@inventarch/compliance 0.0.0-stage → 1.0.0

package/dist/evidence.js

@@ -0,0 +1,468 @@
+import { stableSerialize } from '@inventarch/graph';
+import { isBuiltinCheck } from './check-ids.js';
+import { DIGEST, assertCatalog, catalogEntry, codecOf } from './catalog.js';
+import { PREDICATE_ID, isIssuedResolution, obligationIdOf, resolutionDigest } from './obligations.js';
+import { bounded, compareText, deepFreeze, exactKeys, frozenCopy, jsonData, record, sanitized, sha256, } from './shape.js';
+import { assess } from './types.js';
+/** Current receipt format (C28). Any other value refuses. */
+export const EVIDENCE_RECEIPT_FORMAT = 'ia-evidence-receipt/1';
+export const EVIDENCE_RESULTS = Object.freeze([
+    'passed',
+    'failed',
+    'unavailable',
+    'error',
+    'cancelled',
+    'not-evaluated',
+    'not-applicable',
+]);
+const RECEIPT_KEYS = [
+    'format',
+    'receiptId',
+    'attemptId',
+    'obligationId',
+    'subject',
+    'inputDigest',
+    'digests',
+    'environment',
+    'evaluator',
+    'catalogDigest',
+    'policyRevision',
+    'observedAt',
+    'completedAt',
+    'result',
+    'evidenceDigest',
+    'issuer',
+    'trust',
+];
+const DIGEST_KEYS = ['candidate', 'native', 'code', 'policy', 'dependency'];
+const INSTANT = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d{1,3})?Z$/;
+const TRUST = ['local-unsigned', 'service-associated'];
+/** Milliseconds for a real ISO-8601 UTC instant; calendar-invalid dates (e.g. 02-30) are rejected by round trip. */
+function instant(value) {
+    if (typeof value !== 'string' || !INSTANT.test(value))
+        return undefined;
+    const ms = Date.parse(value);
+    return Number.isNaN(ms) || new Date(ms).toISOString().slice(0, 19) !== value.slice(0, 19) ? undefined : ms;
+}
+function note(code, path, message, identity, warning = false) {
+    return {
+        code,
+        severity: warning ? 'warning' : 'error',
+        path,
+        line: 1,
+        ...(identity === undefined ? {} : { identity }),
+        message: `${path}: ${message}`,
+    };
+}
+function trustPolicy(context) {
+    assertCatalog(context.catalog);
+    if (!TRUST.includes(context.minimumTrust))
+        throw new TypeError('minimumTrust is required: local-unsigned or service-associated');
+    if (context.verifyServiceReceipt !== undefined && typeof context.verifyServiceReceipt !== 'function')
+        throw new TypeError('verifyServiceReceipt must be a function');
+}
+/** sha256 of the canonical serialization of JSON evidence (stableSerialize). */
+export function evidenceDigest(value) {
+    return sha256(value ?? null);
+}
+const freshRun = (obligation) => obligation.evidencePolicy.kind === 'fresh-run';
+const environmentBound = (obligation) => obligation.evidencePolicy.kind === 'fresh-run' || obligation.evidencePolicy.environmentSensitive;
+/**
+ * EVAL-04 deduplication key: candidate, obligation, evaluator, policy revision and digest, the relevant environment
+ * ({id, toolchain} or toolchain only, nothing else) and, for fresh-run, the transition attempt.
+ */
+export function evidenceKey(obligation, context) {
+    const { id, implementationVersion, implementationDigest } = obligation.evaluator, { id: environment, toolchain } = context.environment;
+    return sha256({
+        candidate: context.digests.candidate,
+        obligation: obligation.obligationId,
+        evaluator: { id, implementationVersion, implementationDigest },
+        policy: { revision: context.policyRevision, digest: context.digests.policy },
+        environment: environmentBound(obligation) ? { id: environment, toolchain } : { toolchain },
+        attempt: freshRun(obligation) ? context.attemptId : null,
+    });
+}
+function shape(receipt) {
+    if (!exactKeys(receipt, RECEIPT_KEYS))
+        return 'Receipt fields must be exactly the v1 set';
+    if (receipt.format !== EVIDENCE_RECEIPT_FORMAT)
+        return `Receipt format must be ${EVIDENCE_RECEIPT_FORMAT}`;
+    for (const key of ['receiptId', 'attemptId', 'obligationId', 'subject', 'issuer', 'policyRevision'])
+        if (!sanitized(receipt[key], 512))
+            return `Receipt ${key} must be sanitized single-line text`;
+    for (const key of ['inputDigest', 'catalogDigest', 'evidenceDigest'])
+        if (typeof receipt[key] !== 'string' || !DIGEST.test(receipt[key]))
+            return `Receipt ${key} must be a sha256 digest`;
+    const digests = receipt.digests;
+    if (!exactKeys(digests, DIGEST_KEYS) ||
+        !DIGEST_KEYS.every((k) => typeof digests[k] === 'string' && DIGEST.test(digests[k])))
+        return 'Receipt digests must be candidate, native, code, policy and dependency sha256 digests';
+    if (!exactKeys(receipt.environment, ['id', 'toolchain']) ||
+        !sanitized(receipt.environment.id, 512) ||
+        !sanitized(receipt.environment.toolchain, 512))
+        return 'Receipt environment must be {id, toolchain}';
+    if (!exactKeys(receipt.evaluator, ['id', 'implementationVersion', 'implementationDigest']) ||
+        !Object.values(receipt.evaluator).every((v) => sanitized(v, 512)))
+        return 'Receipt evaluator must be {id, implementationVersion, implementationDigest}';
+    if (!EVIDENCE_RESULTS.includes(receipt.result))
+        return 'Receipt result is not a v1 result';
+    if (!TRUST.includes(receipt.trust))
+        return 'Receipt trust must be local-unsigned or service-associated';
+    return undefined;
+}
+/**
+ * Validate one receipt against the current obligation and captured identities (C28, EVAL-03/04). `now` is an
+ * explicit ISO-8601 UTC instant; no clock is read. Refuses stale inputs, wrong subject/code/toolchain, forged,
+ * substituted or revoked evaluators, expired reuse, fresh-run reuse from another attempt and trust that the host
+ * verifier did not establish or that is below minimumTrust (D3).
