@behavproof/cli 0.0.0-stage → 0.1.0

package/dist/index.js

@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+import { parseArgs } from 'node:util';
+import { resolve, extname } from 'node:path';
+import { canonicalJson, hash, safeRead, safeReadJson } from '@behavproof/core';
+import { detectProject, gitDiff } from '@behavproof/adapter-reports';
+import { renderDocuments, analyzeImpact, reconcile } from '@behavproof/contract-registry';
+import { check } from './check.js';
+import { formatReport } from './report.js';
+import { executeFormal } from './formal.js';
+import { config, exists, fileList, registry, git, writeScoped, select, ref } from './project.js';
+const help = `BehavProof 0.1.0\nCommands: init, doctor, check, explain <rule>, baseline create, contracts discover|list|validate, intent diff, impact, docs generate|check, formal discover|check|replay\ncheck reads artifacts; it never runs tests. Gate requires --trust-root outside project.\nOptions: --config --base --head --profile --mode audit|gate --format console|json|markdown --output --trust-root --dry-run --check --help --version\n`;
+async function main() {
+    const { values, positionals } = parseArgs({ allowPositionals: true, strict: true, options: { config: { type: 'string' }, base: { type: 'string' }, head: { type: 'string' }, profile: { type: 'string' }, mode: { type: 'string' }, format: { type: 'string' }, output: { type: 'string' }, 'trust-root': { type: 'string' }, 'dry-run': { type: 'boolean' }, check: { type: 'boolean' }, help: { type: 'boolean' }, version: { type: 'boolean' }, root: { type: 'string' }, model: { type: 'string' } } });
+    const root = resolve(values.root ?? process.cwd()), [command, sub, ...rest] = positionals;
+    if (values.version) {
+        process.stdout.write('0.1.0\n');
+        return 0;
+    }
+    if (values.help || !command) {
+        process.stdout.write(help);
+        return 0;
+    }
+    if (rest.length)
+        throw Error('Unexpected command arguments');
+    const emit = async (text) => { if (values.output)
+        await writeScoped(root, values.output, text);
+    else
+        process.stdout.write(text); };
+    if (command === 'init') {
+        if (sub)
+            throw Error('Unexpected init argument');
+        const path = values.config ?? 'behavproof.config.json', found = await exists(root, path), detection = await detectProject(root);
+        const proposal = { schemaVersion: 1, mode: 'audit', profile: 'standard', git: { base: 'origin/main' }, reports: { vitest: '.behavproof/input/vitest.json', coverage: 'coverage/lcov.info', mutation: 'reports/mutation/mutation.json' }, executionManifests: [], contracts: { enabled: false, sources: [] } };
+        if (!values['dry-run'] && !found)
+            await writeScoped(root, path, JSON.stringify(proposal, null, 2) + '\n', true);
+        process.stdout.write(JSON.stringify({ path, action: found ? 'preserve' : values['dry-run'] ? 'would-create' : 'created', detection, notice: 'No package installation, workflow edits or separate specification documents are required.' }, null, 2) + '\n');
+        return 0;
+    }
+    if (command === 'doctor') {
+        if (sub)
+            throw Error('Unexpected doctor argument');
+        const detection = await detectProject(root);
+        await config(root, values.config, values.profile);
+        await emit(JSON.stringify({ node: process.version, ...detection, trust: 'External producer and protection authority must be configured separately.' }, null, 2) + '\n');
+        return detection.support === 'single-package' ? 0 : 1;
+    }
+    if (command === 'explain') {
+        const explanations = { testResult: 'Vitest assertions must complete; skipped/zero tests or unverified producers remain unknown.', changedLineCoverage: 'Changed-line coverage requires current authenticated LCOV, complete executable-line scope and source mapping. Missing data is unknown; collect coverage in the verified execution.', mutationScore: 'Score = (Killed + Timeout) / (Killed + Timeout + Survived + NoCoverage). Missing mapping or insufficient comparable mutants is unknown.', pipelineIntegrity: 'A final always() gate checks all upstream results and artifacts. External issuer-bound branch protection requires independent verification; unavailable authority is unknown.', contractExecution: 'Declared contracts require verified runtime binding and all required cases. A fake callback can pass comparisons; production reach and sensitivity remain separate unknown claims.', intentApproval: 'Intent and contract transitions require current content-bound human approval from a protected authority.', policyProtection: 'Protected policy is supplied through a trusted external host and cannot be weakened by project configuration.' };
+        Object.assign(explanations, { productionTargetObserved: 'Require case-scoped authenticated calls to the registered real production target; comparisons alone cannot prove reach.', mutationSensitivityObserved: 'Require an actual failed comparison after the registered case-specific fault; retain it separately from ordinary test evidence.', negativeCases: 'Require the registered negative cases to execute and compare their retained expectations.', changeImpact: 'Analyze Git changes and the static dependency graph; unresolved critical impact blocks, standard warns. This does not prove behavioral equivalence.' });
+        const key = (sub ?? '').replace(/-([a-z])/g, (_, c) => c.toUpperCase());
+        if (!explanations[key])
+            throw Error('Unknown rule');
+        await emit(explanations[key] + '\n');
+        return 0;
+    }
+    if (command === 'formal') {
+        const result = await executeFormal(root, sub ?? '', values);
+        await emit(canonicalJson(result.report) + '\n');
+        return result.exitCode;
+    }
+    if (command === 'check') {
+        if (sub)
+            throw Error('Unexpected check argument');
