@nklisch/pi-enhanced 0.2.3 → 0.2.4

package/node_modules/@nklisch/pi-plugins/dist/domain/state/registry.js

@@ -1,57 +0,0 @@
-import { z } from "zod";
-import { HostConfigDocumentSchema, } from "./config-state.js";
-import { InstalledUserStateDocumentSchema, } from "./installed-state.js";
-import { ProjectLocalStateDocumentSchema, } from "./project-state.js";
-import { StatePointersDocumentSchema, } from "./pointers.js";
-import { TrustStateDocumentSchema, } from "./trust-state.js";
-import { PortableProjectDeclarationSchema, } from "./portable-project-declaration.js";
-import { StateDocumentKindSchema, StateDocumentKindRegistry, } from "./pointers.js";
-/**
- * The authoritative routing table for durable state. New document kinds must
- * be added here before they can be decoded or encoded. Each kind carries
- * exactly one current schema; the literal schemaVersion lets a future clean
- * cut-over recognize stale documents, which are reinitialized rather than
- * migrated.
- */
-export const StateDocumentRegistry = {
-    hostConfig: {
-        schema: HostConfigDocumentSchema,
-        schemaVersion: 4,
-        isolation: "marketplace-record",
-    },
-    installedUser: {
-        schema: InstalledUserStateDocumentSchema,
-        schemaVersion: 2,
-        isolation: "plugin-record",
-    },
-    trust: {
-        schema: TrustStateDocumentSchema,
-        schemaVersion: 1,
-        isolation: "trust-record",
-    },
-    projectLocal: {
-        schema: ProjectLocalStateDocumentSchema,
-        schemaVersion: 4,
-        isolation: "plugin-record",
-    },
-    portableProject: {
-        schema: PortableProjectDeclarationSchema,
-        schemaVersion: 1,
-        isolation: "none",
-    },
-    pointers: {
-        schema: StatePointersDocumentSchema,
-        schemaVersion: 1,
-        isolation: "none",
-    },
-};
-export function getStateDocumentDefinition(kind) {
-    const parsed = StateDocumentKindSchema.parse(kind);
-    return StateDocumentRegistry[parsed];
-}
-/** Stable registry order is useful for diagnostics and deterministic tooling. */
-export function stateDocumentKinds() {
-    return Object.keys(StateDocumentKindRegistry);
-}
-export { StateDocumentKindRegistry, StateDocumentKindSchema } from "./pointers.js";
-//# sourceMappingURL=registry.js.map

package/node_modules/@nklisch/pi-plugins/dist/domain/state/registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/domain/state/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,wBAAwB,GAEzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,GAEjC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,+BAA+B,GAEhC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,GAE5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,wBAAwB,GAEzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gCAAgC,GAEjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAE1B,MAAM,eAAe,CAAC;AAQvB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE;QACV,MAAM,EAAE,wBAAwB;QAChC,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,oBAAoB;KAChC;IACD,aAAa,EAAE;QACb,MAAM,EAAE,gCAAgC;QACxC,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,eAAe;KAC3B;IACD,KAAK,EAAE;QACL,MAAM,EAAE,wBAAwB;QAChC,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,cAAc;KAC1B;IACD,YAAY,EAAE;QACZ,MAAM,EAAE,+BAA+B;QACvC,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,eAAe;KAC3B;IACD,eAAe,EAAE;QACf,MAAM,EAAE,gCAAgC;QACxC,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,MAAM;KAClB;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,2BAA2B;QACnC,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,MAAM;KAClB;CAQF,CAAC;AAcF,MAAM,UAAU,0BAA0B,CACxC,IAAa;IAEb,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAwB,CAAC;AACvE,CAAC;AAED,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/domain/state/scope.d.ts

@@ -1,53 +0,0 @@
-import { z } from "zod";
-import { type Sha256, type SourceHash } from "../source.js";
-/** An adapter-canonical, absolute file URL. It is never persisted in ScopeReference. */
-export declare const CanonicalProjectRootSchema: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
-export type CanonicalProjectRoot = z.infer<typeof CanonicalProjectRootSchema>;
-export declare const ProjectIdentitySchema: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodLiteral<"repository">;
-    canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
-    repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-}, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodLiteral<"path-only">;
-    canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
-    limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
-}, z.core.$strict>>], "kind">;
-export type ProjectIdentity = z.infer<typeof ProjectIdentitySchema>;
-export declare const ProjectKeySchema: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-export type ProjectKey = z.infer<typeof ProjectKeySchema>;
