@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

package/dist/security/artifact.test.js

@@ -0,0 +1,229 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_url_1 = require("node:url");
+const node_test_1 = __importDefault(require("node:test"));
+const artifact_js_1 = require("./artifact.js");
+const sha256 = (value) => (0, node_crypto_1.createHash)('sha256').update(value).digest('hex');
+async function fixture(root, releaseEligibility = {
+    status: 'blocked',
+    blockers: ['artifact_release_approval_missing'],
+}) {
+    const contents = {
+        'bin/vsg.mjs': 'export const fixture = true;\n',
+        'src/lattice/export.mjs': 'export const exportLatticeReport = () => {};\n',
+        'src/lattice/transport.mjs': 'export const encodeLatticeReportV3 = () => {};\n',
+        'licensing/candidates/betterleaks-generic-api-key.json': '{"status":"candidate"}\n',
+        'licensing/candidates/betterleaks-jwt.json': '{"status":"candidate","rule":"jwt"}\n',
+        'licensing/notices/betterleaks-1.9.0-MIT.txt': 'Betterleaks MIT notice\n',
+        'licensing/notices/gitleaks-generic-origin-782f3104-MIT.txt': 'Gitleaks origin MIT notice\n',
+        'lattice-runtime.mjs': 'export default {};\n',
+    };
+    if (releaseEligibility.status === 'approved') {
+        const approvalBytes = '{"fixture":"unapproved-owner-record"}\n';
+        contents['licensing/candidates/commercial-runtime-release.json'] = approvalBytes;
+        releaseEligibility = {
+            ...releaseEligibility,
+            checkoutEnabled: false,
+            paidPublicationEnabled: false,
+            approval: {
+                owner: 'M2 AI, LLC',
+                decidedOn: '2026-10-21',
+                record: {
+                    path: 'licensing/candidates/commercial-runtime-release.json',
+                    sha256: sha256(approvalBytes),
+                    bytes: Buffer.byteLength(approvalBytes),
+                },
+            },
+        };
+    }
+    for (const [relative, content] of Object.entries(contents)) {
+        const target = (0, node_path_1.join)(root, ...relative.split('/'));
+        await node_fs_1.promises.mkdir((0, node_path_1.dirname)(target), { recursive: true });
+        await node_fs_1.promises.writeFile(target, content);
+    }
+    const manifest = {
+        format: 'lattice-security-artifact-v1',
+        sourceCommit: 'a'.repeat(40),
+        identity: {
+            vsgVersion: '1.0.2', profileId: 'commercial-default', profileVersion: '1.0.0',
+            rulesDigest: '1'.repeat(64), registryDigest: '2'.repeat(64), commercialManifestDigest: '3'.repeat(64),
+            evaluatorDigest: '4'.repeat(64), catalogDigest: '5'.repeat(64),
+        },
+        entryPoint: 'bin/vsg.mjs',
+        exporterPath: 'src/lattice/export.mjs',
+        transportPath: 'src/lattice/transport.mjs',
+        evaluatorPath: 'lattice-runtime.mjs',
+        releaseEligibility,
+        files: Object.entries(contents).sort(([a], [b]) => a.localeCompare(b)).map(([path, content]) => ({
+            path, sha256: sha256(content), bytes: Buffer.byteLength(content),
+        })),
+    };
+    await node_fs_1.promises.writeFile((0, node_path_1.join)(root, 'artifact-manifest.json'), `${JSON.stringify(manifest, null, 2)}\n`);
+}
+(0, node_test_1.default)('verifies exact artifact bytes and refuses the blocked candidate', async () => {
+    const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-security-artifact-'));
+    try {
+        await fixture(root);
+        const inspection = await (0, artifact_js_1.inspectSecurityArtifact)(root);
+        strict_1.default.equal(inspection.manifest.format, 'lattice-security-artifact-v1');
+        strict_1.default.throws(() => (0, artifact_js_1.assertCommercialArtifactEligible)(inspection), /artifact_release_approval_missing/);
+        await node_fs_1.promises.appendFile((0, node_path_1.join)(root, 'bin', 'vsg.mjs'), '// changed\n');
+        await strict_1.default.rejects((0, artifact_js_1.inspectSecurityArtifact)(root), /integrity verification/);
+    }
+    finally {
+        await node_fs_1.promises.rm(root, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('the retained commercial runtime is the exact approved agent catalog artifact and refuses unknown report IDs', async () => {
