configproof 0.3.0

package/dist/analysis/policy.js

@@ -0,0 +1,192 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerificationPolicySchema = void 0;
+exports.readVerificationPolicy = readVerificationPolicy;
+exports.verifyTrace = verifyTrace;
+exports.verificationText = verificationText;
+const zod_1 = require("zod");
+const yaml_1 = require("yaml");
+const schema_1 = require("../core/schema");
+const analyze_1 = require("../core/analyze");
+const privacy_1 = require("../core/privacy");
+const io_1 = require("../core/io");
+const feature = zod_1.z.enum(['environment', 'startup', 'dotenv', 'source-maps', 'children', 'native', 'native-env', 'workers', 'adapters']);
+const RuleSchema = zod_1.z.object({
+    required: zod_1.z.boolean().optional(), missing: zod_1.z.boolean().optional(),
+    read: zod_1.z.enum(['required', 'forbidden', 'any']).optional(),
+    immutableAfterFirstRead: zod_1.z.boolean().optional(),
+    allowedOrigins: zod_1.z.array(zod_1.z.string().min(1).max(512)).min(1).max(32).optional(),
+    forbiddenOrigins: zod_1.z.array(zod_1.z.string().min(1).max(512)).min(1).max(32).optional(),
+    consistentProvenance: zod_1.z.boolean().optional(), noLoaderSkip: zod_1.z.boolean().optional(),
+    minimumConfidence: zod_1.z.enum(['observed', 'derived', 'inferred']).default('inferred'),
+}).strict().superRefine((rule, ctx) => {
+    if (rule.required && rule.missing)
+        ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, message: 'A key cannot be required and required missing.' });
+});
+exports.VerificationPolicySchema = zod_1.z.object({
+    version: zod_1.z.literal(1).default(1),
+    rules: zod_1.z.record(zod_1.z.string().regex(/^[A-Za-z_*?][A-Za-z0-9_.*?-]{0,127}$/), RuleSchema)
+        .refine(rules => Object.keys(rules).length <= 64, 'At most 64 rules are allowed.').default({}),
+    coverage: zod_1.z.object({
+        requireComplete: zod_1.z.boolean().default(true), maxDroppedEvents: zod_1.z.number().int().nonnegative().max(100000).default(0),
+        requireFeatures: zod_1.z.array(feature).max(16).default(['environment']),
+        forbidNotices: zod_1.z.array(schema_1.NoticeSchema).max(64).default([]),
+    }).strict().default({}),
+}).strict();
+function readVerificationPolicy(file) {
+    try {
+        const doc = (0, yaml_1.parseDocument)((0, io_1.readBounded)(file, 65536), { uniqueKeys: true, schema: 'core', strict: true });
+        if (doc.errors.length)
+            throw new Error('Invalid document');
+        return exports.VerificationPolicySchema.parse(doc.toJS({ maxAliasCount: 0 }));
+    }
+    catch (error) {
+        if (error instanceof io_1.UserError)
+            throw error;
+        throw new io_1.UserError('Invalid configuration contract. Unknown fields, duplicate keys, and YAML aliases are rejected.', 65);
+    }
+}
+const level = { unknown: 0, inferred: 1, derived: 2, observed: 3 };
+function originIdentity(e) {
+    const o = e.origin;
+    if (!o || o.kind === 'unknown' || o.confidence === 'unknown')
+        return undefined;
+    if (['dotenv', 'native-env'].includes(o.kind) && !o.file)
+        return undefined;
+    return `${o.kind}${o.kind === 'adapter' && o.adapterId ? ':' + o.adapterId : o.file ? ':' + o.file : ''}`;
+}
+/** Policies are evaluated over captured evidence. Absence under inadequate coverage is not a pass. */
+function verifyTrace(trace, supplied, options = {}) {
+    let policy;
+    try {
+        policy = exports.VerificationPolicySchema.parse(supplied);
+    }
+    catch {
+        throw new io_1.UserError('Invalid configuration verification policy.', 65);
+    }
+    const processId = (0, analyze_1.processFor)(trace, options.processId);
+    const info = trace.processes.find(p => p.id === processId);
+    const complete = trace.capture.status === 'complete' && !!info?.ended;
+    const insensitive = (info?.caseMode || trace.capture.caseMode) === 'insensitive';
+    const events = trace.events.filter(e => e.processId === processId);
+    const keys = [...new Set([...events.flatMap(e => e.key ? [e.key] : []), ...trace.capture.watch.filter(k => !/[*?]/.test(k)).map(k => insensitive ? k.toUpperCase() : k)])].sort();
+    const checks = [];
+    const evidenceCache = new Map();
+    const referenceCache = new Map();
+    const add = (rule, status, reason, key, evidence = []) => checks.push({ key, rule, status, reason, evidenceIds: evidence.slice(0, 12).map(e => e.id) });
+    if (!processId || !info)
+        add('process', 'inconclusive', 'No selected execution context was captured.');
+    if (policy.coverage.requireComplete)
+        add('coverage.complete', complete ? 'pass' : 'inconclusive', complete ? 'The selected stream and artifact are complete within their declarations.' : 'The artifact or selected stream is incomplete.');
+    const dropped = trace.processes.reduce((n, p) => n + p.eventsDropped, 0);
