@coderifts/agent-guard 9.6.0 → 10.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +26 -6
- package/dist/cjs/coverage-attestation.d.ts +27 -0
- package/dist/cjs/coverage-attestation.d.ts.map +1 -0
- package/dist/cjs/coverage-attestation.js +146 -0
- package/dist/cjs/coverage-attestation.js.map +1 -0
- package/dist/cjs/index.d.ts +4 -0
- package/dist/cjs/index.d.ts.map +1 -1
- package/dist/cjs/index.js +20 -3
- package/dist/cjs/index.js.map +1 -1
- package/dist/cjs/policy.d.ts +1 -1
- package/dist/cjs/policy.d.ts.map +1 -1
- package/dist/cjs/policy.js +2 -2
- package/dist/cjs/policy.js.map +1 -1
- package/dist/cjs/tool-registry.d.ts +5 -4
- package/dist/cjs/tool-registry.d.ts.map +1 -1
- package/dist/cjs/tool-registry.js +5 -4
- package/dist/cjs/tool-registry.js.map +1 -1
- package/dist/cjs/toolset-attestation.d.ts +67 -0
- package/dist/cjs/toolset-attestation.d.ts.map +1 -0
- package/dist/cjs/toolset-attestation.js +250 -0
- package/dist/cjs/toolset-attestation.js.map +1 -0
- package/dist/cjs/with-coderifts.d.ts.map +1 -1
- package/dist/cjs/with-coderifts.js +75 -0
- package/dist/cjs/with-coderifts.js.map +1 -1
- package/dist/esm/coverage-attestation.d.ts +27 -0
- package/dist/esm/coverage-attestation.d.ts.map +1 -0
- package/dist/esm/coverage-attestation.js +141 -0
- package/dist/esm/coverage-attestation.js.map +1 -0
- package/dist/esm/index.d.ts +4 -0
- package/dist/esm/index.d.ts.map +1 -1
- package/dist/esm/index.js +2 -0
- package/dist/esm/index.js.map +1 -1
- package/dist/esm/policy.d.ts +1 -1
- package/dist/esm/policy.d.ts.map +1 -1
- package/dist/esm/policy.js +2 -2
- package/dist/esm/policy.js.map +1 -1
- package/dist/esm/tool-registry.d.ts +5 -4
- package/dist/esm/tool-registry.d.ts.map +1 -1
- package/dist/esm/tool-registry.js +5 -4
- package/dist/esm/tool-registry.js.map +1 -1
- package/dist/esm/toolset-attestation.d.ts +67 -0
- package/dist/esm/toolset-attestation.d.ts.map +1 -0
- package/dist/esm/toolset-attestation.js +243 -0
- package/dist/esm/toolset-attestation.js.map +1 -0
- package/dist/esm/with-coderifts.d.ts.map +1 -1
- package/dist/esm/with-coderifts.js +75 -0
- package/dist/esm/with-coderifts.js.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,67 @@
|
|
|
1
|
+
import type { ProtectedTool } from './tool-registry.js';
|
|
2
|
+
export declare const TOOLSET_ATTEST_VERSION = "cr.toolset.attest.v1";
|
|
3
|
+
export declare const TOOLSET_ATTEST_SIGNING_PREFIX = "crtoolsetattest.v1";
|
|
4
|
+
export declare const TOOLSET_ATTEST_ENVELOPE_TAG = "cr.toolset.attest.v1";
|
|
5
|
+
/**
|
|
6
|
+
* The declared sentence, byte-identical to the app kernel's closed set of one.
|
|
7
|
+
* A different sentence is MALFORMED there, not a weaker declaration.
|
|
8
|
+
*/
|
|
9
|
+
export declare const TOOLSET_ATTEST_STATEMENT = "this is the complete set of tools that can mutate a governed target";
|
|
10
|
+
export type ToolsetAttestationSigner = (bytes: Uint8Array) => Uint8Array | Promise<Uint8Array>;
|
|
11
|
+
export type ToolsetAttestationConfig = {
|
|
12
|
+
/** Customer-held declaration key id. Named on the token; resolved later against a registry. */
|
|
13
|
+
kid: string;
|
|
14
|
+
/** Host signs the UTF-8 signing-input bytes. Returns raw Ed25519 signature. Never a raw key. */
|
|
15
|
+
signer: ToolsetAttestationSigner;
|
|
16
|
+
/**
|
|
17
|
+
* The accountable party. Required — without a named declarer, "accountable" is empty and the
|
|
18
|
+
* artifact means nothing.
|
|
19
|
+
*/
|
|
20
|
+
declarer: string;
|
|
21
|
+
/** Framework name. Must be supplied WITH frameworkVersion or not at all. */
|
|
22
|
+
framework?: string;
|
|
23
|
+
/** Framework version. Must be supplied WITH framework or not at all. */
|
|
24
|
+
frameworkVersion?: string;
|
|
25
|
+
/** Optional scope label. */
|
|
26
|
+
sessionId?: string;
|
|
27
|
+
};
|
|
28
|
+
export type ToolsetDeclarationEntry = {
|
|
29
|
+
name: string;
|
|
30
|
+
mutation_class: 'mutating' | 'readonly';
|
|
31
|
+
input_schema_digest?: string;
|
|
32
|
+
};
|
|
33
|
+
/**
|
|
34
|
+
* Canonical set digest. MUST stay byte-identical to the app kernel's computeSetDigest — a second,
|
|
35
|
+
* subtly different digest would mint tokens that verify as UNBOUND against the real set.
|
|
36
|
+
* Pinned by a test that requires the app kernel and compares outputs.
|
|
37
|
+
*/
|
|
38
|
+
export declare function computeToolsetDigest(entries: readonly ToolsetDeclarationEntry[]): {
|
|
39
|
+
ok: true;
|
|
40
|
+
digest: string;
|
|
41
|
+
tool_count: number;
|
|
42
|
+
mutating_count: number;
|
|
43
|
+
} | {
|
|
44
|
+
ok: false;
|
|
45
|
+
reason: string;
|
|
46
|
+
};
|
|
47
|
+
/**
|
|
48
|
+
* Build declaration entries from the REGISTERED TOOL TABLE. This is the whole point: the
|
|
49
|
+
* declaration describes what was registered, not what someone typed.
|
|
50
|
+
*/
|
|
51
|
+
export declare function declarationEntriesFromTools(tools: readonly ProtectedTool[]): ToolsetDeclarationEntry[];
|
|
52
|
+
export declare function toolsetAttestSigningInput(body: Record<string, unknown>): string;
|
|
53
|
+
/**
|
|
54
|
+
* Issue a cr.toolset.attest.v1 token from the registered tool table.
|
|
55
|
+
* Returns undefined when config is absent, the table is unusable, the framework pair is
|
|
56
|
+
* unpaired, or the host signer throws — never an unsigned token.
|
|
57
|
+
*/
|
|
58
|
+
export declare function tryIssueToolsetAttestation(args: {
|
|
59
|
+
config?: ToolsetAttestationConfig | null;
|
|
60
|
+
tools: readonly ProtectedTool[] | null | undefined;
|
|
61
|
+
guardVersion?: string | null;
|
|
62
|
+
receiptDigest?: string | null;
|
|
63
|
+
scopeNote?: string | null;
|
|
64
|
+
now?: string;
|
|
65
|
+
}): Promise<string | undefined>;
|
|
66
|
+
export declare function kidFromToolsetAttestation(token: string | undefined | null): string | null;
|
|
67
|
+
//# sourceMappingURL=toolset-attestation.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"toolset-attestation.d.ts","sourceRoot":"","sources":["../../src/toolset-attestation.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,oBAAoB,CAAC;AAE3E,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,uBAAuB,CAAC;AAClE,eAAO,MAAM,2BAA2B,yBAAyB,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,wEACkC,CAAC;AAQxE,MAAM,MAAM,wBAAwB,GAAG,CACrC,KAAK,EAAE,UAAU,KACd,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,MAAM,MAAM,wBAAwB,GAAG;IACrC,+FAA+F;IAC/F,GAAG,EAAE,MAAM,CAAC;IACZ,gGAAgG;IAChG,MAAM,EAAE,wBAAwB,CAAC;IACjC;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,UAAU,GAAG,UAAU,CAAC;IACxC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AA+BF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,SAAS,uBAAuB,EAAE,GAC1C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAiChC;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,SAAS,aAAa,EAAE,GAC9B,uBAAuB,EAAE,CAc3B;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAkB/E;AAgBD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,MAAM,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACzC,KAAK,EAAE,SAAS,aAAa,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC;IACnD,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA0D9B;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAKzF"}
|
|
@@ -0,0 +1,250 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* cr.toolset.attest.v1 issuance (guard side) — "Represented".
