redlinegate 0.0.1

package/dist/commands/policy.js

@@ -0,0 +1,25 @@
+import { readFileSync } from 'node:fs';
+import { RedlineError } from "../core/errors.js";
+import { SEVERITY_RANK } from "../core/severity.js";
+import { loadManifest } from "../render/manifest.js";
+import { parseDiff } from "../policy/diff.js";
+import { formatFinding, runChecks } from "../policy/checks.js";
+export function policy(opts) {
+    let diff;
+    try {
+        diff = readFileSync(opts.diffFile, 'utf8');
+    }
+    catch (error) {
+        throw new RedlineError('usage', `cannot read the diff from ${opts.diffFile}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const manifest = loadManifest(opts.root);
+    const classified = manifest.deterministic ?? [];
+    const added = parseDiff(diff);
+    const { findings, evaluated } = runChecks({ added, files: [...new Set(added.map((a) => a.file))], body: '' }, classified);
+    const unimplemented = classified.filter((id) => !evaluated.includes(id));
+    const failOn = opts.failOn ?? 'BLOCKER';
+    const ok = !findings.some((f) => SEVERITY_RANK[f.severity] >= SEVERITY_RANK[failOn]);
+    return { findings, evaluated, unimplemented, ok };
+}
+export { formatFinding };
+//# sourceMappingURL=policy.js.map

package/dist/commands/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../cli/commands/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAiB,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,SAAS,EAAsB,MAAM,qBAAqB,CAAC;AAuBnF,MAAM,UAAU,MAAM,CAAC,IAAmB;IACxC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,6BAA6B,IAAI,CAAC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,SAAS,CACvC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAClE,UAAU,CACX,CAAC;IAEF,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;IACxC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAErF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/commands/remove.js

@@ -0,0 +1,427 @@
+import { existsSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { isRedlineError, RedlineError } from "../core/errors.js";
+import { CONFIG_FILE, readConfig } from "../config/redline-json.js";
+import { loadManifest } from "../render/manifest.js";
+import { resolveProfile } from "../render/profile.js";
+import { stripBlock } from "../render/standards.js";
+import { COMMAND_HOSTS, contentId, loadCommands } from "../render/commands.js";
+import { LOCAL_RULES_FILE, VENDORS, readLocalRules, } from "../render/vendors.js";
+import { observePullRequestTemplates } from "../platforms/pull-request-templates.js";
+import { isPending } from "../platforms/types.js";
+export const REMOVE_BRANCH = 'redline/remove';
+// CONTRACT with cli/render/commands.ts's MANAGED_BY / MANAGED_HEADER: the
+// attribution line Redline writes into the frontmatter of every command file it
+// renders, and the only thing that tells its frontmatter apart from a team's own
+// — nothing about the SHAPE of a lone `description:` key does.
+const MANAGED_HEADER = /^# Managed by Redline\b/m;
+// CONTRACT with MANAGED_BY_REDLINE in cli/platforms/github/install.ts and
+// cli/platforms/azure/install.ts. Those two accept exactly two proofs that the
+// gate machinery file is Redline's and may be overwritten: this ownership line,
+// or the reusable-workflow reference that `readGateMachinery` reads back as the
+// check the file publishes. What init is allowed to overwrite is precisely what
+// remove is allowed to delete, so both signals are honoured here too.
+const MANAGED_BY_REDLINE = /^#[ \t]*Managed by Redline\b/m;
+// The CODEOWNERS header `ensureReviewOwnership` writes, and the only way to
+// tell a seeded file from one this repository already had. That adapter seeds
+// `.github/CODEOWNERS` only when NONE of its candidate paths exists, so a
+// repository with its own file never got one — but the run that seeded it
+// records nothing about having done so, and `already` versus `applied` is not
+// in `.redline.json`. The header is: a file carrying it was written by Redline,
+// and a file that does not is left alone whatever its path.
