@coderifts/agent-guard 3.0.1 → 4.1.0

package/dist/esm/conditional-write.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Conditional-execution surface (reporting only — this package never writes).
+ *
+ * ACTIVE + FRESH only proves content matched at measurement time. A host that resolves
+ * then writes unconditionally still races; the conditional write itself is the host's job.
+ * We define the surface, demand it by policy, and report whether the host said it happened.
+ *
+ * Host contract (executeIfUnchanged):
+ *   The host SHOULD perform writes via executeIfUnchanged(write, expected_token) (or
+ *   equivalent: only apply the mutation if the resource still holds expected_token).
+ *   After the attempt, the host reports on the call context:
+ *     - conditional_write: true  — write was conditioned on a version token
+ *     - conditional_write: false — write was unconditional (host admits it)
+ *     - conditional_write: 'not_reported' — host did not report (DEFAULT; absence ≠ false)
+ *   When true, conditioned_on_token is the opaque token the host conditioned on.
+ *   Tokens are host-defined (git blob sha, etag, mtime-hash, …). This package never
+ *   interprets them — only carries them and compares for equality (===).
+ */
+/** Host-defined opaque version token. Compared only by string equality. */
+export type VersionToken = string;
+/**
+ * Host resolution surface: content plus an opaque version token.
+ * Returned by host resolvers that support conditional execution.
+ */
+export type VersionedContent = {
+    content: string;
+    version_token: VersionToken;
+};
+/**
+ * Host report of whether the write was conditioned on a version token.
+ * `not_reported` is the default — absence of a report is not false
+ * (absent ≠ 0 ≠ null ≠ unknown).
+ */
+export type ConditionalWriteReport = true | false | 'not_reported';
+/**
+ * Per-call forensic basis for conditional write (on every GuardOutcome).
+ * Survives replay unchanged when recorded.
+ */
+export type ConditionalWriteBasis = {
+    conditional_write: ConditionalWriteReport;
+    /**
+     * When conditional_write === true, the token the host says it conditioned on.
+     * Omitted when not_reported / false / not supplied.
+     */
+    conditioned_on_token?: VersionToken | null;
+    /** Config requireConditionalWrite for this call (policy). */
+    require_conditional_write: boolean;
+    /** Whether this call was treated as write-style. */
+    write_style: boolean;
+};
+/**
+ * Values the RUNNER collected / host reported before the pure guard path.
+ * Default when omitted: conditional_write 'not_reported'.
+ */
+export type ConditionalWriteCallContext = {
+    conditional_write?: ConditionalWriteReport;
+    conditioned_on_token?: VersionToken | null;
+    /** Optional versioned content for token carry (equality only). */
+    versioned_content?: VersionedContent | null;
+};
+/** Equality compare only — never semantic interpretation of the token. */
+export declare function tokensEqual(a: VersionToken | null | undefined, b: VersionToken | null | undefined): boolean;
+/**
+ * Build per-call conditional-write basis + optional enforce block.
+ * Pure once the host report is a value (no I/O).
+ *
+ * Policy (mirrors requireFreshness Decision-1): when requireConditionalWrite is true
+ * and the call is write-style, conditional_write must be true for enforced execution
+ * to be eligible. false and not_reported both refuse (distinct from "host said false"
+ * vs "host silent" only on the basis field — both block under policy).
+ */
+export declare function buildConditionalWriteBasis(input: {
+    writeStyle: boolean;
+    requireConditionalWrite: boolean;
+    ctx?: ConditionalWriteCallContext | null;
+}): {
+    basis: ConditionalWriteBasis;
+    /** If set, enforced execution must not proceed. */
+    blockCause?: 'CONDITIONAL_WRITE_REQUIRED';
+};
+/** Residual name when policy requires conditional write but host did not report true. */
+export declare const RESIDUAL_UNCONDITIONAL_WRITE = "composition_unconditional_write_under_policy";
+/**
+ * Coverage residual when requireConditionalWrite is on and the host report is not true.
+ * inescapable_runtime must stay false — we report what the host told us, never claim compliance.
+ */
+export declare function conditionalWriteResidual(input: {
+    requireConditionalWrite: boolean;
+    writeStyle: boolean;
+    conditionalWrite: ConditionalWriteReport;
+}): string | null;
+//# sourceMappingURL=conditional-write.d.ts.map

