@dsh-enhanced/plugin-control-plane 0.1.48 → 0.1.49

package/lib/live-qualification-authority.js

@@ -0,0 +1,280 @@
+import { createHash, createPrivateKey, createPublicKey, sign, verify } from 'node:crypto';
+import { resolve } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { sourceAuthorityCanonicalSafePath, sourceAuthorityReadSafeFile } from './source-approval-authority.js';
+import { controlPlaneDigest, readLiveQualificationContext } from './store.js';
+import { PROTECTED_PLUGIN_DENYLIST } from './source-workspace.js';
+import { assertLiveQualificationBatch, liveQualificationReceiptId, liveQualificationSigningPayload, parseLiveQualificationReceipt, validateLiveQualificationTerms } from './live-qualification.js';
+const ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/u;
+const DIGEST = /^[a-f0-9]{64}$/u;
+const PACKAGE = /^@dsh-enhanced\/[a-z][a-z0-9-]*$/u;
+const MAX_CONFIG = 65_536;
+const MAX_REQUEST = 8_192;
+const MAX_KEY = 32_768;
+export class LiveQualificationAuthorityError extends Error {
+    constructor() {
+        super('live qualification authority refused the request');
+        this.name = 'LiveQualificationAuthorityError';
+    }
+}
+function fail() { throw new LiveQualificationAuthorityError(); }
+function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        fail();
+    return value;
+}
+function exact(value, fields) {
+    if (Object.keys(value).sort().join('\0') !== [...fields].sort().join('\0'))
+        fail();
+}
+function string(value, pattern = ID, maximum = 4096) {
+    if (typeof value !== 'string' || !pattern.test(value) || value.normalize('NFC').trim() !== value
+        || Buffer.byteLength(value) > maximum || /[\p{Cc}]/u.test(value))
+        fail();
+    return value;
+}
+function integer(value, minimum, maximum = Number.MAX_SAFE_INTEGER) {
+    if (!Number.isSafeInteger(value) || Number(value) < minimum || Number(value) > maximum)
+        fail();
+    return Number(value);
+}
+function path(value) {
+    const result = string(value, /^[\s\S]+$/u);
+    if (!result.startsWith('/') || result === '/' || resolve(result) !== result)
+        fail();
+    return result;
+}
+function equal(left, right) { return controlPlaneDigest(left) === controlPlaneDigest(right); }
+function owner(value) {
+    const item = object(value);
+    exact(item, ['authorityId', 'authorityHash', 'principalId', 'principalRecordId', 'principalVersion', 'workspace', 'agentPreset']);
+    return Object.freeze({ authorityId: string(item.authorityId), authorityHash: string(item.authorityHash, DIGEST, 64),
+        principalId: string(item.principalId, /^[\s\S]+$/u, 512),
+        principalRecordId: string(item.principalRecordId, /^[\s\S]+$/u, 512),
+        principalVersion: integer(item.principalVersion, 1), workspace: path(item.workspace), agentPreset: string(item.agentPreset) });
+}
+export function validateLiveQualificationAuthorityConfig(value) {
+    const item = object(value);
+    exact(item, ['schemaVersion', 'authority', 'keyId', 'keyPath', 'statePath', 'controlDatabasePath', 'grant']);
+    if (item.schemaVersion !== 1)
+        fail();
+    const authority = string(item.authority), keyId = string(item.keyId);
+    const keyPath = sourceAuthorityCanonicalSafePath(path(item.keyPath), 'file');
+    const statePath = path(item.statePath);
+    const controlPath = sourceAuthorityCanonicalSafePath(path(item.controlDatabasePath), 'file');
+    if (new Set([keyPath, statePath, controlPath]).size !== 3)
+        fail();
+    const grant = object(item.grant);
+    exact(grant, ['id', 'expiresAt', 'maxQualifications', 'owner', 'installationId', 'ledger', 'profilePath', 'packages', 'terms', 'receiptTtlMs']);
+    string(grant.id);
