@decionis/agent-safe-pipeline 0.1.3 → 0.2.0

package/dist/decision/ShadowGate.js

@@ -0,0 +1,79 @@
+import { FailClosedDecision, } from "./DecisionAuthority.js";
+import { immutableGateDecision } from "./ImmutableGateDecision.js";
+/** Higher is more restrictive. The Decionis contract has no fourth verdict. */
+const RESTRICTIVENESS = Object.freeze({
+    ALLOW: 0,
+    ESCALATE: 1,
+    BLOCK: 2,
+});
+/**
+ * Runs a local authority and a hosted Decionis gate against the same intent.
+ *
+ * `SHADOW`: the local decision governs execution exactly as it would alone,
+ * and the hosted evaluation rides along as `hosted` for display and audit. A
+ * hosted failure is recorded and changes nothing, so setting a key cannot
+ * break an integration that works today.
+ *
+ * `ENFORCEMENT`: the hosted decision governs, because only its grant can be
+ * claimed by the enforcement verifier. The local authority can still tighten
+ * it: when the local verdict is strictly more restrictive, that decision is
+ * returned instead, and it carries no hosted grant.
+ *
+ * Neither mode returns a decision less restrictive than the local authority's.
+ */
+export class ShadowGate {
+    local;
+    hosted;
+    mode;
+    evaluationMode;
+    constructor(local, hosted, mode) {
+        this.local = local;
+        this.hosted = hosted;
+        this.mode = mode;
+        if (mode !== "SHADOW" && mode !== "ENFORCEMENT") {
+            throw new Error("DECIONIS_GATE_MODE_INVALID");
+        }
+        const declared = mode === "ENFORCEMENT" ? mode : local.evaluationMode;
+        if (declared !== undefined)
+            this.evaluationMode = declared;
+    }
+    async evaluate(captured, evidence, options = {}) {
+        const [local, hosted] = await Promise.all([
+            this.local.evaluate(captured, evidence, options),
+            this.hostedDecision(captured, evidence, options),
+        ]);
+        const governs = this.mode === "ENFORCEMENT" &&
+            RESTRICTIVENESS[hosted.verdict] >= RESTRICTIVENESS[local.verdict];
+        return immutableGateDecision({
+            ...(governs ? hosted : local),
+            hosted: {
+                mode: this.mode,
+                governs,
+                verdict: hosted.verdict,
+                decisionId: hosted.decisionId,
+                dossierId: hosted.dossierId,
+                reasonCodes: hosted.reasonCodes,
+                failClosed: hosted.failClosed,
+                verificationUrl: hosted.verificationUrl ?? null,
+            },
+        });
+    }
+    /**
+     * The hosted side never rejects and never answers about another intent:
+     * either would let a network fault or a misbound service reach execution.
+     */
+    async hostedDecision(captured, evidence, options) {
+        let decision;
+        try {
+            decision = await this.hosted.evaluate(captured, evidence, options);
+        }
+        catch {
+            return FailClosedDecision.create(captured.intentHash, "AUTHORITY_UNAVAILABLE");
+        }
+        if (decision.intentHash !== captured.intentHash) {
+            return FailClosedDecision.create(captured.intentHash, "AUTHORITY_BINDING_MISMATCH");
+        }
+        return decision;
+    }
+}
+//# sourceMappingURL=ShadowGate.js.map

package/dist/decision/ShadowGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShadowGate.js","sourceRoot":"","sources":["../../src/decision/ShadowGate.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,GAOnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,+EAA+E;AAC/E,MAAM,eAAe,GAA8C,MAAM,CAAC,MAAM,CAAC;IAC/E,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;CACT,CAAC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,UAAU;IAIF;IACA;IACA;IALH,cAAc,CAA0B;IAExD,YACmB,KAAwB,EACxB,MAAyB,EACzB,IAA4B;QAF5B,UAAK,GAAL,KAAK,CAAmB;QACxB,WAAM,GAAN,MAAM,CAAmB;QACzB,SAAI,GAAJ,IAAI,CAAwB;QAE7C,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;QACtE,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;IAC7D,CAAC;IAEM,KAAK,CAAC,QAAQ,CACnB,QAAwB,EACxB,QAA2B,EAC3B,UAAqC,EAAE;QAEvC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;YAChD,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;SACjD,CAAC,CAAC;QACH,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,KAAK,aAAa;YAC3B,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO,qBAAqB,CAAC;YAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YAC7B,MAAM,EAAE;gBACN,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO;gBACP,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;aAChD;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc,CAC1B,QAAwB,EACxB,QAAsC,EACtC,OAAkC;QAElC,IAAI,QAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAChD,OAAO,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/execution/ActionRegistry.d.ts

@@ -5,18 +5,84 @@ export interface ActionExecutionContext<TParameters> {
     readonly intent: CapturedIntent;
     readonly parameters: TParameters;
     readonly authorization: VerifiedAuthorization;
+    /**
+     * Trusted handlers must place the provider side effect inside `dispatch.run`.