+    add('coverage.maxDroppedEvents', dropped <= policy.coverage.maxDroppedEvents ? 'pass' : 'inconclusive', `${dropped} recorded dropped events; evidence cannot prove omitted operations.`);
+    for (const expected of policy.coverage.requireFeatures) {
+        const declaration = trace.coverage.find(c => c.feature === expected);
+        const present = declaration && ['active', 'limited'].includes(declaration.status);
+        add(`coverage.${expected}`, present ? 'pass' : 'inconclusive', present ? 'Requested feature has an active/limited coverage declaration; its listed bypasses still apply.' : 'Requested feature has no usable coverage declaration.');
+    }
+    for (const notice of policy.coverage.forbidNotices)
+        add('coverage.forbidNotices', trace.capture.notices.includes(notice) ? 'violation' : complete ? 'pass' : 'inconclusive', trace.capture.notices.includes(notice) ? `Forbidden capture notice: ${notice}.` : `Notice ${notice} was not captured.`);
+    const loadersRemoved = trace.capture.notices.includes('loader_details_removed');
+    for (const [pattern, rule] of Object.entries(policy.rules)) {
+        const matching = keys.filter(key => (0, privacy_1.globToRegex)(pattern, insensitive).test(key));
+        if (!matching.length) {
+            add('selector', 'inconclusive', 'Rule matched no captured key. Add a literal --watch selector before asserting absence.', pattern);
+            continue;
+        }
+        for (const key of matching) {
+            let evidence = evidenceCache.get(key);
+            if (!evidence) {
+                evidence = (0, analyze_1.evidenceFor)(trace, key, processId);
+                evidenceCache.set(key, evidence);
+            }
+            const actual = evidence.events.filter(e => ['baseline', 'read', 'write', 'delete'].includes(e.operation));
+            const consumed = evidence.reads.length ? evidence.reads : actual.length ? [actual.at(-1)] : [];
+            const usable = complete && actual.length > 0;
+            if (rule.required || rule.missing) {
+                const expected = rule.missing ? 'missing' : 'present';
+                const violating = consumed.filter(e => e.value?.state !== 'omitted' && e.value?.state !== expected);
+                const unknown = !consumed.length || consumed.some(e => !e.value || e.value.state === 'omitted');
+                add(rule.missing ? 'missing' : 'required', violating.length ? 'violation' : unknown || !usable ? 'inconclusive' : 'pass', violating.length ? `Captured consumption/final state contradicts required state ${expected}.` : unknown ? 'No comparable consumption/final state was observed.' : `Captured application reads (or final captured state when unread) satisfy ${expected}.`, key, violating.length ? violating : consumed);
+            }
+            if (rule.read && rule.read !== 'any') {
+                const exists = evidence.reads.length > 0;
+                const passes = rule.read === 'required' ? exists : !exists;
+                add('read', exists ? passes ? 'pass' : 'violation' : usable ? passes ? 'pass' : 'violation' : 'inconclusive', exists ? `${evidence.reads.length} application reads were captured.` : 'No application read was captured in the selected context.', key, evidence.reads);
+            }
+            if (rule.immutableAfterFirstRead) {
+                const first = evidence.reads[0];
+                let prior = first?.value;
+                const changes = [];
+                let unknown = !first || prior?.state === 'omitted';
+                for (const e of actual.filter(e => first && e.seq > first.seq)) {
+                    if (e.operation === 'baseline')
+                        continue;
+                    const equality = (0, analyze_1.compareValue)(prior, e.value, trace.comparison.mode !== 'none');
+                    if (equality === 'different')
+                        changes.push(e);
+                    if (equality === 'incomparable' || equality === 'not-observed')
+                        unknown = true;
+                    prior = e.value;
+                }
+                add('immutableAfterFirstRead', changes.length ? 'violation' : unknown || !usable ? 'inconclusive' : 'pass', changes.length ? 'A value/state transition was captured after the first application read.' : unknown ? 'No comparable first-read sequence is available.' : 'No value/state transition was captured after the first application read.', key, first ? [first, ...changes] : []);
+            }
+            for (const kind of ['allowedOrigins', 'forbiddenOrigins']) {
+                const patterns = rule[kind];
+                if (!patterns)
+                    continue;
+                let unknown = !consumed.length || loadersRemoved || trace.exported;
+                const violating = [];
