@corenel/harness 0.9.0 → 0.11.0

package/dist/approvals/standingStore.js

@@ -0,0 +1,50 @@
+const EMPTY = () => ({ version: 1, rules: [], dismissed: [] });
+export function subjectMatchesRule(subject, tool) {
+    return (!!subject.address && tool === subject.address) || tool === subject.name;
+}
+function parse(text) {
+    try {
+        const v = JSON.parse(text);
+        if (!v || v.version !== 1 || !Array.isArray(v.rules) || !Array.isArray(v.dismissed))
+            return null;
+        return {
+            version: 1,
+            rules: v.rules.filter((r) => !!r && typeof r.tool === 'string'),
+            dismissed: v.dismissed.filter((d) => !!d && typeof d.tool === 'string'),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+export function createStandingStore(opts) {
+    const now = opts.now ?? (() => new Date().toISOString());
+    /** `strict` = a read failure propagates. Lookups are lenient (a failure reads
+     * as empty, so it can only ever mean "ask the human"); writes are strict, so
+     * a store that cannot be read right now is never overwritten with only the
+     * one rule being added -- that would silently revoke every other rule. */
+    async function load(strict = false) {
+        const raw = strict ? await opts.store.read() : await opts.store.read().catch(() => null);
+        if (raw == null)
+            return { file: EMPTY(), raw, bad: false };
+        const file = parse(raw);
+        return file ? { file, raw, bad: false } : { file: EMPTY(), raw, bad: true };
+    }
+    async function update(fn) {
+        const { file, raw, bad } = await load(true);
+        if (bad && raw != null && opts.store.preserve)
+            await opts.store.preserve(raw);
+        await opts.store.write(JSON.stringify(fn(file), null, 2) + '\n');
+    }
+    return {
+        async read() { return (await load()).file; },
+        async matches(subject) {
+            const { file } = await load();
+            return file.rules.some((r) => subjectMatchesRule(subject, r.tool));
+        },
+        addRule: (tool, source) => update((f) => (f.rules.some((r) => r.tool === tool) ? f : { ...f, rules: [...f.rules, { tool, createdAt: now(), source }] })),
+        removeRule: (tool) => update((f) => ({ ...f, rules: f.rules.filter((r) => r.tool !== tool) })),
+        setDismissal: (d) => update((f) => ({ ...f, dismissed: [...f.dismissed.filter((x) => x.tool !== d.tool), d] })),
+    };
+}
+//# sourceMappingURL=standingStore.js.map

package/dist/approvals/standingStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standingStore.js","sourceRoot":"","sources":["../../approvals/standingStore.ts"],"names":[],"mappings":"AAUA,MAAM,KAAK,GAAG,GAAiB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AAE7E,MAAM,UAAU,kBAAkB,CAAC,OAAwB,EAAE,IAAY;IACvE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC;QACpD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACjG,OAAO;YACL,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;YAClF,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;SACxF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD,MAAM,UAAU,mBAAmB,CAAC,IAA8C;IAChF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAEzD;;;8EAG0E;IAC1E,KAAK,UAAU,IAAI,CAAC,MAAM,GAAG,KAAK;QAChC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzF,IAAI,GAAG,IAAI,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9E,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,EAAqC;QACzD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,GAAG,IAAI,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACxJ,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9F,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAChH,CAAC;AACJ,CAAC"}

package/dist/approvals/suggest.d.ts

@@ -0,0 +1,15 @@
+import type { DecisionRecord, Dismissal } from '@corenel/protocol';
+export declare function toolKey(r: {
+    tool: string;
+    address?: string;
+}): string;
+export declare function allowStreak(records: readonly DecisionRecord[], key: string): number;
+export interface SuggestInput {
+    key: string;
+    streak: number;
+    threshold: number;
+    standing: boolean;
+    dismissal?: Dismissal;
+}
+export declare function shouldSuggest(i: SuggestInput): boolean;
+//# sourceMappingURL=suggest.d.ts.map

package/dist/approvals/suggest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suggest.d.ts","sourceRoot":"","sources":["../../approvals/suggest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnE,wBAAgB,OAAO,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAErE;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOnF;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,YAAY,GAAG,OAAO,CAOtD"}

package/dist/approvals/suggest.js

@@ -0,0 +1,23 @@
+export function toolKey(r) {
+    return r.address ?? r.tool;
+}
+export function allowStreak(records, key) {
+    let n = 0;
+    for (const rec of records) {
+        if (rec.by !== 'human' || toolKey(rec) !== key)
+            continue;
+        n = rec.decision === 'deny' ? 0 : n + 1;
+    }
+    return n;
+}
+export function shouldSuggest(i) {
+    if (i.threshold <= 0 || i.standing)
+        return false;
+    if (i.dismissal) {
+        if (i.dismissal.snoozeUntilCount === undefined)
+            return false;
+        return i.streak >= i.dismissal.snoozeUntilCount;
+    }
+    return i.streak >= i.threshold;
+}
+//# sourceMappingURL=suggest.js.map

