@decionis/agent-safe-pipeline 0.1.3 → 0.2.0

package/dist/execution/SafeExecutor.js

@@ -2,23 +2,44 @@ import { CanonicalIntentHasher } from "../intent/CanonicalIntentHasher.js";
 export class SafeExecutor {
     registry;
     verifier;
+    audit;
     hasher = new CanonicalIntentHasher();
-    constructor(registry, verifier) {
+    constructor(registry, verifier, audit) {
         this.registry = registry;
         this.verifier = verifier;
+        this.audit = audit;
     }
     async run(captured, decision) {
+        const startedAt = Date.now();
+        // Stryker disable next-line all: Audit payload mapping is covered by lifecycle event assertions.
+        const intentRecorded = await this.record({ eventType: "INTENT_CAPTURED", captured });
+        // An observational artifact (shadow observation, serialized audit event) is
+        // rejected before it is recorded or inspected as if it were a decision.
+        if (!SafeExecutor.isAuthoritativeDecision(decision)) {
+            return await this.block(captured, undefined, "DECISION_NOT_AUTHORITATIVE", startedAt);
+        }
+        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+        const decisionRecorded = await this.record({
+            eventType: decision.failClosed ? "AUTHORITY_FAILED_CLOSED" : "AUTHORITY_DECISION",
+            captured,
+            decision,
+        });
+        // Stryker restore all
+        if (this.audit?.requiresDeliveryBeforeExecution === true &&
+            (!intentRecorded || !decisionRecorded)) {
+            return await this.block(captured, decision, "AUDIT_UNAVAILABLE", startedAt);
+        }
         if (decision.verdict !== "ALLOW" || decision.failClosed) {
-            return SafeExecutor.blocked("DECISION_NOT_ALLOW");
+            return await this.block(captured, decision, "DECISION_NOT_ALLOW", startedAt);
         }
         if (decision.intentHash !== captured.intentHash) {
-            return SafeExecutor.blocked("INTENT_BINDING_MISMATCH");
+            return await this.block(captured, decision, "INTENT_BINDING_MISMATCH", startedAt);
         }
-        if (decision.authorization === null) {
-            return SafeExecutor.blocked("AUTHORIZATION_MISSING");
+        if (decision.authorization === null || typeof decision.authorization !== "object") {
+            return await this.block(captured, decision, "AUTHORIZATION_MISSING", startedAt);
         }
         if (!this.intentConforms(captured)) {
-            return SafeExecutor.blocked("INTENT_CONFORMANCE_FAILED");
+            return await this.block(captured, decision, "INTENT_CONFORMANCE_FAILED", startedAt);
         }
         this.registry.validate(captured);
         let authorization;
@@ -26,10 +47,11 @@ export class SafeExecutor {
             authorization = await this.verifier.verifyAndConsume(captured, decision);
         }
         catch {
-            return SafeExecutor.blocked("AUTHORIZATION_INVALID");
+            return await this.block(captured, decision, "AUTHORIZATION_INVALID", startedAt);
+        }
+        if (authorization === null) {
+            return await this.block(captured, decision, "AUTHORIZATION_INVALID", startedAt);
         }
-        if (authorization === null)
-            return SafeExecutor.blocked("AUTHORIZATION_INVALID");
         const authorizationExpiry = Date.parse(authorization.expiresAt);
         if (authorization.decisionId !== decision.decisionId ||
             authorization.dossierId !== decision.dossierId ||
@@ -39,19 +61,208 @@ export class SafeExecutor {
                 Math.floor(Date.parse(decision.authorization.expiresAt) / 1_000) ||
             authorizationExpiry <= Date.now() ||
             authorizationExpiry > Date.parse(captured.intent.expiresAt)) {
-            return SafeExecutor.blocked("AUTHORIZATION_INVALID");
+            return await this.block(captured, decision, "AUTHORIZATION_INVALID", startedAt);
         }
         if (!this.intentConforms(captured)) {
-            return SafeExecutor.blocked("INTENT_CONFORMANCE_FAILED");
+            return await this.block(captured, decision, "INTENT_CONFORMANCE_FAILED", startedAt);
+        }
+        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+        const grantRecorded = await this.record({
+            eventType: "GRANT_CONSUMED",
+            captured,
+            decision,
+            authorization,
+            durationMs: Date.now() - startedAt,
+        });
+        // Stryker restore all
+        if (this.audit?.requiresDeliveryBeforeExecution === true && !grantRecorded) {
+            return await this.failedBeforeDispatch(captured, decision, authorization, "AUDIT_UNAVAILABLE", startedAt);
+        }
+        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+        const executionRecorded = await this.record({
+            eventType: "EXECUTION_STARTED",
+            captured,
+            decision,
+            authorization,
+            durationMs: Date.now() - startedAt,
+        });
+        // Stryker restore all
+        if (this.audit?.requiresDeliveryBeforeExecution === true && !executionRecorded) {
+            return await this.failedBeforeDispatch(captured, decision, authorization, "AUDIT_UNAVAILABLE", startedAt);