+                for (const e of consumed) {
+                    const origin = originIdentity(e);
+                    if (!origin || level[e.origin?.confidence || 'unknown'] < level[rule.minimumConfidence] || e.value?.state !== 'present') {
+                        unknown = true;
+                        continue;
+                    }
+                    const matches = patterns.some(p => (0, privacy_1.globToRegex)(p).test(origin));
+                    if (kind === 'allowedOrigins' ? !matches : matches)
+                        violating.push(e);
+                }
+                add(kind, trace.exported ? 'inconclusive' : violating.length ? 'violation' : unknown || !usable ? 'inconclusive' : 'pass', trace.exported ? 'Export can alter source identities; source contracts require original local evidence.' : violating.length ? 'Captured origin contradicts the configured source rule.' : unknown ? 'Origin identity/confidence is insufficient for this rule.' : 'Captured origins satisfy this source rule at the requested confidence threshold.', key, violating.length ? violating : consumed);
+            }
+            const loaderCoverage = trace.coverage.some(c => ['dotenv', 'native-env'].includes(c.feature) && ['active', 'limited'].includes(c.status));
+            if (rule.noLoaderSkip)
+                add('noLoaderSkip', evidence.skips.length ? 'violation' : !usable || loadersRemoved || !loaderCoverage ? 'inconclusive' : 'pass', evidence.skips.length ? 'A loader candidate skip was captured.' : 'No loader skip was captured for this key.', key, evidence.skips);
+            if (rule.consistentProvenance) {
+                if (!options.reference) {
+                    add('consistentProvenance', 'inconclusive', 'A reference trace is required for paired provenance verification.', key);
+                    continue;
+                }
+                let other = referenceCache.get(key);
+                if (!other) {
+                    other = (0, analyze_1.evidenceFor)(options.reference, key, options.referenceProcess);
+                    referenceCache.set(key, other);
+                }
+                const a = evidence.reads.map(originIdentity), b = other.reads.map(originIdentity);
+                const unknown = !a.length || !b.length || a.some(x => !x) || b.some(x => !x)
+                    || [...evidence.reads, ...other.reads].some(e => level[e.origin?.confidence || 'unknown'] < level[rule.minimumConfidence])
+                    || !options.reference.processes.find(p => p.id === other.processId)?.ended
+                    || !complete || options.reference.capture.status !== 'complete' || trace.exported || options.reference.exported;
+                const same = JSON.stringify(a) === JSON.stringify(b);
+                add('consistentProvenance', unknown ? 'inconclusive' : same ? 'pass' : 'violation', unknown ? 'Paired source evidence is absent, incomplete, or transformed.' : same ? 'Ordered captured read-origin identities match.' : 'Ordered captured read-origin identities differ.', key, evidence.reads);
+            }
+        }
+    }
+    const counts = { pass: checks.filter(c => c.status === 'pass').length, violation: checks.filter(c => c.status === 'violation').length,
+        inconclusive: checks.filter(c => c.status === 'inconclusive').length };
+    const status = counts.violation ? 'violation' : counts.inconclusive ? 'inconclusive' : 'pass';
+    return { schemaVersion: 'configtrace-verification/1', traceId: trace.id, processId, status, exitCode: status === 'pass' ? 0 : status === 'violation' ? 2 : 3,
+        counts, checks, rawValuesAvailable: false, caveats: [
+            'A pass applies only to the watched keys, selected context, captured operations, and declared coverage. It is not universal program verification.',
+            'Source rules accept inferred origins by default. Raise minimumConfidence when an inferred match is insufficient.',
+            'An observed violation takes precedence over unrelated incomplete evidence; both remain in the check results.',
+            'Presence allows an empty string. Contracts do not read or compare raw configuration values.',
+        ] };
+}
+function verificationText(result) {
+    return (0, io_1.terminalSafe)([`CONFIGTRACE / VERIFY — ${result.status.toUpperCase()}`,
+        `${result.counts.pass} pass · ${result.counts.violation} violation · ${result.counts.inconclusive} inconclusive`,
+        ...result.checks.map(c => `[${c.status}] ${c.key ? c.key + ' / ' : ''}${c.rule}: ${c.reason}`),
+        ...result.caveats.map(c => `Note: ${c}`)].join('\n'), true) + '\n';
+}
+//# sourceMappingURL=policy.js.map

