@rewind-ai/cli 0.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.env.example +8 -0
- package/LICENSE +21 -0
- package/README.md +39 -0
- package/dist/src/action/capture.d.ts +15 -0
- package/dist/src/action/capture.js +215 -0
- package/dist/src/action/capture.js.map +1 -0
- package/dist/src/action/mediate.d.ts +28 -0
- package/dist/src/action/mediate.js +109 -0
- package/dist/src/action/mediate.js.map +1 -0
- package/dist/src/action/mutate.d.ts +11 -0
- package/dist/src/action/mutate.js +189 -0
- package/dist/src/action/mutate.js.map +1 -0
- package/dist/src/action/objects.d.ts +5 -0
- package/dist/src/action/objects.js +50 -0
- package/dist/src/action/objects.js.map +1 -0
- package/dist/src/action/store.d.ts +24 -0
- package/dist/src/action/store.js +149 -0
- package/dist/src/action/store.js.map +1 -0
- package/dist/src/action/types.d.ts +84 -0
- package/dist/src/action/types.js +3 -0
- package/dist/src/action/types.js.map +1 -0
- package/dist/src/action/undo.d.ts +11 -0
- package/dist/src/action/undo.js +42 -0
- package/dist/src/action/undo.js.map +1 -0
- package/dist/src/adapters/filesystem.d.ts +35 -0
- package/dist/src/adapters/filesystem.js +499 -0
- package/dist/src/adapters/filesystem.js.map +1 -0
- package/dist/src/adapters/index.d.ts +7 -0
- package/dist/src/adapters/index.js +19 -0
- package/dist/src/adapters/index.js.map +1 -0
- package/dist/src/adapters/types.d.ts +54 -0
- package/dist/src/adapters/types.js +7 -0
- package/dist/src/adapters/types.js.map +1 -0
- package/dist/src/api/server.d.ts +25 -0
- package/dist/src/api/server.js +786 -0
- package/dist/src/api/server.js.map +1 -0
- package/dist/src/approval/store.d.ts +35 -0
- package/dist/src/approval/store.js +113 -0
- package/dist/src/approval/store.js.map +1 -0
- package/dist/src/checkpoint.d.ts +9 -0
- package/dist/src/checkpoint.js +140 -0
- package/dist/src/checkpoint.js.map +1 -0
- package/dist/src/cli/v5.d.ts +15 -0
- package/dist/src/cli/v5.js +110 -0
- package/dist/src/cli/v5.js.map +1 -0
- package/dist/src/cli.d.ts +2 -0
- package/dist/src/cli.js +823 -0
- package/dist/src/cli.js.map +1 -0
- package/dist/src/clients/types.d.ts +90 -0
- package/dist/src/clients/types.js +239 -0
- package/dist/src/clients/types.js.map +1 -0
- package/dist/src/commercial/auth/provider.d.ts +61 -0
- package/dist/src/commercial/auth/provider.js +227 -0
- package/dist/src/commercial/auth/provider.js.map +1 -0
- package/dist/src/commercial/entitlement/provider.d.ts +27 -0
- package/dist/src/commercial/entitlement/provider.js +192 -0
- package/dist/src/commercial/entitlement/provider.js.map +1 -0
- package/dist/src/commercial/entitlement/signing.d.ts +61 -0
- package/dist/src/commercial/entitlement/signing.js +124 -0
- package/dist/src/commercial/entitlement/signing.js.map +1 -0
- package/dist/src/commercial/env.d.ts +10 -0
- package/dist/src/commercial/env.js +40 -0
- package/dist/src/commercial/env.js.map +1 -0
- package/dist/src/commercial/product.d.ts +26 -0
- package/dist/src/commercial/product.js +39 -0
- package/dist/src/commercial/product.js.map +1 -0
- package/dist/src/commercial/store.d.ts +46 -0
- package/dist/src/commercial/store.js +104 -0
- package/dist/src/commercial/store.js.map +1 -0
- package/dist/src/commercial/stripe/checkout.d.ts +104 -0
- package/dist/src/commercial/stripe/checkout.js +469 -0
- package/dist/src/commercial/stripe/checkout.js.map +1 -0
- package/dist/src/core/compatibility.d.ts +15 -0
- package/dist/src/core/compatibility.js +226 -0
- package/dist/src/core/compatibility.js.map +1 -0
- package/dist/src/core/engine.d.ts +33 -0
- package/dist/src/core/engine.js +432 -0
- package/dist/src/core/engine.js.map +1 -0
- package/dist/src/core/lifecycle.d.ts +17 -0
- package/dist/src/core/lifecycle.js +56 -0
- package/dist/src/core/lifecycle.js.map +1 -0
- package/dist/src/core/types.d.ts +140 -0
- package/dist/src/core/types.js +37 -0
- package/dist/src/core/types.js.map +1 -0
- package/dist/src/destroy.d.ts +21 -0
- package/dist/src/destroy.js +219 -0
- package/dist/src/destroy.js.map +1 -0
- package/dist/src/diff.d.ts +13 -0
- package/dist/src/diff.js +251 -0
- package/dist/src/diff.js.map +1 -0
- package/dist/src/enforcement/detect.d.ts +13 -0
- package/dist/src/enforcement/detect.js +75 -0
- package/dist/src/enforcement/detect.js.map +1 -0
- package/dist/src/enforcement/hook-policy.d.ts +38 -0
- package/dist/src/enforcement/hook-policy.js +111 -0
- package/dist/src/enforcement/hook-policy.js.map +1 -0
- package/dist/src/enforcement/index.d.ts +8 -0
- package/dist/src/enforcement/index.js +8 -0
- package/dist/src/enforcement/index.js.map +1 -0
- package/dist/src/enforcement/perf.d.ts +6 -0
- package/dist/src/enforcement/perf.js +18 -0
- package/dist/src/enforcement/perf.js.map +1 -0
- package/dist/src/enforcement/policy.d.ts +12 -0
- package/dist/src/enforcement/policy.js +84 -0
- package/dist/src/enforcement/policy.js.map +1 -0
- package/dist/src/enforcement/readonly.d.ts +17 -0
- package/dist/src/enforcement/readonly.js +124 -0
- package/dist/src/enforcement/readonly.js.map +1 -0
- package/dist/src/enforcement/sandbox-clone.d.ts +6 -0
- package/dist/src/enforcement/sandbox-clone.js +11 -0
- package/dist/src/enforcement/sandbox-clone.js.map +1 -0
- package/dist/src/enforcement/setup.d.ts +33 -0
- package/dist/src/enforcement/setup.js +168 -0
- package/dist/src/enforcement/setup.js.map +1 -0
- package/dist/src/enforcement/trust.d.ts +10 -0
- package/dist/src/enforcement/trust.js +71 -0
- package/dist/src/enforcement/trust.js.map +1 -0