+     * This records the point after which a transport error has an unknown outcome
+     * and exposes only the intent-bound idempotency key, never an execution token.
+     */
+    readonly dispatch: ProviderDispatch;
 }
+export interface ProviderDispatch {
+    readonly idempotencyKey: string;
+    run<TResult>(operation: (idempotencyKey: string) => Promise<TResult> | TResult): Promise<TResult>;
+}
+export interface ActionReconciliationContext<TParameters> {
+    readonly intent: CapturedIntent;
+    readonly parameters: TParameters;
+    readonly idempotencyKey: string;
+}
+export type ProviderReconciliation<TResult> = {
+    readonly status: "COMPLETED";
+    readonly result: TResult;
+} | {
+    readonly status: "NOT_EXECUTED";
+} | {
+    readonly status: "UNKNOWN";
+};
 export interface ActionHandler<TParameters, TResult> {
     readonly parametersSchema: z.ZodType<TParameters>;
     execute(context: ActionExecutionContext<TParameters>): Promise<TResult> | TResult;
+    /** Read-only provider lookup. It must never initiate or retry a side effect. */
+    reconcile?(context: ActionReconciliationContext<TParameters>): Promise<ProviderReconciliation<TResult>> | ProviderReconciliation<TResult>;
+}
+export type ActionExecutionAttempt = {
+    readonly status: "COMPLETED";
+    readonly result: unknown;
+} | {
+    readonly status: "FAILED_BEFORE_DISPATCH";
+} | {
+    readonly status: "REFUSED_AFTER_DISPATCH";
+    readonly reason: string;
+} | {
+    readonly status: "UNKNOWN_AFTER_DISPATCH";
+};
+/**
+ * What a handler throws when the provider refused, definitively, after the
+ * dispatch boundary was crossed.
+ *
+ * Without this, a handler has two ways to report a refusal and neither is
+ * true. Returning normally says the side effect happened. Throwing says the
+ * outcome is unknown, which invites a reconciliation of something that never
+ * needed one. This says the third thing: the request reached the provider,
+ * the provider said no, and nothing was effected.
+ *
+ * Only the provider's own deterministic refusal belongs here — a 4xx with a
+ * body that says which rule refused it. A timeout, a 5xx, a dropped
+ * connection or an unreadable answer is not a refusal, and throwing this for
+ * one of those would turn "nobody knows" into "definitely not", which is the
+ * one direction this boundary must never move in.
+ *
+ * Thrown before the dispatch, it is a handler failure like any other: a
+ * refusal cannot be claimed for a request that was never sent.
