@cuna_labs/cli 0.1.0

package/dist/local-actions/foreground-notifications.d.ts

@@ -0,0 +1,45 @@
+export type NotificationCategory = "action_required" | "task_complete" | "task_failed";
+export interface NotificationShowArgs {
+    readonly category: NotificationCategory;
+    readonly title: string;
+    readonly body: string;
+    readonly focusRequestId: string;
+}
+export interface ForegroundNotificationHandle {
+    dismiss(): void | Promise<void>;
+}
+export interface ForegroundNotificationPresenter {
+    show(input: {
+        readonly brand: "Cuna";
+        readonly category: NotificationCategory;
+        readonly title: string;
+        readonly body: string;
+        readonly actionLabel: "Open in Cuna";
+        readonly onFocus: () => void;
+        readonly signal: AbortSignal;
+    }): Promise<ForegroundNotificationHandle>;
+}
+export interface ForegroundNotificationActionsOptions {
+    readonly agentSessionId: string;
+    readonly isForegroundAlive: () => boolean;
+    readonly focusRequest: (requestId: string) => void;
+    readonly presenter: ForegroundNotificationPresenter;
+    readonly now?: () => number;
+}
+export type NotificationReceipt = Readonly<{
+    outcome: "shown" | "rate_limited";
+}>;
+export declare class ForegroundNotificationError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export declare class ForegroundNotificationActions {
+    #private;
+    constructor(options: ForegroundNotificationActionsOptions);
+    show(args: NotificationShowArgs, agentSessionId: string): Promise<NotificationReceipt>;
+    close(): Promise<void>;
+}
+export declare const NOTIFICATION_DEDUP_WINDOW_MS = 60000;
+export declare const NOTIFICATION_REFILL_INTERVAL_MS = 10000;
+export declare const NOTIFICATION_BURST_CAPACITY = 3;
+//# sourceMappingURL=foreground-notifications.d.ts.map

package/dist/local-actions/foreground-notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreground-notifications.d.ts","sourceRoot":"","sources":["../../src/local-actions/foreground-notifications.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,GAAG,eAAe,GAAG,aAAa,CAAC;AAEvF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,CAAC,KAAK,EAAE;QACV,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,OAAO,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,+BAA+B,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,GAAG,cAAc,CAAA;CAAE,CAAC,CAAC;AAElF,qBAAa,2BAA4B,SAAQ,KAAK;aACjB,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIhD;AAED,qBAAa,6BAA6B;;gBAYrB,OAAO,EAAE,oCAAoC;IAOnD,IAAI,CAAC,IAAI,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAyCtF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA8BpC;AAiDD,eAAO,MAAM,4BAA4B,QAAkB,CAAC;AAC5D,eAAO,MAAM,+BAA+B,QAAqB,CAAC;AAClE,eAAO,MAAM,2BAA2B,IAAiB,CAAC"}

