@relayflows/sdk 2.0.28 → 2.0.30

package/dist/hosted-extension-isolation.d.ts

@@ -0,0 +1,82 @@
+import type { FlowExtensionManifest } from './flow-extension-manifest.js';
+import { type HostedExtensionDispatch } from './flow-extension-loader.js';
+import { type HostedExtensionArtifact, type HostedExtensionBase, type HostedExtensionInstallation } from './hosted-extension-runtime.js';
+import { type HostedExtensionProtocolResult } from './hosted-extension-protocol.js';
+export { loadHostedExtensionArtifacts, loadHostedExtensionBase, loadHostedExtensionRuntime, } from './hosted-extension-runtime.js';
+export type { HostedExtensionArtifact, HostedExtensionBase, HostedExtensionInstallation, HostedExtensionRuntime, } from './hosted-extension-runtime.js';
+export interface HostedCapabilityAuthority {
+    readonly dispatch: HostedExtensionDispatch;
+    readonly extension: Readonly<{
+        name: string;
+        version: string;
+        ref: string;
+        digest: string;
+    }>;
+}
+export interface HostedBabysitterCapability {
+    queue(request: unknown, authority: HostedCapabilityAuthority): Promise<unknown>;
+}
+export interface RunHostedExtensionOptions {
+    /** Complete, lock-ordered set returned by loadHostedExtensionRuntime. */
+    readonly installation: HostedExtensionInstallation;
+    /** Same-generation base returned by loadHostedExtensionRuntime. */
+    readonly base: HostedExtensionBase;
+    readonly dispatch: HostedExtensionDispatch;
+    /** Host-normalized delivery descriptor. Its event identity must equal dispatch. */
+    readonly input: unknown;
+    readonly babysitterTurn: HostedBabysitterCapability;
+    readonly timeoutMs?: number;
+    /** Test/packaging override. Production resolves /usr/bin/bwrap. */
+    readonly bubblewrapPath?: string;
+    /** Test/packaging override. Defaults to the current, fingerprinted Node executable. */
+    readonly nodePath?: string;
+    /** Test/packaging override. Production resolves /usr/bin/prlimit. */
+    readonly prlimitPath?: string;
+}
+export type HostedExtensionResult = HostedExtensionProtocolResult;
+/**
+ * Execute a capability-only hosted extension in a Linux mount/PID/network/user
+ * namespace. The extension is first imported inside that namespace. It sees
+ * no host workspace, environment credentials, network, child process, MCP,
+ * helpers, harnesses, or base-flow context. The parent exposes exactly one
+ * authenticated capability adapter and passes the original branded dispatch
+ * authority to that adapter out of band.
+ *
+ * This is deliberately not wired into executeAuthoredFlow yet. #549's refusal
+ * remains the rollout gate until the Cloud adapter and independent review land.
+ */
+export declare function runHostedCapabilityExtension(options: RunHostedExtensionOptions): Promise<HostedExtensionResult>;
+interface RunVerifiedNativeExtensionOptions {
+    readonly artifact: HostedExtensionArtifact;
+    readonly manifest: FlowExtensionManifest;
+    readonly dispatch: HostedExtensionDispatch;
+    readonly input: unknown;
+    readonly babysitterTurn: HostedBabysitterCapability;
+    readonly timeoutMs?: number;
+    readonly bubblewrapPath?: string;
+    readonly nodePath?: string;
+    readonly prlimitPath?: string;
+    readonly surfaceRoot?: string;
+    readonly beforeLaunch?: () => Promise<void>;
+}
+/** @internal Security-harness seam; not exported from the SDK package root. */
+export declare function runVerifiedNativeExtensionSandbox(options: RunVerifiedNativeExtensionOptions): Promise<HostedExtensionResult>;
+/** @internal Selection seam used by compatibility/security regression tests. */
+export declare function selectHostedExtensionForRuntime(value: HostedExtensionInstallation, base: HostedExtensionBase, identity: {
+    readonly provider: string;
+    readonly event: string;
+    readonly action?: string;
+}, versions: Readonly<{
+    sdk: string;
+    surface: string;
+}>): Promise<{
+    artifact: HostedExtensionArtifact;
+    manifest: FlowExtensionManifest;
+}>;
+/** Generic handlers overlap action-specific deliveries, matching the SDK handler router. */
+export declare function hostedManifestRoutes(manifest: Pick<FlowExtensionManifest, 'triggers'>, identity: {
+    readonly provider: string;
+    readonly event: string;
+    readonly action?: string;
+}): boolean;
+//# sourceMappingURL=hosted-extension-isolation.d.ts.map