+    integer(grant.expiresAt, 1);
+    integer(grant.maxQualifications, 1, 1000);
+    owner(grant.owner);
+    string(grant.installationId);
+    const ledger = object(grant.ledger);
+    exact(ledger, ['id', 'path']);
+    string(ledger.id);
+    if (path(ledger.path) !== controlPath)
+        fail();
+    path(grant.profilePath);
+    validateLiveQualificationTerms(grant.terms);
+    if (grant.terms.authority !== authority || grant.terms.keyId !== keyId)
+        fail();
+    integer(grant.receiptTtlMs, 1_000, 300_000);
+    if (!Array.isArray(grant.packages) || grant.packages.length < 1 || grant.packages.length > 64)
+        fail();
+    const packages = grant.packages.map((value) => string(value, PACKAGE, 128));
+    if (new Set(packages).size !== packages.length)
+        fail();
+}
+function parseRequest(value) {
+    const item = object(value);
+    exact(item, ['protocol', 'batchId', 'batchDigest']);
+    if (item.protocol !== 'dsh-live-qualification/v1')
+        fail();
+    return Object.freeze({ protocol: 'dsh-live-qualification/v1',
+        batchId: string(item.batchId, /^live-qualification-[a-f0-9]{64}$/u),
+        batchDigest: string(item.batchDigest, DIGEST, 64) });
+}
+function openState(statePath) {
+    sourceAuthorityCanonicalSafePath(statePath, 'file', true);
+    const database = new DatabaseSync(statePath);
+    try {
+        database.exec(`PRAGMA busy_timeout = 5000;
+      PRAGMA journal_mode = WAL;
+      PRAGMA synchronous = FULL;
+      CREATE TABLE IF NOT EXISTS live_qualification_grants (
+        grant_id TEXT PRIMARY KEY, config_digest TEXT NOT NULL, key_fingerprint TEXT NOT NULL
+      ) STRICT;
+      CREATE TABLE IF NOT EXISTS live_qualification_receipts (
+        request_digest TEXT PRIMARY KEY, grant_id TEXT NOT NULL, config_digest TEXT NOT NULL,
+        batch_id TEXT NOT NULL UNIQUE, batch_digest TEXT NOT NULL,
+        receipt_json TEXT NOT NULL, receipt_digest TEXT NOT NULL
+      ) STRICT;`);
+        return database;
+    }
+    catch (error) {
+        database.close();
+        throw error;
+    }
+}
+function storedReceipt(receiptJson, digest, key) {
+    if (controlPlaneDigest(receiptJson) !== digest)
+        fail();
+    try {
+        const receipt = parseLiveQualificationReceipt(JSON.parse(receiptJson));
+        const { signature, ...unsigned } = receipt;
+        if (!verify(null, Buffer.from(liveQualificationSigningPayload(unsigned)), createPublicKey(key), Buffer.from(signature, 'base64')))
+            fail();
+        return receipt;
+    }
+    catch {
+        return fail();
+    }
+}
+function validateContext(config, request, now) {
+    const db = new DatabaseSync(sourceAuthorityCanonicalSafePath(config.controlDatabasePath, 'file'), { readOnly: true });
+    try {
+        db.exec('PRAGMA query_only = ON');
+        const context = readLiveQualificationContext(db, request.batchId);
+        const { record, plan, source, deployments } = context;
+        const batch = record.batch;
+        assertLiveQualificationBatch(batch);
+        if (!['pending', 'signed'].includes(record.state) || batch.id !== request.batchId || batch.digest !== request.batchDigest
+            || batch.expiresAt <= now || now >= batch.deadlineAt || config.grant.expiresAt <= now
+            || !equal(batch.terms, config.grant.terms) || !equal(batch.owner, config.grant.owner)
+            || batch.installationId !== config.grant.installationId || !equal(plan.ledger, config.grant.ledger)
+            || batch.profilePath !== config.grant.profilePath || plan.id !== batch.planId || plan.digest !== batch.planDigest
+            || plan.status !== 'awaiting-live-tasks' || !plan.activation || plan.activation.id !== batch.activationId