+        const options = Object.fromEntries(Object.entries(values).filter(([key, value]) => typeof value === 'string' && ['config', 'profile', 'mode', 'base', 'head', 'trust-root'].includes(key)));
+        const report = await check(root, options);
+        await emit(formatReport(report, values.format ?? 'console'));
+        return report.exitCode;
+    }
+    const cfg = await config(root, values.config, values.profile), files = await fileList(root), sha = (await git(root, ['rev-parse', '--verify', 'HEAD^{commit}'])).trim(), current = await registry(root, cfg, files, sha);
+    if (command === 'contracts') {
+        if (!['discover', 'list', 'validate'].includes(sub ?? ''))
+            throw Error('Expected contracts discover|list|validate');
+        await emit(canonicalJson(current) + '\n');
+        return sub === 'validate' && current.discoveryDiagnostics?.length ? 1 : 0;
+    }
+    if (command === 'baseline' && sub === 'create') {
+        await writeScoped(root, values.output ?? '.behavproof/baseline.json', canonicalJson(current) + '\n', true);
+        if (!values.output)
+            process.stdout.write('Created .behavproof/baseline.json; this is proposed data until registered by a trusted host.\n');
+        return 0;
+    }
+    if (command === 'docs') {
+        const action = values.check ? 'check' : sub ?? 'generate';
+        if (!['generate', 'check'].includes(action))
+            throw Error('Expected docs generate|check');
+        let generated;
+        if (values['trust-root']) {
+            const report = await check(root, { ...(values.config ? { config: values.config } : {}), ...(values.profile ? { profile: values.profile } : {}), ...(values.head ? { head: values.head } : {}), base: values.base ?? 'HEAD', mode: 'audit', 'trust-root': values['trust-root'] });
+            const evidence = report.documentEvidence;
+            generated = renderDocuments(evidence.registry, evidence.rows, { approvals: report.approvals, expectedBindings: evidence.bindings, verifyEvidence: row => evidence.authenticatedRows.includes(hash(row)), verifyApproval: approval => evidence.authenticatedApprovals.includes(hash(approval)) });
+        }
+        else {
+            const rows = [];
+            for (const manifestRef of select(files, cfg.executionManifests)) {
+                const { ExecutionManifestSchema } = await import('@behavproof/core');
+                const manifest = ExecutionManifestSchema.parse(await safeReadJson(root, manifestRef));
+                for (const artifact of manifest.artifacts)
+                    if (artifact.kind === 'contract_report' && await exists(root, artifact.ref)) {
+                        const data = await safeReadJson(root, artifact.ref);
+                        if (!Array.isArray(data?.contracts))
+                            throw Error('Malformed contract report');
+                        rows.push(...data.contracts);
+                    }
+            }
+            generated = renderDocuments(current, rows);
+        }
+        const extension = values.output ? extname(values.output) : '', single = extension ? extension === '.md' ? 'markdown' : extension === '.html' ? 'html' : extension === '.json' ? 'json' : undefined : undefined;
+        if (extension && !single)
+            throw Error('Unsupported document extension');
+        const directory = values.output && !extension ? values.output : cfg.contracts.documents.output;
+        const paths = single ? { [single]: values.output } : { markdown: `${directory}/behavior.md`, html: `${directory}/behavior.html`, json: `${directory}/behavior.json` };
+        let outdated = false;
+        for (const [format, path] of Object.entries(paths)) {
+            const content = generated[format];
+            if (action === 'generate')
+                await writeScoped(root, path, content);
+            else if (!await exists(root, path) || (await safeRead(root, path)).toString('utf8') !== content)
+                outdated = true;
+        }
+        process.stdout.write(outdated ? 'DOCUMENT_OUTDATED: regenerate documents\n' : `Documents ${action === 'generate' ? 'generated' : 'current'}; declarations alone do not prove execution.\n`);
+        return outdated ? 1 : 0;
+    }
+    if (command === 'impact' || command === 'intent' && sub === 'diff') {
+        const diff = await gitDiff(root, ref(values.base ?? cfg.git.base), ref(values.head ?? 'HEAD'));
+        if (diff.headSha !== sha)
+            throw Error('The selected --head must be checked out for static analysis');
+        if (command === 'impact') {
+            const sources = {};
+            for (const p of files.filter(p => /\.[cm]?[jt]sx?$/.test(p)))
+                sources[p] = (await safeRead(root, p)).toString('utf8');
+            const mappings = {};
+            for (const c of current.contracts) {
+                const path = c.sourceRef.replace(/:\d+(?::\d+)?$/, '');
+                (mappings[path] ??= []).push(c.id);
+            }
+            await emit(canonicalJson({ ...analyzeImpact(sources, diff.files.map(f => f.path), mappings), diff }) + '\n');
+            return 0;
+        }
+        const baseFiles = (await git(root, ['ls-tree', '-r', '--name-only', '-z', diff.diffBaseSha ?? diff.baseSha])).split('\0').filter(Boolean), sourceRows = [];
+        for (const s of cfg.contracts.sources)
+            for (const p of select(baseFiles, s.include))
+                sourceRows.push({ kind: s.type, ref: p, content: await git(root, ['show', `${diff.diffBaseSha ?? diff.baseSha}:./${p}`]) });
+        const { discoverSources, snapshot } = await import('@behavproof/contract-registry');
+        const base = snapshot(discoverSources(sourceRows), diff.diffBaseSha ?? diff.baseSha, cfg.contracts.sources.flatMap(s => s.include));
+        await emit(canonicalJson({ ...reconcile(base, current), notice: 'Git-derived baseline is comparison data, not independent approval authority.' }) + '\n');
+        return 0;
+    }
+    throw Error('Unknown command');
+}
