@msn-control/liftoff 0.10.3 → 0.10.4

package/dist/governance-assessment/project.js

@@ -0,0 +1,268 @@
+import { lstat, realpath } from 'node:fs/promises';
+import { devNull } from 'node:os';
+import path from 'node:path';
+import { normalizeManifestFramework, normalizeManifestProject, parseManifest, resolveProjectPath, validateArtifactPathParts } from '../file-system.js';
+import { buildProjectPlan } from '../planner.js';
+import { buildRepositoryGovernanceArtifacts } from '../repository-governance.js';
+import { activationCompatibility, currentActivationIdentity } from '../governance-activation/graph.js';
+import { canonicalJson } from '../governance-activation/canonical-json.js';
+import { validateApprovalEnvelope, validateEvidenceHeader, validateLiveReadbackProof, validateUserActivationState, validateSavedTransitionPlan } from '../governance-activation/validators.js';
+import { NodeCommandRunner } from '../process-runner.js';
+import { AssessmentInputError, errorCode, parseAssessmentJson } from './readers.js';
+import { containsSensitiveText, isRecord, jsonValue, sanitizeAssessmentText } from './sanitize.js';
+function diagnostic(code, message, source) {
+    return { code, message: sanitizeAssessmentText(message), source: sanitizeAssessmentText(source), severity: 'warning' };
+}
+function exactKeys(value, allowed, label) {
+    if (Object.keys(value).some((key) => !allowed.includes(key)))
+        throw new AssessmentInputError('malformed-manifest', `${label} contains unsupported fields.`, 'liftoff.manifest.json');
+}
+function identityHeader(value, label) {
+    if (!isRecord(value))
+        throw new AssessmentInputError('malformed-identity', `${label} must be an object.`, label);
+    const fields = Object.keys(currentActivationIdentity);
+    if (fields.some((key) => !Object.hasOwn(value, key)) || Object.keys(value).some((key) => !fields.includes(key))) {
+        throw new AssessmentInputError('malformed-identity', `${label} has incomplete or unknown identity fields.`, label);
+    }
+    for (const [key, sample] of Object.entries(currentActivationIdentity)) {
+        const member = value[key];
+        if (typeof sample === 'number' ? !Number.isInteger(member) || Number(member) < 1 : typeof member !== 'string' || !member) {
+            throw new AssessmentInputError('malformed-identity', `${label}.${key} has an invalid value type.`, label);
+        }
+    }
+    if (typeof value.phaseGraphHash !== 'string' || !/^[a-f0-9]{64}$/u.test(value.phaseGraphHash)) {
+        throw new AssessmentInputError('malformed-identity', `${label}.phaseGraphHash is not a SHA-256 digest.`, label);
+    }
+    return containsSensitiveText(JSON.stringify(value)) ? '[withheld: sensitive identity]' : jsonValue(value);
+}
+function compatibleIdentity(value) {
+    return [...activationCompatibility.values()].some((identity) => canonicalJson(value) === canonicalJson(identity));
+}
+function rawArtifactPaths(raw) {
+    const lists = Number(raw.artifactVersion) >= 6 ? ['managedArtifacts', 'projectArtifacts'] : ['artifacts'];
+    for (const key of lists) {
+        const list = raw[key];
+        if (!Array.isArray(list))
+            throw new AssessmentInputError('malformed-manifest', `${key} must be an array.`, 'liftoff.manifest.json');
+        for (const entry of list) {
+            if (!isRecord(entry) || typeof entry.logicalName !== 'string' || !entry.logicalName ||
+                typeof entry.category !== 'string' || !Array.isArray(entry.pathParts)) {
+                throw new AssessmentInputError('malformed-manifest', `${key} contains malformed artifact metadata.`, 'liftoff.manifest.json');
+            }
+            validateArtifactPathParts(entry.pathParts, 'Assessment manifest path');
+            const hash = key === 'projectArtifacts' ? entry.generationHash : entry.contentHash;
+            if (typeof hash !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(hash)) {
+                throw new AssessmentInputError('malformed-manifest', `${key} contains an invalid content digest.`, 'liftoff.manifest.json');
+            }
+        }
+    }
+}
+export async function inspectAssessmentProject(files) {
+    const text = await files.read(['liftoff.manifest.json']);
+    if (text === null)
+        throw new AssessmentInputError('project-not-found', 'No liftoff.manifest.json was found in the selected project.');
+    const raw = parseAssessmentJson(text, 'liftoff.manifest.json');
