@mneme-ai/core 0.25.0 → 0.27.0

package/dist/audit/certify.d.ts

@@ -0,0 +1,139 @@
+/**
+ * AI Session Audit — CERTIFY module.
+ *
+ * The 5-axis trust certificate.  Composes a baseline + a session trace
+ * into a verdict per axis:
+ *
+ *   1. behavioralParity   — sample commands' exit + stdout-hash unchanged
+ *   2. apiContractDrift   — public exports added / removed / renamed
+ *   3. testPassRate       — before/after passing-test deltas
+ *   4. perfRegression     — median ms regression (>25% fail, >10% warn)
+ *   5. aiNarrative        — Leviathan-style commit-vs-diff check
+ *
+ * Plus four "forensic axes" reused from the existing anomaly detector
+ * (size / files / style / time).  We translate each anomaly axis score
+ * to pass/warn/fail using the same thresholds.
+ *
+ * Pure data composition — no I/O.  The CLI layer wires real `git` /
+ * `npm` calls in via the Runner interfaces from baseline.ts and
+ * trace.ts; here we only consume the captured snapshots.
+ */
+import type { Baseline, Runner } from "./baseline.js";
+import type { SessionTrace } from "./trace.js";
+import { type NarrativeCheck } from "./verify.js";
+export type AxisVerdict = "pass" | "warn" | "fail";
+export interface AuditCertificate {
+    sessionId: string;
+    capturedAt: string;
+    axes: {
+        behavioralParity: {
+            verdict: AxisVerdict;
+            reason: string;
+            details: string[];
+        };
+        apiContractDrift: {
+            verdict: AxisVerdict;
+            reason: string;
+            details: string[];
+        };
+        testPassRate: {
+            verdict: AxisVerdict;
+            reason: string;
+            before: string;
+            after: string;
+        };
+        perfRegression: {
+            verdict: AxisVerdict;
+            reason: string;
+            deltaPercent: number;
+        };
+        aiNarrative: {
+            verdict: AxisVerdict;
+            reason: string;
+            checks: NarrativeCheck[];
+        };
+    };
+    forensicAxes: {
+        size: AxisVerdict;
+        files: AxisVerdict;
+        style: AxisVerdict;
+        time: AxisVerdict;
+    };
+    overallVerdict: AxisVerdict;
+    exitCode: 0 | 1;
+}
+/** Combine many axis verdicts: any fail → fail; any warn → warn; else pass. */
+export declare function combineVerdicts(verdicts: AxisVerdict[]): AxisVerdict;
+/** Helper for tests + CLI: read both raw outputs, return parity verdict. */
+export declare function compareBehavioralParity(before: Baseline, after: Pick<Baseline, "outputs">): {
+    verdict: AxisVerdict;
+    reason: string;
+    details: string[];
+};
+export declare function compareApiSurface(before: Baseline, after: Pick<Baseline, "apiSurface">): {
+    verdict: AxisVerdict;
+    reason: string;
+    details: string[];
+};
+export declare function compareTestPassRate(before: Baseline, after: Pick<Baseline, "testPassRate">): {
+    verdict: AxisVerdict;
+    reason: string;
+    before: string;
+    after: string;
+};
+export declare function comparePerf(before: Baseline, after: Pick<Baseline, "perfMs">): {
+    verdict: AxisVerdict;
+    reason: string;
+    deltaPercent: number;
+};
+export interface NarrativeAxisInput {
+    trace: SessionTrace;
+    /** Per-commit unified diff text + filesTouched.  Caller computes from git. */
+    diffs: Record<string, {
+        diff: string;
+        filesTouched: string[];
+    }>;
+}
+export declare function evaluateNarrativeAxis(input: NarrativeAxisInput): {
+    verdict: AxisVerdict;
+    reason: string;
+    checks: NarrativeCheck[];
+};
+/**
+ * Forensic axis verdicts — translate the four anomaly-detector axes
+ * (size / files / style / time) into pass/warn/fail using thresholds
+ * lifted from the anomaly module's severity bands.
+ */
+export declare function classifyForensicAxis(score: number): AxisVerdict;
+/**
+ * Top-level certify entry point.  Caller supplies a fresh post-session
+ * baseline (re-captured) plus the trace + diffs + forensic axis scores.
