@apexops/contracts 0.10.0-next.4 → 0.11.0-next.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAwD7B,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+ClB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;AACxF,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAEhD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE,qBAAqB,CAAC;CACtC;AAQD,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CA+CvE,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAEjF,CAAC;AAEF,wBAAgB,2BAA2B,IAAI,OAAO,CASrD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAiF7B,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgElB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;AACxF,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAEhD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE,qBAAqB,CAAC;CACtC;AAQD,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAiEvE,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAEjF,CAAC;AAEF,wBAAgB,2BAA2B,IAAI,OAAO,CASrD"}

package/dist/index.js

@@ -1,21 +1,38 @@
 export * from "./artifacts.js";
+export * from "./archetype-source.js";
 export * from "./common.js";
 export * from "./deployment.js";
 export * from "./evidence.js";
+export * from "./governance-observation.js";
 export * from "./improvement.js";
+export * from "./native-validation.js";
 export * from "./onboarding.js";
 export * from "./pricing.js";
+export * from "./policy-validation.js";
 export * from "./runtime.js";
 export * from "./targets.js";
-import { IacBindingV1Schema, ImplementationIntentV1Schema, RequirementsV1Schema } from "./artifacts.js";
+import { IacBindingV1Schema, ImplementationIntentV1Schema, RequirementsV1Schema, RequirementsAmendmentV1Schema, RequirementsChangeProposalV1Schema, } from "./artifacts.js";
+import { ArchetypeSourceProposalV1Schema, ArchetypeBatchConfigV1Schema, ArchetypeBatchPlanV1Schema, } from "./archetype-source.js";
 import { ApprovalEvidenceV1Schema, DeploymentPreviewV1Schema, OperationRecordV1Schema, ResourceInventoryV1Schema, } from "./deployment.js";
 import { ArchitectureAvailabilityV1Schema, ClientOutcomeComparisonV1Schema, ClientOutcomeQualificationV1Schema, ClientOutcomeV1Schema, EvidenceManifestV1Schema, LiveQualificationV1Schema, QualityMeasurementsV1Schema, QualityScorecardV1Schema, } from "./evidence.js";
 import { ImprovementDecisionV1Schema, ImprovementObservationV1Schema, ImprovementPolicyV1Schema, ImprovementProposalV1Schema, ImprovementRecurrenceV1Schema, } from "./improvement.js";
-import { OnboardingConfigV1Schema } from "./onboarding.js";
+import { BootstrapPlanV1Schema, OnboardingConfigV1Schema, GovernanceSetupConfigV1Schema, GovernanceSetupPlanV1Schema, GovernanceProvisionPlanV1Schema, RepositoryPublishConfigV1Schema, RepositoryPublishPlanV1Schema, } from "./onboarding.js";
+import { NativeValidationReceiptV1Schema } from "./native-validation.js";
+import { GovernanceObservationReceiptV1Schema } from "./governance-observation.js";
 import { PricingEvidenceV1Schema, PricingRequestV1Schema } from "./pricing.js";
-import { EventV1Schema, InputRequestV1Schema, InputSubmissionV1Schema, ProjectConfigV1Schema, RunConfigV1Schema, RuntimeBundleLockV1Schema, TaskEnvelopeV1Schema, } from "./runtime.js";
-import { ArchitectureV1Schema, CapabilityPackManifestV1Schema, CostEstimateV1Schema, CustomizationLockV1Schema, DiagnosisV1Schema, EnvironmentInputsV1Schema, ExecutionPlanAttestationV1Schema, GovernanceConstraintsV1Schema, IacHandoffV1Schema, LogicalResourceManifestV1Schema, PolicyPropertyMapV1Schema, QualityReportV1Schema, ReviewFindingsV1Schema, ScenarioV1Schema, TelemetryV1Schema, WorkloadDecisionManifestV1Schema, } from "./targets.js";
+import { PolicyValidationV1Schema } from "./policy-validation.js";
+import { EventV1Schema, InputRequestV1Schema, InputSubmissionV1Schema, ProjectConfigV1Schema, RepeatGuardRecordsV1Schema, RunConfigV1Schema, RuntimeBundleLockV1Schema, TaskEnvelopeV1Schema, } from "./runtime.js";
+import { ArchitectureV1Schema, CapabilityPackManifestV1Schema, CostEstimateV1Schema, CustomizationLockV1Schema, DiagnosisV1Schema, EnvironmentInputsV1Schema, ExecutionPlanAttestationV1Schema, GovernanceConstraintsV1Schema, IacHandoffV1Schema, LogicalResourceManifestV1Schema, PolicyPropertyMapV1Schema, QualityReportV1Schema, ReviewCaptureV1Schema, ReviewRequestV1Schema, ReviewFindingsV1Schema, ScenarioV1Schema, TelemetryV1Schema, WorkloadDecisionManifestV1Schema, } from "./targets.js";
 export const contractSchemas = [
+    GovernanceProvisionPlanV1Schema,
+    RepositoryPublishConfigV1Schema,
+    RepositoryPublishPlanV1Schema,
+    ArchetypeBatchConfigV1Schema,
+    ArchetypeBatchPlanV1Schema,
+    GovernanceSetupConfigV1Schema,
+    GovernanceSetupPlanV1Schema,
+    BootstrapPlanV1Schema,
+    ArchetypeSourceProposalV1Schema,
     RuntimeBundleLockV1Schema,
     ProjectConfigV1Schema,
     RunConfigV1Schema,
@@ -23,7 +40,10 @@ export const contractSchemas = [
     InputRequestV1Schema,
     InputSubmissionV1Schema,
     EventV1Schema,
+    RepeatGuardRecordsV1Schema,
     RequirementsV1Schema,
+    RequirementsAmendmentV1Schema,
+    RequirementsChangeProposalV1Schema,
     ImplementationIntentV1Schema,
     IacBindingV1Schema,
     ApprovalEvidenceV1Schema,
@@ -49,10 +69,15 @@ export const contractSchemas = [
     WorkloadDecisionManifestV1Schema,
     ArchitectureV1Schema,
     CostEstimateV1Schema,
+    ReviewCaptureV1Schema,
+    ReviewRequestV1Schema,
     ReviewFindingsV1Schema,
     GovernanceConstraintsV1Schema,
     PolicyPropertyMapV1Schema,
     EnvironmentInputsV1Schema,
+    GovernanceObservationReceiptV1Schema,
+    PolicyValidationV1Schema,
+    NativeValidationReceiptV1Schema,
     LogicalResourceManifestV1Schema,
     IacHandoffV1Schema,
     ExecutionPlanAttestationV1Schema,
@@ -69,14 +94,27 @@ const metadata = (maxBytes, sensitivity = "internal") => ({
     compatibility: "strict-v1",
 });
 export const contractMetadata = {
+    "https://schemas.apexops.dev/governance-provision-plan-v1.json": metadata(65_536, "confidential"),
+    "https://schemas.apexops.dev/repository-publish-config-v1.json": metadata(16_384, "confidential"),
+    "https://schemas.apexops.dev/repository-publish-plan-v1.json": metadata(262_144, "confidential"),
+    "https://schemas.apexops.dev/archetype-batch-config-v1.json": metadata(16_384, "confidential"),
+    "https://schemas.apexops.dev/archetype-batch-plan-v1.json": metadata(2_097_152, "confidential"),
+    "https://schemas.apexops.dev/governance-setup-config-v1.json": metadata(16_384, "confidential"),
+    "https://schemas.apexops.dev/governance-setup-plan-v1.json": metadata(32_768, "confidential"),
+    "https://schemas.apexops.dev/bootstrap-plan-v1.json": metadata(65_536, "confidential"),
+    "https://schemas.apexops.dev/archetype-source-proposal-v1.json": metadata(524_288, "confidential"),
     "https://schemas.apexops.dev/runtime-bundle-lock-v1.json": metadata(32_768),
     "https://schemas.apexops.dev/project-config-v1.json": metadata(16_384),
     "https://schemas.apexops.dev/run-config-v1.json": metadata(65_536, "confidential"),
+    // 16 records whose results may JSON-escape to six bytes per character, plus per-record overhead.
