@aperant/framework 0.11.0 → 0.12.1

package/dist/cli/verify-proof/resolver.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.mjs","sourceRoot":"","sources":["../../../src/cli/verify-proof/resolver.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,IAAI,kCAAkC,CAAA;AACtC,IAAI,CAAC;IACJ,CAAC;IAAA,CAAC,EAAE,kCAAkC,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAA;AAC1F,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACd,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,GAAG,EAAE,IAAI,KAAK,sBAAsB;QAAE,MAAM,GAAG,CAAA;IACnD,gEAAgE;IAChE,kCAAkC,GAAG,MAAM,kCAAmC,SAAQ,KAAK;QAC1F,YAAY,OAAO,EAAE,UAAU,EAAE,QAAQ,GAAG,EAAE;YAC7C,KAAK,CAAC,OAAO,CAAC,CAAA;YACd,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAA;YAChD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;YAC5B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACzB,CAAC;KACD,CAAA;AACF,CAAC;AAED,MAAM,cAAc,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;AAC1D,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;AAE1D;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAC3D,MAAM,aAAa,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAA;IACnE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAA;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,QAAQ,EAAE,OAAO;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,sEAAsE;QACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACtD,IAAI,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;QAC/D,IAAI,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACzD,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,eAAe;YAAE,OAAO,IAAI,CAAA;QAC1F,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO,IAAI,CAAA;QACzD,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,cAAc,IAAI,OAAO,CAAC,eAAe;YAAE,OAAO,IAAI,CAAA;QACvE,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACxD,IAAI,QAAQ,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA,CAAC,gCAAgC;IACtE,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,CAAC,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,cAAc;IACrD,CAAC;IACD,OAAO,CAAC,CAAA;AACT,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,IAAI;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,IAAI,EAAE,CAAA;IACjD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;IAEpC,MAAM,QAAQ,GAAG,EAAE,CAAA;IAEnB,wEAAwE;IACxE,MAAM,eAAe,GAAG,EAAE,CAAA;IAC1B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IACrC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC;YAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,SAAS,CAAC,CAAA;IAElD,mEAAmE;IACnE,MAAM,UAAU,GAAG,EAAE,CAAA;IACrB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACb,SAAS,EAAE,CAAC,CAAC,QAAQ;gBACrB,MAAM,EAAE,aAAa,CAAC,CAAC,SAAS,wBAAwB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAC1F,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IAED,qEAAqE;IACrE,kEAAkE;IAClE,+DAA+D;IAC/D,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,6CAA6C;IAC7C,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC5E,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAA;QAC5D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACb,SAAS,EAAE,SAAS,CAAC,QAAQ;YAC7B,MAAM,EAAE,sDAAsD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClF,CAAC,CAAA;IACH,CAAC;IAED,mEAAmE;IACnE,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAE9F,6DAA6D;IAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,GAAG,CAAA;QACzB,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,sFAAsF;IACtF,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAA;QACrE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACb,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ;YACtC,MAAM,EAAE,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9D,CAAC,CAAA;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,IAAI,kCAAkC,CAC3C,gEAAgE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACtF,QAAQ,CAAC,CAAC,CAAC,EACX,QAAQ,CACR,CAAA;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAO;IAC5C,QAAQ,OAAO,EAAE,CAAC;QACjB,KAAK,UAAU;YACd,OAAO,aAAa,CAAA;QACrB,KAAK,KAAK;YACT,OAAO,iBAAiB,CAAA;QACzB,KAAK,KAAK,CAAC;QACX,KAAK,KAAK;YACT,OAAO,UAAU,CAAA;QAClB;YACC,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,GAAG,CAAC,CAAA;IACxE,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAI;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,IAAI,CAAC,YAAY,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAA;IAEzC,kJAAkJ;IAClJ,MAAM,OAAO,GAAG,EAAE,CAAA;IAElB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,kBAAkB,GACvB,OAAO,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAE7E,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,qBAAqB,CAAC,2CAA2C,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;YACzF,4DAA4D;YAC5D,6DAA6D;YAC7D,uDAAuD;YACvD,6DAA6D;YAC7D,+DAA+D;YAC/D,2BAA2B;YAC3B,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC3D,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC9B,OAAO;gBACP,OAAO,EAAE,cAAc;gBACvB,qBAAqB,EAAE,QAAQ;gBAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAA;YACF,OAAO,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,OAAO;gBACP,MAAM,EAAE,QAAQ,CAAC,QAAQ;gBACzB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;aAC7C,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAA;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,OAAO,EAAE,IAAI;IAC3C,kCAAkC;IAClC,MAAM,MAAM,GAAG;QACd,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,KAAK;KACf,CAAA;IACD,qEAAqE;IACrE,gEAAgE;IAChE,IAAI,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,WAAW;QAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAA;IAC5E,IAAI,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC3D,MAAM,CAAC,eAAe,GAAG,IAAI,CAAA;QAC7B,gEAAgE;QAChE,mDAAmD;QACnD,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QACpC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;IACjC,CAAC;IACD,IAAI,IAAI,KAAK,UAAU;QAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IAC3D,OAAO,MAAM,CAAA;AACd,CAAC"}
+{"version":3,"file":"resolver.mjs","sourceRoot":"","sources":["../../../src/cli/verify-proof/resolver.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,IAAI,kCAAkC,CAAA;AACtC,IAAI,CAAC;IACJ,CAAC;IAAA,CAAC,EAAE,kCAAkC,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAA;AAC1F,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACd,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,GAAG,EAAE,IAAI,KAAK,sBAAsB;QAAE,MAAM,GAAG,CAAA;IACnD,gEAAgE;IAChE,kCAAkC,GAAG,MAAM,kCAAmC,SAAQ,KAAK;QAC1F,YAAY,OAAO,EAAE,UAAU,EAAE,QAAQ,GAAG,EAAE;YAC7C,KAAK,CAAC,OAAO,CAAC,CAAA;YACd,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAA;YAChD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;YAC5B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACzB,CAAC;KACD,CAAA;AACF,CAAC;AAED,MAAM,cAAc,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;AAC1D,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;AAE1D;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAC3D,MAAM,aAAa,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAA;IACnE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAA;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,QAAQ,EAAE,OAAO;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,sEAAsE;QACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACtD,IAAI,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;QAC/D,IAAI,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACzD,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,eAAe;YAAE,OAAO,IAAI,CAAA;QAC1F,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO,IAAI,CAAA;QACzD,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,cAAc,IAAI,OAAO,CAAC,eAAe;YAAE,OAAO,IAAI,CAAA;QACvE,IAAI,QAAQ,KAAK,KAAK,IAAI,OAAO,CAAC,aAAa;YAAE,OAAO,IAAI,CAAA;QAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAA;QACpE,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACxD,IAAI,QAAQ,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA,CAAC,gCAAgC;IACtE,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,CAAC,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,cAAc;IACrD,CAAC;IACD,OAAO,CAAC,CAAA;AACT,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,IAAI;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,IAAI,EAAE,CAAA;IACjD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;IAEpC,MAAM,QAAQ,GAAG,EAAE,CAAA;IAEnB,wEAAwE;IACxE,MAAM,eAAe,GAAG,EAAE,CAAA;IAC1B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IACrC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC;YAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,SAAS,CAAC,CAAA;IAElD,mEAAmE;IACnE,MAAM,UAAU,GAAG,EAAE,CAAA;IACrB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACb,SAAS,EAAE,CAAC,CAAC,QAAQ;gBACrB,MAAM,EAAE,aAAa,CAAC,CAAC,SAAS,wBAAwB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAC1F,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IAED,qEAAqE;IACrE,kEAAkE;IAClE,+DAA+D;IAC/D,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,6CAA6C;IAC7C,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC5E,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAA;QAC5D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACb,SAAS,EAAE,SAAS,CAAC,QAAQ;YAC7B,MAAM,EAAE,sDAAsD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClF,CAAC,CAAA;IACH,CAAC;IAED,mEAAmE;IACnE,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAE9F,6DAA6D;IAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,GAAG,CAAA;QACzB,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,sFAAsF;IACtF,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAA;QACrE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACb,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ;YACtC,MAAM,EAAE,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9D,CAAC,CAAA;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,IAAI,kCAAkC,CAC3C,gEAAgE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACtF,QAAQ,CAAC,CAAC,CAAC,EACX,QAAQ,CACR,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAO;IAC5C,QAAQ,OAAO,EAAE,CAAC;QACjB,KAAK,UAAU;YACd,OAAO,aAAa,CAAA;QACrB,KAAK,KAAK;YACT,OAAO,iBAAiB,CAAA;QACzB,KAAK,KAAK,CAAC;QACX,KAAK,KAAK;YACT,OAAO,UAAU,CAAA;QAClB,KAAK,QAAQ;YACZ,OAAO,WAAW,CAAA;QACnB;YACC,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