@vibecheckai/cli 2.5.1

package/dist/reality/receipt-generator.d.ts

@@ -0,0 +1,152 @@
+/**
+ * Proof-of-Execution Receipt Generator
+ *
+ * Generates tamper-evident receipt bundles for every PASS/SHIP verdict.
+ * Includes cryptographic attestation and machine-verifiable evidence.
+ */
+export interface ReceiptBundle {
+    schemaVersion: string;
+    receiptId: string;
+    verdict: 'PASS' | 'SHIP' | 'FAIL';
+    timestamp: string;
+    build: {
+        buildHash: string;
+        dependencyLockHash: string;
+        packageManager: string;
+        nodeVersion: string;
+        platform: string;
+    };
+    execution: {
+        commands: Array<{
+            command: string;
+            args: string[];
+            exitCode: number;
+            stdout?: string;
+            stderr?: string;
+            duration: number;
+            timestamp: string;
+        }>;
+        runtimeTraces: {
+            requests: Array<{
+                method: string;
+                url: string;
+                statusCode: number;
+                timestamp: string;
+                duration: number;
+                headers?: Record<string, string>;
+            }>;
+            routes: Array<{
+                path: string;
+                method: string;
+                hit: boolean;
+                timestamp: string;
+                responseTime?: number;
+            }>;
+            dbQueries?: Array<{
+                query: string;
+                duration: number;
+                timestamp: string;
+                table?: string;
+            }>;
+        };
+    };
+    coverage: {
+        criticalPaths: Array<{
+            path: string;
+            description: string;
+            covered: boolean;
+            evidence: string[];
+            timestamp: string;
+        }>;
+        coverageReport?: {
+            totalPaths: number;
+            coveredPaths: number;
+            percentage: number;
+        };
+    };
+    artifacts: {
+        screenshots: string[];
+        videos: string[];
+        traces: string[];
+        logs: string[];
+    };
+    attestation: {
+        algorithm: 'RS256' | 'ES256' | 'HMAC-SHA256';
+        keyId: string;
+        signature: string;
+        publicKey?: string;
+        signedAt: string;
+    };
+    metadata: {
+        projectPath: string;
+        gitSha?: string;
+        gitBranch?: string;
+        runId: string;
+        toolVersion: string;
+        realityGraph?: {
+            nodeCount: number;
+            edgeCount: number;
+            graphPath: string;
+        };
+    };
+}
+export interface ReceiptOptions {
+    projectPath: string;
+    runId: string;
+    verdict: 'PASS' | 'SHIP' | 'FAIL';
+    artifactDir: string;
+    commands?: Array<{
+        command: string;
+        args: string[];
+        exitCode: number;
+        stdout?: string;
+        stderr?: string;
+        duration: number;
+        timestamp: string;
+    }>;
+    runtimeTraces?: {
+        requests?: Array<{
+            method: string;
+            url: string;
+            statusCode: number;
+            timestamp: string;
+            duration: number;
+            headers?: Record<string, string>;
+        }>;
+        routes?: Array<{
+            path: string;
+            method: string;
+            hit: boolean;
+            timestamp: string;
+            responseTime?: number;
+        }>;
+        dbQueries?: Array<{
+            query: string;
+            duration: number;
+            timestamp: string;
+            table?: string;
+        }>;
+    };
