@openrig/cli 0.4.3 → 0.4.4

package/dist/commands/host.js

@@ -0,0 +1,448 @@
+// OPR.0.4.4.13 — the host-registry verbs. CAPPED at exactly three
+// (add / list / doctor — arch R13-2a): no edit/remove/tunnel/bootstrap
+// verbs; hand-editing hosts.yaml remains the path for everything else,
+// and the bootstrap ships as script + runbook.
+//
+// Secret hygiene (FR-1): every render carries bearer POINTERS (env var /
+// file NAMES) only — no code path in this file resolves a bearer value
+// for display.
+import { Command } from "commander";
+import { existsSync } from "node:fs";
+import { connect } from "node:net";
+import { addHostEntry, defaultHostRegistryPath, loadHostRegistry, hostDisplayTarget, resolveHost, resolveRemoteBearer } from "../host-registry.js";
+import { runCrossHostCommand } from "../cross-host-executor.js";
+function nestedBoolean(obj, path) {
+    let cur = obj;
+    for (const part of path) {
+        if (typeof cur !== "object" || cur === null)
+            return undefined;
+        cur = cur[part];
+    }
+    return typeof cur === "boolean" ? cur : undefined;
+}
+function tailscaleRunSshFromPrefs(text) {
+    if (!text.trim().startsWith("{"))
+        return undefined;
+    const parsed = JSON.parse(text);
+    return nestedBoolean(parsed, ["RunSSH"])
+        ?? nestedBoolean(parsed, ["Prefs", "RunSSH"])
+        ?? nestedBoolean(parsed, ["CurrentProfile", "RunSSH"]);
+}
+function defaultDoctorDeps() {
+    return {
+        run: (host, argv) => runCrossHostCommand(host, argv),
+        httpGet: async (url, headers) => {
+            const res = await fetch(url, { headers, signal: AbortSignal.timeout(10_000) });
+            return { status: res.status, body: await res.text() };
+        },
+        tcpProbe: (target, port, timeoutMs) => new Promise((resolve) => {
+            const sock = connect({ host: target, port, timeout: timeoutMs });
+            sock.on("connect", () => { sock.destroy(); resolve("open"); });
+            sock.on("timeout", () => { sock.destroy(); resolve("closed"); });
+            sock.on("error", () => { sock.destroy(); resolve("closed"); });
+        }),
+    };
+}
+/** FR-1 doctor legs — each failing step maps to a DISTINCT actionable error:
+ *  "SSH works but daemon is down" ≠ "daemon works but registry is wrong" ≠
+ *  "remote rig binary missing/old". */
+export async function doctorLegs(host, deps) {
+    const rows = [];
+    if (host.transport === "ssh") {
+        const reach = await deps.run(host, ["true"]);
+        if (!reach.ok && (reach.failedStep === "ssh-unreachable" || reach.failedStep === "permission-gate")) {
+            rows.push({
+                step: "transport-reachability",
+                status: "fail",
+                detail: `ssh to ${host.target} failed (${reach.failedStep}): ${reach.sshStderr.trim()}`,
+                fix: reach.failedStep === "permission-gate"
+                    ? "SSH auth/permission gate — check the key, agent, and remote authorized_keys"
+                    : "verify the ssh target/alias, tailnet connectivity, and that sshd is running",
+            });
+            return rows; // later legs are meaningless without the shell
+        }
+        rows.push({ step: "transport-reachability", status: "pass", detail: `ssh to ${host.target} ok` });
+        const version = await deps.run(host, ["rig", "--version"]);
+        if (!version.ok) {
+            rows.push({
+                step: "remote-rig-binary",
+                status: "fail",
+                detail: "reached the remote shell, but `rig --version` failed — remote rig binary missing or broken",
+                fix: "install the published artifact on the host: npm install -g @openrig/cli (see the product-factory runbook)",
+            });
+            return rows;
+        }
+        rows.push({ step: "remote-rig-binary", status: "pass", detail: `remote rig ${version.stdout.trim() || "(version unreadable)"}` });
+        const daemon = await deps.run(host, ["rig", "daemon", "status"]);
+        const daemonUp = daemon.ok && /running/i.test(daemon.stdout);
+        rows.push(daemonUp
+            ? { step: "remote-daemon-health", status: "pass", detail: "remote daemon reports running" }
