@rpamis/comet 0.3.9 → 0.4.0-beta.10

package/dist/domains/comet-native/native-review-identity.js

@@ -0,0 +1,209 @@
+import { createHash, createPrivateKey, createPublicKey, generateKeyPairSync, sign as cryptoSign, verify as cryptoVerify, } from 'node:crypto';
+export const NATIVE_REVIEW_IDENTITY_SCHEMA = 'comet.native.review-identity.v1';
+export const NATIVE_REVIEW_KEYPAIR_SCHEMA = 'comet.native.review-keypair.v1';
+export const NATIVE_REVIEW_SIGNATURE_SCHEMA = 'comet.native.review-signature.v1';
+const ALGORITHM = 'ed25519';
+const HASH_PATTERN = /^[a-f0-9]{64}$/u;
+const MAX_PUBLIC_KEY_TEXT = 512;
+const MAX_PRIVATE_KEY_TEXT = 16_384;
+const MAX_SIGNATURE_TEXT = 256;
+const SIGNATURE_CONTEXT = Buffer.from('comet.native.review-payload.v1\0', 'utf8');
+/**
+ * Native can verify owner-only file modes on POSIX. Windows ACL inheritance is not equivalent to
+ * mode 0600, so the built-in generator must not persist private keys there.
+ */
+export function nativeReviewPrivateKeyFilePersistenceSupported(platform = process.platform) {
+    return platform !== 'win32';
+}
+function record(value, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+}
+function exactKeys(value, expected, label) {
+    const actual = Object.keys(value).sort();
+    const canonical = [...expected].sort();
+    if (JSON.stringify(actual) !== JSON.stringify(canonical)) {
+        throw new Error(`${label} fields are invalid`);
+    }
+}
+function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function payloadHash(value, label = 'Native review payloadHash') {
+    if (typeof value !== 'string' || !HASH_PATTERN.test(value)) {
+        throw new Error(`${label} must be a lowercase SHA-256 hash`);
+    }
+    return value;
+}
+function canonicalBase64(value, label, maxCharacters, expectedBytes) {
+    if (typeof value !== 'string' ||
+        value.length === 0 ||
+        value.length > maxCharacters ||
+        value.length % 4 !== 0) {
+        throw new Error(`${label} is invalid`);
+    }
+    const bytes = Buffer.from(value, 'base64');
+    if (bytes.length === 0 ||
+        bytes.toString('base64') !== value ||
+        (expectedBytes !== undefined && bytes.length !== expectedBytes)) {
+        throw new Error(`${label} must use canonical base64`);
+    }
+    return bytes;
+}
+function publicKeyMaterial(value) {
+    const supplied = canonicalBase64(value, 'Native review public key', MAX_PUBLIC_KEY_TEXT);
+    let key;
+    try {
+        key = createPublicKey({ key: supplied, format: 'der', type: 'spki' });
+    }
+    catch (error) {
+        throw new Error('Native review public key is invalid', { cause: error });
+    }
+    if (key.type !== 'public' || key.asymmetricKeyType !== 'ed25519') {
+        throw new Error('Native review public key must be Ed25519');
+    }
+    const der = key.export({ format: 'der', type: 'spki' });
+    if (!Buffer.isBuffer(der) || !supplied.equals(der)) {
+        throw new Error('Native review public key must use canonical SPKI DER');
+    }
+    return { key, der, text: der.toString('base64') };
+}
+function privateKeyMaterial(value) {
+    const supplied = canonicalBase64(value, 'Native review private key', MAX_PRIVATE_KEY_TEXT);
+    let key;
+    try {
+        key = createPrivateKey({ key: supplied, format: 'der', type: 'pkcs8' });
+    }
+    catch (error) {
+        throw new Error('Native review private key is invalid', { cause: error });
+    }
+    if (key.type !== 'private' || key.asymmetricKeyType !== 'ed25519') {
+        throw new Error('Native review private key must be Ed25519');
+    }
+    const der = key.export({ format: 'der', type: 'pkcs8' });
+    if (!Buffer.isBuffer(der) || !supplied.equals(der)) {
+        throw new Error('Native review private key must use canonical PKCS8 DER');
+    }
+    return { key, der };
+}
+function signaturePayload(hash) {
+    return Buffer.concat([SIGNATURE_CONTEXT, Buffer.from(hash, 'hex')]);
+}
+export function parseNativeReviewSignature(value) {
+    const root = record(value, 'Native review signature');
+    exactKeys(root, ['schema', 'algorithm', 'keyId', 'payloadHash', 'signature'], 'Native review signature');
+    if (root.schema !== NATIVE_REVIEW_SIGNATURE_SCHEMA ||
+        root.algorithm !== ALGORITHM ||
+        typeof root.keyId !== 'string' ||
+        !HASH_PATTERN.test(root.keyId)) {
+        throw new Error('Native review signature identity is invalid');
+    }
+    const hash = payloadHash(root.payloadHash);
+    const signature = canonicalBase64(root.signature, 'Native review signature', MAX_SIGNATURE_TEXT, 64).toString('base64');
+    return {
+        schema: NATIVE_REVIEW_SIGNATURE_SCHEMA,
+        algorithm: ALGORITHM,
