@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/harness/pi-rpc/authorization/policy.js

@@ -0,0 +1,131 @@
+import { createHash } from "node:crypto";
+import { makeNodeRuntimeError } from "../../../runtime/errors.js";
+import { comparePiRpcManifestRelativePaths } from "../manifest-order.js";
+export const PI_RPC_PLAN_TTL_MS = 300_000;
+export const PI_RPC_PERMIT_TTL_MS = 2000;
+export const PI_RPC_MAX_PLAN_BYTES = 16_384;
+export const PI_RPC_MAX_UNSETTLED_PER_AUTHORIZATION = 8;
+export const PI_RPC_MAX_TERMINAL_PERMITS = 10_000;
+export const PI_RPC_TERMINAL_RETENTION_MS = 30 * 24 * 60 * 60 * 1000;
+const identifierPattern = /^[A-Za-z0-9._:-]{1,128}$/u;
+const digestPattern = /^[a-f0-9]{64}$/u;
+const revisionPattern = /^[A-Za-z0-9._:-]{1,128}$/u;
+export const requirePiRpcIdentifier = (value, label) => {
+    if (identifierPattern.test(value))
+        return value;
+    throw makeNodeRuntimeError("storage_failed", `${label} is invalid.`);
+};
+export const requirePiRpcDigest = (value, label) => {
+    if (digestPattern.test(value))
+        return value;
+    throw makeNodeRuntimeError("storage_failed", `${label} is invalid.`);
+};
+export const requirePiRpcRevision = (value, label) => {
+    if (revisionPattern.test(value))
+        return value;
+    throw makeNodeRuntimeError("storage_failed", `${label} is invalid.`);
+};
+export const requirePiRpcPath = (value, label) => {
+    if (value.length > 0 &&
+        value.length <= 4096 &&
+        value.startsWith("/") &&
+        !value.includes("\0"))
+        return value;
+    throw makeNodeRuntimeError("storage_failed", `${label} is invalid.`);
+};
+export const requirePiRpcFilesystemIdentity = (value, label) => {
+    if (Number.isSafeInteger(value) && value >= 0)
+        return value;
+    throw makeNodeRuntimeError("storage_failed", `${label} is invalid.`);
+};
+export const requirePiRpcTimestampMs = (value, label) => {
+    const parsed = Date.parse(value);
+    if (Number.isSafeInteger(parsed) && new Date(parsed).toISOString() === value)
+        return parsed;
+    throw makeNodeRuntimeError("storage_failed", `${label} is invalid.`);
+};
+export const plusPiRpcMilliseconds = (value, milliseconds) => new Date(requirePiRpcTimestampMs(value, "The timestamp") + milliseconds).toISOString();
+export const requirePiRpcCommandInput = (input) => {
+    requirePiRpcIdentifier(input.commandId, "The Pi RPC command identifier");
+    requirePiRpcIdentifier(input.requestDigest, "The Pi RPC request digest");
+    requirePiRpcTimestampMs(input.recordedAt, "The Pi RPC command timestamp");
+};
+export const requirePiRpcOwnerKinds = (value) => {
+    if (value.length === 1 && value[0] === "pi-rpc-probe")
+        return ["pi-rpc-probe"];
+    if (value.length === 2 &&
+        value[0] === "pi-rpc-probe" &&
+        value[1] === "pi-rpc-session")
+        return ["pi-rpc-probe", "pi-rpc-session"];
+    throw makeNodeRuntimeError("storage_failed", "The Pi RPC owner-kind set is invalid.");
+};
+const requireManifestEntry = (entry, ordinal) => {
+    const segments = entry.relativePath.split("/");
+    if (entry.ordinal !== ordinal ||
+        !Number.isSafeInteger(entry.byteCount) ||
+        entry.byteCount < 0 ||
+        entry.byteCount > 16_777_216 ||
+        typeof entry.executable !== "boolean" ||
+        entry.relativePath.length === 0 ||
+        entry.relativePath.length > 4096 ||
+        entry.relativePath.startsWith("/") ||
+        entry.relativePath.includes("\0") ||
+        entry.relativePath.includes("\\") ||
+        segments.some((segment) => segment.length === 0 || segment === "." || segment === ".."))
+        throw makeNodeRuntimeError("storage_failed", "The Pi RPC artifact manifest entry is invalid.");
+    requirePiRpcDigest(entry.sha256, "The Pi RPC artifact entry digest");
+};
+const requireManifestSummary = (manifest) => {
+    if (manifest.fileCount !== manifest.entries.length ||
+        !Number.isSafeInteger(manifest.excludedBinEntryCount) ||
+        manifest.excludedBinEntryCount < 0 ||
+        manifest.excludedBinEntryCount > 256 ||
+        manifest.fileCount < 1 ||
+        manifest.fileCount > 16_384 ||
+        manifest.totalBytes < 1 ||
+        manifest.totalBytes > 268_435_456 ||
+        manifest.manifestBytes < 1 ||
+        manifest.manifestBytes > 8_388_608 ||
+        manifest.packageName.length === 0 ||
+        manifest.packageName.length > 214 ||
+        manifest.packageVersion.length === 0 ||
+        manifest.packageVersion.length > 128)
+        throw makeNodeRuntimeError("storage_failed", "The Pi RPC artifact manifest summary is invalid.");
+};
+const requireCanonicalManifestOrder = (entries) => {
+    entries.forEach(requireManifestEntry);
+    if (entries.some((entry, index) => {
+        const previous = entries[index - 1];
+        return (previous !== undefined &&
+            comparePiRpcManifestRelativePaths(previous.relativePath, entry.relativePath) >= 0);
+    }))
+        throw makeNodeRuntimeError("storage_failed", "The Pi RPC artifact manifest is not canonically ordered.");
+};
+const canonicalManifestBytes = (entries) => Buffer.from(JSON.stringify(entries.map((entry) => ({
+    byteCount: entry.byteCount,
+    executable: entry.executable,
+    relativePath: entry.relativePath,
+    sha256: entry.sha256,
+}))), "utf8");
+const requireManifestTotals = (manifest) => {
+    const totalBytes = manifest.entries.reduce((total, entry) => total + entry.byteCount, 0);
+    if (totalBytes !== manifest.totalBytes)
+        throw makeNodeRuntimeError("storage_failed", "The Pi RPC artifact manifest byte total is invalid.");
+    const canonicalBytes = canonicalManifestBytes(manifest.entries);
+    if (canonicalBytes.byteLength !== manifest.manifestBytes ||
+        createHash("sha256").update(canonicalBytes).digest("hex") !==
+            manifest.closureSha256)
+        throw makeNodeRuntimeError("storage_failed", "The Pi RPC artifact manifest digest is invalid.");
+};
+export const requirePiRpcManifest = (manifest) => {
+    requirePiRpcDigest(manifest.closureSha256, "The Pi RPC closure digest");
+    requirePiRpcDigest(manifest.packageManifestSha256, "The Pi RPC package manifest digest");
+    requirePiRpcPath(manifest.packageRootPath, "The Pi RPC package root");
+    requirePiRpcFilesystemIdentity(manifest.packageRootIdentity.device, "The Pi RPC package-root device");
+    requirePiRpcFilesystemIdentity(manifest.packageRootIdentity.inode, "The Pi RPC package-root inode");
+    requireManifestSummary(manifest);
+    requireCanonicalManifestOrder(manifest.entries);
+    requireManifestTotals(manifest);
+    return manifest;
+};
+//# sourceMappingURL=policy.js.map