+main().then(code => { process.exitCode = code; }).catch(error => { process.stderr.write(`BehavProof error: ${error instanceof Error ? error.message : 'Unknown error'}\n`); process.exitCode = 2; });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAe,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAoB,MAAM,kBAAkB,CAAC;AAC9G,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAkB,aAAa,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1G,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAC,YAAY,EAAC,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACjG,MAAM,IAAI,GAAC,4aAA4a,CAAC;AACxb,KAAK,UAAU,IAAI;IAClB,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,GAAC,SAAS,CAAC,EAAC,gBAAgB,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,IAAI,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,IAAI,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,OAAO,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,IAAI,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,YAAY,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,SAAS,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,EAAC,IAAI,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,EAAC,OAAO,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,EAAC,IAAI,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC,EAAC,CAAC,CAAC;IACzZ,MAAM,IAAI,GAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,OAAO,EAAC,GAAG,EAAC,GAAG,IAAI,CAAC,GAAC,WAAW,CAAC;IACjF,IAAG,MAAM,CAAC,OAAO,EAAC,CAAC;QAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IAAA,CAAC;IAAA,IAAG,MAAM,CAAC,IAAI,IAAE,CAAC,OAAO,EAAC,CAAC;QAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IAAA,CAAC;IAC5H,IAAG,IAAI,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAC,KAAK,EAAC,IAAW,EAAC,EAAE,GAAC,IAAG,MAAM,CAAC,MAAM;QAAC,MAAM,WAAW,CAAC,IAAI,EAAC,MAAM,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;;QAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC;IAC9H,IAAG,OAAO,KAAG,MAAM,EAAC,CAAC;QACpB,IAAG,GAAG;YAAC,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAC,MAAM,CAAC,MAAM,IAAE,wBAAwB,EAAC,KAAK,GAAC,MAAM,MAAM,CAAC,IAAI,EAAC,IAAI,CAAC,EAAC,SAAS,GAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACrH,MAAM,QAAQ,GAAC,EAAC,aAAa,EAAC,CAAC,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,UAAU,EAAC,GAAG,EAAC,EAAC,IAAI,EAAC,aAAa,EAAC,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,+BAA+B,EAAC,QAAQ,EAAC,oBAAoB,EAAC,QAAQ,EAAC,gCAAgC,EAAC,EAAC,kBAAkB,EAAC,EAAE,EAAC,SAAS,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,OAAO,EAAC,EAAE,EAAC,EAAC,CAAC;QAC9Q,IAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAE,CAAC,KAAK;YAAC,MAAM,WAAW,CAAC,IAAI,EAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAC,IAAI,EAAC,CAAC,CAAC,GAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QACrG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,KAAK,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,MAAM,CAAC,SAAS,CAAC,CAAA,CAAC,CAAA,cAAc,CAAA,CAAC,CAAA,SAAS,EAAC,SAAS,EAAC,MAAM,EAAC,2FAA2F,EAAC,EAAC,IAAI,EAAC,CAAC,CAAC,GAAC,IAAI,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IACnP,CAAC;IACD,IAAG,OAAO,KAAG,QAAQ,EAAC,CAAC;QACtB,IAAG,GAAG;YAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAAA,MAAM,SAAS,GAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAAA,MAAM,MAAM,CAAC,IAAI,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,IAAI,EAAC,OAAO,CAAC,OAAO,EAAC,GAAG,SAAS,EAAC,KAAK,EAAC,2EAA2E,EAAC,EAAC,IAAI,EAAC,CAAC,CAAC,GAAC,IAAI,CAAC,CAAC;QAAA,OAAO,SAAS,CAAC,OAAO,KAAG,gBAAgB,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC;IAC1V,CAAC;IACD,IAAG,OAAO,KAAG,SAAS,EAAC,CAAC;QACvB,MAAM,YAAY,GAAuB,EAAC,UAAU,EAAC,6FAA6F,EAAC,mBAAmB,EAAC,oLAAoL,EAAC,aAAa,EAAC,yIAAyI,EAAC,iBAAiB,EAAC,+KAA+K,EAAC,iBAAiB,EAAC,oLAAoL,EAAC,cAAc,EAAC,0GAA0G,EAAC,gBAAgB,EAAC,+GAA+G,EAAC,CAAC;QACznC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAC,EAAC,wBAAwB,EAAC,yHAAyH,EAAC,2BAA2B,EAAC,iIAAiI,EAAC,aAAa,EAAC,2FAA2F,EAAC,YAAY,EAAC,qJAAqJ,EAAC,CAAC,CAAC;QAC5lB,MAAM,GAAG,GAAC,CAAC,GAAG,IAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAC,CAAC,CAAC,EAAC,CAAQ,EAAC,EAAE,CAAA,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAAA,IAAG,CAAC,YAAY,CAAC,GAAG,CAAC;YAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAC,IAAI,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IACtK,CAAC;IACD,IAAG,OAAO,KAAG,QAAQ,EAAC,CAAC;QAAA,MAAM,MAAM,GAAC,MAAM,aAAa,CAAC,IAAI,EAAC,GAAG,IAAE,EAAE,EAAC,MAAM,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,GAAC,IAAI,CAAC,CAAC;QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC;IAAA,CAAC;IACnJ,IAAG,OAAO,KAAG,OAAO,EAAC,CAAC;QACrB,IAAG,GAAG;YAAC,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAAA,MAAM,OAAO,GAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAC,KAAK,CAAC,EAAC,EAAE,CAAA,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,QAAQ,EAAC,SAAS,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9N,MAAM,MAAM,GAAC,MAAM,KAAK,CAAC,IAAI,EAAC,OAAO,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAC,MAAM,CAAC,MAAM,IAAE,SAAS,CAAC,CAAC,CAAC;QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzH,CAAC;IACD,MAAM,GAAG,GAAC,MAAM,MAAM,CAAC,IAAI,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,OAAO,CAAC,EAAC,KAAK,GAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAC,GAAG,GAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAC,CAAC,WAAW,EAAC,UAAU,EAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,OAAO,GAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,CAAC,CAAC;IACtM,IAAG,OAAO,KAAG,WAAW,EAAC,CAAC;QACzB,IAAG,CAAC,CAAC,UAAU,EAAC,MAAM,EAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAE,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAC,IAAI,CAAC,CAAC;QAAA,OAAO,GAAG,KAAG,UAAU,IAAE,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC;IACzN,CAAC;IACD,IAAG,OAAO,KAAG,UAAU,IAAE,GAAG,KAAG,QAAQ,EAAC,CAAC;QACxC,MAAM,WAAW,CAAC,IAAI,EAAC,MAAM,CAAC,MAAM,IAAE,2BAA2B,EAAC,aAAa,CAAC,OAAO,CAAC,GAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAAA,IAAG,CAAC,MAAM,CAAC,MAAM;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gGAAgG,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IACvP,CAAC;IACD,IAAG,OAAO,KAAG,MAAM,EAAC,CAAC