@yourtechbudstudio/isagi-workflow-verifier 0.0.1 → 0.1.0

package/dist/closed-bundle.js

@@ -0,0 +1,393 @@
+import { parse } from 'acorn';
+import { analyze } from 'eslint-scope';
+/**
+ * Checks that a built artifact is closed: everything it executes is already inside it.
+ *
+ * The canonical build command passes `--log-override:unsupported-dynamic-import=error`, but nothing
+ * in the receipt attests to the flags an author actually used — `requirePins` checks package
+ * versions, not how the bundle was produced. So the guarantee is checked on the artifact itself.
+ *
+ * The check parses the module rather than scanning text. Text scanning was wrong in both
+ * directions: it misses a residual `import` statement entirely, and it rejects a prompt string or a
+ * comment that happens to contain `eval(`.
+ *
+ * Whether a *call* reaches a loader is a lexical question — `var` hoisting out of blocks,
+ * default-parameter scopes, named function expressions, declaration order — and successive
+ * hand-written resolvers answered it wrongly in both directions. `eslint-scope` answers it
+ * properly, which is why it is a dependency: it resolves each callee to the binding actually
+ * visible there, and reports which bindings came from `node:module` in the first place.
+ *
+ * It covers ordinary residual dependencies and deferred-load constructs, **not** adversarial
+ * indirection: computed member access can still reach a loader. Workflow code is trusted,
+ * in-process, and unsandboxed, and this check does not change that.
+ */
+const nodeModuleSpecifier = 'node:module';
+/**
+ * Assignment operators that can give a binding its right-hand value.
+ *
+ * The logical forms are conditional — `cr ||= createRequire` assigns only when `cr` is falsy — but
+ * which branch a given run takes is not a question this check answers, so a right-hand side that
+ * carries a loader makes the target one. That fails closed, and it matches how a plain `=` is
+ * already treated. Arithmetic compound operators cannot yield a loader and are not candidates.
+ */
+const aliasingAssignmentOperators = new Set(['=', '||=', '&&=', '??=']);
+/** Exports of `node:module` that hand back a way to load code outside the artifact. */
+const moduleLoaderExports = new Set(['createRequire']);
+/** Methods that load natively, read as `process.<name>(…)`. */
+const processLoaderMethods = new Set(['binding', 'dlopen']);
+/** The single declared exception. Bare `fs`/`path` are not exempt: by specifier alone they are
+ *  indistinguishable from an unbundled package, and the scaffold and guide use the `node:` form. */
+function isNodeBuiltin(specifier) {
+    return specifier.startsWith('node:');
+}
+export function scanDeferredExecutableDependencies(artifactSource) {
+    let program;
+    try {
+        program = parse(artifactSource, {
+            ecmaVersion: 'latest',
+            sourceType: 'module',
+            locations: true,
+            ranges: true,
+        });
+    }
+    catch (cause) {
+        return [unparseable(cause)];
+    }
+    let scopeManager;
+    try {
+        scopeManager = analyze(program, { ecmaVersion: 2024, sourceType: 'module' });
+    }
+    catch (cause) {
+        return [unparseable(cause)];
+    }
+    const { loaders, resolvedAt } = analyzeBindings(scopeManager, program);
+    const diagnostics = [];
+    const report = (node, message) => {
+        diagnostics.push({
+            code: 'deferred_executable_dependency',
+            message: `${message} (${position(node)})`,
+            at: {},
+        });
+    };
+    walk(program, (node) => {
+        switch (node.type) {
+            case 'ImportDeclaration':
+            case 'ExportAllDeclaration':
+            case 'ExportNamedDeclaration': {
+                const source = node.source;
+                if (!source || typeof source.value !== 'string')
+                    return;
+                // Importing a `node:` built-in is permitted, including `node:module`. Acquiring a binding is
+                // not the failure; calling a loader through it is, and that is checked at the call site.