|
|
3
|
+
*
|
|
4
|
+
* Wire/signing input MIRRORS app src/verdict-core/toolset-attestation.js. The guard SIGNS via a
|
|
5
|
+
* host-provided sign(bytes) callback — never a raw key in config. CodeRifts never holds the
|
|
6
|
+
* declaration key. Custody model copied from tryIssueCoverageAttestation and
|
|
7
|
+
* tryIssueMonitoringAttestation, deliberately: one custody story for every host-signed artifact,
|
|
8
|
+
* not a third one per envelope.
|
|
9
|
+
*
|
|
10
|
+
* Signer throw / null / empty signature → omit the token; never unsigned.
|
|
11
|
+
* Absent config → undefined, byte-identical to not calling this at all.
|
|
12
|
+
*
|
|
13
|
+
* ── WHY ISSUANCE LIVES HERE ─────────────────────────────────────────────────────────────────
|
|
14
|
+
* The spec's own reasoning: a declaration typed by hand is the failure mode the artifact exists
|
|
15
|
+
* to prevent. This module is the only place that holds the actual tool table, so the entries are
|
|
16
|
+
* GENERATED from the registered tools — name, input schema, resolved mutation class — and never
|
|
17
|
+
* from config. A host can choose whether to declare; it cannot choose what the declaration says.
|
|
18
|
+
*
|
|
19
|
+
* ── THE VOCABULARY MAPPING, and it is the point of this module ──────────────────────────────
|
|
20
|
+
* The guard's mutation vocabulary is WIDER than the envelope's, exactly as with coverage:
|
|
21
|
+
* guard readonly | mutating | mutating_shell | mutating_vcs | mutating_deploy
|
|
22
|
+
* envelope readonly | mutating
|
|
23
|
+
*
|
|
24
|
+
* Every `mutating_*` collapses to `mutating`. That is not information loss the envelope hides:
|
|
25
|
+
* the declared sentence is about which tools CAN MUTATE a governed target, and all four mutating
|
|
26
|
+
* classes answer that question the same way. Emitting `mutating_shell` would be rejected by the
|
|
27
|
+
* app kernel as `bad_mutation_class` — so the mapping happens here, where the meaning is known,
|
|
28
|
+
* rather than minting a token that fails verification.
|
|
29
|
+
*/
|
|
30
|
+
'use strict';
|
|
31
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
32
|
+
exports.TOOLSET_ATTEST_STATEMENT = exports.TOOLSET_ATTEST_ENVELOPE_TAG = exports.TOOLSET_ATTEST_SIGNING_PREFIX = exports.TOOLSET_ATTEST_VERSION = void 0;
|
|
33
|
+
exports.computeToolsetDigest = computeToolsetDigest;
|
|
34
|
+
exports.declarationEntriesFromTools = declarationEntriesFromTools;
|
|
35
|
+
exports.toolsetAttestSigningInput = toolsetAttestSigningInput;
|
|
36
|
+
exports.tryIssueToolsetAttestation = tryIssueToolsetAttestation;
|
|
37
|
+
exports.kidFromToolsetAttestation = kidFromToolsetAttestation;
|
|
38
|
+
const node_crypto_1 = require("node:crypto");
|
|
39
|
+
exports.TOOLSET_ATTEST_VERSION = 'cr.toolset.attest.v1';
|
|
40
|
+
exports.TOOLSET_ATTEST_SIGNING_PREFIX = 'crtoolsetattest.v1';
|
|
41
|
+
exports.TOOLSET_ATTEST_ENVELOPE_TAG = 'cr.toolset.attest.v1';
|
|
42
|
+
/**
|
|
43
|
+
* The declared sentence, byte-identical to the app kernel's closed set of one.
|
|
44
|
+
* A different sentence is MALFORMED there, not a weaker declaration.
|
|
45
|
+
*/
|
|
46
|
+
exports.TOOLSET_ATTEST_STATEMENT = 'this is the complete set of tools that can mutate a governed target';
|
|
47
|
+
/** Envelope classes. Two — the guard's five collapse onto these. */
|
|
48
|
+
const ENVELOPE_CLASSES = ['mutating', 'readonly'];
|
|
49
|
+
/** Mirrors the app kernel's MAX_ENTRIES. A larger table is a packaging problem, not a set. */
|
|
50
|
+
const MAX_ENTRIES = 512;
|
|
51
|
+
const scalar = (v) => (v == null ? '' : String(v));
|
|
52
|
+
const optional = (v) => (v != null && String(v).length > 0 ? String(v) : '');
|
|
53
|
+
function b64url(buf) {
|
|
54
|
+
return buf.toString('base64url');
|
|
55
|
+
}
|
|
56
|
+
function sha256hex(s) {
|
|
57
|
+
return (0, node_crypto_1.createHash)('sha256').update(s, 'utf8').digest('hex');
|
|
58
|
+
}
|
|
59
|
+
/** Every mutating_* answers "can this mutate a governed target?" the same way. */
|
|
60
|
+
function toEnvelopeClass(cls) {
|
|
61
|
+
return cls === 'readonly' ? 'readonly' : 'mutating';
|
|
62
|
+
}
|
|
63
|
+
/**
|
|
64
|
+
* Stable JSON for an input schema. Object keys sorted at every depth so a re-serialised schema
|
|
65
|
+
* does not change the digest; arrays keep their order because order is meaningful in a schema.
|
|
66
|
+
*/
|
|
67
|
+
function stableStringify(value) {
|
|
68
|
+
if (value === null || typeof value !== 'object')
|
|
69
|
+
return JSON.stringify(value) ?? 'null';
|
|
70
|
+
if (Array.isArray(value))
|
|
71
|
+
return '[' + value.map(stableStringify).join(',') + ']';
|
|
72
|
+
const obj = value;
|
|
73
|
+
const keys = Object.keys(obj).sort();
|
|
74
|
+
return '{' + keys.map((k) => JSON.stringify(k) + ':' + stableStringify(obj[k])).join(',') + '}';
|
|
75
|
+
}
|
|
76
|
+
/**
|
|
77
|
+
* Canonical set digest. MUST stay byte-identical to the app kernel's computeSetDigest — a second,
|
|
78
|
+
* subtly different digest would mint tokens that verify as UNBOUND against the real set.
|
|
79
|
+
* Pinned by a test that requires the app kernel and compares outputs.
