@mcp-index/sdk 0.14.0 → 0.15.0

package/CHANGELOG.md

@@ -1,10 +1,32 @@
-# Changelog — @mcp-index/sdk
+# Changelog - @mcp-index/sdk
 
 All notable changes to the TypeScript SDK. Versioning is semver (0.x: minor =
 additive feature, patch = fix). Backward-compatible additions only in 0.2.0.
 
 ## [Unreleased]
 
+## 0.15.0 - 2026-10-05
+
+### Changed
+
+- Under guard and strict, a tool whose description or input-schema text changed is left out of the tool list, and a call to that tool holds until it is reviewed.
+- Monitor still shows the full list.
+- When you pass a `serverId`, pins are kept on disk by default, under `MCPINDEX_STATE_DIR/pins/<server id>.json` or `~/.mcpindex/pins/<server id>.json`, and survive a restart. Without a `serverId` they stay in memory, as before, so unnamed sessions never share a pin file. `pinStore: "memory"` or `pinStore: "file"` overrides either default.
+- These fields are not yet covered, so a change in only one of them still reaches the host: tool title, icons, _meta, annotations.title, a new annotation key, and first-time outputSchema text on an otherwise unchanged tool.
+- The SDK client's listChanged refresh calls the inner client, so that refresh is not filtered.
+- A list longer than 2,000 tools, or a list the gate cannot filter, comes back with every tool left out. It does not throw.
+
+## 0.14.1 - 2026-10-04
+
+### Security
+
+- Fixes GHSA-g737-65vx-q7qm (https://github.com/mcpindex-ai/mcpindex-sdk-ts/security/advisories/GHSA-g737-65vx-q7qm), cases where a changed tool contract was treated as unchanged or auto-accepted. Affected: @mcp-index/sdk < 0.14.1 and mcpindex-gate < 0.16.1.
+
+### Changed
+
+- Some changes that used to auto-accept now hold for review.
+- Tool hashes for existing pins are unchanged.
+
 ## 0.14.0 - 2026-10-02
 
 ### Changed
@@ -122,7 +144,7 @@ classifications on the measured corpus.
 
 New export: `isNumericOnlyDescriptionChange(before, after)`.
 
-## 0.10.0 — 2026-08-05
+## 0.10.0 - 2026-08-05
 
 **The HOLD text an agent reads is now separate from the one a human reads.** Behaviour
 change on a shipped surface: `PreflightHold.message` (and the proxy's JSON-RPC error
@@ -130,22 +152,22 @@ change on a shipped surface: `PreflightHold.message` (and the proxy's JSON-RPC e
 
 Why: on 2026-08-05 a frontier model met a real HOLD, classified the banner as a
 prompt-injection attempt, refused to act on it, retried the held call, and told the user
-something suspicious was intercepting its tools. Its load-bearing objection was not tone —
+something suspicious was intercepting its tools. Its load-bearing objection was not tone -
 it could not verify us. The gate diffs the pin against the LIVE contract while the agent
 sees only its own cached tool list, a third view that legitimately disagrees. We were
 asserting a change the reader could not observe and then inviting it to act, which is the
 shape of a manipulation attempt. Refusing was correct behaviour.
 
-- **Added** `renderHoldMessage()` — the agent-facing text. Renders the drift as an evidence
+- **Added** `renderHoldMessage()` - the agent-facing text. Renders the drift as an evidence
   block (tool / change + path / effect / call sent), names the stale-tool-list mismatch
   before the agent trips over it, and states the disposition without inviting any action.
-- **Added** `PreflightHold.presentation` — the human brand banner, kept off `message`.
+- **Added** `PreflightHold.presentation` - the human brand banner, kept off `message`.
   `String(err)` is what a builder is most likely to hand to a model.
-- **Unchanged** `renderHoldBanner()` and `holdBanner()` — same text, same meaning, for
+- **Unchanged** `renderHoldBanner()` and `holdBanner()` - same text, same meaning, for
   humans and hosts.
-- **Security:** the agent-facing message may only CONSTRAIN. `[Review · Re-pin · Validate]`
-  invited the reader toward `repin()` — the one action that makes a changed contract the
-  new trusted baseline — on a channel the agent must treat as attacker-controlled. That is
+- **Security:** the agent-facing message may only CONSTRAIN. `[Review | Re-pin | Validate]`
+  invited the reader toward `repin()` - the one action that makes a changed contract the
+  new trusted baseline - on a channel the agent must treat as attacker-controlled. That is
   the text an attacker would forge; forging "stop and ask your human" earns them nothing.
 - **Security:** no defence was traded away to get there. `mdText` escaping and
   `redactGreenWords` now run per untrusted value rather than over the whole render, so they
@@ -153,13 +175,13 @@ shape of a manipulation attempt. Refusing was correct behaviour.
   (`VALUE_CHAR_CAP`), closing an unbounded-render vector a security audit measured at 5.2 MB
   from a 1.6 MB hostile tool name.
 - **Fixed** (audit HIGH) `holdBanner()` fell through to the full detail banner when the
-  provenance choke refused or on an internal-error verdict — asserting a specific contract
+  provenance choke refused or on an internal-error verdict - asserting a specific contract
   change that, in the latter case, never happened. It now returns the generic notice, as
   Python always did.
 - **Fixed** evidence rows sort by codepoint, not `localeCompare`, so the two SDKs cannot
   render different evidence for identical drift.
 
-## 0.9.2 — 2026-07-29
+## 0.9.2 - 2026-07-29
 
 Copy only, no behaviour change.
 