+                if (isNodeBuiltin(source.value))
+                    return;
+                report(source, `dist/index.js still imports "${source.value}" at run time, so the bundle is not closed. Rebuild without --external so every executable dependency is inside the artifact`);
+                return;
+            }
+            case 'ImportExpression': {
+                const source = node.source;
+                if (source?.type === 'Literal' && typeof source.value === 'string') {
+                    if (isNodeBuiltin(source.value))
+                        return;
+                    report(source, `dist/index.js defers loading "${source.value}" through import(), so the bundle is not closed`);
+                    return;
+                }
+                report(node, 'dist/index.js calls import() with a computed specifier, so the verifier cannot tell what it would load');
+                return;
+            }
+            case 'NewExpression':
+            case 'CallExpression': {
+                const callee = node.callee;
+                if (!callee)
+                    return;
+                const invoked = calledLoader(callee, loaders, resolvedAt);
+                if (invoked) {
+                    report(callee, `dist/index.js calls ${invoked}, which can load code the artifact does not contain`);
+                }
+                return;
+            }
+            default:
+                return;
+        }
+    });
+    return diagnostics;
+}
+function unparseable(cause) {
+    return {
+        code: 'deferred_executable_dependency',
+        message: `dist/index.js could not be analyzed as an ES module, so the verifier cannot confirm the bundle is closed: ${cause instanceof Error ? cause.message : String(cause)}`,
+        at: {},
+    };
+}
+function analyzeBindings(scopeManager, program) {
+    const loaders = new Map();
+    const resolvedAt = new Map();
+    const candidates = [];
+    for (const scope of scopeManager.scopes) {
+        for (const reference of scope.references) {
+            resolvedAt.set(reference.identifier, reference.resolved ?? null);
+        }
+        for (const variable of scope.variables) {
+            for (const def of variable.defs) {
+                if (def?.type === 'ImportBinding') {
+                    const imported = importedLoader(def);
+                    if (imported)
+                        loaders.set(variable, imported);
+                    continue;
+                }
+                if (def?.type === 'Variable') {
+                    candidates.push({
+                        variable,
+                        init: def.node?.init,
+                        pattern: def.node?.id,
+                        name: def.name,
+                    });
+                }
+            }
+        }
+    }
+    // A plain assignment is an alias too. `let cr; cr = createRequire;` binds exactly what
+    // `const cr = createRequire` binds, and reading only declarator initializers missed it.
+    collectAssignmentAliases(program, resolvedAt, candidates);
+    // Aliases can be written after the code that uses them, so iterate to a fixpoint. A binding that
+    // is ever assigned a loader stays one: if it is later reassigned to something harmless, which of
+    // the two a given call sees is not a question this check answers, and it fails closed.
+    for (let changed = true; changed;) {
+        changed = false;
+        for (const candidate of candidates) {
+            if (loaders.has(candidate.variable))
+                continue;
+            const binding = aliasedLoader(candidate, loaders, resolvedAt);
+            if (!binding)
+                continue;
+            loaders.set(candidate.variable, binding);
+            changed = true;
+        }
+    }
+    return { loaders, resolvedAt };
+}
+/** Every `x = …` write, as an alias candidate resolved the same way a declaration is. */
+function collectAssignmentAliases(program, resolvedAt, into) {
+    walk(program, (node) => {
+        if (node.type !== 'AssignmentExpression')
+            return;
+        if (typeof node.operator !== 'string' || !aliasingAssignmentOperators.has(node.operator))
+            return;
+        const left = node.left;
+        const init = node.right;
+        const add = (identifier) => {
+            const variable = resolvedAt.get(identifier);
+            if (variable)
+                into.push({ variable, init, pattern: left, name: identifier });
+        };
+        if (left?.type === 'Identifier') {
+            add(left);
+            return;
+        }
+        if (left?.type !== 'ObjectPattern')
+            return;
+        for (const property of left.properties ?? []) {
+            if (property?.computed === true)
+                continue;
+            const bound = property?.value?.type === 'AssignmentPattern' ? property.value.left : property?.value;
+            if (bound?.type === 'Identifier')
+                add(bound);
+        }
+    });
+}
+/**
+ * Whether an expression denotes the `node:module` namespace.
+ *
+ * Either a name that resolves to a namespace binding, or an awaited `import('node:module')` used
+ * directly. The second has no intermediate binding at all, so resolution alone never sees it, and
+ * `(await import('node:module')).createRequire(…)` is ordinary syntax rather than indirection.
+ */
+function isNodeModuleNamespace(expression, loaders, resolvedAt) {
+    const unwrapped = unwrapAwait(expression);
+    if (!unwrapped)
+        return false;
+    if (unwrapped.type === 'ImportExpression') {
+        return unwrapped.source?.type === 'Literal' && unwrapped.source.value === nodeModuleSpecifier;
+    }
+    if (unwrapped.type !== 'Identifier')
+        return false;
+    const resolved = resolvedAt.get(unwrapped);
+    return resolved ? loaders.get(resolved)?.kind === 'namespace' : false;
+}
+/** A binding introduced by `import … from 'node:module'`, if it carries a loader. */
+function importedLoader(def) {
+    const source = def?.parent?.source;
+    if (source?.value !== nodeModuleSpecifier)
+        return null;
+    const specifier = def.node;
+    if (specifier?.type === 'ImportSpecifier') {
+        const name = specifier.imported?.name;
+        return typeof name === 'string' && moduleLoaderExports.has(name)
+            ? { kind: 'loader', exportName: name }
+            : null;
+    }
+    // A namespace or default import carries every export, loaders included.