|
|
80
|
+
*/
|
|
81
|
+
function computeToolsetDigest(entries) {
|
|
82
|
+
if (!Array.isArray(entries))
|
|
83
|
+
return { ok: false, reason: 'entries_not_array' };
|
|
84
|
+
if (entries.length === 0)
|
|
85
|
+
return { ok: false, reason: 'entries_empty' };
|
|
86
|
+
if (entries.length > MAX_ENTRIES)
|
|
87
|
+
return { ok: false, reason: 'entries_too_many' };
|
|
88
|
+
const seen = new Set();
|
|
89
|
+
const rows = [];
|
|
90
|
+
for (const e of entries) {
|
|
91
|
+
if (!e || typeof e !== 'object')
|
|
92
|
+
return { ok: false, reason: 'entry_not_object' };
|
|
93
|
+
const name = e.name;
|
|
94
|
+
const cls = e.mutation_class;
|
|
95
|
+
const sd = e.input_schema_digest;
|
|
96
|
+
if (typeof name !== 'string' || !name || name.length > 128)
|
|
97
|
+
return { ok: false, reason: 'bad_entry_name' };
|
|
98
|
+
if (name.includes('|'))
|
|
99
|
+
return { ok: false, reason: 'delimiter_in_entry_name' };
|
|
100
|
+
if (!ENVELOPE_CLASSES.includes(cls))
|
|
101
|
+
return { ok: false, reason: 'bad_mutation_class' };
|
|
102
|
+
if (sd != null) {
|
|
103
|
+
if (typeof sd !== 'string' || !sd.startsWith('sha256:') || sd.includes('|')) {
|
|
104
|
+
return { ok: false, reason: 'bad_input_schema_digest' };
|
|
105
|
+
}
|
|
106
|
+
}
|
|
107
|
+
if (seen.has(name))
|
|
108
|
+
return { ok: false, reason: 'duplicate_entry_name' };
|
|
109
|
+
seen.add(name);
|
|
110
|
+
rows.push([name, cls, sd == null ? '' : sd]);
|
|
111
|
+
}
|
|
112
|
+
rows.sort((a, b) => (a[0] < b[0] ? -1 : (a[0] > b[0] ? 1 : 0)));
|
|
113
|
+
const canonical = rows.map((r) => r.join(' ')).join('');
|
|
114
|
+
return {
|
|
115
|
+
ok: true,
|
|
116
|
+
digest: 'sha256:' + sha256hex(canonical),
|
|
117
|
+
tool_count: rows.length,
|
|
118
|
+
mutating_count: rows.filter((r) => r[1] === 'mutating').length,
|
|
119
|
+
};
|
|
120
|
+
}
|
|
121
|
+
/**
|
|
122
|
+
* Build declaration entries from the REGISTERED TOOL TABLE. This is the whole point: the
|
|
123
|
+
* declaration describes what was registered, not what someone typed.
|
|
124
|
+
*/
|
|
125
|
+
function declarationEntriesFromTools(tools) {
|
|
126
|
+
const out = [];
|
|
127
|
+
for (const t of tools) {
|
|
128
|
+
if (!t || typeof t.name !== 'string' || !t.name)
|
|
129
|
+
continue;
|
|
130
|
+
const entry = {
|
|
131
|
+
name: t.name,
|
|
132
|
+
mutation_class: toEnvelopeClass(t._coderifts.mutationClass),
|
|
133
|
+
};
|
|
134
|
+
if (t.inputSchema !== undefined) {
|
|
135
|
+
entry.input_schema_digest = 'sha256:' + sha256hex(stableStringify(t.inputSchema));
|
|
136
|
+
}
|
|
137
|
+
out.push(entry);
|
|
138
|
+
}
|
|
139
|
+
return out;
|
|
140
|
+
}
|
|
141
|
+
function toolsetAttestSigningInput(body) {
|
|
142
|
+
const parts = [
|
|
143
|
+
exports.TOOLSET_ATTEST_SIGNING_PREFIX,
|
|
144
|
+
scalar(body.kid),
|
|
145
|
+
scalar(body.declarer),
|
|
146
|
+
scalar(body.statement),
|
|
147
|
+
scalar(body.set_digest),
|
|
148
|
+
scalar(body.declared_at),
|
|
149
|
+
optional(body.session_id),
|
|
150
|
+
optional(body.receipt_digest),
|
|
151
|
+
optional(body.framework),
|
|
152
|
+
optional(body.framework_version),
|
|
153
|
+
optional(body.guard_version),
|
|
154
|
+
body.tool_count == null ? '' : String(body.tool_count),
|
|
155
|
+
body.mutating_count == null ? '' : String(body.mutating_count),
|
|
156
|
+
optional(body.scope_note),
|
|
157
|
+
];
|
|
158
|
+
return parts.join('|');
|
|
159
|
+
}
|
|
160
|
+
const SIGNED_STRING_FIELDS = [
|
|
161
|
+
'kid', 'declarer', 'statement', 'set_digest', 'declared_at',
|
|
162
|
+
'session_id', 'receipt_digest', 'scope_note',
|
|
163
|
+
'framework', 'framework_version', 'guard_version',
|
|
164
|
+
];
|
|
165
|
+
function fieldHasDelimiter(body) {
|
|
166
|
+
for (const k of SIGNED_STRING_FIELDS) {
|
|
167
|
+
const v = body[k];
|
|
168
|
+
if (typeof v === 'string' && v.includes('|'))
|
|
169
|
+
return true;
|
|
170
|
+
}
|
|
171
|
+
return false;
|
|
172
|
+
}
|
|
173
|
+
/**
|
|
174
|
+
* Issue a cr.toolset.attest.v1 token from the registered tool table.
|
|
175
|
+
* Returns undefined when config is absent, the table is unusable, the framework pair is
|
|
176
|
+
* unpaired, or the host signer throws — never an unsigned token.
|
|
177
|
+
*/
|
|
178
|
+
async function tryIssueToolsetAttestation(args) {
|
|
179
|
+
const cfg = args.config;
|
|
180
|
+
if (!cfg || typeof cfg.kid !== 'string' || !cfg.kid || typeof cfg.signer !== 'function') {
|
|
181
|
+
return undefined;
|
|
182
|
+
}
|
|
183
|
+
if (typeof cfg.declarer !== 'string' || cfg.declarer.length === 0)
|
|
184
|
+
return undefined;
|
|
185
|
+
// An unpaired framework pins nothing; the app kernel rejects it as framework_version_unpaired.
|
|
186
|
+
// Refuse to mint rather than emit a token that fails verification.
|
|
187
|
+
const hasFw = typeof cfg.framework === 'string' && cfg.framework.length > 0;
|
|
188
|
+
const hasFwV = typeof cfg.frameworkVersion === 'string' && cfg.frameworkVersion.length > 0;
|
|
189
|
+
if (hasFw !== hasFwV)
|
|
190
|
+
return undefined;
|
|
191
|
+
const tools = args.tools;
|
|
192
|
+
if (!Array.isArray(tools) || tools.length === 0)
|
|
193
|
+
return undefined;
|
|
194
|
+
const entries = declarationEntriesFromTools(tools);
|
|
195
|
+
const digest = computeToolsetDigest(entries);
|
|
196
|
+
if (!digest.ok)
|
|
197
|
+
return undefined;
|
|
198
|
+
const body = {
|
|
199
|
+
v: exports.TOOLSET_ATTEST_VERSION,
|
|
200
|
+
kid: cfg.kid,
|
|
201
|
+
declarer: cfg.declarer,
|
|
202
|
+
statement: exports.TOOLSET_ATTEST_STATEMENT,
|
|
203
|
+
set_digest: digest.digest,
|
|
204
|
+
declared_at: args.now || new Date().toISOString().replace(/\.\d{3}Z$/, 'Z'),
|
|
205
|
+
tool_count: digest.tool_count,
|
|
206
|
+
mutating_count: digest.mutating_count,
|
|
207
|
+
};
|
|
208
|
+
if (typeof cfg.sessionId === 'string' && cfg.sessionId)
|
|
209
|
+
body.session_id = cfg.sessionId;
|
|
210
|
+
if (typeof args.receiptDigest === 'string' && args.receiptDigest)
|
|
211
|
+
body.receipt_digest = args.receiptDigest;
|
|
212
|
+
if (hasFw) {
|
|
213
|
+
body.framework = cfg.framework;
|
|
214
|
+
body.framework_version = cfg.frameworkVersion;
|
|
215
|
+
}
|
|
216
|
+
if (typeof args.guardVersion === 'string' && args.guardVersion)
|
|
217
|
+
body.guard_version = args.guardVersion;
|
|
218
|
+
if (typeof args.scopeNote === 'string' && args.scopeNote)
|
|
219
|
+
body.scope_note = args.scopeNote;
|
|
220
|
+
if (fieldHasDelimiter(body))
|
|
221
|
+
return undefined;
|
|
222
|
+
const input = Buffer.from(toolsetAttestSigningInput(body), 'utf8');
|
|
223
|
+
let sig;
|
|
224
|
+
try {
|
|
225
|
+
sig = await cfg.signer(input);
|
|
226
|
+
}
|
|
227
|
+
catch {
|
|
228
|
+
return undefined;
|
|
229
|
+
}
|
|
230
|
+
if (sig == null)
|
|
231
|
+
return undefined;
|
|
232
|
+
const sigBuf = Buffer.isBuffer(sig) ? sig : Buffer.from(sig);
|
|
233
|
+
if (sigBuf.length === 0)
|
|
234
|
+
return undefined;
|
|
235
|
+
return [
|
|
236
|
+
exports.TOOLSET_ATTEST_ENVELOPE_TAG,
|
|
237
|
+
cfg.kid,
|
|
238
|
+
b64url(Buffer.from(JSON.stringify(body), 'utf8')),
|
|
239
|
+
b64url(sigBuf),
|
|
240
|
+
].join('|');
|
|
241
|
+
}
|
|
242
|
+
function kidFromToolsetAttestation(token) {
|
|
243
|
+
if (typeof token !== 'string' || token.length === 0)
|
|
244
|
+
return null;
|
|
245
|
+
const parts = token.split('|');
|
|
246
|
+
if (parts.length !== 4 || parts[0] !== exports.TOOLSET_ATTEST_ENVELOPE_TAG)
|
|
247
|
+
return null;
|
|
248
|
+
return parts[1] || null;
|
|
249
|
+
}
|
|
250
|
+
//# sourceMappingURL=toolset-attestation.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"toolset-attestation.js","sourceRoot":"","sources":["../../src/toolset-attestation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,YAAY,CAAC;;;AAoFb,oDAoCC;AAMD,kEAgBC;AAED,8DAkBC;AAqBD,gEAiEC;AAED,8DAKC;AA7PD,6CAAyC;AAG5B,QAAA,sBAAsB,GAAG,sBAAsB,CAAC;AAChD,QAAA,6BAA6B,GAAG,oBAAoB,CAAC;AACrD,QAAA,2BAA2B,GAAG,sBAAsB,CAAC;AAElE;;;GAGG;AACU,QAAA,wBAAwB,GACnC,qEAAqE,CAAC;AAExE,oEAAoE;AACpE,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,UAAU,CAAU,CAAC;AAE3D,8FAA8F;AAC9F,MAAM,WAAW,GAAG,GAAG,CAAC;AA8BxB,MAAM,MAAM,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAU,EAAE,CACtC,CAAC,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEvD,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,kFAAkF;AAClF,SAAS,eAAe,CAAC,GAAsB;IAC7C,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAClF,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AAClG,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAClC,OAA2C;IAG3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAEnF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC;QAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,mBAAmB,CAAC;QACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC3G,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAChF,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC/G,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACxC,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