@a5c-ai/comm-adapter 6.0.2 → 6.0.3-staging.00bdadd67cf1

package/dist/__tests__/e2e-gate3-credential.e2e.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/e2e-gate3-credential.e2e.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e-gate3-credential.e2e.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/e2e-gate3-credential.e2e.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/e2e-gate3-credential.e2e.test.js

@@ -0,0 +1,191 @@
+/**
+ * Milestone E — END-TO-END: GATE 3 credential backstop on a REAL spawn (§9.3 / AC-23a /
+ * AC-40 / AC-49 / AC-50). Carry-forward from Milestone D, exercised end-to-end here.
+ *
+ * Frozen tests authored STRICTLY from docs/design/proof-based-policy-enforcement.md. GATE 3
+ * is the LAST point before exec (§9.3): with a VALID CommandAuthorization whose
+ * credentialScope matches, the scoped credential IS delivered by its channel; with
+ * none/invalid, the scoped credential is NOT delivered (env dropped, `-v` mount omitted,
+ * secret/serviceaccount ref stripped), and if required the spawn is denied.
+ *
+ * This drives the REAL wired spawn path: it constructs a real signed authorization + a real
+ * trusted credential→scope source, builds a `Gate3Options`, and feeds it into the SHIPPED
+ * `buildInvocationCommand` (docker / k8s), asserting the credential is (or is not) present in
+ * the emitted invocation across env AND mount/serviceaccount channels — the policyGate3 /
+ * scopedEnvKeys surface. Uses real Ed25519 keys + the shipped envelope primitives; no mocks.
+ *
+ * MODULE PATHS: shipped primitives import from `@a5c-ai/policy-adapter` + `@a5c-ai/genty-core`;
+ * the GATE-3 spawn surface imports from `../spawn-invocation.js`. Resolution may fail until
+ * the wiring lands — expected. NO syntax errors.
+ */
+import { describe, it, expect } from 'vitest';
+import { createHash } from 'node:crypto';
+import { createKeyPair, signPayload } from '@a5c-ai/trust-core';
+import { argsHash as computeArgsHash, commandHash as computeCommandHash, canonicalizeCredentialIdentity, } from '@a5c-ai/policy-adapter';
+import { buildInvocationCommand, CredentialGateDenied } from '../spawn-invocation.js';
+const sha256 = (s) => createHash('sha256').update(s).digest('hex');
+const CA_FIELDS = [
+    'payloadType',
+    'policyId',
+    'policyDocHash',
+    'configEpoch',
+    'matchedChainId',
+    'toolName',
+    'toolCallId',
+    'commandHash',
+    'argsHash',
+    'credentialScope',
+    'evidenceFingerprints',
+    'evidenceEnvelopeHashes',
+    'evidenceStepBindings',
+    'issuedAt',
+    'expiresAt',
+];
+const TOOL = 'Bash';
+const TOOL_CALL_ID = 'call_aws_rm';
+const COMMAND = 'aws s3 rm s3://prod-bucket/secret';
+const ARGS = { command: COMMAND };
+const CRED_SCOPE = 'aws:prod:s3-rw';
+const POLICY_DOC_HASH = sha256('policy-doc-bytes');
+const CONFIG_EPOCH = 5;
+const MIN_EPOCH = 5;
+// The trusted out-of-agent credential→scope source (AC-40 / AC-40a / AC-55). Keyed by the
+// COLLISION-RESISTANT canonical identity (sha256 of the stable secret-store id). Two aliases
+// (ARN + key-id) of ONE physical credential resolve to one identity → one scope (AC-55).
+const STABLE_ID = 'kms:key/prod-s3-rw';
+const IDENTITY = canonicalizeCredentialIdentity(STABLE_ID);
+const CRED_ALIAS = 'arn:aws:kms:us-east-1:123:key/prod-s3-rw';
+const CRED_SOURCE = {
+    aliasMap: {
+        [CRED_ALIAS]: STABLE_ID,
+        'key-id:prod-s3-rw': STABLE_ID,
+    },
+    scopeByIdentity: { [IDENTITY]: CRED_SCOPE },
+    ambiguousIdentities: [],
+};
+const ISSUER = createKeyPair();
+const ISSUER_ROOT = {
+    fingerprint: ISSUER.fingerprint,
+    kind: 'engine',
+    publicKey: ISSUER.publicKey,
+    label: 'policy-adapter-issuer',
+};
+/**
+ * A REAL, signed CommandAuthorization bound to the exact tool call + command + scope.
+ * `issuedAt` is back-dated a few seconds so the gate's `now >= issuedAt` bound holds even
+ * when the gate's `now` was captured slightly before this envelope was signed (avoids a
+ * millisecond-boundary flake); `expiresAt` stays well in the future.