-export declare const ScopeReferenceSchema: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodLiteral<"user">;
-}, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodLiteral<"project">;
-    projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-}, z.core.$strict>>], "kind">;
-export type ScopeReference = z.infer<typeof ScopeReferenceSchema>;
-export declare const ScopeContextSchema: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodLiteral<"user">;
-}, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodLiteral<"project">;
-    identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"repository">;
-        canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
-        repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"path-only">;
-        canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
-        limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
-    }, z.core.$strict>>], "kind">;
-    projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-}, z.core.$strict>>], "kind">;
-export type ScopeContext = z.infer<typeof ScopeContextSchema>;
-/** Derive a root- and repository-bound project key from an injected hash port. */
-export declare function deriveProjectKey(identity: ProjectIdentity, sha256: Sha256): ProjectKey;
-/**
- * Validate an untrusted context and recompute its project key before exposing
- * it to state code. User context has no identity/key and therefore needs no
- * hash port; project context always proves its supplied key.
- */
-export declare function createScopeContext(input: unknown, sha256: Sha256): ScopeContext;
-/** True only for a scope object produced by the hash-verifying factory. */
-export declare function isVerifiedScopeContext(value: unknown): value is ScopeContext;
-/** Reduce a runtime context to the path-free reference persisted in records. */
-export declare function toScopeReference(context: ScopeContext): ScopeReference;
-export type { SourceHash };

package/node_modules/@nklisch/pi-plugins/dist/domain/state/scope.js

@@ -1,270 +0,0 @@
-import { z } from "zod";
-import { SourceHashSchema, } from "../source.js";
-const encoder = new TextEncoder();
-const PROJECT_KEY_PREFIX = "project-v1:sha256:";
-const PROJECT_IDENTITY_TAG = "project-identity-v1\0";
-const MAX_UINT32 = 0xffff_ffff;
-function hasLoneSurrogate(value) {
-    for (let index = 0; index < value.length; index += 1) {
-        const codeUnit = value.charCodeAt(index);
-        if (codeUnit >= 0xd800 && codeUnit <= 0xdbff) {
-            const next = value.charCodeAt(index + 1);
-            if (Number.isNaN(next) || next < 0xdc00 || next > 0xdfff)
-                return true;
-            index += 1;
-        }
-        else if (codeUnit >= 0xdc00 && codeUnit <= 0xdfff) {
-            return true;
-        }
-    }
-    return false;
-}
-function addIssue(context, message) {
-    context.addIssue({ code: "custom", message });
-}
-function hasMalformedPercentEscape(value) {
-    for (let index = 0; index < value.length; index += 1) {
-        if (value[index] !== "%")
-            continue;
-        if (!/^[0-9A-Fa-f]{2}$/.test(value.slice(index + 1, index + 3)))
-            return true;
-        index += 2;
-    }
-    return false;
-}
-function decodePathSegment(value) {
-    try {
-        return decodeURIComponent(value);
-    }
-    catch {
-        return undefined;
-    }
-}
-function validateCanonicalProjectRoot(value, context) {
-    if (hasLoneSurrogate(value)) {
-        addIssue(context, "canonical project root cannot contain lone UTF-16 surrogate code units");
-        return;
-    }
-    if (value.includes("\\") || value.includes("\0")) {
-        addIssue(context, "canonical project root must use a file URL without backslashes or NUL");
-    }
-    if (hasMalformedPercentEscape(value)) {
-        addIssue(context, "canonical project root contains a malformed percent escape");
-        return;
-    }
-    if (!value.startsWith("file://")) {
-        addIssue(context, "canonical project root must use the file: URL scheme");
-        return;
-    }
-    let parsed;
-    try {
-        parsed = new URL(value);
-    }
-    catch {
-        addIssue(context, "canonical project root must be a valid file URL");
-        return;
-    }
-    if (parsed.protocol !== "file:") {
-        addIssue(context, "canonical project root must use the file: URL scheme");
-    }
-    if (parsed.username !== "" || parsed.password !== "") {
-        addIssue(context, "canonical project root cannot contain credentials");
-    }
-    if (parsed.search !== "" || parsed.hash !== "") {
-        addIssue(context, "canonical project root cannot contain a query or fragment");
-    }
-    // The adapter hands this contract an already-canonical URL. Reject URL
-    // spellings that the platform parser would normalize rather than silently
-    // allowing two spellings to become one project identity.