;QACpB,MAAM,MAAM,GAAC,MAAM,CAAC,KAAK,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,GAAG,IAAE,UAAU,CAAC;QAAA,IAAG,CAAC,CAAC,UAAU,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACxI,IAAI,SAA4C,CAAC;QACjD,IAAG,MAAM,CAAC,YAAY,CAAC,EAAC,CAAC;YAAA,MAAM,MAAM,GAAC,MAAM,KAAK,CAAC,IAAI,EAAC,EAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAA,CAAC,CAAA,EAAC,IAAI,EAAC,MAAM,CAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,IAAI,EAAC,MAAM,CAAC,IAAI,IAAE,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,YAAY,EAAC,MAAM,CAAC,YAAY,CAAC,EAAC,CAAC,CAAC;YAAA,MAAM,QAAQ,GAAC,MAAM,CAAC,gBAAgB,CAAC;YAAA,SAAS,GAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,EAAC,QAAQ,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,gBAAgB,EAAC,QAAQ,CAAC,QAAQ,EAAC,cAAc,EAAC,GAAG,CAAA,EAAE,CAAA,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,cAAc,EAAC,QAAQ,CAAA,EAAE,CAAA,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAC,CAAC,CAAC;QAAA,CAAC;aAC1jB,CAAC;YAAA,MAAM,IAAI,GAAC,EAAE,CAAC;YAAA,KAAI,MAAM,WAAW,IAAI,MAAM,CAAC,KAAK,EAAC,GAAG,CAAC,kBAAkB,CAAC,EAAC,CAAC;gBAAA,MAAM,EAAC,uBAAuB,EAAC,GAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAA,MAAM,QAAQ,GAAC,uBAAuB,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,IAAI,EAAC,WAAW,CAAC,CAAC,CAAC;gBAAA,KAAI,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS;oBAAC,IAAG,QAAQ,CAAC,IAAI,KAAG,iBAAiB,IAAE,MAAM,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,GAAG,CAAC,EAAC,CAAC;wBAAA,MAAM,IAAI,GAAC,MAAM,YAAY,CAAC,IAAI,EAAC,QAAQ,CAAC,GAAG,CAAQ,CAAC;wBAAA,IAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;4BAAC,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;wBAAA,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;oBAAA,CAAC;YAAA,CAAC;YAAA,SAAS,GAAC,eAAe,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QAAA,CAAC;QACliB,MAAM,SAAS,GAAC,MAAM,CAAC,MAAM,CAAA,CAAC,CAAA,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,EAAE,EAAC,MAAM,GAAC,SAAS,CAAA,CAAC,CAAA,SAAS,KAAG,KAAK,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,SAAS,KAAG,OAAO,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,SAAS,KAAG,OAAO,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC;QAChL,IAAG,SAAS,IAAE,CAAC,MAAM;YAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpE,MAAM,SAAS,GAAC,MAAM,CAAC,MAAM,IAAE,CAAC,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,MAAM,CAAA,CAAC,CAAA,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC;QACvF,MAAM,KAAK,GAAuB,MAAM,CAAA,CAAC,CAAA,EAAC,CAAC,MAAM,CAAC,EAAC,MAAM,CAAC,MAAO,EAAC,CAAA,CAAC,CAAA,EAAC,QAAQ,EAAC,GAAG,SAAS,cAAc,EAAC,IAAI,EAAC,GAAG,SAAS,gBAAgB,EAAC,IAAI,EAAC,GAAG,SAAS,gBAAgB,EAAC,CAAC;QAC7K,IAAI,QAAQ,GAAC,KAAK,CAAC;QAAA,KAAI,MAAM,CAAC,MAAM,EAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,CAAC;YACpE,MAAM,OAAO,GAAC,SAAS,CAAC,MAAgC,CAAC,CAAC;YAAA,IAAG,MAAM,KAAG,UAAU;gBAAC,MAAM,WAAW,CAAC,IAAI,EAAC,IAAI,EAAC,OAAO,CAAC,CAAC;iBACjH,IAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAC,IAAI,CAAC,IAAE,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,OAAO;gBAAC,QAAQ,GAAC,IAAI,CAAC;QACxG,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAA,CAAC,CAAA,2CAA2C,CAAA,CAAC,CAAA,aAAa,MAAM,KAAG,UAAU,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,SAAS,gDAAgD,CAAC,CAAC;QAAA,OAAO,QAAQ,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC;IACvM,CAAC;IACD,IAAG,OAAO,KAAG,QAAQ,IAAE,OAAO,KAAG,QAAQ,IAAE,GAAG,KAAG,MAAM,EAAC,CAAC;QACxD,MAAM,IAAI,GAAC,MAAM,OAAO,CAAC,IAAI,EAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAE,MAAM,CAAC,CAAC,CAAC;QAAA,IAAG,IAAI,CAAC,OAAO,KAAG,GAAG;YAAC,MAAM,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACxL,IAAG,OAAO,KAAG,QAAQ,EAAC,CAAC;YACtB,MAAM,OAAO,GAAuB,EAAE,CAAC;YAAA,KAAI,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC,CAAC,GAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtJ,MAAM,QAAQ,GAAyB,EAAE,CAAC;YAAA,KAAI,MAAM,CAAC,IAAI,OAAO,CAAC,SAAS,EAAC,CAAC;gBAAA,MAAM,IAAI,GAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAC,EAAE,CAAC,CAAC;gBAAA,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAA,CAAC;YAClK,MAAM,IAAI,CAAC,aAAa,CAAC,EAAC,GAAG,aAAa,CAAC,OAAO,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,CAAC,EAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;YAAA,OAAO,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,SAAS,GAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAC,CAAC,SAAS,EAAC,IAAI,EAAC,aAAa,EAAC,IAAI,EAAC,IAAI,CAAC,WAAW,IAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAC,UAAU,GAA2C,EAAE,CAAC;QACzL,KAAI,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO;YAAC,KAAI,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAC,CAAC,CAAC,OAAO,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,GAAG,EAAC,CAAC,EAAC,OAAO,EAAC,MAAM,GAAG,CAAC,IAAI,EAAC,CAAC,MAAM,EAAC,GAAG,IAAI,CAAC,WAAW,IAAE,IAAI,CAAC,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,EAAC,CAAC,CAAC;QACjM,MAAM,EAAC,eAAe,EAAC,QAAQ,EAAC,GAAC,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QAAA,MAAM,IAAI,GAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,EAAC,IAAI,CAAC,WAAW,IAAE,IAAI,CAAC,OAAO,EAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3M,MAAM,IAAI,CAAC,aAAa,CAAC,EAAC,GAAG,SAAS,CAAC,IAAI,EAAC,OAAO,CAAC,EAAC,MAAM,EAAC,8EAA8E,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IAC7J,CAAC;IACD,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAChC,CAAC;AACD,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,GAAC,OAAO,CAAC,QAAQ,GAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,GAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,YAAY,KAAK,CAAA,CAAC,CAAA,KAAK,CAAC,OAAO,CAAA,CAAC,CAAA,eAAe,IAAI,CAAC,CAAC,CAAA,OAAO,CAAC,QAAQ,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC"}

package/dist/pipeline.d.ts

@@ -0,0 +1,38 @@
+import { type EvidenceStatus } from '@behavproof/core';
+import { GitHubAuthority, type Observation } from '@behavproof/adapter-github';
+import type { TrustRoot } from './trust.js';
+type Auth = {
+    trustedCi: boolean;
+    verified: ReadonlySet<string>;
+    artifactBytes: ReadonlyMap<string, Uint8Array>;
+};