+            || plan.activation.fence !== batch.fence || PROTECTED_PLUGIN_DENYLIST.has(plan.candidate.id)
+            || !config.grant.packages.includes(plan.candidate.package)
+            || !equal(plan.dossier.liveQualification, batch.terms)
+            || source.owner.authorityId !== batch.owner.authorityId || source.owner.authorityHash !== batch.owner.authorityHash
+            || source.owner.principalId !== batch.owner.principalId || source.owner.principalRecordId !== batch.owner.principalRecordId
+            || source.owner.principalVersion !== batch.owner.principalVersion || source.owner.workspace !== batch.owner.workspace
+            || source.owner.agentPreset !== batch.owner.agentPreset || deployments.length !== batch.votes.length)
+            fail();
+        for (const vote of batch.votes) {
+            const deployment = deployments.find((item) => item.task.inboxId === vote.inboxId);
+            if (!deployment || controlPlaneDigest(deployment) !== vote.deploymentDigest
+                || deployment.readiness.planId !== plan.id || deployment.readiness.planDigest !== plan.digest
+                || deployment.readiness.activationId !== batch.activationId || deployment.readiness.fence !== batch.fence
+                || deployment.readiness.hostGeneration !== batch.hostGeneration
+                || deployment.task.owner.principalRecordId !== batch.owner.principalRecordId
+                || deployment.task.owner.principalVersion !== batch.owner.principalVersion
+                || deployment.task.scope.workspace !== batch.owner.workspace || deployment.task.scope.preset !== batch.owner.agentPreset
+                || !deployment.execution || deployment.execution.completedAt !== vote.completedAt)
+                fail();
+        }
+        return context;
+    }
+    finally {
+        db.close();
+    }
+}
+function makeReceipt(config, batch, key, now) {
+    const identity = {
+        schemaVersion: 1, kind: 'dsh-live-qualification-receipt',
+        authority: config.authority, keyId: config.keyId, batchId: batch.id, batchDigest: batch.digest,
+        planId: batch.planId, planDigest: batch.planDigest, activationId: batch.activationId, fence: batch.fence,
+        hostGeneration: batch.hostGeneration,
+        disposition: batch.votes.some(vote => vote.status === 'not-achieved') ? 'failed' : 'qualified',
+        observedAt: now,
+        expiresAt: Math.min(now + config.grant.receiptTtlMs, batch.expiresAt, config.grant.expiresAt),
+    };
+    if (identity.expiresAt <= now)
+        fail();
+    const unsigned = { ...identity, receiptId: liveQualificationReceiptId(identity) };
+    return parseLiveQualificationReceipt({ ...unsigned,
+        signature: sign(null, Buffer.from(liveQualificationSigningPayload(unsigned)), key).toString('base64') });
+}
+export async function authorizeLiveQualification(configInput, requestInput) {
+    try {
+        validateLiveQualificationAuthorityConfig(configInput);
+        const config = configInput, request = parseRequest(requestInput);
+        const keyBytes = sourceAuthorityReadSafeFile(config.keyPath, MAX_KEY);
+        const key = createPrivateKey(keyBytes);
+        if (key.asymmetricKeyType !== 'ed25519')
+            fail();
+        const configDigest = controlPlaneDigest(config);
+        const keyFingerprint = createHash('sha256').update(keyBytes).digest('hex');
+        const requestDigest = controlPlaneDigest(request);
+        const state = openState(config.statePath);
+        try {
+            state.exec('BEGIN IMMEDIATE');
+            const frozen = state.prepare('SELECT config_digest,key_fingerprint FROM live_qualification_grants WHERE grant_id=?')
