proofseal 0.0.1 → 0.1.0

package/dist/cli/index.js

@@ -0,0 +1,440 @@
+#!/usr/bin/env node
+/**
+ * ProofSeal CLI — thin wrapper over the library API (ADR-0001 §4.1).
+ * Exit-code contract: 0 ok/drift · 1 regressed/missing/seal-mismatch · 2 precondition.
+ */
+import { Command } from 'commander';
+import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'node:fs';
+import { join, resolve, dirname } from 'node:path';
+import { seal } from '../manifest/seal.js';
+import { verify, toVerifyJson } from '../manifest/verify.js';
+import { lintMarker } from '../core/marker-lint.js';
+import { ClaimSchema } from '../manifest/schema.js';
+import { loadHistory } from '../history/jsonl.js';
+import { fixTimeline, diffLatest, findRegressionIntroductions } from '../history/queries.js';
+import { enrichRegressionsWithGit, UNREACHABLE_TAG } from '../history/gitinfo.js';
+import { runHarness } from '../harness/run.js';
+import { DEFAULT_TOLERANCE } from '../harness/quantize.js';
+import { loadConfig, saveConfig, defaultConfig, configPathFor } from '../config.js';
+import { startMcpServer } from '../mcp/server.js';
+const program = new Command();
+program.name('proofseal').description('Witness-chained, tamper-evident claim verification').version('0.1.0');
+function emit(json, data, human) {
+    if (json)
+        console.log(JSON.stringify(data, null, 2));
+    else
+        human();
+}
+function fail(json, code, message) {
+    if (json)
+        console.log(JSON.stringify({ ok: false, error: message }, null, 2));
+    else
+        console.error(`proofseal: ${message}`);
+    process.exit(code);
+}
+// ─── init ───────────────────────────────────────────────────────────
+program
+    .command('init')
+    .description('Scaffold proofseal.json + proofs/ + a working sample claim')
+    .option('--root <path>', 'repo root', '.')
+    .option('--force', 'overwrite an existing proofseal.json')
+    .option('--json', 'machine-readable output')
+    .action((opts) => {
+    const root = resolve(opts.root);
+    const configPath = configPathFor(root);
+    if (existsSync(configPath) && !opts.force) {
+        fail(!!opts.json, 2, `${configPath} already exists — pass --force to overwrite`);
+    }
+    const config = defaultConfig(root);
+    saveConfig(root, config);
+    mkdirSync(join(root, 'proofs'), { recursive: true });
+    // Platform honesty (premortem #3): without a .gitattributes, git autocrlf
+    // can rewrite line endings per-OS and silently change file hashes. And
+    // history-semantics (premortem: concurrent seals): two branches sealing
+    // both append to proofs/history.jsonl — `merge=union` keeps both lines on
+    // merge, and queries order by issuedAt so interleaving is safe. Print
+    // guidance only — never write the file for the user.
+    const historyRel = config.history ?? 'proofs/history.jsonl';
+    const unionLine = `${historyRel} merge=union`;
+    const gitattributesPath = join(root, '.gitattributes');
+    let gitattributesHint;
+    if (!existsSync(gitattributesPath)) {
+        gitattributesHint = `no .gitattributes found — consider adding \`* text=auto eol=lf\` (so git autocrlf cannot rewrite line endings per-OS and change file hashes) and \`${unionLine}\` (so seals from two branches merge without conflict; entries are ordered by issuedAt)`;
+    }
+    else if (!readFileSync(gitattributesPath, 'utf8').includes('merge=union')) {
+        gitattributesHint = `consider adding \`${unionLine}\` to .gitattributes so seals from two branches merge without conflict (entries are ordered by issuedAt, so union-merge interleaving is safe)`;
+    }
+    emit(!!opts.json, {
+        ok: true,
+        configPath,
+        claims: config.claims.length,
+        ...(gitattributesHint ? { gitattributesHint } : {}),
+    }, () => {
+        console.log(`Initialized ${configPath}`);
+        if (gitattributesHint)
+            console.log(`hint: ${gitattributesHint}`);
+        console.log('Next: proofseal seal && proofseal verify');
+    });
+});
+// ─── claim add | list | rm ─────────────────────────────────────────
+const claim = program.command('claim').description('Manage claim entries');
+/** Marker lint (premortem #7): advisory only — warnings, never failures. */
+function lintMarkerClaim(root, entry) {
+    if (entry.type !== 'marker')
+        return [];
+    const abs = join(root, entry.file);
+    const text = existsSync(abs) ? readFileSync(abs, 'utf8') : undefined;
+    return lintMarker(entry.marker, text);
+}
+/**
+ * Map a batch-file entry onto the config claim shape (`name` is accepted as
+ * an alias for `harness`; harness defaults to the claim id, like the flags).
