@sentropic/h2a-runtime 0.98.6 → 0.98.7-rc.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent-launch-args.d.ts.map +1 -1
- package/dist/agent-launch-args.js +5 -5
- package/dist/agent-launch-args.js.map +1 -1
- package/dist/agy-claude.d.ts +42 -0
- package/dist/agy-claude.d.ts.map +1 -0
- package/dist/agy-claude.js +148 -0
- package/dist/agy-claude.js.map +1 -0
- package/dist/agy-headless.d.ts +11 -0
- package/dist/agy-headless.d.ts.map +1 -0
- package/dist/agy-headless.js +104 -0
- package/dist/agy-headless.js.map +1 -0
- package/dist/attach.d.ts +5 -0
- package/dist/attach.d.ts.map +1 -1
- package/dist/attach.js +75 -6
- package/dist/attach.js.map +1 -1
- package/dist/auth-login.d.ts +24 -1
- package/dist/auth-login.d.ts.map +1 -1
- package/dist/auth-login.js +132 -4
- package/dist/auth-login.js.map +1 -1
- package/dist/central-mcp.d.ts +34 -0
- package/dist/central-mcp.d.ts.map +1 -1
- package/dist/central-mcp.js +275 -71
- package/dist/central-mcp.js.map +1 -1
- package/dist/claude-code-cli-isolation.d.ts +53 -0
- package/dist/claude-code-cli-isolation.d.ts.map +1 -0
- package/dist/claude-code-cli-isolation.js +277 -0
- package/dist/claude-code-cli-isolation.js.map +1 -0
- package/dist/claude-code-cli-lifecycle.d.ts +80 -0
- package/dist/claude-code-cli-lifecycle.d.ts.map +1 -0
- package/dist/claude-code-cli-lifecycle.js +402 -0
- package/dist/claude-code-cli-lifecycle.js.map +1 -0
- package/dist/claude-code-cli-runner.d.ts +89 -0
- package/dist/claude-code-cli-runner.d.ts.map +1 -0
- package/dist/claude-code-cli-runner.js +659 -0
- package/dist/claude-code-cli-runner.js.map +1 -0
- package/dist/claude-seat-input.d.ts +47 -0
- package/dist/claude-seat-input.d.ts.map +1 -0
- package/dist/claude-seat-input.js +272 -0
- package/dist/claude-seat-input.js.map +1 -0
- package/dist/claude-seat-mesh-contract.d.ts +88 -0
- package/dist/claude-seat-mesh-contract.d.ts.map +1 -0
- package/dist/claude-seat-mesh-contract.js +13 -0
- package/dist/claude-seat-mesh-contract.js.map +1 -0
- package/dist/cli-help-groups.js +1 -1
- package/dist/cli-help-groups.js.map +1 -1
- package/dist/cli-seat-codecs.d.ts +86 -0
- package/dist/cli-seat-codecs.d.ts.map +1 -0
- package/dist/cli-seat-codecs.js +255 -0
- package/dist/cli-seat-codecs.js.map +1 -0
- package/dist/cli-seat-fixtures.d.ts +86 -0
- package/dist/cli-seat-fixtures.d.ts.map +1 -0
- package/dist/cli-seat-fixtures.js +114 -0
- package/dist/cli-seat-fixtures.js.map +1 -0
- package/dist/cli-seat-materialization.d.ts +245 -0
- package/dist/cli-seat-materialization.d.ts.map +1 -0
- package/dist/cli-seat-materialization.js +646 -0
- package/dist/cli-seat-materialization.js.map +1 -0
- package/dist/conv-guard.d.ts.map +1 -1
- package/dist/conv-guard.js +6 -2
- package/dist/conv-guard.js.map +1 -1
- package/dist/crash-log.d.ts +112 -0
- package/dist/crash-log.d.ts.map +1 -0
- package/dist/crash-log.js +560 -0
- package/dist/crash-log.js.map +1 -0
- package/dist/delegate.d.ts +10 -0
- package/dist/delegate.d.ts.map +1 -1
- package/dist/delegate.js +29 -0
- package/dist/delegate.js.map +1 -1
- package/dist/file-lock.d.ts +4 -2
- package/dist/file-lock.d.ts.map +1 -1
- package/dist/file-lock.js +24 -10
- package/dist/file-lock.js.map +1 -1
- package/dist/gateway-host/claude-seat-client.d.ts +32 -0
- package/dist/gateway-host/claude-seat-client.d.ts.map +1 -0
- package/dist/gateway-host/claude-seat-client.js +38 -0
- package/dist/gateway-host/claude-seat-client.js.map +1 -0
- package/dist/gateway-host/config-file.d.ts +2 -0
- package/dist/gateway-host/config-file.d.ts.map +1 -1
- package/dist/gateway-host/config-file.js +5 -1
- package/dist/gateway-host/config-file.js.map +1 -1
- package/dist/gateway-host/daemon.d.ts.map +1 -1
- package/dist/gateway-host/daemon.js +1 -2
- package/dist/gateway-host/daemon.js.map +1 -1
- package/dist/gateway-host/host.d.ts +6 -0
- package/dist/gateway-host/host.d.ts.map +1 -1
- package/dist/gateway-host/host.js +24 -3
- package/dist/gateway-host/host.js.map +1 -1
- package/dist/gateway-host/live-auth.d.ts +62 -0
- package/dist/gateway-host/live-auth.d.ts.map +1 -0
- package/dist/gateway-host/live-auth.js +87 -0
- package/dist/gateway-host/live-auth.js.map +1 -0
- package/dist/gateway-host/live-declarations.d.ts +58 -0
- package/dist/gateway-host/live-declarations.d.ts.map +1 -0
- package/dist/gateway-host/live-declarations.js +429 -0
- package/dist/gateway-host/live-declarations.js.map +1 -0
- package/dist/gateway-host/live-disclosure.d.ts +124 -0
- package/dist/gateway-host/live-disclosure.d.ts.map +1 -0
- package/dist/gateway-host/live-disclosure.js +347 -0
- package/dist/gateway-host/live-disclosure.js.map +1 -0
- package/dist/gateway-host/live-github.d.ts +11 -0
- package/dist/gateway-host/live-github.d.ts.map +1 -0
- package/dist/gateway-host/live-github.js +374 -0
- package/dist/gateway-host/live-github.js.map +1 -0
- package/dist/gateway-host/live-host.d.ts +20 -0
- package/dist/gateway-host/live-host.d.ts.map +1 -0
- package/dist/gateway-host/live-host.js +14 -0
- package/dist/gateway-host/live-host.js.map +1 -0
- package/dist/gateway-host/live-object-store.d.ts +35 -0
- package/dist/gateway-host/live-object-store.d.ts.map +1 -0
- package/dist/gateway-host/live-object-store.js +447 -0
- package/dist/gateway-host/live-object-store.js.map +1 -0
- package/dist/gateway-host/live-registration.d.ts +162 -0
- package/dist/gateway-host/live-registration.d.ts.map +1 -0
- package/dist/gateway-host/live-registration.js +455 -0
- package/dist/gateway-host/live-registration.js.map +1 -0
- package/dist/gateway-model-catalog/model-catalog.d.ts +38 -0
- package/dist/gateway-model-catalog/model-catalog.d.ts.map +1 -0
- package/dist/gateway-model-catalog/model-catalog.js +167 -0
- package/dist/gateway-model-catalog/model-catalog.js.map +1 -0
- package/dist/identity-cull/cull.js +1 -1
- package/dist/identity-cull/cull.js.map +1 -1
- package/dist/identity-cull/identity-fence.d.ts +48 -0
- package/dist/identity-cull/identity-fence.d.ts.map +1 -0
- package/dist/identity-cull/identity-fence.js +221 -0
- package/dist/identity-cull/identity-fence.js.map +1 -0
- package/dist/identity-operator-break.d.ts +43 -0
- package/dist/identity-operator-break.d.ts.map +1 -0
- package/dist/identity-operator-break.js +85 -0
- package/dist/identity-operator-break.js.map +1 -0
- package/dist/index.d.ts +8 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +525 -132
- package/dist/index.js.map +1 -1
