@provos/ironcurtain 0.10.0 → 0.12.0

package/dist/trusted-process/index.d.ts

@@ -1,49 +1,66 @@
 import type { IronCurtainConfig } from '../config/types.js';
 import type { ToolCallRequest, ToolCallResult } from '../types/mcp.js';
-import { type WhitelistCandidateIpc } from './approval-whitelist.js';
-/** Result from an escalation callback, optionally including whitelist selection. */
-export interface EscalationResult {
-    readonly decision: 'approved' | 'denied';
-    /** Index into whitelistCandidates to whitelist. Absent = no whitelisting. */
-    readonly whitelistSelection?: number;
-}
-export type EscalationPromptFn = (request: ToolCallRequest, reason: string, context?: Readonly<Record<string, string>>, 
-/** Whitelist candidates for display to the user. */
-whitelistCandidates?: readonly WhitelistCandidateIpc[]) => Promise<EscalationResult>;
+import { type EscalationPromptFn } from './tool-call-coordinator.js';
+/** Re-export for backward compatibility with callers that import from here. */
+export type { EscalationPromptFn };
+export type { EscalationResult } from './tool-call-coordinator.js';
 export interface TrustedProcessOptions {
+    /**
+     * In-process escalation callback used by direct-tool-call code paths
+     * (integration tests). When set, the coordinator invokes this
+     * instead of consulting the file-IPC escalation directory.
+     */
     onEscalation?: EscalationPromptFn;
 }
+/**
+ * In-process trusted process. Wraps `ToolCallCoordinator` for callers
+ * (integration tests, fallback direct-tool-call mode) that want a
+ * pre-wired object with a single `handleToolCall` entry point.
+ *
+ * After Step 1, both in-process and Code Mode paths share the same
+ * coordinator implementation for policy evaluation and audit logging.
+ *
+ * Lifecycle: `new TrustedProcess(config)` + `await initialize()`. The
+ * coordinator is constructed during `initialize()` (not the constructor)
+ * so the auto-approve model can be built first and threaded into
+ * construction-time invariants, rather than being attached after the
+ * fact.
+ */
 export declare class TrustedProcess {
     private config;
-    private policyEngine;
+    private coordinator;
     private mcpManager;
     private mcpRoots;
-    private auditLog;
     private escalation;
-    private onEscalation?;
-    private readonly whitelist;
-    private autoApproveModel;
-    private lastUserMessage;
-    private serverContextMap;
+    private readonly options;
     constructor(config: IronCurtainConfig, options?: TrustedProcessOptions);
+    /** Internal accessor: throws if used before `initialize()`. */
+    private requireCoordinator;
     /**
      * Sets the most recent user message for auto-approval context.
      * Called by the session layer before each agent turn.
      */
     setLastUserMessage(message: string): void;
     initialize(): Promise<void>;
+    /**
+     * Creates the auto-approve language model when enabled in user config.
+     * Returns `null` when auto-approve is disabled or model construction
+     * fails (non-fatal: the session continues with manual escalation).
+     */
+    private buildAutoApproveModel;
+    /**
+     * Connects to every configured MCP server and registers its tools
+     * with the coordinator. Unavailable servers are logged and skipped.
+     */
+    private connectMcpServers;
     listTools(serverName: string): Promise<{
         name: string;
         description?: string;
         inputSchema: unknown;
     }[]>;
     /**
-     * Handles a tool call request through the full trusted process lifecycle:
-     *   1. Evaluate policy (allow / deny / escalate)
-     *   2. If escalated, prompt the human for approval
-     *   3. If allowed, forward to the real MCP server
-     *   4. Log the complete decision trace to the audit log
-     *   5. Return the result to the caller
+     * Handles a tool call through the coordinator's policy pipeline.
+     * Mirrors the legacy TrustedProcess.handleToolCall signature.
      */
     handleToolCall(request: ToolCallRequest): Promise<ToolCallResult>;
     shutdown(): Promise<void>;

package/dist/trusted-process/index.js

@@ -1,79 +1,117 @@
-import { loadGeneratedPolicy, extractServerDomainAllowlists, checkConstitutionFreshness, getPackageGeneratedDir, } from '../config/index.js';
+import { loadGeneratedPolicy, extractServerDomainAllowlists, checkConstitutionFreshness, checkAnnotationFreshness, getPackageGeneratedDir, } from '../config/index.js';
 import { createLanguageModel } from '../config/model-provider.js';
-import { PolicyEngine, extractAnnotatedPaths } from './policy-engine.js';
-import { MCPClientManager } from './mcp-client-manager.js';
-import { getPathRoles } from '../types/argument-roles.js';
-import { AuditLog } from './audit-log.js';
+import { MCPClientManager as McpClientManagerImpl } from './mcp-client-manager.js';
 import { EscalationHandler } from './escalation.js';
-import { autoApprove } from './auto-approver.js';
-import { prepareToolArgs } from './path-utils.js';
-import { extractPolicyRoots, toMcpRoots, directoryForPath } from './policy-roots.js';
 import * as logger from '../logger.js';
-import { extractMcpErrorMessage } from './mcp-error-utils.js';
-import { extractTextFromContent, buildAuditEntry } from './mcp-proxy-server.js';
-import { updateServerContext, formatServerContext } from './server-context.js';
+import { extractPolicyRoots, toMcpRoots } from './policy-roots.js';
 import { buildTrustedServerSet } from '../memory/memory-annotations.js';
-import { createApprovalWhitelist, extractWhitelistCandidates, } from './approval-whitelist.js';
+import { ToolCallCoordinator } from './tool-call-coordinator.js';
+import { checkSandboxAvailability, resolveSandboxConfigsForAudit } from './sandbox-integration.js';
 /**
- * Detects Docker-style `-e VAR_NAME` args (no `=`) where the env var is unset.