package/dist/harness/pi-rpc/authorization/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/harness/pi-rpc/authorization/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAQzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErE,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AACtD,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAEpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAAa,EACb,KAAa,EACL,EAAE;IACV,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAE,KAAa,EAAU,EAAE;IACzE,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAE,KAAa,EAAU,EAAE;IAC3E,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,KAAa,EAAU,EAAE;IACvE,IACE,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,IAAI;QACpB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAErB,OAAO,KAAK,CAAC;IACf,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,KAAa,EACb,KAAa,EACL,EAAE;IACV,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,KAAa,EACb,KAAa,EACL,EAAE;IACV,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;QAC1E,OAAO,MAAM,CAAC;IAChB,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAa,EACb,YAAoB,EACZ,EAAE,CACV,IAAI,IAAI,CACN,uBAAuB,CAAC,KAAK,EAAE,eAAe,CAAC,GAAG,YAAY,CAC/D,CAAC,WAAW,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAwB,EAAQ,EAAE;IACzE,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;IACzE,sBAAsB,CAAC,KAAK,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IACzE,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAAgC,EACL,EAAE;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc;QACnD,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1B,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc;QAC3B,KAAK,CAAC,CAAC,CAAC,KAAK,gBAAgB;QAE7B,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC5C,MAAM,oBAAoB,CACxB,gBAAgB,EAChB,uCAAuC,CACxC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,KAA+C,EAC/C,OAAe,EACT,EAAE;IACR,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IACE,KAAK,CAAC,OAAO,KAAK,OAAO;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;QACtC,KAAK,CAAC,SAAS,GAAG,CAAC;QACnB,KAAK,CAAC,SAAS,GAAG,UAAU;QAC5B,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS;QACrC,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAC/B,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI;QAChC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;QAClC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjC,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACzE;QAED,MAAM,oBAAoB,CACxB,gBAAgB,EAChB,gDAAgD,CACjD,CAAC;IACJ,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,QAA+B,EAAQ,EAAE;IACvE,IACE,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM;QAC9C,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACrD,QAAQ,CAAC,qBAAqB,GAAG,CAAC;QAClC,QAAQ,CAAC,qBAAqB,GAAG,GAAG;QACpC,QAAQ,CAAC,SAAS,GAAG,CAAC;QACtB,QAAQ,CAAC,SAAS,GAAG,MAAM;QAC3B,QAAQ,CAAC,UAAU,GAAG,CAAC;QACvB,QAAQ,CAAC,UAAU,GAAG,WAAW;QACjC,QAAQ,CAAC,aAAa,GAAG,CAAC;QAC1B,QAAQ,CAAC,aAAa,GAAG,SAAS;QAClC,QAAQ,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QACjC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG;QACjC,QAAQ,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QACpC,QAAQ,CAAC,cAAc,CAAC,MAAM,GAAG,GAAG;QAEpC,MAAM,oBAAoB,CACxB,gBAAgB,EAChB,kDAAkD,CACnD,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,6BAA6B,GAAG,CACpC,OAAyC,EACnC,EAAE;IACR,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtC,IACE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACpC,OAAO,CACL,QAAQ,KAAK,SAAS;YACtB,iCAAiC,CAC/B,QAAQ,CAAC,YAAY,EACrB,KAAK,CAAC,YAAY,CACnB,IAAI,CAAC,CACP,CAAC;IACJ,CAAC,CAAC;QAEF,MAAM,oBAAoB,CACxB,gBAAgB,EAChB,0DAA0D,CAC3D,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,OAAyC,EACjC,EAAE,CACV,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CACZ,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,SAAS,EAAE,KAAK,CAAC,SAAS;IAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;IAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;IAChC,MAAM,EAAE,KAAK,CAAC,MAAM;CACrB,CAAC,CAAC,CACJ,EACD,MAAM,CACP,CAAC;AAEJ,MAAM,qBAAqB,GAAG,CAAC,QAA+B,EAAQ,EAAE;IACtE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CACxC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,SAAS,EACzC,CAAC,CACF,CAAC;IACF,IAAI,UAAU,KAAK,QAAQ,CAAC,UAAU;QACpC,MAAM,oBAAoB,CACxB,gBAAgB,EAChB,qDAAqD,CACtD,CAAC;IACJ,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChE,IACE,cAAc,CAAC,UAAU,KAAK,QAAQ,CAAC,aAAa;QACpD,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACvD,QAAQ,CAAC,aAAa;QAExB,MAAM,oBAAoB,CACxB,gBAAgB,EAChB,iDAAiD,CAClD,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,QAA+B,EACR,EAAE;IACzB,kBAAkB,CAAC,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IACxE,kBAAkB,CAChB,QAAQ,CAAC,qBAAqB,EAC9B,oCAAoC,CACrC,CAAC;IACF,gBAAgB,CAAC,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;IACtE,8BAA8B,CAC5B,QAAQ,CAAC,mBAAmB,CAAC,MAAM,EACnC,gCAAgC,CACjC,CAAC;IACF,8BAA8B,CAC5B,QAAQ,CAAC,mBAAmB,CAAC,KAAK,EAClC,+BAA+B,CAChC,CAAC;IACF,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjC,6BAA6B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChD,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC"}