- package/dist/launch-layout.d.ts.map +1 -1
- package/dist/launch-layout.js +10 -2
- package/dist/launch-layout.js.map +1 -1
- package/dist/llm-mesh-accounts.d.ts +128 -6
- package/dist/llm-mesh-accounts.d.ts.map +1 -1
- package/dist/llm-mesh-accounts.js +370 -14
- package/dist/llm-mesh-accounts.js.map +1 -1
- package/dist/native-host.d.ts +25 -1
- package/dist/native-host.d.ts.map +1 -1
- package/dist/native-host.js +211 -28
- package/dist/native-host.js.map +1 -1
- package/dist/native-restart.d.ts +2 -0
- package/dist/native-restart.d.ts.map +1 -1
- package/dist/native-restart.js +7 -0
- package/dist/native-restart.js.map +1 -1
- package/dist/native-terminal/fleet.d.ts +11 -0
- package/dist/native-terminal/fleet.d.ts.map +1 -1
- package/dist/native-terminal/fleet.js +58 -1
- package/dist/native-terminal/fleet.js.map +1 -1
- package/dist/native-terminal/host-scope.d.ts +18 -0
- package/dist/native-terminal/host-scope.d.ts.map +1 -0
- package/dist/native-terminal/host-scope.js +65 -0
- package/dist/native-terminal/host-scope.js.map +1 -0
- package/dist/native-terminal/host.d.ts +7 -1
- package/dist/native-terminal/host.d.ts.map +1 -1
- package/dist/native-terminal/host.js +10 -26
- package/dist/native-terminal/host.js.map +1 -1
- package/dist/native-terminal/journal.d.ts +5 -0
- package/dist/native-terminal/journal.d.ts.map +1 -1
- package/dist/native-terminal/journal.js +28 -16
- package/dist/native-terminal/journal.js.map +1 -1
- package/dist/native-terminal/op.d.ts +49 -1
- package/dist/native-terminal/op.d.ts.map +1 -1
- package/dist/native-terminal/op.js +254 -38
- package/dist/native-terminal/op.js.map +1 -1
- package/dist/native-terminal/process.d.ts.map +1 -1
- package/dist/native-terminal/process.js +10 -1
- package/dist/native-terminal/process.js.map +1 -1
- package/dist/native-terminal/screen.d.ts.map +1 -1
- package/dist/native-terminal/screen.js +1 -1
- package/dist/native-terminal/screen.js.map +1 -1
- package/dist/native-terminal/server.d.ts +12 -2
- package/dist/native-terminal/server.d.ts.map +1 -1
- package/dist/native-terminal/server.js +143 -42
- package/dist/native-terminal/server.js.map +1 -1
- package/dist/native-terminal/session-scope.d.ts +2 -0
- package/dist/native-terminal/session-scope.d.ts.map +1 -0
- package/dist/native-terminal/session-scope.js +32 -0
- package/dist/native-terminal/session-scope.js.map +1 -0
- package/dist/proc-identity.d.ts +31 -0
- package/dist/proc-identity.d.ts.map +1 -1
- package/dist/proc-identity.js +54 -0
- package/dist/proc-identity.js.map +1 -1
- package/dist/prompt-delivery.d.ts +3 -0
- package/dist/prompt-delivery.d.ts.map +1 -1
- package/dist/prompt-delivery.js +8 -3
- package/dist/prompt-delivery.js.map +1 -1
- package/dist/protocol-local.d.ts +16 -0
- package/dist/protocol-local.d.ts.map +1 -1
- package/dist/protocol-local.js +14 -0
- package/dist/protocol-local.js.map +1 -1
- package/dist/registry.d.ts +16 -12
- package/dist/registry.d.ts.map +1 -1
- package/dist/registry.js +39 -5
- package/dist/registry.js.map +1 -1
- package/dist/relaunch.d.ts +16 -0
- package/dist/relaunch.d.ts.map +1 -1
- package/dist/relaunch.js +42 -1
- package/dist/relaunch.js.map +1 -1
- package/dist/restore.d.ts +4 -0
- package/dist/restore.d.ts.map +1 -1
- package/dist/restore.js +9 -37
- package/dist/restore.js.map +1 -1
- package/dist/resume-launch-options.d.ts +3 -3
- package/dist/resume-launch-options.d.ts.map +1 -1
- package/dist/resume-launch-options.js +7 -4
- package/dist/resume-launch-options.js.map +1 -1
- package/dist/run.d.ts +2 -0
- package/dist/run.d.ts.map +1 -1
- package/dist/run.js +88 -20
- package/dist/run.js.map +1 -1
- package/dist/soft-refresh.d.ts.map +1 -1
- package/dist/soft-refresh.js +6 -0
- package/dist/soft-refresh.js.map +1 -1
- package/dist/terminal-reset.d.ts +104 -0
- package/dist/terminal-reset.d.ts.map +1 -0
- package/dist/terminal-reset.js +229 -0
- package/dist/terminal-reset.js.map +1 -0
- package/dist/tmux.d.ts +54 -8
- package/dist/tmux.d.ts.map +1 -1
- package/dist/tmux.js +143 -36
- package/dist/tmux.js.map +1 -1
- package/dist/vendor/engram-live/contracts.d.ts +825 -0
- package/dist/vendor/engram-live/contracts.js +1734 -0
- package/dist/vendor/engram-live/integration.d.ts +113 -0
- package/dist/vendor/engram-live/integration.js +254 -0
- package/dist/vendor/engram-live/pr-sync.d.ts +144 -0
- package/dist/vendor/engram-live/pr-sync.js +411 -0
- package/dist/vendor/engram-live/registration.d.ts +138 -0
- package/dist/vendor/engram-live/registration.js +358 -0
- package/dist/vendor/engram-live/retention.d.ts +56 -0
- package/dist/vendor/engram-live/retention.js +179 -0
- package/package.json +6 -6
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"live-declarations.js","sourceRoot":"","sources":["../../src/gateway-host/live-declarations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,MAAM,EACN,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAO5C,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAC5D,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,aAAa,CAAS;IACtB,2BAA2B,CAAS;IAC7C,wEAAwE;IAC/D,yBAAyB,CAAqB;IAEvD,YACE,aAAqB,EACrB,2BAAmC,EACnC,yBAA6C;QAE7C,KAAK,CACH,yBAAyB,KAAK,SAAS;YACrC,CAAC,CAAC,uCAAuC,aAAa,wDAAwD,2BAA2B,EAAE;YAC3I,CAAC,CAAC,uCAAuC,aAAa,8BAA8B;gBAChF,GAAG,yBAAyB,uBAAuB,2BAA2B,EAAE,CACvF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,2BAA2B,GAAG,2BAA2B,CAAC;QAC/D,IAAI,CAAC,yBAAyB,GAAG,yBAAyB,CAAC;IAC7D,CAAC;CACF;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAC9E,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,iEAAiE;AACjE,iFAAiF;AACjF,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,oEAAoE;AACpE,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,8DAA8D;AAC9D,sDAAsD;AAEtD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAO7B,sEAAsE;AACtE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAqB,CAAC;AAEpD,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAEpF,MAAM,SAAS,GAAG,CAAC,EAAU,EAAQ,EAAE;IACrC,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,iFAAiF;AACjF,SAAS,yBAAyB,CAAC,GAAW,EAAE,KAAa;IAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC;IACpD,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,YAAY,CAAC;QACnD,IAAI,CAAC;YACH,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,iEAAiE;YACjE,mEAAmE;YACnE,iEAAiE;YACjE,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAC3B,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW;gBAAE,MAAM,KAAK,CAAC;QAClF,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