+ */
+export declare class ProviderRefusal extends Error {
+    /** The provider's own reason, as a code; never its response body. */
+    readonly reason: string;
+    constructor(
+    /** The provider's own reason, as a code; never its response body. */
+    reason: string);
 }
 export declare class ActionRegistry {
     private readonly actions;
+    private readonly pendingReconciliations;
     private sealed;
     register<TParameters, TResult>(action: string, handler: ActionHandler<TParameters, TResult>): this;
     seal(): this;
     has(action: string): boolean;
     validate(captured: CapturedIntent): void;
     execute(captured: CapturedIntent, authorization: VerifiedAuthorization): Promise<unknown>;
+    executeTracked(captured: CapturedIntent, authorization: VerifiedAuthorization): Promise<ActionExecutionAttempt>;
+    reconcile(captured: CapturedIntent, idempotencyKey: string): Promise<ProviderReconciliation<unknown>>;
+    private validReconciliation;
 }
 //# sourceMappingURL=ActionRegistry.d.ts.map

package/dist/execution/ActionRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ActionRegistry.d.ts","sourceRoot":"","sources":["../../src/execution/ActionRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAExE,MAAM,WAAW,sBAAsB,CAAC,WAAW;IACjD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;CAC/C;AAED,MAAM,WAAW,aAAa,CAAC,WAAW,EAAE,OAAO;IACjD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,CAAC,OAAO,EAAE,sBAAsB,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACnF;AAOD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,MAAM,CAAS;IAEhB,QAAQ,CAAC,WAAW,EAAE,OAAO,EAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,GAC3C,IAAI;IAOA,IAAI,IAAI,IAAI;IAKZ,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAI5B,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI;IASlC,OAAO,CAClB,QAAQ,EAAE,cAAc,EACxB,aAAa,EAAE,qBAAqB,GACnC,OAAO,CAAC,OAAO,CAAC;CAQpB"}
+{"version":3,"file":"ActionRegistry.d.ts","sourceRoot":"","sources":["../../src/execution/ActionRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAExE,MAAM,WAAW,sBAAsB,CAAC,WAAW;IACjD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnG;AAED,MAAM,WAAW,2BAA2B,CAAC,WAAW;IACtD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,sBAAsB,CAAC,OAAO,IACtC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,aAAa,CAAC,WAAW,EAAE,OAAO;IACjD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,CAAC,OAAO,EAAE,sBAAsB,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAClF,gFAAgF;IAChF,SAAS,CAAC,CACR,OAAO,EAAE,2BAA2B,CAAC,WAAW,CAAC,GAChD,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;CAC/E;AAUD,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,GAC7C;IAAE,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAElD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IAEtC,qEAAqE;aACrD,MAAM,EAAE,MAAM;;IAD9B,qEAAqE;IACrD,MAAM,EAAE,MAAM;CAKjC;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAGnC;IACJ,OAAO,CAAC,MAAM,CAAS;IAEhB,QAAQ,CAAC,WAAW,EAAE,OAAO,EAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,GAC3C,IAAI;IAOA,IAAI,IAAI,IAAI;IAKZ,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAI5B,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI;IASlC,OAAO,CAClB,QAAQ,EAAE,cAAc,EACxB,aAAa,EAAE,qBAAqB,GACnC,OAAO,CAAC,OAAO,CAAC;IAMN,cAAc,CACzB,QAAQ,EAAE,cAAc,EACxB,aAAa,EAAE,qBAAqB,GACnC,OAAO,CAAC,sBAAsB,CAAC;IAuCrB,SAAS,CACpB,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IA+B3C,OAAO,CAAC,mBAAmB;CAiB5B"}

package/dist/execution/ActionRegistry.js

@@ -1,5 +1,35 @@
+/**
+ * What a handler throws when the provider refused, definitively, after the
+ * dispatch boundary was crossed.
+ *
+ * Without this, a handler has two ways to report a refusal and neither is
+ * true. Returning normally says the side effect happened. Throwing says the
+ * outcome is unknown, which invites a reconciliation of something that never
+ * needed one. This says the third thing: the request reached the provider,
+ * the provider said no, and nothing was effected.
+ *
+ * Only the provider's own deterministic refusal belongs here — a 4xx with a
+ * body that says which rule refused it. A timeout, a 5xx, a dropped
+ * connection or an unreadable answer is not a refusal, and throwing this for
+ * one of those would turn "nobody knows" into "definitely not", which is the
+ * one direction this boundary must never move in.
+ *
+ * Thrown before the dispatch, it is a handler failure like any other: a
+ * refusal cannot be claimed for a request that was never sent.