package/dist/esm/conditional-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditional-write.d.ts","sourceRoot":"","sources":["../../src/conditional-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAElC;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,YAAY,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,GAAG,KAAK,GAAG,cAAc,CAAC;AAEnE;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,iBAAiB,EAAE,sBAAsB,CAAC;IAC1C;;;OAGG;IACH,oBAAoB,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3C,6DAA6D;IAC7D,yBAAyB,EAAE,OAAO,CAAC;IACnC,oDAAoD;IACpD,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,oBAAoB,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3C,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC7C,CAAC;AAEF,0EAA0E;AAC1E,wBAAgB,WAAW,CACzB,CAAC,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,EAClC,CAAC,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GACjC,OAAO,CAIT;AASD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,UAAU,EAAE,OAAO,CAAC;IACpB,uBAAuB,EAAE,OAAO,CAAC;IACjC,GAAG,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;CAC1C,GAAG;IACF,KAAK,EAAE,qBAAqB,CAAC;IAC7B,mDAAmD;IACnD,UAAU,CAAC,EAAE,4BAA4B,CAAC;CAC3C,CAgCA;AAED,yFAAyF;AACzF,eAAO,MAAM,4BAA4B,iDAAiD,CAAC;AAE3F;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,uBAAuB,EAAE,OAAO,CAAC;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,sBAAsB,CAAC;CAC1C,GAAG,MAAM,GAAG,IAAI,CAKhB"}

package/dist/esm/conditional-write.js

@@ -0,0 +1,91 @@
+/**
+ * Conditional-execution surface (reporting only — this package never writes).
+ *
+ * ACTIVE + FRESH only proves content matched at measurement time. A host that resolves
+ * then writes unconditionally still races; the conditional write itself is the host's job.
+ * We define the surface, demand it by policy, and report whether the host said it happened.
+ *
+ * Host contract (executeIfUnchanged):
+ *   The host SHOULD perform writes via executeIfUnchanged(write, expected_token) (or
+ *   equivalent: only apply the mutation if the resource still holds expected_token).
+ *   After the attempt, the host reports on the call context:
+ *     - conditional_write: true  — write was conditioned on a version token
+ *     - conditional_write: false — write was unconditional (host admits it)
+ *     - conditional_write: 'not_reported' — host did not report (DEFAULT; absence ≠ false)
+ *   When true, conditioned_on_token is the opaque token the host conditioned on.
+ *   Tokens are host-defined (git blob sha, etag, mtime-hash, …). This package never
+ *   interprets them — only carries them and compares for equality (===).
+ */
+'use strict';
+/** Equality compare only — never semantic interpretation of the token. */
+export function tokensEqual(a, b) {
+    if (a == null || b == null)
+        return false;
+    if (typeof a !== 'string' || typeof b !== 'string')
+        return false;
+    return a === b;
+}
+function normalizeReport(raw) {
+    if (raw === true)
+        return true;
+    if (raw === false)
+        return false;
+    if (raw === 'not_reported')
+        return 'not_reported';
+    return 'not_reported';
+}
+/**
+ * Build per-call conditional-write basis + optional enforce block.
+ * Pure once the host report is a value (no I/O).
+ *
+ * Policy (mirrors requireFreshness Decision-1): when requireConditionalWrite is true
+ * and the call is write-style, conditional_write must be true for enforced execution
+ * to be eligible. false and not_reported both refuse (distinct from "host said false"
+ * vs "host silent" only on the basis field — both block under policy).
+ */
+export function buildConditionalWriteBasis(input) {
+    const require_conditional_write = input.requireConditionalWrite === true;
+    const write_style = input.writeStyle === true;
+    const ctx = input.ctx && typeof input.ctx === 'object' ? input.ctx : {};
+    const conditional_write = normalizeReport(ctx.conditional_write);
+    const basis = {
+        conditional_write,
+        require_conditional_write,
+        write_style,
+    };
+    // Token carry: prefer explicit conditioned_on_token, else versioned_content.version_token.
+    if (conditional_write === true) {
+        if (typeof ctx.conditioned_on_token === 'string') {
+            basis.conditioned_on_token = ctx.conditioned_on_token;
+        }
+        else if (ctx.versioned_content
+            && typeof ctx.versioned_content === 'object'
+            && typeof ctx.versioned_content.version_token === 'string') {
+            basis.conditioned_on_token = ctx.versioned_content.version_token;
+        }
+        else if (ctx.conditioned_on_token === null) {
+            basis.conditioned_on_token = null;
+        }
+    }
+    // Policy on write: only conditional_write:true is eligible for enforced:true.
+    if (write_style && require_conditional_write && conditional_write !== true) {
+        return { basis, blockCause: 'CONDITIONAL_WRITE_REQUIRED' };
+    }
+    return { basis };
+}
+/** Residual name when policy requires conditional write but host did not report true. */
+export const RESIDUAL_UNCONDITIONAL_WRITE = 'composition_unconditional_write_under_policy';
+/**
+ * Coverage residual when requireConditionalWrite is on and the host report is not true.
+ * inescapable_runtime must stay false — we report what the host told us, never claim compliance.
+ */
+export function conditionalWriteResidual(input) {
+    if (input.requireConditionalWrite !== true)
+        return null;
+    if (input.writeStyle !== true)
+        return null;
+    if (input.conditionalWrite === true)
+        return null;
+    return RESIDUAL_UNCONDITIONAL_WRITE;
+}
+//# sourceMappingURL=conditional-write.js.map

