@nklisch/pi-enhanced 0.2.3 → 0.2.4

package/node_modules/@nklisch/pi-plugins/dist/application/agent-orientation.js

@@ -1,223 +0,0 @@
-import { canonicalJson } from "../domain/canonical-json.js";
-import { hashContent } from "../domain/content-manifest.js";
-export const AGENT_ORIENTATION_CUSTOM_TYPE = "plugin-host:agent-orientation-v1";
-export const AGENT_ORIENTATION_GENERATOR_VERSION = "agent-orientation-v1";
-export const MAX_ORIENTATION_DESCRIPTION_LENGTH = 240;
-export class AgentOrientationUnavailableError extends Error {
-    code;
-    constructor(code) {
-        super(code);
-        this.name = "AgentOrientationUnavailableError";
-        this.code = code;
-    }
-}
-export function createAgentOrientationUnavailableError(code) {
-    return new AgentOrientationUnavailableError(code);
-}
-function scopeOrder(scope) {
-    return scope.kind === "user" ? 0 : 1;
-}
-function scopeSortKey(scope) {
-    return scope.kind === "user" ? "user" : `project:${scope.projectKey}`;
-}
-function compareText(left, right) {
-    return left < right ? -1 : left > right ? 1 : 0;
-}
-function comparePlugins(left, right) {
-    return scopeOrder(left.scope) - scopeOrder(right.scope) ||
-        compareText(scopeSortKey(left.scope), scopeSortKey(right.scope)) ||
-        compareText(left.plugin, right.plugin);
-}
-function compareDegraded(left, right) {
-    return scopeOrder(left.scope ?? { kind: "user" }) - scopeOrder(right.scope ?? { kind: "user" }) ||
-        compareText(left.plugin, right.plugin) || compareText(left.code, right.code);
-}
-function text(value) {
-    return value.replace(/[\u0000-\u001f\u007f\r\n\t ]+/gu, " ").trim().replaceAll("/plugins", "plugin manager");
-}
-function displayDescription(value) {
-    if (value === undefined)
-        return undefined;
-    const normalized = text(value);
-    if (normalized.length === 0 || normalized.length > MAX_ORIENTATION_DESCRIPTION_LENGTH)
-        return undefined;
-    return normalized;
-}
-function displayVersion(plugin) {
-    return text(plugin.version) || "unknown";
-}
-function pluginStatus(plugin) {
-    const activation = plugin.activation === "enabled" ? "enabled" : "disabled";
-    if (plugin.degraded !== undefined)
-        return `${activation} · ${plugin.active ? "active" : "inactive"} · DEGRADED`;
-    return `${activation} · ${plugin.active ? "active" : "inactive"}`;
-}
-function componentCount(plugin, kind) {
-    if (kind === "skills")
-        return plugin.skillCount ?? plugin.skills.length;
-    if (kind === "hooks")
-        return plugin.hookCount ?? plugin.hooks.length;
-    return plugin.mcpServerCount ?? plugin.mcpServers.length;
-}
-function componentCounts(plugin) {
-    const foreign = plugin.foreignCount === undefined || plugin.foreignCount === 0
-        ? ""
-        : `, ${plugin.foreignCount} foreign`;
-    return `${componentCount(plugin, "skills")} skills, ${componentCount(plugin, "hooks")} hooks, ${componentCount(plugin, "mcpServers")} MCP servers${foreign}`;
-}
-function oneLineSkill(skill) {
-    const description = displayDescription(skill.description);
-    return description === undefined ? `- ${text(skill.name)}` : `- ${text(skill.name)} — ${description}`;
-}
-function componentDetails(plugin) {
-    const lines = [];
-    const skills = componentCount(plugin, "skills");
-    const hooks = componentCount(plugin, "hooks");
-    const mcpServers = componentCount(plugin, "mcpServers");
-    lines.push(`skills (${skills}):`);
-    if (plugin.skills.length === 0)
-        lines.push(skills === 0 ? "- none" : "- detail unavailable");
-    else
-        lines.push(...plugin.skills.map(oneLineSkill));
-    lines.push(`hooks (${hooks}): ${plugin.hooks.length === 0 ? (hooks === 0 ? "none" : "detail unavailable") : plugin.hooks.map(text).join(", ")}`);
-    lines.push(`mcp servers (${mcpServers}): ${plugin.mcpServers.length === 0 ? (mcpServers === 0 ? "none" : "detail unavailable") : plugin.mcpServers.map(text).join(", ")}`);
-    return lines;
-}
-function pluginBlock(plugin, includeDetails) {
-    const lines = [
-        `## ${text(plugin.plugin)} — ${displayVersion(plugin)} · ${pluginStatus(plugin)}`,
-        `scope: ${plugin.scope.kind}${plugin.scope.kind === "project" ? ` (${plugin.scope.projectKey})` : ""} · marketplace: ${text(plugin.marketplace)} · revision: ${text(plugin.revision)}`,
-        `components: ${componentCounts(plugin)}`,
-    ];
-    if (plugin.runningRevision !== undefined && plugin.runningRevision !== plugin.revision) {
-        lines.push(`running revision: ${text(plugin.runningRevision)}`);
-    }
-    if (plugin.degraded !== undefined) {
-        lines.push(`status: ${text(plugin.degraded.code)} — ${text(plugin.degraded.explanation)}`);
-    }
-    if (includeDetails)
-        lines.push(...componentDetails(plugin));
-    return lines.join("\n");
-}
-function briefFooter() {
-    return [
-        "## For the human user — not agent tools",
-        "The command families below are typed by the human in the Pi TUI. When the user asks how to manage plugins, relay these; they are not callable by you.",
-        "- Plugin manager family: open the `/plugins` manager.",
-        "- Inspection family: list, doctor, and status.",
-        "- Lifecycle family: add/install, enable/disable, update, remove/uninstall, repair, and rollback.",
-    ].join("\n");
-}
-function inventoryHeader(input, plugins) {
