@pyric/cli 0.1.0-alpha.10

package/dist/assurance/capabilities.js

@@ -0,0 +1,282 @@
+import { lint } from "pyric/rules";
+// Internal engine seams, both on the browser-safe `pyric/rules/internal` entry
+// (this runtime ships to the browser, so the Node-only `internal/rtdb` entry is
+// not reachable from here):
+//
+//   parseToASTOrError / MatchBlock / PathSegment — the public API exposes
+//   lint/simulate but no parsed AST, and the overlapping-match analysis below
+//   must walk the match tree to detect production OR composition.
+//
+//   parseRtdbExpression — a target carries COMPILED RTDB `{ rules }` JSON, and
+//   `rtdbRules(compiledJson).lint()` returns nothing (a compiled document has
+//   no IR to lint against). The per-expression parse check below therefore
+//   reaches the expression parser directly.
+import { parseToASTOrError, parseRtdbExpression, } from "pyric/rules/internal";
+import { parseStorageRules } from "pyric/storage";
+import { CONFORMANCE_VERDICTS, } from "./.generated/conformance-verdicts.js";
+/**
+ * A probe's `requires` names graph nodes (constructs, registry rows) directly,
+ * and the engine resolves each against the node's derived verdict. The lookup
+ * contains every addressable graph node and is regenerated before compilation;
+ * it is not an authored or committed capability catalog.
+ */
+export function verdictOf(nodeId) {
+    return Object.prototype.hasOwnProperty.call(CONFORMANCE_VERDICTS, nodeId)
+        ? CONFORMANCE_VERDICTS[nodeId]
+        : undefined;
+}
+/**
+ * Resolve one `requires` node against the derived graph verdict, appending a
+ * requirement. A `supported` node passes; a `qualified`/`unsupported` node
+ * abstains (engine-gap); a node the graph does not model is an authoring error
+ * (invalid-probe).
+ */
+function resolveRequiredNode(dependency, requirements) {
+    const verdict = verdictOf(dependency.id);
+    if (!verdict) {
+        requirements.push(requirement(dependency.id, false, `The probe requires ${dependency.kind} '${dependency.id}', which the conformance graph does not model.`));
+        return "invalid-probe";
+    }
+    if (verdict !== "supported") {
+        requirements.push(requirement(dependency.id, false, `The ${dependency.kind} '${dependency.id}' is derived '${verdict}', not 'supported'; the engine abstains.`));
+        return "engine-gap";
+    }
+    requirements.push(requirement(dependency.id, true, `The ${dependency.kind} '${dependency.id}' is derived 'supported'.`));
+    return undefined;
+}
+function requirement(id, supported, reason) {
+    return { id, supported, reason };
+}
+function collectFirestoreMatchPatterns(block, prefix = []) {
+    const segments = [...prefix, ...block.path.segments];
+    const current = block.allows.length
+        ? [
+            {
+                segments,
+                operations: new Set(block.allows.flatMap((allow) => allow.operations)),
+            },
+        ]
+        : [];
+    return [
+        ...current,
+        ...block.children.flatMap((child) => collectFirestoreMatchPatterns(child, segments)),
+    ];
+}
+function patternMatchesPath(pattern, path) {
+    const visit = (patternIndex, pathIndex) => {
+        if (patternIndex === pattern.length)
+            return pathIndex === path.length;
+        const segment = pattern[patternIndex];
+        if (segment.type === "recursive") {
+            if (patternIndex === pattern.length - 1)
+                return true;
+            for (let next = pathIndex; next <= path.length; next++) {
+                if (visit(patternIndex + 1, next))
+                    return true;
+            }
+            return false;
+        }
+        if (pathIndex === path.length)
+            return false;
+        if (segment.type === "literal" && segment.value !== path[pathIndex])
+            return false;
+        return visit(patternIndex + 1, pathIndex + 1);
+    };
+    return visit(0, 0);
+}
+function firestoreOperationNames(method) {
+    if (method === "get")
+        return ["get", "read"];
+    if (method === "list")
+        return ["list", "read"];
+    if (method === "create")
+        return ["create", "write"];
+    if (method === "delete")
+        return ["delete", "write"];
+    return ["update", "write"];
+}
+function hasOverlappingFirestoreMatch(root, operation) {
+    if (operation.service !== "firestore")
+        return false;
+    const path = operation.path.split("/").filter(Boolean);
