@corca-org/ceal-host-darwin-arm64 1.0.12 → 1.0.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/bin/ceal-host +0 -0
  2. package/libexec/ceal-host/claude-hook.mjs +2 -31
  3. package/libexec/ceal-host/claude-invocation-authentication.mjs +2 -31
  4. package/libexec/ceal-host/claude-producer.mjs +2 -31
  5. package/libexec/ceal-host/codex-hook.mjs +2 -31
  6. package/libexec/ceal-host/codex-invocation-authentication.mjs +2 -31
  7. package/libexec/ceal-host/codex-producer.mjs +2 -31
  8. package/libexec/ceal-host/control.mjs +2 -31
  9. package/libexec/ceal-host/relay.mjs +2 -31
  10. package/package.json +1 -1
  11. package/share/ceal-host/bundle-manifest.json +12 -12
  12. package/share/ceal-host/bundle-manifest.sigstore.json +1 -1
package/bin/ceal-host CHANGED
Binary file
package/libexec/ceal-host/claude-hook.mjs CHANGED
@@ -243,16 +243,6 @@ var CEAL_WRITE_ATTRIBUTIONS = vocabulary(["subject", "requester_event", "connect
243
243
  var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verified", "not_dispatched"]);
244
244
  var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
245
245
  var CEAL_PROTOCOL_VERSION = "1.4.0";
246
- var CEAL_GATEWAY_ANNOUNCEMENT_SCOPE_STATEMENTS = Object.freeze({
247
- github_app_installation_repositories: "Repositories in the installed GitHub App installation.",
248
- slack_public_app_member_channels_only: "Public channels where the installed Slack app is a member, plus direct and multi-person direct messages the requester is a member of, as Slack reports that membership; private channels the administrator has not approved are not declared by this connector.",
249
- notion_connected_logical_area: "Connected Notion logical area under provider-enforced sharing; descendant inventory is not declared.",
250
- google_workspace_calendar_read_only: "Approved Calendar availability and event reads only; Calendar mutation is not declared.",
251
- google_workspace_admitted_drive_target_metadata: "Metadata search for files in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file-content read and mutation are not declared.",
252
- google_workspace_admitted_drive_target_sheet_ranges: "Bounded values reads from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file mutation is not declared.",
253
- google_workspace_admitted_drive_target_sheet_tabs: "Bounded tab metadata and grid extents from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; cell contents and file mutation are not declared.",
254
- google_workspace_admitted_drive_target_editable_sheet_ranges: "Bounded values updates and clears in editable Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; Docs, Slides, and other Drive file mutation are not declared."
255
- });
256
246
  var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
257
247
  var CEAL_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "phase", "schema_version"]);
258
248
  var CEAL_CLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["cause", ...CEAL_CONNECTOR_ROUTE_FAILURE_KEYS]);
@@ -1091,9 +1081,6 @@ var RESOURCE_ROW_TIMESTAMP_KEYS = Object.entries(RESOURCE_ROW_KEY_RULES).flatMap
1091
1081
  // packages/ceal-client-protocol/src/resource-read-result.ts
1092
1082
  var CEAL_RESOURCE_GET_COVERAGE_NEXT_ACTIONS = vocabulary(["reduce_request_size", "read_resource_again"]);
1093
1083
 
1094
- // packages/ceal-client-protocol/src/excluded-target-coverage-contract.ts
1095
- var CEAL_EXCLUDED_TARGET_REASONS = vocabulary(["audience_narrower_than_place", "visibility_unknown"]);
1096
-
1097
1084
  // packages/ceal-client-protocol/src/excluded-target-coverage.ts
1098
1085
  var CEAL_EXCLUDED_TARGET_COVERAGE_MAX_ENTRIES = 64;
1099
1086
  function cealExcludedTargetCoverageJsonSchema() {
@@ -1101,7 +1088,7 @@ function cealExcludedTargetCoverageJsonSchema() {
1101
1088
  target_ref: { type: "string", minLength: 8, maxLength: 134, pattern: "^target:[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
1102
1089
  connector_kind: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9-]{0,63}$" },
1103
1090
  label: { type: "string", minLength: 1, maxLength: CEAL_PUBLIC_DISPLAY_NAME_MAX_BYTES },
1104
- reason: { type: "string", enum: [...CEAL_EXCLUDED_TARGET_REASONS] }
1091
+ reason: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9_]{0,63}$" }
1105
1092
  };
1106
1093
  return {
1107
1094
  type: "array",
@@ -1443,7 +1430,7 @@ var CEAL_REQUEST_GRAPH_NODE_PREPARE_READINESS_JSON_SCHEMA = {
1443
1430
  // packages/ceal-client-protocol/src/client-result-materialization.ts
1444
1431
  var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
1445
1432
  var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
1446
- var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root"]);
1433
+ var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv"]);
1447
1434
 
1448
1435
  // packages/ceal-client-protocol/src/session-start-affordance.ts
1449
1436
  var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
@@ -1489,22 +1476,6 @@ var CEAL_GATEWAY_ANNOUNCEMENT_POLICY_NON_CLAIMS = vocabulary([
1489
1476
  "target_specific_scope_not_declared"
1490
1477
  ]);
1491
1478
 
1492
- // packages/ceal-client-protocol/src/gateway-discovery-response-validation.ts
1493
- var ANNOUNCEMENT_POLICY_CAPABILITY_BINDINGS = Object.freeze({
1494
- "repository.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1495
- "resource.search": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1496
- "github.workflow_run.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1497
- "message.search": [{ effect: "read", scopeStatementKind: "slack_public_app_member_channels_only", providerAuthorityKind: "slack_app" }],
1498
- "notion.search": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1499
- "resource.get": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1500
- "availability.get": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1501
- "event.search": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1502
- "file.search": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_metadata", providerAuthorityKind: "google_service_account" }],
1503
- "cell_range.get": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_ranges", providerAuthorityKind: "google_service_account" }],
1504
- "sheet.list": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_tabs", providerAuthorityKind: "google_service_account" }],
1505
- "cell_range.update": [{ effect: "write", scopeStatementKind: "google_workspace_admitted_drive_target_editable_sheet_ranges", providerAuthorityKind: "google_service_account" }]
1506
- });
1507
-
1508
1479
  // packages/ceal-client-protocol/src/gateway-write-identity.ts
1509
1480
  var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
1510
1481
  var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
package/libexec/ceal-host/claude-invocation-authentication.mjs CHANGED
@@ -222,16 +222,6 @@ var CEAL_WRITE_ATTRIBUTIONS = vocabulary(["subject", "requester_event", "connect
222
222
  var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verified", "not_dispatched"]);
223
223
  var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
224
224
  var CEAL_PROTOCOL_VERSION = "1.4.0";
225
- var CEAL_GATEWAY_ANNOUNCEMENT_SCOPE_STATEMENTS = Object.freeze({
226
- github_app_installation_repositories: "Repositories in the installed GitHub App installation.",
227
- slack_public_app_member_channels_only: "Public channels where the installed Slack app is a member, plus direct and multi-person direct messages the requester is a member of, as Slack reports that membership; private channels the administrator has not approved are not declared by this connector.",
228
- notion_connected_logical_area: "Connected Notion logical area under provider-enforced sharing; descendant inventory is not declared.",
229
- google_workspace_calendar_read_only: "Approved Calendar availability and event reads only; Calendar mutation is not declared.",
230
- google_workspace_admitted_drive_target_metadata: "Metadata search for files in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file-content read and mutation are not declared.",
231
- google_workspace_admitted_drive_target_sheet_ranges: "Bounded values reads from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file mutation is not declared.",
232
- google_workspace_admitted_drive_target_sheet_tabs: "Bounded tab metadata and grid extents from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; cell contents and file mutation are not declared.",
233
- google_workspace_admitted_drive_target_editable_sheet_ranges: "Bounded values updates and clears in editable Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; Docs, Slides, and other Drive file mutation are not declared."
234
- });
235
225
  var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
236
226
  var CEAL_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "phase", "schema_version"]);
237
227
  var CEAL_CLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["cause", ...CEAL_CONNECTOR_ROUTE_FAILURE_KEYS]);
@@ -1070,9 +1060,6 @@ var RESOURCE_ROW_TIMESTAMP_KEYS = Object.entries(RESOURCE_ROW_KEY_RULES).flatMap
1070
1060
  // packages/ceal-client-protocol/src/resource-read-result.ts
1071
1061
  var CEAL_RESOURCE_GET_COVERAGE_NEXT_ACTIONS = vocabulary(["reduce_request_size", "read_resource_again"]);
1072
1062
 
