@nklisch/pi-enhanced 0.2.2 → 0.2.4

package/node_modules/@nklisch/pi-plugins/dist/application/native-inspection-display-safety.js

@@ -1,36 +0,0 @@
-const bidiAndInvisible = new Set([
-    0x061c, 0x200b, 0x200c, 0x200d, 0x200e, 0x200f,
-    0x2028, 0x2029, 0x202a, 0x202b, 0x202c, 0x202d, 0x202e,
-    0x2060, 0x2066, 0x2067, 0x2068, 0x2069, 0xfeff,
-]);
-/** One predicate defines both sanitizer escaping and public-schema rejection. */
-export function isUnsafeDisplayScalar(character, codePoint) {
-    return codePoint <= 0x1f ||
-        (codePoint >= 0x7f && codePoint <= 0x9f) ||
-        (codePoint >= 0xd800 && codePoint <= 0xdfff) ||
-        bidiAndInvisible.has(codePoint) ||
-        (codePoint >= 0xfe00 && codePoint <= 0xfe0f) ||
-        /\p{Mark}/u.test(character);
-}
-export function containsUnsafeDisplayScalar(value) {
-    for (let index = 0; index < value.length;) {
-        const first = value.charCodeAt(index);
-        if (first >= 0xd800 && first <= 0xdbff) {
-            const second = value.charCodeAt(index + 1);
-            if (second >= 0xdc00 && second <= 0xdfff) {
-                const character = value.slice(index, index + 2);
-                const codePoint = ((first - 0xd800) << 10) + second - 0xdc00 + 0x10000;
-                if (isUnsafeDisplayScalar(character, codePoint))
-                    return true;
-                index += 2;
-                continue;
-            }
-        }
-        const character = value[index];
-        if (isUnsafeDisplayScalar(character, first))
-            return true;
-        index += 1;
-    }
-    return false;
-}
-//# sourceMappingURL=native-inspection-display-safety.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/native-inspection-display-safety.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"native-inspection-display-safety.js","sourceRoot":"","sources":["../../src/application/native-inspection-display-safety.ts"],"names":[],"mappings":"AAAA,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACtD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAC/C,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,SAAiB;IACxE,OAAO,SAAS,IAAI,IAAI;QACtB,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC;QACxC,CAAC,SAAS,IAAI,MAAM,IAAI,SAAS,IAAI,MAAM,CAAC;QAC5C,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,CAAC,SAAS,IAAI,MAAM,IAAI,SAAS,IAAI,MAAM,CAAC;QAC5C,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC3C,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAChD,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;gBACvE,IAAI,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC7D,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAChC,IAAI,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/native-inspection-display.d.ts

@@ -1,18 +0,0 @@
-import { type SafeDisplayField } from "./native-inspection-contract.js";
-export declare const NativeDisplayLimits: Readonly<{
-    readonly labelScalars: 256;
-    readonly descriptionScalars: 2048;
-    readonly pathScalars: 1024;
-    readonly commandScalars: 4096;
-    readonly argumentScalars: 2048;
-    readonly maxArguments: 256;
-    readonly maxProvenance: 256;
-}>;
-/**
- * Escape before serialization so every renderer receives terminal-safe text.
- * Scalar and serialized-output bounds are both enforced: escaped input can be
- * substantially longer than its source and must still fit the public schema.
- */
-export declare function toSafeDisplayField(input: string, options: Readonly<{
-    maxScalars: number;
-}>): SafeDisplayField;

package/node_modules/@nklisch/pi-plugins/dist/application/native-inspection-display.js

@@ -1,73 +0,0 @@
-import { SafeDisplayFieldSchema } from "./native-inspection-contract.js";
-import { isUnsafeDisplayScalar } from "./native-inspection-display-safety.js";
-export const NativeDisplayLimits = Object.freeze({
-    labelScalars: 256,
-    descriptionScalars: 2_048,
-    pathScalars: 1_024,
-    commandScalars: 4_096,
-    argumentScalars: 2_048,
-    maxArguments: 256,
-    maxProvenance: 256,
-});
-const MAX_SAFE_TEXT_UNITS = 8_192;
-function visibleEscape(codePoint) {
-    return `\\u{${codePoint.toString(16).toUpperCase()}}`;
-}
-/**
- * Escape before serialization so every renderer receives terminal-safe text.