+    "https://schemas.apexops.dev/repeat-guard-records-v1.json": metadata(6_356_992, "confidential"),
     "https://schemas.apexops.dev/task-envelope-v1.json": metadata(131_072, "confidential"),
     "https://schemas.apexops.dev/input-request-v1.json": metadata(65_536, "confidential"),
     "https://schemas.apexops.dev/input-submission-v1.json": metadata(65_536, "confidential"),
     "https://schemas.apexops.dev/event-v1.json": metadata(262_144, "confidential"),
     "https://schemas.apexops.dev/requirements-v1.json": metadata(524_288, "confidential"),
+    "https://schemas.apexops.dev/requirements-amendment-v1.json": metadata(262_144, "confidential"),
+    "https://schemas.apexops.dev/requirements-change-proposal-v1.json": metadata(524_288, "confidential"),
     "https://schemas.apexops.dev/implementation-intent-v1.json": metadata(524_288),
     "https://schemas.apexops.dev/iac-binding-v1.json": metadata(524_288, "confidential"),
     "https://schemas.apexops.dev/approval-evidence-v1.json": metadata(32_768, "confidential"),
@@ -102,9 +140,14 @@ export const contractMetadata = {
     "https://schemas.apexops.dev/workload-decision-manifest-v1.json": metadata(524_288, "confidential"),
     "https://schemas.apexops.dev/architecture-v1.json": metadata(1_048_576),
     "https://schemas.apexops.dev/cost-estimate-v1.json": metadata(1_048_576, "confidential"),
+    "https://schemas.apexops.dev/review-capture-v1.json": metadata(1_048_576, "confidential"),
+    "https://schemas.apexops.dev/review-request-v1.json": metadata(65_536, "confidential"),
     "https://schemas.apexops.dev/review-findings-v1.json": metadata(1_048_576, "confidential"),
     "https://schemas.apexops.dev/governance-constraints-v1.json": metadata(131_072, "confidential"),
+    "https://schemas.apexops.dev/governance-observation-receipt-v1.json": metadata(16_384, "confidential"),
     "https://schemas.apexops.dev/policy-property-map-v1.json": metadata(2_097_152, "confidential"),
+    "https://schemas.apexops.dev/policy-validation-v1.json": metadata(4_194_304, "confidential"),
+    "https://schemas.apexops.dev/native-validation-receipt-v1.json": metadata(8_404_992, "confidential"),
     "https://schemas.apexops.dev/environment-inputs-v1.json": metadata(524_288, "restricted"),
     "https://schemas.apexops.dev/logical-resource-manifest-v1.json": metadata(2_097_152),
     "https://schemas.apexops.dev/iac-handoff-v1.json": metadata(131_072, "confidential"),

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACxG,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gCAAgC,EAChC,+BAA+B,EAC/B,kCAAkC,EAClC,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,EACzB,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,oBAAoB,EACpB,yBAAyB,EACzB,iBAAiB,EACjB,yBAAyB,EACzB,gCAAgC,EAChC,6BAA6B,EAC7B,kBAAkB,EAClB,+BAA+B,EAC/B,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,gCAAgC,GACjC,MAAM,cAAc,CAAC;AAEtB,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,yBAAyB;IACzB,qBAAqB;IACrB,iBAAiB;IACjB,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,aAAa;IACb,oBAAoB;IACpB,4BAA4B;IAC5B,kBAAkB;IAClB,wBAAwB;IACxB,yBAAyB;IACzB,uBAAuB;IACvB,yBAAyB;IACzB,wBAAwB;IACxB,qBAAqB;IACrB,+BAA+B;IAC/B,kCAAkC;IAClC,yBAAyB;IACzB,wBAAwB;IACxB,2BAA2B;IAC3B,gCAAgC;IAChC,8BAA8B;IAC9B,6BAA6B;IAC7B,2BAA2B;IAC3B,2BAA2B;IAC3B,yBAAyB;IACzB,wBAAwB;IACxB,sBAAsB;IACtB,uBAAuB;IACvB,gCAAgC;IAChC,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,6BAA6B;IAC7B,yBAAyB;IACzB,yBAAyB;IACzB,+BAA+B;IAC/B,kBAAkB;IAClB,gCAAgC;IAChC,gBAAgB;IAChB,qBAAqB;IACrB,iBAAiB;IACjB,iBAAiB;IACjB,8BAA8B;IAC9B,yBAAyB;CACjB,CAAC;AAWX,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,WAAW,GAAwB,UAAU,EAAoB,EAAE,CAAC,CAAC;IACvG,QAAQ;IACR,WAAW;IACX,aAAa,EAAE,WAAW;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAA+C;IAC1E,yDAAyD,EAAE,QAAQ,CAAC,MAAM,CAAC;IAC3E,oDAAoD,EAAE,QAAQ,CAAC,MAAM,CAAC;IACtE,gDAAgD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAClF,mDAAmD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACtF,mDAAmD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACrF,sDAAsD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACxF,2CAA2C,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAC9E,kDAAkD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACrF,2DAA2D,EAAE,QAAQ,CAAC,OAAO,CAAC;IAC9E,iDAAiD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACpF,uDAAuD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACzF,wDAAwD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC7F,sDAAsD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACxF,wDAAwD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC7F,uDAAuD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAC1F,oDAAoD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACvF,+DAA+D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACjG,kEAAkE,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACpG,wDAAwD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC7F,uDAAuD,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IACpF,0DAA0D,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC/F,+DAA+D,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAClG,6DAA6D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC/F,4DAA4D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC9F,0DAA0D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC5F,0DAA0D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC5F,wDAAwD,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IACpF,uDAAuD,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IACnF,qDAAqD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACvF,sDAAsD,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IACvF,gEAAgE,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACnG,kDAAkD,EAAE,QAAQ,CAAC,SAAS,CAAC;IACvE,mDAAmD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACxF,qDAAqD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC1F,4DAA4D,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAC/F,yDAAyD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC9F,wDAAwD,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IACzF,+DAA+D,EAAE,QAAQ,CAAC,SAAS,CAAC;IACpF,iDAAiD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACpF,gEAAgE,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IACjG,8CAA8C,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3E,oDAAoD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACzF,+CAA+C,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACjF,+CAA+C,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACpF,8DAA8D,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3F,wDAAwD,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;CACtF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAA+D,MAAM,CAAC,WAAW,CACtG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CACtD,CAAC;AAEF,MAAM,UAAU,2BAA2B;IACzC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClD,OAAO,CACL,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACtF,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QAC5C,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QACvC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,CACxD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gCAAgC,EAChC,+BAA+B,EAC/B,kCAAkC,EAClC,