oc-pilot 0.5.1 → 0.88.1

package/dist/core/readiness.test.js

@@ -0,0 +1,199 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import test from "node:test";
+import { assessReadiness, renderBadge, renderReadiness } from "./readiness.js";
+import { saveFindingsBaseline, sastFingerprint } from "./findings-baseline.js";
+import { scanSource } from "./sast.js";
+import { RECEIPT_VERSION, buildReceipt, generateReceiptKeyPair, saveReceipt, signReceipt } from "./receipt.js";
+const PREFLIGHT = {
+    status: "pass",
+    checks: [],
+    diff: { source: "git diff HEAD", files: 0, additions: 0, deletions: 0 },
+};
+function makeRepo(files) {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-ready-"));
+    spawnSync("git", ["init", "-q"], { cwd: dir });
+    for (const [path, content] of Object.entries(files)) {
+        const full = join(dir, path);
+        mkdirSync(join(full, ".."), { recursive: true });
+        writeFileSync(full, content, "utf8");
+    }
+    return dir;
+}
+function commit(dir) {
+    spawnSync("git", ["add", "-A"], { cwd: dir });
+    spawnSync("git", ["-c", "user.email=test@example.com", "-c", "user.name=Test", "commit", "-qm", "init"], {
+        cwd: dir,
+    });
+    const head = spawnSync("git", ["rev-parse", "HEAD"], { cwd: dir, encoding: "utf8" });
+    return head.stdout.trim();
+}
+function saveReadyReceipt(dir, sha) {
+    saveReceipt(dir, buildReceipt({
+        version: RECEIPT_VERSION,
+        tool: "oc-pilot",
+        toolVersion: "0.38.0",
+        createdAt: "2026-11-05T00:00:00.000Z",
+        commit: sha,
+        branch: "main",
+        dirty: false,
+        diff: { files: 0, additions: 0, deletions: 0 },
+        files: [],
+        tests: null,
+        preflight: PREFLIGHT,
+    }));
+}
+test("assessReadiness scores a prepared repository as agent-ready", () => {
+    const dir = makeRepo({
+        "package.json": JSON.stringify({ name: "demo", scripts: { test: "node -e \"process.exit(0)\"" } }, null, 2),
+        "package-lock.json": JSON.stringify({ lockfileVersion: 3, packages: { "": {} } }),
+        "src/app.ts": "export const value = 1;\n",
+        "AGENTS.md": "# Agent instructions\n",
+        ".oc-pilot.json": "{}\n",
+        ".github/workflows/ci.yml": "name: ci\n",
+        ".git/hooks/pre-commit": "#!/bin/sh\n# oc-pilot hook v2\noc-pilot preflight --staged\n",
+    });
+    try {
+        const sha = commit(dir);
+        saveReadyReceipt(dir, sha);
+        const report = assessReadiness(dir);
+        assert.ok(report.score >= 85, `score ${String(report.score)}`);
+        assert.equal(report.grade, "agent-ready");
+        assert.equal(report.commit, sha);
+        assert.deepEqual(report.checks.filter((check) => check.status !== "pass").map((check) => check.id), []);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("assessReadiness scores an empty repository as not ready", () => {
+    const dir = makeRepo({});
+    try {
+        const report = assessReadiness(dir);
+        assert.ok(report.score < 40, `score ${String(report.score)}`);
+        assert.equal(report.grade, "not-ready");
+        assert.equal(report.checks.find((check) => check.id === "tests")?.status, "fail");
+        assert.equal(report.checks.find((check) => check.id === "hooks")?.status, "fail");
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("assessReadiness reports a corrupt lockfile", () => {
+    const dir = makeRepo({
+        "package.json": JSON.stringify({ name: "demo", dependencies: { "left-pad": "^1.3.0" } }, null, 2),
+        "package-lock.json": "{not json",
+    });
+    try {
+        const report = assessReadiness(dir);
+        const lockfile = report.checks.find((check) => check.id === "lockfile");
+        assert.ok(lockfile);
+        assert.notEqual(lockfile.status, "pass");
+        assert.ok(lockfile.points < lockfile.max);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("assessReadiness warns about a stale receipt", () => {
+    const dir = makeRepo({ "src/app.ts": "export const value = 1;\n" });
+    try {
+        commit(dir);
+        saveReadyReceipt(dir, "0".repeat(40));
+        const report = assessReadiness(dir);
+        const receipt = report.checks.find((check) => check.id === "receipt");
+        assert.ok(receipt);
+        assert.notEqual(receipt.status, "pass");
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("assessReadiness verifies a signed receipt when a public key is committed", () => {
+    const dir = makeRepo({ "src/app.ts": "export const value = 1;\n" });
+    try {
+        const sha = commit(dir);
+        const pair = generateReceiptKeyPair();
+        saveReceipt(dir, signReceipt({