+                .get(config.grant.id);
+            if (frozen && (frozen.config_digest !== configDigest || frozen.key_fingerprint !== keyFingerprint))
+                fail();
+            const prior = state.prepare(`SELECT receipt_json,receipt_digest,grant_id,config_digest,batch_id,batch_digest
+        FROM live_qualification_receipts WHERE request_digest=?`).get(requestDigest);
+            if (prior) {
+                if (prior.grant_id !== config.grant.id || prior.config_digest !== configDigest
+                    || prior.batch_id !== request.batchId || prior.batch_digest !== request.batchDigest)
+                    fail();
+                const receipt = storedReceipt(prior.receipt_json, prior.receipt_digest, key);
+                if (receipt.batchId !== request.batchId || receipt.batchDigest !== request.batchDigest
+                    || receipt.authority !== config.authority || receipt.keyId !== config.keyId)
+                    fail();
+                state.exec('COMMIT');
+                return receipt;
+            }
+            const now = Date.now();
+            const first = validateContext(config, request, now);
+            const final = validateContext(config, request, now);
+            if (!equal(first.record.batch, final.record.batch) || !equal(first.plan, final.plan))
+                fail();
+            const count = state.prepare('SELECT COUNT(*) AS count FROM live_qualification_receipts WHERE grant_id=?')
+                .get(config.grant.id);
+            if (count.count >= config.grant.maxQualifications)
+                fail();
+            if (!frozen)
+                state.prepare('INSERT INTO live_qualification_grants VALUES (?,?,?)')
+                    .run(config.grant.id, configDigest, keyFingerprint);
+            const receipt = makeReceipt(config, final.record.batch, key, now);
+            const receiptJson = JSON.stringify(receipt);
+            state.prepare('INSERT INTO live_qualification_receipts VALUES (?,?,?,?,?,?,?)').run(requestDigest, config.grant.id, configDigest, request.batchId, request.batchDigest, receiptJson, controlPlaneDigest(receiptJson));
+            state.exec('COMMIT');
+            return receipt;
+        }
+        catch (error) {
+            try {
+                state.exec('ROLLBACK');
+            }
+            catch { }
+            ;
+            throw error;
+        }
+        finally {
+            state.close();
+        }
+    }
+    catch (error) {
+        if (error instanceof LiveQualificationAuthorityError)
+            throw error;
+        throw new LiveQualificationAuthorityError();
+    }
+}
+export async function runLiveQualificationAuthority(argv = process.argv.slice(2)) {
+    try {
+        if (argv.length !== 2 || argv[0] !== '--config')
+            fail();
+        const configBytes = sourceAuthorityReadSafeFile(path(argv[1]), MAX_CONFIG);
+        const config = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(configBytes));
+        const chunks = [];
+        let size = 0;
+        for await (const chunk of process.stdin) {
+            const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            size += bytes.length;
+            if (size > MAX_REQUEST)
+                fail();
+            chunks.push(bytes);
+        }
+        const request = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(Buffer.concat(chunks)));
+        process.stdout.write(`${JSON.stringify(await authorizeLiveQualification(config, request))}\n`);
+    }
+    catch {
+        throw new LiveQualificationAuthorityError();
+    }
+}
+//# sourceMappingURL=live-qualification-authority.js.map

package/lib/live-qualification-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-qualification-authority.js","sourceRoot":"","sources":["../src/live-qualification-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,gCAAgC,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AAC9G,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AAEjE,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,+BAA+B,EAChG,6BAA6B,EAAE,8BAA8B,EAEhC,MAAM,yBAAyB,CAAA;AAG9D,MAAM,EAAE,GAAG,sCAAsC,CAAA;AACjD,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,OAAO,GAAG,mCAAmC,CAAA;AACnD,MAAM,UAAU,GAAG,MAAM,CAAA;AACzB,MAAM,WAAW,GAAG,KAAK,CAAA;AACzB,MAAM,OAAO,GAAG,MAAM,CAAA;AAuBtB,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACxD;QACE,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACzD,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAA;IAC/C,CAAC;CACF;AACD,SAAS,IAAI,KAAY,MAAM,IAAI,+BAA+B,EAAE,CAAA,CAAC,CAAC;AACtE,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACvE,OAAO,KAAgC,CAAA;AACzC,CAAC;AACD,SAAS,KAAK,CAAC,KAA8B,EAAE,MAAyB;IACtE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,EAAE,CAAA;AACpF,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,IAAI;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK;WAC3F,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IAC1E,OAAO,KAAe,CAAA;AACxB,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,OAAe,EAAE,OAAO,GAAG,MAAM,CAAC,gBAAgB;IACjF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO;QAAE,IAAI,EAAE,CAAA;IAC9F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,IAAI,EAAE,CAAA;IACnF,OAAO,MAAM,CAAA;AACf,CAAC;AACD,SAAS,KAAK,CAAC,IAAa,EAAE,KAAc,IAAa,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AACxH,SAAS,KAAK,CAAC,KAAc;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1B,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAA;IACjI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC;QACjH,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC;QACxD,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,GAAG,CAAC;QACpE,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;AAClI,CAAC;AAED,MAAM,UAAU,wCAAwC,CAAC,KAAc;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1B,KAAK,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAA;IAC5G,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,MAAM,OAAO,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,WAAW,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAA;IAC5F,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAA;IAC/I,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAChB,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IAC3B,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IACzC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAClB,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAC7B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,WAAW;QAAE,IAAI,EAAE,CAAA;IAC7C,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACvB,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3C,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,IAAI,EAAE,CAAA;IAC9E,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE;QAAE,IAAI,EAAE,CAAA;IACrG,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;IACpF,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAAE,IAAI,EAAE,CAAA;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1B,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAA;IACnD,IAAI,IAAI,CAAC,QAAQ,KAAK,2BAA2B;QAAE,IAAI,EAAE,CAAA;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,2BAA2B;QAC1D,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,oCAAoC,CAAC;QACnE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB;IAClC,gCAAgC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,SAAS,CAAC,CAAA;IAC5C,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;gBAUF,CAAC,CAAA;QACb,OAAO,QAAQ,CAAA;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAA;IAAC,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,MAAc,EAAE,GAAwC;IAClG,IAAI,kBAAkB,CAAC,WAAW,CAAC,KAAK,MAAM;QAAE,IAAI,EAAE,CAAA;IACtD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;QACtE,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAAE,IAAI,EAAE,CAAA;QACzI,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,EAAE,CAAA;IAAC,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,MAAwC,EAAE,OAAiC,EAAE,GAAW;IAC/G,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,gCAAgC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACrH,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,4BAA4B,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QACjE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QAC1B,4BAA4B,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW;eACpH,KAAK,CAAC,SAAS,IAAI,GAAG,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG;eAClF,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;eAClF,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;eAChG,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU;eAC9G,IAAI,CAAC,MAAM,KAAK,qBAAqB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,CAAC,YAAY;eACtG,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;eACzF,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;eACvD,CAAC,KAAK,CAAE,IAAI,CAAC,OAA0D,CAAC,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC;eACvG,MAAM,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa;eAChH,MAAM,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,KAAK,CAAC,iBAAiB;eACxH,MAAM,CAAC,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,KAAK,CAAC,gBAAgB,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,SAAS;eAClH,MAAM,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;YAAE,IAAI,EAAE,CAAA;QAC9G,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAgC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAA;YAC7G,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,gBAAgB;mBACtE,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM;mBAC1F,UAAU,CAAC,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;mBACtG,UAAU,CAAC,SAAS,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;mBAC5D,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,KAAK,CAAC,iBAAiB;mBACzE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,KAAK,CAAC,gBAAgB;mBACvE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW;mBACrH,CAAC,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;gBAAE,IAAI,EAAE,CAAA;QAC7F,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,MAAwC,EAAE,KAA6B,EAC1F,GAAwC,EAAE,GAAW;IACrD,MAAM,QAAQ,GAAG;QACf,aAAa,EAAE,CAAU,EAAE,IAAI,EAAE,gCAAyC;QAC1E,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM;QAC9F,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QACxG,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,WAAoB;QAChH,UAAU,EAAE,GAAG;QACf,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;KAC9F,CAAA;IACD,IAAI,QAAQ,CAAC,SAAS,IAAI,GAAG;QAAE,IAAI,EAAE,CAAA;IACrC,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,0BAA0B,CAAC,QAAQ,CAAC,EAAE,CAAA;IACjF,OAAO,6BAA6B,CAAC,EAAE,GAAG,QAAQ;QAChD,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AAC5G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,WAA6C,EAC5F,YAAsC;IACtC,IAAI,CAAC;QACH,wCAAwC,CAAC,WAAW,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,WAAW,EAAE,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;QAChE,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACrE,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;YAAE,IAAI,EAAE,CAAA;QAC/C,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC/C,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC1E,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACjD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACzC,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,sFAAsF,CAAC;iBACjH,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAmE,CAAA;YACzF,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,YAAY,IAAI,MAAM,CAAC,eAAe,KAAK,cAAc,CAAC;gBAAE,IAAI,EAAE,CAAA;YAC1G,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC;gEAC8B,CAAC,CAAC,GAAG,CAAC,aAAa,CAG9D,CAAA;YACf,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,aAAa,KAAK,YAAY;uBACzE,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,WAAW;oBAAE,IAAI,EAAE,CAAA;gBAC7F,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAA;gBAC5E,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;uBACjF,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;oBAAE,IAAI,EAAE,CAAA;gBACrF,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACpB,OAAO,OAAO,CAAA;YAChB,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;YACnD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;YACnD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;gBAAE,IAAI,EAAE,CAAA;YAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,4EAA4E,CAAC;iBACtG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAsB,CAAA;YAC5C,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB;gBAAE,IAAI,EAAE,CAAA;YACzD,IAAI,CAAC,MAAM;gBAAE,KAAK,CAAC,OAAO,CAAC,sDAAsD,CAAC;qBAC/E,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,CAAA;YACrD,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YACjE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YAC3C,KAAK,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CACjF,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAClF,WAAW,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAA;YAC/C,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpB,OAAO,OAAO,CAAA;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAAA,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;gBAChE,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,+BAA+B;YAAE,MAAM,KAAK,CAAA;QACjE,MAAM,IAAI,+BAA+B,EAAE,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;YAAE,IAAI,EAAE,CAAA;QACvD,MAAM,WAAW,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;QACxF,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACjE,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;YACpB,IAAI,IAAI,GAAG,WAAW;gBAAE,IAAI,EAAE,CAAA;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;IAChG,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,+BAA+B,EAAE,CAAA;IAAC,CAAC;AACzD,CAAC"}