+ */
+export interface CertifyInput {
+    sessionId: string;
+    beforeBaseline: Baseline;
+    afterBaseline: Baseline;
+    trace: SessionTrace;
+    diffs: Record<string, {
+        diff: string;
+        filesTouched: string[];
+    }>;
+    /** Per-axis [0,1] forensic anomaly scores; default to all-zeros. */
+    forensicScores?: {
+        size: number;
+        files: number;
+        style: number;
+        time: number;
+    };
+}
+export declare function buildCertificate(input: CertifyInput): AuditCertificate;
+/**
+ * Orchestrates the full certify pipeline against a real repo.  The CLI
+ * uses this; tests exercise `buildCertificate` directly with canned
+ * inputs.
+ */
+export declare function certifySession(repoRoot: string, baseline: Baseline, trace: SessionTrace, diffs?: Record<string, {
+    diff: string;
+    filesTouched: string[];
+}>, runner?: Runner): Promise<AuditCertificate>;
+//# sourceMappingURL=certify.d.ts.map

package/dist/audit/certify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certify.d.ts","sourceRoot":"","sources":["../../src/audit/certify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE;QACJ,gBAAgB,EAAE;YAAE,OAAO,EAAE,WAAW,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAC9E,gBAAgB,EAAE;YAAE,OAAO,EAAE,WAAW,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAC9E,YAAY,EAAE;YAAE,OAAO,EAAE,WAAW,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACtF,cAAc,EAAE;YAAE,OAAO,EAAE,WAAW,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/E,WAAW,EAAE;YAAE,OAAO,EAAE,WAAW,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,cAAc,EAAE,CAAA;SAAE,CAAC;KACjF,CAAC;IACF,YAAY,EAAE;QACZ,IAAI,EAAE,WAAW,CAAC;QAClB,KAAK,EAAE,WAAW,CAAC;QACnB,KAAK,EAAE,WAAW,CAAC;QACnB,IAAI,EAAE,WAAW,CAAC;KACnB,CAAC;IACF,cAAc,EAAE,WAAW,CAAC;IAC5B,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;CACjB;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,WAAW,CAIpE;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,QAAQ,EAChB,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,GAC/B;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAgD7D;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,QAAQ,EAChB,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,GAClC;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA0C7D;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,QAAQ,EAChB,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,GACpC;IACD,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CA2BA;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,QAAQ,EAChB,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAC9B;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAoChE;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,YAAY,CAAC;IACpB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CACX,MAAM,EACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CACzC,CAAC;CACH;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,kBAAkB,GAAG;IAChE,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B,CAsCA;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAI/D;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,QAAQ,CAAC;IACzB,aAAa,EAAE,QAAQ,CAAC;IACxB,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAChE,oEAAoE;IACpE,cAAc,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,gBAAgB,CAyCtE;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,YAAY,EACnB,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAM,EACpE,MAAM,GAAE,MAAmB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CAS3B"}

package/dist/audit/certify.js

@@ -0,0 +1,295 @@
+/**
+ * AI Session Audit — CERTIFY module.
+ *
+ * The 5-axis trust certificate.  Composes a baseline + a session trace
+ * into a verdict per axis:
+ *
+ *   1. behavioralParity   — sample commands' exit + stdout-hash unchanged
+ *   2. apiContractDrift   — public exports added / removed / renamed
+ *   3. testPassRate       — before/after passing-test deltas
+ *   4. perfRegression     — median ms regression (>25% fail, >10% warn)
+ *   5. aiNarrative        — Leviathan-style commit-vs-diff check
+ *
+ * Plus four "forensic axes" reused from the existing anomaly detector
+ * (size / files / style / time).  We translate each anomaly axis score
+ * to pass/warn/fail using the same thresholds.
+ *
+ * Pure data composition — no I/O.  The CLI layer wires real `git` /
+ * `npm` calls in via the Runner interfaces from baseline.ts and
+ * trace.ts; here we only consume the captured snapshots.
+ */
+import { captureBaseline, realRunner } from "./baseline.js";
+import { verifyNarrative, aggregateNarrativeTrust, hasContradiction, } from "./verify.js";
+/** Combine many axis verdicts: any fail → fail; any warn → warn; else pass. */
+export function combineVerdicts(verdicts) {
+    if (verdicts.includes("fail"))
+        return "fail";
+    if (verdicts.includes("warn"))
+        return "warn";
+    return "pass";
+}
+/** Helper for tests + CLI: read both raw outputs, return parity verdict. */
+export function compareBehavioralParity(before, after) {
+    const details = [];
+    let mismatches = 0;
+    let critical = 0;
+    for (const [name, beforeSample] of Object.entries(before.outputs)) {
+        const afterSample = after.outputs[name];
+        if (!afterSample) {
+            details.push(`missing post-baseline sample: ${name}`);
+            continue;
+        }
+        if (beforeSample.exitCode !== afterSample.exitCode) {
+            details.push(`${name}: exit ${beforeSample.exitCode} → ${afterSample.exitCode}`);
+            mismatches += 1;
+            // git_head is critical: changing it means HEAD moved (expected),
+            // but exit-code change for any sample is critical.