package/dist/harness/pi-rpc/authorization/projection.d.ts

@@ -0,0 +1,7 @@
+import type { DatabaseSync } from "node:sqlite";
+import { type PiRpcAuthorizationRow, type PiRpcPermitRow, type PiRpcPlanRow } from "./database.js";
+import type { PiRpcAuthorizationProjection, PiRpcIntegrationPlanRecord, PiRpcPermitProjection } from "./types.js";
+export declare const projectPiRpcPlan: (database: DatabaseSync, row: PiRpcPlanRow) => PiRpcIntegrationPlanRecord;
+export declare const projectPiRpcAuthorization: (database: DatabaseSync, row: PiRpcAuthorizationRow) => PiRpcAuthorizationProjection;
+export declare const projectPiRpcPermit: (row: PiRpcPermitRow) => PiRpcPermitProjection;
+//# sourceMappingURL=projection.d.ts.map

package/dist/harness/pi-rpc/authorization/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../../src/harness/pi-rpc/authorization/projection.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKhD,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,cAAc,EACnB,KAAK,YAAY,EAIlB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EACV,4BAA4B,EAC5B,0BAA0B,EAE1B,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAkLpB,eAAO,MAAM,gBAAgB,GAC3B,UAAU,YAAY,EACtB,KAAK,YAAY,KAChB,0BAIF,CAAC;AAsCF,eAAO,MAAM,yBAAyB,GACpC,UAAU,YAAY,EACtB,KAAK,qBAAqB,KACzB,4BAaF,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAC7B,KAAK,cAAc,KAClB,qBAuBD,CAAC"}

