@cat-factory/gatekeeper-worker 0.5.0 → 0.6.0

package/dist/gatekeeper.js.map

@@ -1 +1 @@
-{"version":3,"file":"gatekeeper.js","sourceRoot":"","sources":["../src/gatekeeper.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,EAAE;AACF,0FAA0F;AAC1F,6FAA6F;AAC7F,EAAE;AACF,+FAA+F;AAC/F,6FAA6F;AAC7F,2FAA2F;AAC3F,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,eAAe,EAA0B,MAAM,iBAAiB,CAAA;AACzE,OAAO,EAAE,UAAU,EAAsB,MAAM,UAAU,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAc,MAAM,WAAW,CAAA;AACjD,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,YAAY,GAIb,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACzF,OAAO,EAAE,cAAc,EAA2B,MAAM,wBAAwB,CAAA;AAEhF,0FAA0F;AAC1F,MAAM,UAAU,GAAG,wBAAwB,CAAA;AAE3C;;;;;GAKG;AACH,MAAM,4BAA4B,GAChC,4FAA4F;IAC5F,6FAA6F;IAC7F,wCAAwC,CAAA;AAgB1C,MAAM,OAAO,UAAU;IACZ,IAAI,CAAe;IACnB,OAAO,CAAgB;IACvB,MAAM,CAAoC;IAC1C,KAAK,CAAW;IAEzB,YAAoB,GAAkB,EAAE,MAAsB;QAC5D,IAAI,CAAC,IAAI,GAAG,GAAG,CAAA;QACf,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAA;QACvD,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,EAAE,CACnC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;QAElE,6FAA6F;QAC7F,2FAA2F;QAC3F,oFAAoF;QACpF,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA;QAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC;YACzB,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAC5D,SAAS;YACT,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,CAAC,GAAkB,EAAE,MAAwB;QACxD,OAAO,IAAI,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IACnD,CAAC;IAED,mEAAmE;IACnE,SAAS,CAAC,MAAqB;QAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9F,OAAO,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IACpD,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,KAAY,EAAE,UAA8B;QACxD,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAA;IACpE,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,SAAiB,EAAE,UAA6B;QACnE,OAAO,IAAI,CAAC,WAAW,CACrB,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EACnC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAC9B,UAAU,CACX,CAAA;IACH,CAAC;IAED,WAAW,CAAC,KAAY,EAAE,IAAkB,EAAE,UAA8B;QAC1E,OAAO,eAAe,CAAC;YACrB,KAAK;YACL,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,OAAe;QACrB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAChD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,0BAA0B,OAAO,gDAAgD;gBAC/E,kFAAkF,CACrF,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,SAAiB;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QACpD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,uFAAuF;gBACrF,IAAI,SAAS,MAAM,4BAA4B,EAAE,CACpD,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB;QACf,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,wFAAwF;gBACtF,aAAa,4BAA4B,EAAE,CAC9C,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACH,IAAI,uBAAuB;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAA;IACzC,CAAC;IAED,+EAA+E;IAC/E,IAAI,UAAU;QACZ,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;IACtD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IACjD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/E,MAAM,YAAY,GAAG,IAAI,gBAAgB,CAAC;YACxC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC;YACtD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC;YACjD,SAAS,EAAE,UAAU;SACtB,CAAC,CAAA;QACF,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE;YAC7C,GAAG;YACH,IAAI,EAAE,0BAA0B;YAChC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC;YAC/C,OAAO,EAAE,IAAI;YACb,0FAA0F;YAC1F,6FAA6F;YAC7F,4FAA4F;YAC5F,yFAAyF;YACzF,yFAAyF;YACzF,+BAA+B;YAC/B,KAAK,EAAE,CAAC,GAAG,qBAAqB,CAAC;YACjC,wFAAwF;YACxF,4FAA4F;YAC5F,kFAAkF;YAClF,sDAAsD;YACtD,SAAS,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,YAAY,CAAC;SAC1D,CAAC,CAAA;QACF,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAA;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,GAAW;QAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QACpC,MAAM,OAAO,GAAG,MAAM,cAAc,CAClC,OAAO,CAAC,OAAO,EACf,OAAO,EACP,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,EACvC,GAAG,CACJ,CAAA;QACD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;QAEvE,IAAI,MAAe,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;QACnC,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;QAExD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAC7C,QAAQ,CAAC,UAAU,EACnB,YAAY,CAAC,QAAQ,CAAC,EACtB,GAAG,CACJ,CAAA;QACD,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAA;QACtF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;IACzF,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,CAAS,EAAE,CAAS;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAC5E,OAAO,IAAI,KAAK,CAAC,CAAA;AACnB,CAAC"}
+{"version":3,"file":"gatekeeper.js","sourceRoot":"","sources":["../src/gatekeeper.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,EAAE;AACF,0FAA0F;AAC1F,6FAA6F;AAC7F,EAAE;AACF,+FAA+F;AAC/F,6FAA6F;AAC7F,2FAA2F;AAC3F,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,eAAe,EAA0B,MAAM,iBAAiB,CAAA;AACzE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAsB,MAAM,UAAU,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAc,MAAM,WAAW,CAAA;AAEjD,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,YAAY,GAIb,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACzF,OAAO,EAAE,cAAc,EAA2B,MAAM,wBAAwB,CAAA;AAEhF,0FAA0F;AAC1F,MAAM,UAAU,GAAG,wBAAwB,CAAA;AAE3C;;;;;GAKG;AACH,MAAM,4BAA4B,GAChC,4FAA4F;IAC5F,6FAA6F;IAC7F,wCAAwC,CAAA;AAiC1C,MAAM,OAAO,UAAU;IACZ,IAAI,CAAe;IACnB,OAAO,CAAgB;IACvB,MAAM,CAAoC;IAC1C,KAAK,CAAW;IAEzB,YAAoB,GAAkB,EAAE,MAAsB;QAC5D,IAAI,CAAC,IAAI,GAAG,GAAG,CAAA;QACf,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAA;QACvD,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,EAAE,CACnC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;QAElE,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC;YACzB,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAC5D,SAAS;YACT,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,CAAC,GAAkB,EAAE,MAAwB;QACxD,OAAO,IAAI,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IACnD,CAAC;IAED,mEAAmE;IACnE,SAAS,CAAC,MAAqB;QAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9F,OAAO,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IACpD,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,KAAY,EAAE,UAA8B;QACxD,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAA;IACpE,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,SAAiB,EAAE,UAA6B;QACnE,OAAO,IAAI,CAAC,WAAW,CACrB,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EACnC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAC9B,UAAU,CACX,CAAA;IACH,CAAC;IAED,WAAW,CAAC,KAAY,EAAE,IAAkB,EAAE,UAA8B;QAC1E,OAAO,eAAe,CAAC;YACrB,KAAK;YACL,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,OAAe;QACrB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAChD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,0BAA0B,OAAO,gDAAgD;gBAC/E,kFAAkF,CACrF,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,SAAiB;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QACpD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,uFAAuF;gBACrF,IAAI,SAAS,MAAM,4BAA4B,EAAE,CACpD,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB;QACf,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,wFAAwF;gBACtF,aAAa,4BAA4B,EAAE,CAC9C,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACH,IAAI,uBAAuB;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAA;IACzC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAChD,CAAC;IAED,+EAA+E;IAC/E,IAAI,UAAU;QACZ,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;IACtD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IACjD