@cotal-ai/auth 0.89.0 → 0.90.0

package/dist/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAExD,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAE1H;4EAC4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC;8CAC8C;AAC9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC;oFACoF;AACpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC;;;;;;;+FAO+F;AAC/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,CAAU,CAAC;AAGvL;;yFAEyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,CAA6C,CAAC;AAE7K;;;;+FAI+F;AAC/F,MAAM,CAAC,MAAM,mBAAmB,GAAuE;IACrG,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,OAAO;IACf,gBAAgB,EAAE,OAAO;IACzB,gBAAgB,EAAE,OAAO;IACzB,QAAQ,EAAE,OAAO;IACjB,iBAAiB,EAAE,WAAW;IAC9B,gBAAgB,EAAE,SAAS,EAAE,0EAA0E;IACvG,kGAAkG;IAClG,oGAAoG;IACpG,gBAAgB,EAAE,SAAS;IAC3B,qFAAqF;IACrF,6DAA6D;IAC7D,iBAAiB,EAAE,OAAO;CAC3B,CAAC;AAEF;;kEAEkE;AAClE,MAAM,UAAU,aAAa,CAAC,IAA+B;IAC3D,OAAO,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,iBAAkB,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACnH,CAAC;AAmED;2FAC2F;AAC3F,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEjD;;mGAEmG;AACnG,MAAM,UAAU,uBAAuB,CAAC,CAAU;IAChD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxH,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC;AACvH,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,CAAU;IAC3C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAClH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,GAAG,CAAC,CAAC;IACxK,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC9J,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC9J,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAU;QACvC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,6BAA6B,CAAC,CAAC;AACpK,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,CAAU;IAClD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACzH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,GAAG,CAAC,CAAC;IAC3J,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAC1H,oBAAoB,CAAC,CAAC,CAAC,UAAU,EAAE,0CAA0C,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;AACnJ,CAAC;AAYD;;mBAEmB;AACnB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAA2B;IAChF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAC9G,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAC;IAC7H,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEzG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,GAAsB,EAAE;QACtE,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,mBAAmB;KACpC,CAAC,CAAC;IAEH,8FAA8F;IAC9F,+FAA+F;IAC/F,2DAA2D;IAC3D,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC;QAChI,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACjH,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpF,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpF,+FAA+F;IAC/F,2FAA2F;IAC3F,+FAA+F;IAC/F,8FAA8F;IAC9F,6CAA6C;IAC7C,MAAM,MAAM,GAAG,aAAa,CAAE,OAAO,CAAC,GAAkC,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,GAAG,mBAAmB;QAClD,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,8DAA8D,CAAC,CAAC;IAC5H,IAAI,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,MAAM;QACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,iBAAiB,MAAM,qDAAqD,CAAC,CAAC;IAEjJ,IAAI,OAAO,CAAC,GAAG,KAAK,cAAc;QAChC,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,cAAc,qDAAqD,CAAC,CAAC;IAEpI,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IACjI,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAiC,CAAC;IACtD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACxH,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,4BAA4B,CAAC,CAAC;IACpI,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACrI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,6FAA6F;QAC7F,yFAAyF;QACzF,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAChC,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,iDAAiD,CAAC,CAAC;QAC1G,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAC9H,CAAC;IACJ,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;YAC3C,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;QACtE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB;QACtE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAC5D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACvH,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS;QAAE,yBAAyB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACpF,mGAAmG;IACnG,gGAAgG;IAChG,mGAAmG;IACnG,+FAA+F;IAC/F,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;YACtC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,oBAAoB,CAAC,GAAG,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;IACxE,CAAC;IACD,iGAAiG;IACjG,gGAAgG;IAChG,yFAAyF;IACzF,6FAA6F;IAC7F,0FAA0F;IAC1F,kFAAkF;IAClF,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAE9E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/D,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAE1E,OAAO;QACL,KAAK;QACL,KAAK,EAAE,IAAI,CAAC,QAAQ;QACpB,KAAK;QACL,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACpU,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,GAAG,EAAE,cAAc;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAExD,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,+BAA+B,EAAmC,MAAM,gBAAgB,CAAC;AAExN;4EAC4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAE/D;8CAC8C;AAC9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC;oFACoF;AACpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC;;;;;;;+FAO+F;AAC/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,CAAU,CAAC;AAG3M;;yFAEyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,CAA6C,CAAC;AAE7K;;;;+FAI+F;AAC/F,MAAM,CAAC,MAAM,mBAAmB,GAAuE;IACrG,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,OAAO;IACf,gBAAgB,EAAE,OAAO;IACzB,gBAAgB,EAAE,OAAO;IACzB,QAAQ,EAAE,OAAO;IACjB,iBAAiB,EAAE,WAAW;IAC9B,gBAAgB,EAAE,SAAS,EAAE,0EAA0E;IACvG,kGAAkG;IAClG,oGAAoG;IACpG,gBAAgB,EAAE,SAAS;IAC3B,qFAAqF;IACrF,6DAA6D;IAC7D,iBAAiB,EAAE,OAAO;IAC1B,kBAAkB,EAAE,SAAS,EAAE,4DAA4D;CAC5F,CAAC;AAEF;;kEAEkE;AAClE,MAAM,UAAU,aAAa,CAAC,IAA+B;IAC3D,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,0BAA0B,CAAC;IACnE,OAAO,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,iBAAkB,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACnH,CAAC;AA2ED;2FAC2F;AAC3F,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEjD;;mGAEmG;AACnG,MAAM,UAAU,uBAAuB,CAAC,CAAU;IAChD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxH,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC;AACvH,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,CAAU;IAC3C