+    if (operation.method === "list")
+        path.push("__hypothetical_doc__");
+    const operationNames = firestoreOperationNames(operation.method);
+    return (root.children
+        .flatMap((child) => collectFirestoreMatchPatterns(child))
+        .filter((pattern) => patternMatchesPath(pattern.segments, path))
+        .filter((pattern) => operationNames.some((name) => pattern.operations.has(name))).length > 1);
+}
+function collectRtdbRuleSources(value, path = "rules", segments = []) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return [];
+    const sources = [];
+    for (const [key, child] of Object.entries(value)) {
+        const childPath = `${path}/${key}`;
+        if (key === ".read" || key === ".write" || key === ".validate") {
+            if (typeof child === "string" || typeof child === "boolean") {
+                sources.push({
+                    path: childPath,
+                    source: String(child),
+                    kind: key,
+                    segments,
+                });
+            }
+            else {
+                sources.push({ path: childPath, source: "", kind: key, segments });
+            }
+            continue;
+        }
+        sources.push(...collectRtdbRuleSources(child, childPath, [...segments, key]));
+    }
+    return sources;
+}
+function compatibleRtdbPrefix(ruleSegments, operationSegments, length) {
+    for (let index = 0; index < length; index++) {
+        const ruleSegment = ruleSegments[index];
+        const operationSegment = operationSegments[index];
+        if (!ruleSegment.startsWith("$") && ruleSegment !== operationSegment) {
+            return false;
+        }
+    }
+    return true;
+}
+function rtdbRuleAppliesToOperation(rule, operation) {
+    if (operation.service !== "rtdb")
+        return false;
+    const segments = operation.path.split("/").filter(Boolean);
+    const isRead = operation.method === "get";
+    if (rule.kind === ".read") {
+        return (isRead &&
+            rule.segments.length <= segments.length &&
+            compatibleRtdbPrefix(rule.segments, segments, rule.segments.length));
+    }
+    if (rule.kind === ".write") {
+        return (!isRead &&
+            rule.segments.length <= segments.length &&
+            compatibleRtdbPrefix(rule.segments, segments, rule.segments.length));
+    }
+    if (isRead)
+        return false;
+    const overlapLength = Math.min(rule.segments.length, segments.length);
+    return compatibleRtdbPrefix(rule.segments, segments, overlapLength);
+}
+function firestoreRequirements(target, probe) {
+    const rules = target.rules.firestore;
+    const requirements = [
+        requirement("firestore.rules-present", typeof rules === "string" && rules.trim().length > 0, "Firestore probes require an explicit rules source."),
+    ];
+    if (!rules)
+        return requirements;
+    // Parse gate via the public tolerant front door: a parse blocker surfaces as
+    // a `RuleIssue` with `origin === "parse"`.
+    const parseIssue = lint(rules).find((issue) => issue.origin === "parse");
+    requirements.push(requirement("firestore.rules-parse", !parseIssue, parseIssue
+        ? `The Firestore rules source did not parse: ${parseIssue.message}`
+        : "The Firestore rules source parsed successfully."));
+    if (parseIssue)
+        return requirements;
+    // The AST walk needs the parsed match tree (no public accessor exists).
+    const parsed = parseToASTOrError(rules);
+    if (!parsed.ok)
+        return requirements;
+    const operations = [probe.control, probe.mutation.operation];
+    const overlapping = operations.some((operation) => hasOverlappingFirestoreMatch(parsed.ast.service.match, operation));
+    requirements.push(requirement("firestore.match-resolution", !overlapping, overlapping
+        ? "This probe matches multiple allow-bearing blocks; the current sandbox resolves only the first block instead of production OR composition."
+        : "Each operation resolves to at most one applicable allow-bearing match block."));
+    for (const operation of operations) {
+        if (operation.service !== "firestore" || operation.method !== "list")
+            continue;
+        const equalityOnly = (operation.query?.where ?? []).every((item) => item.op === "==");
+        requirements.push(requirement("firestore.query-proof-equality", equalityOnly, equalityOnly