+ */
+function signAuthorization(over = {}) {
+    const now = Date.now();
+    const payload = {
+        payloadType: 'command-authorization',
+        policyId: 'aws-prod-write',
+        policyDocHash: POLICY_DOC_HASH,
+        configEpoch: CONFIG_EPOCH,
+        matchedChainId: 'human-plus-opus',
+        toolName: TOOL,
+        toolCallId: TOOL_CALL_ID,
+        commandHash: computeCommandHash(COMMAND),
+        argsHash: computeArgsHash(ARGS),
+        credentialScope: CRED_SCOPE,
+        evidenceFingerprints: ['fp-human', 'fp-proxy'],
+        evidenceEnvelopeHashes: [sha256('human-env'), sha256('model-env')],
+        evidenceStepBindings: [
+            { stepIndex: 0, requiredKind: 'human-approval', envelopeHash: sha256('human-env') },
+            { stepIndex: 1, requiredKind: 'model-decision', envelopeHash: sha256('model-env') },
+        ],
+        issuedAt: new Date(now - 5_000).toISOString(),
+        expiresAt: new Date(now + 120_000).toISOString(),
+        ...over,
+    };
+    return signPayload(ISSUER.privateKey, ISSUER.fingerprint, payload, CA_FIELDS);
+}
+/** Return a resolver that always yields the SAME pre-signed authorization (stable issuedAt). */
+function constant(auth) {
+    return () => auth;
+}
+/** A Gate3Options that gates the scoped env var + a scoped docker `-v` mount. */
+function makeGate3(resolveAuthorization, scoped = {}) {
+    return {
+        issuerRoots: [ISSUER_ROOT],
+        policyDocHash: POLICY_DOC_HASH,
+        currentConfigEpoch: CONFIG_EPOCH,
+        minEpochFloor: MIN_EPOCH,
+        now: Date.now(),
+        toolName: TOOL,
+        toolCallId: TOOL_CALL_ID,
+        command: COMMAND,
+        args: ARGS,
+        credentialSource: CRED_SOURCE,
+        resolveAuthorization,
+        scopedEnvKeys: scoped.scopedEnvKeys ?? { AWS_SESSION_TOKEN: { alias: CRED_ALIAS } },
+        ...(scoped.scopedMounts ? { scopedMounts: scoped.scopedMounts } : {}),
+        ...(scoped.scopedServiceAccount ? { scopedServiceAccount: scoped.scopedServiceAccount } : {}),
+    };
+}
+/** A fresh mutable SpawnArgs per call (avoids readonly-array assignability issues). */
+function spawnArgs(env = { AWS_SESSION_TOKEN: 'the-secret', PATH: '/usr/bin' }) {
+    return {
+        command: 'claude',
+        args: ['--print', 'hi'],
+        env: { ...env },
+        cwd: '/repo',
+        usePty: false,
+    };
+}
+describe('Milestone E — GATE 3 credential backstop on a real spawn (AC-23a / AC-40 / AC-50)', () => {
+    it('ALLOW path: a VALID authorization → the scoped credential IS injected into the docker -e channel', () => {
+        const gate3 = makeGate3(constant(signAuthorization()));
+        const out = buildInvocationCommand({ mode: 'docker', image: 'img:1' }, spawnArgs(), 'claude', gate3);
+        // The scoped credential is delivered.
+        expect(out.args).toContain('AWS_SESSION_TOKEN=the-secret');
+        // The ordinary (non-credential) env var still passes through.
+        expect(out.args).toContain('PATH=/usr/bin');
+    });
+    it('DENY (env): NO authorization → the scoped env credential is NOT injected (channel omitted)', () => {
+        const gate3 = makeGate3(() => undefined);
+        const out = buildInvocationCommand({ mode: 'docker', image: 'img:1' }, spawnArgs(), 'claude', gate3);
+        expect(out.args).not.toContain('AWS_SESSION_TOKEN=the-secret');
+        // Non-credential env passes through — only the scoped credential is dropped.
+        expect(out.args).toContain('PATH=/usr/bin');
+    });
+    it('DENY (env): an authorization for a DIFFERENT scope → the scoped env credential is NOT injected', () => {
+        // The authorization binds a broader/other scope than the trusted source resolves for the
+        // credential (AC-40: the agent cannot relabel a broad credential as the narrow scope).
+        const gate3 = makeGate3(constant(signAuthorization({ credentialScope: 'aws:prod:other' })));
+        const out = buildInvocationCommand({ mode: 'docker', image: 'img:1' }, spawnArgs(), 'claude', gate3);
+        expect(out.args).not.toContain('AWS_SESSION_TOKEN=the-secret');
+    });
+    it('DENY (env): a TAMPERED command after issuance → hash mismatch → scoped credential NOT injected (TOCTOU, AC-32)', () => {
+        // The authorization binds COMMAND, but the gate context now spawns a DIFFERENT command.