package/dist/analysis/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/analysis/policy.ts"],"names":[],"mappings":";;;AAwCA,wDASC;AASD,kCAuGC;AACD,4CAKC;AAvKD,6BAAwB;AACxB,+BAAqC;AAErC,2CAA8C;AAC9C,6CAAwE;AACxE,6CAA8C;AAC9C,mCAAkE;AAElE,MAAM,OAAO,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AACvI,MAAM,UAAU,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1B,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjE,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,uBAAuB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/C,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,gBAAgB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/E,oBAAoB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClF,iBAAiB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;CACnF,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACpC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;AAC9I,CAAC,CAAC,CAAC;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sCAAsC,CAAC,EAAE,UAAU,CAAC;SAClF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,+BAA+B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChG,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC;QACjB,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACnH,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC;QAClE,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACxB,CAAC,CAAC,MAAM,EAAE,CAAC;AAWZ,SAAgB,sBAAsB,CAAC,IAAY;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,oBAAa,EAAC,IAAA,gBAAW,EAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC3D,OAAO,gCAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAS;YAAE,MAAM,KAAK,CAAC;QAC5C,MAAM,IAAI,cAAS,CAAC,gGAAgG,EAAE,EAAE,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC;AACD,MAAM,KAAK,GAAyC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzG,SAAS,cAAc,CAAC,CAAc;IACpC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/E,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC3E,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5G,CAAC;AACD,sGAAsG;AACtG,SAAgB,WAAW,CAAC,KAAY,EAAE,QAAiB,EAAE,UAAgF,EAAE;IAC7I,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QAAC,MAAM,GAAG,gCAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAC1D,MAAM,CAAC;QAAC,MAAM,IAAI,cAAS,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;IAAC,CAAC;IAChF,MAAM,SAAS,GAAG,IAAA,oBAAU,EAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC;IACtE,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC;IACjF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClL,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,aAAa,GAAG,IAAI,GAAG,EAA0C,CAAC;IACxE,MAAM,cAAc,GAAG,IAAI,GAAG,EAA0C,CAAC;IACzE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAmC,EAAE,MAAc,EAAE,GAAY,EAAE,WAA0B,EAAE,EAAE,EAAE,CAC5H,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI;QAAE,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,6CAA6C,CAAC,CAAC;IACvG,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe;QAAE,GAAG,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,0EAA0E,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC;IAC5O,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACzE,GAAG,CAAC,2BAA2B,EAAE,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,GAAG,OAAO,qEAAqE,CAAC,CAAC;IACzL,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QACvD,MAAM,WAAW,GAAyB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClF,GAAG,CAAC,YAAY,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,gGAAgG,CAAC,CAAC,CAAC,uDAAuD,CAAC,CAAC;IACvO,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa;QAAE,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,6BAA6B,MAAM,GAAG,CAAC,CAAC,CAAC,UAAU,MAAM,oBAAoB,CAAC,CAAC;IACrS,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAA,qBAAW,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,wFAAwF,EAAE,OAAO,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACvK,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAAC,QAAQ,GAAG,IAAA,qBAAW,EAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAAC,CAAC;YACnG,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1G,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,MAAM,GAAG,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC;gBACpG,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;gBAChG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EACtH,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,+DAA+D,QAAQ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,4EAA4E,QAAQ,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7S,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC3D,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,EAC1G,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,mCAAmC,CAAC,CAAC,CAAC,2DAA2D,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7J,CAAC;YACD,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,KAAK,GAAG,KAAK,EAAE,KAAK,CAAC;gBACzB,MAAM,OAAO,GAAkB,EAAE,CAAC;gBAClC,IAAI,OAAO,GAAG,CAAC,KAAK,IAAI,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC;gBACnD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/