- package/dist/src/enforcement/types.d.ts +40 -0
- package/dist/src/enforcement/types.js +3 -0
- package/dist/src/enforcement/types.js.map +1 -0
- package/dist/src/entitlement/provider.d.ts +48 -0
- package/dist/src/entitlement/provider.js +95 -0
- package/dist/src/entitlement/provider.js.map +1 -0
- package/dist/src/hash.d.ts +9 -0
- package/dist/src/hash.js +23 -0
- package/dist/src/hash.js.map +1 -0
- package/dist/src/ledger/query.d.ts +19 -0
- package/dist/src/ledger/query.js +158 -0
- package/dist/src/ledger/query.js.map +1 -0
- package/dist/src/manifest.d.ts +32 -0
- package/dist/src/manifest.js +242 -0
- package/dist/src/manifest.js.map +1 -0
- package/dist/src/mcp/server.d.ts +7 -0
- package/dist/src/mcp/server.js +364 -0
- package/dist/src/mcp/server.js.map +1 -0
- package/dist/src/paths.d.ts +94 -0
- package/dist/src/paths.js +354 -0
- package/dist/src/paths.js.map +1 -0
- package/dist/src/permission/engine.d.ts +15 -0
- package/dist/src/permission/engine.js +147 -0
- package/dist/src/permission/engine.js.map +1 -0
- package/dist/src/permission/types.d.ts +42 -0
- package/dist/src/permission/types.js +3 -0
- package/dist/src/permission/types.js.map +1 -0
- package/dist/src/product/setup.d.ts +35 -0
- package/dist/src/product/setup.js +300 -0
- package/dist/src/product/setup.js.map +1 -0
- package/dist/src/protect/audit.d.ts +5 -0
- package/dist/src/protect/audit.js +26 -0
- package/dist/src/protect/audit.js.map +1 -0
- package/dist/src/protect/capture.d.ts +7 -0
- package/dist/src/protect/capture.js +250 -0
- package/dist/src/protect/capture.js.map +1 -0
- package/dist/src/protect/fingerprint.d.ts +4 -0
- package/dist/src/protect/fingerprint.js +49 -0
- package/dist/src/protect/fingerprint.js.map +1 -0
- package/dist/src/protect/hook-cli.d.ts +2 -0
- package/dist/src/protect/hook-cli.js +107 -0
- package/dist/src/protect/hook-cli.js.map +1 -0
- package/dist/src/protect/index.d.ts +12 -0
- package/dist/src/protect/index.js +12 -0
- package/dist/src/protect/index.js.map +1 -0
- package/dist/src/protect/install.d.ts +34 -0
- package/dist/src/protect/install.js +293 -0
- package/dist/src/protect/install.js.map +1 -0
- package/dist/src/protect/intercept.d.ts +11 -0
- package/dist/src/protect/intercept.js +390 -0
- package/dist/src/protect/intercept.js.map +1 -0
- package/dist/src/protect/protect.d.ts +17 -0
- package/dist/src/protect/protect.js +194 -0
- package/dist/src/protect/protect.js.map +1 -0
- package/dist/src/protect/root-paths.d.ts +13 -0
- package/dist/src/protect/root-paths.js +140 -0
- package/dist/src/protect/root-paths.js.map +1 -0
- package/dist/src/protect/shell-policy.d.ts +17 -0
- package/dist/src/protect/shell-policy.js +269 -0
- package/dist/src/protect/shell-policy.js.map +1 -0
- package/dist/src/protect/status.d.ts +11 -0
- package/dist/src/protect/status.js +165 -0
- package/dist/src/protect/status.js.map +1 -0
- package/dist/src/protect/store.d.ts +20 -0
- package/dist/src/protect/store.js +170 -0
- package/dist/src/protect/store.js.map +1 -0
- package/dist/src/protect/types.d.ts +116 -0
- package/dist/src/protect/types.js +3 -0
- package/dist/src/protect/types.js.map +1 -0
- package/dist/src/protect/undo-session.d.ts +14 -0
- package/dist/src/protect/undo-session.js +182 -0
- package/dist/src/protect/undo-session.js.map +1 -0
- package/dist/src/restore.d.ts +39 -0
- package/dist/src/restore.js +141 -0
- package/dist/src/restore.js.map +1 -0
- package/dist/src/sandbox.d.ts +23 -0
- package/dist/src/sandbox.js +198 -0
- package/dist/src/sandbox.js.map +1 -0
- package/dist/src/session/ambient.d.ts +10 -0
- package/dist/src/session/ambient.js +53 -0
- package/dist/src/session/ambient.js.map +1 -0
- package/dist/src/session/attribution.d.ts +27 -0
- package/dist/src/session/attribution.js +201 -0
- package/dist/src/session/attribution.js.map +1 -0
- package/dist/src/session/index.d.ts +25 -0
- package/dist/src/session/index.js +472 -0
- package/dist/src/session/index.js.map +1 -0
- package/dist/src/session/process.d.ts +34 -0
- package/dist/src/session/process.js +234 -0
- package/dist/src/session/process.js.map +1 -0
- package/dist/src/session/store.d.ts +14 -0
- package/dist/src/session/store.js +125 -0
- package/dist/src/session/store.js.map +1 -0
- package/dist/src/session/types.d.ts +111 -0
- package/dist/src/session/types.js +3 -0
- package/dist/src/session/types.js.map +1 -0
- package/dist/src/session/watcher.d.ts +32 -0
- package/dist/src/session/watcher.js +186 -0
- package/dist/src/session/watcher.js.map +1 -0
- package/dist/src/timing.d.ts +7 -0
- package/dist/src/timing.js +19 -0
- package/dist/src/timing.js.map +1 -0
- package/dist/src/types.d.ts +101 -0
- package/dist/src/types.js +3 -0
- package/dist/src/types.js.map +1 -0
- package/dist/src/verify.d.ts +8 -0
- package/dist/src/verify.js +126 -0
- package/dist/src/verify.js.map +1 -0
- package/docs/ADAPTERS.md +37 -0
- package/docs/APPROVALS.md +32 -0
- package/docs/ARCHITECTURE.md +57 -0
- package/docs/ATTRIBUTION.md +179 -0
- package/docs/COMMERCIAL.md +51 -0
- package/docs/CURSOR-ENFORCEMENT.md +73 -0
- package/docs/ENFORCEMENT.md +134 -0
- package/docs/FUTURE.md +91 -0
- package/docs/HUMAN-SETUP.md +98 -0
- package/docs/IDENTITY-AUTHORITY.md +35 -0
- package/docs/MCP.md +107 -0
- package/docs/PACKAGING.md +77 -0
- package/docs/PERMISSIONS.md +53 -0
- package/docs/PRODUCT-V5.md +63 -0
- package/docs/PRODUCT-V6.md +69 -0
- package/docs/PROTECTED-SESSIONS.md +155 -0
- package/docs/THREAT-MODEL.md +84 -0