1073
- // packages/ceal-client-protocol/src/excluded-target-coverage-contract.ts
1074
- var CEAL_EXCLUDED_TARGET_REASONS = vocabulary(["audience_narrower_than_place", "visibility_unknown"]);
1075
-
1076
1063
  // packages/ceal-client-protocol/src/excluded-target-coverage.ts
1077
1064
  var CEAL_EXCLUDED_TARGET_COVERAGE_MAX_ENTRIES = 64;
1078
1065
  function cealExcludedTargetCoverageJsonSchema() {
@@ -1080,7 +1067,7 @@ function cealExcludedTargetCoverageJsonSchema() {
1080
1067
  target_ref: { type: "string", minLength: 8, maxLength: 134, pattern: "^target:[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
1081
1068
  connector_kind: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9-]{0,63}$" },
1082
1069
  label: { type: "string", minLength: 1, maxLength: CEAL_PUBLIC_DISPLAY_NAME_MAX_BYTES },
1083
- reason: { type: "string", enum: [...CEAL_EXCLUDED_TARGET_REASONS] }
1070
+ reason: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9_]{0,63}$" }
1084
1071
  };
1085
1072
  return {
1086
1073
  type: "array",
@@ -1438,7 +1425,7 @@ function exactKeys(value, expected) {
1438
1425
  // packages/ceal-client-protocol/src/client-result-materialization.ts
1439
1426
  var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
1440
1427
  var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
1441
- var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root"]);
1428
+ var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv"]);
1442
1429
 
1443
1430
  // packages/ceal-client-protocol/src/session-start-affordance.ts
1444
1431
  var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
@@ -1484,22 +1471,6 @@ var CEAL_GATEWAY_ANNOUNCEMENT_POLICY_NON_CLAIMS = vocabulary([
1484
1471
  "target_specific_scope_not_declared"
1485
1472
  ]);
1486
1473
 
1487
- // packages/ceal-client-protocol/src/gateway-discovery-response-validation.ts
1488
- var ANNOUNCEMENT_POLICY_CAPABILITY_BINDINGS = Object.freeze({
1489
- "repository.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1490
- "resource.search": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1491
- "github.workflow_run.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1492
- "message.search": [{ effect: "read", scopeStatementKind: "slack_public_app_member_channels_only", providerAuthorityKind: "slack_app" }],
1493
- "notion.search": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1494
- "resource.get": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1495
- "availability.get": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1496
- "event.search": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1497
- "file.search": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_metadata", providerAuthorityKind: "google_service_account" }],
1498
- "cell_range.get": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_ranges", providerAuthorityKind: "google_service_account" }],
1499
- "sheet.list": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_tabs", providerAuthorityKind: "google_service_account" }],
1500
- "cell_range.update": [{ effect: "write", scopeStatementKind: "google_workspace_admitted_drive_target_editable_sheet_ranges", providerAuthorityKind: "google_service_account" }]
1501
- });
1502
-
1503
1474
  // packages/ceal-client-protocol/src/gateway-write-identity.ts
1504
1475
  var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
1505
1476
  var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
package/libexec/ceal-host/claude-producer.mjs CHANGED
@@ -263,16 +263,6 @@ var CEAL_WRITE_ATTRIBUTIONS = vocabulary(["subject", "requester_event", "connect
263
263
  var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verified", "not_dispatched"]);
264
264
  var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
265
265
  var CEAL_PROTOCOL_VERSION = "1.4.0";
266
- var CEAL_GATEWAY_ANNOUNCEMENT_SCOPE_STATEMENTS = Object.freeze({
267
- github_app_installation_repositories: "Repositories in the installed GitHub App installation.",
268
- slack_public_app_member_channels_only: "Public channels where the installed Slack app is a member, plus direct and multi-person direct messages the requester is a member of, as Slack reports that membership; private channels the administrator has not approved are not declared by this connector.",
269
- notion_connected_logical_area: "Connected Notion logical area under provider-enforced sharing; descendant inventory is not declared.",
270
- google_workspace_calendar_read_only: "Approved Calendar availability and event reads only; Calendar mutation is not declared.",
271
- google_workspace_admitted_drive_target_metadata: "Metadata search for files in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file-content read and mutation are not declared.",
272
- google_workspace_admitted_drive_target_sheet_ranges: "Bounded values reads from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file mutation is not declared.",
273
- google_workspace_admitted_drive_target_sheet_tabs: "Bounded tab metadata and grid extents from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; cell contents and file mutation are not declared.",
274
- google_workspace_admitted_drive_target_editable_sheet_ranges: "Bounded values updates and clears in editable Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; Docs, Slides, and other Drive file mutation are not declared."
275
- });
276
266
  var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
277
267
  var CEAL_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "phase", "schema_version"]);
278
268
  var CEAL_CLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["cause", ...CEAL_CONNECTOR_ROUTE_FAILURE_KEYS]);
@@ -1111,9 +1101,6 @@ var RESOURCE_ROW_TIMESTAMP_KEYS = Object.entries(RESOURCE_ROW_KEY_RULES).flatMap
1111
1101
  // packages/ceal-client-protocol/src/resource-read-result.ts
1112
1102
  var CEAL_RESOURCE_GET_COVERAGE_NEXT_ACTIONS = vocabulary(["reduce_request_size", "read_resource_again"]);
1113
1103
 
1114
- // packages/ceal-client-protocol/src/excluded-target-coverage-contract.ts
1115
- var CEAL_EXCLUDED_TARGET_REASONS = vocabulary(["audience_narrower_than_place", "visibility_unknown"]);
1116
-
1117
1104
  // packages/ceal-client-protocol/src/excluded-target-coverage.ts
1118
1105
  var CEAL_EXCLUDED_TARGET_COVERAGE_MAX_ENTRIES = 64;
1119
1106
  function cealExcludedTargetCoverageJsonSchema() {
@@ -1121,7 +1108,7 @@ function cealExcludedTargetCoverageJsonSchema() {
1121
1108
  target_ref: { type: "string", minLength: 8, maxLength: 134, pattern: "^target:[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
1122
1109
  connector_kind: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9-]{0,63}$" },
1123
1110
  label: { type: "string", minLength: 1, maxLength: CEAL_PUBLIC_DISPLAY_NAME_MAX_BYTES },
1124
- reason: { type: "string", enum: [...CEAL_EXCLUDED_TARGET_REASONS] }
1111
+ reason: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9_]{0,63}$" }
1125
1112
  };
1126
1113
  return {
1127
1114
  type: "array",
@@ -1453,7 +1440,7 @@ var CEAL_REQUEST_GRAPH_NODE_PREPARE_READINESS_JSON_SCHEMA = {
1453
1440
  // packages/ceal-client-protocol/src/client-result-materialization.ts
1454
1441
  var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
1455
1442
  var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
1456
- var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root"]);
1443
+ var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv"]);
1457
1444
 