@@ -170,22 +192,22 @@ Copy only, no behaviour change.
 - `package.json` description likewise names mcpindex.ai + the category; added
   `mcpindex` keyword. Lockfile version resynced (was stale at 0.7.0).
 
-## 0.9.1 — 2026-07-18
+## 0.9.1 - 2026-07-18
 
 ### Fixed
-- **`wrap(session)` now works with no options — the README quickstart is honest
+- **`wrap(session)` now works with no options - the README quickstart is honest
   again.** `pin` and `serverId` are now OPTIONAL: when omitted, `wrap()` creates an
   ephemeral in-memory `PreflightPin()` under the new `DEFAULT_SERVER_ID` ("mcp") and
   pins each tool trust-on-first-use. Previously `wrap(session)` threw
   `TypeError: Cannot read properties of undefined (reading 'pin')`, and
   `wrap(session, { scanResults: true, onHold })` (no pin/serverId) HELD **every** call
   with the internal-error banner. Security posture is unchanged: a missing pin
-  pins-on-first-use (TOFU) and HOLDs on drift — it never fails open. Pass an explicit
+  pins-on-first-use (TOFU) and HOLDs on drift - it never fails open. Pass an explicit
   `{ pin, serverId }` for a durable/shared baseline or fleet telemetry.
 - Exported `DEFAULT_SERVER_ID` for callers that want to reference the default pin
   namespace explicitly.
 
-## 0.9.0 — 2026-07-14
+## 0.9.0 - 2026-07-14
 
 ### Added
 - **`mcpindex login` CLI.** New `mcpindex` bin with `login` / `whoami`. `login` opens
@@ -195,14 +217,14 @@ Copy only, no behaviour change.
   callback is bound to a per-session nonce carried in the loopback path (closes
   key-fixation); the key never transits a third party. `MCPINDEX_WEB_BASE` overrides the
   default host. `whoami` reports sign-in state without ever printing the key.
-- **`--provider github|google`** on `mcpindex login` (default `github`) — selects the
+- **`--provider github|google`** on `mcpindex login` (default `github`) - selects the
   identity provider; the loopback/nonce handoff is provider-agnostic.
 
-## 0.7.0 — 2026-07-12
+## 0.7.0 - 2026-07-12
 
 ### Added
 - **Result-content scanning (`scanResults`).** New opt-in gate that scans tool
-  RESULT content — text blocks and `structuredContent` — for prompt-injection,
+  RESULT content - text blocks and `structuredContent` - for prompt-injection,
   exfiltration, and credential-path markers, giving TS parity with the Python
   client. **Default OFF** (zero behavior change): a hostile result passes through
   untouched unless enabled. When ON, a tainted result is WITHHELD under `GUARD`/
@@ -221,12 +243,12 @@ Copy only, no behaviour change.
   `resource_link` URI is no longer a false positive; the scan budget is shared
   across `content[]` + structured so a large result can't evade the cap.
 
-## 0.6.1 — 2026-06-11
+## 0.6.1 - 2026-06-11
 
 ### Added
 - **Read-only `lookup` telemetry mode.** `MCPINDEX_DRIFT_TELEMETRY` gains `lookup`
   (vocabulary is now `off | lookup | detection | contribute`). `lookup` RECEIVES fleet
-  drift warnings (the salted-fingerprint query) while SENDING nothing — the gate splits the
+  drift warnings (the salted-fingerprint query) while SENDING nothing - the gate splits the
   former single switch into `readEnabled()` (any non-off mode) and `sendEnabled()`
   (detection/contribute only), with a re-check at the enqueue boundary. Cross-language
   parity with the Python client. Default stays `off` (zero egress).
@@ -236,7 +258,7 @@ Copy only, no behaviour change.
   list) now name the `sdk` tag (`py`/`ts`) that the wire payload already includes, and
   document `lookup` as low-egress (not zero-egress). Kept byte-identical to the Python notice.
 
-## 0.6.0 — 2026-06-09
+## 0.6.0 - 2026-06-09
 
 ### Added
 - **Fleet drift query (M3, "warns you on call 1").** On first pin the gate fire-and-forgets a
@@ -246,11 +268,11 @@ Copy only, no behaviour change.
   fingerprint is the one already emitted), fail-open, AD-6-safe (never moves PROCEED/HOLD;
   redirects hard-off). Exported: `driftQuery`, `FleetAdvisory`; surfaced by `renderVerdict`.
 
-## 0.5.0 — 2026-06-09
+## 0.5.0 - 2026-06-09
 
 ### Added
 - **Drift telemetry (M1, opt-in, OFF by default).** On a tool pin or a contract drift the
-  gate can emit one one-way signal — salted (HMAC) fingerprints of the server/tool id, the
+  gate can emit one one-way signal - salted (HMAC) fingerprints of the server/tool id, the
   contract hashes, the change type, a safety flag, an hour-rounded time, and a random install
   id. Never a schema, argument, description, URL, or server/tool name. Enable with
   `MCPINDEX_DRIFT_TELEMETRY=detection`; fail-open (never blocks or changes a tool call). The
@@ -261,45 +283,45 @@ Copy only, no behaviour change.
   classification) shipped in 0.4.0, with the `MCPINDEX_ACTION_CLASSIFICATION_ENABLED=0`
   opt-out. (0.4.0 published before the README caught up.)
 