+ */
+export function validateReceipt(receipt, expectation, now) {
+    trustPolicy(expectation);
+    const { obligation, catalog } = expectation, at = instant(now);
+    if (at === undefined)
+        throw new TypeError('validateReceipt requires an explicit, real ISO-8601 UTC instant');
+    const path = `<receipt ${obligation.obligationId}>`, refuse = (code, message) => deepFreeze({ valid: false, findings: [note(code, path, message, obligation.occurrence)] });
+    let problem;
+    try {
+        problem = shape(receipt);
+    }
+    catch {
+        problem = 'Receipt could not be read';
+    }
+    if (problem !== undefined)
+        return refuse('IA-COMP-RECEIPT-INVALID', problem);
+    const r = frozenCopy(receipt), observed = instant(r.observedAt), completed = instant(r.completedAt);
+    if (observed === undefined || completed === undefined || observed > completed || completed > at)
+        return refuse('IA-COMP-RECEIPT-INVALID', 'Receipt times must be real ISO-8601 UTC instants with observedAt <= completedAt <= now');
+    if (r.obligationId !== obligation.obligationId || r.subject !== obligation.subject)
+        return refuse('IA-COMP-RECEIPT-SUBJECT', 'Receipt names a different obligation or subject');
+    const expected = obligation.evaluator, same = r.evaluator.id === expected.id &&
+        r.evaluator.implementationVersion === expected.implementationVersion &&
+        r.evaluator.implementationDigest === expected.implementationDigest;
+    if (expected.builtin) {
+        if (!same || !isBuiltinCheck(expected.id))
+            return refuse('IA-COMP-RECEIPT-EVALUATOR', `Receipt evaluator is not built-in ${expected.id}`);
+    }
+    else {
+        const entry = catalogEntry(catalog, r.evaluator.id, r.evaluator.implementationVersion);
+        if (entry === undefined || entry.implementationDigest !== r.evaluator.implementationDigest)
+            return refuse('IA-COMP-RECEIPT-EVALUATOR', 'Receipt evaluator identity is unknown to the catalog or its digest is forged');
+        if (entry.availability.status === 'revoked')
+            return refuse('IA-COMP-RECEIPT-REVOKED', `Receipt evaluator ${entry.id}@${entry.implementationVersion} is revoked: ${entry.availability.reason}`);
+        if (!same)
+            return refuse('IA-COMP-RECEIPT-EVALUATOR', `Receipt evaluator is not the obligation's ${expected.id}@${expected.implementationVersion}`);
+    }
+    if (r.digests.code !== expectation.digests.code)
+        return refuse('IA-COMP-RECEIPT-CODE', 'Receipt code digest does not match the candidate code');
+    if (r.environment.toolchain !== expectation.environment.toolchain)
+        return refuse('IA-COMP-RECEIPT-TOOLCHAIN', 'Receipt toolchain does not match the current toolchain');
+    if (r.trust === 'service-associated') {
+        let verified = false;
+        try {
+            verified = expectation.verifyServiceReceipt?.(r) === true;
+        }
+        catch {
+            verified = false;
+        }
+        if (!verified)
+            return refuse('IA-COMP-RECEIPT-UNTRUSTED', 'Service-associated receipt was not verified by the host; the issuer string never establishes trust');
+    }
+    if (expectation.minimumTrust === 'service-associated' && r.trust !== 'service-associated')
+        return refuse('IA-COMP-RECEIPT-UNTRUSTED', 'A local unsigned receipt is a local diagnostic, not authenticated approval');
+    const stale = [
+        ...['candidate', 'native', 'policy', 'dependency']
+            .filter((k) => r.digests[k] !== expectation.digests[k])
+            .map((k) => `${k} digest`),
+        ...(r.inputDigest !== obligation.inputDigest ? ['input digest'] : []),
+        ...(r.policyRevision !== expectation.policyRevision ? ['policy revision'] : []),
+        ...(r.catalogDigest !== catalog.digest ? ['catalog digest'] : []),
+        ...(environmentBound(obligation) && r.environment.id !== expectation.environment.id ? ['environment'] : []),
+    ];
+    if (stale.length > 0)
+        return refuse('IA-COMP-RECEIPT-STALE', `Receipt is stale: ${stale.join(', ')} changed`);
+    if (freshRun(obligation) && r.attemptId !== expectation.attemptId)
+        return refuse('IA-COMP-RECEIPT-FRESH-RUN', 'Fresh-run obligation requires a result from this transition attempt');
+    if (obligation.evidencePolicy.kind === 'reusable' && at - completed > obligation.evidencePolicy.maxAgeMs)
+        return refuse('IA-COMP-RECEIPT-EXPIRED', `Reusable evidence is older than ${obligation.evidencePolicy.maxAgeMs} ms`);
+    return deepFreeze({
+        valid: true,
+        receipt: r,
+        key: evidenceKey(obligation, expectation),
+        trust: r.trust,
+        findings: [],
+    });
+}
+function outcomeOf(result, diagnostics, findings = [], evidence) {
+    return deepFreeze({
+        result,
+        ...(evidence === undefined ? {} : { evidence }),
+        evidenceDigest: evidence === undefined ? evidenceDigest({ result, diagnostics }) : evidenceDigest(evidence),
+        diagnostics,
+        findings,
+    });
+}
+/**
+ * Convert a host's observation of one catalog evaluator run into a bounded result (C28, EVAL-Q07). Timeouts,
+ * crashes, oversized output, an unreadable or non-JSON envelope, codec rejection or failure and evaluator-claimed
+ * results other than passed/failed become `error` with fixed compliance-authored diagnostics; no evaluator text is
+ * echoed for them. Failed diagnostics are bounded and redacted. Never throws for evaluator output; throws TypeError
+ * for a built-in obligation (use adaptBuiltinVerdict). Performs no execution.