package/dist/hosted-extension-isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-isolation.d.ts","sourceRoot":"","sources":["../src/hosted-extension-isolation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAG1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EACjC,MAAM,+BAA+B,CAAC;AAQvC,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AAmCvC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,yBAAyB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjF;AAED,MAAM,WAAW,yBAAyB;IACxC,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACnD,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,qBAAqB,CAAC,CAgBhC;AAED,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,+EAA+E;AAC/E,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAkChC;AAED,gFAAgF;AAChF,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,2BAA2B,EAClC,IAAI,EAAE,mBAAmB,EACzB,QAAQ,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EACzF,QAAQ,EAAE,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GACnD,OAAO,CAAC;IAAE,QAAQ,EAAE,uBAAuB,CAAC;IAAC,QAAQ,EAAE,qBAAqB,CAAA;CAAE,CAAC,CA4BjF;AAoFD,4FAA4F;AAC5F,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,IAAI,CAAC,qBAAqB,EAAE,UAAU,CAAC,EACjD,QAAQ,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF,OAAO,CAWT"}

package/dist/hosted-extension-isolation.js

@@ -0,0 +1,322 @@
+import { canonicalize } from './canonical.js';
+import { sha256 } from './bundle.js';
+import { validateHostedFlowExtensionManifest } from './hosted-extension-manifest.js';
+import { assertBaseCompatible, assertCompatible, runtimeVersions } from './flow-extension-compat.js';
+import { hostedExtensionDispatchIdentity, } from './flow-extension-loader.js';
+import { assertHostedInstallationAuthority, assertHostedRuntimeAuthority, } from './hosted-extension-runtime.js';
+import { PluginError } from './plugin-manifest.js';
+import { assertHostedPromiseSafety, frozenHostedPromiseValue, } from './hosted-promise-safety.js';
+import { appendIntrinsicArray } from './intrinsic-array.js';
+import { readStoredPluginFiles } from './plugin-store.js';
+import { boundedJsonSnapshot, } from './hosted-extension-protocol.js';
+import { runHostedExtensionSandbox } from './hosted-extension-sandbox.js';
+export { loadHostedExtensionArtifacts, loadHostedExtensionBase, loadHostedExtensionRuntime, } from './hosted-extension-runtime.js';
+const HOSTED_WRITE = 'cloud:babysitter-turn';
+const ARRAY_IS_ARRAY = Array.isArray;
+const BUFFER_TO_STRING = Function.prototype.call.bind(Buffer.prototype.toString);
+const JSON_PARSE = JSON.parse;
+const NUMBER_IS_SAFE_INTEGER = Number.isSafeInteger;
+const OBJECT_HAS_OWN = Object.hasOwn;
+const OBJECT_FREEZE = Object.freeze;
+const OBJECT_GET_OWN_PROPERTY_DESCRIPTOR = Object.getOwnPropertyDescriptor;
+const OBJECT_KEYS = Object.keys;
+const REGEXP_TEST = Function.prototype.call.bind(RegExp.prototype.test);
+const STRING_STARTS_WITH = Function.prototype.call.bind(String.prototype.startsWith);
+const BABYSITTER_REF = 'github:AgentWorkforce/flows@8b33ebab8347514f80d9da5a81206a087f641714#extensions/babysitter';
+const BABYSITTER_DIGEST = 'bdf2187b9a242667d34bbc63e7a744753e146dc8cd6f4047047f2aed28f406ee';
+const BABYSITTER_MANIFEST_SHA256 = '5631a06bbdc8186f4ee0ff955610ead24d001c5197b59fb1fe81fe422c44f226';
+const DELIVERY_ID = /^[A-Za-z0-9_.:-]{1,200}$/;
+const RECEIPT_ID = /^[A-Za-z0-9_.:-]{1,200}$/;
+const OWNER = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/;
+const REPOSITORY = /^[A-Za-z0-9._-]{1,100}$/;
+const HEAD_SHA = /^[a-f0-9]{40}$/;
+const NATIVE_TRIGGERS = [
+    { provider: 'github', event: 'pull_request', actions: ['opened', 'synchronize', 'reopened', 'ready_for_review', 'closed', 'labeled', 'unlabeled'] },
+    { provider: 'github', event: 'pull_request_review', actions: ['submitted', 'dismissed'] },
+    { provider: 'github', event: 'check_run', actions: ['completed'] },
+    { provider: 'github', event: 'issue_comment', actions: ['created'] },
+];
+/**
+ * Execute a capability-only hosted extension in a Linux mount/PID/network/user
+ * namespace. The extension is first imported inside that namespace. It sees
+ * no host workspace, environment credentials, network, child process, MCP,
+ * helpers, harnesses, or base-flow context. The parent exposes exactly one
+ * authenticated capability adapter and passes the original branded dispatch
+ * authority to that adapter out of band.