+const CODEOWNERS_HEADER = /^#[ \t]*Managed by Redline\b/;
+const CODEOWNERS_PATH = '.github/CODEOWNERS';
+const read = (cwd, relPath) => {
+    const abs = join(cwd, relPath);
+    return existsSync(abs) ? readFileSync(abs, 'utf8') : null;
+};
+function readBlock(body, label) {
+    let stripped;
+    try {
+        stripped = stripBlock(body, label);
+    }
+    catch (error) {
+        if (!isRedlineError(error))
+            throw error;
+        return { kind: 'mangled', why: error.message };
+    }
+    if (stripped === body)
+        return { kind: 'none' };
+    if (stripped === null)
+        return { kind: 'whole' };
+    return { kind: 'partial', keep: stripped };
+}
+function renderedSurface(root, cwd, profile) {
+    const manifest = loadManifest(root);
+    // The stacks decide only WHICH per-stack artifacts a render would produce,
+    // and every one of them is recognised below by its vendor's prune rule rather
+    // than by name — so an empty stack list costs nothing here. That matters,
+    // because resolveProfile throws on a profile the org has since dropped, and a
+    // repository whose profile no longer exists is exactly the one that most
+    // needs a way to back out.
+    let stacks = [];
+    try {
+        stacks = resolveProfile(manifest, profile).stacks;
+    }
+    catch (error) {
+        if (!isRedlineError(error))
+            throw error;
+    }
+    const ctx = { manifest, root, profile, stacks, local: readLocalRules(cwd) };
+    const merged = [];
+    const prunes = [];
+    for (const renderer of Object.values(VENDORS)) {
+        const output = renderer(ctx);
+        prunes.push(...output.prune);
+        for (const [path, file] of output.files) {
+            if (file.merge === true)
+                merged.push(path);
+        }
+    }
+    return { merged, prunes };
+}
+// A shared file: strip the block, keep everything else byte for byte, and
+// delete the file only when nothing but the block was ever in it — which is
+// what a `CLAUDE.md` that `redline init` created on a greenfield repository is.
+function planMergedFile(cwd, relPath, actions) {
+    const body = read(cwd, relPath);
+    if (body === null)
+        return;
+    const block = readBlock(body, relPath);
+    if (block.kind === 'mangled') {
+        actions.push({ kind: 'kept', path: relPath, reason: block.why });
+        return;
+    }
+    if (block.kind === 'none') {
+        actions.push({
+            kind: 'kept',
+            path: relPath,
+            reason: 'carries no REDLINE block, so nothing in it is Redline\'s',
+        });
+        return;
+    }
+    if (block.kind === 'whole') {
+        actions.push({
+            kind: 'delete',
+            path: relPath,
+            directory: false,
+            reason: 'nothing but the Redline block was in it',
+        });
+        return;
+    }
+    actions.push({
+        kind: 'unmerge',
+        path: relPath,
+        reason: 'the Redline block only — every byte outside it is kept as it is',
+        keep: block.keep,
+    });
+}
+// Mirrors the deselect path in cli/render/commands.ts, which is where Redline
+// already takes its own half of a command file back out again. Three proofs of
+// ownership, in the order that one is asked: the file is nothing but the block;
+// what sits outside the block carries the attribution line; or the file predates
+// the block entirely and is byte-for-byte what `.redline.json` recorded Redline
+// writing there. A file with a block and none of the three keeps its own bytes
+// and loses only the block.
+function planCommandFiles(cwd, root, known, actions) {
+    const commands = loadCommands(root);
+    for (const renderer of Object.values(COMMAND_HOSTS)) {
+        for (const command of commands) {
+            const { path } = renderer(command);
+            const body = read(cwd, path);
+            if (body === null)
+                continue;
+            const recorded = known[path];
+            const block = readBlock(body, path);
+            if (block.kind === 'mangled') {
+                actions.push({ kind: 'kept', path, reason: block.why });
+                continue;
+            }
+            if (block.kind === 'none') {
+                // No block, so the only thing that can still make it Redline's is the
+                // record of the exact bytes Redline last wrote there. A file onboarded
+                // before the marker block existed is that case, and it is the one
+                // ownership proof a later edit to `commands/<name>.md` cannot move.