,GAAG,CAAC,CAAA;IACxE,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAI;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,IAAI,CAAC,YAAY,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAA;IAEzC,kJAAkJ;IAClJ,MAAM,OAAO,GAAG,EAAE,CAAA;IAElB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,kBAAkB,GACvB,OAAO,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAE7E,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,qBAAqB;YACjC,oDAAoD,CAAC,CAAC,OAAO,CAAC,CAC9D,CAAA;YACD,4DAA4D;YAC5D,6DAA6D;YAC7D,uDAAuD;YACvD,6DAA6D;YAC7D,+DAA+D;YAC/D,2BAA2B;YAC3B,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC3D,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC9B,OAAO;gBACP,OAAO,EAAE,cAAc;gBACvB,qBAAqB,EAAE,QAAQ;gBAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAA;YACF,OAAO,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,OAAO;gBACP,MAAM,EAAE,QAAQ,CAAC,QAAQ;gBACzB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;aAC7C,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAA;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,OAAO,EAAE,IAAI;IAC3C,kCAAkC;IAClC,MAAM,MAAM,GAAG;QACd,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,aAAa,EAAE,KAAK;QACpB,iBAAiB,EAAE,KAAK;QACxB,QAAQ,EAAE,KAAK;KACf,CAAA;IACD,qEAAqE;IACrE,gEAAgE;IAChE,IAAI,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,WAAW;QAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAA;IAC5E,IAAI,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC3D,MAAM,CAAC,eAAe,GAAG,IAAI,CAAA;QAC7B,gEAAgE;QAChE,mDAAmD;QACnD,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QACpC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;IACjC,CAAC;IACD,IAAI,IAAI,KAAK,UAAU;QAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IAC3D,yEAAyE;IACzE,sEAAsE;IACtE,qEAAqE;IACrE,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAC1B,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAA;QAC5C,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAA;QACpD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAChC,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAA;IACjD,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC"}

package/dist/cli/verify-proof/sandbox/apply.d.mts

@@ -0,0 +1,64 @@
+/**
+ * @typedef {Object} ApplyChangeRecord
+ * @property {string} path — adopter-relative target
+ * @property {'written'|'skipped'|'skipped_unsafe'} action
+ * @property {string} [skip_reason] — already_applied | user_modified | malformed_json | non_object_root | dry_run
+ * @property {string|null} original_sha256
+ * @property {string|null} applied_sha256
+ * @property {string} recipe_version
+ * @property {string} applied_at
+ * @property {string} kind
+ */
+/**
+ * @param {{
+ *   projectDir: string,
+ *   recipeId: string,
+ *   recipes: object[],
+ *   confirm?: boolean,
+ *   perChangeConfirm?: (change: object, preview: {before: string, after: string}) => Promise<'accept'|'skip'|'abort'>,
+ *   force?: boolean
+ * }} args
+ * @returns {Promise<{
+ *   writes: ApplyChangeRecord[],
+ *   skips: ApplyChangeRecord[],
+ *   audit_path: string|null,
+ *   aborted: boolean,
+ *   recipe_id: string,
+ *   recipe_version: string
+ * }>}
+ */
+export function applyRecipe(args: {
+    projectDir: string;
+    recipeId: string;
+    recipes: object[];
+    confirm?: boolean;
+    perChangeConfirm?: (change: object, preview: {
+        before: string;
+        after: string;
+    }) => Promise<"accept" | "skip" | "abort">;
+    force?: boolean;
+}): Promise<{
+    writes: ApplyChangeRecord[];
+    skips: ApplyChangeRecord[];
+    audit_path: string | null;
+    aborted: boolean;
+    recipe_id: string;
+    recipe_version: string;
+}>;
+export type ApplyChangeRecord = {
+    /**
+     * — adopter-relative target
+     */
+    path: string;
+    action: "written" | "skipped" | "skipped_unsafe";
+    /**
+     * — already_applied | user_modified | malformed_json | non_object_root | dry_run
+     */
+    skip_reason?: string | undefined;
+    original_sha256: string | null;
+    applied_sha256: string | null;
+    recipe_version: string;
+    applied_at: string;
+    kind: string;
+};
+//# sourceMappingURL=apply.d.mts.map

package/dist/cli/verify-proof/sandbox/apply.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../../src/cli/verify-proof/sandbox/apply.mjs"],"names":[],"mappings":"AAyEA;;;;;;;;;;GAUG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,kCAjBW;IACN,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,QAAQ,GAAC,MAAM,GAAC,OAAO,CAAC,CAAC;IAClH,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB,GACS,OAAO,CAAC;IAChB,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAC,IAAI,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAA;CACvB,CAAC,CA0HJ;;;;;UApJa,MAAM;YACN,SAAS,GAAC,SAAS,GAAC,gBAAgB;;;;;qBAEpC,MAAM,GAAC,IAAI;oBACX,MAAM,GAAC,IAAI;oBACX,MAAM;gBACN,MAAM;UACN,MAAM"}

package/dist/cli/verify-proof/sandbox/apply.mjs

@@ -0,0 +1,379 @@
+/**
+ * apply.mjs — recipe applier with dry-run default + per-change
+ * confirmation + TOFU non-clobber + audit-row writing.