+ */
+export class ProviderRefusal extends Error {
+    reason;
+    constructor(
+    /** The provider's own reason, as a code; never its response body. */
+    reason) {
+        super(reason);
+        this.reason = reason;
+        this.name = "ProviderRefusal";
+    }
+}
 export class ActionRegistry {
     actions = new Map();
+    pendingReconciliations = new Map();
     sealed = false;
     register(action, handler) {
         if (this.sealed)
@@ -27,6 +57,12 @@ export class ActionRegistry {
         }
     }
     async execute(captured, authorization) {
+        const attempt = await this.executeTracked(captured, authorization);
+        if (attempt.status === "COMPLETED")
+            return attempt.result;
+        throw new Error(attempt.status);
+    }
+    async executeTracked(captured, authorization) {
         if (!this.sealed)
             throw new Error("ACTION_REGISTRY_NOT_SEALED");
         const handler = this.actions.get(captured.intent.action);
@@ -35,7 +71,80 @@ export class ActionRegistry {
         const result = handler.parametersSchema.safeParse(captured.intent.parameters);
         if (!result.success)
             throw new Error("ACTION_PARAMETERS_INVALID");
-        return handler.execute({ intent: captured, parameters: result.data, authorization });
+        let dispatched = false;
+        const dispatch = Object.freeze({
+            idempotencyKey: captured.intent.idempotencyKey,
+            run: async (operation) => {
+                if (dispatched)
+                    throw new Error("PROVIDER_DISPATCH_ALREADY_STARTED");
+                dispatched = true;
+                return await operation(captured.intent.idempotencyKey);
+            },
+        });
+        try {
+            return {
+                status: "COMPLETED",
+                result: await handler.execute({
+                    intent: captured,
+                    parameters: result.data,
+                    authorization,
+                    dispatch,
+                }),
+            };
+        }
+        catch (error) {
+            // A refusal the provider made is only a refusal if the request reached
+            // it. Before the dispatch it is a handler failure, because nothing was
+            // sent for anyone to refuse.
+            if (dispatched && error instanceof ProviderRefusal) {
+                return { status: "REFUSED_AFTER_DISPATCH", reason: error.reason };
+            }
+            return { status: dispatched ? "UNKNOWN_AFTER_DISPATCH" : "FAILED_BEFORE_DISPATCH" };
+        }
+    }
+    async reconcile(captured, idempotencyKey) {
+        if (!this.sealed)
+            throw new Error("ACTION_REGISTRY_NOT_SEALED");
+        if (idempotencyKey !== captured.intent.idempotencyKey) {
+            throw new Error("RECONCILIATION_BINDING_MISMATCH");
+        }
+        const handler = this.actions.get(captured.intent.action);
+        if (!handler)
+            throw new Error("ACTION_NOT_REGISTERED");
+        const parameters = handler.parametersSchema.safeParse(captured.intent.parameters);
+        if (!parameters.success)
+            throw new Error("ACTION_PARAMETERS_INVALID");
+        if (handler.reconcile === undefined)
+            return { status: "UNKNOWN" };
+        const key = `${captured.intentHash}\u0000${idempotencyKey}`;
+        const pending = this.pendingReconciliations.get(key);
+        if (pending !== undefined)
+            return await pending;
+        const reconciliation = Promise.resolve()
+            .then(async () => this.validReconciliation(await handler.reconcile?.({
+            intent: captured,
+            parameters: parameters.data,
+            idempotencyKey,
+        })))
+            .catch(() => ({ status: "UNKNOWN" }))
+            .finally(() => this.pendingReconciliations.delete(key));
+        this.pendingReconciliations.set(key, reconciliation);
+        return await reconciliation;
+    }
+    validReconciliation(value) {
+        if (typeof value !== "object" || value === null || Array.isArray(value)) {
+            return { status: "UNKNOWN" };
+        }
+        const record = value;
+        const keys = Object.keys(record);
+        if (record["status"] === "COMPLETED" && keys.length === 2 && "result" in record) {
+            return { status: "COMPLETED", result: record["result"] };
+        }
+        if ((record["status"] === "NOT_EXECUTED" || record["status"] === "UNKNOWN") &&
+            keys.length === 1) {
+            return { status: record["status"] };
+        }
+        return { status: "UNKNOWN" };
     }
 }
 //# sourceMappingURL=ActionRegistry.js.map

package/dist/execution/ActionRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"ActionRegistry.js","sourceRoot":"","sources":["../../src/execution/ActionRegistry.ts"],"names":[],"mappings":"AAoBA,MAAM,OAAO,cAAc;IACR,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACvD,MAAM,GAAG,KAAK,CAAC;IAEhB,QAAQ,CACb,MAAc,EACd,OAA4C;QAE5C,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAA2B,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,IAAI;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,GAAG,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAEM,QAAQ,CAAC,QAAwB;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,QAAwB,EACxB,aAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACvF,CAAC;CACF"}