+            ? "The query uses the supported equality-proof subset."
+            : "Inequality, membership, and disjunctive query proof is conservative in the current simulator."));
+    }
+    return requirements;
+}
+function rtdbRequirements(target, probe) {
+    const rules = target.rules.rtdb;
+    const operations = [probe.control, probe.mutation.operation];
+    const ruleSources = rules
+        ? collectRtdbRuleSources(rules.rules).filter((rule) => operations.some((operation) => rtdbRuleAppliesToOperation(rule, operation)))
+        : [];
+    const serialized = ruleSources.map((item) => item.source).join("\n");
+    const invalidExpressions = ruleSources
+        .filter((item) => !item.source || !parseRtdbExpression(item.source).valid)
+        .map((item) => item.path);
+    const queryDependent = /\bquery\b/.test(serialized);
+    const requirements = [
+        requirement("rtdb.rules-present", !!rules, "RTDB probes require an explicit rules JSON document."),
+        requirement("rtdb.rules-parse", invalidExpressions.length === 0, invalidExpressions.length === 0
+            ? "All RTDB expressions relevant to the probed paths parsed successfully."
+            : `RTDB rule expressions did not parse at: ${invalidExpressions.join(", ")}.`),
+        requirement("rtdb.query-rules", !queryDependent, queryDependent
+            ? "The current RTDB evaluator does not expose query constraints to rule expressions."
+            : "The rules used by this probe do not authorize from query constraints."),
+        requirement("rtdb.rule-location-data", !/\b(?:data|newData)\b/.test(serialized), /\b(?:data|newData)\b/.test(serialized)
+            ? "The current evaluator cannot prove ancestor rule-location data/newData merged-tree semantics."
+            : "The rules used by this probe do not depend on data/newData."),
+    ];
+    for (const operation of operations) {
+        if (operation.service !== "rtdb" || operation.method !== "update")
+            continue;
+        const keys = operation.data &&
+            typeof operation.data === "object" &&
+            !Array.isArray(operation.data)
+            ? Object.keys(operation.data)
+            : [];
+        requirements.push(requirement("rtdb.atomic-multipath", keys.length <= 1, keys.length <= 1
+            ? "The update changes at most one child."
+            : "The current local backend checks multi-child updates per leaf instead of one projected future tree."));
+    }
+    return requirements;
+}
+function storageRequirements(target) {
+    const rules = target.rules.storage;
+    const requirements = [
+        requirement("storage.rules-present", typeof rules === "string" && rules.trim().length > 0, "Storage probes require an explicit rules source."),
+        requirement("storage.indexeddb", typeof globalThis.indexedDB !== "undefined", typeof globalThis.indexedDB !== "undefined"
+            ? "IndexedDB is available for the local Storage sandbox."
+            : "The local Storage sandbox requires IndexedDB."),
+    ];
+    if (!rules)
+        return requirements;
+    try {
+        parseStorageRules(rules);
+        requirements.push(requirement("storage.rules-subset", true, "The rules parse within the local coarse read/write evaluator subset."));
+    }
+    catch (error) {
+        requirements.push(requirement("storage.rules-subset", false, `The Storage rules require unsupported local semantics: ${error instanceof Error ? error.message : String(error)}`));
+    }
+    return requirements;
+}
+export function qualifyProbe(target, probe) {
+    const service = probe.control.service;
+    const requirements = service === "firestore"
+        ? firestoreRequirements(target, probe)
+        : service === "rtdb"
+            ? rtdbRequirements(target, probe)
+            : storageRequirements(target);
+    // A probe names the graph nodes its verdict depends on, and each resolves
+    // against the node's DERIVED verdict in the same pass as the structural
+    // checks above. Only `supported` proceeds; `qualified`/`unsupported` abstains
+    // (engine-gap); a node the graph does not model is a campaign authoring error
+    // (invalid-probe), which outranks engine-gap for the single classification.
+    let abstention;
+    for (const dependency of probe.requires ?? []) {
+        const nodeAbstention = resolveRequiredNode(dependency, requirements);
+        if (nodeAbstention === "invalid-probe")
+            abstention = "invalid-probe";