+ * In-process trusted process. Wraps `ToolCallCoordinator` for callers
+ * (integration tests, fallback direct-tool-call mode) that want a
+ * pre-wired object with a single `handleToolCall` entry point.
+ *
+ * After Step 1, both in-process and Code Mode paths share the same
+ * coordinator implementation for policy evaluation and audit logging.
+ *
+ * Lifecycle: `new TrustedProcess(config)` + `await initialize()`. The
+ * coordinator is constructed during `initialize()` (not the constructor)
+ * so the auto-approve model can be built first and threaded into
+ * construction-time invariants, rather than being attached after the
+ * fact.
  */
-function getMissingEnvVars(args) {
-    const missing = [];
-    for (let i = 0; i < args.length; i++) {
-        if (args[i] === '-e' && i + 1 < args.length) {
-            const val = args[i + 1];
-            if (!val.includes('=') && !process.env[val]) {
-                missing.push(val);
-            }
-            i++;
-        }
-    }
-    return missing;
-}
 export class TrustedProcess {
     config;
-    policyEngine;
+    coordinator = null;
     mcpManager;
-    mcpRoots;
-    auditLog;
+    mcpRoots = [];
     escalation;
-    onEscalation;
-    whitelist;
-    autoApproveModel = null;
-    lastUserMessage = null;
-    serverContextMap = new Map();
+    options;
     constructor(config, options) {
         this.config = config;
-        const { compiledPolicy, toolAnnotations, dynamicLists } = loadGeneratedPolicy({
-            policyDir: config.generatedDir,
-            toolAnnotationsDir: config.toolAnnotationsDir ?? config.generatedDir,
-            fallbackDir: getPackageGeneratedDir(),
-        });
-        checkConstitutionFreshness(compiledPolicy, config.constitutionPath);
-        const serverDomainAllowlists = extractServerDomainAllowlists(config.mcpServers);
-        const trustedServers = buildTrustedServerSet(config.mcpServers);
-        this.policyEngine = new PolicyEngine(compiledPolicy, toolAnnotations, config.protectedPaths, config.allowedDirectory, serverDomainAllowlists, dynamicLists, trustedServers);
-        const policyRoots = extractPolicyRoots(compiledPolicy, config.allowedDirectory);
-        this.mcpRoots = toMcpRoots(policyRoots);
-        this.mcpManager = new MCPClientManager();
-        this.auditLog = new AuditLog(config.auditLogPath, {
-            redact: config.userConfig.auditRedaction.enabled,
-        });
+        this.options = options ?? {};
+        // In-process mode uses its own MCPClientManager so each `connect`
+        // call spawns a real backend directly (no router subprocess). The
+        // coordinator wraps it for the policy gate.
+        this.mcpManager = new McpClientManagerImpl();
         this.escalation = new EscalationHandler();
-        this.onEscalation = options?.onEscalation;
-        this.whitelist = createApprovalWhitelist();
+    }
+    /** Internal accessor: throws if used before `initialize()`. */
+    requireCoordinator() {
+        if (!this.coordinator) {
+            throw new Error('TrustedProcess used before initialize() -- call initialize() first.');
+        }
+        return this.coordinator;
     }
     /**
      * Sets the most recent user message for auto-approval context.
      * Called by the session layer before each agent turn.
      */
     setLastUserMessage(message) {
-        this.lastUserMessage = message;
+        this.requireCoordinator().setLastUserMessage(message);
     }
     async initialize() {
+        const { compiledPolicy, toolAnnotations, dynamicLists } = loadGeneratedPolicy({
+            policyDir: this.config.generatedDir,
+            toolAnnotationsDir: this.config.toolAnnotationsDir ?? this.config.generatedDir,
+            fallbackDir: getPackageGeneratedDir(),
+        });
+        checkConstitutionFreshness(compiledPolicy, this.config.constitutionPath);
+        checkAnnotationFreshness(toolAnnotations, this.config.mcpServers);
+        const serverDomainAllowlists = extractServerDomainAllowlists(this.config.mcpServers);
+        const trustedServers = buildTrustedServerSet(this.config.mcpServers);
+        // Build the auto-approve model BEFORE constructing the coordinator
+        // so it can be passed in as a construction-time invariant.