+{"version":3,"file":"ActionRegistry.js","sourceRoot":"","sources":["../../src/execution/ActionRegistry.ts"],"names":[],"mappings":"AAuDA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGtB;IAFlB;IACE,qEAAqE;IACrD,MAAc;QAE9B,KAAK,CAAC,MAAM,CAAC,CAAC;QAFE,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IACR,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9C,sBAAsB,GAAG,IAAI,GAAG,EAG9C,CAAC;IACI,MAAM,GAAG,KAAK,CAAC;IAEhB,QAAQ,CACb,MAAc,EACd,OAA4C;QAE5C,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAA2B,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,IAAI;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,GAAG,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAEM,QAAQ,CAAC,QAAwB;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,QAAwB,EACxB,aAAoC;QAEpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,QAAwB,EACxB,aAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAClE,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,QAAQ,GAAqB,MAAM,CAAC,MAAM,CAAC;YAC/C,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc;YAC9C,GAAG,EAAE,KAAK,EACR,SAAiE,EAC/C,EAAE;gBACpB,IAAI,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACrE,UAAU,GAAG,IAAI,CAAC;gBAClB,OAAO,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACzD,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC;oBAC5B,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,aAAa;oBACb,QAAQ;iBACT,CAAC;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,uEAAuE;YACvE,6BAA6B;YAC7B,IAAI,UAAU,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACnD,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YACpE,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC;QACtF,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,QAAwB,EACxB,cAAsB;QAEtB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChE,IAAI,cAAc,KAAK,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClF,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAElE,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,UAAU,SAAS,cAAc,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,MAAM,OAAO,CAAC;QAEhD,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,EAAE;aACrC,IAAI,CAAC,KAAK,IAAI,EAAE,CACf,IAAI,CAAC,mBAAmB,CACtB,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,UAAU,CAAC,IAAI;YAC3B,cAAc;SACf,CAAC,CACH,CACF;aACA,KAAK,CAAC,GAAoC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;aACrE,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACrD,OAAO,MAAM,cAAc,CAAC;IAC9B,CAAC;IAEO,mBAAmB,CAAC,KAAc;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAChF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,CAAC;QACD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,cAAc,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;YACvE,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;CACF"}

package/dist/execution/AuthorizationVerifier.d.ts

@@ -1,4 +1,6 @@
+import { type Credential } from "../http/Credential.js";
 import type { CapturedIntent } from "../intent/ExecutionIntent.js";
+import type { JsonObject } from "../intent/JsonValue.js";
 import type { GateDecision } from "../decision/DecisionAuthority.js";
 export interface VerifiedAuthorization {
     readonly decisionId: string;
@@ -6,23 +8,169 @@ export interface VerifiedAuthorization {
     readonly grantId: string;
     readonly intentHash: string;
     readonly expiresAt: string;
+    /**
+     * When the authority stops accepting a commit for this claim, if it said.
+     * A lease is shorter than the grant's own expiry and is the real window a
+     * side effect has to finish inside: a commit the authority will no longer
+     * record leaves an outcome nobody can reconcile from the record, however
+     * successful the dispatch was.
+     *
+     * Absent when the authority did not return one, which is how a deployment
+     * whose issuer predates the field behaves. A consumer that ignores this
+     * field is exactly as correct as it was before the field existed.
+     */
+    readonly leaseExpiresAt?: string;
+    /**
+     * The digest the authority bound over the canonical action parameters, when
+     * it exposed one. It has already been checked against this package's own
+     * digest of the same parameters before this object exists: a claim whose
+     * digest disagreed was refused, not returned. It is carried so a handler
+     * can show a downstream what the authority bound, not so anyone re-checks it.
+     */
+    readonly payloadDigest?: string;
+    /**
+     * Proof of this claim a system of record can verify without trusting this
+     * process: a compact JWS the authority signed over the grant, the decision,
+     * the binding and the lease. A handler forwards it downstream, and a
+     * downstream that requires it can refuse an instruction the authority never
+     * claimed. Absent when the authority predates it.
+     */
+    readonly claimAttestation?: string;
+}
+/** Outcome of the downstream attempt reported to the authority after a claimed grant. */
+export type ExecutionCommitOutcome = "COMMITTED" | "FAILED" | "INDETERMINATE";
+/**
+ * `RECORDED`: the authority accepted the commit evidence. `PENDING`: it could
+ * not be delivered and the authority's lease recovery owns it. `UNSUPPORTED`:
+ * the verifier has no finalization contract.