-    if (parsed.href !== value) {
-        addIssue(context, "canonical project root must use canonical file URL spelling");
-    }
-    const pathStart = value.indexOf("/", "file://".length);
-    const rawPath = pathStart === -1 ? "" : value.slice(pathStart);
-    if (rawPath.length === 0) {
-        addIssue(context, "canonical project root file URL must contain a path");
-        return;
-    }
-    if (!rawPath.startsWith("/")) {
-        addIssue(context, "canonical project root file URL path must be absolute");
-        return;
-    }
-    const rawSegments = rawPath.split("/");
-    const lastSegment = rawSegments.at(-1);
-    for (const [index, rawSegment] of rawSegments.entries()) {
-        // The first item is the path's required leading slash. A final empty
-        // segment is the conventional directory-root slash and is allowed.
-        if (rawSegment.length === 0 && (index === 0 || index === rawSegments.length - 1)) {
-            continue;
-        }
-        if (rawSegment.length === 0) {
-            addIssue(context, "canonical project root cannot contain empty path segments");
-            continue;
-        }
-        const decoded = decodePathSegment(rawSegment);
-        if (decoded === undefined) {
-            addIssue(context, "canonical project root contains an invalid percent escape");
-            continue;
-        }
-        if (decoded === "." ||
-            decoded === ".." ||
-            decoded.includes("/") ||
-            decoded.includes("\\") ||
-            decoded.includes("\0") ||
-            [...decoded].some((character) => {
-                const codePoint = character.codePointAt(0) ?? 0;
-                return codePoint < 0x20 || codePoint === 0x7f;
-            })) {
-            addIssue(context, "canonical project root contains an unsafe path segment");
-        }
-    }
-    if (lastSegment === undefined) {
-        addIssue(context, "canonical project root file URL must contain a path");
-    }
-}
-/** An adapter-canonical, absolute file URL. It is never persisted in ScopeReference. */
-export const CanonicalProjectRootSchema = z
-    .string()
-    .url()
-    .superRefine(validateCanonicalProjectRoot)
-    .brand();
-export const ProjectIdentitySchema = z.discriminatedUnion("kind", [
-    z
-        .object({
-        kind: z.literal("repository"),
-        canonicalRoot: CanonicalProjectRootSchema,
-        repositoryFingerprint: SourceHashSchema,
-    })
-        .strict()
-        .readonly(),
-    z
-        .object({
-        kind: z.literal("path-only"),
-        canonicalRoot: CanonicalProjectRootSchema,
-        limitation: z.literal("identity-changes-with-canonical-root"),
-    })
-        .strict()
-        .readonly(),
-]);
-export const ProjectKeySchema = z
-    .string()
-    .regex(/^project-v1:sha256:[0-9a-f]{64}$/)
-    .brand();
-export const ScopeReferenceSchema = z
-    .discriminatedUnion("kind", [
-    z.object({ kind: z.literal("user") }).strict().readonly(),
-    z
-        .object({ kind: z.literal("project"), projectKey: ProjectKeySchema })
-        .strict()
-        .readonly(),
-]);
-export const ScopeContextSchema = z.discriminatedUnion("kind", [
-    z.object({ kind: z.literal("user") }).strict().readonly(),
