@a4anthony/proctorkit-types 0.0.0-canary.485d0f63.20260716091407

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Anthony Gakro
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/api.d.ts

@@ -0,0 +1,19 @@
+export interface SignedUploadUrl {
+    url: string;
+    method: "PUT";
+    headers: Record<string, string>;
+    expiresAt: number;
+    objectKey: string;
+}
+export interface IngestBatchRequest {
+    batchId: string;
+    sessionId: string;
+    candidate?: import("./worker-protocol.js").CandidateIdentity;
+    events: import("./events.js").SessionEvent[];
+}
+export interface IngestBatchResponse {
+    batchId: string;
+    accepted: string[];
+    rejected: string[];
+}
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,KAAK,CAAC;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,sBAAsB,EAAE,iBAAiB,CAAC;IAC7D,MAAM,EAAE,OAAO,aAAa,EAAE,YAAY,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/api.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":""}

package/dist/events.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The canonical list of every event kind, as a runtime value.
+ *
+ * This is the SINGLE SOURCE OF TRUTH for event kinds. The `EventKind`
+ * type is derived from it (`typeof EVENT_KINDS[number]`), and the
+ * server's ingest validation builds its zod enum from the same array
+ * (`z.enum(EVENT_KINDS)`) so the wire contract can never silently drift
+ * from the type. Add a new kind here and both the type and the ingest
+ * gate pick it up. (A hand-maintained copy of this list in the ingest
+ * DTO is exactly how `session.checkpoint` once 400'd every batch that
+ * carried it — don't reintroduce a second list.)
+ */
+export declare const EVENT_KINDS: readonly ["session.started", "session.heartbeat", "session.end_requested", "session.ended", "session.resumed", "session.abandoned", "session.checkpoint", "session.integrity-hold", "session.integrity-cleared", "sdk.initialized", "sdk.delivery.ready", "sdk.ready", "sdk.error", "sdk.upload.failed", "sdk.media.failed", "sdk.permission.denied", "sdk.worker.failed", "sdk.storage.fallback", "sdk.recording.buffer-degraded", "sdk.recording.buffer-evicted", "sdk.stop.drain-timeout", "focus.lost", "focus.gained", "tab.hidden", "tab.visible", "page.viewed", "fullscreen.entered", "fullscreen.exited", "clipboard.copy", "clipboard.paste", "clipboard.cut", "contextmenu.opened", "keyboard.blocked", "screenshot.attempted", "screen-share.started", "screen-share.stopped", "screen-share.declined", "screen-share.wrong-surface", "screen-share.recording.started", "screen-share.recording.stopped", "screen-share.recording.unavailable", "screen-share.chunk-uploaded", "screen-share.chunk-dropped", "webcam.started", "webcam.stopped", "webcam.declined", "webcam.unavailable", "webcam.photo.captured", "webcam.photo.dropped", "webcam.recording.started", "webcam.recording.stopped", "webcam.recording.chunk-uploaded", "webcam.recording.chunk-dropped", "video-clip.started", "video-clip.stopped", "video-clip.uploaded", "video-clip.dropped", "audio-clip.started", "audio-clip.stopped", "audio-clip.uploaded", "audio-clip.dropped", "audio-playback.started", "audio-playback.paused", "audio-playback.stopped", "audio-playback.ended", "audio-playback.error", "audio-playback.sink-applied", "audio-playback.sink-unsupported", "audio-playback.sink-failed", "audio-playback.sink-disconnected", "video-playback.started", "video-playback.paused", "video-playback.stopped", "video-playback.ended", "video-playback.error", "video-playback.sink-applied", "video-playback.sink-unsupported", "video-playback.sink-failed", "video-playback.sink-disconnected", "pointer.left-window", "pointer.returned", "idle.started", "idle.ended", "session.fingerprint", "session.policy", "face.detector-ready", "face.detector-failed", "face.detector-degraded", "face.lost", "face.returned", "face.multiple", "face.multiple-cleared", "face.gaze-off-screen", "face.gaze-restored", "face.identity-mismatch", "screen.window-switched", "screen.scene-stable", "screen.recording-paused", "webcam.phone-detected", "webcam.phone-cleared", "webcam.book-detected", "webcam.book-cleared", "webcam.second-device-detected", "webcam.second-device-cleared", "webcam.second-screen-detected", "webcam.second-screen-cleared", "face.lost-at-snapshot", "face.multiple-at-snapshot", "face.gaze-off-screen-at-snapshot", "face.identity-mismatch-at-snapshot", "webcam.phone-detected-at-snapshot", "webcam.book-detected-at-snapshot", "webcam.second-device-detected-at-snapshot", "webcam.second-screen-detected-at-snapshot", "media.frame.captured", "media.audio.chunk", "network.online", "network.offline", "preflight.started", "preflight.row-checking", "preflight.row-passed", "preflight.row-failed", "preflight.row-retried", "preflight.attestation", "preflight.device-picked", "preflight.devices-enumerated", "preflight.devices-changed", "preflight.microphone-verification", "preflight.face-detected", "preflight.camera-photo", "preflight.completed", "text.started", "text.paste", "text.copy", "text.cut", "text.keystroke-summary", "text.checkpoint", "text.focus-lost", "text.focus-regained", "text.synthetic-input", "text.saved", "text.save-failed", "text.submitted"];
+export type EventKind = (typeof EVENT_KINDS)[number];
+export interface SessionEvent {
+    id: string;
+    sessionId: string;
+    kind: EventKind;
+    timestamp: number;
+    payload?: Record<string, unknown>;
+    /**
+     * Per-device fingerprint stamped by the SDK at construction time
+     * (see `computeDeviceFingerprint`). Optional so legacy SDK
+     * builds + tests can still construct a SessionEvent without one.
+     * Promoted to a real column on the server's Event row so the
+     * dashboard can render multi-device timelines as parallel swim
+     * lanes without scanning the payload JSON.
+     */
+    fingerprintId?: string;
+}
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,26GA0Ud,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/dist/events.js

@@ -0,0 +1,344 @@
+/**
+ * The canonical list of every event kind, as a runtime value.
+ *
+ * This is the SINGLE SOURCE OF TRUTH for event kinds. The `EventKind`
+ * type is derived from it (`typeof EVENT_KINDS[number]`), and the
+ * server's ingest validation builds its zod enum from the same array
+ * (`z.enum(EVENT_KINDS)`) so the wire contract can never silently drift
+ * from the type. Add a new kind here and both the type and the ingest
+ * gate pick it up. (A hand-maintained copy of this list in the ingest
+ * DTO is exactly how `session.checkpoint` once 400'd every batch that
+ * carried it — don't reintroduce a second list.)
+ */
+export const EVENT_KINDS = [
+    "session.started",
+    "session.heartbeat",
+    "session.end_requested",
+    "session.ended",
+    /**
+     * Emitted once when a candidate resumes a live session after a
+     * mid-assessment page refresh — i.e. the attempt resolver returned
+     * `reuse_active_attempt` and the resume re-check (camera/mic/speaker/
+     * screen-share/fullscreen) passed. The payload carries the per-check
+     * verdicts and any device the candidate switched to during the
+     * re-check, so a proctor has an audit trail of the interruption
+     * (count of `session.resumed` events = number of resumes) and of any
+     * device change mid-exam. Distinct from `session.started`, which the
+     * SDK also re-emits on resume as a side effect of re-creating the
+     * client.
+     */
+    "session.resumed",
+    /**
+     * Emitted server-side when a within-session attempt is retired without a
+     * clean `session.ended` — the candidate dropped (disconnect, stale backstop,
+     * or a different tab/device taking over) rather than finishing. Marks the
+     * close of an attempt on the review timeline; a resume opens the next one
+     * with `session.resumed`. Distinct from the `session.abandoned` *webhook*,
+     * which fires when the whole sitting ends abandoned. Server-derived because
+     * an abandoned client can't report its own departure.
+     */
+    "session.abandoned",
+    /**
+     * Runtime integrity checkpoint: a re-verification, run on demand or on a
+     * schedule, that compares the live environment against the state that
+     * passed preflight. The payload carries `{ ok, changes[] }` — each change
+     * a drift signal (permission revoked, selected device gone, external
+     * monitor connected, camera track ended/black/frozen, mic track
+     * ended/muted). `ok: true` means "still matches preflight." A run is
+     * emitted every time so the count is an audit trail; the SDK never
+     * pauses or fails the session on drift — the host decides.
+     */
+    "session.checkpoint",
+    /**
+     * Mid-session integrity hold. Emitted when a runtime checkpoint fails
+     * mid-exam (triggered by a device disconnect, tab-return, or heartbeat)
+     * and the SDK raises its recovery gate — the candidate is blocked from
+     * the exam until the environment is fixed. `session.integrity-hold`
+     * opens the hold; `session.integrity-cleared` closes it once the
+     * re-check passes. They are always paired and correlated by `holdId`,
+     * so a proctor (and the host's exam timer, which pauses on hold and
+     * resumes on clear) can reconcile the interruption window.