package/dist/approvals/suggest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suggest.js","sourceRoot":"","sources":["../../approvals/suggest.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,OAAO,CAAC,CAAqC;IAC3D,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAkC,EAAE,GAAW;IACzE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,EAAE,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,SAAS;QACzD,CAAC,GAAG,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAUD,MAAM,UAAU,aAAa,CAAC,CAAe;IAC3C,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7D,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC;AACjC,CAAC"}

package/dist/approvals/summarize.d.ts

@@ -0,0 +1,7 @@
+import type { ArgSummary } from '@corenel/protocol';
+export declare const MAX_PATH = 512;
+export declare const MAX_RAW = 2048;
+export declare function isPathLike(s: string): boolean;
+export declare function summarizeArgs(input: unknown): ArgSummary;
+export declare function rawArgs(input: unknown): Record<string, string>;
+//# sourceMappingURL=summarize.d.ts.map

package/dist/approvals/summarize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summarize.d.ts","sourceRoot":"","sources":["../../approvals/summarize.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAY,UAAU,EAAW,MAAM,mBAAmB,CAAC;AAEvE,eAAO,MAAM,QAAQ,MAAM,CAAC;AAC5B,eAAO,MAAM,OAAO,OAAO,CAAC;AAU5B,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAM7C;AAyBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAMxD;AAOD,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAM9D"}

package/dist/approvals/summarize.js

@@ -0,0 +1,70 @@
+export const MAX_PATH = 512;
+export const MAX_RAW = 2048;
+/* A string that looks like a path but may carry a secret is NOT a path: a URL
+ * (webhook tokens live in the path, credentials in the userinfo or query), a
+ * data: URI, anything with a query/assignment/userinfo marker, or base64
+ * padding. A Windows drive letter (C:\ or C:/) is the one scheme-shaped prefix
+ * that is still a path. */
+const DRIVE = /^[A-Za-z]:[\\/]/;
+const SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*:/;
+export function isPathLike(s) {
+    if (!s || s.length > MAX_PATH || /\s/.test(s))
+        return false;
+    if (SCHEME.test(s) && !DRIVE.test(s))
+        return false;
+    if (/[?=@]/.test(s))
+        return false;
+    if (/^(\/|\.\/|\.\.\/|~\/|[A-Za-z]:[\\/])/.test(s))
+        return true;
+    return s.includes('/') || s.includes('\\');
+}
+function typeOf(v) {
+    if (v === null)
+        return 'null';
+    if (Array.isArray(v))
+        return 'array';
+    const t = typeof v;
+    if (t === 'string' || t === 'number' || t === 'boolean')
+        return t;
+    return 'object';
+}
+function shape(v) {
+    const type = typeOf(v);
+    if (type === 'string') {
+        const s = v;
+        return isPathLike(s) ? { type, len: s.length, path: s } : { type, len: s.length };
+    }
+    if (type === 'array')
+        return { type, len: v.length };
+    if (type === 'object')
+        return { type, len: Object.keys(v).length };
+    return { type };
+}
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+export function summarizeArgs(input) {
+    if (input === undefined)
+        return {};
+    if (!isRecord(input))
+        return { _: shape(input) };
+    const out = {};
+    for (const [k, v] of Object.entries(input))
+        out[k] = shape(v);
+    return out;
+}
+function stringify(v) {
+    const s = typeof v === 'string' ? v : (JSON.stringify(v) ?? String(v));
+    return s.length > MAX_RAW ? s.slice(0, MAX_RAW) : s;
+}
+export function rawArgs(input) {
+    if (input === undefined)
+        return {};
+    if (!isRecord(input))
+        return { _: stringify(input) };
+    const out = {};
+    for (const [k, v] of Object.entries(input))
+        out[k] = stringify(v);
+    return out;
+}
+//# sourceMappingURL=summarize.js.map

package/dist/approvals/summarize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summarize.js","sourceRoot":"","sources":["../../approvals/summarize.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAC5B,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC;AAE5B;;;;2BAI2B;AAC3B,MAAM,KAAK,GAAG,iBAAiB,CAAC;AAChC,MAAM,MAAM,GAAG,2BAA2B,CAAC;AAE3C,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,CAAW,CAAC;QACtB,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAG,CAAe,CAAC,MAAM,EAAE,CAAC;IACpE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7E,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACjD,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,CAAU;IAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACrD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/approvals/testTextStore.d.ts