+    criticalPaths?: Array<{
+        path: string;
+        description: string;
+        covered: boolean;
+        evidence: string[];
+        timestamp: string;
+    }>;
+    orgKeyId?: string;
+    orgPrivateKey?: string;
+}
+/**
+ * Generate Proof-of-Execution Receipt
+ */
+export declare function generateReceipt(options: ReceiptOptions): Promise<string>;
+/**
+ * Verify receipt signature
+ */
+export declare function verifyReceipt(receiptPath: string, orgPublicKey?: string): Promise<boolean>;
+/**
+ * Generate receipt summary for display
+ */
+export declare function generateReceiptSummary(receiptPath: string): string;
+//# sourceMappingURL=receipt-generator.d.ts.map

package/dist/reality/receipt-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-generator.d.ts","sourceRoot":"","sources":["../../src/reality/receipt-generator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAGlB,KAAK,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IAGF,SAAS,EAAE;QACT,QAAQ,EAAE,KAAK,CAAC;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,IAAI,EAAE,MAAM,EAAE,CAAC;YACf,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC,CAAC;QACH,aAAa,EAAE;YACb,QAAQ,EAAE,KAAK,CAAC;gBACd,MAAM,EAAE,MAAM,CAAC;gBACf,GAAG,EAAE,MAAM,CAAC;gBACZ,UAAU,EAAE,MAAM,CAAC;gBACnB,SAAS,EAAE,MAAM,CAAC;gBAClB,QAAQ,EAAE,MAAM,CAAC;gBACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,EAAE,KAAK,CAAC;gBACZ,IAAI,EAAE,MAAM,CAAC;gBACb,MAAM,EAAE,MAAM,CAAC;gBACf,GAAG,EAAE,OAAO,CAAC;gBACb,SAAS,EAAE,MAAM,CAAC;gBAClB,YAAY,CAAC,EAAE,MAAM,CAAC;aACvB,CAAC,CAAC;YACH,SAAS,CAAC,EAAE,KAAK,CAAC;gBAChB,KAAK,EAAE,MAAM,CAAC;gBACd,QAAQ,EAAE,MAAM,CAAC;gBACjB,SAAS,EAAE,MAAM,CAAC;gBAClB,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC,CAAC;SACJ,CAAC;KACH,CAAC;IAGF,QAAQ,EAAE;QACR,aAAa,EAAE,KAAK,CAAC;YACnB,IAAI,EAAE,MAAM,CAAC;YACb,WAAW,EAAE,MAAM,CAAC;YACpB,OAAO,EAAE,OAAO,CAAC;YACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;YACnB,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC,CAAC;QACH,cAAc,CAAC,EAAE;YACf,UAAU,EAAE,MAAM,CAAC;YACnB,YAAY,EAAE,MAAM,CAAC;YACrB,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC;KACH,CAAC;IAGF,SAAS,EAAE;QACT,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,IAAI,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC;IAGF,WAAW,EAAE;QACX,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;QAC7C,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IAGF,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE;YACb,SAAS,EAAE,MAAM,CAAC;YAClB,SAAS,EAAE,MAAM,CAAC;YAClB,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,aAAa,CAAC,EAAE;QACd,QAAQ,CAAC,EAAE,KAAK,CAAC;YACf,MAAM,EAAE,MAAM,CAAC;YACf,GAAG,EAAE,MAAM,CAAC;YACZ,UAAU,EAAE,MAAM,CAAC;YACnB,SAAS,EAAE,MAAM,CAAC;YAClB,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,KAAK,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,MAAM,EAAE,MAAM,CAAC;YACf,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,MAAM,CAAC;YAClB,YAAY,CAAC,EAAE,MAAM,CAAC;SACvB,CAAC,CAAC;QACH,SAAS,CAAC,EAAE,KAAK,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC;YACjB,SAAS,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,CAAC;SAChB,CAAC,CAAC;KACJ,CAAC;IACF,aAAa,CAAC,EAAE,KAAK,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAoLD;;GAEG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAqM9E;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA+ChG;AAwBD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAgDlE"}

package/dist/reality/receipt-generator.js

@@ -0,0 +1,495 @@
+"use strict";
+/**
+ * Proof-of-Execution Receipt Generator
+ *
+ * Generates tamper-evident receipt bundles for every PASS/SHIP verdict.