+    return specifier?.type === 'ImportNamespaceSpecifier' ||
+        specifier?.type === 'ImportDefaultSpecifier'
+        ? { kind: 'namespace' }
+        : null;
+}
+/** The ordinary static aliases authors write, resolved through the scope analysis. */
+function aliasedLoader(candidate, loaders, resolvedAt) {
+    const init = unwrapAwait(candidate.init);
+    if (!init)
+        return null;
+    const sourceBinding = (identifier) => {
+        const resolved = resolvedAt.get(identifier);
+        return resolved ? loaders.get(resolved) : undefined;
+    };
+    // `const m = await import('node:module')`
+    if (init.type === 'ImportExpression' && init.source?.value === nodeModuleSpecifier) {
+        return patternBinding(candidate, { kind: 'namespace' });
+    }
+    // `const cr = createRequire` / `const alias = ns` / `const { createRequire: cr } = ns`
+    if (init.type === 'Identifier') {
+        const binding = sourceBinding(init);
+        return binding ? patternBinding(candidate, binding) : null;
+    }
+    // `const cr = ns.createRequire`, and the same off an awaited import.
+    if (init.type === 'MemberExpression' && init.computed !== true) {
+        if (!isNodeModuleNamespace(init.object, loaders, resolvedAt))
+            return null;
+        const name = init.property?.type === 'Identifier' ? init.property.name : undefined;
+        return typeof name === 'string' && moduleLoaderExports.has(name)
+            ? { kind: 'loader', exportName: name }
+            : null;
+    }
+    return null;
+}
+/** Applies a source binding to whichever name of the declaration this variable is. */
+function patternBinding(candidate, source) {
+    const pattern = candidate.pattern;
+    if (pattern?.type === 'Identifier')
+        return source;
+    if (source.kind !== 'namespace' || pattern?.type !== 'ObjectPattern')
+        return null;
+    for (const property of pattern.properties ?? []) {
+        if (property?.computed === true)
+            continue;
+        // `const { createRequire: cr = fallback } = ns` binds `cr` inside an assignment pattern.
+        const bound = property?.value?.type === 'AssignmentPattern' ? property.value.left : property?.value;
+        if (bound !== candidate.name)
+            continue;
+        const key = property.key?.type === 'Identifier' ? property.key.name : undefined;
+        if (typeof key === 'string' && moduleLoaderExports.has(key)) {
+            return { kind: 'loader', exportName: key };
+        }
+    }
+    return null;
+}
+/**
+ * The value an initializer ultimately takes.
+ *
+ * `await import(…)` yields the module; `a = b = createRequire` gives `a` the same value as `b`,
+ * because assignment is right-associative and evaluates to its right-hand side; a logical
+ * assignment is followed the same way and for the same fail-closed reason; a sequence evaluates to
+ * its last expression. Each is ordinary non-computed syntax, so each is followed.
+ */
+function unwrapAwait(value) {
+    let current = value;
+    for (;;) {
+        if (current?.type === 'AwaitExpression') {
+            current = current.argument;
+            continue;
+        }
+        if (current?.type === 'AssignmentExpression' &&
+            aliasingAssignmentOperators.has(current.operator)) {
+            current = current.right;
+            continue;
+        }
+        if (current?.type === 'SequenceExpression' && Array.isArray(current.expressions)) {
+            const last = current.expressions.at(-1);
+            if (last) {
+                current = last;
+                continue;
+            }
+        }
+        return current;
+    }
+}
+/**
+ * The loader a call invokes, named for the diagnostic, or null.
+ *
+ * A callee that resolves to a binding is that binding — an author's own `process`, a parameter
+ * named `createRequire`, a named function expression called `process`. Only an unresolved name is
+ * the global of that name.
+ */
+function calledLoader(callee, loaders, resolvedAt) {
+    if (callee.type === 'Identifier') {
+        const name = callee.name;
+        if (typeof name !== 'string')
+            return null;
+        const resolved = resolvedAt.get(callee);
+        const binding = resolved ? loaders.get(resolved) : undefined;
+        if (binding?.kind === 'loader') {
+            return binding.exportName === name
+                ? `"${name}" imported from ${nodeModuleSpecifier}`
+                : `"${name}" (${binding.exportName} from ${nodeModuleSpecifier})`;
+        }
+        if (resolved)
+            return null;
+        if (name === 'eval')
+            return 'the global "eval"';
+        if (name === 'Function')
+            return 'the Function constructor';
+        return null;
+    }
+    if (callee.type !== 'MemberExpression' || callee.computed === true)
+        return null;
+    const object = callee.object;
+    const property = callee.property;
+    if (property?.type !== 'Identifier' || typeof property.name !== 'string')
+        return null;
+    const propertyName = property.name;
+    if (isNodeModuleNamespace(object, loaders, resolvedAt) && moduleLoaderExports.has(propertyName)) {
+        const receiver = object?.type === 'Identifier' ? String(object.name) : nodeModuleSpecifier;
+        return `"${receiver}.${propertyName}" from ${nodeModuleSpecifier}`;
+    }
+    if (object?.type !== 'Identifier' || typeof object.name !== 'string')
+        return null;
+    // Only an unresolved name is the global of that name.