+                if (recorded !== undefined && recorded === contentId(body)) {
+                    actions.push({
+                        kind: 'delete',
+                        path,
+                        directory: false,
+                        reason: `still byte-for-byte the content ${CONFIG_FILE} recorded Redline writing here`,
+                    });
+                }
+                continue;
+            }
+            if (block.kind === 'whole') {
+                actions.push({
+                    kind: 'delete',
+                    path,
+                    directory: false,
+                    reason: 'nothing but the Redline block was in it',
+                });
+                continue;
+            }
+            if (MANAGED_HEADER.test(block.keep)) {
+                actions.push({
+                    kind: 'delete',
+                    path,
+                    directory: false,
+                    reason: 'its frontmatter carries the Redline ownership line',
+                });
+                continue;
+            }
+            actions.push({
+                kind: 'unmerge',
+                path,
+                reason: "the Redline block only — this repository's own prompt is kept",
+                keep: block.keep,
+            });
+        }
+    }
+}
+function planGateMachinery(platform, cwd, actions) {
+    const machinery = platform.readGateMachinery(cwd);
+    if (!machinery.present)
+        return;
+    const body = read(cwd, machinery.path);
+    if (body === null)
+        return;
+    // YAML takes no marker block — a second `name:`/`on:` key stops the workflow
+    // running at all — so the file is either Redline's whole or nobody's to
+    // touch, which is the same pair of answers `installGate` allows itself.
+    if (machinery.publishes !== null || MANAGED_BY_REDLINE.test(body)) {
+        actions.push({
+            kind: 'delete',
+            path: machinery.path,
+            directory: false,
+            reason: machinery.publishes !== null
+                ? `it references Redline's reusable gate and publishes ${machinery.publishes}`
+                : 'it carries the Redline ownership line',
+        });
+        return;
+    }
+    actions.push({
+        kind: 'kept',
+        path: machinery.path,
+        reason: 'it carries nothing that attributes it to Redline, so it is this repository\'s own file ' +
+            'sitting at a Redline-shaped path',
+    });
+}
+function planPullRequestTemplates(platform, cwd, actions) {
+    for (const template of observePullRequestTemplates(platform.host, cwd)) {
+        if (template.state === 'mangled') {
+            actions.push({
+                kind: 'kept',
+                path: template.path,
+                reason: 'its REDLINE:BEGIN/END pair is broken, so which part is Redline\'s cannot be told',
+            });
+            continue;
+        }
+        if (template.state !== 'managed') {
+            actions.push({
+                kind: 'kept',
+                path: template.path,
+                reason: 'carries no REDLINE block — it answers the gate on its own and is this repository\'s',
+            });
+            continue;
+        }
+        planMergedFile(cwd, template.path, actions);
+    }
+}
+function planCodeowners(cwd, actions) {
+    const body = read(cwd, CODEOWNERS_PATH);
+    if (body === null)
+        return;
+    if (CODEOWNERS_HEADER.test(body)) {
+        actions.push({
+            kind: 'delete',
+            path: CODEOWNERS_PATH,
+            directory: false,
+            reason: 'seeded by Redline on a repository that had no CODEOWNERS, and still carries its header',
+        });
+        return;
+    }
+    actions.push({
+        kind: 'kept',
+        path: CODEOWNERS_PATH,
+        reason: 'it does not carry the header Redline seeds, so this repository either wrote it or has since ' +
+            'made it its own — review the sensitive-path rules in it by hand',
+    });
+}
+/**
+ * Everything `redline init` put in the working tree, in the order it is acted
+ * on. `.redline.json` is deliberately last: while it is there, `redline verify`
+ * can still describe the repository, and a run that failed halfway through
+ * leaves a repository that still knows what it was rather than one that has
+ * forgotten and cannot be verified or repaired.