+    if (!isRecord(raw) || typeof raw.artifactVersion !== 'number' || ![2, 3, 4, 5, 6, 7].includes(raw.artifactVersion)) {
+        throw new AssessmentInputError('unsupported-manifest', 'Manifest schema is unknown; no artifact paths were accessed.', 'liftoff.manifest.json');
+    }
+    rawArtifactPaths(raw);
+    const gov = raw.artifactVersion >= 5 && isRecord(raw.governance) ? raw.governance : {};
+    const recordedIdentity = gov.activationIdentity === undefined ? null : identityHeader(gov.activationIdentity, 'manifest activation identity');
+    const unsupported = recordedIdentity !== null && !compatibleIdentity(recordedIdentity) ||
+        (typeof gov.policyVersion === 'string' && !['1', '2', '3', '4', '5', '6'].includes(gov.policyVersion));
+    let manifest;
+    let project;
+    if (unsupported) {
+        if (raw.generatedBy !== 'Mission Control Liftoff' || typeof raw.liftoffVersion !== 'string' ||
+            !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/u.test(raw.liftoffVersion)) {
+            throw new AssessmentInputError('malformed-manifest', 'Manifest producer/version fields are invalid.', 'liftoff.manifest.json');
+        }
+        exactKeys(raw, ['artifactVersion', 'generatedBy', 'liftoffVersion', 'project', 'framework', 'governance', 'managedArtifacts', 'projectArtifacts', 'artifacts'], 'Manifest');
+        exactKeys(gov, ['profile', 'policyVersion', 'state', 'activationIdentity'], 'Governance metadata');
+        if (gov.profile !== 'single-maintainer-gitflow' || !['handoff-generated', 'handoff-partial'].includes(String(gov.state)) ||
+            typeof gov.policyVersion !== 'string' || !/^[1-9]\d*$/u.test(gov.policyVersion)) {
+            throw new AssessmentInputError('malformed-manifest', 'Governance metadata is invalid.', 'liftoff.manifest.json');
+        }
+        if (isRecord(recordedIdentity) && recordedIdentity.policyVersion !== gov.policyVersion) {
+            throw new AssessmentInputError('malformed-manifest', 'Recorded policy and activation identity contradict one another.', 'liftoff.manifest.json');
+        }
+        project = normalizeManifestProject(raw.project, raw.artifactVersion);
+        normalizeManifestFramework(raw.framework, raw.artifactVersion, project);
+        manifest = null;
+    }
+    else {
+        const parsed = parseManifest(raw);
+        manifest = parsed;
+        project = parsed.project;
+    }
+    const diagnostics = [];
+    if (unsupported)
+        diagnostics.push(diagnostic('unsupported-activation', 'The recorded activation tuple is not supported. Independent local facts remain assessable; no migration mapping is being inferred.', 'liftoff.manifest.json'));
+    const profile = manifest?.governance.profile ?? String(gov.profile);
+    const identity = {
+        availability: unsupported ? 'unsupported' : 'known', manifestVersion: raw.artifactVersion,
+        cliVersion: typeof raw.liftoffVersion === 'string' ? raw.liftoffVersion : null,
+        profile, policyVersion: typeof gov.policyVersion === 'string' ? sanitizeAssessmentText(gov.policyVersion, 64) : null,
+        recordedActivationIdentity: recordedIdentity, stateSource: 'not-started'
+    };
+    const workload = project.workload;
+    const plan = project.agents.length === 0 ? null : buildProjectPlan({
+        projectName: project.name, projectType: workload.kind,
+        ...(workload.kind === 'power-apps-code-app' ? { codeAppsPlugin: workload.codeAppsPlugin } : {
+            apiStack: workload.apiStack, cloud: workload.cloud, region: workload.region,
+            includeFrontend: workload.frontend, environments: workload.environments,
+            ...(workload.kind === 'genai' ? { pattern: workload.pattern } : {})
+        }),
+        agents: project.agents, defaultAgent: project.defaultAgent, specWorkflow: project.specWorkflow,
+        governanceProfile: profile === 'none' ? 'none' : 'single-maintainer-gitflow'
+    }, { requireProjectName: true });
+    const renderedCore = plan ? buildRepositoryGovernanceArtifacts(plan) : [];
+    if (!plan)
+        diagnostics.push(diagnostic('unobserved-agent-selection', 'This historical manifest does not identify configured agents. Current managed handoff rendering is not inferred.', 'liftoff.manifest.json'));
+    const managedEntries = manifest?.managedArtifacts.map((entry) => ({
+        logicalName: entry.logicalName, pathParts: entry.pathParts, contentHash: entry.contentHash
+    })) ?? [];
+    const input = {
+        manifest, project, identity, managedEntries, renderedCore, state: null,