package/dist/harness/pi-rpc/authorization/projection.js

@@ -0,0 +1,195 @@
+import { createHash } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
+import { makeNodeRuntimeError } from "../../../runtime/errors.js";
+import { readPiRpcManifestEntryRows, readPiRpcManifestRow, readPiRpcPlanRow, } from "./database.js";
+import { requirePiRpcManifest } from "./policy.js";
+const requireOwnerKinds = (value) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        parsed = undefined;
+    }
+    if (Array.isArray(parsed) &&
+        parsed.length === 1 &&
+        parsed[0] === "pi-rpc-probe")
+        return ["pi-rpc-probe"];
+    if (Array.isArray(parsed) &&
+        parsed.length === 2 &&
+        parsed[0] === "pi-rpc-probe" &&
+        parsed[1] === "pi-rpc-session")
+        return ["pi-rpc-probe", "pi-rpc-session"];
+    throw makeNodeRuntimeError("storage_corrupt", "The persisted Pi RPC owner-kind set is invalid.");
+};
+const corruptManifest = () => {
+    throw makeNodeRuntimeError("storage_corrupt", "The persisted Pi RPC artifact manifest is invalid.");
+};
+const requireManifestEntries = (database, closureSha256) => readPiRpcManifestEntryRows(database, closureSha256).map((entry) => {
+    if (entry.executable !== 0 && entry.executable !== 1)
+        corruptManifest();
+    return { ...entry, executable: entry.executable === 1 };
+});
+const requireManifest = (database, closureSha256) => {
+    const manifest = readPiRpcManifestRow(database, closureSha256);
+    if (manifest === undefined)
+        throw makeNodeRuntimeError("storage_corrupt", "The persisted Pi RPC artifact manifest is missing.");
+    const entries = requireManifestEntries(database, closureSha256);
+    try {
+        requirePiRpcManifest({
+            ...manifest,
+            entries,
+            packageRootIdentity: {
+                device: manifest.packageRootDevice,
+                inode: manifest.packageRootInode,
+            },
+        });
+    }
+    catch {
+        corruptManifest();
+    }
+    return manifest;
+};
+const corruptPlan = () => {
+    throw makeNodeRuntimeError("storage_corrupt", "The persisted Pi RPC integration plan is invalid.");
+};
+const executableIdentity = (identity) => ({
+    entryIdentity: {
+        device: identity.entryDevice,
+        inode: identity.entryInode,
+        sizeBytes: identity.entrySizeBytes,
+    },
+    entryPath: identity.entryPath,
+    entrySha256: identity.entrySha256,
+    interpreterArchitecture: identity.interpreterArchitecture,
+    interpreterIdentity: {
+        device: identity.interpreterDevice,
+        inode: identity.interpreterInode,
+        sizeBytes: identity.interpreterSizeBytes,
+    },
+    interpreterPath: identity.interpreterPath,
+    interpreterSha256: identity.interpreterSha256,
+});
+const artifactProjection = (manifest, identity) => ({
+    closureSha256: manifest.closureSha256,
+    ...executableIdentity(identity),
+    excludedBinEntryCount: manifest.excludedBinEntryCount,
+    fileCount: manifest.fileCount,
+    interpreterVersion: "24.19.0",
+    manifestBytes: manifest.manifestBytes,
+    packageManifestSha256: manifest.packageManifestSha256,
+    packageName: manifest.packageName,
+    packageRootIdentity: {
+        device: manifest.packageRootDevice,
+        inode: manifest.packageRootInode,
+    },
+    packageRootPath: manifest.packageRootPath,
+    packageVersion: manifest.packageVersion,
+    totalBytes: manifest.totalBytes,
+});
+const buildPlanProjection = (database, row) => ({
+    createdAt: row.createdAt,
+    expiresAt: row.expiresAt,
+    integration: "pi-rpc",
+    planBytes: row.planBytes,
+    planDigest: row.planDigest,
+    planId: row.planId,
+    target: {
+        adapter: "pi-rpc",
+        adapterVersion: row.adapterVersion,
+        artifact: artifactProjection(requireManifest(database, row.closureSha256), row),
+        conversationPolicyRevision: row.conversationPolicyRevision,
+        ownerKinds: requireOwnerKinds(row.ownerKindsJson),
+        vouchPolicyRevision: row.vouchPolicyRevision,
+    },
+});
+const requirePlanIntegrity = (row, projection) => {
+    if (Buffer.byteLength(row.planJson, "utf8") !== row.planBytes ||
+        createHash("sha256").update(row.planJson).digest("hex") !== row.planDigest)
+        corruptPlan();
+    let parsed;
+    try {
+        parsed = JSON.parse(row.planJson);
+    }
+    catch {
+        corruptPlan();
+    }
+    if (!isDeepStrictEqual(parsed, {
+        integration: projection.integration,
+        target: projection.target,
+    }))
+        corruptPlan();
+};
+export const projectPiRpcPlan = (database, row) => {
+    const projection = buildPlanProjection(database, row);
+    requirePlanIntegrity(row, projection);
+    return projection;
+};
+const authorizationMatchesPlan = (authorization, plan) => authorization.planDigest === plan.planDigest &&
+    authorization.interpreterPath === plan.interpreterPath &&
+    authorization.interpreterDevice === plan.interpreterDevice &&
+    authorization.interpreterInode === plan.interpreterInode &&
+    authorization.interpreterSizeBytes === plan.interpreterSizeBytes &&
+    authorization.interpreterSha256 === plan.interpreterSha256 &&
+    authorization.interpreterArchitecture === plan.interpreterArchitecture &&
+    authorization.entryPath === plan.entryPath &&
+    authorization.entryDevice === plan.entryDevice &&
+    authorization.entryInode === plan.entryInode &&
+    authorization.entrySizeBytes === plan.entrySizeBytes &&
+    authorization.entrySha256 === plan.entrySha256 &&
+    authorization.packageRootPath === plan.packageRootPath &&
+    authorization.packageRootDevice === plan.packageRootDevice &&
+    authorization.packageRootInode === plan.packageRootInode &&
+    authorization.closureSha256 === plan.closureSha256 &&
+    authorization.adapterVersion === plan.adapterVersion &&
+    authorization.ownerKindsJson === plan.ownerKindsJson &&
+    authorization.conversationPolicyRevision ===
+        plan.conversationPolicyRevision &&
+    authorization.vouchPolicyRevision === plan.vouchPolicyRevision;
+const requireAuthorizationPlan = (database, row) => {
+    const plan = readPiRpcPlanRow(database, row.planId);
+    if (plan === undefined)
+        return corruptPlan();
+    if (!authorizationMatchesPlan(row, plan))
+        return corruptPlan();
+    return projectPiRpcPlan(database, plan);
+};
+export const projectPiRpcAuthorization = (database, row) => {
+    const plan = requireAuthorizationPlan(database, row);
+    return {
+        adapterVersion: row.adapterVersion,
+        artifact: plan.target.artifact,
+        conversationPolicyRevision: row.conversationPolicyRevision,
+        ownerKinds: requireOwnerKinds(row.ownerKindsJson),
+        planDigest: row.planDigest,
+        planId: row.planId,
+        revision: row.authorizationRevision.toString(),
+        state: row.state,
+        vouchPolicyRevision: row.vouchPolicyRevision,
+    };
+};
+export const projectPiRpcPermit = (row) => ({
+    adapterVersion: row.adapterVersion,
+    authorizationRevision: row.authorizationRevision.toString(),
+    closureSha256: row.closureSha256,
+    conversationPolicyRevision: row.conversationPolicyRevision,
+    ...(row.dispatchingAt === null ? {} : { dispatchingAt: row.dispatchingAt }),
+    entrySha256: row.entrySha256,
+    expiresAt: row.expiresAt,
+    fenceId: row.fenceId,
+    id: row.permitId,
+    interpreterSha256: row.interpreterSha256,
+    issuedAt: row.issuedAt,
+    ownerKind: row.ownerKind,
+    ...(row.processTreeId === null ? {} : { processTreeId: row.processTreeId }),
+    runtimeSessionId: row.runtimeSessionId,
+    scopeCommandId: row.scopeCommandId,
+    ...(row.startedAt === null ? {} : { startedAt: row.startedAt }),
+    state: row.state,
+    ...(row.terminalAt === null ? {} : { terminalAt: row.terminalAt }),
+    ...(row.terminalReason === null
+        ? {}
+        : { terminalReason: row.terminalReason }),
+    vouchPolicyRevision: row.vouchPolicyRevision,
+});
+//# sourceMappingURL=projection.js.map