package/dist/esm/conditional-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditional-write.js","sourceRoot":"","sources":["../../src/conditional-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,YAAY,CAAC;AAiDb,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CACzB,CAAkC,EAClC,CAAkC;IAElC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,GAAG,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC;IAClD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAI1C;IAKC,MAAM,yBAAyB,GAAG,KAAK,CAAC,uBAAuB,KAAK,IAAI,CAAC;IACzE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;IAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,iBAAiB,GAAG,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAEjE,MAAM,KAAK,GAA0B;QACnC,iBAAiB;QACjB,yBAAyB;QACzB,WAAW;KACZ,CAAC;IAEF,2FAA2F;IAC3F,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;YACjD,KAAK,CAAC,oBAAoB,GAAG,GAAG,CAAC,oBAAoB,CAAC;QACxD,CAAC;aAAM,IACL,GAAG,CAAC,iBAAiB;eAClB,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;eACzC,OAAO,GAAG,CAAC,iBAAiB,CAAC,aAAa,KAAK,QAAQ,EAC1D,CAAC;YACD,KAAK,CAAC,oBAAoB,GAAG,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC;QACnE,CAAC;aAAM,IAAI,GAAG,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;YAC7C,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC;QACpC,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,WAAW,IAAI,yBAAyB,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,4BAA4B,GAAG,8CAA8C,CAAC;AAE3F;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,IAAI,KAAK,CAAC,uBAAuB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,4BAA4B,CAAC;AACtC,CAAC"}

package/dist/esm/deploy-bind.d.ts

@@ -0,0 +1,123 @@
+/**
+ * bindDeploy — pure deploy-TIME composition over deployGate (#8).
+ *
+ * Why this exists: deployGate is the pure decision; nothing in this package used to
+ * invoke it at the moment of deploying. The merge gate has the same shape
+ * (gateDecision is pure; GitHub enforces via required checks the package does not
+ * control). Deploy generalises that pattern with two differences:
+ *   1. There is no pull request / required status check to hang on — the host must
+ *      call this from the CD step itself.
+ *   2. The environment name is a HOST ASSERTION. The receipt's bound_environment is
+ *      signed evidence; the deploy target's environment string is not verified by us.
+ *      A host can claim "staging" while deploying to production. The output says so.
+ *
+ * This module performs NO I/O, does NOT re-verify receipts, and does NOT act on a
+ * pipeline. pipeline_action is always 'not_observed'. inescapable_deploy still comes
+ * only from deployGate (ENFORCING ∧ ¬bypass) — never flipped here.
+ *
+ * External note: coderifts-app CLI `deploy-gate` historically inlined a similar bind
+ * (deployBind). That is a consumer; this is the package-local pure entry hosts should
+ * call so the decision logic has a first-class caller in-repo.
+ */
+import { type DeployEnforcementState, type DeployGateDecision, type DeployGateReason, type DeployReceiptView, type GateStatusState } from './deploy-gate.js';
+/** Reasons a fresh re-preflight for this { env, artifact } can repair. */
+declare const REPAIRABLE: ReadonlySet<DeployGateReason>;
+/**
+ * Environment as supplied by the host at deploy time.
+ *
+ * provenance is ALWAYS 'host_asserted'. The package cannot observe the real CD
+ * target; treating this as verified would be the honesty failure this project keeps
+ * finding. Signed evidence lives on the receipt (bound_environment), not here.
+ */
+export type HostAssertedEnvironment = {
+    name: string;
+    /** Fixed literal — never 'verified'. */
+    provenance: 'host_asserted';
+};
+export type BindDeployInput = {
+    /**
+     * Host-asserted deploy environment. Pass a string (wrapped as host_asserted) or
+     * an explicit HostAssertedEnvironment. Never reported as package-verified.
+     */
+    environment: string | HostAssertedEnvironment;
+    /** Artifact / digest being deployed (host-supplied identity for this moment). */
+    artifact_id: string;
+    service?: string;
+    pipeline_run_id?: string;
+    /**
+     * Finished receipt VIEW (fields already produced + lifecycle-evaluated elsewhere).
+     * This function does not verify signatures or re-issue receipts. null → no_receipt.
+     */
+    receipt: DeployReceiptView | null;
+    /**
+     * Host-observed pipeline enforcement (CD config / step policy). Same role as
+     * ProtectionState for merge — an input, not a package discovery.
+     */
+    pipeline_enforcement: DeployEnforcementState;
+    /** Operation the receipt must match (default 'deploy'). */
+    operation?: string;
+    expected_fingerprint?: string;
+    expected_body_hash?: string;
+    allowPending?: boolean;
+    allowWarnDeploy?: boolean;
+    allowPrefixCompare?: boolean;
+};
+/**
+ * Result of a deploy-time bind. Distinguish carefully:
+ *   - gate / decision_allows_deploy — pure decision from deployGate
+ *   - pipeline_action — always 'not_observed' (we never block or run a deploy)
+ *   - environment.provenance — always 'host_asserted' (we never verified the target)
+ */
+export type BindDeployResult = {
+    /** Full pure gate decision (includes inescapable_deploy, residual, detail). */
+    gate: DeployGateDecision;
+    /**
+     * Whether the pure decision allows deploy. Naming avoids "deploy was blocked"
+     * (that would claim pipeline enforcement). Same bit as gate.deploy_allowed.
+     */
+    decision_allows_deploy: boolean;
+    /** Mirror of gate.state for check-run / step status UIs. */
+    deploy_check_status: GateStatusState;
+    /** Gate reason code (or no_receipt when receipt was null). */
+    reason: DeployGateReason;
+    /** Whether re-preflighting this target can repair a deny. */
+    must_re_preflight: boolean;
+    /**
+     * Environment as accepted into the gate. provenance is always host_asserted —
+     * never verified, never measured by this package.
+     */
+    environment: HostAssertedEnvironment;
+    artifact_id: string;
+    /**
+     * Always 'not_observed'. The package does not run, block, or skip a pipeline
+     * step. Whether the host CD job exits non-zero on decision_allows_deploy:false
+     * is entirely the pipeline's business.
+     */
+    pipeline_action: 'not_observed';
+    /**
+     * Convenience: inescapable_deploy from the gate only (never a host flag).
+     * True only when pipeline_enforcement is ENFORCING and bypass_possible is false
+     * AND the gate would allow — same honesty as deployGate.
+     */
+    inescapable_deploy: boolean;
+};
+/**
+ * Pure deploy-time entry: bind host claims + finished receipt view into deployGate.
+ *
+ * @example
+ * ```ts
+ * const r = bindDeploy({
+ *   environment: { name: 'production', provenance: 'host_asserted' },
+ *   artifact_id: digest,
+ *   receipt: receiptView,
+ *   pipeline_enforcement: { enforcement: 'ENFORCING', bypass_possible: false },
+ * });
+ * // r.decision_allows_deploy — decision only
+ * // r.pipeline_action === 'not_observed' — we did not enforce
+ * // r.environment.provenance === 'host_asserted' — we did not verify the target name
+ * if (!r.decision_allows_deploy) process.exit(1); // host pipeline chooses to honour
+ * ```
+ */
+export declare function bindDeploy(input: BindDeployInput): BindDeployResult;
+export { REPAIRABLE as DEPLOY_REPAIRABLE_REASONS };
+//# sourceMappingURL=deploy-bind.d.ts.map