+        const gate3 = { ...makeGate3(constant(signAuthorization())), command: 'aws s3 rm s3://prod-bucket/OTHER' };
+        const out = buildInvocationCommand({ mode: 'docker', image: 'img:1' }, spawnArgs(), 'claude', gate3);
+        expect(out.args).not.toContain('AWS_SESSION_TOKEN=the-secret');
+    });
+    it('ALLOW + DENY (mount, AC-50): a scoped docker -v mount is injected with a valid auth and OMITTED without', () => {
+        const MOUNT = '/host/creds:/creds:ro';
+        const scoped = { scopedMounts: { [MOUNT]: { alias: CRED_ALIAS } } };
+        const allowed = buildInvocationCommand({ mode: 'docker', image: 'img:1', volumes: [MOUNT] }, spawnArgs({}), 'claude', makeGate3(constant(signAuthorization()), scoped));
+        expect(allowed.args).toContain(MOUNT);
+        const denied = buildInvocationCommand({ mode: 'docker', image: 'img:1', volumes: [MOUNT] }, spawnArgs({}), 'claude', makeGate3(() => undefined, scoped));
+        expect(denied.args).not.toContain(MOUNT);
+    });
+    it('DENY (required): a REQUIRED scoped credential with no authorization → the spawn is DENIED (CredentialGateDenied)', () => {
+        const gate3 = makeGate3(() => undefined, { scopedEnvKeys: { AWS_SESSION_TOKEN: { alias: CRED_ALIAS, required: true } } });
+        expect(() => buildInvocationCommand({ mode: 'docker', image: 'img:1' }, spawnArgs(), 'claude', gate3)).toThrow(CredentialGateDenied);
+    });
+    it('AC-40 (untrusted alias): a credential whose alias is NOT in the trusted source → NOT injected (fail closed)', () => {
+        const gate3 = makeGate3(constant(signAuthorization()), {
+            scopedEnvKeys: { AWS_SESSION_TOKEN: { alias: 'agent-supplied-unknown-alias' } },
+        });
+        const out = buildInvocationCommand({ mode: 'docker', image: 'img:1' }, spawnArgs(), 'claude', gate3);
+        expect(out.args).not.toContain('AWS_SESSION_TOKEN=the-secret');
+    });
+    it('back-compat: with NO gate3 (anchor unpinned) every channel emits unchanged', () => {
+        const out = buildInvocationCommand({ mode: 'docker', image: 'img:1' }, spawnArgs(), 'claude', undefined);
+        // Without a gate, the scoped credential is NOT dropped (no enforcement, pre-Milestone-D posture).
+        expect(out.args).toContain('AWS_SESSION_TOKEN=the-secret');
+    });
+});
+//# sourceMappingURL=e2e-gate3-credential.e2e.test.js.map

package/dist/__tests__/e2e-gate3-credential.e2e.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e-gate3-credential.e2e.test.js","sourceRoot":"","sources":["../../src/__tests__/e2e-gate3-credential.e2e.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EACL,QAAQ,IAAI,eAAe,EAC3B,WAAW,IAAI,kBAAkB,EACjC,8BAA8B,GAI/B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAqB,MAAM,wBAAwB,CAAC;AAGzG,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnF,MAAM,SAAS,GAAG;IAChB,aAAa;IACb,UAAU;IACV,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,UAAU;IACV,YAAY;IACZ,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,UAAU;IACV,WAAW;CACZ,CAAC;AAEF,MAAM,IAAI,GAAG,MAAM,CAAC;AACpB,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,OAAO,GAAG,mCAAmC,CAAC;AACpD,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,eAAe,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;AACnD,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,0FAA0F;AAC1F,6FAA6F;AAC7F,yFAAyF;AACzF,MAAM,SAAS,GAAG,oBAAoB,CAAC;AACvC,MAAM,QAAQ,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;AAC3D,MAAM,UAAU,GAAG,0CAA0C,CAAC;AAC9D,MAAM,WAAW,GAA0B;IACzC,QAAQ,EAAE;QACR,CAAC,UAAU,CAAC,EAAE,SAAS;QACvB,mBAAmB,EAAE,SAAS;KAC/B;IACD,eAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE;IAC3C,mBAAmB,EAAE,EAAE;CACxB,CAAC;AAEF,MAAM,MAAM,GAAoB,aAAa,EAAE,CAAC;AAChD,MAAM,WAAW,GAAc;IAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;IAC/B,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,KAAK,EAAE,uBAAuB;CAC/B,CAAC;AAEF;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,OAA6C,EAAE;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAgC;QAC3C,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,gBAAgB;QAC1B,aAAa,EAAE,eAAe;QAC9B,WAAW,EAAE,YAAY;QACzB,cAAc,EAAE,iBAAiB;QACjC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,YAAY;QACxB,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACxC,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC;QAC/B,eAAe,EAAE,UAAU;QAC3B,oBAAoB,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;QAC9C,sBAAsB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAClE,oBAAoB,EAAE;YACpB,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE;YACnF,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE;SACpF;QACD,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;QAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE;QAChD,GAAG,IAAI;KACR,CAAC;IACF,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAChF,CAAC;AAED,gGAAgG;AAChG,SAAS,QAAQ,CACf,IAAiD;IAEjD,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAChB,oBAAmF,EACnF,SAAiG,EAAE;IAEnG,OAAO;QACL,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,aAAa,EAAE,eAAe;QAC9B,kBAAkB,EAAE,YAAY;QAChC,aAAa,EAAE,SAAS;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,WAAW;QAC7B,oBAAoB;QACpB,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;QACnF,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAS,SAAS,CAAC,MAA8B,EAAE,iBAAiB,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE;IACpG,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;QACvB,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE;QACf,GAAG,EAAE,OAAO;QACZ,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,mFAAmF,EAAE,GAAG,EAAE;IACjG,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;QAC1G,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrG,sCAAsC;QACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAC3D,8DAA8D;QAC9D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAC/D,6EAA6E;QAC7E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,yFAAyF;QACzF,uFAAuF;QACvF,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gHAAgH,EAAE,GAAG,EAAE;QACxH,wFAAwF;QACxF,MAAM,KAAK,GAAiB,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;QACzH,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yGAAyG,EAAE,GAAG,EAAE;QACjH,MAAM,KAAK,GAAG,uBAAuB,CAAC;QACtC,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAEpE,MAAM,OAAO,GAAG,sBAAsB,CACpC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EACpD,SAAS,CAAC,EAAE,CAAC,EACb,QAAQ,EACR,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,EAAE,MAAM,CAAC,CACjD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,sBAAsB,CACnC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EACpD,SAAS,CAAC,EAAE,CAAC,EACb,QAAQ,EACR,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CACnC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kHAAkH,EAAE,GAAG,EAAE;QAC1H,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1H,MAAM,CAAC,GAAG,EAAE,CACV,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CACzF,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6GAA6G,EAAE,GAAG,EAAE;QACrH,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,EAAE;YACrD,aAAa,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE;SAChF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzG,kGAAkG;QAClG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/policy-credential-gate.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/policy-credential-gate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-credential-gate.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/policy-credential-gate.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/policy-credential-gate.test.js

@@ -0,0 +1,327 @@
+/**
+ * Milestone D — GATE 3 (credential injection backstop, spawn-invocation).
+ *
+ * Frozen tests authored strictly from docs/design/proof-based-policy-enforcement.md:
+ *   §9.3 / AC-23a — a credential about to be delivered by ANY channel spawn-invocation.ts
+ *                   controls (docker -e env, docker -v mount, ssh K=V, k8s env / --env,
+ *                   k8s secret/serviceaccount) is tagged with a credentialScope from the
+ *                   trusted out-of-agent source; before delivery GATE 3 requires a valid
+ *                   CommandAuthorization whose credentialScope matches. NO valid
+ *                   authorization → the scoped credential is NOT delivered (env dropped,
+ *                   -v mount omitted, secret/serviceaccount ref stripped), and if the
+ *                   policy marks it required, the spawn is denied. GATE 3 RECOMPUTES
+ *                   argsHash/commandHash (the last point before exec) and re-checks them.
+ *   §9.3 / AC-40  — the credential→scope mapping comes from a source OUTSIDE the agent
+ *                   process; the agent MUST NOT be able to assert a narrower scope for a
+ *                   broader credential. No scope in the trusted source for a scoped cred →
+ *                   deny (fail closed), never inject untagged.
+ *   §9.3 / AC-40a — the credential IDENTITY is collision-resistant (sha256 of the stable
+ *                   secret-store id), never the value prefix / env-var name / agent alias;
+ *                   an ambiguous or absent identity → deny (never guess, never the narrower).
+ *   §9.3 / AC-50  — GATE 3 mediates env + docker -v mount + k8s secret/serviceaccount;
+ *                   substrate-delivered credentials (IMDS/IRSA, pre-existing mounts, image
+ *                   creds) are a BOUNDED, WARNED non-goal — the evaluator refuses to claim
+ *                   a GATE-3 backstop for such an action.
+ *   §14  / AC-55  — a KMS credential referenced by two aliases (ARN + key-id) canonicalizes
+ *                   to ONE identity → one scope (not falsely denied).
+ *
+ * MODULE PATHS: shipped primitives import from `@a5c-ai/policy-adapter`; the intended
+ * Milestone-D credential gate imports from `../policy-credential-gate.js`. Resolution may
+ * fail until Milestone D lands — expected. NO syntax errors.