- * Scalar and serialized-output bounds are both enforced: escaped input can be
- * substantially longer than its source and must still fit the public schema.
- */
-export function toSafeDisplayField(input, options) {
-    if (typeof input !== "string")
-        throw new TypeError("display input must be a string");
-    if (!Number.isSafeInteger(options?.maxScalars) || options.maxScalars < 0) {
-        throw new TypeError("display scalar limit must be a non-negative safe integer");
-    }
-    let text = "";
-    let escaped = false;
-    let truncated = false;
-    let scalars = 0;
-    for (let index = 0; index < input.length;) {
-        if (scalars >= options.maxScalars) {
-            truncated = true;
-            break;
-        }
-        const first = input.charCodeAt(index);
-        let codePoint;
-        let width;
-        if (first >= 0xd800 && first <= 0xdbff) {
-            const second = input.charCodeAt(index + 1);
-            if (second >= 0xdc00 && second <= 0xdfff) {
-                codePoint = ((first - 0xd800) << 10) + second - 0xdc00 + 0x10000;
-                width = 2;
-            }
-            else {
-                codePoint = first;
-                width = 1;
-                escaped = true;
-            }
-        }
-        else {
-            codePoint = first;
-            width = 1;
-            if (first >= 0xdc00 && first <= 0xdfff)
-                escaped = true;
-        }
-        const character = width === 2 ? input.slice(index, index + 2) : input[index];
-        const projected = isUnsafeDisplayScalar(character, codePoint)
-            ? visibleEscape(codePoint)
-            : character;
-        if (projected !== character)
-            escaped = true;
-        if (text.length + projected.length > MAX_SAFE_TEXT_UNITS) {
-            truncated = true;
-            break;
-        }
-        text += projected;
-        scalars += 1;
-        index += width;
-    }
-    return SafeDisplayFieldSchema.parse({ text, escaped, truncated });
-}
-//# sourceMappingURL=native-inspection-display.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/native-inspection-display.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"native-inspection-display.js","sourceRoot":"","sources":["../../src/application/native-inspection-display.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAyB,MAAM,iCAAiC,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,YAAY,EAAE,GAAG;IACjB,kBAAkB,EAAE,KAAK;IACzB,WAAW,EAAE,KAAK;IAClB,cAAc,EAAE,KAAK;IACrB,eAAe,EAAE,KAAK;IACtB,YAAY,EAAE,GAAG;IACjB,aAAa,EAAE,GAAG;CACV,CAAC,CAAC;AAEZ,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,OAAyC;IAEzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAC1C,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAClC,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,SAAiB,CAAC;QACtB,IAAI,KAAa,CAAC;QAClB,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC3C,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;gBACzC,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;gBACjE,KAAK,GAAG,CAAC,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,KAAK,CAAC;gBAClB,KAAK,GAAG,CAAC,CAAC;gBACV,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,KAAK,CAAC;YAClB,KAAK,GAAG,CAAC,CAAC;YACV,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM;gBAAE,OAAO,GAAG,IAAI,CAAC;QACzD,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC;QAC9E,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC;YAC3D,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC;YAC1B,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,GAAG,IAAI,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACzD,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACR,CAAC;QACD,IAAI,IAAI,SAAS,CAAC;QAClB,OAAO,IAAI,CAAC,CAAC;QACb,KAAK,IAAI,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,sBAAsB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/native-inspection-identifiers.d.ts

@@ -1,87 +0,0 @@
-import { z } from "zod";
-import type { Sha256 } from "../domain/source.js";
-import type { InspectionSnapshotBinding } from "./ports/native-inspection-evidence.js";