+        else if (nodeAbstention === "engine-gap" && abstention !== "invalid-probe") {
+            abstention = "engine-gap";
+        }
+    }
+    return {
+        engine: "pyric-local-sandboxes",
+        supported: requirements.every((item) => item.supported),
+        requirements,
+        ...(abstention ? { classification: abstention } : {}),
+    };
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/assurance/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/assurance/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,+EAA+E;AAC/E,gFAAgF;AAChF,4BAA4B;AAC5B,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,4CAA4C;AAC5C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GAGpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,oBAAoB,GAErB,MAAM,sCAAsC,CAAC;AAS9C;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACvE,CAAC,CAAC,oBAAoB,CAAC,MAA2C,CAAC;QACnE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,UAAgC,EAChC,YAAqC;IAErC,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,YAAY,CAAC,IAAI,CACf,WAAW,CACT,UAAU,CAAC,EAAE,EACb,KAAK,EACL,sBAAsB,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,gDAAgD,CACxG,CACF,CAAC;QACF,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,YAAY,CAAC,IAAI,CACf,WAAW,CACT,UAAU,CAAC,EAAE,EACb,KAAK,EACL,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,iBAAiB,OAAO,0CAA0C,CAC3G,CACF,CAAC;QACF,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,YAAY,CAAC,IAAI,CACf,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,2BAA2B,CAAC,CACtG,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAClB,EAAU,EACV,SAAkB,EAClB,MAAc;IAEd,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAOD,SAAS,6BAA6B,CACpC,KAAiB,EACjB,SAAwB,EAAE;IAE1B,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM;QACjC,CAAC,CAAC;YACE;gBACE,QAAQ;gBACR,UAAU,EAAE,IAAI,GAAG,CACjB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAClD;aACF;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,GAAG,OAAO;QACV,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,6BAA6B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAC/C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAsB,EAAE,IAAc;IAChE,MAAM,KAAK,GAAG,CAAC,YAAoB,EAAE,SAAiB,EAAW,EAAE;QACjE,IAAI,YAAY,KAAK,OAAO,CAAC,MAAM;YAAE,OAAO,SAAS,KAAK,IAAI,CAAC,MAAM,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAE,CAAC;QACvC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,YAAY,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrD,KAAK,IAAI,IAAI,GAAG,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;gBACvD,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;YACjD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,SAAS,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC7C,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,4BAA4B,CACnC,IAAgB,EAChB,SAAoC;IAEpC,IAAI,SAAS,CAAC,OAAO,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjE,OAAO,CACL,IAAI,CAAC,QAAQ;SACV,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;SACxD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;SAC/D,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAClB,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC5D,CAAC,MAAM,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AASD,SAAS,sBAAsB,CAC7B,KAAc,EACd,IAAI,GAAG,OAAO,EACd,WAAqB,EAAE;IAEvB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;QACnC,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5D,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;oBACrB,IAAI,EAAE,GAAG;oBACT,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CACV,GAAG,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAC3B,YAAsB,EACtB,iBAA2B,EAC3B,MAAc;IAEd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAE,CAAC;QACzC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,KAAK,CAAE,CAAC;QACnD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,KAAK,gBAAgB,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CACjC,IAAoB,EACpB,SAAoC;IAEpC,IAAI,SAAS,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,CACL,MAAM;YACN,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;YACvC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,CACL,CAAC,MAAM;YACP,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;YACvC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC;IAEzB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,OAAO,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAA2B,EAC3B,KAAqB;IAErB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