,2DAA2D;QAC3D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,mBAAmB,EAAE,CAAC;gBAC7D,KAAK,MAAM,KAAK,IAAI,MAAM;oBAAE,yBAAyB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC/B,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa,CAAI,IAAY,EAAE,EAA0B;IAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAuBD,qGAAqG;AACrG,MAAM,cAAc,GAAG,CAAC,MAA6B,EAAsB,EAAE;IAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB;QAAE,OAAO,6BAA6B,CAAC;IAChF,IAAI,MAAM,CAAC,aAAa,KAAK,+BAA+B,EAAE,CAAC;QAC7D,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,MAAM,WAAW,GAAG,4BAA4B,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrE,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,wBAAwB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACpF,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACxD,OAAO,oFAAoF,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC3D,OAAO,uFAAuF,CAAC;IACjG,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACjE,OAAO,6FAA6F,CAAC;IACvG,CAAC;IACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,2BAA2B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,8BAA8B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACpF,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAU,EAAE,CAAC;QACvE,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,OAAO,WAAW,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAkC,EAAE;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAuC,CAAC;IACvD,IACE,MAAM,CAAC,IAAI,KAAK,qBAAqB;QACrC,MAAM,CAAC,aAAa,KAAK,+BAA+B;QACxD,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,MAAM,CAAC,WAAW,KAAK,IAAI;QAC3B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,MAAM,CAAC,KAAK,KAAK,IAAI;QACrB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,KAAK,IAAI;QACxB,OAAO,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,QAAQ,EACpD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,cAAc,CAAC,MAA+B,CAAC,KAAK,SAAS,CAAC;AACvE,CAAC,CAAC;AAEF,sHAAsH;AACtH,MAAM,cAAc,GAAG,CAAC,KAAc,EAAW,EAAE;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CACL,WAAW,IAAI,MAAM;QACrB,CAAC,eAAe,IAAI,MAAM,IAAI,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,IAAY,EAAwB,EAAE;IAC3D,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,CAC7E,CAAC;IACJ,CAAC;IACD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACd,MAAwC,CAAC,IAAI,KAAK,uBAAuB;QACzE,MAAwC,CAAC,OAAO,KAAK,CAAC;QACvD,CAAC,KAAK,CAAC,OAAO,CAAE,MAAwC,CAAC,YAAY,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,MAA8B,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,kEAAkE,IAAI,IAAI;gBACxE,sFAAsF,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,+DAA+D,IAAI,EAAE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AA0BF;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,MAAM,IAAI,GAAG,GAA4B,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC;IAC7E,MAAM,OAAO,GAAG,CACd,IAAe,EACf,QAA0C,EAC1C,YAA8C,EAC9C,aAAqB,EACrB,gBAAwB,EAClB,EAAE;QACR,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,GAAyB,EAAE,CAAC,IAAI,oBAAoB,CACnE,aAAa,EACb,gBAAgB,EAChB,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAAC;YACzE,EAAE,WAAW,CAAC,mBAAmB,CACpC,CAAC;QACF,MAAM,IAAI,GAAyB;YACjC,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;SAChC,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,MAAM,QAAQ,EAAE,CAAC;YAC9C,uEAAuE;YACvE,wEAAwE;YACxE,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClF,MAAM,QAAQ,EAAE,CAAC;YACnB,CAAC;YACD,mEAAmE;YACnE,sEAAsE;YACtE,UAAU,CAAC,GAAG,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,+DAA+D;YAC/D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClF,MAAM,QAAQ,EAAE,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,IAAI;YACF,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,WAAW,CAAC,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,aAAa;gBACvD,CAAC,CAAC,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,aAAa;oBACzD,CAAC,CAAC,CAAC;oBACH,CAAC,CAAC,CAAC,CACR,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,aAAa;YACf,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC;QACrF,CAAC;QACD,UAAU,CAAC,IAAI;YACb,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,CAAC,MAAM;YACX,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC3B,MAAM,YAAY,GAAG,IAAI,EAAE,CAAC;gBAC5B,IACE,YAAY,CAAC,IAAI,CACf,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,KAAK,MAAM,CAAC,WAAW,CAAC,aAAa,CACtF,EACD,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,oCAAoC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CACvE,CAAC;gBACJ,CAAC;gBACD,OAAO,CACL,IAAI,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,EAAE,MAAM,CAAC,EAC7C,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,mBAAmB,CACzE,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,aAAa,EAAE,2BAA2B,EAAE,MAAM;YACvD,OAAO,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBAClC,MAAM,YAAY,GAAG,IAAI,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAClC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAC/D,CAAC;gBACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,aAAa,EAAE,CAAC,CAAC;gBAChE,CAAC;gBACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAE,CAAC;gBACrC,IAAI,OAAO,CAAC,WAAW,CAAC,mBAAmB,KAAK,2BAA2B,EAAE,CAAC;oBAC5E,MAAM,IAAI,oBAAoB,CAC5B,aAAa,EACb,2BAA2B,EAC3B,OAAO,CAAC,WAAW,CAAC,mBAAmB,CACxC,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7B,IAAI,IAAI,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,yCAAyC,aAAa,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBACD,IAAI,IAAI,CAAC,WAAW,CAAC,mBAAmB,KAAK,2BAA2B,GAAG,CAAC,EAAE,CAAC;oBAC7E,MAAM,IAAI,KAAK,CACb,gEAAgE,2BAA2B,EAAE,CAC9F,CAAC;gBACJ,CAAC;gBACD,KACE,MAAM,KAAK,IAAI;oBACb,QAAQ;oBACR,WAAW;oBACX,iBAAiB;oBACjB,SAAS;oBACT,YAAY;oBACZ,gBAAgB;iBACR,EACV,CAAC;oBACD,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3D,MAAM,IAAI,KAAK,CACb,sDAAsD,KAAK,MAAM,aAAa,EAAE,CACjF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,mEAAmE;gBACnE,8DAA8D;gBAC9D,8DAA8D;gBAC9D,yBAAyB;gBACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;gBACrC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC;gBACnC,MAAM,gBAAgB,GAAG,SAAS,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB,CAAC;gBACpF,MAAM,aAAa,GAAG,SAAS,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC;gBACvE,MAAM,eAAe,GAAG,SAAS,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe,CAAC;gBAC/E,IAAI,gBAAgB,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;oBACzD,IACE,SAAS,CAAC,iBAAiB,KAAK,SAAS;wBACzC,SAAS,CAAC,YAAY,KAAK,SAAS;wBACpC,SAAS,CAAC,eAAe,KAAK,SAAS,EACvC,CAAC;wBACD,MAAM,IAAI,KAAK,CACb,uHAAuH,