- package/docs/TRANSACTIONS.md +57 -0
- package/package.json +85 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/api/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,WAAW,EACX,eAAe,EACf,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAkB3E,SAAS,IAAI,CACX,GAAwB,EACxB,MAAc,EACd,IAAa;IAEb,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;KAC5B,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAyB;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC,CAAC;QAChD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc;IACrB,4EAA4E;IAC5E,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAuhBD,CAAC;AACT,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA+B;IACzD,MAAM,KAAK,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACpF,MAAM,IAAI,GACR,IAAI,KAAK,YAAY;QACnB,CAAC,CAAC,sKAAsK;QACxK,CAAC,CAAC,wGAAwG,CAAC;IAC/G,OAAO;+DACsD,KAAK;;;;;;;;aAQvD,KAAK;KACb,IAAI;;sBAEa,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAA2B,EAAE;IAE7B,aAAa,EAAE,CAAC;IAChB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,cAAc,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,WAAW,CAAC;IACzB,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9C,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;IACrE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE1D,MAAM,IAAI,GAAG,CAAC,GAAyB,EAAW,EAAE;QAClD,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,UAAU,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAE9B,gFAAgF;YAChF,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;gBAC/B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YAED,gFAAgF;YAChF,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC1B,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,qEAAqE;YACrE,mEAAmE;YACnE,IACE,QAAQ,KAAK,+BAA+B;gBAC5C,GAAG,CAAC,MAAM,KAAK,MAAM,EACrB,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACpC,MAAM,GAAG,GACP,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,QAAQ;oBACjD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC;oBACjC,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC3D,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACtD,MAAM,QAAQ,GAAG,MAAM,0BAA0B,EAAE,CAAC;gBACpD,sBAAsB,CAAC,QAAQ,CAAC,CAAC;gBACjC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACtE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACb,WAAW;oBACX,IAAI,EAAE,MAAM,SAAS,CAAC,WAAW,CAAC;oBAClC,WAAW;oBACX,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;iBACvC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,kBAAkB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;gBAC5D,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE;oBACvD,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;iBAC3C,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBACjC,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACjE,IAAI,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC;gBAC5D,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAC9B,qCAAqC,CACtC,CAAC;YACF,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC;gBACjE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACb,SAAS,EAAE,MAAM,oBAAoB,CAAC,WAAW,CAAC;iBACnD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAC9B,4CAA4C,CAC7C,CAAC;YACF,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;gBAC7B,MAAM,GAAG,GACP,MAAM,KAAK,SAAS;oBAClB,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,EAAE,WAAW,CAAC;oBACvC,CAAC,CAAC,MAAM,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;gBACzC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBACjD,MAAM,GAAG,GAAG,IAAI,GAAG,EAGhB,CAAC;gBACJ,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;oBAC/D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI;wBAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,GAAG,EAAE;wBAC3D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI;wBAClB,KAAK,EAAE,CAAC;qBACT,CAAC;oBACF,GAAG,CAAC,KAAK,EAAE,CAAC;oBACZ,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpB,CAAC;gBACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACtD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACvD,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;gBACpC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACb,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;oBAC7B,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC;iBAClC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAAG,MAAM,0BAA0B,EAAE,CAAC;gBACpD,sBAAsB,CAAC,QAAQ,CAAC,CAAC;gBACjC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACb,WAAW,EAAE,MAAM,QAAQ,CAAC,KAAK,EAAE;iBACpC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ;YAC7B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACV,GAAG,YAAY,sBAAsB,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;gBAC9D,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,GAAG,CAAC;YACV,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE;gBAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,MAAM,SAAS,GACb,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtD,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,SAAS,WAAW,KAAK,EAAE,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,SAAS,kBAAkB,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAErE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE;YACrB,sBAAsB;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI;QACJ,KAAK;QACL,GAAG;QACH,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Approval system — pending mediated intents awaiting human APPROVE/DENY.
|
|
3
|
+
* No giant UI here; CLI/API/control-app consume this.
|
|
4
|
+
*
|
|
5
|
+
* TOCTOU: approve revalidates target state before execution.