+    if (resolvedAt.get(object))
+        return null;
+    if (object.name === 'process' && processLoaderMethods.has(propertyName)) {
+        return `"process.${propertyName}"`;
+    }
+    return null;
+}
+function position(node) {
+    return node.loc
+        ? `line ${node.loc.start.line}, column ${node.loc.start.column}`
+        : `offset ${node.start}`;
+}
+/**
+ * A generic AST walk. Strings and comments are not nodes, which is exactly why the parsed check
+ * accepts a prompt containing `eval(` that a text scan would reject.
+ */
+function walk(node, visit) {
+    visit(node);
+    for (const key of Object.keys(node)) {
+        if (key === 'loc' || key === 'type')
+            continue;
+        const value = node[key];
+        if (Array.isArray(value)) {
+            for (const entry of value)
+                if (isNode(entry))
+                    walk(entry, visit);
+        }
+        else if (isNode(value)) {
+            walk(value, visit);
+        }
+    }
+}
+function isNode(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        typeof value.type === 'string');
+}
+//# sourceMappingURL=closed-bundle.js.map

package/dist/closed-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"closed-bundle.js","sourceRoot":"","sources":["../src/closed-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAIvC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAExE,uFAAuF;AACvF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;AAEvD,+DAA+D;AAC/D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE5D;oGACoG;AACpG,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAgBD,MAAM,UAAU,kCAAkC,CAChD,cAAsB;IAEtB,IAAI,OAAkB,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,cAAc,EAAE;YAC9B,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,IAAI;SACb,CAAyB,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,YAAY,CAAC;IACjB,IAAI,CAAC;QACH,YAAY,GAAG,OAAO,CAAC,OAAgB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAEvE,MAAM,WAAW,GAA0B,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,IAAe,EAAE,OAAe,EAAQ,EAAE;QACxD,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,gCAAgC;YACtC,OAAO,EAAE,GAAG,OAAO,KAAK,QAAQ,CAAC,IAAI,CAAC,GAAG;YACzC,EAAE,EAAE,EAAE;SACP,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACrB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,mBAAmB,CAAC;YACzB,KAAK,sBAAsB,CAAC;YAC5B,KAAK,wBAAwB,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAsC,CAAC;gBAC3D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO;gBACxD,6FAA6F;gBAC7F,yFAAyF;gBACzF,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,OAAO;gBACxC,MAAM,CACJ,MAAM,EACN,gCAAgC,MAAM,CAAC,KAAK,8HAA8H,CAC3K,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,kBAAkB,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAA+B,CAAC;gBACpD,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACnE,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;wBAAE,OAAO;oBACxC,MAAM,CACJ,MAAM,EACN,iCAAiC,MAAM,CAAC,KAAK,iDAAiD,CAC/F,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CACJ,IAAI,EACJ,wGAAwG,CACzG,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,eAAe,CAAC;YACrB,KAAK,gBAAgB,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAA+B,CAAC;gBACpD,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACpB,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;gBAC1D,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,CACJ,MAAM,EACN,uBAAuB,OAAO,qDAAqD,CACpF,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YACD;gBACE,OAAO;QACX,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,6GAA6G,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QAC9K,EAAE,EAAE,EAAE;KACP,CAAC;AACJ,CAAC;AAmBD,SAAS,eAAe,CACtB,YAKC,EACD,OAAkB;IAKlB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC9D,MAAM,UAAU,GAAqB,EAAE,CAAC;IAExC,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QACxC,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACzC,UAAU,CAAC,GAAG,CACZ,SAAS,CAAC,UAAuB,EAChC,SAAS,CAAC,QAAiC,IAAI,IAAI,CACrD,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACvC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAChC,IAAI,GAAG,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;oBAClC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;oBACrC,IAAI,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC9C,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC7B,UAAU,CAAC,IAAI,CAAC;wBACd,QAAQ;wBACR,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI;wBACpB,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE;wBACrB,IAAI,EAAE,GAAG,CAAC,IAAI;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,wFAAwF;IACxF,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAE1D,iGAAiG;IACjG,iGAAiG;IACjG,uFAAuF;IACvF,KAAK,IAAI,OAAO,GAAG,IAAI,EAAE,OAAO,GAAI,CAAC;QACnC,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,yFAAyF;AACzF,SAAS,wBAAwB,CAC/B,OAAkB,EAClB,UAAwD,EACxD,IAAsB;IAEtB,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB;YAAE,OAAO;QACjD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YACtF,OAAO;QACT,MAAM,IAAI,GAAQ,IAAI,CAAC,IAAI,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,MAAM,GAAG,GAAG,CAAC,UAAe,EAAQ,EAAE;YACpC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,UAAuB,CAAC,CAAC;YACzD,IAAI,QAAQ;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/E,CAAC,CAAC;QACF,IAAI,IAAI,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,CAAC;YACV,OAAO;QACT,CAAC;QACD,IAAI,IAAI,EAAE,IAAI,KAAK,eAAe;YAAE,OAAO;QAC3C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,QAAQ,EAAE,QAAQ,KAAK,IAAI;gBAAE,SAAS;YAC1C,MAAM,KAAK,GACT,QAAQ,EAAE,KAAK,EAAE,