-    return [
-        `<!-- Generated by pi-plugin-host ${text(input.packageVersion) || "unknown"} at session start and after plugin changes. Do not edit. -->`,
-        `# Installed plugins (${text(input.scopeLabel)})`,
-        `Inventory: ${plugins.length} installed record${plugins.length === 1 ? "" : "s"}.`,
-    ].join("\n");
-}
-function buildBrief(input, plugins) {
-    const blocks = plugins.map((plugin) => pluginBlock(plugin, true));
-    return [
-        inventoryHeader(input, plugins),
-        "",
-        ...blocks.flatMap((block) => [block, ""]),
-        briefFooter(),
-        "",
-    ].join("\n");
-}
-function injectionSummary(plugin) {
-    const status = plugin.degraded === undefined
-        ? plugin.activation
-        : `${plugin.activation}, degraded`;
-    return `${plugin.plugin} ${displayVersion(plugin)} (${componentCounts(plugin)}; ${status})`;
-}
-function injectionLines(input, plugins) {
-    const enabled = plugins.filter((plugin) => plugin.activation !== "disabled");
-    const visible = enabled.slice(0, 6);
-    const more = enabled.length - visible.length;
-    const disabled = plugins.filter((plugin) => plugin.activation === "disabled").map((plugin) => plugin.plugin);
-    const summaries = visible.map(injectionSummary);
-    if (more > 0)
-        summaries.push(`+${more} more (see brief)`);
-    const installed = `Plugins: ${plugins.length} installed (${text(input.scopeLabel)}) — ${summaries.length === 0 ? "none" : summaries.join("; ")}${disabled.length === 0 ? "" : `; disabled: ${disabled.join(", ")}`}.`;
-    const degraded = [...input.degraded].sort(compareDegraded);
-    const degradedLine = degraded.length === 0
-        ? undefined
-        : `Degraded: ${degraded.map((entry) => `${entry.plugin} (${text(entry.code)} — ${text(entry.explanation)})`).join("; ")}.`;
-    const pointer = `Per-plugin component detail: ${input.briefPath}`;
-    const lines = degradedLine === undefined ? [installed, pointer] : [installed, degradedLine, pointer];
-    // Plugin names and paths are local facts, but the injection contract must
-    // never accidentally teach the model a user-facing slash command.
-    return lines.map((line) => line.replaceAll("/plugins", "plugin manager"));
-}
-function digestEvidence(input, plugins, degraded) {
-    return {
-        generator: AGENT_ORIENTATION_GENERATOR_VERSION,
-        packageVersion: text(input.packageVersion) || "unknown",
-        briefPath: input.briefPath,
-        scopeLabel: input.scopeLabel,
-        plugins: plugins.map((plugin) => ({
-            scope: plugin.scope,
-            plugin: plugin.plugin,
-            marketplace: plugin.marketplace,
-            version: plugin.version,
-            revision: plugin.revision,
-            activation: plugin.activation,
-            active: plugin.active,
-            ...(plugin.runningRevision === undefined ? {} : { runningRevision: plugin.runningRevision }),
-            ...(plugin.degraded === undefined ? {} : { degraded: plugin.degraded }),
-            skills: plugin.skills,
-            hooks: plugin.hooks,
-            mcpServers: plugin.mcpServers,
-            ...(plugin.skillCount === undefined ? {} : { skillCount: plugin.skillCount }),
-            ...(plugin.hookCount === undefined ? {} : { hookCount: plugin.hookCount }),
-            ...(plugin.mcpServerCount === undefined ? {} : { mcpServerCount: plugin.mcpServerCount }),
-            ...(plugin.foreignCount === undefined ? {} : { foreignCount: plugin.foreignCount }),
-        })),
-        degraded: degraded.map((entry) => ({
-            ...(entry.scope === undefined ? {} : { scope: entry.scope }),
-            plugin: entry.plugin,
-            code: entry.code,
-            explanation: entry.explanation,
-        })),
-    };
-}
-/** Assemble the agent-only context and the human-readable derived brief. */
-export function assembleAgentOrientation(input) {
-    if (input === null || typeof input !== "object" || typeof input.sha256 !== "function") {
-        throw new TypeError("agent orientation input is required");
-    }
-    const plugins = [...input.plugins].sort(comparePlugins);
-    const degraded = [...input.degraded].sort(compareDegraded);
-    const briefMarkdown = buildBrief(input, plugins);
-    const digest = hashContent(new TextEncoder().encode(`agent-orientation-facts-v1\0${canonicalJson(digestEvidence(input, plugins, degraded))}`), input.sha256);
-    return Object.freeze({
-        injectionLines: Object.freeze(injectionLines({ ...input, degraded }, plugins)),
-        briefMarkdown,
-        factsDigest: digest,
-    });
-}
-/** Build the one-line startup message used when authoritative state is unreadable. */
-export function assembleUnavailableOrientation(input) {
-    const code = text(input.code) || "ORIENTATION_STATE_UNAVAILABLE";
-    const injection = `Plugins: pi-plugin-host state is unavailable this session (${code}); plugin-provided skills/MCP tools may be missing.`;
-    const digest = hashContent(new TextEncoder().encode(`agent-orientation-unavailable-v1\0${canonicalJson({
-        generator: AGENT_ORIENTATION_GENERATOR_VERSION,
-        packageVersion: text(input.packageVersion) || "unknown",
-        briefPath: input.briefPath,
-        code,
-    })}`), input.sha256);
-    const briefMarkdown = [
-        `<!-- Generated by pi-plugin-host ${text(input.packageVersion) || "unknown"}. Do not edit. -->`,