package/dist/esm/deploy-bind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-bind.d.ts","sourceRoot":"","sources":["../../src/deploy-bind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAEtB,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAE1B,0EAA0E;AAC1E,QAAA,MAAM,UAAU,EAAE,WAAW,CAAC,gBAAgB,CAS5C,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,UAAU,EAAE,eAAe,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B;;;OAGG;IACH,WAAW,EAAE,MAAM,GAAG,uBAAuB,CAAC;IAC9C,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC;;;OAGG;IACH,oBAAoB,EAAE,sBAAsB,CAAC;IAC7C,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,+EAA+E;IAC/E,IAAI,EAAE,kBAAkB,CAAC;IACzB;;;OAGG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAChC,4DAA4D;IAC5D,mBAAmB,EAAE,eAAe,CAAC;IACrC,8DAA8D;IAC9D,MAAM,EAAE,gBAAgB,CAAC;IACzB,6DAA6D;IAC7D,iBAAiB,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,WAAW,EAAE,uBAAuB,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,eAAe,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAWF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAmDnE;AAED,OAAO,EAAE,UAAU,IAAI,yBAAyB,EAAE,CAAC"}

package/dist/esm/deploy-bind.js

@@ -0,0 +1,108 @@
+/**
+ * bindDeploy — pure deploy-TIME composition over deployGate (#8).
+ *
+ * Why this exists: deployGate is the pure decision; nothing in this package used to
+ * invoke it at the moment of deploying. The merge gate has the same shape
+ * (gateDecision is pure; GitHub enforces via required checks the package does not
+ * control). Deploy generalises that pattern with two differences:
+ *   1. There is no pull request / required status check to hang on — the host must
+ *      call this from the CD step itself.
+ *   2. The environment name is a HOST ASSERTION. The receipt's bound_environment is
+ *      signed evidence; the deploy target's environment string is not verified by us.
+ *      A host can claim "staging" while deploying to production. The output says so.
+ *
+ * This module performs NO I/O, does NOT re-verify receipts, and does NOT act on a
+ * pipeline. pipeline_action is always 'not_observed'. inescapable_deploy still comes
+ * only from deployGate (ENFORCING ∧ ¬bypass) — never flipped here.
+ *
+ * External note: coderifts-app CLI `deploy-gate` historically inlined a similar bind
+ * (deployBind). That is a consumer; this is the package-local pure entry hosts should
+ * call so the decision logic has a first-class caller in-repo.
+ */
+import { deployGate, } from './deploy-gate.js';
+/** Reasons a fresh re-preflight for this { env, artifact } can repair. */
+const REPAIRABLE = new Set([
+    'env_mismatch',
+    'stale_artifact',
+    'operation_mismatch',
+    'receipt_not_authorized',
+    'fingerprint_mismatch',
+    'body_hash_mismatch',
+    'no_receipt',
+    'inputs_incomplete',
+]);
+function asHostAssertedEnvironment(env) {
+    if (typeof env === 'string') {
+        return { name: env, provenance: 'host_asserted' };
+    }
+    const name = env && typeof env.name === 'string' ? env.name : '';
+    // Force provenance — a host cannot pass provenance: 'verified' through this API.
+    return { name, provenance: 'host_asserted' };
+}
+/**
+ * Pure deploy-time entry: bind host claims + finished receipt view into deployGate.
+ *
+ * @example
+ * ```ts
+ * const r = bindDeploy({
+ *   environment: { name: 'production', provenance: 'host_asserted' },
+ *   artifact_id: digest,
+ *   receipt: receiptView,
+ *   pipeline_enforcement: { enforcement: 'ENFORCING', bypass_possible: false },
+ * });
+ * // r.decision_allows_deploy — decision only
+ * // r.pipeline_action === 'not_observed' — we did not enforce
+ * // r.environment.provenance === 'host_asserted' — we did not verify the target name
+ * if (!r.decision_allows_deploy) process.exit(1); // host pipeline chooses to honour
+ * ```
+ */