+        keyId: root.keyId,
+        payloadHash: hash,
+        signature,
+    };
+}
+/** Derive the stable public identity from a canonical base64-encoded SPKI public key. */
+export function nativeReviewKeyIdFromPublicKey(publicKey) {
+    return sha256(publicKeyMaterial(publicKey).der);
+}
+/** Parse an identity and recompute its content-derived key ID. */
+export function parseNativeReviewIdentity(value) {
+    const root = record(value, 'Native review identity');
+    exactKeys(root, ['schema', 'algorithm', 'keyId', 'publicKey'], 'Native review identity');
+    if (root.schema !== NATIVE_REVIEW_IDENTITY_SCHEMA ||
+        root.algorithm !== ALGORITHM ||
+        typeof root.keyId !== 'string' ||
+        !HASH_PATTERN.test(root.keyId)) {
+        throw new Error('Native review identity keyId is invalid');
+    }
+    const publicKey = publicKeyMaterial(root.publicKey);
+    const keyId = sha256(publicKey.der);
+    if (root.keyId !== keyId) {
+        throw new Error('Native review identity keyId does not match its public key');
+    }
+    return {
+        schema: NATIVE_REVIEW_IDENTITY_SCHEMA,
+        algorithm: ALGORITHM,
+        keyId,
+        publicKey: publicKey.text,
+    };
+}
+/** Generate portable canonical key material without choosing where it is persisted. */
+export function generateNativeReviewKeyPair() {
+    const generated = generateKeyPairSync('ed25519');
+    const publicKey = generated.publicKey.export({ format: 'der', type: 'spki' });
+    const privateKey = generated.privateKey.export({ format: 'der', type: 'pkcs8' });
+    if (!Buffer.isBuffer(publicKey) || !Buffer.isBuffer(privateKey)) {
+        throw new Error('Native review key generation returned unsupported key material');
+    }
+    const identity = {
+        schema: NATIVE_REVIEW_IDENTITY_SCHEMA,
+        algorithm: ALGORITHM,
+        keyId: sha256(publicKey),
+        publicKey: publicKey.toString('base64'),
+    };
+    return {
+        schema: NATIVE_REVIEW_KEYPAIR_SCHEMA,
+        identity,
+        privateKey: privateKey.toString('base64'),
+    };
+}
+/** Derive the portable public identity for private material held by an external secret store. */
+export function nativeReviewIdentityFromPrivateKey(privateKeyValue) {
+    const privateKey = privateKeyMaterial(privateKeyValue);
+    const publicKey = createPublicKey(privateKey.key).export({ format: 'der', type: 'spki' });
+    if (!Buffer.isBuffer(publicKey)) {
+        throw new Error('Native review private key returned unsupported public key material');
+    }
+    return {
+        schema: NATIVE_REVIEW_IDENTITY_SCHEMA,
+        algorithm: ALGORITHM,
+        keyId: sha256(publicKey),
+        publicKey: publicKey.toString('base64'),
+    };
+}
+/** Sign a domain-separated payload hash after proving the private key matches the identity. */
+export function signNativeReviewPayloadHash(options) {
+    const identity = parseNativeReviewIdentity(options.identity);
+    const hash = payloadHash(options.payloadHash);
+    const privateKey = privateKeyMaterial(options.privateKey);
+    const derivedPublicKey = createPublicKey(privateKey.key).export({ format: 'der', type: 'spki' });
+    if (!Buffer.isBuffer(derivedPublicKey) ||
+        !derivedPublicKey.equals(Buffer.from(identity.publicKey, 'base64'))) {
+        throw new Error('Native review private key does not match the public identity');
+    }
+    return {
+        schema: NATIVE_REVIEW_SIGNATURE_SCHEMA,
+        algorithm: ALGORITHM,
+        keyId: identity.keyId,
+        payloadHash: hash,
+        signature: cryptoSign(null, signaturePayload(hash), privateKey.key).toString('base64'),
+    };
+}
+/** Verify a proof and return its canonical plain-data representation. */
+export function verifyNativeReviewPayloadHash(options) {
+    const identity = parseNativeReviewIdentity(options.identity);
+    const hash = payloadHash(options.payloadHash);
+    const proof = parseNativeReviewSignature(options.proof);
+    if (proof.payloadHash !== hash) {
+        throw new Error('Native review signature payloadHash does not match the expected payloadHash');
+    }
+    if (proof.keyId !== identity.keyId) {
+        throw new Error('Native review signature keyId does not match the public identity');
+    }
+    const signature = canonicalBase64(proof.signature, 'Native review signature', MAX_SIGNATURE_TEXT, 64);
+    const publicKey = publicKeyMaterial(identity.publicKey);
+    if (!cryptoVerify(null, signaturePayload(hash), publicKey.key, signature)) {
+        throw new Error('Native review signature is invalid');
+    }
+    return proof;
+}
+//# sourceMappingURL=native-review-identity.js.map