package/lib/live-qualification-client.d.ts

@@ -0,0 +1,4 @@
+import { type LiveQualificationRequest } from './live-qualification.js';
+import { type SourceApprovalClientConfig } from './source-approval-client.js';
+export declare function requestLiveQualification(config: SourceApprovalClientConfig, request: LiveQualificationRequest, signal?: AbortSignal): Promise<import("./live-qualification.js").LiveQualificationReceipt>;
+//# sourceMappingURL=live-qualification-client.d.ts.map

package/lib/live-qualification-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-qualification-client.d.ts","sourceRoot":"","sources":["../src/live-qualification-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AACtG,OAAO,EACL,KAAK,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAEtE,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,0BAA0B,EACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,EAAE,WAAW,uEAcxD"}

package/lib/live-qualification-client.js

@@ -0,0 +1,22 @@
+import { parseLiveQualificationReceipt } from './live-qualification.js';
+import { requestPinnedAuthorityReceipt, SourceApprovalClientError } from './source-approval-client.js';
+export function requestLiveQualification(config, request, signal) {
+    if (request.protocol !== 'dsh-live-qualification/v1'
+        || !/^live-qualification-[a-f0-9]{64}$/u.test(request.batchId)
+        || !/^[a-f0-9]{64}$/u.test(request.batchDigest)
+        || Object.keys(request).sort().join(',') !== 'batchDigest,batchId,protocol') {
+        throw new SourceApprovalClientError('FAILED', 'live qualification request is invalid');
+    }
+    return requestPinnedAuthorityReceipt(config, request, value => {
+        try {
+            const receipt = parseLiveQualificationReceipt(value);
+            if (receipt.batchId !== request.batchId || receipt.batchDigest !== request.batchDigest)
+                throw new Error('batch differs');
+            return receipt;
+        }
+        catch {
+            throw new SourceApprovalClientError('FAILED', 'live qualification authority returned an invalid receipt');
+        }
+    }, signal);
+}
+//# sourceMappingURL=live-qualification-client.js.map

package/lib/live-qualification-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-qualification-client.js","sourceRoot":"","sources":["../src/live-qualification-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAiC,MAAM,yBAAyB,CAAA;AACtG,OAAO,EAAE,6BAA6B,EAAE,yBAAyB,EAC9B,MAAM,6BAA6B,CAAA;AAEtE,MAAM,UAAU,wBAAwB,CAAC,MAAkC,EACzE,OAAiC,EAAE,MAAoB;IACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,2BAA2B;WAC/C,CAAC,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;WAC3D,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;WAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,8BAA8B,EAAE,CAAC;QAC9E,MAAM,IAAI,yBAAyB,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,6BAA6B,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAA;YACpD,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;YACxH,OAAO,OAAO,CAAA;QAChB,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,yBAAyB,CAAC,QAAQ,EAAE,0DAA0D,CAAC,CAAA;QAAC,CAAC;IACvH,CAAC,EAAE,MAAM,CAAC,CAAA;AACZ,CAAC"}

package/lib/live-qualification-runtime.d.ts

@@ -0,0 +1,78 @@
+import type { AssistantAutomationsService } from '@dsh-enhanced/assistant-automations';
+import type { AssistantDeliveryService, OwnerForegroundLearningTask } from '@dsh-enhanced/assistant-delivery';
+import type { AssistantEvaluationService } from '@dsh-enhanced/assistant-evaluation';
+import { type ControlPlaneStore } from './store.js';
+import { type SourceApprovalClientConfig } from './source-approval-client.js';
+import { type LiveQualificationBatch, type LiveQualificationReceipt } from './live-qualification.js';
+import { type PluginControlTrustConfig } from './trust.js';
+type Evaluation = Pick<AssistantEvaluationService, 'canonicalHostScope' | 'getTrustedForegroundLearningProjection' | 'withTrustedCanonicalTaskWriterFence' | 'onTrustedTaskChange'>;
+type Delivery = Pick<AssistantDeliveryService, 'validateOwnerRoute' | 'inspectOwnerForegroundLearningTask'>;
+type Automations = Pick<AssistantAutomationsService, 'registerHostExecutor' | 'reconcileSystem' | 'inspectSystemOwnedActivation'>;
+export interface LiveQualificationConfig {
+    scope: {
+        ownerRouteId: string;
+        principalId: string;
+        workspace: string;
+        preset: string;