,MAAM;KAC/D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,2BAA2B,CACzC,KAA+B;IAE/B,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QAC1D,MAAM,KAAK,GAA4B;YACrC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC;SAC5D,CAAC;QACF,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,mBAAmB,GAAG,SAAS,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,yBAAyB,CAAC,IAA6B;IACrE,MAAM,KAAK,GAAG;QACZ,qCAA6B;QAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;QAC5B,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACtD,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;KAC1B,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,oBAAoB,GAAG;IAC3B,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa;IAC3D,YAAY,EAAE,gBAAgB,EAAE,YAAY;IAC5C,WAAW,EAAE,mBAAmB,EAAE,eAAe;CAClD,CAAC;AAEF,SAAS,iBAAiB,CAAC,IAA6B;IACtD,KAAK,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,0BAA0B,CAAC,IAOhD;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACxB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACxF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEpF,+FAA+F;IAC/F,mEAAmE;IACnE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3F,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAElE,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,IAAI,GAA4B;QACpC,CAAC,EAAE,8BAAsB;QACzB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,gCAAwB;QACnC,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,WAAW,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;QAC3E,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC;IACxF,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa;QAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC;IAC3G,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC/B,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY;QAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;IACvG,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;IAE3F,IAAI,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1C,OAAO;QACL,mCAA2B;QAC3B,GAAG,CAAC,GAAG;QACP,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC;KACf,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAgB,yBAAyB,CAAC,KAAgC;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,mCAA2B;QAAE,OAAO,IAAI,CAAC;IAChF,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC1B,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"with-coderifts.d.ts","sourceRoot":"","sources":["../../src/with-coderifts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AAGH,OAAO,KAAK,EACV,OAAO,EACP,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EAEtB,UAAU,EACV,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAIxE,2FAA2F;AAC3F,MAAM,MAAM,2BAA2B,GAAG;IACxC,iBAAiB,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC;AAEF,iHAAiH;AACjH,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,UAAU,CAAC;AAE/D,wDAAwD;AACxD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,MAAM,sBAAsB,GAC9B;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,UAAU,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;CAChC,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,UAAU,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEN;;;GAGG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,SAAS,sBAAsB,EAAE,GACxC,2BAA2B,CAO7B;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,2BAA2B,GAEjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,kBAAkB,GAAG,gBAAgB,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAWxC;AAED,uGAAuG;AACvG,MAAM,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,uEAAuE;IACvE,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,gHAAgH;IAChH,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9B;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,4GAA4G;IAC5G,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;IAClC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,cAAc,CAAC,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/C,uBAAuB,CAAC,EAAE,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACjE,UAAU,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IACvC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,sBAAsB,KAAK,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACzD,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,WAAW,CAAC,4BAA4B,CAAC,CAAC;IACvE;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,WAAW,CAAC,0BAA0B,CAAC,CAAC;IACnE;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;IACzC;;;;OAIG;IACH,UAAU,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IACvC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACzD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAC7D;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,cAAc,CAAC,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;CAChD,CAAC;AAEF,gGAAgG;AAChG,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;OAIG;IACH,wBAAwB,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,OAAO,wBAAwB,EAAE,qBAAqB,CAAC;CACjF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,mGAAmG;IACnG,eAAe,EAAE,sBAAsB,CAAC;IACxC,yEAAyE;IACzE,qBAAqB,EAAE,oBAAoB,CAAC;IAC5C;;;OAGG;IACH,cAAc,EAAE,mBAAmB,CAAC;IACpC;;;OAGG;IACH,iBAAiB,EAAE,OAAO,wBAAwB,EAAE,sBAAsB,CAAC;IAC3E,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAoBF;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAC/B,oBAAoB,GACpB,cAAc,GACd,kBAAkB,GAClB,sBAAsB,CAAC;AAE3B;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,yEAAyE;IACzE,SAAS,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACpC;;;OAGG;IACH,cAAc,EAAE,MAAM,uBAAuB,GAAG,IAAI,CAAC;CACtD,CAAC;
|
|
1
|
+
{"version":3,"file":"with-coderifts.d.ts","sourceRoot":"","sources":["../../src/with-coderifts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AAGH,OAAO,KAAK,EACV,OAAO,EACP,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EAEtB,UAAU,EACV,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAIxE,2FAA2F;AAC3F,MAAM,MAAM,2BAA2B,GAAG;IACxC,iBAAiB,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC;AAEF,iHAAiH;AACjH,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,UAAU,CAAC;AAE/D,wDAAwD;AACxD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,MAAM,sBAAsB,GAC9B;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,UAAU,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;CAChC,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,UAAU,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEN;;;GAGG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,SAAS,sBAAsB,EAAE,GACxC,2BAA2B,CAO7B;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,2BAA2B,GAEjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,kBAAkB,GAAG,gBAAgB,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAWxC;AAED,uGAAuG;AACvG,MAAM,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,uEAAuE;IACvE,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,gHAAgH;IAChH,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9B;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,4GAA4G;IAC5G,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;IAClC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,cAAc,CAAC,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/C,uBAAuB,CAAC,EAAE,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACjE,UAAU,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IACvC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,sBAAsB,KAAK,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACzD,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,WAAW,CAAC,4BAA4B,CAAC,CAAC;IACvE;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,WAAW,CAAC,0BAA0B,CAAC,CAAC;IACnE;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;IACzC;;;;OAIG;IACH,UAAU,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IACvC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACzD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAC7D;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,cAAc,CAAC,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;CAChD,CAAC;AAEF,gGAAgG;AAChG,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;OAIG;IACH,wBAAwB,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,OAAO,wBAAwB,EAAE,qBAAqB,CAAC;CACjF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,mGAAmG;IACnG,eAAe,EAAE,sBAAsB,CAAC;IACxC,yEAAyE;IACzE,qBAAqB,EAAE,oBAAoB,CAAC;IAC5C;;;OAGG;IACH,cAAc,EAAE,mBAAmB,CAAC;IACpC;;;OAGG;IACH,iBAAiB,EAAE,OAAO,wBAAwB,EAAE,sBAAsB,CAAC;IAC3E,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAoBF;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAC/B,oBAAoB,GACpB,cAAc,GACd,kBAAkB,GAClB,sBAAsB,CAAC;AAE3B;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,yEAAyE;IACzE,SAAS,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACpC;;;OAGG;IACH,cAAc,EAAE,MAAM,uBAAuB,GAAG,IAAI,CAAC;CACtD,CAAC;AA2WF;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,mBAAmB,CAqP5E"}
|
|
@@ -138,6 +138,11 @@ const RESIDUAL_CALLS_OUTSIDE_GUARDED_PATH = 'calls_outside_guarded_path_invisibl
|
|
|
138
138
|
// S2 weakening-override residuals — derived SOLELY from registry report.warnings (never recomputed).