         }
-        let result;
+        const attempt = await this.registry.executeTracked(captured, authorization);
+        if (attempt.status === "FAILED_BEFORE_DISPATCH") {
+            return await this.failedBeforeDispatch(captured, decision, authorization, "HANDLER_FAILED_BEFORE_DISPATCH", startedAt);
+        }
+        if (attempt.status === "REFUSED_AFTER_DISPATCH") {
+            // The provider said no. That is an outcome, so it is finalized `FAILED`
+            // rather than left indeterminate, and `executed` is false rather than
+            // null: nothing about it is unknown.
+            const finalization = await this.finalize(captured, decision, authorization, "FAILED");
+            const result = {
+                outcome: "DEFINITELY_NOT_EXECUTED",
+                executed: false,
+                recovered: false,
+                reason: attempt.reason,
+                result: null,
+                authorization,
+                finalization,
+            };
+            // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+            await this.record({
+                eventType: "EXECUTION_REFUSED_AFTER_DISPATCH",
+                captured,
+                decision,
+                authorization,
+                reasonCodes: [attempt.reason, SafeExecutor.finalizationCode(finalization)],
+                durationMs: Date.now() - startedAt,
+            });
+            // Stryker restore all
+            return result;
+        }
+        if (attempt.status === "UNKNOWN_AFTER_DISPATCH") {
+            const finalization = await this.finalize(captured, decision, authorization, "INDETERMINATE");
+            const result = {
+                outcome: "UNKNOWN_AFTER_DISPATCH",
+                executed: null,
+                reason: "PROVIDER_OUTCOME_UNKNOWN",
+                result: null,
+                authorization,
+                recovery: SafeExecutor.recoveryReference(captured, authorization),
+                finalization,
+            };
+            // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+            await this.record({
+                eventType: "EXECUTION_OUTCOME_UNKNOWN",
+                captured,
+                decision,
+                authorization,
+                reasonCodes: [result.reason, SafeExecutor.finalizationCode(finalization)],
+                durationMs: Date.now() - startedAt,
+            });
+            // Stryker restore all
+            return result;
+        }
+        const finalization = await this.finalize(captured, decision, authorization, "COMMITTED");
+        const result = {
+            outcome: "COMPLETED",
+            executed: true,
+            recovered: false,
+            result: attempt.result,
+            authorization,
+            finalization,
+        };
+        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+        await this.record({
+            eventType: "EXECUTION_COMPLETED",
+            captured,
+            decision,
+            authorization,
+            reasonCodes: [SafeExecutor.finalizationCode(finalization)],
+            durationMs: Date.now() - startedAt,
+        });
+        // Stryker restore all
+        return result;
+    }
+    /**
+     * Reports the attempt outcome to the verifier's authority. A missing,
+     * failing, or malformed finalization can never alter the execution result.
+     */
+    async finalize(captured, decision, authorization, outcome) {
+        const finalize = this.verifier.finalize;
+        if (finalize === undefined)
+            return "UNSUPPORTED";
         try {
-            result = (await this.registry.execute(captured, authorization));
+            const status = await finalize.call(this.verifier, {
+                captured,
+                decision,
+                authorization,
+                outcome,
+            });
+            return status === "RECORDED" ? "RECORDED" : "PENDING";
         }
         catch {
-            throw new Error("ACTION_EXECUTION_FAILED");
+            return "PENDING";
         }
-        return { executed: true, result, authorization };
+    }
+    static finalizationCode(finalization) {
+        return `COMMIT_FINALIZATION_${finalization}`;
+    }
+    async reconcile(captured, recovery) {
+        const startedAt = Date.now();
+        if (recovery.version !== "agent-safe.recovery/1" ||
+            recovery.intentHash !== captured.intentHash ||
+            recovery.idempotencyKey !== captured.intent.idempotencyKey ||
+            !this.intentConforms(captured)) {
+            return await this.block(captured, undefined, "RECOVERY_BINDING_MISMATCH", startedAt);
+        }
+        const reconciliation = await this.registry.reconcile(captured, recovery.idempotencyKey);
+        const authorization = SafeExecutor.authorizationFrom(recovery);
+        if (reconciliation.status === "COMPLETED") {
+            const result = {
+                outcome: "COMPLETED",
+                executed: true,
+                recovered: true,
+                result: reconciliation.result,
+                authorization,
+            };
+            // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+            await this.record({
