@behavproof/cli 0.0.0-stage → 0.1.0

package/dist/registration.js

@@ -0,0 +1,112 @@
+import { z } from 'zod';
+import { realpath, stat } from 'node:fs/promises';
+import { resolve, relative, isAbsolute, sep, join, dirname, basename } from 'node:path';
+import { ApprovalSchema, PolicySchema, ConfigSchema, RegistrySnapshotSchema, RelativePathSchema, HashSchema, canonicalJson, hash, safeRead } from '@behavproof/core';
+import { git, writeScoped } from './project.js';
+import { ClaimScopesSchema } from './trust.js';
+const text = z.string().min(1), sha = z.string().regex(/^[a-f0-9]{40}$/);
+export const RegistrationSchema = z.strictObject({
+    schemaVersion: z.literal(1), repository: z.strictObject({ id: z.string().regex(/^\d+$/), fullName: z.string().regex(/^[\w-]+\/[\w.-]+$/) }),
+    source: z.strictObject({ commitSha: sha, prNumber: z.number().int().positive(), projectPath: z.union([z.literal('.'), RelativePathSchema]), policyRef: RelativePathSchema, configRef: RelativePathSchema.optional(), fileHashes: z.record(RelativePathSchema, HashSchema) }),
+    policyId: text, policy: PolicySchema, config: ConfigSchema, baseline: RegistrySnapshotSchema,
+    inputs: z.array(RelativePathSchema).min(1), configPaths: z.array(RelativePathSchema),
+    claimScopes: ClaimScopesSchema, approvals: z.array(ApprovalSchema),
+});
+const verifiedHandles = new WeakSet();
+function freeze(value) { if (value && typeof value === 'object') {
+    for (const entry of Object.values(value))
+        freeze(entry);
+    Object.freeze(value);
+} return value; }
+export function createRegistration(value, authority) {
+    const registration = RegistrationSchema.parse(structuredClone(value));
+    registration.approvals.sort((a, b) => a.id.localeCompare(b.id));
+    freeze(registration);
+    if (authority.verifySource(registration) !== true)
+        throw Error('Source verification unavailable');
+    if (registration.baseline.commitSha !== registration.source.commitSha || registration.baseline.repositoryId !== undefined && registration.baseline.repositoryId !== registration.repository.id)
+        throw Error('Registered source commit/repository mismatch');
+    if (registration.baseline.discoveryDiagnostics?.length !== 0 || !registration.baseline.extractorVersion || !registration.baseline.scope?.length || !registration.baseline.contracts.length || !registration.baseline.intents.length)
+        throw Error('Complete discovery inventory required');
+    for (const path of [registration.source.policyRef, ...(registration.source.configRef ? [registration.source.configRef] : []), ...registration.baseline.contracts.map(c => c.sourceRef), ...registration.baseline.intents.map(i => i.origin.ref)])
+        if (!Object.hasOwn(registration.source.fileHashes, path))
+            throw Error('Missing independently verified source hash');
+    if (registration.source.configRef && (!registration.configPaths.includes(registration.source.configRef) || registration.source.projectPath !== '.' && !registration.source.configRef.startsWith(registration.source.projectPath + '/')))
+        throw Error('Selected source config must belong to the project and hashed config scope');
+    for (const model of registration.config.formal?.models ?? []) {
+        const prefix = registration.source.projectPath === '.' ? '' : registration.source.projectPath + '/';
+        const required = [model.model, ...model.modelSources, ...(model.driver ? [model.driver, ...(model.driverSources ?? [])] : []), ...(model.implementation ? [model.implementation, ...model.implementationSources] : []), ...(model.canary ? [model.canary.implementation] : [])];
+        for (const ref of required)
+            if (!Object.hasOwn(registration.source.fileHashes, prefix + ref))
+                throw Error(`Missing independently verified formal source hash: ${ref}`);
+        const digest = (refs) => hash(Object.fromEntries([...new Set(refs)].sort().map(ref => [ref, registration.source.fileHashes[prefix + ref]])));
+        const binding = registration.baseline.contracts.find(c => c.id === model.contractId)?.formal;
+        if (!binding || binding.modelId !== model.id || binding.modelHash !== digest([model.model, ...model.modelSources]) || model.driver && binding.driverHash !== digest([model.driver, ...(model.driverSources ?? [])]) || hash([...binding.propertyIds].sort()) !== hash([...model.properties].sort()))
+            throw Error(`Formal source/Contract binding mismatch: ${model.id}`);
+    }
+    if (new Set(registration.inputs).size !== registration.inputs.length || new Set(registration.configPaths).size !== registration.configPaths.length)
+        throw Error('Duplicate input scope');
+    if (!Object.values(registration.policy.rules).some(rule => rule.severity === 'error'))
+        throw Error('No mandatory policy obligations');
+    const targets = [{ kind: 'policy', id: registration.policyId, contentHash: hash(registration.policy) }, ...registration.baseline.intents.map(i => ({ kind: 'intent', id: i.id, contentHash: i.contentHash })), ...registration.baseline.contracts.map(c => ({ kind: 'contract', id: c.id, contentHash: c.revisionHash }))];
+    if (new Set(registration.approvals.map(a => a.id)).size !== registration.approvals.length)
+        throw Error('Duplicate approval identity');
+    for (const approval of registration.approvals)
+        if (approval.status !== 'pass' || approval.subjectCommitSha !== registration.source.commitSha || approval.source.provider !== 'github' || approval.source.ref !== `https://github.com/${registration.repository.fullName}/pull/${registration.source.prNumber}` || !approval.approvedBy.length || !targets.some(t => hash(t) === hash(approval.target)) || authority.verifyApproval(approval) !== true)