aAAa,EAAE,CACvI,CAAC;oBACJ,CAAC;oBACD,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;wBAC3C,IAAI,SAAS,CAAC,eAAe,KAAK,wBAAwB,EAAE,CAAC;4BAC3D,MAAM,IAAI,KAAK,CACb,qCAAqC,wBAAwB,mCAAmC,aAAa,EAAE,CAChH,CAAC;wBACJ,CAAC;oBACH,CAAC;yBAAM,IAAI,SAAS,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;wBACjE,MAAM,IAAI,KAAK,CACb,4DAA4D,aAAa,EAAE,CAC5E,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC;gBACzE,CAAC;gBACD,oEAAoE;gBACpE,kEAAkE;gBAClE,mEAAmE;gBACnE,iEAAiE;gBACjE,gEAAgE;gBAChE,wCAAwC;gBACxC,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAC/D,CAAC;gBACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,IAAI,oBAAoB,CAC5B,aAAa,EACb,2BAA2B,EAC3B,SAAS,CACV,CAAC;gBACJ,CAAC;gBACD,IAAI,OAAO,CAAC,WAAW,CAAC,mBAAmB,KAAK,2BAA2B,EAAE,CAAC;oBAC5E,MAAM,IAAI,oBAAoB,CAC5B,aAAa,EACb,2BAA2B,EAC3B,OAAO,CAAC,WAAW,CAAC,mBAAmB,CACxC,CAAC;gBACJ,CAAC;gBACD,OAAO,CACL,IAAI,EACJ,KAAK,EACL,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACnB,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CACnE,EACD,aAAa,EACb,2BAA2B,CAC5B,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,aAAa;YAClB,OAAO,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBAClC,MAAM,YAAY,GAAG,IAAI,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CACnC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAC/D,CAAC;gBACF,IAAI,SAAS,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC;gBAC3D,OAAO,CACL,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAC5C,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,aAAa,CAAE;qBAC/E,WAAW,CAAC,mBAAmB,CACnC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,124 @@
|
|
|
1
|
+
import { type DisclosureRefusal, type LiveDisclosureAuth, type LiveDisclosureAuthorization, type Refused } from "./live-auth.js";
|
|
2
|
+
export declare const DISCLOSURE_SURFACES: readonly ["prompt", "tool", "mcp", "summary", "symbol", "local-commit", "citation", "context"];
|
|
3
|
+
export type DisclosureSurface = typeof DISCLOSURE_SURFACES[number];
|
|
4
|
+
export interface DisclosureScope {
|
|
5
|
+
/** Exact repository-relative source paths; no wildcard or implicit descendants. */
|
|
6
|
+
readonly paths: readonly string[];
|
|
7
|
+
readonly surfaces: readonly DisclosureSurface[];
|
|
8
|
+
}
|
|
9
|
+
export interface LiveDisclosureEvidence {
|
|
10
|
+
/** Host provenance ID; multiple fragments may belong to one requested entry. */
|
|
11
|
+
readonly evidenceId: string;
|
|
12
|
+
readonly repositoryId: string;
|
|
13
|
+
readonly declarationId: string;
|
|
14
|
+
readonly declarationRevision: number;
|
|
15
|
+
readonly policyVersion: string;
|
|
16
|
+
readonly stateRevision: string;
|
|
17
|
+
/** Every source, including previous paths and memory/code composition origins. */
|
|
18
|
+
readonly originPaths: readonly string[];
|
|
19
|
+
readonly surface: DisclosureSurface;
|
|
20
|
+
readonly text: string;
|
|
21
|
+
/** L4b-2 withheld/protected facts and their derivatives stay excluded. */
|
|
22
|
+
readonly excluded: boolean;
|
|
23
|
+
}
|
|
24
|
+
export interface DisclosureAuditEvent {
|
|
25
|
+
readonly eventId: string;
|
|
26
|
+
readonly at: number;
|
|
27
|
+
/** An attempt is audited before handoff; it is not a delivery receipt. */
|
|
28
|
+
readonly action: "grant" | "revoke" | "emit-attempt" | "refuse";
|
|
29
|
+
/** Only host-minted opaque identifiers enter receipts; never caller text. */
|
|
30
|
+
readonly grantId?: string;
|
|
31
|
+
readonly reason?: DisclosureRefusal;
|
|
32
|
+
}
|
|
33
|
+
export interface LiveExternalTransport {
|
|
34
|
+
/** Actual destination, including routing/fallback; a different provider must reauthorize. */
|
|
35
|
+
readonly providerId: string;
|
|
36
|
+
/** Synchronous handoff is the emission boundary. No later unguarded routing. */
|
|
37
|
+
send(texts: readonly string[]): void | Promise<void>;
|
|
38
|
+
}
|
|
39
|
+
/** One host read transaction, held until synchronous send returns.
|
|
40
|
+
* Decisions are values, never callbacks into mutable policy/auth state.
|
|
41
|
+
*/
|
|
42
|
+
export interface LiveDisclosureEmissionSnapshot {
|
|
43
|
+
readonly at: number;
|
|
44
|
+
readonly authorization: LiveDisclosureAuthorization;
|
|
45
|
+
readonly issuerAuthorization: LiveDisclosureAuthorization;
|
|
46
|
+
readonly readAllowed: boolean;
|
|
47
|
+
readonly policy?: Readonly<{
|
|
48
|
+
version: string;
|
|
49
|
+
allowed: readonly boolean[];
|
|
50
|
+
compositionAllowed: boolean;
|
|
51
|
+
}>;
|
|
52
|
+
readonly providerId: string;
|
|
53
|
+
}
|
|
54
|
+
export interface LiveDisclosureEmissionLease {
|
|
55
|
+
readonly snapshot: LiveDisclosureEmissionSnapshot;
|
|
56
|
+
/** Bound to snapshot.providerId; synchronous handoff under the same host fence. */
|
|
57
|
+
send(texts: readonly string[]): void | Promise<void>;
|
|
58
|
+
release(): void;
|
|
59
|
+
}
|
|
60
|
+
export interface LiveDisclosureOptions {
|
|
61
|
+
readonly auth: LiveDisclosureAuth;
|
|
62
|
+
readonly now?: () => number;
|
|
63
|
+
/** Must durably append synchronously or throw; unavailable audit denies emission. */
|
|
64
|
+
readonly audit?: (event: DisclosureAuditEvent) => void;
|
|
65
|
+
readonly loadEvidence: (ids: readonly string[]) => Promise<readonly LiveDisclosureEvidence[]>;
|
|
66
|
+
/** Separate verified read authority; a disclosure grant cannot create it. */
|
|
67
|
+
readonly readAccess?: (request: Readonly<{
|
|
68
|
+
principal: string;
|
|
69
|
+
repositoryId: string;
|
|
70
|
+
evidenceIds: readonly string[];
|
|
71
|
+
}>) => boolean;
|
|
72
|
+
/** Current host L4b exclusion policy. Absence/incompatibility never falls back. */
|
|
73
|
+
readonly contentPolicy?: () => Readonly<{
|
|
74
|
+
version: string;
|
|
75
|
+
allows(evidence: LiveDisclosureEvidence): boolean;
|
|
76
|
+
}> | undefined;
|
|
77
|
+
readonly transport: (providerId: string) => LiveExternalTransport | undefined;
|
|
78
|
+
/** Mandatory at handoff. Acquire one host-owned read transaction spanning
|
|
79
|
+
* trust/revocation, declaration/latest-state, clock, read authority, policy
|
|
80
|
+
* decisions for every fragment AND their concatenation, and actual routing.
|
|
81
|
+
* All relevant writers (including reentrant audit callbacks) must be fenced
|
|
82
|
+
* until release. Resolve callbacks/getters BEFORE exposing the snapshot.
|
|
83
|
+
* No promise, stale independent reads, caller booleans or unlocked fallback.
|
|
84
|
+
* The current G4 consumer stays closed until its host implements this port.