+ *
+ * Three layered concerns covered here (subtasks 3.1, 3.2, 3.3):
+ *
+ *   3.1 — `confirm:false` (the default) is a pure dry-run. Returns
+ *         the planned writes list; writes ZERO bytes under the
+ *         adopter's source tree (ID-02).
+ *
+ *   3.2 — TOFU non-clobber. Per-change skip semantics modeled on
+ *         install/mcp-provision.mjs's already_applied / user_modified
+ *         / malformed_json / non_object_root states:
+ *           - already_applied: target file contains the recipe's marker
+ *             substring → no write.
+ *           - user_modified:  target file exists, doesn't contain the
+ *             marker, AND its content sha256 doesn't match the
+ *             recipe's expected-before hash (when provided) → no write.
+ *           - malformed_json / non_object_root: applicable to
+ *             json-merge changes only.
+ *
+ *   3.3 — Audit-row writing under withLock to .aperant/recipes-applied/
+ *         {recipe-id}.json. Captures original_sha256 + applied_sha256
+ *         + recipe_version + applied_at per change. file-create rows
+ *         record original_sha256:null.
+ *
+ * Public contract:
+ *   applyRecipe({projectDir, recipeId, recipes, confirm, perChangeConfirm})
+ *     → {writes, skips, audit_path}
+ *
+ * No process.exit; no thrown errors except for usage-shape violations.
+ * The CLI command wraps this and translates to the {envelope, exitCode}
+ * shape.
+ */
+import { createHash } from 'node:crypto';
+import { chmodSync, existsSync, readFileSync } from 'node:fs';
+import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { atomicWriteJson, atomicWriteText } from '../../util/atomic-write.mjs';
+import { withFileLock } from '../../util/fs-lock.mjs';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+/**
+ * Defense-in-depth: assert a recipe-declared path resolves under the
+ * expected root. Rejects absolute paths and `../` escapes regardless of
+ * what the recipe schema validator accepted.
+ *
+ * Throws — caller surfaces the message in audit + CLI envelope. We throw
+ * rather than skip because a malicious-path-in-recipe is a CONTRACT
+ * violation, not a TOFU skip case.
+ *
+ * @param {string} rootAbs — absolute root the path must stay under.
+ * @param {string} relPath — recipe-declared relative path.
+ * @param {string} label — 'change.path' | 'change.template' for the error message.
+ * @returns {string} the validated absolute path under rootAbs.
+ */
+function assertPathUnderRoot(rootAbs, relPath, label) {
+    if (typeof relPath !== 'string' || relPath.length === 0) {
+        throw new Error(`applyRecipe: ${label} must be a non-empty string`);
+    }
+    if (isAbsolute(relPath)) {
+        throw new Error(`applyRecipe: ${label} must be relative, got absolute: ${relPath}`);
+    }
+    const candidate = resolve(rootAbs, relPath);
+    const rel = relative(rootAbs, candidate);
+    if (rel.startsWith('..') || isAbsolute(rel)) {
+        throw new Error(`applyRecipe: ${label} escapes root: ${relPath}`);
+    }
+    return candidate;
+}
+/**
+ * @typedef {Object} ApplyChangeRecord
+ * @property {string} path — adopter-relative target
+ * @property {'written'|'skipped'|'skipped_unsafe'} action
+ * @property {string} [skip_reason] — already_applied | user_modified | malformed_json | non_object_root | dry_run
+ * @property {string|null} original_sha256
+ * @property {string|null} applied_sha256
+ * @property {string} recipe_version
+ * @property {string} applied_at
+ * @property {string} kind
+ */
+/**
+ * @param {{
+ *   projectDir: string,
+ *   recipeId: string,
+ *   recipes: object[],
+ *   confirm?: boolean,
+ *   perChangeConfirm?: (change: object, preview: {before: string, after: string}) => Promise<'accept'|'skip'|'abort'>,
+ *   force?: boolean
+ * }} args
+ * @returns {Promise<{
+ *   writes: ApplyChangeRecord[],
+ *   skips: ApplyChangeRecord[],
+ *   audit_path: string|null,
+ *   aborted: boolean,
+ *   recipe_id: string,
+ *   recipe_version: string
+ * }>}
+ */
+export async function applyRecipe(args) {
+    const { projectDir, recipeId, recipes, confirm = false, perChangeConfirm, force = false } = args;
+    if (!projectDir)
+        throw new Error('applyRecipe: projectDir required');
+    if (!recipeId)
+        throw new Error('applyRecipe: recipeId required');
+    if (!Array.isArray(recipes))
+        throw new Error('applyRecipe: recipes[] required');
+    const recipe = recipes.find((r) => r && r.recipeId === recipeId);
+    if (!recipe)
+        throw new Error(`applyRecipe: recipe not found: ${recipeId}`);
+    const adopterRoot = resolve(projectDir);
+    const writes = [];
+    const skips = [];
+    let aborted = false;
+    const at = new Date().toISOString();
+    for (const change of recipe.changes ?? []) {
+        // Defense-in-depth: reject path-traversal in recipe-declared paths
+        // regardless of schema validation. A malicious community recipe
+        // could otherwise write outside the adopter root via `../../`.