package/dist/domains/comet-native/native-review-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-review-identity.js","sourceRoot":"","sources":["../../../domains/comet-native/native-review-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,IAAI,IAAI,UAAU,EAClB,MAAM,IAAI,YAAY,GAEvB,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,6BAA6B,GAAG,iCAA0C,CAAC;AACxF,MAAM,CAAC,MAAM,4BAA4B,GAAG,gCAAyC,CAAC;AACtF,MAAM,CAAC,MAAM,8BAA8B,GAAG,kCAA2C,CAAC;AAE1F,MAAM,SAAS,GAAG,SAAkB,CAAC;AACrC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;AAuBlF;;;GAGG;AACH,MAAM,UAAU,8CAA8C,CAC5D,WAA4B,OAAO,CAAC,QAAQ;IAE5C,OAAO,QAAQ,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAChB,KAA8B,EAC9B,QAA2B,EAC3B,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAK,GAAG,2BAA2B;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,KAAa,EACb,aAAqB,EACrB,aAAsB;IAEtB,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,aAAa;QAC5B,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EACtB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3C,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK;QAClC,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,EAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;IACzF,IAAI,GAAc,CAAC;IACnB,IAAI,CAAC;QACH,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;IAC3F,IAAI,GAAc,CAAC;IACnB,IAAI,CAAC;QACH,GAAG,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IACtD,SAAS,CACP,IAAI,EACJ,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,EAC5D,yBAAyB,CAC1B,CAAC;IACF,IACE,IAAI,CAAC,MAAM,KAAK,8BAA8B;QAC9C,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC9B,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,eAAe,CAC/B,IAAI,CAAC,SAAS,EACd,yBAAyB,EACzB,kBAAkB,EAClB,EAAE,CACH,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,OAAO;QACL,MAAM,EAAE,8BAA8B;QACtC,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI;QACjB,SAAS;KACV,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,8BAA8B,CAAC,SAAiB;IAC9D,OAAO,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACrD,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACzF,IACE,IAAI,CAAC,MAAM,KAAK,6BAA6B;QAC7C,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC9B,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO;QACL,MAAM,EAAE,6BAA6B;QACrC,SAAS,EAAE,SAAS;QACpB,KAAK;QACL,SAAS,EAAE,SAAS,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,2BAA2B;IACzC,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,QAAQ,GAAyB;QACrC,MAAM,EAAE,6BAA6B;QACrC,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC;QACxB,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACxC,CAAC;IACF,OAAO;QACL,MAAM,EAAE,4BAA4B;QACpC,QAAQ;QACR,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,kCAAkC,CAAC,eAAuB;IACxE,MAAM,UAAU,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO;QACL,MAAM,EAAE,6BAA6B;QACrC,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC;QACxB,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,2BAA2B,CAAC,OAI3C;IACC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjG,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACL,MAAM,EAAE,8BAA8B;QACtC,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACvF,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,6BAA6B,CAAC,OAI7C;IACC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAC/B,KAAK,CAAC,SAAS,EACf,yBAAyB,EACzB,kBAAkB,EAClB,EAAE,CACH,CAAC;IACF,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/domains/comet-native/native-review-signer.d.ts