|
|
85
|
+
*/
|
|
86
|
+
readonly acquireEmissionSnapshot?: (request: Readonly<{
|
|
87
|
+
request: EmitDisclosureRequest;
|
|
88
|
+
issuingCapability: unknown;
|
|
89
|
+
evidence: readonly LiveDisclosureEvidence[];
|
|
90
|
+
transport: LiveExternalTransport;
|
|
91
|
+
}>) => LiveDisclosureEmissionLease | Refused;
|
|
92
|
+
}
|
|
93
|
+
export interface GrantDisclosureRequest {
|
|
94
|
+
readonly capability: unknown;
|
|
95
|
+
readonly repositoryId: string;
|
|
96
|
+
readonly providerId: string;
|
|
97
|
+
readonly scope: DisclosureScope;
|
|
98
|
+
/** Absolute exclusive bound in milliseconds, also bounded by the owner proof. */
|
|
99
|
+
readonly expiresAt: number;
|
|
100
|
+
}
|
|
101
|
+
export interface EmitDisclosureRequest {
|
|
102
|
+
readonly capability: unknown;
|
|
103
|
+
readonly grantId?: string;
|
|
104
|
+
readonly repositoryId: string;
|
|
105
|
+
readonly providerId: string;
|
|
106
|
+
readonly evidenceIds: readonly string[];
|
|
107
|
+
}
|
|
108
|
+
export interface LiveDisclosureAuthority {
|
|
109
|
+
grant(request: GrantDisclosureRequest): Refused | Readonly<{
|
|
110
|
+
ok: true;
|
|
111
|
+
grantId: string;
|
|
112
|
+
expiresAt: number;
|
|
113
|
+
}>;
|
|
114
|
+
revoke(capability: unknown, grantId: string): Refused | Readonly<{
|
|
115
|
+
ok: true;
|
|
116
|
+
}>;
|
|
117
|
+
emit(request: EmitDisclosureRequest): Promise<Refused | Readonly<{
|
|
118
|
+
ok: true;
|
|
119
|
+
}>>;
|
|
120
|
+
/** G4's missing L8 policy is a typed, audited refusal before any read. */
|
|
121
|
+
policyUnavailable(): Refused;
|
|
122
|
+
}
|
|
123
|
+
export declare function createLiveDisclosureAuthority(options: LiveDisclosureOptions): LiveDisclosureAuthority;
|
|
124
|
+
//# sourceMappingURL=live-disclosure.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"live-disclosure.d.ts","sourceRoot":"","sources":["../../src/gateway-host/live-disclosure.ts"],"names":[],"mappings":"AAMA,OAAO,EACG,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EACvD,KAAK,2BAA2B,EAA6B,KAAK,OAAO,EAC1E,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,mBAAmB,gGAAiG,CAAC;AAClI,MAAM,MAAM,iBAAiB,GAAG,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;AACnE,MAAM,WAAW,eAAe;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD;AACD,MAAM,WAAW,sBAAsB;IACrC,gFAAgF;IAChF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kFAAkF;IAClF,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,cAAc,GAAG,QAAQ,CAAC;IAChE,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CACrC;AACD,MAAM,WAAW,qBAAqB;IACpC,6FAA6F;IAC7F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,IAAI,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AACD;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,OAAO,EAAE,CAAC;QAAC,kBAAkB,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1G,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC;IAClD,mFAAmF;IACnF,IAAI,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,IAAI,IAAI,CAAC;CACjB;AACD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACvD,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAAC;IAC9F,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;KACzE,CAAC,KAAK,OAAO,CAAC;IACf,mFAAmF;IACnF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,QAAQ,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC;KACpE,CAAC,GAAG,SAAS,CAAC;IACf,QAAQ,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,qBAAqB,GAAG,SAAS,CAAC;IAC9E;;;;;;;OAOG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACpD,OAAO,EAAE,qBAAqB,CAAC;QAAC,iBAAiB,EAAE,OAAO,CAAC;QAC3D,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;QAAC,SAAS,EAAE,qBAAqB,CAAC;KAC/E,CAAC,KAAK,2BAA2B,GAAG,OAAO,CAAC;CAC9C;AACD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AACD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AACD,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,GAAG,QAAQ,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7G,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC,CAAC;IAChF,0EAA0E;IAC1E,iBAAiB,IAAI,OAAO,CAAC;CAC9B;AA2BD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,qBAAqB,GAAG,uBAAuB,CAiMrG"}
|
|
@@ -0,0 +1,347 @@
|
|
|
1
|
+
/** Δ-L7a: host-owned disclosure grants, independent of collection/read access.
|
|
2
|
+
* Evidence comes only from a host port (including cache provenance), never
|
|
3
|
+
* directly from an MCP caller. No content or old snapshot is retained; grants
|
|
4
|
+
* and their issuing proofs live only in memory and never resume after restart.
|
|
5
|
+
*/
|
|
6
|
+
import { randomUUID } from "node:crypto";
|
|
7
|
+
import { refuse, } from "./live-auth.js";
|
|
8
|
+
export const DISCLOSURE_SURFACES = ["prompt", "tool", "mcp", "summary", "symbol", "local-commit", "citation", "context"];
|
|
9
|
+
const validPath = (path) => typeof path === "string" && path.length > 0
|
|
10
|
+
&& !/[\\\0:*?\[\]{}]/.test(path) && path.split("/").every((p) => p !== "" && p !== "." && p !== "..");
|
|
11
|
+
const validProvider = (v) => typeof v === "string" && /^[a-z0-9][a-z0-9._:/-]{0,199}$/.test(v);
|
|
12
|
+
// Superset of engram e417c33c content-policy.ts L4b-2. Keep every normative
|
|
13
|
+
// secret rule, basename/prefix/suffix/segment, and secret-bearing path bytes.
|
|
14
|
+
const protectedPath = (p) => containsKnownSecret(p) || p.split("/").some((part) => /^\.env/i.test(part) || /^\.ssh$/i.test(part) || /^(id_(rsa|dsa|ecdsa|ed25519)|credentials)(\.|$)/i.test(part)
|
|
15
|
+
|| /^(secret|secrets|secrets\.json|service-account\.json)$/i.test(part) || /\.(pem|key|p12|pfx)$/i.test(part));
|
|
16
|
+
// Defence in depth; the current L4b policy remains mandatory. This cannot
|
|
17
|
+
// establish the absence of unknown secrets, nor override withheld provenance.
|
|
18
|
+
const containsKnownSecret = (text) => /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----|gh[pousr]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,}|AKIA[A-Z0-9]{16}|sk-[A-Za-z0-9_-]{20,}/.test(text)
|
|
19
|
+
|| /(password|passwd|pwd|secret|api[_-]?key)\s*[:=]\s*\S+/i.test(text)
|
|
20
|
+
|| /:\/\/[^/\s:]+:[^/\s@]+@/.test(text);
|
|
21
|
+
const copy = (value) => JSON.parse(JSON.stringify(value));
|
|
22
|
+
export function createLiveDisclosureAuthority(options) {
|
|
23
|
+
const readNow = options.now ?? Date.now;
|
|
24
|
+
const now = () => { try {
|
|
25
|
+
return readNow();
|
|
26
|
+
}
|
|
27
|
+
catch {
|
|
28
|
+
return NaN;
|
|
29
|
+
} };
|
|
30
|
+
const grants = new Map();
|
|
31
|
+
const record = (action, grantId, reason, snapshotTime) => {
|
|
32
|
+
try {
|
|
33
|
+
if (!options.audit)
|
|
34
|
+
return false;
|
|
35
|
+
const at = snapshotTime ?? now();
|
|
36
|
+
if (!Number.isSafeInteger(at))
|
|
37
|
+
return false;
|
|
38
|
+
const receipt = options.audit(Object.freeze({ eventId: randomUUID(), at, action,
|
|
39
|
+
...(grantId === undefined ? {} : { grantId }), ...(reason === undefined ? {} : { reason }) }));
|
|
40
|
+
if (receipt !== undefined) {
|
|
41
|
+
// A void-typed async callback is legal TypeScript but cannot attest a
|
|
42
|
+
// durable synchronous append. Contain its rejection as well.