D,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU;wBAAE,SAAS;oBACzC,MAAM,QAAQ,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;oBAChF,IAAI,QAAQ,KAAK,WAAW;wBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC9C,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,cAAc;wBAAE,OAAO,GAAG,IAAI,CAAC;oBAC/E,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;gBAClB,CAAC;gBACD,GAAG,CAAC,yBAAyB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EACxG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,yEAAyE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC,CAAC,0EAA0E,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClR,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAU,EAAE,CAAC;gBACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBACrD,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,cAAc,IAAI,KAAK,CAAC,QAAQ,CAAC;gBACnE,MAAM,SAAS,GAAkB,EAAE,CAAC;gBACpC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;oBACjC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,IAAI,SAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;wBAAC,OAAO,GAAG,IAAI,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACtJ,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,qBAAW,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;oBAChE,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;wBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EACvH,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,uFAAuF,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2DAA2D,CAAC,CAAC,CAAC,kFAAkF,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACxY,CAAC;YACD,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1I,IAAI,IAAI,CAAC,YAAY;gBAAE,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EACrJ,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,2CAA2C,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtI,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC9B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBAAC,GAAG,CAAC,sBAAsB,EAAE,cAAc,EAAE,mEAAmE,EAAE,GAAG,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC5J,IAAI,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAAC,KAAK,GAAG,IAAA,qBAAW,EAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;oBAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAC,CAAC;gBACtH,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAClF,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;uBACvE,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,IAAI,SAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;uBACvH,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK;uBACvE,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAClH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACrD,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,+DAA+D,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,iDAAiD,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACpS,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;QACnI,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC;IACzE,MAAM,MAAM,GAAiC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5H,OAAO,EAAE,aAAa,EAAE,4BAA4B,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1J,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE;YAClD,kJAAkJ;YAClJ,kHAAkH;YAClH,8GAA8G;YAC9G,6FAA6F;SAC9F,EAAE,CAAC;AACR,CAAC;AACD,SAAgB,gBAAgB,CAAC,MAA0B;IACzD,OAAO,IAAA,iBAAY,EAAC,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE;QAC1E,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,CAAC,SAAS,gBAAgB,MAAM,CAAC,MAAM,CAAC,YAAY,eAAe;QAChH,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9F,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;AACvE,CAAC"}

package/dist/analysis/provenance.d.ts

@@ -0,0 +1,45 @@
+import type { Trace, Origin } from '../core/schema';
+export type EvidenceConfidence = Origin['confidence'];
+export type ProvenanceNodeKind = 'process' | 'worker' | 'key' | 'startup' | 'candidate' | 'application' | 'mutation' | 'read' | 'loader' | 'source' | 'read-site' | 'adapter' | 'boundary' | 'unknown';
+export type ProvenanceRelation = 'contains' | 'proposed' | 'applied' | 'skipped' | 'overwrote' | 'inherited' | 'read-by' | 'spawned-with' | 'copied-to' | 'shared-with' | 'evidence-linked-to' | 'declared-source';
+export interface ProvenanceNode {
+    id: string;
+    kind: ProvenanceNodeKind;
+    label: string;
+    processId?: string;
+    key?: string;
+    eventId?: string;
+    seq?: number;
+    at?: number;
+    confidence: EvidenceConfidence;
+    state?: 'present' | 'missing' | 'omitted';
+    empty?: boolean;
+}
+export interface ProvenanceEdge {
+    id: string;
+    from: string;
+    to: string;
+    relation: ProvenanceRelation;
+    confidence: EvidenceConfidence;
+    evidenceIds: string[];
+}
+export interface ProvenanceGraph {
+    schemaVersion: 'configtrace-provenance/1';
+    traceId: string;
+    rawValuesAvailable: false;