1458
1445
  // packages/ceal-client-protocol/src/session-start-affordance.ts
1459
1446
  var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
@@ -1499,22 +1486,6 @@ var CEAL_GATEWAY_ANNOUNCEMENT_POLICY_NON_CLAIMS = vocabulary([
1499
1486
  "target_specific_scope_not_declared"
1500
1487
  ]);
1501
1488
 
1502
- // packages/ceal-client-protocol/src/gateway-discovery-response-validation.ts
1503
- var ANNOUNCEMENT_POLICY_CAPABILITY_BINDINGS = Object.freeze({
1504
- "repository.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1505
- "resource.search": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1506
- "github.workflow_run.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1507
- "message.search": [{ effect: "read", scopeStatementKind: "slack_public_app_member_channels_only", providerAuthorityKind: "slack_app" }],
1508
- "notion.search": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1509
- "resource.get": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1510
- "availability.get": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1511
- "event.search": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1512
- "file.search": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_metadata", providerAuthorityKind: "google_service_account" }],
1513
- "cell_range.get": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_ranges", providerAuthorityKind: "google_service_account" }],
1514
- "sheet.list": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_tabs", providerAuthorityKind: "google_service_account" }],
1515
- "cell_range.update": [{ effect: "write", scopeStatementKind: "google_workspace_admitted_drive_target_editable_sheet_ranges", providerAuthorityKind: "google_service_account" }]
1516
- });
1517
-
1518
1489
  // packages/ceal-client-protocol/src/gateway-write-identity.ts
1519
1490
  var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
1520
1491
  var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
package/libexec/ceal-host/codex-hook.mjs CHANGED
@@ -227,16 +227,6 @@ var CEAL_WRITE_ATTRIBUTIONS = vocabulary(["subject", "requester_event", "connect
227
227
  var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verified", "not_dispatched"]);
228
228
  var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
229
229
  var CEAL_PROTOCOL_VERSION = "1.4.0";
230
- var CEAL_GATEWAY_ANNOUNCEMENT_SCOPE_STATEMENTS = Object.freeze({
231
- github_app_installation_repositories: "Repositories in the installed GitHub App installation.",
232
- slack_public_app_member_channels_only: "Public channels where the installed Slack app is a member, plus direct and multi-person direct messages the requester is a member of, as Slack reports that membership; private channels the administrator has not approved are not declared by this connector.",
233
- notion_connected_logical_area: "Connected Notion logical area under provider-enforced sharing; descendant inventory is not declared.",
234
- google_workspace_calendar_read_only: "Approved Calendar availability and event reads only; Calendar mutation is not declared.",
235
- google_workspace_admitted_drive_target_metadata: "Metadata search for files in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file-content read and mutation are not declared.",
236
- google_workspace_admitted_drive_target_sheet_ranges: "Bounded values reads from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file mutation is not declared.",
237
- google_workspace_admitted_drive_target_sheet_tabs: "Bounded tab metadata and grid extents from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; cell contents and file mutation are not declared.",
238
- google_workspace_admitted_drive_target_editable_sheet_ranges: "Bounded values updates and clears in editable Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; Docs, Slides, and other Drive file mutation are not declared."
239
- });
240
230
  var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
241
231
  var CEAL_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "phase", "schema_version"]);
242
232
  var CEAL_CLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["cause", ...CEAL_CONNECTOR_ROUTE_FAILURE_KEYS]);
@@ -1075,9 +1065,6 @@ var RESOURCE_ROW_TIMESTAMP_KEYS = Object.entries(RESOURCE_ROW_KEY_RULES).flatMap
1075
1065
  // packages/ceal-client-protocol/src/resource-read-result.ts
1076
1066
  var CEAL_RESOURCE_GET_COVERAGE_NEXT_ACTIONS = vocabulary(["reduce_request_size", "read_resource_again"]);
1077
1067
 
1078
- // packages/ceal-client-protocol/src/excluded-target-coverage-contract.ts
1079
- var CEAL_EXCLUDED_TARGET_REASONS = vocabulary(["audience_narrower_than_place", "visibility_unknown"]);
1080
-
1081
1068
  // packages/ceal-client-protocol/src/excluded-target-coverage.ts
1082
1069
  var CEAL_EXCLUDED_TARGET_COVERAGE_MAX_ENTRIES = 64;
1083
1070
  function cealExcludedTargetCoverageJsonSchema() {
@@ -1085,7 +1072,7 @@ function cealExcludedTargetCoverageJsonSchema() {
1085
1072
  target_ref: { type: "string", minLength: 8, maxLength: 134, pattern: "^target:[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
1086
1073
  connector_kind: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9-]{0,63}$" },
1087
1074
  label: { type: "string", minLength: 1, maxLength: CEAL_PUBLIC_DISPLAY_NAME_MAX_BYTES },
1088
- reason: { type: "string", enum: [...CEAL_EXCLUDED_TARGET_REASONS] }
1075
+ reason: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9_]{0,63}$" }
1089
1076
  };
1090
1077
  return {
1091
1078
  type: "array",
@@ -1427,7 +1414,7 @@ var CEAL_REQUEST_GRAPH_NODE_PREPARE_READINESS_JSON_SCHEMA = {
1427
1414
  // packages/ceal-client-protocol/src/client-result-materialization.ts
1428
1415
  var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
1429
1416
  var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
1430
- var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root"]);
1417
+ var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv"]);
1431
1418
 
1432
1419
  // packages/ceal-client-protocol/src/session-start-affordance.ts
1433
1420
  var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
@@ -1473,22 +1460,6 @@ var CEAL_GATEWAY_ANNOUNCEMENT_POLICY_NON_CLAIMS = vocabulary([
1473
1460
  "target_specific_scope_not_declared"
1474
1461
  ]);
1475
1462
 
1476
- // packages/ceal-client-protocol/src/gateway-discovery-response-validation.ts
1477
- var ANNOUNCEMENT_POLICY_CAPABILITY_BINDINGS = Object.freeze({
1478
- "repository.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1479
- "resource.search": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1480
- "github.workflow_run.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1481
- "message.search": [{ effect: "read", scopeStatementKind: "slack_public_app_member_channels_only", providerAuthorityKind: "slack_app" }],
1482
- "notion.search": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1483
- "resource.get": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1484
- "availability.get": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1485
- "event.search": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1486
- "file.search": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_metadata", providerAuthorityKind: "google_service_account" }],
1487
- "cell_range.get": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_ranges", providerAuthorityKind: "google_service_account" }],
1488
- "sheet.list": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_tabs", providerAuthorityKind: "google_service_account" }],
1489
- "cell_range.update": [{ effect: "write", scopeStatementKind: "google_workspace_admitted_drive_target_editable_sheet_ranges", providerAuthorityKind: "google_service_account" }]
1490
- });
1491
-
1492
1463
  // packages/ceal-client-protocol/src/gateway-write-identity.ts
1493
1464
  var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
1494
1465
  var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
package/libexec/ceal-host/codex-invocation-authentication.mjs CHANGED
@@ -222,16 +222,6 @@ var CEAL_WRITE_ATTRIBUTIONS = vocabulary(["subject", "requester_event", "connect
222
222
  var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verified", "not_dispatched"]);
223
223
  var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
224
224
  var CEAL_PROTOCOL_VERSION = "1.4.0";
225
- var CEAL_GATEWAY_ANNOUNCEMENT_SCOPE_STATEMENTS = Object.freeze({
226
- github_app_installation_repositories: "Repositories in the installed GitHub App installation.",
227
- slack_public_app_member_channels_only: "Public channels where the installed Slack app is a member, plus direct and multi-person direct messages the requester is a member of, as Slack reports that membership; private channels the administrator has not approved are not declared by this connector.",
228
- notion_connected_logical_area: "Connected Notion logical area under provider-enforced sharing; descendant inventory is not declared.",
229
- google_workspace_calendar_read_only: "Approved Calendar availability and event reads only; Calendar mutation is not declared.",
230
- google_workspace_admitted_drive_target_metadata: "Metadata search for files in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file-content read and mutation are not declared.",
231
- google_workspace_admitted_drive_target_sheet_ranges: "Bounded values reads from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file mutation is not declared.",
232
- google_workspace_admitted_drive_target_sheet_tabs: "Bounded tab metadata and grid extents from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; cell contents and file mutation are not declared.",
233
- google_workspace_admitted_drive_target_editable_sheet_ranges: "Bounded values updates and clears in editable Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; Docs, Slides, and other Drive file mutation are not declared."
234
- });
235
225
  var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
236
226
  var CEAL_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "phase", "schema_version"]);
237
227
  var CEAL_CLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["cause", ...CEAL_CONNECTOR_ROUTE_FAILURE_KEYS]);
@@ -1070,9 +1060,6 @@ var RESOURCE_ROW_TIMESTAMP_KEYS = Object.entries(RESOURCE_ROW_KEY_RULES).flatMap
1070
1060
  // packages/ceal-client-protocol/src/resource-read-result.ts
1071
1061
  var CEAL_RESOURCE_GET_COVERAGE_NEXT_ACTIONS = vocabulary(["reduce_request_size", "read_resource_again"]);
1072
1062
 