+ * Includes cryptographic attestation and machine-verifiable evidence.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateReceipt = generateReceipt;
+exports.verifyReceipt = verifyReceipt;
+exports.generateReceiptSummary = generateReceiptSummary;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+const crypto_1 = require("crypto");
+const reality_graph_1 = require("./reality-graph");
+/**
+ * Get build hash from package-lock.json, yarn.lock, or pnpm-lock.yaml
+ */
+function getDependencyLockHash(projectPath) {
+    const lockFiles = [
+        { file: 'package-lock.json', pm: 'npm' },
+        { file: 'yarn.lock', pm: 'yarn' },
+        { file: 'pnpm-lock.yaml', pm: 'pnpm' },
+    ];
+    for (const { file, pm } of lockFiles) {
+        const lockPath = path.join(projectPath, file);
+        if (fs.existsSync(lockPath)) {
+            const content = fs.readFileSync(lockPath, 'utf-8');
+            const hash = (0, crypto_1.createHash)('sha256').update(content).digest('hex');
+            return { hash, packageManager: pm };
+        }
+    }
+    return { hash: '', packageManager: 'unknown' };
+}
+/**
+ * Get build hash from build artifacts or dist directory
+ */
+function getBuildHash(projectPath) {
+    const buildDirs = ['dist', 'build', '.next', 'out', '.turbo'];
+    for (const dir of buildDirs) {
+        const buildPath = path.join(projectPath, dir);
+        if (fs.existsSync(buildPath) && fs.statSync(buildPath).isDirectory()) {
+            return hashDirectory(buildPath);
+        }
+    }
+    // If no build directory, hash package.json and source files
+    const packageJsonPath = path.join(projectPath, 'package.json');
+    if (fs.existsSync(packageJsonPath)) {
+        const content = fs.readFileSync(packageJsonPath, 'utf-8');
+        return (0, crypto_1.createHash)('sha256').update(content).digest('hex');
+    }
+    return '';
+}
+/**
+ * Hash directory contents recursively
+ */
+function hashDirectory(dirPath) {
+    const hasher = (0, crypto_1.createHash)('sha256');
+    function walk(currentPath) {
+        const entries = fs.readdirSync(currentPath, { withFileTypes: true });
+        for (const entry of entries) {
+            const fullPath = path.join(currentPath, entry.name);
+            // Skip node_modules, .git, etc.
+            if (entry.name === 'node_modules' || entry.name === '.git' || entry.name.startsWith('.')) {
+                continue;
+            }
+            if (entry.isDirectory()) {
+                walk(fullPath);
+            }
+            else {
+                try {
+                    const content = fs.readFileSync(fullPath);
+                    hasher.update(entry.name);
+                    hasher.update(content);
+                }
+                catch {
+                    // Skip files we can't read
+                }
+            }
+        }
+    }
+    walk(dirPath);
+    return hasher.digest('hex');
+}
+/**
+ * Collect artifacts from artifact directory
+ */
+function collectArtifacts(artifactDir) {
+    const artifacts = {
+        screenshots: [],
+        videos: [],
+        traces: [],
+        logs: [],
+    };
+    if (!fs.existsSync(artifactDir)) {
+        return artifacts;
+    }
+    function walk(currentPath, relativePath = '') {
+        const entries = fs.readdirSync(currentPath, { withFileTypes: true });
+        for (const entry of entries) {
+            const fullPath = path.join(currentPath, entry.name);
+            const relPath = path.join(relativePath, entry.name);
+            if (entry.isDirectory()) {
+                walk(fullPath, relPath);
+            }
+            else {
+                const ext = path.extname(entry.name).toLowerCase();
+                if (['.png', '.jpg', '.jpeg'].includes(ext)) {
+                    artifacts.screenshots.push(relPath);
+                }
+                else if (['.webm', '.mp4', '.mov'].includes(ext)) {
+                    artifacts.videos.push(relPath);
+                }
+                else if (ext === '.zip' && entry.name.includes('trace')) {
+                    artifacts.traces.push(relPath);
+                }
+                else if (['.log', '.txt'].includes(ext)) {
+                    artifacts.logs.push(relPath);
+                }
+            }
+        }
+    }