+            throw Error('Unverified or incorrectly scoped approval');
+    for (const target of targets)
+        if (!registration.approvals.some(a => hash(a.target) === hash(target)))
+            throw Error(`Missing ${target.kind} approval: ${target.id}`);
+    for (const scope of registration.claimScopes) {
+        const contract = registration.baseline.contracts.find(c => c.id === scope.contractId);
+        if (!contract || new Set(scope.caseIds).size !== scope.caseIds.length || hash([...scope.caseIds].sort()) !== hash([...(contract.caseIds ?? [])].sort()))
+            throw Error('Claim scope differs from registered case inventory');
+    }
+    const result = freeze({ registration, digest: hash(registration) });
+    verifiedHandles.add(result);
+    return result;
+}
+async function externalDirectory(projectRoot, directory) {
+    const project = await realpath((await git(projectRoot, ['rev-parse', '--show-toplevel'])).trim()), host = await realpath(resolve(directory)), path = relative(project, host);
+    if (path === '' || !isAbsolute(path) && path !== '..' && !path.startsWith(`..${sep}`))
+        throw Error('Registration must be outside the entire Git checkout');
+    const info = await stat(host);
+    if (!info.isDirectory())
+        throw Error('Registration host is not a directory');
+    if (process.platform !== 'win32' && ((info.mode & 0o077) !== 0 || typeof process.getuid === 'function' && info.uid !== process.getuid()))
+        throw Error('Registration host must be private and owned by the current user');
+    return host;
+}
+export async function persistRegistration(projectRoot, directory, handle) {
+    if (!verifiedHandles.has(handle) || hash(handle.registration) !== handle.digest)
+        throw Error('Unverified registration handle');
+    const host = await externalDirectory(projectRoot, directory), name = `registration-${handle.digest}.json`, content = canonicalJson(handle.registration) + '\n';
+    try {
+        await writeScoped(host, name, content, true);
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+        const actual = await safeRead(host, name);
+        if (!actual.equals(Buffer.from(content)))
+            throw Error('Conflicting or tampered registered snapshot');
+    }
+    return { path: join(host, name), digest: handle.digest };
+}
+/** expectedDigest belongs to the protected host invocation, never to candidate JSON. */
+export async function loadRegistration(projectRoot, path, expectedDigest) {
+    HashSchema.parse(expectedDigest);
+    const actual = resolve(path), host = await externalDirectory(projectRoot, dirname(actual));
+    const registration = RegistrationSchema.parse(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(await safeRead(host, basename(actual)))));
+    if (hash(registration) !== expectedDigest)
+        throw Error('Registered baseline digest mismatch');
+    return freeze(registration);
+}
+/** Path projection only; obtain authority separately with loadRegistration and a protected digest. */
+export function registrationProjectData(value) {
+    const r = RegistrationSchema.parse(structuredClone(value)), prefix = r.source.projectPath === '.' ? '' : r.source.projectPath + '/';
+    const local = (path) => { if (prefix && !path.startsWith(prefix))
+        throw Error('Registration path lies outside the selected project subtree'); const result = prefix ? path.slice(prefix.length) : path; RelativePathSchema.parse(result); return result; };
+    return freeze({ policy: r.policy, config: r.config, ...(r.source.configRef ? { configRef: local(r.source.configRef) } : {}), baseline: { ...r.baseline, contracts: r.baseline.contracts.map(c => ({ ...c, sourceRef: local(c.sourceRef) })), intents: r.baseline.intents.map(i => ({ ...i, origin: { ...i.origin, ref: local(i.origin.ref) } })), ...(r.baseline.scope ? { scope: r.baseline.scope.map(local) } : {}) }, inputs: r.inputs.map(local), configPaths: r.configPaths.map(local), claimScopes: r.claimScopes.map(s => ({ ...s, targetRef: local(s.targetRef) })) });
+}
+//# sourceMappingURL=registration.js.map

package/dist/registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.js","sourceRoot":"","sources":["../src/registration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AACtB,OAAO,EAAC,QAAQ,EAAC,IAAI,EAAC,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,UAAU,EAAC,GAAG,EAAC,IAAI,EAAC,OAAO,EAAC,QAAQ,EAAC,MAAM,WAAW,CAAC;AAChF,OAAO,EAAC,cAAc,EAAC,YAAY,EAAC,YAAY,EAAC,sBAAsB,EAAC,kBAAkB,EAAC,UAAU,EAAC,aAAa,EAAC,IAAI,EAAC,QAAQ,EAAe,MAAM,kBAAkB,CAAC;AACzK,OAAO,EAAC,GAAG,EAAC,WAAW,EAAC,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAC7C,MAAM,IAAI,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,GAAG,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAC,CAAC,CAAC,YAAY,CAAC;IAC9C,aAAa,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,CAAC,CAAC,YAAY,CAAC,EAAC,EAAE,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAC,CAAC;IACnI,MAAM,EAAC,CAAC,CAAC,YAAY,CAAC,EAAC,SAAS,EAAC,GAAG,EAAC,QAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAC,WAAW,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAC,kBAAkB,CAAC,CAAC,EAAC,SAAS,EAAC,kBAAkB,EAAC,SAAS,EAAC,kBAAkB,CAAC,QAAQ,EAAE,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAC,UAAU,CAAC,EAAC,CAAC;IAC5P,QAAQ,EAAC,IAAI,EAAC,MAAM,EAAC,YAAY,EAAC,MAAM,EAAC,YAAY,EAAC,QAAQ,EAAC,sBAAsB;IACrF,MAAM,EAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,WAAW,EAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACjF,WAAW,EAAC,iBAAiB,EAAC,SAAS,EAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CAC/D,CAAC,CAAC;AAIH,MAAM,eAAe,GAAC,IAAI,OAAO,EAAwB,CAAC;AAC1D,SAAS,MAAM,CAAI,KAAO,IAAI,IAAG,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,EAAC,CAAC;IAAA,KAAI,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAA,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAAC,CAAA,OAAO,KAAK,CAAC,CAAA,CAAC;AAC3J,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAC,SAA+B;IAC/E,MAAM,YAAY,GAAC,kBAAkB,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAAA,MAAM,CAAC,YAAY,CAAC,CAAC;IAClF,IAAG,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC,KAAG,IAAI;QAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9F,IAAG,YAAY,CAAC,QAAQ,CAAC,SAAS,KAAG,YAAY,CAAC,MAAM,CAAC,SAAS,IAAE,YAAY,CAAC,QAAQ,CAAC,YAAY,KAAG,SAAS,IAAE,YAAY,CAAC,QAAQ,CAAC,YAAY,KAAG,YAAY,CAAC,UAAU,CAAC,EAAE;QAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAChP,IAAG,YAAY,CAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,KAAG,CAAC,IAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,gBAAgB,IAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,IAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC9Q,KAAI,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAA,CAAC,CAAA,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,CAAC,EAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,IAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAC,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACtV,IAAG,YAAY,CAAC,MAAM,CAAC,SAAS,IAAE,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,IAAE,YAAY,CAAC,MAAM,CAAC,WAAW,KAAG,GAAG,IAAE,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,GAAC,GAAG,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,2EAA2E,CAAC,CAAC;IACtT,KAAI,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAE,EAAE,EAAC,CAAC;QAC1D,MAAM,MAAM,GAAC,YAAY,CAAC,MAAM,CAAC,WAAW,KAAG,GAAG,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,YAAY,CAAC,MAAM,CAAC,WAAW,GAAC,GAAG,CAAC;QAC1F,MAAM,QAAQ,GAAC,CAAC,KAAK,CAAC,KAAK,EAAC,GAAG,KAAK,CAAC,YAAY,EAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,CAAC,KAAK,CAAC,MAAM,EAAC,GAAG,CAAC,KAAK,CAAC,aAAa,IAAE,EAAE,CAAC,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAA,CAAC,CAAA,CAAC,KAAK,CAAC,cAAc,EAAC,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC,CAAC;QAC1P,KAAI,MAAM,GAAG,IAAI,QAAQ;YAAC,IAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAC,MAAM,GAAC,GAAG,CAAC;gBAAC,MAAM,KAAK,CAAC,sDAAsD,GAAG,EAAE,CAAC,CAAC;QAChK,MAAM,MAAM,GAAC,CAAC,IAAa,EAAC,EAAE,CAAA,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,GAAG,EAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7I,MAAM,OAAO,GAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QACvF,IAAG,CAAC,OAAO,IAAE,OAAO,CAAC,OAAO,KAAG,KAAK,CAAC,EAAE,IAAE,OAAO,CAAC,SAAS,KAAG,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,EAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,IAAE,KAAK,CAAC,MAAM,IAAE,OAAO,CAAC,UAAU,KAAG,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,EAAC,GAAG,CAAC,KAAK,CAAC,aAAa,IAAE,EAAE,CAAC,CAAC,CAAC,IAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,KAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,4CAA4C,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAClV,CAAC;IACD,IAAG,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,KAAG,YAAY,CAAC,MAAM,CAAC,MAAM,IAAE,IAAI,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,KAAG,YAAY,CAAC,WAAW,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACjL,IAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,QAAQ,KAAG,OAAO,CAAC;QAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAChI,MAAM,OAAO,GAAC,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAE,EAAC,YAAY,CAAC,QAAQ,EAAC,WAAW,EAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAC,EAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAE,EAAC,CAAC,CAAC,EAAE,EAAC,WAAW,EAAC,CAAC,CAAC,WAAW,EAAC,CAAC,CAAC,EAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,EAAE,EAAC,CAAC,CAAC,EAAE,EAAC,WAAW,EAAC,CAAC,CAAC,YAAY,EAAC,CAAC,CAAC,CAAC,CAAC;IAC9R,IAAG,IAAI,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAG,YAAY,CAAC,SAAS,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChI,KAAI,MAAM,QAAQ,IAAI,YAAY,CAAC,SAAS;QAAC,IAAG,QAAQ,CAAC,MAAM,KAAG,MAAM,IAAE,QAAQ,CAAC,gBAAgB,KAAG,YAAY,CAAC,MAAM,CAAC,SAAS,IAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAG,QAAQ,IAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAG,sBAAsB,YAAY,CAAC,UAAU,CAAC,QAAQ,SAAS,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,CAAC,CAAC,CAAC,KAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAE,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAG,IAAI;YAAC,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACld,KAAI,MAAM,MAAM,IAAI,OAAO;QAAC,IAAG,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,WAAW,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3J,KAAI,MAAM,KAAK,IAAI,YAAY,CAAC,WAAW,EAAC,CAAC;QAAA,MAAM,QAAQ,GAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAAA,IAAG,CAAC,QAAQ,IAAE,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAG,KAAK,CAAC,OAAO,CAAC,MAAM,IAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAG,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAAA,CAAC;IAC7U,MAAM,MAAM,GAAC,MAAM,CAAC,EAAC,YAAY,EAAC,MAAM,EAAC,IAAI,CAAC,YAAY,CAAC,EAAC,CAAC,CAAC;IAAA,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAAA,OAAO,MAAM,CAAC;AACzG,CAAC;AACD,KAAK,UAAU,iBAAiB,CAAC,WAAkB,EAAC,SAAgB;IACnE,MAAM,OAAO,GAAC,MAAM,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,WAAW,EAAC,CAAC,WAAW,EAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAC,IAAI,GAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAC,IAAI,GAAC,QAAQ,