|
|
6
|
+
*/
|
|
7
|
+
import type { Transaction, TransactionIntent } from "../core/types.js";
|
|
8
|
+
import type { AdapterStatePayload } from "../core/types.js";
|
|
9
|
+
export interface PendingApproval {
|
|
10
|
+
id: string;
|
|
11
|
+
createdAt: string;
|
|
12
|
+
transactionId: string;
|
|
13
|
+
intent: TransactionIntent;
|
|
14
|
+
/** Fingerprint of inspected state at ASK time for revalidation. */
|
|
15
|
+
stateFingerprint: string;
|
|
16
|
+
capturedBefore: AdapterStatePayload | null;
|
|
17
|
+
reason: string;
|
|
18
|
+
policyId: string | null;
|
|
19
|
+
reversibilityClass: string;
|
|
20
|
+
risk: string | null;
|
|
21
|
+
}
|
|
22
|
+
export declare function fingerprintState(state: AdapterStatePayload | null): string;
|
|
23
|
+
export declare function savePendingApproval(pending: PendingApproval, projectRoot?: string): Promise<void>;
|
|
24
|
+
export declare function loadPendingApproval(id: string, projectRoot?: string): Promise<PendingApproval>;
|
|
25
|
+
export declare function listPendingApprovals(projectRoot?: string): Promise<PendingApproval[]>;
|
|
26
|
+
export declare function deletePendingApproval(id: string, projectRoot?: string): Promise<void>;
|
|
27
|
+
export declare function formatPendingApproval(p: PendingApproval): string;
|
|
28
|
+
/** Summarize a transaction awaiting approval for UI/API. */
|
|
29
|
+
export declare function approvalSummaryFromTxn(txn: Transaction): {
|
|
30
|
+
who: string;
|
|
31
|
+
operation: string;
|
|
32
|
+
target: string;
|
|
33
|
+
reversibility: string;
|
|
34
|
+
reason: string;
|
|
35
|
+
};
|
|
@@ -0,0 +1,113 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Approval system — pending mediated intents awaiting human APPROVE/DENY.
|
|
3
|
+
* No giant UI here; CLI/API/control-app consume this.
|
|
4
|
+
*
|
|
5
|
+
* TOCTOU: approve revalidates target state before execution.
|
|
6
|
+
*/
|
|
7
|
+
import path from "node:path";
|
|
8
|
+
import { mkdir, readFile, readdir, writeFile, rename, rm } from "node:fs/promises";
|
|
9
|
+
import { getRewindHome, getProjectRoot, PathSafetyError } from "../paths.js";
|
|
10
|
+
function approvalsDir(projectRoot) {
|
|
11
|
+
return path.join(getRewindHome(projectRoot), "approvals");
|
|
12
|
+
}
|
|
13
|
+
function assertSafeId(id) {
|
|
14
|
+
if (!/^(appr_|txn_|act_)[A-Za-z0-9]+$/.test(id)) {
|
|
15
|
+
throw new PathSafetyError(`Invalid approval id: ${id}`);
|
|
16
|
+
}
|
|
17
|
+
return id;
|
|
18
|
+
}
|
|
19
|
+
async function writeJsonAtomic(file, data) {
|
|
20
|
+
await mkdir(path.dirname(file), { recursive: true });
|
|
21
|
+
const tmp = `${file}.tmp-${process.pid}`;
|
|
22
|
+
await writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
|
|
23
|
+
await rename(tmp, file);
|
|
24
|
+
}
|
|
25
|
+
export function fingerprintState(state) {
|
|
26
|
+
if (!state)
|
|
27
|
+
return "null";
|
|
28
|
+
if (state.kind === "filesystem") {
|
|
29
|
+
const p = state.primary;
|
|
30
|
+
const s = state.secondary;
|
|
31
|
+
return [
|
|
32
|
+
p.exists ? "1" : "0",
|
|
33
|
+
p.kind,
|
|
34
|
+
p.hash ?? "∅",
|
|
35
|
+
p.objectId ?? "∅",
|
|
36
|
+
s ? `${s.exists}:${s.kind}:${s.hash ?? "∅"}` : "∅",
|
|
37
|
+
].join("|");
|
|
38
|
+
}
|
|
39
|
+
return `opaque:${JSON.stringify(state.data)}`;
|
|
40
|
+
}
|
|
41
|
+
export async function savePendingApproval(pending, projectRoot = getProjectRoot()) {
|
|
42
|
+
const dir = approvalsDir(projectRoot);
|
|
43
|
+
await mkdir(dir, { recursive: true });
|
|
44
|
+
await writeJsonAtomic(path.join(dir, `${assertSafeId(pending.id)}.json`), pending);
|
|
45
|
+
}
|
|
46
|
+
export async function loadPendingApproval(id, projectRoot = getProjectRoot()) {
|
|
47
|
+
try {
|
|
48
|
+
const raw = await readFile(path.join(approvalsDir(projectRoot), `${assertSafeId(id)}.json`), "utf8");
|
|
49
|
+
return JSON.parse(raw);
|
|
50
|
+
}
|
|
51
|
+
catch {
|
|
52
|
+
throw new PathSafetyError(`Pending approval not found: ${id}`);
|
|
53
|
+
}
|
|
54
|
+
}
|
|
55
|
+
export async function listPendingApprovals(projectRoot = getProjectRoot()) {
|
|
56
|
+
const dir = approvalsDir(projectRoot);
|
|
57
|
+
let names;
|
|
58
|
+
try {
|
|
59
|
+
names = await readdir(dir);
|
|
60
|
+
}
|
|
61
|
+
catch {
|
|
62
|
+
return [];
|
|
63
|
+
}
|
|
64
|
+
const out = [];
|
|
65
|
+
for (const n of names) {
|
|
66
|
+
if (!n.endsWith(".json") || n.includes(".tmp-"))
|
|
67
|
+
continue;
|
|
68
|
+
try {
|
|
69
|
+
const raw = await readFile(path.join(dir, n), "utf8");
|
|
70
|
+
out.push(JSON.parse(raw));
|
|
71
|
+
}
|
|
72
|
+
catch {
|
|
73
|
+
/* skip */
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
out.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
|
|
77
|
+
return out;
|
|
78
|
+
}
|
|
79
|
+
export async function deletePendingApproval(id, projectRoot = getProjectRoot()) {
|
|
80
|
+
await rm(path.join(approvalsDir(projectRoot), `${assertSafeId(id)}.json`), {
|
|
81
|
+
force: true,
|
|
82
|
+
});
|
|
83
|
+
}
|
|
84
|
+
export function formatPendingApproval(p) {
|
|
85
|
+
const actor = `${p.intent.actor.client}${p.intent.actor.clientVersion ? "@" + p.intent.actor.clientVersion : ""}`;
|
|
86
|
+
return [
|
|
87
|
+
"REWIND PENDING APPROVAL",
|
|
88
|
+