+    const artifactRoot = (0, node_path_1.resolve)(__dirname, '../../security-artifact');
+    const inspection = await (0, artifact_js_1.inspectSecurityArtifact)(artifactRoot);
+    strict_1.default.equal(inspection.manifestSha256, '29838a64b10e779ccaa8e20f9fb1e692859c8b1865c89b9b8b3be10e36982e1f');
+    strict_1.default.equal(inspection.manifest.sourceCommit, '47c52629f5ca1dfa15547db9d261e65a05ab823a');
+    strict_1.default.equal(inspection.manifest.identity.catalogDigest, 'fc812c855deb870f930489b84fb6def65cae8f1576cd5eaaeb5353aab6054117');
+    const catalog = JSON.parse(await node_fs_1.promises.readFile((0, node_path_1.join)(artifactRoot, 'lattice-catalog.json'), 'utf8'));
+    strict_1.default.equal(catalog.credits['m2ai:vsg-original'].sourceUrl, 'https://registry.npmjs.org/@m2-ai/lattice-cli/-/lattice-cli-0.8.7.tgz');
+    (0, artifact_js_1.assertCommercialArtifactEligible)(inspection);
+    const runtime = (await import((0, node_url_1.pathToFileURL)((0, node_path_1.join)(artifactRoot, 'lattice-runtime.mjs')).href)).default;
+    const { rules, credits } = runtime.present({ findings: [
+            { ruleId: 'public-env-secret', attributionIds: [] },
+            { ruleId: 'forge1:MALPEDIA_Win_Yarat_Auto', attributionIds: [] },
+            { ruleId: 'input-handling', attributionIds: [] },
+        ] });
+    strict_1.default.deepEqual(rules.map((rule) => ({
+        ruleId: rule.ruleId, reportRuleId: rule.reportRuleId, catalogRuleId: rule.catalogRuleId,
+    })), [
+        { ruleId: 'public-env-secret', reportRuleId: 'public-env-secret', catalogRuleId: 'public-env-secret' },
+        { ruleId: 'forge1:MALPEDIA_Win_Yarat_Auto', reportRuleId: 'forge1:MALPEDIA_Win_Yarat_Auto', catalogRuleId: 'MALPEDIA_Win_Yarat_Auto' },
+        { ruleId: 'input-handling', reportRuleId: 'input-handling', catalogRuleId: 'input-handling' },
+    ]);
+    strict_1.default.ok(credits.some((credit) => credit.attributionId === 'm2ai:vsg-original'));
+    strict_1.default.ok(credits.some((credit) => credit.attributionId === 'yara-source:malpedia-cc-by-sa-4.0'));
+    strict_1.default.throws(() => runtime.present({ findings: [{ ruleId: 'unknown-dynamic-advisory', attributionIds: [] }] }), /Missing trusted rule presentation/);
+});
+(0, node_test_1.default)('qualification metadata requires the complete pair and reviewed bytes before staging', async () => {
+    const paths = ['licensing/candidates/commercial-rule-candidate.json', 'licensing/candidates/gitlab-sast-source-notice-bundle.json'];
+    for (const count of [1, 2]) {
+        const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-qualification-evidence-'));
+        try {
+            await fixture(root);
+            const manifest = JSON.parse(await node_fs_1.promises.readFile((0, node_path_1.join)(root, 'artifact-manifest.json'), 'utf8'));
+            for (const path of paths.slice(0, count)) {
+                const content = '{"synthetic":"unreviewed-qualification-metadata"}\n';
+                await node_fs_1.promises.writeFile((0, node_path_1.join)(root, ...path.split('/')), content);
+                manifest.files.push({ path, sha256: sha256(content), bytes: Buffer.byteLength(content) });
+            }
+            manifest.files.sort((a, b) => a.path.localeCompare(b.path));
+            await node_fs_1.promises.writeFile((0, node_path_1.join)(root, 'artifact-manifest.json'), JSON.stringify(manifest));
+            await strict_1.default.rejects((0, artifact_js_1.inspectSecurityArtifact)(root), count === 1 ? /must be packaged together/ : /reviewed bytes/);
+            await strict_1.default.rejects((0, artifact_js_1.stageSecurityArtifact)(root, (0, node_path_1.join)(root, 'stage')), /qualification evidence/);
+        }
+        finally {
+            await node_fs_1.promises.rm(root, { recursive: true, force: true });
+        }
+    }
+});
+(0, node_test_1.default)('a locally asserted approved status cannot grant CLI release approval', async () => {
+    const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-security-artifact-unapproved-'));
+    try {
+        await fixture(root, { status: 'approved', blockers: [] });
+        const inspection = await (0, artifact_js_1.inspectSecurityArtifact)(root);
+        strict_1.default.throws(() => (0, artifact_js_1.assertCommercialArtifactEligible)(inspection), /no CLI release approval/);