-## 0.4.0 — 2026-06-08
+## 0.4.0 - 2026-06-08
 
 ### Added
 - **Local Tier-0a action classification (blast radius).** The gate now COMPUTES the
-  advisory `actionClassification` block locally from the live tool definition — action
-  type, resource, side-effect, reversibility, egress, and a static autonomy ceiling —
+  advisory `actionClassification` block locally from the live tool definition - action
+  type, resource, side-effect, reversibility, egress, and a static autonomy ceiling -
   instead of leaving it `null` until a hosted verdict supplied one. So the blast-radius
   grade is on by default in the SDK, at parity with the Python `mcpindex-gate`
   client. Default-on; opt out with `MCPINDEX_ACTION_CLASSIFICATION_ENABLED=0`. Pure,
   deterministic, total, and a byte-for-byte port of the Python `cse.action_class.classify`
-  (12-case cross-language golden parity test). **Advisory only** — it rides alongside the
+  (12-case cross-language golden parity test). **Advisory only** - it rides alongside the
   decision and never moves `PROCEED`/`HOLD` (AD-1). New exports: `classifyAction`,
   `classifyToolDef`, `actionClassificationEnabled`, and the `ActionType` /
   `SideEffectClass` / `Reversibility` / `Egress` / `ScopeHint` / `PatternShape` /
   `AutonomyCeiling` / `NoteClass` / `Severity` / `EvidenceRefType` enums.
 
-## 0.3.2 — 2026-06-08
+## 0.3.2 - 2026-06-08
 
 ### Fixed
-- **Schema-content scanner no longer false-flags benign URLs** — the exfil tripwire
+- **Schema-content scanner no longer false-flags benign URLs** - the exfil tripwire
   (`scanSchemaHasMarker`) had a bare `https?://` rule that flagged any URL in a tool's
   declared schema as a CRITICAL exfil marker. A real crawl tripped it on a benign
   `web_url_reader` whose `url` param carried example URLs. A URL now signals exfil only
-  in an exfil-verb context (`forward … https://…`); example/doc URLs are clean.
+  in an exfil-verb context (`forward ... https://...`); example/doc URLs are clean.
   Credential-path and injection detection unchanged. Mirrors the Python `schema_scan` fix.
 
-## 0.3.1 — 2026-06-08
+## 0.3.1 - 2026-06-08
 
 ### Changed
-- **Ambient line reworded `watching` → `noted`** — `mcpindex · noted <server>/<tool> — …`.
+- **Ambient line reworded `watching` -> `noted`** - `mcpindex | noted <server>/<tool> - ...`.
   The previous "watching" read like surveillance *of the user*; "noted" frames it as
   mcpindex quietly keeping track on your behalf. Copy-only; behavior identical.
 
-## 0.3.0 — 2026-06-08
+## 0.3.0 - 2026-06-08
 
 ### Added
-- **Ambient presence (default-on).** A subtle, low-frequency `mcpindex · watching
+- **Ambient presence (default-on).** A subtle, low-frequency `mcpindex | watching
   <server>/<tool>` line on the gate's PROCEED path so a user remembers mcpindex is
-  working — first-touch per tool (one line per distinct tool, silent on repeats) plus a
+  working - first-touch per tool (one line per distinct tool, silent on repeats) plus a
   once-per-session summary. New `onInvocation` option on `wrap()` lets an integrator
   render the signal in their own UI. The first line carries `(silence:
   MCPINDEX_AMBIENT_NOTICE=off)` so the off-switch is always discoverable; cadence tunes
@@ -310,20 +332,20 @@ Copy only, no behaviour change.
   decision or a tool call's result (a HOLD emits nothing; a broken notifier is swallowed).
   New `ambient.ts` + 12 tests (incl. a stdout-stays-empty channel-safety assertion).
 
-## 0.2.0 — 2026-06-07
+## 0.2.0 - 2026-06-07
 
 ### Added
-- **`actionClassification` on `PreflightVerdict`** — the read-side mirror of the
+- **`actionClassification` on `PreflightVerdict`** - the read-side mirror of the
   server's Tier 0a advisory action-classification block: the *blast radius* of a tool
   call (action type, resource, side-effect, reversibility, egress, and a static
   autonomy ceiling). New exported `ActionClassification` type. Lets TS/JS consumers
   read the block off a verdict.
-  - **Advisory only** — it rides *alongside* the decision and never alters
+  - **Advisory only** - it rides *alongside* the decision and never alters
     `PROCEED`/`HOLD` (`isProceed` reads only `decision`).
-  - **Read-side only in this release** — the SDK does **not** yet *compute* the block
+  - **Read-side only in this release** - the SDK does **not** yet *compute* the block
     locally; the field is populated from a server/hosted verdict, else `null`. The
     local `classify()` port lands with the in-process interceptor (deferred).
-  - **Backward-compatible** — the field defaults to `null` in `makeVerdict`, so existing
+  - **Backward-compatible** - the field defaults to `null` in `makeVerdict`, so existing
     consumers are unaffected. The nested block uses the snake_case wire keys (the server
     JSON contract); the envelope stays camelCase.
 
@@ -334,6 +356,6 @@ Copy only, no behaviour change.
 
 ## 0.1.0
 
-- Initial release: pre-flight MCP tool-contract drift interceptor — `wrap()` over an
+- Initial release: pre-flight MCP tool-contract drift interceptor - `wrap()` over an
   MCP client session that HOLDs a tool call when the contract drifted from your pin.
   No credential handling.

package/README.md

@@ -3,7 +3,7 @@
 The TypeScript client of [mcpindex.ai](https://mcpindex.ai) - the drift-monitored
 MCP server index with an in-path trust gate for agent tool calls.
 