+    walk(artifactDir);
+    return artifacts;
+}
+/**
+ * Get Git information
+ */
+function getGitInfo(projectPath) {
+    try {
+        const sha = (0, child_process_1.execSync)('git rev-parse HEAD', { cwd: projectPath, encoding: 'utf-8' }).trim();
+        const branch = (0, child_process_1.execSync)('git rev-parse --abbrev-ref HEAD', { cwd: projectPath, encoding: 'utf-8' }).trim();
+        return { sha, branch };
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Sign receipt with organization key
+ */
+function signReceipt(receiptContent, orgKeyId, orgPrivateKey) {
+    // If org private key provided, use RSA/ECDSA signing
+    if (orgPrivateKey) {
+        try {
+            // Try RSA first
+            const key = crypto.createPrivateKey(orgPrivateKey);
+            const sign = crypto.createSign('RSA-SHA256');
+            sign.update(receiptContent);
+            const signature = sign.sign(key, 'base64');
+            return { signature, algorithm: 'RS256' };
+        }
+        catch {
+            // Try ECDSA
+            try {
+                const key = crypto.createPrivateKey(orgPrivateKey);
+                const sign = crypto.createSign('sha256');
+                sign.update(receiptContent);
+                const signature = sign.sign(key, 'base64');
+                return { signature, algorithm: 'ES256' };
+            }
+            catch {
+                // Fall back to HMAC
+            }
+        }
+    }
+    // Fallback to HMAC with org key ID
+    const key = process.env.GUARDRAIL_ORG_KEY || `org-${orgKeyId}`;
+    const signature = crypto.createHmac('sha256', key).update(receiptContent).digest('hex');
+    return { signature, algorithm: 'HMAC-SHA256' };
+}
+/**
+ * Generate Proof-of-Execution Receipt
+ */
+async function generateReceipt(options) {
+    const receiptDir = path.join(options.projectPath, '.guardrail', 'receipts', options.runId);
+    fs.mkdirSync(receiptDir, { recursive: true });
+    const timestamp = new Date().toISOString();
+    const gitInfo = getGitInfo(options.projectPath);
+    const { hash: dependencyLockHash, packageManager } = getDependencyLockHash(options.projectPath);
+    const buildHash = getBuildHash(options.projectPath);
+    const artifacts = collectArtifacts(options.artifactDir);
+    // Try to load runtime traces from test output if not provided
+    let runtimeTraces = options.runtimeTraces;
+    if (!runtimeTraces) {
+        const runtimeTracesPath = path.join(options.artifactDir, 'runtime-traces.json');
+        if (fs.existsSync(runtimeTracesPath)) {
+            try {
+                const tracesData = JSON.parse(fs.readFileSync(runtimeTracesPath, 'utf-8'));
+                runtimeTraces = {
+                    requests: tracesData.requests || [],
+                    routes: tracesData.routes || [],
+                    dbQueries: tracesData.dbQueries || [],
+                };
+            }
+            catch (e) {
+                // Ignore errors loading traces
+                runtimeTraces = {
+                    requests: [],
+                    routes: [],
+                    dbQueries: [],
+                };
+            }
+        }
+        else {
+            runtimeTraces = {
+                requests: [],
+                routes: [],
+                dbQueries: [],
+            };
+        }
+    }
+    // Get tool version
+    let toolVersion = 'unknown';
+    try {
+        const packageJsonPath = path.join(__dirname, '../../package.json');
+        if (fs.existsSync(packageJsonPath)) {
+            const pkg = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
+            toolVersion = pkg.version || 'unknown';
+        }
+    }
+    catch {
+        // Ignore
+    }
+    // Update critical paths with evidence from artifacts and runtime traces
+    const updatedCriticalPaths = (options.criticalPaths || []).map(path => {
+        // Check if route was hit
+        const routeHit = runtimeTraces?.routes?.some(r => r.path === path.path) || path.covered;
+        // Find evidence files (screenshots/videos) that might relate to this path
+        const pathEvidence = [
+            ...artifacts.screenshots.filter(f => f.includes(path.path.replace(/\//g, '-'))),
+            ...artifacts.videos.filter(f => f.includes(path.path.replace(/\//g, '-'))),