-        "# Plugin orientation unavailable",
-        "",
-        "Orientation unavailable this session because authoritative plugin state could not be read.",
-        "",
-    ].join("\n");
-    return Object.freeze({
-        injectionLines: Object.freeze([injection]),
-        briefMarkdown,
-        factsDigest: digest,
-    });
-}
-//# sourceMappingURL=agent-orientation.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/agent-orientation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-orientation.js","sourceRoot":"","sources":["../../src/application/agent-orientation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAsB,MAAM,+BAA+B,CAAC;AAKhF,MAAM,CAAC,MAAM,6BAA6B,GAAG,kCAAkC,CAAC;AAChF,MAAM,CAAC,MAAM,mCAAmC,GAAG,sBAAsB,CAAC;AAC1E,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AAEtD,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAChD,IAAI,CAAS;IAEtB,YAAY,IAAY;QACtB,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,UAAU,sCAAsC,CAAC,IAAY;IACjE,OAAO,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAiDD,SAAS,UAAU,CAAC,KAAqB;IACvC,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,KAAqB;IACzC,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,UAAU,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,IAAuB,EAAE,KAAwB;IACvE,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QACrD,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,eAAe,CAAC,IAAyB,EAAE,KAA0B;IAC5E,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC7F,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;AAC/G,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAyB;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,kCAAkC;QAAE,OAAO,SAAS,CAAC;IACxG,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB;IAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,GAAG,UAAU,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,aAAa,CAAC;IAChH,OAAO,GAAG,UAAU,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB,EAAE,IAAuC;IACxF,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACxE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;IACrE,OAAO,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC;QAC5E,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,UAAU,CAAC;IACvC,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,eAAe,OAAO,EAAE,CAAC;AAC/J,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB;IAC3C,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1D,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE,CAAC;AACxG,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAyB;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;;QACxF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjJ,KAAK,CAAC,IAAI,CAAC,gBAAgB,UAAU,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3K,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB,EAAE,cAAuB;IACrE,MAAM,KAAK,GAAG;QACZ,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE;QACjF,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,mBAAmB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACtL,eAAe,eAAe,CAAC,MAAM,CAAC,EAAE;KACzC,CAAC;IACF,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvF,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,yCAAyC;QACzC,uJAAuJ;QACvJ,uDAAuD;QACvD,gDAAgD;QAChD,kGAAkG;KACnG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAA4B,EAAE,OAAqC;IAC1F,OAAO;QACL,oCAAoC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,SAAS,8DAA8D;QACzI,wBAAwB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG;QACjD,cAAc,OAAO,CAAC,MAAM,oBAAoB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;KACnF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAA4B,EAAE,OAAqC;IACrF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,OAAO;QACL,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC;QAC/B,EAAE;QACF,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,WAAW,EAAE;QACb,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AACD,SAAS,gBAAgB,CAAC,MAAyB;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC1C,CAAC,CAAC,MAAM,CAAC,UAAU;QACnB,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,YAAY,CAAC;IACrC,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC,KAAK,MAAM,GAAG,CAAC;AAC9F,CAAC;AAED,SAAS,cAAc,CAAC,KAA4B,EAAE,OAAqC;IACzF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7G,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,IAAI,GAAG,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,mBAAmB,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,YAAY,OAAO,CAAC,MAAM,eAAe,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC;IACtN,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;QACxC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC7H,MAAM,OAAO,GAAG,gCAAgC,KAAK,CAAC,SAAS,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACrG,0EAA0E;IAC1E,kEAAkE;IAClE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,KAA4B,EAAE,OAAqC,EAAE,QAAwC;IACnI,OAAO;QACL,SAAS,EAAE,mCAAmC;QAC9C,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,SAAS;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5F,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YAC7E,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1E,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;YACzF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;SACpF,CAAC,CAAC;QACH,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5D,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CAAC,KAA4B;IACnE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACtF,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,WAAW,CACxB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,+BAA+B,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,EAClH,KAAK,CAAC,MAAM,CACb,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QAC9E,aAAa;QACb,WAAW,EAAE,MAAM;KACpB,CAAC,CAAC;AACL,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,8BAA8B,CAAC,KAK7C;IACA,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,+BAA+B,CAAC;IACjE,MAAM,SAAS,GAAG,8DAA8D,IAAI,qDAAqD,CAAC;IAC1I,MAAM,MAAM,GAAG,WAAW,CACxB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,qCAAqC,aAAa,CAAC;QAC1E,SAAS,EAAE,mCAAmC;QAC9C,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,SAAS;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI;KACL,CAAC,EAAE,CAAC,EACL,KAAK,CAAC,MAAM,CACb,CAAC;IACF,MAAM,aAAa,GAAG;QACpB,oCAAoC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,SAAS,oBAAoB;QAC/F,kCAAkC;QAClC,EAAE;QACF,4FAA4F;QAC5F,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1C,aAAa;QACb,WAAW,EAAE,MAAM;KACpB,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/automatic-trust-continuity.d.ts

@@ -1,33 +0,0 @@
-import type { Sha256 } from "../domain/source.js";
-import { type ScopeContext } from "../domain/state/scope.js";
-import type { InstalledPluginLoader } from "./ports/installed-plugin-loader.js";
-import type { LifecycleStateStore } from "./ports/lifecycle-state-store.js";
-import type { ProjectTrustPort } from "./ports/project-trust.js";
-/**
- * Automatic trust continuity. Enabling automatic updates is the operator's
- * consent to acquire, validate, and activate compatible new revisions from the
- * same trusted source, including revisions that change hook or MCP execution
- * definitions. Exact-subject trust evaluation never infers that consent at
- * read time, so this service records the exact grant for the selected
- * revision itself whenever the automatic policy, an unchanged source lineage,
- * and a granted baseline all hold. Explicit revocation of the exact subject
- * still wins; a lineage with no granted baseline still requires interactive
- * consent.
- */
-export interface AutomaticTrustContinuity {
-    ensure(scope: ScopeContext, signal: AbortSignal): Promise<AutomaticTrustContinuityResult>;
-}
-export type AutomaticTrustContinuityResult = Readonly<{
-    kind: "ensured";
-    granted: readonly string[];
-}> | Readonly<{
-    kind: "unavailable";
-}>;
-export type AutomaticTrustContinuityDependencies = Readonly<{
-    state: LifecycleStateStore;
-    mutations: LifecycleStateStore;
-    installed: InstalledPluginLoader;
-    projectTrust?: ProjectTrustPort;
-    sha256: Sha256;
-}>;
-export declare function createAutomaticTrustContinuity(dependencies: AutomaticTrustContinuityDependencies): AutomaticTrustContinuity;

package/node_modules/@nklisch/pi-plugins/dist/application/automatic-trust-continuity.js

@@ -1,292 +0,0 @@
-import { compareUtf8 } from "../domain/canonical-json.js";
-import { MarketplaceNameSchema } from "../domain/identity.js";
-import { createTrustCandidate, grantTrust } from "../domain/trust-policy.js";
-import { createTrustStateDocument, verifyTrustStateRecord, } from "../domain/state/trust-state.js";
-import { toScopeReference } from "../domain/state/scope.js";
-import { deriveMarketplaceSourceIdentity } from "../domain/update-policy.js";
-import { parseStateMutation } from "./state-contract.js";
-import { resolveEffectiveUpdatePolicy } from "./update-policy-resolution.js";
-import { runScopedMutation } from "./state-transaction.js";
-function installedPlugins(snapshot) {
-    return "installed" in snapshot ? snapshot.installed.plugins : snapshot.project.plugins;
-}
-function trustRecordsOf(snapshot) {
-    return "trust" in snapshot ? snapshot.trust.records : [];
-}
-function marketplaceOf(plugin) {
-    return plugin.slice(plugin.lastIndexOf("@") + 1);
-}
-/**
- * Load-free presence check for the selected revision's exact subject. The
- * subject is derived from evidence whose revision-embedded fields are fully
- * determined by the materialization binding, so a record matching plugin,
- * scope, immutable revision, and executable surface IS the exact subject.
- */
-function hasExactSubjectRecord(records, pluginRecord, selected, scope, sha256) {
-    for (const raw of records) {
-        let record;
-        try {
-            record = verifyTrustStateRecord(raw, sha256);
-        }
-        catch {
-            continue;
-        }
-        if (record.evidence.plugin !== pluginRecord.plugin)
-            continue;
-        if (record.evidence.scope.kind !== scope.kind ||
-            (scope.kind === "project" && (record.evidence.scope.kind !== "project" || record.evidence.scope.projectKey !== scope.projectKey)))
-            continue;
-        if (record.evidence.immutableRevision === selected.revision &&
-            record.evidence.executableSurfaceDigest === selected.evidence.trust.executableSurfaceDigest) {
-            return true;
-        }
-    }
-    return false;
-}
-/**
- * Lineage consent: an exact grant for another installed revision of the same
- * plugin whose stable source identities match the selected revision. Trust
- * evidence embeds the immutable revision in its canonical sources, so lineage
- * is anchored on installed revision records (revision digest plus executable
- * surface) rather than on the grant's canonical source text.