+     *
+     *   - integrity-hold    payload: { holdId, reason, changes: CheckpointChange[] }
+     *   - integrity-cleared payload: { holdId, resolvedMs }
+     *
+     * Distinct from `session.checkpoint` (which emits on EVERY run, pass or
+     * fail, as a raw audit record): the hold pair marks only the drifts that
+     * actually gated the candidate, and brackets the recovery window.
+     */
+    "session.integrity-hold",
+    "session.integrity-cleared",
+    "sdk.initialized",
+    "sdk.delivery.ready",
+    "sdk.ready",
+    "sdk.error",
+    "sdk.upload.failed",
+    "sdk.media.failed",
+    "sdk.permission.denied",
+    "sdk.worker.failed",
+    "sdk.storage.fallback",
+    "sdk.recording.buffer-degraded",
+    "sdk.recording.buffer-evicted",
+    "sdk.stop.drain-timeout",
+    "focus.lost",
+    "focus.gained",
+    "tab.hidden",
+    "tab.visible",
+    /**
+     * Emitted once when the proctored runtime page loads — on first start
+     * and again on every resume (the SDK re-boots). Carries only the customer
+     * application origin and whether the page was backgrounded at load. Full
+     * URLs, paths, queries, fragments, referrers, and document titles are never
+     * included. This is distinct from the presence signals (`tab.*` / `focus.*`)
+     * that track the candidate leaving the assessment.
+     */
+    "page.viewed",
+    "fullscreen.entered",
+    "fullscreen.exited",
+    "clipboard.copy",
+    "clipboard.paste",
+    "clipboard.cut",
+    "contextmenu.opened",
+    "keyboard.blocked",
+    "screenshot.attempted",
+    "screen-share.started",
+    "screen-share.stopped",
+    "screen-share.declined",
+    "screen-share.wrong-surface",
+    "screen-share.recording.started",
+    "screen-share.recording.stopped",
+    "screen-share.recording.unavailable",
+    "screen-share.chunk-uploaded",
+    "screen-share.chunk-dropped",
+    "webcam.started",
+    "webcam.stopped",
+    "webcam.declined",
+    "webcam.unavailable",
+    "webcam.photo.captured",
+    "webcam.photo.dropped",
+    "webcam.recording.started",
+    "webcam.recording.stopped",
+    "webcam.recording.chunk-uploaded",
+    "webcam.recording.chunk-dropped",
+    "video-clip.started",
+    "video-clip.stopped",
+    "video-clip.uploaded",
+    "video-clip.dropped",
+    "audio-clip.started",
+    "audio-clip.stopped",
+    "audio-clip.uploaded",
+    "audio-clip.dropped",
+    "audio-playback.started",
+    "audio-playback.paused",
+    "audio-playback.stopped",
+    "audio-playback.ended",
+    "audio-playback.error",
+    "audio-playback.sink-applied",
+    "audio-playback.sink-unsupported",
+    "audio-playback.sink-failed",
+    "audio-playback.sink-disconnected",
+    "video-playback.started",
+    "video-playback.paused",
+    "video-playback.stopped",
+    "video-playback.ended",
+    "video-playback.error",
+    "video-playback.sink-applied",
+    "video-playback.sink-unsupported",
+    "video-playback.sink-failed",
+    "video-playback.sink-disconnected",
+    "pointer.left-window",
+    "pointer.returned",
+    "idle.started",
+    "idle.ended",
+    "session.fingerprint",
+    "session.policy",
+    "face.detector-ready",
+    "face.detector-failed",
+    "face.detector-degraded",
+    "face.lost",
+    "face.returned",
+    "face.multiple",
+    "face.multiple-cleared",
+    "face.gaze-off-screen",
+    "face.gaze-restored",
+    "face.identity-mismatch",
+    /**
+     * Post-hoc screen-share analysis events. Emitted by the
+     * packages/screen-detect Python sidecar after the stitched
+     * screen-share recording is assembled at session-end. Source
+     * column is set to "analyzer" and the analysisRunId points
+     * at the ScreenAnalysisRun row that produced this event,
+     * mirroring the face-analysis pattern.
+     *
+     * Why we need them: client-side focus.lost only fires when
+     * the candidate switches AWAY from the exam tab; it misses
+     * window-level switches that stay in-browser (a popover
+     * ChatGPT in another tab of the same Chrome instance, an
+     * OS-level overlay like Copilot, a second monitor in shared
+     * view, etc.). The screen recording itself is the only
+     * signal here — these events surface visual context changes
+     * that the live client never saw.