package/dist/harness/pi-rpc/authorization/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../../src/harness/pi-rpc/authorization/projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,EAKL,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAQnD,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAA6B,EAAE;IACrE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IACE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,MAAM,CAAC,CAAC,CAAC,KAAK,cAAc;QAE5B,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1B,IACE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,MAAM,CAAC,CAAC,CAAC,KAAK,cAAc;QAC5B,MAAM,CAAC,CAAC,CAAC,KAAK,gBAAgB;QAE9B,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC5C,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,iDAAiD,CAClD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,GAAU,EAAE;IAClC,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,oDAAoD,CACrD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,QAAsB,EACtB,aAAqB,EACrB,EAAE,CACF,0BAA0B,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IAChE,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;QAAE,eAAe,EAAE,CAAC;IACxE,OAAO,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,CACtB,QAAsB,EACtB,aAAqB,EACH,EAAE;IACpB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS;QACxB,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,oDAAoD,CACrD,CAAC;IACJ,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,oBAAoB,CAAC;YACnB,GAAG,QAAQ;YACX,OAAO;YACP,mBAAmB,EAAE;gBACnB,MAAM,EAAE,QAAQ,CAAC,iBAAiB;gBAClC,KAAK,EAAE,QAAQ,CAAC,gBAAgB;aACjC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,eAAe,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,GAAU,EAAE;IAC9B,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,mDAAmD,CACpD,CAAC;AACJ,CAAC,CAAC;AAiBF,MAAM,kBAAkB,GAAG,CAAC,QAA0B,EAAE,EAAE,CAAC,CAAC;IAC1D,aAAa,EAAE;QACb,MAAM,EAAE,QAAQ,CAAC,WAAW;QAC5B,KAAK,EAAE,QAAQ,CAAC,UAAU;QAC1B,SAAS,EAAE,QAAQ,CAAC,cAAc;KACnC;IACD,SAAS,EAAE,QAAQ,CAAC,SAAS;IAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;IACjC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;IACzD,mBAAmB,EAAE;QACnB,MAAM,EAAE,QAAQ,CAAC,iBAAiB;QAClC,KAAK,EAAE,QAAQ,CAAC,gBAAgB;QAChC,SAAS,EAAE,QAAQ,CAAC,oBAAoB;KACzC;IACD,eAAe,EAAE,QAAQ,CAAC,eAAe;IACzC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;CAC9C,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,QAA0B,EAC1B,QAA0B,EAC1B,EAAE,CAAC,CAAC;IACJ,aAAa,EAAE,QAAQ,CAAC,aAAa;IACrC,GAAG,kBAAkB,CAAC,QAAQ,CAAC;IAC/B,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;IACrD,SAAS,EAAE,QAAQ,CAAC,SAAS;IAC7B,kBAAkB,EAAE,SAAkB;IACtC,aAAa,EAAE,QAAQ,CAAC,aAAa;IACrC,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;IACrD,WAAW,EAAE,QAAQ,CAAC,WAAW;IACjC,mBAAmB,EAAE;QACnB,MAAM,EAAE,QAAQ,CAAC,iBAAiB;QAClC,KAAK,EAAE,QAAQ,CAAC,gBAAgB;KACjC;IACD,eAAe,EAAE,QAAQ,CAAC,eAAe;IACzC,cAAc,EAAE,QAAQ,CAAC,cAAc;IACvC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAChC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAC1B,QAAsB,EACtB,GAAiB,EACW,EAAE,CAAC,CAAC;IAChC,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,WAAW,EAAE,QAAQ;IACrB,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,UAAU,EAAE,GAAG,CAAC,UAAU;IAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,MAAM,EAAE;QACN,OAAO,EAAE,QAAQ;QACjB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,QAAQ,EAAE,kBAAkB,CAC1B,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,aAAa,CAAC,EAC5C,GAAG,CACJ;QACD,0BAA0B,EAAE,GAAG,CAAC,0BAA0B;QAC1D,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC;QACjD,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;KAC7C;CACF,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAC3B,GAAiB,EACjB,UAAsC,EAChC,EAAE;IACR,IACE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,SAAS;QACzD,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,UAAU;QAE1E,WAAW,EAAE,CAAC;IAChB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,EAAE,CAAC;IAChB,CAAC;IACD,IACE,CAAC,iBAAiB,CAAC,MAAM,EAAE;QACzB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC;QAEF,WAAW,EAAE,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,QAAsB,EACtB,GAAiB,EACW,EAAE;IAC9B,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtD,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,aAAoC,EACpC,IAAkB,EACT,EAAE,CACX,aAAa,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;IAC5C,aAAa,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe;IACtD,aAAa,CAAC,iBAAiB,KAAK,IAAI,CAAC,iBAAiB;IAC1D,aAAa,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;IACxD,aAAa,CAAC,oBAAoB,KAAK,IAAI,CAAC,oBAAoB;IAChE,aAAa,CAAC,iBAAiB,KAAK,IAAI,CAAC,iBAAiB;IAC1D,aAAa,CAAC,uBAAuB,KAAK,IAAI,CAAC,uBAAuB;IACtE,aAAa,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;IAC1C,aAAa,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;IAC9C,aAAa,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;IAC5C,aAAa,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;IACpD,aAAa,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;IAC9C,aAAa,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe;IACtD,aAAa,CAAC,iBAAiB,KAAK,IAAI,CAAC,iBAAiB;IAC1D,aAAa,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;IACxD,aAAa,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa;IAClD,aAAa,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;IACpD,aAAa,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;IACpD,aAAa,CAAC,0BAA0B;QACtC,IAAI,CAAC,0BAA0B;IACjC,aAAa,CAAC,mBAAmB,KAAK,IAAI,CAAC,mBAAmB,CAAC;AAEjE,MAAM,wBAAwB,GAAG,CAC/B,QAAsB,EACtB,GAA0B,EACE,EAAE;IAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,WAAW,EAAE,CAAC;IAC7C,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,OAAO,WAAW,EAAE,CAAC;IAC/D,OAAO,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,QAAsB,EACtB,GAA0B,EACI,EAAE;IAChC,MAAM,IAAI,GAAG,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO;QACL,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;QAC9B,0BAA0B,EAAE,GAAG,CAAC,0BAA0B;QAC1D,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC;QACjD,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,qBAAqB,CAAC,QAAQ,EAAE;QAC9C,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;KAC7C,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,GAAmB,EACI,EAAE,CAAC,CAAC;IAC3B,cAAc,EAAE,GAAG,CAAC,cAAc;IAClC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,CAAC,QAAQ,EAAE;IAC3D,aAAa,EAAE,GAAG,CAAC,aAAa;IAChC,0BAA0B,EAAE,GAAG,CAAC,0BAA0B;IAC1D,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;IAC3E,WAAW,EAAE,GAAG,CAAC,WAAW;IAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,OAAO,EAAE,GAAG,CAAC,OAAO;IACpB,EAAE,EAAE,GAAG,CAAC,QAAQ;IAChB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;IACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ;IACtB,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;IAC3E,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;IACtC,cAAc,EAAE,GAAG,CAAC,cAAc;IAClC,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/D,KAAK,EAAE,GAAG,CAAC,KAAK;IAChB,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IAClE,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC;IAC3C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;CAC7C,CAAC,CAAC"}