+    nodes: ProvenanceNode[];
+    edges: ProvenanceEdge[];
+    truncated: boolean;
+    coverage: Trace['coverage'];
+    captureStatus: Trace['capture']['status'];
+    caveats: string[];
+}
+export interface ProvenanceOptions {
+    key?: string;
+    processId?: string;
+    allProcesses?: boolean;
+    maxNodes?: number;
+    maxEdges?: number;
+}
+/** A directed acyclic evidence graph, not a claim of full causal reconstruction. */
+export declare function buildProvenance(trace: Trace, options?: ProvenanceOptions): ProvenanceGraph;

package/dist/analysis/provenance.js

@@ -0,0 +1,144 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildProvenance = buildProvenance;
+const node_crypto_1 = require("node:crypto");
+const privacy_1 = require("../core/privacy");
+const analyze_1 = require("../core/analyze");
+const io_1 = require("../core/io");
+const identity = (...parts) => (0, node_crypto_1.createHash)('sha256').update(JSON.stringify(parts)).digest('hex').slice(0, 24);
+const eventKind = (e) => e.operation === 'baseline' ? 'startup'
+    : e.operation === 'candidate' ? 'candidate' : e.operation === 'read' ? 'read'
+        : e.operation === 'write' && ['dotenv', 'native-env'].includes(e.origin?.kind || '') ? 'application'
+            : ['write', 'delete'].includes(e.operation) ? 'mutation' : e.operation === 'boundary' ? 'boundary' : 'loader';
+/** A directed acyclic evidence graph, not a claim of full causal reconstruction. */
+function buildProvenance(trace, options = {}) {
+    const maxNodes = options.maxNodes ?? 20000, maxEdges = options.maxEdges ?? 60000;
+    if (!Number.isInteger(maxNodes) || maxNodes < 10 || maxNodes > 250000 || !Number.isInteger(maxEdges) || maxEdges < 10 || maxEdges > 1000000)
+        throw new io_1.UserError('Invalid provenance display limits.');
+    const chosen = options.allProcesses ? undefined : (0, analyze_1.processFor)(trace, options.processId);
+    const contexts = new Map(trace.processes.map(p => [p.id, p]));
+    const caseFor = (pid) => contexts.get(pid)?.caseMode || trace.capture.caseMode;
+    const keyMatches = (e) => !options.key || e.key === (caseFor(e.processId) === 'insensitive' ? options.key.toUpperCase() : options.key);
+    const selected = trace.events.filter(e => (!chosen || e.processId === chosen) && (keyMatches(e) || !e.key && ['child-spawn', 'worker-spawn', 'boundary'].includes(e.operation)));
+    const nodes = new Map();
+    const edges = [];
+    const edgeIds = new Set();
+    let truncated = false;
+    const add = (node) => {
+        if (nodes.has(node.id))
+            return true;
+        if (nodes.size >= maxNodes) {
+            truncated = true;
+            return false;
+        }
+        nodes.set(node.id, node);
+        return true;
+    };
+    const link = (from, to, relation, confidence, evidenceIds = []) => {
+        if (!nodes.has(from) || !nodes.has(to) || from === to)
+            return;
+        const id = identity(from, to, relation);
+        if (edgeIds.has(id))
+            return;
+        if (edges.length >= maxEdges) {
+            truncated = true;
+            return;
+        }
+        edgeIds.add(id);
+        edges.push({ id, from, to, relation, confidence, evidenceIds });
+    };
+    for (const p of trace.processes)
+        add({ id: `process:${p.id}`, kind: p.role === 'worker' ? 'worker' : 'process', label: `${p.role} ${p.id}`, processId: p.id, confidence: 'observed' });
+    const state = new Map();
+    const candidate = new Map();
+    const fileLoads = new Map();
+    for (const e of selected) {
+        const eid = `event:${e.id}`, pid = `process:${e.processId}`;
+        const slot = JSON.stringify([e.processId, e.key]);
+        const confidence = e.origin?.confidence || 'observed';
+        if (!add({ id: eid, kind: eventKind(e), label: `${e.operation}${e.key ? ' ' + e.key : e.loaderMethod ? ' ' + e.loaderMethod : ''}`,
+            processId: e.processId, key: e.key, eventId: e.id, seq: e.seq, at: e.at, confidence,
+            state: e.value?.state, empty: e.value?.state === 'present' ? e.value.empty : undefined }))
+            break;
+        link(pid, eid, 'contains', 'observed', [e.id]);
+        if (e.key) {
+            const kid = `key:${identity(e.processId, e.key)}`;
+            add({ id: kid, kind: 'key', label: e.key, processId: e.processId, key: e.key, confidence: 'derived' });
+            link(pid, kid, 'contains', 'derived');
+            link(kid, eid, 'contains', 'derived', [e.id]);
+        }
+        if (e.origin?.file) {
+            const sid = `source:${identity(e.processId, e.origin.kind, e.origin.file)}`;
+            add({ id: sid, kind: 'source', label: e.origin.file, processId: e.processId, confidence });
+            // Read-origin files are annotations, not direct proof of a new file load at read time.