+     */
+    "screen.window-switched",
+    "screen.scene-stable",
+    "screen.recording-paused",
+    /**
+     * Object-detection signals emitted by the post-hoc YOLO11
+     * pass that runs alongside face analysis on the stitched
+     * webcam recording. The YOLO model recognises 80 COCO
+     * classes; we surface only the subset that maps to
+     * "policy violation in a proctored exam":
+     *
+     *   - phone-detected — a cell phone visible in frame
+     *   - book-detected — a printed book / notebook visible
+     *   - second-device-detected — a laptop other than the
+     *     candidate's primary visible in frame
+     *   - second-screen-detected — a TV / monitor other than
+     *     the candidate's primary visible in frame
+     *
+     * The matching `*-cleared` event fires when the object
+     * stops being detected for a debounce window. Bounding box
+     * + confidence land in the payload.
+     *
+     * Sourced from the same FaceAnalysisRun as the face events
+     * (we run them in one pass over the stitched video) so
+     * `analysisRunId` is shared.
+     */
+    "webcam.phone-detected",
+    "webcam.phone-cleared",
+    "webcam.book-detected",
+    "webcam.book-cleared",
+    "webcam.second-device-detected",
+    "webcam.second-device-cleared",
+    "webcam.second-screen-detected",
+    "webcam.second-screen-cleared",
+    /**
+     * Random-photo analysis events. The SDK uploads JPEG snapshots
+     * every 20-60 seconds during a proctored session; the photo-
+     * analysis worker runs the same detectors against each photo
+     * AFTER session-end as a backstop to the stitched-video pass.
+     *
+     * Why a separate set of kinds (`-at-snapshot`) rather than
+     * reusing `face.lost` / `webcam.phone-detected`:
+     *
+     *   - The cert needs to prefer the photo's actual JPEG over
+     *     a video-frame extraction as the evidence thumbnail —
+     *     photos are 1080p singles, video frames are transcoded
+     *     and compressed.
+     *   - Reviewers reading the timeline benefit from knowing
+     *     which signal came from continuous video analysis vs.
+     *     intermittent snapshot sampling.
+     *   - Source field is "photo-analyzer" (vs "analyzer" for
+     *     the video pass) so audit queries can separate them.
+     *
+     * Payload always carries `photoId` (BigInt as string) so the
+     * dashboard can join back to webcam_photos and display the
+     * actual JPEG inline.
+     */
+    "face.lost-at-snapshot",
+    "face.multiple-at-snapshot",
+    "face.gaze-off-screen-at-snapshot",
+    "face.identity-mismatch-at-snapshot",
+    "webcam.phone-detected-at-snapshot",
+    "webcam.book-detected-at-snapshot",
+    "webcam.second-device-detected-at-snapshot",
+    "webcam.second-screen-detected-at-snapshot",
+    "media.frame.captured",
+    "media.audio.chunk",
+    "network.online",
+    "network.offline",
+    // Preflight wizard lifecycle. Emitted by @a4anthony/proctorkit-vue's
+    // preflight telemetry composable. The server materialises these into
+    // the preflight_outcomes row keyed off the candidate's sessionId
+    // (the same opaque id the customer's host page assigns; correlationId
+    // on the Vue API surface, sessionId on the wire).
+    "preflight.started",
+    "preflight.row-checking",
+    "preflight.row-passed",
+    "preflight.row-failed",
+    "preflight.row-retried",
+    "preflight.attestation",
+    "preflight.device-picked",
+    /**
+     * Initial enumeration of available media devices for a row's
+     * picker. Fires once per row (microphone / speaker / camera)
+     * after permission resolves so device labels are populated.
+     * Payload: { row, devices: [{ deviceId, label, groupId, virtual }] }
+     */
+    "preflight.devices-enumerated",
+    /**
+     * Fired in response to the browser's `navigator.mediaDevices
+     * .devicechange` event during preflight. The device list
+     * changed (plug/unplug) -- carries the new snapshot. Distinct
+     * from devices-enumerated so the dashboard timeline can mark
+     * "candidate plugged in headphones mid-flow."
+     * Payload: { row?, devices: [{ deviceId, label, groupId, virtual }] }
+     */
+    "preflight.devices-changed",
+    /**
+     * Internal microphone-verification diagnostic. Records whether Silero VAD
+     * verified speech or the bounded RMS reliability fallback did, plus the VAD
+     * preparation duration and fallback reason. It is emitted by the wizard and
+     * is never accepted as policy or customer configuration.