+    }
+    finally {
+        await node_fs_1.promises.rm(root, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('stages only the declared artifact and re-verifies the destination', async () => {
+    const parent = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-security-stage-'));
+    const source = (0, node_path_1.join)(parent, 'source');
+    const out = (0, node_path_1.join)(parent, 'out');
+    try {
+        await node_fs_1.promises.mkdir(source);
+        await fixture(source);
+        const staged = await (0, artifact_js_1.stageSecurityArtifact)(source, out);
+        strict_1.default.equal(staged.manifest.releaseEligibility.status, 'blocked');
+        strict_1.default.deepEqual((await node_fs_1.promises.readdir(out)).sort(), ['artifact-manifest.json', 'bin', 'lattice-runtime.mjs', 'licensing', 'src']);
+        await node_fs_1.promises.writeFile((0, node_path_1.join)(source, 'undeclared.txt'), 'no');
+        await strict_1.default.rejects((0, artifact_js_1.inspectSecurityArtifact)(source), /undeclared file/);
+    }
+    finally {
+        await node_fs_1.promises.rm(parent, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('allows only the four frozen licensing evidence paths', async () => {
+    const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-security-artifact-licensing-'));
+    try {
+        await fixture(root);
+        await (0, artifact_js_1.inspectSecurityArtifact)(root);
+        for (const path of [
+            'licensing/candidates/other-rule.json',
+            'licensing/notices/other-package-MIT.txt',
+            'licensing/candidates/betterleaks-generic-api-key.json.bak',
+            'licensing/candidates/betterleaks-jwt.json.bak',
+        ]) {
+            const content = 'undeclared licensing evidence\n';
+            const target = (0, node_path_1.join)(root, ...path.split('/'));
+            await node_fs_1.promises.mkdir((0, node_path_1.dirname)(target), { recursive: true });
+            await node_fs_1.promises.writeFile(target, content);
+            const manifestPath = (0, node_path_1.join)(root, 'artifact-manifest.json');
+            const manifest = JSON.parse(await node_fs_1.promises.readFile(manifestPath, 'utf8'));
+            manifest.files.push({ path, sha256: sha256(content), bytes: Buffer.byteLength(content) });
+            await node_fs_1.promises.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+            await strict_1.default.rejects((0, artifact_js_1.inspectSecurityArtifact)(root), /file metadata is invalid/);
+            await node_fs_1.promises.rm(target, { force: true });
+            manifest.files.pop();
+            await node_fs_1.promises.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+        }
+    }
+    finally {
+        await node_fs_1.promises.rm(root, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('rejects declared files outside the frozen artifact source allowlist', async () => {
+    const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-security-artifact-source-'));
+    try {
+        await fixture(root);
+        const secret = 'must not ship\n';
+        await node_fs_1.promises.writeFile((0, node_path_1.join)(root, 'secret.txt'), secret);
+        const manifestPath = (0, node_path_1.join)(root, 'artifact-manifest.json');
+        const manifest = JSON.parse(await node_fs_1.promises.readFile(manifestPath, 'utf8'));
+        manifest.files.push({ path: 'secret.txt', sha256: sha256(secret), bytes: Buffer.byteLength(secret) });
+        await node_fs_1.promises.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+        await strict_1.default.rejects((0, artifact_js_1.inspectSecurityArtifact)(root), /file metadata is invalid/);
+    }
+    finally {
+        await node_fs_1.promises.rm(root, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('rejects case variants of forbidden artifact path components', async () => {
+    const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-security-artifact-case-'));
+    try {
+        await fixture(root);
+        for (const path of ['src/Node_Modules/x.mjs', 'src/.GIT/config', 'tools/registry/CACHE/x.json', 'src/RAW/x.json']) {
+            const content = 'forbidden\n';