package/dist/harness/pi-rpc/authorization/recovery-store.d.ts

@@ -0,0 +1,3 @@
+import type { DatabaseSync } from "node:sqlite";
+export declare const recoverPiRpcAuthorizationStorage: (database: DatabaseSync, recordedAt: string) => void;
+//# sourceMappingURL=recovery-store.d.ts.map

package/dist/harness/pi-rpc/authorization/recovery-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-store.d.ts","sourceRoot":"","sources":["../../../../src/harness/pi-rpc/authorization/recovery-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA6FhD,eAAO,MAAM,gCAAgC,GAC3C,UAAU,YAAY,EACtB,YAAY,MAAM,KACjB,IAoBF,CAAC"}

package/dist/harness/pi-rpc/authorization/recovery-store.js

@@ -0,0 +1,63 @@
+import { createHash } from "node:crypto";
+import { makeNodeRuntimeError } from "../../../runtime/errors.js";
+import { countPiRpcUnsettledPermits, readLatestPiRpcAuthorization, } from "./database.js";
+import { listPiRpcUnsettledPermits, settlePiRpcIntegrationPermit, } from "./permit-store.js";
+import { PI_RPC_MAX_UNSETTLED_PER_AUTHORIZATION } from "./policy.js";
+const digest = (value) => createHash("sha256").update(JSON.stringify(value)).digest("hex");
+const issuedRecoveryReason = (permit, recordedAtMs) => recordedAtMs >= Date.parse(permit.expiresAt) ? "expired" : "failed";
+const recoveryReason = (permit, recordedAtMs) => permit.state === "issued"
+    ? issuedRecoveryReason(permit, recordedAtMs)
+    : "cleanup_unknown";
+const recoveryIdentity = (authorizationRevision, permit, reason) => {
+    const identity = {
+        authorizationRevision,
+        permitId: permit.id,
+        phase: "startup-recovery",
+        reason,
+        state: permit.state,
+    };
+    const identityDigest = digest(identity);
+    return {
+        commandId: `pi.recover.${identityDigest.slice(0, 48)}`,
+        requestDigest: identityDigest,
+    };
+};
+const requireRecoveryPermits = (database, revision, unsettledCount) => {
+    if (unsettledCount > PI_RPC_MAX_UNSETTLED_PER_AUTHORIZATION) {
+        throw makeNodeRuntimeError("storage_conflict", "The Pi RPC startup recovery set exceeds its hard bound.");
+    }
+    const permits = listPiRpcUnsettledPermits(database, revision, PI_RPC_MAX_UNSETTLED_PER_AUTHORIZATION + 1);
+    if (permits.length === unsettledCount)
+        return permits;
+    throw makeNodeRuntimeError("storage_conflict", "The Pi RPC startup recovery set is inconsistent.");
+};
+const settleRecoveredPermit = (input) => {
+    const reason = recoveryReason(input.permit, input.recordedAtMs);
+    settlePiRpcIntegrationPermit(input.database, {
+        ...recoveryIdentity(input.revision, input.permit, reason),
+        permitId: input.permit.id,
+        reason,
+        recordedAt: input.recordedAt,
+    });
+};
+export const recoverPiRpcAuthorizationStorage = (database, recordedAt) => {
+    const latest = readLatestPiRpcAuthorization(database);
+    if (latest === undefined)
+        return;
+    const revision = latest.authorizationRevision.toString();
+    const unsettledCount = countPiRpcUnsettledPermits(database, latest.authorizationRevision);
+    if (unsettledCount === 0)
+        return;
+    const permits = requireRecoveryPermits(database, revision, unsettledCount);
+    const recordedAtMs = Date.parse(recordedAt);
+    permits.forEach((permit) => {
+        settleRecoveredPermit({
+            database,
+            permit,
+            recordedAt,
+            recordedAtMs,
+            revision,
+        });
+    });
+};
+//# sourceMappingURL=recovery-store.js.map

package/dist/harness/pi-rpc/authorization/recovery-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-store.js","sourceRoot":"","sources":["../../../../src/harness/pi-rpc/authorization/recovery-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAMrE,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE,CACxC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnE,MAAM,oBAAoB,GAAG,CAC3B,MAA6B,EAC7B,YAAoB,EACE,EAAE,CACxB,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AAEtE,MAAM,cAAc,GAAG,CACrB,MAA6B,EAC7B,YAAoB,EACO,EAAE,CAC7B,MAAM,CAAC,KAAK,KAAK,QAAQ;IACvB,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC;IAC5C,CAAC,CAAC,iBAAiB,CAAC;AAExB,MAAM,gBAAgB,GAAG,CACvB,qBAA6B,EAC7B,MAA6B,EAC7B,MAAiC,EACjC,EAAE;IACF,MAAM,QAAQ,GAAG;QACf,qBAAqB;QACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,KAAK,EAAE,kBAAkB;QACzB,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;KACX,CAAC;IACX,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO;QACL,SAAS,EAAE,cAAc,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACtD,aAAa,EAAE,cAAc;KAC9B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,QAAsB,EACtB,QAAgB,EAChB,cAAsB,EACY,EAAE;IACpC,IAAI,cAAc,GAAG,sCAAsC,EAAE,CAAC;QAC5D,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,yBAAyB,CACvC,QAAQ,EACR,QAAQ,EACR,sCAAsC,GAAG,CAAC,CAC3C,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC;IACtD,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,kDAAkD,CACnD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,KAM9B,EAAQ,EAAE;IACT,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC3C,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;QACzD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;QACzB,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,QAAsB,EACtB,UAAkB,EACZ,EAAE;IACR,MAAM,MAAM,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO;IACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CAAC;IACzD,MAAM,cAAc,GAAG,0BAA0B,CAC/C,QAAQ,EACR,MAAM,CAAC,qBAAqB,CAC7B,CAAC;IACF,IAAI,cAAc,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACzB,qBAAqB,CAAC;YACpB,QAAQ;YACR,MAAM;YACN,UAAU;YACV,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/harness/pi-rpc/authorization/replay-store.d.ts