+            critical += 1;
+        }
+        else if (beforeSample.stdoutHash !== afterSample.stdoutHash) {
+            // stdout content shift: warn unless the sample is git_head/git_log
+            // (those are EXPECTED to drift after new commits land).
+            if (name === "git_head" || name === "git_log_20") {
+                details.push(`${name}: stdout shifted (expected — new commits)`);
+            }
+            else {
+                details.push(`${name}: stdout shifted (${beforeSample.stdoutLines}→${afterSample.stdoutLines} lines)`);
+                mismatches += 1;
+            }
+        }
+    }
+    if (critical > 0) {
+        return {
+            verdict: "fail",
+            reason: `${critical} sample(s) changed exit code`,
+            details,
+        };
+    }
+    if (mismatches > 0) {
+        return {
+            verdict: "warn",
+            reason: `${mismatches} sample(s) drifted in unexpected ways`,
+            details,
+        };
+    }
+    return {
+        verdict: "pass",
+        reason: "all sample commands match the baseline",
+        details,
+    };
+}
+export function compareApiSurface(before, after) {
+    const details = [];
+    const removed = [];
+    const added = [];
+    // For every package present in either snapshot...
+    const allPkgs = new Set([
+        ...Object.keys(before.apiSurface),
+        ...Object.keys(after.apiSurface),
+    ]);
+    for (const pkg of allPkgs) {
+        const beforeSet = new Set(before.apiSurface[pkg] ?? []);
+        const afterSet = new Set(after.apiSurface[pkg] ?? []);
+        for (const name of beforeSet) {
+            if (!afterSet.has(name))
+                removed.push(`${pkg}.${name}`);
+        }
+        for (const name of afterSet) {
+            if (!beforeSet.has(name))
+                added.push(`${pkg}.${name}`);
+        }
+    }
+    if (removed.length > 0) {
+        details.push(`removed: ${removed.slice(0, 5).join(", ")}${removed.length > 5 ? "…" : ""}`);
+    }
+    if (added.length > 0) {
+        details.push(`added: ${added.slice(0, 5).join(", ")}${added.length > 5 ? "…" : ""}`);
+    }
+    if (removed.length > 0) {
+        return {
+            verdict: "fail",
+            reason: `${removed.length} export(s) removed — silent breaking change`,
+            details,
+        };
+    }
+    // Heuristic rename detection: same count of additions + removals + similar names → warn.
+    // Skipping — additions only is a "pass".
+    if (added.length > 0) {
+        return {
+            verdict: "pass",
+            reason: `${added.length} new export(s); no removals`,
+            details,
+        };
+    }
+    return { verdict: "pass", reason: "API surface identical", details };
+}
+export function compareTestPassRate(before, after) {
+    const b = before.testPassRate;
+    const a = after.testPassRate;
+    const beforeStr = `${b.passed} passed / ${b.failed} failed (${b.files} files)`;
+    const afterStr = `${a.passed} passed / ${a.failed} failed (${a.files} files)`;
+    if (a.failed > b.failed) {
+        return {
+            verdict: "fail",
+            reason: `${a.failed - b.failed} new test failure(s)`,
+            before: beforeStr,
+            after: afterStr,
+        };
+    }
+    if (a.passed < b.passed) {
+        return {
+            verdict: "warn",
+            reason: `passing test count dropped (${b.passed} → ${a.passed})`,
+            before: beforeStr,
+            after: afterStr,
+        };
+    }
+    return {
+        verdict: "pass",
+        reason: "no new test failures",
+        before: beforeStr,
+        after: afterStr,
+    };
+}
+export function comparePerf(before, after) {
+    let worstDelta = 0;
+    let worstName = "";
+    for (const [name, beforeMs] of Object.entries(before.perfMs)) {
+        const afterMs = after.perfMs[name];
+        if (afterMs == null)
+            continue;
+        if (beforeMs <= 0)
+            continue;
+        const delta = ((afterMs - beforeMs) / beforeMs) * 100;