@@ -0,0 +1,24 @@
+import { type NativeReviewIdentity, type NativeReviewSignature } from './native-review-identity.js';
+import { type NativeVerificationReceipt } from './native-verification-receipt.js';
+import type { NativeImplementationPreparation, NativeIndependentReviewApproval } from './native-verification-receipt-runtime.js';
+export declare function parseNativeIndependentReviewApproval(value: unknown): NativeIndependentReviewApproval;
+/**
+ * Project-agnostic signer boundary. The caller supplies a complete approval
+ * document, never an arbitrary payload hash. This module performs no file,
+ * workspace, Git, or process access.
+ */
+export declare function signNativeIndependentReviewApproval(options: {
+    approval: unknown;
+    identity: NativeReviewIdentity;
+    privateKey: string;
+}): NativeReviewSignature;
+export declare function parseNativeImplementationPreparation(value: unknown): NativeImplementationPreparation;
+export declare function signNativeImplementationPreparation(options: {
+    preparation: unknown;
+    identity: NativeReviewIdentity;
+    privateKey: string;
+}): NativeReviewSignature;
+export type NativeUnsignedIndependentReviewReceipt = Omit<Extract<NativeVerificationReceipt, {
+    kind: 'independent-review';
+}>, 'schema' | 'receiptHash'>;
+//# sourceMappingURL=native-review-signer.d.ts.map

package/dist/domains/comet-native/native-review-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-review-signer.d.ts","sourceRoot":"","sources":["../../../domains/comet-native/native-review-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EACV,+BAA+B,EAC/B,+BAA+B,EAChC,MAAM,0CAA0C,CAAC;AAwBlD,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,GACb,+BAA+B,CAiDjC;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CAAC,OAAO,EAAE;IAC3D,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,qBAAqB,CAexB;AAED,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,GACb,+BAA+B,CAwCjC;AAED,wBAAgB,mCAAmC,CAAC,OAAO,EAAE;IAC3D,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,qBAAqB,CAexB;AAED,MAAM,MAAM,sCAAsC,GAAG,IAAI,CACvD,OAAO,CAAC,yBAAyB,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,EAClE,QAAQ,GAAG,aAAa,CACzB,CAAC"}