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/E,MAAM,YAAY,GAAG,IAAI,gBAAgB,CAAC;YACxC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC;YACtD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC;YACjD,SAAS,EAAE,UAAU;SACtB,CAAC,CAAA;QACF,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE;YAC7C,GAAG;YACH,IAAI,EAAE,0BAA0B;YAChC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC;YAC/C,OAAO,EAAE,IAAI;YACb,0FAA0F;YAC1F,6FAA6F;YAC7F,4FAA4F;YAC5F,yFAAyF;YACzF,yFAAyF;YACzF,+BAA+B;YAC/B,KAAK,EAAE,CAAC,GAAG,qBAAqB,CAAC;YACjC,wFAAwF;YACxF,4FAA4F;YAC5F,kFAAkF;YAClF,sDAAsD;YACtD,SAAS,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,YAAY,CAAC;SAC1D,CAAC,CAAA;QACF,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAA;IAC3B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,YAAY,CAChB,OAAgB,EAChB,GAAW,EACX,KAAuC;QAEvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QACpC,MAAM,OAAO,GAAG,MAAM,cAAc,CAClC,OAAO,CAAC,OAAO,EACf,OAAO,EACP,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,EACvC,GAAG,CACJ,CAAA;QACD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;QAEvE,IAAI,MAAe,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;QACnC,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;QAExD,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;QACjF,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAA;QAEtF,wFAAwF;QACxF,8FAA8F;QAC9F,8FAA8F;QAC9F,8FAA8F;QAC9F,+FAA+F;QAC/F,0EAA0E;QAC1E,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;QACpF,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;SAClC,CAAA;IACH,CAAC;CACF;AAED,sFAAsF;AACtF,SAAS,UAAU,CAAC,MAAiC;IACnD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AAC1F,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,CAAS,EAAE,CAAS;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAC5E,OAAO,IAAI,KAAK,CAAC,CAAA;AACnB,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { createGatekeeperWorker, type GatekeeperWorkerOptions } from './worker.js';
-export { Gatekeeper, type DeliveryOutcome } from './gatekeeper.js';
+export { Gatekeeper, type DeliveryOutcome, type HookDispatchReceipt } from './gatekeeper.js';
 export { GatekeeperState, type ApprovalCard, type DeliveryApplication, type DeliveryEffect, type MintClaim, type MintTicket, type RunState, type StoredKey, } from './state.js';
 export { ConfigError, type GatekeeperEnv } from './env.js';
 export { buildCapability, type CardInspection, type SessionDependencies, type TierSummary, } from './capability.js';
@@ -10,15 +10,19 @@ export { DEFAULT_MAX_SKEW_MS, verifyDelivery, type VerificationResult, } from '.
 export { createGatekeeperVendor } from './os/vendor.js';
 export { createGatekeeperAccount, createGatekeeperVerifier, type AccountProps, } from './os/account.js';
 export { createGatekeeperResource } from './os/resource.js';
-export { ResourceCore, type ResourceProps } from './os/resource-core.js';
-export { OS_EXPORTS, missingOsExports, type OsExportRole } from './os/exports.js';
+export { ResourceCore, type ResourceDependencies, type ResourceProps } from './os/resource-core.js';
+export { createGatekeeperHookController, type HookControllerProps } from './os/hook-controller.js';
+export { applyPushOutcome, describeHook, describeHookDelivery, holdInitiator, HOOK_TOPICS, HOOK_TOPIC_NAMES, pushToHook, registrationKey, type HookDispatchReport, type HookPayload, type HookPushOutcome, type HookPushTarget, type HookRecord, type HookRegistration, type HookTopic, } from './os/hooks.js';
+export { assertObserverMaySee, identifyObserver, type ObserverRecognition } from './os/sharing.js';
+export { checkedArguments, declaredArguments } from './arguments.js';
+export { OS_EXPORTS, OS_EXPORT_REQUIREMENT, missingOsExports, type OsExportRequirement, type OsExportRole, } from './os/exports.js';
 export { describeDiscoverability, type DiscoverabilityReport, type DiscoveryBlocker, type DiscoveryBlockerReason, } from './os/discoverability.js';
 export { supportedResourceFor } from './os/resources.js';
 export { SESSION_INTERFACE_NAME, renderTierSessionTypes } from './os/session-types.js';
 export { ActionLedger, holdQueue, queueGovernance, type LedgerSession } from './os/queue.js';
 export { actionKindOf, describeAction, describeObservation, type CallSubject, } from './os/descriptions.js';
 export { fenced } from './markdown.js';
-export type { AccountDescription, AccountEntrypoint, ActionDescription, ActionKind, ApprovalQueue, AvatarImage, ObservationAuthorizer, ObservationDescription, ResourceDescription, ResourceObject, SupportedResource, VendorDescription, VendorEntrypoint, VerifierEntrypoint, } from './os/protocol.js';
+export type { AccountDescription, AccountEntrypoint, ActionDescription, ActionKind, ApprovalQueue, AvatarImage, HookController, HookDescription, HookInitiator, HookTargetMetadata, ObservationAuthorizer, ObservationDescription, ResourceDescription, ResourceObject, SupportedResource, VendorDescription, VendorEntrypoint, VerifierEntrypoint, } from './os/protocol.js';
 export type { SessionGovernance } from './capability.js';
 export * from './policy/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sBAAsB,EAAE,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAIlE,OAAO,EACL,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,SAAS,GACf,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAA;AAC1D,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,SAAS,EAAE,KAAK,KAAK,EAAE,KAAK,qBAAqB,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAA;AAEhG,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,0BAA0B,EAC1B,YAAY,EACZ,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,QAAQ,GACd,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAA;AAM/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,YAAY,GAClB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACjF,OAAO,EACL,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACtF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAA;AAC5F,OAAO,EACL,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AACtC,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAIxD,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sBAAsB,EAAE,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAI5F,OAAO,EACL,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,SAAS,GACf,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAA;AAC1D,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,SAAS,EAAE,KAAK,KAAK,EAAE,KAAK,qBAAqB,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAA;AAEhG,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,0BAA0B,EAC1B,YAAY,EACZ,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,QAAQ,GACd,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAA;AAM/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,YAAY,GAClB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,KAAK,oBAAoB,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,8BAA8B,EAAE,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAClG,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,GACf,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAClG,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACpE,OAAO,EACL,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,YAAY,GAClB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACtF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAA;AAC5F,OAAO,EACL,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AACtC,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,WAAW,EACX,cAAc,EACd,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAIxD,cAAc,mBAAmB,CAAA"}