+        const targetAbs = assertPathUnderRoot(adopterRoot, change.path, 'change.path');
+        const exists = existsSync(targetAbs);
+        const before = exists ? safeReadFile(targetAbs) : '';
+        const beforeSha = exists ? sha256(before) : null;
+        const afterContent = renderAfterContent(change, recipe);
+        // TOFU non-clobber checks — per-change skip decisions.
+        const tofu = decideTofu({ change, before, exists, force });
+        if (tofu.skip) {
+            skips.push({
+                path: change.path,
+                kind: change.kind,
+                action: tofu.unsafe ? 'skipped_unsafe' : 'skipped',
+                skip_reason: tofu.reason,
+                original_sha256: beforeSha,
+                applied_sha256: null,
+                recipe_version: recipe.recipeVersion,
+                applied_at: at,
+            });
+            continue;
+        }
+        const preview = { before, after: afterContent };
+        if (!confirm) {
+            // Dry-run: no write, no per-change prompt. The plan is the output.
+            writes.push({
+                path: change.path,
+                kind: change.kind,
+                action: 'written',
+                skip_reason: 'dry_run',
+                original_sha256: beforeSha,
+                applied_sha256: null,
+                recipe_version: recipe.recipeVersion,
+                applied_at: at,
+            });
+            continue;
+        }
+        // With --confirm: ask the user per change. Default WHEN NO
+        // confirmer is provided is `skip` (fail-safe per ID-02 — the
+        // framework never auto-applies without an explicit accept signal
+        // from the caller surface).
+        const verdict = perChangeConfirm ? await perChangeConfirm(change, preview) : 'skip';
+        if (verdict === 'abort') {
+            aborted = true;
+            break;
+        }
+        if (verdict === 'skip') {
+            skips.push({
+                path: change.path,
+                kind: change.kind,
+                action: 'skipped',
+                skip_reason: 'user_declined',
+                original_sha256: beforeSha,
+                applied_sha256: null,
+                recipe_version: recipe.recipeVersion,
+                applied_at: at,
+            });
+            continue;
+        }
+        // Verdict 'accept' — perform the write.
+        const writeResult = performWrite(targetAbs, change, afterContent, before);
+        writes.push({
+            path: change.path,
+            kind: change.kind,
+            action: 'written',
+            skip_reason: null,
+            original_sha256: beforeSha,
+            applied_sha256: writeResult.applied_sha256,
+            recipe_version: recipe.recipeVersion,
+            applied_at: at,
+        });
+    }
+    // Audit row write — only when we actually wrote (or attempted to).
+    // For dry-runs we still return the plan in `writes` but do NOT touch
+    // the audit file. ID-02: dry-run never mutates state.
+    let auditPath = null;
+    if (confirm) {
+        auditPath = join(adopterRoot, '.aperant', 'recipes-applied', `${recipe.recipeId}.json`);
+        writeAuditRow({
+            auditPath,
+            recipeId: recipe.recipeId,
+            recipeVersion: recipe.recipeVersion,
+            at,
+            writes,
+            skips,
+            aborted,
+        });
+    }
+    return {
+        writes,
+        skips,
+        audit_path: auditPath,
+        aborted,
+        recipe_id: recipe.recipeId,
+        recipe_version: recipe.recipeVersion,
+    };
+}
+/**
+ * TOFU decision per change. Returns {skip:true, reason, unsafe?} or
+ * {skip:false}.
+ */
+function decideTofu({ change, before, exists, force }) {
+    if (!exists) {
+        // New target — always safe to write.
+        return { skip: false };
+    }
+    // Marker check first — if the recipe's marker substring is already
+    // in the file, treat as idempotent application (regardless of kind).
+    if (typeof change.marker === 'string' &&
+        change.marker.length > 0 &&
+        before.includes(change.marker)) {
+        return { skip: true, reason: 'already_applied' };
+    }
+    // json-merge specific safety: only touch plain-object roots.
+    if (change.kind === 'json-merge') {
+        let parsed;
+        try {
+            parsed = before === '' ? {} : JSON.parse(before);
+        }
+        catch {
+            return { skip: true, reason: 'malformed_json', unsafe: true };
+        }
+        if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            return { skip: true, reason: 'non_object_root', unsafe: true };
+        }
+    }
+    // `before` SHA divergence: target file exists but the recipe has an
+    // expected before-content/sha and it doesn't match. Without --force,
+    // skip as user_modified. A 64-char hex string is treated as a SHA;
+    // anything else is treated as a substring anchor.