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAClH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,GAAG,CAAC,CAAC;IACxK,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC9J,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC9J,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAU;QACvC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,6BAA6B,CAAC,CAAC;AACpK,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,CAAU;IAClD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACzH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,GAAG,CAAC,CAAC;IAC3J,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAC1H,oBAAoB,CAAC,CAAC,CAAC,UAAU,EAAE,0CAA0C,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;AACnJ,CAAC;AAYD;;mBAEmB;AACnB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAA2B;IAChF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,GAAG,KAAK,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACvH,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAC9G,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAC;IAC7H,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEzG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,GAAsB,EAAE;QACtE,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,mBAAmB;KACpC,CAAC,CAAC;IAEH,8FAA8F;IAC9F,+FAA+F;IAC/F,2DAA2D;IAC3D,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC;QAChI,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACjH,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpF,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpF,+FAA+F;IAC/F,2FAA2F;IAC3F,+FAA+F;IAC/F,8FAA8F;IAC9F,6CAA6C;IAC7C,MAAM,MAAM,GAAG,aAAa,CAAE,OAAO,CAAC,GAAkC,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,GAAG,mBAAmB;QAClD,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,8DAA8D,CAAC,CAAC;IAC5H,IAAI,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,MAAM;QACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,iBAAiB,MAAM,qDAAqD,CAAC,CAAC;IAEjJ,IAAI,OAAO,CAAC,GAAG,KAAK,cAAc;QAChC,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,cAAc,qDAAqD,CAAC,CAAC;IAEpI,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IACjI,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAiC,CAAC;IACtD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACxH,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,4BAA4B,CAAC,CAAC;IACpI,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACrI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,6FAA6F;QAC7F,yFAAyF;QACzF,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAChC,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,iDAAiD,CAAC,CAAC;QAC1G,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAC9H,CAAC;IACJ,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;YAC3C,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;QACtE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB;QACtE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAC5D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACvH,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS;QAAE,yBAAyB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACpF,mGAAmG;IACnG,gGAAgG;IAChG,mGAAmG;IACnG,+FAA+F;IAC/F,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;YACtC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,oBAAoB,CAAC,GAAG,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;IACxE,CAAC;IACD,iGAAiG;IACjG,gGAAgG;IAChG,yFAAyF;IACzF,6FAA6F;IAC7F,0FAA0F;IAC1F,kFAAkF;IAClF,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAE9E,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,IAAI,OAAqC,CAAC;IAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,MAAgB,EAAoC,EAAE,CACpF,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;eACjE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG;eAC1G,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;eACnF,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;eAC5F,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;eACzE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;eAClH,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;eACzG,OAAO,CAAC,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;eAC5E,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,+BAA+B,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;eAC5G,OAAO,CAAC,SAAS,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,gBAAgB,KAAK,GAAG,CAAC,YAAY;YACvG,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/D,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAE1E,OAAO;QACL,KAAK;QACL,KAAK,EAAE,IAAI,CAAC,QAAQ;QACpB,KAAK;QACL,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACrW,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,GAAG,EAAE,cAAc;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC;AACJ,CAAC"}

package/dist/tool-result-prerequisites.d.ts

@@ -0,0 +1,55 @@
+import { type ToolResultConsent, type ToolResultRevocation, type ToolResultServingMaterial, type ToolResultTarget } from "@cotal-ai/core";
+import { type AuthorityClientOpts } from "./authority-client.js";
+/** Host-private infrastructure, not agent descendants. Raw grants do NOT enforce CAS, schema,
+ * TTL or target binding. Those are mediated below. Compromised MSG.GET can inject fetched bytes
+ * onto a FOREIGN SUBJECT (SPEC13.9), even without data publish authority or a broad inbox. */
+export declare function toolResultRevocationWriterGrants(space: string, connId: string): {
+    publish: string[];
+    subscribe: string[];
+};
+export declare function toolResultSnapshotReaderGrants(space: string, connId: string): {
+    publish: string[];
+    subscribe: string[];
+};
+type SnapshotValue = ToolResultServingMaterial["snapshot"];
+export interface ToolResultSnapshotWitness {
+    readonly snapshot: Readonly<SnapshotValue>;
+}
+export interface ToolResultRevocationCustody {
+    readonly space: string;
+    readonly accountPublicKey: string;
+    close(): Promise<void>;
+}
+export interface ToolResultSnapshotRequest {
+    accountPublicKey: string;
+    target: ToolResultTarget;
+    deadline: number;
+    maxEntries: number;
+    maxBytes: number;
+    signal?: AbortSignal;
+}
+/** FRESH, dedicated trusted-host provisioning only. Never adopts an existing auth stream, journal
+ * or running authority owner. Persist-before-create with fsync; crash recovery is deliberately
+ * unavailable. The trusted host exclusively holds account/provisioning keys: this is NOT a claim
+ * against a malicious administrator or an independently running privileged provisioner.