+                eventType: "RECONCILIATION_COMPLETED",
+                captured,
+                authorization,
+                durationMs: Date.now() - startedAt,
+            });
+            // Stryker restore all
+            return result;
+        }
+        if (reconciliation.status === "NOT_EXECUTED") {
+            const result = {
+                outcome: "DEFINITELY_NOT_EXECUTED",
+                executed: false,
+                recovered: true,
+                reason: "PROVIDER_CONFIRMED_NOT_EXECUTED",
+                result: null,
+                authorization,
+            };
+            // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+            await this.record({
+                eventType: "RECONCILIATION_NOT_EXECUTED",
+                captured,
+                authorization,
+                reasonCodes: [result.reason],
+                durationMs: Date.now() - startedAt,
+            });
+            // Stryker restore all
+            return result;
+        }
+        const result = {
+            outcome: "UNKNOWN_AFTER_DISPATCH",
+            executed: null,
+            reason: "PROVIDER_OUTCOME_UNKNOWN",
+            result: null,
+            authorization,
+            recovery,
+        };
+        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+        await this.record({
+            eventType: "RECONCILIATION_UNKNOWN",
+            captured,
+            authorization,
+            reasonCodes: [result.reason],
+            durationMs: Date.now() - startedAt,
+        });
+        // Stryker restore all
+        return result;
+    }
+    /**
+     * Observational artifacts carry an explicit non-authoritative marker. They
+     * must never be interpreted as a `GateDecision`, even after an unsafe cast
+     * or a JSON round trip.
+     */
+    static isAuthoritativeDecision(decision) {
+        const candidate = decision;
+        return candidate.authority !== "OBSERVATIONAL" && candidate.mode !== "SHADOW";
     }
     intentConforms(captured) {
         let recomputed = null;
@@ -66,8 +277,68 @@ export class SafeExecutor {
             recomputed.canonicalIntent === captured.canonicalIntent &&
             recomputed.byteLength === captured.byteLength);
     }
-    static blocked(reason) {
-        return { executed: false, reason, result: null, authorization: null };
+    async block(captured, decision, reason, startedAt) {
+        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+        await this.record({
+            eventType: "EXECUTION_BLOCKED",
+            captured,
+            ...(decision === undefined ? {} : { decision }),
+            reasonCodes: [reason],
+            durationMs: Date.now() - startedAt,
+        });
+        // Stryker restore all
+        return { outcome: "BLOCKED", executed: false, reason, result: null, authorization: null };
+    }
+    async failedBeforeDispatch(captured, decision, authorization, reason, startedAt) {
+        // The grant was consumed but no side effect was attempted.
+        const finalization = await this.finalize(captured, decision, authorization, "FAILED");
+        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
+        await this.record({
+            eventType: "EXECUTION_FAILED_BEFORE_DISPATCH",
+            captured,
+            decision,
+            authorization,
+            reasonCodes: [reason, SafeExecutor.finalizationCode(finalization)],
+            durationMs: Date.now() - startedAt,
+        });
+        // Stryker restore all
+        return {
+            outcome: "FAILED_BEFORE_DISPATCH",
+            executed: false,
+            reason,
+            result: null,
+            authorization,
+            finalization,
+        };
+    }
+    async record(input) {
+        // Stryker disable next-line BooleanLiteral: The value is irrelevant when no audit policy exists.
+        return this.audit === undefined ? true : await this.audit.record(input);
+    }
+    static recoveryReference(captured, authorization) {
+        // Named field by field rather than spread: `agent-safe.recovery/1` is a
+        // wire object a caller presents back, so a field added to the
+        // authorization must not appear here by accident. The claim lease in
+        // particular has no business being here — it is the window this attempt
+        // had, and it has certainly closed by the time anyone reconciles.
+        return Object.freeze({
+            version: "agent-safe.recovery/1",
+            decisionId: authorization.decisionId,
+            dossierId: authorization.dossierId,
+            grantId: authorization.grantId,
+            intentHash: authorization.intentHash,
+            expiresAt: authorization.expiresAt,
+            idempotencyKey: captured.intent.idempotencyKey,
+        });
+    }
+    static authorizationFrom(recovery) {
+        return Object.freeze({
+            decisionId: recovery.decisionId,
+            dossierId: recovery.dossierId,
+            grantId: recovery.grantId,
+            intentHash: recovery.intentHash,
+            expiresAt: recovery.expiresAt,
+        });
     }
 }
 //# sourceMappingURL=SafeExecutor.js.map