"",
|
|
89
|
+
`Approval ${p.id}`,
|
|
90
|
+
`Transaction ${p.transactionId}`,
|
|
91
|
+
`Actor ${actor}`,
|
|
92
|
+
`Source ${p.intent.source}`,
|
|
93
|
+
`Adapter ${p.intent.adapter}`,
|
|
94
|
+
`Operation ${p.intent.operation}`,
|
|
95
|
+
`Target ${p.intent.target.displayName ?? p.intent.target.resource}`,
|
|
96
|
+
`Reversibility ${p.reversibilityClass}`,
|
|
97
|
+
`Risk ${p.risk ?? "—"}`,
|
|
98
|
+
`Reason ${p.reason}`,
|
|
99
|
+
`Policy ${p.policyId ?? "—"}`,
|
|
100
|
+
`Created ${p.createdAt}`,
|
|
101
|
+
].join("\n");
|
|
102
|
+
}
|
|
103
|
+
/** Summarize a transaction awaiting approval for UI/API. */
|
|
104
|
+
export function approvalSummaryFromTxn(txn) {
|
|
105
|
+
return {
|
|
106
|
+
who: `${txn.actor.client}${txn.actor.clientVersion ? "@" + txn.actor.clientVersion : ""}`,
|
|
107
|
+
operation: txn.operation,
|
|
108
|
+
target: txn.target.displayName ?? txn.target.resource,
|
|
109
|
+
reversibility: txn.reversibility.class,
|
|
110
|
+
reason: txn.permission?.reason ?? "approval required",
|
|
111
|
+
};
|
|
112
|
+
}
|
|
113
|
+
//# sourceMappingURL=store.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/approval/store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAkB7E,SAAS,YAAY,CAAC,WAAmB;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAa;IACxD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAiC;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QAC1B,OAAO;YACL,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YACpB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,IAAI,GAAG;YACb,CAAC,CAAC,QAAQ,IAAI,GAAG;YACjB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG;SACnD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,OAAO,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAwB,EACxB,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,eAAe,CACnB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAClD,OAAO,CACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAU,EACV,WAAW,GAAG,cAAc,EAAE;IAE9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,EAChE,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC1D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAU,EACV,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QACzE,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,CAAkB;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClH,OAAO;QACL,yBAAyB;QACzB,EAAE;QACF,kBAAkB,CAAC,CAAC,EAAE,EAAE;QACxB,kBAAkB,CAAC,CAAC,aAAa,EAAE;QACnC,kBAAkB,KAAK,EAAE;QACzB,kBAAkB,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;QACnC,kBAAkB,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE;QACpC,kBAAkB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE;QACtC,kBAAkB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC3E,kBAAkB,CAAC,CAAC,kBAAkB,EAAE;QACxC,kBAAkB,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE;QACjC,kBAAkB,CAAC,CAAC,MAAM,EAAE;QAC5B,kBAAkB,CAAC,CAAC,QAAQ,IAAI,GAAG,EAAE;QACrC,kBAAkB,CAAC,CAAC,SAAS,EAAE;KAChC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,sBAAsB,CAAC,GAAgB;IAOrD,OAAO;QACL,GAAG,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE;QACzF,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ;QACrD,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,KAAK;QACtC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,IAAI,mBAAmB;KACtD,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import type { Checkpoint } from "./types.js";
|
|
2
|
+
/**
|
|
3
|
+
* Create a checkpoint of the approved sandbox.
|
|
4
|
+
* Content-addressable object store + manifest + meta live under .rewind/checkpoints/<id>.
|
|
5
|
+
*/
|
|
6
|
+
export declare function createCheckpoint(projectRoot?: string): Promise<Checkpoint>;
|
|
7
|
+
export declare function loadCheckpoint(checkpointId?: string | "latest", projectRoot?: string): Promise<Checkpoint>;
|
|
8
|
+
export declare function listCheckpoints(projectRoot?: string): Promise<string[]>;
|
|
9
|
+
export declare function deleteAllCheckpoints(projectRoot?: string): Promise<void>;
|
|
@@ -0,0 +1,140 @@
|
|
|
1
|
+
import path from "node:path";
|
|
2
|
+
import { mkdir, writeFile, readFile, rm, readdir } from "node:fs/promises";
|
|
3
|
+
import { randomBytes } from "node:crypto";
|
|
4
|
+
import { getProjectRoot, getSandboxPath, getCheckpointsDir, assertApprovedSandbox, PathSafetyError, } from "./paths.js";
|
|
5
|
+
import { buildManifest, storeFileContent, walkTree, toRelativePosix, } from "./manifest.js";
|
|
6
|
+
import { readAndHash } from "./hash.js";
|
|
7
|
+
import { Timer } from "./timing.js";
|
|
8
|
+
function newCheckpointId() {
|
|
9
|
+
const ts = new Date().toISOString().replace(/[:.]/g, "-");
|
|
10
|
+
const rand = randomBytes(4).toString("hex");
|
|
11
|
+
return `cp-${ts}-${rand}`;
|
|
12
|
+
}
|
|
13
|
+
async function writeJson(filePath, data) {
|
|
14
|
+
const tmp = `${filePath}.tmp-${process.pid}`;
|
|
15
|
+
await writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
|
|
16
|
+
const { rename } = await import("node:fs/promises");
|
|
17
|
+
await rename(tmp, filePath);
|
|
18
|
+
}
|
|
19
|
+
/**
|
|
20
|
+
* Create a checkpoint of the approved sandbox.
|
|
21
|
+
* Content-addressable object store + manifest + meta live under .rewind/checkpoints/<id>.