+ */
+function normalizeBatchEntry(raw) {
+    if (raw === null || typeof raw !== 'object')
+        return raw;
+    const r = raw;
+    if (r.type !== 'harness')
+        return raw;
+    const { name, ...rest } = r;
+    return {
+        ...rest,
+        harness: r.harness ?? name ?? r.id,
+        seed: r.seed ?? 42,
+        quantizeDecimals: r.quantizeDecimals ?? 6,
+    };
+}
+/** Batch authoring: validate ALL entries before adding ANY (all-or-nothing). */
+function claimAddFromFile(json, root, config, fromFile) {
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(resolve(root, fromFile), 'utf8'));
+    }
+    catch (e) {
+        fail(json, 2, `could not read ${fromFile}: ${e.message}`);
+    }
+    if (!Array.isArray(parsed))
+        fail(json, 2, `${fromFile} must contain a JSON array of claim objects`);
+    const errors = [];
+    const entries = [];
+    const seen = new Set(config.claims.map((c) => c.id));
+    parsed.forEach((raw, i) => {
+        const res = ClaimSchema.safeParse(normalizeBatchEntry(raw));
+        if (!res.success) {
+            const reasons = res.error.issues
+                .map((iss) => `${iss.path.join('.') || '(root)'}: ${iss.message}`)
+                .join('; ');
+            errors.push(`[${i}] invalid claim: ${reasons}`);
+            return;
+        }
+        if (seen.has(res.data.id)) {
+            errors.push(`[${i}] duplicate claim id '${res.data.id}' (already in the file or in proofseal.json)`);
+            return;
+        }
+        seen.add(res.data.id);
+        entries.push(res.data);
+    });
+    if (errors.length > 0) {
+        fail(json, 2, `--from-file rejected (no claims were added):\n  ${errors.join('\n  ')}`);
+    }
+    const warnings = [];
+    for (const entry of entries) {
+        for (const w of lintMarkerClaim(root, entry))
+            warnings.push(`[${entry.id}] ${w}`);
+    }
+    config.claims.push(...entries);
+    saveConfig(root, config);
+    for (const w of warnings)
+        console.warn(`warning: ${w}`);
+    emit(json, { ok: true, added: entries.length, ids: entries.map((e) => e.id), warnings }, () => console.log(`Added ${entries.length} claims`));
+}
+claim
+    .command('add')
+    .option('--id <id>', 'claim id')
+    .option('--type <type>', 'file-hash | marker | harness')
+    .option('--file <path>', 'file the claim covers (file-hash, marker)')
+    .option('--marker <substring>', 'distinctive substring (marker)')
+    .option('--name <name>', 'harness name (defaults to the claim id)')
+    .option('--cmd <command>', 'harness command (harness)')
+    .option('--seed <n>', 'harness seed', '42')
+    .option('--quantize-decimals <n>', 'quantize decimals', '6')
+    .option('--desc <text>', 'claim description')
+    .option('--from-file <path>', 'JSON array of claim objects — all-or-nothing batch add')
+    .option('--root <path>', 'repo root', '.')