+ *
+ * This is deliberately not wired into executeAuthoredFlow yet. #549's refusal
+ * remains the rollout gate until the Cloud adapter and independent review land.
+ */
+export async function runHostedCapabilityExtension(options) {
+    assertHostedPromiseSafety('plugin_unsupported');
+    const identity = hostedExtensionDispatchIdentity(options.dispatch);
+    await assertHostedRuntimeAuthority(options.installation, options.base);
+    const { artifact, manifest } = await selectHostedExtensionForRuntime(options.installation, options.base, identity, runtimeVersions());
+    return await runVerifiedNativeExtensionSandbox({
+        ...options,
+        artifact,
+        manifest,
+        beforeLaunch: () => assertHostedRuntimeAuthority(options.installation, options.base),
+    });
+}
+/** @internal Security-harness seam; not exported from the SDK package root. */
+export async function runVerifiedNativeExtensionSandbox(options) {
+    assertHostedPromiseSafety('plugin_unsupported');
+    assertCapabilityOnlyManifest(options.manifest);
+    const identity = hostedExtensionDispatchIdentity(options.dispatch);
+    assertManifestRoutes(options.manifest, identity);
+    const normalizedInput = babysitterInput(options.input, options.dispatch);
+    const versions = runtimeVersions();
+    const authority = OBJECT_FREEZE({
+        dispatch: options.dispatch,
+        extension: OBJECT_FREEZE({
+            name: options.manifest.name,
+            version: options.manifest.version,
+            ref: options.artifact.ref,
+            digest: options.artifact.digest,
+        }),
+    });
+    return await runHostedExtensionSandbox({
+        artifactDirectory: options.artifact.directory,
+        artifactDigest: options.artifact.digest,
+        entry: options.manifest.entry,
+        surfaceVersion: versions.surface,
+        identity,
+        input: normalizedInput,
+        timeoutMs: ownOption(options, 'timeoutMs'),
+        bubblewrapPath: ownOption(options, 'bubblewrapPath'),
+        nodePath: ownOption(options, 'nodePath'),
+        prlimitPath: ownOption(options, 'prlimitPath'),
+        surfaceRoot: ownOption(options, 'surfaceRoot'),
+        beforeLaunch: ownOption(options, 'beforeLaunch'),
+        invoke: async (request) => babysitterReceipt(await options.babysitterTurn.queue(babysitterRequest(request, normalizedInput, options.dispatch), authority)),
+    });
+}
+/** @internal Selection seam used by compatibility/security regression tests. */
+export async function selectHostedExtensionForRuntime(value, base, identity, versions) {
+    assertHostedPromiseSafety('plugin_source_invalid');
+    assertHostedInstallationAuthority(value);
+    if (typeof base !== 'object' || base === null || typeof base.name !== 'string'
+        || (base.version !== undefined && typeof base.version !== 'string')) {
+        throw new PluginError('plugin_incompatible', 'Hosted base identity is malformed.');
+    }
+    const matches = [];
+    for (let index = 0; index < value.artifacts.length; index += 1) {
+        const artifact = value.artifacts[index];
+        const manifest = await verifiedManifest(artifact);
+        assertCompatible(manifest, versions);
+        assertBaseCompatible(manifest, base);
+        if (hostedManifestRoutes(manifest, identity))
+            appendIntrinsicArray(matches, { artifact, manifest });
+    }
+    if (matches.length > 1) {
+        throw new PluginError('plugin_event_ambiguous', `Hosted event matches multiple extension manifests (${manifestNames(matches)}).`);
+    }
+    const selected = matches[0];
+    if (selected === undefined || selected.artifact.ref !== BABYSITTER_REF) {