package/dist/local-actions/foreground-notifications.js

@@ -0,0 +1,163 @@
+const IDENTIFIER = /^[A-Za-z0-9._:@/-]{1,256}$/u;
+const DEDUP_WINDOW_MS = 60_000;
+const REFILL_INTERVAL_MS = 10_000;
+const BURST_CAPACITY = 3;
+export class ForegroundNotificationError extends Error {
+    code;
+    constructor(code) {
+        super(`Cuna foreground notification failed: ${code}.`);
+        this.code = code;
+        this.name = "ForegroundNotificationError";
+    }
+}
+export class ForegroundNotificationActions {
+    #options;
+    #now;
+    #controller = new AbortController();
+    #handles = new Set();
+    #pendingPresentations = new Set();
+    #pendingDismissals = new Set();
+    #dedup = new Map();
+    #closed = false;
+    #tokens = BURST_CAPACITY;
+    #lastRefill;
+    constructor(options) {
+        if (!IDENTIFIER.test(options.agentSessionId))
+            throw new ForegroundNotificationError("session_invalid");
+        this.#options = options;
+        this.#now = options.now ?? Date.now;
+        this.#lastRefill = this.#now();
+    }
+    async show(args, agentSessionId) {
+        this.#assertAlive(agentSessionId);
+        const sanitized = sanitizeNotification(args);
+        const now = this.#now();
+        this.#discardExpiredDedup(now);
+        const key = `${agentSessionId}\0${sanitized.category}\0${sanitized.focusRequestId}`;
+        if ((this.#dedup.get(key) ?? Number.NEGATIVE_INFINITY) + DEDUP_WINDOW_MS > now) {
+            return Object.freeze({ outcome: "rate_limited" });
+        }
+        this.#refill(now);
+        if (this.#tokens < 1)
+            return Object.freeze({ outcome: "rate_limited" });
+        this.#tokens -= 1;
+        this.#dedup.set(key, now);
+        const presentation = this.#options.presenter.show({
+            brand: "Cuna",
+            category: sanitized.category,
+            title: sanitized.title,
+            body: sanitized.body,
+            actionLabel: "Open in Cuna",
+            onFocus: () => {
+                if (!this.#closed && this.#options.isForegroundAlive())
+                    this.#options.focusRequest(sanitized.focusRequestId);
+            },
+            signal: this.#controller.signal,
+        });
+        this.#pendingPresentations.add(presentation);
+        let handle;
+        try {
+            handle = await presentation;
+        }
+        finally {
+            this.#pendingPresentations.delete(presentation);
+        }
+        if (this.#closed || !this.#options.isForegroundAlive()) {
+            const dismissal = Promise.resolve(handle.dismiss()).then(() => undefined, () => undefined);
+            this.#pendingDismissals.add(dismissal);
+            try {
+                await dismissal;
+            }
+            finally {
+                this.#pendingDismissals.delete(dismissal);
+            }
+            throw new ForegroundNotificationError("foreground_closed");
+        }
+        this.#handles.add(handle);
+        return Object.freeze({ outcome: "shown" });
+    }
+    async close() {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        this.#controller.abort();
+        await Promise.allSettled(this.#pendingPresentations);
+        await Promise.allSettled(this.#pendingDismissals);
+        const handles = [...this.#handles];
+        this.#handles.clear();
+        this.#dedup.clear();
+        await Promise.allSettled(handles.map(async (handle) => handle.dismiss()));
+    }
+    #assertAlive(agentSessionId) {
+        if (agentSessionId !== this.#options.agentSessionId)
+            throw new ForegroundNotificationError("session_mismatch");
+        if (this.#closed || !this.#options.isForegroundAlive())
+            throw new ForegroundNotificationError("foreground_closed");
+    }
+    #discardExpiredDedup(now) {
+        for (const [key, createdAt] of this.#dedup) {
+            if (createdAt + DEDUP_WINDOW_MS <= now)
+                this.#dedup.delete(key);
+        }
+    }
+    #refill(now) {
+        const elapsed = now - this.#lastRefill;
+        if (elapsed < REFILL_INTERVAL_MS)
+            return;
+        const recovered = Math.floor(elapsed / REFILL_INTERVAL_MS);
+        this.#tokens = Math.min(BURST_CAPACITY, this.#tokens + recovered);
+        this.#lastRefill += recovered * REFILL_INTERVAL_MS;
+    }
+}
+function sanitizeNotification(args) {
+    const keys = Object.keys(args);
+    if (keys.length !== 4 || keys.some((key) => !["category", "title", "body", "focusRequestId"].includes(key)))
+        invalid();
+    if (args.category !== "action_required" && args.category !== "task_complete" && args.category !== "task_failed")
+        invalid();
+    if (!IDENTIFIER.test(args.focusRequestId))
+        invalid();
+    const title = sanitizeText(args.title, 80);
+    const body = sanitizeText(args.body, 240);
+    if (title.length === 0 || body.length === 0)
+        invalid();
+    return Object.freeze({ category: args.category, title, body, focusRequestId: args.focusRequestId });
+}
+function sanitizeText(value, maximumBytes) {
+    if (typeof value !== "string" || Buffer.byteLength(value, "utf8") > maximumBytes)
+        invalid();
+    return [...stripAnsiControlSequences(value)]
+        .map((character) => unsafePresentationCodePoint(character.codePointAt(0)) ? " " : character)
+        .join("")
+        .replace(/\s+/gu, " ")
+        .trim();
+}
+function stripAnsiControlSequences(value) {
+    let output = "";
+    for (let index = 0; index < value.length; index += 1) {
+        if (value.codePointAt(index) !== 0x1b || value[index + 1] !== "[") {
+            output += value[index];
+            continue;
+        }
+        let cursor = index + 2;
+        while (cursor < value.length) {
+            const point = value.codePointAt(cursor);
+            cursor += 1;
+            if (point >= 0x40 && point <= 0x7e)
+                break;
+        }
+        index = cursor - 1;
+    }
+    return output;
+}
+function unsafePresentationCodePoint(point) {
+    return point <= 0x1f || (point >= 0x7f && point <= 0x9f) ||
+        (point >= 0x202a && point <= 0x202e) || (point >= 0x2066 && point <= 0x2069);
+}
+function invalid() {
+    throw new ForegroundNotificationError("request_invalid");
+}
+export const NOTIFICATION_DEDUP_WINDOW_MS = DEDUP_WINDOW_MS;
+export const NOTIFICATION_REFILL_INTERVAL_MS = REFILL_INTERVAL_MS;
+export const NOTIFICATION_BURST_CAPACITY = BURST_CAPACITY;
+//# sourceMappingURL=foreground-notifications.js.map