|
|
43
|
+
if (receipt instanceof Promise)
|
|
44
|
+
void receipt.catch(() => { });
|
|
45
|
+
return false;
|
|
46
|
+
}
|
|
47
|
+
return true;
|
|
48
|
+
}
|
|
49
|
+
catch {
|
|
50
|
+
return false;
|
|
51
|
+
}
|
|
52
|
+
};
|
|
53
|
+
const deny = (reason, requestedId) => record("refuse", requestedId !== undefined && grants.has(requestedId) ? requestedId : undefined, reason)
|
|
54
|
+
? refuse(reason) : refuse("audit-unavailable");
|
|
55
|
+
const authorize = (capability, operation, repositoryId) => {
|
|
56
|
+
try {
|
|
57
|
+
return options.auth.authorize(capability, operation, repositoryId);
|
|
58
|
+
}
|
|
59
|
+
catch {
|
|
60
|
+
return refuse("authority-unavailable");
|
|
61
|
+
}
|
|
62
|
+
};
|
|
63
|
+
const check = (r) => {
|
|
64
|
+
const auth = authorize(r.capability, "emit", r.repositoryId);
|
|
65
|
+
if (!auth.ok)
|
|
66
|
+
return auth;
|
|
67
|
+
const g = r.grantId === undefined ? undefined : grants.get(r.grantId);
|
|
68
|
+
if (!g)
|
|
69
|
+
return refuse("grant-required");
|
|
70
|
+
const issuer = authorize(g.issuingCapability, "grant", r.repositoryId);
|
|
71
|
+
if (!issuer.ok)
|
|
72
|
+
return issuer;
|
|
73
|
+
if (g.claims.repositoryId !== r.repositoryId || g.claims.principal !== auth.claims.principal
|
|
74
|
+
|| g.claims.hostId !== auth.claims.hostId || g.claims.tenant !== auth.claims.tenant
|
|
75
|
+
|| g.claims.declarationId !== auth.claims.declarationId || g.claims.declarationRevision !== auth.claims.declarationRevision
|
|
76
|
+
|| JSON.stringify(g.claims.authorizedRoots) !== JSON.stringify(auth.claims.authorizedRoots))
|
|
77
|
+
return refuse("scope-mismatch");
|
|
78
|
+
if (g.claims.policyVersion !== auth.claims.policyVersion)
|
|
79
|
+
return refuse("policy-changed");
|
|
80
|
+
if (g.revoked)
|
|
81
|
+
return refuse("grant-revoked");
|
|
82
|
+
const time = now();
|
|
83
|
+
if (!Number.isSafeInteger(time))
|
|
84
|
+
return refuse("authority-unavailable");
|
|
85
|
+
if (time >= g.expiresAt || time < g.startsAt)
|
|
86
|
+
return refuse("grant-expired");
|
|
87
|
+
if (g.providerId !== r.providerId)
|
|
88
|
+
return refuse("provider-mismatch");
|
|
89
|
+
try {
|
|
90
|
+
if (options.readAccess?.(Object.freeze({ principal: auth.claims.principal, repositoryId: r.repositoryId,
|
|
91
|
+
evidenceIds: Object.freeze([...r.evidenceIds]) })) !== true)
|
|
92
|
+
return refuse("read-denied");
|
|
93
|
+
}
|
|
94
|
+
catch {
|
|
95
|
+
return refuse("read-denied");
|
|
96
|
+
}
|
|
97
|
+
const lateIssuer = authorize(g.issuingCapability, "grant", r.repositoryId);
|
|
98
|
+
if (!lateIssuer.ok)
|
|
99
|
+
return lateIssuer;
|
|
100
|
+
const latest = authorize(r.capability, "emit", r.repositoryId);
|
|
101
|
+
if (!latest.ok)
|
|
102
|
+
return latest;
|
|
103
|
+
if (g.revoked)
|
|
104
|
+
return refuse("grant-revoked");
|
|
105
|
+
const finalTime = now();
|
|
106
|
+
if (!Number.isSafeInteger(finalTime))
|
|
107
|
+
return refuse("authority-unavailable");
|
|
108
|
+
if (finalTime >= g.expiresAt || finalTime < g.startsAt)
|
|
109
|
+
return refuse("grant-expired");
|
|
110
|
+
return { ok: true, grant: g, claims: latest.claims, stateRevision: latest.state.stateRevision };
|
|
111
|
+
};
|
|
112
|
+
return {
|
|
113
|
+
grant(input) {
|
|
114
|
+
let r;
|
|
115
|
+
try {
|
|
116
|
+
r = copy(input);
|
|
117
|
+
}
|
|
118
|
+
catch {
|
|
119
|
+
return deny("invalid-request");
|
|
120
|
+
}
|
|
121
|
+
if (!r || !validProvider(r.providerId) || !Number.isSafeInteger(r.expiresAt)
|
|
122
|
+
|| !r.scope || !Array.isArray(r.scope.paths) || r.scope.paths.length === 0 || !r.scope.paths.every(validPath)
|
|
123
|
+
|| !Array.isArray(r.scope.surfaces) || r.scope.surfaces.length === 0
|
|
124
|
+
|| !r.scope.surfaces.every((s) => DISCLOSURE_SURFACES.includes(s)))
|
|
125
|
+
return deny("invalid-request");
|
|
126
|
+
const auth = authorize(r.capability, "grant", r.repositoryId);
|
|
127
|
+
if (!auth.ok)
|
|
128
|
+
return deny(auth.reason);
|
|
129
|
+
const time = now();
|
|
130
|
+
if (!Number.isSafeInteger(time) || r.expiresAt <= time || r.expiresAt > auth.claims.expiresAt)
|
|
131
|
+
return deny("invalid-request");
|
|
132
|
+
const id = randomUUID();
|
|
133
|
+
const g = { issuingCapability: r.capability, claims: copy(auth.claims), providerId: r.providerId,
|
|
134
|
+
startsAt: time, expiresAt: r.expiresAt,
|
|
135
|
+
scope: { paths: Object.freeze([...r.scope.paths]), surfaces: Object.freeze([...r.scope.surfaces]) }, revoked: false };
|
|
136
|
+
grants.set(id, g);
|
|
137
|
+
if (!record("grant", id)) {
|
|
138
|
+
grants.delete(id);
|
|
139
|
+
return refuse("audit-unavailable");
|
|
140
|
+
}
|
|
141
|
+
return Object.freeze({ ok: true, grantId: id, expiresAt: g.expiresAt });
|
|
142
|
+
},
|
|
143
|
+
revoke(capability, id) {
|
|
144
|
+
const auth = authorize(capability, "revoke");
|
|
145
|
+
if (!auth.ok)
|
|
146
|
+
return deny(auth.reason, id);
|
|
147
|
+
const g = grants.get(id);
|
|
148
|
+
if (!g)
|
|
149
|
+
return deny("grant-required");
|
|
150
|
+
if (auth.claims.repositoryId !== g.claims.repositoryId || auth.claims.principal !== g.claims.principal || auth.claims.hostId !== g.claims.hostId
|
|
151
|
+
|| auth.claims.tenant !== g.claims.tenant)
|
|
152
|
+
return deny("scope-mismatch", id);
|
|
153
|
+
// Revocation takes effect even if its audit sink has failed.
|
|
154
|
+
g.revoked = true;
|
|
155
|
+
return record("revoke", id) ? Object.freeze({ ok: true }) : refuse("audit-unavailable");
|
|
156
|
+
},
|
|
157
|
+
async emit(input) {
|
|
158
|
+
let r;
|
|
159
|
+
try {
|
|
160
|
+
r = copy(input);
|
|
161
|
+
}
|
|
162
|
+
catch {
|
|
163
|
+
return deny("invalid-request");
|
|
164
|
+
}
|
|
165
|
+
const reject = (reason) => deny(reason, r?.grantId);
|
|
166
|
+
if (!r || !Array.isArray(r.evidenceIds) || r.evidenceIds.length === 0
|
|
167
|
+
|| r.evidenceIds.some((id) => typeof id !== "string" || id.length === 0))
|
|
168
|
+
return reject("invalid-request");
|
|
169
|
+
Object.freeze(r.evidenceIds);
|
|
170
|
+
Object.freeze(r);
|
|
171
|
+
const permitted = check(r);
|
|
172
|
+
if (!permitted.ok)
|
|
173
|
+
return reject(permitted.reason);
|
|
174
|
+
let evidence;
|
|
175
|
+
try {
|
|
176
|
+
evidence = copy(await options.loadEvidence(Object.freeze([...r.evidenceIds])));
|
|
177
|
+
}
|
|
178
|
+
catch {
|
|
179
|
+
return reject("evidence-unavailable");
|
|
180
|
+
}
|
|
181
|
+
// Freeze evidence before any policy/transport callback can mutate it.