package/dist/execution/SafeExecutor.js.map

@@ -1 +1 @@
-{"version":3,"file":"SafeExecutor.js","sourceRoot":"","sources":["../../src/execution/SafeExecutor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAyB3E,MAAM,OAAO,YAAY;IAIJ;IACA;IAJF,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAEtD,YACmB,QAAwB,EACxB,QAA+B;QAD/B,aAAQ,GAAR,QAAQ,CAAgB;QACxB,aAAQ,GAAR,QAAQ,CAAuB;IAC/C,CAAC;IAEG,KAAK,CAAC,GAAG,CACd,QAAwB,EACxB,QAAsB;QAEtB,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxD,OAAO,YAAY,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAChD,OAAO,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,YAAY,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,aAA2C,CAAC;QAChD,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,aAAa,KAAK,IAAI;YAAE,OAAO,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACjF,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAChE,IACE,aAAa,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAChD,aAAa,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YAC9C,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAClC,aAAa,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAChD,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;YAClE,mBAAmB,IAAI,IAAI,CAAC,GAAG,EAAE;YACjC,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAC3D,CAAC;YACD,OAAO,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,YAAY,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAY,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnD,CAAC;IAEO,cAAc,CAAC,QAAwB;QAC7C,IAAI,UAAU,GAA0B,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;QACD,OAAO,CACL,UAAU,KAAK,IAAI;YACnB,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAC7C,UAAU,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe;YACvD,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAC9C,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,OAAO,CAAC,MAA4B;QACjD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;CACF"}
+{"version":3,"file":"SafeExecutor.js","sourceRoot":"","sources":["../../src/execution/SafeExecutor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAuH3E,MAAM,OAAO,YAAY;IAIJ;IACA;IACA;IALF,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAEtD,YACmB,QAAwB,EACxB,QAA+B,EAC/B,KAAqB;QAFrB,aAAQ,GAAR,QAAQ,CAAgB;QACxB,aAAQ,GAAR,QAAQ,CAAuB;QAC/B,UAAK,GAAL,KAAK,CAAgB;IACrC,CAAC;IAEG,KAAK,CAAC,GAAG,CACd,QAAwB,EACxB,QAAsB;QAEtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,iGAAiG;QACjG,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrF,4EAA4E;QAC5E,wEAAwE;QACxE,IAAI,CAAC,YAAY,CAAC,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,4BAA4B,EAAE,SAAS,CAAC,CAAC;QACxF,CAAC;QACD,uFAAuF;QACvF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACzC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,oBAAoB;YACjF,QAAQ;YACR,QAAQ;SACT,CAAC,CAAC;QACH,sBAAsB;QACtB,IACE,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI;YACpD,CAAC,CAAC,cAAc,IAAI,CAAC,gBAAgB,CAAC,EACtC,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAChD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,yBAAyB,EAAE,SAAS,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAClF,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,2BAA2B,EAAE,SAAS,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,aAA2C,CAAC;QAChD,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAChE,IACE,aAAa,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAChD,aAAa,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YAC9C,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAClC,aAAa,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAChD,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;YAClE,mBAAmB,IAAI,IAAI,CAAC,GAAG,EAAE;YACjC,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAC3D,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,2BAA2B,EAAE,SAAS,CAAC,CAAC;QACtF,CAAC;QACD,uFAAuF;QACvF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACtC,SAAS,EAAE,gBAAgB;YAC3B,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,IAAI,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3E,OAAO,MAAM,IAAI,CAAC,oBAAoB,CACpC,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,SAAS,CACV,CAAC;QACJ,CAAC;QACD,uFAAuF;QACvF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC1C,SAAS,EAAE,mBAAmB;YAC9B,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,IAAI,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/E,OAAO,MAAM,IAAI,CAAC,oBAAoB,CACpC,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,SAAS,CACV,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;YAChD,OAAO,MAAM,IAAI,CAAC,oBAAoB,CACpC,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,gCAAgC,EAChC,SAAS,CACV,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;YAChD,wEAAwE;YACxE,sEAAsE;YACtE,qCAAqC;YACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;YACtF,MAAM,MAAM,GAAiC;gBAC3C,OAAO,EAAE,yBAAyB;gBAClC,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,IAAI;gBACZ,aAAa;gBACb,YAAY;aACb,CAAC;YACF,uFAAuF;YACvF,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,SAAS,EAAE,kCAAkC;gBAC7C,QAAQ;gBACR,QAAQ;gBACR,aAAa;gBACb,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC1E,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,sBAAsB;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAiC;gBAC3C,OAAO,EAAE,wBAAwB;gBACjC,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,0BAA0B;gBAClC,MAAM,EAAE,IAAI;gBACZ,aAAa;gBACb,QAAQ,EAAE,YAAY,CAAC,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC;gBACjE,YAAY;aACb,CAAC;YACF,uFAAuF;YACvF,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,SAAS,EAAE,2BAA2B;gBACtC,QAAQ;gBACR,QAAQ;gBACR,aAAa;gBACb,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBACzE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,sBAAsB;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QACzF,MAAM,MAAM,GAAiC;YAC3C,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,OAAO,CAAC,MAAiB;YACjC,aAAa;YACb,YAAY;SACb,CAAC;QACF,uFAAuF;QACvF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,qBAAqB;YAChC,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,WAAW,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC1D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,QAAQ,CACpB,QAAwB,EACxB,QAAsB,EACtB,aAAoC,EACpC,OAA+B;QAE/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,aAAa,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAChD,QAAQ;gBACR,QAAQ;gBACR,aAAa;gBACb,OAAO;aACR,CAAC,CAAC;YACH,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,gBAAgB,CAAC,YAAmC;QACjE,OAAO,uBAAuB,YAAY,EAAE,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,QAAwB,EACxB,QAAoC;QAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IACE,QAAQ,CAAC,OAAO,KAAK,uBAAuB;YAC5C,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAC3C,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,CAAC,cAAc;YAC1D,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAC9B,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,2BAA2B,EAAE,SAAS,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QACxF,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,cAAc,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,MAAM,GAA2C;gBACrD,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,cAAc,CAAC,MAAiB;gBACxC,aAAa;aACd,CAAC;YACF,uFAAuF;YACvF,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,SAAS,EAAE,0BAA0B;gBACrC,QAAQ;gBACR,aAAa;gBACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,sBAAsB;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,cAAc,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YAC7C,MAAM,MAAM,GAA2C;gBACrD,OAAO,EAAE,yBAAyB;gBAClC,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,iCAAiC;gBACzC,MAAM,EAAE,IAAI;gBACZ,aAAa;aACd,CAAC;YACF,uFAAuF;YACvF,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,SAAS,EAAE,6BAA6B;gBACxC,QAAQ;gBACR,aAAa;gBACb,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,sBAAsB;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAA2C;YACrD,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,0BAA0B;YAClC,MAAM,EAAE,IAAI;YACZ,aAAa;YACb,QAAQ;SACT,CAAC;QACF,uFAAuF;QACvF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,wBAAwB;YACnC,QAAQ;YACR,aAAa;YACb,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,uBAAuB,CAAC,QAAsB;QAC3D,MAAM,SAAS,GAAG,QAGjB,CAAC;QACF,OAAO,SAAS,CAAC,SAAS,KAAK,eAAe,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC;IAChF,CAAC;IAEO,cAAc,CAAC,QAAwB;QAC7C,IAAI,UAAU,GAA0B,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;QACD,OAAO,CACL,UAAU,KAAK,IAAI;YACnB,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAC7C,UAAU,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe;YACvD,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAC9C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,QAAwB,EACxB,QAAkC,EAClC,MAA4B,EAC5B,SAAiB;QAEjB,uFAAuF;QACvF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,mBAAmB;YAC9B,QAAQ;YACR,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,WAAW,EAAE,CAAC,MAAM,CAAC;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC5F,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,QAAwB,EACxB,QAAsB,EACtB,aAAoC,EACpC,MAAyC,EACzC,SAAiB;QAEjB,2DAA2D;QAC3D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QACtF,uFAAuF;QACvF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,kCAAkC;YAC7C,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,WAAW,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAClE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,OAAO;YACL,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,KAAK;YACf,MAAM;YACN,MAAM,EAAE,IAAI;YACZ,aAAa;YACb,YAAY;SACb,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAsF;QAEtF,iGAAiG;QACjG,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC;IAEO,MAAM,CAAC,iBAAiB,CAC9B,QAAwB,EACxB,aAAoC;QAEpC,wEAAwE;QACxE,8DAA8D;QAC9D,qEAAqE;QACrE,wEAAwE;QACxE,kEAAkE;QAClE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,uBAAuB;YAChC,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc;SAC/C,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,iBAAiB,CAAC,QAAoC;QACnE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/http/ClientIdentification.d.ts