+ */
+import { describe, it, expect } from 'vitest';
+import { createHash } from 'node:crypto';
+import { createKeyPair, signPayload } from '@a5c-ai/trust-core';
+import { argsHash as computeArgsHash, commandHash as computeCommandHash, canonicalizeCredentialIdentity, } from '@a5c-ai/policy-adapter';
+// Intended Milestone-D GATE-3 credential-injection gate (§9.3, AC-23a/AC-40/AC-50).
+import { gateCredentialInjection } from '../policy-credential-gate.js';
+const sha256 = (s) => createHash('sha256').update(s).digest('hex');
+const CA_FIELDS = [
+    'payloadType',
+    'policyId',
+    'policyDocHash',
+    'configEpoch',
+    'matchedChainId',
+    'toolName',
+    'toolCallId',
+    'commandHash',
+    'argsHash',
+    'credentialScope',
+    'evidenceFingerprints',
+    'evidenceEnvelopeHashes',
+    'evidenceStepBindings',
+    'issuedAt',
+    'expiresAt',
+];
+const ISSUER = createKeyPair();
+const ISSUER_ROOT = {
+    fingerprint: ISSUER.fingerprint,
+    kind: 'engine',
+    publicKey: ISSUER.publicKey,
+    label: 'issuer',
+};
+const COMMAND = 'aws s3 cp a b';
+const ARGS = { command: COMMAND };
+const CRED_SCOPE = 'aws:prod:s3-ro';
+const POLICY_DOC_HASH = sha256('policy-doc-bytes');
+const CONFIG_EPOCH = 5;
+// The trusted out-of-agent credential→scope source (AC-40/AC-40a/AC-55). Keyed by the
+// COLLISION-RESISTANT canonical identity (sha256 of the stable secret-store id). Two
+// aliases (ARN + key-id) of ONE credential resolve to one identity → one scope (AC-55).
+const STABLE_ID = 'kms:key/prod-s3-ro';
+const IDENTITY = canonicalizeCredentialIdentity(STABLE_ID);
+const CRED_SOURCE = {
+    aliasMap: {
+        'arn:aws:kms:us-east-1:123:key/prod-s3-ro': STABLE_ID,
+        'key-id:prod-s3-ro': STABLE_ID,
+    },
+    scopeByIdentity: { [IDENTITY]: CRED_SCOPE },
+    ambiguousIdentities: [],
+};
+function makeCA(overrides = {}) {
+    const now = Date.now();
+    return {
+        payloadType: 'command-authorization',
+        policyId: 'aws-prod-write',
+        policyDocHash: POLICY_DOC_HASH,
+        configEpoch: CONFIG_EPOCH,
+        matchedChainId: 'human-plus-opus',
+        toolName: 'Bash',
+        toolCallId: 'call_A',
+        commandHash: computeCommandHash(COMMAND),
+        argsHash: computeArgsHash(ARGS),
+        credentialScope: CRED_SCOPE,
+        evidenceFingerprints: ['fp-human', 'fp-proxy'],
+        evidenceEnvelopeHashes: [sha256('human-env'), sha256('model-env')],
+        evidenceStepBindings: [
+            { stepIndex: 0, requiredKind: 'human-approval', envelopeHash: sha256('human-env') },
+            { stepIndex: 1, requiredKind: 'model-decision', envelopeHash: sha256('model-env') },
+        ],
+        issuedAt: new Date(now).toISOString(),
+        expiresAt: new Date(now + 120_000).toISOString(),
+        ...overrides,
+    };
+}
+function signCA(payload) {
+    return signPayload(ISSUER.privateKey, ISSUER.fingerprint, payload, CA_FIELDS);
+}
+function gateInput(opts) {
+    return {
+        issuerRoots: [ISSUER_ROOT],
+        policyDocHash: POLICY_DOC_HASH,
+        currentConfigEpoch: CONFIG_EPOCH,
+        minEpochFloor: CONFIG_EPOCH,
+        now: Date.now(),
+        toolName: 'Bash',
+        toolCallId: 'call_A',
+        // GATE 3 is the LAST point before exec — it recomputes these from the exact spawn.