+            : {
+                step: "remote-daemon-health",
+                status: "fail",
+                detail: "SSH works and rig is installed, but the remote daemon is not running",
+                fix: "on the host: rig daemon start (then re-run doctor)",
+            });
+        if (!daemonUp)
+            return rows;
+        const whoami = await deps.run(host, ["rig", "ps", "--json", "--limit", "5"]);
+        let identityOk = false;
+        if (whoami.ok) {
+            try {
+                identityOk = typeof JSON.parse(whoami.stdout) === "object";
+            }
+            catch {
+                identityOk = false;
+            }
+        }
+        rows.push(identityOk
+            ? { step: "remote-identity", status: "pass", detail: "remote daemon identity/list resolves (rig ps --json parses)" }
+            : {
+                step: "remote-identity",
+                status: "fail",
+                detail: "daemon is up but remote identity/list did not resolve",
+                fix: "on the host: check `rig ps --json` directly; the daemon API may be unhealthy even though status says running",
+            });
+        return rows;
+    }
+    // http transport
+    const bearer = resolveRemoteBearer(host);
+    if (!bearer.ok) {
+        rows.push({ step: "transport-reachability", status: "fail", detail: bearer.error, fix: "set the bearer env var / file the registry entry points at (pointer names: rig host list)" });
+        return rows;
+    }
+    try {
+        const health = await deps.httpGet(`${host.url}/healthz`, { Authorization: `Bearer ${bearer.token}` });
+        if (health.status === 401 || health.status === 403) {
+            rows.push({ step: "transport-reachability", status: "fail", detail: `daemon reachable but rejected the bearer (HTTP ${health.status})`, fix: "registry is reachable but the token is wrong — rotate/set the bearer the entry points at" });
+            return rows;
+        }
+        if (health.status < 200 || health.status >= 300) {
+            rows.push({ step: "transport-reachability", status: "fail", detail: `healthz returned HTTP ${health.status}`, fix: "the daemon answered abnormally — check remote daemon logs" });
+            return rows;
+        }
+        rows.push({ step: "transport-reachability", status: "pass", detail: `healthz ok at ${host.url}` });
+        rows.push({ step: "remote-daemon-health", status: "pass", detail: "healthz IS the daemon health check on http transport" });
+    }
+    catch (err) {
+        rows.push({ step: "transport-reachability", status: "fail", detail: `daemon unreachable at ${host.url}: ${err.message}`, fix: "check tailnet connectivity and that the remote daemon is running (rig daemon start on the host)" });
+        return rows;
+    }
+    rows.push({
+        step: "remote-rig-binary",
+        status: "unknown",
+        detail: "not determinable over http transport (no shell)",
+        fix: "verify via an ssh-transport entry for this host, or on the host directly: rig --version",
+    });
+    try {
+        const ps = await deps.httpGet(`${host.url}/api/ps`, { Authorization: `Bearer ${bearer.token}` });
+        rows.push(ps.status >= 200 && ps.status < 300
+            ? { step: "remote-identity", status: "pass", detail: "authenticated daemon API answers (/api/ps)" }
+            : { step: "remote-identity", status: "fail", detail: `/api/ps returned HTTP ${ps.status}`, fix: "daemon healthz is up but the API is unhealthy — check remote daemon logs" });
+    }
+    catch (err) {
+        rows.push({ step: "remote-identity", status: "fail", detail: `/api/ps unreachable: ${err.message}`, fix: "check remote daemon logs" });
+    }
+    return rows;
+}
+/** FR-2 — THE one built-in posture profile (arch R13-2b: a named constant
+ *  table, no framework). Every item is three-valued; UNKNOWN is never
+ *  smoothed to pass, and every non-pass carries its fix. */
+export const POSTURE_PROFILE_ID = "product-factory-vps";
+export async function postureCheck(host, deps, opts = {}) {
+    if (host.transport !== "ssh") {
+        // Posture needs a shell. Report every item unknown — honestly.