1073
- // packages/ceal-client-protocol/src/excluded-target-coverage-contract.ts
1074
- var CEAL_EXCLUDED_TARGET_REASONS = vocabulary(["audience_narrower_than_place", "visibility_unknown"]);
1075
-
1076
1063
  // packages/ceal-client-protocol/src/excluded-target-coverage.ts
1077
1064
  var CEAL_EXCLUDED_TARGET_COVERAGE_MAX_ENTRIES = 64;
1078
1065
  function cealExcludedTargetCoverageJsonSchema() {
@@ -1080,7 +1067,7 @@ function cealExcludedTargetCoverageJsonSchema() {
1080
1067
  target_ref: { type: "string", minLength: 8, maxLength: 134, pattern: "^target:[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
1081
1068
  connector_kind: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9-]{0,63}$" },
1082
1069
  label: { type: "string", minLength: 1, maxLength: CEAL_PUBLIC_DISPLAY_NAME_MAX_BYTES },
1083
- reason: { type: "string", enum: [...CEAL_EXCLUDED_TARGET_REASONS] }
1070
+ reason: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9_]{0,63}$" }
1084
1071
  };
1085
1072
  return {
1086
1073
  type: "array",
@@ -1448,7 +1435,7 @@ function exactKeys(value, expected) {
1448
1435
  // packages/ceal-client-protocol/src/client-result-materialization.ts
1449
1436
  var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
1450
1437
  var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
1451
- var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root"]);
1438
+ var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv"]);
1452
1439
 
1453
1440
  // packages/ceal-client-protocol/src/session-start-affordance.ts
1454
1441
  var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
@@ -1494,22 +1481,6 @@ var CEAL_GATEWAY_ANNOUNCEMENT_POLICY_NON_CLAIMS = vocabulary([
1494
1481
  "target_specific_scope_not_declared"
1495
1482
  ]);
1496
1483
 
1497
- // packages/ceal-client-protocol/src/gateway-discovery-response-validation.ts
1498
- var ANNOUNCEMENT_POLICY_CAPABILITY_BINDINGS = Object.freeze({
1499
- "repository.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1500
- "resource.search": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1501
- "github.workflow_run.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1502
- "message.search": [{ effect: "read", scopeStatementKind: "slack_public_app_member_channels_only", providerAuthorityKind: "slack_app" }],
1503
- "notion.search": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1504
- "resource.get": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1505
- "availability.get": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1506
- "event.search": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1507
- "file.search": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_metadata", providerAuthorityKind: "google_service_account" }],
1508
- "cell_range.get": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_ranges", providerAuthorityKind: "google_service_account" }],
1509
- "sheet.list": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_tabs", providerAuthorityKind: "google_service_account" }],
1510
- "cell_range.update": [{ effect: "write", scopeStatementKind: "google_workspace_admitted_drive_target_editable_sheet_ranges", providerAuthorityKind: "google_service_account" }]
1511
- });
1512
-
1513
1484
  // packages/ceal-client-protocol/src/gateway-write-identity.ts
1514
1485
  var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
1515
1486
  var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
package/libexec/ceal-host/codex-producer.mjs CHANGED
@@ -263,16 +263,6 @@ var CEAL_WRITE_ATTRIBUTIONS = vocabulary(["subject", "requester_event", "connect
263
263
  var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verified", "not_dispatched"]);
264
264
  var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
265
265
  var CEAL_PROTOCOL_VERSION = "1.4.0";
266
- var CEAL_GATEWAY_ANNOUNCEMENT_SCOPE_STATEMENTS = Object.freeze({
267
- github_app_installation_repositories: "Repositories in the installed GitHub App installation.",
268
- slack_public_app_member_channels_only: "Public channels where the installed Slack app is a member, plus direct and multi-person direct messages the requester is a member of, as Slack reports that membership; private channels the administrator has not approved are not declared by this connector.",
269
- notion_connected_logical_area: "Connected Notion logical area under provider-enforced sharing; descendant inventory is not declared.",
270
- google_workspace_calendar_read_only: "Approved Calendar availability and event reads only; Calendar mutation is not declared.",
271
- google_workspace_admitted_drive_target_metadata: "Metadata search for files in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file-content read and mutation are not declared.",
272
- google_workspace_admitted_drive_target_sheet_ranges: "Bounded values reads from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file mutation is not declared.",
273
- google_workspace_admitted_drive_target_sheet_tabs: "Bounded tab metadata and grid extents from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; cell contents and file mutation are not declared.",
274
- google_workspace_admitted_drive_target_editable_sheet_ranges: "Bounded values updates and clears in editable Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; Docs, Slides, and other Drive file mutation are not declared."
275
- });
276
266
  var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
277
267
  var CEAL_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "phase", "schema_version"]);
278
268
  var CEAL_CLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["cause", ...CEAL_CONNECTOR_ROUTE_FAILURE_KEYS]);
@@ -1111,9 +1101,6 @@ var RESOURCE_ROW_TIMESTAMP_KEYS = Object.entries(RESOURCE_ROW_KEY_RULES).flatMap
1111
1101
  // packages/ceal-client-protocol/src/resource-read-result.ts
1112
1102
  var CEAL_RESOURCE_GET_COVERAGE_NEXT_ACTIONS = vocabulary(["reduce_request_size", "read_resource_again"]);
1113
1103
 
1114
- // packages/ceal-client-protocol/src/excluded-target-coverage-contract.ts
1115
- var CEAL_EXCLUDED_TARGET_REASONS = vocabulary(["audience_narrower_than_place", "visibility_unknown"]);
1116
-
1117
1104
  // packages/ceal-client-protocol/src/excluded-target-coverage.ts
1118
1105
  var CEAL_EXCLUDED_TARGET_COVERAGE_MAX_ENTRIES = 64;
1119
1106
  function cealExcludedTargetCoverageJsonSchema() {
@@ -1121,7 +1108,7 @@ function cealExcludedTargetCoverageJsonSchema() {
1121
1108
  target_ref: { type: "string", minLength: 8, maxLength: 134, pattern: "^target:[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
1122
1109
  connector_kind: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9-]{0,63}$" },
1123
1110
  label: { type: "string", minLength: 1, maxLength: CEAL_PUBLIC_DISPLAY_NAME_MAX_BYTES },
1124
- reason: { type: "string", enum: [...CEAL_EXCLUDED_TARGET_REASONS] }
1111
+ reason: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9_]{0,63}$" }
1125
1112
  };
1126
1113
  return {
1127
1114
  type: "array",
@@ -1463,7 +1450,7 @@ var CEAL_REQUEST_GRAPH_NODE_PREPARE_READINESS_JSON_SCHEMA = {
1463
1450
  // packages/ceal-client-protocol/src/client-result-materialization.ts
1464
1451
  var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
1465
1452
  var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
1466
- var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root"]);
1453
+ var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv"]);
1467
1454
 