+    if (!force && typeof change.before === 'string' && change.before.length > 0) {
+        if (/^[a-f0-9]{64}$/.test(change.before)) {
+            if (sha256(before) !== change.before) {
+                return { skip: true, reason: 'user_modified' };
+            }
+        }
+        else if (!before.includes(change.before)) {
+            return { skip: true, reason: 'user_modified' };
+        }
+    }
+    return { skip: false };
+}
+/**
+ * Materialize the post-condition content for a change.
+ */
+function renderAfterContent(change, recipe) {
+    if (change.kind === 'json-merge') {
+        return JSON.stringify(change.after ?? {}, null, 2);
+    }
+    if (change.template) {
+        const tpl = locateRecipeTemplate(recipe, change.template);
+        if (tpl && existsSync(tpl))
+            return safeReadFile(tpl);
+    }
+    if (typeof change.after === 'string')
+        return change.after;
+    return '';
+}
+function performWrite(targetAbs, change, afterContent, before) {
+    if (change.kind === 'json-merge') {
+        // Deep-merge change.after into existing JSON (already verified to
+        // be plain-object root in decideTofu).
+        const parsed = before === '' ? {} : JSON.parse(before);
+        const merged = deepMerge(parsed, change.after ?? {});
+        atomicWriteJson(targetAbs, merged);
+        const out = `${JSON.stringify(merged, null, 2)}\n`;
+        return { applied_sha256: sha256(out) };
+    }
+    if (change.kind === 'text-insert') {
+        // v1: append the patch block after the existing file content. Adopters
+        // confirm per-change; the diff has been previewed; explicit append is
+        // the safest non-destructive semantic for a v1.
+        const out = before + (before.endsWith('\n') ? '' : '\n') + afterContent;
+        atomicWriteText(targetAbs, out);
+        return { applied_sha256: sha256(out) };
+    }
+    if (change.kind === 'file-create' || change.kind === 'helper-script') {
+        atomicWriteText(targetAbs, afterContent);
+        if (typeof change.mode === 'number') {
+            try {
+                chmodSync(targetAbs, change.mode);
+            }
+            catch {
+                // chmod failure is non-fatal — the recipe's verify-sandbox step
+                // will surface a non-executable script as a self-test failure.
+            }
+        }
+        return { applied_sha256: sha256(afterContent) };
+    }
+    // Unknown kind — fail loud (ID-01). A recipe shipping an unrecognized
+    // change.kind is a contract violation, not a TOFU skip case.
+    throw Object.assign(new Error(`applyRecipe: unknown change.kind '${change.kind}' on path '${change.path}'`), {
+        code: 'E_UNKNOWN_CHANGE_KIND',
+        kind: change.kind,
+        path: change.path,
+    });
+}
+function deepMerge(a, b) {
+    if (b === null || typeof b !== 'object' || Array.isArray(b))
+        return b;
+    if (a === null || typeof a !== 'object' || Array.isArray(a))
+        return b;
+    const out = { ...a };
+    for (const k of Object.keys(b)) {
+        out[k] = k in a ? deepMerge(a[k], b[k]) : b[k];
+    }
+    return out;
+}
+/**
+ * Write/update the audit row file under withFileLock. The lock helper is
+ * synchronous (it uses proper-lockfile's sync API + an Atomics.wait
+ * retry loop), so this function is sync — the caller already declared
+ * `await` for forward-compatibility with a future async lock.
+ */
+const AUDIT_ENTRIES_CAP = 50;
+function writeAuditRow({ auditPath, recipeId, recipeVersion, at, writes, skips, aborted }) {
+    withFileLock(auditPath, () => {
+        const existing = existsSync(auditPath) ? JSON.parse(safeReadFile(auditPath) || '{}') : {};
+        const entries = Array.isArray(existing.entries) ? existing.entries : [];
+        entries.push({
+            recipe_id: recipeId,
+            recipe_version: recipeVersion,
+            applied_at: at,
+            aborted,
+            writes,
+            skips,
+        });
+        // Cap to the last N entries to prevent unbounded disk growth (PRF-003).
+        const capped = entries.length > AUDIT_ENTRIES_CAP ? entries.slice(-AUDIT_ENTRIES_CAP) : entries;
+        const doc = {
+            recipe_id: recipeId,
+            latest_version: recipeVersion,
+            last_applied_at: at,
+            entries: capped,
+        };
+        atomicWriteJson(auditPath, doc);
+    });
+}
+function safeReadFile(path) {
+    try {
+        return readFileSync(path, 'utf-8');
+    }
+    catch {
+        return '';
+    }
+}
+function sha256(content) {
+    return createHash('sha256').update(content, 'utf-8').digest('hex');
+}
+function locateRecipeTemplate(recipe, templateName) {
+    // Defense-in-depth: a malicious recipe could otherwise specify
+    // `templateName: "../../etc/passwd"` and read arbitrary host files
+    // into the adopter source tree. Resolve under templates/ and assert.