@@ -0,0 +1,11 @@
+import type { DatabaseSync } from "node:sqlite";
+import type { PiRpcCommandInput, PiRpcReplayMethod, PiRpcReplayResult } from "./types.js";
+type ReplayOperation<TResult> = (() => TResult) | {
+    readonly onNewResult: (result: TResult) => void;
+    readonly run: () => TResult;
+};
+export declare const withPiRpcReplay: <TResult extends Record<string, unknown>>(database: DatabaseSync, input: PiRpcCommandInput & {
+    readonly method: PiRpcReplayMethod;
+}, operation: ReplayOperation<TResult>) => PiRpcReplayResult<TResult>;
+export {};
+//# sourceMappingURL=replay-store.d.ts.map

package/dist/harness/pi-rpc/authorization/replay-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-store.d.ts","sourceRoot":"","sources":["../../../../src/harness/pi-rpc/authorization/replay-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKhD,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAqCpB,KAAK,eAAe,CAAC,OAAO,IACxB,CAAC,MAAM,OAAO,CAAC,GACf;IACE,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC;CAC7B,CAAC;AA8CN,eAAO,MAAM,eAAe,GAAI,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrE,UAAU,YAAY,EACtB,OAAO,iBAAiB,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,EACjE,WAAW,eAAe,CAAC,OAAO,CAAC,KAClC,iBAAiB,CAAC,OAAO,CAmB3B,CAAC"}

package/dist/harness/pi-rpc/authorization/replay-store.js

@@ -0,0 +1,60 @@
+import { makeNodeRuntimeError } from "../../../runtime/errors.js";
+import { requirePiRpcCommandInput } from "./policy.js";
+const readReplay = (database, commandId) => database
+    .prepare(`SELECT method AS method, request_digest AS requestDigest,
+        result_json AS resultJson
+       FROM pi_rpc_authorization_command_replays WHERE command_id = ?`)
+    .get(commandId);
+const parseReplay = (row) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(row.resultJson);
+    }
+    catch {
+        parsed = undefined;
+    }
+    if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed))
+        return { ...parsed, delivery: "duplicate" };
+    throw makeNodeRuntimeError("storage_corrupt", "The Pi RPC authorization replay result is invalid.");
+};
+const requireMatchingReplay = (existing, input) => {
+    if (existing.method === input.method &&
+        existing.requestDigest === input.requestDigest)
+        return;
+    throw makeNodeRuntimeError("storage_conflict", "The Pi RPC command identifier was reused with different input.");
+};
+const runReplayOperation = (operation) => {
+    const result = typeof operation === "function" ? operation() : operation.run();
+    if (typeof operation !== "function")
+        operation.onNewResult(result);
+    return result;
+};
+const insertReplay = (database, input, result) => {
+    database
+        .prepare(`INSERT INTO pi_rpc_authorization_command_replays(
+        command_id, method, request_digest, result_json, created_at
+      ) VALUES (?, ?, ?, ?, ?)`)
+        .run(input.commandId, input.method, input.requestDigest, JSON.stringify(result), input.recordedAt);
+};
+export const withPiRpcReplay = (database, input, operation) => {
+    requirePiRpcCommandInput(input);
+    database.exec("BEGIN IMMEDIATE");
+    try {
+        const existing = readReplay(database, input.commandId);
+        if (existing !== undefined) {
+            requireMatchingReplay(existing, input);
+            const replay = parseReplay(existing);
+            database.exec("COMMIT");
+            return replay;
+        }
+        const result = runReplayOperation(operation);
+        insertReplay(database, input, result);
+        database.exec("COMMIT");
+        return { ...result, delivery: "new" };
+    }
+    catch (error) {
+        database.exec("ROLLBACK");
+        throw error;
+    }
+};
+//# sourceMappingURL=replay-store.js.map

package/dist/harness/pi-rpc/authorization/replay-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-store.js","sourceRoot":"","sources":["../../../../src/harness/pi-rpc/authorization/replay-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAavD,MAAM,UAAU,GAAG,CACjB,QAAsB,EACtB,SAAiB,EACM,EAAE,CACzB,QAAQ;KACL,OAAO,CACN;;sEAEgE,CACjE;KACA,GAAG,CAAC,SAAS,CAA0B,CAAC;AAE7C,MAAM,WAAW,GAAG,CAClB,GAAc,EACc,EAAE;IAC9B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACzE,OAAO,EAAE,GAAI,MAAkB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IAC3D,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,oDAAoD,CACrD,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,qBAAqB,GAAG,CAC5B,QAAmB,EACnB,KAAiE,EAC3D,EAAE;IACR,IACE,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAChC,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;QAE9C,OAAO;IACT,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,gEAAgE,CACjE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,SAAmC,EAC1B,EAAE;IACX,MAAM,MAAM,GACV,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;IAClE,IAAI,OAAO,SAAS,KAAK,UAAU;QAAE,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,QAAsB,EACtB,KAAiE,EACjE,MAA+B,EACzB,EAAE;IACR,QAAQ;SACL,OAAO,CACN;;+BAEyB,CAC1B;SACA,GAAG,CACF,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,aAAa,EACnB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,KAAK,CAAC,UAAU,CACjB,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,QAAsB,EACtB,KAAiE,EACjE,SAAmC,EACP,EAAE;IAC9B,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,WAAW,CAAU,QAAQ,CAAC,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC7C,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC"}