+     */
+    "preflight.microphone-verification",
+    "preflight.face-detected",
+    "preflight.camera-photo",
+    "preflight.completed",
+    /**
+     * Proctored writing-answer events, emitted by
+     * @a4anthony/proctorkit-vue's <ProctoredTextarea> via
+     * client.recordTextAnswer(). They capture HOW a written answer was
+     * produced (the integrity signals) — the answer TEXT itself is owned
+     * by the integrator (saved through their own backend via the
+     * component's saveAnswer hook); the proctoring server stores only
+     * these signals plus, when persistAnswer is on, content checkpoints.
+     *
+     * Every payload carries `questionId` so multiple writing questions in
+     * one session stay separable. The server materialises them into a
+     * per-answer outcome row (paste ratio, active typing time, synthetic-
+     * input flag, checkpoint history).
+     *
+     *   - text.started — the candidate began (or resumed) an answer.
+     *   - text.paste — a paste into the field. Payload: { questionId,
+     *     length, pastedRatio, blocked, content? }. `content` only when
+     *     the host opted into capturePasteContent (PII-gated).
+     *   - text.copy / text.cut — the candidate copied or cut from the
+     *     field. Payload: { questionId, length, blocked? } where `length`
+     *     is the selection size. `blocked` when the host enforced
+     *     blockCopy / blockCut (the attempt is still recorded).
+     *   - text.keystroke-summary — a sampled window of typing dynamics.
+     *     Payload: { questionId, windowMs, keystrokes, backspaces,
+     *     charsAdded }. Never the keys themselves.
+     *   - text.checkpoint — a periodic snapshot of the answer so a
+     *     reviewer can replay how it grew, and so a refresh can rehydrate
+     *     from the server. Payload: { questionId, savedAt, length,
+     *     content? } (content only when persistAnswer is on).
+     *   - text.focus-lost / text.focus-regained — the candidate left /
+     *     returned to the field mid-answer (distinct from window-level
+     *     focus). Payload carries { questionId, durationMs? }.
+     *   - text.synthetic-input — the answer changed without a
+     *     corresponding keystroke, an untrusted (isTrusted:false) input
+     *     event fired, or a writing-assistant footprint (e.g. Grammarly's
+     *     injected DOM) was seen. Records the footprint for review; it is
+     *     never blocked and is not a guarantee. Payload: { questionId,
+     *     source: "grammarly" | "no-keystroke" | "untrusted-event" }.
+     *   - text.saved / text.save-failed — the host's saveAnswer resolved /
+     *     rejected. save-failed carries a stable { code, reason }.
+     *   - text.submitted — the candidate submitted. Payload: { questionId,
+     *     length, pasteCount, typingMs, syntheticDetected }.
+     */
+    "text.started",
+    "text.paste",
+    "text.copy",
+    "text.cut",
+    "text.keystroke-summary",
+    "text.checkpoint",
+    "text.focus-lost",
+    "text.focus-regained",
+    "text.synthetic-input",
+    "text.saved",
+    "text.save-failed",
+    "text.submitted",
+];
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,iBAAiB;IACjB,mBAAmB;IACnB,uBAAuB;IACvB,eAAe;IACf;;;;;;;;;;;OAWG;IACH,iBAAiB;IACjB;;;;;;;;OAQG;IACH,mBAAmB;IACnB;;;;;;;;;OASG;IACH,oBAAoB;IACpB;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB;IACxB,2BAA2B;IAC3B,iBAAiB;IACjB,oBAAoB;IACpB,WAAW;IACX,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,sBAAsB;IACtB,+BAA+B;IAC/B,8BAA8B;IAC9B,wBAAwB;IACxB,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,aAAa;IACb;;;;;;;OAOG;IACH,aAAa;IACb,oBAAoB;IACpB,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,oBAAoB;IACpB,kBAAkB;IAClB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,4BAA4B;IAC5B,gCAAgC;IAChC,gCAAgC;IAChC,oCAAoC;IACpC,6BAA6B;IAC7B,4BAA4B;IAC5B,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,0BAA0B;IAC1B