+    // Also guard the recipeId itself — discoverBundledRecipes() skips schema
+    // validation, so the ^[a-z][a-z0-9_-]*$ pattern may not have been enforced.
+    if (typeof recipe.recipeId !== 'string' || !/^[a-z][a-z0-9_-]*$/.test(recipe.recipeId)) {
+        throw new Error(`applyRecipe: invalid recipeId '${recipe.recipeId}' — must match ^[a-z][a-z0-9_-]*$`);
+    }
+    const frameworkRoot = resolve(__dirname, '..', '..', '..', '..');
+    const templatesRoot = join(frameworkRoot, 'recipes', recipe.recipeId, 'templates');
+    return assertPathUnderRoot(templatesRoot, templateName, 'change.template');
+}
+//# sourceMappingURL=apply.mjs.map

package/dist/cli/verify-proof/sandbox/apply.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../../src/cli/verify-proof/sandbox/apply.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAErD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAEzD;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK;IACnD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,6BAA6B,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,oCAAoC,OAAO,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACxC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,kBAAkB,OAAO,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAI;IACrC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,KAAK,EAAE,gBAAgB,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,IAAI,CAAA;IAChG,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACpE,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAE/E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;IAChE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAA;IAE1E,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,EAAE,CAAA;IACjB,MAAM,KAAK,GAAG,EAAE,CAAA;IAChB,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAEnC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC3C,mEAAmE;QACnE,gEAAgE;QAChE,+DAA+D;QAC/D,MAAM,SAAS,GAAG,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;QAC9E,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACpD,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAChD,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAEvD,uDAAuD;QACvD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;gBAClD,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,eAAe,EAAE,SAAS;gBAC1B,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,MAAM,CAAC,aAAa;gBACpC,UAAU,EAAE,EAAE;aACd,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;QAE/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,mEAAmE;YACnE,MAAM,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,SAAS;gBACtB,eAAe,EAAE,SAAS;gBAC1B,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,MAAM,CAAC,aAAa;gBACpC,UAAU,EAAE,EAAE;aACd,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QAED,2DAA2D;QAC3D,6DAA6D;QAC7D,iEAAiE;QACjE,4BAA4B;QAC5B,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACnF,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACzB,OAAO,GAAG,IAAI,CAAA;YACd,MAAK;QACN,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,eAAe;gBAC5B,eAAe,EAAE,SAAS;gBAC1B,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,MAAM,CAAC,aAAa;gBACpC,UAAU,EAAE,EAAE;aACd,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QAED,wCAAwC;QACxC,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;QACzE,MAAM,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,SAAS;YAC1B,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,UAAU,EAAE,EAAE;SACd,CAAC,CAAA;IACH,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,sDAAsD;IACtD,IAAI,SAAS,GAAG,IAAI,CAAA;IACpB,IAAI,OAAO,EAAE,CAAC;QACb,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC,QAAQ,OAAO,CAAC,CAAA;QACvF,aAAa,CAAC;YACb,SAAS;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,EAAE;YACF,MAAM;YACN,KAAK;YACL,OAAO;SACP,CAAC,CAAA;IACH,CAAC;IAED,OAAO;QACN,MAAM;QACN,KAAK;QACL,UAAU,EAAE,SAAS;QACrB,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,cAAc,EAAE,MAAM,CAAC,aAAa;KACpC,CAAA;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,qCAAqC;QACrC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IACvB,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,IACC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAC7B,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;IACjD,CAAC;IAED,6DAA6D;IAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,IAAI,MAAM,CAAA;QACV,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QAC9D,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QAC/D,CAAC;IACF,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,kDAAkD;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7E,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;YAC/C,CAAC;QACF,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;QAC/C,CAAC;IACF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAM,EAAE,MAAM;IACzC,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAA;IACzD,OAAO,EAAE,CAAA;AACV,CAAC;AAED,SAAS,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