package/dist/domains/comet-native/native-review-signer.js

@@ -0,0 +1,125 @@
+import { parseNativeReviewIdentity, signNativeReviewPayloadHash, } from './native-review-identity.js';
+import { nativeImplementationAttestationHash, nativeIndependentReviewAttestationHash, } from './native-verification-receipt.js';
+const HASH_PATTERN = /^[a-f0-9]{64}$/u;
+function record(value, label) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+}
+function exactKeys(value, keys, label) {
+    if (Object.keys(value).sort().join('\0') !== [...keys].sort().join('\0')) {
+        throw new Error(`${label} has unexpected fields`);
+    }
+}
+function hash(value, label) {
+    if (typeof value !== 'string' || !HASH_PATTERN.test(value)) {
+        throw new Error(`${label} is invalid`);
+    }
+    return value;
+}
+export function parseNativeIndependentReviewApproval(value) {
+    const root = record(value, 'Native review approval');
+    exactKeys(root, ['schema', 'preparationHash', 'receipt', 'payloadHash'], 'Native review approval');
+    if (root.schema !== 'comet.native.review-approval.v1') {
+        throw new Error('Native review approval schema is invalid');
+    }
+    const receipt = record(root.receipt, 'Native review approval receipt');
+    exactKeys(receipt, ['kind', 'role', 'status', 'bindings', 'acceptanceIds', 'actor', 'issuedAt', 'evidence'], 'Native review approval receipt');
+    if (receipt.kind !== 'independent-review' ||
+        receipt.role !== 'acceptance-evidence' ||
+        (receipt.status !== 'passed' && receipt.status !== 'blocked') ||
+        !Array.isArray(receipt.acceptanceIds) ||
+        receipt.acceptanceIds.some((entry) => typeof entry !== 'string') ||
+        typeof receipt.actor !== 'string' ||
+        typeof receipt.issuedAt !== 'string') {
+        throw new Error('Native review approval receipt is invalid');
+    }
+    const evidence = record(receipt.evidence, 'Native review approval receipt evidence');
+    const reviewerIdentity = parseNativeReviewIdentity(evidence.reviewerIdentity);
+    if (receipt.actor !== `review-key:${reviewerIdentity.keyId}`) {
+        throw new Error('Native review approval actor/reviewer identity mismatch');
+    }
+    const approval = {
+        schema: 'comet.native.review-approval.v1',
+        preparationHash: hash(root.preparationHash, 'Native review approval preparation hash'),
+        receipt: receipt,
+        payloadHash: hash(root.payloadHash, 'Native review approval payload hash'),
+    };
+    const expectedPayloadHash = nativeIndependentReviewAttestationHash({
+        bindings: approval.receipt.bindings,
+        status: approval.receipt.status,
+        acceptanceIds: approval.receipt.acceptanceIds,
+        issuedAt: approval.receipt.issuedAt,
+        evidence: approval.receipt.evidence,
+    });
+    if (approval.payloadHash !== expectedPayloadHash) {
+        throw new Error('Native review approval payload hash mismatch');
+    }
+    return approval;
+}
+/**
+ * Project-agnostic signer boundary. The caller supplies a complete approval
+ * document, never an arbitrary payload hash. This module performs no file,
+ * workspace, Git, or process access.
+ */
+export function signNativeIndependentReviewApproval(options) {
+    const approval = parseNativeIndependentReviewApproval(options.approval);
+    const identity = parseNativeReviewIdentity(options.identity);
+    const reviewerIdentity = approval.receipt.evidence.reviewerIdentity;
+    if (reviewerIdentity.keyId !== identity.keyId ||
+        reviewerIdentity.publicKey !== identity.publicKey) {
+        throw new Error('Native review signer identity does not match the approval reviewer');
+    }
+    return signNativeReviewPayloadHash({
+        identity,
+        privateKey: options.privateKey,
+        payloadHash: approval.payloadHash,
+    });
+}
+export function parseNativeImplementationPreparation(value) {
+    const root = record(value, 'Native implementation preparation');
+    exactKeys(root, ['schema', 'receipt', 'payloadHash', 'preparationHash'], 'Native implementation preparation');
+    if (root.schema !== 'comet.native.implementation-preparation.v1') {
+        throw new Error('Native implementation preparation schema is invalid');
+    }
+    const receipt = record(root.receipt, 'Native implementation preparation receipt');
+    exactKeys(receipt, ['kind', 'role', 'status', 'bindings', 'acceptanceIds', 'actor', 'issuedAt', 'evidence'], 'Native implementation preparation receipt');
+    if (receipt.kind !== 'implementation-attestation' ||
+        receipt.role !== 'acceptance-evidence' ||
+        receipt.status !== 'passed') {
+        throw new Error('Native implementation preparation receipt is invalid');
+    }
+    const preparation = {
+        schema: 'comet.native.implementation-preparation.v1',
+        receipt: receipt,
+        payloadHash: hash(root.payloadHash, 'Native implementation preparation payload hash'),
+        preparationHash: hash(root.preparationHash, 'Native implementation preparation hash'),
+    };
+    const expectedPayloadHash = nativeImplementationAttestationHash({
+        bindings: preparation.receipt.bindings,
+        status: preparation.receipt.status,
+        acceptanceIds: preparation.receipt.acceptanceIds,
+        issuedAt: preparation.receipt.issuedAt,
+        evidence: preparation.receipt.evidence,
+    });
+    if (preparation.payloadHash !== expectedPayloadHash) {
+        throw new Error('Native implementation preparation payload hash mismatch');
+    }
+    return preparation;
+}
+export function signNativeImplementationPreparation(options) {
+    const preparation = parseNativeImplementationPreparation(options.preparation);
+    const identity = parseNativeReviewIdentity(options.identity);
+    const implementationIdentity = preparation.receipt.evidence.implementationIdentity;
+    if (implementationIdentity.keyId !== identity.keyId ||
+        implementationIdentity.publicKey !== identity.publicKey) {
+        throw new Error('Native implementation signer identity does not match the preparation');
+    }
+    return signNativeReviewPayloadHash({
+        identity,
+        privateKey: options.privateKey,
+        payloadHash: preparation.payloadHash,
+    });
+}
+//# sourceMappingURL=native-review-signer.js.map

