@adammcarter/use-cases 0.1.0

package/packages/core/dist/markers/freshness.js

@@ -0,0 +1,605 @@
+// Freshness state machine (spec sections 6, 7, 10.2; Phase 6).
+//
+// `deriveFreshness` is the pure integration point that ties Phases 1-5 together:
+// it consumes loaded rows, the materialized registry (P3), the current scan
+// (P2/P4), and the already-validated trusted proof events (P5), and derives one
+// status per row IN THE SPEC'S ORDER (7.1 INVALID -> 7.2 UNBOUND -> 7.3 SUSPECT
+// removed -> 7.4 UNPROVEN -> 7.5 FRESH -> 7.6 SUSPECT stale), then applies the
+// policy gate (10.2). The emitted object matches spec section 6 and validates
+// against the Phase 1 `ucase-freshness-status-v1` schema.
+//
+// Pure core: no Date.now (the timestamp is injected), no filesystem, no git. All
+// inputs are hand-buildable, so the whole machine is unit-testable in isolation.
+import { computeRowHash } from "./rowHash.js";
+import { computeApprovalPolicyHash, computeVerificationPolicyHash } from "./policyHash.js";
+import { computeBindingSetHash } from "./bindingSetHash.js";
+import { reconcileRegistryWithScan } from "./reconcile.js";
+import { splitSlug } from "./markerLine.js";
+import { SPAN_CANON_ID, STATUS_SCHEMA_ID } from "./constants.js";
+import { PRODUCT_NAME, UCM_VERSION } from "../version.js";
+import { PROOF_PASS_RESULT } from "./evidenceLedger.js";
+const DEFAULT_TOOL = { name: PRODUCT_NAME, version: UCM_VERSION };
+function rowIdOfSlug(slug) {
+    if (slug === undefined) {
+        return undefined;
+    }
+    const parts = splitSlug(slug);
+    return parts ? parts.row_id : slug;
+}
+function proofRef(event) {
+    return {
+        event_id: event.event_id,
+        created_at: event.created_at,
+        commit: event.producer.commit
+    };
+}
+// Newest-first by created_at (ISO timestamps sort lexically), stable otherwise.
+function byNewest(events) {
+    return [...events].sort((left, right) => {
+        if (left.created_at < right.created_at) {
+            return 1;
+        }
+        if (left.created_at > right.created_at) {
+            return -1;
+        }
+        return 0;
+    });
+}
+function requiredForRelease(approvalPolicy) {
+    return (typeof approvalPolicy === "object" &&
+        approvalPolicy !== null &&
+        approvalPolicy.required_for_release === true);
+}
+function trustedProducer(approvalPolicy) {
+    if (typeof approvalPolicy !== "object" || approvalPolicy === null) {
+        return undefined;
+    }
+    const value = approvalPolicy.trusted_producer;
+    return typeof value === "string" ? value : undefined;
+}
+// Spec 7.5: "current approval policy accepts proof.producer and proof.verification".
+function approvalAcceptsProof(approvalPolicy, proof) {
+    if (proof.verification.result !== PROOF_PASS_RESULT) {
+        return false;
+    }
+    const expectedProducer = trustedProducer(approvalPolicy);
+    if (expectedProducer !== undefined && proof.producer.kind !== expectedProducer) {
+        return false;
+    }
+    return true;
+}
+function bindingToOut(binding) {
+    return {
+        binding_slug: binding.binding_slug,
+        file_path: binding.file_path,
+        extent_kind: binding.extent_kind,
+        recognizer_id: binding.recognizer_id,
+        span_canon_id: binding.span_canon_id,
+        span_sha256: binding.span.sha256,
+        span_start_line: binding.span.start_line,
+        span_end_line: binding.span.end_line
+    };
+}
+function bindingToSetMember(binding) {
+    return {
+        binding_slug: binding.binding_slug,
+        row_id: binding.row_id,
+        file_path: binding.file_path,
+        extent_kind: binding.extent_kind,
+        recognizer_id: binding.recognizer_id,
+        span_canon_id: binding.span_canon_id,
+        span_sha256: binding.span.sha256
+    };
+}
+// Spec 7.6: derive the stale-proof reason codes against the LATEST proof event.
+function deriveStaleReasons(latest, hRow, hVerify, hApprove, hBind, current, 
+// The freshly recomputed verification context hash, or undefined when the
+// caller did not supply context hashes (then this drift is not checked).