-import { type InspectionCursor, type InspectionDetailId, type InspectionSnapshotId } from "./native-inspection-contract.js";
-export declare const InstalledInspectionDetailSubjectSchema: z.ZodReadonly<z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    subject: z.ZodLiteral<"installed">;
-    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"user">;
-    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"project">;
-        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-    }, z.core.$strict>>], "kind">;
-    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-    selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-}, z.core.$strict>>;
-export declare const CandidateInspectionDetailSubjectSchema: z.ZodReadonly<z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    subject: z.ZodLiteral<"marketplace-candidate">;
-    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"user">;
-    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"project">;
-        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-    }, z.core.$strict>>], "kind">;
-    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-    registrationId: z.core.$ZodBranded<z.ZodString, "MarketplaceRegistrationId", "out">;
-    candidateId: z.core.$ZodBranded<z.ZodString, "MarketplaceCandidateId", "out">;
-    catalogSnapshot: z.core.$ZodBranded<z.ZodString, "MarketplaceSnapshotToken", "out">;
-}, z.core.$strict>>;
-export declare const InspectionDetailSubjectSchema: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    subject: z.ZodLiteral<"installed">;
-    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"user">;
-    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"project">;
-        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-    }, z.core.$strict>>], "kind">;
-    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-    selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-}, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    subject: z.ZodLiteral<"marketplace-candidate">;
-    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"user">;
-    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"project">;
-        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-    }, z.core.$strict>>], "kind">;
-    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-    registrationId: z.core.$ZodBranded<z.ZodString, "MarketplaceRegistrationId", "out">;
-    candidateId: z.core.$ZodBranded<z.ZodString, "MarketplaceCandidateId", "out">;
-    catalogSnapshot: z.core.$ZodBranded<z.ZodString, "MarketplaceSnapshotToken", "out">;
-}, z.core.$strict>>], "subject">;
-export declare const InspectionCursorPayloadSchema: z.ZodReadonly<z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    snapshotId: z.core.$ZodBranded<z.ZodString, "InspectionSnapshotId", "out">;
-    filterHash: z.ZodString;
-    lastSort: z.ZodReadonly<z.ZodArray<z.ZodString>>;
-}, z.core.$strict>>;
-export type InstalledInspectionDetailSubject = z.infer<typeof InstalledInspectionDetailSubjectSchema>;
-export type CandidateInspectionDetailSubject = z.infer<typeof CandidateInspectionDetailSubjectSchema>;
-export type InspectionDetailSubject = z.infer<typeof InspectionDetailSubjectSchema>;
-export type InspectionCursorPayload = z.infer<typeof InspectionCursorPayloadSchema>;
-/** Derive a safe snapshot token from an already-redacted canonical binding. */
-export declare function deriveInspectionSnapshotId(binding: unknown, sha256: Sha256): InspectionSnapshotId;
-/** Capture time is observational metadata, not an authority epoch. */
-export declare function deriveInspectionEvidenceSnapshotId(binding: InspectionSnapshotBinding, sha256: Sha256): InspectionSnapshotId;
-export declare function deriveInspectionDetailId(subjectInput: InspectionDetailSubject, sha256: Sha256): InspectionDetailId;
-export declare function decodeInspectionDetailId(idInput: string, sha256: Sha256): InspectionDetailSubject | undefined;
-export declare const verifyInspectionDetailId: typeof decodeInspectionDetailId;
-export declare function encodeInspectionCursor(payloadInput: InspectionCursorPayload, sha256: Sha256): InspectionCursor;