- */
-function hasGrantedBaseline(records, pluginRecord, selected, scope, sha256) {
-    const selectedIdentity = selected.evidence.source;
-    if (selectedIdentity.marketplaceSourceIdentity === undefined || selectedIdentity.pluginSourceIdentity === undefined)
-        return false;
-    for (const raw of records) {
-        let record;
-        try {
-            record = verifyTrustStateRecord(raw, sha256);
-        }
-        catch {
-            return false;
-        }
-        if (record.status !== "granted")
-            continue;
-        if (record.evidence.plugin !== pluginRecord.plugin)
-            continue;
-        if (record.evidence.scope.kind !== scope.kind ||
-            (scope.kind === "project" && (record.evidence.scope.kind !== "project" || record.evidence.scope.projectKey !== scope.projectKey)))
-            continue;
-        const anchor = pluginRecord.revisions.find((revision) => revision.revision === record.evidence.immutableRevision &&
-            revision.evidence.trust.executableSurfaceDigest === record.evidence.executableSurfaceDigest);
-        if (anchor === undefined)
-            continue;
-        if (anchor.evidence.source.marketplaceSourceIdentity !== selectedIdentity.marketplaceSourceIdentity ||
-            anchor.evidence.source.pluginSourceIdentity !== selectedIdentity.pluginSourceIdentity)
-            continue;
-        return true;
-    }
-    return false;
-}
-function exactRecord(records, subject, sha256) {
-    for (const raw of records) {
-        try {
-            const record = verifyTrustStateRecord(raw, sha256);
-            if (record.subject === subject)
-                return record;
-        }
-        catch {
-            return undefined;
-        }
-    }
-    return undefined;
-}
-class NoContinuityGrants extends Error {
-    constructor() {
-        super("locked snapshot already adjudicated every planned subject");
-        this.name = "NoContinuityGrants";
-    }
-}
-class ProjectAuthorityStale extends Error {
-    constructor() {
-        super("project authority changed between planning and commit");
-        this.name = "ProjectAuthorityStale";
-    }
-}
-export function createAutomaticTrustContinuity(dependencies) {
-    if (dependencies === null || typeof dependencies !== "object" || typeof dependencies.sha256 !== "function") {
-        throw new TypeError("automatic trust continuity dependencies are required");
-    }
-    async function projectTrusted(scope, signal) {
-        if (scope.kind === "user")
-            return true;
-        if (dependencies.projectTrust === undefined)
-            return false;
-        try {
-            return (await dependencies.projectTrust.assess(scope.projectKey, signal)).kind === "trusted";
-        }
-        catch (error) {
-            if (signal.aborted)
-                throw signal.reason ?? error;
-            return false;
-        }
-    }
-    async function planGrants(scope, snapshot, userSnapshot, signal) {
-        const policyRecords = "config" in snapshot ? snapshot.config.records : snapshot.project.marketplaceUpdates;
-        const scopedPolicy = "config" in snapshot ? snapshot.config.scope.application : snapshot.project.scope.application;
-        const globalPolicy = "config" in userSnapshot ? userSnapshot.config.global.application : undefined;
-        if (globalPolicy === undefined)
-            return undefined;
-        const records = trustRecordsOf(userSnapshot);
-        const trusted = await projectTrusted(scope, signal);
-        if (!trusted)
-            return [];
-        const planned = [];
-        for (const pluginRecord of installedPlugins(snapshot)) {
-            const plugin = pluginRecord.plugin;
-            const policyRecord = policyRecords.find((record) => record.marketplace === MarketplaceNameSchema.parse(marketplaceOf(plugin)));
-            if (policyRecord === undefined)
-                continue;
-            const selected = pluginRecord.revisions.find((revision) => revision.revision === pluginRecord.selectedRevision);
-            if (selected === undefined)
-                continue;
-            const effective = resolveEffectiveUpdatePolicy({
-                plugin,
-                record: policyRecord,
-                global: globalPolicy,
-                ...(scopedPolicy === undefined ? {} : { scope: scopedPolicy }),
-                marketplaceSourceIdentity: selected.evidence.source.marketplaceSourceIdentity ?? "legacy-unavailable",
-                registeredMarketplaceSourceIdentity: deriveMarketplaceSourceIdentity(policyRecord.source, dependencies.sha256),
-                pluginSourceIdentity: selected.evidence.source.pluginSourceIdentity ?? "legacy-unavailable",
-            });
-            if (effective.application !== "automatic" || effective.sourceGuard !== "none")
-                continue;
-            // Already-adjudicated subjects (granted or revoked) and plugins with no
-            // granted lineage never need their retained content loaded. Continuity
-            // runs every background cycle, so keep the steady state disk-free.