+export function bindDeploy(input) {
+    const environment = asHostAssertedEnvironment(input.environment);
+    const artifact_id = input.artifact_id == null ? '' : String(input.artifact_id);
+    const operation = input.operation ?? 'deploy';
+    const deployTarget = {
+        environment: environment.name,
+        artifact_id,
+        ...(input.service != null ? { service: input.service } : {}),
+        ...(input.pipeline_run_id != null ? { pipeline_run_id: input.pipeline_run_id } : {}),
+    };
+    const requiredContext = {
+        operation,
+        enforcement: input.pipeline_enforcement || { enforcement: 'UNKNOWN', bypass_possible: true },
+        ...(input.service != null ? { service: input.service } : {}),
+        ...(input.expected_fingerprint != null
+            ? { expected_fingerprint: input.expected_fingerprint }
+            : {}),
+        ...(input.expected_body_hash != null
+            ? { expected_body_hash: input.expected_body_hash }
+            : {}),
+        ...(input.allowPending != null ? { allowPending: input.allowPending } : {}),
+        ...(input.allowWarnDeploy != null ? { allowWarnDeploy: input.allowWarnDeploy } : {}),
+        ...(input.allowPrefixCompare != null
+            ? { allowPrefixCompare: input.allowPrefixCompare }
+            : {}),
+    };
+    const gate = deployGate({
+        deployTarget,
+        receipt: input.receipt,
+        requiredContext,
+        ...(input.allowPending != null ? { allowPending: input.allowPending } : {}),
+        ...(input.allowWarnDeploy != null ? { allowWarnDeploy: input.allowWarnDeploy } : {}),
+        ...(input.allowPrefixCompare != null
+            ? { allowPrefixCompare: input.allowPrefixCompare }
+            : {}),
+    });
+    return {
+        gate,
+        decision_allows_deploy: gate.deploy_allowed === true,
+        deploy_check_status: gate.state,
+        reason: gate.reason,
+        must_re_preflight: REPAIRABLE.has(gate.reason),
+        environment, // always provenance: 'host_asserted'
+        artifact_id,
+        pipeline_action: 'not_observed',
+        inescapable_deploy: gate.inescapable_deploy === true,
+    };
+}
+export { REPAIRABLE as DEPLOY_REPAIRABLE_REASONS };
+//# sourceMappingURL=deploy-bind.js.map

package/dist/esm/deploy-bind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-bind.js","sourceRoot":"","sources":["../../src/deploy-bind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,UAAU,GAOX,MAAM,kBAAkB,CAAC;AAE1B,0EAA0E;AAC1E,MAAM,UAAU,GAAkC,IAAI,GAAG,CAAC;IACxD,cAAc;IACd,gBAAgB;IAChB,oBAAoB;IACpB,wBAAwB;IACxB,sBAAsB;IACtB,oBAAoB;IACpB,YAAY;IACZ,mBAAmB;CACpB,CAAC,CAAC;AAoFH,SAAS,yBAAyB,CAAC,GAAqC;IACtE,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,iFAAiF;IACjF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC;IAE9C,MAAM,YAAY,GAAiB;QACjC,WAAW,EAAE,WAAW,CAAC,IAAI;QAC7B,WAAW;QACX,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC;IAEF,MAAM,eAAe,GAAG;QACtB,SAAS;QACT,WAAW,EAAE,KAAK,CAAC,oBAAoB,IAAI,EAAE,WAAW,EAAE,SAAkB,EAAE,eAAe,EAAE,IAAI,EAAE;QACrG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,IAAI;YACpC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI;YAClC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI;YAClC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,YAAY;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,eAAe;QACf,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI;YAClC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,sBAAsB,EAAE,IAAI,CAAC,cAAc,KAAK,IAAI;QACpD,mBAAmB,EAAE,IAAI,CAAC,KAAK;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,iBAAiB,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QAC9C,WAAW,EAAE,qCAAqC;QAClD,WAAW;QACX,eAAe,EAAE,cAAc;QAC/B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,KAAK,IAAI;KACrD,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,UAAU,IAAI,yBAAyB,EAAE,CAAC"}