;IACrC,MAAM,YAAY,GAAG;QACnB,WAAW,CACT,yBAAyB,EACzB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EACpD,oDAAoD,CACrD;KACF,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC;IAEhC,6EAA6E;IAC7E,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IACzE,YAAY,CAAC,IAAI,CACf,WAAW,CACT,uBAAuB,EACvB,CAAC,UAAU,EACX,UAAU;QACR,CAAC,CAAC,6CAA6C,UAAU,CAAC,OAAO,EAAE;QACnE,CAAC,CAAC,iDAAiD,CACtD,CACF,CAAC;IACF,IAAI,UAAU;QAAE,OAAO,YAAY,CAAC;IAEpC,wEAAwE;IACxE,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,YAAY,CAAC;IAEpC,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,4BAA4B,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAClE,CAAC;IACF,YAAY,CAAC,IAAI,CACf,WAAW,CACT,4BAA4B,EAC5B,CAAC,WAAW,EACZ,WAAW;QACT,CAAC,CAAC,2IAA2I;QAC7I,CAAC,CAAC,8EAA8E,CACnF,CACF,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,OAAO,KAAK,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;YAClE,SAAS;QACX,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CACvD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAC3B,CAAC;QACF,YAAY,CAAC,IAAI,CACf,WAAW,CACT,gCAAgC,EAChC,YAAY,EACZ,YAAY;YACV,CAAC,CAAC,qDAAqD;YACvD,CAAC,CAAC,+FAA+F,CACpG,CACF,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA2B,EAC3B,KAAqB;IAErB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAChC,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,KAAK;QACvB,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAClD,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC5B,0BAA0B,CAAC,IAAI,EAAE,SAAS,CAAC,CAC5C,CACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,kBAAkB,GAAG,WAAW;SACnC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;SACzE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG;QACnB,WAAW,CACT,oBAAoB,EACpB,CAAC,CAAC,KAAK,EACP,sDAAsD,CACvD;QACD,WAAW,CACT,kBAAkB,EAClB,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAC/B,kBAAkB,CAAC,MAAM,KAAK,CAAC;YAC7B,CAAC,CAAC,wEAAwE;YAC1E,CAAC,CAAC,2CAA2C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChF;QACD,WAAW,CACT,kBAAkB,EAClB,CAAC,cAAc,EACf,cAAc;YACZ,CAAC,CAAC,mFAAmF;YACrF,CAAC,CAAC,uEAAuE,CAC5E;QACD,WAAW,CACT,yBAAyB,EACzB,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EACxC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC;YACrC,CAAC,CAAC,+FAA+F;YACjG,CAAC,CAAC,6DAA6D,CAClE;KACF,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,OAAO,KAAK,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAS;QAC5E,MAAM,IAAI,GACR,SAAS,CAAC,IAAI;YACd,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAClC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;YAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAA+B,CAAC;YACxD,CAAC,CAAC,EAAE,CAAC;QACT,YAAY,CAAC,IAAI,CACf,WAAW,CACT,uBAAuB,EACvB,IAAI,CAAC,MAAM,IAAI,CAAC,EAChB,IAAI,CAAC,MAAM,IAAI,CAAC;YACd,CAAC,CAAC,uCAAuC;YACzC,CAAC,CAAC,qGAAqG,CAC1G,CACF,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA2B;IAE3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IACnC,MAAM,YAAY,GAAG;QACnB,WAAW,CACT,uBAAuB,EACvB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EACpD,kDAAkD,CACnD;QACD,WAAW,CACT,mBAAmB,EACnB,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW,EAC3C,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW;YACzC,CAAC,CAAC,uDAAuD;YACzD,CAAC,CAAC,+CAA+C,CACpD;KACF,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC;IAChC,IAAI,CAAC;QACH,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzB,YAAY,CAAC,IAAI,CACf,WAAW,CACT,sBAAsB,EACtB,IAAI,EACJ,sEAAsE,CACvE,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,IAAI,CACf,WAAW,CACT,sBAAsB,EACtB,KAAK,EACL,0DAA0D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnH,CACF,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,MAA2B,EAC3B,KAAqB;IAErB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;IACtC,MAAM,YAAY,GAChB,OAAO,KAAK,WAAW;QACrB,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC;QACtC,CAAC,CAAC,OAAO,KAAK,MAAM;YAClB,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;YACjC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEpC,0EAA0E;IAC1E,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,UAAiD,CAAC;IACtD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACrE,IAAI,cAAc,KAAK,eAAe;YAAE,UAAU,GAAG,eAAe,CAAC;aAChE,IAAI,cAAc,KAAK,YAAY,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YAC3E,UAAU,GAAG,YAAY,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,uBAAuB;QAC/B,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;QACvD,YAAY;QACZ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC"}