+currentContextHash) {
+    const reasons = [];
+    if (!latest) {
+        reasons.push({ code: "NO_MATCHING_TRUSTED_PROOF" });
+        return reasons;
+    }
+    if (currentContextHash !== undefined && latest.verification.context_hash !== currentContextHash) {
+        reasons.push({
+            code: "VERIFICATION_CONTEXT_CHANGED",
+            message: `verification context changed since proof (${latest.verification.context_hash} -> ${currentContextHash}); the verifier or its declared inputs were modified`
+        });
+    }
+    if (latest.row.row_hash !== hRow) {
+        reasons.push({
+            code: "ROW_HASH_CHANGED",
+            message: `row hash changed since proof (${latest.row.row_hash} -> ${hRow})`
+        });
+    }
+    if (latest.row.verification_policy_hash !== hVerify) {
+        reasons.push({
+            code: "VERIFICATION_POLICY_CHANGED",
+            message: `verification policy changed since proof (${latest.row.verification_policy_hash} -> ${hVerify})`
+        });
+    }
+    if (latest.row.approval_policy_hash !== hApprove) {
+        reasons.push({
+            code: "APPROVAL_POLICY_CHANGED",
+            message: `approval policy changed since proof (${latest.row.approval_policy_hash} -> ${hApprove})`
+        });
+    }
+    const proofItems = new Map(latest.bindings.items.map((item) => [item.binding_slug, item]));
+    const currentBySlug = new Map(current.map((binding) => [binding.binding_slug, binding]));
+    let bindingSpecificReason = false;
+    // Per-slug comparisons for slugs present in both proof and current scan.
+    for (const binding of current) {
+        const item = proofItems.get(binding.binding_slug);
+        if (!item) {
+            reasons.push({ code: "BINDING_ADDED", binding_slug: binding.binding_slug });
+            bindingSpecificReason = true;
+            continue;
+        }
+        if (item.file_path !== binding.file_path) {
+            reasons.push({
+                code: "BINDING_PATH_CHANGED",
+                binding_slug: binding.binding_slug,
+                expected_file_path: item.file_path,
+                actual_file_path: binding.file_path
+            });
+            bindingSpecificReason = true;
+        }
+        if (item.span_sha256 !== binding.span.sha256) {
+            reasons.push({
+                code: "CODE_SPAN_CHANGED",
+                binding_slug: binding.binding_slug,
+                expected_span_sha256: item.span_sha256,
+                actual_span_sha256: binding.span.sha256
+            });
+            bindingSpecificReason = true;
+        }
+        if (item.span_canon_id !== binding.span_canon_id) {
+            reasons.push({
+                code: "CANON_CHANGED",
+                binding_slug: binding.binding_slug,
+                message: `span canon changed (${item.span_canon_id} -> ${binding.span_canon_id})`
+            });
+            bindingSpecificReason = true;
+        }
+    }
+    // Slugs in the proof but no longer present in the current scan.
+    for (const item of latest.bindings.items) {
+        if (!currentBySlug.has(item.binding_slug)) {
+            reasons.push({ code: "BINDING_REMOVED", binding_slug: item.binding_slug });
+            bindingSpecificReason = true;
+        }
+    }
+    // Whole-set hash drift with no more specific binding reason: report the
+    // generic BINDING_SET_CHANGED so the drift is never silent.
+    if (!bindingSpecificReason && latest.bindings.binding_set_hash !== hBind) {
+        reasons.push({
+            code: "BINDING_SET_CHANGED",
+            message: `binding set hash changed since proof (${latest.bindings.binding_set_hash} -> ${hBind})`
+        });
+    }
+    // No drift explained the staleness (e.g. proof rejected by approval policy or
+    // an unsupported canon): fall back to the catch-all reason.
+    if (reasons.length === 0) {
+        reasons.push({ code: "NO_MATCHING_TRUSTED_PROOF" });
+    }
+    return reasons;
+}
+// Is any authority requirement actually configured? An omitted, empty, or
+// all-falsy `release_gate` means "no requirement" — behaviour stays as today.
+function authorityGateActive(policy) {
+    if (!policy) {
+        return false;
+    }
+    return policy.required_authority === "ci" || policy.require_protected_ref === true;
+}
+// Does the matching proof's authority satisfy the configured release-gate
+// requirement? CI-neutral: only the authority shape is inspected (not the
+// provider). An absent authority block satisfies nothing once a requirement is
+// active. Returns true when no requirement is configured.
+function authoritySatisfies(policy, authority) {
+    if (!authorityGateActive(policy)) {
+        return true;
+    }
+    if (policy?.required_authority === "ci" && authority?.type !== "ci") {
+        return false;
+    }
+    if (policy?.require_protected_ref === true && authority?.protected_ref !== true) {
+        return false;
+    }
+    return true;
+}
+// Human-readable explanation for an AUTHORITY_INSUFFICIENT block.
+function authorityReason(policy, authority) {
+    const wants = [];
+    if (policy?.required_authority === "ci") {
+        wants.push('authority.type === "ci"');
+    }
+    if (policy?.require_protected_ref === true) {
+        wants.push("authority.protected_ref === true");
+    }
+    const got = authority
+        ? `type=${authority.type}, protected_ref=${String(authority.protected_ref ?? null)}`
+        : "no authority block on the matching proof";
+    return `release gate requires ${wants.join(" and ")}, but the matching proof has ${got}`;
+}
+function evaluatePolicyBlock(mode, status, required, rowId, custom, 
+// True when an active release-gate authority requirement is NOT met by the
+// matching FRESH proof for a required row. Only meaningful in release mode.
+authorityInsufficient) {
+    const isInvalid = status === "INVALID";
+    if (mode === "feature") {
+        return isInvalid; // feature blocks only INVALID (spec 10.2 / 8.2)
+    }
+    if (mode === "release") {
+        // release blocks INVALID and any required row that is not FRESH (spec 10.2).