+        const autoApproveModel = await this.buildAutoApproveModel();
+        // Compute per-server sandbox disposition for audit annotation.
+        const { platformSupported } = checkSandboxAvailability();
+        const resolvedSandboxConfigs = resolveSandboxConfigsForAudit(this.config.mcpServers, this.config.allowedDirectory, platformSupported, this.config.sandboxPolicy ?? 'warn');
+        this.coordinator = new ToolCallCoordinator({
+            compiledPolicy,
+            toolAnnotations,
+            protectedPaths: this.config.protectedPaths,
+            allowedDirectory: this.config.allowedDirectory,
+            serverDomainAllowlists,
+            dynamicLists,
+            trustedServers,
+            auditLogPath: this.config.auditLogPath,
+            auditRedact: this.config.userConfig.auditRedaction.enabled,
+            escalationDir: this.config.escalationDir,
+            mcpManager: this.mcpManager,
+            onEscalation: this.options.onEscalation,
+            autoApproveModel,
+            resolvedSandboxConfigs,
+        });
+        const policyRoots = extractPolicyRoots(compiledPolicy, this.config.allowedDirectory);
+        this.mcpRoots = toMcpRoots(policyRoots);
+        await this.connectMcpServers();
+    }
+    /**
+     * Creates the auto-approve language model when enabled in user config.
+     * Returns `null` when auto-approve is disabled or model construction
+     * fails (non-fatal: the session continues with manual escalation).
+     */
+    async buildAutoApproveModel() {
+        const autoApproveConfig = this.config.userConfig.autoApprove;
+        if (!autoApproveConfig.enabled)
+            return null;
+        try {
+            return await createLanguageModel(autoApproveConfig.modelId, this.config.userConfig);
+        }
+        catch {
+            logger.warn('[auto-approve] Failed to create model; auto-approve disabled');
+            return null;
+        }
+    }
+    /**
+     * Connects to every configured MCP server and registers its tools
+     * with the coordinator. Unavailable servers are logged and skipped.
+     */
+    async connectMcpServers() {
+        const coordinator = this.requireCoordinator();
         const failedServers = [];
         for (const [name, serverConfig] of Object.entries(this.config.mcpServers)) {
-            // Skip servers whose args reference unset env vars (Docker -e VAR_NAME syntax)
             const missingVars = getMissingEnvVars(serverConfig.args);
             if (missingVars.length > 0) {
                 logger.warn(`Skipping MCP server '${name}': missing environment variable(s) ${missingVars.join(', ')}`);
@@ -84,6 +122,21 @@ export class TrustedProcess {
             try {
                 await this.mcpManager.connect(name, serverConfig, this.mcpRoots);
                 logger.info(`Connected to MCP server: ${name}`);
+                // Publish this server's tools to the coordinator so the policy
+                // gate can route calls through it. Share the manager's live
+                // `ClientState` so `addRootToClient` mutates the same roots
+                // array the manager returns from its `roots/list` handler.
+                const tools = await this.mcpManager.listTools(name);
+                const clientState = this.mcpManager.getClientState(name);
+                if (clientState) {
+                    const proxiedTools = tools.map((t) => ({
+                        serverName: name,
+                        name: t.name,
+                        description: t.description,
+                        inputSchema: (t.inputSchema ?? {}),
+                    }));
+                    coordinator.registerTools(name, proxiedTools, clientState);
+                }
             }
             catch (err) {
                 const msg = err instanceof Error ? err.message : String(err);
@@ -94,189 +147,42 @@ export class TrustedProcess {
         if (failedServers.length > 0) {
             logger.warn(`Unavailable MCP servers: ${failedServers.join(', ')}. Their tools will not be available.`);
         }
-        // Create auto-approve model if enabled
-        const autoApproveConfig = this.config.userConfig.autoApprove;
-        if (autoApproveConfig.enabled) {
-            try {
-                this.autoApproveModel = await createLanguageModel(autoApproveConfig.modelId, this.config.userConfig);
-            }
-            catch {
-                // Model creation failure should not prevent initialization.
-                // Auto-approve simply won't be available.
-                logger.warn('[auto-approve] Failed to create model; auto-approve disabled');
-            }
-        }
     }
     async listTools(serverName) {
         return this.mcpManager.listTools(serverName);
     }
     /**
-     * Handles a tool call request through the full trusted process lifecycle:
-     *   1. Evaluate policy (allow / deny / escalate)
-     *   2. If escalated, prompt the human for approval
-     *   3. If allowed, forward to the real MCP server
-     *   4. Log the complete decision trace to the audit log
-     *   5. Return the result to the caller
+     * Handles a tool call through the coordinator's policy pipeline.