|
|
139
139
|
const RESIDUAL_FORCED_READONLY = 'composition_forced_readonly_on_heuristic_mutator';
|
|
140
140
|
const RESIDUAL_UNKNOWN_READONLY = 'composition_unknown_treated_as_readonly';
|
|
141
|
+
/**
|
|
142
|
+
* ENFORCING_STRICT with a grant but no per-call nonce = the BEARER profile. Named, not refused —
|
|
143
|
+
* see the ATOMIC-vs-BEARER note on assertEnforcingStrictExecutionChain.
|
|
144
|
+
*/
|
|
145
|
+
const RESIDUAL_GRANT_BEARER_NO_STATE_NONCE = 'execution_grant_bearer_no_state_nonce';
|
|
141
146
|
/**
|
|
142
147
|
* Coverage strength ordering, strongest → weakest. `requireCoverage` aborts when the registry's ACTUAL
|
|
143
148
|
* coverage ranks strictly BELOW the required one. COMPLETE is the strongest; BYPASSED and UNKNOWN are
|
|
@@ -165,6 +170,66 @@ function isEnforcingStrict(input) {
|
|
|
165
170
|
* `unknownToolPolicy: 'reject'` is stricter than 'mutating' (unclassified throws) — not a weaken.
|
|
166
171
|
* `'readonly'` hides a possible mutator → conflict.
|
|
167
172
|
*/
|
|
173
|
+
/**
|
|
174
|
+
* ENFORCING_STRICT must mean the EXECUTION CHAIN, not just the guard lock.
|
|
175
|
+
*
|
|
176
|
+
* MEASURED 2026-08-26 against shipped 9.7.0: a strict composition built cleanly with
|
|
177
|
+
* executionGrant absent AND with `enabled: false`. "Strict" therefore locked the guard's own
|
|
178
|
+
* fail-closed flags while the chain that makes a commit provable was entirely optional — and the
|
|
179
|
+
* website had to carry a sentence saying so. This makes that sentence unnecessary.
|
|
180
|
+
*
|
|
181
|
+
* WHAT STRICT CAN DEMAND AT CONSTRUCTION vs WHAT IT CAN ONLY OBSERVE — the honesty of the profile
|
|
182
|
+
* is this split, so it is written down rather than blurred:
|
|
183
|
+
*
|
|
184
|
+
* CONSTRUCTION-TIME (config the host supplies; the guard can refuse to build):
|
|
185
|
+
* · an execution grant executionGrant.enabled === true ← enforced here
|
|
186
|
+
* · a per-call state_nonce executionGrant.resolveStateNonce ← NOT required; see below
|
|
187
|
+
*
|
|
188
|
+
* OBSERVED AFTERWARDS (facts about the EXECUTOR; the guard can only report what it saw):
|
|
189
|
+
* · single-use nonce consumption AT THE EXECUTOR — the executor is a remote party. The guard
|
|
190
|
+
* never witnesses consumption; it sees only whether the executor refused. Unenforceable here.
|
|
191
|
+
* · scope-hash checking — the grant is bound server-side; the guard cross-checks a returned
|
|
192
|
+
* grant binding (cas-attestation.ts:157) but cannot make the executor honour it.
|
|
193
|
+
* · executor attestation verifying — cas_evidence: executor_attested, per call.
|
|
194
|
+
* · success named authorized_and_committed — already strict-only tightened
|
|
195
|
+
* (cas-attestation.ts:162-176); without evidence it degrades to authorized_not_committed.
|
|
196
|
+
*
|
|
197
|
+
* Strict demands the former. For the latter it can demand only that the host WIRED the observation,
|
|
198
|
+
* never that the executor behaved — so this function refuses on config, and the outcome keeps
|
|
199
|
+
* reporting what it observed.
|
|
200
|
+
*
|
|
201
|
+
* ATOMIC vs BEARER — decided, not defaulted. Strict requires a grant; it does NOT require
|
|
202
|
+
* resolveStateNonce, and records RESIDUAL_GRANT_BEARER_NO_STATE_NONCE when it is absent. Reasons:
|
|
203
|
+
* (1) a nonce's value is realised entirely at the executor, which the guard cannot observe, so
|
|
204
|
+
* requiring the config would demand a setting whose effect we cannot verify — the exact
|
|
205
|
+
* construction-time/observed blur this split exists to prevent; (2) our own shipped text says
|
|
206
|
+
* "There is no ENFORCING_ATOMIC profile. ENFORCING_STRICT is the guard lock. ATOMIC is a GRANT
|
|
207
|
+
* profile" (docs/agents-quickstart.md), and making strict require ATOMIC would contradict a
|
|
208
|
+
* sentence we publish. BEARER is weaker, not broken — so it is named, not refused.
|
|
209
|
+
*
|
|
210
|
+
* executorAttestation is likewise NOT required at construction: without a registry a strict
|
|
211
|
+
* outcome can never reach authorized_and_committed, so the absence already tells the truth in the
|
|
212
|
+
* outcome rather than needing a second refusal.
|
|
213
|
+
*/
|
|
214
|
+
function enforcingStrictExecutionChainProblems(input) {
|
|
215
|
+
const grant = input.executionGrant;
|
|
216
|
+
const enabled = !!(grant && grant.enabled === true);
|
|
217
|
+
if (enabled)
|
|
218
|
+
return [];
|
|
219
|
+
const what = grant === undefined
|
|
220
|
+
? 'executionGrant is absent'
|
|
221
|
+
: 'executionGrant.enabled is not true';
|
|
222
|
+
return [
|
|
223
|
+
`ENFORCING_STRICT requires the execution chain, but ${what}. Without a grant the guard `
|
|
224
|
+
+ 'authorizes a change but nothing binds the executor to it, so a commit can never be proven '
|
|
225
|
+
+ '(the outcome stays authorized_not_committed / commit_evidence_missing). Add:\n'
|
|
226
|
+
+ " executionGrant: { enabled: true }\n"
|
|
227
|
+
+ ' and, for the ATOMIC profile (single-use at the executor), also:\n'
|
|
228
|
+
+ " executionGrant: { enabled: true, resolveStateNonce: ({ artifactId }) => nonceFor(artifactId) }\n"
|
|
229
|
+
+ ' A grant without resolveStateNonce is the BEARER profile: permitted under strict, and '
|
|
230
|
+
+ `recorded as residual ${RESIDUAL_GRANT_BEARER_NO_STATE_NONCE}.`,
|
|
231
|
+
];
|
|
232
|
+
}
|
|
168
233
|
function enforcingStrictWeakenFlags(input) {
|
|
169
234
|
const flags = [];
|
|
170
235
|
if (input.requireCoverage !== undefined) {
|
|
@@ -443,6 +508,8 @@ function withCodeRifts(input) {
|
|
|
443
508
|
if (typeof input.resolvePriorContent !== 'function') {
|
|
444
509
|
problems.push('ENFORCING_STRICT cannot be weakened: resolvePriorContent conflicts');
|
|
445
510
|
}
|
|
511
|
+
// The execution chain — strict must mean the chain, not just the guard lock.
|
|
512
|
+
problems.push(...enforcingStrictExecutionChainProblems(input));
|
|
446
513
|
}
|
|
447
514
|
if (problems.length > 0) {
|
|
448
515
|
throw new Error(`withCodeRifts: construction aborted — ${problems.length} condition(s):\n`
|
|
@@ -579,6 +646,14 @@ function withCodeRifts(input) {
|
|
|
579
646
|
if (report.warnings.includes('unknown_treated_as_readonly')) {
|
|
580
647
|
residuals.push(RESIDUAL_UNKNOWN_READONLY);
|
|
581
648
|
}
|
|
649
|
+
// BEARER: a grant with no per-call nonce. Permitted under strict, named so the reader can see
|
|
650
|
+
// which grant profile this composition actually runs.