+ */
+export type ExecutionFinalization = "RECORDED" | "PENDING" | "UNSUPPORTED";
+/**
+ * Exact wire shape of the Decionis Protocol 1.1 `EffectEvidence` contract: an
+ * observation of what happened downstream, supplied by the trusted runtime that
+ * observed it. This package never constructs, interprets, upgrades, or
+ * downgrades an observation; it forwards a bounded, validated copy of the one
+ * it was handed, and drops anything outside the contract's own shape rather
+ * than serialising a caller-controlled object onto an authenticated request.
+ */
+export interface AuthorityEffectEvidence {
+    readonly version: "1.0";
+    readonly status: "CONFIRMED" | "UNCONFIRMED";
+    readonly observation_method: "DOWNSTREAM_ACK" | "READ_AFTER_WRITE" | "EVENT_CONFIRMATION" | "STATE_RECONCILIATION" | "SIGNED_RECEIPT" | "EXTERNAL_ATTESTATION" | "HUMAN_VALIDATION";
+    readonly observer: {
+        readonly id: string;
+        readonly version: string | null;
+    } | null;
+    readonly expected_effect_digest: string;
+    readonly observed_effect_digest: string | null;
+    readonly observed_at: string | null;
+    readonly evidence_digest: string | null;
+    readonly evidence_reference: string | null;
+    readonly execution_correlation_id: string;
+}
+/**
+ * What the authority itself said about an observation it was sent, narrowed by
+ * what this executor knows it sent. `effectEvidenceRecorded` and
+ * `effectConfirmation` are the authority's statement, but they are only ever
+ * reported for a finalization that actually carried the observation: an
+ * authority claiming to have recorded evidence it was not sent is not evidence.
+ */
+export interface AuthorityEffectReport {
+    /** The finalization that was recorded carried the observation. */
+    readonly effectEvidenceSent: boolean;
+    /**
+     * An earlier finalization attempt carried the observation and the authority
+     * refused it, so this commit record was recovered without it. Distinguishes a
+     * refused observation from one that was dropped or never supplied.
+     */
+    readonly effectEvidenceRefused: boolean;
+    readonly effectEvidenceRecorded: boolean;
+    readonly effectConfirmation: "CONFIRMED" | "UNCONFIRMED";
+}
+export interface AuthorizationFinalizationInput {
+    readonly captured: CapturedIntent;
+    readonly decision: GateDecision;
+    readonly authorization: VerifiedAuthorization;
+    readonly outcome: ExecutionCommitOutcome;
+    /**
+     * Optional observation of the downstream effect, forwarded verbatim. It is
+     * sent only when the signed grant committed to an expected-effect digest, the
+     * evidence names that same digest, and its `execution_correlation_id` equals
+     * the commit correlation id this grant was claimed with. Otherwise it is
+     * dropped, because the authority refuses the entire finalization for evidence
+     * it cannot bind and the commit outcome would be lost with it. It is also
+     * dropped when it does not conform to the contract's own bounded shape.
+     */
+    readonly effectEvidence?: AuthorityEffectEvidence;
 }
 export interface AuthorizationVerifier {
     verifyAndConsume(captured: CapturedIntent, decision: GateDecision): Promise<VerifiedAuthorization | null>;
+    /**
+     * Reports the downstream attempt outcome for an authorization returned by
+     * this verifier's `verifyAndConsume`. Finalization is evidence, never
+     * authority: it must not retry a side effect, and it must not throw.
+     */
+    finalize?(input: AuthorizationFinalizationInput): Promise<"RECORDED" | "PENDING">;
 }
 export interface DecionisGrantVerifierOptions {
     readonly baseUrl: string;
-    readonly apiKey: string;
+    /** The Decionis credential, as a value or as a function read at each request. */
+    readonly apiKey: Credential;
     readonly timeoutMs?: number;
     readonly fetch?: typeof fetch;
     readonly allowInsecureLoopback?: boolean;
 }
+/**
+ * Claims a Decionis execution grant through `/v1/execution/claim-token`
+ * immediately before dispatch and finalizes the attempt through
+ * `/v1/execution/finalize-token` afterwards, so commit evidence joins the
+ * Decision Dossier chain.