+        // ADDITIVE: a required row that IS FRESH is also blocked when its matching
+        // proof's provenance authority falls short of the configured requirement.
+        return (isInvalid ||
+            (required && status !== "FRESH") ||
+            (required && status === "FRESH" && authorityInsufficient));
+    }
+    // custom: defer to the configured predicate; default to feature behaviour.
+    if (custom) {
+        return custom({ row_id: rowId, status, required_for_release: required, is_invalid: isInvalid });
+    }
+    return isInvalid;
+}
+// Keyless local tier for ONE bound row. `results` are the row's unsigned
+// verification results; `currentContextHash`/`hBind` are the row's freshly
+// recomputed values. A passing result whose context AND binding set both still
+// match => VERIFIED_LOCAL; a result that exists but no longer matches (or was a
+// failure) => STALE_LOCAL; no result => UNVERIFIED_LOCAL. Pure + side-effect free.
+function deriveLocalStatus(results, currentContextHash, hBind) {
+    if (results.length === 0) {
+        return { local_status: "UNVERIFIED_LOCAL", local_reason: null };
+    }
+    const passing = results.some((result) => result.passed &&
+        result.binding_set_hash === hBind &&
+        (currentContextHash === undefined || result.context_hash === currentContextHash));
+    if (passing) {
+        return { local_status: "VERIFIED_LOCAL", local_reason: null };
+    }
+    // A result exists but none currently matches: explain the drift (analogue of
+    // SUSPECT). Prefer the most specific reason from the newest-considered result.
+    const anyFailure = results.some((result) => !result.passed);
+    const contextDrifted = results.some((result) => result.passed &&
+        currentContextHash !== undefined &&
+        result.context_hash !== currentContextHash);
+    const bindingDrifted = results.some((result) => result.passed && result.binding_set_hash !== hBind);
+    let reason;
+    if (contextDrifted) {
+        reason =
+            "the verifier or its declared inputs changed since the last local run; re-run `uc verify`";
+    }
+    else if (bindingDrifted) {
+        reason = "the bound code span changed since the last local run; re-run `uc verify`";
+    }
+    else if (anyFailure) {
+        reason = "the last local verification did not pass; fix the row and re-run `uc verify`";
+    }
+    else {
+        reason = "the last local verification no longer matches the current row; re-run `uc verify`";
+    }
+    return { local_status: "STALE_LOCAL", local_reason: reason };
+}
+export function deriveFreshness(input) {
+    const reconciliation = reconcileRegistryWithScan(input.registry, input.scan);
+    const reconByRow = new Map();
+    for (const recon of reconciliation.rows) {
+        reconByRow.set(recon.row_id, recon);
+    }
+    // Index the scan by row id (all current marker records for the row).
+    const bindingsByRow = new Map();
+    for (const binding of input.scan.bindings) {
+        const list = bindingsByRow.get(binding.row_id) ?? [];
+        list.push(binding);
+        bindingsByRow.set(binding.row_id, list);
+    }
+    // Per-row binding-integrity errors derived from the scan (malformed marker,
+    // forbidden payload, duplicate slug, end/nesting/mismatch, unsupported
+    // inference, ...). Errors with no resolvable slug become global.
+    const scanErrorsByRow = new Map();
+    const globalIntegrity = [
+        ...(input.global_integrity_errors ?? []).map((raw) => ({ code: "LEDGER_INTEGRITY_ERROR", ...raw }))
+    ];
+    for (const error of input.scan.errors) {
+        const rowId = rowIdOfSlug(error.slug);
+        if (rowId === undefined) {
+            globalIntegrity.push({
+                code: error.code,
+                file_path: error.file_path,
+                line: error.line,
+                message: error.message
+            });
+            continue;
+        }
+        const list = scanErrorsByRow.get(rowId) ?? [];
+        list.push(error);
+        scanErrorsByRow.set(rowId, list);
+    }
+    // Unregistered current markers -> INVALID (spec 7.1), keyed by row.
+    const unregisteredByRow = new Map();
+    for (const detection of reconciliation.unregistered) {
+        const list = unregisteredByRow.get(detection.row_id) ?? [];
+        list.push(detection);
+        unregisteredByRow.set(detection.row_id, list);
+    }
+    // Trusted passing proof events grouped by row (newest first).
+    const evidenceByRow = new Map();
+    for (const event of input.evidence) {
+        const list = evidenceByRow.get(event.row.row_id) ?? [];
+        list.push(event);
+        evidenceByRow.set(event.row.row_id, list);
+    }
+    for (const [rowId, events] of evidenceByRow) {
+        evidenceByRow.set(rowId, byNewest(events));
+    }
+    // Unsigned local verification results grouped by row (keyless tier). Only
+    // consulted when the caller supplied them; omission leaves local_status absent.
+    const localResultsProvided = input.local_results !== undefined;
+    const localResultsByRow = new Map();
+    for (const result of input.local_results ?? []) {
+        const list = localResultsByRow.get(result.row_id) ?? [];
+        list.push(result);
+        localResultsByRow.set(result.row_id, list);
+    }
+    // Index the loaded rows; the row set is the union of loaded rows and any row
+    // referenced by the registry/scan/errors, so nothing silently vanishes.