1468
1455
  // packages/ceal-client-protocol/src/session-start-affordance.ts
1469
1456
  var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
@@ -1509,22 +1496,6 @@ var CEAL_GATEWAY_ANNOUNCEMENT_POLICY_NON_CLAIMS = vocabulary([
1509
1496
  "target_specific_scope_not_declared"
1510
1497
  ]);
1511
1498
 
1512
- // packages/ceal-client-protocol/src/gateway-discovery-response-validation.ts
1513
- var ANNOUNCEMENT_POLICY_CAPABILITY_BINDINGS = Object.freeze({
1514
- "repository.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1515
- "resource.search": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1516
- "github.workflow_run.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1517
- "message.search": [{ effect: "read", scopeStatementKind: "slack_public_app_member_channels_only", providerAuthorityKind: "slack_app" }],
1518
- "notion.search": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1519
- "resource.get": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1520
- "availability.get": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1521
- "event.search": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1522
- "file.search": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_metadata", providerAuthorityKind: "google_service_account" }],
1523
- "cell_range.get": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_ranges", providerAuthorityKind: "google_service_account" }],
1524
- "sheet.list": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_tabs", providerAuthorityKind: "google_service_account" }],
1525
- "cell_range.update": [{ effect: "write", scopeStatementKind: "google_workspace_admitted_drive_target_editable_sheet_ranges", providerAuthorityKind: "google_service_account" }]
1526
- });
1527
-
1528
1499
  // packages/ceal-client-protocol/src/gateway-write-identity.ts
1529
1500
  var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
1530
1501
  var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
package/libexec/ceal-host/control.mjs CHANGED
@@ -2336,16 +2336,6 @@ var CEAL_WRITE_ATTRIBUTIONS = vocabulary(["subject", "requester_event", "connect
2336
2336
  var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verified", "not_dispatched"]);
2337
2337
  var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
2338
2338
  var CEAL_PROTOCOL_VERSION = "1.4.0";
2339
- var CEAL_GATEWAY_ANNOUNCEMENT_SCOPE_STATEMENTS = Object.freeze({
2340
- github_app_installation_repositories: "Repositories in the installed GitHub App installation.",
2341
- slack_public_app_member_channels_only: "Public channels where the installed Slack app is a member, plus direct and multi-person direct messages the requester is a member of, as Slack reports that membership; private channels the administrator has not approved are not declared by this connector.",
2342
- notion_connected_logical_area: "Connected Notion logical area under provider-enforced sharing; descendant inventory is not declared.",
2343
- google_workspace_calendar_read_only: "Approved Calendar availability and event reads only; Calendar mutation is not declared.",
2344
- google_workspace_admitted_drive_target_metadata: "Metadata search for files in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file-content read and mutation are not declared.",
2345
- google_workspace_admitted_drive_target_sheet_ranges: "Bounded values reads from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file mutation is not declared.",
2346
- google_workspace_admitted_drive_target_sheet_tabs: "Bounded tab metadata and grid extents from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; cell contents and file mutation are not declared.",
2347
- google_workspace_admitted_drive_target_editable_sheet_ranges: "Bounded values updates and clears in editable Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; Docs, Slides, and other Drive file mutation are not declared."
2348
- });
2349
2339
  var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
2350
2340
  var CEAL_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "phase", "schema_version"]);
2351
2341
  var CEAL_CLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["cause", ...CEAL_CONNECTOR_ROUTE_FAILURE_KEYS]);
@@ -3188,9 +3178,6 @@ var RESOURCE_ROW_TIMESTAMP_KEYS = Object.entries(RESOURCE_ROW_KEY_RULES).flatMap
3188
3178
  // packages/ceal-client-protocol/src/resource-read-result.ts
3189
3179
  var CEAL_RESOURCE_GET_COVERAGE_NEXT_ACTIONS = vocabulary(["reduce_request_size", "read_resource_again"]);
3190
3180
 
3191
- // packages/ceal-client-protocol/src/excluded-target-coverage-contract.ts
3192
- var CEAL_EXCLUDED_TARGET_REASONS = vocabulary(["audience_narrower_than_place", "visibility_unknown"]);
3193
-
3194
3181
  // packages/ceal-client-protocol/src/excluded-target-coverage.ts
3195
3182
  var CEAL_EXCLUDED_TARGET_COVERAGE_MAX_ENTRIES = 64;
3196
3183
  function cealExcludedTargetCoverageJsonSchema() {
@@ -3198,7 +3185,7 @@ function cealExcludedTargetCoverageJsonSchema() {
3198
3185
  target_ref: { type: "string", minLength: 8, maxLength: 134, pattern: "^target:[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
3199
3186
  connector_kind: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9-]{0,63}$" },
3200
3187
  label: { type: "string", minLength: 1, maxLength: CEAL_PUBLIC_DISPLAY_NAME_MAX_BYTES },
3201
- reason: { type: "string", enum: [...CEAL_EXCLUDED_TARGET_REASONS] }
3188
+ reason: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9_]{0,63}$" }
3202
3189
  };
3203
3190
  return {
3204
3191
  type: "array",
@@ -3544,7 +3531,7 @@ var CEAL_HOST_INGRESS_PATH = "/api/ceal/v2/host-ingress";
3544
3531
  // packages/ceal-client-protocol/src/client-result-materialization.ts
3545
3532
  var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
3546
3533
  var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
3547
- var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root"]);
3534
+ var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv"]);
3548
3535
 
3549
3536
  // packages/ceal-client-protocol/src/session-start-affordance.ts
3550
3537
  var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
@@ -3591,22 +3578,6 @@ var CEAL_GATEWAY_ANNOUNCEMENT_POLICY_NON_CLAIMS = vocabulary([
3591
3578
  "target_specific_scope_not_declared"
3592
3579
  ]);
3593
3580
 