+ */
 export declare class DecionisGrantVerifier implements AuthorizationVerifier {
     private readonly baseUrl;
     private readonly apiKey;
     private readonly timeoutMs;
     private readonly fetchImpl;
+    /** Claim material is keyed by the frozen authorization it belongs to and never exposed. */
+    private readonly claims;
+    /** The authority's own answer about an observation, keyed by the frozen authorization. */
+    private readonly reports;
+    /**
+     * The digest the authority binds over the action parameters: SHA-256 of
+     * their RFC 8785 canonical form, the same canonicalization the intent hash
+     * uses. Exposed so a test, or an authority implementation, can produce the
+     * value this verifier will accept.
+     */
+    static parametersDigest(parameters: JsonObject): `sha256:${string}`;
     constructor(options: DecionisGrantVerifierOptions);
     verifyAndConsume(captured: CapturedIntent, decision: GateDecision): Promise<VerifiedAuthorization | null>;
+    finalize(input: AuthorizationFinalizationInput): Promise<"RECORDED" | "PENDING">;
+    /**
+     * What the authority reported about effect evidence for an authorization this
+     * verifier finalized. `null` until a finalization was recorded. This is the
+     * authority's statement, never this package's inference.
+     */
+    effectReport(authorization: VerifiedAuthorization): AuthorityEffectReport | null;
+    /**
+     * `REFUSED` only for the one status a finalization refusal uses (409); every
+     * other non-ok status, a throw, a timeout, or an oversize body is `PENDING`,
+     * exactly as it was before effect evidence existed. A rate-limited or
+     * unauthenticated authority must never be re-posted to.
+     */
+    private post;
+    /**
+     * Effect evidence reaches the authority only when this executor can prove the
+     * authority will bind it: it must conform to the contract's bounded shape,
+     * the grant the authority returned must have committed to an expected-effect
+     * digest, the evidence must name that exact digest, and it must carry the
+     * correlation id this claim was made with. Unbindable evidence is dropped
+     * rather than sent, because the authority answers it with a 409 that aborts
+     * the whole finalization rather than discarding the observation.
+     *
+     * The checks run against the parsed copy, which is also the copy that is
+     * serialised, so a caller object with accessors cannot present one value to
+     * the drop rule and another to the wire.
+     */
+    private static bindableEffectEvidence;
 }
 //# sourceMappingURL=AuthorizationVerifier.d.ts.map

package/dist/execution/AuthorizationVerifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthorizationVerifier.d.ts","sourceRoot":"","sources":["../../src/execution/AuthorizationVerifier.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CACd,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;CAC1C;AAmBD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,qBAAa,qBAAsB,YAAW,qBAAqB;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAEtB,OAAO,EAAE,4BAA4B;IAU3C,gBAAgB,CAC3B,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;CA0DzC"}
+{"version":3,"file":"AuthorizationVerifier.d.ts","sourceRoot":"","sources":["../../src/execution/AuthorizationVerifier.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAG1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,wBAAwB,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,yFAAyF;AACzF,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,QAAQ,GAAG,eAAe,CAAC;AAE9E;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,aAAa,CAAC;IAC7C,QAAQ,CAAC,kBAAkB,EACvB,gBAAgB,GAChB,kBAAkB,GAClB,oBAAoB,GACpB,sBAAsB,GACtB,gBAAgB,GAChB,sBAAsB,GACtB,kBAAkB,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACnF,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,kEAAkE;IAClE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,WAAW,GAAG,aAAa,CAAC;CAC1D;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,CAAC;CACnD;AAED,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CACd,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;CACnF;AA+HD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED;;;;;GAKG;AACH,qBAAa,qBAAsB,YAAW,qBAAqB;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,2FAA2F;IAC3F,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqD;IAC5E,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+D;IAEvF;;;;;OAKG;WACW,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,MAAM,EAAE;gBAKvD,OAAO,EAAE,4BAA4B;IAU3C,gBAAgB,CAC3B,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAsG3B,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAiB7F;;;;OAIG;IACI,YAAY,CAAC,aAAa,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,IAAI;IAIvF;;;;;OAKG;YACW,IAAI;IAiDlB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;CActC"}