+        return POSTURE_ITEM_IDS.map((id) => ({
+            step: id,
+            status: "unknown",
+            detail: "posture checks need shell access; this host is registered with http transport",
+            fix: "register an ssh-transport entry for this host (or run the checks on the host per the runbook)",
+        }));
+    }
+    const rows = [];
+    const sh = async (cmd) => deps.run(host, ["sh", "-c", cmd]);
+    // 1. non-root openrig user
+    const idOut = await sh("id -u openrig 2>/dev/null");
+    if (idOut.ok && idOut.stdout.trim() !== "") {
+        rows.push(idOut.stdout.trim() === "0"
+            ? { step: "nonroot-openrig-user", status: "fail", detail: "user 'openrig' resolves to uid 0", fix: "create a non-root openrig user per the runbook" }
+            : { step: "nonroot-openrig-user", status: "pass", detail: `user 'openrig' uid ${idOut.stdout.trim()}` });
+    }
+    else {
+        rows.push({ step: "nonroot-openrig-user", status: "fail", detail: "user 'openrig' does not exist", fix: "adduser openrig + key-only SSH per the runbook" });
+    }
+    // 2+3. sshd effective config (root SSH off, password auth off)
+    const sshd = await sh("sudo -n sshd -T 2>/dev/null || sshd -T 2>/dev/null || true");
+    const sshdOut = sshd.ok ? sshd.stdout.toLowerCase() : "";
+    const sshdItem = (step, key, want) => {
+        if (!sshdOut.includes(key)) {
+            return { step, status: "unknown", detail: "effective sshd config not readable from this vantage (sshd -T needs root)", fix: "on the host: sudo sshd -T | grep " + key };
+        }
+        return sshdOut.includes(`${key} ${want}`)
+            ? { step, status: "pass", detail: `${key} ${want}` }
+            : { step, status: "fail", detail: `sshd -T reports ${key} != ${want}`, fix: `set ${key} ${want} in /etc/ssh/sshd_config.d/99-openrig-hardening.conf and reload sshd` };
+    };
+    rows.push(sshdItem("root-ssh-disabled", "permitrootlogin", "no"));
+    rows.push(sshdItem("key-only-ssh", "passwordauthentication", "no"));
+    // 4+5. UFW default-deny + tailnet ingress
+    const ufw = await sh("sudo -n ufw status verbose 2>/dev/null || true");
+    const ufwOut = ufw.ok ? ufw.stdout.toLowerCase() : "";
+    if (ufwOut.trim() === "") {
+        const unknownUfw = (step) => ({ step, status: "unknown", detail: "ufw status not readable from this vantage (needs sudo)", fix: "on the host: sudo ufw status verbose" });
+        rows.push(unknownUfw("ufw-default-deny-incoming"));
+        rows.push(unknownUfw("tailnet-ingress-allowed"));
+    }
+    else {
+        rows.push(/default:\s*deny\s*\(incoming/.test(ufwOut)
+            ? { step: "ufw-default-deny-incoming", status: "pass", detail: "ufw default deny (incoming)" }
+            : { step: "ufw-default-deny-incoming", status: "fail", detail: "ufw incoming default is not deny", fix: "sudo ufw default deny incoming" });
+        // R2-B1: mentioning tailscale0 is NOT enough — a DENY on tailscale0
+        // must never pass. Pass requires an ALLOW IN rule on the interface.
+        const tailnetAllowIn = ufwOut.split("\n").some((line) => line.includes("tailscale0") && /allow\s+in/.test(line));
+        if (tailnetAllowIn) {
+            rows.push({ step: "tailnet-ingress-allowed", status: "pass", detail: "ufw has an ALLOW IN rule on tailscale0" });
+        }
+        else if (ufwOut.includes("tailscale0")) {
+            rows.push({ step: "tailnet-ingress-allowed", status: "fail", detail: "tailscale0 appears in ufw rules but with no ALLOW IN rule (deny/other only)", fix: "sudo ufw allow in on tailscale0" });
+        }
+        else {
+            rows.push({ step: "tailnet-ingress-allowed", status: "fail", detail: "no tailscale0 allow rule found", fix: "sudo ufw allow in on tailscale0" });
+        }
+    }
+    // 6. tailscale flags (no subnet routes / exit node / ts-SSH)
+    const ts = await sh("tailscale status --json 2>/dev/null || true");
+    const prefs = await sh("tailscale debug prefs --json 2>/dev/null || true");
+    let routes;
+    let exitNode;
+    let runSsh;
+    const unknownReasons = [];
+    try {
+        if (ts.ok && ts.stdout.trim().startsWith("{")) {
+            const parsed = JSON.parse(ts.stdout);
+            routes = parsed.Self?.PrimaryRoutes?.length ?? 0;
+            exitNode = (parsed.ExitNodeStatus !== undefined && parsed.ExitNodeStatus !== null) || parsed.Self?.ExitNodeOption === true;
+        }
+        else {
+            unknownReasons.push("tailscale status unreadable");
+        }
+    }
+    catch {
+        unknownReasons.push("tailscale status did not parse");
+    }
+    try {
+        runSsh = prefs.ok ? tailscaleRunSshFromPrefs(prefs.stdout) : undefined;
+        if (runSsh === undefined)
+            unknownReasons.push("tailscale debug prefs unreadable");
+    }
+    catch {
+        unknownReasons.push("tailscale debug prefs did not parse");
+    }
+    if ((routes ?? 0) > 0 || exitNode === true || runSsh === true) {
+        rows.push({
+            step: "tailscale-minimal-trust",
+            status: "fail",
+            detail: `subnet routes: ${routes ?? "unknown"}; exit node in use: ${exitNode ?? "unknown"}; Tailscale SSH enabled: ${runSsh ?? "unknown"}`,
+            fix: "remove advertised routes / exit-node use (tailscale set) and disable Tailscale SSH: tailscale set --ssh=false",
+        });
+    }
+    else if (routes === 0 && exitNode === false && runSsh === false) {
+        rows.push({ step: "tailscale-minimal-trust", status: "pass", detail: "no advertised subnet routes; no exit-node use; Tailscale SSH disabled" });
+    }
+    else {
+        rows.push({
+            step: "tailscale-minimal-trust",
+            status: "unknown",
+            detail: `tailscale posture not fully determined (${unknownReasons.join("; ")})`,
+            fix: "on the host: tailscale status --json && tailscale debug prefs --json; disable Tailscale SSH with tailscale set --ssh=false",
+        });
+    }
+    // 7. daemon bound loopback/tailnet — never public. R2-B1: a SPECIFIC
+    // public IP bind must fail exactly like a wildcard — pass is an
+    // ALLOWLIST (loopback or the tailnet CGNAT range 100.64.0.0/10), never
+    // "not wildcard".