+            if (e.operation !== 'read')
+                link(sid, eid, e.outcome === 'declared' ? 'declared-source' : 'evidence-linked-to', confidence, [e.id]);
+            const loaderSlot = JSON.stringify([e.processId, e.origin.kind, e.origin.file]);
+            if (e.operation === 'load')
+                fileLoads.set(loaderSlot, e);
+            else if (e.operation === 'candidate') {
+                const load = fileLoads.get(loaderSlot);
+                if (load && load.seq < e.seq)
+                    link(`event:${load.id}`, eid, 'proposed', 'inferred', [load.id, e.id]);
+            }
+        }
+        if (e.origin?.adapterId) {
+            const aid = `adapter:${identity(e.processId, e.origin.adapterId)}`;
+            add({ id: aid, kind: 'adapter', label: e.origin.adapterId, processId: e.processId, confidence });
+            link(aid, eid, 'evidence-linked-to', confidence, [e.id]);
+        }
+        if (e.operation === 'baseline') {
+            const unknown = `unknown-before:${e.id}`;
+            add({ id: unknown, kind: 'unknown', label: 'Before preload: provenance unavailable', processId: e.processId, key: e.key, confidence: 'unknown' });
+            link(unknown, eid, 'inherited', 'unknown', [e.id]);
+        }
+        if (e.operation === 'candidate')
+            candidate.set(slot, e);
+        if (e.operation === 'skip' || e.operation === 'write') {
+            const prior = candidate.get(slot);
+            const compared = e.operation === 'skip' ? e.candidate : e.value;
+            if (prior && (0, privacy_1.sameValue)(prior.value, compared) && prior.origin?.kind === e.origin?.kind && prior.origin?.file === e.origin?.file) {
+                link(`event:${prior.id}`, eid, e.operation === 'skip' ? 'skipped' : 'applied', 'inferred', [prior.id, e.id]);
+            }
+        }
+        if (['write', 'delete'].includes(e.operation)) {
+            const prior = state.get(slot);
+            if (prior && prior.value?.state === 'present' && !(0, privacy_1.sameValue)(prior.value, e.value))
+                link(`event:${prior.id}`, eid, 'overwrote', 'derived', [prior.id, e.id]);
+        }
+        if (e.causedBy)
+            link(`event:${e.causedBy}`, eid, 'evidence-linked-to', 'inferred', [e.causedBy, e.id]);
+        if (e.operation === 'read') {
+            if (!e.causedBy || e.origin?.kind === 'unknown') {
+                const uid = `unknown:${e.id}`;
+                add({ id: uid, kind: 'unknown', label: 'Prior origin unavailable', processId: e.processId, key: e.key, confidence: 'unknown' });
+                link(uid, eid, 'evidence-linked-to', 'unknown', [e.id]);
+            }
+            if (e.site) {
+                // Read sites are sinks distinct from source-file nodes: no synthetic file cycles.