+/** Artifacts come from authenticate's retained snapshots, never candidate rereads. */
+export declare function pipelineEvaluation(root: string, trust: TrustRoot, auth: Auth, provider?: GitHubAuthority): Promise<{
+    status: EvidenceStatus;
+    jobs: {};
+    artifacts: string[];
+    observations: {
+        upstream?: Observation;
+        protection?: Observation;
+    };
+    workflow?: never;
+} | {
+    status: "unknown" | "pass" | "fail" | "not_applicable";
+    jobs: Record<string, string>;
+    artifacts: string[];
+    observations: {
+        upstream?: Observation;
+        protection?: Observation;
+    };
+    workflow: {
+        ref: string;
+        sha256: string;
+        sourceStatus: string;
+        diagnosis: {
+            internal: Observation<unknown>;
+            protection: Observation<unknown>;
+        };
+    };
+}>;
+export {};
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../src/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,cAAc,EAAC,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAC,eAAe,EAAmC,KAAK,WAAW,EAAC,MAAM,4BAA4B,CAAC;AAC9G,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAC1C,KAAK,IAAI,GAAC;IAAC,SAAS,EAAC,OAAO,CAAC;IAAA,QAAQ,EAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAAA,aAAa,EAAC,WAAW,CAAC,MAAM,EAAC,UAAU,CAAC,CAAA;CAAC,CAAC;AAExG,sFAAsF;AACtF,wBAAsB,kBAAkB,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,QAAQ,CAAC,EAAC,eAAe;YAGpE,cAAc;;eAAyB,MAAM,EAAE;;mBADnD,WAAW;qBAAa,WAAW;;;;;;;;mBAAnC,WAAW;qBAAa,WAAW;;;;;;;;;;;GA2BlE"}

package/dist/pipeline.js

@@ -0,0 +1,46 @@
+import { safeRead, hashBytes } from '@behavproof/core';
+import { GitHubAuthority, diagnoseWorkflow, evaluateUpstream } from '@behavproof/adapter-github';
+const worst = (states) => states.includes('fail') ? 'fail' : states.length > 0 && states.every(status => status === 'pass') ? 'pass' : 'unknown';
+/** Artifacts come from authenticate's retained snapshots, never candidate rereads. */
+export async function pipelineEvaluation(root, trust, auth, provider) {
+    const p = trust.pipeline;
+    const observations = {};
+    if (!p)
+        return { status: 'unknown', jobs: {}, artifacts: [], observations };
+    const bytes = await safeRead(root, p.workflow), source = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+    const sourceStatus = !p.currentRun || hashBytes(bytes) === p.currentRun.workflowHash ? 'pass' : 'unknown';
+    const diagnosis = diagnoseWorkflow(source, p);
+    const available = [...auth.verified].sort();
+    let jobs = {}, upstreamStatus = 'unknown', protectionStatus = 'unknown';
+    const github = trust.github;
+    const authority = provider ?? (github ? new GitHubAuthority({ repository: github.repository, ...(process.env.GITHUB_TOKEN ? { token: process.env.GITHUB_TOKEN } : {}) }) : undefined);
+    if (p.currentRun) {
+        if (auth.trustedCi && authority && sourceStatus === 'pass') {
+            const r = p.currentRun, result = await authority.upstream(r.ci, { ci: r.ci, workflowPath: r.workflowPath, workflowSha: r.workflowSha, gateJob: p.gateJob, requiredJobs: p.requiredJobs });
+            observations.upstream = result;
+            if (result.status === 'pass' && result.value) {
+                jobs = result.value.jobs;
+                upstreamStatus = evaluateUpstream(jobs, available, p).status;
+            }
+        }
+    }
+    else {
+        const reports = trust.manifests.flatMap(spec => spec.expected.artifacts).filter(artifact => artifact.kind === 'pipeline' && auth.verified.has(artifact.ref));
+        if (reports.length === 1) {
+            const captured = auth.artifactBytes.get(reports[0].ref);
+            if (!captured)
+                throw Error('Authenticated pipeline snapshot unavailable');
+            const raw = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(captured));
+            if (!raw || !raw.jobs || !Array.isArray(raw.artifacts))
+                throw Error('Invalid pipeline report');
+            jobs = raw.jobs;
+            upstreamStatus = evaluateUpstream(jobs, raw.artifacts, p).status;
+        }
+    }
+    if (auth.trustedCi && github && authority) {
+        observations.protection = await authority.protection(p.protectedBranch, github.requiredChecks);
+        protectionStatus = observations.protection.status;
+    }
+    return { status: worst([sourceStatus, diagnosis.internal.status, upstreamStatus, protectionStatus]), jobs, artifacts: available, observations, workflow: { ref: p.workflow, sha256: hashBytes(bytes), sourceStatus, diagnosis } };
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../src/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,SAAS,EAAqB,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAC,eAAe,EAAC,gBAAgB,EAAC,gBAAgB,EAAkB,MAAM,4BAA4B,CAAC;AAG9G,MAAM,KAAK,GAAC,CAAC,MAAwB,EAAgB,EAAE,CAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,MAAM,CAAC,MAAM,GAAC,CAAC,IAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,KAAG,MAAM,CAAC,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,SAAS,CAAC;AAC9J,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAW,EAAC,KAAe,EAAC,IAAS,EAAC,QAAyB;IACtG,MAAM,CAAC,GAAC,KAAK,CAAC,QAAQ,CAAC;IACvB,MAAM,YAAY,GAAiD,EAAE,CAAC;IACtE,IAAG,CAAC,CAAC;QAAC,OAAO,EAAC,MAAM,EAAC,SAA2B,EAAC,IAAI,EAAC,EAAE,EAAC,SAAS,EAAC,EAAc,EAAC,YAAY,EAAC,CAAC;IAChG,MAAM,KAAK,GAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,CAAC,CAAC,QAAQ,CAAC,EAAC,MAAM,GAAC,IAAI,WAAW,CAAC,OAAO,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvG,MAAM,YAAY,GAAC,CAAC,CAAC,CAAC,UAAU,IAAE,SAAS,CAAC,KAAK,CAAC,KAAG,CAAC,CAAC,UAAU,CAAC,YAAY,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,SAAS,CAAC;IAChG,MAAM,SAAS,GAAC,gBAAgB,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,IAAI,GAAuB,EAAE,EAAC,cAAc,GAAgB,SAAS,EAAC,gBAAgB,GAAC,SAAS,CAAC;IACrG,MAAM,MAAM,GAAC,KAAK,CAAC,MAAM,CAAC;IAC1B,MAAM,SAAS,GAAC,QAAQ,IAAE,CAAC,MAAM,CAAA,CAAC,CAAA,IAAI,eAAe,CAAC,EAAC,UAAU,EAAC,MAAM,CAAC,UAAU,EAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;IACnK,IAAG,CAAC,CAAC,UAAU,EAAC,CAAC;QACf,IAAG,IAAI,CAAC,SAAS,IAAE,SAAS,IAAE,YAAY,KAAG,MAAM,EAAC,CAAC;YACnD,MAAM,CAAC,GAAC,CAAC,CAAC,UAAU,EAAC,MAAM,GAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAC,EAAC,EAAE,EAAC,CAAC,CAAC,EAAE,EAAC,YAAY,EAAC,CAAC,CAAC,YAAY,EAAC,WAAW,EAAC,CAAC,CAAC,WAAW,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAC,YAAY,EAAC,CAAC,CAAC,YAAY,EAAC,CAAC,CAAC;YACzK,YAAY,CAAC,QAAQ,GAAC,MAAM,CAAC;YAC7B,IAAG,MAAM,CAAC,MAAM,KAAG,MAAM,IAAE,MAAM,CAAC,KAAK,EAAC,CAAC;gBAAA,IAAI,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAA,cAAc,GAAC,gBAAgB,CAAC,IAAI,EAAC,SAAS,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAAA,CAAC;QAC5H,CAAC;IACH,CAAC;SAAI,CAAC;QACJ,MAAM,OAAO,GAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAA,EAAE,CAAA,QAAQ,CAAC,IAAI,KAAG,UAAU,IAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACnJ,IAAG,OAAO,CAAC,MAAM,KAAG,CAAC,EAAC,CAAC;YACrB,MAAM,QAAQ,GAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC;YACvD,IAAG,CAAC,QAAQ;gBAAC,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACxE,MAAM,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7E,IAAG,CAAC,GAAG,IAAE,CAAC,GAAG,CAAC,IAAI,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAC,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACzF,IAAI,GAAC,GAAG,CAAC,IAAI,CAAC;YAAA,cAAc,GAAC,gBAAgB,CAAC,IAAI,EAAC,GAAG,CAAC,SAAS,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,IAAG,IAAI,CAAC,SAAS,IAAE,MAAM,IAAE,SAAS,EAAC,CAAC;QAAA,YAAY,CAAC,UAAU,GAAC,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,EAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAAA,gBAAgB,GAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC;IAAA,CAAC;IACnL,OAAO,EAAC,MAAM,EAAC,KAAK,CAAC,CAAC,YAAY,EAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAC,cAAc,EAAC,gBAAgB,CAAC,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,SAAS,EAAC,YAAY,EAAC,QAAQ,EAAC,EAAC,GAAG,EAAC,CAAC,CAAC,QAAQ,EAAC,MAAM,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,YAAY,EAAC,SAAS,EAAC,EAAC,CAAC;AACjN,CAAC"}

package/dist/project.d.ts

@@ -0,0 +1,97 @@
+import { type Config } from '@behavproof/core';
+export declare function git(root: string, args: string[]): Promise<string>;
+export declare function exists(root: string, path: string): Promise<boolean>;
+export declare function config(root: string, path?: string, profile?: string): Promise<Config>;
+export declare function fileList(root: string): Promise<string[]>;
+export declare function select(files: readonly string[], patterns: readonly string[]): string[];
+export declare function registry(root: string, cfg: Config, files: readonly string[], commitSha: string, extraSources?: Config['contracts']['sources'], readSource?: (path: string) => Promise<string>): Promise<{
+    schemaVersion: 1;
+    commitSha: string;
+    contracts: {
+        id: string;
+        kind: "external" | "examples" | "invariant" | "state_machine" | "api_contract";
+        intentIds: string[];
+        revisionHash: string;
+        sourceRef: string;
+        formal?: {
+            modelId: string;
+            modelHash: string;
+            propertyIds: string[];
+            driverHash?: string | undefined;
+        } | undefined;
+        caseIds?: string[] | undefined;
+        risk?: "basic" | "standard" | "critical" | undefined;
+        cases?: {
+            id: string;
+            input: import("zod").JSONType;
+            expected: import("zod").JSONType;
+            negative?: boolean | undefined;
+        }[] | undefined;
+    }[];
+    intents: {
+        id: string;
+        statement: string;
+        risk: "basic" | "standard" | "critical";
+        contentHash: string;
+        origin: {
+            kind: "external" | "manifest" | "inline";
+            ref: string;
+        };
+    }[];
+    repositoryId?: string | undefined;
+    policyHash?: string | undefined;
+    extractorVersion?: string | undefined;
+    scope?: string[] | undefined;
+    discoveryDiagnostics?: {
+        code: string;
+        sourceRef: string;
+        message: string;
+    }[] | undefined;
+}>;
+export declare function writeScoped(root: string, path: string, content: string, exclusive?: boolean): Promise<void>;
+export declare function ref(value: string): string;
+export declare function registryAtGit(root: string, cfg: Config, sha: string, extraSources?: Config['contracts']['sources']): Promise<{
+    schemaVersion: 1;
+    commitSha: string;
+    contracts: {
+        id: string;
+        kind: "external" | "examples" | "invariant" | "state_machine" | "api_contract";
+        intentIds: string[];
+        revisionHash: string;
+        sourceRef: string;
+        formal?: {
+            modelId: string;
+            modelHash: string;
+            propertyIds: string[];
+            driverHash?: string | undefined;
+        } | undefined;
+        caseIds?: string[] | undefined;
+        risk?: "basic" | "standard" | "critical" | undefined;
+        cases?: {
+            id: string;
+            input: import("zod").JSONType;
+            expected: import("zod").JSONType;
+            negative?: boolean | undefined;
+        }[] | undefined;
+    }[];
+    intents: {
+        id: string;
+        statement: string;
+        risk: "basic" | "standard" | "critical";
+        contentHash: string;
+        origin: {
+            kind: "external" | "manifest" | "inline";
+            ref: string;
+        };
+    }[];
+    repositoryId?: string | undefined;
+    policyHash?: string | undefined;
+    extractorVersion?: string | undefined;
+    scope?: string[] | undefined;
+    discoveryDiagnostics?: {
+        code: string;
+        sourceRef: string;
+        message: string;
+    }[] | undefined;
+}>;
+//# sourceMappingURL=project.d.ts.map