+        ];
+        return {
+            ...path,
+            covered: routeHit,
+            evidence: pathEvidence.length > 0 ? pathEvidence : path.evidence,
+        };
+    });
+    // Calculate coverage
+    const coverageReport = updatedCriticalPaths.length > 0 ? {
+        totalPaths: updatedCriticalPaths.length,
+        coveredPaths: updatedCriticalPaths.filter(p => p.covered).length,
+        percentage: Math.round((updatedCriticalPaths.filter(p => p.covered).length / updatedCriticalPaths.length) * 100),
+    } : undefined;
+    // Build receipt bundle
+    const receipt = {
+        schemaVersion: 'guardrail.receipt.v1',
+        receiptId: `receipt-${options.runId}-${Date.now()}`,
+        verdict: options.verdict,
+        timestamp,
+        build: {
+            buildHash,
+            dependencyLockHash,
+            packageManager,
+            nodeVersion: process.version,
+            platform: `${process.platform}-${process.arch}`,
+        },
+        execution: {
+            commands: options.commands || [],
+            runtimeTraces: {
+                requests: runtimeTraces?.requests || [],
+                routes: runtimeTraces?.routes || [],
+                dbQueries: runtimeTraces?.dbQueries || [],
+            },
+        },
+        coverage: {
+            criticalPaths: updatedCriticalPaths,
+            coverageReport,
+        },
+        artifacts: {
+            screenshots: artifacts.screenshots,
+            videos: artifacts.videos,
+            traces: artifacts.traces,
+            logs: artifacts.logs,
+        },
+        attestation: {
+            algorithm: 'HMAC-SHA256',
+            keyId: options.orgKeyId || 'default',
+            signature: '',
+            signedAt: timestamp,
+        },
+        metadata: {
+            projectPath: options.projectPath,
+            gitSha: gitInfo.sha,
+            gitBranch: gitInfo.branch,
+            runId: options.runId,
+            toolVersion,
+        },
+    };
+    // Sign the receipt (without signature field)
+    const receiptContent = JSON.stringify(receipt, null, 2);
+    const { signature, algorithm } = signReceipt(receiptContent, receipt.attestation.keyId, options.orgPrivateKey);
+    receipt.attestation.signature = signature;
+    receipt.attestation.algorithm = algorithm;
+    // Write receipt bundle
+    const receiptPath = path.join(receiptDir, 'receipt.json');
+    fs.writeFileSync(receiptPath, JSON.stringify(receipt, null, 2));
+    // Copy artifacts to receipt directory
+    const receiptArtifactsDir = path.join(receiptDir, 'artifacts');
+    if (fs.existsSync(options.artifactDir)) {
+        copyDirectoryRecursive(options.artifactDir, receiptArtifactsDir);
+    }
+    // Build Reality Graph from execution evidence
+    const graphBuilder = new reality_graph_1.RealityGraphBuilder(options.projectPath);
+    graphBuilder.discoverStaticNodes();
+    graphBuilder.updateFromRuntimeTraces(runtimeTraces);
+    graphBuilder.saveSnapshot();
+    // Export Reality Graph
+    const graphPath = path.join(receiptDir, 'reality-graph.json');
+    fs.writeFileSync(graphPath, graphBuilder.export());
+    // Add graph summary to receipt metadata
+    const graph = graphBuilder.getGraph();
+    receipt.metadata = {
+        ...receipt.metadata,
+        realityGraph: {
+            nodeCount: graph.nodes.size,
+            edgeCount: graph.edges.size,
+            graphPath: 'reality-graph.json',
+        },
+    };
+    // Re-sign receipt with updated metadata
+    const updatedReceiptContent = JSON.stringify(receipt, null, 2);
+    const { signature: updatedSignature, algorithm: updatedAlgorithm } = signReceipt(updatedReceiptContent, receipt.attestation.keyId, options.orgPrivateKey);
+    receipt.attestation.signature = updatedSignature;
+    receipt.attestation.algorithm = updatedAlgorithm;
+    // Write updated receipt
+    fs.writeFileSync(receiptPath, JSON.stringify(receipt, null, 2));
+    // Create receipt manifest
+    const manifest = {
+        receiptId: receipt.receiptId,
+        receiptPath: 'receipt.json',
+        artifactsDir: 'artifacts',
+        realityGraphPath: 'reality-graph.json',
+        verified: false,
+    };
+    fs.writeFileSync(path.join(receiptDir, 'manifest.json'), JSON.stringify(manifest, null, 2));
