IACzD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,OAAe,EAAQ,EAAE;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO;QAC5C,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC;IACF,4EAA4E;IAC5E,6EAA6E;IAC7E,KAAK,MAAM,OAAO,IAAI,YAAY;QAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBAAE,SAAS;YACpF,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,iBAAiB;AACjB,SAAS,eAAe,CAAC,GAAW,EAAE,SAAkB;IACtD,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACrE,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,8EAA8E;AAC9E,uDAAuD;AACvD,MAAM,cAAc,GAA0C;IAC5D,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,iCAAiC,EAAE,sBAAsB,CAAC,EAAE;IACzF,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE;IACrD,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE;IAC1C,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,eAAe,CAAC,EAAE;CAC/C,CAAC;AAEF,mEAAmE;AACnE,8EAA8E;AAC9E,8EAA8E;AAC9E,QAAQ;AACR,SAAS,aAAa,CAAC,GAAW,EAAE,UAAoB;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAC/D,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/C,CAAC;AA4ED,+EAA+E;AAC/E,2EAA2E;AAC3E,gFAAgF;AAChF,oEAAoE;AACpE,kEAAkE;AAClE,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,uBAAuB;AACvB,EAAE;AACF,wEAAwE;AACxE,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,sCAAsC;AACtC,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,QAAkB,EAAE,IAAiB;IAC9D,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/D,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC;IAE7D,6EAA6E;IAC7E,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,IAAI,GAAmB;QAC3B,GAAG,YAAY;QACf,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3E,GAAG,QAAQ,EAAE,IAAI;QACjB,GAAG,IAAI,CAAC,IAAI;KACb,CAAC;IAEF,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,YAAY,GAAyB;QACzC,GAAG,oBAAoB;QACvB,GAAG,QAAQ,EAAE,YAAY;QACzB,GAAG,IAAI,CAAC,YAAY;KACrB,CAAC;IAEF,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,mBAAmB;IACnB,MAAM,WAAW,GAAS,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAC;IACtD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,IAAI,GAAG,WAAW,CAAC;IACvB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CACtB,WAAW,EACX,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,QAAQ,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,EAC7F,IAAI,CAAC,WAAW,IAAI,SAAS,CAC9B,CAAC;QACF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACjB,SAAS,CAAC,IAAI,CAAC,gBAAgB,WAAW,OAAO,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,sEAAsE;YACtE,iEAAiE;YACjE,SAAS,CAAC,IAAI,CAAC,wBAAwB,WAAW,qBAAqB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACrF,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ;gBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,oEAAoE;IACpE,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,2CAA2C;IAC3C,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACxE,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,6FAA6F;YAC3F,4DAA4D,EAC9D,iGAAiG,CAClG,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;SAChD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;SAC5B,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,EAAE,OAAO,IAAI,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAEpF,MAAM,WAAW,GAAgB;QAC/B,GAAG,UAAU;QACb,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QACvD,4EAA4E;QAC5E,0EAA0E;QAC1E,IAAI;KACL,CAAC;IACF,MAAM,cAAc,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEnD,6EAA6E;IAC7E,0EAA0E;IAC1E,oEAAoE;IACpE,6EAA6E;IAC7E,+CAA+C;IAC/C,EAAE;IACF,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IACxE,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI;QAChC,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC;QACzD,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEhC,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB;QAC/C,CAAC,CAAC,MAAM,QAAQ,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC;QACtE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEhC,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,KAAK,GAAa,CAAC,GAAG,SAAS,CAAC,CAAC;IAEvC,6EAA6E;IAC7E,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,YAAY;IACZ,MAAM,YAAY,GAChB,YAAY,CAAC,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO;QAC3D,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC;QACrC,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,+BAA+B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC;YACxF,sFAAsF;YACtF,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,yEAAyE;IACzE,oDAAoD;IACpD,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QAClE,KAAK,CAAC,IAAI,CACR,GAAG,SAAS,CAAC,IAAI,uEAAuE;YACtF,GAAG,SAAS,CAAC,QAAQ,kEAAkE,CAC1F,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,0EAA0E;IAC1E,IACE,CAAC,YAAY,CAAC,WAAW;QACzB,IAAI,CAAC,YAAY;QACjB,QAAQ,KAAK,IAAI;QACjB,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC/C,CAAC;QACD,KAAK,CAAC,IAAI,CACR,6FAA6F;YAC3F,qFAAqF;YACrF,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,2FAA2F;YACzF,uFAAuF;YACvF,kBAAkB,CACrB,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,oDAAoD;IACpD,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,IAAI;QACJ,GAAG,EAAE,GAAG;QACR,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxF,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,QAAQ,EAAE,YAAY,IAAI,EAAE;KACpC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAExF,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvD,GAAG,QAAQ,CAAC,OAAO;QACnB,GAAG,cAAc;KAClB,CAAC;