package/dist/index.js

@@ -25,7 +25,11 @@ export { createGatekeeperVendor } from './os/vendor.js';
 export { createGatekeeperAccount, createGatekeeperVerifier, } from './os/account.js';
 export { createGatekeeperResource } from './os/resource.js';
 export { ResourceCore } from './os/resource-core.js';
-export { OS_EXPORTS, missingOsExports } from './os/exports.js';
+export { createGatekeeperHookController } from './os/hook-controller.js';
+export { applyPushOutcome, describeHook, describeHookDelivery, holdInitiator, HOOK_TOPICS, HOOK_TOPIC_NAMES, pushToHook, registrationKey, } from './os/hooks.js';
+export { assertObserverMaySee, identifyObserver } from './os/sharing.js';
+export { checkedArguments, declaredArguments } from './arguments.js';
+export { OS_EXPORTS, OS_EXPORT_REQUIREMENT, missingOsExports, } from './os/exports.js';
 export { describeDiscoverability, } from './os/discoverability.js';
 export { supportedResourceFor } from './os/resources.js';
 export { SESSION_INTERFACE_NAME, renderTierSessionTypes } from './os/session-types.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,uFAAuF;AACvF,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,iGAAiG;AACjG,wCAAwC;AAExC,OAAO,EAAE,sBAAsB,EAAgC,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,UAAU,EAAwB,MAAM,iBAAiB,CAAA;AAElE,0FAA0F;AAC1F,6FAA6F;AAC7F,OAAO,EACL,eAAe,GAQhB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,WAAW,EAAsB,MAAM,UAAU,CAAA;AAC1D,OAAO,EACL,eAAe,GAIhB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,SAAS,EAA6D,MAAM,WAAW,CAAA;AAEhG,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,YAAY,GAMb,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,0BAA0B,EAC1B,YAAY,EACZ,qBAAqB,GAGtB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,wBAAwB,CAAA;AAE/B,gGAAgG;AAChG,gGAAgG;AAChG,oGAAoG;AACpG,gGAAgG;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAsB,MAAM,uBAAuB,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAqB,MAAM,iBAAiB,CAAA;AACjF,OAAO,EACL,uBAAuB,GAIxB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACtF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAsB,MAAM,eAAe,CAAA;AAC5F,OAAO,EACL,YAAY,EACZ,cAAc,EACd,mBAAmB,GAEpB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAmBtC,kGAAkG;AAClG,oFAAoF;AACpF,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,uFAAuF;AACvF,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,iGAAiG;AACjG,wCAAwC;AAExC,OAAO,EAAE,sBAAsB,EAAgC,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,UAAU,EAAkD,MAAM,iBAAiB,CAAA;AAE5F,0FAA0F;AAC1F,6FAA6F;AAC7F,OAAO,EACL,eAAe,GAQhB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,WAAW,EAAsB,MAAM,UAAU,CAAA;AAC1D,OAAO,EACL,eAAe,GAIhB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,SAAS,EAA6D,MAAM,WAAW,CAAA;AAEhG,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,YAAY,GAMb,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,0BAA0B,EAC1B,YAAY,EACZ,qBAAqB,GAGtB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,wBAAwB,CAAA;AAE/B,gGAAgG;AAChG,gGAAgG;AAChG,oGAAoG;AACpG,gGAAgG;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAiD,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,8BAA8B,EAA4B,MAAM,yBAAyB,CAAA;AAClG,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,eAAe,GAQhB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAA4B,MAAM,iBAAiB,CAAA;AAClG,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACpE,OAAO,EACL,UAAU,EACV,qBAAqB,EACrB,gBAAgB,GAGjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,uBAAuB,GAIxB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACtF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAsB,MAAM,eAAe,CAAA;AAC5F,OAAO,EACL,YAAY,EACZ,cAAc,EACd,mBAAmB,GAEpB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAuBtC,kGAAkG;AAClG,oFAAoF;AACpF,cAAc,mBAAmB,CAAA"}

package/dist/os/discoverability.d.ts

@@ -1,5 +1,7 @@
 /** Why a Cloudflare OS deployment could not finish installing this Gatekeeper. */
-export type DiscoveryBlockerReason = 'missing_exports' | 'no_auto_provisioned_tier';
+export type DiscoveryBlockerReason = 'missing_exports' | 'no_auto_provisioned_tier'
+/** Installs and serves; only the hook push is missing. Reported as a LIMITATION, never a blocker. */
+ | 'hooks_unavailable';
 /** One thing standing between this Worker and a workspace that could use it. */
 export interface DiscoveryBlocker {
     reason: DiscoveryBlockerReason;
@@ -14,6 +16,16 @@ export interface DiscoveryBlocker {
 export interface DiscoverabilityReport {
     discoverable: boolean;
     blockers: DiscoveryBlocker[];
+    /**
+     * What a workspace COULD install and would find missing once it had.
+     *
+     * Separate from `blockers` because the remedies are alike and the urgency is not: a blocker is a
+     * workspace that never finishes installing, and a limitation is one that installs, works, and
+     * refuses one capability. Folding the second into the first would turn a deployment that never
+     * wanted hooks red; leaving it out entirely would let a deployment that does want them discover
+     * the gap from an agent's failed subscribe.
+     */
+    limitations: DiscoveryBlocker[];
 }
 /**
  * Ask both questions in ONE pass.