,0BAA0B;IAC1B,iCAAiC;IACjC,gCAAgC;IAChC,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,wBAAwB;IACxB,uBAAuB;IACvB,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,6BAA6B;IAC7B,iCAAiC;IACjC,4BAA4B;IAC5B,kCAAkC;IAClC,wBAAwB;IACxB,uBAAuB;IACvB,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,6BAA6B;IAC7B,iCAAiC;IACjC,4BAA4B;IAC5B,kCAAkC;IAClC,qBAAqB;IACrB,kBAAkB;IAClB,cAAc;IACd,YAAY;IACZ,qBAAqB;IACrB,gBAAgB;IAChB,qBAAqB;IACrB,sBAAsB;IACtB,wBAAwB;IACxB,WAAW;IACX,eAAe;IACf,eAAe;IACf,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;IACpB,wBAAwB;IACxB;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB;IACxB,qBAAqB;IACrB,yBAAyB;IACzB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,+BAA+B;IAC/B,8BAA8B;IAC9B,+BAA+B;IAC/B,8BAA8B;IAC9B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,uBAAuB;IACvB,2BAA2B;IAC3B,kCAAkC;IAClC,oCAAoC;IACpC,mCAAmC;IACnC,kCAAkC;IAClC,2CAA2C;IAC3C,2CAA2C;IAC3C,sBAAsB;IACtB,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,qEAAqE;IACrE,qEAAqE;IACrE,iEAAiE;IACjE,sEAAsE;IACtE,kDAAkD;IAClD,mBAAmB;IACnB,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,yBAAyB;IACzB;;;;;OAKG;IACH,8BAA8B;IAC9B;;;;;;;OAOG;IACH,2BAA2B;IAC3B;;;;;OAKG;IACH,mCAAmC;IACnC,yBAAyB;IACzB,wBAAwB;IACxB,qBAAqB;IACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0CG;IACH,cAAc;IACd,YAAY;IACZ,WAAW;IACX,UAAU;IACV,wBAAwB;IACxB,iBAAiB;IACjB,iBAAiB;IACjB,qBAAqB;IACrB,sBAAsB;IACtB,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;CACR,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./events.js";
+export * from "./session.js";
+export * from "./api.js";
+export * from "./worker-protocol.js";
+export * from "./production-safety.js";
+export * from "./status.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export * from "./events.js";
+export * from "./session.js";
+export * from "./api.js";
+export * from "./worker-protocol.js";
+export * from "./production-safety.js";
+export * from "./status.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC"}

package/dist/production-safety.d.ts

@@ -0,0 +1,15 @@
+export type EnvLike = Record<string, string | undefined>;
+export declare const PRODUCTION_DESTRUCTIVE_ACTIONS_OVERRIDE = "ALLOW_PRODUCTION_DESTRUCTIVE_ACTIONS";
+export declare const PRODUCTION_PUBLIC_SESSION_RESET_FLAG = "ALLOW_PRODUCTION_PUBLIC_SESSION_RESET";
+export declare const PRODUCTION_PUBLIC_SESSION_DELETE_FLAG = "ALLOW_PRODUCTION_PUBLIC_SESSION_DELETE";
+export declare const PRODUCTION_DASHBOARD_SESSION_DELETE_FLAG = "ALLOW_PRODUCTION_DASHBOARD_SESSION_DELETE";
+export declare const PRODUCTION_ADMIN_DESTRUCTIVE_ACTIONS_FLAG = "ALLOW_PRODUCTION_ADMIN_DESTRUCTIVE_ACTIONS";
+export declare const PRODUCTION_DEMO_SESSION_CLEANUP_FLAG = "ALLOW_PRODUCTION_DEMO_SESSION_CLEANUP";
+export declare const LOCAL_PREVIEW_DATABASE_FLAG = "ALLOW_LOCAL_PREVIEW_DATABASE";
+export declare function isProductionRuntime(env?: EnvLike): boolean;
+export declare function envFlagEnabled(value: string | undefined): boolean;
+export declare function productionActionAllowed(env: EnvLike, featureFlag: string): boolean;
+export declare function productionActionBlockReason(env: EnvLike, action: string, featureFlag: string): string | null;
+export declare function productionDatabaseSafetyIssues(env: EnvLike): string[];
+export declare function assertProductionDatabaseSafety(env: EnvLike): void;
+//# sourceMappingURL=production-safety.d.ts.map

package/dist/production-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-safety.d.ts","sourceRoot":"","sources":["../src/production-safety.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAEzD,eAAO,MAAM,uCAAuC,yCACZ,CAAC;AACzC,eAAO,MAAM,oCAAoC,0CACR,CAAC;AAC1C,eAAO,MAAM,qCAAqC,2CACR,CAAC;AAC3C,eAAO,MAAM,wCAAwC,8CACR,CAAC;AAC9C,eAAO,MAAM,yCAAyC,+CACR,CAAC;AAC/C,eAAO,MAAM,oCAAoC,0CACR,CAAC;AAC1C,eAAO,MAAM,2BAA2B,iCAAiC,CAAC;AAE1E,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,OAAY,GAAG,OAAO,CAE9D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGjE;AAED,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAMT;AAED,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,IAAI,CAOf;AAED,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAkDrE;AAED,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAIjE"}