package/dist/local-actions/foreground-notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreground-notifications.js","sourceRoot":"","sources":["../../src/local-actions/foreground-notifications.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,cAAc,GAAG,CAAC,CAAC;AAqCzB,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACjB;IAAnC,YAAmC,IAAY;QAC7C,KAAK,CAAC,wCAAwC,IAAI,GAAG,CAAC,CAAC;QADtB,SAAI,GAAJ,IAAI,CAAQ;QAE7C,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,6BAA6B;IAC/B,QAAQ,CAAuC;IAC/C,IAAI,CAAe;IACnB,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IACnD,qBAAqB,GAAG,IAAI,GAAG,EAAyC,CAAC;IACzE,kBAAkB,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC9C,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,cAAc,CAAC;IACzB,WAAW,CAAS;IAEpB,YAAmB,OAA6C;QAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;QACvG,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,IAA0B,EAAE,cAAsB;QAClE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,cAAc,KAAK,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,cAAc,EAAE,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC,GAAG,eAAe,GAAG,GAAG,EAAE,CAAC;YAC/E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;YAChD,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,WAAW,EAAE,cAAc;YAC3B,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE;oBAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC/G,CAAC;YACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,MAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,YAAY,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3F,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC;gBAAC,MAAM,SAAS,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAC/E,MAAM,IAAI,2BAA2B,CAAC,mBAAmB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrD,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,YAAY,CAAC,cAAsB;QACjC,IAAI,cAAc,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc;YAAE,MAAM,IAAI,2BAA2B,CAAC,kBAAkB,CAAC,CAAC;QAC/G,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE;YAAE,MAAM,IAAI,2BAA2B,CAAC,mBAAmB,CAAC,CAAC;IACrH,CAAC;IAED,oBAAoB,CAAC,GAAW;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3C,IAAI,SAAS,GAAG,eAAe,IAAI,GAAG;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QACvC,IAAI,OAAO,GAAG,kBAAkB;YAAE,OAAO;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,kBAAkB,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,WAAW,IAAI,SAAS,GAAG,kBAAkB,CAAC;IACrD,CAAC;CACF;AAED,SAAS,oBAAoB,CAAC,IAA0B;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACvH,IAAI,IAAI,CAAC,QAAQ,KAAK,iBAAiB,IAAI,IAAI,CAAC,QAAQ,KAAK,eAAe,IAAI,IAAI,CAAC,QAAQ,KAAK,aAAa;QAAE,OAAO,EAAE,CAAC;IAC3H,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,YAAoB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,YAAY;QAAE,OAAO,EAAE,CAAC;IAC5F,OAAO,CAAC,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;SACzC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,2BAA2B,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;SAC5F,IAAI,CAAC,EAAE,CAAC;SACR,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa;IAC9C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;QACvB,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAE,CAAC;YACzC,MAAM,IAAI,CAAC,CAAC;YACZ,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI;gBAAE,MAAM;QAC5C,CAAC;QACD,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa;IAChD,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC;QACtD,CAAC,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GAAG,eAAe,CAAC;AAC5D,MAAM,CAAC,MAAM,+BAA+B,GAAG,kBAAkB,CAAC;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,cAAc,CAAC"}

package/dist/local-actions/git-signing.d.ts

@@ -0,0 +1,39 @@
+import { type PerOperationConsent, type SensitiveOperationContext } from "./sensitive-consent.js";
+export interface GitSignArgs {
+    readonly objectType: "commit" | "tag";
+    readonly canonicalPayloadBase64url: string;
+    readonly decodedLength: number;
+    readonly payloadSha256: `sha256:${string}`;
+    readonly keySelectorId: string;
+}
+export interface GitSignResult {
+    readonly signatureBase64url: string;
+    readonly decodedLength: number;
+    readonly signatureSha256: `sha256:${string}`;
+    readonly algorithm: string;
+    readonly publicKeyFingerprint: string;
+}
+export interface GitSigningKey {
+    readonly selectorId: string;
+    readonly algorithm: string;
+    readonly publicKeyFingerprint: string;
+    signCanonicalPayload(payload: Uint8Array, signal?: AbortSignal): Promise<Uint8Array>;
+    verifyCanonicalPayload(payload: Uint8Array, signature: Uint8Array, signal?: AbortSignal): Promise<boolean>;
+}
+export interface GitSigningKeyRegistry {
+    resolve(selectorId: string, signal?: AbortSignal): Promise<GitSigningKey | null>;
+}
+export interface GitSigningActionsOptions {
+    readonly keys: GitSigningKeyRegistry;
+    readonly consent: PerOperationConsent;
+}
+export declare class GitSigningActions {
+    #private;
+    constructor(options: GitSigningActionsOptions);
+    sign(args: GitSignArgs, context: SensitiveOperationContext, signal?: AbortSignal): Promise<GitSignResult>;
+}
+export declare class GitSigningError extends Error {
+    readonly code: string;
+    constructor(code: string, options?: ErrorOptions);
+}
+//# sourceMappingURL=git-signing.d.ts.map

package/dist/local-actions/git-signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-signing.d.ts","sourceRoot":"","sources":["../../src/local-actions/git-signing.ts"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAMhC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,QAAQ,GAAG,KAAK,CAAC;IACtC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,UAAU,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrF,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5G;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CAClF;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;CACvC;AAED,qBAAa,iBAAiB;;gBAIhB,OAAO,EAAE,wBAAwB;IAIvC,IAAI,CACR,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,yBAAyB,EAClC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,aAAa,CAAC;CA+C1B;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAI1D"}