-export type InspectionCursorDecodeResult = Readonly<{
-    kind: "valid";
-    payload: InspectionCursorPayload;
-}> | Readonly<{
-    kind: "invalid";
-}> | Readonly<{
-    kind: "stale";
-}>;
-export declare function decodeInspectionCursor(cursorInput: string, expected: Readonly<{
-    snapshotId?: InspectionSnapshotId;
-    filterHash?: string;
-}>, sha256: Sha256): InspectionCursorDecodeResult;
-export declare const verifyInspectionCursor: typeof decodeInspectionCursor;
-export declare function deriveInspectionFilterHash(filter: unknown, sha256: Sha256): string;

package/node_modules/@nklisch/pi-plugins/dist/application/native-inspection-identifiers.js

@@ -1,125 +0,0 @@
-import { z } from "zod";
-import { canonicalJson } from "../domain/canonical-json.js";
-import { ContentDigestSchema } from "../domain/content-manifest.js";
-import { PluginKeySchema } from "../domain/identity.js";
-import { MarketplaceCandidateIdSchema, MarketplaceRegistrationIdSchema, MarketplaceSnapshotTokenSchema, } from "../domain/marketplace-registration.js";
-import { ScopeReferenceSchema } from "../domain/state/scope.js";
-import { InspectionCursorSchema, InspectionDetailIdSchema, InspectionSnapshotIdSchema, } from "./native-inspection-contract.js";
-const encoder = new TextEncoder();
-const decoder = new TextDecoder("utf-8", { fatal: true });
-export const InstalledInspectionDetailSubjectSchema = z.object({
-    version: z.literal(1),
-    subject: z.literal("installed"),
-    scope: ScopeReferenceSchema,
-    plugin: PluginKeySchema,
-    selectedRevision: ContentDigestSchema,
-}).strict().readonly();
-export const CandidateInspectionDetailSubjectSchema = z.object({
-    version: z.literal(1),
-    subject: z.literal("marketplace-candidate"),
-    scope: ScopeReferenceSchema,
-    plugin: PluginKeySchema,
-    registrationId: MarketplaceRegistrationIdSchema,
-    candidateId: MarketplaceCandidateIdSchema,
-    catalogSnapshot: MarketplaceSnapshotTokenSchema,
-}).strict().readonly();
-export const InspectionDetailSubjectSchema = z.discriminatedUnion("subject", [
-    InstalledInspectionDetailSubjectSchema,
-    CandidateInspectionDetailSubjectSchema,
-]);
-export const InspectionCursorPayloadSchema = z.object({
-    version: z.literal(1),
-    snapshotId: InspectionSnapshotIdSchema,
-    filterHash: z.string().regex(/^sha256:[0-9a-f]{64}$/),
-    lastSort: z.array(z.string().max(4096)).min(1).max(8).readonly(),
-}).strict().readonly();
-function digestHex(bytes, sha256) {
-    if (typeof sha256 !== "function")
-        throw new TypeError("inspection identifiers require SHA-256");
-    const digest = sha256(bytes);
-    if (!(digest instanceof Uint8Array) || digest.byteLength !== 32) {
-        throw new Error("SHA-256 function must return exactly 32 bytes");
-    }
-    return [...digest].map((byte) => byte.toString(16).padStart(2, "0")).join("");
-}
-function taggedDigest(tag, value, sha256) {
-    return digestHex(encoder.encode(`${tag}\0${canonicalJson(value)}`), sha256);
-}
-function checksum(prefix, payload, sha256) {
-    return digestHex(encoder.encode(`${prefix}\0${payload}`), sha256);
-}
-function encodePayload(value) {
-    return Buffer.from(encoder.encode(canonicalJson(value))).toString("base64url");
-}
-function constantTimeEqual(left, right) {
-    let difference = left.length ^ right.length;
-    const length = Math.max(left.length, right.length);
-    for (let index = 0; index < length; index += 1) {
-        difference |= (left.charCodeAt(index) || 0) ^ (right.charCodeAt(index) || 0);
-    }
-    return difference === 0;
-}
-function decodeEnvelope(value, prefix, sha256) {
-    const match = new RegExp(`^${prefix}:([A-Za-z0-9_-]+)\\.([0-9a-f]{64})$`).exec(value);
-    if (match === null)
-        return undefined;
-    const payload = match[1];
-    if (!constantTimeEqual(match[2], checksum(prefix, payload, sha256)))
-        return undefined;
-    try {
-        const bytes = Buffer.from(payload, "base64url");
-        // Node's decoder accepts non-canonical base64url spellings; round-tripping
-        // prevents alternate text identities for the same payload.