+    const rowById = new Map();
+    for (const row of input.rows) {
+        rowById.set(row.row_id, row);
+    }
+    const rowIds = new Set();
+    for (const row of input.rows) {
+        rowIds.add(row.row_id);
+    }
+    for (const recon of reconciliation.rows) {
+        rowIds.add(recon.row_id);
+    }
+    for (const rowId of scanErrorsByRow.keys()) {
+        rowIds.add(rowId);
+    }
+    const outRows = [];
+    const allIntegrity = [...globalIntegrity];
+    const summary = {
+        fresh: 0,
+        suspect: 0,
+        unproven: 0,
+        unbound: 0,
+        invalid: 0,
+        policy_blocked: 0
+    };
+    for (const rowId of [...rowIds].sort()) {
+        const inputRow = rowById.get(rowId);
+        const recon = reconByRow.get(rowId);
+        const knownSlugs = recon?.registered_binding_slugs ?? [];
+        const currentSlugs = recon?.current_binding_slugs ?? [];
+        const missingSlugs = recon?.missing_registered_binding_slugs ?? [];
+        const unregisteredSlugs = recon?.unregistered_current_binding_slugs ?? [];
+        // C(row): current, valid, REGISTERED binding records for the row.
+        const knownSet = new Set(knownSlugs);
+        const allCurrent = bindingsByRow.get(rowId) ?? [];
+        const currentRegistered = allCurrent.filter((binding) => knownSet.has(binding.binding_slug));
+        // Assemble this row's integrity errors (spec 7.1).
+        const rowIntegrity = [];
+        for (const error of scanErrorsByRow.get(rowId) ?? []) {
+            rowIntegrity.push({
+                code: error.code,
+                row_id: rowId,
+                binding_slug: error.slug,
+                file_path: error.file_path,
+                line: error.line,
+                message: error.message
+            });
+        }
+        for (const detection of unregisteredByRow.get(rowId) ?? []) {
+            rowIntegrity.push({
+                code: "UNREGISTERED_BINDING",
+                row_id: rowId,
+                binding_slug: detection.binding_slug,
+                file_path: detection.file_path,
+                line: detection.start_line,
+                message: `current marker ${detection.binding_slug} is not registered in the binding registry`
+            });
+        }
+        if (!inputRow) {
+            // A marker/registry references a row that does not exist in the loaded
+            // rows (spec 7.1 "marker row id does not exist" / "registry row id does
+            // not exist").
+            rowIntegrity.push({
+                code: "ROW_NOT_FOUND",
+                row_id: rowId,
+                message: `row ${rowId} is bound or registered but is not a known use-case row`
+            });
+        }
+        const hashes = inputRow
+            ? {
+                row_hash: computeRowHash(inputRow),
+                verification_policy_hash: computeVerificationPolicyHash(inputRow.verification_policy),
+                approval_policy_hash: computeApprovalPolicyHash(inputRow.approval_policy)
+            }
+            : undefined;
+        const hBind = computeBindingSetHash(rowId, currentRegistered.map(bindingToSetMember));
+        const proofs = evidenceByRow.get(rowId) ?? [];
+        const latestProof = proofs[0];
+        // -- Status derivation IN SPEC ORDER (7.1 -> 7.6) --
+        let status;
+        let reasons = [];
+        let matching;
+        if (rowIntegrity.length > 0) {
+            // 7.1 INVALID
+            status = "INVALID";
+            reasons = rowIntegrity.map((error) => ({
+                code: error.code,
+                ...(error.binding_slug ? { binding_slug: error.binding_slug } : {}),
+                ...(error.message ? { message: error.message } : {})
+            }));
+        }
+        else if (knownSlugs.length === 0 && currentRegistered.length === 0) {
+            // 7.2 UNBOUND
+            status = "UNBOUND";
+        }
+        else if (missingSlugs.length > 0) {
+            // 7.3 SUSPECT for removed bindings
+            status = "SUSPECT";
+            for (const slug of missingSlugs) {
+                reasons.push({ code: "BINDING_REMOVED", binding_slug: slug });
+            }
+            if (currentRegistered.length === 0) {
+                reasons.push({ code: "ALL_BINDINGS_REMOVED" });
+            }
+        }
+        else if (currentRegistered.length > 0 && proofs.length === 0) {
+            // 7.4 UNPROVEN
+            status = "UNPROVEN";
+        }
+        else {
+            // 7.5 FRESH if a trusted proof matches the current row + binding set. When
+            // a recomputed verification context hash is supplied for the row, the proof
+            // must ALSO have been minted against that same context (same verifier +
+            // acceptance-test contents + lockfile); otherwise the proof is stale.