+    .option('--json', 'machine-readable output')
+    .action((o) => {
+    const json = o.json !== undefined;
+    try {
+        const { root, config } = loadConfig(o.root ?? '.');
+        if (o.fromFile) {
+            claimAddFromFile(json, root, config, o.fromFile);
+            return;
+        }
+        if (!o.id || !o.type)
+            fail(json, 2, '--id and --type are required (or use --from-file <path>)');
+        if (config.claims.some((c) => c.id === o.id))
+            fail(json, 2, `claim '${o.id}' already exists`);
+        let entry;
+        if (o.type === 'file-hash') {
+            if (!o.file)
+                fail(json, 2, '--file required for file-hash claims');
+            entry = { id: o.id, type: 'file-hash', file: o.file, desc: o.desc };
+        }
+        else if (o.type === 'marker') {
+            if (!o.file || !o.marker)
+                fail(json, 2, '--file and --marker required for marker claims');
+            entry = { id: o.id, type: 'marker', file: o.file, marker: o.marker, desc: o.desc };
+        }
+        else if (o.type === 'harness') {
+            if (!o.cmd)
+                fail(json, 2, '--cmd required for harness claims');
+            entry = {
+                id: o.id,
+                type: 'harness',
+                harness: o.name ?? o.id,
+                cmd: o.cmd,
+                seed: Number(o.seed ?? 42),
+                quantizeDecimals: Number(o.quantizeDecimals ?? 6),
+                desc: o.desc,
+            };
+        }
+        else {
+            fail(json, 2, `unknown claim type '${o.type}' (expected file-hash | marker | harness)`);
+        }
+        const warnings = lintMarkerClaim(root, entry);
+        config.claims.push(entry);
+        saveConfig(root, config);
+        for (const w of warnings)
+            console.warn(`warning: ${w}`);
+        emit(json, { ok: true, claim: entry, warnings }, () => console.log(`Added claim '${o.id}' (${o.type})`));
+    }
+    catch (e) {
+        fail(json, 2, e.message);
+    }
+});
+claim
+    .command('list')
+    .option('--root <path>', 'repo root', '.')
+    .option('--json', 'machine-readable output')
+    .action((o) => {
+    try {
+        const { config } = loadConfig(o.root);
+        emit(!!o.json, { ok: true, claims: config.claims }, () => {
+            for (const c of config.claims) {
+                const target = c.type === 'harness' ? c.cmd : c.file;
+                console.log(`${c.id}\t${c.type}\t${target}${c.desc ? `\t${c.desc}` : ''}`);
+            }
+            if (config.claims.length === 0)
+                console.log('(no claims)');
+        });
+    }
+    catch (e) {
+        fail(!!o.json, 2, e.message);
+    }
+});
+claim
+    .command('rm <id>')
+    .option('--root <path>', 'repo root', '.')
+    .option('--json', 'machine-readable output')
+    .action((id, o) => {
+    try {
+        const { root, config } = loadConfig(o.root);
+        const before = config.claims.length;
+        config.claims = config.claims.filter((c) => c.id !== id);
+        if (config.claims.length === before)
+            fail(!!o.json, 2, `claim '${id}' not found`);
+        saveConfig(root, config);
+        emit(!!o.json, { ok: true, removed: id }, () => console.log(`Removed claim '${id}'`));
+    }
+    catch (e) {
+        fail(!!o.json, 2, e.message);
+    }
+});
+// ─── seal ───────────────────────────────────────────────────────────
+program
+    .command('seal')
+    .description('Refresh claims, derive commit-bound key, seal manifest, append history')
+    .option('--root <path>', 'repo root', '.')
+    .option('--json', 'machine-readable output')
+    .action(async (o) => {
+    try {
+        const result = await seal({ root: o.root });
+        emit(!!o.json, { ok: result.ok, summary: result.summary, manifestPath: result.manifestPath, manifestHash: result.witness.integrity.manifestHash, warnings: result.warnings, filesWritten: result.filesWritten }, () => {
+            console.log(`Sealed ${result.manifestPath}`);
+            console.log(`claims: ${result.summary.totalClaims}  verified: ${result.summary.verified}  missing: ${result.summary.missing}`);
+            for (const w of result.warnings)
+                console.warn(`warning [${w.id}]: ${w.message}`);
+            // CI footgun pack (premortem #5): verify on a clean clone only works
+            // if every seal output is committed — print the checklist explicitly.
+            console.log('');
+            console.log('Seal complete. Now commit these files:');
+            for (const f of result.filesWritten)
+                console.log(`  ${f}`);
+        });
+        process.exit(result.ok ? 0 : 1);
+    }
+    catch (e) {
+        fail(!!o.json, 2, e.message);
+    }
+});
+// ─── verify ─────────────────────────────────────────────────────────
+program
+    .command('verify')
+    .description('Verify the integrity seal + classify every claim (pass/drift/regressed/missing)')
+    .option('--manifest <path>', 'manifest path')
+    .option('--root <path>', 'repo root', '.')