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAClK,IAAG,IAAI,KAAG,EAAE,IAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAE,IAAI,KAAG,IAAI,IAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC/I,MAAM,IAAI,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAAA,IAAG,CAAC,IAAI,CAAC,WAAW,EAAE;QAAC,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACvG,IAAG,OAAO,CAAC,QAAQ,KAAG,OAAO,IAAE,CAAC,CAAC,IAAI,CAAC,IAAI,GAAC,KAAK,CAAC,KAAG,CAAC,IAAE,OAAO,OAAO,CAAC,MAAM,KAAG,UAAU,IAAE,IAAI,CAAC,GAAG,KAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACvM,OAAO,IAAI,CAAC;AACb,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAkB,EAAC,SAAgB,EAAC,MAA2B;IACxG,IAAG,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACzH,MAAM,IAAI,GAAC,MAAM,iBAAiB,CAAC,WAAW,EAAC,SAAS,CAAC,EAAC,IAAI,GAAC,gBAAgB,MAAM,CAAC,MAAM,OAAO,EAAC,OAAO,GAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,GAAC,IAAI,CAAC;IACpJ,IAAG,CAAC;QAAA,MAAM,WAAW,CAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAAA,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;YAAC,MAAM,KAAK,CAAC;QAAA,MAAM,MAAM,GAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAAA,IAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAAA,CAAC;IACvQ,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,EAAC,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,CAAC;AACpD,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAkB,EAAC,IAAW,EAAC,cAAqB;IAC1F,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAAA,MAAM,MAAM,GAAC,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,GAAC,MAAM,iBAAiB,CAAC,WAAW,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACtH,MAAM,YAAY,GAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7I,IAAG,IAAI,CAAC,YAAY,CAAC,KAAG,cAAc;QAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC;AAC7B,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,uBAAuB,CAAC,KAAkB;IACzD,MAAM,CAAC,GAAC,kBAAkB,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAC,MAAM,GAAC,CAAC,CAAC,MAAM,CAAC,WAAW,KAAG,GAAG,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,CAAC,CAAC,MAAM,CAAC,WAAW,GAAC,GAAG,CAAC;IACvH,MAAM,KAAK,GAAC,CAAC,IAAW,EAAC,EAAE,GAAC,IAAG,MAAM,IAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAC,MAAM,KAAK,CAAC,6DAA6D,CAAC,CAAC,CAAA,MAAM,MAAM,GAAC,MAAM,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAA,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,OAAO,MAAM,CAAC,CAAA,CAAC,CAAC;IAC/O,OAAO,MAAM,CAAC,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,QAAQ,EAAC,EAAC,GAAG,CAAC,CAAC,QAAQ,EAAC,SAAS,EAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,EAAC,GAAG,CAAC,EAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAC,CAAC,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,EAAC,GAAG,CAAC,EAAC,MAAM,EAAC,EAAC,GAAG,CAAC,CAAC,MAAM,EAAC,GAAG,EAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAC,EAAC,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAC,WAAW,EAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAC,WAAW,EAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,EAAC,GAAG,CAAC,EAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC;AACvf,CAAC"}

package/dist/report.d.ts

@@ -0,0 +1,23 @@
+import { type CheckReport, type Evaluation, type EvidenceSubject } from '@behavproof/core';
+export declare function remediationFor(e: Evaluation): string;
+export type PolicyDiff = {
+    rules: {
+        ruleId: string;
+        protected: unknown;
+        project: unknown;
+        effective: unknown;
+    }[];
+    configuration: {
+        field: string;
+        protected: unknown;
+        project: unknown;
+        effective: unknown;
+    }[];
+    weakened: boolean;
+};
+export declare function formatReport(report: CheckReport & {
+    policyDiff?: PolicyDiff | null;
+    subject?: EvidenceSubject;
+    effectivePolicyHash?: string;
+}, format: string): string;
+//# sourceMappingURL=report.d.ts.map

package/dist/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,WAAW,EAAC,KAAK,UAAU,EAAC,KAAK,eAAe,EAAC,MAAM,kBAAkB,CAAC;AAkBrG,wBAAgB,cAAc,CAAC,CAAC,EAAC,UAAU,UAAgL;AAC3N,MAAM,MAAM,UAAU,GAAC;IAAC,KAAK,EAAC;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,OAAO,CAAC;QAAA,OAAO,EAAC,OAAO,CAAC;QAAA,SAAS,EAAC,OAAO,CAAA;KAAC,EAAE,CAAC;IAAA,aAAa,EAAC;QAAC,KAAK,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,OAAO,CAAC;QAAA,OAAO,EAAC,OAAO,CAAC;QAAA,SAAS,EAAC,OAAO,CAAA;KAAC,EAAE,CAAC;IAAA,QAAQ,EAAC,OAAO,CAAA;CAAC,CAAC;AACzM,wBAAgB,YAAY,CAAC,MAAM,EAAC,WAAW,GAAC;IAAC,UAAU,CAAC,EAAC,UAAU,GAAC,IAAI,CAAC;IAAA,OAAO,CAAC,EAAC,eAAe,CAAC;IAAA,mBAAmB,CAAC,EAAC,MAAM,CAAA;CAAC,EAAC,MAAM,EAAC,MAAM,UAY/I"}

package/dist/report.js

@@ -0,0 +1,34 @@
+import { canonicalJson } from '@behavproof/core';
+const actions = {
+    testResult: 'Inspect failed, skipped or missing tests; rerun the trusted Collector and authenticate its current reports.',
+    changedLineCoverage: 'Collect complete LCOV for the changed source scope and meet the protected coverage threshold.',
+    mutationScore: 'Collect current scoped mutants, inspect survivors and uncovered/error cases, and meet the protected score and minimum count.',
+    pipelineIntegrity: 'Inspect required upstream jobs, current run/attempt artifacts, protected workflow and issuer-bound required checks.',
+    intentApproval: 'Obtain an authorized human review of this exact Intent/Contract change and register it through the protected host.',
+    contractExecution: 'Execute every retained required case without skip using the matching contract/binding, and authenticate both test reports.',
+    negativeCases: 'Declare and execute the required negative cases against their retained contract revision.',