|
|
651
|
+
{
|
|
652
|
+
const g = input.executionGrant;
|
|
653
|
+
if (g && g.enabled === true && typeof g.resolveStateNonce !== 'function') {
|
|
654
|
+
residuals.push(RESIDUAL_GRANT_BEARER_NO_STATE_NONCE);
|
|
655
|
+
}
|
|
656
|
+
}
|
|
582
657
|
// Freshness resolver: composition-level visibility. Absence is residual NOT_CONFIGURED;
|
|
583
658
|
// presence is a host claim (freshness_resolver_wired), not proof every call was measured.
|
|
584
659
|
// Does NOT flip COMPOSITION_CALL_POLICY_COMPLETE or inescapable_runtime.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"with-coderifts.js","sourceRoot":"","sources":["../../src/with-coderifts.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;;AAmGH,sDASC;AAYD,gEAeC;AAmhBD,sCA2OC;AAn4BD,yDAAuD;AAWvD,iEAAgE;AAkFhE;;;GAGG;AACH,SAAgB,qBAAqB,CACnC,MAAyC;IAEzC,MAAM,MAAM,GAAgC,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QACxC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,0BAA0B,CACxC,MAAmC;IAInC,MAAM,eAAe,GAAI,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,CAAW;SACtE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;AAC7D,CAAC;AAoLD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,gCAAgC,GAAG,KAAK,CAAC;AAgC/C,MAAM,+BAA+B,GAAG,oCAAoC,CAAC;AAC7E,gGAAgG;AAChG,MAAM,iCAAiC,GAAG,sCAAsC,CAAC;AACjF;;;GAGG;AACH,MAAM,mCAAmC,GAAG,sCAAsC,CAAC;AACnF,qGAAqG;AACrG,MAAM,wBAAwB,GAAG,kDAAkD,CAAC;AACpF,MAAM,yBAAyB,GAAG,yCAAyC,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAwC;IAC7D,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,+GAA+G;AAC/G,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC;QACtE,CAAC,CAAC,iBAAiB,CAAC,QAA+B,CAAC;QACpD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,OAAO,KAAK,CAAC,OAAO,KAAK,kBAAkB,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,0BAA0B,CAAC,KAAyB;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,iBAAiB,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,0BAA0B,KAAK,KAAK,IAAI,KAAK,CAAC,0BAA0B,KAAK,MAAM,EAAE,CAAC;QAC9F,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,uBAAuB,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,wBAAwB,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACjC,IAAI,GAAG,CAAC,sBAAsB,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,iBAAiB,KAAK,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,aAAsE,EACtE,OAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,6BAA6B,CACpC,IAAmB,EACnB,KAAgB,EAChB,aAAsE;IAEtE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAkB;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,iBAAiB,CAAC,aAAa,EAAE;wBACrC,IAAI,EAAE,cAAc;wBACpB,KAAK,EAAE,SAAS;wBAChB,QAAQ,EAAE,UAAU;wBACpB,QAAQ;wBACR,oEAAoE;wBACpE,OAAO,EAAE,MAA+B;qBACzC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,iBAAiB,CAAC,aAAa,EAAE;wBACrC,IAAI,EAAE,cAAc;wBACpB,KAAK;wBACL,QAAQ,EAAE,UAAU;wBACpB,QAAQ;wBACR,MAAM;qBACP,CAAC,CAAC;gBACL,CAAC;gBACD,yGAAyG;gBACzG,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,iBAAiB,CAAC,aAAa,EAAE;oBACrC,IAAI,EAAE,cAAc;oBACpB,KAAK;oBACL,QAAQ,EAAE,OAAO;oBACjB,QAAQ;oBACR,KAAK;iBACN,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,uGAAuG;AACvG,SAAS,iBAAiB,CAAC,MAA8B;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,sCAAsC,CAAC;QACtD,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB,EAAE,QAAqB;IAC9D,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,0FAA0F;AAC1F,SAAS,0BAA0B,CACjC,EAA8C;IAE9C,IAAI,GAAY,CAAC;IACjB,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YAAC,GAAG,GAAG,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAyBD,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,KAAK,GAAuB;QAChC,OAAO;QACP,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,IAAI;QACd,KAAK;YACH,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;gBAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;YAClD,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,GAAG;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YACpB,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACnB,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,eAAe,CAAC,OAA8B;YAC5C,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBACvB,KAAK,CAAC,QAAQ,GAAG,oBAAoB,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACzE,KAAK,CAAC,QAAQ,GAAG,cAAc,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAI,OAAO,CAAC,OAAwE;gBAC7F,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3D,KAAK,CAAC,QAAQ,GAAG,kBAAkB,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,aAAa;YACX,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBACvB,KAAK,CAAC,QAAQ,GAAG,oBAAoB,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,KAAK,CAAC,QAAQ,GAAG,sBAAsB,CAAC;QAC1C,CAAC;QACD,MAAM,EAAE;YACN,OAAO;YACP,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK;YAC5B,cAAc,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ;SACrC;KACF,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,IAAmB,EAAE,QAA0B;IAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,MAAM,KAAK,GAAkB;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;YAC/B,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAmB,EAAE,MAA0B;IAC3E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,MAAM,KAAK,GAAkB;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;YAC/B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxC,kEAAkE;gBAClE,MAAM,CAAC,eAAe,CAAC,MAA+B,CAAC,CAAC;gBACxD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,aAAa,EAAE,CAAC;gBACvB,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,KAAyB;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,mGAAmG;IACnG,iGAAiG;IACjG,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,QAAQ,CAAC,IAAI,CAAC,sIAAsI,CAAC,CAAC;IACxJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,8GAA8G,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC,mFAAmF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC7I,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC,wDAAwD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,wCAAwC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvF,CAAC;QACD,kHAAkH;QAClH,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,yCAAyC,QAAQ,CAAC,MAAM,kBAAkB;cACxE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACjC,+DAA+D;IAC/D,oGAAoG;IACpG,uGAAuG;IACvG,oGAAoG;IACpG,6DAA6D;IAC7D,oGAAoG;IACpG,8EAA8E;IAC9E,2FAA2F;IAC3F,oEAAoE;IACpE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC;IACtD,MAAM,aAAa,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,mBAAmB,GAAG,KAAK,CAAC,eAAe,CAAC;IAElD,kGAAkG;IAClG,mFAAmF;IACnF,MAAM,gBAAgB,GAAG,IAAA,6CAAsB,GAAE,CAAC;IAClD,MAAM,KAAK,GAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAClG,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAChD,KAAK,CAAC,uBAAuB,GAAG,KAAK,CAAC,uBAAuB,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACzC,KAAK,CAAC,OAAO,GAAG,kBAAkB,CAAC;IACrC,CAAC;IACD,0EAA0E;IAC1E,+FAA+F;IAC/F,+EAA+E;IAC/E,IAAI,mBAAmB,KAAK,SAAS,IAAI,cAAc,EAAE,CAAC;QACxD,KAAK,CAAC,eAAe,GAAG,GAAG,EAAE;YAC3B,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,CAAC;QAC7B,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAChD,KAAK,CAAC,uBAAuB,GAAG,KAAK,CAAC,uBAAuB,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;QACnD,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC,0BAA0B,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;QACjD,KAAK,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC9C,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC9C,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,mGAAmG;QACnG,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC9B,KAAK,CAAC,uBAAuB,GAAG,IAAI,CAAC;QACrC,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACxC,KAAK,CAAC,wBAAwB,GAAG,IAAI,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAA4B;QACtC,KAAK;QACL,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,CAAC;QAChI,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,sBAAsB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB;KACnE,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAEpE,wFAAwF;IACxF,gGAAgG;IAChG,4FAA4F;IAC5F,2BAA2B;IAC3B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,oCAAiB,EAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjE,gBAAgB,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzD,mGAAmG;IACnG,oGAAoG;IACpG,kGAAkG;IAClG,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,uCAAuC;QAC3F,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAG,kDAAkD;QAC5G,IAAI,YAAY,KAAK,SAAS,IAAI,UAAU,GAAG,YAAY,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,+DAA+D,MAAM,CAAC,QAAQ,8BAA8B,eAAe,IAAI;kBAC7H,mIAAmI;kBACnI,8NAA8N,CACjO,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oGAAoG;IACpG,qGAAqG;IACrG,iGAAiG;IACjG,MAAM,6BAA6B,GACjC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,gCAAgC,CAAC;IAEvE,iGAAiG;IACjG,+FAA+F;IAC/F,4EAA4E;IAC5E,MAAM,SAAS,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,sCAAsC,CAAC,CAAC,EAAE,CAAC;QACtF,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;QAC5D,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;IACD,wFAAwF;IACxF,0FAA0F;IAC1F,yEAAyE;IACzE,MAAM,wBAAwB,GAAG,OAAO,KAAK,CAAC,mBAAmB,KAAK,UAAU,CAAC;IACjF,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IACD,yGAAyG;IACzG,iFAAiF;IACjF,IAAI,KAAK,CAAC,uBAAuB,KAAK,IAAI,IAAI,MAAM,EAAE,CAAC;QACrD,SAAS,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACtD,CAAC;IAED,qGAAqG;IACrG,0GAA0G;IAC1G,wGAAwG;IACxG,MAAM,qBAAqB,GAAyB;QAClD,QAAQ,EAAE,SAAS;QACnB,mBAAmB,EAAE,6BAA6B;QAClD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAa;QACvD,wBAAwB;QACxB,IAAI,cAAc;YAChB,OAAO,gBAAgB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC;QAC3C,CAAC;KACF,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAErC,4FAA4F;IAC5F,2EAA2E;IAC3E,4FAA4F;IAC5F,qFAAqF;IACrF,IAAI,QAAQ,GAAoB,KAAwB,CAAC;IACzD,IAAI,cAAc,EAAE,CAAC;QACnB,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC3C,QAAQ,GAAG,MAAM,CAAC,MAAM,CACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC,CAC7E,CAAC;IACvB,CAAC;SAAM,IAAI,cAAc,EAAE,CAAC;QAC1B,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAoB,CAAC;IACxD,CAAC;IAED,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAoB,CAAC;IAE/G,MAAM,MAAM,GAAwB;QAClC,KAAK,EAAE,QAAQ;QACf,eAAe,EAAE,MAAM;QACvB,qBAAqB;QACrB,cAAc,EAAE,aAAa,CAAC,MAAM;QACpC,iBAAiB,EAAE,gBAAgB,CAAC,MAAM;KAC3C,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACzE,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
1
|
+
{"version":3,"file":"with-coderifts.js","sourceRoot":"","sources":["../../src/with-coderifts.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;;AAmGH,sDASC;AAYD,gEAeC;AAolBD,sCAqPC;AA98BD,yDAAuD;AAWvD,iEAAgE;AAkFhE;;;GAGG;AACH,SAAgB,qBAAqB,CACnC,MAAyC;IAEzC,MAAM,MAAM,GAAgC,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QACxC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,0BAA0B,CACxC,MAAmC;IAInC,MAAM,eAAe,GAAI,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,CAAW;SACtE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;AAC7D,CAAC;AAoLD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,gCAAgC,GAAG,KAAK,CAAC;AAgC/C,MAAM,+BAA+B,GAAG,oCAAoC,CAAC;AAC7E,gGAAgG;AAChG,MAAM,iCAAiC,GAAG,sCAAsC,CAAC;AACjF;;;GAGG;AACH,MAAM,mCAAmC,GAAG,sCAAsC,CAAC;AACnF,qGAAqG;AACrG,MAAM,wBAAwB,GAAG,kDAAkD,CAAC;AACpF,MAAM,yBAAyB,GAAG,yCAAyC,CAAC;AAC5E;;;GAGG;AACH,MAAM,oCAAoC,GAAG,uCAAuC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAwC;IAC7D,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,+GAA+G;AAC/G,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC;QACtE,CAAC,CAAC,iBAAiB,CAAC,QAA+B,CAAC;QACpD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,OAAO,KAAK,CAAC,OAAO,KAAK,kBAAkB,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,SAAS,qCAAqC,CAAC,KAAyB;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC;IACnC,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,IAAK,KAA+B,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAC/E,IAAI,OAAO;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS;QAC9B,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,oCAAoC,CAAC;IACzC,OAAO;QACL,sDAAsD,IAAI,8BAA8B;cACtF,4FAA4F;cAC5F,gFAAgF;cAChF,yCAAyC;cACzC,qEAAqE;cACrE,sGAAsG;cACtG,yFAAyF;cACzF,wBAAwB,oCAAoC,GAAG;KAClE,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAyB;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,iBAAiB,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,0BAA0B,KAAK,KAAK,IAAI,KAAK,CAAC,0BAA0B,KAAK,MAAM,EAAE,CAAC;QAC9F,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,uBAAuB,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,wBAAwB,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACjC,IAAI,GAAG,CAAC,sBAAsB,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,iBAAiB,KAAK,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,aAAsE,EACtE,OAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,6BAA6B,CACpC,IAAmB,EACnB,KAAgB,EAChB,aAAsE;IAEtE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAkB;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,iBAAiB,CAAC,aAAa,EAAE;wBACrC,IAAI,EAAE,cAAc;wBACpB,KAAK,EAAE,SAAS;wBAChB,QAAQ,EAAE,UAAU;wBACpB,QAAQ;wBACR,oEAAoE;wBACpE,OAAO,EAAE,MAA+B;qBACzC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,iBAAiB,CAAC,aAAa,EAAE;wBACrC,IAAI,EAAE,cAAc;wBACpB,KAAK;wBACL,QAAQ,EAAE,UAAU;wBACpB,QAAQ;wBACR,MAAM;qBACP,CAAC,CAAC;gBACL,CAAC;gBACD,yGAAyG;gBACzG,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,iBAAiB,CAAC,aAAa,EAAE;oBACrC,IAAI,EAAE,cAAc;oBACpB,KAAK;oBACL,QAAQ,EAAE,OAAO;oBACjB,QAAQ;oBACR,KAAK;iBACN,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,uGAAuG;AACvG,SAAS,iBAAiB,CAAC,MAA8B;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,sCAAsC,CAAC;QACtD,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB,EAAE,QAAqB;IAC9D,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,0FAA0F;AAC1F,SAAS,0BAA0B,CACjC,EAA8C;IAE9C,IAAI,GAAY,CAAC;IACjB,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YAAC,GAAG,GAAG,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAyBD,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,KAAK,GAAuB;QAChC,OAAO;QACP,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,IAAI;QACd,KAAK;YACH,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;gBAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;YAClD,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,GAAG;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YACpB,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACnB,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,eAAe,CAAC,OAA8B;YAC5C,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBACvB,KAAK,CAAC,QAAQ,GAAG,oBAAoB,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACzE,KAAK,CAAC,QAAQ,GAAG,cAAc,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAI,OAAO,CAAC,OAAwE;gBAC7F,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3D,KAAK,CAAC,QAAQ,GAAG,kBAAkB,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,aAAa;YACX,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBACvB,KAAK,CAAC,QAAQ,GAAG,oBAAoB,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,KAAK,CAAC,QAAQ,GAAG,sBAAsB,CAAC;QAC1C,CAAC;QACD,MAAM,EAAE;YACN,OAAO;YACP,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK;YAC5B,cAAc,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ;SACrC;KACF,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,IAAmB,EAAE,QAA0B;IAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,MAAM,KAAK,GAAkB;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;YAC/B,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAmB,EAAE,MAA0B;IAC3E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,MAAM,KAAK,GAAkB;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;YAC/B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxC,kEAAkE;gBAClE,MAAM,CAAC,eAAe,CAAC,MAA+B,CAAC,CAAC;gBACxD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,aAAa,EAAE,CAAC;gBACvB,