package/dist/os/discoverability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discoverability.d.ts","sourceRoot":"","sources":["../../src/os/discoverability.ts"],"names":[],"mappings":"AAmBA,kFAAkF;AAClF,MAAM,MAAM,sBAAsB,GAAG,iBAAiB,GAAG,0BAA0B,CAAA;AAEnF,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,sBAAsB,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,OAAO,CAAA;IACrB,QAAQ,EAAE,gBAAgB,EAAE,CAAA;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,kFAAkF;IAClF,OAAO,EAAE,OAAO,CAAA;IAChB,mFAAmF;IACnF,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC,GAAG,qBAAqB,CA0BxB"}
+{"version":3,"file":"discoverability.d.ts","sourceRoot":"","sources":["../../src/os/discoverability.ts"],"names":[],"mappings":"AAyBA,kFAAkF;AAClF,MAAM,MAAM,sBAAsB,GAC9B,iBAAiB,GACjB,0BAA0B;AAC5B,qGAAqG;GACnG,mBAAmB,CAAA;AAEvB,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,sBAAsB,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,OAAO,CAAA;IACrB,QAAQ,EAAE,gBAAgB,EAAE,CAAA;IAC5B;;;;;;;;OAQG;IACH,WAAW,EAAE,gBAAgB,EAAE,CAAA;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,kFAAkF;IAClF,OAAO,EAAE,OAAO,CAAA;IAChB,mFAAmF;IACnF,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC,GAAG,qBAAqB,CAuCxB"}

package/dist/os/discoverability.js

@@ -12,9 +12,15 @@
 // asked it, which is the same failure as the health route that reported only the bindings its
 // request path happened to read: a monitor saying something the operator cannot act on.
 //
-// So the two facts are reported side by side, each naming its own remedy, and a deployment that
-// wants discovery keys a monitor on `os.discoverable` while one that does not ignores it.
-import { missingOsExports, OS_EXPORTS } from './exports.js';
+// So the facts are reported side by side, each naming its own remedy, and a deployment that wants
+// discovery keys a monitor on `os.discoverable` while one that does not ignores it.
+//
+// The same reasoning splits the report a second time. A workspace can install this Gatekeeper and
+// still find one capability missing (the hook controller is reached only when a session binds a
+// hook), and that is a LIMITATION rather than a blocker: reporting it as one would say a serving
+// deployment is undiscoverable, and omitting it would leave the gap to be discovered from an
+// agent's failed call.
+import { missingOsExports, OS_EXPORTS, OS_EXPORT_REQUIREMENT } from './exports.js';
 /**
  * Ask both questions in ONE pass.
  *
@@ -23,15 +29,26 @@ import { missingOsExports, OS_EXPORTS } from './exports.js';
  */
 export function describeDiscoverability(deps) {
     const blockers = [];
+    const limitations = [];
     const missing = missingOsExports(deps.exports);
-    if (missing.length > 0) {
+    const missingModel = missing.filter((role) => OS_EXPORT_REQUIREMENT[role] === 'install');
+    if (missingModel.length > 0) {
         blockers.push({
             reason: 'missing_exports',
-            detail: `This Worker's entry module does not export ${missing.map((role) => OS_EXPORTS[role]).join(', ')}. ` +
+            detail: `This Worker's entry module does not export ${missingModel.map((role) => OS_EXPORTS[role]).join(', ')}. ` +
                 'The Cloudflare OS object model resolves each by name against this Worker ' +
                 '(deploy/gatekeeper/src/index.ts is the template).',
         });
     }
+    if (missing.includes('hookController')) {
+        limitations.push({
+            reason: 'hooks_unavailable',
+            detail: `This Worker's entry module does not export ${OS_EXPORTS.hookController}, so a session ` +
+                'cannot bind a hook and nothing is pushed. Everything else works, and a workspace reads ' +
+                'the same cards and runs from approvals_list() and runs_watched(); add the export to ' +
+                'turn the push on.',
+        });
+    }
     if (deps.autoProvisionedTier === null) {
         blockers.push({
             reason: 'no_auto_provisioned_tier',
@@ -41,6 +58,6 @@ export function describeDiscoverability(deps) {
                 'deliberately separate from defaultTier, which governs the /rpc door.',
         });
     }
-    return { discoverable: blockers.length === 0, blockers };
+    return { discoverable: blockers.length === 0, blockers, limitations };
 }
 //# sourceMappingURL=discoverability.js.map

package/dist/os/discoverability.js.map

@@ -1 +1 @@
-{"version":3,"file":"discoverability.js","sourceRoot":"","sources":["../../src/os/discoverability.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,EAAE;AACF,8FAA8F;AAC9F,wFAAwF;AACxF,iGAAiG;AACjG,6FAA6F;AAC7F,EAAE;AACF,iGAAiG;AACjG,yFAAyF;AACzF,iGAAiG;AACjG,+FAA+F;AAC/F,8FAA8F;AAC9F,wFAAwF;AACxF,EAAE;AACF,gGAAgG;AAChG,0FAA0F;AAE1F,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAsB3D;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,MAAM,QAAQ,GAAuB,EAAE,CAAA;IAEvC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,iBAAiB;YACzB,MAAM,EACJ,8CAA8C,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpG,2EAA2E;gBAC3E,mDAAmD;SACtD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,0BAA0B;YAClC,MAAM,EACJ,0FAA0F;gBAC1F,wFAAwF;gBACxF,0FAA0F;gBAC1F,sEAAsE;SACzE,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAA;AAC1D,CAAC"}
+{"version":3,"file":"discoverability.js","sourceRoot":"","sources":["../../src/os/discoverability.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,EAAE;AACF,8FAA8F;AAC9F,wFAAwF;AACxF,iGAAiG;AACjG,6FAA6F;AAC7F,EAAE;AACF,iGAAiG;AACjG,yFAAyF;AACzF,iGAAiG;AACjG,+FAA+F;AAC/F,8FAA8F;AAC9F,wFAAwF;AACxF,EAAE;AACF,kGAAkG;AAClG,oFAAoF;AACpF,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,iGAAiG;AACjG,6FAA6F;AAC7F,uBAAuB;AAEvB,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAoClF;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,MAAM,WAAW,GAAuB,EAAE,CAAA;IAE1C,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAA;IACxF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,iBAAiB;YACzB,MAAM,EACJ,8CAA8C,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACzG,2EAA2E;gBAC3E,mDAAmD;SACtD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvC,WAAW,CAAC,IAAI,CAAC;YACf,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EACJ,8CAA8C,UAAU,CAAC,cAAc,iBAAiB;gBACxF,yFAAyF;gBACzF,sFAAsF;gBACtF,mBAAmB;SACtB,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,0BAA0B;YAClC,MAAM,EACJ,0FAA0F;gBAC1F,wFAAwF;gBACxF,0FAA0F;gBAC1F,sEAAsE;SACzE,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;AACvE,CAAC"}