package/dist/local-actions/git-signing.js

@@ -0,0 +1,135 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { SensitiveAuthorityError, assertSensitiveAuthority, identifier, requireConsentOnce, throwIfAborted, validateSensitiveContext, } from "./sensitive-consent.js";
+const MAX_GIT_PAYLOAD_BYTES = 65_536;
+const SHA256 = /^sha256:[0-9a-f]{64}$/u;
+const SAFE_LABEL = /^[\x21-\x7e]{1,256}$/u;
+export class GitSigningActions {
+    #options;
+    #busySelectors = new Set();
+    constructor(options) {
+        this.#options = options;
+    }
+    async sign(args, context, signal) {
+        validateSensitiveContext(context);
+        const payload = decodeGitPayload(args);
+        assertCanonicalGitPayload(args.objectType, payload);
+        await assertSensitiveAuthority(context, signal);
+        const key = await this.#options.keys.resolve(args.keySelectorId, signal);
+        if (key === null || key.selectorId !== args.keySelectorId)
+            throw new GitSigningError("key_selector_unknown");
+        validateKeyDescriptor(key);
+        if (this.#busySelectors.has(key.selectorId))
+            throw new GitSigningError("signer_busy");
+        this.#busySelectors.add(key.selectorId);
+        try {
+            await requireConsentOnce(this.#options.consent, context, {
+                action: "git.sign",
+                operationDigest: args.payloadSha256,
+                summary: `Sign ${args.objectType} ${args.payloadSha256.slice(0, 23)} with ${key.selectorId}`,
+            }, signal).catch(normalizeAuthorityError);
+            // Decode and validate again after the consent boundary. The signer never
+            // sees bytes that differ from the digest shown to the user.
+            const revalidated = decodeGitPayload(args);
+            assertCanonicalGitPayload(args.objectType, revalidated);
+            if (payload.byteLength !== revalidated.byteLength || !timingSafeEqual(payload, revalidated)) {
+                throw new GitSigningError("payload_changed");
+            }
+            await assertSensitiveAuthority(context, signal).catch(normalizeAuthorityError);
+            throwIfAborted(signal);
+            const signature = Buffer.from(await key.signCanonicalPayload(Buffer.from(revalidated), signal));
+            if (signature.byteLength < 1 || signature.byteLength > MAX_GIT_PAYLOAD_BYTES) {
+                throw new GitSigningError("signature_invalid");
+            }
+            await assertSensitiveAuthority(context, signal).catch(normalizeAuthorityError);
+            if (!await key.verifyCanonicalPayload(Buffer.from(revalidated), Buffer.from(signature), signal)) {
+                throw new GitSigningError("signature_verification_failed");
+            }
+            const encoded = signature.toString("base64url");
+            return Object.freeze({
+                signatureBase64url: encoded,
+                decodedLength: signature.byteLength,
+                signatureSha256: digest(signature),
+                algorithm: key.algorithm,
+                publicKeyFingerprint: key.publicKeyFingerprint,
+            });
+        }
+        finally {
+            this.#busySelectors.delete(key.selectorId);
+        }
+    }
+}
+export class GitSigningError extends Error {
+    code;
+    constructor(code, options) {
+        super(`Cuna Git signing failed: ${code}.`, options);
+        this.code = code;
+        this.name = "GitSigningError";
+    }
+}
+function decodeGitPayload(args) {
+    if ((args.objectType !== "commit" && args.objectType !== "tag") || !identifier(args.keySelectorId) ||
+        !Number.isSafeInteger(args.decodedLength) || args.decodedLength < 1 || args.decodedLength > MAX_GIT_PAYLOAD_BYTES ||
+        !SHA256.test(args.payloadSha256) || !/^[A-Za-z0-9_-]+$/u.test(args.canonicalPayloadBase64url) ||
+        args.canonicalPayloadBase64url.length > Math.ceil(MAX_GIT_PAYLOAD_BYTES * 4 / 3) + 2) {
+        throw new GitSigningError("payload_invalid");
+    }
+    const payload = Buffer.from(args.canonicalPayloadBase64url, "base64url");
+    if (payload.byteLength !== args.decodedLength || payload.toString("base64url") !== args.canonicalPayloadBase64url ||
+        digest(payload) !== args.payloadSha256)
+        throw new GitSigningError("payload_integrity_mismatch");
+    return payload;
+}
+function assertCanonicalGitPayload(objectType, payload) {
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true }).decode(payload);
+    }
+    catch {
+        throw new GitSigningError("payload_not_utf8");
+    }
+    if (text.includes("\0") || text.includes("\r") || !text.endsWith("\n"))
+        throw new GitSigningError("payload_not_canonical");
+    const separator = text.indexOf("\n\n");
+    if (separator <= 0)
+        throw new GitSigningError("payload_not_canonical");
+    const headers = text.slice(0, separator).split("\n");
+    if (headers.some((line) => line.startsWith(" ") || !/^[a-z][a-z0-9-]* [^\n]+$/u.test(line))) {
+        throw new GitSigningError("payload_not_canonical");
+    }
+    const names = headers.map((line) => line.slice(0, line.indexOf(" ")));
+    if (names.includes("gpgsig") || names.includes("gpgsig-sha256"))
+        throw new GitSigningError("payload_already_signed");
+    if (objectType === "commit") {
+        const tree = headers[0];
+        const authorIndex = names.indexOf("author");
+        const committerIndex = names.indexOf("committer");
+        if (tree === undefined || !/^tree [0-9a-f]{40}(?:[0-9a-f]{24})?$/u.test(tree) ||
+            names.filter((name) => name === "tree").length !== 1 || names.filter((name) => name === "author").length !== 1 ||
+            names.filter((name) => name === "committer").length !== 1 || authorIndex < 1 || committerIndex !== authorIndex + 1 ||
+            names.slice(1, authorIndex).some((name) => name !== "parent") || names.slice(committerIndex + 1).some((name) => name !== "encoding")) {
+            throw new GitSigningError("payload_not_canonical_commit");
+        }
+        return;
+    }
+    const required = ["object", "type", "tag", "tagger"];
+    if (headers.length !== required.length || names.some((name, index) => name !== required[index]) ||
+        !/^object [0-9a-f]{40}(?:[0-9a-f]{24})?$/u.test(headers[0]) ||
+        !/^type (?:blob|tree|commit|tag)$/u.test(headers[1])) {
+        throw new GitSigningError("payload_not_canonical_tag");
+    }
+}
+function validateKeyDescriptor(key) {
+    if (!identifier(key.selectorId) || !SAFE_LABEL.test(key.algorithm) || !SAFE_LABEL.test(key.publicKeyFingerprint) ||
+        typeof key.signCanonicalPayload !== "function" || typeof key.verifyCanonicalPayload !== "function") {
+        throw new GitSigningError("key_descriptor_invalid");
+    }
+}
+function digest(bytes) {
+    return `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
+}
+function normalizeAuthorityError(error) {
+    if (error instanceof SensitiveAuthorityError)
+        throw new GitSigningError(error.code, { cause: error });
+    throw error;
+}
+//# sourceMappingURL=git-signing.js.map