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,EACzB,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,+BAA+B,EAC/B,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,oCAAoC,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EACjB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,oBAAoB,EACpB,yBAAyB,EACzB,iBAAiB,EACjB,yBAAyB,EACzB,gCAAgC,EAChC,6BAA6B,EAC7B,kBAAkB,EAClB,+BAA+B,EAC/B,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,gCAAgC,GACjC,MAAM,cAAc,CAAC;AAEtB,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,+BAA+B;IAC/B,+BAA+B;IAC/B,6BAA6B;IAC7B,4BAA4B;IAC5B,0BAA0B;IAC1B,6BAA6B;IAC7B,2BAA2B;IAC3B,qBAAqB;IACrB,+BAA+B;IAC/B,yBAAyB;IACzB,qBAAqB;IACrB,iBAAiB;IACjB,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,aAAa;IACb,0BAA0B;IAC1B,oBAAoB;IACpB,6BAA6B;IAC7B,kCAAkC;IAClC,4BAA4B;IAC5B,kBAAkB;IAClB,wBAAwB;IACxB,yBAAyB;IACzB,uBAAuB;IACvB,yBAAyB;IACzB,wBAAwB;IACxB,qBAAqB;IACrB,+BAA+B;IAC/B,kCAAkC;IAClC,yBAAyB;IACzB,wBAAwB;IACxB,2BAA2B;IAC3B,gCAAgC;IAChC,8BAA8B;IAC9B,6BAA6B;IAC7B,2BAA2B;IAC3B,2BAA2B;IAC3B,yBAAyB;IACzB,wBAAwB;IACxB,sBAAsB;IACtB,uBAAuB;IACvB,gCAAgC;IAChC,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,qBAAqB;IACrB,sBAAsB;IACtB,6BAA6B;IAC7B,yBAAyB;IACzB,yBAAyB;IACzB,oCAAoC;IACpC,wBAAwB;IACxB,+BAA+B;IAC/B,+BAA+B;IAC/B,kBAAkB;IAClB,gCAAgC;IAChC,gBAAgB;IAChB,qBAAqB;IACrB,iBAAiB;IACjB,iBAAiB;IACjB,8BAA8B;IAC9B,yBAAyB;CACjB,CAAC;AAWX,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,WAAW,GAAwB,UAAU,EAAoB,EAAE,CAAC,CAAC;IACvG,QAAQ;IACR,WAAW;IACX,aAAa,EAAE,WAAW;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAA+C;IAC1E,+DAA+D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACjG,+DAA+D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACjG,6DAA6D,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAChG,4DAA4D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC9F,0DAA0D,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC/F,6DAA6D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC/F,2DAA2D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC7F,oDAAoD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACtF,+DAA+D,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAClG,yDAAyD,EAAE,QAAQ,CAAC,MAAM,CAAC;IAC3E,oDAAoD,EAAE,QAAQ,CAAC,MAAM,CAAC;IACtE,gDAAgD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAClF,iGAAiG;IACjG,0DAA0D,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC/F,mDAAmD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACtF,mDAAmD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACrF,sDAAsD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACxF,2CAA2C,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAC9E,kDAAkD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACrF,4DAA4D,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAC/F,kEAAkE,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACrG,2DAA2D,EAAE,QAAQ,CAAC,OAAO,CAAC;IAC9E,iDAAiD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACpF,uDAAuD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACzF,wDAAwD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC7F,sDAAsD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACxF,wDAAwD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC7F,uDAAuD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAC1F,oDAAoD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACvF,+DAA+D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACjG,kEAAkE,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACpG,wDAAwD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC7F,uDAAuD,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IACpF,0DAA0D,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC/F,+DAA+D,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAClG,6DAA6D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC/F,4DAA4D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC9F,0DAA0D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC5F,0DAA0D,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAC5F,wDAAwD,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IACpF,uDAAuD,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IACnF,qDAAqD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACvF,sDAAsD,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IACvF,gEAAgE,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACnG,kDAAkD,EAAE,QAAQ,CAAC,SAAS,CAAC;IACvE,mDAAmD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACxF,oDAAoD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACzF,oDAAoD,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACtF,qDAAqD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC1F,4DAA4D,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAC/F,oEAAoE,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACtG,yDAAyD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC9F,uDAAuD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAC5F,+DAA+D,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACpG,wDAAwD,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IACzF,+DAA+D,EAAE,QAAQ,CAAC,SAAS,CAAC;IACpF,iDAAiD,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACpF,gEAAgE,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IACjG,8CAA8C,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3E,oDAAoD,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACzF,+CAA+C,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IACjF,+CAA+C,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACpF,8DAA8D,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3F,wDAAwD,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;CACtF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAA+D,MAAM,CAAC,WAAW,CACtG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CACtD,CAAC;AAEF,MAAM,UAAU,2BAA2B;IACzC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClD,OAAO,CACL,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACtF,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QAC5C,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QACvC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,CACxD,CAAC;AACJ,CAAC"}

package/dist/native-validation.d.ts

@@ -0,0 +1,136 @@
+import { type Static } from "@sinclair/typebox";
+export declare const NATIVE_VALIDATION_COMMANDS: {
+    readonly bicep: readonly [{
+        readonly validatorId: "bicep:format";
+        readonly executable: "bicep";
+        readonly args: readonly ["format", "--pattern", "**/*.bicep"];
+    }, {
+        readonly validatorId: "bicep:build";
+        readonly executable: "bicep";
+        readonly args: readonly ["build", "main.bicep", "--stdout"];
+    }, {
+        readonly validatorId: "bicep:lint";
+        readonly executable: "bicep";
+        readonly args: readonly ["lint", "--pattern", "**/*.bicep", "--no-restore"];
+    }];
+    readonly terraform: readonly [{
+        readonly validatorId: "terraform:init-backend-false";
+        readonly executable: "terraform";
+        readonly args: readonly ["init", "-backend=false", "-input=false"];
+    }, {
+        readonly validatorId: "terraform:format";
+        readonly executable: "terraform";
+        readonly args: readonly ["fmt", "-check"];
+    }, {
+        readonly validatorId: "terraform:validate";
+        readonly executable: "terraform";