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC;YACxF,IAAI,KAAK,EAAE,IAAI,KAAK,YAAY;gBAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,UAAe,EACf,OAAkD,EAClD,UAAwD;IAExD,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,KAAK,mBAAmB,CAAC;IAChG,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAsB,CAAC,CAAC;IACxD,OAAO,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;AACxE,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,GAAQ;IAC9B,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC;IACnC,IAAI,MAAM,EAAE,KAAK,KAAK,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC;IAC3B,IAAI,SAAS,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC;QACtC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;YACtC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IACD,wEAAwE;IACxE,OAAO,SAAS,EAAE,IAAI,KAAK,0BAA0B;QACnD,SAAS,EAAE,IAAI,KAAK,wBAAwB;QAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;QACvB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,sFAAsF;AACtF,SAAS,aAAa,CACpB,SAAyB,EACzB,OAAkD,EAClD,UAAwD;IAExD,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,aAAa,GAAG,CAAC,UAAmB,EAA6B,EAAE;QACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,UAAuB,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC,CAAC;IAEF,0CAA0C;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,mBAAmB,EAAE,CAAC;QACnF,OAAO,cAAc,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,uFAAuF;IACvF,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IACD,qEAAqE;IACrE,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;YACtC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,SAAyB,EAAE,MAAqB;IACtE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IAClC,IAAI,OAAO,EAAE,IAAI,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,EAAE,IAAI,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAClF,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,QAAQ,EAAE,QAAQ,KAAK,IAAI;YAAE,SAAS;QAC1C,yFAAyF;QACzF,MAAM,KAAK,GACT,QAAQ,EAAE,KAAK,EAAE,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC;QACxF,IAAI,KAAK,KAAK,SAAS,CAAC,IAAI;YAAE,SAAS;QACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAAU;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,SAAS,CAAC;QACR,IAAI,OAAO,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACxC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IACE,OAAO,EAAE,IAAI,KAAK,sBAAsB;YACxC,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EACjD,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,EAAE,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,MAAiB,EACjB,OAAkD,EAClD,UAAwD;IAExD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IAAI,OAAO,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,UAAU,KAAK,IAAI;gBAChC,CAAC,CAAC,IAAI,IAAI,mBAAmB,mBAAmB,EAAE;gBAClD,CAAC,CAAC,IAAI,IAAI,MAAM,OAAO,CAAC,UAAU,SAAS,mBAAmB,GAAG,CAAC;QACtE,CAAC;QACD,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,mBAAmB,CAAC;QAChD,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,0BAA0B,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,MAAM,GAAG,MAAM,CAAC,MAA+B,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAiC,CAAC;IAC1D,IAAI,QAAQ,EAAE,IAAI,KAAK,YAAY,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtF,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC;IAEnC,IAAI,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAChG,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC3F,OAAO,IAAI,QAAQ,IAAI,YAAY,UAAU,mBAAmB,EAAE,CAAC;IACrE,CAAC;IAED,IAAI,MAAM,EAAE,IAAI,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClF,sDAAsD;IACtD,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACxE,OAAO,YAAY,YAAY,GAAG,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAe;IAC/B,OAAO,IAAI,CAAC,GAAG;QACb,CAAC,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,YAAY,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE;QAChE,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,SAAS,IAAI,CAAC,IAAe,EAAE,KAAgC;IAC7D,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM;YAAE,SAAS;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,KAAK;gBAAE,IAAI,MAAM,CAAC,KAAK,CAAC;oBAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,CACvD,CAAC;AACJ,CAAC"}

package/dist/receipt.d.ts

@@ -1,9 +1,10 @@
-export declare const workflowBuildManifestVersion: 1;
-export declare const supportedWorkflowContractVersion: 1;
+import { workflowStructureDescriptorVersion } from './structure.js';
+export declare const workflowBuildManifestVersion: 2;
+export declare const supportedWorkflowContractVersion: 4;
 export declare const workflowSdkPackage: '@yourtechbudstudio/isagi-workflow-sdk';
 export declare const workflowVerifierPackage: '@yourtechbudstudio/isagi-workflow-verifier';
-export declare const workflowSdkVersion: '0.0.1';
-export declare const workflowVerifierVersion: '0.0.1';
+export declare const workflowSdkVersion: '0.1.0';
+export declare const workflowVerifierVersion: '0.1.0';
 export declare const workflowBuilderPackage: 'esbuild';
 export declare const workflowBuilderVersion: '0.28.0';
 export declare const workflowBuildCommand: 'esbuild src/index.ts --bundle --format=esm --platform=node --target=node22 --log-override:unsupported-dynamic-import=error --outfile=dist/index.js';
@@ -27,6 +28,17 @@ export interface WorkflowBuildManifest {
         readonly entry: 'dist/index.js';
         readonly sha256: string;
     };
+    /**
+     * The structure the artifact actually declares. The runtime re-derives this from the imported
+     * bundle and compares hashes, so an edited receipt cannot describe a different graph than the one
+     * that will execute.