+        command: opts.command ?? COMMAND,
+        args: opts.args ?? ARGS,
+        credentialSource: opts.source ?? CRED_SOURCE,
+        credentials: opts.credentials,
+        resolveAuthorization: () => opts.authorization,
+    };
+}
+describe('Milestone D — GATE 3 credential injection backstop (AC-23a, AC-40, AC-40a, AC-50, AC-55)', () => {
+    it('AC-23a: a scoped docker -e ENV credential WITH a matching authorization IS injected', () => {
+        const result = gateCredentialInjection(gateInput({
+            authorization: signCA(makeCA()),
+            credentials: [
+                { name: 'AWS_KEY', value: 'secret', alias: 'key-id:prod-s3-ro', channel: 'docker-env' },
+            ],
+        }));
+        expect(result.denied).toBe(false);
+        expect(result.injected.map((c) => c.name)).toContain('AWS_KEY');
+        expect(result.dropped).toHaveLength(0);
+    });
+    it('AC-23a: a scoped docker -e ENV credential WITHOUT authorization is NOT injected (dropped)', () => {
+        const result = gateCredentialInjection(gateInput({
+            authorization: undefined,
+            credentials: [
+                { name: 'AWS_KEY', value: 'secret', alias: 'key-id:prod-s3-ro', channel: 'docker-env' },
+            ],
+        }));
+        expect(result.injected.map((c) => c.name)).not.toContain('AWS_KEY');
+        expect(result.dropped.map((c) => c.name)).toContain('AWS_KEY');
+    });
+    it('AC-50: a scoped docker -v MOUNT credential WITHOUT authorization is OMITTED (mount dropped)', () => {
+        const result = gateCredentialInjection(gateInput({
+            authorization: undefined,
+            credentials: [
+                {
+                    name: '/host/.aws:/root/.aws',
+                    value: '/host/.aws',
+                    alias: 'key-id:prod-s3-ro',
+                    channel: 'docker-mount',
+                },
+            ],
+        }));
+        expect(result.dropped.map((c) => c.channel)).toContain('docker-mount');
+        expect(result.injected).toHaveLength(0);
+    });
+    it('AC-50: a scoped k8s SECRET reference WITHOUT authorization is STRIPPED', () => {
+        const result = gateCredentialInjection(gateInput({
+            authorization: undefined,
+            credentials: [
+                { name: 'prod-s3-secret', value: 'ref', alias: 'key-id:prod-s3-ro', channel: 'k8s-secret' },
+            ],
+        }));
+        expect(result.dropped.map((c) => c.channel)).toContain('k8s-secret');
+        expect(result.injected).toHaveLength(0);
+    });
+    it('AC-50: a scoped k8s SERVICEACCOUNT reference WITHOUT authorization is STRIPPED', () => {
+        const result = gateCredentialInjection(gateInput({
+            authorization: undefined,
+            credentials: [
+                {
+                    name: '--serviceaccount=prod-s3',
+                    value: 'prod-s3',
+                    alias: 'key-id:prod-s3-ro',
+                    channel: 'k8s-serviceaccount',
+                },
+            ],
+        }));
+        expect(result.dropped.map((c) => c.channel)).toContain('k8s-serviceaccount');
+    });
+    it('AC-23a: when a policy marks the scoped credential REQUIRED, no authorization → the spawn is DENIED', () => {
+        const result = gateCredentialInjection(gateInput({
+            authorization: undefined,
+            credentials: [
+                {
+                    name: 'AWS_KEY',
+                    value: 'secret',
+                    alias: 'key-id:prod-s3-ro',
+                    channel: 'docker-env',
+                    required: true,
+                },
+            ],
+        }));
+        expect(result.denied).toBe(true);
+        expect(result.reason).toBeTruthy();
+    });
+    it('AC-23a/AC-32: args MUTATED before exec → GATE-3 recomputed argsHash mismatch → deny (TOCTOU)', () => {
+        // GATE 3 is the last recomputation before exec. The authorization binds argsHash over
+        // ARGS; the actual spawn args were mutated after issuance → the scoped cred is NOT
+        // injected and (required) the spawn is denied.
+        const result = gateCredentialInjection(gateInput({
+            authorization: signCA(makeCA()),
+            args: { command: 'aws s3 rm --recursive s3://prod' },
+            command: 'aws s3 rm --recursive s3://prod',
+            credentials: [
+                {
+                    name: 'AWS_KEY',
+                    value: 'secret',
+                    alias: 'key-id:prod-s3-ro',
+                    channel: 'docker-env',
+                    required: true,
+                },
+            ],
+        }));
+        expect(result.denied).toBe(true);
+    });
+    it('AC-40: an AGENT-SUPPLIED alias absent from the trusted source → no scope → deny (fail closed)', () => {
+        // The agent supplies an alias that is NOT in the trusted alias map, trying to get a
+        // broad credential tagged as the narrow scope. GATE 3 must not inject an untagged cred.
+        const result = gateCredentialInjection(gateInput({
+            authorization: signCA(makeCA()),
+            credentials: [
+                {
+                    name: 'AWS_KEY',
+                    value: 'secret',
+                    alias: 'agent-forged-alias',
+                    channel: 'docker-env',
+                    required: true,
+                },
+            ],
+        }));
+        expect(result.denied).toBe(true);
+    });
+    it('AC-40a: an AMBIGUOUS credential identity (backed by >1 credential) → deny (never the narrower)', () => {
+        const ambiguousSource = {
+            aliasMap: { 'key-id:prod-s3-ro': STABLE_ID },
+            scopeByIdentity: { [IDENTITY]: CRED_SCOPE },
+            ambiguousIdentities: [IDENTITY],
+        };
+        const result = gateCredentialInjection(gateInput({
+            authorization: signCA(makeCA()),
+            source: ambiguousSource,
+            credentials: [
+                {
+                    name: 'AWS_KEY',
+                    value: 'secret',
+                    alias: 'key-id:prod-s3-ro',
+                    channel: 'docker-env',
+                    required: true,
+                },
+            ],
+        }));
+        expect(result.denied).toBe(true);
+    });
+    it('AC-40a: identity is collision-resistant — a credential VALUE prefix is never the scope key', () => {
+        // Two DIFFERENT stable ids must never collide to one identity key; the identity is
+        // sha256 of the stable id, not the value prefix.