+    policyProtection: 'Restore the protected policy and source scope, or obtain a separately reviewed host registration for the proposed change.',
+    productionTargetObserved: 'Collect case-scoped calls of the registered real production target; passing comparisons do not establish reach.',
+    mutationSensitivityObserved: 'Run the registered case-scoped fault probe and retain actual failing comparisons separately from ordinary successful evidence.',
+    evidenceIntegrity: 'Discard stale or modified reports; collect fresh bytes through the independently selected producer and retain the host capture.',
+    evaluationEnvironment: 'Use a supported single-package project with clean, completely inventoried source inputs.',
+    evaluationSnapshot: 'Keep source, HEAD and configuration stable for the full evaluation, then rerun against freshly authenticated evidence.',
+    testedCommitRelationship: 'Fetch the pinned PR head/base and actual tested Git parents; do not relabel an unrelated commit.',
+};
+export function remediationFor(e) { return e.remediation ?? actions[e.ruleId] ?? 'Inspect this rule and its JSON evidence; configure its authenticated evaluator or restore the protected policy, then rerun check.'; }
+export function formatReport(report, format) {
+    if (format === 'json')
+        return canonicalJson(report) + '\n';
+    const scope = (e) => e.scope.length ? JSON.stringify(e.scope) : 'project';
+    const conditions = [...(report.subject ? [`Tested: ${report.subject.testedCommitSha}; PR head: ${report.subject.prHeadSha ?? 'unknown'}; base: ${report.subject.baseSha ?? 'unknown'}; dirty: ${report.subject.dirty}`] : []), ...(report.effectivePolicyHash ? [`Effective policy: ${report.effectivePolicyHash}`] : [])];
+    const rows = report.policyDiff ? [...report.policyDiff.rules.map(r => ({ name: r.ruleId, ...r })), ...report.policyDiff.configuration.map(r => ({ name: r.field, ...r }))] : [];
+    if (format === 'markdown') {
+        const escape = (s) => s.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('|', '&#124;').replaceAll('\n', ' ');
+        const table = `# BehavProof ${report.status}\n\n${conditions.length ? conditions.map(escape).join('\n\n') + '\n\n' : ''}| Rule | Scope | Evidence | Severity | Status | Reason | Action |\n| --- | --- | --- | --- | --- | --- | --- |\n${report.evaluations.map(e => `| ${escape(e.ruleId)} | ${escape(scope(e))} | ${escape(e.evidenceIds.join(', '))} | ${e.severity} | ${e.status} | ${escape(e.message)} | ${escape(e.remediation ?? '')} |`).join('\n')}\n`;
+        return table + (rows.length ? `\n## Policy comparison\n\n| Rule / configuration | Protected | Project | Effective |\n| --- | --- | --- | --- |\n${rows.map(r => `| ${escape(r.name)} | ${escape(canonicalJson(r.protected))} | ${escape(canonicalJson(r.project))} | ${escape(canonicalJson(r.effective))} |`).join('\n')}\n` : '');
+    }
+    if (format !== 'console')
+        throw Error('Unsupported report format');
+    return `BehavProof: ${report.status} (${report.mandatoryCount} mandatory rules)\n${conditions.length ? conditions.join('\n') + '\n' : ''}${report.evaluations.map(e => `${e.status.padEnd(14)} ${e.severity.padEnd(5)} ${e.ruleId} [${scope(e)}]: ${e.message}${e.evidenceIds.length ? `\n  Evidence: ${JSON.stringify(e.evidenceIds)}` : ''}${e.remediation ? `\n  Action: ${e.remediation}` : ''}`).join('\n')}\n` + (rows.length ? `\nPolicy comparison:\n${rows.map(r => `${r.name}: protected=${canonicalJson(r.protected)} project=${canonicalJson(r.project)} effective=${canonicalJson(r.effective)}`).join('\n')}\n` : '');
+}
+//# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAuD,MAAM,kBAAkB,CAAC;AAErG,MAAM,OAAO,GAAuB;IACnC,UAAU,EAAC,6GAA6G;IACxH,mBAAmB,EAAC,+FAA+F;IACnH,aAAa,EAAC,8HAA8H;IAC5I,iBAAiB,EAAC,qHAAqH;IACvI,cAAc,EAAC,oHAAoH;IACnI,iBAAiB,EAAC,4HAA4H;IAC9I,aAAa,EAAC,2FAA2F;IACzG,gBAAgB,EAAC,2HAA2H;IAC5I,wBAAwB,EAAC,iHAAiH;IAC1I,2BAA2B,EAAC,gIAAgI;IAC5J,iBAAiB,EAAC,iIAAiI;IACnJ,qBAAqB,EAAC,0FAA0F;IAChH,kBAAkB,EAAC,wHAAwH;IAC3I,wBAAwB,EAAC,kGAAkG;CAC3H,CAAC;AACF,MAAM,UAAU,cAAc,CAAC,CAAY,IAAE,OAAO,CAAC,CAAC,WAAW,IAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAE,mIAAmI,CAAC,CAAA,CAAC;AAE3N,MAAM,UAAU,YAAY,CAAC,MAAqG,EAAC,MAAa;IAC/I,IAAG,MAAM,KAAG,MAAM;QAAC,OAAO,aAAa,CAAC,MAAM,CAAC,GAAC,IAAI,CAAC;IACrD,MAAM,KAAK,GAAC,CAAC,CAAY,EAAC,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;IAC7E,MAAM,UAAU,GAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAA,CAAC,CAAA,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,eAAe,cAAc,MAAM,CAAC,OAAO,CAAC,SAAS,IAAE,SAAS,WAAW,MAAM,CAAC,OAAO,CAAC,OAAO,IAAE,SAAS,YAAY,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAA,CAAC,CAAA,CAAC,qBAAqB,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC,CAAC;IAC5S,MAAM,IAAI,GAAC,MAAM,CAAC,UAAU,CAAA,CAAC,CAAA,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,EAAC,GAAG,CAAC,EAAC,CAAC,CAAC,EAAC,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,KAAK,EAAC,GAAG,CAAC,EAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC;IAC7J,IAAG,MAAM,KAAG,UAAU,EAAC,CAAC;QACvB,MAAM,MAAM,GAAC,CAAC,CAAQ,EAAC,EAAE,CAAA,CAAC,CAAC,UAAU,CAAC,GAAG,EAAC,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,IAAI,EAAC,GAAG,CAAC,CAAC;QACxH,MAAM,KAAK,GAAC,gBAAgB,MAAM,CAAC,MAAM,OAAO,UAAU,CAAC,MAAM,CAAA,CAAC,CAAA,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAC,MAAM,CAAA,CAAC,CAAA,EAAE,mHAAmH,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,MAAM,MAAM,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,WAAW,IAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACtb,OAAO,KAAK,GAAC,CAAC,IAAI,CAAC,MAAM,CAAA,CAAC,CAAA,oHAAoH,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC;IAC7T,CAAC;IACD,IAAG,MAAM,KAAG,SAAS;QAAC,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/D,OAAO,eAAe,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,cAAc,sBAAsB,UAAU,CAAC,MAAM,CAAA,CAAC,CAAA,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAC,IAAI,CAAA,CAAC,CAAA,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,CAAA,CAAC,CAAA,iBAAiB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAA,CAAC,CAAA,EAAE,GAAG,CAAC,CAAC,WAAW,CAAA,CAAC,CAAA,eAAe,CAAC,CAAC,WAAW,EAAE,CAAA,CAAC,CAAA,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAC,CAAC,IAAI,CAAC,MAAM,CAAA,CAAC,CAAA,yBAAyB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,GAAG,CAAC,CAAC,IAAI,eAAe,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC;AAC7kB,CAAC"}