+    const ss = await sh("ss -tln 2>/dev/null | grep ':7433' || true");
+    const ssOut = ss.ok ? ss.stdout : "";
+    const listenAddrs = ssOut
+        .split("\n")
+        .map((line) => line.match(/(\S+):7433\b/)?.[1])
+        .filter((a) => a !== undefined);
+    if (listenAddrs.length === 0) {
+        rows.push({ step: "daemon-bind-not-public", status: "unknown", detail: "no listener on :7433 observed (daemon may be down)", fix: "start the daemon, then re-check: ss -tln | grep 7433" });
+    }
+    else {
+        const isLoopbackOrTailnet = (addr) => {
+            const a = addr.replace(/^\[|\]$/g, "");
+            if (a.startsWith("127.") || a === "::1")
+                return true;
+            const m = a.match(/^100\.(\d+)\./);
+            return m !== null && Number(m[1]) >= 64 && Number(m[1]) <= 127;
+        };
+        const offending = listenAddrs.filter((a) => !isLoopbackOrTailnet(a));
+        rows.push(offending.length === 0
+            ? { step: "daemon-bind-not-public", status: "pass", detail: `listener(s) bound loopback/tailnet only: ${listenAddrs.join(", ")}` }
+            : { step: "daemon-bind-not-public", status: "fail", detail: `daemon listens on a non-loopback/non-tailnet address: ${offending.join(", ")}`, fix: "bind the daemon to loopback/tailnet only (OPENRIG daemon host config); never expose :7433 publicly" });
+    }
+    // 8+9. public reachability probes — only meaningful with a known PUBLIC address.
+    if (opts.publicAddr) {
+        for (const [step, port] of [["public-daemon-port-unreachable", 7433], ["public-ssh-unreachable-or-accepted", 22]]) {
+            const probe = await deps.tcpProbe(opts.publicAddr, port, 5000);
+            rows.push(probe === "open"
+                ? { step, status: "fail", detail: `${opts.publicAddr}:${port} is publicly reachable`, fix: "remove the public allow rule / firewall the port (the smoke-test hardening bar: public :22/:7433 time out)" }
+                : { step, status: "pass", detail: `${opts.publicAddr}:${port} not reachable (${probe})` });
+        }
+    }
+    else {
+        const unknownProbe = (step, port) => ({
+            step, status: "unknown",
+            detail: `public reachability of :${port} not probed (no public address known — the registry target may be a tailnet alias)`,
+            fix: `re-run with --public-addr <ip> to probe from this vantage`,
+        });
+        rows.push(unknownProbe("public-daemon-port-unreachable", 7433));
+        rows.push(unknownProbe("public-ssh-unreachable-or-accepted", 22));
+    }
+    return rows;
+}
+export const POSTURE_ITEM_IDS = [
+    "nonroot-openrig-user",
+    "root-ssh-disabled",
+    "key-only-ssh",
+    "ufw-default-deny-incoming",
+    "tailnet-ingress-allowed",
+    "tailscale-minimal-trust",
+    "daemon-bind-not-public",
+    "public-daemon-port-unreachable",
+    "public-ssh-unreachable-or-accepted",
+];
+function renderRows(rows, json) {
+    if (json) {
+        console.log(JSON.stringify(rows));
+        return;
+    }
+    const glyph = { pass: "✓", fail: "✗", unknown: "?" };
+    for (const r of rows) {
+        console.log(`${glyph[r.status]} ${r.step}: ${r.detail}${r.fix ? `\n    fix: ${r.fix}` : ""}`);
+    }
+}
+function authPointer(h) {
+    if (h.transport === "ssh")
+        return "ssh-key";
+    return h.bearer_env ? `env:${h.bearer_env}` : h.bearer_file ? `file:${h.bearer_file}` : "—";
+}
+export function hostCommand(doctorDepsOverride) {
+    const cmd = new Command("host").description("Manage the multi-host registry (~/.openrig/hosts.yaml)");
+    cmd
+        .command("add")
+        .description("Add a host entry (validated with the registry loader's own rules)")
+        .requiredOption("--id <id>", "Unique host id")
+        .requiredOption("--transport <transport>", "ssh or http")
+        .option("--target <target>", "SSH target (DNS name, ssh-config alias, or IP) — ssh transport")
+        .option("--user <user>", "SSH user — ssh transport")