3594
- // packages/ceal-client-protocol/src/gateway-discovery-response-validation.ts
3595
- var ANNOUNCEMENT_POLICY_CAPABILITY_BINDINGS = Object.freeze({
3596
- "repository.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
3597
- "resource.search": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
3598
- "github.workflow_run.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
3599
- "message.search": [{ effect: "read", scopeStatementKind: "slack_public_app_member_channels_only", providerAuthorityKind: "slack_app" }],
3600
- "notion.search": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
3601
- "resource.get": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
3602
- "availability.get": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
3603
- "event.search": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
3604
- "file.search": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_metadata", providerAuthorityKind: "google_service_account" }],
3605
- "cell_range.get": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_ranges", providerAuthorityKind: "google_service_account" }],
3606
- "sheet.list": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_tabs", providerAuthorityKind: "google_service_account" }],
3607
- "cell_range.update": [{ effect: "write", scopeStatementKind: "google_workspace_admitted_drive_target_editable_sheet_ranges", providerAuthorityKind: "google_service_account" }]
3608
- });
3609
-
3610
3581
  // packages/ceal-client-protocol/src/gateway-write-identity.ts
3611
3582
  var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
3612
3583
  var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
package/libexec/ceal-host/relay.mjs CHANGED
@@ -219,16 +219,6 @@ var CEAL_WRITE_ATTRIBUTIONS = vocabulary(["subject", "requester_event", "connect
219
219
  var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verified", "not_dispatched"]);
220
220
  var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
221
221
  var CEAL_PROTOCOL_VERSION = "1.4.0";
222
- var CEAL_GATEWAY_ANNOUNCEMENT_SCOPE_STATEMENTS = Object.freeze({
223
- github_app_installation_repositories: "Repositories in the installed GitHub App installation.",
224
- slack_public_app_member_channels_only: "Public channels where the installed Slack app is a member, plus direct and multi-person direct messages the requester is a member of, as Slack reports that membership; private channels the administrator has not approved are not declared by this connector.",
225
- notion_connected_logical_area: "Connected Notion logical area under provider-enforced sharing; descendant inventory is not declared.",
226
- google_workspace_calendar_read_only: "Approved Calendar availability and event reads only; Calendar mutation is not declared.",
227
- google_workspace_admitted_drive_target_metadata: "Metadata search for files in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file-content read and mutation are not declared.",
228
- google_workspace_admitted_drive_target_sheet_ranges: "Bounded values reads from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; file mutation is not declared.",
229
- google_workspace_admitted_drive_target_sheet_tabs: "Bounded tab metadata and grid extents from Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; cell contents and file mutation are not declared.",
230
- google_workspace_admitted_drive_target_editable_sheet_ranges: "Bounded values updates and clears in editable Google Sheets in the shared drives and directly shared files the Connector reaches and the Organization admits as Targets; Docs, Slides, and other Drive file mutation are not declared."
231
- });
232
222
  var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
233
223
  var CEAL_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "phase", "schema_version"]);
234
224
  var CEAL_CLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["cause", ...CEAL_CONNECTOR_ROUTE_FAILURE_KEYS]);
@@ -1068,9 +1058,6 @@ var RESOURCE_ROW_TIMESTAMP_KEYS = Object.entries(RESOURCE_ROW_KEY_RULES).flatMap
1068
1058
  // packages/ceal-client-protocol/src/resource-read-result.ts
1069
1059
  var CEAL_RESOURCE_GET_COVERAGE_NEXT_ACTIONS = vocabulary(["reduce_request_size", "read_resource_again"]);
1070
1060
 
1071
- // packages/ceal-client-protocol/src/excluded-target-coverage-contract.ts
1072
- var CEAL_EXCLUDED_TARGET_REASONS = vocabulary(["audience_narrower_than_place", "visibility_unknown"]);
1073
-
1074
1061
  // packages/ceal-client-protocol/src/excluded-target-coverage.ts
1075
1062
  var CEAL_EXCLUDED_TARGET_COVERAGE_MAX_ENTRIES = 64;
1076
1063
  function cealExcludedTargetCoverageJsonSchema() {
@@ -1078,7 +1065,7 @@ function cealExcludedTargetCoverageJsonSchema() {
1078
1065
  target_ref: { type: "string", minLength: 8, maxLength: 134, pattern: "^target:[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
1079
1066
  connector_kind: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9-]{0,63}$" },
1080
1067
  label: { type: "string", minLength: 1, maxLength: CEAL_PUBLIC_DISPLAY_NAME_MAX_BYTES },
1081
- reason: { type: "string", enum: [...CEAL_EXCLUDED_TARGET_REASONS] }
1068
+ reason: { type: "string", minLength: 1, maxLength: 64, pattern: "^[a-z][a-z0-9_]{0,63}$" }
1082
1069
  };
1083
1070
  return {
1084
1071
  type: "array",
@@ -1435,7 +1422,7 @@ function exactKeys(value, expected) {
1435
1422
  // packages/ceal-client-protocol/src/client-result-materialization.ts
1436
1423
  var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
1437
1424
  var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
1438
- var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root"]);
1425
+ var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv"]);
1439
1426
 
1440
1427
  // packages/ceal-client-protocol/src/session-start-affordance.ts
1441
1428
  var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
@@ -1481,22 +1468,6 @@ var CEAL_GATEWAY_ANNOUNCEMENT_POLICY_NON_CLAIMS = vocabulary([
1481
1468
  "target_specific_scope_not_declared"
1482
1469
  ]);
1483
1470
 