@@ -0,0 +1,6 @@
+import type { TextStore } from './textStore';
+export declare function makeTestTextStore(initial?: string | null): TextStore & {
+    text: string | null;
+    preserved: string[];
+};
+//# sourceMappingURL=testTextStore.d.ts.map

package/dist/approvals/testTextStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testTextStore.d.ts","sourceRoot":"","sources":["../../approvals/testTextStore.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,MAAM,GAAG,IAAW,GAAG,SAAS,GAAG;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CASzH"}

package/dist/approvals/testTextStore.js

@@ -0,0 +1,11 @@
+export function makeTestTextStore(initial = null) {
+    const store = {
+        text: initial,
+        preserved: [],
+        async read() { return store.text; },
+        async write(text) { store.text = text; },
+        async preserve(text) { store.preserved.push(text); },
+    };
+    return store;
+}
+//# sourceMappingURL=testTextStore.js.map

package/dist/approvals/testTextStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testTextStore.js","sourceRoot":"","sources":["../../approvals/testTextStore.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,iBAAiB,CAAC,UAAyB,IAAI;IAC7D,MAAM,KAAK,GAAG;QACZ,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,EAAc;QACzB,KAAK,CAAC,IAAI,KAAK,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,KAAK,CAAC,KAAK,CAAC,IAAY,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,QAAQ,CAAC,IAAY,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC7D,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/approvals/textStore.d.ts

@@ -0,0 +1,9 @@
+export interface TextStore {
+    /** The stored text, or null when nothing is stored. */
+    read(): Promise<string | null>;
+    write(text: string): Promise<void>;
+    /** Keep a copy of unreadable content before it is overwritten. Optional: a
+     * host with nowhere to put it simply loses the unreadable copy. */
+    preserve?(text: string): Promise<void>;
+}
+//# sourceMappingURL=textStore.d.ts.map

package/dist/approvals/textStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"textStore.d.ts","sourceRoot":"","sources":["../../approvals/textStore.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC;uEACmE;IACnE,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC"}

package/dist/approvals/textStore.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=textStore.js.map

package/dist/approvals/textStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"textStore.js","sourceRoot":"","sources":["../../approvals/textStore.ts"],"names":[],"mappings":""}

package/dist/audit/canonical.d.ts

@@ -0,0 +1,5 @@
+/** JSON with object keys sorted recursively and no whitespace, so equal values
+ * hash equally regardless of key order. */
+export declare function canonicalJson(v: unknown): string;
+export declare function argsHash(args: unknown): Promise<string>;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/audit/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../audit/canonical.ts"],"names":[],"mappings":"AAEA;2CAC2C;AAC3C,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAKhD;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAE7D"}

package/dist/audit/canonical.js

@@ -0,0 +1,15 @@
+import { sha256Hex } from '../core/hash.js';
+/** JSON with object keys sorted recursively and no whitespace, so equal values
+ * hash equally regardless of key order. */
+export function canonicalJson(v) {
+    if (v === null || typeof v !== 'object')
+        return JSON.stringify(v) ?? 'null';
+    if (Array.isArray(v))
+        return `[${v.map((x) => canonicalJson(x)).join(',')}]`;
+    const o = v;
+    return `{${Object.keys(o).sort().filter((k) => o[k] !== undefined).map((k) => `${JSON.stringify(k)}:${canonicalJson(o[k])}`).join(',')}}`;
+}
+export async function argsHash(args) {
+    return `sha256:${await sha256Hex(canonicalJson(args ?? {}))}`;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/audit/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../audit/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC;2CAC2C;AAC3C,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7E,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC5I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAa;IAC1C,OAAO,UAAU,MAAM,SAAS,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC"}

package/dist/audit/ids.d.ts

@@ -0,0 +1,3 @@
+export declare const newTraceId: () => string;
+export declare const newSpanId: () => string;
+//# sourceMappingURL=ids.d.ts.map

package/dist/audit/ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../audit/ids.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,UAAU,QAAO,MAAiB,CAAC;AAChD,eAAO,MAAM,SAAS,QAAO,MAAgB,CAAC"}

package/dist/audit/ids.js

@@ -0,0 +1,11 @@
+/** W3C-shaped ids: 32 lowercase hex chars for a trace, 16 for a span. Uses
+ * WebCrypto so the same code runs in the browser worker and in Node (the
+ * sidecar) without a crypto-module import. */
+function hex(bytes) {
+    const a = new Uint8Array(bytes);
+    globalThis.crypto.getRandomValues(a);
+    return Array.from(a, (b) => b.toString(16).padStart(2, '0')).join('');
+}
+export const newTraceId = () => hex(16);
+export const newSpanId = () => hex(8);
+//# sourceMappingURL=ids.js.map

package/dist/audit/ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../audit/ids.ts"],"names":[],"mappings":"AAAA;;8CAE8C;AAC9C,SAAS,GAAG,CAAC,KAAa;IACxB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC"}