+            const target = (0, node_path_1.join)(root, ...path.split('/'));
+            await node_fs_1.promises.mkdir((0, node_path_1.dirname)(target), { recursive: true });
+            await node_fs_1.promises.writeFile(target, content);
+            const manifestPath = (0, node_path_1.join)(root, 'artifact-manifest.json');
+            const manifest = JSON.parse(await node_fs_1.promises.readFile(manifestPath, 'utf8'));
+            manifest.files.push({ path, sha256: sha256(content), bytes: Buffer.byteLength(content) });
+            await node_fs_1.promises.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+            await strict_1.default.rejects((0, artifact_js_1.inspectSecurityArtifact)(root), /file metadata is invalid/);
+            await node_fs_1.promises.rm(target, { force: true });
+            manifest.files.pop();
+            await node_fs_1.promises.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+        }
+    }
+    finally {
+        await node_fs_1.promises.rm(root, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=artifact.test.js.map

package/dist/security/artifact.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.test.js","sourceRoot":"","sources":["../../src/security/artifact.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,6CAAyC;AACzC,qCAAyC;AACzC,qCAAiC;AACjC,yCAAmD;AACnD,uCAAyC;AACzC,0DAA6B;AAC7B,+CAAiH;AAEjH,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnF,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,qBAA8C;IACjF,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,CAAC,mCAAmC,CAAC;CAChD;IACC,MAAM,QAAQ,GAA2B;QACvC,aAAa,EAAE,gCAAgC;QAC/C,wBAAwB,EAAE,gDAAgD;QAC1E,2BAA2B,EAAE,kDAAkD;QAC/E,uDAAuD,EAAE,0BAA0B;QACnF,2CAA2C,EAAE,uCAAuC;QACpF,6CAA6C,EAAE,0BAA0B;QACzE,4DAA4D,EAAE,8BAA8B;QAC5F,qBAAqB,EAAE,sBAAsB;KAC9C,CAAC;IACF,IAAI,kBAAkB,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC7C,MAAM,aAAa,GAAG,yCAAyC,CAAC;QAChE,QAAQ,CAAC,sDAAsD,CAAC,GAAG,aAAa,CAAC;QACjF,kBAAkB,GAAG;YACnB,GAAG,kBAAkB;YACrB,eAAe,EAAE,KAAK;YACtB,sBAAsB,EAAE,KAAK;YAC7B,QAAQ,EAAE;gBACR,KAAK,EAAE,YAAY;gBACnB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE;oBACN,IAAI,EAAE,sDAAsD;oBAC5D,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC;oBAC7B,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;iBACxC;aACF;SACF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,8BAA8B;QACtC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,QAAQ,EAAE;YACR,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO;YAC7E,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrG,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SAC/D;QACD,UAAU,EAAE,aAAa;QACzB,YAAY,EAAE,wBAAwB;QACtC,aAAa,EAAE,2BAA2B;QAC1C,aAAa,EAAE,qBAAqB;QACpC,kBAAkB;QAClB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/F,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;SACjE,CAAC,CAAC;KACJ,CAAC;IACF,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACrG,CAAC;AAED,IAAA,mBAAI,EAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;IACjF,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,UAAU,GAAG,MAAM,IAAA,qCAAuB,EAAC,IAAI,CAAC,CAAC;QACvD,gBAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;QACzE,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,8CAAgC,EAAC,UAAU,CAAC,EAAE,mCAAmC,CAAC,CAAC;QACvG,MAAM,kBAAE,CAAC,UAAU,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;QAClE,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qCAAuB,EAAC,IAAI,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,6GAA6G,EAAE,KAAK,IAAI,EAAE;IAC7H,MAAM,YAAY,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,MAAM,IAAA,qCAAuB,EAAC,YAAY,CAAC,CAAC;IAC/D,gBAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,kEAAkE,CAAC,CAAC;IAC5G,gBAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,0CAA0C,CAAC,CAAC;IAC3F,gBAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,kEAAkE,CAAC,CAAC;IAC7H,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,YAAY,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClG,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,SAAS,EAAE,uEAAuE,CAAC,CAAC;IACtI,IAAA,8CAAgC,EAAC,UAAU,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,IAAA,wBAAa,EAAC,IAAA,gBAAI,EAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IACtG,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE;YACrD,EAAE,MAAM,EAAE,mBAAmB,EAAE,cAAc,EAAE,EAAE,EAAE;YACnD,EAAE,MAAM,EAAE,gCAAgC,EAAE,cAAc,EAAE,EAAE,EAAE;YAChE,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,EAAE;SACjD,EAAE,CAAC,CAAC;IACL,gBAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAqE,EAAE,EAAE,CAAC,CAAC;QACrG,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;KACxF,CAAC,CAAC,EAAE;QACH,EAAE,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,mBAAmB,EAAE;QACtG,EAAE,MAAM,EAAE,gCAAgC,EAAE,YAAY,EAAE,gCAAgC,EAAE,aAAa,EAAE,yBAAyB,EAAE;QACtI,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE;KAC9F,CAAC,CAAC;IACH,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAiC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,mBAAmB,CAAC,CAAC,CAAC;IAC7G,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAiC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,mCAAmC,CAAC,CAAC,CAAC;IAC7H,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,mCAAmC,CAAC,CAAC;AACxJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;IACrG,MAAM,KAAK,GAAG,CAAC,qDAAqD,EAAE,4DAA4D,CAAC,CAAC;IACpI,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iCAAiC,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7F,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,qDAAqD,CAAC;gBACtE,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC5D,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAmB,EAAE,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAChG,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnF,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qCAAuB,EAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAClH,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,mCAAqB,EAAC,IAAI,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACnG,CAAC;gBAAS,CAAC;YACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,uCAAuC,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,IAAA,qCAAuB,EAAC,IAAI,CAAC,CAAC;QACvD,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,8CAAgC,EAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC/F,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,MAAM,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAqB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACnE,gBAAM,CAAC,SAAS,CAAC,CAAC,MAAM,kBAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/H,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qCAAuB,EAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC3E,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACtE,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,sCAAsC,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAA,qCAAuB,EAAC,IAAI,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI;YACjB,sCAAsC;YACtC,yCAAyC;YACzC,2DAA2D;YAC3D,+CAA+C;SAChD,EAAE,CAAC;YACF,MAAM,OAAO,GAAG,iCAAiC,CAAC;YAClD,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9C,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;YACrE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1F,MAAM,kBAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3E,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qCAAuB,EAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;YAChF,MAAM,kBAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACrB,MAAM,kBAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,mCAAmC,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,MAAM,GAAG,iBAAiB,CAAC;QACjC,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtG,MAAM,kBAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qCAAuB,EAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAClF,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iCAAiC,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,CAAC,wBAAwB,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAClH,MAAM,OAAO,GAAG,aAAa,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9C,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;YACrE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1F,MAAM,kBAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3E,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qCAAuB,EAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;YAChF,MAAM,kBAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACrB,MAAM,kBAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/security/commands.d.ts

@@ -0,0 +1,42 @@
+import { beginSecurityRun, finishSecurityRun, getSecurityStatus } from './api.js';
+import { assertCommercialArtifactEligible, inspectSecurityArtifact } from './artifact.js';