+     * Mirrors the legacy TrustedProcess.handleToolCall signature.
      */
     async handleToolCall(request) {
-        const startTime = Date.now();
-        // Annotation-driven normalization: split into transport vs policy args.
-        // Trusted servers skip annotation lookup and prepareToolArgs — use raw args directly.
-        const annotation = this.policyEngine.getAnnotation(request.serverName, request.toolName, request.arguments);
-        let argsForTransport;
-        let argsForPolicy;
-        if (!annotation && this.policyEngine.isTrustedServer(request.serverName)) {
-            argsForTransport = request.arguments;
-            argsForPolicy = request.arguments;
-        }
-        else if (!annotation) {
-            const reason = `Missing annotation for tool: ${request.serverName}__${request.toolName}. Re-run 'ironcurtain annotate-tools' to update.`;
-            return {
-                requestId: request.requestId,
-                status: 'denied',
-                content: { denied: true, reason },
-                policyDecision: { status: 'deny', rule: 'missing-annotation', reason },
-                durationMs: Date.now() - startTime,
-            };
-        }
-        else {
-            ({ argsForTransport, argsForPolicy } = prepareToolArgs(request.arguments, annotation, this.config.allowedDirectory));
-        }
-        const policyRequest = { ...request, arguments: argsForPolicy };
-        const transportRequest = { ...request, arguments: argsForTransport };
-        // Step 1: Evaluate request against the policy rule chain
-        const evaluation = this.policyEngine.evaluate(policyRequest);
-        const policyDecision = {
-            status: evaluation.decision,
-            rule: evaluation.rule,
-            reason: evaluation.reason,
-        };
-        let escalationResult;
-        let autoApproved = false;
-        let whitelistApproved = false;
-        let whitelistPatternId;
-        let resultContent;
-        let resultStatus;
-        let resultError;
-        try {
-            // Step 2: Handle escalation -- whitelist check, auto-approve, then human
-            if (evaluation.decision === 'escalate') {
-                // Annotation is guaranteed non-null here: trusted servers always allow (never escalate),
-                // and missing-annotation returns early above. Narrow the type for TypeScript.
-                const resolvedAnnotation = annotation;
-                const whitelistMatch = this.whitelist.match(request.serverName, request.toolName, argsForPolicy, resolvedAnnotation);
-                if (whitelistMatch.matched) {
-                    whitelistApproved = true;
-                    whitelistPatternId = whitelistMatch.patternId;
-                    escalationResult = 'approved';
-                    policyDecision.status = 'allow';
-                    policyDecision.reason = `Whitelist-approved: ${whitelistMatch.pattern.description}`;
-                }
-                if (!whitelistApproved) {
-                    // Try auto-approve before prompting the human
-                    if (this.autoApproveModel && this.lastUserMessage) {
-                        const autoResult = await autoApprove({
-                            userMessage: this.lastUserMessage,
-                            toolName: `${request.serverName}/${request.toolName}`,
-                            escalationReason: evaluation.reason,
-                        }, this.autoApproveModel);
-                        if (autoResult.decision === 'approve') {
-                            autoApproved = true;
-                            escalationResult = 'approved';
-                            policyDecision.status = 'allow';
-                            policyDecision.reason = `Auto-approved: ${autoResult.reasoning}`;
-                        }
-                    }
-                    // Fall through to human escalation if not auto-approved
-                    if (!autoApproved) {
-                        // Extract whitelist candidates for display
-                        const escalationId = `inprocess-${Date.now()}`;
-                        const candidates = extractWhitelistCandidates(request.serverName, request.toolName, argsForPolicy, resolvedAnnotation, evaluation.escalatedRoles, escalationId, evaluation.reason);
-                        const candidatePatterns = candidates.patterns;
-                        const candidateIpcs = candidates.ipcs.length > 0 ? candidates.ipcs : undefined;
-                        const escalationContext = formatServerContext(this.serverContextMap, transportRequest.serverName);
-                        const escalationResponse = this.onEscalation
-                            ? await this.onEscalation(transportRequest, evaluation.reason, escalationContext, candidateIpcs)
-                            : { decision: await this.escalation.prompt(transportRequest, evaluation.reason, escalationContext) };
-                        escalationResult = escalationResponse.decision;
-                        if (escalationResponse.decision === 'approved') {
-                            policyDecision.status = 'allow';
-                            policyDecision.reason = 'Approved by human during escalation';
-                            // Handle whitelist selection
-                            if (escalationResponse.whitelistSelection !== undefined &&
-                                escalationResponse.whitelistSelection >= 0 &&
-                                escalationResponse.whitelistSelection < candidatePatterns.length) {
-                                const selectedPattern = candidatePatterns[escalationResponse.whitelistSelection];
-                                this.whitelist.add(selectedPattern);
-                            }
-                        }
-                        else {
-                            policyDecision.status = 'deny';
-                            policyDecision.reason = 'Denied by human during escalation';
-                        }
-                    }
-                }
-                // Expand roots to include target directories so the filesystem
-                // server accepts the forwarded call (for both auto and human approval).