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,KAAyB;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,mGAAmG;IACnG,iGAAiG;IACjG,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,QAAQ,CAAC,IAAI,CAAC,sIAAsI,CAAC,CAAC;IACxJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,8GAA8G,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC,mFAAmF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC7I,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC,wDAAwD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,wCAAwC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvF,CAAC;QACD,kHAAkH;QAClH,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACtF,CAAC;QACH,6EAA6E;QAC3E,QAAQ,CAAC,IAAI,CAAC,GAAG,qCAAqC,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,yCAAyC,QAAQ,CAAC,MAAM,kBAAkB;cACxE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACjC,+DAA+D;IAC/D,oGAAoG;IACpG,uGAAuG;IACvG,oGAAoG;IACpG,6DAA6D;IAC7D,oGAAoG;IACpG,8EAA8E;IAC9E,2FAA2F;IAC3F,oEAAoE;IACpE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC;IACtD,MAAM,aAAa,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,mBAAmB,GAAG,KAAK,CAAC,eAAe,CAAC;IAElD,kGAAkG;IAClG,mFAAmF;IACnF,MAAM,gBAAgB,GAAG,IAAA,6CAAsB,GAAE,CAAC;IAClD,MAAM,KAAK,GAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAClG,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAChD,KAAK,CAAC,uBAAuB,GAAG,KAAK,CAAC,uBAAuB,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACzC,KAAK,CAAC,OAAO,GAAG,kBAAkB,CAAC;IACrC,CAAC;IACD,0EAA0E;IAC1E,+FAA+F;IAC/F,+EAA+E;IAC/E,IAAI,mBAAmB,KAAK,SAAS,IAAI,cAAc,EAAE,CAAC;QACxD,KAAK,CAAC,eAAe,GAAG,GAAG,EAAE;YAC3B,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,CAAC;QAC7B,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAChD,KAAK,CAAC,uBAAuB,GAAG,KAAK,CAAC,uBAAuB,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;QACnD,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC,0BAA0B,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;QACjD,KAAK,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC9C,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC9C,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,mGAAmG;QACnG,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC9B,KAAK,CAAC,uBAAuB,GAAG,IAAI,CAAC;QACrC,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACxC,KAAK,CAAC,wBAAwB,GAAG,IAAI,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAA4B;QACtC,KAAK;QACL,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,CAAC;QAChI,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,sBAAsB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB;KACnE,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAEpE,wFAAwF;IACxF,gGAAgG;IAChG,4FAA4F;IAC5F,2BAA2B;IAC3B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,oCAAiB,EAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjE,gBAAgB,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzD,mGAAmG;IACnG,oGAAoG;IACpG,kGAAkG;IAClG,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,uCAAuC;QAC3F,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAG,kDAAkD;QAC5G,IAAI,YAAY,KAAK,SAAS,IAAI,UAAU,GAAG,YAAY,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,+DAA+D,MAAM,CAAC,QAAQ,8BAA8B,eAAe,IAAI;kBAC7H,mIAAmI;kBACnI,8NAA8N,CACjO,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oGAAoG;IACpG,qGAAqG;IACrG,iGAAiG;IACjG,MAAM,6BAA6B,GACjC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,gCAAgC,CAAC;IAEvE,iGAAiG;IACjG,+FAA+F;IAC/F,4EAA4E;IAC5E,MAAM,SAAS,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,sCAAsC,CAAC,CAAC,EAAE,CAAC;QACtF,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;QAC5D,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;IACD,8FAA8F;IAC9F,sDAAsD;IACtD,CAAC;QACC,MAAM,CAAC,GAAG,KAAK,CAAC,cAAgF,CAAC;QACjG,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;YACzE,SAAS,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,wFAAwF;IACxF,0FAA0F;IAC1F,yEAAyE;IACzE,MAAM,wBAAwB,GAAG,OAAO,KAAK,CAAC,mBAAmB,KAAK,UAAU,CAAC;IACjF,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IACD,yGAAyG;IACzG,iFAAiF;IACjF,IAAI,KAAK,CAAC,uBAAuB,KAAK,IAAI,IAAI,MAAM,EAAE,CAAC;QACrD,SAAS,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACtD,CAAC;IAED,qGAAqG;IACrG,0GAA0G;IAC1G,wGAAwG;IACxG,MAAM,qBAAqB,GAAyB;QAClD,QAAQ,EAAE,SAAS;QACnB,mBAAmB,EAAE,6BAA6B;QAClD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAa;QACvD,wBAAwB;QACxB,IAAI,cAAc;YAChB,OAAO,gBAAgB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC;QAC3C,CAAC;KACF,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAErC,4FAA4F;IAC5F,2EAA2E;IAC3E,4FAA4F;IAC5F,qFAAqF;IACrF,IAAI,QAAQ,GAAoB,KAAwB,CAAC;IACzD,IAAI,cAAc,EAAE,CAAC;QACnB,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC3C,QAAQ,GAAG,MAAM,CAAC,MAAM,CACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC,CAC7E,CAAC;IACvB,CAAC;SAAM,IAAI,cAAc,EAAE,CAAC;QAC1B,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAoB,CAAC;IACxD,CAAC;IAED,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAoB,CAAC;IAE/G,MAAM,MAAM,GAAwB;QAClC,KAAK,EAAE,QAAQ;QACf,eAAe,EAAE,MAAM;QACvB,qBAAqB;QACrB,cAAc,EAAE,aAAa,CAAC,MAAM;QACpC,iBAAiB,EAAE,gBAAgB,CAAC,MAAM;KAC3C,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACzE,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
import type { CoverageObserved } from './coverage-observed.js';
|
|
2
|
+
export declare const COVERAGE_ATTEST_VERSION = "cr.coverage.attest.v1";
|
|
3
|
+
export declare const COVERAGE_ATTEST_SIGNING_PREFIX = "crcovattest.v1";
|
|
4
|
+
export declare const COVERAGE_ATTEST_ENVELOPE_TAG = "cr.coverage.attest.v1";
|
|
5
|
+
export type CoverageAttestationSigner = (bytes: Uint8Array) => Uint8Array | Promise<Uint8Array>;
|
|
6
|
+
export type CoverageAttestationConfig = {
|
|
7
|
+
/** Customer-held coverage key id. Named on the token; resolved later against a registry. */
|
|
8
|
+
kid: string;
|
|
9
|
+
/** Host signs the UTF-8 signing-input bytes. Returns raw Ed25519 signature. Never a raw key. */
|
|
10
|
+
signer: CoverageAttestationSigner;
|
|
11
|
+
/** Scope label for the statement (e.g. a session id). Required — a statement needs a subject. */
|
|
12
|
+
sessionId: string;
|
|
13
|
+
};
|
|
14
|
+
export declare function coverageAttestSigningInput(body: Record<string, unknown>): string;
|
|
15
|
+
/**
|
|
16
|
+
* Issue a cr.coverage.attest.v1 token from a coverage snapshot. Returns undefined when config is
|
|
17
|
+
* absent, the snapshot is unusable, or the host signer throws — never an unsigned token.
|
|
18
|
+
*/
|
|
19
|
+
export declare function tryIssueCoverageAttestation(args: {
|
|
20
|
+
config?: CoverageAttestationConfig | null;
|
|
21
|
+
coverage: CoverageObserved | null | undefined;
|
|
22
|
+
decisionId?: string | null;
|
|
23
|
+
receiptDigest?: string | null;
|
|
24
|
+
now?: string;
|
|
25
|
+
}): Promise<string | undefined>;
|
|
26
|
+
export declare function kidFromCoverageAttestation(token: string | undefined | null): string | null;
|
|
27
|
+
//# sourceMappingURL=coverage-attestation.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"coverage-attestation.d.ts","sourceRoot":"","sources":["../../src/coverage-attestation.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAC/D,eAAO,MAAM,8BAA8B,mBAAmB,CAAC;AAC/D,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AAQpE,MAAM,MAAM,yBAAyB,GAAG,CACtC,KAAK,EAAE,UAAU,KACd,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,MAAM,MAAM,yBAAyB,GAAG;IACtC,4FAA4F;IAC5F,GAAG,EAAE,MAAM,CAAC;IACZ,gGAAgG;IAChG,MAAM,EAAE,yBAAyB,CAAC;IAClC,iGAAiG;IACjG,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAUF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAchF;AAYD;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,MAAM,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC1C,QAAQ,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4D9B;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAK1F"}
|