+            const approval = inputRow?.approval_policy;
+            const contextHashes = input.current_context_hashes;
+            const currentContextHash = contextHashes?.get(rowId);
+            const matches = proofs.filter((proof) => {
+                if (!hashes) {
+                    return false;
+                }
+                const itemsSupported = proof.bindings.items.every((item) => item.span_canon_id === SPAN_CANON_ID);
+                const contextOk = contextHashes === undefined ||
+                    proof.verification.context_hash === currentContextHash;
+                return (proof.row.row_hash === hashes.row_hash &&
+                    proof.row.verification_policy_hash === hashes.verification_policy_hash &&
+                    proof.row.approval_policy_hash === hashes.approval_policy_hash &&
+                    proof.bindings.binding_set_hash === hBind &&
+                    itemsSupported &&
+                    contextOk &&
+                    approvalAcceptsProof(approval, proof));
+            });
+            if (matches.length > 0) {
+                status = "FRESH";
+                matching = byNewest(matches)[0];
+            }
+            else {
+                // 7.6 SUSPECT for stale proof.
+                status = "SUSPECT";
+                reasons = deriveStaleReasons(latestProof, hashes?.row_hash ?? "", hashes?.verification_policy_hash ?? "", hashes?.approval_policy_hash ?? "", hBind, currentRegistered, contextHashes === undefined ? undefined : currentContextHash ?? "");
+            }
+        }
+        const required = requiredForRelease(inputRow?.approval_policy);
+        // Release-gate authority requirement: only meaningful for a required, FRESH
+        // row whose matching proof we have in hand. An active requirement that the
+        // proof's authority does not meet flips the (otherwise unblocked) FRESH row
+        // to POLICY-BLOCKED and surfaces an AUTHORITY_INSUFFICIENT reason.
+        const authorityActive = input.policy_mode === "release" &&
+            required &&
+            status === "FRESH" &&
+            authorityGateActive(input.release_gate);
+        const authorityInsufficient = authorityActive && !authoritySatisfies(input.release_gate, matching?.authority);
+        if (authorityInsufficient) {
+            reasons.push({
+                code: "AUTHORITY_INSUFFICIENT",
+                message: authorityReason(input.release_gate, matching?.authority)
+            });
+        }
+        const policyBlock = evaluatePolicyBlock(input.policy_mode, status, required, rowId, input.custom_policy, authorityInsufficient);
+        let requiredAction = null;
+        if (status === "SUSPECT" || status === "UNPROVEN") {
+            requiredAction = `uc prove --row ${rowId}`;
+        }
+        else if (status === "INVALID") {
+            requiredAction = "uc scan (resolve binding integrity errors)";
+        }
+        // Keyless local tier (0.1.0). Only emitted when the caller supplied
+        // `local_results`. Bound rows (a registered current binding, not INVALID/
+        // UNBOUND) get VERIFIED_LOCAL/STALE_LOCAL/UNVERIFIED_LOCAL; everything else
+        // reports null. Never influences the signed `status` above.
+        let localStatus;
+        let localReason;
+        if (localResultsProvided) {
+            const bound = status !== "INVALID" && status !== "UNBOUND" && currentRegistered.length > 0;
+            if (bound && status === "FRESH") {
+                // FRESH precedence: a trusted signed proof is a strictly stronger
+                // guarantee than an unsigned local run, so it always satisfies the
+                // keyless daily light — even when the throwaway verify-results ledger
+                // is absent or stale locally (e.g. the proof was minted in CI and the
+                // ledger, which `verify --out` overwrites, was never written here).
+                // Keeps `local_status` consistent with `status` (plan: FRESH ⇒
+                // VERIFIED_LOCAL) instead of showing a false non-green daily light.
+                localStatus = "VERIFIED_LOCAL";
+                localReason = "backed by trusted signed proof";
+            }
+            else if (bound) {
+                const derived = deriveLocalStatus(localResultsByRow.get(rowId) ?? [], input.current_context_hashes?.get(rowId), hBind);
+                localStatus = derived.local_status;
+                localReason = derived.local_reason;
+            }
+            else {
+                localStatus = null;
+                localReason = null;
+            }
+        }
+        const rowOut = {
+            row_id: rowId,
+            ...(hashes ?? {}),
+            status,
+            policy_block: policyBlock,
+            reasons,
+            known_binding_slugs: knownSlugs,
+            current_binding_slugs: currentSlugs,
+            missing_registered_binding_slugs: missingSlugs,
+            unregistered_current_binding_slugs: unregisteredSlugs,
+            current_bindings: currentRegistered.map(bindingToOut),
+            matching_proof_event: matching ? proofRef(matching) : null,
+            latest_trusted_proof_event: latestProof ? proofRef(latestProof) : null,
+            required_action: requiredAction,
+            required_for_release: required
+        };
+        // Emit the keyless local tier only when the caller opted in via local_results.
+        if (localStatus !== undefined) {
+            rowOut.local_status = localStatus;
+            rowOut.local_reason = localReason ?? null;
+        }
+        // Only emit a binding-set hash when the row has registered current bindings.
+        if (currentRegistered.length > 0) {
+            rowOut.current_binding_set_hash = hBind;
+        }
+        outRows.push(rowOut);
+        allIntegrity.push(...rowIntegrity);
+        switch (status) {
+            case "FRESH":
+                summary.fresh += 1;
+                break;
+            case "SUSPECT":
+                summary.suspect += 1;
+                break;
+            case "UNPROVEN":
+                summary.unproven += 1;
+                break;
+            case "UNBOUND":
+                summary.unbound += 1;
+                break;
+            case "INVALID":
+                summary.invalid += 1;
+                break;
+        }
+        if (policyBlock) {
+            summary.policy_blocked += 1;
+        }
+    }
+    // guard_ok is false iff any INVALID row or any global integrity error exists.