+        stateIdentity: null, evidence: [], approvals: [], plans: [], bindingBaseline: null, invalidEvidence: false, diagnostics
+    };
+    if (profile === 'none')
+        return input;
+    const stateText = await files.read(['governance', 'activation-state.json']);
+    if (stateText !== null) {
+        const rawState = parseAssessmentJson(stateText, 'governance/activation-state.json');
+        if (!isRecord(rawState))
+            throw new AssessmentInputError('malformed-state', 'Activation state must be an object.', 'governance/activation-state.json');
+        if (rawState.schemaVersion === 1) {
+            input.stateIdentity = identityHeader(rawState.identity, 'activation state identity');
+            if (compatibleIdentity(input.stateIdentity)) {
+                input.state = validateUserActivationState(rawState);
+                input.identity.stateSource = 'user';
+            }
+            else {
+                input.identity.stateSource = 'unsupported';
+            }
+        }
+        else {
+            input.identity.stateSource = 'unsupported';
+        }
+        if (input.identity.stateSource === 'unsupported') {
+            input.identity.availability = 'unsupported';
+            diagnostics.push(diagnostic('unsupported-state', 'State schema or identity is unsupported; its execution state remains opaque and unchanged.', 'governance/activation-state.json'));
+        }
+    }
+    const evidenceIds = new Set();
+    for (const parts of await files.list(['governance', 'evidence'], ['.json'])) {
+        const label = parts.join('/');
+        const text = await files.read(parts);
+        if (text === null)
+            throw new AssessmentInputError('inputs-changed', 'Evidence disappeared during collection.', label);
+        const value = parseAssessmentJson(text, label);
+        if (containsSensitiveText(text)) {
+            input.invalidEvidence = true;
+            diagnostics.push(diagnostic('sensitive-evidence', 'Evidence with sensitive content was withheld.', label));
+            continue;
+        }
+        try {
+            if (!isRecord(value))
+                throw new Error('Evidence must be an object.');
+            const header = validateEvidenceHeader(Object.hasOwn(value, 'header') ? value.header : value);
+            const evidenceId = typeof value.evidenceId === 'string' ? value.evidenceId : parts.at(-1).slice(0, -5);
+            if (evidenceIds.has(evidenceId)) {
+                input.invalidEvidence = true;
+                input.evidence = input.evidence.filter((record) => record.evidenceId !== evidenceId);
+                diagnostics.push(diagnostic('ambiguous-evidence', `Duplicate evidence identity ${evidenceId} was excluded from assessment bindings.`, label));
+                continue;
+            }
+            evidenceIds.add(evidenceId);
+            if (value.liveReadback !== undefined && !Array.isArray(value.liveReadback))
+                throw new Error('Live proof must be an array.');
+            input.evidence.push({
+                evidenceId, header,
+                ...(Array.isArray(value.liveReadback) ? { liveReadback: value.liveReadback.map(validateLiveReadbackProof) } : {}),
+                ...(Object.hasOwn(value, 'payload') ? { payload: value.payload } : {})
+            });
+        }
+        catch (error) {
+            input.invalidEvidence = true;
+            diagnostics.push(diagnostic('unsupported-evidence', error instanceof Error ? error.message : 'Evidence could not be interpreted.', label));
+        }
+    }
+    for (const parts of await files.list(['governance', 'approvals'], ['.json'])) {
+        const label = parts.join('/');
+        const text = await files.read(parts);
+        if (text === null)
+            throw new AssessmentInputError('inputs-changed', 'Approval disappeared during collection.', label);
+        const value = parseAssessmentJson(text, label);
+        try {
+            if (containsSensitiveText(text))
+                throw new Error('Approval with sensitive content was withheld.');
+            input.approvals.push(validateApprovalEnvelope(value));
+        }
+        catch (error) {
+            diagnostics.push(diagnostic('unsupported-approval', error instanceof Error ? error.message : 'Approval could not be interpreted.', label));
+        }
+    }
+    for (const parts of await files.list(['governance', 'plans'], ['.json'])) {
+        const label = parts.join('/');
+        const text = await files.read(parts);