+        throw new PluginError('plugin_event_unroutable', 'Hosted event does not route to the pinned native Babysitter extension.');
+    }
+    await assertPinnedBabysitter(selected.artifact);
+    assertCapabilityOnlyManifest(selected.manifest);
+    return frozenHostedPromiseValue(selected);
+}
+async function verifiedManifest(artifact) {
+    if (!matches(/^[a-f0-9]{64}$/, artifact.digest) || !matches(/^[a-f0-9]{64}$/, artifact.manifestSha256)) {
+        throw new PluginError('plugin_source_drift', `${artifact.ref}: hosted extension digests are malformed.`);
+    }
+    const stored = await readStoredPluginFiles(artifact.directory, artifact.digest);
+    let bytes;
+    for (let index = 0; index < stored.length; index += 1) {
+        if (stored[index].path === 'flows-plugin.json')
+            bytes = stored[index].data;
+    }
+    if (bytes === undefined) {
+        throw new PluginError('plugin_source_drift', `${artifact.ref}: flows-plugin.json is missing.`);
+    }
+    if (sha256(bytes) !== artifact.manifestSha256) {
+        throw new PluginError('plugin_source_drift', `${artifact.ref}: flows-plugin.json differs from the lockfile's manifest hash.`);
+    }
+    let input;
+    try {
+        input = JSON_PARSE(BUFFER_TO_STRING(bytes, 'utf8'));
+    }
+    catch {
+        throw new PluginError('plugin_manifest_invalid', `${artifact.ref}: flows-plugin.json is not valid JSON.`);
+    }
+    const manifest = validateHostedFlowExtensionManifest(input);
+    if (manifest.name !== artifact.name || manifest.version !== artifact.version) {
+        throw new PluginError('plugin_source_drift', `${artifact.ref}: manifest names ${manifest.name}@${manifest.version}, lockfile has ${artifact.name}@${artifact.version}.`);
+    }
+    return manifest;
+}
+async function assertPinnedBabysitter(artifact) {
+    if (artifact.ref !== BABYSITTER_REF || artifact.name !== 'babysitter' || artifact.version !== '0.2.0'
+        || artifact.digest !== BABYSITTER_DIGEST || artifact.manifestSha256 !== BABYSITTER_MANIFEST_SHA256) {
+        throw new PluginError('plugin_source_invalid', 'Hosted capability isolation accepts only the reviewed native Babysitter artifact.');
+    }
+    const stored = await readStoredPluginFiles(artifact.directory, artifact.digest);
+    for (let index = 0; index < stored.length; index += 1) {
+        const path = stored[index].path;
+        if (path === 'node_modules' || STRING_STARTS_WITH(path, 'node_modules/')) {
+            throw new PluginError('plugin_source_drift', `${artifact.ref}: hosted extensions cannot carry node_modules.`);
+        }
+    }
+}
+function assertCapabilityOnlyManifest(manifest) {
+    const expected = {
+        integrations: ['github'], harnesses: ['codex'], mcp: [], writes: [HOSTED_WRITE],
+        base: [{ name: 'software-factory', version: '*' }],
+        budget: { dollars: 1, wallclock: '5m' },
+        triggers: NATIVE_TRIGGERS,
+    };
+    const actual = {
+        integrations: manifest.permissions.integrations,
+        harnesses: manifest.permissions.harnesses,
+        mcp: manifest.permissions.mcp,
+        writes: manifest.permissions.writes,
+        base: manifest.compat.base,
+        budget: manifest.permissions.budget,
+        triggers: manifest.triggers,
+    };
+    if (canonicalize(actual) !== canonicalize(expected)
+        || manifest.name !== 'babysitter'
+        || manifest.entry !== 'babysitter.flow.ts'
+        || !manifest.extends.handlers || manifest.extends.hooks.length !== 0
+        || manifest.preflight.credentials.length !== 0 || manifest.preflight.servers.length !== 0) {
+        throw new PluginError('plugin_unsupported', `${manifest.name}: hosted capability isolation accepts only the native Babysitter permission profile.`);
+    }