-                if (escalationResult === 'approved' && annotation) {
-                    const pathValues = extractAnnotatedPaths(transportRequest.arguments, annotation, getPathRoles());
-                    for (const p of pathValues) {
-                        const dir = directoryForPath(p);
-                        await this.mcpManager.addRoot(transportRequest.serverName, {
-                            uri: `file://${dir}`,
-                            name: 'escalation-approved',
-                        });
-                    }
-                }
-            }
-            // Step 3: Forward to MCP server or deny (using transport args)
-            if (policyDecision.status === 'allow') {
-                const mcpResult = (await this.mcpManager.callTool(transportRequest.serverName, transportRequest.toolName, transportRequest.arguments));
-                resultContent = mcpResult;
-                if (mcpResult.isError) {
-                    resultStatus = 'error';
-                    resultError = extractTextFromContent(mcpResult.content);
-                }
-                else {
-                    resultStatus = 'success';
-                    updateServerContext(this.serverContextMap, transportRequest.serverName, transportRequest.toolName, transportRequest.arguments);
-                }
-            }
-            else {
-                resultContent = { denied: true, reason: policyDecision.reason };
-                resultStatus = 'denied';
-            }
-        }
-        catch (err) {
-            resultStatus = 'error';
-            resultError = extractMcpErrorMessage(err);
-            resultContent = { error: resultError };
-        }
-        const durationMs = Date.now() - startTime;
-        // Step 4: Append-only audit log (records argsForTransport -- what was sent to MCP server)
-        this.auditLog.log(buildAuditEntry(transportRequest, transportRequest.arguments, policyDecision, {
-            status: resultStatus,
-            content: resultStatus === 'success' ? resultContent : undefined,
-            error: resultError,
-        }, durationMs, {
-            escalationResult,
-            autoApproved: autoApproved || undefined,
-            whitelistApproved: whitelistApproved || undefined,
-            whitelistPatternId,
-        }));
-        // Step 5: Return result to caller
-        return {
-            requestId: transportRequest.requestId,
-            status: resultStatus,
-            content: resultContent,
-            policyDecision,
-            durationMs,
-        };
+        return this.requireCoordinator().handleStructuredToolCall(request);
     }
     async shutdown() {
         this.escalation.close();
+        // We injected our own MCPClientManager into the coordinator, so
+        // the coordinator will NOT close it. Do that here, then close the
+        // coordinator (which flushes the audit log).
         await this.mcpManager.closeAll();
-        await this.auditLog.close();
+        if (this.coordinator) {
+            await this.coordinator.close();
+        }
+    }
+}
+/**
+ * Detects Docker-style `-e VAR_NAME` args (no `=`) where the env var is unset.
+ */
+function getMissingEnvVars(args) {
+    const missing = [];
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === '-e' && i + 1 < args.length) {
+            const val = args[i + 1];
+            if (!val.includes('=') && !process.env[val]) {
+                missing.push(val);
+            }
+            i++;
+        }
     }
+    return missing;
 }
 //# sourceMappingURL=index.js.map

package/dist/trusted-process/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/trusted-process/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAgB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAyB,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAG3B,MAAM,yBAAyB,CAAC;AAEjC;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAc;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAqBD,MAAM,OAAO,cAAc;IAaf;IAZF,YAAY,CAAe;IAC3B,UAAU,CAAmB;IAC7B,QAAQ,CAAY;IACpB,QAAQ,CAAW;IACnB,UAAU,CAAoB;IAC9B,YAAY,CAAsB;IACzB,SAAS,CAAoB;IACtC,gBAAgB,GAA2B,IAAI,CAAC;IAChD,eAAe,GAAkB,IAAI,CAAC;IACtC,gBAAgB,GAAqB,IAAI,GAAG,EAAE,CAAC;IAEvD,YACU,MAAyB,EACjC,OAA+B;QADvB,WAAM,GAAN,MAAM,CAAmB;QAGjC,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC;YAC5E,SAAS,EAAE,MAAM,CAAC,YAAY;YAC9B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,YAAY;YACpE,WAAW,EAAE,sBAAsB,EAAE;SACtC,CAAC,CAAC;QACH,0BAA0B,CAAC,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAEpE,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChF,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAClC,cAAc,EACd,eAAe,EACf,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,gBAAgB,EACvB,sBAAsB,EACtB,YAAY,EACZ,cAAc,CACf,CAAC;QAEF,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QAExC,IAAI,CAAC,UAAU,