package/dist/local-actions/git-signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-signing.js","sourceRoot":"","sources":["../../src/local-actions/git-signing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,UAAU,EACV,kBAAkB,EAClB,cAAc,EACd,wBAAwB,GAGzB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,MAAM,GAAG,wBAAwB,CAAC;AACxC,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAmC3C,MAAM,OAAO,iBAAiB;IACnB,QAAQ,CAA2B;IACnC,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,YAAY,OAAiC;QAC3C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CACR,IAAiB,EACjB,OAAkC,EAClC,MAAoB;QAEpB,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvC,yBAAyB,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,eAAe,CAAC,sBAAsB,CAAC,CAAC;QAC7G,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC;QAEtF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE;gBACvD,MAAM,EAAE,UAAU;gBAClB,eAAe,EAAE,IAAI,CAAC,aAAa;gBACnC,OAAO,EAAE,QAAQ,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE;aAC7F,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAE1C,yEAAyE;YACzE,4DAA4D;YAC5D,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3C,yBAAyB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACxD,IAAI,OAAO,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC/E,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAChG,IAAI,SAAS,CAAC,UAAU,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,GAAG,qBAAqB,EAAE,CAAC;gBAC7E,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC/E,IAAI,CAAC,MAAM,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;gBAChG,MAAM,IAAI,eAAe,CAAC,+BAA+B,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAChD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,kBAAkB,EAAE,OAAO;gBAC3B,aAAa,EAAE,SAAS,CAAC,UAAU;gBACnC,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC;gBAClC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;aAC/C,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACnB;IAArB,YAAqB,IAAY,EAAE,OAAsB;QACvD,KAAK,CAAC,4BAA4B,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC;QADjC,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,IAAiB;IACzC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;QAChG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,qBAAqB;QACjH,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;QAC7F,IAAI,CAAC,yBAAyB,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,yBAAyB;QAC/G,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,eAAe,CAAC,4BAA4B,CAAC,CAAC;IAClG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAqC,EAAE,OAAmB;IAC3F,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAC/E,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;IAC3H,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,SAAS,IAAI,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,wBAAwB,CAAC,CAAC;IACrH,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3E,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;YAC9G,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,cAAc,KAAK,WAAW,GAAG,CAAC;YAClH,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;YACvI,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7F,CAAC,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;QAC5D,CAAC,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,eAAe,CAAC,2BAA2B,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAkB;IAC/C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC9G,OAAO,GAAG,CAAC,oBAAoB,KAAK,UAAU,IAAI,OAAO,GAAG,CAAC,sBAAsB,KAAK,UAAU,EAAE,CAAC;QACrG,MAAM,IAAI,eAAe,CAAC,wBAAwB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,KAAK,YAAY,uBAAuB;QAAE,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACtG,MAAM,KAAK,CAAC;AACd,CAAC"}