+        readonly args: readonly ["validate"];
+    }];
+};
+export declare const STORAGE_PROPERTY_HARDENING_CONTROLS: Readonly<{
+    bicep: readonly (readonly ["properties.allowBlobPublicAccess", false] | readonly ["properties.allowSharedKeyAccess", false] | readonly ["properties.minimumTlsVersion", "TLS1_2"] | readonly ["properties.supportsHttpsTrafficOnly", true])[];
+    terraform: readonly (readonly ["allow_nested_items_to_be_public", false] | readonly ["https_traffic_only_enabled", true] | readonly ["min_tls_version", "TLS1_2"] | readonly ["shared_access_key_enabled", false])[];
+}>;
+export declare const NativeValidationReceiptV1Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    projectId: import("@sinclair/typebox").TString;
+    runId: import("@sinclair/typebox").TString;
+    track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+    sourceHash: import("@sinclair/typebox").TString;
+    treeHash: import("@sinclair/typebox").TString;
+    policyHash: import("@sinclair/typebox").TString;
+    inputHash: import("@sinclair/typebox").TString;
+    policyValidation: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+        sourceHash: import("@sinclair/typebox").TString;
+        policyMapHash: import("@sinclair/typebox").TString;
+        policyMapContentHash: import("@sinclair/typebox").TString;
+        logicalResourceManifestHash: import("@sinclair/typebox").TString;
+        inputHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        results: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            mappingIndex: import("@sinclair/typebox").TInteger;
+            mappingHash: import("@sinclair/typebox").TString;
+            policyAssignmentId: import("@sinclair/typebox").TString;
+            policyDefinitionId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            policyDefinitionReferenceId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            effect: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"deny">, import("@sinclair/typebox").TLiteral<"modify">, import("@sinclair/typebox").TLiteral<"append">, import("@sinclair/typebox").TLiteral<"audit">, import("@sinclair/typebox").TLiteral<"deployIfNotExists">, import("@sinclair/typebox").TLiteral<"disabled">]>;
+            disposition: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"satisfied">, import("@sinclair/typebox").TLiteral<"planned">, import("@sinclair/typebox").TLiteral<"exempt">, import("@sinclair/typebox").TLiteral<"blocked">, import("@sinclair/typebox").TLiteral<"not-applicable">]>;
+            logicalResourceId: import("@sinclair/typebox").TString;
+            propertyPath: import("@sinclair/typebox").TString;
+            expectedValueDigest: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            observedValueDigest: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+            reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"matched">, import("@sinclair/typebox").TLiteral<"value-mismatch">, import("@sinclair/typebox").TLiteral<"missing-property">, import("@sinclair/typebox").TLiteral<"blocked">, import("@sinclair/typebox").TLiteral<"missing-expected-value">, import("@sinclair/typebox").TLiteral<"unverified-exemption">, import("@sinclair/typebox").TLiteral<"unsupported-effect">, import("@sinclair/typebox").TLiteral<"unsupported-path">, import("@sinclair/typebox").TLiteral<"unsupported-expression">, import("@sinclair/typebox").TLiteral<"resource-not-bound">, import("@sinclair/typebox").TLiteral<"resource-not-found">, import("@sinclair/typebox").TLiteral<"ambiguous-resource">, import("@sinclair/typebox").TLiteral<"unsupported-resource">, import("@sinclair/typebox").TLiteral<"invalid-source">, import("@sinclair/typebox").TLiteral<"not-applicable">, import("@sinclair/typebox").TLiteral<"platform-remediated">]>;
+        }>>;
+        receiptHash: import("@sinclair/typebox").TString;
+    }>>;
+    securityBaseline: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        coverage: import("@sinclair/typebox").TLiteral<"bicep-storage-only-baseline-v1">;
+        sourceHash: import("@sinclair/typebox").TString;
+        inputHash: import("@sinclair/typebox").TString;
+        manifestHash: import("@sinclair/typebox").TString;
+        bindingHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        reason: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<string>[]>;
+    }>>;
+    resourceParity: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        coverage: import("@sinclair/typebox").TLiteral<"bicep-symbolic-resource-parity-v1">;
+        sourceHash: import("@sinclair/typebox").TString;
+        manifestHash: import("@sinclair/typebox").TString;
+        bindingHash: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        inputHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"matched">, import("@sinclair/typebox").TLiteral<"coverage-mismatch">, import("@sinclair/typebox").TLiteral<"type-mismatch">, import("@sinclair/typebox").TLiteral<"dependency-mismatch">, import("@sinclair/typebox").TLiteral<"unsupported-resource">, import("@sinclair/typebox").TLiteral<"invalid-source">]>;
+    }>>;
+    policyApplicability: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        status: import("@sinclair/typebox").TLiteral<"no-actionable-mappings">;
+        policyMapContentHash: import("@sinclair/typebox").TString;
+    }>>;
+    storageSecurity: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
+        coverage: import("@sinclair/typebox").TLiteral<"storage-account-property-hardening-v1">;
+        fullBaselineEvaluated: import("@sinclair/typebox").TLiteral<false>;
+        sourceHash: import("@sinclair/typebox").TString;
+        inputHash: import("@sinclair/typebox").TString;
+        bindingHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        results: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            propertyPath: import("@sinclair/typebox").TString;
+            expectedValueDigest: import("@sinclair/typebox").TString;
+            observedValueDigest: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+            reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"matched">, import("@sinclair/typebox").TLiteral<"value-mismatch">, import("@sinclair/typebox").TLiteral<"missing-property">, import("@sinclair/typebox").TLiteral<"blocked">, import("@sinclair/typebox").TLiteral<"missing-expected-value">, import("@sinclair/typebox").TLiteral<"unverified-exemption">, import("@sinclair/typebox").TLiteral<"unsupported-effect">, import("@sinclair/typebox").TLiteral<"unsupported-path">, import("@sinclair/typebox").TLiteral<"unsupported-expression">, import("@sinclair/typebox").TLiteral<"resource-not-bound">, import("@sinclair/typebox").TLiteral<"resource-not-found">, import("@sinclair/typebox").TLiteral<"ambiguous-resource">, import("@sinclair/typebox").TLiteral<"unsupported-resource">, import("@sinclair/typebox").TLiteral<"invalid-source">, import("@sinclair/typebox").TLiteral<"not-applicable">, import("@sinclair/typebox").TLiteral<"platform-remediated">]>;
+        }>>;
+    }>>>;
+    storageDiagnostics: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