+import { removeSecurityConnection, resolveSecurityConnection, saveSecurityConnection } from './connection.js';
+import { createSecurityBeginJournal, createOrReadSecurityRecovery, markSecurityJournalAcknowledged, readSecurityAcknowledgment, readSecurityRecovery, readSecurityJournal, readSecurityPublishJournal, removeSecurityPublishJournal, saveSecurityAcknowledgment, setSecurityJournalReservation, setSecurityJournalResult, setSecurityPublishJournalRequest } from './journal.js';
+import { exportSecurityReport, runSecurityRuntime } from './runtime.js';
+import type { SecurityRunMode } from './types.js';
+export interface SecurityCommandDependencies {
+    getStatus?: typeof getSecurityStatus;
+    beginRun?: typeof beginSecurityRun;
+    finishRun?: typeof finishSecurityRun;
+    inspectArtifact?: typeof inspectSecurityArtifact;
+    assertArtifactEligible?: typeof assertCommercialArtifactEligible;
+    runRuntime?: typeof runSecurityRuntime;
+    exportReport?: typeof exportSecurityReport;
+    createBeginJournal?: typeof createSecurityBeginJournal;
+    createOrReadRecovery?: typeof createOrReadSecurityRecovery;
+    markJournalAcknowledged?: typeof markSecurityJournalAcknowledged;
+    readAcknowledgment?: typeof readSecurityAcknowledgment;
+    readRecovery?: typeof readSecurityRecovery;
+    setJournalReservation?: typeof setSecurityJournalReservation;
+    setJournalResult?: typeof setSecurityJournalResult;
+    setJournalRequest?: typeof setSecurityPublishJournalRequest;
+    readJournal?: typeof readSecurityPublishJournal;
+    readAnyJournal?: typeof readSecurityJournal;
+    removeJournal?: typeof removeSecurityPublishJournal;
+    saveAcknowledgment?: typeof saveSecurityAcknowledgment;
+    saveConnection?: typeof saveSecurityConnection;
+    resolveConnection?: typeof resolveSecurityConnection;
+    removeConnection?: typeof removeSecurityConnection;
+    promptToken?: () => Promise<string>;
+    confirmProjectScripts?: () => Promise<boolean>;
+    connectionPath?: string;
+    journalRoot?: string;
+    artifactRoot?: string;
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    stdout?: (line: string) => void;
+    stderr?: (line: string) => void;
+}
+export declare function runSecurityCommand(args: string[], deps?: SecurityCommandDependencies): Promise<number>;
+export declare function isSecurityRunMode(value: string): value is SecurityRunMode;
+//# sourceMappingURL=commands.d.ts.map

package/dist/security/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/security/commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAA2B,MAAM,UAAU,CAAC;AAC3G,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EAExB,MAAM,eAAe,CAAC;AACvB,OAAO,EAGL,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EAGvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAE5B,+BAA+B,EAC/B,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,wBAAwB,EACxB,gCAAgC,EACjC,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,KAAK,EAMV,eAAe,EAChB,MAAM,YAAY,CAAC;AAMpB,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,OAAO,iBAAiB,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACnC,SAAS,CAAC,EAAE,OAAO,iBAAiB,CAAC;IACrC,eAAe,CAAC,EAAE,OAAO,uBAAuB,CAAC;IACjD,sBAAsB,CAAC,EAAE,OAAO,gCAAgC,CAAC;IACjE,UAAU,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACvC,YAAY,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC3C,kBAAkB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACvD,oBAAoB,CAAC,EAAE,OAAO,4BAA4B,CAAC;IAC3D,uBAAuB,CAAC,EAAE,OAAO,+BAA+B,CAAC;IACjE,kBAAkB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACvD,YAAY,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC3C,qBAAqB,CAAC,EAAE,OAAO,6BAA6B,CAAC;IAC7D,gBAAgB,CAAC,EAAE,OAAO,wBAAwB,CAAC;IACnD,iBAAiB,CAAC,EAAE,OAAO,gCAAgC,CAAC;IAC5D,WAAW,CAAC,EAAE,OAAO,0BAA0B,CAAC;IAChD,cAAc,CAAC,EAAE,OAAO,mBAAmB,CAAC;IAC5C,aAAa,CAAC,EAAE,OAAO,4BAA4B,CAAC;IACpD,kBAAkB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACvD,cAAc,CAAC,EAAE,OAAO,sBAAsB,CAAC;IAC/C,iBAAiB,CAAC,EAAE,OAAO,yBAAyB,CAAC;IACrD,gBAAgB,CAAC,EAAE,OAAO,wBAAwB,CAAC;IACnD,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAszBD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,2BAAgC,GAAG,OAAO,CAAC,MAAM,CAAC,CAYhH;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,eAAe,CAEzE"}