package/dist/assurance/cases.d.ts

@@ -0,0 +1,14 @@
+import { type AssuranceActor, type AuthorizationCampaignReport, type LocalFirebaseTarget, type SecurityCase } from "./types.js";
+export interface RunSecurityCasesInput {
+    campaignId: string;
+    target: LocalFirebaseTarget;
+    actors: AssuranceActor[];
+    cases: SecurityCase[];
+}
+/**
+ * Re-run exported expectations against a candidate local target. Each case
+ * keeps its known-good control and explicit negative expectation, so a rules
+ * change must preserve the application workflow and reject the boundary case.
+ */
+export declare function runSecurityCases(input: RunSecurityCasesInput): Promise<AuthorizationCampaignReport>;
+//# sourceMappingURL=cases.d.ts.map

package/dist/assurance/cases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cases.d.ts","sourceRoot":"","sources":["../../src/assurance/cases.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EACxB,KAAK,YAAY,EAElB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,2BAA2B,CAAC,CAkBtC"}

package/dist/assurance/cases.js

@@ -0,0 +1,27 @@
+import { runAuthorizationCampaign } from "./runner.js";
+import { ASSURANCE_CAMPAIGN_SCHEMA, } from "./types.js";
+/**
+ * Re-run exported expectations against a candidate local target. Each case
+ * keeps its known-good control and explicit negative expectation, so a rules
+ * change must preserve the application workflow and reject the boundary case.
+ */
+export function runSecurityCases(input) {
+    const invariants = new Map();
+    for (const item of input.cases)
+        invariants.set(item.invariant.id, item.invariant);
+    return runAuthorizationCampaign({
+        schema: ASSURANCE_CAMPAIGN_SCHEMA,
+        id: input.campaignId,
+        target: input.target,
+        actors: input.actors,
+        invariants: [...invariants.values()],
+        probes: input.cases.map((item) => ({
+            id: item.id,
+            actorId: item.actorId,
+            invariantId: item.invariant.id,
+            control: item.control,
+            mutation: item.mutation,
+        })),
+    });
+}
+//# sourceMappingURL=cases.js.map

package/dist/assurance/cases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cases.js","sourceRoot":"","sources":["../../src/assurance/cases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EACL,yBAAyB,GAM1B,MAAM,YAAY,CAAC;AASpB;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAA4B;IAE5B,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;QAC5B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACpD,OAAO,wBAAwB,CAAC;QAC9B,MAAM,EAAE,yBAAyB;QACjC,EAAE,EAAE,KAAK,CAAC,UAAU;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC"}