package/dist/domains/comet-native/native-review-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-review-signer.js","sourceRoot":"","sources":["../../../domains/comet-native/native-review-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,2BAA2B,GAG5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,mCAAmC,EACnC,sCAAsC,GAEvC,MAAM,kCAAkC,CAAC;AAM1C,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAuB,EAAE,KAAa;IACvF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,KAAc;IAEd,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACrD,SAAS,CACP,IAAI,EACJ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,CAAC,EACvD,wBAAwB,CACzB,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,iCAAiC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;IACvE,SAAS,CACP,OAAO,EACP,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,EACxF,gCAAgC,CACjC,CAAC;IACF,IACE,OAAO,CAAC,IAAI,KAAK,oBAAoB;QACrC,OAAO,CAAC,IAAI,KAAK,qBAAqB;QACtC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;QAC7D,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACrC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAChE,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACjC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,yCAAyC,CAAC,CAAC;IACrF,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,iCAA0C;QAClD,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,yCAAyC,CAAC;QACtF,OAAO,EAAE,OAAgE;QACzE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,qCAAqC,CAAC;KAC3E,CAAC;IACF,MAAM,mBAAmB,GAAG,sCAAsC,CAAC;QACjE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ;QACnC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;QAC/B,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa;QAC7C,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ;QACnC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ;KACpC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CAAC,OAInD;IACC,MAAM,QAAQ,GAAG,oCAAoC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACpE,IACE,gBAAgB,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QACzC,gBAAgB,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EACjD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,2BAA2B,CAAC;QACjC,QAAQ;QACR,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,KAAc;IAEd,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;IAChE,SAAS,CACP,IAAI,EACJ,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,CAAC,EACvD,mCAAmC,CACpC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,4CAA4C,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,2CAA2C,CAAC,CAAC;IAClF,SAAS,CACP,OAAO,EACP,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,EACxF,2CAA2C,CAC5C,CAAC;IACF,IACE,OAAO,CAAC,IAAI,KAAK,4BAA4B;QAC7C,OAAO,CAAC,IAAI,KAAK,qBAAqB;QACtC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,WAAW,GAAG;QAClB,MAAM,EAAE,4CAAqD;QAC7D,OAAO,EAAE,OAAgE;QACzE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gDAAgD,CAAC;QACrF,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,wCAAwC,CAAC;KACtF,CAAC;IACF,MAAM,mBAAmB,GAAG,mCAAmC,CAAC;QAC9D,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ;QACtC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM;QAClC,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,aAAa;QAChD,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ;QACtC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ;KACvC,CAAC,CAAC;IACH,IAAI,WAAW,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,OAInD;IACC,MAAM,WAAW,GAAG,oCAAoC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,sBAAsB,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACnF,IACE,sBAAsB,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAC/C,sBAAsB,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EACvD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,2BAA2B,CAAC;QACjC,QAAQ;QACR,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,WAAW,CAAC,WAAW;KACrC,CAAC,CAAC;AACL,CAAC"}

package/dist/domains/comet-native/native-review-trust.d.ts

@@ -0,0 +1,35 @@
+import { type NativeReviewIdentity, type NativeReviewSignature } from './native-review-identity.js';
+import type { NativeProjectPaths } from './native-types.js';
+import type { NativeImplementationScopeBundle } from './native-verification-scope.js';
+export declare const NATIVE_REVIEW_TRUST_POLICY_SCHEMA: "comet.native.review-trust-policy.v2";
+export { NATIVE_REVIEW_TRUST_POLICY_REF } from './native-review-contract.js';
+export interface NativeReviewTrustPolicy {
+    schema: typeof NATIVE_REVIEW_TRUST_POLICY_SCHEMA;
+    controllerKeyId: string;
+    implementationKeyId: string;
+    trustedReviewers: NativeReviewIdentity[];
+    trustedWaiverSigners: NativeReviewIdentity[];
+    policyHash: string;
+    controllerSignature: NativeReviewSignature;
+}
+export declare function buildNativeReviewTrustPolicy(input: {
+    controllerIdentity: NativeReviewIdentity;
+    controllerPrivateKey: string;
+    implementationKeyId: string;
+    trustedReviewers: readonly NativeReviewIdentity[];
+    trustedWaiverSigners: readonly NativeReviewIdentity[];
+}): NativeReviewTrustPolicy;
+export declare function parseNativeReviewTrustPolicy(value: unknown): NativeReviewTrustPolicy;
+export declare function verifyNativeReviewTrustPolicy(value: unknown, controllerIdentity: NativeReviewIdentity): NativeReviewTrustPolicy;
+/** Read the public trust policy before opening a signed-v2 change. */
+export declare function readNativeReviewTrustPolicy(paths: NativeProjectPaths): Promise<NativeReviewTrustPolicy>;
+/**
+ * Load the pre-trusted policy and prove that it existed unchanged in both the change-open
+ * baseline and the Build snapshot. Private key material is deliberately not part of this file.
+ */
+export declare function loadNativeReviewTrustPolicy(options: {
+    paths: NativeProjectPaths;
+    scope: NativeImplementationScopeBundle;
+}): Promise<NativeReviewTrustPolicy>;
+export declare function trustedNativeIdentity(policy: NativeReviewTrustPolicy, kind: 'reviewer' | 'waiver', keyId: string): NativeReviewIdentity;
+//# sourceMappingURL=native-review-trust.d.ts.map