package/dist/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAKA,OAAO,EAA2D,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAGxG,wBAAsB,GAAG,CAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAE,mBAAuL;AAC1O,wBAAsB,MAAM,CAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,oBAA0J;AAC9M,wBAAsB,MAAM,CAAC,IAAI,EAAC,MAAM,EAAC,IAAI,SAAyB,EAAC,OAAO,CAAC,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAqJ;AAC5P,wBAAsB,QAAQ,CAAC,IAAI,EAAC,MAAM,qBAGzC;AACD,wBAAgB,MAAM,CAAC,KAAK,EAAC,SAAS,MAAM,EAAE,EAAC,QAAQ,EAAC,SAAS,MAAM,EAAE,YAAuJ;AAChO,wBAAsB,QAAQ,CAAC,IAAI,EAAC,MAAM,EAAC,GAAG,EAAC,MAAM,EAAC,KAAK,EAAC,SAAS,MAAM,EAAE,EAAC,SAAS,EAAC,MAAM,EAAC,YAAY,GAAC,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAI,EAAC,UAAU,CAAC,EAAC,CAAC,IAAI,EAAC,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAMvL;AACD,wBAAsB,WAAW,CAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,SAAS,UAAM,iBAMvF;AACD,wBAAgB,GAAG,CAAC,KAAK,EAAC,MAAM,UAAsG;AAEtI,wBAAsB,aAAa,CAAC,IAAI,EAAC,MAAM,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,MAAM,EAAC,YAAY,GAAC,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAKnH"}

package/dist/project.js

@@ -0,0 +1,101 @@
+import { readdir, lstat, mkdir, open, realpath } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { join, dirname, relative, sep, matchesGlob } from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { parseConfig, RelativePathSchema, safeRead, safeReadJson } from '@behavproof/core';
+import { discoverSources, snapshot } from '@behavproof/contract-registry';
+const exec = promisify(execFile);
+export async function git(root, args) { return (await exec('git', ['-c', 'core.fsmonitor=false', ...args], { cwd: root, timeout: 30000, maxBuffer: 10 * 1024 * 1024, encoding: 'utf8', env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' } })).stdout; }
+export async function exists(root, path) { try {
+    await lstat(join(root, RelativePathSchema.parse(path)));
+    return true;
+}
+catch (e) {
+    if (e.code === 'ENOENT')
+        return false;
+    throw e;
+} }
+export async function config(root, path = 'behavproof.config.json', profile) { const raw = await exists(root, path) ? await safeReadJson(root, path) : { schemaVersion: 1 }; return parseConfig({ ...raw, ...(profile ? { profile } : {}) }); }
+export async function fileList(root) {
+    const files = [];
+    let count = 0;
+    const walk = async (dir, depth) => { if (depth > 64)
+        throw Error('Directory depth limit exceeded'); for (const ent of await readdir(join(root, dir), { withFileTypes: true })) {
+        if (++count > 50000)
+            throw Error('Project file inventory exceeds limit');
+        const path = dir ? `${dir}/${ent.name}` : ent.name;
+        if (['.git', 'node_modules', '.npm-cache', '.superpowers'].includes(ent.name) || path === '.behavproof/generated')
+            continue;
+        if (ent.isDirectory())
+            await walk(path, depth + 1);
+        else
+            files.push(path);
+    } };
+    await walk('', 0);
+    return files.sort();
+}
+export function select(files, patterns) { for (const pattern of patterns)
+    RelativePathSchema.parse(pattern); return files.filter(file => patterns.some(pattern => matchesGlob(file, pattern))).sort(); }
+export async function registry(root, cfg, files, commitSha, extraSources = [], readSource) {
+    const sources = [...cfg.contracts.sources, ...extraSources], seen = new Set(), rows = [];
+    for (const source of sources)
+        for (const ref of select(files, source.include)) {
+            const key = `${source.type}:${ref}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            rows.push({ kind: source.type, ref, content: readSource ? await readSource(ref) : (await safeRead(root, ref)).toString('utf8') });
+        }
+    const result = discoverSources(rows);
+    for (const source of sources)
+        for (const pattern of source.include)
+            if (!select(files, [pattern]).length)
+                result.diagnostics.push({ code: 'SOURCE_MISSING', sourceRef: pattern, message: 'Configured discovery source is absent' });
+    return snapshot(result, commitSha, [...new Set(sources.flatMap(s => s.include))].sort());
+}
+export async function writeScoped(root, path, content, exclusive = false) {
+    RelativePathSchema.parse(path);
+    const base = await realpath(root);
+    let current = base;
+    const parts = path.split('/');
+    for (const part of parts.slice(0, -1)) {
+        current = join(current, part);
+        try {
+            await mkdir(current);
+        }
+        catch (e) {
+            if (e.code !== 'EEXIST')
+                throw e;
+        }
+        const stat = await lstat(current);
+        if (stat.isSymbolicLink() || !stat.isDirectory())
+            throw Error('Unsafe output directory');
+    }
+    const parent = await realpath(dirname(join(base, path))), rel = relative(base, parent);
+    if (rel === '..' || rel.startsWith(`..${sep}`))
+        throw Error('Output escapes project');
+    const handle = await open(join(base, path), constants.O_WRONLY | constants.O_CREAT | constants.O_NOFOLLOW | constants.O_NONBLOCK | (exclusive ? constants.O_EXCL : 0), 0o600);
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile() || stat.nlink > 1)
+            throw Error('Output is not a single regular file');
+        if (!exclusive)
+            await handle.truncate(0);
+        await handle.writeFile(content, 'utf8');
+    }
+    finally {
+        await handle.close();
+    }
+}
+export function ref(value) { if (!value || value.startsWith('-') || value.includes('\0'))
+    throw Error('Invalid Git ref'); return value; }
+export async function registryAtGit(root, cfg, sha, extraSources = []) {
+    if (!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(sha))
+        throw Error('Expected immutable Git object');
+    const files = (await git(root, ['ls-tree', '-r', '--name-only', '-z', sha])).split('\0').filter(Boolean);
+    if (files.length > 50000)
+        throw Error('Git source inventory exceeds limit');
+    return registry(root, cfg, files, sha, extraSources, path => git(root, ['show', `${sha}:./${RelativePathSchema.parse(path)}`]));
+}
+//# sourceMappingURL=project.js.map