+    return receiptPath;
+}
+/**
+ * Verify receipt signature
+ */
+async function verifyReceipt(receiptPath, orgPublicKey) {
+    try {
+        const receiptContent = fs.readFileSync(receiptPath, 'utf-8');
+        const receipt = JSON.parse(receiptContent);
+        // Extract signature
+        const storedSignature = receipt.attestation.signature;
+        delete receipt.attestation.signature;
+        // Recompute signature
+        const contentToVerify = JSON.stringify(receipt, null, 2);
+        let isValid = false;
+        if (receipt.attestation.algorithm === 'RS256' && orgPublicKey) {
+            try {
+                const key = crypto.createPublicKey(orgPublicKey);
+                const verify = crypto.createVerify('RSA-SHA256');
+                verify.update(contentToVerify);
+                isValid = verify.verify(key, storedSignature, 'base64');
+            }
+            catch {
+                isValid = false;
+            }
+        }
+        else if (receipt.attestation.algorithm === 'ES256' && orgPublicKey) {
+            try {
+                const key = crypto.createPublicKey(orgPublicKey);
+                const verify = crypto.createVerify('sha256');
+                verify.update(contentToVerify);
+                isValid = verify.verify(key, storedSignature, 'base64');
+            }
+            catch {
+                isValid = false;
+            }
+        }
+        else {
+            // HMAC verification
+            const key = process.env.GUARDRAIL_ORG_KEY || `org-${receipt.attestation.keyId}`;
+            const expectedSignature = crypto.createHmac('sha256', key).update(contentToVerify).digest('hex');
+            isValid = storedSignature === expectedSignature;
+        }
+        // Restore signature for return
+        receipt.attestation.signature = storedSignature;
+        return isValid;
+    }
+    catch (error) {
+        console.error(`Receipt verification failed: ${error.message}`);
+        return false;
+    }
+}
+/**
+ * Recursively copy directory
+ */
+function copyDirectoryRecursive(src, dest) {
+    if (!fs.existsSync(dest)) {
+        fs.mkdirSync(dest, { recursive: true });
+    }
+    const entries = fs.readdirSync(src, { withFileTypes: true });
+    for (const entry of entries) {
+        const srcPath = path.join(src, entry.name);
+        const destPath = path.join(dest, entry.name);
+        if (entry.isDirectory()) {
+            copyDirectoryRecursive(srcPath, destPath);
+        }
+        else {
+            fs.copyFileSync(srcPath, destPath);
+        }
+    }
+}
+/**
+ * Generate receipt summary for display
+ */
+function generateReceiptSummary(receiptPath) {
+    try {
+        const receipt = JSON.parse(fs.readFileSync(receiptPath, 'utf-8'));
+        const summary = `
+╔════════════════════════════════════════════════════════════╗
+║  📜 PROOF-OF-EXECUTION RECEIPT                             ║
+╚════════════════════════════════════════════════════════════╝
+
+Receipt ID: ${receipt.receiptId}
+Verdict: ${receipt.verdict}
+Timestamp: ${receipt.timestamp}
+
+Build Evidence:
+  • Build Hash: ${receipt.build.buildHash.slice(0, 16)}...
+  • Dependency Lock: ${receipt.build.dependencyLockHash.slice(0, 16)}... (${receipt.build.packageManager})
+  • Platform: ${receipt.build.platform}
+  • Node: ${receipt.build.nodeVersion}
+
+Execution Evidence:
+  • Commands Run: ${receipt.execution.commands.length}
+  • HTTP Requests: ${receipt.execution.runtimeTraces.requests.length}
+  • Routes Hit: ${receipt.execution.runtimeTraces.routes.length}
+  • DB Queries: ${receipt.execution.runtimeTraces.dbQueries?.length || 0}
+
+Coverage:
+  • Critical Paths: ${receipt.coverage.criticalPaths.length}
+  • Covered: ${receipt.coverage.criticalPaths.filter(p => p.covered).length}
+  ${receipt.coverage.coverageReport ? `• Coverage: ${receipt.coverage.coverageReport.percentage}%` : ''}
+
+Artifacts:
+  • Screenshots: ${receipt.artifacts.screenshots.length}
+  • Videos: ${receipt.artifacts.videos.length}
+  • Traces: ${receipt.artifacts.traces.length}
+  • Logs: ${receipt.artifacts.logs.length}
+
+Attestation:
+  • Algorithm: ${receipt.attestation.algorithm}
+  • Key ID: ${receipt.attestation.keyId}
+  • Signature: ${receipt.attestation.signature.slice(0, 32)}...