+ */
+export function acceptEvaluatorOutput(catalog, obligation, observation, options = {}) {
+    assertCatalog(catalog);
+    if (obligation.evaluator.builtin)
+        throw new TypeError('Built-in obligations report through evaluate(); use adaptBuiltinVerdict');
+    const path = `<evaluator ${obligation.evaluator.id}>`;
+    const error = (message) => outcomeOf('error', [message], [note('IA-COMP-EVALUATOR-OUTPUT-INVALID', path, message, obligation.occurrence)]);
+    const entry = catalogEntry(catalog, obligation.evaluator.id, obligation.evaluator.implementationVersion);
+    if (entry === undefined ||
+        entry.implementationDigest !== obligation.evaluator.implementationDigest ||
+        entry.availability.status !== 'supported') {
+        const status = entry?.availability.status === 'revoked' ? 'revoked' : 'unavailable', message = `Evaluator ${obligation.evaluator.id}@${obligation.evaluator.implementationVersion} is ${status} in catalog ${catalog.digest}`;
+        return outcomeOf('unavailable', [message], [
+            note(status === 'revoked' ? 'IA-COMP-EVALUATOR-REVOKED' : 'IA-COMP-EVALUATOR-UNAVAILABLE', path, message, obligation.occurrence),
+        ]);
+    }
+    try {
+        switch (observation.kind) {
+            case 'timeout':
+                return error(`Evaluator exceeded its ${entry.limits.timeoutMs} ms timeout`);
+            case 'crashed':
+                return error('Evaluator terminated without a valid result');
+            case 'cancelled':
+                return outcomeOf('cancelled', ['Evaluation was cancelled by the host']);
+            case 'unavailable':
+                return outcomeOf('unavailable', ['Evaluator could not be started by the host'], [
+                    note('IA-COMP-EVALUATOR-UNAVAILABLE', path, 'Evaluator could not be started by the host', obligation.occurrence),
+                ]);
+            case 'completed':
+                break;
+            default:
+                return error('Host reported an unknown observation');
+        }
+        const { byteLength, output } = observation;
+        if (!Number.isSafeInteger(byteLength) || byteLength < 0)
+            return error('Evaluator output size was not reported');
+        if (byteLength > entry.limits.outputBytes)
+            return error(`Evaluator output exceeded its ${entry.limits.outputBytes} byte limit`);
+        if (!jsonData(output))
+            return error('Evaluator output is not JSON data');
+        const envelope = frozenCopy(output);
+        if (!record(envelope) ||
+            !Object.keys(envelope).every((k) => k === 'result' || k === 'evidence' || k === 'diagnostics') ||
+            !Object.hasOwn(envelope, 'evidence') ||
+            (envelope['diagnostics'] !== undefined && !Array.isArray(envelope['diagnostics'])))
+            return error('Evaluator output did not match the v1 result envelope');
+        const result = envelope['result'];
+        if (result !== 'passed' && result !== 'failed')
+            return error('Evaluator reported a result other than passed or failed');
+        const codec = codecOf(catalog, entry.outputSchemaId);
+        let valid = false;
+        try {
+            valid = codec !== undefined && codec.validate(envelope['evidence']) === true;
+        }
+        catch {
+            valid = false;
+        }
+        if (!valid)
+            return error(`Evaluator output did not satisfy codec ${entry.outputSchemaId}`);
+        return outcomeOf(result, result === 'failed' ? bounded(envelope['diagnostics'], options.secrets ?? []) : [], [], envelope['evidence']);
+    }
+    catch {
+        return error('Evaluator output could not be read');
+    }
+}
+/**
+ * Adapt a built-in compliance verdict to the result envelope (C28, spec §5): pass → passed, fail → failed,
+ * not-evaluated or no verdict → not-evaluated, so unevaluated built-in outcomes are preserved. Throws TypeError for
+ * a catalog obligation or a verdict for a different check.
+ */
+export function adaptBuiltinVerdict(obligation, verdictInput) {
+    if (!obligation.evaluator.builtin || !isBuiltinCheck(obligation.runs))
+        throw new TypeError('adaptBuiltinVerdict accepts only built-in obligations');
+    if (verdictInput === undefined)
+        return outcomeOf('not-evaluated', [`${obligation.runs}: no verdict was supplied`]);
+    if (verdictInput.check !== obligation.runs)
+        throw new TypeError(`Verdict for ${verdictInput.check} cannot discharge ${obligation.runs}`);
+    const diagnostics = bounded(verdictInput.findings.map((f) => f.message));
+    const evidence = frozenCopy({
+        check: verdictInput.check,
+        scope: verdictInput.scope,
+        revision: verdictInput.revision,
+        outcome: verdictInput.outcome,
+        findings: verdictInput.findings.map((f) => ({ code: f.code, severity: f.severity, path: f.path, line: f.line })),
+    });
+    return verdictInput.outcome === 'pass'
+        ? outcomeOf('passed', [], [], evidence)
+        : verdictInput.outcome === 'fail'
+            ? outcomeOf('failed', diagnostics, [], evidence)
+            : outcomeOf('not-evaluated', diagnostics, [], evidence);
+}
+/** D2: verify a resolution is resolver-issued (in-process brand) or matches a host-pinned digest, and is structurally sound against the catalog. */
+function verifyResolution(resolution, context) {
+    try {
+        const recomputed = resolutionDigest(resolution);
+        if (recomputed !== resolution.digest)
+            return 'resolution digest does not match its content';
+        if (!isIssuedResolution(resolution) &&
+            (context.expectedResolutionDigest === undefined || context.expectedResolutionDigest !== recomputed))
+            return 'resolution was not issued by resolveObligations in this process and its digest was not pinned by the host';
+        const ids = new Set();
+        for (const o of resolution.obligations) {
+            if (o.subject !== resolution.subject ||
+                o.obligationId !== obligationIdOf(o.subject, o.occurrence, o.requirement, o.runs) ||
+                ids.has(o.obligationId))
+                return 'obligation identity does not match its content';