package/dist/scopes.d.ts

@@ -0,0 +1,48 @@
+import { type Config, type Policy, type RegistrySnapshot, type EvidenceStatus } from '@behavproof/core';
+import { type CoverageReport, type MutationReport, type Scope } from '@behavproof/adapter-reports';
+import { type ExecutionRow } from '@behavproof/contract-registry';
+type State = {
+    status: EvidenceStatus;
+    message: string;
+    evidenceIds: string[];
+    remediation?: string;
+};
+export declare function scopedEvaluations(input: {
+    config: Config;
+    protectedConfig?: Config;
+    policy: Policy;
+    registry: RegistrySnapshot;
+    files: readonly string[];
+    states: ReadonlyMap<string, State>;
+    rows: ExecutionRow[];
+    bindings: Record<string, string>;
+    verifyRow: (row: ExecutionRow) => boolean;
+    claims: ReadonlyMap<string, Record<string, string>>;
+    claimScopes: readonly {
+        contractId: string;
+        targetRef: string;
+    }[];
+    intentStatus: ReadonlyMap<string, string>;
+    coverage?: CoverageReport;
+    mutation?: MutationReport;
+    coverageTrusted: boolean;
+    mutationTrusted: boolean;
+    mapping: boolean;
+    changed: Scope;
+    sources: Readonly<Record<string, string>>;
+}): {
+    ruleId: string;
+    severity: "error" | "off" | "warn";
+    status: "unknown" | "pass" | "fail" | "not_applicable";
+    evidenceIds: string[];
+    scope: string[];
+    message: string;
+    remediation?: string | undefined;
+    notApplicable?: {
+        reason: string;
+        allowedReasons: string[];
+        evidenceIds: string[];
+    } | undefined;
+}[];
+export {};
+//# sourceMappingURL=scopes.d.ts.map

package/dist/scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuD,KAAK,MAAM,EAAE,KAAK,MAAM,EAAE,KAAK,gBAAgB,EAAmB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC9K,OAAO,EAAsC,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACvI,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAErF,KAAK,KAAK,GAAC;IAAC,MAAM,EAAC,cAAc,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,EAAE,CAAC;IAAA,WAAW,CAAC,EAAC,MAAM,CAAA;CAAC,CAAC;AAG3F,wBAAgB,iBAAiB,CAAC,KAAK,EAAC;IAAC,MAAM,EAAC,MAAM,CAAC;IAAA,eAAe,CAAC,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,gBAAgB,CAAC;IAAA,KAAK,EAAC,SAAS,MAAM,EAAE,CAAC;IAAA,MAAM,EAAC,WAAW,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC;IAAA,IAAI,EAAC,YAAY,EAAE,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IAAA,SAAS,EAAC,CAAC,GAAG,EAAC,YAAY,KAAG,OAAO,CAAC;IAAA,MAAM,EAAC,WAAW,CAAC,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAC;IAAA,WAAW,EAAC,SAAS;QAAC,UAAU,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,EAAE,CAAC;IAAA,YAAY,EAAC,WAAW,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IAAA,QAAQ,CAAC,EAAC,cAAc,CAAC;IAAA,QAAQ,CAAC,EAAC,cAAc,CAAC;IAAA,eAAe,EAAC,OAAO,CAAC;IAAA,eAAe,EAAC,OAAO,CAAC;IAAA,OAAO,EAAC,OAAO,CAAC;IAAA,OAAO,EAAC,KAAK,CAAC;IAAA,OAAO,EAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAA;CAAC;;;;;;;;;;;;;IA4BrkB"}

package/dist/scopes.js

@@ -0,0 +1,60 @@
+import { getProfilePolicy, resolveRisk, mergeProtectedPolicy } from '@behavproof/core';
+import { evaluateCoverage, evaluateMutation } from '@behavproof/adapter-reports';
+import { evaluateAssurance } from '@behavproof/contract-registry';
+import { impactSeverity } from './impact.js';
+const worst = (states) => states.includes('fail') ? 'fail' : states.length && states.every(s => s === 'pass') ? 'pass' : 'unknown';
+const sourcePath = (ref) => ref.replace(/:\d+(?::\d+)?$/, '');
+export function scopedEvaluations(input) {
+    const contexts = [];
+    for (const c of input.registry.contracts)
+        contexts.push({ id: c.id, path: sourcePath(c.sourceRef), contractId: c.id, kind: c.kind, ...(c.risk ? { declaredRisk: c.risk } : {}) });
+    for (const path of input.files) {
+        const module = path.replace(/\.[cm]?[jt]sx?$/, '');
+        if ([...input.config.riskOverrides, ...(input.protectedConfig?.riskOverrides ?? [])].some(o => o.selector.kind === 'module' ? o.selector.value === module : o.selector.kind === 'path' && resolveRisk({ ...input.config, riskOverrides: [o] }, { path, module }) !== input.config.profile))
+            contexts.push({ id: path, path });
+    }
+    const result = [];
+    for (const context of contexts) {
+        const target = { path: context.path, module: context.path.replace(/\.[cm]?[jt]sx?$/, ''), ...(context.kind ? { contractKind: context.kind } : {}), ...(context.declaredRisk ? { declaredRisk: context.declaredRisk } : {}) };
+        const protectedRisk = input.protectedConfig ? resolveRisk(input.protectedConfig, target) : undefined, risk = resolveRisk(input.config, target, protectedRisk), profile = getProfilePolicy(risk);
+        // Risk selects mandatory obligations; numerical parameters come from the
+        // already merged project/protected policy rather than reapplying preset defaults.