+        .option("--url <url>", "Remote daemon base URL — http transport")
+        .option("--bearer-env <name>", "Env var NAME holding the bearer token — http transport (pointer, never a value)")
+        .option("--bearer-file <path>", "File PATH holding the bearer token — http transport (pointer, never a value)")
+        .option("--notes <text>", "Free-form operator note")
+        .option("--json", "JSON output")
+        .action((opts) => {
+        const rawEntry = { id: opts.id, transport: opts.transport };
+        if (opts.target !== undefined)
+            rawEntry["target"] = opts.target;
+        if (opts.user !== undefined)
+            rawEntry["user"] = opts.user;
+        if (opts.url !== undefined)
+            rawEntry["url"] = opts.url;
+        if (opts.bearerEnv !== undefined)
+            rawEntry["bearer_env"] = opts.bearerEnv;
+        if (opts.bearerFile !== undefined)
+            rawEntry["bearer_file"] = opts.bearerFile;
+        if (opts.notes !== undefined)
+            rawEntry["notes"] = opts.notes;
+        const res = addHostEntry(rawEntry);
+        if (!res.ok) {
+            console.error(res.error);
+            process.exitCode = 1;
+            return;
+        }
+        if (opts.json) {
+            console.log(JSON.stringify({ ok: true, path: res.path, entry: res.entry }));
+            return;
+        }
+        console.log(`Added host '${res.entry.id}' (${res.entry.transport}) to ${res.path}`);
+        console.log(`Verify it: rig host doctor ${res.entry.id}`);
+    });
+    cmd
+        .command("list")
+        .description("List registered hosts (config pointers only — never secret values)")
+        .option("--json", "JSON output")
+        .action((opts) => {
+        const registryPath = defaultHostRegistryPath();
+        if (!existsSync(registryPath)) {
+            if (opts.json) {
+                console.log(JSON.stringify([]));
+                return;
+            }
+            console.log(`No hosts registered in ${registryPath}. Add one: rig host add --id <id> --transport <ssh|http> ...`);
+            return;
+        }
+        const loaded = loadHostRegistry(registryPath);
+        if (!loaded.ok) {
+            console.error(loaded.error);
+            process.exitCode = 1;
+            return;
+        }
+        if (opts.json) {
+            // Entries as validated: bearer fields are NAMES by construction.
+            console.log(JSON.stringify(loaded.registry.hosts));
+            return;
+        }
+        if (loaded.registry.hosts.length === 0) {
+            console.log(`No hosts registered in ${registryPath}. Add one: rig host add --id <id> --transport <ssh|http> ...`);
+            return;
+        }
+        const pad = (s, n) => (s.length > n ? s.slice(0, n - 1) + "…" : s.padEnd(n));
+        console.log(`${pad("ID", 20)} ${pad("TRANSPORT", 10)} ${pad("TARGET", 36)} ${pad("AUTH", 24)} NOTES`);
+        for (const h of loaded.registry.hosts) {
+            console.log(`${pad(h.id, 20)} ${pad(h.transport, 10)} ${pad(hostDisplayTarget(h), 36)} ${pad(authPointer(h), 24)} ${h.notes ?? "—"}`);
+        }
+    });
+    cmd
+        .command("doctor")
+        .description("Stepwise host verification (+ --posture for the product-factory-vps baseline)")
+        .argument("<id>", "Registered host id")
+        .option("--posture <profile>", `Run the posture baseline (only built-in profile: ${POSTURE_PROFILE_ID})`)
+        .option("--public-addr <ip>", "Public address for the outside-vantage reachability probes (posture items 8-9)")
+        .option("--json", "JSON output")
+        .action(async (id, opts) => {
+        const deps = doctorDepsOverride ?? defaultDoctorDeps();
+        const loaded = loadHostRegistry();
+        if (!loaded.ok) {
+            console.error(loaded.error);
+            process.exitCode = 1;
+            return;
+        }
+        const resolved = resolveHost(loaded.registry, id);
+        if (!resolved.ok) {
+            // The DISTINCT "registry is wrong" error class.