+            version: RECEIPT_VERSION,
+            tool: "oc-pilot",
+            toolVersion: "0.43.0",
+            createdAt: "2026-11-05T00:00:00.000Z",
+            commit: sha,
+            branch: "main",
+            dirty: false,
+            diff: { files: 0, additions: 0, deletions: 0 },
+            files: [],
+            tests: null,
+            preflight: PREFLIGHT,
+        }, pair.privateKey));
+        mkdirSync(join(dir, ".oc-pilot"), { recursive: true });
+        writeFileSync(join(dir, ".oc-pilot", "receipt.pub"), pair.publicKey, "utf8");
+        const signed = assessReadiness(dir).checks.find((check) => check.id === "receipt");
+        assert.equal(signed?.status, "pass");
+        assert.match(signed?.detail ?? "", /подпись проверена/);
+        const path = join(dir, ".git", "oc-pilot", "receipt.json");
+        const stored = JSON.parse(readFileSync(path, "utf8"));
+        stored.signature = Buffer.from("broken").toString("base64");
+        writeFileSync(path, JSON.stringify(stored), "utf8");
+        const tampered = assessReadiness(dir).checks.find((check) => check.id === "receipt");
+        assert.notEqual(tampered?.status, "pass");
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("assessReadiness fails on a vulnerable source file", () => {
+    const dir = makeRepo({
+        "src/app.js": 'const { exec } = require("child_process");\nexec(req.query.cmd);\n',
+    });
+    try {
+        const report = assessReadiness(dir);
+        const security = report.checks.find((check) => check.id === "security");
+        assert.ok(security);
+        assert.equal(security.status, "fail");
+        assert.match(security.detail, /1 high/);
+        assert.equal(security.points, 0);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("assessReadiness honors the findings baseline", () => {
+    const source = 'const { exec } = require("child_process");\nexec(req.query.cmd);\n';
+    const dir = makeRepo({ "src/app.js": source });
+    try {
+        const findings = scanSource("src/app.js", source).findings;
+        saveFindingsBaseline(dir, ".oc-pilot/baseline.json", {
+            version: 1,
+            sast: findings.map(sastFingerprint),
+            authz: [],
+        });
+        const security = assessReadiness(dir).checks.find((check) => check.id === "security");
+        assert.ok(security);
+        assert.equal(security.status, "pass");
+        assert.match(security.detail, /опасных паттернов нет/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("renderBadge and renderReadiness describe the score", () => {
+    const dir = makeRepo({});
+    try {
+        const report = assessReadiness(dir);
+        assert.match(renderBadge(report), /img\.shields\.io\/badge\/agent/);
+        assert.match(renderBadge(report), new RegExp(`${String(report.score)}%2F100`));
+        const text = renderReadiness(report);
+        assert.match(text, /Готовность к агенту:/);
+        assert.match(text, new RegExp(`${String(report.score)}/100`));
+        assert.ok(text.endsWith("\n"));
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=readiness.test.js.map

package/dist/core/readiness.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.test.js","sourceRoot":"","sources":["../../src/core/readiness.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,sBAAsB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG/G,MAAM,SAAS,GAAoB;IACjC,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;CACxE,CAAC;AAEF,SAAS,QAAQ,CAAC,KAA6B;IAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC3D,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;QACvG,GAAG,EAAE,GAAG;KACT,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,GAAW;IAChD,WAAW,CACT,GAAG,EACH,YAAY,CAAC;QACX,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,0BAA0B;QACrC,MAAM,EAAE,GAAG;QACX,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;QAC9C,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,SAAS;KACrB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3G,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QACjF,YAAY,EAAE,2BAA2B;QACzC,WAAW,EAAE,wBAAwB;QACrC,gBAAgB,EAAE,MAAM;QACxB,0BAA0B,EAAE,YAAY;QACxC,uBAAuB,EAAE,8DAA8D;KACxF,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,SAAS,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EACjF,EAAE,CACH,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,SAAS,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACpF,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACtD,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,mBAAmB,EAAE,WAAW;KACjC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACpB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,YAAY,