|
|
22
|
+
*/
|
|
23
|
+
export async function createCheckpoint(projectRoot = getProjectRoot()) {
|
|
24
|
+
const totalTimer = new Timer();
|
|
25
|
+
const sandbox = getSandboxPath(projectRoot);
|
|
26
|
+
await assertApprovedSandbox(sandbox, projectRoot);
|
|
27
|
+
const id = newCheckpointId();
|
|
28
|
+
const checkpointDir = path.join(getCheckpointsDir(projectRoot), id);
|
|
29
|
+
await mkdir(path.join(checkpointDir, "objects"), { recursive: true });
|
|
30
|
+
const manifestTimer = new Timer();
|
|
31
|
+
const manifest = await buildManifest(sandbox, "sandbox-test-project");
|
|
32
|
+
const manifestMs = manifestTimer.elapsedMs();
|
|
33
|
+
const storeTimer = new Timer();
|
|
34
|
+
const absPaths = await walkTree(sandbox);
|
|
35
|
+
for (const abs of absPaths) {
|
|
36
|
+
const { lstat } = await import("node:fs/promises");
|
|
37
|
+
const st = await lstat(abs);
|
|
38
|
+
if (!st.isFile())
|
|
39
|
+
continue;
|
|
40
|
+
const { data, hash } = await readAndHash(abs);
|
|
41
|
+
await storeFileContent(checkpointDir, hash, data);
|
|
42
|
+
// Ensure manifest hash matches stored content
|
|
43
|
+
const rel = toRelativePosix(sandbox, abs);
|
|
44
|
+
const entry = manifest.entries.find((e) => e.path === rel);
|
|
45
|
+
if (entry && entry.hash !== hash) {
|
|
46
|
+
throw new Error(`Hash mismatch while storing ${rel}`);
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
const storeMs = storeTimer.elapsedMs();
|
|
50
|
+
const fileCount = manifest.entries.filter((e) => e.kind === "file").length;
|
|
51
|
+
const directoryCount = manifest.entries.filter((e) => e.kind === "directory").length;
|
|
52
|
+
const symlinkCount = manifest.entries.filter((e) => e.kind === "symlink").length;
|
|
53
|
+
const meta = {
|
|
54
|
+
id,
|
|
55
|
+
createdAt: new Date().toISOString(),
|
|
56
|
+
targetPath: sandbox,
|
|
57
|
+
fingerprint: manifest.fingerprint,
|
|
58
|
+
fileCount,
|
|
59
|
+
directoryCount,
|
|
60
|
+
symlinkCount,
|
|
61
|
+
timingsMs: {
|
|
62
|
+
manifest: manifestMs,
|
|
63
|
+
contentStore: storeMs,
|
|
64
|
+
total: totalTimer.elapsedMs(),
|
|
65
|
+
},
|
|
66
|
+
};
|
|
67
|
+
await writeJson(path.join(checkpointDir, "manifest.json"), manifest);
|
|
68
|
+
await writeJson(path.join(checkpointDir, "meta.json"), meta);
|
|
69
|
+
// Pointer to latest checkpoint for convenience
|
|
70
|
+
await mkdir(getCheckpointsDir(projectRoot), { recursive: true });
|
|
71
|
+
await writeJson(path.join(getCheckpointsDir(projectRoot), "latest.json"), {
|
|
72
|
+
id,
|
|
73
|
+
fingerprint: meta.fingerprint,
|
|
74
|
+
createdAt: meta.createdAt,
|
|
75
|
+
});
|
|
76
|
+
return { meta, manifest, directory: checkpointDir };
|
|
77
|
+
}
|
|
78
|
+
export async function loadCheckpoint(checkpointId = "latest", projectRoot = getProjectRoot()) {
|
|
79
|
+
const checkpointsDir = getCheckpointsDir(projectRoot);
|
|
80
|
+
let id = checkpointId;
|
|
81
|
+
if (checkpointId === "latest") {
|
|
82
|
+
const latestPath = path.join(checkpointsDir, "latest.json");
|
|
83
|
+
let raw;
|
|
84
|
+
try {
|
|
85
|
+
raw = await readFile(latestPath, "utf8");
|
|
86
|
+
}
|
|
87
|
+
catch {
|
|
88
|
+
throw new PathSafetyError("No checkpoint found. Run `npm run checkpoint` first.");
|
|
89
|
+
}
|
|
90
|
+
const latest = JSON.parse(raw);
|
|
91
|
+
id = latest.id;
|
|
92
|
+
}
|
|
93
|
+
// Prevent path traversal via checkpoint id
|
|
94
|
+
if (id.includes("..") ||
|
|
95
|
+
id.includes("/") ||
|
|
96
|
+
id.includes("\\") ||
|
|
97
|
+
id.includes("\0")) {
|
|
98
|
+
throw new PathSafetyError(`Invalid checkpoint id: ${checkpointId}`);
|
|
99
|
+
}
|
|
100
|
+
const checkpointDir = path.join(checkpointsDir, id);
|
|
101
|
+
let metaRaw;
|
|
102
|
+
let manifestRaw;
|
|
103
|
+
try {
|
|
104
|
+
metaRaw = await readFile(path.join(checkpointDir, "meta.json"), "utf8");
|
|
105
|
+
manifestRaw = await readFile(path.join(checkpointDir, "manifest.json"), "utf8");
|
|
106
|
+
}
|
|
107
|
+
catch {
|
|
108
|
+
throw new PathSafetyError(`Checkpoint not found or unreadable: ${id}`);
|
|
109
|
+
}
|
|
110
|
+
let meta;
|
|
111
|
+
let manifest;
|
|
112
|
+
try {
|
|
113
|
+
meta = JSON.parse(metaRaw);
|
|
114
|
+
manifest = JSON.parse(manifestRaw);
|
|
115
|
+
}
|
|
116
|
+
catch {
|
|
117
|
+
throw new Error(`Corrupted checkpoint JSON: ${id}`);
|
|
118
|
+
}
|
|
119
|
+
if (!meta?.id || !manifest?.entries || !manifest?.fingerprint) {
|
|
120
|
+
throw new Error(`Corrupted checkpoint structure: ${id}`);
|
|
121
|
+
}
|
|
122
|
+
if (meta.id !== id) {
|
|
123
|
+
throw new Error(`Checkpoint id mismatch: meta=${meta.id} dir=${id}`);
|
|
124
|
+
}
|
|
125
|
+
return { meta, manifest, directory: checkpointDir };
|
|
126
|
+
}
|
|
127
|
+
export async function listCheckpoints(projectRoot = getProjectRoot()) {
|
|
128
|
+
const dir = getCheckpointsDir(projectRoot);
|
|
129
|
+
try {
|
|
130
|
+
const names = await readdir(dir);
|
|
131
|
+
return names.filter((n) => n.startsWith("cp-")).sort();
|
|
132
|
+
}
|
|
133
|
+
catch {
|
|
134
|
+
return [];
|
|
135
|
+
}
|
|
136
|
+
}
|
|
137
|
+
export async function deleteAllCheckpoints(projectRoot = getProjectRoot()) {
|
|
138
|
+
await rm(getCheckpointsDir(projectRoot), { recursive: true, force: true });
|
|
139
|
+
}
|
|
140
|
+