+    const guardOk = summary.invalid === 0 && globalIntegrity.length === 0;
+    return {
+        schema: STATUS_SCHEMA_ID,
+        generated_at: input.generated_at,
+        tool: input.tool ?? DEFAULT_TOOL,
+        product_root: input.product_root ?? ".",
+        policy_mode: input.policy_mode,
+        guard_ok: guardOk,
+        summary,
+        integrity_errors: allIntegrity,
+        rows: outRows
+    };
+}
+//# sourceMappingURL=freshness.js.map

package/packages/core/dist/markers/freshness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"freshness.js","sourceRoot":"","sources":["../../src/markers/freshness.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,iFAAiF;AACjF,4EAA4E;AAC5E,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,iFAAiF;AACjF,iFAAiF;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAA0B,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAmB,MAAM,qBAAqB,CAAC;AAoMzE,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAElE,SAAS,WAAW,CAAC,IAAwB;IAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;KAC9B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ,CAAC,MAAoB;IACpC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACtC,IAAI,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,cAAuB;IACjD,OAAO,CACL,OAAO,cAAc,KAAK,QAAQ;QAClC,cAAc,KAAK,IAAI;QACtB,cAA0C,CAAC,oBAAoB,KAAK,IAAI,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,cAAuB;IAC9C,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAClE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAI,cAA0C,CAAC,gBAAgB,CAAC;IAC3E,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,qFAAqF;AACrF,SAAS,oBAAoB,CAAC,cAAuB,EAAE,KAAiB;IACtE,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,gBAAgB,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,OAA6B;IACjD,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;QAChC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;QACxC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA6B;IACvD,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,kBAAkB,CACzB,MAA8B,EAC9B,IAAY,EACZ,OAAe,EACf,QAAgB,EAChB,KAAa,EACb,OAA+B;AAC/B,0EAA0E;AAC1E,yEAAyE;AACzE,kBAA2B;IAE3B,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,kBAAkB,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC,YAAY,KAAK,kBAAkB,EAAE,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,6CAA6C,MAAM,CAAC,YAAY,CAAC,YAAY,OAAO,kBAAkB,sDAAsD;SACtK,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,iCAAiC,MAAM,CAAC,GAAG,CAAC,QAAQ,OAAO,IAAI,GAAG;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,wBAAwB,KAAK,OAAO,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,4CAA4C,MAAM,CAAC,GAAG,CAAC,wBAAwB,OAAO,OAAO,GAAG;SAC1G,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,wCAAwC,MAAM,CAAC,GAAG,CAAC,oBAAoB,OAAO,QAAQ,GAAG;SACnG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAElC,yEAAyE;IACzE,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;YAC5E,qBAAqB,GAAG,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,sBAAsB;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,kBAAkB,EAAE,IAAI,CAAC,SAAS;gBAClC,gBAAgB,EAAE,OAAO,CAAC,SAAS;aACpC,CAAC,CAAC;YACH,qBAAqB,GAAG,IAAI,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,oBAAoB,EAAE,IAAI,CAAC,WAAW;gBACtC,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;aACxC,CAAC,CAAC;YACH,qBAAqB,GAAG,IAAI,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,eAAe;gBACrB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,OAAO,EAAE,uBAAuB,IAAI,CAAC,aAAa,OAAO,OAAO,CAAC,aAAa,GAAG;aAClF,CAAC,CAAC;YACH,qBAAqB,GAAG,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAC3E,qBAAqB,GAAG,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,4DAA4D;IAC5D,IAAI,CAAC,qBAAqB,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,yCAAyC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,OAAO,KAAK,GAAG;SAClG,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,4DAA4D;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,8EAA8E;AAC9E,SAAS,mBAAmB,CAAC,MAAqC;IAChE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,kBAAkB,KAAK,IAAI,IAAI,MAAM,CAAC,qBAAqB,KAAK,IAAI,CAAC;AACrF,CAAC;AAED,0EAA0E;AAC1E,0EAA0E;AAC1E,+EAA+E;AAC/E,0DAA0D;AAC1D,SAAS,kBAAkB,CACzB,MAAqC,EACrC,SAAkC;IAElC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,EAAE,kBAAkB,KAAK,IAAI,IAAI,SAAS,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,EAAE,qBAAqB,KAAK,IAAI,IAAI,SAAS,EAAE,aAAa,KAAK,IAAI,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kEAAkE;AAClE,SAAS,eAAe,CACtB,MAAqC,EACrC,SAAkC;IAElC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,EAAE,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,EAAE,qBAAqB,KAAK,IAAI,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,GAAG,GAAG,SAAS;QACnB,CAAC,CAAC,QAAQ,SAAS,CAAC,IAAI,mBAAmB,MAAM,CAAC,SAAS,CAAC,aAAa,IAAI,IAAI,CAAC,EAAE;QACpF,CAAC,CAAC,0CAA0C,CAAC;IAC/C,OAAO,yBAAyB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,GAAG,EAAE,CAAC;AAC3F,