+     */
+    readonly structure: {
+        readonly descriptorVersion: typeof workflowStructureDescriptorVersion;
+        readonly sha256: string;
+        readonly rootGraphKey: string;
+        readonly graphCount: number;
+    };
 }
 export interface HashInput {
     readonly path: string;

package/dist/receipt.js

@@ -1,10 +1,11 @@
 import { createHash } from 'node:crypto';
-export const workflowBuildManifestVersion = 1;
-export const supportedWorkflowContractVersion = 1;
+import { workflowStructureDescriptorVersion } from './structure.js';
+export const workflowBuildManifestVersion = 2;
+export const supportedWorkflowContractVersion = 4;
 export const workflowSdkPackage = '@yourtechbudstudio/isagi-workflow-sdk';
 export const workflowVerifierPackage = '@yourtechbudstudio/isagi-workflow-verifier';
-export const workflowSdkVersion = '0.0.1';
-export const workflowVerifierVersion = '0.0.1';
+export const workflowSdkVersion = '0.1.0';
+export const workflowVerifierVersion = '0.1.0';
 export const workflowBuilderPackage = 'esbuild';
 export const workflowBuilderVersion = '0.28.0';
 export const workflowBuildCommand = 'esbuild src/index.ts --bundle --format=esm --platform=node --target=node22 --log-override:unsupported-dynamic-import=error --outfile=dist/index.js';
@@ -55,7 +56,15 @@ export function serializeWorkflowBuildManifest(manifest) {
 export function parseWorkflowBuildManifest(input) {
     if (!isRecord(input))
         throw new Error('Build manifest must be an object.');
-    assertExactKeys(input, ['manifestVersion', 'workflowContractVersion', 'sdk', 'verifier', 'source', 'artifact'], 'manifest');
+    assertExactKeys(input, [
+        'manifestVersion',
+        'workflowContractVersion',
+        'sdk',
+        'verifier',
+        'source',
+        'artifact',
+        'structure',
+    ], 'manifest');
     if (input.manifestVersion !== workflowBuildManifestVersion)
         throw new Error(`Unsupported manifestVersion ${JSON.stringify(input.manifestVersion)}; this verifier supports ${workflowBuildManifestVersion}.`);
     if (input.workflowContractVersion !== supportedWorkflowContractVersion)
@@ -71,6 +80,7 @@ export function parseWorkflowBuildManifest(input) {
     const artifactHash = requiredString(input.artifact.sha256, 'artifact.sha256');
     if (!sha256Pattern.test(artifactHash))
         throw new Error('artifact.sha256 must be a lowercase SHA-256 digest.');
+    const structure = structureIdentity(input.structure);
     return {
         manifestVersion: workflowBuildManifestVersion,
         workflowContractVersion: supportedWorkflowContractVersion,
@@ -78,6 +88,7 @@ export function parseWorkflowBuildManifest(input) {
         verifier,
         source,
         artifact: { entry: 'dist/index.js', sha256: artifactHash },
+        structure,
     };
 }
 export function parseWorkflowBuildManifestJson(json) {
@@ -96,6 +107,25 @@ function packageIdentity(value, field, expectedName) {
         throw new Error(`${field}.name must be ${expectedName}.`);
     return { name: expectedName, version: requiredString(value.version, `${field}.version`) };
 }
+function structureIdentity(value) {
+    if (!isRecord(value))
+        throw new Error('structure must be an object.');
+    assertExactKeys(value, ['descriptorVersion', 'sha256', 'rootGraphKey', 'graphCount'], 'structure');
+    if (value.descriptorVersion !== workflowStructureDescriptorVersion)
+        throw new Error(`Unsupported structure.descriptorVersion ${JSON.stringify(value.descriptorVersion)}; this verifier supports ${workflowStructureDescriptorVersion}.`);
+    const sha256 = requiredString(value.sha256, 'structure.sha256');
+    if (!sha256Pattern.test(sha256))
+        throw new Error('structure.sha256 must be a lowercase SHA-256 digest.');
+    const graphCount = value.graphCount;
+    if (typeof graphCount !== 'number' || !Number.isInteger(graphCount) || graphCount < 1)
+        throw new Error('structure.graphCount must be a positive integer.');
+    return {
+        descriptorVersion: workflowStructureDescriptorVersion,
+        sha256,
+        rootGraphKey: requiredString(value.rootGraphKey, 'structure.rootGraphKey'),
+        graphCount,
+    };
+}
 function digestObject(value, field) {
     if (!isRecord(value))
         throw new Error(`${field} must be an object.`);

package/dist/receipt.js.map

@@ -1 +1 @@
-{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../src/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAU,CAAC;AACvD,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAgD,CAAC;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,4CAAqD,CAAC;AAC7F,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAgB,CAAC;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAkB,CAAC;AACzD,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAiB,CAAC;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAC/B,oJAA6J,CAAC;AAChK,MAAM,CAAC,MAAM,qBAAqB,GAAG,oCAA6C,CAAC;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,2BAAoC,CAAC;AAgB3E,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAEvC,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,sBAAsB,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,CACL,UAAU,KAAK,cAAc;QAC7B,UAAU,KAAK,eAAe;QAC9B,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAC7B,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA4B;IAC7D,MAAM,UAAU,GAAG