//# sourceMappingURL=checkpoint.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../src/checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,QAAQ,EACR,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,SAAS,eAAe;IACtB,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAa;IACtD,MAAM,GAAG,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7C,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpD,MAAM,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAElD,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtE,MAAM,aAAa,GAAG,IAAI,KAAK,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;IAE7C,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;YAAE,SAAS;QAC3B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,gBAAgB,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,8CAA8C;QAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAC3D,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;IAEvC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC3E,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;IACrF,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAEjF,MAAM,IAAI,GAAmB;QAC3B,EAAE;QACF,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,SAAS;QACT,cAAc;QACd,YAAY;QACZ,SAAS,EAAE;YACT,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,OAAO;YACrB,KAAK,EAAE,UAAU,CAAC,SAAS,EAAE;SAC9B;KACF,CAAC;IAEF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;IAE7D,+CAA+C;IAC/C,MAAM,KAAK,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,EAAE;QACxE,EAAE;QACF,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,eAAkC,QAAQ,EAC1C,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,cAAc,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAEtD,IAAI,EAAE,GAAG,YAAY,CAAC;IACtB,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;QAC5D,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CACvB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QACjD,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,2CAA2C;IAC3C,IACE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EACjB,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,0BAA0B,YAAY,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,OAAe,CAAC;IACpB,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,WAAW,GAAG,MAAM,QAAQ,CAC1B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,EACzC,MAAM,CACP,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,IAAoB,CAAC;IACzB,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;QAC7C,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAa,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC"}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
/** CLI formatting helpers for V5 product surface. */
|
|
2
|
+
import type { PolicyRule } from "../permission/types.js";
|
|
3
|
+
export declare function cliStatus(projectRoot?: string): Promise<string>;
|
|
4
|
+
export declare function cliTransactions(projectRoot?: string, limit?: number): Promise<string>;
|
|
5
|
+
export declare function cliTransaction(id: string, projectRoot?: string): Promise<string>;
|
|
6
|
+
export declare function cliUndo(id: string, projectRoot?: string): Promise<{
|
|
7
|
+
text: string;
|
|
8
|
+
exitCode: number;
|
|
9
|
+
}>;
|
|
10
|
+
export declare function cliApprovals(projectRoot?: string): Promise<string>;
|
|
11
|
+
export declare function cliApprove(id: string, projectRoot?: string): Promise<string>;
|
|
12
|
+
export declare function cliDeny(id: string, projectRoot?: string): Promise<string>;
|
|
13
|
+
export declare function cliPolicy(projectRoot?: string): Promise<string>;
|
|
14
|
+
export declare function cliPolicyInit(projectRoot?: string): Promise<string>;
|
|
15
|
+
export declare function cliPolicySetRule(rule: PolicyRule, projectRoot?: string): Promise<string>;
|
|
@@ -0,0 +1,110 @@
|
|
|
1
|
+
/** CLI formatting helpers for V5 product surface. */
|
|
2
|
+
import { listPendingApprovals, formatPendingApproval } from "../approval/store.js";
|
|
3
|
+
import { formatTransaction, formatTransactionList, ledgerStatusSummary, listTransactions, getTransaction, } from "../ledger/query.js";
|
|
4
|
+
import { approvePending, denyPending, undoTransaction, TransactionEngineError, } from "../core/engine.js";
|
|
5
|
+
import { loadPolicy, savePolicy, defaultPolicyDocument, } from "../permission/engine.js";
|
|
6
|
+
import { resolveEntitlementProvider, setEntitlementProvider, } from "../entitlement/provider.js";
|
|
7
|
+
import { getProjectRoot } from "../paths.js";
|
|
8
|
+
export async function cliStatus(projectRoot = getProjectRoot()) {
|
|
9
|
+
const provider = await resolveEntitlementProvider();
|
|
10
|
+
setEntitlementProvider(provider);
|
|
11
|
+
const entitlement = await provider.check();
|
|
12
|
+
const body = await ledgerStatusSummary(projectRoot);
|
|
13
|
+
return [
|
|
14
|
+
body,
|
|
15
|
+
"",
|
|
16
|
+
`Entitlement ${entitlement.label}`,
|
|
17
|
+
`Provider ${entitlement.provider}`,
|
|
18
|
+
].join("\n");
|
|
19
|
+
}
|
|
20
|
+
export async function cliTransactions(projectRoot = getProjectRoot(), limit) {
|
|
21
|
+
const txns = await listTransactions(projectRoot, { limit });
|
|
22
|
+
return formatTransactionList(txns);
|
|
23
|
+
}
|
|
24
|
+
export async function cliTransaction(id, projectRoot = getProjectRoot()) {
|
|
25
|
+
const txn = await getTransaction(id, projectRoot);
|
|
26
|
+
return formatTransaction(txn);
|
|
27
|
+
}
|
|
28
|
+
export async function cliUndo(id, projectRoot = getProjectRoot()) {
|
|
29
|
+
const result = await undoTransaction(id, projectRoot);
|
|
30
|
+
if (result.conflict) {
|
|
31
|
+
return { text: result.message, exitCode: 3 };
|
|
32
|
+
}
|
|
33