+    .option('--json', 'machine-readable output')
+    .action(async (o) => {
+    const result = await verify({ root: o.root, manifestPath: o.manifest });
+    emit(!!o.json, toVerifyJson(result), () => {
+        if (result.precondition) {
+            console.error(`precondition: ${result.precondition}`);
+            if (result.hint)
+                console.error(`hint: ${result.hint}`);
+            return;
+        }
+        if (result.platformWarning) {
+            console.log(`PLATFORM WARNING: ${result.platformWarning}`);
+            console.log('');
+        }
+        const s = result.signature;
+        console.log('Manifest integrity seal:');
+        console.log(`  hash matches:             ${s.manifestHashOk ? 'yes' : 'SEAL MISMATCH'}`);
+        console.log(`  public key reproducible:  ${s.publicKeyReproducible ? 'yes' : 'SEAL MISMATCH'}`);
+        console.log(`  seal valid:               ${s.signatureValid ? 'yes' : 'SEAL MISMATCH'}`);
+        console.log('');
+        console.log(`Summary: pass=${result.summary.pass} drift=${result.summary.drift} regressed=${result.summary.regressed} missing=${result.summary.missing}`);
+        for (const r of result.results.filter((r) => r.status === 'regressed' || r.status === 'missing')) {
+            console.log(`  ${r.status.toUpperCase()}  ${r.id}  ${r.file ?? ''}${r.detail ? `  (${r.detail})` : ''}`);
+        }
+        console.log(`\nnote: ${result.note}`);
+    });
+    process.exit(result.exitCode);
+});
+// ─── history ────────────────────────────────────────────────────────
+program
+    .command('history')
+    .description('Timeline per claim, latest diff, regression bisection')
+    .option('--id <claimId>', 'timeline for a single claim')
+    .option('--diff', 'latest-vs-previous transitions')
+    .option('--bisect', 'find regression-introducing commit ranges')
+    .option('--root <path>', 'repo root', '.')
+    .option('--json', 'machine-readable output')
+    .action((o) => {
+    try {
+        const { historyPath, root } = loadConfig(o.root);
+        const history = loadHistory(historyPath);
+        if (o.id) {
+            const timeline = fixTimeline(history, o.id);
+            emit(!!o.json, { ok: true, id: o.id, timeline }, () => {
+                for (const t of timeline)
+                    console.log(`${t.issuedAt}  ${t.commit.slice(0, 12)}  ${t.status}`);
+            });
+        }
+        else if (o.diff) {
+            const diff = diffLatest(history);
+            emit(!!o.json, { ok: true, diff }, () => console.log(JSON.stringify(diff, null, 2)));
+        }
+        else if (o.bisect) {
+            const regressions = enrichRegressionsWithGit(root, findRegressionIntroductions(history));
+            emit(!!o.json, { ok: true, regressions }, () => {
+                if (regressions.length === 0)
+                    console.log('No regressed claims in latest snapshot.');
+                const tag = (reachable) => (reachable === false ? ` ${UNREACHABLE_TAG}` : '');
+                for (const r of regressions) {
+                    const lastPass = r.lastPassCommit
+                        ? `${r.lastPassCommit.slice(0, 12)}${tag(r.lastPassReachable)}`
+                        : '(never)';
+                    console.log(`${r.id}: last pass ${lastPass} → regressed at ${r.regressedAtCommit.slice(0, 12)}${tag(r.regressedAtReachable)}`);
+                    if (r.rangeCommitCount != null) {
+                        const n = r.rangeCommitCount;
+                        const advice = n > 1 ? ' — seal more often (e.g. in CI on main) for tighter localization' : '';
+                        console.log(`  range spans ${n} commit${n === 1 ? '' : 's'}${advice}`);
+                    }
+                }
+            });
+        }
+        else {
+            emit(!!o.json, { ok: true, entries: history }, () => {
+                for (const e of history) {
+                    console.log(`${e.issuedAt}  ${e.commit.slice(0, 12)}  claims=${e.summary.totalClaims} verified=${e.summary.verified} missing=${e.summary.missing}`);
+                }
+                if (history.length === 0)
+                    console.log('(no history)');
+            });
+        }
+    }
+    catch (e) {
+        fail(!!o.json, 2, e.message);
+    }
+});
+// ─── harness run ────────────────────────────────────────────────────
+const harness = program.command('harness').description('Deterministic-output harnesses');
+harness
+    .command('run <name>')
+    .option('--update', 'regenerate expectedSha256 + reference vector (reviewed bumps only)')
+    .option('--root <path>', 'repo root', '.')