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE;YAChD,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,OAAO;SACjD,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,uBAAuB,EAAE,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,OAAe;QAChC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,+EAA+E;YAC/E,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,wBAAwB,IAAI,sCAAsC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,6BAA6B,IAAI,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,CAAC,IAAI,CAAC,oCAAoC,IAAI,MAAM,GAAG,aAAa,CAAC,CAAC;gBAC5E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC1G,CAAC;QAED,uCAAuC;QACvC,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QAC7D,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,CAAC,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACvG,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;gBAC5D,0CAA0C;gBAC1C,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB;QAChC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAAC,OAAwB;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,wEAAwE;QACxE,sFAAsF;QACtF,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5G,IAAI,gBAAyC,CAAC;QAC9C,IAAI,aAAsC,CAAC;QAE3C,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC;YACrC,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,CAAC;aAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,gCAAgC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,QAAQ,kDAAkD,CAAC;YACzI,OAAO;gBACL,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;gBACjC,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE;gBACtE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,CAAC,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,eAAe,CACpD,OAAO,CAAC,SAAS,EACjB,UAAU,EACV,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QAC/D,MAAM,gBAAgB,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QAErE,yDAAyD;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,cAAc,GAAmB;YACrC,MAAM,EAAE,UAAU,CAAC,QAAQ;YAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC;QAEF,IAAI,gBAAmD,CAAC;QACxD,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,IAAI,kBAAsC,CAAC;QAC3C,IAAI,aAAsB,CAAC;QAC3B,IAAI,YAA4C,CAAC;QACjD,IAAI,WAA+B,CAAC;QAEpC,IAAI,CAAC;YACH,yEAAyE;YACzE,IAAI,UAAU,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACvC,yFAAyF;gBACzF,8EAA8E;gBAC9E,MAAM,kBAAkB,GAAG,UAA4B,CAAC;gBACxD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CACzC,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,QAAQ,EAChB,aAAa,EACb,kBAAkB,CACnB,CAAC;gBACF,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;oBAC3B,iBAAiB,GAAG,IAAI,CAAC;oBACzB,kBAAkB,GAAG,cAAc,CAAC,SAAS,CAAC;oBAC9C,gBAAgB,GAAG,UAAU,CAAC;oBAC9B,cAAc,CAAC,MAAM,GAAG,OAAO,CAAC;oBAChC,cAAc,CAAC,MAAM,GAAG,uBAAuB,cAAc,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACtF,CAAC;gBAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,8CAA8C;oBAC9C,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;wBAClD,MAAM,UAAU,GAAG,MAAM,WAAW,CAClC;4BACE,WAAW,EAAE,IAAI,CAAC,eAAe;4BACjC,QAAQ,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE;4BACrD,gBAAgB,EAAE,UAAU,CAAC,MAAM;yBACpC,EACD,IAAI,CAAC,gBAAgB,CACtB,CAAC;wBAEF,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;4BACtC,YAAY,GAAG,IAAI,CAAC;4BACpB,gBAAgB,GAAG,UAAU,CAAC;4BAC9B,cAAc,CAAC,MAAM,GAAG,OAAO,CAAC;4BAChC,cAAc,CAAC,MAAM,GAAG,kBAAkB,UAAU,CAAC,SAAS,EAAE,CAAC;wBACnE,CAAC;oBACH,CAAC;oBAED,wDAAwD;oBACxD,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,2CAA2C;wBAC3C,MAAM,YAAY,GAAG,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBAC/C,MAAM,UAAU,GAAG,0BAA0B,CAC3C,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,QAAQ,EAChB,aAAa,EACb,kBAAkB,EAClB,UAAU,CAAC,cAAc,EACzB,YAAY,EACZ,UAAU,CAAC,MAAM,CAClB,CAAC;wBACF,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC;wBAC9C,MAAM,aAAa,GACjB,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;wBAE3D,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;wBAClG,MAAM,kBAAkB,GAAqB,IAAI,CAAC,YAAY;4BAC5D,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,UAAU,CAAC,MAAM,EAAE,iBAAiB,EAAE,aAAa,CAAC;4BAChG,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;wBAEvG,gBAAgB,GAAG,kBAAkB,CAAC,QAAQ,CAAC;wBAE/C,IAAI,kBAAkB,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;4BAC/C,cAAc,CAAC,MAAM,GAAG,OAAO,CAAC;4BAChC,cAAc,CAAC,MAAM,GAAG,qCAAqC,CAAC;4BAE9D,6BAA6B;4BAC7B,IACE,kBAAkB,CAAC,kBAAkB,KAAK,SAAS;gCACnD,kBAAkB,CAAC,kBAAkB,IAAI,CAAC;gCAC1C,kBAAkB,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,MAAM,EAChE,CAAC;gCACD,MAAM,eAAe,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;gCACjF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;4BACtC,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,cAAc,CAAC,MAAM,GAAG,MAAM,CAAC;4BAC/B,cAAc,CAAC,MAAM,GAAG,mCAAmC,CAAC;wBAC9D,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,+DAA+D;gBAC/D,wEAAwE;gBACxE,IAAI,gBAAgB,KAAK,UAAU,IAAI,UAAU,EAAE,CAAC;oBAClD,MAAM,UAAU,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;oBACjG,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;wBAC3B,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;wBAChC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,UAAU,EAAE;4BACzD,GAAG,EAAE,UAAU,GAAG,EAAE;4BACpB,IAAI,EAAE,qBAAqB;yBAC5B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,IAAI,cAAc,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAC/C,gBAAgB,CAAC,UAAU,EAC3B,gBAAgB,CAAC,QAAQ,EACzB,gBAAgB,CAAC,SAAS,CAC3B,CAA6C,CAAC;gBAC/C,aAAa,GAAG,SAAS,CAAC;gBAE1B,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;oBACtB,YAAY,GAAG,OAAO,CAAC;oBACvB,WAAW,GAAG,sBAAsB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAC1D,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,SAAS,CAAC;oBACzB,mBAAmB,CACjB,IAAI,CAAC,gBAAgB,EACrB,gBAAgB,CAAC,UAAU,EAC3B,gBAAgB,CAAC,QAAQ,EACzB,gBAAgB,CAAC,SAAS,CAC3B,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,aAAa,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;gBAChE,YAAY,GAAG,QAAQ,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,GAAG,OAAO,CAAC;YACvB,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAC1C,aAAa,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE1C,0FAA0F;QAC1F,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,eAAe,CACb,gBAAgB,EAChB,gBAAgB,CAAC,SAAS,EAC1B,cAAc,EACd;YACE,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YAC/D,KAAK,EAAE,WAAW;SACnB,EACD,UAAU,EACV;YACE,gBAAgB;YAChB,YAAY,EAAE,YAAY,IAAI,SAAS;YACvC,iBAAiB,EAAE,iBAAiB,IAAI,SAAS;YACjD,kBAAkB;SACnB,CACF,CACF,CAAC;QAEF,kCAAkC;QAClC,OAAO;YACL,SAAS,EAAE,gBAAgB,CAAC,SAAS;YACrC,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,aAAa;YACtB,cAAc;YACd,UAAU;SACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/trusted-process/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAA2B,MAAM,4BAA4B,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAgBnG;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,cAAc;IAQf;IAPF,WAAW,GAA+B,IAAI,CAAC;IAC/C,UAAU,CAAmB;IAC7B,QAAQ,GAAc,EAAE,CAAC;IACzB,UAAU,CAAoB;IACrB,OAAO,CAAwB;IAEhD,YACU,MAAyB,EACjC,OAA+B;QADvB,WAAM,GAAN,MAAM,CAAmB;QAGjC,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;QAC7B,kEAAkE;QAClE,kEAAkE;QAClE,4CAA4C;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC5C,CAAC;IAED,+DAA+D;IACvD,kBAAkB;QACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,OAAe;QAChC,IAAI,CAAC,kBAAkB,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC;YAC5E,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACnC,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAC9E,WAAW,EAAE,sBAAsB,EAAE;SACtC,CAAC,CAAC;QACH,0BAA0B,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACzE,wBAAwB,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAElE,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrF,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAErE,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE5D,+DAA+D;QAC/D,MAAM,EAAE,iBAAiB,EAAE,GAAG,wBAAwB,EAAE,CAAC;QACzD,MAAM,sBAAsB,GAAG,6BAA6B,CAC1D,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAC5B,iBAAiB,EACjB,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CACpC,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,CAAC;YACzC,cAAc;YACd,eAAe;YACf,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;YAC1C,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAC9C,sBAAsB;YACtB,YAAY;YACZ,cAAc;YACd,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,OAAO;YAC1D,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,gBAAgB;YAChB,sBAAsB;SACvB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QAExC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,qBAAqB;QACjC,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QAC7D,IAAI,CAAC,iBAAiB,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,MAAM,mBAAmB,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,wBAAwB,IAAI,sCAAsC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,6BAA6B,IAAI,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;gBAEhD,+DAA+D;gBAC/D,4DAA4D;gBAC5D,4DAA4D;gBAC5D,2DAA2D;gBAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBACzD,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,YAAY,GAAkB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACpD,UAAU,EAAE,IAAI;wBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAA4B;qBAC9D,CAAC,CAAC,CAAC;oBACJ,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,CAAC,IAAI,CAAC,oCAAoC,IAAI,MAAM,GAAG,aAAa,CAAC,CAAC;gBAC5E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB;QAChC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,OAAwB;QAC3C,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,gEAAgE;QAChE,kEAAkE;QAClE,6CAA6C;QAC7C,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAc;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/trusted-process/list-matcher.d.ts

@@ -0,0 +1,17 @@
+/**
+ * List matcher -- runtime value/pattern matching for dynamic list types.