package/dist/os/exports.d.ts

@@ -12,9 +12,36 @@ export declare const OS_EXPORTS: {
      * account itself would hand over `revoke()` and the resource classes with it.
      */
     readonly verifier: 'CatFactoryVerifier';
+    /**
+     * The handle a workspace turns one bound hook on and off by.
+     *
+     * Its own export for the same reason the verifier is: what the workspace persists here must
+     * carry the authority to disable ONE registration and nothing else. A session or an account
+     * handed over instead would carry a capability, a key broker and every other hook with it.
+     */
+    readonly hookController: 'CatFactoryHookController';
 };
 /** A role in the object model, spelled as {@link OS_EXPORTS} keys it. */
 export type OsExportRole = keyof typeof OS_EXPORTS;
+/** What a deployment loses by not exporting one role: the whole OS door, or one capability of it. */
+export type OsExportRequirement = 'install' | 'hooks';
+/**
+ * What each role's absence actually costs, which is not the same answer for all of them.
+ *
+ * The four object-model roles are walked while a workspace installs this Gatekeeper, so a missing
+ * one is a workspace that never finishes installing. The hook controller is reached only when a
+ * session binds a hook, so a deployment without it installs, serves and answers exactly as before
+ * and loses pushes. Reporting the two as one number would do the damage this file's own health
+ * rule names in both directions at once: an operator told their Gatekeeper is undiscoverable when
+ * it is serving, or told nothing at all about a capability that will refuse.
+ */
+export declare const OS_EXPORT_REQUIREMENT: {
+    readonly vendor: 'install';
+    readonly account: 'install';
+    readonly resource: 'install';
+    readonly verifier: 'install';
+    readonly hookController: 'hooks';
+};
 /**
  * Resolve one of this Worker's own exports, imbued with the props it should carry.
  *

package/dist/os/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/os/exports.ts"],"names":[],"mappings":"AAkBA,mFAAmF;AACnF,eAAO,MAAM,UAAU;IACrB,2FAA2F;qBACnF,kBAAkB;IAC1B,6FAA6F;sBACpF,mBAAmB;IAC5B,8EAA8E;uBACpE,oBAAoB;IAC9B;;;;OAIG;uBACO,oBAAoB;CACW,CAAA;AAE3C,yEAAyE;AACzE,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,UAAU,CAAA;AAmBlD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAYzF;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,EAAE,CAGjE"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/os/exports.ts"],"names":[],"mappings":"AAkBA,mFAAmF;AACnF,eAAO,MAAM,UAAU;IACrB,2FAA2F;qBACnF,kBAAkB;IAC1B,6FAA6F;sBACpF,mBAAmB;IAC5B,8EAA8E;uBACpE,oBAAoB;IAC9B;;;;OAIG;uBACO,oBAAoB;IAC9B;;;;;;OAMG;6BACa,0BAA0B;CACD,CAAA;AAE3C,yEAAyE;AACzE,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,UAAU,CAAA;AAElD,qGAAqG;AACrG,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,OAAO,CAAA;AAErD;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;qBACxB,SAAS;sBACR,SAAS;uBACR,SAAS;uBACT,SAAS;6BACH,OAAO;CACqC,CAAA;AAmB9D;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAYzF;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,EAAE,CAGjE"}

package/dist/os/exports.js

@@ -28,6 +28,31 @@ export const OS_EXPORTS = {
      * account itself would hand over `revoke()` and the resource classes with it.
      */
     verifier: 'CatFactoryVerifier',
+    /**
+     * The handle a workspace turns one bound hook on and off by.
+     *
+     * Its own export for the same reason the verifier is: what the workspace persists here must
+     * carry the authority to disable ONE registration and nothing else. A session or an account
+     * handed over instead would carry a capability, a key broker and every other hook with it.
+     */
+    hookController: 'CatFactoryHookController',
+};
+/**
+ * What each role's absence actually costs, which is not the same answer for all of them.
+ *
+ * The four object-model roles are walked while a workspace installs this Gatekeeper, so a missing
+ * one is a workspace that never finishes installing. The hook controller is reached only when a
+ * session binds a hook, so a deployment without it installs, serves and answers exactly as before
+ * and loses pushes. Reporting the two as one number would do the damage this file's own health
+ * rule names in both directions at once: an operator told their Gatekeeper is undiscoverable when
+ * it is serving, or told nothing at all about a capability that will refuse.
+ */
+export const OS_EXPORT_REQUIREMENT = {
+    vendor: 'install',
+    account: 'install',
+    resource: 'install',
+    verifier: 'install',
+    hookController: 'hooks',
 };
 /**
  * Read one factory out of a bag that may not be one.