package/dist/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAe,MAAM,kBAAkB,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC1E,MAAM,IAAI,GAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC/B,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAW,EAAC,IAAa,IAAE,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,EAAC,CAAC,IAAI,EAAC,sBAAsB,EAAC,GAAG,IAAI,CAAC,EAAC,EAAC,GAAG,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,EAAE,GAAC,IAAI,GAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,GAAG,EAAC,EAAC,GAAG,OAAO,CAAC,GAAG,EAAC,kBAAkB,EAAC,GAAG,EAAC,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA,CAAC;AAC1O,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAW,EAAC,IAAW,IAAE,IAAG,CAAC;IAAA,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAA,OAAO,IAAI,CAAC;AAAA,CAAC;AAAA,OAAM,CAAC,EAAC,CAAC;IAAA,IAAI,CAA2B,CAAC,IAAI,KAAG,QAAQ;QAAC,OAAO,KAAK,CAAC;IAAA,MAAM,CAAC,CAAC;AAAA,CAAC,CAAA,CAAC;AAC9M,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAW,EAAC,IAAI,GAAC,wBAAwB,EAAC,OAAe,IAAkB,MAAM,GAAG,GAAC,MAAM,MAAM,CAAC,IAAI,EAAC,IAAI,CAAC,CAAA,CAAC,CAAA,MAAM,YAAY,CAAC,IAAI,EAAC,IAAI,CAAC,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,CAAC,EAAC,CAAC,CAAA,OAAO,WAAW,CAAC,EAAC,GAAG,GAAa,EAAC,GAAG,CAAC,OAAO,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC,CAAA,CAAC;AAC5P,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAW;IAAE,MAAM,KAAK,GAAU,EAAE,CAAC;IAAA,IAAI,KAAK,GAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAC,KAAK,EAAC,GAAU,EAAC,KAAY,EAAC,EAAE,GAAC,IAAG,KAAK,GAAC,EAAE;QAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA,KAAI,MAAM,GAAG,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAC,GAAG,CAAC,EAAC,EAAC,aAAa,EAAC,IAAI,EAAC,CAAC,EAAC,CAAC;QAAA,IAAG,EAAE,KAAK,GAAC,KAAK;YAAC,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAAA,MAAM,IAAI,GAAC,GAAG,CAAA,CAAC,CAAA,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAA,CAAC,CAAA,GAAG,CAAC,IAAI,CAAC;QAAA,IAAG,CAAC,MAAM,EAAC,cAAc,EAAC,YAAY,EAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,IAAI,KAAG,uBAAuB;YAAC,SAAS;QAAA,IAAG,GAAG,CAAC,WAAW,EAAE;YAAC,MAAM,IAAI,CAAC,IAAI,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;;YAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAAA,CAAC,CAAA,CAAC,CAAC;IACvd,MAAM,IAAI,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC;IAAA,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtC,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAuB,EAAC,QAA0B,IAAE,KAAI,MAAM,OAAO,IAAI,QAAQ;IAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,WAAW,CAAC,IAAI,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA,CAAC;AAChO,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAW,EAAC,GAAU,EAAC,KAAuB,EAAC,SAAgB,EAAC,eAA4C,EAAE,EAAC,UAA0C;IACvL,MAAM,OAAO,GAAC,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,EAAC,GAAG,YAAY,CAAC,EAAC,IAAI,GAAC,IAAI,GAAG,EAAU,EAAC,IAAI,GAA2C,EAAE,CAAC;IAClI,KAAI,MAAM,MAAM,IAAI,OAAO;QAAC,KAAI,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,EAAC,MAAM,CAAC,OAAO,CAAC,EAAC,CAAC;YAAA,MAAM,GAAG,GAAC,GAAG,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YAAA,IAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAC,SAAS;YAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,MAAM,CAAC,IAAI,EAAC,GAAG,EAAC,OAAO,EAAC,UAAU,CAAA,CAAC,CAAA,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,CAAC,CAAC;QAAA,CAAC;IAC7Q,MAAM,MAAM,GAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,KAAI,MAAM,MAAM,IAAI,OAAO;QAAC,KAAI,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO;YAAC,IAAG,CAAC,MAAM,CAAC,KAAK,EAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,gBAAgB,EAAC,SAAS,EAAC,OAAO,EAAC,OAAO,EAAC,uCAAuC,EAAC,CAAC,CAAC;IACtN,OAAO,QAAQ,CAAC,MAAM,EAAC,SAAS,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACtF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAW,EAAC,IAAW,EAAC,OAAc,EAAC,SAAS,GAAC,KAAK;IACvF,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAA,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAAA,IAAI,OAAO,GAAC,IAAI,CAAC;IAChF,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAA,KAAI,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,EAAC,CAAC;QAAA,OAAO,GAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QAAA,IAAG,CAAC;YAAA,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,CAAC,EAAC,CAAC;YAAA,IAAI,CAA2B,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,CAAC,CAAC;QAAA,CAAC;QAAA,MAAM,IAAI,GAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAAA,IAAG,IAAI,CAAC,cAAc,EAAE,IAAE,CAAC,IAAI,CAAC,WAAW,EAAE;YAAC,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAAA,CAAC;IAC9S,MAAM,MAAM,GAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,EAAC,GAAG,GAAC,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC;IAAA,IAAG,GAAG,KAAG,IAAI,IAAE,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAChK,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,EAAC,SAAS,CAAC,QAAQ,GAAC,SAAS,CAAC,OAAO,GAAC,SAAS,CAAC,UAAU,GAAC,SAAS,CAAC,UAAU,GAAC,CAAC,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC,MAAM,CAAA,CAAC,CAAA,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC;IAC7J,IAAI,CAAC;QAAA,MAAM,IAAI,GAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,KAAK,GAAC,CAAC;YAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAAA,IAAG,CAAC,SAAS;YAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAA,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;IAAA,CAAC;YAAO,CAAC;QAAA,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAA,CAAC;AACrO,CAAC;AACD,MAAM,UAAU,GAAG,CAAC,KAAY,IAAE,IAAG,CAAC,KAAK,IAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA,OAAO,KAAK,CAAC,CAAA,CAAC;AAEtI,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAW,EAAC,GAAU,EAAC,GAAU,EAAC,eAA4C,EAAE;IACnH,IAAG,CAAC,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAC,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAC,CAAC,SAAS,EAAC,IAAI,EAAC,aAAa,EAAC,IAAI,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClG,IAAG,KAAK,CAAC,MAAM,GAAC,KAAK;QAAC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,IAAI,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,YAAY,EAAC,IAAI,CAAA,EAAE,CAAA,GAAG,CAAC,IAAI,EAAC,CAAC,MAAM,EAAC,GAAG,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACxH,CAAC"}