+    .option('--json', 'machine-readable output')
+    .action(async (name, o) => {
+    const json = !!o.json;
+    try {
+        const { root, config } = loadConfig(o.root);
+        const claimDef = config.claims.find((c) => c.type === 'harness' && (c.harness === name || c.id === name));
+        if (!claimDef)
+            fail(json, 2, `no harness claim named '${name}'`);
+        const def = claimDef;
+        const result = await runHarness({
+            name,
+            cmd: def.cmd,
+            cwd: root,
+            seed: def.seed,
+            quantizeDecimals: def.quantizeDecimals,
+            exclude: def.exclude,
+            expectedSha256: o.update ? undefined : def.expectedSha256,
+            referenceVector: def.referenceVector,
+            tolerance: def.tolerance,
+        });
+        if (result.status === 'error') {
+            fail(json, 2, `harness '${name}' failed: ${result.error}`);
+        }
+        if (o.update) {
+            const refRel = def.referenceVector ?? `proofs/${name}.reference.json`;
+            const refAbs = join(root, refRel);
+            mkdirSync(dirname(refAbs), { recursive: true });
+            writeFileSync(refAbs, JSON.stringify(result.values) + '\n');
+            def.expectedSha256 = result.hash;
+            def.referenceVector = refRel;
+            def.tolerance = def.tolerance ?? { ...DEFAULT_TOLERANCE };
+            saveConfig(root, config);
+            emit(json, { ok: true, updated: true, hash: result.hash, referenceVector: refRel }, () => {
+                console.log(`Updated harness '${name}': expectedSha256=${result.hash}`);
+                console.log(`Reference vector written to ${refRel}. Re-run \`proofseal seal\`.`);
+            });
+            process.exit(0);
+        }
+        if (!def.expectedSha256) {
+            fail(json, 2, `harness '${name}' has no committed expectedSha256 — run with --update first`);
+        }
+        emit(json, { ok: result.status === 'pass' || result.status === 'drift', result }, () => {
+            console.log(`harness '${name}': ${result.status}  hash=${result.hash}`);
+            if (result.forensics?.worst) {
+                const w = result.forensics.worst;
+                console.log(`  worst divergence: index ${w.index} actual=${w.actual} expected=${w.expected} diff=${w.diff}`);
+            }
+        });
+        process.exit(result.status === 'pass' || result.status === 'drift' ? 0 : 1);
+    }
+    catch (e) {
+        fail(json, 2, e.message);
+    }
+});
+// ─── mcp start ──────────────────────────────────────────────────────
+const mcp = program.command('mcp').description('MCP server');
+mcp
+    .command('start')
+    .description('Start the ProofSeal MCP stdio server')
+    .action(async () => {
+    await startMcpServer();
+});
+program.parseAsync(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEpF,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,oDAAoD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAE7G,SAAS,IAAI,CAAC,IAAa,EAAE,IAAa,EAAE,KAAiB;IAC3D,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;QAChD,KAAK,EAAE,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,IAAa,EAAE,IAAY,EAAE,OAAe;IACxD,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;QACzE,OAAO,CAAC,KAAK,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,uEAAuE;AACvE,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,4DAA4D,CAAC;KACzE,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC;KACzC,MAAM,CAAC,SAAS,EAAE,sCAAsC,CAAC;KACzD,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,CAAC,IAAuD,EAAE,EAAE;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,UAAU,6CAA6C,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,0EAA0E;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,qDAAqD;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,IAAI,sBAAsB,CAAC;IAC5D,MAAM,SAAS,GAAG,GAAG,UAAU,cAAc,CAAC;IAC9C,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACvD,IAAI,iBAAqC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnC,iBAAiB,GAAG,sJAAsJ,SAAS,yFAAyF,CAAC;IAC/Q,CAAC;SAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5E,iBAAiB,GAAG,qBAAqB,SAAS,+IAA+I,CAAC;IACpM,CAAC;IACD,IAAI,CACF,CAAC,CAAC,IAAI,CAAC,IAAI,EACX;QACE,EAAE,EAAE,IAAI;QACR,UAAU;QACV,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;QAC5B,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,EACD,GAAG,EAAE;QACH,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QACzC,IAAI,iBAAiB;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,sEAAsE;AACtE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;AAE3E,4EAA4E;AAC5E,SAAS,eAAe,CAAC,IAAY,EAAE,KAAY;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,EAAE;QAClC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,gBAAgB,CAAC,IAAa,EAAE,IAAY,EAAE,MAA+C,EAAE,QAAgB;IACtH,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,kBAAkB,QAAQ,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,6CAA6C,CAAC,CAAC;IAEpG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAY,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,MAAoB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM;iBAC7B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;iBACjE,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,GAAG,CAAC,IAAI,CAAC,EAAE,8CAA8C,