package/dist/os/exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/os/exports.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,EAAE;AACF,oFAAoF;AACpF,mGAAmG;AACnG,iGAAiG;AACjG,0FAA0F;AAC1F,+FAA+F;AAC/F,8EAA8E;AAC9E,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,EAAE;AACF,6FAA6F;AAC7F,iGAAiG;AACjG,mFAAmF;AAEnF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,mFAAmF;AACnF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,2FAA2F;IAC3F,MAAM,EAAE,kBAAkB;IAC1B,6FAA6F;IAC7F,OAAO,EAAE,mBAAmB;IAC5B,8EAA8E;IAC9E,QAAQ,EAAE,oBAAoB;IAC9B;;;;OAIG;IACH,QAAQ,EAAE,oBAAoB;CACW,CAAA;AAQ3C;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAY;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACrE,MAAM,OAAO,GAAI,OAA2B,CAAC,IAAI,CAAC,CAAA;IAClD,OAAO,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAI,OAAgB,EAAE,IAAkB,EAAE,KAAc;IACpF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,eAAe,CACvB,gBAAgB,EAChB,+CAA+C,IAAI,oCAAoC;YACrF,6BAA6B,IAAI,uDAAuD;YACxF,yCAAyC,CAC5C,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,CAAM,CAAA;AAChC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAmB,CAAA;IACvD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;AACpF,CAAC"}
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/os/exports.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,EAAE;AACF,oFAAoF;AACpF,mGAAmG;AACnG,iGAAiG;AACjG,0FAA0F;AAC1F,+FAA+F;AAC/F,8EAA8E;AAC9E,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,EAAE;AACF,6FAA6F;AAC7F,iGAAiG;AACjG,mFAAmF;AAEnF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,mFAAmF;AACnF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,2FAA2F;IAC3F,MAAM,EAAE,kBAAkB;IAC1B,6FAA6F;IAC7F,OAAO,EAAE,mBAAmB;IAC5B,8EAA8E;IAC9E,QAAQ,EAAE,oBAAoB;IAC9B;;;;OAIG;IACH,QAAQ,EAAE,oBAAoB;IAC9B;;;;;;OAMG;IACH,cAAc,EAAE,0BAA0B;CACD,CAAA;AAQ3C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,cAAc,EAAE,OAAO;CACqC,CAAA;AAK9D;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAY;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACrE,MAAM,OAAO,GAAI,OAA2B,CAAC,IAAI,CAAC,CAAA;IAClD,OAAO,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAI,OAAgB,EAAE,IAAkB,EAAE,KAAc;IACpF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,eAAe,CACvB,gBAAgB,EAChB,+CAA+C,IAAI,oCAAoC;YACrF,6BAA6B,IAAI,uDAAuD;YACxF,yCAAyC,CAC5C,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,CAAM,CAAA;AAChC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAmB,CAAA;IACvD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;AACpF,CAAC"}

package/dist/os/hook-controller.d.ts

@@ -0,0 +1,14 @@
+import { type GatekeeperEnv } from '../env.js';
+import type { HookControllerProps } from './hooks.js';
+import type { HookController } from './protocol.js';
+export type { HookControllerProps } from './hooks.js';
+/**
+ * Build the hook controller class a deployment exports.
+ *
+ * No policy argument, like the verifier: nothing here resolves a tier or compiles a grant. The
+ * tier a delivery is described at was resolved by the session that bound the hook and rides the
+ * props, because re-resolving it here would silently re-tier a live hook the day an operator edits
+ * the policy, with the workspace still believing it enabled the one it was shown.
+ */
+export declare function createGatekeeperHookController(): new (ctx: ExecutionContext<HookControllerProps>, env: GatekeeperEnv) => HookController;
+//# sourceMappingURL=hook-controller.d.ts.map

package/dist/os/hook-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-controller.d.ts","sourceRoot":"","sources":["../../src/os/hook-controller.ts"],"names":[],"mappings":"AAeA,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,WAAW,CAAA;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAc,MAAM,YAAY,CAAA;AACjE,OAAO,KAAK,EAAE,cAAc,EAAqC,MAAM,eAAe,CAAA;AAEtF,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAErD;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,IAAI,KAChD,GAAG,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,EAC1C,GAAG,EAAE,aAAa,KACf,cAAc,CAgClB"}

package/dist/os/hook-controller.js

@@ -0,0 +1,53 @@
+// The handle a workspace turns one bound hook on and off by.
+//
+// It is a fifth named export for the same reason the verifier is a fourth: what the workspace has
+// to hold is not what the workspace has to be able to DO. A controller carries no capability, no
+// key and no session; it names one registration, and its two methods are the only two things
+// anybody may do to that registration from outside. Handing over a session or an account instead
+// would hand over everything they carry along with the ability to disable a hook.
+//
+// Its props ARE the registration's identity, which is what keeps this class stateless: the
+// workspace persists the controller, so the id, the topic, the account and the tier ride back in
+// on `enable` without this Gatekeeper keeping a table of hooks nobody has approved yet. That is
+// also the contract's own instruction ("avoid storing any state until the hook is enabled") read
+// literally rather than approximately.
+import { WorkerEntrypoint } from 'cloudflare:workers';
+import { stateFor } from '../env.js';
+/**
+ * Build the hook controller class a deployment exports.
+ *
+ * No policy argument, like the verifier: nothing here resolves a tier or compiles a grant. The
+ * tier a delivery is described at was resolved by the session that bound the hook and rides the
+ * props, because re-resolving it here would silently re-tier a live hook the day an operator edits
+ * the policy, with the workspace still believing it enabled the one it was shown.
+ */
+export function createGatekeeperHookController() {
+    return class CatFactoryHookController extends WorkerEntrypoint {
+        /**
+         * The workspace approved the hook: record it, and hold the initiator it handed over.
+         *
+         * Re-enabling an already-enabled hook REPLACES the initiator, which the contract asks for, and
+         * the store keeps the counters this call zeroes (see `enableHook`): they are the
+         * registration's history rather than that stub's, so resetting them would erase the record of
+         * the deliveries a workspace missed at exactly the moment it is re-arming to stop missing them.
+         */
+        async enable(initiator, target) {
+            const record = {
+                ...this.ctx.props,
+                target,
+                enabledAt: Date.now(),
+                deliveries: 0,
+                missed: 0,
+                failures: 0,
+                lastDeliveryAt: null,
+                lastError: null,
+            };
+            await stateFor(this.env).enableHook(record, initiator);
+        }
+        /** The workspace withdrew the hook: the record and the live half both go, permanently. */
+        async disable() {
+            await stateFor(this.env).disableHook(this.ctx.props.hookId);
+        }
+    };
+}
+//# sourceMappingURL=hook-controller.js.map