|
+
if (!result.ok) {
|
|
34
|
+
return { text: result.message, exitCode: 1 };
|
|
35
|
+
}
|
|
36
|
+
return {
|
|
37
|
+
text: `${result.message}\nStatus: ${result.transaction.status}`,
|
|
38
|
+
exitCode: 0,
|
|
39
|
+
};
|
|
40
|
+
}
|
|
41
|
+
export async function cliApprovals(projectRoot = getProjectRoot()) {
|
|
42
|
+
const pending = await listPendingApprovals(projectRoot);
|
|
43
|
+
if (pending.length === 0) {
|
|
44
|
+
return "REWIND APPROVALS\n\n(none pending)";
|
|
45
|
+
}
|
|
46
|
+
const parts = ["REWIND APPROVALS", ""];
|
|
47
|
+
for (const p of pending) {
|
|
48
|
+
parts.push(formatPendingApproval(p));
|
|
49
|
+
parts.push("");
|
|
50
|
+
}
|
|
51
|
+
parts.push(`Total pending: ${pending.length}`);
|
|
52
|
+
return parts.join("\n");
|
|
53
|
+
}
|
|
54
|
+
export async function cliApprove(id, projectRoot = getProjectRoot()) {
|
|
55
|
+
try {
|
|
56
|
+
const txn = await approvePending(id, projectRoot);
|
|
57
|
+
return formatTransaction(txn);
|
|
58
|
+
}
|
|
59
|
+
catch (err) {
|
|
60
|
+
if (err instanceof TransactionEngineError) {
|
|
61
|
+
throw err;
|
|
62
|
+
}
|
|
63
|
+
throw err;
|
|
64
|
+
}
|
|
65
|
+
}
|
|
66
|
+
export async function cliDeny(id, projectRoot = getProjectRoot()) {
|
|
67
|
+
const txn = await denyPending(id, projectRoot);
|
|
68
|
+
return formatTransaction(txn);
|
|
69
|
+
}
|
|
70
|
+
export async function cliPolicy(projectRoot = getProjectRoot()) {
|
|
71
|
+
const doc = await loadPolicy(projectRoot);
|
|
72
|
+
const lines = [
|
|
73
|
+
"REWIND POLICY",
|
|
74
|
+
"",
|
|
75
|
+
`Default ${doc.defaultEffect}`,
|
|
76
|
+
`Updated ${doc.updatedAt}`,
|
|
77
|
+
`Rules ${doc.rules.length}`,
|
|
78
|
+
"",
|
|
79
|
+
];
|
|
80
|
+
for (const r of doc.rules) {
|
|
81
|
+
lines.push(`${r.enabled ? "ON " : "off"} prio=${r.priority} ${r.effect.padEnd(5)} ${r.id}`);
|
|
82
|
+
lines.push(` ${r.reason}`);
|
|
83
|
+
const filters = [
|
|
84
|
+
r.adapter ? `adapter=${r.adapter}` : null,
|
|
85
|
+
r.operation ? `op=${r.operation}` : null,
|
|
86
|
+
r.resourcePattern ? `resource=${r.resourcePattern}` : null,
|
|
87
|
+
r.actorClient ? `actor=${r.actorClient}` : null,
|
|
88
|
+
].filter(Boolean);
|
|
89
|
+
if (filters.length)
|
|
90
|
+
lines.push(` ${filters.join(" ")}`);
|
|
91
|
+
lines.push("");
|
|
92
|
+
}
|
|
93
|
+
return lines.join("\n");
|
|
94
|
+
}
|
|
95
|
+
export async function cliPolicyInit(projectRoot = getProjectRoot()) {
|
|
96
|
+
const doc = defaultPolicyDocument();
|
|
97
|
+
await savePolicy(doc, projectRoot);
|
|
98
|
+
return `Wrote default policy to .rewind/policy/permissions.json`;
|
|
99
|
+
}
|
|
100
|
+
export async function cliPolicySetRule(rule, projectRoot = getProjectRoot()) {
|
|
101
|
+
const doc = await loadPolicy(projectRoot);
|
|
102
|
+
const idx = doc.rules.findIndex((r) => r.id === rule.id);
|
|
103
|
+
if (idx >= 0)
|
|
104
|
+
doc.rules[idx] = rule;
|
|
105
|
+
else
|
|
106
|
+
doc.rules.push(rule);
|
|
107
|
+
await savePolicy(doc, projectRoot);
|
|
108
|
+
return `Rule ${rule.id} → ${rule.effect} (enabled=${rule.enabled})`;
|
|
109
|
+
}
|
|
110
|
+
//# sourceMappingURL=v5.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"v5.js","sourceRoot":"","sources":["../../../src/cli/v5.ts"],"names":[],"mappings":"AAAA,qDAAqD;AAErD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,WAAW,EACX,eAAe,EACf,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,UAAU,EACV,UAAU,EACV,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,WAAW,GAAG,cAAc,EAAE;IAC5D,MAAM,QAAQ,GAAG,MAAM,0BAA0B,EAAE,CAAC;IACpD,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACpD,OAAO;QACL,IAAI;QACJ,EAAE;QACF,kBAAkB,WAAW,CAAC,KAAK,EAAE;QACrC,kBAAkB,WAAW,CAAC,QAAQ,EAAE;KACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAW,GAAG,cAAc,EAAE,EAC9B,KAAc;IAEd,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAClD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,EAAU,EACV,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE;QAC/D,QAAQ,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAU,EACV,WAAW,GAAG,cAAc,EAAE;IAE9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAClD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;YAC1C,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,EAAU,EACV,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAC/C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG;QACZ,eAAe;QACf,EAAE;QACF,kBAAkB,GAAG,CAAC,aAAa,EAAE;QACrC,kBAAkB,GAAG,CAAC,SAAS,EAAE;QACjC,kBAAkB,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE;QACpC,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CACnF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG;YACd,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;YACzC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI;YACxC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI;YAC1D,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SAChD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,OAAO,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAC;IACpC,MAAM,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACnC,OAAO,yDAAyD,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAgB,EAChB,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,IAAI,GAAG,IAAI,CAAC;QAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;;QAC/B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACnC,OAAO,QAAQ,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,MAAM,aAAa,IAAI,CAAC,OAAO,GAAG,CAAC;AACtE,CAAC"}
|