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,YAAY,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,WAAW,CACT,GAAG,EACH,WAAW,CACT;YACE,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,QAAQ;YACrB,SAAS,EAAE,0BAA0B;YACrC,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;YAC9C,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,SAAS;SACrB,EACD,IAAI,CAAC,UAAU,CAChB,CACF,CAAC;QACF,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE7E,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAExD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA0B,CAAC;QAC/E,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5D,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAEpD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACrF,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,YAAY,EAAE,oEAAoE;KACnF,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;IACxD,MAAM,MAAM,GAAG,oEAAoE,CAAC;IACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC;QAC3D,oBAAoB,CAAC,GAAG,EAAE,yBAAyB,EAAE;YACnD,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC;YACnC,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QACtF,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACzD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,gCAAgC,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/core/receipt.js

@@ -0,0 +1,193 @@
+import { createHash, createPrivateKey, createPublicKey, generateKeyPairSync, sign, verify, } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, join } from "node:path";
+import { PilotError } from "./errors.js";
+import { getRepoRoot, isGitRepo, runGit } from "./git.js";
+export const RECEIPT_VERSION = 1;
+/** Stable digest of the receipt body; the hash field itself is excluded. */
+export function receiptHash(body) {
+    return createHash("sha256").update(JSON.stringify(body)).digest("hex");
+}
+export function buildReceipt(body) {
+    return { ...body, hash: receiptHash(body) };
+}
+/** Signs the receipt hash with an Ed25519 private key in PEM (PKCS#8). */
+export function signReceipt(body, privateKeyPem) {
+    const receipt = buildReceipt(body);
+    let signature;
+    try {
+        signature = sign(null, Buffer.from(receipt.hash, "utf8"), createPrivateKey(privateKeyPem)).toString("base64");
+    }
+    catch {
+        throw new PilotError("Не удалось подписать квитанцию: некорректный приватный ключ", {
+            hint: "Ожидается Ed25519-ключ в PEM (PKCS#8). Создайте пару: oc-pilot receipt --keygen <file>.",
+            exitCode: 2,
+        });
+    }
+    return { ...receipt, signature };
+}
+export function verifyReceiptSignature(receipt, publicKeyPem) {
+    if (!receipt.signature)
+        return false;
+    try {
+        return verify(null, Buffer.from(receipt.hash, "utf8"), createPublicKey(publicKeyPem), Buffer.from(receipt.signature, "base64"));
+    }
+    catch {
+        return false;
+    }
+}
+export function generateReceiptKeyPair() {
+    const pair = generateKeyPairSync("ed25519");
+    return {
+        privateKey: pair.privateKey.export({ type: "pkcs8", format: "pem" }).toString(),
+        publicKey: pair.publicKey.export({ type: "spki", format: "pem" }).toString(),
+    };
+}
+/** Public key committed with the project, so CI and agents can verify receipts. */
+export function receiptPublicKeyPath(cwd) {
+    return join(cwd, ".oc-pilot", "receipt.pub");
+}
+export function readReceiptPublicKey(cwd) {
+    const path = receiptPublicKeyPath(cwd);
+    return existsSync(path) ? readFileSync(path, "utf8") : undefined;
+}
+function gitValue(cwd, args) {
+    const result = runGit(args, cwd);
+    if (result.status !== 0)
+        return null;
+    const value = result.stdout.trim();
+    return value === "" ? null : value;
+}
+/** Current HEAD, branch and dirty flag, recorded so a receipt can be matched to a checkout. */
+export function gitSnapshot(cwd) {
+    const commit = gitValue(cwd, ["rev-parse", "HEAD"]);
+    const branch = gitValue(cwd, ["rev-parse", "--abbrev-ref", "HEAD"]);
+    const status = runGit(["status", "--porcelain"], cwd);
+    return {
+        commit,
+        branch,
+        dirty: status.status === 0 && status.stdout.trim() !== "",
+    };
+}
+function gitDir(cwd) {
+    if (!isGitRepo(cwd))
+        return undefined;
+    const repoRoot = getRepoRoot(cwd);
+    const result = runGit(["rev-parse", "--git-dir"], repoRoot);
+    if (result.status !== 0)
+        return undefined;
+    const raw = result.stdout.trim();
+    return /^(?:[A-Za-z]:[\\/]|\/|\\\\)/.test(raw) ? raw : join(repoRoot, raw);
+}
+/**
+ * The default store lives inside `.git`, so receipts never show up as
+ * untracked files and never leak into a commit by accident.