package/dist/os/hook-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-controller.js","sourceRoot":"","sources":["../../src/os/hook-controller.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,kGAAkG;AAClG,iGAAiG;AACjG,6FAA6F;AAC7F,iGAAiG;AACjG,kFAAkF;AAClF,EAAE;AACF,2FAA2F;AAC3F,iGAAiG;AACjG,gGAAgG;AAChG,iGAAiG;AACjG,uCAAuC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,QAAQ,EAAsB,MAAM,WAAW,CAAA;AAMxD;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B;IAI5C,OAAO,MAAM,wBAAyB,SAAQ,gBAG7C;QACC;;;;;;;WAOG;QACH,KAAK,CAAC,MAAM,CAAC,SAAwB,EAAE,MAA0B;YAC/D,MAAM,MAAM,GAAe;gBACzB,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK;gBACjB,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,UAAU,EAAE,CAAC;gBACb,MAAM,EAAE,CAAC;gBACT,QAAQ,EAAE,CAAC;gBACX,cAAc,EAAE,IAAI;gBACpB,SAAS,EAAE,IAAI;aAChB,CAAA;YACD,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACxD,CAAC;QAED,0FAA0F;QAC1F,KAAK,CAAC,OAAO;YACX,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC7D,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/os/hooks.d.ts

@@ -0,0 +1,200 @@
+import type { ApprovalCard, RunState } from '../state.js';
+import type { HookDescription, HookInitiator, HookTargetMetadata, ObservationDescription } from './protocol.js';
+/** What a workspace can be pushed. */
+export type HookTopic = 'approval_card' | 'run_event';
+/**
+ * The two topics, as an exhaustive `Record`, so a third one cannot be half-added.
+ *
+ * A topic is a delivery FAMILY this Gatekeeper already receives and projects, never a new
+ * subscription upstream: what the platform sends is decided by `enroll()`, and a hook that pushed
+ * something the webhook does not carry would be a promise no delivery could keep.
+ */
+export declare const HOOK_TOPICS: {
+    readonly approval_card: {
+        readonly sessionMethod: 'approvals_subscribe';
+        readonly callbackMethod: 'onApprovalCard';
+        readonly title: 'Push cat-factory approval cards as they are raised';
+        readonly description: string;
+    };
+    readonly run_event: {
+        readonly sessionMethod: 'runs_subscribe';
+        readonly callbackMethod: 'onRunEvent';
+        readonly title: 'Push cat-factory run lifecycle transitions';
+        readonly description: string;
+    };
+};
+/** Every topic, for a caller that has to cover all of them. */
+export declare const HOOK_TOPIC_NAMES: HookTopic[];
+/** What a hook's controller is imbued with when a session binds it. */
+export interface HookControllerProps {
+    hookId: string;
+    topic: HookTopic;
+    /** The account whose session bound it. A session reads back only its own account's hooks. */
+    accountId: string;
+    /** The policy tier that account resolved to, for the delivery's own description. */
+    tier: string;
+    /** The paired deployment, so the record can describe a delivery without resolving config. */
+    deployment: string;
+}
+/** One enabled hook, as it is stored. Written on `enable`, deleted on `disable`. */
+export interface HookRecord extends HookControllerProps {
+    /** The workspace the hook was enabled from, and the gadget within it where there is one. */
+    target: HookTargetMetadata;
+    enabledAt: number;
+    /** Deliveries this hook has taken. */
+    deliveries: number;
+    /**
+     * Deliveries that found no live initiator, so nothing was pushed.
+     *
+     * The one number that must never be inferred from silence: it is what tells a workspace that
+     * its hook stopped receiving without anybody deciding it should.
+     */
+    missed: number;
+    /** Deliveries the workspace's own side refused or failed. */
+    failures: number;
+    lastDeliveryAt: number | null;
+    /** The most recent failure, kept so a reader has something to act on beyond a count. */
+    lastError: string | null;
+}
+/**
+ * What IDENTIFIES a registration in storage: the place its deliveries land.
+ *
+ * Not the hook id, which is the wrong key for the one lifecycle a workspace is documented to run.
+ * The live half of a registration cannot be stored, so a durable object evicted between two
+ * deliveries keeps the record and loses the stub, and the remedy is to bind again. A bind mints a
+ * FRESH hook id, so a hook-id-keyed row made every one of those cycles a new row: the dead
+ * registration stayed forever, never live, counting a `missed` against every delivery for the rest
+ * of the deployment's life, and no reader could tell it from a hook that had genuinely gone quiet.
+ *
+ * Keying on the target makes re-binding what it reads as: the same registration, re-armed. The row
+ * is replaced, its counters carry forward (the `missed` count is the evidence the workspace acted
+ * on, so re-arming must not erase it), and the set of rows stays bounded by the gadgets a
+ * workspace actually runs rather than by how many times one was re-armed.
+ *
+ * The account comes first and is never the caller's to assert, so no target a workspace names can
+ * collide with another account's row; the remaining parts are escaped so a separator inside one of
+ * them cannot make two different targets share a key.
+ */
+export declare function registrationKey(record: {
+    accountId: string;
+    topic: HookTopic;
+    target: HookTargetMetadata;
+}): string;
+/**
+ * One hook as a session reads it back, which is the record PLUS the fact it cannot store.
+ *
+ * `live` is computed at read time from whether the initiator is still held, never persisted: a
+ * stored flag would say "live" from before the eviction that made it false, which is the one
+ * reading that must not be available.
+ */
+export interface HookRegistration extends HookRecord {
+    live: boolean;
+}
+/**
+ * What one fan-out did, summed over every push it made.
+ *
+ * It carries no topic: a change can produce payloads for more than one (a terminal run event
+ * settles the run's open cards as it records the transition), and one number per outcome across
+ * all of them is what a caller acts on. WHICH topics were dispatched is the receiver's to report,
+ * because it is knowable before any push is made.
+ */
+export interface HookDispatchReport {
+    delivered: number;
+    /** Registrations whose live half was lost, so nothing was pushed and the record counted it. */
+    stale: number;
+    failed: number;
+}
+/** What a topic pushes, as the callback receives it. */
+export type HookPayload = {
+    topic: 'approval_card';
+    card: ApprovalCard;
+} | {
+    topic: 'run_event';
+    state: RunState;
+};
+/**
+ * One thing a committed write left to push, named by its id rather than carried whole.
+ *
+ * The fan-out runs in the durable object and the write is reported out of it, so what crosses that
+ * boundary is a list of ids and the dispatcher reads each row back. Two reasons, and the second is
+ * the one that decides it. A `RunState` carries the run projection verbatim as an open record,
+ * which a Durable Object stub's serialization type will not carry (the same constraint
+ * `runs_watched()` annotates around), so a payload cannot make the trip. And re-reading is the
+ * more correct half anyway: a card that has been answered between the commit and the push is
+ * pushed as it now stands, rather than as the delivery left it.
+ */
+export type HookPushTarget = {
+    topic: 'approval_card';
+    cardId: string;
+} | {
+    topic: 'run_event';
+    runId: string;
+};
+/** What the approver is asked when a workspace binds a hook. */
+export declare function describeHook(topic: HookTopic, subject: {
+    accountId: string;
+    tier: string;
+    deployment: string;
+}): HookDescription;
+/**
+ * What the queue is asked before ONE delivery is pushed.
+ *
+ * A hook delivery is an observation and is authorized as one, which the contract asks for and
+ * which is also the only reading that holds: the bytes are a card the paired deployment raised,
+ * and that they arrived here over a webhook rather than over a read is an implementation detail of
+ * how they got here. The refusal path is what makes it matter: a workspace that has withdrawn a
+ * person's access can stop the push without this Gatekeeper having to be told.
+ */
+export declare function describeHookDelivery(payload: HookPayload, record: HookRecord): ObservationDescription;
+/** The live half of a registration: the workspace's initiator, held past the call it arrived on. */
+export type HookRegistry = Map<string, HookInitiator>;
+/**
+ * Take a reference to a stub that outlives the call it arrived on.
+ *
+ * The same loan rule `holdQueue` documents, arriving on the other parameter the contract hands
+ * over: the runtime disposes a parameter stub when the method returns, and an initiator kept for
+ * the next delivery is used long after that. The optional call is the in-process case, where the
+ * "stub" is an ordinary object with nothing to duplicate.
+ */
+export declare function holdInitiator(initiator: HookInitiator): HookInitiator;
+/** Give back a held reference. Paired with {@link holdInitiator} and kept beside it. */
+export declare function releaseInitiator(initiator: HookInitiator): void;
+/**
+ * What one push did, SEPARATE from the record it will be counted on.
+ *
+ * The split is the whole safety property of the fan-out. A push awaits a call into another Worker,
+ * which is not a storage operation, so the durable object's input gate is open across it and the
+ * record read before the push is a snapshot that may be stale by the time it resolves: a
+ * concurrent `disable` may have removed the registration, and a concurrent delivery may have moved
+ * the very counters this one is about to bump. Reporting the outcome and folding it onto whatever
+ * is stored AFTERWARDS is what keeps both of those true, where writing back a modified snapshot
+ * resurrected the withdrawn registration and lost the sibling's increments.
+ */
+export type HookPushOutcome = {
+    outcome: 'delivered';
+}
+/** The registration's live half was lost, so there was nothing to push through. */
+ | {
+    outcome: 'stale';
+} | {
+    outcome: 'failed';
+    error: string;
+};
+/**
+ * Push one payload to one enabled hook, and report what that did.
+ *
+ * Every outcome is a REPORT rather than a throw, because the caller is a fan-out on behalf of a
+ * delivery whose record has already committed: a workspace that refuses, breaks or hangs costs a
+ * notification, and must never cost the acknowledgement the platform's retry is protecting.
+ */
+export declare function pushToHook(payload: HookPayload, record: HookRecord, initiator: HookInitiator | undefined): Promise<HookPushOutcome>;
+/**
+ * Fold one push's outcome onto the record as it stands NOW.
+ *
+ * Pure, and takes the current record rather than the one the push was described from, so a caller
+ * can re-read between the two. `lastError` is cleared by a delivery on purpose: it is what a
+ * reader acts on beside `failures`, and a stale one beside a hook that has since recovered points
+ * at a fix nobody needs to make.
+ */
+export declare function applyPushOutcome(record: HookRecord, result: HookPushOutcome, now: number): HookRecord;
+//# sourceMappingURL=hooks.d.ts.map