+        if (delta > worstDelta) {
+            worstDelta = delta;
+            worstName = name;
+        }
+    }
+    const rounded = Number(worstDelta.toFixed(1));
+    if (rounded >= 25) {
+        return {
+            verdict: "fail",
+            reason: `${worstName} ${rounded}% slower than baseline`,
+            deltaPercent: rounded,
+        };
+    }
+    if (rounded >= 10) {
+        return {
+            verdict: "warn",
+            reason: `${worstName} ${rounded}% slower than baseline`,
+            deltaPercent: rounded,
+        };
+    }
+    return {
+        verdict: "pass",
+        reason: worstName.length > 0
+            ? `worst-case ${worstName} only ${rounded}% slower`
+            : "no perf samples to compare",
+        deltaPercent: rounded,
+    };
+}
+export function evaluateNarrativeAxis(input) {
+    const checks = [];
+    for (const c of input.trace.commits) {
+        const d = input.diffs[c.hash];
+        if (!d)
+            continue;
+        checks.push(verifyNarrative(c.message, d.diff, d.filesTouched, c.hash));
+    }
+    if (checks.length === 0) {
+        return {
+            verdict: "pass",
+            reason: "no commits with diffs to verify",
+            checks,
+        };
+    }
+    if (hasContradiction(checks)) {
+        const total = checks.reduce((s, c) => s + c.verifications.filter((v) => v.verdict === "contradicted").length, 0);
+        return {
+            verdict: "fail",
+            reason: `${total} commit-message claim(s) contradicted by diff`,
+            checks,
+        };
+    }
+    const trust = aggregateNarrativeTrust(checks);
+    if (trust < 0.6) {
+        return {
+            verdict: "warn",
+            reason: `aggregate narrative trust ${trust.toFixed(2)} below 0.6`,
+            checks,
+        };
+    }
+    return {
+        verdict: "pass",
+        reason: `aggregate narrative trust ${trust.toFixed(2)}`,
+        checks,
+    };
+}
+/**
+ * Forensic axis verdicts — translate the four anomaly-detector axes
+ * (size / files / style / time) into pass/warn/fail using thresholds
+ * lifted from the anomaly module's severity bands.
+ */
+export function classifyForensicAxis(score) {
+    if (score >= 0.7)
+        return "fail";
+    if (score >= 0.4)
+        return "warn";
+    return "pass";
+}
+export function buildCertificate(input) {
+    const behavioralParity = compareBehavioralParity(input.beforeBaseline, input.afterBaseline);
+    const apiContractDrift = compareApiSurface(input.beforeBaseline, input.afterBaseline);
+    const testPassRate = compareTestPassRate(input.beforeBaseline, input.afterBaseline);
+    const perfRegression = comparePerf(input.beforeBaseline, input.afterBaseline);
+    const aiNarrative = evaluateNarrativeAxis({ trace: input.trace, diffs: input.diffs });
+    const fScores = input.forensicScores ?? { size: 0, files: 0, style: 0, time: 0 };
+    const forensicAxes = {
+        size: classifyForensicAxis(fScores.size),
+        files: classifyForensicAxis(fScores.files),
+        style: classifyForensicAxis(fScores.style),
+        time: classifyForensicAxis(fScores.time),
+    };
+    const overall = combineVerdicts([
+        behavioralParity.verdict,
+        apiContractDrift.verdict,
+        testPassRate.verdict,
+        perfRegression.verdict,
+        aiNarrative.verdict,
+        forensicAxes.size,
+        forensicAxes.files,
+        forensicAxes.style,
+        forensicAxes.time,
+    ]);
+    return {
+        sessionId: input.sessionId,
+        capturedAt: new Date().toISOString(),
+        axes: {
+            behavioralParity,
+            apiContractDrift,
+            testPassRate,
+            perfRegression,
+            aiNarrative,
+        },
+        forensicAxes,
+        overallVerdict: overall,
+        exitCode: overall === "fail" ? 1 : 0,
+    };
+}
+/**
+ * Orchestrates the full certify pipeline against a real repo.  The CLI
+ * uses this; tests exercise `buildCertificate` directly with canned
+ * inputs.