-    z
-        .object({
-        kind: z.literal("project"),
-        identity: ProjectIdentitySchema,
-        projectKey: ProjectKeySchema,
-    })
-        .strict()
-        .readonly(),
-]);
-/** Scope contexts are verified by identity/key recomputation before they cross into application code. */
-const verifiedScopeContexts = new WeakSet();
-function assertSha256(sha256, operation) {
-    if (typeof sha256 !== "function") {
-        throw new TypeError(`${operation} requires a SHA-256 function`);
-    }
-}
-function u32(value) {
-    if (!Number.isSafeInteger(value) || value < 0 || value > MAX_UINT32) {
-        throw new Error("project identity field exceeds uint32 length");
-    }
-    return Uint8Array.from([
-        (value >>> 24) & 0xff,
-        (value >>> 16) & 0xff,
-        (value >>> 8) & 0xff,
-        value & 0xff,
-    ]);
-}
-function concat(parts) {
-    const result = new Uint8Array(parts.reduce((total, part) => total + part.byteLength, 0));
-    let offset = 0;
-    for (const part of parts) {
-        result.set(part, offset);
-        offset += part.byteLength;
-    }
-    return result;
-}
-function field(tag, value) {
-    if (hasLoneSurrogate(tag) || hasLoneSurrogate(value)) {
-        throw new TypeError("project identity fields cannot contain lone surrogates");
-    }
-    const tagBytes = encoder.encode(tag);
-    const valueBytes = encoder.encode(value);
-    return concat([u32(tagBytes.byteLength), tagBytes, u32(valueBytes.byteLength), valueBytes]);
-}
-function projectIdentityPreimage(identity) {
-    const common = [
-        encoder.encode(PROJECT_IDENTITY_TAG),
-        field("kind", identity.kind),
-        field("canonical-root", identity.canonicalRoot),
-    ];
-    if (identity.kind === "repository") {
-        return concat([...common, field("repository-fingerprint", identity.repositoryFingerprint)]);
-    }
-    return concat([...common, field("limitation", identity.limitation)]);
-}
-function formatProjectKey(digest) {
-    if (!(digest instanceof Uint8Array) || digest.byteLength !== 32) {
-        throw new Error("SHA-256 function must return exactly 32 bytes");
-    }
-    let hexadecimal = "";
-    for (const byte of digest)
-        hexadecimal += byte.toString(16).padStart(2, "0");
-    return ProjectKeySchema.parse(`${PROJECT_KEY_PREFIX}${hexadecimal}`);
-}
-/** Derive a root- and repository-bound project key from an injected hash port. */
-export function deriveProjectKey(identity, sha256) {
-    const value = ProjectIdentitySchema.parse(identity);
-    assertSha256(sha256, "deriveProjectKey");
-    return formatProjectKey(sha256(projectIdentityPreimage(value)));
-}
-function constantTimeEqual(left, right) {
-    let difference = left.length ^ right.length;
-    const length = Math.max(left.length, right.length);
-    for (let index = 0; index < length; index += 1) {
-        difference |= (left.charCodeAt(index) || 0) ^ (right.charCodeAt(index) || 0);
-    }
-    return difference === 0;
-}
-/**
- * Validate an untrusted context and recompute its project key before exposing
- * it to state code. User context has no identity/key and therefore needs no
- * hash port; project context always proves its supplied key.
- */
-export function createScopeContext(input, sha256) {
-    const value = ScopeContextSchema.parse(input);
-    if (value.kind === "user") {
-        verifiedScopeContexts.add(value);
-        return value;
-    }
-    const expected = deriveProjectKey(value.identity, sha256);
-    if (!constantTimeEqual(value.projectKey, expected)) {
-        throw new Error("project key does not match project identity");
-    }
-    verifiedScopeContexts.add(value);
-    return value;
-}
-/** True only for a scope object produced by the hash-verifying factory. */
-export function isVerifiedScopeContext(value) {
-    return typeof value === "object" && value !== null && verifiedScopeContexts.has(value);
-}
-/** Reduce a runtime context to the path-free reference persisted in records. */
-export function toScopeReference(context) {
-    const value = ScopeContextSchema.parse(context);
-    return value.kind === "user"
-        ? { kind: "user" }
-        : ScopeReferenceSchema.parse({ kind: "project", projectKey: value.projectKey });
-}
-//# sourceMappingURL=scope.js.map

package/node_modules/@nklisch/pi-plugins/dist/domain/state/scope.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../src/domain/state/scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,GAGjB,MAAM,cAAc,CAAC;AAEtB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AACrD,MAAM,UAAU,GAAG,WAAW,CAAC;AAE/B,SAAS,gBAAgB,CAAC,KAAa;IACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,IAAI,IAAI,GAAG,MAAM;gBAAE,OAAO,IAAI,CAAC;YACtE,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,OAAwB,EAAE,OAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG;YAAE,SAAS;QACnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa,EAAE,OAAwB;IAC3E,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,OAAO,EAAE,wEAAwE,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,OAAO,EAAE,uEAAuE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,4DAA4D,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,OAAO,EAAE,sDAAsD,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,OAAO,EAAE,iDAAiD,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,QAAQ,CAAC,OAAO,EAAE,sDAAsD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACrD,QAAQ,CAAC,OAAO,EAAE,mDAAmD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC/C,QAAQ,CAAC,OAAO,EAAE,2DAA2D,CAAC,CAAC;IACjF,CAAC;IACD,uEAAuE;IACvE,0EAA0E;IAC1E,yDAAyD;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,QAAQ,CAAC,OAAO,EAAE,6DAA6D,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,qDAAqD,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,uDAAuD,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACjF,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,OAAO,EAAE,2DAA2D,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,QAAQ,CAAC,OAAO,EAAE,2DAA2D,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,IACE,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,IAAI;YAChB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;gBAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChD,OAAO,SAAS,GAAG,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC;YAChD,CAAC,CAAC,EACF,CAAC;YACD,QAAQ,CAAC,OAAO,EAAE,wDAAwD,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,QAAQ,CAAC,OAAO,EAAE,qDAAqD,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,EAAE;KACR,GAAG,EAAE;KACL,WAAW,CAAC,4BAA4B,CAAC;KACzC,KAAK,EAA0B,CAAC;AAGnC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7B,aAAa,EAAE,0BAA0B;QACzC,qBAAqB,EAAE,gBAAgB;KACxC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,aAAa,EAAE,0BAA0B;QACzC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC;KAC9D,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,KAAK,CAAC,kCAAkC,CAAC;KACzC,KAAK,EAAgB,CAAC;AAGzB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,kBAAkB,CAAC,MAAM,EAAE;IAC1B,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzD,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;SACpE,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,QAAQ,EAAE,qBAAqB;QAC/B,UAAU,EAAE,gBAAgB;KAC7B,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC,CAAC;AAGH,yGAAyG;AACzG,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAAU,CAAC;AAEpD,SAAS,YAAY,CAAC,MAAc,EAAE,SAAiB;IACrD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,GAAG,SAAS,8BAA8B,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC;QACrB,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI;QACrB,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI;QACrB,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,IAAI;QACpB,KAAK,GAAG,IAAI;KACb,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAA4B;IAC1C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,KAAa;IACvC,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAyB;IACxD,MAAM,MAAM,GAAG;QACb,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACpC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC;QAC5B,KAAK,CAAC,gBAAgB,EAAE,QAAQ,CAAC,aAAa,CAAC;KAChD,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,wBAAwB,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAkB;IAC1C,IAAI,CAAC,CAAC,MAAM,YAAY,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,OAAO,gBAAgB,CAAC,KAAK,CAAC,GAAG,kBAAkB,GAAG,WAAW,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,QAAyB,EAAE,MAAc;IACxE,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,YAAY,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACzC,OAAO,gBAAgB,CAAC,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,UAAU,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,MAAc;IAC/D,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACpD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM;QAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;QAClB,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;AACpF,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/domain/state/trust-state.d.ts

@@ -1,98 +0,0 @@
-import { z } from "zod";
-import { type CanonicalSource, type Sha256 } from "../source.js";
-import { type ContentDigest } from "../content-manifest.js";
-import { type PluginKey } from "../identity.js";
-import { type ScopeReference } from "./scope.js";
-import { type TrustSubjectRef } from "./references.js";
-/** Trust state stores a decision, not the policy that made that decision. */
-export declare const TrustDecisionStatusSchema: z.ZodEnum<{
-    granted: "granted";
-    revoked: "revoked";
-}>;
-export type TrustDecisionStatus = z.infer<typeof TrustDecisionStatusSchema>;
-/**
- * An immutable revision is deliberately a small evidence token. The source
- * schema owns the exact grammar for each source kind; this envelope does not
- * infer or reimplement that grammar because trust must remain source-format
- * neutral. Control characters and lone surrogates are excluded so this value
- * cannot smuggle a second serialized field or an unsafe diagnostic.