+        if (text === null)
+            throw new AssessmentInputError('inputs-changed', 'Plan disappeared during collection.', label);
+        const value = parseAssessmentJson(text, label);
+        try {
+            if (containsSensitiveText(text))
+                throw new Error('Plan with sensitive content was withheld.');
+            input.plans.push(validateSavedTransitionPlan(value));
+        }
+        catch (error) {
+            diagnostics.push(diagnostic('unsupported-plan', error instanceof Error ? error.message : 'Plan could not be interpreted.', label));
+        }
+    }
+    return input;
+}
+export function repositoryName(value, id = null) {
+    const match = value.match(/^([A-Za-z0-9][A-Za-z0-9-]{0,38})\/([A-Za-z0-9_.-]+)$/u);
+    if (!match || match[2] === '.' || match[2] === '..' || containsSensitiveText(value))
+        return null;
+    return { owner: match[1], name: match[2], id };
+}
+export async function inspectAssessmentGit(root, runner = new NodeCommandRunner()) {
+    try {
+        await lstat(path.join(root, '.git'));
+    }
+    catch (error) {
+        if (errorCode(error) === 'ENOENT')
+            return { repository: null, head: null, issues: [], originState: 'none' };
+        throw error;
+    }
+    await resolveProjectPath(root, ['.git']);
+    const issues = [];
+    const prefix = ['--no-pager', '--no-optional-locks', '-c', 'core.fsmonitor=false', '-c', `core.hooksPath=${devNull}`, '-c', 'diff.external=', '-c', 'core.pager=cat'];
+    async function git(args) {
+        const result = await runner.run({ executable: 'git', args: [...prefix, ...args] }, { cwd: root, timeoutMs: 10_000 });
+        if (result.status === 0 && !result.timedOut && !result.errorCode)
+            return result.stdout.trim();
+        issues.push(`Local Git ${args[0]} metadata was not observed (${result.timedOut ? 'timeout' : result.errorCode ?? `exit ${result.status}`}).`);
+        return null;
+    }
+    const toplevel = await git(['rev-parse', '--show-toplevel']);
+    if (!toplevel || await realpath(toplevel) !== await realpath(root)) {
+        return { repository: null, head: null, issues: [...issues, 'Git root does not match the assessed project.'], originState: 'unavailable' };
+    }
+    const headText = await git(['rev-parse', '--verify', 'HEAD']);
+    const remote = await git(['config', '--local', '--get', 'remote.origin.url']);
+    let repository = null;
+    if (remote) {
+        const ssh = remote.match(/^git@github\.com:([^/\s]+\/[^/\s]+?)(?:\.git)?$/u);
+        const https = remote.match(/^https:\/\/github\.com\/([^/\s]+\/[^/\s]+?)(?:\.git)?\/?$/u);
+        repository = repositoryName(ssh?.[1] ?? https?.[1] ?? '');
+        if (!repository)
+            issues.push('Git origin is not a supported credential-free GitHub repository binding.');
+    }
+    return {
+        repository, head: headText && /^[a-f0-9]{40,64}$/u.test(headText) ? headText : null,
+        issues,
+        originState: repository ? 'verified' : 'unavailable'
+    };
+}
+//# sourceMappingURL=project.js.map

package/dist/governance-assessment/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/governance-assessment/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,aAAa,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACvJ,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACvG,OAAO,EAAE,aAAa,EAAmB,MAAM,4CAA4C,CAAC;AAC5F,OAAO,EACL,wBAAwB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,2BAA2B,EACxG,2BAA2B,EAC5B,MAAM,wCAAwC,CAAC;AAGhD,OAAO,EAAE,iBAAiB,EAAsB,MAAM,sBAAsB,CAAC;AAE7E,OAAO,EAAmB,oBAAoB,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACrG,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAkBnG,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc;IAC/D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACzH,CAAC;AACD,SAAS,SAAS,CAAC,KAA8B,EAAE,OAA0B,EAAE,KAAa;IAC1F,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,KAAK,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;AACvL,CAAC;AACD,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,KAAK,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,KAAK,6CAA6C,EAAE,KAAK,CAAC,CAAC;IACrH,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACzH,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,KAAK,IAAI,GAAG,6BAA6B,EAAE,KAAK,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,KAAK,0CAA0C,EAAE,KAAK,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC5G,CAAC;AACD,SAAS,kBAAkB,CAAC,KAAgB;IAC1C,OAAO,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA4B;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC1G,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,GAAG,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;QACpI,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,WAAW;gBAC/E,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,GAAG,wCAAwC,EAAE,uBAAuB,CAAC,CAAC;YAChI,CAAC;YACD,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,GAAG,KAAK,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;YACnF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,GAAG,sCAAsC,EAAE,uBAAuB,CAAC,CAAC;YAC9H,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAsB;IACnE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,6DAA6D,CAAC,CAAC;IACtI,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACnH,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,EAAE,8DAA8D,EAAE,uBAAuB,CAAC,CAAC;IAClJ,CAAC;IACD,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,gBAAgB,GAAG,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,kBAAkB,EAAE,8BAA8B,CAAC,CAAC;IAC9I,MAAM,WAAW,GAAG,gBAAgB,KAAK,IAAI,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC;QACpF,CAAC,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACzG,IAAI,QAAgC,CAAC;IACrC,IAAI,OAAmC,CAAC;IACxC,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,GAAG,CAAC,WAAW,KAAK,yBAAyB,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;YACvF,CAAC,2DAA2D,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,+CAA+C,EAAE,uBAAuB,CAAC,CAAC;QACjI,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5K,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,oBAAoB,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACnG,IAAI,GAAG,CAAC,OAAO,KAAK,2BAA2B,IAAI,CAAC,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpH,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,iCAAiC,EAAE,uBAAuB,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC;YACvF,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,iEAAiE,EAAE,uBAAuB,CAAC,CAAC;QACnJ,CAAC;QACD,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;QACrE,0BAA0B,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACxE,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,QAAQ,GAAG,MAAM,CAAC;QAClB,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,CAAC;IACD,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,IAAI,WAAW;QAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,EAAE,oIAAoI,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACvO,MAAM,OAAO,GAAG,QAAQ,EAAE,UAAU,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,QAAQ,GAA8B;QAC1C,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe;QACzF,UAAU,EAAE,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QAC9E,OAAO,EAAE,aAAa,EAAE,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QACpH,0BAA0B,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa;KACzE,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACjE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI;QACrD,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;YAC1F,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;YAC3E,eAAe,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY;YACvE,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC;QACF,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;QAC9F,iBAAiB,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,2BAA2B;KAC7E,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,CAAC,IAAI;QAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CACpC,4BAA4B,EAC5B,kHAAkH,EAClH,uBAAuB,CACxB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;KAC3F,CAAC,CAAC,IAAI,EAAE,CAAC;IACV,MAAM,KAAK,GAAsB;QAC/B,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI;QACtE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW;KACxH,CAAC;IACF,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC5E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,qCAAqC,EAAE,kCAAkC,CAAC,CAAC;QACtJ,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,aAAa,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;YACrF,IAAI,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,KAAK,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;gBACpD,KAAK,CAAC,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,QAAQ,CAAC,WAAW,GAAG,aAAa,CAAC;YAC7C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,QAAQ,CAAC,WAAW,GAAG,aAAa,CAAC;QAC7C,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;YACjD,KAAK,CAAC,QAAQ,CAAC,YAAY,GAAG,aAAa,CAAC;YAC5C,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,4FAA4F,EAAE,kCAAkC,CAAC,CAAC,CAAC;QACtL,