package/dist/domains/comet-native/native-review-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-review-trust.d.ts","sourceRoot":"","sources":["../../../domains/comet-native/native-review-trust.ts"],"names":[],"mappings":"AAIA,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AAGtF,eAAO,MAAM,iCAAiC,EAAG,qCAA8C,CAAC;AAChG,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAK7E,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,iCAAiC,CAAC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,oBAAoB,EAAE,CAAC;IACzC,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,qBAAqB,CAAC;CAC5C;AAqCD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,oBAAoB,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACvD,GAAG,uBAAuB,CAsB1B;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAiEpF;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,EACd,kBAAkB,EAAE,oBAAoB,GACvC,uBAAuB,CAWzB;AAED,sEAAsE;AACtE,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAclC;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IACzD,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,+BAA+B,CAAC;CACxC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA8BnC;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,uBAAuB,EAC/B,IAAI,EAAE,UAAU,GAAG,QAAQ,EAC3B,KAAK,EAAE,MAAM,GACZ,oBAAoB,CAKtB"}

package/dist/domains/comet-native/native-review-trust.js

@@ -0,0 +1,176 @@
+import path from 'node:path';
+import { canonicalHash } from './native-canonical-hash.js';
+import { readNativeProtectedTextFile } from './native-protected-file.js';
+import { parseNativeReviewIdentity, parseNativeReviewSignature, signNativeReviewPayloadHash, verifyNativeReviewPayloadHash, } from './native-review-identity.js';
+import { readNativeControllerTrustProject } from './native-controller-trust.js';
+import { NATIVE_REVIEW_TRUST_POLICY_REF } from './native-review-contract.js';
+export const NATIVE_REVIEW_TRUST_POLICY_SCHEMA = 'comet.native.review-trust-policy.v2';
+export { NATIVE_REVIEW_TRUST_POLICY_REF } from './native-review-contract.js';
+const POLICY_HASH_TAG = NATIVE_REVIEW_TRUST_POLICY_SCHEMA;
+const MAX_POLICY_BYTES = 64 * 1024;
+const HASH_PATTERN = /^[a-f0-9]{64}$/u;
+function record(value, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+}
+function exactKeys(value, expected, label) {
+    const actual = Object.keys(value).sort();
+    const canonical = [...expected].sort();
+    if (JSON.stringify(actual) !== JSON.stringify(canonical)) {
+        throw new Error(`${label} fields are invalid`);
+    }
+}
+function identities(value, label) {
+    if (!Array.isArray(value) || value.length === 0 || value.length > 64) {
+        throw new Error(`${label} must be a bounded non-empty array`);
+    }
+    const parsed = value
+        .map(parseNativeReviewIdentity)
+        .sort((left, right) => left.keyId.localeCompare(right.keyId, 'en'));
+    if (new Set(parsed.map((identity) => identity.keyId)).size !== parsed.length ||
+        JSON.stringify(value) !== JSON.stringify(parsed)) {
+        throw new Error(`${label} must be sorted and unique`);
+    }
+    return parsed;
+}
+export function buildNativeReviewTrustPolicy(input) {
+    const content = {
+        schema: NATIVE_REVIEW_TRUST_POLICY_SCHEMA,
+        controllerKeyId: input.controllerIdentity.keyId,
+        implementationKeyId: input.implementationKeyId,
+        trustedReviewers: [...input.trustedReviewers].sort((left, right) => left.keyId.localeCompare(right.keyId, 'en')),
+        trustedWaiverSigners: [...input.trustedWaiverSigners].sort((left, right) => left.keyId.localeCompare(right.keyId, 'en')),
+    };
+    const policyHash = canonicalHash(POLICY_HASH_TAG, content);
+    return parseNativeReviewTrustPolicy({
+        ...content,
+        policyHash,
+        controllerSignature: signNativeReviewPayloadHash({
+            identity: input.controllerIdentity,
+            privateKey: input.controllerPrivateKey,
+            payloadHash: policyHash,
+        }),
+    });
+}
+export function parseNativeReviewTrustPolicy(value) {
+    const root = record(value, 'Native review trust policy');
+    exactKeys(root, [
+        'schema',
+        'controllerKeyId',
+        'implementationKeyId',
+        'trustedReviewers',
+        'trustedWaiverSigners',
+        'policyHash',
+        'controllerSignature',
+    ], 'Native review trust policy');
+    if (root.schema !== NATIVE_REVIEW_TRUST_POLICY_SCHEMA ||
+        typeof root.controllerKeyId !== 'string' ||
+        !HASH_PATTERN.test(root.controllerKeyId) ||
+        typeof root.implementationKeyId !== 'string' ||
+        !HASH_PATTERN.test(root.implementationKeyId) ||
+        typeof root.policyHash !== 'string' ||
+        !HASH_PATTERN.test(root.policyHash)) {
+        throw new Error('Native review trust policy identity or hash is invalid');
+    }
+    const trustedReviewers = identities(root.trustedReviewers, 'Native trusted reviewers');
+    const trustedWaiverSigners = identities(root.trustedWaiverSigners, 'Native trusted waiver signers');
+    if (trustedReviewers.some((identity) => identity.keyId === root.implementationKeyId) ||
+        trustedWaiverSigners.some((identity) => identity.keyId === root.implementationKeyId) ||
+        new Set([
+            root.controllerKeyId,
+            root.implementationKeyId,
+            ...trustedReviewers.map((identity) => identity.keyId),
+            ...trustedWaiverSigners.map((identity) => identity.keyId),
+        ]).size !==
+            2 + trustedReviewers.length + trustedWaiverSigners.length) {
+        throw new Error('Native controller, implementation, reviewer, and waiver signer identities must be globally distinct');
+    }
+    const content = {
+        schema: NATIVE_REVIEW_TRUST_POLICY_SCHEMA,
+        controllerKeyId: root.controllerKeyId,
+        implementationKeyId: root.implementationKeyId,
+        trustedReviewers,
+        trustedWaiverSigners,
+    };
+    const policyHash = canonicalHash(POLICY_HASH_TAG, content);
+    if (policyHash !== root.policyHash) {
+        throw new Error('Native review trust policy hash mismatch');
+    }
+    const controllerSignature = parseNativeReviewSignature(root.controllerSignature);
+    if (controllerSignature.keyId !== root.controllerKeyId ||
+        controllerSignature.payloadHash !== policyHash) {
+        throw new Error('Native review trust policy controller signature binding is invalid');
+    }
+    return { ...content, policyHash, controllerSignature };
+}
+export function verifyNativeReviewTrustPolicy(value, controllerIdentity) {
+    const policy = parseNativeReviewTrustPolicy(value);
+    if (policy.controllerKeyId !== controllerIdentity.keyId) {
+        throw new Error('Native review trust policy controller is not host-trusted');
+    }
+    verifyNativeReviewPayloadHash({
+        identity: controllerIdentity,
+        payloadHash: policy.policyHash,
+        proof: policy.controllerSignature,
+    });
+    return policy;
+}
+/** Read the public trust policy before opening a signed-v2 change. */
+export async function readNativeReviewTrustPolicy(paths) {
+    const file = await readNativeProtectedTextFile({
+        root: paths.projectRoot,
+        file: path.join(paths.projectRoot, ...NATIVE_REVIEW_TRUST_POLICY_REF.split('/')),
+        maxBytes: MAX_POLICY_BYTES,
+        label: NATIVE_REVIEW_TRUST_POLICY_REF,
+    });
+    try {
+        const controllerTrust = await readNativeControllerTrustProject(paths.projectRoot);
+        if (!controllerTrust)
+            throw new Error('Native project has no controller-owned trust root');
+        return verifyNativeReviewTrustPolicy(JSON.parse(file.text), controllerTrust.controllerIdentity);
+    }
+    catch (error) {
+        throw new Error('Native review trust policy is not valid canonical JSON', { cause: error });
+    }
+}
+/**
+ * Load the pre-trusted policy and prove that it existed unchanged in both the change-open
+ * baseline and the Build snapshot. Private key material is deliberately not part of this file.
+ */
+export async function loadNativeReviewTrustPolicy(options) {
+    const baseline = options.scope.baseline.entries.find((entry) => entry.path === NATIVE_REVIEW_TRUST_POLICY_REF);
+    const current = options.scope.current.entries.find((entry) => entry.path === NATIVE_REVIEW_TRUST_POLICY_REF);
+    if (!baseline || !current || baseline.hash !== current.hash || baseline.size !== current.size) {
+        throw new Error('Native review trust policy must exist unchanged from change creation through Build');
+    }
+    const file = await readNativeProtectedTextFile({
+        root: options.paths.projectRoot,
+        file: path.join(options.paths.projectRoot, ...NATIVE_REVIEW_TRUST_POLICY_REF.split('/')),
+        maxBytes: MAX_POLICY_BYTES,
+        label: NATIVE_REVIEW_TRUST_POLICY_REF,
+    });
+    if (file.hash !== current.hash || file.size !== current.size) {
+        throw new Error('Native review trust policy changed after Build');
+    }
+    let value;
+    try {
+        value = JSON.parse(file.text);
+    }
+    catch (error) {
+        throw new Error('Native review trust policy is not valid JSON', { cause: error });
+    }
+    const controllerTrust = await readNativeControllerTrustProject(options.paths.projectRoot);
+    if (!controllerTrust)
+        throw new Error('Native project has no controller-owned trust root');
+    return verifyNativeReviewTrustPolicy(value, controllerTrust.controllerIdentity);
+}
+export function trustedNativeIdentity(policy, kind, keyId) {
+    const identities = kind === 'reviewer' ? policy.trustedReviewers : policy.trustedWaiverSigners;
+    const identity = identities.find((candidate) => candidate.keyId === keyId);
+    if (!identity)
+        throw new Error(`Native ${kind} identity is not pre-trusted`);
+    return identity;
+}
+//# sourceMappingURL=native-review-trust.js.map