1484
- // packages/ceal-client-protocol/src/gateway-discovery-response-validation.ts
1485
- var ANNOUNCEMENT_POLICY_CAPABILITY_BINDINGS = Object.freeze({
1486
- "repository.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1487
- "resource.search": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1488
- "github.workflow_run.get": [{ effect: "read", scopeStatementKind: "github_app_installation_repositories", providerAuthorityKind: "github_app" }],
1489
- "message.search": [{ effect: "read", scopeStatementKind: "slack_public_app_member_channels_only", providerAuthorityKind: "slack_app" }],
1490
- "notion.search": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1491
- "resource.get": [{ effect: "read", scopeStatementKind: "notion_connected_logical_area", providerAuthorityKind: "notion_integration" }],
1492
- "availability.get": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1493
- "event.search": [{ effect: "read", scopeStatementKind: "google_workspace_calendar_read_only", providerAuthorityKind: "google_service_account" }],
1494
- "file.search": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_metadata", providerAuthorityKind: "google_service_account" }],
1495
- "cell_range.get": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_ranges", providerAuthorityKind: "google_service_account" }],
1496
- "sheet.list": [{ effect: "read", scopeStatementKind: "google_workspace_admitted_drive_target_sheet_tabs", providerAuthorityKind: "google_service_account" }],
1497
- "cell_range.update": [{ effect: "write", scopeStatementKind: "google_workspace_admitted_drive_target_editable_sheet_ranges", providerAuthorityKind: "google_service_account" }]
1498
- });
1499
-
1500
1471
  // packages/ceal-client-protocol/src/gateway-write-identity.ts
1501
1472
  var CEAL_GATEWAY_WRITE_IDENTITY_ROLES = Object.freeze(["replay_identity", "lookup_handle", "collision_evidence"]);
1502
1473
  var CEAL_GATEWAY_WRITE_IDENTITY_FIELDS = Object.freeze({
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@corca-org/ceal-host-darwin-arm64",
3
- "version": "1.0.12",
3
+ "version": "1.0.13",
4
4
  "license": "MIT",
5
5
  "repository": {
6
6
  "type": "git",
package/share/ceal-host/bundle-manifest.json CHANGED
@@ -3,12 +3,12 @@
3
3
  "product": "ceal-host",
4
4
  "version_source": {
5
5
  "product": "ceal-host",
6
- "version": "1.0.12"
6
+ "version": "1.0.13"
7
7
  },
8
8
  "source": {
9
9
  "repository": "corca-ai/ceal",
10
- "commit": "dc29c22fb1af2f344143a22dfa655018024eac20",
11
- "tree": "e632a210d03c949d2b0df8b76ffcf4bcdd54749a"
10
+ "commit": "732cf464711e3ab992146175b0a9b34126374109",
11
+ "tree": "ef5174496b0db4e4791a168cbfc6dc3cb1efd994"
12
12
  },
13
13
  "target": "darwin-arm64",
14
14
  "required_features": [],
@@ -19,7 +19,7 @@
19
19
  ],
20
20
  "executable": true,
21
21
  "path": "bin/ceal-host",
22
- "sha256": "0413fecf49095cc29b352b51d78cc48fe23b43a70ab354a521b7fa3a45d7b5dc"
22
+ "sha256": "f1d92715a1500bd10b827dd3738883e0bf51505de262a8b80d8831a5b9938d52"
23
23
  },
24
24
  {
25
25
  "owners": [
@@ -27,7 +27,7 @@
27
27
  ],
28
28
  "executable": false,
29
29
  "path": "libexec/ceal-host/claude-hook.mjs",
30
- "sha256": "1fd44b48e593cd50b604eec64ff35a588494169f83cc3fa8ec8eb37d5f6250a1"
30
+ "sha256": "46c535a25bd169b584053c7e9a26a907651a84b9482246ee228df59cabd78d86"
31
31
  },
32
32
  {
33
33
  "owners": [
@@ -35,7 +35,7 @@
35
35
  ],
36
36
  "executable": false,
37
37
  "path": "libexec/ceal-host/claude-invocation-authentication.mjs",
38
- "sha256": "95e483006fbd8e70a1ef02633ba0405b2cf24cb7773bab512efe57cd4e2e6356"
38
+ "sha256": "21333ba0d8b888968d34bd5fea40f8f364bc9beed2c057014c20c62f3bb0a2df"
39
39
  },
40
40
  {
41
41
  "owners": [
@@ -43,7 +43,7 @@
43
43
  ],
44
44
  "executable": false,
45
45
  "path": "libexec/ceal-host/claude-producer.mjs",
46
- "sha256": "bdd9e2b7d7c7d3c760605ea95d251d99c958b5c8e8b9a1d9b05d4be1618c3a57"
46
+ "sha256": "6a5af274158bf79a37b460776b0458b23f4cbe35dab5de286bf66a00ef3ec0b8"
47
47
  },
48
48
  {
49
49
  "owners": [
@@ -51,7 +51,7 @@
51
51
  ],
52
52
  "executable": false,
53
53
  "path": "libexec/ceal-host/codex-hook.mjs",
54
- "sha256": "dc457ff8767b24b87f986af493d20d97dc0691ae8b04d9367dd760c0b06da70b"
54
+ "sha256": "2720509774d28f0abd694195a468bef9f17b9085b11045b296405c6a0ed5b10e"
55
55
  },
56
56
  {
57
57
  "owners": [
@@ -59,7 +59,7 @@
59
59
  ],
60
60
  "executable": false,
61
61
  "path": "libexec/ceal-host/codex-invocation-authentication.mjs",
62
- "sha256": "1de1b4023d53aa6ee9964fedc885dd12283417ea74ff25634d0f30d9f7e2d7ae"
62
+ "sha256": "10379bbae5e99fefa1b92123859dcbbf6c8034bec2139841792c0f20afacfbe4"
63
63
  },
64
64
  {
65
65
  "owners": [
@@ -67,7 +67,7 @@
67
67
  ],
68
68
  "executable": false,
69
69
  "path": "libexec/ceal-host/codex-producer.mjs",
70
- "sha256": "650acfe85568ba95f95cb234bc5b91751bd7945502659578216551993b42993c"
70
+ "sha256": "7cb0515a96d64ed4a694f1d3b6ccd025f09ce79440df721b7bba8af3f8e90675"
71
71
  },
72
72
  {
73
73
  "owners": [
@@ -75,7 +75,7 @@
75
75
  ],
76
76
  "executable": false,
77
77
  "path": "libexec/ceal-host/control.mjs",
78
- "sha256": "beb1df46a9a988e32f5ee94f9586aaaaa3f045df3aacbab9e4c21b17423e4cfe"
78
+ "sha256": "742839f25bed3db60e4be66b359da91799bcc2f4cc984646f95a39df4bb8f344"
79
79
  },
80
80
  {
81
81
  "owners": [
@@ -91,7 +91,7 @@
91
91
  ],
92
92
  "executable": false,
93
93
  "path": "libexec/ceal-host/relay.mjs",
94
- "sha256": "40fb0d83550630c9650619dac1a34fe3917359289276463dab4016873c587b32"
94
+ "sha256": "60abc3d35a84285357ce524d490a3732a767c625e851dd8e952b46ec3930be60"
95
95
  }
96
96
  ]
97
97
  }
package/share/ceal-host/bundle-manifest.sigstore.json CHANGED
@@ -1 +1 @@
1