package/dist/local-actions/index.d.ts

@@ -0,0 +1,19 @@
+export { LOCAL_ACTION_PROTOCOL_VERSION, MAX_LOCAL_ACTION_ARGUMENT_BYTES, MAX_LOCAL_ACTION_FUTURE_SKEW_MS, MAX_LOCAL_ACTION_HISTORY, MAX_LOCAL_ACTION_QUEUE, MAX_LOCAL_ACTION_REPLAY_ENTRIES, MAX_LOCAL_ACTION_TTL_MS, sameLocalActionIdentity, type LocalActionArgument, type LocalActionKind, type LocalActionProvider, type LocalActionRequest, type LocalActionResult, type LocalActionSafeReason, type LocalActionSessionIdentity, type LocalActionSnapshot, type LocalActionState, type PolicyDecision, } from "./contracts.js";
+export { LocalActionBroker, LocalActionBrokerError, digestLocalActionArguments, validateRequest, type LocalActionBrokerOptions, } from "./broker.js";
+export { LocalActionPolicyEvaluator, type LocalActionPolicyInput, type LocalActionPolicyRule, } from "./policy.js";
+export { LOCAL_ACTION_PROVIDERS, providerAllowsLocalAction, type LocalActionProviderDescriptor, type ProviderAuthTopology, } from "./providers.js";
+export { CUNA_AGENT_SESSION_MCP_COMMAND, CUNA_AGENT_SESSION_MCP_SERVER, ProviderMcpConfigurationError, buildClaudeMcpLaunchPlan, buildCodexMcpLaunchPlan, buildOpenCodeMcpLaunchPlan, buildProviderMcpLaunchPlan, describeOpenCodeMcpContract, type ClaudeMcpLaunchPlan, type CodexMcpLaunchPlan, type EphemeralMcpCleanupContract, type EphemeralMcpConfigTarget, type OpenCodeMcpLaunchPlan, type ProviderMcpLaunchPlan, type RemoteMcpSessionBinding, } from "./provider-mcp-config.js";
+export { validateLocalActionArguments, validateLocalActionResult } from "./schemas.js";
+export { LOCAL_ACTION_POLICY_FILE, MAX_LOCAL_ACTION_POLICY_BYTES, loadLocalActionDevicePolicy, parseLocalActionDevicePolicy, } from "./policy-store.js";
+export { CallbackRelayError, startCallbackRelay, type AcceptedProviderCallback, type CallbackRelayHandle, type CallbackRelayOptions, type CallbackRelayProvider, type CallbackRelayReceipt, type CallbackRelayServerFactory, } from "./callback-relay.js";
+export { PrivatePortForwardError, startPrivatePortForward, type PrivateForwardConnector, type PrivateForwardTarget, type PrivatePortForwardHandle, type PrivatePortForwardOptions, } from "./private-port-forward.js";
+export { assertLoopbackHost, assertPort, isLoopbackPeer, type LoopbackHost } from "./loopback.js";
+export { DesktopPresentationActions, DesktopPresentationError, createNodeEditorProcessLauncher, renderEditorCommand, type DesktopOpenReceipt, type DesktopPresentationActionsOptions, type DiffOpenArgs, type EditorConnectionDescriptor, type EditorConnectionDescriptorResolver, type EditorId, type EditorInstallationResolver, type EditorLaunchCommand, type EditorOpenArgs, type EditorOpenReceipt, type EditorProcessLauncher, type LivePrivateForward, type PresentationBinding, type PreviewOpenArgs, type PreviewPresentation, type StaticDesktopPresenter, type VerifiedEditorInstallation, type VerifiedPresentationSourceResolver, type VerifiedPreviewArtifact, } from "./desktop-presentation.js";
+export { ForegroundNotificationActions, ForegroundNotificationError, NOTIFICATION_BURST_CAPACITY, NOTIFICATION_DEDUP_WINDOW_MS, NOTIFICATION_REFILL_INTERVAL_MS, type ForegroundNotificationActionsOptions, type ForegroundNotificationHandle, type ForegroundNotificationPresenter, type NotificationCategory, type NotificationReceipt, type NotificationShowArgs, } from "./foreground-notifications.js";
+export { CUNA_TRANSFER_ROOT, CUNA_TRANSFER_STAGING_ROOT, MAX_TRANSFER_BYTES, MAX_TRANSFER_FILES, FileTransferActions, FileTransferError, NodePosixFileTransferStore, type ArtifactSaveArgs, type ArtifactSaveReceipt, type AttachmentImportReceipt, type FileSelectionReceipt, type FileSelectArgs, type FileTransferActionsOptions, type FileTransferBinding, type FileTransferStore, type HumanFilePicker, type SelectedFileSnapshot, type SynchronizedArtifact, type SynchronizedArtifactResolver, } from "./file-transfers.js";
+export { SensitiveAuthorityError, assertSensitiveAuthority, requireConsentOnce, type PerOperationConsent, type SensitiveConsentPrompt, type SensitiveLocalActionKind, type SensitiveOperationContext, } from "./sensitive-consent.js";
+export { GitSigningActions, GitSigningError, type GitSignArgs, type GitSignResult, type GitSigningActionsOptions, type GitSigningKey, type GitSigningKeyRegistry, } from "./git-signing.js";
+export { LocalServiceActions, LocalServiceError, LocalServiceTransportError, createNodeLoopbackServiceTransport, type LocalServiceActionsOptions, type LocalServiceArgs, type LocalServiceBodyEncoding, type LocalServiceOperationRegistration, type LocalServiceRegistration, type LocalServiceResult, type LocalServiceSchemaRegistry, type LocalServiceTransport, type LocalServiceTransportRequest, type LocalServiceTransportResponse, } from "./local-service-actions.js";
+export { DeviceSelectionActions, DeviceSelectionError, type DeviceClass, type DeviceMetadataField, type DeviceSelectArgs, type DeviceSelectionActionsOptions, type DeviceSelectionResult, type HumanDeviceSelector, type HumanSelectedDevice, } from "./device-selection.js";
+export { LocalActionExecutor, LocalActionExecutorError, type LocalActionAdapter, type LocalActionAdapterContext, type LocalActionAdapterOutcome, type LocalActionAdapterRegistration, type LocalActionExecutionAuthority, type LocalActionExecutorOptions, } from "./executor.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/local-actions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/local-actions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,+BAA+B,EAC/B,wBAAwB,EACxB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,uBAAuB,EACvB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,KAAK,wBAAwB,GAC9B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,KAAK,6BAA6B,EAClC,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,GAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAClG,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,+BAA+B,EAC/B,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,iCAAiC,EACtC,KAAK,YAAY,EACjB,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,QAAQ,EACb,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,uBAAuB,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,KAAK,oCAAoC,EACzC,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,kCAAkC,EAClC,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,GACnC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,GAChC,MAAM,eAAe,CAAC"}