package/dist/esm/enforcement-gate.d.ts

@@ -1,7 +1,14 @@
 /**
  * Client-side authorization gate (P0-b/c) — mirrors the server §106 (binding), §111 (fail-closed on
- * degraded) and §115 (safe_for_agent) in the guard, so the client never executes off a raw
- * execution_action an attacker/proxy can flip. All checks are LOCAL and fail-closed.
+ * degraded) and §115 (safe_for_agent) in the guard. All checks are LOCAL and fail-closed.
+ *
+ * Threat model (bounded): a raw execution_action is not trusted alone when the response has NO
+ * receipt — without a signed decision_body_hash, a proxy or intermediary can flip fields. When a
+ * receipt IS present, decision_body_hash covers the RFC 8785-canonical envelope (minus receipt and
+ * the hash field itself) and the receipt signature covers that hash, so execution_action cannot be
+ * flipped without the recomputed hash diverging or a forged signature. The gate still reconciles
+ * decision↔action locally (stricter wins), fails closed on a PRESENT-but-unrecognised action
+ * (version skew — not a missing-action fallback), and never treats an unknown value as permission.
  *
  * Composes with the P0-a receipt binding (receipt-binding.ts). This module reconciles the DECISION
  * itself; receipt-binding authenticates the envelope the decision rides on.
@@ -25,6 +32,8 @@ export type GateResult = {
 };
 /**
  * Reconcile an envelope's decision fail-closed. Order:
+ *  0. execution_action PRESENT but not in closed set         → EXECUTION_ACTION_UNRECOGNISED
+ *     (version skew; distinct from DECISION_INCONSISTENT — reconciliation is impossible)
  *  1. decision present + valid enum                          (CE-EP-04)   → DECISION_INCONSISTENT
  *  2. effective decision = STRICTEST(envelope.decision, action-implied, top-level decision/action)
  *     (CE-EP-01, CE-CC-01)  — BLOCK/REQUIRE_APPROVAL → clean block (positive control CE-EP-02 kept)
@@ -34,9 +43,9 @@ export type GateResult = {
  *
  * @param response   the raw preflight response (for the top-level decision/action, CE-CC-01)
  * @param envelope   the decision_result envelope
- * @param executionAction  rd.executionAction from readDecision
+ * @param executionAction  rd.executionAction from readDecision (closed Action, or raw string if unrecognised)
  * @param sentArtifacts    the artifacts the guard sent to preflight (for the digest bind)
  */
-export declare function evaluateEnvelope(response: unknown, envelope: Record<string, unknown>, executionAction: Action, sentArtifacts: Artifact[]): GateResult;
+export declare function evaluateEnvelope(response: unknown, envelope: Record<string, unknown>, executionAction: Action | string, sentArtifacts: Artifact[]): GateResult;
 export {};
 //# sourceMappingURL=enforcement-gate.d.ts.map

package/dist/esm/enforcement-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enforcement-gate.d.ts","sourceRoot":"","sources":["../../src/enforcement-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3D,KAAK,MAAM,GAAG,UAAU,GAAG,0BAA0B,GAAG,kBAAkB,GAAG,MAAM,CAAC;AAoBpF,wGAAwG;AACxG,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAMnE;AAED,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAKtE;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAA;CAAE,GAC/C;IAAE,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CAAA;CAAE,GACnE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,eAAe,EAAE,MAAM,EACvB,aAAa,EAAE,QAAQ,EAAE,GACxB,UAAU,CAkDZ"}
+{"version":3,"file":"enforcement-gate.d.ts","sourceRoot":"","sources":["../../src/enforcement-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3D,KAAK,MAAM,GAAG,UAAU,GAAG,0BAA0B,GAAG,kBAAkB,GAAG,MAAM,CAAC;AAoBpF,wGAAwG;AACxG,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAMnE;AAED,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAKtE;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAA;CAAE,GAC/C;IAAE,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CAAA;CAAE,GACnE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,eAAe,EAAE,MAAM,GAAG,MAAM,EAChC,aAAa,EAAE,QAAQ,EAAE,GACxB,UAAU,CAoEZ"}