+            ids.add(o.obligationId);
+            if (o.evaluator.id !== o.runs)
+                return 'obligation evaluator does not match check.runs';
+            if (o.evaluator.builtin) {
+                if (!isBuiltinCheck(o.runs) ||
+                    o.evaluator.implementationDigest !== `builtin:${o.runs}` ||
+                    o.evaluator.implementationVersion !== 'builtin' ||
+                    stableSerialize(o.evidencePolicy) !== stableSerialize({ kind: 'fresh-run' }))
+                    return `${o.runs} is not a built-in evaluator`;
+            }
+            else {
+                const entry = catalogEntry(context.catalog, o.evaluator.id, o.evaluator.implementationVersion);
+                if (entry === undefined ||
+                    entry.implementationDigest !== o.evaluator.implementationDigest ||
+                    entry.contractVersion !== o.evaluator.contractVersion ||
+                    stableSerialize(entry.evidencePolicy) !== stableSerialize(o.evidencePolicy))
+                    return `${o.runs} does not match the catalog`;
+            }
+            const a = o.applicability;
+            if (a['status'] === 'not-applicable' &&
+                !(sanitized(a['reason']) &&
+                    ((a['basis'] === 'predicate' && typeof a['predicate'] === 'string' && PREDICATE_ID.test(a['predicate'])) ||
+                        (a['basis'] === 'package-metadata' && sanitized(a['source'], 160) && o.provenance.source === 'package'))))
+                return 'not-applicable lacks resolver evidence';
+            if (!['applicable', 'not-applicable', 'undetermined'].includes(a['status']))
+                return 'unknown applicability';
+            if (o.provenance.source === 'root' && a['basis'] === 'package-metadata')
+                return 'package metadata cannot change a root-adopted obligation';
+        }
+        return undefined;
+    }
+    catch {
+        return 'resolution could not be read';
+    }
+}
+/**
+ * Pure success-transition decision (C28, spec §3). Admits only a verified resolution (D2) resolved against the same
+ * catalog and policy in which every required, applicable obligation has a valid passed receipt of at least
+ * minimumTrust (D3) as its latest valid result. failed, unavailable, error, cancelled, not-evaluated and
+ * evaluator-claimed not-applicable block a required obligation; resolver not-applicable with evidence does not.
+ * Optional obligations never block and stay visible as optional-unevaluated or optional-failed. No scheduling,
+ * persistence or execution happens here. Host implementations must be bound (bindEvaluators) before invocation;
+ * admission itself checks receipts' evaluator digests against the catalog.
+ */
+export function admitTransition(resolution, receipts, context, now) {
+    trustPolicy(context);
+    if (instant(now) === undefined)
+        throw new TypeError('admitTransition requires an explicit, real ISO-8601 UTC instant');
+    const findings = [], decisions = [], scope = typeof resolution.subject === 'string' ? resolution.subject : '<resolution>';
+    let usable = resolution.status === 'resolved';
+    if (!usable)
+        findings.push(note('IA-COMP-OBLIGATION-BLOCKED', '<transition>', 'Obligation resolution refused; no transition can be admitted'));
+    const unverified = verifyResolution(resolution, context);
+    if (unverified !== undefined) {
+        usable = false;
+        findings.push(note('IA-COMP-OBLIGATION-UNVERIFIED', '<transition>', `Resolution is not verified: ${unverified}`));
+    }
+    else if (resolution.catalogDigest !== context.catalog.digest ||
+        resolution.policyRevision !== context.policyRevision) {
+        usable = false;
+        findings.push(note('IA-COMP-OBLIGATION-CONFLICT', '<transition>', 'Obligations were resolved against a different catalog or policy revision'));
+    }
+    const byObligation = new Map();
+    for (const receipt of receipts) {
+        let id = '';
+        try {
+            const claimed = record(receipt) ? receipt['obligationId'] : undefined;
+            id = typeof claimed === 'string' ? claimed : '';
+        }
+        catch {
+            id = '';
+        }
+        byObligation.set(id, [...(byObligation.get(id) ?? []), receipt]);
+    }
+    for (const obligation of usable ? resolution.obligations : []) {
+        const base = {
+            obligationId: obligation.obligationId,
+            requirement: obligation.requirement,
+            evaluator: obligation.evaluator.id,
+            required: obligation.required,
+        };
+        const where = obligation.provenance.path, label = `${obligation.occurrence}#${obligation.requirement}`;
+        const block = (result, code, message, receipt) => {
+            const optional = !obligation.required;
+            decisions.push({
+                ...base,
+                status: optional ? (result === 'failed' ? 'optional-failed' : 'optional-unevaluated') : 'blocked',
+                result,
+                ...(receipt === undefined ? {} : { receiptId: receipt.receiptId, trust: receipt.trust }),
+            });
+            findings.push({
+                ...note(optional ? 'IA-COMP-NOT-EVALUATED' : code, where, `${label}: ${message}`, obligation.occurrence, optional),
+                line: obligation.provenance.line,
+            });
+        };
+        if (obligation.applicability.status === 'not-applicable') {
+            decisions.push({ ...base, status: 'not-applicable', result: 'not-applicable' });
+            continue;
+        }
+        if (obligation.applicability.status === 'undetermined') {
+            block('not-evaluated', 'IA-COMP-OBLIGATION-UNDETERMINED', `applicability is undetermined (${obligation.applicability.reason})`);
+            continue;
+        }
+        if (!obligation.evaluator.builtin) {
+            const entry = catalogEntry(context.catalog, obligation.evaluator.id, obligation.evaluator.implementationVersion);
+            const status = entry === undefined || entry.implementationDigest !== obligation.evaluator.implementationDigest
+                ? 'unavailable'
+                : entry.availability.status;
+            if (status !== 'supported') {