|
|
182
|
+
try {
|
|
183
|
+
if (!Array.isArray(evidence) || evidence.length === 0)
|
|
184
|
+
return reject("evidence-unavailable");
|
|
185
|
+
for (const e of evidence) {
|
|
186
|
+
if (!e || !r.evidenceIds.includes(e.evidenceId) || typeof e.text !== "string" || typeof e.excluded !== "boolean"
|
|
187
|
+
|| !Array.isArray(e.originPaths) || e.originPaths.length === 0 || !e.originPaths.every(validPath))
|
|
188
|
+
return reject("evidence-unavailable");
|
|
189
|
+
Object.freeze(e.originPaths);
|
|
190
|
+
Object.freeze(e);
|
|
191
|
+
}
|
|
192
|
+
if (r.evidenceIds.some(id => !evidence.some(e => e.evidenceId === id)))
|
|
193
|
+
return reject("evidence-unavailable");
|
|
194
|
+
Object.freeze(evidence);
|
|
195
|
+
}
|
|
196
|
+
catch {
|
|
197
|
+
return reject("evidence-unavailable");
|
|
198
|
+
}
|
|
199
|
+
const screen = () => {
|
|
200
|
+
const current = check(r);
|
|
201
|
+
if (!current.ok)
|
|
202
|
+
return current;
|
|
203
|
+
const g = current.grant;
|
|
204
|
+
const policy = options.contentPolicy?.();
|
|
205
|
+
if (!policy || typeof policy.allows !== "function")
|
|
206
|
+
return refuse("policy-unavailable");
|
|
207
|
+
if (policy.version !== g.claims.policyVersion)
|
|
208
|
+
return refuse("policy-changed");
|
|
209
|
+
for (const e of evidence) {
|
|
210
|
+
if (e.repositoryId !== r.repositoryId || e.declarationId !== g.claims.declarationId
|
|
211
|
+
|| e.declarationRevision !== g.claims.declarationRevision)
|
|
212
|
+
return refuse("scope-mismatch");
|
|
213
|
+
if (e.policyVersion !== g.claims.policyVersion)
|
|
214
|
+
return refuse("policy-changed");
|
|
215
|
+
if (e.stateRevision !== current.stateRevision)
|
|
216
|
+
return refuse("stale-evidence");
|
|
217
|
+
if (!g.scope.surfaces.includes(e.surface) || e.originPaths.some((p) => !g.scope.paths.includes(p)))
|
|
218
|
+
return refuse("out-of-scope");
|
|
219
|
+
if (e.excluded || e.originPaths.some(protectedPath) || containsKnownSecret(e.text) || policy.allows(e) !== true)
|
|
220
|
+
return refuse("secret-excluded");
|
|
221
|
+
}
|
|
222
|
+
const text = evidence.map((e) => e.text).join("");
|
|
223
|
+
if (containsKnownSecret(text) || policy.allows(Object.freeze({ ...evidence[0], text,
|
|
224
|
+
originPaths: Object.freeze([...new Set(evidence.flatMap(e => e.originPaths))]) })) !== true)
|
|
225
|
+
return refuse("secret-excluded");
|
|
226
|
+
return undefined;
|
|
227
|
+
};
|
|
228
|
+
try {
|
|
229
|
+
const refusal = screen();
|
|
230
|
+
if (refusal)
|
|
231
|
+
return reject(refusal.reason);
|
|
232
|
+
}
|
|
233
|
+
catch {
|
|
234
|
+
return reject("policy-unavailable");
|
|
235
|
+
}
|
|
236
|
+
let transport;
|
|
237
|
+
try {
|
|
238
|
+
transport = options.transport(r.providerId);
|
|
239
|
+
if (!transport || transport.providerId !== r.providerId || typeof transport.send !== "function")
|
|
240
|
+
return reject("provider-mismatch");
|
|
241
|
+
}
|
|
242
|
+
catch {
|
|
243
|
+
return reject("transport-failed");
|
|
244
|
+
}
|
|
245
|
+
// Reordering mutable callbacks cannot make the decision atomic.
|
|
246
|
+
// Require a host snapshot lease; final validation uses data only.
|
|
247
|
+
if (!options.acquireEmissionSnapshot)
|
|
248
|
+
return reject("authority-unavailable");
|
|
249
|
+
let lease;
|
|
250
|
+
try {
|
|
251
|
+
const acquired = options.acquireEmissionSnapshot(Object.freeze({ request: r,
|
|
252
|
+
issuingCapability: permitted.grant.issuingCapability, evidence, transport }));
|
|
253
|
+
if ("ok" in acquired)
|
|
254
|
+
return reject(acquired.reason);
|
|
255
|
+
lease = acquired;
|
|
256
|
+
}
|
|
257
|
+
catch {
|
|
258
|
+
return reject("authority-unavailable");
|
|
259
|
+
}
|
|
260
|
+
let pending;
|
|
261
|
+
let releaseFailed = false;
|
|
262
|
+
try {
|
|
263
|
+
// Resolve accessors before validation, while the host fence is held.
|
|
264
|
+
const send = lease.send.bind(lease);
|
|
265
|
+
const snapshot = copy(lease.snapshot);
|
|
266
|
+
const auth = snapshot.authorization;
|
|
267
|
+
const issuer = snapshot.issuerAuthorization;
|
|
268
|
+
if (!auth.ok)
|
|
269
|
+
return reject(auth.reason);
|
|
270
|
+
if (!issuer.ok)
|
|
271
|
+
return reject(issuer.reason);
|
|
272
|
+
const g = permitted.grant;
|
|
273
|
+
if (auth.claims.id !== permitted.claims.id || issuer.claims.id !== g.claims.id)
|
|
274
|
+
return reject("scope-mismatch");
|
|
275
|
+
// Bind both proofs and their states to this grant. No live authority,
|
|
276
|
+
// read, clock, policy or route callbacks run during this validation.
|
|
277
|
+
for (const verified of [auth, issuer]) {
|
|
278
|
+
for (const key of ["principal", "hostId", "tenant", "repositoryId", "declarationId", "declarationRevision"]) {
|
|
279
|
+
if (verified.claims[key] !== g.claims[key] || verified.state[key] !== g.claims[key])
|
|
280
|
+
return reject("scope-mismatch");
|
|
281
|
+
}
|
|
282
|
+
if (JSON.stringify(verified.claims.authorizedRoots) !== JSON.stringify(g.claims.authorizedRoots)
|
|
283
|
+
|| JSON.stringify(verified.state.authorizedRoots) !== JSON.stringify(g.claims.authorizedRoots))
|
|
284
|
+
return reject("scope-mismatch");
|
|
285
|
+
if (verified.claims.policyVersion !== g.claims.policyVersion || verified.state.policyVersion !== g.claims.policyVersion)
|
|
286
|
+
return reject("policy-changed");
|
|
287
|
+
if (snapshot.at < verified.claims.issuedAt || snapshot.at >= verified.claims.expiresAt)
|
|
288
|
+
return reject("capability-expired");
|
|
289
|
+
}
|
|
290
|
+
if (g.revoked)
|
|
291
|
+
return reject("grant-revoked");
|
|
292
|
+
if (!Number.isSafeInteger(snapshot.at))
|
|
293
|
+
return reject("authority-unavailable");
|
|
294
|
+
if (snapshot.at < g.startsAt || snapshot.at >= g.expiresAt)
|
|
295
|
+
return reject("grant-expired");
|
|
296
|
+
if (snapshot.readAllowed !== true)
|
|
297
|
+
return reject("read-denied");
|
|
298
|
+
if (snapshot.providerId !== r.providerId)
|
|
299
|
+
return reject("provider-mismatch");
|
|
300
|
+
if (evidence.some(e => e.stateRevision !== auth.state.stateRevision || e.stateRevision !== issuer.state.stateRevision))
|
|
301
|
+
return reject("stale-evidence");
|
|
302
|
+
const policy = snapshot.policy;
|
|
303
|
+
if (!policy)
|
|
304
|
+
return reject("policy-unavailable");
|
|
305
|
+
if (policy.version !== g.claims.policyVersion)
|
|
306
|
+
return reject("policy-changed");
|
|
307
|
+
if (policy.allowed.length !== evidence.length || policy.allowed.some(allowed => allowed !== true)
|
|
308
|
+
|| policy.compositionAllowed !== true)
|
|
309
|
+
return reject("secret-excluded");
|
|
310
|
+
// All route/policy/state checks precede the receipt. The host fence
|
|
311
|
+
// covers audit; a reentrant revocation of our local grant still wins.