- */
-export declare const ImmutableRevisionEvidenceSchema: z.ZodString;
-export type ImmutableRevisionEvidence = z.infer<typeof ImmutableRevisionEvidenceSchema>;
-/** Safe, canonical evidence bound to one plugin and one persisted scope. */
-export declare const TrustSubjectEvidenceSchema: z.ZodReadonly<z.ZodObject<{
-    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"user">;
-    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"project">;
-        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-    }, z.core.$strict>>], "kind">;
-    marketplaceSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
-    pluginSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
-    immutableRevision: z.ZodString;
-    executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-}, z.core.$strict>>;
-export type TrustSubjectEvidence = z.infer<typeof TrustSubjectEvidenceSchema>;
-export declare const TrustStateRecordSchema: z.ZodReadonly<z.ZodObject<{
-    subject: z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">;
-    evidence: z.ZodReadonly<z.ZodObject<{
-        plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-        scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"user">;
-        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"project">;
-            projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-        }, z.core.$strict>>], "kind">;
-        marketplaceSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
-        pluginSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
-        immutableRevision: z.ZodString;
-        executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-    }, z.core.$strict>>;
-    status: z.ZodEnum<{
-        granted: "granted";
-        revoked: "revoked";
-    }>;
-}, z.core.$strict>>;
-export type TrustStateRecord = z.infer<typeof TrustStateRecordSchema>;
-/**
- * The only trust envelope schema. The literal version remains so a future
- * clean cut-over can recognize stale documents; stale versions are
- * reinitialized by the state codec, never migrated.
- */
-export declare const TrustStateDocumentSchema: z.ZodReadonly<z.ZodObject<{
-    schemaVersion: z.ZodLiteral<1>;
-    generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
-    records: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-        subject: z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">;
-        evidence: z.ZodReadonly<z.ZodObject<{
-            plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-            scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-                kind: z.ZodLiteral<"user">;
-            }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-                kind: z.ZodLiteral<"project">;
-                projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-            }, z.core.$strict>>], "kind">;
-            marketplaceSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
-            pluginSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
-            immutableRevision: z.ZodString;
-            executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-        }, z.core.$strict>>;
-        status: z.ZodEnum<{
-            granted: "granted";
-            revoked: "revoked";
-        }>;
-    }, z.core.$strict>>>>;
-}, z.core.$strict>>;
-export type TrustStateDocument = z.infer<typeof TrustStateDocumentSchema>;
-/** Derive the trust subject from safe evidence; caller claims are verified. */
-export declare function createTrustStateRecord(input: unknown, sha256: Sha256): TrustStateRecord;
-/** Verify a persisted record without introducing policy semantics. */
-export declare function verifyTrustStateRecord(input: unknown, sha256: Sha256): TrustStateRecord;
-export declare function createTrustStateDocument(input: unknown, sha256: Sha256): TrustStateDocument;
-/**
- * This helper is intentionally about persistence identity only. It does not
- * answer whether a grant is sufficient, who may update it, or when to prompt.