-Pre-flight MCP tool-contract drift interceptor. One line — `wrap()` an MCP client
+Pre-flight MCP tool-contract drift interceptor. One line - `wrap()` an MCP client
 session and the gate **HOLDs a tool call before your agent acts** the moment the
 tool's contract silently changes from what you pinned. In-path, on your host; no
 credentials, no egress.
@@ -29,21 +29,25 @@ const guarded = wrap(session);   // pins each tool's contract on first use (TOFU
 // Review / Re-pin / Validate.
 ```
 
-`wrap(session)` uses an **ephemeral in-memory** pin baseline (dies with the
-process). For a durable baseline you control — or to opt into fleet telemetry —
-pass your own pin and a stable server id:
+`wrap(session)` with no server id keeps an **in-memory** pin baseline that dies
+with the process. Pass a stable server id and the baseline is kept on disk and
+survives restarts, under `MCPINDEX_STATE_DIR/pins/<server id>.json` or
+`~/.mcpindex/pins/<server id>.json`:
 
 ```ts
-import { wrap, PreflightPin } from '@mcp-index/sdk';
+import { wrap } from '@mcp-index/sdk';
 
-const pin = new PreflightPin();                       // your in-memory baseline
-const guarded = wrap(session, { pin, serverId: 'my-mcp-server' });
+const guarded = wrap(session, { serverId: 'my-mcp-server' }); // pins on disk
 ```
 
-## Sign in (optional) — `mcpindex login`
+`pinStore: 'memory'` keeps pins in the process even with a server id, and
+`pinStore: 'file'` forces the file store without one. You can also pass your own
+`PreflightPin` as `pin`.
+
+## Sign in (optional) - `mcpindex login`
 
 Signs you in with GitHub and stores a free API key at `~/.mcpindex/credentials.json`
-(mode `0600`), used to authenticate deeper trust checks. Optional — `wrap()` needs no
+(mode `0600`), used to authenticate deeper trust checks. Optional - `wrap()` needs no
 account and sends nothing on its own.
 
 ```sh
@@ -57,7 +61,7 @@ npx -p @mcp-index/sdk mcpindex login
 ```
 
 The key is minted server-side after GitHub OAuth and handed to a one-shot HTTP listener
-bound to `127.0.0.1` — it never transits a third party. Point `MCPINDEX_WEB_BASE` at a
+bound to `127.0.0.1` - it never transits a third party. Point `MCPINDEX_WEB_BASE` at a
 different host to override the default (`https://mcpindex.ai`).
 
 ## What it does
@@ -65,32 +69,32 @@ different host to override the default (`https://mcpindex.ai`).
 - Pins each MCP tool's contract trust-on-first-use (TOFU), persisted across restarts.
 - Runs a **deterministic** contract-diff (the ChangeKind taxonomy: added-required-param,
   constraint-narrowed, annotation-flip-to-destructive, output-schema-changed,
-  type/enum/removed, …) plus an injection/exfil marker scan over input and output schema.
-- **HOLDs** the call with the ⬡ banner when the contract drifted; **PROCEEDs** silently
+  type/enum/removed, ...) plus an injection/exfil marker scan over input and output schema.
+- **HOLDs** the call with the mcpindex hold banner when the contract drifted; **PROCEEDs** silently
   on a benign change (no false alarm).
 - Postures: `Monitor` (notify + proceed) / `Guard` (default; hold dangerous) /
   `Strict` (hold any drift).
 - Grades each call's **blast radius** (Tier-0a action classification) on the verdict:
-  action type (read / write / delete / send / …), reversibility, egress, and a static
-  autonomy ceiling, computed locally from the live contract. **Advisory** — it rides
+  action type (read / write / delete / send / ...), reversibility, egress, and a static
+  autonomy ceiling, computed locally from the live contract. **Advisory** - it rides
   alongside the decision and never moves HOLD/PROCEED. On by default; opt out with
   `MCPINDEX_ACTION_CLASSIFICATION_ENABLED=0`.
 
 ## What it is NOT
 
-The verdict is a **contract-diff, not a safety oracle** — it tells you the contract
+The verdict is a **contract-diff, not a safety oracle** - it tells you the contract
 *changed* versus your pin, not that the new contract is safe. It does not "block attacks"
 or "guarantee safe." You decide what a HOLD means for your agent.
 
 ## Result-content scanning (opt-in, OFF by default)
 
 Beyond the contract diff, the SDK can scan a tool's **returned result** (text blocks and
-`structuredContent`) for prompt-injection / exfiltration / credential-path markers — the
+`structuredContent`) for prompt-injection / exfiltration / credential-path markers - the
 attack where a *compromised result*, not a changed contract, tries to steer your agent. It
 is **off by default** (zero behavior change) and enabled per-wrap:
 