package/dist/production-safety.js

@@ -0,0 +1,110 @@
+export const PRODUCTION_DESTRUCTIVE_ACTIONS_OVERRIDE = "ALLOW_PRODUCTION_DESTRUCTIVE_ACTIONS";
+export const PRODUCTION_PUBLIC_SESSION_RESET_FLAG = "ALLOW_PRODUCTION_PUBLIC_SESSION_RESET";
+export const PRODUCTION_PUBLIC_SESSION_DELETE_FLAG = "ALLOW_PRODUCTION_PUBLIC_SESSION_DELETE";
+export const PRODUCTION_DASHBOARD_SESSION_DELETE_FLAG = "ALLOW_PRODUCTION_DASHBOARD_SESSION_DELETE";
+export const PRODUCTION_ADMIN_DESTRUCTIVE_ACTIONS_FLAG = "ALLOW_PRODUCTION_ADMIN_DESTRUCTIVE_ACTIONS";
+export const PRODUCTION_DEMO_SESSION_CLEANUP_FLAG = "ALLOW_PRODUCTION_DEMO_SESSION_CLEANUP";
+export const LOCAL_PREVIEW_DATABASE_FLAG = "ALLOW_LOCAL_PREVIEW_DATABASE";
+export function isProductionRuntime(env = {}) {
+    return env["NODE_ENV"] === "production" || env["APP_ENV"] === "production";
+}
+export function envFlagEnabled(value) {
+    const v = value?.trim().toLowerCase();
+    return v === "true" || v === "1" || v === "yes" || v === "on";
+}
+export function productionActionAllowed(env, featureFlag) {
+    if (!isProductionRuntime(env))
+        return true;
+    return (envFlagEnabled(env[featureFlag]) ||
+        envFlagEnabled(env[PRODUCTION_DESTRUCTIVE_ACTIONS_OVERRIDE]));
+}
+export function productionActionBlockReason(env, action, featureFlag) {
+    if (productionActionAllowed(env, featureFlag))
+        return null;
+    return (`${action} is disabled in production. Set ${featureFlag}=true for this ` +
+        `specific path, or ${PRODUCTION_DESTRUCTIVE_ACTIONS_OVERRIDE}=true for a ` +
+        "short break-glass window.");
+}
+export function productionDatabaseSafetyIssues(env) {
+    if (!isProductionRuntime(env))
+        return [];
+    const raw = env["DATABASE_URL"];
+    if (!raw)
+        return ["DATABASE_URL must be set in production"];
+    const parsed = parseDatabaseUrl(raw);
+    if (!parsed) {
+        return ["DATABASE_URL must be a parseable PostgreSQL connection URL"];
+    }
+    const issues = [];
+    const host = parsed.hostname.toLowerCase();
+    const allowLocalPreviewDatabase = env["APP_ENV"] !== "production" &&
+        envFlagEnabled(env[LOCAL_PREVIEW_DATABASE_FLAG]);
+    if (!allowLocalPreviewDatabase &&
+        (host === "localhost" ||
+            host === "127.0.0.1" ||
+            host === "0.0.0.0" ||
+            host === "::1" ||
+            host === "[::1]")) {
+        issues.push("DATABASE_URL must not point at localhost in production");
+    }
+    if (parsed.database.endsWith("_test")) {
+        issues.push("DATABASE_URL must not point at a *_test database in production");
+    }
+    if (!allowLocalPreviewDatabase &&
+        parsed.username === "proctorkit" &&
+        parsed.password === "proctorkit") {
+        issues.push("DATABASE_URL must not use the default local credentials");
+    }
+    if (!allowLocalPreviewDatabase && envFlagEnabled(env["REQUIRE_DATABASE_SSL"])) {
+        const sslMode = parsed.searchParams["sslmode"]?.toLowerCase();
+        if (!sslMode || sslMode === "disable") {
+            issues.push("DATABASE_URL must include sslmode=require or stronger when REQUIRE_DATABASE_SSL=true");
+        }
+    }
+    return issues;
+}
+export function assertProductionDatabaseSafety(env) {
+    const issues = productionDatabaseSafetyIssues(env);
+    if (issues.length === 0)
+        return;
+    throw new Error(`Unsafe production database configuration:\n- ${issues.join("\n- ")}`);
+}
+function parseDatabaseUrl(raw) {
+    const match = raw.match(/^[a-z][a-z0-9+.-]*:\/\/(?:(?<auth>[^@/?#]*)@)?(?<host>\[[^\]]+\]|[^/:?#]+)(?::\d+)?\/(?<path>[^?#]*)(?:\?(?<query>[^#]*))?/i);