+            console.error(`registry: ${resolved.error}`);
+            process.exitCode = 1;
+            return;
+        }
+        if (opts.posture !== undefined && opts.posture !== POSTURE_PROFILE_ID) {
+            console.error(`unknown posture profile '${opts.posture}'. The only built-in profile is: ${POSTURE_PROFILE_ID}`);
+            process.exitCode = 1;
+            return;
+        }
+        const rows = await doctorLegs(resolved.host, deps);
+        if (opts.posture) {
+            rows.push(...await postureCheck(resolved.host, deps, { publicAddr: opts.publicAddr }));
+        }
+        renderRows(rows, opts.json);
+        if (rows.some((r) => r.status === "fail"))
+            process.exitCode = 1;
+        const unknowns = rows.filter((r) => r.status === "unknown").length;
+        if (!opts.json && unknowns > 0) {
+            console.log(`${unknowns} item${unknowns === 1 ? "" : "s"} UNKNOWN — unknown is not pass; see the fix lines to verify.`);
+        }
+    });
+    return cmd;
+}
+//# sourceMappingURL=host.js.map

package/dist/commands/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/commands/host.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,uEAAuE;AACvE,uEAAuE;AACvE,+CAA+C;AAC/C,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,eAAe;AAEf,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,mBAAmB,EAAsC,MAAM,qBAAqB,CAAC;AACvL,OAAO,EAAE,mBAAmB,EAAwB,MAAM,2BAA2B,CAAC;AAuBtF,SAAS,aAAa,CAAC,GAAY,EAAE,IAAuB;IAC1D,IAAI,GAAG,GAAY,GAAG,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC9D,GAAG,GAAI,GAA+B,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAC3C,OAAO,aAAa,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;WACnC,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;WAC1C,aAAa,CAAC,MAAM,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/E,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,CAAC;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CACpC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED;;uCAEuC;AACvC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAe,EAAE,IAAgB;IAChE,MAAM,IAAI,GAAe,EAAE,CAAC;IAE5B,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,iBAAiB,IAAI,KAAK,CAAC,UAAU,KAAK,iBAAiB,CAAC,EAAE,CAAC;YACpG,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,YAAY,KAAK,CAAC,UAAU,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE;gBACvF,GAAG,EAAE,KAAK,CAAC,UAAU,KAAK,iBAAiB;oBACzC,CAAC,CAAC,6EAA6E;oBAC/E,CAAC,CAAC,6EAA6E;aAClF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC,+CAA+C;QAC9D,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC;QAElG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,4FAA4F;gBACpG,GAAG,EAAE,2GAA2G;aACjH,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,sBAAsB,EAAE,EAAE,CAAC,CAAC;QAElI,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,QAAQ;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE;YAC3F,CAAC,CAAC;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,sEAAsE;gBAC9E,GAAG,EAAE,oDAAoD;aAC1D,CAAC,CAAC;QACP,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC;gBAAC,UAAU,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,UAAU,GAAG,KAAK,CAAC;YAAC,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU;YAClB,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,6DAA6D,EAAE;YACpH,CAAC,CAAC;gBACE,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,uDAAuD;gBAC/D,GAAG,EAAE,8GAA8G;aACpH,CAAC,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iBAAiB;IACjB,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAqB,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,2FAA2F,EAAE,CAAC,CAAC;QACtL,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAI,IAAsB,CAAC,GAAG,UAAU,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzH,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kDAAkD,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,0FAA0F,EAAE,CAAC,CAAC;YAC3O,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,2DAA2D,EAAE,CAAC,CAAC;YAClL,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAkB,IAAsB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtH,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC,CAAC;IAC9H,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yBAA0B,IAAsB,CAAC,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,iGAAiG,EAAE,CAAC,CAAC;QACjQ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,CAAC;QACR,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,iDAAiD;QACzD,GAAG,EAAE,yFAAyF;KAC/F,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAI,IAAsB,CAAC,GAAG,SAAS,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpH,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG;YAC3C,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,4CAA4C,EAAE;YACnG,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,0EAA0E,EAAE,CAAC,CAAC;IAClL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACpJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;4DAE4D;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAe,EACf,IAAgB,EAChB,OAAgC,EAAE;IAElC,