+        coverage: import("@sinclair/typebox").TLiteral<"bicep-storage-service-diagnostics-v1">;
+        fullBaselineEvaluated: import("@sinclair/typebox").TLiteral<false>;
+        sourceHash: import("@sinclair/typebox").TString;
+        inputHash: import("@sinclair/typebox").TString;
+        bindingHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        reason: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<string>[]>;
+    }>>>;
+    outcome: import("@sinclair/typebox").TLiteral<"pass">;
+    commands: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        validatorId: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep:format">, import("@sinclair/typebox").TLiteral<"bicep:build">, import("@sinclair/typebox").TLiteral<"bicep:lint">, import("@sinclair/typebox").TLiteral<"terraform:init-backend-false">, import("@sinclair/typebox").TLiteral<"terraform:format">, import("@sinclair/typebox").TLiteral<"terraform:validate">]>;
+        commandHash: import("@sinclair/typebox").TString;
+        exitCode: import("@sinclair/typebox").TLiteral<0>;
+        signal: import("@sinclair/typebox").TNull;
+        timedOut: import("@sinclair/typebox").TLiteral<false>;
+        outputTruncated: import("@sinclair/typebox").TLiteral<false>;
+    }>>;
+    receiptHash: import("@sinclair/typebox").TString;
+}>;
+export type NativeValidationReceiptV1 = Static<typeof NativeValidationReceiptV1Schema>;
+export type NativeValidationBinding = Pick<NativeValidationReceiptV1, "projectId" | "runId" | "track" | "sourceHash" | "treeHash" | "policyHash" | "inputHash">;
+export declare function calculateNativeValidationCommandHash(command: {
+    readonly executable: string;
+    readonly args: readonly string[];
+}): string;
+export declare function calculateNativeValidationReceiptHash(receipt: Omit<NativeValidationReceiptV1, "receiptHash">): string;
+export declare function hasValidNativeValidationReceipt(value: unknown, binding: NativeValidationBinding): value is NativeValidationReceiptV1;
+//# sourceMappingURL=native-validation.d.ts.map

package/dist/native-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-validation.d.ts","sourceRoot":"","sources":["../src/native-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAgBtD,eAAO,MAAM,0BAA0B;aACrC,KAAK;iBACD,WAAW,EAAE,cAAc;iBAAE,UAAU,EAAE,OAAO;iBAAE,IAAI,YAAG,QAAQ,EAAE,WAAW,EAAE,YAAY;;iBAC5F,WAAW,EAAE,aAAa;iBAAE,UAAU,EAAE,OAAO;iBAAE,IAAI,YAAG,OAAO,EAAE,YAAY,EAAE,UAAU;;iBACzF,WAAW,EAAE,YAAY;iBAAE,UAAU,EAAE,OAAO;iBAAE,IAAI,YAAG,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc;;aAE5G,SAAS;iBAEL,WAAW,EAAE,8BAA8B;iBAC3C,UAAU,EAAE,WAAW;iBACvB,IAAI,YAAG,MAAM,EAAE,gBAAgB,EAAE,cAAc;;iBAE/C,WAAW,EAAE,kBAAkB;iBAAE,UAAU,EAAE,WAAW;iBAAE,IAAI,YAAG,KAAK,EAAE,QAAQ;;iBAChF,WAAW,EAAE,oBAAoB;iBAAE,UAAU,EAAE,WAAW;iBAAE,IAAI,YAAG,UAAU;;CAEzE,CAAC;AAWX,eAAO,MAAM,mCAAmC;;;EAa9C,CAAC;AA4BH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4H3C,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACvF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,yBAAyB,EACzB,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,YAAY,GAAG,WAAW,CACzF,CAAC;AAEF,wBAAgB,oCAAoC,CAAC,OAAO,EAAE;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,GAAG,MAAM,CAET;AAED,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,IAAI,CAAC,yBAAyB,EAAE,aAAa,CAAC,GAAG,MAAM,CAEpH;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,uBAAuB,GAC/B,KAAK,IAAI,yBAAyB,CAuJpC"}

package/dist/native-validation.js

@@ -0,0 +1,276 @@
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+import { ContractVersionSchema, IacToolSchema, NonEmptyStringSchema, ProjectIdSchema, RunIdSchema, Sha256Schema, } from "./common.js";
+import { calculatePolicyValidationDigest, hasValidPolicyValidation, PolicyValidationV1Schema, } from "./policy-validation.js";
+export const NATIVE_VALIDATION_COMMANDS = {
+    bicep: [
+        { validatorId: "bicep:format", executable: "bicep", args: ["format", "--pattern", "**/*.bicep"] },
+        { validatorId: "bicep:build", executable: "bicep", args: ["build", "main.bicep", "--stdout"] },
+        { validatorId: "bicep:lint", executable: "bicep", args: ["lint", "--pattern", "**/*.bicep", "--no-restore"] },
+    ],
+    terraform: [
+        {
+            validatorId: "terraform:init-backend-false",
+            executable: "terraform",
+            args: ["init", "-backend=false", "-input=false"],
+        },
+        { validatorId: "terraform:format", executable: "terraform", args: ["fmt", "-check"] },
+        { validatorId: "terraform:validate", executable: "terraform", args: ["validate"] },
+    ],
+};
+for (const commands of Object.values(NATIVE_VALIDATION_COMMANDS)) {
+    for (const command of commands) {
+        Object.freeze(command.args);
+        Object.freeze(command);
+    }
+    Object.freeze(commands);
+}
+Object.freeze(NATIVE_VALIDATION_COMMANDS);
+export const STORAGE_PROPERTY_HARDENING_CONTROLS = Object.freeze({
+    bicep: Object.freeze([
+        Object.freeze(["properties.minimumTlsVersion", "TLS1_2"]),
+        Object.freeze(["properties.supportsHttpsTrafficOnly", true]),
+        Object.freeze(["properties.allowBlobPublicAccess", false]),
+        Object.freeze(["properties.allowSharedKeyAccess", false]),
+    ]),
+    terraform: Object.freeze([
+        Object.freeze(["min_tls_version", "TLS1_2"]),
+        Object.freeze(["https_traffic_only_enabled", true]),
+        Object.freeze(["allow_nested_items_to_be_public", false]),
+        Object.freeze(["shared_access_key_enabled", false]),
+    ]),
+});
+const policyResultProperties = PolicyValidationV1Schema.properties.results.items.properties;
+const storageSecurityObservation = Type.Object({
+    coverage: Type.Literal("storage-account-property-hardening-v1"),
+    fullBaselineEvaluated: Type.Literal(false),
+    sourceHash: Sha256Schema,
+    inputHash: Sha256Schema,
+    bindingHash: Sha256Schema,
+    outcome: policyResultProperties.outcome,
+    results: Type.Array(Type.Object({
+        propertyPath: NonEmptyStringSchema,
+        expectedValueDigest: Sha256Schema,
+        observedValueDigest: Type.Optional(Sha256Schema),
+        outcome: policyResultProperties.outcome,
+        reason: policyResultProperties.reason,
+    }, { additionalProperties: false }), { minItems: 4, maxItems: 4 }),
+}, { additionalProperties: false });
+export const NativeValidationReceiptV1Schema = Type.Object({
+    schemaVersion: ContractVersionSchema,
+    projectId: ProjectIdSchema,
+    runId: RunIdSchema,
+    track: IacToolSchema,
+    sourceHash: Sha256Schema,
+    treeHash: Sha256Schema,
+    policyHash: Sha256Schema,
+    inputHash: Sha256Schema,
+    policyValidation: Type.Optional(PolicyValidationV1Schema),
+    securityBaseline: Type.Optional(Type.Object({
+        coverage: Type.Literal("bicep-storage-only-baseline-v1"),
+        sourceHash: Sha256Schema,
+        inputHash: Sha256Schema,
+        manifestHash: Sha256Schema,
+        bindingHash: Sha256Schema,
+        outcome: Type.Union([Type.Literal("pass"), Type.Literal("fail"), Type.Literal("unsupported")]),
+        reason: Type.Union([
+            "matched",
+            "resource-parity",
+            "unsupported-resource",