+                block('unavailable', status === 'revoked' ? 'IA-COMP-EVALUATOR-REVOKED' : 'IA-COMP-EVALUATOR-UNAVAILABLE', `evaluator ${obligation.evaluator.id}@${obligation.evaluator.implementationVersion} is ${status}`);
+                continue;
+            }
+        }
+        const validations = (byObligation.get(obligation.obligationId) ?? []).map((r) => validateReceipt(r, { ...context, obligation }, now));
+        const valid = validations
+            .filter((v) => v.valid)
+            .map((v) => v.receipt)
+            .sort((a, b) => Date.parse(b.completedAt) - Date.parse(a.completedAt) ||
+            (a.result === 'passed' ? 1 : 0) - (b.result === 'passed' ? 1 : 0) ||
+            compareText(a.receiptId, b.receiptId));
+        const chosen = valid[0];
+        if (chosen === undefined) {
+            for (const v of validations)
+                findings.push(...v.findings.map((f) => (obligation.required ? f : { ...f, severity: 'warning' })));
+            block('not-evaluated', 'IA-COMP-OBLIGATION-BLOCKED', validations.length === 0 ? 'no receipt was supplied' : 'no supplied receipt is valid');
+            continue;
+        }
+        if (chosen.result === 'passed') {
+            decisions.push({
+                ...base,
+                status: 'satisfied',
+                result: 'passed',
+                receiptId: chosen.receiptId,
+                trust: chosen.trust,
+            });
+            continue;
+        }
+        block(chosen.result, chosen.result === 'failed' ? 'IA-COMP-OBLIGATION-FAILED' : 'IA-COMP-OBLIGATION-BLOCKED', chosen.result === 'not-applicable'
+            ? 'an evaluator cannot declare not-applicable; only the resolver can'
+            : `latest valid receipt reports ${chosen.result}`, chosen);
+    }
+    const admitted = usable && !findings.some((f) => f.severity === 'error') && decisions.every((d) => d.status !== 'blocked');
+    const relied = decisions.filter((d) => d.status === 'satisfied').map((d) => d.trust);
+    return deepFreeze({
+        admitted,
+        subject: scope,
+        minimumTrust: context.minimumTrust,
+        reliedTrust: relied.length === 0 ? 'none' : relied.includes('local-unsigned') ? 'local-unsigned' : 'service-associated',
+        decisions: decisions.sort((a, b) => compareText(a.obligationId, b.obligationId)),
+        assessment: assess('COMP-TRANSITION', scope, findings),
+    });
+}
+//# sourceMappingURL=evidence.js.map

package/dist/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../src/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5E,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEtG,OAAO,EACL,OAAO,EACP,WAAW,EACX,UAAU,EACV,SAAS,EACT,UAAU,EACV,QAAQ,EACR,MAAM,EACN,SAAS,EACT,MAAM,GACP,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGpC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,OAAO;IACP,WAAW;IACX,eAAe;IACf,gBAAgB;CACR,CAAC,CAAC;AAgGZ,MAAM,YAAY,GAAG;IACnB,QAAQ;IACR,WAAW;IACX,WAAW;IACX,cAAc;IACd,SAAS;IACT,aAAa;IACb,SAAS;IACT,aAAa;IACb,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,QAAQ;IACR,gBAAgB;IAChB,QAAQ;IACR,OAAO;CACC,CAAC;AACX,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAU,CAAC;AACrF,MAAM,OAAO,GAAG,oDAAoD,CAAC;AACrE,MAAM,KAAK,GAA4B,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;AAChF,oHAAoH;AACpH,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7G,CAAC;AACD,SAAS,IAAI,CACX,IAA4C,EAC5C,IAAY,EACZ,OAAe,EACf,QAAiB,EACjB,OAAO,GAAG,KAAK;IAEf,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QACvC,IAAI;QACJ,IAAI,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,OAAO,EAAE,GAAG,IAAI,KAAK,OAAO,EAAE;KAC/B,CAAC;AACJ,CAAC;AACD,SAAS,WAAW,CAAC,OAAuB;IAC1C,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC;QACvC,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,oBAAoB,KAAK,UAAU;QAClG,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;AACnE,CAAC;AACD,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC/B,CAAC;AACD,MAAM,QAAQ,GAAG,CAAC,UAAsB,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,KAAK,WAAW,CAAC;AAC5F,MAAM,gBAAgB,GAAG,CAAC,UAAsB,EAAE,EAAE,CAClD,UAAU,CAAC,cAAc,CAAC,IAAI,KAAK,WAAW,IAAI,UAAU,CAAC,cAAc,CAAC,oBAAoB,CAAC;AACnG;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,UAAsB,EACtB,OAAyF;IAEzF,MAAM,EAAE,EAAE,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,GAAG,UAAU,CAAC,SAAS,EAC9E,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IACvD,OAAO,MAAM,CAAC;QACZ,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;QACpC,UAAU,EAAE,UAAU,CAAC,YAAY;QACnC,SAAS,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,oBAAoB,EAAE;QAC9D,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QAC5E,WAAW,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE;QAC1F,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KACzD,CAAC,CAAC;AACL,CAAC;AACD,SAAS,KAAK,CAAC,OAAgB;IAC7B,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,2CAA2C,CAAC;IAC1F,IAAI,OAAO,CAAC,MAAM,KAAK,uBAAuB;QAAE,OAAO,0BAA0B,uBAAuB,EAAE,CAAC;IAC3G,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAU;QAC1G,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;YAAE,OAAO,WAAW,GAAG,qCAAqC,CAAC;IAChG,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,gBAAgB,CAAU;QAC3E,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,WAAW,GAAG,0BAA0B,CAAC;IACtH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IACE,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;QAChC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpF,OAAO,uFAAuF,CAAC;IACjG,IACE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACpD,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC;QACvC,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC;QAE9C,OAAO,6CAA6C,CAAC;IACvD,IACE,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,uBAAuB,EAAE,sBAAsB,CAAC,CAAC;QACtF,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEjE,OAAO,6EAA6E,CAAC;IACvF,IAAI,CAAE,gBAAuC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,mCAAmC,CAAC;IACnH,IAAI,CAAE,KAA4B,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QACxD,OAAO,4DAA4D,CAAC;IACtE,OAAO,SAAS,CAAC;AACnB,CAAC;AACD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgB,EAAE,WAA+B,EAAE,GAAW;IAC5F,WAAW,CAAC,WAAW,CAAC,CAAC;IACzB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