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7B,+DAA+D;QAC/D,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,SAAkB;YAC1B,MAAM,EAAE,+EAA+E;YACvF,GAAG,EAAE,+FAA+F;SACrG,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAEpE,2BAA2B;IAC3B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,2BAA2B,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG;YACnC,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,GAAG,EAAE,gDAAgD,EAAE;YACrJ,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7G,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE,GAAG,EAAE,gDAAgD,EAAE,CAAC,CAAC;IAC9J,CAAC;IAED,+DAA+D;IAC/D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,4DAA4D,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,GAAW,EAAE,IAAY,EAAY,EAAE;QACrE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,2EAA2E,EAAE,GAAG,EAAE,mCAAmC,GAAG,GAAG,EAAE,CAAC;QAC1K,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,EAAE;YACpD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,IAAI,sEAAsE,EAAE,CAAC;IAC3K,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC,CAAC;IAEpE,0CAA0C;IAC1C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,gDAAgD,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,CAAC,IAAY,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,wDAAwD,EAAE,GAAG,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAC5L,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC;YACnD,CAAC,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,EAAE;YAC9F,CAAC,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,GAAG,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC9I,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjH,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC,CAAC;QACnH,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,6EAA6E,EAAE,GAAG,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAChM,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,GAAG,EAAE,iCAAiC,EAAE,CAAC,CAAC;QACnJ,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,6CAA6C,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,kDAAkD,CAAC,CAAC;IAC3E,IAAI,MAA0B,CAAC;IAC/B,IAAI,QAA6B,CAAC;IAClC,IAAI,MAA2B,CAAC;IAChC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAiG,CAAC;YACrI,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC;YACjD,QAAQ,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC;QAC7H,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS;YAAE,cAAc,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,kBAAkB,MAAM,IAAI,SAAS,uBAAuB,QAAQ,IAAI,SAAS,4BAA4B,MAAM,IAAI,SAAS,EAAE;YAC1I,GAAG,EAAE,+GAA+G;SACrH,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uEAAuE,EAAE,CAAC,CAAC;IAClJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,2CAA2C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC/E,GAAG,EAAE,4HAA4H;SAClI,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,gEAAgE;IAChE,uEAAuE;IACvE,kBAAkB;IAClB,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,4CAA4C,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,KAAK;SACtB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SAC9C,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,oDAAoD,EAAE,GAAG,EAAE,sDAAsD,EAAE,CAAC,CAAC;IAC9L,CAAC;SAAM,CAAC;QACN,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAW,EAAE;YACpD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YACrD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACnC,OAAO,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACjE,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,4CAA4C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YAClI,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yDAAyD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,oGAAoG,EAAE,CAAC,CAAC;IAC9P,CAAC;IAED,iFAAiF;IACjF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,gCAAgC,EAAE,IAAI,CAAC,EAAE,CAAC,oCAAoC,EAAE,EAAE,CAAC,CAAU,EAAE,CAAC;YAC3H,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM;gBACxB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,wBAAwB,EAAE,GAAG,EAAE,4GAA4G,EAAE;gBACzM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,mBAAmB,KAAK,GAAG,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAY,EAAY,EAAE,CAAC,CAAC;YAC9D,IAAI,EAAE,MAAM,EAAE,SAAS;YACvB,MAAM,EAAE,2BAA2B,IAAI,oFAAoF;YAC3H,GAAG,EAAE,2DAA2D;SACjE,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,gCAAgC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,oCAAoC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,sBAAsB;IACtB,mBAAmB;IACnB,cAAc;IACd,2BAA2B;IAC3B,yBAAyB;IACzB,yBAAyB;IACzB,wBAAwB;IACxB,gCAAgC;IAChC,oCAAoC;CAC5B,CAAC;AAEX,SAAS,UAAU,CAAC,IAAgB,EAAE,IAAyB;IAC7D,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAW,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAY;IAC/B,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,kBAA+B;IACzD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,wDAAwD,CAAC,CAAC;IAEtG,GAAG;SACA,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,mEAAmE,CAAC;SAChF,cAAc,CAAC,WAAW,EAAE,gBAAgB,CAAC;SAC7C,cAAc,CAAC,yBAAyB,EAAE,aAAa,CAAC;SACxD,MAAM,CAAC,mBAAmB,EAAE,gEAAgE,CAAC;SAC7F,MAAM,CAAC,eAAe,EAAE,0BAA0B,CAAC;SACnD,MAAM,CAAC,aAAa,EAAE,yCAAyC,CAAC;SAChE,MAAM,CAAC,qBAAqB,EAAE,iFAAiF,CAAC;SAChH,MAAM,CAAC,sBAAsB,EAAE,8EAA8E,CAAC;SAC9G,MAAM,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;SACnD,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,CAAC,IAA8J,EAAE,EAAE;QACzK,MAAM,QAAQ,GAA4B,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACrF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAChE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1D,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;YAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QACvD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7E,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAE7D,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,8BAA8B,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,oEAAoE,CAAC;SACjF,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAwB,EAAE,EAAE;QACnC,MAAM,YAAY,GAAG,uBAAuB,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,0BAA0B,YAAY,8DAA8D,CAAC,CAAC;YAClH,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,iEAAiE;YACjE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,0BAA0B,YAAY,8DAA8D,CAAC,CAAC;YAClH,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QACtG,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACxI,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+EAA+E,CAAC;SAC5F,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;SACtC,MAAM,CAAC,qBAAqB,EAAE,oDAAoD,kBAAkB,GAAG,CAAC;SACxG,MAAM,CAAC,oBAAoB,EAAE,gFAAgF,CAAC;SAC9G,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,IAA+D,EAAE,EAAE;QAC5F,MAAM,IAAI,GAAe,kBAAkB,IAAI,iBAAiB,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,gDAAgD;YAChD,OAAO,CAAC,KAAK,CAAC,aAAa,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;YACtE,OAAO,CAAC,KAAK,CAAC,4BAA4B,IAAI,CAAC,OAAO,oCAAoC,kBAAkB,EAAE,CAAC,CAAC;YAChH,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,QAAQ,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,8DAA8D,CAAC,CAAC;QAC1H,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/proof.d.ts

@@ -0,0 +1,54 @@
+import { Command } from "commander";
+/**
+ * `rig proof` — the proof-drop write path (OPR.0.4.4.19 FR-8 + FR-11;
+ * conventions C1 + C2 + C8, D2 attestation).
+ *
+ * CLI-side filesystem only (plan-review + arch-lead confirmed): the drop
+ * validates the C1 header AT THE MOMENT THE EVIDENCE IS IN-HAND, writes the
+ * artifact into the slice's proof/ dir, and echoes the parsed header (the
+ * seat sees what the composer will see). No daemon involvement, no synthetic
+ * qitems, no DB writes.
+ *
+ * LOAD-BEARING boundaries:
+ *   - Validation applies ONLY to drops made through this path. An artifact
+ *     written by any other means (raw file write, existing workflows) is
+ *     NEVER blocked at write time — the backstop is `rig scope audit`
+ *     (FR-10), not a write-path gate on ordinary file I/O.
+ *   - The D2 proof contract + self_check are AGENT JUDGMENT recorded here;
+ *     the drop path ADVISES (exit 0) and never blocks on them. There is no
+ *     configuration that makes any advisory blocking (BR-7).
+ */
+/** C1 ratified closed sets (BR-4 — extending them is a convention change
+ *  owned by pm-lead, not a code decision). */
+export declare const C1_ARTIFACT_TYPES: readonly ["guard", "qa", "rev1-r1", "rev1-r2", "adjudication"];
+export declare const C1_VERDICTS: readonly ["CLEAR", "BLOCKING", "CONCERNING", "PASS", "NOT-CLEAR"];
+export interface C1Header {
+    slice: string;
+    candidate_sha: string;
+    artifact_type: string;
+    verdict: string;
+    money_evidence: string;
+    /** D2 optional attestation fields — advise-never-block. */
+    evidences?: string[];
+    self_check?: string;
+}
+export interface C1ValidationResult {
+    ok: boolean;
+    missing: string[];
+    invalid: Array<{
+        field: string;
+        value: string;
+        allowed: readonly string[];
+    }>;
+}
+/** Validate the five required C1 fields + closed sets. Pure. */
+export declare function validateC1Header(header: Partial<C1Header>): C1ValidationResult;
+/**
+ * Parse the pinned `## Proof contract` section out of a slice's
+ * IMPLEMENTATION-PRD.md (the C7 pinned name; PM-lane authored). Returns the
+ * promised items (checkbox-item form, one promised item per line), or null
+ * when the slice declares no contract (tier-1 degrade — zero noise).
+ */
+export declare function parseProofContract(prdContent: string): string[] | null;
+export declare function proofCommand(): Command;
+//# sourceMappingURL=proof.d.ts.map

package/dist/commands/proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../src/commands/proof.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC;;;;;;;;;;;;;;;;;;GAkBG;AAEH;8CAC8C;AAC9C,eAAO,MAAM,iBAAiB,gEAAiE,CAAC;AAChG,eAAO,MAAM,WAAW,mEAAoE,CAAC;AAK7F,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC9E;AAED,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAc9E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAYtE;AAMD,wBAAgB,YAAY,IAAI,OAAO,CA0PtC"}