-        if (bytes.toString("base64url") !== payload)
-            return undefined;
-        return JSON.parse(decoder.decode(bytes));
-    }
-    catch {
-        return undefined;
-    }
-}
-/** Derive a safe snapshot token from an already-redacted canonical binding. */
-export function deriveInspectionSnapshotId(binding, sha256) {
-    return InspectionSnapshotIdSchema.parse(`inspection-snapshot-v1:sha256:${taggedDigest("inspection-snapshot-v1", binding, sha256)}`);
-}
-/** Capture time is observational metadata, not an authority epoch. */
-export function deriveInspectionEvidenceSnapshotId(binding, sha256) {
-    const { capturedAt: _capturedAt, ...authority } = binding;
-    return deriveInspectionSnapshotId(authority, sha256);
-}
-export function deriveInspectionDetailId(subjectInput, sha256) {
-    const subject = InspectionDetailSubjectSchema.parse(subjectInput);
-    const payload = encodePayload(subject);
-    return InspectionDetailIdSchema.parse(`inspection-detail-v1:${payload}.${checksum("inspection-detail-v1", payload, sha256)}`);
-}
-export function decodeInspectionDetailId(idInput, sha256) {
-    if (!InspectionDetailIdSchema.safeParse(idInput).success)
-        return undefined;
-    const decoded = decodeEnvelope(idInput, "inspection-detail-v1", sha256);
-    const result = InspectionDetailSubjectSchema.safeParse(decoded);
-    return result.success ? result.data : undefined;
-}
-export const verifyInspectionDetailId = decodeInspectionDetailId;
-export function encodeInspectionCursor(payloadInput, sha256) {
-    const value = InspectionCursorPayloadSchema.parse(payloadInput);
-    const payload = encodePayload(value);
-    return InspectionCursorSchema.parse(`inspection-cursor-v1:${payload}.${checksum("inspection-cursor-v1", payload, sha256)}`);
-}
-export function decodeInspectionCursor(cursorInput, expected, sha256) {
-    if (!InspectionCursorSchema.safeParse(cursorInput).success)
-        return { kind: "invalid" };
-    const decoded = decodeEnvelope(cursorInput, "inspection-cursor-v1", sha256);
-    const result = InspectionCursorPayloadSchema.safeParse(decoded);
-    if (!result.success)
-        return { kind: "invalid" };
-    if ((expected.snapshotId !== undefined && result.data.snapshotId !== expected.snapshotId) ||
-        (expected.filterHash !== undefined && result.data.filterHash !== expected.filterHash)) {
-        return { kind: "stale" };
-    }
-    return { kind: "valid", payload: result.data };
-}
-export const verifyInspectionCursor = decodeInspectionCursor;
-export function deriveInspectionFilterHash(filter, sha256) {
-    return ContentDigestSchema.parse(`sha256:${taggedDigest("inspection-filter-v1", filter, sha256)}`);
-}
-//# sourceMappingURL=native-inspection-identifiers.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/native-inspection-identifiers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"native-inspection-identifiers.js","sourceRoot":"","sources":["../../src/application/native-inspection-identifiers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,GAI3B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC/B,KAAK,EAAE,oBAAoB;IAC3B,MAAM,EAAE,eAAe;IACvB,gBAAgB,EAAE,mBAAmB;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAC3C,KAAK,EAAE,oBAAoB;IAC3B,MAAM,EAAE,eAAe;IACvB,cAAc,EAAE,+BAA+B;IAC/C,WAAW,EAAE,4BAA4B;IACzC,eAAe,EAAE,8BAA8B;CAChD,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IAC3E,sCAAsC;IACtC,sCAAsC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,0BAA0B;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAOvB,SAAS,SAAS,CAAC,KAAiB,EAAE,MAAc;IAClD,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,MAAM,YAAY,