package/dist/local-actions/index.js

@@ -0,0 +1,19 @@
+export { LOCAL_ACTION_PROTOCOL_VERSION, MAX_LOCAL_ACTION_ARGUMENT_BYTES, MAX_LOCAL_ACTION_FUTURE_SKEW_MS, MAX_LOCAL_ACTION_HISTORY, MAX_LOCAL_ACTION_QUEUE, MAX_LOCAL_ACTION_REPLAY_ENTRIES, MAX_LOCAL_ACTION_TTL_MS, sameLocalActionIdentity, } from "./contracts.js";
+export { LocalActionBroker, LocalActionBrokerError, digestLocalActionArguments, validateRequest, } from "./broker.js";
+export { LocalActionPolicyEvaluator, } from "./policy.js";
+export { LOCAL_ACTION_PROVIDERS, providerAllowsLocalAction, } from "./providers.js";
+export { CUNA_AGENT_SESSION_MCP_COMMAND, CUNA_AGENT_SESSION_MCP_SERVER, ProviderMcpConfigurationError, buildClaudeMcpLaunchPlan, buildCodexMcpLaunchPlan, buildOpenCodeMcpLaunchPlan, buildProviderMcpLaunchPlan, describeOpenCodeMcpContract, } from "./provider-mcp-config.js";
+export { validateLocalActionArguments, validateLocalActionResult } from "./schemas.js";
+export { LOCAL_ACTION_POLICY_FILE, MAX_LOCAL_ACTION_POLICY_BYTES, loadLocalActionDevicePolicy, parseLocalActionDevicePolicy, } from "./policy-store.js";
+export { CallbackRelayError, startCallbackRelay, } from "./callback-relay.js";
+export { PrivatePortForwardError, startPrivatePortForward, } from "./private-port-forward.js";
+export { assertLoopbackHost, assertPort, isLoopbackPeer } from "./loopback.js";
+export { DesktopPresentationActions, DesktopPresentationError, createNodeEditorProcessLauncher, renderEditorCommand, } from "./desktop-presentation.js";
+export { ForegroundNotificationActions, ForegroundNotificationError, NOTIFICATION_BURST_CAPACITY, NOTIFICATION_DEDUP_WINDOW_MS, NOTIFICATION_REFILL_INTERVAL_MS, } from "./foreground-notifications.js";
+export { CUNA_TRANSFER_ROOT, CUNA_TRANSFER_STAGING_ROOT, MAX_TRANSFER_BYTES, MAX_TRANSFER_FILES, FileTransferActions, FileTransferError, NodePosixFileTransferStore, } from "./file-transfers.js";
+export { SensitiveAuthorityError, assertSensitiveAuthority, requireConsentOnce, } from "./sensitive-consent.js";
+export { GitSigningActions, GitSigningError, } from "./git-signing.js";
+export { LocalServiceActions, LocalServiceError, LocalServiceTransportError, createNodeLoopbackServiceTransport, } from "./local-service-actions.js";
+export { DeviceSelectionActions, DeviceSelectionError, } from "./device-selection.js";
+export { LocalActionExecutor, LocalActionExecutorError, } from "./executor.js";
+//# sourceMappingURL=index.js.map