+            "credential-content",
+            "storage-controls",
+            "diagnostic-routing",
+        ].map((reason) => Type.Literal(reason))),
+    }, { additionalProperties: false })),
+    resourceParity: Type.Optional(Type.Object({
+        coverage: Type.Literal("bicep-symbolic-resource-parity-v1"),
+        sourceHash: Sha256Schema,
+        manifestHash: Sha256Schema,
+        bindingHash: Type.Optional(Sha256Schema),
+        inputHash: Sha256Schema,
+        outcome: Type.Union([Type.Literal("pass"), Type.Literal("fail"), Type.Literal("unsupported")]),
+        reason: Type.Union([
+            Type.Literal("matched"),
+            Type.Literal("coverage-mismatch"),
+            Type.Literal("type-mismatch"),
+            Type.Literal("dependency-mismatch"),
+            Type.Literal("unsupported-resource"),
+            Type.Literal("invalid-source"),
+        ]),
+    }, { additionalProperties: false })),
+    policyApplicability: Type.Optional(Type.Object({
+        status: Type.Literal("no-actionable-mappings"),
+        policyMapContentHash: Sha256Schema,
+    }, { additionalProperties: false })),
+    storageSecurity: Type.Optional(Type.Record(NonEmptyStringSchema, storageSecurityObservation, { maxProperties: 1000 })),
+    storageDiagnostics: Type.Optional(Type.Record(NonEmptyStringSchema, Type.Object({
+        coverage: Type.Literal("bicep-storage-service-diagnostics-v1"),
+        fullBaselineEvaluated: Type.Literal(false),
+        sourceHash: Sha256Schema,
+        inputHash: Sha256Schema,
+        bindingHash: Sha256Schema,
+        outcome: Type.Union([Type.Literal("pass"), Type.Literal("fail"), Type.Literal("unsupported")]),
+        reason: Type.Union([
+            "matched",
+            "invalid-source",
+            "ambiguous-or-unbound-account",
+            "unsupported-account",
+            "missing-or-ambiguous-service",
+            "unsupported-service",
+            "missing-or-ambiguous-diagnostics",
+            "unsupported-diagnostics",
+            "workspace-mismatch",
+            "missing-categories",
+            "disabled-or-missing-categories",
+        ].map((reason) => Type.Literal(reason))),
+    }, { additionalProperties: false }), { maxProperties: 1000 })),
+    outcome: Type.Literal("pass"),
+    commands: Type.Array(Type.Object({
+        validatorId: Type.Union([
+            Type.Literal("bicep:format"),
+            Type.Literal("bicep:build"),
+            Type.Literal("bicep:lint"),
+            Type.Literal("terraform:init-backend-false"),
+            Type.Literal("terraform:format"),
+            Type.Literal("terraform:validate"),
+        ]),
+        commandHash: Sha256Schema,
+        exitCode: Type.Literal(0),
+        signal: Type.Null(),
+        timedOut: Type.Literal(false),
+        outputTruncated: Type.Literal(false),
+    }, { additionalProperties: false }), { minItems: 1, maxItems: 3 }),
+    receiptHash: Sha256Schema,
+}, { $id: "https://schemas.apexops.dev/native-validation-receipt-v1.json", additionalProperties: false });
+export function calculateNativeValidationCommandHash(command) {
+    return calculatePolicyValidationDigest({ executable: command.executable, args: command.args });
+}
+export function calculateNativeValidationReceiptHash(receipt) {
+    return calculatePolicyValidationDigest(receipt);
+}
+export function hasValidNativeValidationReceipt(value, binding) {
+    try {
+        if (!Value.Check(NativeValidationReceiptV1Schema, value))
+            return false;
+        const { receiptHash, ...receipt } = value;
+        const keys = ["projectId", "runId", "track", "sourceHash", "treeHash", "policyHash", "inputHash"];
+        if (keys.some((key) => receipt[key] !== binding[key]))
+            return false;
+        if (receipt.policyApplicability !== undefined &&
+            (receipt.policyValidation !== undefined ||
+                receipt.policyApplicability.policyMapContentHash !== receipt.policyHash))
+            return false;
+        const storageInputHash = receipt.storageSecurity === undefined ? undefined : Object.values(receipt.storageSecurity)[0]?.inputHash;
+        const parity = receipt.resourceParity;
+        const baseline = receipt.securityBaseline;
+        if (baseline !== undefined &&
+            (receipt.track !== "bicep" ||
+                parity === undefined ||
+                baseline.sourceHash !== receipt.sourceHash ||
+                baseline.inputHash !== parity.inputHash ||
+                baseline.manifestHash !== parity.manifestHash ||
+                baseline.bindingHash !== parity.bindingHash ||
+                (baseline.outcome === "pass" && (baseline.reason !== "matched" || parity.outcome !== "pass")) ||
+                (baseline.reason === "matched" && baseline.outcome !== "pass") ||
+                (baseline.reason === "resource-parity" && (parity.outcome === "pass" || baseline.outcome !== parity.outcome)) ||
+                (baseline.reason === "unsupported-resource" && baseline.outcome !== "unsupported") ||
+                (["credential-content", "storage-controls"].includes(baseline.reason) && baseline.outcome !== "fail") ||
+                (baseline.reason === "diagnostic-routing" && baseline.outcome === "pass")))
+            return false;
+        if (receipt.storageDiagnostics !== undefined) {
+            const observations = Object.values(receipt.storageDiagnostics);
+            const inputHash = observations[0]?.inputHash;
+            if (receipt.track !== "bicep" ||
+                observations.some((observation) => observation.sourceHash !== receipt.sourceHash ||
+                    observation.inputHash !== inputHash ||
+                    (storageInputHash !== undefined && observation.inputHash !== storageInputHash) ||
+                    (parity !== undefined && observation.inputHash !== parity.inputHash) ||
+                    (receipt.policyValidation !== undefined && observation.inputHash !== receipt.policyValidation.inputHash) ||
+                    observation.outcome !==
+                        (observation.reason === "matched"
+                            ? "pass"
+                            : [
+                                "invalid-source",
+                                "ambiguous-or-unbound-account",
+                                "unsupported-account",
+                                "unsupported-service",
+                                "unsupported-diagnostics",
+                            ].includes(observation.reason)
+                                ? "unsupported"
+                                : "fail")))
+                return false;
+        }
+        if (parity !== undefined &&
+            (receipt.track !== "bicep" ||
+                parity.sourceHash !== receipt.sourceHash ||
+                (storageInputHash !== undefined && parity.inputHash !== storageInputHash) ||
+                (receipt.policyValidation !== undefined && parity.inputHash !== receipt.policyValidation.inputHash) ||
+                parity.outcome !==
+                    (parity.reason === "matched"
+                        ? "pass"