- */
-export declare function deriveTrustSubject(evidence: TrustSubjectEvidence, sha256: Sha256): TrustSubjectRef;
-export type { CanonicalSource, ContentDigest, PluginKey, ScopeReference, };

package/node_modules/@nklisch/pi-plugins/dist/domain/state/trust-state.js

@@ -1,143 +0,0 @@
-import { z } from "zod";
-import { CanonicalSourceSchema, } from "../source.js";
-import { ContentDigestSchema } from "../content-manifest.js";
-import { PluginKeySchema } from "../identity.js";
-import { ScopeReferenceSchema } from "./scope.js";
-import { TrustSubjectRefSchema, deriveTrustSubjectRef, verifyTrustSubjectRef, } from "./references.js";
-import { GenerationSchema } from "./config-state.js";
-/** Trust state stores a decision, not the policy that made that decision. */
-export const TrustDecisionStatusSchema = z.enum(["granted", "revoked"]);
-/**
- * An immutable revision is deliberately a small evidence token. The source
- * schema owns the exact grammar for each source kind; this envelope does not
- * infer or reimplement that grammar because trust must remain source-format
- * neutral. Control characters and lone surrogates are excluded so this value
- * cannot smuggle a second serialized field or an unsafe diagnostic.
- */
-export const ImmutableRevisionEvidenceSchema = z
-    .string()
-    .min(1)
-    .max(4096)
-    .superRefine((value, context) => {
-    for (let index = 0; index < value.length; index += 1) {
-        const codeUnit = value.charCodeAt(index);
-        if (codeUnit >= 0xd800 && codeUnit <= 0xdbff) {
-            const next = value.charCodeAt(index + 1);
-            if (Number.isNaN(next) || next < 0xdc00 || next > 0xdfff) {
-                context.addIssue({
-                    code: "custom",
-                    message: "immutable revision cannot contain lone surrogates",
-                });
-                return;
-            }
-            index += 1;
-        }
-        else if (codeUnit >= 0xdc00 && codeUnit <= 0xdfff) {
-            context.addIssue({
-                code: "custom",
-                message: "immutable revision cannot contain lone surrogates",
-            });
-            return;
-        }
-        if (codeUnit < 0x20 || codeUnit === 0x7f) {
-            context.addIssue({
-                code: "custom",
-                message: "immutable revision cannot contain control characters",
-            });
-            return;
-        }
-    }
-});
-/** Safe, canonical evidence bound to one plugin and one persisted scope. */
-export const TrustSubjectEvidenceSchema = z
-    .object({
-    plugin: PluginKeySchema,
-    scope: ScopeReferenceSchema,
-    marketplaceSource: CanonicalSourceSchema,
-    pluginSource: CanonicalSourceSchema,
-    immutableRevision: ImmutableRevisionEvidenceSchema,
-    executableSurfaceDigest: ContentDigestSchema,
-})
-    .strict()
-    .readonly();
-export const TrustStateRecordSchema = z
-    .object({
-    subject: TrustSubjectRefSchema,
-    evidence: TrustSubjectEvidenceSchema,
-    status: TrustDecisionStatusSchema,
-})
-    .strict()
-    .readonly();
-function addDuplicateSubjectIssues(records, context) {
-    const firstBySubject = new Map();
-    for (const [index, record] of records.entries()) {
-        const firstIndex = firstBySubject.get(record.subject);
-        if (firstIndex !== undefined) {
-            context.addIssue({
-                code: "custom",
-                path: ["records", index, "subject"],
-                message: `duplicate trust subject; first declared at index ${firstIndex}`,
-            });
-        }
-        else {
-            firstBySubject.set(record.subject, index);
-        }
-    }
-}
-/**
- * The only trust envelope schema. The literal version remains so a future
- * clean cut-over can recognize stale documents; stale versions are
- * reinitialized by the state codec, never migrated.