IACF,MAAM,YAAY,GAAG;QACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtD,GAAG,QAAQ;QACX,GAAG,QAAQ,CAAC,OAAO;QACnB,GAAG,QAAQ,CAAC,KAAK;QACjB,GAAG,aAAa,CAAC,KAAK;KACvB,CAAC;IACF,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,0BAA0B;IAC1B,MAAM,WAAW,GAAG,QAAQ,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,wEAAwE;IACxE,2EAA2E;IAC3E,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,cAAc,GAClB,QAAQ,KAAK,IAAI;QACjB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YACzC,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9E,2EAA2E;IAC3E,6EAA6E;IAC7E,iFAAiF;IACjF,MAAM,mBAAmB,GACvB,QAAQ,KAAK,IAAI;QACjB,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAElF,yEAAyE;IACzE,6EAA6E;IAC7E,wEAAwE;IACxE,8DAA8D;IAC9D,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,iBAAiB;IACjB,EAAE;IACF,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,8CAA8C;IAC9C,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,sCAAsC;IACtC,MAAM,cAAc,GAClB,QAAQ,KAAK,IAAI;QACjB,YAAY,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,WAAW;QACZ,CAAC,cAAc;QACf,CAAC,mBAAmB,CAAC;IACvB,IAAI,aAAa,GAAG,IAAI,CAAC;IACzB,IAAI,QAAQ,KAAK,IAAI,IAAI,cAAc,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9D,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,oEAAoE;QACpE,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,aAAa,GAAG,CAAC,YAAY,CAAC,WAAW;YACvC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,KAAK,IAAI;gBACf,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAChD,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY,CAAC;IAC9C,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,yCAAyC;IACzC,MAAM,aAAa,GAAG,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,IAAI,cAAc,IAAI,aAAa,CAAC;IAEtF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,2BAA2B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,qEAAqE;QACrE,GAAG,CAAC,YAAY,CAAC,WAAW;YAC1B,CAAC,CAAC,CAAC,mCAAmC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;YACpF,CAAC,CAAC,EAAE,CAAC;QACP,mBAAmB,cAAc,EAAE;KACpC,CAAC;IAEF,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO;YACL,OAAO;YACP,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,oEAAoE;YACpE,qEAAqE;YACrE,6CAA6C;YAC7C,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,IAAI;YACtB,YAAY;YACZ,gBAAgB,EAAE,IAAI;YACtB,MAAM;YACN,IAAI;YACJ,YAAY;YACZ,QAAQ;YACR,KAAK;YACL,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,YAAY,EAAE,WAAW,CAAC,CAAC;IAE7C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,OAAO;YACP,KAAK;YACL,QAAQ;YACR,gEAAgE;YAChE,kEAAkE;YAClE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC;YAC3D,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,IAAI;YACtB,YAAY;YACZ,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,IAAI;YACZ,IAAI;YACJ,YAAY;YACZ,QAAQ;YACR,KAAK;YACL,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI;QAC5B,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;QACnD,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB;QAC3C,CAAC,CAAC,MAAM,QAAQ,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC;QAChE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEhC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW;QACrC,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YAC9B,iBAAiB,EAAE,CAAC;YACpB,mBAAmB,EAAE,IAAI;YACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;YACnD,uBAAuB,EAAE,IAAI;YAC7B,mEAAmE;YACnE,uEAAuE;YACvE,+DAA+D;YAC/D,uDAAuD;YACvD,cAAc,EAAE,EAAE;YAClB,QAAQ,EAAE,IAAI,CAAC,YAAY;SAC5B,CAAC;QACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAEnC,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrG,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAEzE,WAAW,CAAC,GAAG,EAAE;QACf,gBAAgB,EAAE,QAAQ,CAAC,OAAO;QAClC,UAAU,EAAE,WAAW;QACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO;QACP,OAAO;QACP,IAAI;QACJ,YAAY;QACZ,YAAY;QACZ,wEAAwE;QACxE,wEAAwE;QACxE,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,GAAG,EAAE,CAAC,WAAW,EAAE;QACzD,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QAC9B,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACnD,YAAY,EAAE,QAAQ,CAAC,UAAU;QACjC,uEAAuE;QACvE,0EAA0E;QAC1E,4EAA4E;QAC5E,6CAA6C;QAC7C,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,WAAW,GAA0B,IAAI,CAAC;IAC9C,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE;YACrD,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,yCAAyC,QAAQ,CAAC,OAAO,EAAE;YAClE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;YAC1D,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/C,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,0EAA0E;QAC1E,8BAA8B;QAC9B,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;QACjE,2EAA2E;QAC3E,qEAAqE;QACrE,gBAAgB,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,WAAW,EAAE,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAElE,OAAO;QACL,OAAO;QACP,KAAK;QACL,QAAQ;QACR,QAAQ;QACR,YAAY;QACZ,WAAW;QACX,gBAAgB;QAChB,YAAY;QACZ,gBAAgB,EAAE,KAAK;QACvB,MAAM,EAAE,KAAK;QACb,IAAI;QACJ,YAAY;QACZ,QAAQ;QACR,KAAK;QACL,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,OAAe,EAAE,YAA+B;IACpF,MAAM,OAAO,GACX,YAAY,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,yDAAyD;QAC3D,CAAC,CAAC,qDAAqD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAChF,0DAA0D,CAAC;IAEjE,OAAO;QACL,oDAAoD,OAAO,kBAAkB,OAAO,MAAM;QAC1F,EAAE;QACF,8FAA8F;QAC9F,6CAA6C;QAC7C,EAAE;QACF,gGAAgG;QAChG,gGAAgG;QAChG,4DAA4D;QAC5D,EAAE;QACF,OAAO;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}