package/dist/audit/index.d.ts

@@ -0,0 +1,7 @@
+export * from './canonical';
+export * from './ids';
+export * from './log';
+export * from './recorder';
+export * from './verify';
+export * from './runAudit';
+//# sourceMappingURL=index.d.ts.map

package/dist/audit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../audit/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC"}

package/dist/audit/index.js

@@ -0,0 +1,7 @@
+export * from './canonical.js';
+export * from './ids.js';
+export * from './log.js';
+export * from './recorder.js';
+export * from './verify.js';
+export * from './runAudit.js';
+//# sourceMappingURL=index.js.map

package/dist/audit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../audit/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC"}

package/dist/audit/log.d.ts

@@ -0,0 +1,64 @@
+import type { AuditDraft, AuditHost, FileService } from '@corenel/protocol';
+import { flattenFiles } from '@corenel/protocol';
+export declare const AUDIT_SEGMENT_LINES = 1000;
+export declare const AUDIT_RETENTION_DAYS = 180;
+export declare const AUDIT_GENESIS = "sha256:genesis";
+export declare function activeSegmentName(host: AuditHost, writerId?: string): string;
+export interface AuditArchive {
+    name: string;
+    date: string;
+    n: number;
+}
+/** The files of `host` that belong to a writer OTHER than `ownWriterId`: every
+ * `audit-<host>-<writerId>.jsonl` active segment and
+ * `audit-<host>-<writerId>-<yyyymmdd>-<n>.jsonl` archive whose writerId
+ * differs. Files without a writerId (the daemon's) and other hosts' files
+ * never match: a writerless archive `audit-<host>-<date>-<n>.jsonl` has no
+ * way to fit `<writerId>` (no `-`) followed by `.jsonl` or a full
+ * `-<8 digits>-<n>` suffix. `date` is set for an archive, absent for an active segment. */
+export declare function foreignWriterFiles(names: string[], host: AuditHost, ownWriterId: string): {
+    name: string;
+    date?: string;
+}[];
+/** The archived segments of one file set (`host`, plus `writerId` when set)
+ * among `names` (basenames), oldest first by (date, n). Shared with the
+ * verifier so both walk the same order. Without a writerId only the host's
+ * own archives match: a writerId holds no `-` and a date is exactly 8 digits
+ * then `-`, so `audit-<host>-<writerId>-...` never parses as
+ * `audit-<host>-<date>-<n>`. */
+export declare function sortedAuditArchives(names: string[], host: AuditHost, writerId?: string): AuditArchive[];
+/** Basenames of every file under `root` (as decisionLog does, via flattenFiles). */
+export declare function auditFileNames(nodes: Parameters<typeof flattenFiles>[0]): string[];
+/** The non-empty lines of a segment's text, without their newlines. */
+export declare function segmentLines(text: string): string[];
+export declare function lineHash(line: string): Promise<string>;
+export interface AuditLog {
+    append(d: AuditDraft): void;
+    flush(): Promise<void>;
+    /** Entries lost since creation (for the run's incomplete marker). */
+    lost(): number;
+}
+export interface AuditLogOptions {
+    files: () => Promise<FileService | null>;
+    root: string;
+    host: AuditHost;
+    /** Distinguishes writers that share one root+host (see the header): the
+     * log then owns `audit-<host>-<writerId>*.jsonl` only. Letters, digits and
+     * `_` only; omitted -> `audit-<host>*.jsonl`. */
+    writerId?: string;
+    /** Whether the log is on. A plain boolean is fixed for the log's life; a
+     * callback is resolved fresh at every append and flush, so a setting
+     * toggled mid-life (e.g. by a Settings UI) reaches the SAME log instance --
+     * writing its `disabled`/`enabled` marker in order -- rather than requiring
+     * a second instance on the same root+host, which two live writers forbid. */
+    enabled: boolean | (() => boolean);
+    now?: () => number;
+    segmentLines?: number;
+    retentionDays?: number;
+    flushMs?: number;
+    flushAt?: number;
+}
+/** Test-only: forget every retention run so each test starts independent. */
+export declare function __resetAuditRetentionForTest(): void;
+export declare function createAuditLog(opts: AuditLogOptions): AuditLog;
+//# sourceMappingURL=log.d.ts.map

package/dist/audit/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../audit/log.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAIjD,eAAO,MAAM,mBAAmB,OAAO,CAAC;AACxC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAe9C,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AAEvE;;;;;;2FAM2F;AAC3F,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,CAS3H;AAED;;;;;gCAKgC;AAChC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE,CAQvG;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAElF;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEnD;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE5D;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,qEAAqE;IACrE,IAAI,IAAI,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB;;qDAEiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;iFAI6E;IAC7E,OAAO,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD,6EAA6E;AAC7E,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AA2CD,wBAAgB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,QAAQ,CA6T9D"}