@@ -0,0 +1,22 @@
+/** Where a hosted call came from, for the authority's own accounting. Never decision input. */
+export interface ClientSource {
+    /** The repository the integration was taken from, as `owner/name`. */
+    readonly repo?: string;
+    /** The example or integration name within it. */
+    readonly example?: string;
+    /**
+     * Which surface the integration was taken from, `github` for a clone or
+     * fork of the repository; the authority stamps an organization it creates
+     * for such a caller with it, so a repository's path can be measured.
+     */
+    readonly surface?: string;
+}
+/** This package's own version, read once from its manifest; `unknown` if it cannot be. */
+export declare function packageVersion(): string;
+/**
+ * The `User-Agent` a hosted call carries: the package and its version, and
+ * when the caller says where the integration came from, that too. A value
+ * the header could not carry verbatim is left out rather than escaped.
+ */
+export declare function userAgent(source?: ClientSource): string;
+//# sourceMappingURL=ClientIdentification.d.ts.map

package/dist/http/ClientIdentification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientIdentification.d.ts","sourceRoot":"","sources":["../../src/http/ClientIdentification.ts"],"names":[],"mappings":"AAEA,+FAA+F;AAC/F,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAWD,0FAA0F;AAC1F,wBAAgB,cAAc,IAAI,MAAM,CAsBvC;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,GAAE,YAAiB,GAAG,MAAM,CAa3D"}

package/dist/http/ClientIdentification.js

@@ -0,0 +1,44 @@
+import { createRequire } from "node:module";
+const PRODUCT = "agent-safe-pipeline";
+/** A product token or comment value: what a `User-Agent` may carry without escaping. */
+const TOKEN = /^[\w.\-/@]{1,120}$/;
+let cachedVersion;
+/** This package's own version, read once from its manifest; `unknown` if it cannot be. */
+export function packageVersion() {
+    if (cachedVersion === undefined) {
+        if (typeof __AGENT_SAFE_PIPELINE_VERSION__ === "string" &&
+            TOKEN.test(__AGENT_SAFE_PIPELINE_VERSION__)) {
+            cachedVersion = __AGENT_SAFE_PIPELINE_VERSION__;
+            return cachedVersion;
+        }
+        try {
+            const manifest = createRequire(import.meta.url)("../../package.json");
+            cachedVersion =
+                typeof manifest.version === "string" && TOKEN.test(manifest.version)
+                    ? manifest.version
+                    : "unknown";
+        }
+        catch {
+            cachedVersion = "unknown";
+        }
+    }
+    return cachedVersion;
+}
+/**
+ * The `User-Agent` a hosted call carries: the package and its version, and
+ * when the caller says where the integration came from, that too. A value
+ * the header could not carry verbatim is left out rather than escaped.
+ */
+export function userAgent(source = {}) {
+    const product = `${PRODUCT}/${packageVersion()}`;
+    const comment = [
+        ["repo", source.repo],
+        ["example", source.example],
+        ["surface", source.surface],
+    ]
+        .filter((entry) => typeof entry[1] === "string" && TOKEN.test(entry[1]))
+        .map(([key, value]) => `${key}=${value}`)
+        .join("; ");
+    return comment === "" ? product : `${product} (${comment})`;
+}
+//# sourceMappingURL=ClientIdentification.js.map

package/dist/http/ClientIdentification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientIdentification.js","sourceRoot":"","sources":["../../src/http/ClientIdentification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAgB5C,MAAM,OAAO,GAAG,qBAAqB,CAAC;AACtC,wFAAwF;AACxF,MAAM,KAAK,GAAG,oBAAoB,CAAC;AAEnC,IAAI,aAAiC,CAAC;AAKtC,0FAA0F;AAC1F,MAAM,UAAU,cAAc;IAC5B,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IACE,OAAO,+BAA+B,KAAK,QAAQ;YACnD,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,EAC3C,CAAC;YACD,aAAa,GAAG,+BAA+B,CAAC;YAChD,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAEnE,CAAC;YACF,aAAa;gBACX,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAClE,CAAC,CAAC,QAAQ,CAAC,OAAO;oBAClB,CAAC,CAAC,SAAS,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,SAAuB,EAAE;IACjD,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,cAAc,EAAE,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG;QACd,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;QAC3B,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;KAC5B;SACE,MAAM,CACL,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAC3F;SACA,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;SACxC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,CAAC;AAC9D,CAAC"}