+        const idA = canonicalizeCredentialIdentity('kms:key/A');
+        const idB = canonicalizeCredentialIdentity('kms:key/B');
+        expect(idA).not.toBe(idB);
+        expect(idA).toMatch(/^[0-9a-f]{64}$/);
+    });
+    it('AC-55: two aliases (ARN + key-id) of ONE credential resolve to ONE scope (not falsely denied)', () => {
+        const viaArn = gateCredentialInjection(gateInput({
+            authorization: signCA(makeCA()),
+            credentials: [
+                {
+                    name: 'AWS_KEY',
+                    value: 'secret',
+                    alias: 'arn:aws:kms:us-east-1:123:key/prod-s3-ro',
+                    channel: 'docker-env',
+                },
+            ],
+        }));
+        const viaKeyId = gateCredentialInjection(gateInput({
+            authorization: signCA(makeCA()),
+            credentials: [
+                { name: 'AWS_KEY', value: 'secret', alias: 'key-id:prod-s3-ro', channel: 'docker-env' },
+            ],
+        }));
+        // Both aliases resolve to the same scope and are injected under the same authorization.
+        expect(viaArn.denied).toBe(false);
+        expect(viaKeyId.denied).toBe(false);
+        expect(viaArn.injected.map((c) => c.name)).toContain('AWS_KEY');
+        expect(viaKeyId.injected.map((c) => c.name)).toContain('AWS_KEY');
+    });
+    it('AC-50: a scoped action whose credential would arrive via IMDS is a BOUNDED, WARNED non-goal → not claimed as backstopped', () => {
+        // A credential delivered by a substrate channel spawn-invocation does NOT construct
+        // (IMDS/IRSA) cannot be gated. When a policy action declares a scope that could only
+        // arrive via such a channel, the gate MUST emit a warning and MUST NOT claim a GATE-3
+        // backstop (it does not silently allow the scoped action as if backstopped).
+        const result = gateCredentialInjection(gateInput({
+            authorization: signCA(makeCA()),
+            credentials: [
+                {
+                    name: 'AWS_WEB_IDENTITY_TOKEN_FILE',
+                    value: 'imds',
+                    alias: 'key-id:prod-s3-ro',
+                    // A channel GATE 3 cannot mediate — surfaced as an out-of-scope warning.
+                    channel: 'docker-env',
+                },
+            ],
+            source: {
+                aliasMap: { 'key-id:prod-s3-ro': STABLE_ID },
+                scopeByIdentity: {}, // no GATE-3-mediated scope → substrate-delivered
+                ambiguousIdentities: [],
+            },
+        }));
+        // With no mediated scope for a scoped credential, GATE 3 fails closed rather than
+        // injecting an untagged credential (AC-40) and surfaces the non-goal warning (AC-50).
+        expect(result.injected.map((c) => c.name)).not.toContain('AWS_WEB_IDENTITY_TOKEN_FILE');
+        expect(Array.isArray(result.warnings)).toBe(true);
+    });
+    it('any exception during GATE 3 evaluation is a denial / no-injection, never a pass', () => {
+        const result = gateCredentialInjection({
+            // Deliberately malformed input → must fail closed.