package/dist/esm/enforcement-gate.js

@@ -1,7 +1,14 @@
 /**
  * Client-side authorization gate (P0-b/c) — mirrors the server §106 (binding), §111 (fail-closed on
- * degraded) and §115 (safe_for_agent) in the guard, so the client never executes off a raw
- * execution_action an attacker/proxy can flip. All checks are LOCAL and fail-closed.
+ * degraded) and §115 (safe_for_agent) in the guard. All checks are LOCAL and fail-closed.
+ *
+ * Threat model (bounded): a raw execution_action is not trusted alone when the response has NO
+ * receipt — without a signed decision_body_hash, a proxy or intermediary can flip fields. When a
+ * receipt IS present, decision_body_hash covers the RFC 8785-canonical envelope (minus receipt and
+ * the hash field itself) and the receipt signature covers that hash, so execution_action cannot be
+ * flipped without the recomputed hash diverging or a forged signature. The gate still reconciles
+ * decision↔action locally (stricter wins), fails closed on a PRESENT-but-unrecognised action
+ * (version skew — not a missing-action fallback), and never treats an unknown value as permission.
  *
  * Composes with the P0-a receipt binding (receipt-binding.ts). This module reconciles the DECISION
  * itself; receipt-binding authenticates the envelope the decision rides on.
@@ -40,6 +47,8 @@ export function computeBundleFingerprint(artifacts) {
 }
 /**
  * Reconcile an envelope's decision fail-closed. Order:
+ *  0. execution_action PRESENT but not in closed set         → EXECUTION_ACTION_UNRECOGNISED
+ *     (version skew; distinct from DECISION_INCONSISTENT — reconciliation is impossible)
  *  1. decision present + valid enum                          (CE-EP-04)   → DECISION_INCONSISTENT
  *  2. effective decision = STRICTEST(envelope.decision, action-implied, top-level decision/action)
  *     (CE-EP-01, CE-CC-01)  — BLOCK/REQUIRE_APPROVAL → clean block (positive control CE-EP-02 kept)
@@ -49,18 +58,34 @@ export function computeBundleFingerprint(artifacts) {
  *
  * @param response   the raw preflight response (for the top-level decision/action, CE-CC-01)
  * @param envelope   the decision_result envelope
- * @param executionAction  rd.executionAction from readDecision
+ * @param executionAction  rd.executionAction from readDecision (closed Action, or raw string if unrecognised)
  * @param sentArtifacts    the artifacts the guard sent to preflight (for the digest bind)
  */
 export function evaluateEnvelope(response, envelope, executionAction, sentArtifacts) {
+    const top = (response && typeof response === 'object') ? response : {};
+    // 0. PRESENT-but-unrecognised action — before any decision map or reconciliation.
+    //    Missing action is not handled here (readDecision maps legacy missing → closed Action).
+    const candidates = [executionAction, envelope.execution_action, top.execution_action];
+    for (const cand of candidates) {
+        if (cand === undefined || cand === null || cand === '')
+            continue; // missing — skip
+        if (!isAction(cand)) {
+            return {
+                verdict: 'fail-closed',
+                cause: 'EXECUTION_ACTION_UNRECOGNISED',
+                detail: `execution_action=${JSON.stringify(cand)} is present but not in the closed set`,
+            };
+        }
+    }
     // 1. decision required + valid enum.
     const dec = envelope.decision;
     if (!isDecision(dec)) {
         return { verdict: 'fail-closed', cause: 'DECISION_INCONSISTENT', detail: `decision=${JSON.stringify(dec)} is missing/invalid` };
     }
+    // Known closed action from here (step 0 rejected unknowns).
+    const action = executionAction;
     // 2. Strictest of every decision signal present (envelope, action-implied, top-level).
-    const signals = [dec, ACTION_TO_DECISION[executionAction]];
-    const top = (response && typeof response === 'object') ? response : {};
+    const signals = [dec, ACTION_TO_DECISION[action]];
     if (isDecision(top.decision))
         signals.push(top.decision);
     if (isAction(top.execution_action))
@@ -71,8 +96,8 @@ export function evaluateEnvelope(response, envelope, executionAction, sentArtifa
         return { verdict: 'block-strict', decision: effective };
     }
     // (effective is ALLOW or WARN — but ALSO require the envelope's own action to agree, else tamper.)
-    if (DECISION_TO_ACTION[dec] !== executionAction) {
-        return { verdict: 'fail-closed', cause: 'DECISION_INCONSISTENT', detail: `decision=${dec} ≠ execution_action=${executionAction}` };
+    if (DECISION_TO_ACTION[dec] !== action) {
+        return { verdict: 'fail-closed', cause: 'DECISION_INCONSISTENT', detail: `decision=${dec} ≠ execution_action=${action}` };
     }
     // 3. §115 — safe_for_agent=false is NEVER executable, regardless of action.
     if (envelope.safe_for_agent === false) {