,MAAM;SACtB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;SACjF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAA+B;IAC5E,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC3E,eAAe,CACb,KAAK,EACL,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,EACvF,UAAU,CACX,CAAC;IACF,IAAI,KAAK,CAAC,eAAe,KAAK,4BAA4B;QACxD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,4BAA4B,4BAA4B,GAAG,CAChI,CAAC;IACJ,IAAI,KAAK,CAAC,uBAAuB,KAAK,gCAAgC;QACpE,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC,4BAA4B,gCAAgC,GAAG,CACpJ,CAAC;IACJ,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9E,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,eAAe;QAC1C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC9E,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,OAAO;QACL,eAAe,EAAE,4BAA4B;QAC7C,uBAAuB,EAAE,gCAAgC;QACzD,GAAG;QACH,QAAQ;QACR,MAAM;QACN,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAAY;IACzD,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC5F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,KAAa,EACb,YAAkB;IAElB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACrE,eAAe,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,YAAY,GAAG,CAAC,CAAC;IAC3F,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC;AAC5F,CAAC;AACD,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACrE,eAAe,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AACD,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,eAAe,CACtB,KAA8B,EAC9B,QAA2B,EAC3B,KAAa;IAEb,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC5D,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,sBAAsB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;IACF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../src/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AAEpE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAU,CAAC;AACvD,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAgD,CAAC;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,4CAAqD,CAAC;AAC7F,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAgB,CAAC;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAkB,CAAC;AACzD,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAiB,CAAC;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAC/B,oJAA6J,CAAC;AAChK,MAAM,CAAC,MAAM,qBAAqB,GAAG,oCAA6C,CAAC;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,2BAAoC,CAAC;AA2B3E,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAEvC,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,sBAAsB,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,CACL,UAAU,KAAK,cAAc;QAC7B,UAAU,KAAK,eAAe;QAC9B,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAC7B,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA4B;IAC7D,MAAM,UAAU,GAAG,MAAM;SACtB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;SACjF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAA+B;IAC5E,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC3E,eAAe,CACb,KAAK,EACL;QACE,iBAAiB;QACjB,yBAAyB;QACzB,KAAK;QACL,UAAU;QACV,QAAQ;QACR,UAAU;QACV,WAAW;KACZ,EACD,UAAU,CACX,CAAC;IACF,IAAI,KAAK,CAAC,eAAe,KAAK,4BAA4B;QACxD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,4BAA4B,4BAA4B,GAAG,CAChI,CAAC;IACJ,IAAI,KAAK,CAAC,uBAAuB,KAAK,gCAAgC;QACpE,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC,4BAA4B,gCAAgC,GAAG,CACpJ,CAAC;IACJ,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9E,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,eAAe;QAC1C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC9E,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO;QACL,eAAe,EAAE,4BAA4B;QAC7C,uBAAuB,EAAE,gCAAgC;QACzD,GAAG;QACH,QAAQ;QACR,MAAM;QACN,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE;QAC1D,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAAY;IACzD,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC5F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,KAAa,EACb,YAAkB;IAElB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACrE,eAAe,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,YAAY,GAAG,CAAC,CAAC;IAC3F,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC;AAC5F,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACtE,eAAe,CACb,KAAK,EACL,CAAC,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,EAC7D,WAAW,CACZ,CAAC;IACF,IAAI,KAAK,CAAC,iBAAiB,KAAK,kCAAkC;QAChE,MAAM,IAAI,KAAK,CACb,2CAA2C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,4BAA4B,kCAAkC,GAAG,CACpJ,CAAC;IACJ,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAChE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,OAAO;QACL,iBAAiB,EAAE,kCAAkC;QACrD,MAAM;QACN,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,wBAAwB,CAAC;QAC1E,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACrE,eAAe,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AACD,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,eAAe,CACtB,KAA8B,EAC9B,QAA2B,EAC3B,KAAa;IAEb,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC5D,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,sBAAsB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;IACF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/structure.d.ts

@@ -0,0 +1,84 @@
+/**
+ * The single structural inspection algorithm, shared by the verifier CLI, the runtime loader, and
+ * tests. It is pure: it never calls `init`, `run`, `choose`, `parameters`, `onResult`, `output`, or
+ * `label`. It only reads plain data off an already-imported module object.