|
|
312
|
+
if (!record("emit-attempt", r.grantId, undefined, snapshot.at))
|
|
313
|
+
return refuse("audit-unavailable");
|
|
314
|
+
if (g.revoked)
|
|
315
|
+
return reject("grant-revoked");
|
|
316
|
+
try {
|
|
317
|
+
pending = send(Object.freeze(evidence.map(e => e.text)));
|
|
318
|
+
}
|
|
319
|
+
catch {
|
|
320
|
+
return reject("transport-failed");
|
|
321
|
+
}
|
|
322
|
+
}
|
|
323
|
+
catch {
|
|
324
|
+
return reject("authority-unavailable");
|
|
325
|
+
}
|
|
326
|
+
finally {
|
|
327
|
+
try {
|
|
328
|
+
lease.release();
|
|
329
|
+
}
|
|
330
|
+
catch {
|
|
331
|
+
releaseFailed = true;
|
|
332
|
+
}
|
|
333
|
+
}
|
|
334
|
+
try {
|
|
335
|
+
await pending;
|
|
336
|
+
}
|
|
337
|
+
catch {
|
|
338
|
+
return reject("transport-failed");
|
|
339
|
+
}
|
|
340
|
+
if (releaseFailed)
|
|
341
|
+
return reject("authority-unavailable");
|
|
342
|
+
return Object.freeze({ ok: true });
|
|
343
|
+
},
|
|
344
|
+
policyUnavailable: () => deny("policy-unavailable"),
|
|
345
|
+
};
|
|
346
|
+
}
|
|
347
|
+
//# sourceMappingURL=live-disclosure.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"live-disclosure.js","sourceRoot":"","sources":["../../src/gateway-host/live-disclosure.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,MAAM,GAEP,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAkHlI,MAAM,SAAS,GAAG,CAAC,IAAa,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;OAC3F,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;AACxG,MAAM,aAAa,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrH,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,aAAa,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACjG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC;OAC3G,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjH,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAW,EAAE,CACpD,sIAAsI,CAAC,IAAI,CAAC,IAAI,CAAC;OAC9I,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC;OACnE,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,MAAM,IAAI,GAAG,CAAI,KAAQ,EAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAExE,MAAM,UAAU,6BAA6B,CAAC,OAA8B;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,GAAW,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,MAAsC,EAAE,OAAgB,EAAE,MAA0B,EAAE,YAAqB,EAAW,EAAE;QACtI,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACjC,MAAM,EAAE,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9E,MAAM,OAAO,GAAY,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM;gBACtF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACjG,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,sEAAsE;gBACtE,6DAA6D;gBAC7D,IAAI,OAAO,YAAY,OAAO;oBAAE,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC7D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAyB,EAAE,WAAoB,EAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,EACxF,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC;QACvF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,UAAmB,EAAE,SAAsC,EAAE,YAAqB,EAA+B,EAAE;QACpI,IAAI,CAAC;YAAC,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAAC,CAAC;QAC3E,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAAC,CAAC;IACnD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAwB,EAA6F,EAAE;QACpI,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS;eACvF,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM;eAChF,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,KAAK,IAAI,CAAC,MAAM,CAAC,mBAAmB;eACxH,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/H,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1F,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC5F,IAAI,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,GAAG,CAAC,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY;gBACrG,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9F,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QAAC,CAAC;QACzC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC7E,IAAI,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,GAAG,CAAC,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IAClG,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,KAAK;YACT,IAAI,CAAyB,CAAC;YAC9B,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YAClE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;mBACvE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;mBAC1G,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;mBACjE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACrG,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9H,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,CAAC,GAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;gBACrG,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACxH,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAAC,CAAC;YACpF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,UAAU,EAAE,EAAE;YACnB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM;mBAC3I,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YAC/E,6DAA6D;YAC7D,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;YACjB,OAAO,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,IAAI,CAAwB,CAAC;YAC7B,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YAClE,MAAM,MAAM,GAAG,CAAC,MAAyB,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YAChF,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;mBAChE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC7G,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/E,IAAI,QAA2C,CAAC;YAChD,IAAI,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACvF,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAAC,CAAC;YAChD,sEAAsE;YACtE,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC7F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS;2BAC3G,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;wBAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;oBAC3I,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;oBAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjD,CAAC;gBACD,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;oBAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC9G,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAAC,CAAC;YAClD,MAAM,MAAM,GAAG,GAAwB,EAAE;gBACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,EAAE;oBAAE,OAAO,OAAO,CAAC;gBAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;gBACxB,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU;oBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACxF,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC/E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;2BAC9E,CAAC,CAAC,mBAAmB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAC7F,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAChF,IAAI,CAAC,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAC/E,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;wBAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;oBAC1I,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBACpJ,CAAC;gBACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClD,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAE,EAAE,IAAI;oBAClF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;oBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAChI,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;gBAAC,IAAI,OAAO;oBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAAC,CAAC;YAChD,IAAI,SAA4C,CAAC;YACjD,IAAI,CAAC;gBACH,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC5C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtI,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAAC,CAAC;YAC9C,gEAAgE;YAChE,kEAAkE;YAClE,IAAI,CAAC,OAAO,CAAC,uBAAuB;gBAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC7E,IAAI,KAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;oBACzE,iBAAiB,EAAE,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAChF,IAAI,IAAI,IAAI,QAAQ;oBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,KAAK,GAAG,QAAQ,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,CAAC;YACnD,IAAI,OAA6B,CAAC;YAClC,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC;gBACH,qEAAqE;gBACrE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;gBACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,mBAAmB,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;gBAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAChH,sEAAsE;gBACtE,qEAAqE;gBACrE,KAAK,MAAM,QAAQ,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;oBACtC,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,qBAAqB,CAAU,EAAE,CAAC;wBACrH,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;4BAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBACvH,CAAC;oBACD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;2BAC3F,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAClI,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBACzJ,IAAI,QAAQ,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS;wBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC9H,CAAC;gBACD,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBAC/E,IAAI,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS;oBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC3F,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI;oBAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;gBAChE,IAAI,QAAQ,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;oBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBAC7E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,KAAK,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACxJ,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC/B,IAAI,CAAC,MAAM;oBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC/E,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;uBAC5F,MAAM,CAAC,kBAAkB,KAAK,IAAI;oBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC1E,oEAAoE;gBACpE,sEAAsE;gBACtE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBACnG,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC9C,IAAI,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACjE,MAAM,CAAC;oBAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,CAAC;oBAC3C,CAAC;gBAAC,IAAI,CAAC;oBAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,aAAa,GAAG,IAAI,CAAC;gBAAC,CAAC;YAAC,CAAC;YACpE,IAAI,CAAC;gBAAC,MAAM,OAAO,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAAC,CAAC;YACnE,IAAI,aAAa;gBAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC;KACpD,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import type { GithubPrTransportPort } from "../vendor/engram-live/pr-sync.js";
|
|
2
|
+
export interface LiveGithubOptions {
|
|
3
|
+
readonly ghPath: string;
|
|
4
|
+
readonly hostDirectory: string;
|
|
5
|
+
readonly timeoutMs?: number;
|
|
6
|
+
readonly maxConcurrent?: number;
|
|
7
|
+
readonly now?: () => number;
|
|
8
|
+
}
|
|
9
|
+
/** The caller owns scheduling/durable backoff; a single call never sleeps. */
|
|
10
|
+
export declare function createLiveGithubTransport(options: LiveGithubOptions): GithubPrTransportPort;
|
|
11
|
+
//# sourceMappingURL=live-github.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"live-github.d.ts","sourceRoot":"","sources":["../../src/gateway-host/live-github.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,qBAAqB,EAAoC,MAAM,kCAAkC,CAAC;AAEhH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AA8KD,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,iBAAiB,GAAG,qBAAqB,CAyH3F"}
|