package/dist/domains/comet-native/native-review-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-review-trust.js","sourceRoot":"","sources":["../../../domains/comet-native/native-review-trust.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,6BAA6B,GAG9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAGhF,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAE7E,MAAM,CAAC,MAAM,iCAAiC,GAAG,qCAA8C,CAAC;AAChG,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAC7E,MAAM,eAAe,GAAG,iCAAiC,CAAC;AAC1D,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAYvC,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAChB,KAA8B,EAC9B,QAA2B,EAC3B,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK;SACjB,GAAG,CAAC,yBAAyB,CAAC;SAC9B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACtE,IACE,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QACxE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAChD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAM5C;IACC,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,iCAAiC;QACzC,eAAe,EAAE,KAAK,CAAC,kBAAkB,CAAC,KAAK;QAC/C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,gBAAgB,EAAE,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACjE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAC5C;QACD,oBAAoB,EAAE,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAC5C;KACF,CAAC;IACF,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAC3D,OAAO,4BAA4B,CAAC;QAClC,GAAG,OAAO;QACV,UAAU;QACV,mBAAmB,EAAE,2BAA2B,CAAC;YAC/C,QAAQ,EAAE,KAAK,CAAC,kBAAkB;YAClC,UAAU,EAAE,KAAK,CAAC,oBAAoB;YACtC,WAAW,EAAE,UAAU;SACxB,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IACzD,SAAS,CACP,IAAI,EACJ;QACE,QAAQ;QACR,iBAAiB;QACjB,qBAAqB;QACrB,kBAAkB;QAClB,sBAAsB;QACtB,YAAY;QACZ,qBAAqB;KACtB,EACD,4BAA4B,CAC7B,CAAC;IACF,IACE,IAAI,CAAC,MAAM,KAAK,iCAAiC;QACjD,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;QACxC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QACxC,OAAO,IAAI,CAAC,mBAAmB,KAAK,QAAQ;QAC5C,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;QAC5C,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IACvF,MAAM,oBAAoB,GAAG,UAAU,CACrC,IAAI,CAAC,oBAAoB,EACzB,+BAA+B,CAChC,CAAC;IACF,IACE,gBAAgB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,mBAAmB,CAAC;QAChF,oBAAoB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,mBAAmB,CAAC;QACpF,IAAI,GAAG,CAAC;YACN,IAAI,CAAC,eAAe;YACpB,IAAI,CAAC,mBAAmB;YACxB,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACrD,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC1D,CAAC,CAAC,IAAI;YACL,CAAC,GAAG,gBAAgB,CAAC,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAC3D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,iCAAiC;QACzC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,gBAAgB;QAChB,oBAAoB;KACrB,CAAC;IACF,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACjF,IACE,mBAAmB,CAAC,KAAK,KAAK,IAAI,CAAC,eAAe;QAClD,mBAAmB,CAAC,WAAW,KAAK,UAAU,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc,EACd,kBAAwC;IAExC,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,eAAe,KAAK,kBAAkB,CAAC,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,6BAA6B,CAAC;QAC5B,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,KAAK,EAAE,MAAM,CAAC,mBAAmB;KAClC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAAC;QAC7C,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,8BAA8B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChF,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,8BAA8B;KACtC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClF,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC3F,OAAO,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAClG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wDAAwD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAGjD;IACC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAClD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,8BAA8B,CACzD,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAChD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,8BAA8B,CACzD,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAAC;QAC7C,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,8BAA8B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxF,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,8BAA8B;KACtC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1F,IAAI,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC3F,OAAO,6BAA6B,CAAC,KAAK,EAAE,eAAe,CAAC,kBAAkB,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAA+B,EAC/B,IAA2B,EAC3B,KAAa;IAEb,MAAM,UAAU,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC;IAC/F,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC3E,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,8BAA8B,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/domains/comet-native/native-revision.d.ts

@@ -0,0 +1,20 @@
+export interface NativeRevisionedDocument {
+    revision: number;
+}
+export interface NativeRevisionCasOptions<T extends NativeRevisionedDocument> {
+    expectedRevision: number;
+    next: T;
+    read: () => Promise<T>;
+    write: (next: T) => Promise<void>;
+    equals?: (left: T, right: T) => boolean;
+    conflict: (actualRevision: number) => Error;
+}
+/**
+ * Shared revision/CAS protocol for Native runtime documents.
+ *
+ * The caller owns the mutation or transaction lock around this operation. The
+ * idempotent branch lets journal recovery safely replay a write that reached
+ * disk before the process stopped.
+ */
+export declare function compareAndSwapNativeRevision<T extends NativeRevisionedDocument>(options: NativeRevisionCasOptions<T>): Promise<T>;
+//# sourceMappingURL=native-revision.d.ts.map