+ */
+export async function certifySession(repoRoot, baseline, trace, diffs = {}, runner = realRunner) {
+    const after = await captureBaseline(repoRoot, runner);
+    return buildCertificate({
+        sessionId: trace.toHash.slice(0, 7) || "unknown",
+        beforeBaseline: baseline,
+        afterBaseline: after,
+        trace,
+        diffs,
+    });
+}
+//# sourceMappingURL=certify.js.map

package/dist/audit/certify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certify.js","sourceRoot":"","sources":["../../src/audit/certify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE5D,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,gBAAgB,GAEjB,MAAM,aAAa,CAAC;AAwBrB,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CACrC,MAAgB,EAChB,KAAgC;IAEhC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,YAAY,CAAC,QAAQ,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjF,UAAU,IAAI,CAAC,CAAC;YAChB,iEAAiE;YACjE,mDAAmD;YACnD,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;aAAM,IAAI,YAAY,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU,EAAE,CAAC;YAC9D,mEAAmE;YACnE,wDAAwD;YACxD,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,2CAA2C,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CACV,GAAG,IAAI,qBAAqB,YAAY,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW,SAAS,CACzF,CAAC;gBACF,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,QAAQ,8BAA8B;YACjD,OAAO;SACR,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,UAAU,uCAAuC;YAC5D,OAAO;SACR,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,wCAAwC;QAChD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAgB,EAChB,KAAmC;IAEnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,kDAAkD;IAClD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QACjC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;KACjC,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,6CAA6C;YACtE,OAAO;SACR,CAAC;IACJ,CAAC;IACD,yFAAyF;IACzF,yCAAyC;IACzC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,6BAA6B;YACpD,OAAO;SACR,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAgB,EAChB,KAAqC;IAOrC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;IAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;IAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,KAAK,SAAS,CAAC;IAC/E,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,KAAK,SAAS,CAAC;IAC9E,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,sBAAsB;YACpD,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,QAAQ;SAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,+BAA+B,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,GAAG;YAChE,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,QAAQ;SAChB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,sBAAsB;QAC9B,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,QAAQ;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAgB,EAChB,KAA+B;IAE/B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,OAAO,IAAI,IAAI;YAAE,SAAS;QAC9B,IAAI,QAAQ,IAAI,CAAC;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC;QACtD,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;YACvB,UAAU,GAAG,KAAK,CAAC;YACnB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,SAAS,IAAI,OAAO,wBAAwB;YACvD,YAAY,EAAE,OAAO;SACtB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,SAAS,IAAI,OAAO,wBAAwB;YACvD,YAAY,EAAE,OAAO;SACtB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,MAAM,EACJ,SAAS,CAAC,MAAM,GAAG,CAAC;YAClB,CAAC,CAAC,cAAc,SAAS,SAAS,OAAO,UAAU;YACnD,CAAC,CAAC,4BAA4B;QAClC,YAAY,EAAE,OAAO;KACtB,CAAC;AACJ,CAAC;AAWD,MAAM,UAAU,qBAAqB,CAAC,KAAyB;IAK7D,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,iCAAiC;YACzC,MAAM;SACP,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC,MAAM,EAChF,CAAC,CACF,CAAC;QACF,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,KAAK,+CAA+C;YAC/D,MAAM;SACP,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,6BAA6B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;YACjE,MAAM;SACP,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,6BAA6B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACvD,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAgBD,MAAM,UAAU,gBAAgB,CAAC,KAAmB;IAClD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5F,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACpF,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAEtF,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACjF,MAAM,YAAY,GAAG;QACnB,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;KACzC,CAAC;IAEF,MAAM,OAAO,GAAG,eAAe,CAAC;QAC9B,gBAAgB,CAAC,OAAO;QACxB,gBAAgB,CAAC,OAAO;QACxB,YAAY,CAAC,OAAO;QACpB,cAAc,CAAC,OAAO;QACtB,WAAW,CAAC,OAAO;QACnB,YAAY,CAAC,IAAI;QACjB,YAAY,CAAC,KAAK;QAClB,YAAY,CAAC,KAAK;QAClB,YAAY,CAAC,IAAI;KAClB,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,IAAI,EAAE;YACJ,gBAAgB;YAChB,gBAAgB;YAChB,YAAY;YACZ,cAAc;YACd,WAAW;SACZ;QACD,YAAY;QACZ,cAAc,EAAE,OAAO;QACvB,QAAQ,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACrC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,QAAkB,EAClB,KAAmB,EACnB,QAAkE,EAAE,EACpE,SAAiB,UAAU;IAE3B,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,OAAO,gBAAgB,CAAC;QACtB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS;QAChD,cAAc,EAAE,QAAQ;QACxB,aAAa,EAAE,KAAK;QACpB,KAAK;QACL,KAAK;KACN,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/certify.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=certify.test.d.ts.map

package/dist/audit/certify.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certify.test.d.ts","sourceRoot":"","sources":["../../src/audit/certify.test.ts"],"names":[],"mappings":""}