+            credentials: [{ name: 'X', value: 'y', alias: 'z', channel: 'docker-env' }],
+        });
+        expect(result.denied || result.injected.length === 0).toBe(true);
+    });
+});
+//# sourceMappingURL=policy-credential-gate.test.js.map

package/dist/__tests__/policy-credential-gate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-credential-gate.test.js","sourceRoot":"","sources":["../../src/__tests__/policy-credential-gate.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EACL,QAAQ,IAAI,eAAe,EAC3B,WAAW,IAAI,kBAAkB,EACjC,8BAA8B,GAI/B,MAAM,wBAAwB,CAAC;AAEhC,oFAAoF;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnF,MAAM,SAAS,GAAG;IAChB,aAAa;IACb,UAAU;IACV,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,UAAU;IACV,YAAY;IACZ,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,UAAU;IACV,WAAW;CACZ,CAAC;AAEF,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;AAC/B,MAAM,WAAW,GAAc;IAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;IAC/B,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,MAAM,OAAO,GAAG,eAAe,CAAC;AAChC,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,eAAe,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;AACnD,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB,sFAAsF;AACtF,qFAAqF;AACrF,wFAAwF;AACxF,MAAM,SAAS,GAAG,oBAAoB,CAAC;AACvC,MAAM,QAAQ,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;AAC3D,MAAM,WAAW,GAA0B;IACzC,QAAQ,EAAE;QACR,0CAA0C,EAAE,SAAS;QACrD,mBAAmB,EAAE,SAAS;KAC/B;IACD,eAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE;IAC3C,mBAAmB,EAAE,EAAE;CACxB,CAAC;AAEF,SAAS,MAAM,CAAC,YAAkD,EAAE;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACL,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,gBAAgB;QAC1B,aAAa,EAAE,eAAe;QAC9B,WAAW,EAAE,YAAY;QACzB,cAAc,EAAE,iBAAiB;QACjC,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACxC,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC;QAC/B,eAAe,EAAE,UAAU;QAC3B,oBAAoB,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;QAC9C,sBAAsB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAClE,oBAAoB,EAAE;YACpB,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE;YACnF,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE;SACpF;QACD,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACrC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE;QAChD,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,OAAoC;IAClD,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAChF,CAAC;AAkBD,SAAS,SAAS,CAAC,IAMlB;IACC,OAAO;QACL,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,aAAa,EAAE,eAAe;QAC9B,kBAAkB,EAAE,YAAY;QAChC,aAAa,EAAE,YAAY;QAC3B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACf,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,QAAQ;QACpB,mFAAmF;QACnF,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,gBAAgB,EAAE,IAAI,CAAC,MAAM,IAAI,WAAW;QAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa;KAC/C,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACxG,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/B,WAAW,EAAE;gBACX,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE;aACxF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,SAAS;YACxB,WAAW,EAAE;gBACX,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE;aACxF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,SAAS;YACxB,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,uBAAuB;oBAC7B,KAAK,EAAE,YAAY;oBACnB,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,cAAc;iBACxB;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,SAAS;YACxB,WAAW,EAAE;gBACX,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE;aAC5F;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,SAAS;YACxB,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,0BAA0B;oBAChC,KAAK,EAAE,SAAS;oBAChB,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,oBAAoB;iBAC9B;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,GAAG,EAAE;QAC5G,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,SAAS;YACxB,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,YAAY;oBACrB,QAAQ,EAAE,IAAI;iBACf;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,GAAG,EAAE;QACtG,sFAAsF;QACtF,mFAAmF;QACnF,+CAA+C;QAC/C,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE;YACpD,OAAO,EAAE,iCAAiC;YAC1C,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,YAAY;oBACrB,QAAQ,EAAE,IAAI;iBACf;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,oFAAoF;QACpF,wFAAwF;QACxF,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/B,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,YAAY;oBACrB,QAAQ,EAAE,IAAI;iBACf;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,MAAM,eAAe,GAA0B;YAC7C,QAAQ,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE;YAC5C,eAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE;YAC3C,mBAAmB,EAAE,CAAC,QAAQ,CAAC;SAChC,CAAC;QACF,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,YAAY;oBACrB,QAAQ,EAAE,IAAI;iBACf;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,mFAAmF;QACnF,iDAAiD;QACjD,MAAM,GAAG,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/B,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,0CAA0C;oBACjD,OAAO,EAAE,YAAY;iBACtB;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,QAAQ,GAAG,uBAAuB,CACtC,SAAS,CAAC;YACR,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/B,WAAW,EAAE;gBACX,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE;aACxF;SACF,CAAC,CACH,CAAC;QACF,wFAAwF;QACxF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0HAA0H,EAAE,GAAG,EAAE;QAClI,oFAAoF;QACpF,qFAAqF;QACrF,sFAAsF;QACtF,6EAA6E;QAC7E,MAAM,MAAM,GAAG,uBAAuB,CACpC,SAAS,CAAC;YACR,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/B,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,6BAA6B;oBACnC,KAAK,EAAE,MAAM;oBACb,KAAK,EAAE,mBAAmB;oBAC1B,yEAAyE;oBACzE,OAAO,EAAE,YAAY;iBACtB;aACF;YACD,MAAM,EAAE;gBACN,QAAQ,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE;gBAC5C,eAAe,EAAE,EAAE,EAAE,iDAAiD;gBACtE,mBAAmB,EAAE,EAAE;aACxB;SACF,CAAC,CACH,CAAC;QACF,kFAAkF;QAClF,sFAAsF;QACtF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACxF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,mDAAmD;YACnD,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;SACnE,CAAC,CAAC;QACZ,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/policy-pretooluse-gate.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/policy-pretooluse-gate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-pretooluse-gate.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/policy-pretooluse-gate.test.ts"],"names":[],"mappings":""}