,WAAW,EACzC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAG,YAAY,UAAU,CAAC,YAAY,GAAG,EACjD,MAAM,GAAG,CAAC,IAAkB,EAAE,OAAe,EAAqB,EAAE,CAClE,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,2BAA2B,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,UAAU,CAAC,OAA0B,CAAC,EAC9C,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAChC,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,GAAG,SAAS,IAAI,SAAS,GAAG,EAAE;QAC7F,OAAO,MAAM,CACX,yBAAyB,EACzB,wFAAwF,CACzF,CAAC;IACJ,IAAI,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;QAChF,OAAO,MAAM,CAAC,yBAAyB,EAAE,iDAAiD,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,EACnC,IAAI,GACF,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;QAC9B,CAAC,CAAC,SAAS,CAAC,qBAAqB,KAAK,QAAQ,CAAC,qBAAqB;QACpE,CAAC,CAAC,SAAS,CAAC,oBAAoB,KAAK,QAAQ,CAAC,oBAAoB,CAAC;IACvE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC,2BAA2B,EAAE,qCAAqC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IACnG,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACvF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,CAAC,SAAS,CAAC,oBAAoB;YACxF,OAAO,MAAM,CACX,2BAA2B,EAC3B,8EAA8E,CAC/E,CAAC;QACJ,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS;YACzC,OAAO,MAAM,CACX,yBAAyB,EACzB,qBAAqB,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,qBAAqB,gBAAgB,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CACxG,CAAC;QACJ,IAAI,CAAC,IAAI;YACP,OAAO,MAAM,CACX,2BAA2B,EAC3B,6CAA6C,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAC7F,CAAC;IACN,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,IAAI;QAC7C,OAAO,MAAM,CAAC,sBAAsB,EAAE,uDAAuD,CAAC,CAAC;IACjG,IAAI,CAAC,CAAC,WAAW,CAAC,SAAS,KAAK,WAAW,CAAC,WAAW,CAAC,SAAS;QAC/D,OAAO,MAAM,CAAC,2BAA2B,EAAE,wDAAwD,CAAC,CAAC;IACvG,IAAI,CAAC,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,WAAW,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,QAAQ;YACX,OAAO,MAAM,CACX,2BAA2B,EAC3B,oGAAoG,CACrG,CAAC;IACN,CAAC;IACD,IAAI,WAAW,CAAC,YAAY,KAAK,oBAAoB,IAAI,CAAC,CAAC,KAAK,KAAK,oBAAoB;QACvF,OAAO,MAAM,CACX,2BAA2B,EAC3B,4EAA4E,CAC7E,CAAC;IACJ,MAAM,KAAK,GAAG;QACZ,GAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAW;aAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QAC5B,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5G,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,uBAAuB,EAAE,qBAAqB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9G,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,SAAS;QAC/D,OAAO,MAAM,CAAC,2BAA2B,EAAE,qEAAqE,CAAC,CAAC;IACpH,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,KAAK,UAAU,IAAI,EAAE,GAAG,SAAS,GAAG,UAAU,CAAC,cAAc,CAAC,QAAQ;QACtG,OAAO,MAAM,CACX,yBAAyB,EACzB,mCAAmC,UAAU,CAAC,cAAc,CAAC,QAAQ,KAAK,CAC3E,CAAC;IACJ,OAAO,UAAU,CAAC;QAChB,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,CAAC;QACV,GAAG,EAAE,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC;QACzC,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;AACL,CAAC;AACD,SAAS,SAAS,CAChB,MAAsB,EACtB,WAA8B,EAC9B,WAA+B,EAAE,EACjC,QAAkB;IAElB,OAAO,UAAU,CAAC;QAChB,MAAM;QACN,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,cAAc,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;QAC3G,WAAW;QACX,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AACD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAyB,EACzB,UAAsB,EACtB,WAAiC,EACjC,UAAoD,EAAE;IAEtD,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO;QAC9B,MAAM,IAAI,SAAS,CAAC,yEAAyE,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,cAAc,UAAU,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAChC,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,kCAAkC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACzG,IACE,KAAK,KAAK,SAAS;QACnB,KAAK,CAAC,oBAAoB,KAAK,UAAU,CAAC,SAAS,CAAC,oBAAoB;QACxE,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,WAAW,EACzC,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,EAAE,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EACjF,OAAO,GAAG,aAAa,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,qBAAqB,OAAO,MAAM,eAAe,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3I,OAAO,SAAS,CACd,aAAa,EACb,CAAC,OAAO,CAAC,EACT;YACE,IAAI,CACF,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,+BAA+B,EACpF,IAAI,EACJ,OAAO,EACP,UAAU,CAAC,UAAU,CACtB;SACF,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,SAAS;gBACZ,OAAO,KAAK,CAAC,0BAA0B,KAAK,CAAC,MAAM,CAAC,SAAS,aAAa,CAAC,CAAC;YAC9E,KAAK,SAAS;gBACZ,OAAO,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC9D,KAAK,WAAW;gBACd,OAAO,SAAS,CAAC,WAAW,EAAE,CAAC,sCAAsC,CAAC,CAAC,CAAC;YAC1E,KAAK,aAAa;gBAChB,OAAO,SAAS,CACd,aAAa,EACb,CAAC,4CAA4C,CAAC,EAC9C;oBACE,IAAI,CACF,+BAA+B,EAC/B,IAAI,EACJ,4CAA4C,EAC5C,UAAU,CAAC,UAAU,CACtB;iBACF,CACF,CAAC;YACJ,KAAK,WAAW;gBACd,MAAM;YACR;gBACE,OAAO,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChH,IAAI,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW;YACvC,OAAO,KAAK,CAAC,iCAAiC,KAAK,CAAC,MAAM,CAAC,WAAW,aAAa,CAAC,CAAC;QACvF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,aAAa,CAAC;YAC9F,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;YACpC,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;YAElF,OAAO,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ;YAC5C,OAAO,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC,0CAA0C,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;QAC3F,OAAO,SAAS,CACd,MAAM,EACN,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAClF,EAAE,EACF,QAAQ,CAAC,UAAU,CAAC,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAsB,EAAE,YAAiC;IAC3F,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC;QACnE,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,eAAe,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,2BAA2B,CAAC,CAAC,CAAC;IACnH,IAAI,YAAY,CAAC,KAAK,KAAK,UAAU,CAAC,IAAI;QACxC,MAAM,IAAI,SAAS,CAAC,eAAe,YAAY,CAAC,KAAK,qBAAqB,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/F,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;KACjH,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,OAAO,KAAK,MAAM;QACpC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC;QACvC,CAAC,CAAC,YAAY,CAAC,OAAO,KAAK,MAAM;YAC/B,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC9D,CAAC;AACD,oJAAoJ;AACpJ,SAAS,gBAAgB,CAAC,UAAgC,EAAE,OAAyB;IACnF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,UAAU,KAAK,UAAU,CAAC,MAAM;YAAE,OAAO,8CAA8C,CAAC;QAC5F,IACE,CAAC,kBAAkB,CAAC,UAAU,CAAC;YAC/B,CAAC,OAAO,CAAC,wBAAwB,KAAK,SAAS,IAAI,OAAO,CAAC,wBAAwB,KAAK,UAAU,CAAC;YAEnG,OAAO,2GAA2G,CAAC;QACrH,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YACvC,IACE,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;gBAChC,CAAC,CAAC,YAAY,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC;gBACjF,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;gBAEvB,OAAO,gDAAgD,CAAC;YAC1D,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI;gBAAE,OAAO,gDAAgD,CAAC;YACvF,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACxB,IACE,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;oBACvB,CAAC,CAAC,SAAS,CAAC,oBAAoB,KAAK,WAAW,CAAC,CAAC,IAAI,EAAE;oBACxD,CAAC,CAAC,SAAS,CAAC,qBAAqB,KAAK,SAAS;oBAC/C,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;oBAE5E,OAAO,GAAG,CAAC,CAAC,IAAI,8BAA8B,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;gBAC/F,IACE,KAAK,KAAK,SAAS;oBACnB,KAAK,CAAC,oBAAoB,KAAK,CAAC,CAAC,SAAS,CAAC,oBAAoB;oBAC/D,KAAK,CAAC,eAAe,KAAK,CAAC,CAAC,SAAS,CAAC,eAAe;oBACrD,eAAe,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC;oBAE3E,OAAO,GAAG,CAAC,CAAC,IAAI,6BAA6B,CAAC;YAClD,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC,aAAmD,CAAC;YAChE,IACE,CAAC,CAAC,QAAQ,CAAC,KAAK,gBAAgB;gBAChC,CAAC,CACC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;oBACtB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,WAAW,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;wBACtG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,kBAAkB,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAC3G;gBAED,OAAO,wCAAwC,CAAC;YAClD,IAAI,CAAC,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAW,CAAC;gBACnF,OAAO,uBAAuB,CAAC;YACjC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,kBAAkB;gBACrE,OAAO,0DAA0D,CAAC;QACtE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,8BAA8B,CAAC;IACxC,CAAC;AACH,CAAC;AACD;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,UAAgC,EAChC,QAA4B,EAC5B,OAAyB,EACzB,GAAW;IAEX,WAAW,CAAC,OAAO,CAAC,CAAC;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;QAC5B,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAc,EAAE,EAC5B,SAAS,GAAyB,EAAE,EACpC,KAAK,GAAG,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;IACvF,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC;IAC9C,IAAI,CAAC,MAAM;QACT,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,4BAA4B,EAC5B,cAAc,EACd,8DAA8D,CAC/D,CACF,CAAC;IACJ,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,GAAG,KAAK,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,EAAE,cAAc,EAAE,+BAA+B,UAAU,EAAE,CAAC,CAAC,CAAC;IACpH,CAAC;SAAM,IACL,UAAU,CAAC,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM;QACnD,UAAU,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EACpD,CAAC;QACD,MAAM,GAAG,KAAK,CAAC;QACf,QAAQ,CAAC,IAAI,CACX,IAAI,CACF,6BAA6B,EAC7B,cAAc,EACd,0EAA0E,CAC3E,CACF,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAqB,CAAC;IAClD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,EAAE,GAAG,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,EAAE,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,GAAG,EAAE,CAAC;QACV,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG;YACX,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE;YAClC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,EACtC,KAAK,GAAG,GAAG,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAE,IAAkB,EAAE,OAAe,EAAE,OAAyB,EAAE,EAAE;YACvG,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;YACtC,SAAS,CAAC,IAAI,CAAC;gBACb,GAAG,IAAI;gBACP,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS;gBACjG,MAAM;gBACN,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;aACzF,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG,IAAI,CACL,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,EACzC,KAAK,EACL,GAAG,KAAK,KAAK,OAAO,EAAE,EACtB,UAAU,CAAC,UAAU,EACrB,QAAQ,CACT;gBACD,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI;aACjC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACzD,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACvD,KAAK,CACH,eAAe,EACf,iCAAiC,EACjC,kCAAkC,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CACrE,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;YACjH,MAAM,MAAM,GACV,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,oBAAoB,KAAK,UAAU,CAAC,SAAS,CAAC,oBAAoB;gBAC7F,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;YAChC,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC3B,KAAK,CACH,aAAa,EACb,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,+BAA+B,EACpF,aAAa,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,qBAAqB,OAAO,MAAM,EAAE,CAClG,CAAC;gBACF,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E,eAAe,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CACpD,CAAC;QACF,MAAM,KAAK,GAAG,WAAW;aACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAQ,CAAC;aACtB,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;YACrD,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CACxC,CAAC;QACJ,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,WAAW;gBACzB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9G,KAAK,CACH,eAAe,EACf,4BAA4B,EAC5B,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,8BAA8B,CACtF,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,SAAS,CAAC,IAAI,CAAC;gBACb,GAAG,IAAI;gBACP,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,KAAK,CACH,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,4BAA4B,EACvF,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAChC,CAAC,CAAC,mEAAmE;YACrE,CAAC,CAAC,gCAAgC,MAAM,CAAC,MAAM,EAAE,EACnD,MAAM,CACP,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC,CAAC;IACtF,OAAO,UAAU,CAAC;QAChB,QAAQ;QACR,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EACT,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB;QAC5G,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAChF,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,QAAQ,CAAC;KACvD,CAAC,CAAC;AACL,CAAC"}

package/dist/fixtures.d.ts

@@ -0,0 +1,29 @@
+import type { Location } from '@inventarch/language';
+import type { Assessment } from './types.js';
+export declare const COMPILE_CLAUSES: ReadonlySet<string>;
+export interface LanguageFixture {
+    readonly path: string;
+    readonly clause: string;