+ *
+ * Importing a bundle still executes trusted module-level JavaScript. This is a structural contract
+ * check, not sandboxed static analysis of untrusted source.
+ */
+export declare const workflowStructureDescriptorVersion: 1;
+export interface WorkflowStructureDescriptor {
+    readonly descriptorVersion: typeof workflowStructureDescriptorVersion;
+    readonly workflowContractVersion: 4;
+    readonly rootGraphKey: string;
+    /** Sorted by key, so one structure always canonicalizes to the same bytes. */
+    readonly graphs: readonly GraphDescriptor[];
+}
+export interface GraphDescriptor {
+    readonly key: string;
+    readonly title: string;
+    readonly description?: string;
+    readonly intent?: 'business' | 'logical' | 'operational';
+    readonly stateFields: readonly string[];
+    readonly entry: string;
+    readonly nodes: readonly NodeDescriptor[];
+    readonly edges: readonly EdgeDescriptor[];
+    readonly outcomes: readonly OutcomeDescriptor[];
+}
+export type NodeDescriptor = {
+    readonly id: string;
+    readonly kind: 'operation';
+    readonly title?: string;
+    readonly description?: string;
+} | {
+    readonly id: string;
+    readonly kind: 'subgraph';
+    readonly graphKey: string;
+    readonly title?: string;
+    readonly description?: string;
+} | {
+    readonly id: string;
+    readonly kind: 'checkpoint';
+    readonly title?: string;
+    readonly description?: string;
+};
+export interface EdgeDescriptor {
+    readonly id: string;
+    readonly from: string;
+    /** The author's declared order, which is descriptive only. Duplicates are a diagnostic. */
+    readonly to: readonly string[];
+    readonly title?: string;
+}
+export interface OutcomeDescriptor {
+    readonly id: string;
+    readonly kind: 'success' | 'failure';
+    readonly reason?: string;
+    readonly title?: string;
+}
+export type StructureDiagnosticCode = 'invalid_export' | 'unsupported_contract' | 'missing_callback' | 'invalid_identifier' | 'missing_title' | 'invalid_intent' | 'missing_init' | 'invalid_state_field' | 'empty_state' | 'empty_graph' | 'identifier_collision' | 'unknown_node_kind' | 'subgraph_missing_graph' | 'missing_entry' | 'entry_not_executable' | 'edge_source_unknown' | 'duplicate_edge_source' | 'missing_outgoing_edge' | 'empty_destination_set' | 'duplicate_destination' | 'edge_destination_unknown' | 'no_outcomes' | 'invalid_label' | 'duplicate_graph_key' | 'recursive_graph_containment' | 'too_many_graphs' | 'too_many_nodes' | 'too_many_edges' | 'too_many_outcomes' | 'containment_too_deep' | 'deferred_executable_dependency' | 'graph_missing' | 'subgraph_registration_changed' | 'node_missing' | 'node_kind_changed' | 'edge_identity_changed' | 'destination_no_longer_declared' | 'outcome_missing' | 'outcome_kind_changed';
+export interface StructureDiagnosticLocation {
+    readonly graphKey?: string;
+    readonly nodeId?: string;
+    readonly edgeId?: string;
+    readonly outcomeId?: string;
+    readonly field?: string;
+}
+export interface StructureDiagnostic {
+    readonly code: StructureDiagnosticCode;
+    readonly message: string;
+    readonly at: StructureDiagnosticLocation;
+}
+export type StructureResult = {
+    readonly ok: true;
+    readonly descriptor: WorkflowStructureDescriptor;
+} | {
+    readonly ok: false;
+    readonly diagnostics: readonly StructureDiagnostic[];
+};
+export declare function describeWorkflowModule(moduleNamespace: unknown): StructureResult;
+/**
+ * Writes the descriptor with a fixed key order, already-sorted arrays, and absent optional keys
+ * omitted, so the verifier and the runtime loader hash identical bytes for identical structure.
+ */
+export declare function canonicalizeDescriptor(descriptor: WorkflowStructureDescriptor): string;
+export declare function hashDescriptor(descriptor: WorkflowStructureDescriptor): string;