+}
+function assertManifestRoutes(manifest, identity) {
+    if (!hostedManifestRoutes(manifest, identity)) {
+        throw new PluginError('plugin_event_unroutable', `${manifest.name}: hosted event is not declared exactly once.`);
+    }
+}
+/** Generic handlers overlap action-specific deliveries, matching the SDK handler router. */
+export function hostedManifestRoutes(manifest, identity) {
+    for (let triggerIndex = 0; triggerIndex < manifest.triggers.length; triggerIndex += 1) {
+        const trigger = manifest.triggers[triggerIndex];
+        if (trigger.provider !== identity.provider || trigger.event !== identity.event)
+            continue;
+        if (trigger.actions.length === 0)
+            return true;
+        if (identity.action === undefined)
+            continue;
+        for (let actionIndex = 0; actionIndex < trigger.actions.length; actionIndex += 1) {
+            if (trigger.actions[actionIndex] === identity.action)
+                return true;
+        }
+    }
+    return false;
+}
+function babysitterInput(input, dispatch) {
+    const snapshot = boundedJsonSnapshot(input, 'hosted extension input');
+    const top = exactRecord(snapshot, 'Hosted extension input', ['event', 'pullRequest']);
+    const event = exactRecord(top.event, 'Hosted extension event', ['provider', 'eventType', 'deliveryId']);
+    const pullRequest = optionalRecord(top.pullRequest, 'Hosted extension pull request', ['host', 'owner', 'repo', 'number', 'headSha'], ['owner', 'repo', 'number']);
+    if (event.provider !== dispatch.provider || event.eventType !== dispatch.eventType
+        || event.deliveryId !== dispatch.deliveryId || event.provider !== 'github'
+        || typeof event.deliveryId !== 'string' || !matches(DELIVERY_ID, event.deliveryId)
+        || (pullRequest.host !== undefined && pullRequest.host !== 'github')
+        || typeof pullRequest.owner !== 'string' || !matches(OWNER, pullRequest.owner)
+        || typeof pullRequest.repo !== 'string' || !matches(REPOSITORY, pullRequest.repo)
+        || pullRequest.repo === '.' || pullRequest.repo === '..'
+        || typeof pullRequest.number !== 'number' || !NUMBER_IS_SAFE_INTEGER(pullRequest.number) || pullRequest.number <= 0
+        || (pullRequest.headSha !== undefined
+            && (typeof pullRequest.headSha !== 'string' || !matches(HEAD_SHA, pullRequest.headSha)))) {
+        throw new PluginError('plugin_event_unroutable', 'Hosted extension input does not match the verified GitHub delivery.');
+    }
+    return snapshot;
+}
+function babysitterRequest(value, input, dispatch) {
+    const snapshot = boundedJsonSnapshot(value, 'Babysitter capability request');
+    const request = exactRecord(snapshot, 'Babysitter capability request', ['delivery']);
+    const delivery = exactRecord(request.delivery, 'Babysitter delivery', ['deliveryId', 'provider', 'eventType', 'pullRequest']);
+    const pullRequest = exactRecord(delivery.pullRequest, 'Babysitter pull request', ['owner', 'repository', 'number']);
+    const normalized = exactRecord(input, 'Hosted extension input', ['event', 'pullRequest']);
+    const inputPullRequest = record(normalized.pullRequest, 'Hosted extension pull request');
+    if (delivery.deliveryId !== dispatch.deliveryId
+        || typeof delivery.deliveryId !== 'string' || !matches(DELIVERY_ID, delivery.deliveryId)
+        || delivery.provider !== 'github' || delivery.eventType !== dispatch.eventType
+        || typeof pullRequest.owner !== 'string' || !matches(OWNER, pullRequest.owner)
+        || typeof pullRequest.repository !== 'string' || !matches(REPOSITORY, pullRequest.repository)
+        || pullRequest.repository === '.' || pullRequest.repository === '..'