+ */
+function plan(platform, opts, profile, commandFiles) {
+    const { cwd, root } = opts;
+    const actions = [];
+    const surface = renderedSurface(root, cwd, profile);
+    // Artifacts Redline owns whole, recognised by the prune rule of the vendor
+    // that renders them. `matches` is the `redline-` prefix test, so a file a
+    // human put in the same directory without the prefix is never a candidate.
+    for (const rule of surface.prunes) {
+        const abs = join(cwd, rule.dir);
+        if (!existsSync(abs))
+            continue;
+        for (const entry of readdirSync(abs)) {
+            if (!rule.matches(entry))
+                continue;
+            actions.push({
+                kind: 'delete',
+                path: join(rule.dir, entry),
+                directory: rule.directories === true,
+                reason: `a Redline-rendered artifact in ${rule.dir}`,
+            });
+        }
+    }
+    for (const relPath of surface.merged)
+        planMergedFile(cwd, relPath, actions);
+    planCommandFiles(cwd, root, commandFiles, actions);
+    planGateMachinery(platform, cwd, actions);
+    planPullRequestTemplates(platform, cwd, actions);
+    planCodeowners(cwd, actions);
+    actions.push({
+        kind: 'delete',
+        path: CONFIG_FILE,
+        directory: false,
+        reason: 'Redline\'s own record of this repository — removed last',
+    });
+    return actions;
+}
+function apply(cwd, action) {
+    if (action.kind === 'kept')
+        return;
+    const abs = join(cwd, action.path);
+    if (action.kind === 'unmerge') {
+        writeFileSync(abs, action.keep);
+        return;
+    }
+    // `recursive` covers the skill folders, which Redline owns as directories.
+    rmSync(abs, { recursive: true, force: true });
+}
+export async function remove(platform, hostFor, opts) {
+    const { cwd } = opts;
+    const dryRun = opts.dryRun === true;
+    // `readConfig` throws RedlineError('failed') when the file is there and
+    // cannot be read, which is the right answer: something is recorded and this
+    // run cannot tell what. A file that is simply absent is a different thing —
+    // the operator asked to remove Redline from a repository it was never on —
+    // and it gets the same `usage` answer, and so the same exit code, that
+    // `redline verify` gives that repository.
+    const config = readConfig(cwd);
+    if (config === null) {
+        throw new RedlineError('usage', `no ${CONFIG_FILE} in ${cwd} — Redline was never installed here, so there is nothing to remove`, 'run redline verify to see what this repository looks like to Redline');
+    }
+    const actions = plan(platform, opts, config.profile, config.commandFiles);
+    const files = actions.filter((action) => action.kind !== 'kept').map((action) => action.path);
+    const notes = [
+        'the security floor stays on: secret scanning, push protection and dependency alerts are the ' +
+            "organisation's minimum, not Redline's own state, and removing Redline is not a reason to " +
+            'lower them. This command has no flag that turns them off',
+        `once ${CONFIG_FILE} is gone, redline verify stops recognising this repository: it reports "not ` +
+            'onboarded" and exits 2 rather than reporting drift',
+    ];
+    if (existsSync(join(cwd, LOCAL_RULES_FILE))) {
+        notes.push(`${LOCAL_RULES_FILE} is this repository's own rules file — Redline never wrote it and does not ` +
+            'remove it; it is left exactly where it is');
+    }
+    const hostPlan = [
+        `withdraw Redline's own state on ${config.host}: the merge policy it applied, the labels it ` +
+            'created, and the repository property it set where the host has them',
+        `pull request on ${REMOVE_BRANCH}`,
+    ];
+    if (dryRun) {
+        // Nothing is written, nothing is read from the host, and no credential is
+        // needed — the same contract `redline init --dry-run` holds, and the reason
+        // someone evaluating whether they can back Redline out can find out before
+        // going to get an admin token.