-            if (hasExactSubjectRecord(records, pluginRecord, selected, scope, dependencies.sha256))
-                continue;
-            if (!hasGrantedBaseline(records, pluginRecord, selected, scope, dependencies.sha256))
-                continue;
-            let loaded;
-            try {
-                loaded = await dependencies.installed.load({ scope, revision: selected }, signal);
-            }
-            catch (error) {
-                if (signal.aborted)
-                    throw signal.reason ?? error;
-                // Fail closed for this subject only; one unavailable plugin must not
-                // block continuity for every other plugin in the scope.
-                continue;
-            }
-            let candidate;
-            try {
-                candidate = createTrustCandidate({
-                    scope: toScopeReference(scope),
-                    marketplaceSource: loaded.marketplaceSource,
-                    plugin: loaded.plugin,
-                    compatibility: loaded.compatibility,
-                    content: loaded.content,
-                    materializationBinding: loaded.binding,
-                }, dependencies.sha256);
-            }
-            catch {
-                continue;
-            }
-            // The load-free checks above established absence of any exact record
-            // and the presence of a baseline; the candidate only names the subject
-            // being granted.
-            planned.push({ plugin, candidate, record: pluginRecord, selected });
-        }
-        return planned;
-    }
-    async function ensure(scope, signal) {
-        for (let attempt = 0; attempt < 2; attempt += 1) {
-            signal.throwIfAborted();
-            const loaded = await dependencies.state.read(scope, signal).catch((error) => {
-                if (signal.aborted)
-                    throw error;
-                return undefined;
-            });
-            if (loaded === undefined)
-                return { kind: "unavailable" };
-            if (!loaded.ok)
-                return { kind: "unavailable" };
-            // Trust authority is always user state, even for project-scope plugins.
-            const userLoaded = scope.kind === "user"
-                ? loaded
-                : await dependencies.state.read({ kind: "user" }, signal).catch((error) => {
-                    if (signal.aborted)
-                        throw error;
-                    return undefined;
-                });
-            if (userLoaded === undefined || !userLoaded.ok || !("trust" in userLoaded.snapshot))
-                return { kind: "unavailable" };
-            const planned = await planGrants(scope, loaded.snapshot, userLoaded.snapshot, signal);
-            if (planned === undefined)
-                return { kind: "unavailable" };
-            if (planned.length === 0)
-                return { kind: "ensured", granted: [] };
-            const outcome = await (async () => {
-                try {
-                    return { result: await runScopedMutation(dependencies.mutations, { kind: "user" }, (snapshot) => {
-                            if (!("trust" in snapshot))
-                                throw new Error("trust authority is not user state");
-                            const current = snapshot.trust.records;
-                            const additions = [];
-                            for (const entry of planned) {
-                                // Re-adjudicate against the latest snapshot: a concurrent grant
-                                // or revocation of the exact subject since planning wins.
-                                if (exactRecord(current, entry.candidate.subject, dependencies.sha256) !== undefined)
-                                    continue;
-                                if (!hasGrantedBaseline(current, entry.record, entry.selected, scope, dependencies.sha256))
-                                    continue;
-                                additions.push(grantTrust(entry.candidate, dependencies.sha256));
-                            }
-                            if (additions.length === 0)
-                                throw new NoContinuityGrants();
-                            const records = [...current, ...additions].sort((left, right) => compareUtf8(left.subject, right.subject));
-                            const trust = createTrustStateDocument({ schemaVersion: 1, generation: snapshot.generation, records }, dependencies.sha256);
-                            return {
-                                kind: "commit",
-                                mutation: parseStateMutation({ scope: { kind: "user" }, expectedGeneration: snapshot.generation, replace: { trust } }, dependencies.sha256),
-                                value: additions.map((record) => record.subject),
-                                ...(scope.kind === "project" ? {
-                                    // Project authority does not advance the user generation, so
-                                    // recheck it immediately before this user-state commit.
-                                    recheckAuthority: async () => {
-                                        if (!await projectTrusted(scope, signal))
-                                            throw new ProjectAuthorityStale();
-                                        const fresh = await dependencies.state.read(scope, signal);
-                                        if (!fresh.ok)
-                                            throw new ProjectAuthorityStale();
-                                        const replanned = await planGrants(scope, fresh.snapshot, snapshot, signal);
-                                        if (replanned === undefined)
-                                            throw new ProjectAuthorityStale();
-                                        const wanted = planned.map((entry) => entry.candidate.subject).sort(compareUtf8);
-                                        const current = replanned.map((entry) => entry.candidate.subject).sort(compareUtf8);
-                                        if (wanted.length !== current.length || wanted.some((subject, index) => subject !== current[index]))
-                                            throw new ProjectAuthorityStale();
-                                    },
-                                } : {}),
-                            };
-                        }, signal) };
-                }
-                catch (error) {
-                    if (error instanceof NoContinuityGrants)
-                        return { noGrants: true };
-                    // The project moved between planning and commit; the retry loop
-                    // replans against fresh authority.