+    if (!match?.groups?.["host"] || !match.groups["path"])
+        return null;
+    const auth = match.groups["auth"] ?? "";
+    const authParts = auth.split(":");
+    const username = decodeUrlPart(authParts[0] ?? "");
+    const password = decodeUrlPart(authParts.slice(1).join(":"));
+    const database = decodeUrlPart(match.groups["path"].replace(/^\/+/, ""));
+    return {
+        hostname: match.groups["host"],
+        username,
+        password,
+        database,
+        searchParams: parseQuery(match.groups["query"] ?? ""),
+    };
+}
+function parseQuery(raw) {
+    const out = {};
+    for (const part of raw.split("&")) {
+        if (!part)
+            continue;
+        const eq = part.indexOf("=");
+        const key = decodeUrlPart(eq === -1 ? part : part.slice(0, eq));
+        const value = decodeUrlPart(eq === -1 ? "" : part.slice(eq + 1));
+        if (key)
+            out[key] = value;
+    }
+    return out;
+}
+function decodeUrlPart(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return value;
+    }
+}
+//# sourceMappingURL=production-safety.js.map

package/dist/production-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-safety.js","sourceRoot":"","sources":["../src/production-safety.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,uCAAuC,GAClD,sCAAsC,CAAC;AACzC,MAAM,CAAC,MAAM,oCAAoC,GAC/C,uCAAuC,CAAC;AAC1C,MAAM,CAAC,MAAM,qCAAqC,GAChD,wCAAwC,CAAC;AAC3C,MAAM,CAAC,MAAM,wCAAwC,GACnD,2CAA2C,CAAC;AAC9C,MAAM,CAAC,MAAM,yCAAyC,GACpD,4CAA4C,CAAC;AAC/C,MAAM,CAAC,MAAM,oCAAoC,GAC/C,uCAAuC,CAAC;AAC1C,MAAM,CAAC,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAE1E,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE;IACnD,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAyB;IACtD,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,GAAY,EACZ,WAAmB;IAEnB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CACL,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChC,cAAc,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,GAAY,EACZ,MAAc,EACd,WAAmB;IAEnB,IAAI,uBAAuB,CAAC,GAAG,EAAE,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,CACL,GAAG,MAAM,mCAAmC,WAAW,iBAAiB;QACxE,qBAAqB,uCAAuC,cAAc;QAC1E,2BAA2B,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,GAAY;IACzD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,4DAA4D,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,yBAAyB,GAC7B,GAAG,CAAC,SAAS,CAAC,KAAK,YAAY;QAC/B,cAAc,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAEnD,IACE,CAAC,yBAAyB;QAC1B,CAAC,IAAI,KAAK,WAAW;YACnB,IAAI,KAAK,WAAW;YACpB,IAAI,KAAK,SAAS;YAClB,IAAI,KAAK,KAAK;YACd,IAAI,KAAK,OAAO,CAAC,EACnB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAChF,CAAC;IAED,IACE,CAAC,yBAAyB;QAC1B,MAAM,CAAC,QAAQ,KAAK,YAAY;QAChC,MAAM,CAAC,QAAQ,KAAK,YAAY,EAChC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,CAAC,yBAAyB,IAAI,cAAc,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;QAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CACT,sFAAsF,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,GAAY;IACzD,MAAM,MAAM,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,IAAI,KAAK,CAAC,gDAAgD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzF,CAAC;AAUD,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CACrB,6HAA6H,CAC9H,CAAC;IACF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAEzE,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAC9B,QAAQ;QACR,QAAQ;QACR,QAAQ;QACR,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/session.d.ts

@@ -0,0 +1,11 @@
+export type SessionStatus = "pending" | "active" | "ended" | "abandoned";
+export interface Session {
+    id: string;
+    candidateId: string;
+    orgId: string;
+    status: SessionStatus;
+    startedAt: number | null;
+    endedAt: number | null;
+    metadata?: Record<string, unknown>;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;AAEzE,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC"}

package/dist/session.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":""}