+        || typeof pullRequest.number !== 'number' || !NUMBER_IS_SAFE_INTEGER(pullRequest.number) || pullRequest.number <= 0
+        || pullRequest.owner !== inputPullRequest.owner
+        || pullRequest.repository !== inputPullRequest.repo
+        || pullRequest.number !== inputPullRequest.number) {
+        throw new PluginError('plugin_event_unroutable', 'Babysitter capability request does not match verified delivery input.');
+    }
+    return snapshot;
+}
+function babysitterReceipt(value) {
+    const snapshot = boundedJsonSnapshot(value, 'Babysitter capability receipt');
+    if (typeof snapshot !== 'object' || snapshot === null || ARRAY_IS_ARRAY(snapshot)) {
+        throw new PluginError('plugin_unsupported', 'Babysitter capability returned an invalid receipt.');
+    }
+    const receipt = snapshot;
+    if (!hasExactKeys(receipt, ['receiptId', 'status'])
+        || typeof receipt.receiptId !== 'string' || !matches(RECEIPT_ID, receipt.receiptId)
+        || (receipt.status !== 'queued' && receipt.status !== 'duplicate')) {
+        throw new PluginError('plugin_unsupported', 'Babysitter capability returned an invalid receipt.');
+    }
+    return OBJECT_FREEZE({ receiptId: receipt.receiptId, status: receipt.status });
+}
+function matches(pattern, value) {
+    return REGEXP_TEST(pattern, value);
+}
+function ownOption(options, name) {
+    const descriptor = OBJECT_GET_OWN_PROPERTY_DESCRIPTOR(options, name);
+    return descriptor !== undefined && 'value' in descriptor ? descriptor.value : undefined;
+}
+function record(value, what) {
+    if (typeof value !== 'object' || value === null || ARRAY_IS_ARRAY(value)) {
+        throw new PluginError('plugin_event_unroutable', `${what} must be an object.`);
+    }
+    return value;
+}
+function exactRecord(value, what, keys) {
+    const object = record(value, what);
+    if (!hasExactKeys(object, keys)) {
+        throw new PluginError('plugin_event_unroutable', `${what} has an invalid field set.`);
+    }
+    return object;
+}
+function optionalRecord(value, what, allowed, required) {
+    const object = record(value, what);
+    const actual = OBJECT_KEYS(object);
+    for (let index = 0; index < actual.length; index += 1) {
+        if (!contains(allowed, actual[index])) {
+            throw new PluginError('plugin_event_unroutable', `${what} has an invalid field set.`);
+        }
+    }
+    for (let index = 0; index < required.length; index += 1) {
+        if (!OBJECT_HAS_OWN(object, required[index])) {
+            throw new PluginError('plugin_event_unroutable', `${what} has an invalid field set.`);
+        }
+    }
+    return object;
+}
+function hasExactKeys(value, keys) {
+    if (OBJECT_KEYS(value).length !== keys.length)
+        return false;
+    for (let index = 0; index < keys.length; index += 1) {
+        if (!OBJECT_HAS_OWN(value, keys[index]))
+            return false;
+    }
+    return true;
+}
+function contains(values, expected) {
+    for (let index = 0; index < values.length; index += 1) {
+        if (values[index] === expected)
+            return true;
+    }
+    return false;
+}
+function manifestNames(matches) {
+    let value = '';
+    for (let index = 0; index < matches.length; index += 1) {
+        value += `${index === 0 ? '' : ', '}${matches[index].manifest.name}`;
+    }
+    return value;
+}
+//# sourceMappingURL=hosted-extension-isolation.js.map

package/dist/hosted-extension-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-isolation.js","sourceRoot":"","sources":["../src/hosted-extension-isolation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,mCAAmC,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,EACjC,4BAA4B,GAI7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EACL,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EACL,mBAAmB,GAEpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,+BAA+B,CAAC;AAQvC,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;AACrC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAGpE,CAAC;AACZ,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC;AAC9B,MAAM,sBAAsB,GAAG,MAAM,CAAC,aAAa,CAAC;AACpD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;AACrC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;AACpC,MAAM,kCAAkC,GAAG,MAAM,CAAC,wBAAwB,CAAC;AAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;AAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAE1D,CAAC;AACb,MAAM,kBAAkB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAEvE,CAAC;AACb,MAAM,cAAc,GAAG,4FAA4F,CAAC;AACpH,MAAM,iBAAiB,GAAG,kEAAkE,CAAC;AAC7F,MAAM,0BAA0B,GAAG,kEAAkE,CAAC;AACtG,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAC/C,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAC9C,MAAM,KAAK,GAAG,qCAAqC,CAAC;AACpD,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAClC,MAAM,eAAe,GAAG;IACtB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE;IACnJ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE;IACzF,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IAClE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE;CACrE,CAAC;AAoCF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAkC;IAElC,yBAAyB,CAAC,oBAAoB,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,+BAA+B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,4BAA4B,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,+BAA+B,CAClE,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,IAAI,EACZ,QAAQ,EACR,eAAe,EAAE,CAClB,CAAC;IACF,OAAO,MAAM,iCAAiC,CAAC;QAC7C,GAAG,OAAO;QACV,QAAQ;QACR,QAAQ;QACR,YAAY,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;KACrF,CAAC,CAAC;AACL,CAAC;AAgBD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,OAA0C;IAE1C,yBAAyB,CAAC,oBAAoB,CAAC,CAAC;IAChD,4BAA4B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,+BAA+B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnE,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,SAAS,GAA8B,aAAa,CAAC;QACzD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,aAAa,CAAC;YACvB,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAC3B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;YACjC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG;YACzB,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;SAChC,CAAC;KACH,CAAC,CAAC;IACH,OAAO,MAAM,yBAAyB,CAAC;QACrC,iBAAiB,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;QAC7C,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;QACvC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK;QAC7B,cAAc,EAAE,QAAQ,CAAC,OAAO;QAChC,QAAQ;QACR,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,SAAS,CAAS,OAAO,EAAE,WAAW,CAAC;QAClD,cAAc,EAAE,SAAS,CAAS,OAAO,EAAE,gBAAgB,CAAC;QAC5D,QAAQ,EAAE,SAAS,CAAS,OAAO,EAAE,UAAU,CAAC;QAChD,WAAW,EAAE,SAAS,CAAS,OAAO,EAAE,aAAa,CAAC;QACtD,WAAW,EAAE,SAAS,CAAS,OAAO,EAAE,aAAa,CAAC;QACtD,YAAY,EAAE,SAAS,CAAsB,OAAO,EAAE,cAAc,CAAC;QACrE,MAAM,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAC3E,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC7D,SAAS,CACV,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,KAAkC,EAClC,IAAyB,EACzB,QAAyF,EACzF,QAAoD;IAEpD,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACnD,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;WACzE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,oCAAoC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,OAAO,GAAkF,EAAE,CAAC;IAClG,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClD,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrC,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAAE,oBAAoB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,WAAW,CACnB,wBAAwB,EACxB,sDAAsD,aAAa,CAAC,OAAO,CAAC,IAAI,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,KAAK,cAAc,EAAE,CAAC;QACvE,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,wEAAwE,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAiC;IAC/D,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,GAAG,QAAQ,CAAC,GAAG,2CAA2C,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChF,IAAI,KAAyB,CAAC;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK,CAAE,CAAC,IAAI,KAAK,mBAAmB;YAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC;IAC/E,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,GAAG,QAAQ,CAAC,GAAG,iCAAiC,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC9C,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,GAAG,QAAQ,CAAC,GAAG,gEAAgE,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAC5D,MAAM,CAAC;QAAC,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,GAAG,QAAQ,CAAC,GAAG,wCAAwC,CAAC,CAAC;IAAC,CAAC;IACpH,MAAM,QAAQ,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC7E,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,GAAG,QAAQ,CAAC,GAAG,oBAAoB,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,kBAAkB,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,GAAG,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,QAAiC;IACrE,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;WAChG,QAAQ,CAAC,MAAM,KAAK,iBAAiB,IAAI,QAAQ,CAAC,cAAc,KAAK,0BAA0B,EAAE,CAAC;QACrG,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC;QACjC,IAAI,IAAI,KAAK,cAAc,IAAI,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,GAAG,QAAQ,CAAC,GAAG,gDAAgD,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,QAA+B;IACnE,MAAM,QAAQ,GAAG;QACf,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC;QAC/E,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAClD,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;QACvC,QAAQ,EAAE,eAAe;KAC1B,CAAC;IACF,MAAM,MAAM,GAAG;QACb,YAAY,EAAE,QAAQ,CAAC,WAAW,CAAC,YAAY;QAC/C,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,SAAS;QACzC,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG;QAC7B,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM;QACnC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;QAC1B,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM;QACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC;WAC9C,QAAQ,CAAC,IAAI,KAAK,YAAY;WAC9B,QAAQ,CAAC,KAAK,KAAK,oBAAoB;WACvC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;WACjE,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,GAAG,QAAQ,CAAC,IAAI,sFAAsF,CACvG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA+B,EAC/B,QAAyF;IAEzF,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,GAAG,QAAQ,CAAC,IAAI,8CAA8C,CAAC,CAAC;IACnH,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,oBAAoB,CAClC,QAAiD,EACjD,QAAyF;IAEzF,KAAK,IAAI,YAAY,GAAG,CAAC,EAAE,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAE,CAAC;QACjD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;YAAE,SAAS;QACzF,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAC5C,KAAK,IAAI,WAAW,GAAG,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,EAAE,CAAC;YACjF,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAiC;IACxE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,wBAAwB,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,wBAAwB,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IACxG,MAAM,WAAW,GAAG,cAAc,CAChC,GAAG,CAAC,WAAW,EACf,+BAA+B,EAC/B,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAC9C,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAC5B,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;WAC7E,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;WACvE,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC;WAC/E,CAAC,WAAW,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,CAAC;WACjE,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;WAC3E,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC;WAC9E,WAAW,CAAC,IAAI,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,KAAK,IAAI;WACrD,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC;WAChH,CAAC,WAAW,CAAC,OAAO,KAAK,SAAS;eAChC,CAAC,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,qEAAqE,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAc,EAAE,QAAiC;IAC1F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,+BAA+B,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,qBAAqB,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9H,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpH,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,EAAE,wBAAwB,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IACzF,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;WAC1C,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC;WACrF,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;WAC3E,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;WAC3E,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC;WAC1F,WAAW,CAAC,UAAU,KAAK,GAAG,IAAI,WAAW,CAAC,UAAU,KAAK,IAAI;WACjE,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC;WAChH,WAAW,CAAC,KAAK,KAAK,gBAAgB,CAAC,KAAK;WAC5C,WAAW,CAAC,UAAU,KAAK,gBAAgB,CAAC,IAAI;WAChD,WAAW,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,uEAAuE,CAAC,CAAC;IAC5H,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAC7E,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,oDAAoD,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,OAAO,GAAG,QAAmC,CAAC;IACpD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;WAC9C,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC;WAChF,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,oDAAoD,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,KAAa;IAC7C,OAAO,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAI,OAAe,EAAE,IAAY;IACjD,MAAM,UAAU,GAAG,kCAAkC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrE,OAAO,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,GAAG,IAAI,qBAAqB,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY,EAAE,IAAuB;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,GAAG,IAAI,4BAA4B,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CACrB,KAAc,EACd,IAAY,EACZ,OAA0B,EAC1B,QAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAE,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,GAAG,IAAI,4BAA4B,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,GAAG,IAAI,4BAA4B,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B,EAAE,IAAuB;IAC3E,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAE,CAAC;YAAE,OAAO,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,MAAyB,EAAE,QAAgB;IAC3D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CACpB,OAAgE;IAEhE,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,KAAK,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/hosted-extension-manifest.d.ts

@@ -0,0 +1,9 @@
+import type { FlowExtensionManifest } from './flow-extension-manifest.js';
+/**
+ * Hosted manifests are parsed after authored code may have executed. Keep this
+ * projection deliberately narrower than the authoring validator and use only
+ * module-captured intrinsics. The only manifest that can launch is separately
+ * pinned by exact ref, payload digest, and manifest digest.
+ */
+export declare function validateHostedFlowExtensionManifest(input: unknown): FlowExtensionManifest;
+//# sourceMappingURL=hosted-extension-manifest.d.ts.map

package/dist/hosted-extension-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-manifest.d.ts","sourceRoot":"","sources":["../src/hosted-extension-manifest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,qBAAqB,EAGtB,MAAM,8BAA8B,CAAC;AAwCtC;;;;;GAKG;AACH,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAgDzF"}