- {"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"MIIHDzCCBpSgAwIBAgIUCXoqpL9c1dSpX7CGeKszzPsMjIcwCgYIKoZIzj0EAwMwNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRlcm1lZGlhdGUwHhcNMjYwOTI4MDMzNzU5WhcNMjYwOTI4MDM0NzU5WjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfn2ibmCBhMsTG41npzWlRc86A6zkuJfmAUfTIwEcnHgGIbuEWXw4rdkb7g24uo9+iITOEfdXW9NgLPrhcbXhkaOCBbMwggWvMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUOXsMqCfU1RVFWfm30nGL0LUFZt0wHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4YZD8wZgYDVR0RAQH/BFwwWoZYaHR0cHM6Ly9naXRodWIuY29tL2NvcmNhLWFpL2NlYWwvLmdpdGh1Yi93b3JrZmxvd3MvcmVsZWFzZS1jYW5kaWRhdGUueW1sQHJlZnMvaGVhZHMvbWFpbjA5BgorBgEEAYO/MAEBBCtodHRwczovL3Rva2VuLmFjdGlvbnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tMB8GCisGAQQBg78wAQIEEXdvcmtmbG93X2Rpc3BhdGNoMDYGCisGAQQBg78wAQMEKGRjMjljMjJmYjFhZjJmMzQ0MTQzYTIyZGZhNjU1MDE4MDI0ZWFjMjAwJAYKKwYBBAGDvzABBAQWQ2VhbCByZWxlYXNlIGNhbmRpZGF0ZTAbBgorBgEEAYO/MAEFBA1jb3JjYS1haS9jZWFsMB0GCisGAQQBg78wAQYED3JlZnMvaGVhZHMvbWFpbjA7BgorBgEEAYO/MAEIBC0MK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRodWJ1c2VyY29udGVudC5jb20waAYKKwYBBAGDvzABCQRaDFhodHRwczovL2dpdGh1Yi5jb20vY29yY2EtYWkvY2VhbC8uZ2l0aHViL3dvcmtmbG93cy9yZWxlYXNlLWNhbmRpZGF0ZS55bWxAcmVmcy9oZWFkcy9tYWluMDgGCisGAQQBg78wAQoEKgwoZGMyOWMyMmZiMWFmMmYzNDQxNDNhMjJkZmE2NTUwMTgwMjRlYWMyMDAdBgorBgEEAYO/MAELBA8MDWdpdGh1Yi1ob3N0ZWQwMAYKKwYBBAGDvzABDAQiDCBodHRwczovL2dpdGh1Yi5jb20vY29yY2EtYWkvY2VhbDA4BgorBgEEAYO/MAENBCoMKGRjMjljMjJmYjFhZjJmMzQ0MTQzYTIyZGZhNjU1MDE4MDI0ZWFjMjAwHwYKKwYBBAGDvzABDgQRDA9yZWZzL2hlYWRzL21haW4wGgYKKwYBBAGDvzABDwQMDAoxMTkxNTU0NTkzMCsGCisGAQQBg78wARAEHQwbaHR0cHM6Ly9naXRodWIuY29tL2NvcmNhLWFpMBgGCisGAQQBg78wAREECgwINzI5Nzg4NjAwaAYKKwYBBAGDvzABEgRaDFhodHRwczovL2dpdGh1Yi5jb20vY29yY2EtYWkvY2VhbC8uZ2l0aHViL3dvcmtmbG93cy9yZWxlYXNlLWNhbmRpZGF0ZS55bWxAcmVmcy9oZWFkcy9tYWluMDgGCisGAQQBg78wARMEKgwoZGMyOWMyMmZiMWFmMmYzNDQxNDNhMjJkZmE2NTUwMTgwMjRlYWMyMDAhBgorBgEEAYO/MAEUBBMMEXdvcmtmbG93X2Rpc3BhdGNoMFQGCisGAQQBg78wARUERgxEaHR0cHM6Ly9naXRodWIuY29tL2NvcmNhLWFpL2NlYWwvYWN0aW9ucy9ydW5zLzM2MzczOTc0MTI2L2F0dGVtcHRzLzEwFwYKKwYBBAGDvzABFgQJDAdwcml2YXRlMDYGCisGAQQBg78wARgEKAwmcmVwbzpjb3JjYS1haS9jZWFsOnJlZjpyZWZzL2hlYWRzL21haW4wgYsGCisGAQQB1nkCBAIEfQR7AHkAdwDdPTBqxscRMmMZHhyZZzcCokpeuN48rf+HinKALynujgAAAaDmF0PEAAAEAwBIMEYCIQD7tFz/ph5AXivO5csXx02u7LreYa/91UINzbR7psy9cAIhANhDfp3AvC0WwcxNBkVl5UZ0R2ZLYasqOQaYMjjkRbViMAoGCCqGSM49BAMDA2kAMGYCMQDDq0AL2Q0usrwtvbqyFprn5PNDD5RqzdXiQ+yxQQBhwa6cBewW9/YlcCmozhuTyBMCMQD8flpkipFigE+4Fz9dZgJ669BK5y/WSg2aYEo6hjkp17gd45W6R8/tjWRbJfo0kbY="},"tlogEntries":[{"logIndex":"2981313644","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1790566679","inclusionPromise":{"signedEntryTimestamp":"MEUCIG9VYGUhlpu7A94NwNhbUyZMePg9+l9aYXgf/uRaFoptAiEA/lpwJfXLRIiw2IgmFLxihgqhssz03jEKxEdatu48VOA="},"inclusionProof":{"logIndex":"2859409382","rootHash":"lnHz8jY3ZK9wEnxHa2gSSt9kLWnYFLYJElbcQRKrHiA=","treeSize":"2859409383","hashes":["ZT0tkIb/WBWc7yMG6e1skk5y5i7PYxp176hinysdQ9Q=","jQ06udmnc9xLwdUnydAvN7rquZBeqWjPwAgPg1O4E/c=","/7UhE049zwARvbO+GoVporg9S8vyj4OLqAj6LFgxkl8=","Bg+p6GK4qLMLCTHIkhRFeiONOVq/jjGMDLUMAXm4WGU=","wBfIxIS/kXNRBss+Y1V2rMYG5C3eG9o+rih6UWeDKa0=","UQJgPPrrwlft2SGEn1q6luc7RWhuAYMWkx7BVgw2i1Q=","TvKBVqI2TYtIoXj/OTbvyH4bd5qztYsqZrk5BqX60w4=","SXo6R6OBjjW+vewHtOWeHUP6ELZrvJNu5O1hgDwH4aA=","stvMrVJoLDtuSahuZByOrf3ujl6A3sA6WQXK2u/3j2U=","pD+Clg8e/32VcYvv0ycBRw+e86T84K2y1lCOApInazY=","y3DLGHd57x8QDYfuziXNZ+gKkF9RJCnq/6pml5Mi+rI=","REoXYTGmnHWTtY08r8JSyKqHg/AACVbKdVHc0SYtP0w=","JI7BdDfU3spZHqtVRczqCI8156lrpdEGWQq0Fn38j4U=","IPA4R0AINGdKGHeiMVewQkcQiRM7aHUJhVk6976VT/k=","6mDtzPjFGaVpSuFNTA+Iv26aRnFFJ/c8nOTK7q9yl2Y=","aCJfei18nLGFIqn/qu3wnR4eG+9VM93d7+D3D+LkNkU=","B1Y96tQagNknpJ8/ufNODAPKkOjvBLLCKTEJLfbi5rU=","ttpxd0TJprOUtb/8Wf5DeIzwNtUw72Q0YnXE2LFMIZo=","qxzHanAzz57SDdmJe0B7bJK72NTIBbwEMGBBKvDOROw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2859409383\nlnHz8jY3ZK9wEnxHa2gSSt9kLWnYFLYJElbcQRKrHiA=\n\n— rekor.sigstore.dev wNI9ajBFAiAkrBskl34nZkvyIT7q0z59tY1Kg6S9pg78tjdBPIwvUQIhALyRe58wp/OPGJWQe8Sg+yk4r3NWRl0j/UiZt7xmZXkp\n"}},"canonicalizedBody":"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"}]},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"RXBGRa9sEVnWL63iDjOKh3NpbAG9xFSI7LVTLaepw3c="},"signature":"MEYCIQDjoDaIyRRG1uEkK2StpXT+rA/3aZRyebE+oHMJ2bJtvAIhAKSWP4gDJPLb/sxyek66QOs6YdX7sgsP2t0AkIxSBxym"}}
1
+ {"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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"},"tlogEntries":[{"logIndex":"2992571280","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1790651963","inclusionPromise":{"signedEntryTimestamp":"MEUCIQDhv+7NZujjX56Id4pXEjtIhv2Mc1CWshy0v1JJ1K2nCgIgTqjEBh9W9R2sKCZ4EPNLaCjPivPpOPApbIV6x6jJNZ8="},"inclusionProof":{"logIndex":"2870667018","rootHash":"SJYM/3UkyNk4O81MLO3OD7aKvAWe87wQw4x/upmL7Z8=","treeSize":"2870667225","hashes":["2zQCv7tnoYy8IXXJgRKbr9EcHI8VCRDj4bVMIKBx8VM=","EqfFvy2AWDK0vVPozSuWGe7+tJYZVPWyomx17gkAjnc=","936uTCY9YwGNklsgNhdF9rtS0vELS30jG5ZV4NoHDOk=","tkxLx0MbGLu7ozJ53/0v833pYrL1h1YiN4ZS0/JQB6U=","YsF5UfcORQD358lDfomX8ndh+JkHU4eLfapjuCnuUok=","SyVS+vvYK1U1AlHmhchg+nwjqVtDoFuqf4OjG8Bcckc=","nw6pxoqhM4+bAfUHK+J9GaV38YmOJl0Aq9PmLALZnmo=","ar+bNgAt2cUeCCzldHFH9f+xgeJkyxt/CjtPks2N6dI=","tbLAf98k+ME2wfqlnG1UoFscl9zZdr7ycVljG2zxyk0=","FNiUSxvBgnrDkct+dHZoSubkxDnoStnHV5PN9RlPH5U=","SXMppMATmgQeu47XN2kgd8zGophvytiRRcUmRgJMPnQ=","XyOljDcLBP9uXRGe5yiR914lsLfey4mgjssi/5K1dAc=","dSoYdQ3tP9fPwxIdkBb/4k6f2aiBfkPdUbmZu+vjlvo=","BSkJHyyiXXUGgDYzovBhYkX4zCULrK6ijkVhR55B2Ww=","aegW1hJKQKr2OyW/zIz0UM/+kn6p6P/7Lrst0mDFkis=","Ssc23htZrUjaxYoKLcqEaUS97GSlGzQnTGGRpq+5UtU=","Sp+ICPp0CTN68mS3IfgY0X/aMqm4kaaPoJZ3lxXGL00=","vcyqiwN1R9e9/ujt8MEwxvaDR6ZwbuJX5H8FcCWPlAE=","B1Y96tQagNknpJ8/ufNODAPKkOjvBLLCKTEJLfbi5rU=","ttpxd0TJprOUtb/8Wf5DeIzwNtUw72Q0YnXE2LFMIZo=","qxzHanAzz57SDdmJe0B7bJK72NTIBbwEMGBBKvDOROw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2870667225\nSJYM/3UkyNk4O81MLO3OD7aKvAWe87wQw4x/upmL7Z8=\n\n— rekor.sigstore.dev wNI9ajBFAiEA1KdJhdVnKOjCIg1vVnDSBAWFs1oMZha/4hlGYzBfK6wCICJ4qVKd6RbWsMSlnBey6oV5wWvzKrWZoWEMcNITM83m\n"}},"canonicalizedBody":"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"}]},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"RH80TmiAeBBm9y/J4axJc8miUFWilKJRliDX71awEQ0="},"signature":"MEYCIQDcORXwQ7iNING70cRaiq2XsshzQBkqDL7adWK3wpcs0AIhAPi64DlJA3+52B85rSYLUOFmcnmgixQFzf1LrVxif2OF"}}