+        return {
+            host: config.host,
+            dryRun: true,
+            actions,
+            files,
+            outcomes: [],
+            pendingAdmin: [],
+            pullRequest: null,
+            pullRequestError: null,
+            hostPlan,
+            notes,
+        };
+    }
+    const ref = await platform.repoRef(cwd);
+    // Files first, host after, `.redline.json` last of the files — but the config
+    // is only removed once the host withdrawal has had its turn, because it is
+    // what says which host to talk to at all. A run that died between the two
+    // leaves a repository whose record still describes it.
+    for (const action of actions) {
+        if (action.path === CONFIG_FILE)
+            continue;
+        apply(cwd, action);
+    }
+    const withdrawal = await (await hostFor()).withdraw(ref);
+    notes.push(...withdrawal.notes);
+    const outcomes = withdrawal.outcomes;
+    const pendingAdmin = outcomes.filter(isPending).map((outcome) => outcome.capability);
+    const configAction = actions.find((action) => action.path === CONFIG_FILE);
+    if (configAction)
+        apply(cwd, configAction);
+    let pullRequest = null;
+    let pullRequestError = null;
+    try {
+        pullRequest = await platform.openPullRequest(ref, cwd, {
+            branch: REMOVE_BRANCH,
+            title: 'chore(redline): remove Redline from this repository',
+            body: removalBody(pendingAdmin),
+            // No labels. The `redline-sync` label this would carry is one of the
+            // labels this very run deletes, and asking the host to apply a label that
+            // no longer exists fails the pull request over housekeeping.
+            labels: [],
+            files,
+        });
+    }
+    catch (error) {
+        // A dirty index is refused before a branch exists and before anything is
+        // pushed — the caller's input error, not a half-finished removal.
+        if (isRedlineError(error) && error.kind === 'usage')
+            throw error;
+        pullRequestError = error instanceof Error ? error.message : String(error);
+    }
+    if (pullRequest?.outcomes)
+        outcomes.push(...pullRequest.outcomes);
+    return {
+        host: config.host,
+        dryRun: false,
+        actions,
+        files,
+        outcomes,
+        pendingAdmin,
+        pullRequest,
+        pullRequestError,
+        hostPlan,
+        notes,
+    };
+}
+function removalBody(pendingAdmin) {
+    const pending = pendingAdmin.length === 0
+        ? 'Every host setting Redline applied has been withdrawn.'
+        : `A repository administrator still has to remove: ${pendingAdmin.join(', ')}. Until then ` +
+            'some of Redline\'s host state is still in place.';
+    return [
+        'Removes Redline from this repository: the rendered standards, the merge gate machinery, the',
+        'slash-command files and `.redline.json`.',
+        '',
+        'Only content Redline wrote is removed. Files it merely merged into keep every byte outside the',
+        '`<!-- REDLINE:BEGIN -->` block, and anything that could not be attributed to Redline was left',
+        'in place and named in the run output.',
+        '',
+        'The security floor — secret scanning, push protection and dependency alerts — is untouched. It',
+        'is the organisation\'s minimum rather than Redline\'s own state, and removing Redline is not a',
+        'reason to lower it.',
+        '',
+        pending,
+    ].join('\n');
+}
+//# sourceMappingURL=remove.js.map

package/dist/commands/remove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../cli/commands/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,OAAO,EACP,cAAc,GAGf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAUlD,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAgD9C,0EAA0E;AAC1E,gFAAgF;AAChF,iFAAiF;AACjF,+DAA+D;AAC/D,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAElD,0EAA0E;AAC1E,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAE3D,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,8EAA8E;AAC9E,gFAAgF;AAChF,4DAA4D;AAC5D,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AACzD,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,OAAe,EAAiB,EAAE;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC,CAAC;AAeF,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAChD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC;AAcD,SAAS,eAAe,CAAC,IAAY,EAAE,GAAW,EAAE,OAAe;IACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,2EAA2E;IAC3E,8EAA8E;IAC9E,0EAA0E;IAC1E,8EAA8E;IAC9E,yEAAyE;IACzE,2BAA2B;IAC3B,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IAC1C,CAAC;IACD,MAAM,GAAG,GAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,0EAA0E;AAC1E,4EAA4E;AAC5E,gFAAgF;AAChF,SAAS,cAAc,CAAC,GAAW,EAAE,OAAe,EAAE,OAAqB;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO;IAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,0DAA0D;SACnE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,yCAAyC;SAClD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,iEAAiE;QACzE,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,+EAA+E;AAC/E,4BAA4B;AAC5B,SAAS,gBAAgB,CACvB,GAAW,EACX,IAAY,EACZ,KAA6B,EAC7B,OAAqB;IAErB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACpD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,KAAK,IAAI;gBAAE,SAAS;YAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC1B,sEAAsE;gBACtE,uEAAuE;gBACvE,kEAAkE;gBAClE,oEAAoE;gBACpE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3D,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,QAAQ;wBACd,IAAI;wBACJ,SAAS,EAAE,KAAK;wBAChB,MAAM,EAAE,mCAAmC,WAAW,gCAAgC;qBACvF,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,yCAAyC;iBAClD,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,oDAAoD;iBAC7D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,SAAS;gBACf,IAAI;gBACJ,MAAM,EAAE,+DAA+D;gBACvE,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAkB,EAAE,GAAW,EAAE,OAAqB;IAC/E,MAAM,SAAS,GAAG,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO;IAC1B,6EAA6E;IAC7E,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,SAAS,EAAE,KAAK;YAChB,MAAM,EACJ,SAAS,CAAC,SAAS,KAAK,IAAI;gBAC1B,CAAC,CAAC,uDAAuD,SAAS,CAAC,SAAS,EAAE;gBAC9E,CAAC,CAAC,uCAAuC;SAC9C,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,MAAM,EACJ,yFAAyF;YACzF,kCAAkC;KACrC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAkB,EAAE,GAAW,EAAE,OAAqB;IACtF,KAAK,MAAM,QAAQ,IAAI,2BAA2B,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACvE,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,kFAAkF;aAC3F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,qFAAqF;aAC9F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,OAAqB;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO;IAC1B,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,wFAAwF;SACjG,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,eAAe;QACrB,MAAM,EACJ,8FAA8F;YAC9F,iEAAiE;KACpE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,IAAI,CACX,QAAkB,EAClB,IAAmB,EACnB,OAAe,EACf,YAAoC;IAEpC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAEpD,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI;gBACpC,MAAM,EAAE,kCAAkC,IAAI,CAAC,GAAG,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,MAAM;QAAE,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5E,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,iBAAiB,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,wBAAwB,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE7B,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,yDAAyD;KAClE,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,MAAkB;IAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IACD,2EAA2E;IAC3E,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,QAAkB,EAClB,OAAuD,EACvD,IAAmB;IAEnB,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAEpC,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,MAAM,WAAW,OAAO,GAAG,oEAAoE,EAC/F,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE9F,MAAM,KAAK,GAAG;QACZ,8FAA8F;YAC5F,2FAA2F;YAC3F,0DAA0D;QAC5D,QAAQ,WAAW,8EAA8E;YAC/F,oDAAoD;KACvD,CAAC;IACF,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CACR,GAAG,gBAAgB,6EAA6E;YAC9F,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,mCAAmC,MAAM,CAAC,IAAI,+CAA+C;YAC3F,qEAAqE;QACvE,mBAAmB,aAAa,EAAE;KACnC,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,+BAA+B;QAC/B,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,OAAO;YACP,KAAK;YACL,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,IAAI;YACtB,QAAQ;YACR,KAAK;SACN,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAExC,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,uDAAuD;IACvD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QAC1C,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAErF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAC3E,IAAI,YAAY;QAAE,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAE3C,IAAI,WAAW,GAA0B,IAAI,CAAC;IAC9C,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE;YACrD,MAAM,EAAE,aAAa;YACrB,KAAK,EAAE,qDAAqD;YAC5D,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC;YAC/B,qEAAqE;YACrE,0EAA0E;YAC1E,6DAA6D;YAC7D,MAAM,EAAE,EAAE;YACV,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;QACjE,gBAAgB,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,WAAW,EAAE,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAElE,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,KAAK;QACb,OAAO;QACP,KAAK;QACL,QAAQ;QACR,YAAY;QACZ,WAAW;QACX,gBAAgB;QAChB,QAAQ;QACR,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,YAA+B;IAClD,MAAM,OAAO,GACX,YAAY,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,wDAAwD;QAC1D,CAAC,CAAC,mDAAmD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe;YACzF,kDAAkD,CAAC;IAEzD,OAAO;QACL,6FAA6F;QAC7F,0CAA0C;QAC1C,EAAE;QACF,gGAAgG;QAChG,+FAA+F;QAC/F,uCAAuC;QACvC,EAAE;QACF,gGAAgG;QAChG,gGAAgG;QAChG,qBAAqB;QACrB,EAAE;QACF,OAAO;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/commands/review.js

@@ -0,0 +1,72 @@
+import { readFileSync } from 'node:fs';
+import { RedlineError } from "../core/errors.js";
+import { createGit } from "../core/git.js";
+import { readConfig } from "../config/redline-json.js";
+import { loadManifest } from "../render/manifest.js";
+import { loadRuleIds } from "../review/rules.js";
+import { buildPrompt } from "../review/prompt.js";
+import { resolveScope } from "../review/scope.js";
+import { parseReview, renderFinding } from "../review/schema.js";
+function readDiff(opts) {
+    const source = opts.source ?? { kind: 'worktree' };
+    if (source.kind === 'diff-file') {
+        try {
+            return readFileSync(source.path, 'utf8');
+        }
+        catch (error) {
+            throw new RedlineError('usage', `cannot read the diff from ${source.path}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    const git = createGit(opts.cwd);
+    const base = opts.base ?? git.defaultBranch();
+    if (source.kind === 'staged')
+        return git.diffStaged();
+    // Against the merge base itself, not `base...HEAD`. The three-dot form diffs
+    // two commits, so it cannot see work that is not committed yet — which made
+    // the default mode review nothing at all in the case the command exists for:
+    // "check this before I commit it". Diffing the working tree against the merge
+    // base keeps the property three dots was chosen for (never review commits that
+    // landed on the base branch since this one started) and includes uncommitted
+    // and staged work as well.
+    return git.diff(git.mergeBase(base));
+}
+export async function review(engine, opts) {
+    const diff = readDiff(opts);
+    if (diff.trim() === '') {
+        throw new RedlineError('usage', 'there is nothing to review — the diff is empty', 'stage something, or pass --base to compare against a different branch');
+    }
+    const manifest = loadManifest(opts.root);
+    const config = readConfig(opts.cwd);
+    const profile = opts.profile ?? config?.profile;
+    if (!profile) {
+        throw new RedlineError('usage', 'no profile: this repository has no .redline.json and none was given', 'run: npx redlinegate init — or pass --profile <name>');
+    }
+    const files = [...new Set([...diff.matchAll(/^\+\+\+ b\/(.+)$/gm)].map((m) => m[1]))].filter((f) => f !== '/dev/null');
+    const scope = resolveScope(manifest, profile, files);
+    const prompt = buildPrompt({ root: opts.root, manifest, scope, diff });
+    const response = await engine.review({ prompt });
+    if (response.kind === 'prompt') {
+        return {
+            scope,
+            prompt: response.prompt,
+            note: response.note,
+            findings: [],
+            rejected: [],
+            rendered: [],
+            excludedFromTelemetry: true,
+        };
+    }
+    const known = loadRuleIds(opts.root, manifest, scope.stacks);
+    const { findings, rejected } = parseReview(response.raw, known);
+    return {
+        scope,
+        prompt: null,
+        note: null,
+        findings,
+        rejected,
+        // Rendered by code. The comment contract is never free-typed by a model.