package/dist/http/Credential.d.ts

@@ -0,0 +1,17 @@
+/**
+ * A credential a client reads at the moment of use.
+ *
+ * A deployment whose Decionis credential rotates has two choices. It can
+ * rebuild every client that holds the old value, which means a request in
+ * flight and the next request can disagree about which client they belong
+ * to; or it can hand each client a function and let the value be read per
+ * request. The second is what this type is for: the client holds no string,
+ * so nothing has to be torn down when the file behind it changes.
+ *
+ * A plain string is still accepted, and is the right answer for a credential
+ * that does not rotate inside a process's life.
+ */
+export type Credential = string | (() => string);
+/** The reader a client keeps: a constant for a value, the caller's own for a function. */
+export declare function credentialReader(credential: Credential): () => string;
+//# sourceMappingURL=Credential.d.ts.map

package/dist/http/Credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Credential.d.ts","sourceRoot":"","sources":["../../src/http/Credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;AAEjD,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,MAAM,CAErE"}

package/dist/http/Credential.js

@@ -0,0 +1,5 @@
+/** The reader a client keeps: a constant for a value, the caller's own for a function. */
+export function credentialReader(credential) {
+    return typeof credential === "function" ? credential : () => credential;
+}
+//# sourceMappingURL=Credential.js.map

package/dist/http/Credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Credential.js","sourceRoot":"","sources":["../../src/http/Credential.ts"],"names":[],"mappings":"AAeA,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,UAAsB;IACrD,OAAO,OAAO,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAW,EAAE,CAAC,UAAU,CAAC;AAClF,CAAC"}

package/dist/http/StoredCredentials.d.ts

@@ -0,0 +1,34 @@
+export interface StoredCredentials {
+    readonly apiKey: string;
+    /** The key's organization, which every intent must name; null when the login did not say. */
+    readonly tenantId: string | null;
+    /** The authority the key belongs to; null means the default. */
+    readonly endpoint: string | null;
+    /** True for a workspace an example provisioned without an account; absent for a login. */
+    readonly provisional?: boolean;
+}
+/** The files the store touches, behind a seam so a test hands in a directory of its own. */
+export interface CredentialFiles {
+    /** The text, or null when there is no such file. */
+    read(path: string): string | null;
+    write(path: string, text: string, mode: number): void;
+    mkdir(path: string): void;
+}
+export interface CredentialStoreOptions {
+    readonly env: Readonly<Record<string, string | undefined>>;
+    /** The user's home directory; defaults to the process's. */
+    readonly home?: string;
+    readonly files?: CredentialFiles;
+}
+export declare const nodeCredentialFiles: CredentialFiles;
+/** Where the credential lives: `$AGENTSAFE_HOME`, else the XDG config directory, under `agentsafe`. */
+export declare function credentialsDirectory(options: CredentialStoreOptions): string;
+export declare function credentialsPath(options: CredentialStoreOptions): string;
+/**
+ * The stored credential, or null when there is none, it cannot be read as
+ * one, or the process is marked production, where a login is never a source.
+ */
+export declare function readStoredCredentials(options: CredentialStoreOptions): StoredCredentials | null;
+/** Writes the credential, readable by this user alone, and returns where. */
+export declare function writeStoredCredentials(options: CredentialStoreOptions, credentials: StoredCredentials): string;
+//# sourceMappingURL=StoredCredentials.d.ts.map

package/dist/http/StoredCredentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StoredCredentials.d.ts","sourceRoot":"","sources":["../../src/http/StoredCredentials.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,0FAA0F;IAC1F,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,4FAA4F;AAC5F,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3D,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAeD,eAAO,MAAM,mBAAmB,EAAE,eAcjC,CAAC;AAEF,uGAAuG;AACvG,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAM5E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAEvE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,iBAAiB,GAAG,IAAI,CAe/F;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,sBAAsB,EAC/B,WAAW,EAAE,iBAAiB,GAC7B,MAAM,CAOR"}