-                    if (error instanceof ProjectAuthorityStale)
-                        return { projectStale: true };
-                    throw error;
-                }
-            })();
-            if ("noGrants" in outcome)
-                return { kind: "ensured", granted: [] };
-            if ("projectStale" in outcome)
-                continue;
-            const result = outcome.result;
-            if (result.kind === "committed")
-                return { kind: "ensured", granted: result.value };
-            if (result.kind === "stale")
-                continue;
-            return { kind: "unavailable" };
-        }
-        return { kind: "unavailable" };
-    }
-    return Object.freeze({ ensure });
-}
-//# sourceMappingURL=automatic-trust-continuity.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/automatic-trust-continuity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"automatic-trust-continuity.js","sourceRoot":"","sources":["../../src/application/automatic-trust-continuity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAkB,MAAM,uBAAuB,CAAC;AAE9E,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAuB,MAAM,2BAA2B,CAAC;AAClG,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GAEvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAqB,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAE7E,OAAO,EAAE,kBAAkB,EAA2B,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAuC3D,SAAS,gBAAgB,CAAC,QAA4B;IACpD,OAAO,WAAW,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;AACzF,CAAC;AAED,SAAS,cAAc,CAAC,QAA4B;IAClD,OAAO,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,MAAiB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAC5B,OAAoC,EACpC,YAAmC,EACnC,QAAoD,EACpD,KAAmB,EACnB,MAAc;IAEd,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;YAAE,SAAS;QAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YACzC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;YAAE,SAAS;QAChJ,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,QAAQ;YACvD,MAAM,CAAC,QAAQ,CAAC,uBAAuB,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC;YAChG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CACzB,OAAoC,EACpC,YAAmC,EACnC,QAAoD,EACpD,KAAmB,EACnB,MAAc;IAEd,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClD,IAAI,gBAAgB,CAAC,yBAAyB,KAAK,SAAS,IAAI,gBAAgB,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAClI,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;YAAE,SAAS;QAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YACzC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;YAAE,SAAS;QAChJ,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtD,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,iBAAiB;YACvD,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,uBAAuB,KAAK,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAC/F,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,yBAAyB,KAAK,gBAAgB,CAAC,yBAAyB;YAC/F,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,KAAK,gBAAgB,CAAC,oBAAoB;YAAE,SAAS;QACpG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,OAAoC,EAAE,OAAe,EAAE,MAAc;IACxF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,MAAM,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,kBAAmB,SAAQ,KAAK;IACpC;QACE,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,qBAAsB,SAAQ,KAAK;IACvC;QACE,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,8BAA8B,CAAC,YAAkD;IAC/F,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,OAAO,YAAY,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3G,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,KAAmB,EAAE,MAAmB;QACpE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,YAAY,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC1D,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;QAC/F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,KAAmB,EAAE,QAA4B,EAAE,YAAgC,EAAE,MAAmB;QAChI,MAAM,aAAa,GAAG,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAC3G,MAAM,YAAY,GAAG,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACnH,MAAM,YAAY,GAAG,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACnG,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACjD,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,YAAY,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;YACnC,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/H,IAAI,YAAY,KAAK,SAAS;gBAAE,SAAS;YACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,YAAY,CAAC,gBAAgB,CAAC,CAAC;YAChH,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,SAAS,GAAG,4BAA4B,CAAC;gBAC7C,MAAM;gBACN,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,YAAY;gBACpB,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;gBAC9D,yBAAyB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,yBAAyB,IAAI,oBAAoB;gBACrG,mCAAmC,EAAE,+BAA+B,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;gBAC9G,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,IAAI,oBAAoB;aAC5F,CAAC,CAAC;YACH,IAAI,SAAS,CAAC,WAAW,KAAK,WAAW,IAAI,SAAS,CAAC,WAAW,KAAK,MAAM;gBAAE,SAAS;YACxF,wEAAwE;YACxE,uEAAuE;YACvE,mEAAmE;YACnE,IAAI,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;gBAAE,SAAS;YACjG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC/F,IAAI,MAA0D,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;gBACjD,qEAAqE;gBACrE,wDAAwD;gBACxD,SAAS;YACX,CAAC;YACD,IAAI,SAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,SAAS,GAAG,oBAAoB,CAAC;oBAC/B,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC;oBAC9B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,sBAAsB,EAAE,MAAM,CAAC,OAAO;iBACvC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,qEAAqE;YACrE,uEAAuE;YACvE,iBAAiB;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,KAAmB,EAAE,MAAmB;QAC5D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACnF,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,KAAK,CAAC;gBAChC,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAC/C,wEAAwE;YACxE,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM;gBACtC,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBAC/E,IAAI,MAAM,CAAC,OAAO;wBAAE,MAAM,KAAK,CAAC;oBAChC,OAAO,SAAS,CAAC;gBACnB,CAAC,CAAC,CAAC;YACP,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YACpH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACtF,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;gBAChC,IAAI,CAAC;oBACH,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CACtC,YAAY,CAAC,SAAS,EACtB,EAAE,IAAI,EAAE,MAAM,EAAE,EAChB,CAAC,QAAQ,EAAE,EAAE;4BACX,IAAI,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC;gCAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;4BACjF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;4BACvC,MAAM,SAAS,GAAuB,EAAE,CAAC;4BACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gCAC5B,gEAAgE;gCAChE,0DAA0D;gCAC1D,IAAI,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,SAAS;oCAAE,SAAS;gCAC/F,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;oCAAE,SAAS;gCACrG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;4BACnE,CAAC;4BACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gCAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;4BAC3D,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;4BAC3G,MAAM,KAAK,GAAG,wBAAwB,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;4BAC5H,OAAO;gCACL,IAAI,EAAE,QAAiB;gCACvB,QAAQ,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,kBAAkB,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC;gCAC3I,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;gCAChD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;oCAC7B,6DAA6D;oCAC7D,wDAAwD;oCACxD,gBAAgB,EAAE,KAAK,IAAI,EAAE;wCAC3B,IAAI,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC;4CAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;wCAC5E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;wCAC3D,IAAI,CAAC,KAAK,CAAC,EAAE;4CAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;wCACjD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;wCAC5E,IAAI,SAAS,KAAK,SAAS;4CAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;wCAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;wCACjF,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;wCACpF,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;4CAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;oCACzI,CAAC;iCACF,CAAC,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC;wBACJ,CAAC,EACD,MAAM,CACP,EAAE,CAAC;gBACN,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,kBAAkB;wBAAE,OAAO,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC;oBAC5E,gEAAgE;oBAChE,mCAAmC;oBACnC,IAAI,KAAK,YAAY,qBAAqB;wBAAE,OAAO,EAAE,YAAY,EAAE,IAAa,EAAE,CAAC;oBACnF,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,UAAU,IAAI,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACnE,IAAI,cAAc,IAAI,OAAO;gBAAE,SAAS;YACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACnF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YACtC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QACjC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/automatic-update-authorization.d.ts

@@ -1,49 +0,0 @@
-import "zod";
-import { type ContentDigest } from "../domain/content-manifest.js";
-import { type PluginKey } from "../domain/identity.js";
-import { type ScopeReference, type ScopeContext } from "../domain/state/scope.js";
-import { type InstalledRevisionRecord } from "../domain/state/installed-state.js";
-import { TrustStateRecordSchema, type TrustStateRecord } from "../domain/state/trust-state.js";
-import { type TrustCandidate } from "../domain/trust-policy.js";
-import { type StableSourceIdentity } from "../domain/update-policy.js";
-import type { LoadedInstalledPlugin } from "./ports/installed-plugin-loader.js";
-import type { ProjectTrustPort } from "./ports/project-trust.js";
-import type { Sha256 } from "../domain/source.js";
-import type { MarketplaceUpdateRecord } from "../domain/update-policy.js";
-import type { EffectiveUpdatePolicy } from "./native-update-contract.js";
-export type AutomaticUpdateAuthorizationResult = Readonly<{
-    kind: "authorized";
-    subject: import("../domain/state/references.js").TrustSubjectRef;
-}> | Readonly<{
-    kind: "denied";
-    code: "POLICY_MANUAL" | "LOCAL_SOURCE" | "MARKETPLACE_SOURCE_CHANGED" | "PLUGIN_SOURCE_CHANGED" | "LEGACY_SOURCE_IDENTITY" | "BASELINE_TRUST_ABSENT" | "BASELINE_TRUST_REVOKED" | "PROJECT_UNTRUSTED" | "STATE_STALE";
-}>;
-export type AutomaticUpdateAuthorizationEvidence = Readonly<{
-    kind: "automatic-authorization";
-    scope: ScopeReference;
-    plugin: PluginKey;
-    expectedRevision: ContentDigest;
-    marketplaceSourceIdentity: StableSourceIdentity;
-    pluginSourceIdentity: StableSourceIdentity;
-}>;
-export declare function isAutomaticUpdateAuthorizationEvidence(input: unknown): input is AutomaticUpdateAuthorizationEvidence;
-export declare function authorizeAutomaticUpdateCandidate(request: Readonly<{
-    scope: ScopeContext;
-    previous: LoadedInstalledPlugin;
-    previousRecord: InstalledRevisionRecord;
-    /** The candidate trust shape; the authorization result is still bound to the expected revision. */
-    candidate: TrustCandidate;
-    candidateMarketplaceSourceIdentity: StableSourceIdentity;
-    candidatePluginSourceIdentity: StableSourceIdentity;
-    expectedRevision: ContentDigest;
-    policyRecord: MarketplaceUpdateRecord;
-    effectivePolicy?: EffectiveUpdatePolicy;
-    trustRecords: readonly TrustStateRecord[];
-    projectDeclarationDigest?: ContentDigest;
-}>, dependencies: Readonly<{
-    projectTrust: ProjectTrustPort;
-    sha256: Sha256;
-}>, signal: AbortSignal): Promise<AutomaticUpdateAuthorizationResult>;
-/** Internal capability constructor used only by lifecycle preparation. */
-export declare function createAutomaticUpdateAuthorizationEvidence(input: AutomaticUpdateAuthorizationEvidence): AutomaticUpdateAuthorizationEvidence;
-export { TrustStateRecordSchema };