+    };
+    profilePath: string;
+    timeoutMs: number;
+    budgetId: string;
+    budgetAmount: number;
+    authority: SourceApprovalClientConfig;
+}
+export declare function validateLiveQualificationConfig(config: LiveQualificationConfig): void;
+/** A finite native-automation witness for real foreground tasks, without a second Agent loop. */
+export declare class LiveQualificationRuntime {
+    private readonly options;
+    private readonly lane;
+    private readonly configDigest;
+    private readonly trustDigest;
+    private readonly scanId;
+    private readonly generation;
+    private readonly activationNonce;
+    private readonly abort;
+    private readonly flights;
+    private unregister?;
+    private unsubscribe?;
+    private closing?;
+    private active;
+    private runtimeWasAvailable;
+    private scanning;
+    private lastError;
+    constructor(options: {
+        config: LiveQualificationConfig;
+        store: ControlPlaneStore;
+        trust: PluginControlTrustConfig;
+        evaluation: Evaluation;
+        delivery: Delivery;
+        automations: Automations;
+        assertCurrent(): void;
+        assertRuntime(planId: string): void;
+        runtimeAvailable(): boolean;
+        qualificationSource(planId: string): OwnerForegroundLearningTask;
+        request?: (batch: LiveQualificationBatch, signal: AbortSignal) => Promise<LiveQualificationReceipt>;
+    });
+    start(): void;
+    close(): Promise<void>;
+    health: () => {
+        connected: boolean;
+        lastError: string | null;
+    };
+    private current;
+    private owner;
+    private source;
+    private vote;
+    private sameDeployment;
+    private cohort;
+    private read;
+    private fence;
+    /** Synchronous source audit and batch creation; only native cron may request authority. */
+    scan: () => void;
+    /** Synchronous final-commit guard; the Store calls this inside its CAS. */
+    withQualificationFence<T>(planId: string, callback: () => T): T;
+    private definition;
+    private execute;
+}
+export {};
+//# sourceMappingURL=live-qualification-runtime.d.ts.map

package/lib/live-qualification-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-qualification-runtime.d.ts","sourceRoot":"","sources":["../src/live-qualification-runtime.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAuF,MAAM,qCAAqC,CAAA;AAC3K,OAAO,KAAK,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAA;AAC7G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AACpF,OAAO,EAAsB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAA;AACvE,OAAO,EAAsC,KAAK,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAEjH,OAAO,EACL,KAAK,sBAAsB,EAAE,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAE7F,OAAO,EAAmB,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAS3E,KAAK,UAAU,GAAG,IAAI,CAAC,0BAA0B,EAAE,oBAAoB,GAAG,wCAAwC,GAAG,qCAAqC,GAAG,qBAAqB,CAAC,CAAA;AACnL,KAAK,QAAQ,GAAG,IAAI,CAAC,wBAAwB,EAAE,oBAAoB,GAAG,oCAAoC,CAAC,CAAA;AAC3G,KAAK,WAAW,GAAG,IAAI,CAAC,2BAA2B,EAAE,sBAAsB,GAAG,iBAAiB,GAAG,8BAA8B,CAAC,CAAA;AAEjI,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IACvF,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,0BAA0B,CAAA;CACtC;AAED,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAcrF;AAED,iGAAiG;AACjG,qBAAa,wBAAwB;IAiBvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAhBpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAe;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,UAAU,CAAC,CAAY;IAC/B,OAAO,CAAC,WAAW,CAAC,CAAY;IAChC,OAAO,CAAC,OAAO,CAAC,CAAe;IAC/B,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,mBAAmB,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,SAAS,CAAsB;gBAEV,OAAO,EAAE;QACpC,MAAM,EAAE,uBAAuB,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAC;QAAC,KAAK,EAAE,wBAAwB,CAAA;QAC1F,UAAU,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;QACpE,aAAa,IAAI,IAAI,CAAA;QACrB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;QACnC,gBAAgB,IAAI,OAAO,CAAA;QAC3B,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,2BAA2B,CAAA;QAChE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAA;KACpG;IASD,KAAK,IAAI,IAAI;IAmBb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBtB,MAAM;;;MAAgE;IAEtE,OAAO,CAAC,OAAO;IAKf,OAAO,CAAC,KAAK;IAMb,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,MAAM;IAsBd,OAAO,CAAC,IAAI;IAuCZ,OAAO,CAAC,KAAK;IAOb,2FAA2F;IAC3F,IAAI,QAAO,IAAI,CAwDd;IAED,2EAA2E;IAC3E,sBAAsB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;IAU/D,OAAO,CAAC,UAAU;YAWJ,OAAO;CAkDtB"}