+                const sid = `read-site:${identity(e.processId, (0, analyze_1.siteLabel)(e))}`;
+                add({ id: sid, kind: 'read-site', label: (0, analyze_1.siteLabel)(e), processId: e.processId, confidence: 'observed' });
+                link(eid, sid, 'read-by', 'observed', [e.id]);
+            }
+        }
+        if (['baseline', 'write', 'delete'].includes(e.operation))
+            state.set(slot, e);
+        if (['child-spawn', 'worker-spawn'].includes(e.operation) && e.childId && e.outcome === 'spawned') {
+            const relation = e.environmentMode === 'shared' ? 'shared-with' : e.environmentMode === 'copied' ? 'copied-to' : 'spawned-with';
+            const child = contexts.get(e.childId);
+            // Only a confirmed child of this context can receive a creation edge.
+            if (child?.parentId === e.processId && child.role === (e.operation === 'worker-spawn' ? 'worker' : 'child'))
+                link(eid, `process:${e.childId}`, relation, 'observed', [e.id]);
+        }
+    }
+    return { schemaVersion: 'configtrace-provenance/1', traceId: trace.id, rawValuesAvailable: false,
+        nodes: [...nodes.values()], edges, truncated, coverage: trace.coverage, captureStatus: trace.capture.status,
+        caveats: [
+            'Observed nodes and inferred causal links are different claims. Matching fingerprints do not rule out unobserved mutations.',
+            'The graph is ordered per execution context. Timestamps from different processes or Workers are not a shared causal clock.',
+            'Startup presence does not identify a shell or an early env file. A declared startup flag is only a source hint.',
+            'A SHARE_ENV relationship does not identify which concurrent write supplied another thread\'s read.',
+            ...(truncated ? ['Graph limits were reached. Some nodes or links are omitted; use a key/process filter.'] : []),
+        ] };
+}
+//# sourceMappingURL=provenance.js.map

package/dist/analysis/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../src/analysis/provenance.ts"],"names":[],"mappings":";;AA+BA,0CA2GC;AA1ID,6CAAyC;AAEzC,6CAA4C;AAC5C,6CAAwD;AACxD,mCAAuC;AAoBvC,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAgB,EAAU,EAAE,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChI,MAAM,SAAS,GAAG,CAAC,CAAc,EAAsB,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS;IAC9F,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7E,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa;YACpG,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;AAEhH,oFAAoF;AACpF,SAAgB,eAAe,CAAC,KAAY,EAAE,UAA6B,EAAE;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,EAAE,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,EAAE,IAAI,QAAQ,GAAG,OAAO;QAAE,MAAM,IAAI,cAAS,CAAC,oCAAoC,CAAC,CAAC;IACvM,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,oBAAU,EAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvF,MAAM,UAAU,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpJ,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjL,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,GAAG,GAAG,CAAC,IAAoB,EAAE,EAAE;QACnC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC/D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IACxC,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,QAA4B,EAAE,UAA8B,EAAE,cAAwB,EAAE,EAAE,EAAE;QAClI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO;QAC9D,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO;QAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;QAAE,GAAG,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IACvL,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,IAAI,UAAU,CAAC;QACtD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE;YAChI,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU;YACnF,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YAAE,MAAM;QACnG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,OAAO,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACvG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,UAAU,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3F,uFAAuF;YACvF,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM;gBAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpI,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/E,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM;gBAAE,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;iBACpD,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACvC,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG;oBAAE,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,WAAW,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;YACjG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAC;YACzC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,wCAAwC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YAClJ,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAChE,IAAI,KAAK,IAAI,IAAA,mBAAS,EAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;gBAChI,IAAI,CAAC,SAAS,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAA,mBAAS,EAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,SAAS,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9J,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ;YAAE,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvG,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChD,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC9B,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;gBAChI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACX,kFAAkF;gBAClF,MAAM,GAAG,GAAG,aAAa,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,IAAA,mBAAS,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAA,mBAAS,EAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;gBACzG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClG,MAAM,QAAQ,GAAuB,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;YACpJ,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACtC,sEAAsE;YACtE,IAAI,KAAK,EAAE,QAAQ,KAAK,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;gBACzG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,kBAAkB,EAAE,KAAK;QAC9F,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC3G,OAAO,EAAE;YACP,4HAA4H;YAC5H,2HAA2H;YAC3H,iHAAiH;YACjH,oGAAoG;YACpG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,uFAAuF,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAChH,EAAE,CAAC;AACR,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};