+ */
+export function receiptPath(cwd) {
+    const dir = gitDir(cwd);
+    return dir ? join(dir, "oc-pilot", "receipt.json") : undefined;
+}
+export function saveReceipt(cwd, receipt, outputPath) {
+    const target = outputPath ?? receiptPath(cwd);
+    if (!target) {
+        throw new PilotError("Вне git-репозитория квитанцию можно сохранить только через --out", {
+            hint: "Укажите --out <file> или запустите команду в git-репозитории.",
+            exitCode: 2,
+        });
+    }
+    const resolved = isAbsolute(target) ? target : join(cwd, target);
+    mkdirSync(dirname(resolved), { recursive: true });
+    writeFileSync(resolved, `${JSON.stringify(receipt, null, 2)}\n`, "utf8");
+    return resolved;
+}
+export function readReceipt(path) {
+    if (!existsSync(path)) {
+        throw new PilotError(`Квитанция не найдена: ${path}`, {
+            hint: "Сначала выполните `oc-pilot receipt`, затем проверяйте сохранённый файл.",
+            exitCode: 2,
+        });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        throw new PilotError(`Не удалось прочитать квитанцию: ${path}`, {
+            hint: "Файл повреждён или это не JSON.",
+            exitCode: 2,
+        });
+    }
+    if (typeof parsed !== "object" ||
+        parsed === null ||
+        typeof parsed.hash !== "string" ||
+        typeof parsed.version !== "number") {
+        throw new PilotError(`Не удалось прочитать квитанцию: ${path}`, {
+            hint: "Файл не похож на квитанцию oc-pilot.",
+            exitCode: 2,
+        });
+    }
+    return parsed;
+}
+export function verifyReceipt(cwd, receipt, publicKeyPem) {
+    const { hash, signature, ...body } = receipt;
+    const hashOk = hash === receiptHash(body);
+    const head = gitValue(cwd, ["rev-parse", "HEAD"]);
+    const stale = receipt.commit !== null && head !== null && receipt.commit !== head;
+    const signatureStatus = publicKeyPem === undefined
+        ? signature
+            ? "unchecked"
+            : "missing"
+        : signature
+            ? verifyReceiptSignature(receipt, publicKeyPem)
+                ? "valid"
+                : "invalid"
+            : "missing";
+    let reason;
+    if (receipt.version !== RECEIPT_VERSION) {
+        reason = `версия квитанции ${receipt.version}, ожидается ${RECEIPT_VERSION}`;
+    }
+    else if (!hashOk) {
+        reason = "хеш не совпадает: файл изменён после создания";
+    }
+    else if (stale) {
+        reason = `квитанция выдана для ${receipt.commit?.slice(0, 12)}, а HEAD сейчас ${head?.slice(0, 12)}`;
+    }
+    else if (publicKeyPem !== undefined && signatureStatus === "invalid") {
+        reason = "подпись не совпадает: квитанция подписана другим ключом или изменена";
+    }
+    else if (publicKeyPem !== undefined && signatureStatus === "missing") {
+        reason = "квитанция не подписана, а проверка требует подпись";
+    }
+    return {
+        ok: hashOk && !stale && reason === undefined,
+        hashOk,
+        stale,
+        commit: receipt.commit,
+        head,
+        signature: signatureStatus,
+        reason,
+    };
+}
+/** Human-readable summary printed after a receipt is created or checked. */
+export function renderReceipt(receipt, savedPath) {
+    const lines = [
+        `Квитанция: ${receipt.commit?.slice(0, 12) ?? "без коммита"} (${receipt.branch ?? "detached"}, ${receipt.dirty ? "рабочее дерево изменено" : "чистое дерево"})`,
+        `Дифф: ${receipt.diff.files} файл(ов), +${receipt.diff.additions} / -${receipt.diff.deletions}`,
+    ];
+    if (receipt.tests) {
+        lines.push(`Тесты: ${receipt.tests.command} — ${receipt.tests.passed ? "пройдены" : "провалены"} (${receipt.tests.durationMs} мс)`);
+    }
+    else {
+        lines.push("Тесты: не запускались");
+    }
+    const failed = receipt.preflight.checks.filter((check) => check.status === "fail").length;
+    const verdict = receipt.preflight.status === "pass" ? "пройден" : "провален";
+    lines.push(`Preflight: ${verdict} — проверок с замечаниями: ${failed} из ${receipt.preflight.checks.length}`);
+    lines.push(`Хеш: ${receipt.hash}`);
+    if (receipt.signature)
+        lines.push("Подпись: Ed25519");
+    if (savedPath)
+        lines.push(`Сохранено: ${savedPath}`);
+    return `${lines.join("\n")}\n`;
+}
+//# sourceMappingURL=receipt.js.map

package/dist/core/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/core/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,IAAI,EACJ,MAAM,GACP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAG1D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AA2CjC,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,IAAiB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAiB;IAC5C,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,IAAiB,EAAE,aAAqB;IAClE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,6DAA6D,EAAE;YAClF,IAAI,EAAE,yFAAyF;YAC/F,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB,EAAE,YAAoB;IAC3E,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,CACX,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EACjC,eAAe,CAAC,YAAY,CAAC,EAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CACzC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC/E,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC7E,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,OAAO,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAc;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO;QACL,MAAM;QACN,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,OAAgB,EAAE,UAAmB;IAC5E,MAAM,MAAM,GAAG,UAAU,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAAC,kEAAkE,EAAE;YACvF,IAAI,EAAE,+DAA+D;YACrE,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,UAAU,CAAC,yBAAyB,IAAI,EAAE,EAAE;YACpD,IAAI,EAAE,0EAA0E;YAChF,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,mCAAmC,IAAI,EAAE,EAAE;YAC9D,IAAI,EAAE,iCAAiC;YACvC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,OAAQ,MAAkB,CAAC,IAAI,KAAK,QAAQ;QAC5C,OAAQ,MAAkB,CAAC,OAAO,KAAK,QAAQ,EAC/C,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,mCAAmC,IAAI,EAAE,EAAE;YAC9D,IAAI,EAAE,sCAAsC;YAC5C,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAiB,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAgB,EAAE,YAAqB;IAChF,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,KAAK,WAAW,CAAC,IAAmB,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;IAElF,MAAM,eAAe,GACnB,YAAY,KAAK,SAAS;QACxB,CAAC,CAAC,SAAS;YACT,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,SAAS;QACb,CAAC,CAAC,SAAS;YACT,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC;gBAC7C,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,SAAS,CAAC;IAElB,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QACxC,MAAM,GAAG,oBAAoB,OAAO,CAAC,OAAO,eAAe,eAAe,EAAE,CAAC;IAC/E,CAAC;SAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,GAAG,+CAA+C,CAAC;IAC3D,CAAC;SAAM,IAAI,KAAK,EAAE,CAAC;QACjB,MAAM,GAAG,wBAAwB,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACvG,CAAC;SAAM,IAAI,YAAY,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,GAAG,sEAAsE,CAAC;IAClF,CAAC;SAAM,IAAI,YAAY,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,GAAG,oDAAoD,CAAC;IAChE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,IAAI,CAAC,KAAK,IAAI,MAAM,KAAK,SAAS;QAC5C,MAAM;QACN,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI;QACJ,SAAS,EAAE,eAAe;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,SAAkB;IAChE,MAAM,KAAK,GAAG;QACZ,cAAc,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,aAAa,KAAK,OAAO,CAAC,MAAM,IAAI,UAAU,KAC1F,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,eAC9C,GAAG;QACH,SAAS,OAAO,CAAC,IAAI,CAAC,KAAK,eAAe,OAAO,CAAC,IAAI,CAAC,SAAS,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;KAChG,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,UAAU,OAAO,CAAC,KAAK,CAAC,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU,MAAM,CACxH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC1F,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,8BAA8B,MAAM,OAAO,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9G,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACtD,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC;IACrD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/core/receipt.test.js

@@ -0,0 +1,193 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import test from "node:test";
+import { RECEIPT_VERSION, buildReceipt, generateReceiptKeyPair, readReceipt, receiptHash, receiptPath, renderReceipt, saveReceipt, signReceipt, verifyReceipt, } from "./receipt.js";
+const REPORT = {
+    status: "pass",
+    diff: { source: "git diff HEAD", files: 1, additions: 2, deletions: 0 },
+    checks: [
+        { id: "secrets", label: "Секреты", status: "pass", summary: "секретов не найдено", details: [] },