+ * Any real connection/process loss, including routine broker restart or upgrade, permanently
+ * disables gate 1 for this space. No retirement/reprovision recovery is provided here. */
+export declare function createToolResultRevocationCustody(opts: Pick<AuthorityClientOpts, "server" | "space" | "dataAccount" | "log"> & {
+    directory: string;
+    authorizeConsent: (consent: ToolResultConsent) => Promise<void>;
+    authorizeTarget: (target: ToolResultTarget) => Promise<void>;
+}): Promise<ToolResultRevocationCustody>;
+/** Consent must come from the host's authenticated consent path. Byte-compare its recorded native
+ * consent before accepting a marker. No raw headers/TTL/delete options or caller timestamp exist. */
+export declare function recordToolResultRevocation(custody: ToolResultRevocationCustody, raw: unknown): Promise<ToolResultRevocation>;
+/** T0 before any IO. Finite leader-W cut, never moving-tail walkKvLatest output. Complete native
+ * sequence/body evidence is compared to independently fsynced receipts. Existing/unproven stores,
+ * uncertain reconnect/failover, receipt gaps, caps or cancellation cannot produce a witness. */
+export declare function snapshotToolResultRevocations(custody: ToolResultRevocationCustody, request: ToolResultSnapshotRequest): Promise<ToolResultSnapshotWitness>;
+/** One-shot prerequisite consumption only. It issues no material and cannot replace gate2. */
+export declare function consumeToolResultSnapshot(custody: ToolResultRevocationCustody, witness: ToolResultSnapshotWitness, target: ToolResultTarget): Promise<Readonly<SnapshotValue>>;
+/** No runtime in source supplies protected same-kernel clock-domain/generation/suspension proof.
+ * Never invent delta, sample Date.now as evidence, or treat AgentHandle.pid as clock authority. */
+export declare function requireToolResultClockPrerequisite(): never;
+export {};
+//# sourceMappingURL=tool-result-prerequisites.d.ts.map

package/dist/tool-result-prerequisites.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-result-prerequisites.d.ts","sourceRoot":"","sources":["../src/tool-result-prerequisites.ts"],"names":[],"mappings":"AAMA,OAAO,EAC8C,KAAK,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,KAAK,yBAAyB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACtL,OAAO,EAA6C,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAG5G;;8FAE8F;AAC9F,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;EAE7E;AACD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;EAI3E;AAED,KAAK,aAAa,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;AAC3D,MAAM,WAAW,yBAAyB;IAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;CAAE;AAC1F,MAAM,WAAW,2BAA2B;IAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAAE;AACnI,MAAM,WAAW,yBAAyB;IAAG,gBAAgB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAAE;AAsEhL;;;;;0FAK0F;AAC1F,wBAAsB,iCAAiC,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,OAAO,GAAG,aAAa,GAAG,KAAK,CAAC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,eAAe,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAkEhU;AAED;qGACqG;AACrG,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,2BAA2B,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA8ClI;AAED;;gGAEgG;AAChG,wBAAsB,6BAA6B,CAAC,OAAO,EAAE,2BAA2B,EAAE,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA2DhK;AAED,8FAA8F;AAC9F,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,2BAA2B,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAUpL;AAED;mGACmG;AACnG,wBAAgB,kCAAkC,IAAI,KAAK,CAE1D"}

package/dist/tool-result-prerequisites.js

@@ -0,0 +1,352 @@
+import { createHash, randomUUID } from "node:crypto";
+import { closeSync, constants, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, statfsSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { performance } from "node:perf_hooks";
+import { jetstream } from "@nats-io/jetstream";
+import { DiscardPolicy, RetentionPolicy, StorageType, jetstreamManager } from "@nats-io/jetstream";
+import { EpEnvelopeError, EP_AUTH_MARKER_TTL_MS, assertInboxConnId, canonicalJson, epAuthBucket, isCasLoss, isJetStreamMissing, parseToolResultConsent, parseToolResultRevocation } from "@cotal-ai/core";
+import { openAuthorityClient } from "./authority-client.js";
+import { assertAuthorityStreamShape } from "./lifecycle-registry.js";
+/** Host-private infrastructure, not agent descendants. Raw grants do NOT enforce CAS, schema,
+ * TTL or target binding. Those are mediated below. Compromised MSG.GET can inject fetched bytes
+ * onto a FOREIGN SUBJECT (SPEC13.9), even without data publish authority or a broad inbox. */
+export function toolResultRevocationWriterGrants(space, connId) {
+    return { publish: [`$KV.${epAuthBucket(space)}.revocation.*.*`], subscribe: [`_INBOX_${assertInboxConnId(connId)}.>`] };
+}
+export function toolResultSnapshotReaderGrants(space, connId) {
+    const stream = `KV_${epAuthBucket(space)}`;
+    return { publish: ["$JS.API.INFO", `$JS.API.STREAM.INFO.${stream}`, `$JS.API.STREAM.MSG.GET.${stream}`],
+        subscribe: [`_INBOX_${assertInboxConnId(connId)}.>`] };
+}
+const STATES = new WeakMap();
+const WITNESSES = new WeakMap();
+const sha = (bytes) => createHash("sha256").update(bytes).digest("hex");
+function fail(code, message, outcome = "not-executed") {
+    throw new EpEnvelopeError(code, message, undefined, outcome);
+}
+function stateOf(custody) {
+    const state = STATES.get(custody);
+    if (!state)
+        fail("permission-denied", "unrecognized revocation custody");
+    if (!state.valid || state.reader.nc.isClosed() || state.writer.nc.isClosed())
+        fail("unavailable", "revocation custody lost; no reopen from current INFO");
+    return state;
+}
+function durableCreate(directory, name, value) {
+    const bytes = canonicalJson(value);
+    const fd = openSync(join(directory, name), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        writeFileSync(fd, bytes);
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    const dir = openSync(directory, constants.O_RDONLY | constants.O_DIRECTORY);
+    try {
+        fsyncSync(dir);
+    }
+    finally {
+        closeSync(dir);
+    }
+    return sha(bytes);
+}
+function journalCheck(state) {
+    const directory = lstatSync(state.directory);
+    if (!directory.isDirectory() || directory.isSymbolicLink() || (directory.mode & 0o777) !== 0o700 || directory.uid !== process.getuid?.() || `${directory.dev}:${directory.ino}` !== state.directoryIdentity)
+        fail("unavailable", "revocation custody directory is not private");
+    for (const [name, digest] of state.journal) {
+        const p = join(state.directory, name);
+        const st = lstatSync(p);
+        if (!st.isFile() || st.isSymbolicLink() || (st.mode & 0o777) !== 0o600 || st.uid !== process.getuid?.() || sha(readFileSync(p)) !== digest)
+            fail("unavailable", "revocation custody journal changed");
+    }
+}
+function targetKey(target) {
+    // Reuse the frozen target grammar without a second principal/schema definition.