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,mDAAmD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IAC/B,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAC5F,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,MAAM,SAAS,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,KAAK;KACF,OAAO,CAAC,KAAK,CAAC;KACd,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC;KAC/B,MAAM,CAAC,eAAe,EAAE,8BAA8B,CAAC;KACvD,MAAM,CAAC,eAAe,EAAE,2CAA2C,CAAC;KACpE,MAAM,CAAC,sBAAsB,EAAE,gCAAgC,CAAC;KAChE,MAAM,CAAC,eAAe,EAAE,yCAAyC,CAAC;KAClE,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;KACtD,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC;KAC1C,MAAM,CAAC,yBAAyB,EAAE,mBAAmB,EAAE,GAAG,CAAC;KAC3D,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC;KAC5C,MAAM,CAAC,oBAAoB,EAAE,wDAAwD,CAAC;KACtF,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC;KACzC,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,CAAC,CAAqC,EAAE,EAAE;IAChD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACf,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,0DAA0D,CAAC,CAAC;QAChG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC9F,IAAI,KAAY,CAAC;QACjB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,sCAAsC,CAAC,CAAC;YACnE,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,gDAAgD,CAAC,CAAC;YAC1F,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxF,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,CAAC,GAAG;gBAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,mCAAmC,CAAC,CAAC;YAC/D,KAAK,GAAG;gBACN,EAAE,EAAE,CAAC,CAAC,EAAG;gBACT,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAG;gBACxB,GAAG,EAAE,CAAC,CAAC,GAAI;gBACX,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC1B,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC;gBACjD,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,uBAAuB,CAAC,CAAC,IAAI,2CAA2C,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,KAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAM,CAAC,CAAC;QAC3B,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAC5G,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,IAAI,EAAE,CAAC,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,KAAK;KACF,OAAO,CAAC,MAAM,CAAC;KACf,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC;KACzC,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,CAAC,CAAmC,EAAE,EAAE;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;YACvD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,KAAK;KACF,OAAO,CAAC,SAAS,CAAC;KAClB,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC;KACzC,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,CAAC,EAAU,EAAE,CAAmC,EAAE,EAAE;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QAClF,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,uEAAuE;AACvE,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,wEAAwE,CAAC;KACrF,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC;KACzC,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,CAAmC,EAAE,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE;YACpN,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,WAAW,eAAe,MAAM,CAAC,OAAO,CAAC,QAAQ,cAAc,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/H,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,qEAAqE;YACrE,sEAAsE;YACtE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,uEAAuE;AACvE,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iFAAiF,CAAC;KAC9F,MAAM,CAAC,mBAAmB,EAAE,eAAe,CAAC;KAC5C,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC;KACzC,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,CAAsD,EAAE,EAAE;IACvE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE;QACxC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAO,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,OAAO,CAAC,IAAI,UAAU,MAAM,CAAC,OAAO,CAAC,KAAK,cAAc,MAAM,CAAC,OAAO,CAAC,SAAS,YAAY,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1J,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEL,uEAAuE;AACvE,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;KACvD,MAAM,CAAC,QAAQ,EAAE,gCAAgC,CAAC;KAClD,MAAM,CAAC,UAAU,EAAE,2CAA2C,CAAC;KAC/D,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC;KACzC,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,CAAC,CAAkF,EAAE,EAAE;IAC7F,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE;gBACpD,KAAK,MAAM,CAAC,IAAI,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAChG,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,EAAE,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE;gBAC7C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;gBACrF,MAAM,GAAG,GAAG,CAAC,SAAmB,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxF,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,cAAc;wBAC/B,CAAC,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;wBAC/D,CAAC,CAAC,SAAS,CAAC;oBACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,QAAQ,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;oBAC/H,IAAI,CAAC,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;wBAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC;wBAC7B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,kEAAkE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/F,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC;oBACzE,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE;gBAClD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,WAAW,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,YAAY,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtJ,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,uEAAuE;AACvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC;AACzF,OAAO;KACJ,OAAO,CAAC,YAAY,CAAC;KACrB,MAAM,CAAC,UAAU,EAAE,oEAAoE,CAAC;KACxF,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC;KACzC,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,CAAqD,EAAE,EAAE;IACpF,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACjC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CACxF,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,2BAA2B,IAAI,GAAG,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,QAAS,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,IAAI;YACJ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc;YACzD,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,YAAY,IAAI,aAAa,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,IAAI,UAAU,IAAI,iBAAiB,CAAC;YACtE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5D,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC;YACjC,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC;YAC7B,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,GAAG,iBAAiB,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE;gBACvF,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,qBAAqB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,8BAA8B,CAAC,CAAC;YACnF,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,YAAY,IAAI,6DAA6D,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE;YACrF,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,MAAM,CAAC,MAAM,UAAU,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,IAAI,EAAE,CAAC,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,uEAAuE;AACvE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;AAC7D,GAAG;KACA,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,sCAAsC,CAAC;KACnD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,cAAc,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,19 @@
+import { type ProofSealConfig } from './manifest/schema.js';
+export declare const CONFIG_FILENAME = "proofseal.json";
+export declare const DEFAULT_MANIFEST_PATH = "proofs/manifest.json";
+export declare const DEFAULT_HISTORY_PATH = "proofs/history.jsonl";
+export interface ResolvedConfig {
+    config: ProofSealConfig;
+    configPath: string;
+    root: string;
+    salt: string;
+    manifestPath: string;
+    historyPath: string;
+}
+export declare function configPathFor(root: string): string;
+/** Load and validate proofseal.json; throws with a hint if absent/invalid. */
+export declare function loadConfig(root?: string): ResolvedConfig;
+/** Persist config (pretty-printed, trailing newline). */
+export declare function saveConfig(root: string, config: ProofSealConfig): string;
+/** Default scaffold written by `proofseal init` (ADR R3: green verify in minutes). */
+export declare function defaultConfig(root: string): ProofSealConfig;

package/dist/config.js

@@ -0,0 +1,58 @@
+/**
+ * proofseal.json config loading/saving + path resolution.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { join, resolve, basename, dirname } from 'node:path';
+import { ConfigSchema, SCHEMA_ID } from './manifest/schema.js';
+export const CONFIG_FILENAME = 'proofseal.json';
+export const DEFAULT_MANIFEST_PATH = 'proofs/manifest.json';
+export const DEFAULT_HISTORY_PATH = 'proofs/history.jsonl';
+export function configPathFor(root) {
+    return join(resolve(root), CONFIG_FILENAME);
+}
+/** Load and validate proofseal.json; throws with a hint if absent/invalid. */
+export function loadConfig(root = process.cwd()) {
+    const absRoot = resolve(root);
+    const configPath = configPathFor(absRoot);
+    if (!existsSync(configPath)) {
+        throw new Error(`${CONFIG_FILENAME} not found in ${absRoot} — run \`proofseal init\` first`);
+    }
+    const config = ConfigSchema.parse(JSON.parse(readFileSync(configPath, 'utf8')));
+    return {
+        config,
+        configPath,
+        root: absRoot,
+        salt: config.salt ?? basename(absRoot),
+        manifestPath: join(absRoot, config.manifest ?? DEFAULT_MANIFEST_PATH),
+        historyPath: join(absRoot, config.history ?? DEFAULT_HISTORY_PATH),
+    };
+}
+/** Persist config (pretty-printed, trailing newline). */
+export function saveConfig(root, config) {
+    const configPath = configPathFor(root);
+    mkdirSync(dirname(configPath), { recursive: true });
+    writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
+    return configPath;
+}
+/** Default scaffold written by `proofseal init` (ADR R3: green verify in minutes). */
+export function defaultConfig(root) {
+    return {
+        schema: SCHEMA_ID,
+        salt: basename(resolve(root)),
+        manifest: DEFAULT_MANIFEST_PATH,
+        history: DEFAULT_HISTORY_PATH,
+        releases: {},
+        claims: [
+            {
+                id: 'sample-config-schema',
+                type: 'marker',
+                desc: 'ProofSeal config declares the v1 schema (sample claim — replace with your own)',
+                file: CONFIG_FILENAME,
+                // The escaped serialization of this marker field cannot collide with
+                // the raw schema line, so the marker matches exactly once (R5).