+        { id: "deps", label: "Зависимости", status: "pass", summary: "проблем нет", details: [] },
+    ],
+};
+function body(commit) {
+    return {
+        version: RECEIPT_VERSION,
+        tool: "oc-pilot",
+        toolVersion: "0.33.0",
+        createdAt: "2026-11-05T00:00:00.000Z",
+        commit,
+        branch: "main",
+        dirty: false,
+        diff: { files: 1, additions: 2, deletions: 0 },
+        files: ["src/a.ts"],
+        tests: {
+            command: "npm test",
+            exitCode: 0,
+            timedOut: false,
+            durationMs: 12,
+            passed: true,
+            outputTail: "ok",
+        },
+        preflight: REPORT,
+    };
+}
+function makeRepo() {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-receipt-"));
+    spawnSync("git", ["init", "-q"], { cwd: dir });
+    writeFileSync(join(dir, "a.ts"), "export const a = 1;\n", "utf8");
+    spawnSync("git", ["add", "a.ts"], { cwd: dir });
+    spawnSync("git", ["-c", "user.email=test@example.com", "-c", "user.name=Test", "commit", "-qm", "init"], {
+        cwd: dir,
+    });
+    return dir;
+}
+function head(dir) {
+    const result = spawnSync("git", ["rev-parse", "HEAD"], { cwd: dir, encoding: "utf8" });
+    return result.stdout.trim();
+}
+test("receiptHash is stable and covers the body", () => {
+    assert.equal(receiptHash(body(null)), receiptHash(body(null)));
+    assert.notEqual(receiptHash(body(null)), receiptHash({ ...body(null), files: ["src/b.ts"] }));
+});
+test("buildReceipt round-trips through verifyReceipt", () => {
+    const dir = makeRepo();
+    try {
+        const receipt = buildReceipt(body(head(dir)));
+        const verification = verifyReceipt(dir, receipt);
+        assert.equal(verification.ok, true);
+        assert.equal(verification.hashOk, true);
+        assert.equal(verification.stale, false);
+        assert.equal(verification.reason, undefined);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("verifyReceipt rejects a tampered body", () => {
+    const dir = makeRepo();
+    try {
+        const receipt = buildReceipt(body(head(dir)));
+        const tampered = { ...receipt, tests: { ...receipt.tests, passed: false } };
+        const verification = verifyReceipt(dir, tampered);
+        assert.equal(verification.ok, false);
+        assert.equal(verification.hashOk, false);
+        assert.match(verification.reason ?? "", /хеш не совпадает/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("verifyReceipt marks a receipt stale after a new commit", () => {
+    const dir = makeRepo();
+    try {
+        const receipt = buildReceipt(body(head(dir)));
+        writeFileSync(join(dir, "a.ts"), "export const a = 2;\n", "utf8");
+        spawnSync("git", ["add", "a.ts"], { cwd: dir });
+        spawnSync("git", ["-c", "user.email=test@example.com", "-c", "user.name=Test", "commit", "-qm", "next"], {
+            cwd: dir,
+        });
+        const verification = verifyReceipt(dir, receipt);
+        assert.equal(verification.ok, false);
+        assert.equal(verification.stale, true);
+        assert.match(verification.reason ?? "", /HEAD/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("saveReceipt stores under .git and reads back", () => {
+    const dir = makeRepo();
+    try {
+        const receipt = buildReceipt(body(head(dir)));
+        const saved = saveReceipt(dir, receipt);
+        assert.equal(saved, receiptPath(dir));
+        assert.equal(existsSync(saved), true);
+        const loaded = readReceipt(saved);
+        assert.equal(loaded.hash, receipt.hash);
+        assert.equal(verifyReceipt(dir, loaded).ok, true);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("saveReceipt outside a repository requires an explicit path", () => {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-receipt-plain-"));
+    try {
+        const receipt = buildReceipt(body(null));
+        assert.throws(() => saveReceipt(dir, receipt), /--out/);
+        const saved = saveReceipt(dir, receipt, join(dir, "receipt.json"));
+        assert.equal(readReceipt(saved).hash, receipt.hash);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("readReceipt reports a missing file", () => {
+    assert.throws(() => readReceipt(join(tmpdir(), "oc-pilot-missing-receipt.json")), /не найдена/);