package/dist/harness/pi-rpc/authorization/types.d.ts

@@ -0,0 +1,117 @@
+export declare const PI_RPC_INTEGRATION = "pi-rpc";
+export declare const PI_RPC_OWNER_KINDS: readonly ["pi-rpc-probe", "pi-rpc-session"];
+export type PiRpcOwnerKind = (typeof PI_RPC_OWNER_KINDS)[number];
+export type PiRpcAuthorizationState = "active" | "cleanup_unknown" | "replaced" | "revoked" | "revoking";
+export type PiRpcPermitState = "dispatching" | "issued" | "started" | "terminal";
+export type PiRpcPermitTerminalReason = "cleanup_unknown" | "completed" | "expired" | "failed" | "revoked_after_start" | "revoked_before_start" | "stale_policy" | "stale_revision";
+export type PiRpcArtifactManifestEntry = {
+    readonly byteCount: number;
+    readonly executable: boolean;
+    readonly ordinal: number;
+    readonly relativePath: string;
+    readonly sha256: string;
+};
+export type PiRpcArtifactManifest = {
+    readonly closureSha256: string;
+    readonly entries: readonly PiRpcArtifactManifestEntry[];
+    readonly excludedBinEntryCount: number;
+    readonly fileCount: number;
+    readonly manifestBytes: number;
+    readonly packageManifestSha256: string;
+    readonly packageName: string;
+    readonly packageRootIdentity: {
+        readonly device: number;
+        readonly inode: number;
+    };
+    readonly packageRootPath: string;
+    readonly packageVersion: string;
+    readonly totalBytes: number;
+};
+export type PiRpcIntegrationPlanTarget = {
+    readonly adapterVersion: string;
+    readonly artifact: PiRpcArtifactManifest & {
+        readonly entryIdentity: {
+            readonly device: number;
+            readonly inode: number;
+            readonly sizeBytes: number;
+        };
+        readonly entryPath: string;
+        readonly entrySha256: string;
+        readonly interpreterArchitecture: "arm64" | "x64";
+        readonly interpreterIdentity: {
+            readonly device: number;
+            readonly inode: number;
+            readonly sizeBytes: number;
+        };
+        readonly interpreterPath: string;
+        readonly interpreterSha256: string;
+        readonly interpreterVersion: "24.19.0";
+    };
+    readonly conversationPolicyRevision: string;
+    readonly ownerKinds: readonly PiRpcOwnerKind[];
+    readonly vouchPolicyRevision: string;
+};
+export type PiRpcIntegrationPlanRecord = {
+    readonly createdAt: string;
+    readonly expiresAt: string;
+    readonly integration: "pi-rpc";
+    readonly planBytes: number;
+    readonly planDigest: string;
+    readonly planId: string;
+    readonly target: {
+        readonly adapter: "pi-rpc";
+        readonly adapterVersion: string;
+        readonly artifact: Omit<PiRpcIntegrationPlanTarget["artifact"], "entries">;
+        readonly conversationPolicyRevision: string;
+        readonly ownerKinds: readonly PiRpcOwnerKind[];
+        readonly vouchPolicyRevision: string;
+    };
+};
+export type PiRpcPolicyRevisionSnapshot = {
+    readonly adapterVersion: string;
+    readonly conversationPolicyRevision: string;
+    readonly vouchPolicyRevision: string;
+};
+export type PiRpcAuthorizationProjection = {
+    readonly adapterVersion: string;
+    readonly artifact: Omit<PiRpcIntegrationPlanTarget["artifact"], "entries">;
+    readonly conversationPolicyRevision: string;
+    readonly ownerKinds: readonly PiRpcOwnerKind[];
+    readonly planDigest: string;
+    readonly planId: string;
+    readonly revision: string;
+    readonly state: PiRpcAuthorizationState;
+    readonly vouchPolicyRevision: string;
+};
+export type PiRpcPermitProjection = {
+    readonly adapterVersion: string;
+    readonly authorizationRevision: string;
+    readonly closureSha256: string;
+    readonly conversationPolicyRevision: string;
+    readonly dispatchingAt?: string;
+    readonly entrySha256: string;
+    readonly expiresAt: string;
+    readonly fenceId: string;
+    readonly id: string;
+    readonly interpreterSha256: string;
+    readonly issuedAt: string;
+    readonly ownerKind: PiRpcOwnerKind;
+    readonly processTreeId?: string;
+    readonly runtimeSessionId: string;
+    readonly scopeCommandId: string;
+    readonly startedAt?: string;
+    readonly state: PiRpcPermitState;
+    readonly terminalAt?: string;
+    readonly terminalReason?: PiRpcPermitTerminalReason;
+    readonly vouchPolicyRevision: string;
+};
+export type PiRpcCommandInput = {
+    readonly commandId: string;
+    readonly recordedAt: string;
+    readonly requestDigest: string;
+};
+export type PiRpcReplayMethod = "integration.apply.pi-rpc" | "integration.permit.dispatch.pi-rpc" | "integration.permit.issue.pi-rpc" | "integration.permit.settle.pi-rpc" | "integration.permit.start.pi-rpc" | "integration.plan.pi-rpc" | "integration.remove.pi-rpc" | "integration.remove.settle.pi-rpc";
+export type PiRpcReplayResult<T> = T & {
+    readonly delivery: "duplicate" | "new";
+};
+//# sourceMappingURL=types.d.ts.map