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,yCAAyC,EAAE,KAAK,CAAC,CAAC;QACtH,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,+CAA+C,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3G,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC7F,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACxG,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC7B,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;gBACrF,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,+BAA+B,UAAU,yCAAyC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC9I,SAAS;YACX,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC5H,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAClB,UAAU,EAAE,MAAM;gBAClB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjH,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7I,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,yCAAyC,EAAE,KAAK,CAAC,CAAC;QACtH,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,IAAI,qBAAqB,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAClG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7I,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,IAAI,qBAAqB,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC9F,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC,CAAC;QACrI,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,EAAE,GAAkB,IAAI;IACpE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,qBAAqB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,MAAM,GAAkB,IAAI,iBAAiB,EAAE;IACtG,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAC7C,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAC5G,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,YAAY,EAAE,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,kBAAkB,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACtK,KAAK,UAAU,GAAG,CAAC,IAAc;QAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACrH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,+BAA+B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9I,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,IAAI,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,+CAA+C,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IAC5I,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC9E,IAAI,UAAU,GAAqC,IAAI,CAAC;IACxD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACzF,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI,EAAE,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QACnF,MAAM;QACN,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;KACrD,CAAC;AACJ,CAAC"}

package/dist/governance-assessment/readers.d.ts

@@ -0,0 +1,18 @@
+export declare class AssessmentInputError extends Error {
+    readonly code: string;
+    readonly source: string | null;
+    constructor(code: string, message: string, source?: string | null);
+}
+export declare function errorCode(error: unknown): string | undefined;
+export declare class AssessmentFiles {
+    readonly root: string;
+    private readonly files;
+    private readonly directories;
+    private bytesRead;
+    constructor(root: string);
+    read(parts: readonly string[]): Promise<string | null>;
+    list(parts: readonly string[], extensions: readonly string[]): Promise<string[][]>;
+    digest(): string;
+    stable(): Promise<boolean>;
+}
+export declare function parseAssessmentJson(text: string, label: string): unknown;

package/dist/governance-assessment/readers.js

@@ -0,0 +1,130 @@
+import { lstat, open, readdir } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { resolveProjectPath, validateArtifactPathParts } from '../file-system.js';
+import { canonicalSha256, sha256Hex } from '../governance-activation/canonical-json.js';
+import { assessmentLimits } from './types.js';
+import { sanitizeAssessmentText } from './sanitize.js';
+export class AssessmentInputError extends Error {
+    code;
+    source;
+    constructor(code, message, source = null) {
+        super(sanitizeAssessmentText(message));
+        this.code = code;
+        this.source = source;
+        this.name = 'AssessmentInputError';
+    }
+}
+export function errorCode(error) {
+    return typeof error === 'object' && error !== null && 'code' in error && typeof error.code === 'string'
+        ? error.code : undefined;
+}
+export class AssessmentFiles {
+    root;
+    files = new Map();
+    directories = new Map();
+    bytesRead = 0;
+    constructor(root) {
+        this.root = root;
+    }
+    async read(parts) {
+        const normalized = validateArtifactPathParts([...parts], 'Assessment artifact');