+});
+test("signReceipt signs the hash and verifies with the matching key", () => {
+    const dir = makeRepo();
+    try {
+        const pair = generateReceiptKeyPair();
+        const receipt = signReceipt(body(head(dir)), pair.privateKey);
+        assert.equal(typeof receipt.signature, "string");
+        assert.match(renderReceipt(receipt), /Подпись: Ed25519/);
+        const checked = verifyReceipt(dir, receipt, pair.publicKey);
+        assert.equal(checked.ok, true);
+        assert.equal(checked.signature, "valid");
+        const unchecked = verifyReceipt(dir, receipt);
+        assert.equal(unchecked.ok, true);
+        assert.equal(unchecked.signature, "unchecked");
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("verifyReceipt rejects a receipt signed by another key", () => {
+    const dir = makeRepo();
+    try {
+        const pair = generateReceiptKeyPair();
+        const other = generateReceiptKeyPair();
+        const receipt = signReceipt(body(head(dir)), pair.privateKey);
+        const checked = verifyReceipt(dir, receipt, other.publicKey);
+        assert.equal(checked.ok, false);
+        assert.equal(checked.signature, "invalid");
+        assert.match(checked.reason ?? "", /подпись/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("verifyReceipt requires a signature when a public key is given", () => {
+    const dir = makeRepo();
+    try {
+        const pair = generateReceiptKeyPair();
+        const receipt = buildReceipt(body(head(dir)));
+        const checked = verifyReceipt(dir, receipt, pair.publicKey);
+        assert.equal(checked.ok, false);
+        assert.equal(checked.signature, "missing");
+        assert.match(checked.reason ?? "", /не подписана/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("signReceipt rejects an invalid private key", () => {
+    assert.throws(() => signReceipt(body(null), "not a key"), /приватный ключ/);
+});
+test("renderReceipt describes the run", () => {
+    const receipt = buildReceipt(body("abcdef1234567890"));
+    const text = renderReceipt(receipt, "/tmp/receipt.json");
+    assert.match(text, /Квитанция: abcdef123456 \(main, чистое дерево\)/);
+    assert.match(text, /Дифф: 1 файл\(ов\), \+2 \/ -0/);
+    assert.match(text, /Тесты: npm test — пройдены \(12 мс\)/);
+    assert.match(text, /Preflight: пройден — проверок с замечаниями: 0 из 2/);
+    assert.match(text, /Хеш: /);
+    assert.match(text, /Сохранено: \/tmp\/receipt\.json/);
+    assert.equal(text.endsWith("\n"), true);
+});
+//# sourceMappingURL=receipt.test.js.map

package/dist/core/receipt.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.test.js","sourceRoot":"","sources":["../../src/core/receipt.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,WAAW,EACX,aAAa,EACb,WAAW,EACX,WAAW,EACX,aAAa,GAEd,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,GAAoB;IAC9B,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;IACvE,MAAM,EAAE;QACN,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,EAAE;QAChG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE;KAC1F;CACF,CAAC;AAEF,SAAS,IAAI,CAAC,MAAqB;IACjC,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,0BAA0B;QACrC,MAAM;QACN,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;QAC9C,KAAK,EAAE,CAAC,UAAU,CAAC;QACnB,KAAK,EAAE;YACL,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,IAAI;SACjB;QACD,SAAS,EAAE,MAAM;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC7D,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAClE,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAChD,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;QACvG,GAAG,EAAE,GAAG;KACT,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACrD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,KAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7E,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAClE,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;YACvG,GAAG,EAAE,GAAG;SACT,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;IACxD,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAC9C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAEzC,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACtD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,iDAAiD,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,qDAAqD,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC"}