+
+Receipt Path: ${receiptPath}
+`;
+        return summary;
+    }
+    catch (error) {
+        return `Failed to generate summary: ${error.message}`;
+    }
+}
+//# sourceMappingURL=receipt-generator.js.map

package/dist/reality/receipt-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-generator.js","sourceRoot":"","sources":["../../src/reality/receipt-generator.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiVH,0CAqMC;AAKD,sCA+CC;AA2BD,wDAgDC;AAnpBD,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAyC;AACzC,mCAAoC;AACpC,mDAAsD;AAqJtD;;GAEG;AACH,SAAS,qBAAqB,CAAC,WAAmB;IAChD,MAAM,SAAS,GAAG;QAChB,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,KAAK,EAAE;QACxC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE;QACjC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE;KACvC,CAAC;IAEF,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,SAAS,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,WAAmB;IACvC,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAE9D,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACrE,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;IAEpC,SAAS,IAAI,CAAC,WAAmB;QAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEpD,gCAAgC;YAChC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzF,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC1B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,2BAA2B;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,WAAmB;IAM3C,MAAM,SAAS,GAAG;QAChB,WAAW,EAAE,EAAc;QAC3B,MAAM,EAAE,EAAc;QACtB,MAAM,EAAE,EAAc;QACtB,IAAI,EAAE,EAAc;KACrB,CAAC;IAEF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,IAAI,CAAC,WAAmB,EAAE,eAAuB,EAAE;QAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEpD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5C,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtC,CAAC;qBAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;qBAAM,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1D,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;qBAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,CAAC;IAClB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,WAAmB;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,wBAAQ,EAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3F,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,iCAAiC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3G,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,cAAsB,EACtB,QAAgB,EAChB,aAAsB;IAEtB,qDAAqD;IACrD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,gBAAgB;YAChB,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;YACZ,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;gBACnD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC3C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,QAAQ,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,eAAe,CAAC,OAAuB;IAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3F,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAExD,8DAA8D;IAC9D,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QAChF,IAAI,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC3E,aAAa,GAAG;oBACd,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,EAAE;oBACnC,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,EAAE;oBAC/B,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,EAAE;iBACtC,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,+BAA+B;gBAC/B,aAAa,GAAG;oBACd,QAAQ,EAAE,EAAE;oBACZ,MAAM,EAAE,EAAE;oBACV,SAAS,EAAE,EAAE;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,aAAa,GAAG;gBACd,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,EAAE;gBACV,SAAS,EAAE,EAAE;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,WAAW,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACnE,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;YAClE,WAAW,GAAG,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,wEAAwE;IACxE,MAAM,oBAAoB,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACpE,yBAAyB;QACzB,MAAM,QAAQ,GAAG,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC;QAExF,0EAA0E;QAC1E,MAAM,YAAY,GAAG;YACnB,GAAG,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAC/E,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;SAC3E,CAAC;QAEF,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ;SACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACvD,UAAU,EAAE,oBAAoB,CAAC,MAAM;QACvC,YAAY,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QAChE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;KACjH,CAAC,CAAC,CAAC,SAAS,CAAC;IAEd,uBAAuB;IACvB,MAAM,OAAO,GAAkB;QAC7B,aAAa,EAAE,sBAAsB;QACrC,SAAS,EAAE,WAAW,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;QACnD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS;QAET,KAAK,EAAE;YACL,SAAS;YACT,kBAAkB;YAClB,cAAc;YACd,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;SAChD;QAED,SAAS,EAAE;YACT,