+ *
+ * Used by the PolicyEngine when evaluating `ListCondition` rules: given a
+ * `ListType`, returns a comparator that tests whether a tool-call argument
+ * value matches an entry from the resolved allow list.
+ *
+ * Lives in the trusted-process layer (not the offline pipeline) because it
+ * runs on the policy hot path. The compile-time concerns (validators,
+ * format guidance, the type registry) stay in `src/pipeline/dynamic-list-types.ts`.
+ */
+import type { ListType } from '../pipeline/types.js';
+/**
+ * Returns a matcher function for the given list type.
+ * The matcher checks whether a value matches a pattern from the allowed list.
+ */
+export declare function getListMatcher(type: ListType): (value: string, pattern: string) => boolean;

package/dist/trusted-process/list-matcher.js

@@ -0,0 +1,31 @@
+/**
+ * List matcher -- runtime value/pattern matching for dynamic list types.
+ *
+ * Used by the PolicyEngine when evaluating `ListCondition` rules: given a
+ * `ListType`, returns a comparator that tests whether a tool-call argument
+ * value matches an entry from the resolved allow list.
+ *
+ * Lives in the trusted-process layer (not the offline pipeline) because it
+ * runs on the policy hot path. The compile-time concerns (validators,
+ * format guidance, the type registry) stay in `src/pipeline/dynamic-list-types.ts`.
+ */
+import { domainMatchesAllowlist } from './domain-utils.js';
+/**
+ * Returns a matcher function for the given list type.
+ * The matcher checks whether a value matches a pattern from the allowed list.
+ */
+export function getListMatcher(type) {
+    switch (type) {
+        case 'domains':
+            return (v, p) => domainMatchesAllowlist(v, [p]);
+        case 'emails':
+            return (v, p) => v.toLowerCase() === p.toLowerCase();
+        case 'identifiers':
+            return (v, p) => v === p;
+        default: {
+            const _exhaustive = type;
+            throw new Error(`Unknown list type: ${String(_exhaustive)}`);
+        }
+    }
+}
+//# sourceMappingURL=list-matcher.js.map

package/dist/trusted-process/list-matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-matcher.js","sourceRoot":"","sources":["../../src/trusted-process/list-matcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,QAAQ;YACX,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,KAAK,aAAa;YAChB,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/trusted-process/mcp-client-manager.d.ts

@@ -1,21 +1,50 @@
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import type { MCPServerConfig } from '../config/types.js';
 export declare const ROOTS_REFRESH_TIMEOUT_MS = 5000;
 export interface McpRoot {
     uri: string;
     name: string;
 }
+/**
+ * Per-server connection state exposed to callers that need to interact
+ * with the live MCP client (e.g. the coordinator's roots-expansion
+ * path). Owned and mutated by `MCPClientManager`; callers receive the
+ * live reference so their mutations (e.g. pushing new roots) and the
+ * manager's `roots/list` responses share a single array.
+ *
+ * `rootsRefreshed` is a one-shot callback set by `addRootToClient` in
+ * `tool-call-pipeline.ts`. The manager fires and clears it when the
+ * connected MCP server issues a `roots/list` request after receiving
+ * our `notifications/roots/list_changed` notification.
+ */
+export interface ClientState {
+    client: Client;
+    roots: McpRoot[];
+    rootsRefreshed?: () => void;
+}
 export declare class MCPClientManager {
     private servers;
     connect(name: string, config: MCPServerConfig, roots?: McpRoot[]): Promise<void>;
     /**
-     * Adds a root directory to a connected server and waits for the
-     * server to fetch the updated root list. This ensures the server's
-     * allowed directories include the new root before any tool call
-     * that depends on it is forwarded.
+     * Returns the live MCP `Client` for a connected server, or undefined
+     * when the server is not connected. Exposed so the coordinator can
+     * wire an existing client through `ClientState` for
+     * `handleCallTool`'s escalation/roots-expansion paths.
      *
-     * No-op if the root URI is already present.
+     * Callers must not mutate client internals; use the manager's public
+     * methods (`callTool`) for state-changing operations.
+     */
+    getClient(serverName: string): Client | undefined;
+    /** Returns the root list tracked for a connected server, if any. */
+    getRoots(serverName: string): McpRoot[] | undefined;
+    /**
+     * Returns the live `ClientState` for a connected server. Callers use
+     * this to share the manager's mutable `roots` array and one-shot
+     * `rootsRefreshed` slot with the tool-call pipeline's
+     * `addRootToClient`, so a single mutation is both visible to the
+     * `roots/list` handler and observable as a refresh event.
      */
-    addRoot(serverName: string, root: McpRoot): Promise<void>;
+    getClientState(serverName: string): ClientState | undefined;
     listTools(serverName: string): Promise<{
         name: string;
         description?: string;