+    parseToolResultRevocation({ v: 1, kind: "tool-result-revocation", space: "validation", consentId: "validation", target, revokedAt: 0 });
+    return sha(canonicalJson(target));
+}
+function identity(info, state) {
+    const cfg = info.config;
+    assertAuthorityStreamShape(cfg, epAuthBucket(state.space));
+    if (cfg.name !== state.stream)
+        fail("unavailable", "revocation stream name changed");
+    if (cfg.allow_direct !== false || cfg.allow_msg_ttl !== true)
+        fail("unavailable", "revocation stream direct/TTL flags unproved");
+    if (cfg.metadata?.["cotal_tool_result_generation"] !== state.generation || !info.created)
+        fail("unavailable", "revocation authority store generation changed");
+    return canonicalJson({ created: info.created, config: cfg });
+}
+async function prove(state) {
+    try {
+        if (!state.valid || state.reader.nc.isClosed() || state.writer.nc.isClosed() || state.reader.nc.info?.server_id !== state.broker || state.writer.nc.info?.server_id !== state.broker)
+            fail("unavailable", "revocation custody disconnected or broker identity changed");
+        journalCheck(state);
+        const info = await state.jsm.streams.info(state.stream);
+        if (identity(info, state) !== state.identity || !state.valid || state.reader.nc.isClosed() || state.writer.nc.isClosed())
+            fail("unavailable", "revocation store continuity lost");
+        return info;
+    }
+    catch {
+        state.valid = false;
+        fail("unavailable", "revocation store continuity unavailable; no automatic recovery");
+    }
+}
+/** FRESH, dedicated trusted-host provisioning only. Never adopts an existing auth stream, journal
+ * or running authority owner. Persist-before-create with fsync; crash recovery is deliberately
+ * unavailable. The trusted host exclusively holds account/provisioning keys: this is NOT a claim
+ * against a malicious administrator or an independently running privileged provisioner.
+ * Any real connection/process loss, including routine broker restart or upgrade, permanently
+ * disables gate 1 for this space. No retirement/reprovision recovery is provided here. */
+export async function createToolResultRevocationCustody(opts) {
+    if (process.platform !== "linux")
+        fail("unavailable", "revocation custody requires qualified local Linux filesystem semantics");
+    const generation = randomUUID();
+    const bucket = epAuthBucket(opts.space), stream = `KV_${bucket}`;
+    const clients = [];
+    let state;
+    let phase = "private intent";
+    const open = async (label, grants, custody = false) => {
+        // Public callers cannot forward internal mint/connect controls or observe credentials.
+        const client = await openAuthorityClient({ server: opts.server, space: opts.space,
+            dataAccount: { pub: opts.dataAccount.pub, signingSeed: opts.dataAccount.signingSeed }, log: opts.log,
+            label, grants: id => grants(opts.space, id), noReconnect: true,
+            ...(custody ? { toolResultCustody: true } : {}) });
+        clients.push(client);
+        void client.nc.closed().then(() => { if (state && (state.reader === client || state.writer === client))
+            state.valid = false; });
+        return client;
+    };
+    try {
+        // Exclusive directory claim is also the process-lifetime owner claim. Never reclaimed.
+        const parentPath = join(opts.directory, "..");
+        const parentStat = lstatSync(parentPath);
+        if (!parentStat.isDirectory() || parentStat.isSymbolicLink() || parentStat.uid !== process.getuid?.() || (parentStat.mode & 0o077) !== 0 || statfsSync(parentPath).type !== 0xef53)
+            fail("unavailable", "fresh custody requires an owner-private local ext4 parent");
+        mkdirSync(opts.directory, { mode: 0o700 });
+        const parent = openSync(parentPath, constants.O_RDONLY | constants.O_DIRECTORY);
+        try {
+            fsyncSync(parent);
+        }
+        finally {
+            closeSync(parent);
+        }
+        const journal = new Map();
+        journal.set("intent.json", durableCreate(opts.directory, "intent.json", { v: 1, generation, space: opts.space, account: opts.dataAccount.pub, stream, server: opts.server }));
+        phase = "reader bind";
+        const reader = await open("cotal:tool-result-snapshot", toolResultSnapshotReaderGrants, true);
+        const jsm = await jetstreamManager(reader.nc);
+        try {
+            await jsm.streams.info(stream);
+            fail("unavailable", "existing auth store has no qualified custody history");
+        }
+        catch (error) {
+            if (!isJetStreamMissing(error, 10059))
+                throw error;
+        }
+        phase = "fresh native create";
+        const provisioning = await open("cotal:tool-result-create", (space, id) => ({ publish: ["$JS.API.INFO", `$JS.API.STREAM.CREATE.KV_${epAuthBucket(space)}`], subscribe: [`_INBOX_${assertInboxConnId(id)}.>`] }));