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAgB,EAChB,MAAiB,EACjB,QAAiB,EACjB,KAAa,EACb,MAAyC;AACzC,2EAA2E;AAC3E,4EAA4E;AAC5E,qBAA8B;IAE9B,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC,CAAC,gDAAgD;IACpE,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,6EAA6E;QAC7E,2EAA2E;QAC3E,0EAA0E;QAC1E,OAAO,CACL,SAAS;YACT,CAAC,QAAQ,IAAI,MAAM,KAAK,OAAO,CAAC;YAChC,CAAC,QAAQ,IAAI,MAAM,KAAK,OAAO,IAAI,qBAAqB,CAAC,CAC1D,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yEAAyE;AACzE,2EAA2E;AAC3E,+EAA+E;AAC/E,gFAAgF;AAChF,mFAAmF;AACnF,SAAS,iBAAiB,CACxB,OAAkC,EAClC,kBAAsC,EACtC,KAAa;IAEb,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAC1B,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,gBAAgB,KAAK,KAAK;QACjC,CAAC,kBAAkB,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,kBAAkB,CAAC,CACnF,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IACD,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CACjC,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM;QACb,kBAAkB,KAAK,SAAS;QAChC,MAAM,CAAC,YAAY,KAAK,kBAAkB,CAC7C,CAAC;IACF,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CACjC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK,CAC/D,CAAC;IACF,IAAI,MAAc,CAAC;IACnB,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM;YACJ,0FAA0F,CAAC;IAC/F,CAAC;SAAM,IAAI,cAAc,EAAE,CAAC;QAC1B,MAAM,GAAG,0EAA0E,CAAC;IACtF,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACtB,MAAM,GAAG,8EAA8E,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,mFAAmF,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAA2B;IACzD,MAAM,cAAc,GAAG,yBAAyB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;QACxC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,qEAAqE;IACrE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkC,CAAC;IAChE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;IACzD,MAAM,eAAe,GAAwB;QAC3C,GAAG,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1C,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,GAAG,EAAE,CAAsB,CAC3E;KACF,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,oEAAoE;IACpE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA8C,CAAC;IAChF,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,YAAY,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,8DAA8D;IAC9D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAwB,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC5C,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,0EAA0E;IAC1E,gFAAgF;IAChF,MAAM,oBAAoB,GAAG,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC;IAC/D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAqC,CAAC;IACvE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,YAAY,GAAwB,CAAC,GAAG,eAAe,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAqB;QAChC,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,cAAc,EAAE,CAAC;KAClB,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,KAAK,EAAE,wBAAwB,IAAI,EAAE,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,EAAE,qBAAqB,IAAI,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,KAAK,EAAE,gCAAgC,IAAI,EAAE,CAAC;QACnE,MAAM,iBAAiB,GAAG,KAAK,EAAE,kCAAkC,IAAI,EAAE,CAAC;QAE1E,kEAAkE;QAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAE7F,mDAAmD;QACnD,MAAM,YAAY,GAAwB,EAAE,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK;gBACb,YAAY,EAAE,KAAK,CAAC,IAAI;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3D,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,KAAK;gBACb,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,IAAI,EAAE,SAAS,CAAC,UAAU;gBAC1B,OAAO,EAAE,kBAAkB,SAAS,CAAC,YAAY,4CAA4C;aAC9F,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,uEAAuE;YACvE,wEAAwE;YACxE,eAAe;YACf,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,OAAO,KAAK,yDAAyD;aAC/E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ;YACrB,CAAC,CAAC;gBACE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;gBAClC,wBAAwB,EAAE,6BAA6B,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBACrF,oBAAoB,EAAE,yBAAyB,CAAC,QAAQ,CAAC,eAAe,CAAC;aAC1E;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAE9B,qDAAqD;QACrD,IAAI,MAAiB,CAAC;QACtB,IAAI,OAAO,GAAsB,EAAE,CAAC;QACpC,IAAI,QAAgC,CAAC;QAErC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,cAAc;YACd,MAAM,GAAG,SAAS,CAAC;YACnB,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACrC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,CAAC,CAAC,CAAC;QACN,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,cAAc;YACd,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;aAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,mCAAmC;YACnC,MAAM,GAAG,SAAS,CAAC;YACnB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;aAAM,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/D,eAAe;YACf,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,2EAA2E;YAC3E,4EAA4E;YAC5E,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,QAAQ,EAAE,eAAe,CAAC;YAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,sBAAsB,CAAC;YACnD,MAAM,kBAAkB,GAAG,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAC/C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,aAAa,CAC/C,CAAC;gBACF,MAAM,SAAS,GACb,aAAa,KAAK,SAAS;oBAC3B,KAAK,CAAC,YAAY,CAAC,YAAY,KAAK,kBAAkB,CAAC;gBACzD,OAAO,CACL,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;oBACtC,KAAK,CAAC,GAAG,CAAC,wBAAwB,KAAK,MAAM,CAAC,wBAAwB;oBACtE,KAAK,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM,CAAC,oBAAoB;oBAC9D,KAAK,CAAC,QAAQ,CAAC,gBAAgB,KAAK,KAAK;oBACzC,cAAc;oBACd,SAAS;oBACT,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CACtC,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,GAAG,OAAO,CAAC;gBACjB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,+BAA+B;gBAC/B,MAAM,GAAG,SAAS,CAAC;gBACnB,OAAO,GAAG,kBAAkB,CAC1B,WAAW,EACX,MAAM,EAAE,QAAQ,IAAI,EAAE,EACtB,MAAM,EAAE,wBAAwB,IAAI,EAAE,EACtC,MAAM,EAAE,oBAAoB,IAAI,EAAE,EAClC,KAAK,EACL,iBAAiB,EACjB,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CACnE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC/D,4EAA4E;QAC5E,2EAA2E;QAC3E,4EAA4E;QAC5E,mEAAmE;QACnE,MAAM,eAAe,GACnB,KAAK,CAAC,WAAW,KAAK,SAAS;YAC/B,QAAQ;YACR,MAAM,KAAK,OAAO;YAClB,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,qBAAqB,GACzB,eAAe,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAClF,IAAI,qBAAqB,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC;aAClE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,GAAG,mBAAmB,CACrC,KAAK,CAAC,WAAW,EACjB,MAAM,EACN,QAAQ,EACR,KAAK,EACL,KAAK,CAAC,aAAa,EACnB,qBAAqB,CACtB,CAAC;QAEF,IAAI,cAAc,GAAkB,IAAI,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAClD,cAAc,GAAG,kBAAkB,KAAK,EAAE,CAAC;QAC7C,CAAC;aAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,cAAc,GAAG,4CAA4C,CAAC;QAChE,CAAC;QAED,oEAAoE;QACpE,0EAA0E;QAC1E,4EAA4E;QAC5E,4DAA4D;QAC5D,IAAI,WAA2C,CAAC;QAChD,IAAI,WAAsC,CAAC;QAC3C,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,KAAK,GACT,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/E,IAAI,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBAChC,kEAAkE;gBAClE,mEAAmE;gBACnE,sEAAsE;gBACtE,sEAAsE;gBACtE,oEAAoE;gBACpE,+DAA+D;gBAC/D,oEAAoE;gBACpE,WAAW,GAAG,gBAAgB,CAAC;gBAC/B,WAAW,GAAG,gCAAgC,CAAC;YACjD,CAAC;iBAAM,IAAI,KAAK,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,iBAAiB,CAC/B,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAClC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,KAAK,CAAC,EACxC,KAAK,CACN,CAAC;gBACF,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;gBACnC,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,IAAI,CAAC;gBACnB,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,KAAK;YACb,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YACjB,MAAM;YACN,YAAY,EAAE,WAAW;YACzB,OAAO;YACP,mBAAmB,EAAE,UAAU;YAC/B,qBAAqB,EAAE,YAAY;YACnC,gCAAgC,EAAE,YAAY;YAC9C,kCAAkC,EAAE,iBAAiB;YACrD,gBAAgB,EAAE,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC;YACrD,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAC1D,0BAA0B,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;YACtE,eAAe,EAAE,cAAc;YAC/B,oBAAoB,EAAE,QAAQ;SAC/B,CAAC;QACF,+EAA+E;QAC/E,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,YAAY,GAAG,WAAW,CAAC;YAClC,MAAM,CAAC,YAAY,GAAG,WAAW,IAAI,IAAI,CAAC;QAC5C,CAAC;QACD,6EAA6E;QAC7E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,wBAAwB,GAAG,KAAK,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAEnC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,OAAO;gBACV,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;gBACnB,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;gBACrB,MAAM;YACR,KAAK,UAAU;gBACb,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;gBACrB,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;gBACrB,MAAM;QACV,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC;IAEtE,OAAO;QACL,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,GAAG;QACvC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,OAAO;QACjB,OAAO;QACP,gBAAgB,EAAE,YAAY;QAC9B,IAAI,EAAE,OAAO;KACd,CAAC;AACJ,CAAC"}

package/packages/core/dist/markers/index.d.ts

@@ -0,0 +1,26 @@
+export * from "./constants.js";
+export * from "./canonicalJson.js";
+export * from "./rowHash.js";
+export * from "./policyHash.js";
+export * from "./verifierPresets.js";
+export * from "./verifierResolver.js";
+export * from "./verificationContextHash.js";
+export * from "./bindingSetHash.js";
+export * from "./validators.js";
+export * from "./commentPrefix.js";
+export * from "./markerLine.js";
+export * from "./spanCanon.js";
+export * from "./physicalLines.js";
+export * from "./scanner.js";
+export * from "./swiftFuncRecognizer.js";
+export * from "./registry.js";
+export * from "./appendOnly.js";
+export * from "./reconcile.js";
+export * from "./proofSignature.js";
+export * from "./evidenceLedger.js";
+export * from "./keyring.js";
+export * from "./keygen.js";
+export * from "./ciAuthority.js";
+export * from "./freshness.js";
+export * from "./cli/index.js";
+//# sourceMappingURL=index.d.ts.map