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,aAAa,EAAE;gBACb,QAAQ,EAAE,aAAa,EAAE,QAAQ,IAAI,EAAE;gBACvC,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,EAAE;gBACnC,SAAS,EAAE,aAAa,EAAE,SAAS,IAAI,EAAE;aAC1C;SACF;QAED,QAAQ,EAAE;YACR,aAAa,EAAE,oBAAoB;YACnC,cAAc;SACf;QAED,SAAS,EAAE;YACT,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,IAAI,EAAE,SAAS,CAAC,IAAI;SACrB;QAED,WAAW,EAAE;YACX,SAAS,EAAE,aAAa;YACxB,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;YACpC,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,SAAS;SACpB;QAED,QAAQ,EAAE;YACR,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,SAAS,EAAE,OAAO,CAAC,MAAM;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW;SACZ;KACF,CAAC;IAEF,6CAA6C;IAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,WAAW,CAC1C,cAAc,EACd,OAAO,CAAC,WAAW,CAAC,KAAK,EACzB,OAAO,CAAC,aAAa,CACtB,CAAC;IAEF,OAAO,CAAC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;IAC1C,OAAO,CAAC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;IAE1C,uBAAuB;IACvB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhE,sCAAsC;IACtC,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,sBAAsB,CAAC,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACnE,CAAC;IAED,8CAA8C;IAC9C,MAAM,YAAY,GAAG,IAAI,mCAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAClE,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACnC,YAAY,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACpD,YAAY,CAAC,YAAY,EAAE,CAAC;IAE5B,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAC9D,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAEnD,wCAAwC;IACxC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;IACtC,OAAO,CAAC,QAAQ,GAAG;QACjB,GAAG,OAAO,CAAC,QAAQ;QACnB,YAAY,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;YAC3B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;YAC3B,SAAS,EAAE,oBAAoB;SAChC;KACF,CAAC;IAEF,wCAAwC;IACxC,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,WAAW,CAC9E,qBAAqB,EACrB,OAAO,CAAC,WAAW,CAAC,KAAK,EACzB,OAAO,CAAC,aAAa,CACtB,CAAC;IACF,OAAO,CAAC,WAAW,CAAC,SAAS,GAAG,gBAAgB,CAAC;IACjD,OAAO,CAAC,WAAW,CAAC,SAAS,GAAG,gBAAgB,CAAC;IAEjD,wBAAwB;IACxB,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhE,0BAA0B;IAC1B,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,cAAc;QAC3B,YAAY,EAAE,WAAW;QACzB,gBAAgB,EAAE,oBAAoB;QACtC,QAAQ,EAAE,KAAK;KAChB,CAAC;IACF,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAClC,CAAC;IAEF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,YAAqB;IAC5E,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAkB,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAE1D,oBAAoB;QACpB,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;QACtD,OAAO,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;QAErC,sBAAsB;QACtB,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEzD,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,OAAO,CAAC,WAAW,CAAC,SAAS,KAAK,OAAO,IAAI,YAAY,EAAE,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC/B,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,WAAW,CAAC,SAAS,KAAK,OAAO,IAAI,YAAY,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC7C,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC/B,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oBAAoB;YACpB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YAChF,MAAM,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjG,OAAO,GAAG,eAAe,KAAK,iBAAiB,CAAC;QAClD,CAAC;QAED,+BAA+B;QAC/B,OAAO,CAAC,WAAW,CAAC,SAAS,GAAG,eAAe,CAAC;QAEhD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,GAAW,EAAE,IAAY;IACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,IAAI,CAAC;QACH,MAAM,OAAO,GAAkB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAEjF,MAAM,OAAO,GAAG;;;;;cAKN,OAAO,CAAC,SAAS;WACpB,OAAO,CAAC,OAAO;aACb,OAAO,CAAC,SAAS;;;kBAGZ,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;uBAC/B,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,KAAK,CAAC,cAAc;gBACxF,OAAO,CAAC,KAAK,CAAC,QAAQ;YAC1B,OAAO,CAAC,KAAK,CAAC,WAAW;;;oBAGjB,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM;qBAChC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM;kBAClD,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM;kBAC7C,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;;;sBAGlD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM;eAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;IACvE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE;;;mBAGpF,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM;cACzC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM;cAC/B,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM;YACjC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM;;;iBAGxB,OAAO,CAAC,WAAW,CAAC,SAAS;cAChC,OAAO,CAAC,WAAW,CAAC,KAAK;iBACtB,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;;gBAE3C,WAAW;CAC1B,CAAC;QAEE,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC;AACH,CAAC"}