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,KAAc,EAAE,MAAc;IAC/D,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,MAAuD,EAAE,OAAe,EAAE,MAAc;IACxG,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,UAAU,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,MAAuD,EAAE,MAAc;IAC5G,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,qCAAqC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAC1B,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAChD,2EAA2E;QAC3E,2DAA2D;QAC3D,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,0BAA0B,CAAC,OAAgB,EAAE,MAAc;IACzE,OAAO,0BAA0B,CAAC,KAAK,CAAC,iCAAiC,YAAY,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AACtI,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,kCAAkC,CAAC,OAAkC,EAAE,MAAc;IACnG,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC;IAC1D,OAAO,0BAA0B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAqC,EAAE,MAAc;IAC5F,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,wBAAwB,CAAC,KAAK,CAAC,wBAAwB,OAAO,IAAI,QAAQ,CAAC,sBAAsB,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAChI,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,MAAc;IACtE,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC3E,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAEjE,MAAM,UAAU,sBAAsB,CAAC,YAAqC,EAAE,MAAc;IAC1F,MAAM,KAAK,GAAG,6BAA6B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,sBAAsB,CAAC,KAAK,CAAC,wBAAwB,OAAO,IAAI,QAAQ,CAAC,sBAAsB,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAC9H,CAAC;AAOD,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,QAA8E,EAC9E,MAAc;IAEd,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvF,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC;QACrF,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D,MAAM,UAAU,0BAA0B,CAAC,MAAe,EAAE,MAAc;IACxE,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,YAAY,CAAC,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AACrG,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/native-inspection-service.d.ts

@@ -1,29 +0,0 @@
-import type { MarketplaceCatalogService } from "./marketplace-catalog-service.js";
-import type { AdoptionService } from "./adoption-service.js";
-import type { LifecycleClock } from "./ports/lifecycle-clock.js";
-import type { InspectionEvidenceSnapshot, NativeInspectionEvidencePort } from "./ports/native-inspection-evidence.js";
-import type { Sha256 } from "../domain/source.js";
-import type { NativeInstalledInspector } from "./native-installed-inspection.js";
-import { type NativeInspectionDetailResult, type NativeInspectionService } from "./native-inspection-contract.js";
-import { type InspectionDetailSubject } from "./native-inspection-identifiers.js";
-export declare class NativeInspectionError extends Error {
-    readonly code: "CURSOR_INVALID" | "CURSOR_STALE" | "SNAPSHOT_STALE";
-    constructor(code: "CURSOR_INVALID" | "CURSOR_STALE" | "SNAPSHOT_STALE");
-    toJSON(): Readonly<{
-        code: "CURSOR_INVALID" | "CURSOR_STALE" | "SNAPSHOT_STALE";
-    }>;
-}
-export type NativeCandidateInspector = Readonly<{
-    inspect(subject: Extract<InspectionDetailSubject, {
-        subject: "marketplace-candidate";
-    }>, snapshot: InspectionEvidenceSnapshot, signal: AbortSignal): Promise<NativeInspectionDetailResult>;
-}>;
-export declare function createNativeInspectionService(dependencies: Readonly<{
-    evidence: NativeInspectionEvidencePort;
-    installed: NativeInstalledInspector;
-    candidates: NativeCandidateInspector;
-    catalog: Pick<MarketplaceCatalogService, "search" | "detail">;
-    adoption: Pick<AdoptionService, "preview">;
-    clock: LifecycleClock;
-    sha256: Sha256;
-}>): NativeInspectionService;