+                        : ["unsupported-resource", "invalid-source"].includes(parity.reason)
+                            ? "unsupported"
+                            : "fail")))
+            return false;
+        if (receipt.storageSecurity !== undefined &&
+            (receipt.track !== "bicep" ||
+                Object.values(receipt.storageSecurity).some((observation) => observation.sourceHash !== receipt.sourceHash ||
+                    observation.inputHash !== storageInputHash ||
+                    (receipt.policyValidation !== undefined && observation.inputHash !== receipt.policyValidation.inputHash) ||
+                    observation.outcome !==
+                        (observation.results.some(({ outcome }) => outcome === "fail")
+                            ? "fail"
+                            : observation.results.some(({ outcome }) => outcome === "unsupported")
+                                ? "unsupported"
+                                : "pass") ||
+                    observation.results.some((result, index) => {
+                        const control = STORAGE_PROPERTY_HARDENING_CONTROLS.bicep[index];
+                        if (control === undefined ||
+                            result.propertyPath !== control[0] ||
+                            result.expectedValueDigest !== calculatePolicyValidationDigest(control[1]))
+                            return true;
+                        if (result.reason === "matched")
+                            return result.outcome !== "pass" || result.expectedValueDigest !== result.observedValueDigest;
+                        if (result.reason === "value-mismatch")
+                            return (result.outcome !== "fail" ||
+                                result.observedValueDigest === undefined ||
+                                result.expectedValueDigest === result.observedValueDigest);
+                        if (result.reason === "missing-property")
+                            return result.outcome !== "fail" || result.observedValueDigest !== undefined;
+                        return (![
+                            "unsupported-expression",
+                            "resource-not-bound",
+                            "resource-not-found",
+                            "ambiguous-resource",
+                            "unsupported-resource",
+                            "invalid-source",
+                        ].includes(result.reason) ||
+                            result.outcome !== "unsupported" ||
+                            result.observedValueDigest !== undefined);
+                    }))))
+            return false;
+        const policy = receipt.policyValidation;
+        if (policy !== undefined &&
+            (policy.projectId !== receipt.projectId ||
+                policy.runId !== receipt.runId ||
+                policy.outcome !== "pass" ||
+                !hasValidPolicyValidation(policy, {
+                    track: receipt.track,
+                    sourceHash: receipt.sourceHash,
+                    policyMapHash: receipt.policyHash,
+                    policyMapContentHash: policy.policyMapContentHash,
+                    logicalResourceManifestHash: policy.logicalResourceManifestHash,
+                    inputHash: policy.inputHash,
+                })))
+            return false;
+        const expected = NATIVE_VALIDATION_COMMANDS[receipt.track];
+        return (receipt.commands.length === expected.length &&
+            expected.every((command, index) => receipt.commands[index]?.validatorId === command.validatorId &&
+                receipt.commands[index]?.commandHash === calculateNativeValidationCommandHash(command)) &&
+            receiptHash === calculateNativeValidationReceiptHash(receipt));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=native-validation.js.map

package/dist/native-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-validation.js","sourceRoot":"","sources":["../src/native-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,WAAW,EACX,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,+BAA+B,EAC/B,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,KAAK,EAAE;QACL,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE;QACjG,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE;QAC9F,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE;KAC9G;IACD,SAAS,EAAE;QACT;YACE,WAAW,EAAE,8BAA8B;YAC3C,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,cAAc,CAAC;SACjD;QACD,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE;QACrF,EAAE,WAAW,EAAE,oBAAoB,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE;KACnF;CACO,CAAC;AAEX,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC;IACjE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC;AACD,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC,CAAC,8BAA8B,EAAE,QAAQ,CAAU,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC,qCAAqC,EAAE,IAAI,CAAU,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,CAAC,kCAAkC,EAAE,KAAK,CAAU,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,iCAAiC,EAAE,KAAK,CAAU,CAAC;KACnE,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,CAAC,iBAAiB,EAAE,QAAQ,CAAU,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,4BAA4B,EAAE,IAAI,CAAU,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,iCAAiC,EAAE,KAAK,CAAU,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC,2BAA2B,EAAE,KAAK,CAAU,CAAC;KAC7D,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,wBAAwB,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;AAC5F,MAAM,0BAA0B,GAAG,IAAI,CAAC,MAAM,CAC5C;IACE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,uCAAuC,CAAC;IAC/D,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,YAAY;IACvB,WAAW,EAAE,YAAY;IACzB,OAAO,EAAE,sBAAsB,CAAC,OAAO;IACvC,OAAO,EAAE,IAAI,CAAC,KAAK,CACjB,IAAI,CAAC,MAAM,CACT;QACE,YAAY,EAAE,oBAAoB;QAClC,mBAAmB,EAAE,YAAY;QACjC,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAChD,OAAO,EAAE,sBAAsB,CAAC,OAAO;QACvC,MAAM,EAAE,sBAAsB,CAAC,MAAM;KACtC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,EACD,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAC7B;CACF,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC,MAAM,CACxD;IACE,aAAa,EAAE,qBAAqB;IACpC,SAAS,EAAE,eAAe;IAC1B,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,aAAa;IACpB,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,YAAY;IACtB,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,YAAY;IACvB,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACzD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAC7B,IAAI,CAAC,MAAM,CACT;QACE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC;QACxD,UAAU,EAAE,YAAY;QACxB,SAAS,EAAE,YAAY;QACvB,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAC9F,MAAM,EAAE,IAAI,CAAC,KAAK,CAChB;YACE,SAAS;YACT,iBAAiB;YACjB,sBAAsB;YACtB,oBAAoB;YACpB,kBAAkB;YAClB,oBAAoB;SACrB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CACxC;KACF,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CACF;IACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC3B,IAAI,CAAC,MAAM,CACT;QACE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,mCAAmC,CAAC;QAC3D,UAAU,EAAE,YAAY;QACxB,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACxC,SAAS,EAAE,YAAY;QACvB