package/dist/http/StoredCredentials.js

@@ -0,0 +1,85 @@
+/**
+ * The Decionis key a developer keeps on their own machine: what
+ * `agentsafe login` stores, and what an example provisions for itself when
+ * asked to run hosted with no key set. One file, one shape, readable by its
+ * owner alone, so the two paths onto Decionis share a credential rather
+ * than each keeping its own. Production never reads it: a server's
+ * credential is mounted, not logged in.
+ */
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { z } from "zod";
+const CREDENTIALS_FILE = "credentials.json";
+const MAX_CREDENTIALS_BYTES = 16 * 1024;
+const CredentialsSchema = z.strictObject({
+    version: z.literal(1),
+    decionis: z.strictObject({
+        apiKey: z.string().min(1).max(4_096),
+        tenantId: z.string().uuid().nullable(),
+        endpoint: z.string().min(1).max(500).nullable(),
+        provisional: z.boolean().optional(),
+    }),
+});
+export const nodeCredentialFiles = {
+    read: (path) => {
+        try {
+            return readFileSync(path, "utf8");
+        }
+        catch {
+            return null;
+        }
+    },
+    write: (path, text, mode) => {
+        writeFileSync(path, text, { encoding: "utf8", mode });
+    },
+    mkdir: (path) => {
+        mkdirSync(path, { recursive: true, mode: 0o700 });
+    },
+};
+/** Where the credential lives: `$AGENTSAFE_HOME`, else the XDG config directory, under `agentsafe`. */
+export function credentialsDirectory(options) {
+    const explicit = options.env["AGENTSAFE_HOME"]?.trim();
+    if (explicit !== undefined && explicit !== "")
+        return explicit;
+    const xdg = options.env["XDG_CONFIG_HOME"]?.trim();
+    const home = options.home ?? homedir();
+    return join(xdg !== undefined && xdg !== "" ? xdg : join(home, ".config"), "agentsafe");
+}
+export function credentialsPath(options) {
+    return join(credentialsDirectory(options), CREDENTIALS_FILE);
+}
+/**
+ * The stored credential, or null when there is none, it cannot be read as
+ * one, or the process is marked production, where a login is never a source.
+ */
+export function readStoredCredentials(options) {
+    if (options.env["NODE_ENV"] === "production")
+        return null;
+    const files = options.files ?? nodeCredentialFiles;
+    const text = files.read(credentialsPath(options));
+    if (text === null || Buffer.byteLength(text, "utf8") > MAX_CREDENTIALS_BYTES)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return null;
+    }
+    const result = CredentialsSchema.safeParse(parsed);
+    if (!result.success)
+        return null;
+    const { provisional, ...credentials } = result.data.decionis;
+    return provisional === undefined ? credentials : { ...credentials, provisional };
+}
+/** Writes the credential, readable by this user alone, and returns where. */
+export function writeStoredCredentials(options, credentials) {
+    const files = options.files ?? nodeCredentialFiles;
+    const directory = credentialsDirectory(options);
+    files.mkdir(directory);
+    const path = join(directory, CREDENTIALS_FILE);
+    files.write(path, `${JSON.stringify({ version: 1, decionis: credentials }, null, 2)}\n`, 0o600);
+    return path;
+}
+//# sourceMappingURL=StoredCredentials.js.map

package/dist/http/StoredCredentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StoredCredentials.js","sourceRoot":"","sources":["../../src/http/StoredCredentials.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2BxB,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC/C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAoB;IAClD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;QACd,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAC;AAEF,uGAAuG;AACvG,MAAM,UAAU,oBAAoB,CAAC,OAA+B;IAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,OAAO,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAAC;IACnD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC1F,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC7D,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,WAAW,EAAE,CAAC;AACnF,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CACpC,OAA+B,EAC/B,WAA8B;IAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAAC;IACnD,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChD,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC/C,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/intent/CanonicalIntentHasher.d.ts

@@ -1,4 +1,4 @@
-import type { AuthorityIntentBinding, CapturedIntent, ExecutionIntent } from "./ExecutionIntent.js";
+import { type AuthorityIntentBinding, type CapturedIntent, type ExecutionIntent } from "./ExecutionIntent.js";
 import type { JsonValue } from "./JsonValue.js";
 export interface CanonicalLimits {
     readonly maxDepth: number;

package/dist/intent/CanonicalIntentHasher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CanonicalIntentHasher.d.ts","sourceRoot":"","sources":["../../src/intent/CanonicalIntentHasher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAIhD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAEtB,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAS7C,OAAO,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc;IAqBhD,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;WAoDjC,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,sBAAsB;WA8B1D,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM;IAIjD,OAAO,CAAC,MAAM,CAAC,YAAY;IAW3B,OAAO,CAAC,MAAM,CAAC,UAAU;IAUzB,OAAO,CAAC,aAAa;CAoBtB"}
+{"version":3,"file":"CanonicalIntentHasher.d.ts","sourceRoot":"","sources":["../../src/intent/CanonicalIntentHasher.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAIhD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAEtB,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAS7C,OAAO,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc;IAqBhD,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;WAoDjC,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,sBAAsB;WAoC1D,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM;IAIjD,OAAO,CAAC,MAAM,CAAC,YAAY;IAW3B,OAAO,CAAC,MAAM,CAAC,UAAU;IAUzB,OAAO,CAAC,aAAa;CAoBtB"}