+        const manager = await jetstreamManager(provisioning.nc);
+        await manager.streams.add({ name: stream, subjects: [`$KV.${bucket}.>`], storage: StorageType.File, retention: RetentionPolicy.Limits,
+            num_replicas: 1, max_msgs_per_subject: 1, max_msgs: -1, max_bytes: -1, max_age: 0, discard: DiscardPolicy.New,
+            allow_direct: false, allow_msg_ttl: true, subject_delete_marker_ttl: EP_AUTH_MARKER_TTL_MS * 1_000_000,
+            metadata: { cotal_tool_result_generation: generation } });
+        await provisioning.close();
+        const info = await jsm.streams.info(stream);
+        if (info.state.messages !== 0 || info.state.last_seq !== 0)
+            fail("unavailable", "fresh auth store is not empty");
+        phase = "writer bind";
+        const writer = await open("cotal:tool-result-revocation", toolResultRevocationWriterGrants, true);
+        const dirStat = lstatSync(opts.directory);
+        state = { space: opts.space, account: opts.dataAccount.pub, stream, generation, directory: opts.directory, directoryIdentity: `${dirStat.dev}:${dirStat.ino}`, reader, writer, jsm, authorizeConsent: opts.authorizeConsent, authorizeTarget: opts.authorizeTarget,
+            identity: "", broker: reader.nc.info?.server_id ?? "", journal, receipts: new Map(), valid: true, tail: Promise.resolve() };
+        if (!state.broker || writer.nc.info?.server_id !== state.broker || reader.nc.info?.cluster || writer.nc.info?.cluster)
+            fail("unavailable", "unproven singleton broker identity");
+        phase = "creation journal and continuity";
+        state.identity = identity(info, state);
+        phase = "creation journal durable write";
+        journal.set("created.json", durableCreate(opts.directory, "created.json", { generation, broker: reader.nc.info?.server_id, identity: state.identity }));
+        const s = state;
+        const custody = Object.freeze({ space: opts.space, accountPublicKey: opts.dataAccount.pub, close: async () => {
+                s.valid = false;
+                await Promise.all(clients.map(client => client.close()));
+            } });
+        STATES.set(custody, s);
+        await prove(s);
+        return custody;
+    }
+    catch {
+        if (state)
+            state.valid = false;
+        await Promise.all(clients.map(client => client.close().catch(() => { })));
+        fail("unavailable", `fresh revocation custody unavailable at ${phase}; intent retained, no adoption or retry`);
+    }
+}
+/** Consent must come from the host's authenticated consent path. Byte-compare its recorded native
+ * consent before accepting a marker. No raw headers/TTL/delete options or caller timestamp exist. */
+export async function recordToolResultRevocation(custody, raw) {
+    const consent = parseToolResultConsent(raw);
+    const s = stateOf(custody);
+    if (consent.space !== s.space)
+        fail("permission-denied", "foreign consent space");
+    const task = s.tail.then(async () => {
+        await s.authorizeConsent(consent);
+        await prove(s);
+        const recorded = await s.jsm.streams.getMessage(s.stream, { last_by_subj: `$KV.${epAuthBucket(s.space)}.consent.${consent.id}` });
+        if (!recorded || recorded.header?.get("KV-Operation") || canonicalJson(parseToolResultConsent(JSON.parse(new TextDecoder().decode(recorded.data)))) !== canonicalJson(consent))
+            fail("permission-denied", "consent is not its recorded target and expiry");
+        const key = `revocation.${targetKey(consent.target)}.${consent.id}`;
+        if (s.receipts.has(key))
+            fail("conflict", "consent revocation is already recorded");
+        const marker = parseToolResultRevocation({ v: 1, kind: "tool-result-revocation", space: s.space, target: consent.target, consentId: consent.id, revokedAt: Date.now() });
+        const data = new TextEncoder().encode(canonicalJson(marker));
+        const name = `operation-${randomUUID()}.json`;
+        s.journal.set(name, durableCreate(s.directory, name, { key, digest: sha(data), consent }));
+        await s.authorizeConsent(consent);
+        await prove(s);
+        let sequence;
+        try {
+            sequence = (await jetstream(s.writer.nc).publish(`$KV.${epAuthBucket(s.space)}.${key}`, data, { expect: { lastSubjectSequence: 0 } })).seq;
+        }
+        catch (error) {
+            s.valid = false;
+            if (isCasLoss(error))
+                fail("conflict", "conflicting revocation; custody invalidated");
+            fail("unavailable", "revocation persistence unknown; no automatic repeat", "unknown");
+        }
+        if (!Number.isSafeInteger(sequence) || sequence <= 0) {
+            s.valid = false;
+            fail("unavailable", "invalid native revocation acknowledgement", "unknown");
+        }
+        // A native ACK proves the effect. A later local receipt, continuity or host-authority
+        // refusal cannot turn an already-committed revocation into a not-executed response.