 ```ts
-const safe = wrap(session, { scanResults: true, onHold: (v) => { /* … */ } });
+const safe = wrap(session, { scanResults: true, onHold: (v) => { /* ... */ } });
 ```
 
 Once on, a tainted result is **withheld under `Guard` / `Strict`** and **passes through
@@ -100,7 +104,7 @@ client's `wrap(..., scan_results=...)`.
 
 ## Drift telemetry (opt-in, OFF by default)
 
-The SDK can report **that** a tool's contract drifted — so mcpindex can track drift on servers
+The SDK can report **that** a tool's contract drifted - so mcpindex can track drift on servers
 it can't crawl itself (private / auth-gated). It is **off by default and sends nothing** unless
 you turn it on:
 
@@ -113,7 +117,7 @@ When enabled, each tool you pin and each contract drift sends **one one-way sign
 - **What it sends:** fingerprints (HMAC) of the server/tool id, the contract hashes, the
   change type (the fixed ChangeKind vocabulary), a safety flag, an **hour-rounded** timestamp,
   a random install id (a token that links one machine's signals so distinct installs can be
-  counted — not derived from you), and a client SDK tag (`py` or `ts`).
+  counted - not derived from you), and a client SDK tag (`py` or `ts`).
 - **What it NEVER sends:** tool schemas, arguments, descriptions, URLs, or any of your data.
   The fingerprints carry no plaintext name and they are **not anonymity**: the salt is a
   constant in this client and the registry is public, so a listed server's fingerprint
@@ -140,5 +144,5 @@ Three ways to bring mcpindex into an agent, for different surfaces:
 
 ## License
 
-PolyForm Noncommercial 1.0.0 — © Bhartis LLC. Free for noncommercial use; commercial use
+PolyForm Noncommercial 1.0.0 - (c) Bhartis LLC. Free for noncommercial use; commercial use
 requires a separate license. See [`LICENSE`](./LICENSE) and https://mcpindex.ai.

package/dist/src/canonical.d.ts

@@ -25,6 +25,10 @@ export type Json = null | boolean | number | string | Json[] | {
 /** THE canonical serialization — every hash site MUST use this (port of
  * `contract.canonical_bytes`). */
 export declare function canonicalBytes(obj: unknown): Buffer;
+/** Tool-contract serialization. Same walker as `canonicalBytes`, plus the
+ * NFC-collision and float-shaped-string rules. Ordinary inputs match
+ * `canonicalBytes`. Objects in this walker are `Object.create(null)`. */
+export declare function contractBytes(obj: unknown): Buffer;
 /** The connector's per-tool hash, byte-identical to Python `_tool_hash`. The
  * preimage is `{name, description, input_schema}` (snake_case schema key). */
 export declare function toolHash(name: string, description: string, inputSchema: Record<string, unknown>): string;

package/dist/src/canonical.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,kDAAkD;AAClD,MAAM,MAAM,IAAI,GACZ,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,IAAI,EAAE,GACN;IAAE,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAoK1B;kCACkC;AAClC,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED;8EAC8E;AAC9E,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,MAAM,CAOR;AAED;;;;;;;;;oFASoF;AACpF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAY9D"}
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,kDAAkD;AAClD,MAAM,MAAM,IAAI,GACZ,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,IAAI,EAAE,GACN;IAAE,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAiM1B;kCACkC;AAClC,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED;;yEAEyE;AACzE,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAElD;AAED;8EAC8E;AAC9E,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,MAAM,CAOR;AAED;;;;;;;;;oFASoF;AACpF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAY9D"}

package/dist/src/canonical.js

@@ -81,7 +81,14 @@ function pythonFloatRepr(n) {
         exp = exp.padStart(2, "0");
     return `${mantissa}e${sign}${exp}`;
 }
-function canonicalize(o, depth) {
+const FLOATISH = /^-?[0-9]\.[0-9]{17}e[+-][0-9]{2,}$/;
+function contractString(s) {
+    const n = nfc(s);
+    if (n.startsWith("\0") || FLOATISH.test(n))
+        return "\0" + n;
+    return n;
+}
+function canonicalize(o, depth, contract = false) {
     if (depth > MAX_CANON_DEPTH) {
         throw new Error("canonical depth exceeded");
     }
@@ -104,23 +111,45 @@ function canonicalize(o, depth) {
         return Number(o);
     }
     if (typeof o === "string") {
-        return nfc(o);
+        return contract ? contractString(o) : nfc(o);
     }
     if (Array.isArray(o)) {
-        return o.map((v) => canonicalize(v, depth + 1));
+        return o.map((v) => canonicalize(v, depth + 1, contract));
     }
     if (typeof o === "object") {
         const src = o;
-        // NFC-normalize keys, then sort by the normalized string (Python sorts by
-        // `str(k)`; all our keys are already strings).
-        const entries = Object.keys(src).map((k) => [
-            nfc(k),
-            src[k],
-        ]);
-        entries.sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0));
-        const out = {};
-        for (const [k, v] of entries) {
-            out[k] = canonicalize(v, depth + 1);
+        const keys = Object.keys(src);
+        if (!contract) {
+            // NFC-normalize keys, then sort by the normalized string (Python sorts by
+            // `str(k)`; all our keys are already strings).
+            const entries = keys.map((k) => [nfc(k), src[k]]);
+            entries.sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0));
+            const out = {};
+            for (const [k, v] of entries) {
+                out[k] = canonicalize(v, depth + 1, false);
+            }
+            return out;
+        }
+        const groups = new Map();
+        for (const k of keys) {
+            const nk = nfc(k);
+            const g = groups.get(nk);
+            if (g === undefined)
+                groups.set(nk, [k]);