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAC9F,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC/B,CAAC;KACH,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAChC,IAAI,CAAC,MAAM,CACT;QACE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC;QAC9C,oBAAoB,EAAE,YAAY;KACnC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CACF;IACD,eAAe,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,0BAA0B,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CACvF;IACD,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,MAAM,CACT,oBAAoB,EACpB,IAAI,CAAC,MAAM,CACT;QACE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,sCAAsC,CAAC;QAC9D,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,UAAU,EAAE,YAAY;QACxB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAC9F,MAAM,EAAE,IAAI,CAAC,KAAK,CAChB;YACE,SAAS;YACT,gBAAgB;YAChB,8BAA8B;YAC9B,qBAAqB;YACrB,8BAA8B;YAC9B,qBAAqB;YACrB,kCAAkC;YAClC,yBAAyB;YACzB,oBAAoB;YACpB,oBAAoB;YACpB,gCAAgC;SACjC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CACxC;KACF,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,EACD,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF;IACD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAClB,IAAI,CAAC,MAAM,CACT;QACE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;SACnC,CAAC;QACF,WAAW,EAAE,YAAY;QACzB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;QACnB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7B,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;KACrC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,EACD,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAC7B;IACD,WAAW,EAAE,YAAY;CAC1B,EACD,EAAE,GAAG,EAAE,+DAA+D,EAAE,oBAAoB,EAAE,KAAK,EAAE,CACtG,CAAC;AAQF,MAAM,UAAU,oCAAoC,CAAC,OAGpD;IACC,OAAO,+BAA+B,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,OAAuD;IAC1G,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAc,EACd,OAAgC;IAEhC,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvE,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;QAC3G,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACpE,IACE,OAAO,CAAC,mBAAmB,KAAK,SAAS;YACzC,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACrC,OAAO,CAAC,mBAAmB,CAAC,oBAAoB,KAAK,OAAO,CAAC,UAAU,CAAC;YAE1E,OAAO,KAAK,CAAC;QACf,MAAM,gBAAgB,GACpB,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;QAC3G,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAC1C,IACE,QAAQ,KAAK,SAAS;YACtB,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO;gBACxB,MAAM,KAAK,SAAS;gBACpB,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;gBAC1C,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBACvC,QAAQ,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;gBAC7C,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAC3C,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;gBAC7F,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC;gBAC9D,CAAC,QAAQ,CAAC,MAAM,KAAK,iBAAiB,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7G,CAAC,QAAQ,CAAC,MAAM,KAAK,sBAAsB,IAAI,QAAQ,CAAC,OAAO,KAAK,aAAa,CAAC;gBAClF,CAAC,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC;gBACrG,CAAC,QAAQ,CAAC,MAAM,KAAK,oBAAoB,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;YAE5E,OAAO,KAAK,CAAC;QACf,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;YAC7C,IACE,OAAO,CAAC,KAAK,KAAK,OAAO;gBACzB,YAAY,CAAC,IAAI,CACf,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;oBAC7C,WAAW,CAAC,SAAS,KAAK,SAAS;oBACnC,CAAC,gBAAgB,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,KAAK,gBAAgB,CAAC;oBAC9E,CAAC,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC;oBACpE,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,KAAK,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC;oBACxG,WAAW,CAAC,OAAO;wBACjB,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS;4BAC/B,CAAC,CAAC,MAAM;4BACR,CAAC,CAAC;gCACI,gBAAgB;gCAChB,8BAA8B;gCAC9B,qBAAqB;gCACrB,qBAAqB;gCACrB,yBAAyB;6BAC1B,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC;gCAChC,CAAC,CAAC,aAAa;gCACf,CAAC,CAAC,MAAM,CAAC,CAClB;gBAED,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IACE,MAAM,KAAK,SAAS;YACpB,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO;gBACxB,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;gBACxC,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,gBAAgB,CAAC;gBACzE,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBACnG,MAAM,CAAC,OAAO;oBACZ,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;wBAC1B,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;4BAClE,CAAC,CAAC,aAAa;4BACf,CAAC,CAAC,MAAM,CAAC,CAAC;YAElB,OAAO,KAAK,CAAC;QACf,IACE,OAAO,CAAC,eAAe,KAAK,SAAS;YACrC,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO;gBACxB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CACzC,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;oBAC7C,WAAW,CAAC,SAAS,KAAK,gBAAgB;oBAC1C,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,KAAK,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC;oBACxG,WAAW,CAAC,OAAO;wBACjB,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC;4BAC5D,CAAC,CAAC,MAAM;4BACR,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,aAAa,CAAC;gCACpE,CAAC,CAAC,aAAa;gCACf,CAAC,CAAC,MAAM,CAAC;oBACf,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;wBACzC,MAAM,OAAO,GAAG,mCAAmC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBACjE,IACE,OAAO,KAAK,SAAS;4BACrB,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC;4BAClC,MAAM,CAAC,mBAAmB,KAAK,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;4BAE1E,OAAO,IAAI,CAAC;wBACd,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;4BAC7B,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,CAAC;wBAChG,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB;4BACpC,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,MAAM;gCACzB,MAAM,CAAC,mBAAmB,KAAK,SAAS;gCACxC,MAAM,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,CAC1D,CAAC;wBACJ,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB;4BACtC,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,CAAC;wBAC/E,OAAO,CACL,CAAC;4BACC,wBAAwB;4BACxB,oBAAoB;4BACpB,oBAAoB;4BACpB,oBAAoB;4BACpB,sBAAsB;4BACtB,gBAAgB;yBACjB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;4BACzB,MAAM,CAAC,OAAO,KAAK,aAAa;4BAChC,MAAM,CAAC,mBAAmB,KAAK,SAAS,CACzC,CAAC;oBACJ,CAAC,CAAC,CACL,CAAC;YAEJ,OAAO,KAAK,CAAC;QACf,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACxC,IACE,MAAM,KAAK,SAAS;YACpB,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;gBACrC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;gBAC9B,MAAM,CAAC,OAAO,KAAK,MAAM;gBACzB,CAAC,wBAAwB,CAAC,MAAM,EAAE;oBAChC,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,aAAa,EAAE,OAAO,CAAC,UAAU;oBACjC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;oBAC/D,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC,CAAC;YAEL,OAAO,KAAK,CAAC;QACf,MAAM,QAAQ,GAAG,0BAA0B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3D,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAC3C,QAAQ,CAAC,KAAK,CACZ,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACjB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW;gBAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,KAAK,oCAAoC,CAAC,OAAO,CAAC,CACzF;YACD,WAAW,KAAK,oCAAoC,CAAC,OAAO,CAAC,CAC9D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}