+        try {
+            const receipt = { key, sequence, digest: sha(data), consent };
+            const receiptName = `receipt-${sequence}.json`;
+            try {
+                s.journal.set(receiptName, durableCreate(s.directory, receiptName, receipt));
+            }
+            catch {
+                s.valid = false;
+                fail("unavailable", "revocation acknowledged but custody receipt is unknown; no retry", "executed");
+            }
+            s.receipts.set(key, receipt);
+            await prove(s);
+            await s.authorizeConsent(consent);
+            stateOf(custody);
+            return marker;
+        }
+        catch (error) {
+            if (error instanceof EpEnvelopeError)
+                throw new EpEnvelopeError(error.code, error.message, error.details, "executed");
+            throw new EpEnvelopeError("unavailable", "revocation committed; post-commit custody or authorization failed", undefined, "executed");
+        }
+    });
+    s.tail = task.then(() => { }, () => { });
+    return task;
+}
+/** T0 before any IO. Finite leader-W cut, never moving-tail walkKvLatest output. Complete native
+ * sequence/body evidence is compared to independently fsynced receipts. Existing/unproven stores,
+ * uncertain reconnect/failover, receipt gaps, caps or cancellation cannot produce a witness. */
+export async function snapshotToolResultRevocations(custody, request) {
+    const t0 = Date.now(), started = performance.now();
+    const s = stateOf(custody);
+    if (!request || Object.keys(request).some(key => !["accountPublicKey", "target", "deadline", "maxEntries", "maxBytes", "signal"].includes(key)) || !Number.isSafeInteger(request.deadline) || request.deadline <= t0 ||
+        !Number.isSafeInteger(request.maxEntries) || request.maxEntries <= 0 || request.maxEntries > 100_000 ||
+        !Number.isSafeInteger(request.maxBytes) || request.maxBytes <= 0 || request.maxBytes > 64 * 1024 * 1024)
+        fail("bad-request", "invalid bounded snapshot request");
+    if (request.accountPublicKey !== s.account)
+        fail("permission-denied", "snapshot account mismatch");
+    const digest = targetKey(request.target), target = canonicalJson(request.target);
+    const { deadline, maxEntries, maxBytes, signal } = request;
+    const check = () => {
+        stateOf(custody);
+        if (signal?.aborted || Date.now() < t0 || Date.now() >= deadline || performance.now() - started >= deadline - t0)
+            fail("unavailable", "snapshot cancelled or deadline exceeded");
+    };
+    const prefix = `$KV.${epAuthBucket(s.space)}.revocation.${digest}.`;
+    // Serialize with ACK-to-receipt publication. A native marker can be committed while
+    // its fsynced independent receipt is still pending, never mistake that gap for success.
+    const task = s.tail.then(async () => {
+        check();
+        await s.authorizeTarget(JSON.parse(target));
+        check();
+        const info = await prove(s);
+        check();
+        const watermark = info.state.last_seq, watermarkTakenAt = Date.now();
+        if (!Number.isSafeInteger(watermark) || watermark < 0 || watermarkTakenAt < t0)
+            fail("unavailable", "invalid watermark or host clock discontinuity");
+        const expected = [...s.receipts.values()].filter(r => r.sequence <= watermark && r.key.startsWith(`revocation.${digest}.`));
+        const found = new Set(), evidence = [];
+        let sequence = 1, bytes = 0;
+        while (sequence <= watermark) {
+            check();
+            let msg;
+            try {
+                const req = { seq: sequence, next_by_subj: `${prefix}*` };
+                msg = await s.jsm.streams.getMessage(s.stream, req);
+            }
+            catch (error) {
+                if (!isJetStreamMissing(error, 10037))
+                    fail("unavailable", "leader snapshot read failed");
+            }
+            check();
+            if (!msg)
+                break;
+            if (!Number.isSafeInteger(msg.seq) || msg.seq < sequence || !msg.subject.startsWith(prefix))
+                fail("unavailable", "nonmonotonic or foreign snapshot row");
+            if (msg.seq > watermark)
+                break;
+            bytes += msg.data.length;
+            if (found.size >= maxEntries || bytes > maxBytes)
+                fail("unavailable", "snapshot count or byte cap exceeded");
+            let marker;
+            try {
+                marker = parseToolResultRevocation(JSON.parse(new TextDecoder().decode(msg.data)));
+            }
+            catch {
+                fail("unavailable", "malformed revocation row");
+            }
+            const key = `revocation.${digest}.${marker.consentId}`, receipt = s.receipts.get(key);
+            if (msg.header?.get("KV-Operation") || marker.space !== s.space || canonicalJson(marker.target) !== target || msg.subject !== `$KV.${epAuthBucket(s.space)}.${key}` ||
+                found.has(key) || !receipt || receipt.sequence !== msg.seq || receipt.digest !== sha(msg.data) || canonicalJson(receipt.consent.target) !== target)
+                fail("unavailable", "revocation receipt or target continuity mismatch");
+            found.add(key);
+            evidence.push({ sequence: msg.seq, subject: msg.subject, digest: receipt.digest });
+            sequence = msg.seq + 1;
+        }
+        if (expected.length !== found.size || expected.some(r => !found.has(r.key)))
+            fail("unavailable", "snapshot omitted acknowledged revocation");
+        await prove(s);
+        check();
+        await s.authorizeTarget(JSON.parse(target));
+        check();
+        const snapshot = Object.freeze({ t0, watermark, watermarkTakenAt, revokedConsentIds: Object.freeze(expected.map(r => r.consent.id).sort()) });
+        const witness = Object.freeze({ snapshot });
+        // Committed-W artifact binds exact immutable sequence/subject/payload evidence AND custody.
+        WITNESSES.set(witness, { state: s, target, used: false, artifact: sha(canonicalJson({ generation: s.generation, account: s.account, identity: s.identity, snapshot, evidence })) });
+        return witness;
+    });
+    s.tail = task.then(() => { }, () => { });
+    return task;
+}
+/** One-shot prerequisite consumption only. It issues no material and cannot replace gate2. */
+export async function consumeToolResultSnapshot(custody, witness, target) {
+    const s = stateOf(custody), targetIdentity = canonicalJson(target), proof = WITNESSES.get(witness);
+    if (!proof || proof.used || proof.state !== s || proof.target !== targetIdentity)
+        fail("permission-denied", "forged, reused or mismatched snapshot witness");
+    proof.used = true;
+    await prove(s);
+    await s.authorizeTarget(JSON.parse(targetIdentity));
+    stateOf(custody);
+    if (Date.now() < witness.snapshot.t0 || Date.now() - witness.snapshot.t0 > 30_000 || Date.now() >= (Math.floor(witness.snapshot.t0 / 1000) + 600) * 1000)
+        fail("unavailable", "snapshot prerequisite expired");
+    return witness.snapshot;
+}
+/** No runtime in source supplies protected same-kernel clock-domain/generation/suspension proof.