package/dist/os/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/os/hooks.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGzD,OAAO,KAAK,EACV,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,eAAe,CAAA;AAEtB,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,WAAW,CAAA;AAcrD;;;;;;GAMG;AACH,eAAO,MAAM,WAAW;;iBAEpB,aAAa,EAAE,qBAAqB;iBACpC,cAAc,EAAE,gBAAgB;iBAChC,KAAK,EAAE,oDAAoD;iBAC3D,WAAW;;;iBAQX,aAAa,EAAE,gBAAgB;iBAC/B,cAAc,EAAE,YAAY;iBAC5B,KAAK,EAAE,4CAA4C;iBACnD,WAAW;;CAKwC,CAAA;AAEvD,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,EAA+B,SAAS,EAAE,CAAA;AAEvE,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,SAAS,CAAA;IAChB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAA;IACjB,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAA;IACZ,6FAA6F;IAC7F,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,oFAAoF;AACpF,MAAM,WAAW,UAAW,SAAQ,mBAAmB;IACrD,4FAA4F;IAC5F,MAAM,EAAE,kBAAkB,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,wFAAwF;IACxF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,SAAS,CAAA;IAChB,MAAM,EAAE,kBAAkB,CAAA;CAC3B,GAAG,MAAM,CAST;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD,IAAI,EAAE,OAAO,CAAA;CACd;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAA;IACjB,+FAA+F;IAC/F,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,wDAAwD;AACxD,MAAM,MAAM,WAAW,GACnB;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAC9C;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAA;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzC,gEAAgE;AAChE,wBAAgB,YAAY,CAC1B,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC/D,eAAe,CASjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,UAAU,GACjB,sBAAsB,CAaxB;AAED,oGAAoG;AACpG,MAAM,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;AAErD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,aAAa,GAAG,aAAa,CAGrE;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI,CAE/D;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE;AAC1B,mFAAmF;GACjF;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GACpB;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAaxC;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,aAAa,GAAG,SAAS,GACnC,OAAO,CAAC,eAAe,CAAC,CAQ1B;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,MAAM,GACV,UAAU,CAMZ"}