- */
-export const TrustStateDocumentSchema = z
-    .object({
-    schemaVersion: z.literal(1),
-    generation: GenerationSchema,
-    records: z.array(TrustStateRecordSchema).readonly(),
-})
-    .strict()
-    .readonly()
-    .superRefine((document, context) => {
-    addDuplicateSubjectIssues(document.records, context);
-});
-const TrustSubjectEvidenceInputSchema = TrustSubjectEvidenceSchema;
-const TrustStateRecordInputSchema = z
-    .object({
-    subject: TrustSubjectRefSchema.optional(),
-    evidence: TrustSubjectEvidenceInputSchema,
-    status: TrustDecisionStatusSchema,
-})
-    .strict();
-/** Derive the trust subject from safe evidence; caller claims are verified. */
-export function createTrustStateRecord(input, sha256) {
-    const value = TrustStateRecordInputSchema.parse(input);
-    const evidence = TrustSubjectEvidenceSchema.parse(value.evidence);
-    const subject = deriveTrustSubjectRef(evidence, sha256);
-    if (value.subject !== undefined) {
-        verifyTrustSubjectRef(value.subject, evidence, sha256);
-    }
-    return TrustStateRecordSchema.parse({
-        subject,
-        evidence,
-        status: value.status,
-    });
-}
-/** Verify a persisted record without introducing policy semantics. */
-export function verifyTrustStateRecord(input, sha256) {
-    return createTrustStateRecord(input, sha256);
-}
-export function createTrustStateDocument(input, sha256) {
-    const value = TrustStateDocumentSchema.parse(input);
-    return TrustStateDocumentSchema.parse({
-        ...value,
-        records: value.records.map((record) => createTrustStateRecord(record, sha256)),
-    });
-}
-/**
- * This helper is intentionally about persistence identity only. It does not
- * answer whether a grant is sufficient, who may update it, or when to prompt.
- */
-export function deriveTrustSubject(evidence, sha256) {
-    return deriveTrustSubjectRef(TrustSubjectEvidenceSchema.parse(evidence), sha256);
-}
-//# sourceMappingURL=trust-state.js.map

package/node_modules/@nklisch/pi-plugins/dist/domain/state/trust-state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-state.js","sourceRoot":"","sources":["../../../src/domain/state/trust-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,GAGtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAsB,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,eAAe,EAAkB,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAuB,MAAM,YAAY,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,GAEtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAGxE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,IAAI,CAAC;KACT,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;gBACzD,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,mDAAmD;iBAC7D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YACpD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,GAAG,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACzC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,sDAAsD;aAChE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE,oBAAoB;IAC3B,iBAAiB,EAAE,qBAAqB;IACxC,YAAY,EAAE,qBAAqB;IACnC,iBAAiB,EAAE,+BAA+B;IAClD,uBAAuB,EAAE,mBAAmB;CAC7C,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,EAAE,CAAC;AAGd,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,OAAO,EAAE,qBAAqB;IAC9B,QAAQ,EAAE,0BAA0B;IACpC,MAAM,EAAE,yBAAyB;CAClC,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,EAAE,CAAC;AAGd,SAAS,yBAAyB,CAChC,OAAoC,EACpC,OAAwB;IAExB,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC;gBACnC,OAAO,EAAE,oDAAoD,UAAU,EAAE;aAC1E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACjC,yBAAyB,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAGL,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AACnE,MAAM,2BAA2B,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,+BAA+B;IACzC,MAAM,EAAE,yBAAyB;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,MAAc;IAEd,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,sBAAsB,CAAC,KAAK,CAAC;QAClC,OAAO;QACP,QAAQ;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,MAAc;IAEd,OAAO,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,MAAc;IAEd,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,wBAAwB,CAAC,KAAK,CAAC;QACpC,GAAG,KAAK;QACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC/E,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA8B,EAC9B,MAAc;IAEd,OAAO,qBAAqB,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AACnF,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/domain/time.d.ts

@@ -1,4 +0,0 @@
-import { z } from "zod";
-/** Wall-clock values are the only time evidence that may cross processes. */
-export declare const EpochMillisecondsSchema: z.ZodNumber;
-export type EpochMilliseconds = z.infer<typeof EpochMillisecondsSchema>;