+            else
+                g.push(k);
+        }
+        const out = Object.create(null);
+        for (const [nk, ks] of groups) {
+            if (ks.length === 1) {
+                const only = ks[0];
+                out[nk] = canonicalize(src[only], depth + 1, true);
+            }
+            else {
+                for (const k of ks) {
+                    out[k] = canonicalize(src[k], depth + 1, true);
+                }
+            }
         }
         return out;
     }
@@ -143,9 +172,11 @@ function encodeAscii(v) {
     if (Array.isArray(v)) {
         return "[" + v.map(encodeAscii).join(",") + "]";
     }
-    // object: keys already canonical-sorted; preserve insertion order.
+    // sort_keys, matching Python json.dumps. The contract walker inserts in
+    // first-seen order; the dump is what makes ordinary objects byte-stable.
     const parts = [];
-    for (const k of Object.keys(v)) {
+    const keys = Object.keys(v).sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));
+    for (const k of keys) {
         parts.push(encodeAsciiString(k) + ":" + encodeAscii(v[k]));
     }
     return "{" + parts.join(",") + "}";
@@ -195,12 +226,18 @@ function encodeAsciiString(s) {
 /** THE canonical serialization — every hash site MUST use this (port of
  * `contract.canonical_bytes`). */
 export function canonicalBytes(obj) {
-    return Buffer.from(encodeAscii(canonicalize(obj, 0)), "utf-8");
+    return Buffer.from(encodeAscii(canonicalize(obj, 0, false)), "utf-8");
+}
+/** Tool-contract serialization. Same walker as `canonicalBytes`, plus the
+ * NFC-collision and float-shaped-string rules. Ordinary inputs match
+ * `canonicalBytes`. Objects in this walker are `Object.create(null)`. */
+export function contractBytes(obj) {
+    return Buffer.from(encodeAscii(canonicalize(obj, 0, true)), "utf-8");
 }
 /** The connector's per-tool hash, byte-identical to Python `_tool_hash`. The
  * preimage is `{name, description, input_schema}` (snake_case schema key). */
 export function toolHash(name, description, inputSchema) {
-    const bytes = canonicalBytes({
+    const bytes = contractBytes({
         name,
         description,
         input_schema: inputSchema,

package/dist/src/canonical.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,eAAe,GAAG,EAAE,CAAC;AAW3B,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;IAC3C,6EAA6E;IAC7E,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACf,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,OAAO,GAAG,QAAQ,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,CAAU,EAAE,KAAa;IAC7C,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,+CAA+C;QAC3D,CAAC;QACD,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAA4B,CAAC;QACzC,0EAA0E;QAC1E,+CAA+C;QAC/C,MAAM,OAAO,GAA6B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACpE,GAAG,CAAC,CAAC,CAAC;YACN,GAAG,CAAC,CAAC,CAAC;SACP,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,GAAG,GAA0B,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;YAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;qDAEqD;AACrD,SAAS,WAAW,CAAC,CAAO;IAC1B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACxD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,oEAAoE;QACpE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAClD,CAAC;IACD,mEAAmE;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC;QACvC,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,IAAI,KAAK,CAAC;aACxB,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,MAAM,CAAC;aAC/B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,GAAG,IAAI;YAAE,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC/D,IAAI,EAAE,GAAG,IAAI;YAAE,GAAG,IAAI,EAAE,CAAC;aACzB,CAAC;YACJ,yEAAyE;YACzE,yBAAyB;YACzB,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;gBACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9B,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;gBAChC,GAAG;oBACD,KAAK;wBACL,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;wBAChC,KAAK;wBACL,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,GAAG,GAAG,CAAC;AACnB,CAAC;AAED;kCACkC;AAClC,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,WAAmB,EACnB,WAAoC;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC;QAC3B,IAAI;QACJ,WAAW;QACX,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IACH,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;oFASoF;AACpF,MAAM,UAAU,QAAQ,CAAC,IAA6B;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,IAAI,GACR,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;QACzD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IAChC,MAAM,KAAK,GACT,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrE,CAAC,CAAE,MAAkC;QACrC,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,eAAe,GAAG,EAAE,CAAC;AAW3B,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;IAC3C,6EAA6E;IAC7E,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACf,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,OAAO,GAAG,QAAQ,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AAEtD,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,GAAG,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,CAAU,EAAE,KAAa,EAAE,QAAQ,GAAG,KAAK;IAC/D,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,+CAA+C;QAC3D,CAAC;QACD,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAA4B,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,0EAA0E;YAC1E,+CAA+C;YAC/C,MAAM,OAAO,GAA6B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,MAAM,GAAG,GAA0B,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;;gBACpC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA0B,CAAC;QACzD,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAW,CAAC;gBAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;oBACnB,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;qDAEqD;AACrD,SAAS,WAAW,CAAC,CAAO;IAC1B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACxD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,oEAAoE;QACpE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAClD,CAAC;IACD,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC;QACvC,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,IAAI,KAAK,CAAC;aACxB,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,MAAM,CAAC;aAC/B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC9B,IAAI,EAAE,GAAG,IAAI;YAAE,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC/D,IAAI,EAAE,GAAG,IAAI;YAAE,GAAG,IAAI,EAAE,CAAC;aACzB,CAAC;YACJ,yEAAyE;YACzE,yBAAyB;YACzB,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;gBACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9B,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;gBAChC,GAAG;oBACD,KAAK;wBACL,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;wBAChC,KAAK;wBACL,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,GAAG,GAAG,CAAC;AACnB,CAAC;AAED;kCACkC;AAClC,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED;;yEAEyE;AACzE,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,WAAmB,EACnB,WAAoC;IAEpC,MAAM,KAAK,GAAG,aAAa,CAAC;QAC1B,IAAI;QACJ,WAAW;QACX,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IACH,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;oFASoF;AACpF,MAAM,UAAU,QAAQ,CAAC,IAA6B;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,IAAI,GACR,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;QACzD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IAChC,MAAM,KAAK,GACT,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrE,CAAC,CAAE,MAAkC;QACrC,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC"}

package/dist/src/gate.d.ts

@@ -9,6 +9,7 @@
 import { PreflightPin } from "./preflight.js";
 import type { PinnedTool, PreflightVerdict, ToolDef } from "./preflight.js";
 import { ChangeKind, isSafetyRelevant } from "./schemaDiff.js";
+import type { Change } from "./schemaDiff.js";
 import { ErrorStore, Operation } from "./errors.js";
 declare const DEFAULT_BEHAVIORAL_MANDATED_KINDS: ReadonlySet<ChangeKind>;
 export declare enum Posture {
@@ -114,6 +115,14 @@ export interface GateOptions {
     posture?: Posture;
     errors?: ErrorStore | null;
 }
+export interface GateEffect {
+    kind: "repin" | "drift" | "fleet";
+    toolName: string;
+    observed?: ToolDef | null;
+    oldHash?: string;
+    newHash?: string;
+    drift?: readonly Change[];
+}
 export declare class Gate {
     private readonly pin;
     private readonly _serverId;
@@ -127,6 +136,7 @@ export declare class Gate {
     private readonly errors;
     constructor(opts: GateOptions);
     get serverId(): string;
+    get pinPath(): string | null;
     get posture(): Posture;
     get verifier(): BehavioralVerifier | null;
     get ownership(): Ownership;
@@ -140,6 +150,11 @@ export declare class Gate {
      * null when the live definition is unavailable or the flag is off. Mirrors the
      * Python wrapper's `build_action_classification`. */
     evaluate(name: string, observed: ToolDef | null): PreflightVerdict;
+    /** `(static, effective, effects)` with no pin write, telemetry send, or fleet read. */
+    assess(name: string, observed: ToolDef | null): [PreflightVerdict, PreflightVerdict, GateEffect[]];
+    /** Run effects, then re-apply posture so the fleet advisory rides as `evaluate` did. */
+    commit(stat: PreflightVerdict, effects: readonly GateEffect[]): [PreflightVerdict, PreflightVerdict];
+    private collect;
     private decideContract;
     private classifyDrift;
     private mandatedUnhashedDrift;
@@ -154,6 +169,8 @@ export declare class Gate {
     private holdOrFailopen;
     applyPosture(stat: PreflightVerdict): PreflightVerdict;
     decide(name: string, observed: ToolDef | null): [PreflightVerdict, PreflightVerdict];
+    private tamperReason;
+    private tamperHold;
     internalErrorVerdict(name: string): PreflightVerdict;
     captureError(exc: unknown, operation: Operation, ourCodeLocation: string): void;
     private isUnambiguousDangerous;

package/dist/src/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAGL,YAAY,EAIb,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,UAAU,EAGV,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AAOzB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAKpD,QAAA,MAAM,iCAAiC,EAAE,WAAW,CAAC,UAAU,CAG7D,CAAC;AASH,oBAAY,OAAO;IACjB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAID,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,UAAU,CAgBxD,CAAC;AAsCH,eAAO,MAAM,kCAAkC,2GACoD,CAAC;AAEpG;;;;;;;;;;0EAU0E;AAC1E,eAAO,MAAM,mCAAmC,QAEY,CAAC;AAK7D,eAAO,MAAM,2BAA2B,QAE0C,CAAC;AAInF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAEzE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAStF;AAED,oBAAY,SAAS;IACnB,GAAG,QAAQ;IACX,SAAS,cAAc;IACvB,mBAAmB,wBAAwB;CAC5C;AAED,oBAAY,gBAAgB;IAC1B,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IACnC,QAAQ,aAAa;CACtB;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,SAAS,GAAG,gBAAgB,CAI7E;AAED,oBAAY,iBAAiB;IAC3B,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,WAAW,gBAAgB;IAC3B,QAAQ,aAAa;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAE5E;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,gBAAgB,GACvB,gBAAgB,CAAC;CACrB;AA2QD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,GAAE,SAAS,MAAM,EAAE,GAAG,IAAW,EACzC,OAAO,GAAE,MAAM,GAAG,IAAW,EAC7B,KAAK,UAAQ,GACZ,MAAM,CAUR;AAED;sFACsF;AACtF,eAAO,MAAM,oBAAoB,QAEgB,CAAC;AA4BlD;;;;;;kDAMkD;AAClD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;sDACsD;AACtD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,IAAI,CAWf;AAMD;kFACkF;AAClF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,GAAE,SAAS,MAAM,EAAE,GAAG,IAAW,EACzC,OAAO,GAAE,MAAM,GAAG,IAAW,EAC7B,KAAK,UAAQ,GACZ,MAAM,CAyFR;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,gBAAgB,EACzB,YAAY,GAAE,MAAM,GAAG,IAAW,EAClC,KAAK,UAAO,GACX,MAAM,CAeR;AASD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,YAAY,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,uBAAuB,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CAC5B;AAED,qBAAa,IAAI;IACf,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAY;IACvC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAA0B;IAClE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;gBAE/B,IAAI,EAAE,WAAW;IAa7B,IAAI,QAAQ,IAAI,MAAM,CAErB;IACD,IAAI,OAAO,IAAI,OAAO,CAErB;IACD,IAAI,QAAQ,IAAI,kBAAkB,GAAG,IAAI,CAExC;IACD,IAAI,SAAS,IAAI,SAAS,CAEzB;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAIvC,wDAAwD;IACxD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;IAoB1C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,UAAU;IAarD;;;;yDAIqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,GAAG,gBAAgB;IAUlE,OAAO,CAAC,cAAc;IAiDtB,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,qBAAqB;IA6C7B,OAAO,CAAC,aAAa;IAkHrB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,MAAM,CAAC,MAAM;IAQrB,OAAO,CAAC,MAAM,CAAC,QAAQ;IAoBvB,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,sBAAsB;IAY9B,OAAO,CAAC,cAAc;IAuBtB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB;IAUtD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAYpF,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB;IAIpD,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI;IAU/E,OAAO,CAAC,sBAAsB;IAK9B,OAAO,CAAC,UAAU;IAiBlB;;;;;OAKG;IACH,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,GAAG,IAAI,EACxB,aAAa,EAAE,gBAAgB,EAC/B,QAAQ,EAAE,kBAAkB,GAC3B,gBAAgB;IAInB;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,GAAG,IAAI,EACxB,aAAa,EAAE,gBAAgB,EAC/B,QAAQ,EAAE,kBAAkB,GAC3B,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAqEhD;AAED,OAAO,EAAE,gBAAgB,EAAE,iCAAiC,EAAE,CAAC"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAGL,YAAY,EAIb,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,UAAU,EAIV,gBAAgB,EAEjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAM9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAKpD,QAAA,MAAM,iCAAiC,EAAE,WAAW,CAAC,UAAU,CAG7D,CAAC;AASH,oBAAY,OAAO;IACjB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAID,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,UAAU,CAgBxD,CAAC;AAuCH,eAAO,MAAM,kCAAkC,2GACoD,CAAC;AAEpG;;;;;;;;;;0EAU0E;AAC1E,eAAO,MAAM,mCAAmC,QAEY,CAAC;AAK7D,eAAO,MAAM,2BAA2B,QAE0C,CAAC;AAInF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAEzE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAStF;AAED,oBAAY,SAAS;IACnB,GAAG,QAAQ;IACX,SAAS,cAAc;IACvB,mBAAmB,wBAAwB;CAC5C;AAED,oBAAY,gBAAgB;IAC1B,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IACnC,QAAQ,aAAa;CACtB;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,SAAS,GAAG,gBAAgB,CAI7E;AAED,oBAAY,iBAAiB;IAC3B,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,WAAW,gBAAgB;IAC3B,QAAQ,aAAa;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAE5E;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,gBAAgB,GACvB,gBAAgB,CAAC;CACrB;AA2QD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,GAAE,SAAS,MAAM,EAAE,GAAG,IAAW,EACzC,OAAO,GAAE,MAAM,GAAG,IAAW,EAC7B,KAAK,UAAQ,GACZ,MAAM,CAUR;AAED;sFACsF;AACtF,eAAO,MAAM,oBAAoB,QAEgB,CAAC;AA4BlD;;;;;;kDAMkD;AAClD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;sDACsD;AACtD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,IAAI,CAWf;AAMD;kFACkF;AAClF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,GAAE,SAAS,MAAM,EAAE,GAAG,IAAW,EACzC,OAAO,GAAE,MAAM,GAAG,IAAW,EAC7B,KAAK,UAAQ,GACZ,MAAM,CAyFR;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,gBAAgB,EACzB,YAAY,GAAE,MAAM,GAAG,IAAW,EAClC,KAAK,UAAO,GACX,MAAM,CAeR;AASD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,YAAY,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,uBAAuB,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CAC5B;AAYD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAkFD,qBAAa,IAAI;IACf,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAY;IACvC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAA0B;IAClE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;gBAE/B,IAAI,EAAE,WAAW;IAa7B,IAAI,QAAQ,IAAI,MAAM,CAErB;IACD,IAAI,OAAO,IAAI,MAAM,GAAG,IAAI,CAE3B;IAED,IAAI,OAAO,IAAI,OAAO,CAErB;IACD,IAAI,QAAQ,IAAI,kBAAkB,GAAG,IAAI,CAExC;IACD,IAAI,SAAS,IAAI,SAAS,CAEzB;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAIvC,wDAAwD;IACxD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;IAoB1C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,UAAU;IAarD;;;;yDAIqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,GAAG,gBAAgB;IAMlE,uFAAuF;IACvF,MAAM,CACJ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,GAAG,IAAI,GACvB,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;IAUrD,wFAAwF;IACxF,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,UAAU,EAAE,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAuBpG,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,cAAc;IAoDtB,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,qBAAqB;IAoE7B,OAAO,CAAC,aAAa;IAoIrB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,MAAM,CAAC,MAAM;IAQrB,OAAO,CAAC,MAAM,CAAC,QAAQ;IAoBvB,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,sBAAsB;IAY9B,OAAO,CAAC,cAAc;IAuBtB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB;IAWtD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAWpF,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,UAAU;IAYlB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB;IAIpD,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI;IAU/E,OAAO,CAAC,sBAAsB;IAK9B,OAAO,CAAC,UAAU;IAiBlB;;;;;OAKG;IACH,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,GAAG,IAAI,EACxB,aAAa,EAAE,gBAAgB,EAC/B,QAAQ,EAAE,kBAAkB,GAC3B,gBAAgB;IAInB;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,GAAG,IAAI,EACxB,aAAa,EAAE,gBAAgB,EAC/B,QAAQ,EAAE,kBAAkB,GAC3B,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAqEhD;AAED,OAAO,EAAE,gBAAgB,EAAE,iCAAiC,EAAE,CAAC"}