+                marker: `"schema": "${SCHEMA_ID}"`,
+            },
+        ],
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAwB,MAAM,sBAAsB,CAAC;AAErF,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAChD,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAW3D,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;AAC9C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,OAAe,OAAO,CAAC,GAAG,EAAE;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,eAAe,iBAAiB,OAAO,iCAAiC,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO;QACL,MAAM;QACN,UAAU;QACV,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC;QACtC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,IAAI,qBAAqB,CAAC;QACrE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,oBAAoB,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,MAAuB;IAC9D,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,QAAQ,EAAE,qBAAqB;QAC/B,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,sBAAsB;gBAC1B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,gFAAgF;gBACtF,IAAI,EAAE,eAAe;gBACrB,qEAAqE;gBACrE,gEAAgE;gBAChE,MAAM,EAAE,cAAc,SAAS,GAAG;aACnC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/core/canonical.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Canonical JSON — sorted-key, undefined-dropping, deterministic
+ * serialization (ADR-0001 D5: RuView's byte-stable discipline, ported
+ * from the ruflo graph-intelligence witness-signer pattern).
+ *
+ * The bytes produced here are what gets hashed and signed; any change
+ * to this function is a schema-breaking change (bump proofseal/v1).
+ */
+/**
+ * Serialize any JSON-representable value to canonical JSON:
+ * - object keys sorted lexicographically
+ * - keys with `undefined` values dropped
+ * - `undefined` itself serializes as `null`
+ * - no whitespace
+ */
+export declare function canonicalize(value: unknown): string;

package/dist/core/canonical.js

@@ -0,0 +1,29 @@
+/**
+ * Canonical JSON — sorted-key, undefined-dropping, deterministic
+ * serialization (ADR-0001 D5: RuView's byte-stable discipline, ported
+ * from the ruflo graph-intelligence witness-signer pattern).
+ *
+ * The bytes produced here are what gets hashed and signed; any change
+ * to this function is a schema-breaking change (bump proofseal/v1).
+ */
+/**
+ * Serialize any JSON-representable value to canonical JSON:
+ * - object keys sorted lexicographically
+ * - keys with `undefined` values dropped
+ * - `undefined` itself serializes as `null`
+ * - no whitespace
+ */
+export function canonicalize(value) {
+    if (value === undefined)
+        return 'null';
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return '[' + value.map(canonicalize).join(',') + ']';
+    const obj = value;
+    const keys = Object.keys(obj)
+        .filter((k) => obj[k] !== undefined)
+        .sort();
+    return '{' + keys.map((k) => JSON.stringify(k) + ':' + canonicalize(obj[k])).join(',') + '}';
+}
+//# sourceMappingURL=canonical.js.map

package/dist/core/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/core/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC/E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACnC,IAAI,EAAE,CAAC;IACV,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AAC/F,CAAC"}

package/dist/core/hash.d.ts

@@ -0,0 +1,32 @@
+/** sha256 of a string (utf8) or Buffer, lowercase hex (64 chars). */
+export declare function sha256Hex(input: Buffer | string): string;
+/** sha256 of a string (utf8) or Buffer, raw 32 bytes. */
+export declare function sha256Bytes(input: Buffer | string): Buffer;
+/** sha256 of a file's raw bytes, lowercase hex. */
+export declare function fileSha256(absPath: string): string;
+/**
+ * sha256 of a file's bytes with CRLF→LF normalization (premortem #7:
+ * Windows insurance). Used ONLY for diagnostics: when a file-hash claim
+ * regresses but the CRLF-normalized hash still matches the sealed hash,
+ * the cause is almost certainly git autocrlf rewriting line endings —
+ * the regressed detail can then name the cause instead of crying tamper.
+ */
+export declare function fileSha256CrlfNormalized(absPath: string): string;
+/** True if the file (decoded as utf8) contains the marker substring. */
+export declare function fileContains(absPath: string, marker: string): boolean;
+/**
+ * Whitespace-normalized marker presence (premortem #7: marker robustness).
+ *
+ * Markers exist to outlive REBUILDS of a file — but a plain substring check
+ * also breaks under routine reformatting (Prettier line-wraps, re-indents,
+ * tabs→spaces). That reads as a false "regressed" and teaches users that
+ * ProofSeal lies. Both the file text and the marker are normalized (see
+ * `normalizeForMarker`) before matching, so whitespace-only rewrites of the
+ * marker's surroundings still match while any non-whitespace edit to the
+ * marker text itself still (correctly) fails.
+ *
+ * Plain `fileContains` is kept for exact-substring use cases.
+ */
+export declare function markerPresent(text: string, marker: string): boolean;
+/** Whitespace-normalized count of (non-overlapping) marker occurrences. */
+export declare function markerOccurrences(text: string, marker: string): number;