+        const label = normalized.join('/');
+        const resolved = await resolveProjectPath(this.root, normalized);
+        if (!this.files.has(label) && this.files.size >= assessmentLimits.maxFiles) {
+            throw new AssessmentInputError('input-limit', 'Assessment input file limit exceeded.', label);
+        }
+        let file;
+        try {
+            const entry = await lstat(resolved);
+            if (!entry.isFile())
+                throw new AssessmentInputError('unsafe-input', `Assessment artifact ${label} is not a regular file.`, label);
+            file = await open(resolved, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+        }
+        catch (error) {
+            if (error instanceof AssessmentInputError)
+                throw error;
+            if (errorCode(error) === 'ENOENT') {
+                this.files.set(label, { parts: normalized, digest: null });
+                return null;
+            }
+            throw new AssessmentInputError('unreadable-input', `Cannot read assessment artifact ${label}.`, label);
+        }
+        try {
+            const stat = await file.stat();
+            if (!stat.isFile())
+                throw new AssessmentInputError('invalid-input', `Assessment artifact ${label} is not a regular file.`, label);
+            if (stat.size > assessmentLimits.fileBytes)
+                throw new AssessmentInputError('input-limit', `Assessment artifact ${label} exceeds the 1 MiB limit.`, label);
+            const buffer = Buffer.alloc(assessmentLimits.fileBytes + 1);
+            let length = 0;
+            while (length < buffer.length) {
+                const { bytesRead } = await file.read(buffer, length, buffer.length - length, length);
+                if (bytesRead === 0)
+                    break;
+                length += bytesRead;
+            }
+            this.bytesRead += length;
+            if (length > assessmentLimits.fileBytes || this.bytesRead > 20 * assessmentLimits.fileBytes) {
+                throw new AssessmentInputError('input-limit', `Assessment input budget exceeded while reading ${label}.`, label);
+            }
+            const contents = buffer.subarray(0, length).toString('utf8');
+            this.files.set(label, { parts: normalized, digest: sha256Hex(contents) });
+            return contents;
+        }
+        finally {
+            await file.close();
+        }
+    }
+    async list(parts, extensions) {
+        const normalized = validateArtifactPathParts([...parts], 'Assessment directory');
+        const label = normalized.join('/');
+        const resolved = await resolveProjectPath(this.root, normalized);
+        let entries;
+        try {
+            entries = await readdir(resolved, { withFileTypes: true });
+        }
+        catch (error) {
+            if (errorCode(error) === 'ENOENT') {
+                this.directories.set(label, { parts: normalized, entries: [] });
+                return [];
+            }
+            throw new AssessmentInputError('unreadable-input', `Cannot enumerate ${label}.`, label);
+        }
+        const files = entries.filter((entry) => extensions.some((extension) => entry.name.endsWith(extension)));
+        if (files.length > assessmentLimits.maxFiles)
+            throw new AssessmentInputError('input-limit', `${label} exceeds the file inventory limit.`, label);
+        const result = files.map((entry) => {
+            if (!entry.isFile())
+                throw new AssessmentInputError('unsafe-input', `${label} contains a non-regular assessment artifact.`, label);
+            return validateArtifactPathParts([...normalized, entry.name], 'Assessment file');
+        }).sort((a, b) => a.join('/').localeCompare(b.join('/'), 'en'));
+        this.directories.set(label, { parts: normalized, entries: entries.map((entry) => entry.name).sort() });
+        return result;
+    }
+    digest() {
+        return canonicalSha256({
+            files: [...this.files.entries()].map(([name, value]) => [name, value.digest]).sort(([a], [b]) => String(a).localeCompare(String(b), 'en')),
+            directories: [...this.directories.entries()].map(([name, value]) => [name, value.entries]).sort(([a], [b]) => String(a).localeCompare(String(b), 'en'))
+        });
+    }
+    async stable() {
+        const before = this.digest();
+        const files = [...this.files.values()];
+        const directories = [...this.directories.values()];
+        this.bytesRead = 0;
+        for (const file of files)