package/dist/esm/enforcement-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"enforcement-gate.js","sourceRoot":"","sources":["../../src/enforcement-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,MAAM,aAAa,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACrG,MAAM,kBAAkB,GAA6B;IACnD,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO;CACzG,CAAC;AACF,MAAM,kBAAkB,GAA6B;IACnD,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM;CACzG,CAAC;AACF,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,OAAO,CAAC;AACpF,CAAC;AACD,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,0BAA0B,IAAI,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,MAAM,CAAC;AAC1G,CAAC;AAED,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,sDAAsD;AAC1E,SAAS,SAAS,CAAC,CAAS,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9F,SAAS,OAAO,CAAC,CAAU,IAAY,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjH,wGAAwG;AACxG,MAAM,UAAU,qBAAqB,CAAC,SAAqB;IACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE;SAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;SAC3E,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,UAAU,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,SAAqB;IAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE;SAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,OAAO,UAAU,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAOD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAiB,EACjB,QAAiC,EACjC,eAAuB,EACvB,aAAyB;IAEzB,qCAAqC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;IAClI,CAAC;IAED,uFAAuF;IACvF,MAAM,OAAO,GAAe,CAAC,GAAG,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1F,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,gBAAgB,EAAE,CAAC;QAC/D,2FAA2F;QAC3F,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAyC,EAAE,CAAC;IAC1F,CAAC;IAED,mGAAmG;IACnG,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,eAAe,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,YAAY,GAAG,uBAAuB,eAAe,EAAE,EAAE,CAAC;IACrI,CAAC;IAED,4EAA4E;IAC5E,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;IAC/H,CAAC;IAED,mEAAmE;IACnE,MAAM,eAAe,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IAClD,IAAI,QAAQ,CAAC,iBAAiB,KAAK,KAAK;WACjC,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;WAC9D,QAAQ,CAAC,QAAQ,KAAK,IAAI;WAC1B,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAC1G,CAAC;IAED,6FAA6F;IAC7F,sGAAsG;IACtG,gGAAgG;IAChG,gGAAgG;IAChG,gGAAgG;IAChG,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;WACrD,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ;WAC5C,QAAQ,CAAC,eAAe,KAAK,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAC;IACzI,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACjF,CAAC"}
+{"version":3,"file":"enforcement-gate.js","sourceRoot":"","sources":["../../src/enforcement-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,MAAM,aAAa,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACrG,MAAM,kBAAkB,GAA6B;IACnD,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO;CACzG,CAAC;AACF,MAAM,kBAAkB,GAA6B;IACnD,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM;CACzG,CAAC;AACF,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,OAAO,CAAC;AACpF,CAAC;AACD,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,0BAA0B,IAAI,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,MAAM,CAAC;AAC1G,CAAC;AAED,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,sDAAsD;AAC1E,SAAS,SAAS,CAAC,CAAS,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9F,SAAS,OAAO,CAAC,CAAU,IAAY,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjH,wGAAwG;AACxG,MAAM,UAAU,qBAAqB,CAAC,SAAqB;IACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE;SAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;SAC3E,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,UAAU,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,SAAqB;IAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE;SAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,OAAO,UAAU,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAOD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAiB,EACjB,QAAiC,EACjC,eAAgC,EAChC,aAAyB;IAEzB,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IAElG,kFAAkF;IAClF,4FAA4F;IAC5F,MAAM,UAAU,GAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjG,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS,CAAC,iBAAiB;QACnF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,aAAa;gBACtB,KAAK,EAAE,+BAA+B;gBACtC,MAAM,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uCAAuC;aACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;IAClI,CAAC;IAED,4DAA4D;IAC5D,MAAM,MAAM,GAAG,eAAyB,CAAC;IAEzC,uFAAuF;IACvF,MAAM,OAAO,GAAe,CAAC,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1F,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,gBAAgB,EAAE,CAAC;QAC/D,2FAA2F;QAC3F,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAyC,EAAE,CAAC;IAC1F,CAAC;IAED,mGAAmG;IACnG,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,YAAY,GAAG,uBAAuB,MAAM,EAAE,EAAE,CAAC;IAC5H,CAAC;IAED,4EAA4E;IAC5E,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;IAC/H,CAAC;IAED,mEAAmE;IACnE,MAAM,eAAe,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IAClD,IAAI,QAAQ,CAAC,iBAAiB,KAAK,KAAK;WACjC,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;WAC9D,QAAQ,CAAC,QAAQ,KAAK,IAAI;WAC1B,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAC1G,CAAC;IAED,6FAA6F;IAC7F,sGAAsG;IACtG,gGAAgG;IAChG,gGAAgG;IAChG,gGAAgG;IAChG,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;WACrD,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ;WAC5C,QAAQ,CAAC,eAAe,KAAK,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAC;IACzI,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACjF,CAAC"}