+    readonly mode: 'pass' | 'fail';
+    readonly source: string;
+    readonly ast?: unknown;
+    readonly records?: unknown;
+    readonly diagnostics?: readonly {
+        readonly code: string;
+        readonly line: number;
+    }[];
+    readonly pool?: readonly {
+        readonly path: string;
+        readonly source: string;
+        readonly location: Location;
+    }[];
+    readonly formatted?: string;
+    readonly candidate?: string;
+}
+export interface FixtureResult {
+    readonly assessment: Assessment;
+    readonly observedCodes: readonly string[];
+}
+export declare function runLanguageFixture(fixture: LanguageFixture): FixtureResult;
+export declare function fixtureCoverage(required: readonly string[], results: readonly FixtureResult[]): Assessment;
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../src/fixtures.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAc,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGjE,OAAO,KAAK,EAAE,UAAU,EAAW,MAAM,YAAY,CAAC;AAEtD,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAY9C,CAAC;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnF,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAC;IAC3G,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CA2E1E;AACD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,UAAU,CAc1G"}

package/dist/fixtures.js

@@ -0,0 +1,107 @@
+import { BAND_OF, PROVENANCES, buildRegistry, checkFormatPreservation, compile, format, parse, } from '@inventarch/language';
+import { stableSerialize } from '@inventarch/graph';
+import { assess } from './types.js';
+export const COMPILE_CLAUSES = new Set([
+    'registry',
+    'schema',
+    'identity',
+    'compile',
+    'cells',
+    'selectors',
+    'edges',
+    'conditions',
+    'variants',
+    'contracts',
+    'cases',
+]);
+const location = { placement: { kind: 'authored', band: 100, reach: '' }, provenance: 'workspace' };
+export function runLanguageFixture(fixture) {
+    const findings = [], observed = new Set();
+    const mismatch = (message) => {
+        findings.push({
+            code: 'IA-COMP-FIXTURE-MISMATCH',
+            severity: 'error',
+            path: fixture.path,
+            line: 1,
+            message: `${fixture.path}: ${message}`,
+        });
+    };
+    const equal = (actual, expected, label) => {
+        if (stableSerialize(actual) !== stableSerialize(expected))
+            mismatch(`${label} differs from the expected product`);
+    };
+    try {
+        const parsed = parse(fixture.source, fixture.path);
+        let diagnostics = parsed.diagnostics, records;
+        if (fixture.clause === 'format') {
+            if (fixture.mode === 'pass') {
+                const result = format(fixture.source, fixture.path);
+                diagnostics = result.diagnostics;
+                if (fixture.formatted === undefined)
+                    mismatch('Missing formatted expectation');
+                else
+                    equal(result.text, fixture.formatted, 'format');
+            }
+            else if (fixture.candidate === undefined)
+                mismatch('Missing preservation candidate');
+            else
+                diagnostics = checkFormatPreservation(fixture.source, fixture.candidate, fixture.path);
+        }
+        else if (COMPILE_CLAUSES.has(fixture.clause) && diagnostics.length === 0) {
+            const poolSources = (fixture.pool ?? []).map((entry) => {
+                if (BAND_OF[entry.location.placement.kind] !== entry.location.placement.band ||
+                    !PROVENANCES.includes(entry.location.provenance))
+                    throw new TypeError('Invalid fixture pool location');
+                return { ...parse(entry.source, entry.path), location: entry.location };
+            });
+            const registered = buildRegistry([{ ...parsed, location }, ...poolSources]);
+            const poolResults = poolSources.map((s) => compile(s.ast, registered.registry, s.location, []));
+            const result = compile(parsed.ast, registered.registry, location, poolResults.flatMap((r) => r.records));
+            records = result.records;
+            diagnostics = [
+                ...registered.diagnostics,
+                ...poolResults.flatMap((r) => r.diagnostics),
+                ...result.diagnostics,
+            ].sort((a, b) => a.line - b.line);
+        }
+        for (const d of diagnostics)
+            observed.add(d.code);
+        if (fixture.mode === 'pass') {
+            if (diagnostics.length > 0)
+                mismatch('A passing fixture produced diagnostics');
+            if (COMPILE_CLAUSES.has(fixture.clause) ? fixture.records === undefined : fixture.ast === undefined)
+                mismatch('Missing mandatory expected product');
+            if (fixture.ast !== undefined)
+                equal(parsed.ast, fixture.ast, 'AST');
+            if (fixture.records !== undefined)
+                equal(records, fixture.records, 'records');
+        }
+        else {
+            if (diagnostics.length === 0)
+                mismatch('A failing fixture produced no diagnostic');
+            if (fixture.diagnostics === undefined)
+                mismatch('Missing diagnostic expectation');
+            else
+                equal(diagnostics.map((d) => ({ code: d.code, line: d.line })), fixture.diagnostics, 'diagnostics');
+        }
+    }
+    catch (error) {
+        mismatch(`Fixture could not run: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return Object.freeze({
+        assessment: assess('COMP-FIXTURES', fixture.path, findings),
+        observedCodes: Object.freeze([...observed].sort()),
+    });
+}
+export function fixtureCoverage(required, results) {
+    const observed = new Set(results.filter((r) => r.assessment.outcome === 'pass').flatMap((r) => r.observedCodes));
+    const missing = required.filter((code) => !observed.has(code));
+    return assess('COMP-FIXTURES', 'refusal-code-coverage', missing.map((code) => ({
+        code: 'IA-COMP-FIXTURE-MISMATCH',
+        severity: 'error',
+        path: '',
+        line: 1,
+        message: `No passing failing-case observation covers ${code}`,
+    })));
+}
+//# sourceMappingURL=fixtures.js.map