+            await this.read(file.parts);
+        for (const directory of directories)
+            await this.list(directory.parts, []);
+        return before === this.digest();
+    }
+}
+export function parseAssessmentJson(text, label) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new AssessmentInputError('malformed-json', `Invalid JSON in ${label}.`, label);
+    }
+}
+//# sourceMappingURL=readers.js.map

package/dist/governance-assessment/readers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readers.js","sourceRoot":"","sources":["../../src/governance-assessment/readers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACxB,IAAI;IAAoC,MAAM;IAAnE,YAAqB,IAAY,EAAE,OAAe,EAAW,MAAM,GAAkB,IAAI;QACvF,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;oBADpB,IAAI;sBAAoC,MAAM;QAEjE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QACrG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7B,CAAC;AAED,MAAM,OAAO,eAAe;IAKL,IAAI;IAJR,KAAK,GAAG,IAAI,GAAG,EAAsD,CAAC;IACtE,WAAW,GAAG,IAAI,GAAG,EAAkD,CAAC;IACjF,SAAS,GAAG,CAAC,CAAC;IAEtB,YAAqB,IAAY;oBAAZ,IAAI;IAAW,CAAC;IAErC,KAAK,CAAC,IAAI,CAAC,KAAwB;QACjC,MAAM,UAAU,GAAG,yBAAyB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC3E,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,oBAAoB,CAAC,cAAc,EAAE,uBAAuB,KAAK,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAClI,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB;gBAAE,MAAM,KAAK,CAAC;YACvD,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,mCAAmC,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,uBAAuB,KAAK,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAClI,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC,SAAS;gBAAE,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,uBAAuB,KAAK,2BAA2B,EAAE,KAAK,CAAC,CAAC;YAC1J,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YAC5D,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;gBACtF,IAAI,SAAS,KAAK,CAAC;oBAAE,MAAM;gBAC3B,MAAM,IAAI,SAAS,CAAC;YACtB,CAAC;YACD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;YACzB,IAAI,MAAM,GAAG,gBAAgB,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,gBAAgB,CAAC,SAAS,EAAE,CAAC;gBAC5F,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,kDAAkD,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;YACnH,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1E,OAAO,QAAQ,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAwB,EAAE,UAA6B;QAChE,MAAM,UAAU,GAAG,yBAAyB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChE,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,oBAAoB,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACxG,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,GAAG,KAAK,oCAAoC,EAAE,KAAK,CAAC,CAAC;QACjJ,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,oBAAoB,CAAC,cAAc,EAAE,GAAG,KAAK,8CAA8C,EAAE,KAAK,CAAC,CAAC;YACnI,OAAO,yBAAyB,CAAC,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM;QACJ,OAAO,eAAe,CAAC;YACrB,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC1I,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;SACxJ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,KAAK,MAAM,SAAS,IAAI,WAAW;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;IAClC,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC7D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/governance-assessment/report.d.ts

@@ -0,0 +1,23 @@
+import type { AssessmentDiagnostic, AssessmentFinding, AssessmentProjectIdentity, AssessmentReport, AssessmentTarget, ControlDefinition, FindingScope, JsonValue, Layer, Observation } from './types.js';
+export declare function classifyFinding(input: {
+    control: ControlDefinition;
+    scope: FindingScope;
+    expected?: JsonValue;
+    applicability: AssessmentFinding['applicability'];
+    observations: Partial<Record<Layer, Observation>>;
+    difference?: 'outdated' | 'conflicting' | 'missing';
+    exception?: AssessmentFinding['exception'];
+}): AssessmentFinding;
+export declare function reportCoverage(findings: readonly AssessmentFinding[]): AssessmentReport['coverage'];
+export declare function assembleAssessmentReport(input: {
+    projectRoot: string;
+    mode: 'local' | 'live';
+    target: AssessmentTarget | null;
+    projectIdentity: AssessmentProjectIdentity;
+    snapshot: AssessmentReport['snapshot'];
+    findings: AssessmentFinding[];
+    diagnostics: AssessmentDiagnostic[];
+    disabled?: boolean;
+    failed?: boolean;
+}): AssessmentReport;
+export declare function validateAssessmentReport(value: unknown): AssessmentReport;