+ * Never invent delta, sample Date.now as evidence, or treat AgentHandle.pid as clock authority. */
+export function requireToolResultClockPrerequisite() {
+    return fail("unavailable", "trusted native runtime clock evidence unavailable; private result issuance disabled");
+}
+//# sourceMappingURL=tool-result-prerequisites.js.map

package/dist/tool-result-prerequisites.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-result-prerequisites.js","sourceRoot":"","sources":["../src/tool-result-prerequisites.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnI,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAgF,MAAM,oBAAoB,CAAC;AACjL,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAC5H,sBAAsB,EAAE,yBAAyB,EAA4G,MAAM,gBAAgB,CAAC;AACtL,OAAO,EAAE,mBAAmB,EAAkD,MAAM,uBAAuB,CAAC;AAC5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAErE;;8FAE8F;AAC9F,MAAM,UAAU,gCAAgC,CAAC,KAAa,EAAE,MAAc;IAC5E,OAAO,EAAE,OAAO,EAAE,CAAC,OAAO,YAAY,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,CAAC,UAAU,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1H,CAAC;AACD,MAAM,UAAU,8BAA8B,CAAC,KAAa,EAAE,MAAc;IAC1E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3C,OAAO,EAAE,OAAO,EAAE,CAAC,cAAc,EAAE,uBAAuB,MAAM,EAAE,EAAE,0BAA0B,MAAM,EAAE,CAAC;QACrG,SAAS,EAAE,CAAC,UAAU,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3D,CAAC;AAgBD,MAAM,MAAM,GAAG,IAAI,OAAO,EAAsC,CAAC;AACjE,MAAM,SAAS,GAAG,IAAI,OAAO,EAAgG,CAAC;AAC9H,MAAM,GAAG,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7F,SAAS,IAAI,CAAC,IAAsE,EAAE,OAAe,EAAE,UAAmD,cAAc;IACtK,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AACD,SAAS,OAAO,CAAC,OAAoC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,IAAI,CAAC,aAAa,EAAE,sDAAsD,CAAC,CAAC;IAC1J,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,aAAa,CAAC,SAAiB,EAAE,IAAY,EAAE,KAAc;IACpE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACpI,IAAI,CAAC;QAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC5E,IAAI,CAAC;QAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IACnD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AACD,SAAS,YAAY,CAAC,KAAY;IAChC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,GAAG,SAAS,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE,KAAK,KAAK,CAAC,iBAAiB;QACzM,IAAI,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;YACxI,IAAI,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AACD,SAAS,SAAS,CAAC,MAAwB;IACzC,gFAAgF;IAChF,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACxI,OAAO,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,QAAQ,CAAC,IAAgB,EAAE,KAAqD;IACvF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACxB,0BAA0B,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,IAAI,CAAC,aAAa,EAAE,gCAAgC,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI;QAAE,IAAI,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAC;IACjI,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,8BAA8B,CAAC,KAAK,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO;QACtF,IAAI,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAC;IACvE,OAAO,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAC/D,CAAC;AACD,KAAK,UAAU,KAAK,CAAC,KAAY;IAC/B,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,KAAK,CAAC,MAAM;YAAE,IAAI,CAAC,aAAa,EAAE,4DAA4D,CAAC,CAAC;QACxQ,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE;YACtH,IAAI,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,aAAa,EAAE,gEAAgE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED;;;;;0FAK0F;AAC1F,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IAAkO;IACxR,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,IAAI,CAAC,aAAa,EAAE,wEAAwE,CAAC,CAAC;IAChI,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;IACjE,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,KAAwB,CAAC;IAC7B,IAAI,KAAK,GAAG,gBAAgB,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,EAAE,KAAa,EAAE,MAAiF,EAAE,OAAO,GAAG,KAAK,EAAE,EAAE;QACvI,uFAAuF;QACvF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;YAC/E,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;YACpG,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI;YAC9D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;YAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChI,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,IAAI,CAAC;QACH,uFAAuF;QACvF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,cAAc,EAAE,IAAI,UAAU,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,MAAM;YAChL,IAAI,CAAC,aAAa,EAAE,2DAA2D,CAAC,CAAC;QACnF,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QAChF,IAAI,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9K,KAAK,GAAG,aAAa,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,4BAA4B,EAAE,8BAA8B,EAAE,IAAI,CAAC,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,aAAa,EAAE,sDAAsD,CAAC,CAAC;QAAC,CAAC;QACpH,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;QACrE,KAAK,GAAG,qBAAqB,CAAC;QAC9B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,cAAc,EAAE,4BAA4B,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,UAAU,iBAAiB,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACjN,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,MAAM,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM;YACnI,YAAY,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG;YAC7G,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,yBAAyB,EAAE,qBAAqB,GAAG,SAAS;YACtG,QAAQ,EAAE,EAAE,4BAA4B,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,IAAI,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;QACjH,KAAK,GAAG,aAAa,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,8BAA8B,EAAE,gCAAgC,EAAE,IAAI,CAAC,CAAC;QAClG,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe;YAChQ,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9H,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO;YAAE,IAAI,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;QACjL,KAAK,GAAG,iCAAiC,CAAC;QAC1C,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,KAAK,GAAG,gCAAgC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxJ,MAAM,CAAC,GAAG,KAAK,CAAC;QAChB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;gBAC3G,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;gBAChB,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC,EAAE,CAAC,CAAC;QACL,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QAC/B,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,aAAa,EAAE,2CAA2C,KAAK,yCAAyC,CAAC,CAAC;IACjH,CAAC;AACH,CAAC;AAED;qGACqG;