package/dist/local-actions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/local-actions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,+BAA+B,EAC/B,wBAAwB,EACxB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,uBAAuB,GAWxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,GAEhB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,GAG3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAG1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,GAQ5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAOnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GAKxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,EAAqB,MAAM,eAAe,CAAC;AAClG,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,+BAA+B,EAC/B,mBAAmB,GAoBpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,GAOhC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,GAa3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,GAKnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,iBAAiB,EACjB,eAAe,GAMhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,kCAAkC,GAWnC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,GAQrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,GAOzB,MAAM,eAAe,CAAC"}

package/dist/local-actions/local-service-actions.d.ts

@@ -0,0 +1,87 @@
+import { type LoopbackHost } from "./loopback.js";
+import { type PerOperationConsent, type SensitiveOperationContext } from "./sensitive-consent.js";
+export type LocalServiceBodyEncoding = "canonical_json" | "base64url";
+export interface LocalServiceArgs {
+    readonly registrationId: string;
+    readonly operationId: string;
+    readonly bodyEncoding: LocalServiceBodyEncoding;
+    readonly body: unknown;
+    readonly decodedLength: number;
+    readonly bodySha256: `sha256:${string}`;
+}
+export interface LocalServiceResult {
+    readonly outcome: "ok" | "service_error" | "timeout";
+    readonly bodyEncoding: LocalServiceBodyEncoding;
+    readonly body: unknown;
+    readonly decodedLength: number;
+    readonly bodySha256: `sha256:${string}`;
+}
+export interface LocalServiceOperationRegistration {
+    readonly operationId: string;
+    readonly method: string;
+    readonly path: string;
+    readonly requestEncoding: LocalServiceBodyEncoding;
+    readonly responseEncoding: LocalServiceBodyEncoding;
+    readonly requestContentType: string;
+    readonly responseContentType: string;
+    readonly requestSchemaId: string;
+    readonly responseSchemaId: string;
+    readonly maximumRequestBytes: number;
+    readonly maximumResponseBytes: number;
+    readonly timeoutMs: number;
+    readonly idempotent: boolean;
+}
+export interface LocalServiceRegistration {
+    readonly registrationId: string;
+    readonly host: LoopbackHost;
+    readonly port: number;
+    readonly maximumConcurrent: number;
+    readonly operations: readonly LocalServiceOperationRegistration[];
+}
+export interface LocalServiceSchemaRegistry {
+    validate(schemaId: string, value: unknown): boolean;
+}
+export interface LocalServiceTransportRequest {
+    readonly host: LoopbackHost;
+    readonly port: number;
+    readonly method: string;
+    readonly path: string;
+    readonly contentType: string;
+    readonly body: Uint8Array;
+    readonly maximumResponseBytes: number;
+    readonly timeoutMs: number;
+    readonly signal: AbortSignal;
+}
+export interface LocalServiceTransportResponse {
+    readonly statusCode: number;
+    readonly contentType: string | null;
+    readonly body: Uint8Array;
+    readonly remoteAddress: string;
+    readonly redirected: boolean;
+}
+export interface LocalServiceTransport {
+    request(input: LocalServiceTransportRequest): Promise<LocalServiceTransportResponse>;
+}
+export interface LocalServiceActionsOptions {
+    readonly consent: PerOperationConsent;
+    readonly schemas: LocalServiceSchemaRegistry;
+    readonly transport: LocalServiceTransport;
+}
+export declare class LocalServiceActions {
+    #private;
+    constructor(options: LocalServiceActionsOptions);
+    register(registration: LocalServiceRegistration): void;
+    revoke(registrationId: string): void;
+    dispose(): void;
+    request(args: LocalServiceArgs, context: SensitiveOperationContext, signal?: AbortSignal): Promise<LocalServiceResult>;
+}
+export declare function createNodeLoopbackServiceTransport(): LocalServiceTransport;
+export declare class LocalServiceError extends Error {
+    readonly code: string;
+    constructor(code: string, options?: ErrorOptions);
+}
+export declare class LocalServiceTransportError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+//# sourceMappingURL=local-service-actions.d.ts.map

package/dist/local-actions/local-service-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-service-actions.d.ts","sourceRoot":"","sources":["../../src/local-actions/local-service-actions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkD,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAClG,OAAO,EAML,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAOhC,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,eAAe,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,wBAAwB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,SAAS,iCAAiC,EAAE,CAAC;CACnE;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;CACrD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;CACtF;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;CAC3C;AAQD,qBAAa,mBAAmB;;gBAIlB,OAAO,EAAE,0BAA0B;IAI/C,QAAQ,CAAC,YAAY,EAAE,wBAAwB,GAAG,IAAI;IAMtD,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAQpC,OAAO,IAAI,IAAI;IAIT,OAAO,CACX,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,yBAAyB,EAClC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,kBAAkB,CAAC;CAqD/B;AAED,wBAAgB,kCAAkC,IAAI,qBAAqB,CA8D1E;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAI1D;AAED,qBAAa,0BAA2B,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIlC"}