package/dist/assurance/index.d.ts

@@ -0,0 +1,10 @@
+export { createSandboxAttachmentProvider, type AssuranceAttachment, type AssuranceAttachmentInput, type AssuranceAttachmentProvider, type SandboxAttachmentProviderOptions, } from "./attachment.js";
+export { qualifyProbe, } from "./capabilities.js";
+export { runSecurityCases, type RunSecurityCasesInput } from "./cases.js";
+export { AuthorizationCampaign, createAuthorizationCampaign, type CreateAuthorizationCampaignOptions, } from "./campaign.js";
+export { runAuthorizationCampaign } from "./runner.js";
+export { ASSURANCE_BROADCAST_CHANNEL, ASSURANCE_BROWSER_EVENT, publishAssuranceVisualization, subscribeAssuranceVisualizations, } from "./browser.js";
+export { AssuranceCampaignStore, createAssuranceTools, defaultAssuranceCampaignStore, type AssuranceToolDeps, } from "./tools.js";
+export { ASSURANCE_CAMPAIGN_SCHEMA, ASSURANCE_REPORT_SCHEMA, ASSURANCE_TARGET_SCHEMA, AssuranceInputError, } from "./types.js";
+export type { ActorAcquisition, ActorEvidence, AssuranceActor, AssuranceAttachmentInventory, AssuranceAttachmentSource, AssuranceCampaignContext, AssuranceCoverageGap, AssuranceDecision, AssuranceEventEvidence, AssuranceVisualizationSnapshot, AssuranceObservation, AssuranceProbe, AssuranceProbeResult, AssuranceReportSummary, AssuranceService, AuthFixtureUser, AuthorizationCampaignReport, AuthorizationCampaignSpec, CampaignExport, CapabilityRequirement, EngineQualification, FirebaseOperation, FirestoreOperation, FirestoreQueryConstraint, LocalFirebaseTarget, MinimizationResult, MutationDimension, MutationCandidate, OperationEvidence, ProbeClassification, ProbeMutation, ProposalInput, RtdbOperation, SecurityCase, SecurityInvariant, StateDiff, StorageObjectFixture, StorageOperation, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/assurance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/assurance/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,GACtC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,kCAAkC,GACxC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,6BAA6B,EAC7B,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,4BAA4B,EAC5B,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,8BAA8B,EAC9B,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,2BAA2B,EAC3B,yBAAyB,EACzB,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,SAAS,EACT,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/assurance/index.js

@@ -0,0 +1,9 @@
+export { createSandboxAttachmentProvider, } from "./attachment.js";
+export { qualifyProbe, } from "./capabilities.js";
+export { runSecurityCases } from "./cases.js";
+export { AuthorizationCampaign, createAuthorizationCampaign, } from "./campaign.js";
+export { runAuthorizationCampaign } from "./runner.js";
+export { ASSURANCE_BROADCAST_CHANNEL, ASSURANCE_BROWSER_EVENT, publishAssuranceVisualization, subscribeAssuranceVisualizations, } from "./browser.js";
+export { AssuranceCampaignStore, createAssuranceTools, defaultAssuranceCampaignStore, } from "./tools.js";
+export { ASSURANCE_CAMPAIGN_SCHEMA, ASSURANCE_REPORT_SCHEMA, ASSURANCE_TARGET_SCHEMA, AssuranceInputError, } from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/assurance/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/assurance/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,GAKhC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAA8B,MAAM,YAAY,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAE5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,6BAA6B,GAE9B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,YAAY,CAAC"}

package/dist/assurance/runner.d.ts

@@ -0,0 +1,3 @@
+import { type AuthorizationCampaignReport, type AuthorizationCampaignSpec } from "./types.js";
+export declare function runAuthorizationCampaign(spec: AuthorizationCampaignSpec): Promise<AuthorizationCampaignReport>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/assurance/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/assurance/runner.ts"],"names":[],"mappings":"AAmEA,OAAO,EAUL,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAQ/B,MAAM,YAAY,CAAC;AAmwBpB,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,2BAA2B,CAAC,CAyBtC"}