AACrG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAAoC,EAAE,GAAY;IACjG,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,IAAI,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAClC,MAAM,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClI,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC;YAC5K,IAAI,CAAC,mBAAmB,EAAE,+CAA+C,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,cAAc,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACpE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzK,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,aAAa,UAAU,EAAE,OAAO,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YAAC,QAAQ,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAAC,CAAC;QACnJ,OAAO,KAAK,EAAE,CAAC;YACb,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;YAChB,IAAI,SAAS,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,UAAU,EAAE,6CAA6C,CAAC,CAAC;YACtF,IAAI,CAAC,aAAa,EAAE,qDAAqD,EAAE,SAAS,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;YAAC,IAAI,CAAC,aAAa,EAAE,2CAA2C,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QACvJ,sFAAsF;QACtF,oFAAoF;QACpF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;YAC9D,MAAM,WAAW,GAAG,WAAW,QAAQ,OAAO,CAAC;YAC/C,IAAI,CAAC;gBAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAAC,CAAC;YACrF,MAAM,CAAC;gBAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;gBAAC,IAAI,CAAC,aAAa,EAAE,kEAAkE,EAAE,UAAU,CAAC,CAAC;YAAC,CAAC;YAC/H,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe;gBAClC,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAClF,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mEAAmE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACvI,CAAC;IACH,CAAC,CAAC,CAAC;IACH,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;gGAEgG;AAChG,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAAoC,EAAE,OAAkC;IAC1H,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACnD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE;QAChN,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,OAAO;QACpG,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QACzG,IAAI,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,gBAAgB,KAAK,CAAC,CAAC,OAAO;QAAE,IAAI,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,IAAI,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,QAAQ,GAAG,EAAE;YAC9G,IAAI,CAAC,aAAa,EAAE,yCAAyC,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,MAAM,GAAG,CAAC;IACpE,oFAAoF;IACpF,wFAAwF;IACxF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAClC,KAAK,EAAE,CAAC;QACR,MAAM,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,gBAAgB,GAAG,EAAE;YAAE,IAAI,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAC;QACrJ,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5H,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,EAAE,QAAQ,GAAiE,EAAE,CAAC;QAC7G,IAAI,QAAQ,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;QAC5B,OAAO,QAAQ,IAAI,SAAS,EAAE,CAAC;YAC7B,KAAK,EAAE,CAAC;YACR,IAAI,GAAG,CAAC;YACR,IAAI,CAAC;gBAAC,MAAM,GAAG,GAAmB,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,GAAG,EAAE,CAAC;gBAAC,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,GAA4B,CAAC,CAAC;YAAC,CAAC;YAChK,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC;oBAAE,IAAI,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC;YAAC,CAAC;YAC5G,KAAK,EAAE,CAAC;YACR,IAAI,CAAC,GAAG;gBAAE,MAAM;YAChB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;YACzJ,IAAI,GAAG,CAAC,GAAG,GAAG,SAAS;gBAAE,MAAM;YAC/B,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACzB,IAAI,KAAK,CAAC,IAAI,IAAI,UAAU,IAAI,KAAK,GAAG,QAAQ;gBAAE,IAAI,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;YAC7G,IAAI,MAA4B,CAAC;YACjC,IAAI,CAAC;gBAAC,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAC3F,MAAM,CAAC;gBAAC,IAAI,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;YAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,cAAc,MAAM,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtF,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE;gBAC/J,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM;gBACpJ,IAAI,CAAC,aAAa,EAAE,kDAAkD,CAAC,CAAC;YAC1E,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACnG,QAAQ,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,IAAI,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC;QAC7I,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAwB,EAAE,CAAC,CAAC;QACrK,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5C,4FAA4F;QAC5F,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACpL,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAoC,EAAE,OAAkC,EAAE,MAAwB;IAChJ,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc;QAAE,IAAI,CAAC,mBAAmB,EAAE,+CAA+C,CAAC,CAAC;IAC7J,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;IACf,MAAM,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,OAAO,CAAC,CAAC;IACjB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI;QACtJ,IAAI,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED;mGACmG;AACnG,MAAM,UAAU,kCAAkC;IAChD,OAAO,IAAI,CAAC,aAAa,EAAE,qFAAqF,CAAC,CAAC;AACpH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/auth",
   "description": "Cotal per-user auth bridge: opaque owner-token derivation and strict user-token validation for the NATS auth-callout cutover (Plane 1 ↔ Plane 2).",
-  "version": "0.89.0",
+  "version": "0.90.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -18,9 +18,9 @@
     }
   },
   "dependencies": {
-    "@cotal-ai/core": "0.89.0",
-    "@cotal-ai/lang": "0.89.0",
-    "@cotal-ai/workspace": "0.89.0",
+    "@cotal-ai/core": "0.90.0",
+    "@cotal-ai/lang": "0.90.0",
+    "@cotal-ai/workspace": "0.90.0",
     "@nats-io/jwt": "0.0.10-5",
     "@nats-io/nkeys": "^2.0.3",
     "@nats-io/transport-node": "^3.4.0",
@@ -42,6 +42,9 @@
     "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.smoke.json",
     "build": "tsc -p tsconfig.json",
     "test": "tsx smoke/backup-continuity.smoke.ts && tsx smoke/retained-manager-validation.smoke.ts && tsx smoke/manager-admin-authorization.smoke.ts && tsx smoke/views.smoke.ts",
+    "smoke:service-custody": "tsx smoke/service-custody.smoke.ts",
+    "smoke:service-custody-writer": "tsx smoke/service-custody-writer.smoke.ts",
+    "smoke:service-custody-recovery": "tsx smoke/service-custody-recovery.smoke.ts",
     "smoke:public-surfaces": "tsx smoke/auth-public-closure.smoke.ts && tsx smoke/plane-claim-public.smoke.ts && tsx smoke/account-liveness-public.smoke.ts"
   }
 }