+        rendered: findings.map(renderFinding),
+        excludedFromTelemetry: true,
+    };
+}
+//# sourceMappingURL=review.js.map

package/dist/commands/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../cli/commands/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAc,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AA+BrF,SAAS,QAAQ,CAAC,IAAmB;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,6BAA6B,MAAM,CAAC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC;IAEtD,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,2BAA2B;IAC3B,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAAoB,EAAE,IAAmB;IACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,gDAAgD,EAChD,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,OAAO,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,qEAAqE,EACrE,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAC3F,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CACzB,CAAC;IACF,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,qBAAqB,EAAE,IAAI;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEhE,OAAO;QACL,KAAK;QACL,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,IAAI;QACV,QAAQ;QACR,QAAQ;QACR,yEAAyE;QACzE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;QACrC,qBAAqB,EAAE,IAAI;KAC5B,CAAC;AACJ,CAAC"}

package/dist/commands/sync.js

@@ -0,0 +1,42 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { RedlineError } from "../core/errors.js";
+import { parseRegistry } from "../registry/serialize.js";
+import { runSync } from "../sync/run.js";
+export const REGISTRY_FILE = 'registry.json';
+export function readRegistry(cwd, path = REGISTRY_FILE) {
+    let raw;
+    try {
+        // resolve, not join: an absolute override has to stay absolute, and join
+        // would silently nest it under cwd and report the register as missing.
+        raw = readFileSync(resolve(cwd, path), 'utf8');
+    }
+    catch {
+        throw new RedlineError('usage', `no ${path} in ${cwd} — the register of onboarded repositories has not been derived yet`, 'run the Redline Registry workflow, or: node scripts/build-registry.mjs');
+    }
+    return parseRegistry(raw);
+}
+export function standardsVersion(root) {
+    const manifest = JSON.parse(readFileSync(resolve(root, 'standards/manifest.json'), 'utf8'));
+    if (typeof manifest.version !== 'string') {
+        throw new RedlineError('failed', 'standards/manifest.json has no string "version"');
+    }
+    return manifest.version;
+}
+// Distribute the current standards to every registered repository that is behind.
+//
+// It opens pull requests and never merges them, and it never pushes to a default
+// branch. A repository that ignores its sync pull request drifts, and the estate
+// dashboard's coverage figure is what makes that visible — sync's job is to make
+// the change available, not to impose it.
+export async function sync(host, opts) {
+    const registry = readRegistry(opts.cwd, opts.registryPath);
+    return runSync(host, registry, {
+        root: opts.root,
+        standardsVersion: standardsVersion(opts.root),
+        ...(opts.repo ? { repo: opts.repo } : {}),
+        ...(opts.force ? { force: true } : {}),
+        ...(opts.dryRun ? { dryRun: true } : {}),
+    });
+}
+//# sourceMappingURL=sync.js.map

package/dist/commands/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../cli/commands/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAkC,MAAM,gBAAgB,CAAC;AAkBzE,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAE7C,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAI,GAAG,aAAa;IAC5D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,yEAAyE;QACzE,uEAAuE;QACvE,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,MAAM,IAAI,OAAO,GAAG,oEAAoE,EACxF,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,yBAAyB,CAAC,EAAE,MAAM,CAAC,CAEzF,CAAC;IACF,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC;AAED,kFAAkF;AAClF,EAAE;AACF,iFAAiF;AACjF,iFAAiF;AACjF,iFAAiF;AACjF,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc,EAAE,IAAiB;IAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;AACL,CAAC"}