+        for (const [id, rule] of Object.entries(profile.rules)) {
+            const configured = input.policy.rules[id];
+            if (configured?.min !== undefined)
+                rule.min = configured.min;
+            if (configured?.minMutants !== undefined)
+                rule.minMutants = configured.minMutants;
+            if (configured?.allowNotApplicable)
+                rule.allowNotApplicable = configured.allowNotApplicable;
+        }
+        const effective = mergeProtectedPolicy(input.policy, profile);
+        effective.rules.changeImpact = { severity: impactSeverity(risk, effective.rules.changeImpact) };
+        const contracts = context.contractId ? input.registry.contracts.filter(c => c.id === context.contractId) : input.registry.contracts.filter(c => sourcePath(c.sourceRef) === context.path || input.claimScopes.some(s => s.contractId === c.id && s.targetRef.split('#')[0] === context.path));
+        const selected = { ...input.registry, contracts }, assurance = evaluateAssurance(selected, input.rows, input.bindings, input.verifyRow), facts = new Map(input.states);
+        facts.set('contractExecution', { status: assurance.cases_executed, message: `Scoped ${risk} contract comparison requirements`, evidenceIds: [] });
+        const intents = [...new Set(contracts.flatMap(c => c.intentIds))];
+        facts.set('intentApproval', { status: worst(intents.map(id => input.intentStatus.get(id) ?? 'unknown')), message: 'Scoped Intent approval requirements', evidenceIds: [] });
+        for (const [rule, claim] of [['negativeCases', 'negative_cases'], ['productionTargetObserved', 'production_target_observed'], ['mutationSensitivityObserved', 'mutation_sensitivity_observed']])
+            facts.set(rule, { status: worst(contracts.map(c => input.claims.get(c.id)?.[claim] ?? 'unknown')), message: `Scoped ${risk} case evidence required`, evidenceIds: [] });
+        const paths = context.contractId ? input.claimScopes.filter(s => s.contractId === context.contractId).map(s => s.targetRef.split('#')[0]) : [context.path], scope = Object.fromEntries(Object.entries(input.changed).filter(([path]) => paths.includes(path)));
+        if (input.coverage) {
+            const evaluation = evaluateCoverage(input.coverage, scope, effective.rules.changedLineCoverage?.min ?? 80, {}, input.mapping);
+            facts.set('changedLineCoverage', { status: input.coverageTrusted ? evaluation.status : 'unknown', message: `Scoped changed lines: ${JSON.stringify(evaluation.payload)}`, evidenceIds: [] });
+        }
+        else
+            facts.set('changedLineCoverage', { status: 'unknown', message: 'Scoped coverage unavailable', evidenceIds: [] });
+        if (input.mutation) {
+            const p = effective.rules.mutationScore, evaluation = evaluateMutation(input.mutation, scope, p?.min ?? 70, p?.minMutants ?? 10, input.sources, input.mapping);
+            facts.set('mutationScore', { status: input.mutationTrusted ? evaluation.status : 'unknown', message: `Scoped mutants: ${JSON.stringify(evaluation.payload)}`, evidenceIds: [] });
+        }
+        else
+            facts.set('mutationScore', { status: 'unknown', message: 'Scoped mutation data unavailable', evidenceIds: [] });
+        for (const [ruleId, rule] of Object.entries(effective.rules)) {
+            const fact = facts.get(ruleId);
+            result.push({ ruleId, severity: rule.severity, status: fact?.status ?? 'unknown', scope: [context.contractId ? 'contract' : 'path', context.id], evidenceIds: fact?.evidenceIds ?? [], message: fact?.message ?? `Evidence unavailable for ${risk} scope`, ...(fact?.remediation ? { remediation: fact.remediation } : {}) });
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=scopes.js.map

package/dist/scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,oBAAoB,EAAyF,MAAM,kBAAkB,CAAC;AAC9K,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAwD,MAAM,6BAA6B,CAAC;AACvI,OAAO,EAAE,iBAAiB,EAAqB,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAC,cAAc,EAAC,MAAM,aAAa,CAAC;AAE3C,MAAM,KAAK,GAAC,CAAC,MAAwB,EAAgB,EAAE,CAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,MAAM,CAAC,MAAM,IAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,MAAM,CAAC,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,SAAS,CAAC;AAClJ,MAAM,UAAU,GAAC,CAAC,GAAU,EAAC,EAAE,CAAA,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAC,EAAE,CAAC,CAAC;AAChE,MAAM,UAAU,iBAAiB,CAAC,KAAoiB;IACrkB,MAAM,QAAQ,GAA8I,EAAE,CAAC;IAC/J,KAAI,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,CAAC,CAAC,EAAE,EAAC,IAAI,EAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,EAAC,UAAU,EAAC,CAAC,CAAC,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,CAAC,CAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;IAC/J,KAAI,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAC,CAAC;QAAA,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAC,EAAE,CAAC,CAAC;QAAA,IAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,EAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,aAAa,IAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAG,MAAM,CAAA,CAAC,CAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAG,MAAM,IAAE,WAAW,CAAC,EAAC,GAAG,KAAK,CAAC,MAAM,EAAC,aAAa,EAAC,CAAC,CAAC,CAAC,EAAC,EAAC,EAAC,IAAI,EAAC,MAAM,EAAC,CAAC,KAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;IAAA,CAAC;IAC7W,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAI,MAAM,OAAO,IAAI,QAAQ,EAAC,CAAC;QAC9B,MAAM,MAAM,GAAC,EAAC,IAAI,EAAC,OAAO,CAAC,IAAI,EAAC,MAAM,EAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAC,EAAE,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,OAAO,CAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,OAAO,CAAC,YAAY,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC;QACrM,MAAM,aAAa,GAAC,KAAK,CAAC,eAAe,CAAA,CAAC,CAAA,WAAW,CAAC,KAAK,CAAC,eAAe,EAAC,MAAM,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,IAAI,GAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAC,MAAM,EAAC,aAAa,CAAC,EAAC,OAAO,GAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACjL,yEAAyE;QACzE,kFAAkF;QAClF,KAAI,MAAM,CAAC,EAAE,EAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,CAAC;YAAA,MAAM,UAAU,GAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,UAAU,EAAE,GAAG,KAAG,SAAS;gBAAC,IAAI,CAAC,GAAG,GAAC,UAAU,CAAC,GAAG,CAAC;YAAA,IAAG,UAAU,EAAE,UAAU,KAAG,SAAS;gBAAC,IAAI,CAAC,UAAU,GAAC,UAAU,CAAC,UAAU,CAAC;YAAA,IAAG,UAAU,EAAE,kBAAkB;gBAAC,IAAI,CAAC,kBAAkB,GAAC,UAAU,CAAC,kBAAkB,CAAC;QAAA,CAAC;QAC1T,MAAM,SAAS,GAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC;QAC3D,SAAS,CAAC,KAAK,CAAC,YAAY,GAAC,EAAC,QAAQ,EAAC,cAAc,CAAC,IAAI,EAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,EAAC,CAAC;QAC1F,MAAM,SAAS,GAAC,OAAO,CAAC,UAAU,CAAA,CAAC,CAAA,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,OAAO,CAAC,UAAU,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,KAAG,OAAO,CAAC,IAAI,IAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,KAAG,CAAC,CAAC,EAAE,IAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACtQ,MAAM,QAAQ,GAAC,EAAC,GAAG,KAAK,CAAC,QAAQ,EAAC,SAAS,EAAC,EAAC,SAAS,GAAC,iBAAiB,CAAC,QAAQ,EAAC,KAAK,CAAC,IAAI,EAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,SAAS,CAAC,EAAC,KAAK,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzJ,KAAK,CAAC,GAAG,CAAC,mBAAmB,EAAC,EAAC,MAAM,EAAC,SAAS,CAAC,cAAc,EAAC,OAAO,EAAC,UAAU,IAAI,mCAAmC,EAAC,WAAW,EAAC,EAAE,EAAC,CAAC,CAAC;QAC1I,MAAM,OAAO,GAAC,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAAA,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAC,EAAC,MAAM,EAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA,EAAE,CAAA,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAE,SAAS,CAAC,CAAC,EAAC,OAAO,EAAC,qCAAqC,EAAC,WAAW,EAAC,EAAE,EAAC,CAAC,CAAC;QAC9N,KAAI,MAAM,CAAC,IAAI,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,eAAe,EAAC,gBAAgB,CAAC,EAAC,CAAC,0BAA0B,EAAC,4BAA4B,CAAC,EAAC,CAAC,6BAA6B,EAAC,+BAA+B,CAAC,CAAU;YAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAC,EAAC,MAAM,EAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAE,SAAS,CAAC,CAAC,EAAC,OAAO,EAAC,UAAU,IAAI,yBAAyB,EAAC,WAAW,EAAC,EAAE,EAAC,CAAC,CAAC;QAC9V,MAAM,KAAK,GAAC,OAAO,CAAC,UAAU,CAAA,CAAC,CAAA,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,KAAG,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAA,CAAC,CAAA,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,KAAK,GAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAC,EAAE,CAAA,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/O,IAAG,KAAK,CAAC,QAAQ,EAAC,CAAC;YAAA,MAAM,UAAU,GAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,IAAE,EAAE,EAAC,EAAE,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAAA,KAAK,CAAC,GAAG,CAAC,qBAAqB,EAAC,EAAC,MAAM,EAAC,KAAK,CAAC,eAAe,CAAA,CAAC,CAAA,UAAU,CAAC,MAAM,CAAA,CAAC,CAAA,SAAS,EAAC,OAAO,EAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAC,WAAW,EAAC,EAAE,EAAC,CAAC,CAAC;QAAA,CAAC;;YACtT,KAAK,CAAC,GAAG,CAAC,qBAAqB,EAAC,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,EAAC,6BAA6B,EAAC,WAAW,EAAC,EAAE,EAAC,CAAC,CAAC;QAC9G,IAAG,KAAK,CAAC,QAAQ,EAAC,CAAC;YAAA,MAAM,CAAC,GAAC,SAAS,CAAC,KAAK,CAAC,aAAa,EAAC,UAAU,GAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,EAAE,GAAG,IAAE,EAAE,EAAC,CAAC,EAAE,UAAU,IAAE,EAAE,EAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAAA,KAAK,CAAC,GAAG,CAAC,eAAe,EAAC,EAAC,MAAM,EAAC,KAAK,CAAC,eAAe,CAAA,CAAC,CAAA,UAAU,CAAC,MAAM,CAAA,CAAC,CAAA,SAAS,EAAC,OAAO,EAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAC,WAAW,EAAC,EAAE,EAAC,CAAC,CAAC;QAAA,CAAC;;YACrU,KAAK,CAAC,GAAG,CAAC,eAAe,EAAC,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,EAAC,kCAAkC,EAAC,WAAW,EAAC,EAAE,EAAC,CAAC,CAAC;QAC7G,KAAI,MAAM,CAAC,MAAM,EAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAC,CAAC;YAC3D,MAAM,IAAI,GAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAAA,MAAM,CAAC,IAAI,CAAC,EAAC,MAAM,EAAC,QAAQ,EAAC,IAAI,CAAC,QAAQ,EAAC,MAAM,EAAC,IAAI,EAAE,MAAM,IAAE,SAAS,EAAC,KAAK,EAAC,CAAC,OAAO,CAAC,UAAU,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,MAAM,EAAC,OAAO,CAAC,EAAE,CAAC,EAAC,WAAW,EAAC,IAAI,EAAE,WAAW,IAAE,EAAE,EAAC,OAAO,EAAC,IAAI,EAAE,OAAO,IAAE,4BAA4B,IAAI,QAAQ,EAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;QAC7T,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC"}