,kEAAkE;QAClE,uCAAuC;QACvC,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;QACpD,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAClC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAA;QAClD,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACnC,uEAAuE;QACvE,sEAAsE;QACtE,gDAAgD;QAChD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAA;QACvE,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACtE,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QACxC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC;gBACJ,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;YAClC,CAAC;YAAC,MAAM,CAAC;gBACR,gEAAgE;gBAChE,+DAA+D;YAChE,CAAC;QACF,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAA;IAChD,CAAC;IACD,sEAAsE;IACtE,6DAA6D;IAC7D,MAAM,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,IAAI,GAAG,CAAC,EACvF;QACC,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;KACjB,CACD,CAAA;AACF,CAAC;AAED,SAAS,SAAS,CAAC,CAAC,EAAE,CAAC;IACtB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACrE,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACrE,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,EAAE,CAAA;IACpB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B,SAAS,aAAa,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;IACxF,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE;QAC5B,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACzF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;QACvE,OAAO,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,QAAQ;YACnB,cAAc,EAAE,aAAa;YAC7B,UAAU,EAAE,EAAE;YACd,OAAO;YACP,MAAM;YACN,KAAK;SACL,CAAC,CAAA;QACF,wEAAwE;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;QAC/F,MAAM,GAAG,GAAG;YACX,SAAS,EAAE,QAAQ;YACnB,cAAc,EAAE,aAAa;YAC7B,eAAe,EAAE,EAAE;YACnB,OAAO,EAAE,MAAM;SACf,CAAA;QACD,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAI;IACzB,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAA;IACV,CAAC;AACF,CAAC;AAED,SAAS,MAAM,CAAC,OAAO;IACtB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAM,EAAE,YAAY;IACjD,+DAA+D;IAC/D,mEAAmE;IACnE,qEAAqE;IACrE,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CACd,kCAAkC,MAAM,CAAC,QAAQ,mCAAmC,CACpF,CAAA;IACF,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IAChE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IAClF,OAAO,mBAAmB,CAAC,aAAa,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAA;AAC3E,CAAC"}

package/dist/cli/verify-proof/sandbox/gate-predicate.d.mts

@@ -0,0 +1,63 @@
+/**
+ * @typedef {Object} GateInput
+ * @property {object|null|undefined} config
+ * @property {object|null|undefined} stateFile
+ * @property {boolean} parallelRequested
+ */
+/**
+ * @typedef {Object} GateEnvelope
+ * @property {'error'} status
+ * @property {string} code
+ * @property {string} verdict
+ * @property {string} reason
+ * @property {string} remediation
+ */
+/**
+ * @typedef {Object} GateOutput
+ * @property {'proceed'|'skip-gate'|'exit'} action
+ * @property {GateEnvelope} [envelope]
+ */
+/**
+ * @param {GateInput} input
+ * @returns {GateOutput}
+ */
+export function gatePredicate({ config, stateFile, parallelRequested }: GateInput): GateOutput;
+/**
+ * The frozen fail envelope — exported so callers can detect-and-match
+ * without re-stringifying.
+ */
+export const SANDBOX_UNVERIFIED_ENVELOPE: Readonly<{
+    status: "error";
+    code: "E_SANDBOX_UNVERIFIED";
+    verdict: "needs_human";
+    reason: "sandbox_unverified";
+    remediation: "/apt:verify-proof setup";
+}>;
+/**
+ * The frozen stale-verdict envelope — emitted when the state file's
+ * recipeVersion is no longer in the active recipe's compatibleWithApplied[].
+ */
+export const SANDBOX_VERDICT_STALE_ENVELOPE: Readonly<{
+    status: "error";
+    code: "E_SANDBOX_VERDICT_STALE";
+    verdict: "needs_human";
+    reason: "sandbox_recipe_version_drift";
+    remediation: "apt-tools verify-sandbox <project-dir>";
+}>;
+export type GateInput = {
+    config: object | null | undefined;
+    stateFile: object | null | undefined;
+    parallelRequested: boolean;
+};
+export type GateEnvelope = {
+    status: "error";
+    code: string;
+    verdict: string;
+    reason: string;
+    remediation: string;
+};
+export type GateOutput = {
+    action: "proceed" | "skip-gate" | "exit";
+    envelope?: GateEnvelope | undefined;
+};
+//# sourceMappingURL=gate-predicate.d.mts.map

package/dist/cli/verify-proof/sandbox/gate-predicate.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-predicate.d.mts","sourceRoot":"","sources":["../../../../src/cli/verify-proof/sandbox/gate-predicate.mjs"],"names":[],"mappings":"AA8CA;;;;;GAKG;AAEH;;;;;;;GAOG;AAEH;;;;GAIG;AAEH;;;GAGG;AACH,wEAHW,SAAS,GACP,UAAU,CA2CtB;AAED;;;GAGG;AACH;;;;;;GAAwD;AAExD;;;GAGG;AACH;;;;;;GAAoE;;YA7EtD,MAAM,GAAC,IAAI,GAAC,SAAS;eACrB,MAAM,GAAC,IAAI,GAAC,SAAS;uBACrB,OAAO;;;YAKP,OAAO;UACP,MAAM;aACN,MAAM;YACN,MAAM;iBACN,MAAM;;;YAKN,SAAS,GAAC,WAAW,GAAC,MAAM"}