@trusty-squire/mcp 1.0.49 → 1.1.0-rc.1

package/dist/bot/payment-hpke.js

@@ -0,0 +1,59 @@
+// MUST stay wire-compatible with packages/vault/src/hpke.ts (the browser SEALs with
+// that module; this operator OPENs here). Same pinned suite + same enc‖ct bundle layout
+// (32-byte X25519 enc prefix). Deliberately a local copy, NOT an import of
+// @trusty-squire/vault/hpke: the mcp package is bundled + published to npm, and importing
+// the vault package would drag @prisma/client (its root export) into the tarball. If you
+// change the suite or bundle format in one file, change the other.
+import { Aes256Gcm, CipherSuite, DhkemX25519HkdfSha256, HkdfSha256 } from "@hpke/core";
+const suite = new CipherSuite({
+    kem: new DhkemX25519HkdfSha256(),
+    kdf: new HkdfSha256(),
+    aead: new Aes256Gcm(),
+});
+function toBase64Url(bytes) {
+    return Buffer.from(bytes).toString("base64url");
+}
+function fromBase64Url(value) {
+    if (!/^[A-Za-z0-9_-]+$/.test(value))
+        throw new Error("invalid_base64url");
+    return new Uint8Array(Buffer.from(value, "base64url"));
+}
+export async function generateOperatorKeypair() {
+    const keypair = await suite.kem.generateKeyPair();
+    const [publicKey, serializedPrivateKey] = await Promise.all([
+        suite.kem.serializePublicKey(keypair.publicKey),
+        suite.kem.serializePrivateKey(keypair.privateKey),
+    ]);
+    const privateKeyBytes = new Uint8Array(serializedPrivateKey);
+    try {
+        return {
+            publicKey: toBase64Url(new Uint8Array(publicKey)),
+            privateKey: toBase64Url(privateKeyBytes),
+        };
+    }
+    finally {
+        privateKeyBytes.fill(0);
+    }
+}
+export async function sealToRecipient(recipientPublicKey, plaintext, aad) {
+    const publicKey = await suite.kem.deserializePublicKey(fromBase64Url(recipientPublicKey));
+    const { enc, ct } = await suite.seal({ recipientPublicKey: publicKey }, plaintext, aad);
+    const bundle = new Uint8Array(enc.byteLength + ct.byteLength);
+    bundle.set(new Uint8Array(enc));
+    bundle.set(new Uint8Array(ct), enc.byteLength);
+    return toBase64Url(bundle);
+}
+export async function openSealed(privateKey, bundle, aad) {
+    const privateKeyBytes = fromBase64Url(privateKey);
+    const bytes = fromBase64Url(bundle);
+    try {
+        const recipientKey = await suite.kem.deserializePrivateKey(privateKeyBytes);
+        const plaintext = await suite.open({ recipientKey, enc: bytes.slice(0, 32) }, bytes.slice(32), aad);
+        return new Uint8Array(plaintext);
+    }
+    finally {
+        privateKeyBytes.fill(0);
+        bytes.fill(0);
+    }
+}
+//# sourceMappingURL=payment-hpke.js.map

package/dist/bot/payment-hpke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-hpke.js","sourceRoot":"","sources":["../../src/bot/payment-hpke.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wFAAwF;AACxF,2EAA2E;AAC3E,0FAA0F;AAC1F,yFAAyF;AACzF,mEAAmE;AACnE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAOvF,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;IAC5B,GAAG,EAAE,IAAI,qBAAqB,EAAE;IAChC,GAAG,EAAE,IAAI,UAAU,EAAE;IACrB,IAAI,EAAE,IAAI,SAAS,EAAE;CACtB,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC1E,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;IAClD,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC;QAC/C,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC;KAClD,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,OAAO;YACL,SAAS,EAAE,WAAW,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;YACjD,UAAU,EAAE,WAAW,CAAC,eAAe,CAAC;SACzC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,kBAA0B,EAC1B,SAAqB,EACrB,GAAe;IAEf,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC1F,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAkB,EAClB,MAAc,EACd,GAAe;IAEf,MAAM,eAAe,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAChC,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EACzC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EACf,GAAG,CACJ,CAAC;QACF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;YAAS,CAAC;QACT,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/bot/provision-session.d.ts

@@ -1,4 +1,4 @@
-import { type InteractiveElement } from "./browser.js";
+import { BrowserController, type InteractiveElement } from "./browser.js";
 import { type TwoCaptchaVaultProxy } from "./captcha-solver-2captcha.js";
 import type { ApiClient } from "../api-client.js";
 import { type Postcondition, type PostconditionResult } from "./operator-recipe.js";
@@ -171,6 +171,7 @@ export interface SlotHandle {
 export declare function stashSecretSlot(sessionId: string, slot: string, value: string): SlotHandle;
 export declare function readSecretSlotValue(sessionId: string, slot: string): string;
 export declare function currentProvisionUrl(sessionId: string): string;
+export declare function activeProvisionBrowser(): BrowserController;
 export declare function getSessionUserEmail(sessionId: string): string | null;
 export declare function generatePassword(length?: number): string;
 export type ObserveDetail = "none" | "compact" | "full";

package/dist/bot/provision-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provision-session.d.ts","sourceRoot":"","sources":["../../src/bot/provision-session.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AASlD,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EAKzB,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAS3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAmB5D,MAAM,WAAW,eAAe;IAI9B,GAAG,EAAE,MAAM,CAAC;IAGZ,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IAIZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAKzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGvB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,KAAK,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;QACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IAGZ,IAAI,CAAC,EAAE,MAAM,CAAC;IAGd,IAAI,EAAE,MAAM,CAAC;IAGb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,MAAM,CAAC,EAAE,aAAa,CAAC;IAGvB,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAI5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IAIzB,QAAQ,CAAC,EAAE,aAAa,CAAC;IAIzB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAK9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAIjC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAG9B;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAEvC;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GAIxB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAIpC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAGrD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,KAAK,CAAA;CAAE,GAKhE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAQrD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;CACpB;AAsID,wBAAgB,UAAU,CAAC,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAYzD;AAMD,wBAAgB,eAAe,CAAC,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAa9D;AAED,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,kBAAkB,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,SAAI,GACV,MAAM,CAER;AAgBD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,UAAU,EAAE,MAAM,GACjB,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAUjC;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAI7C,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM;IAJpC,QAAQ,CAAC,IAAI,eAAe;gBAGjB,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM;CAOrC;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IAIpD,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE;IAJxC,QAAQ,CAAC,IAAI,sBAAsB;gBAGxB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,SAAS,MAAM,EAAE;CAOzC;AAaD,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,MAAM,GACzB,kBAAkB,GAAG,IAAI,CAoD3B;AAiBD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI9D;AAKD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAejF;AAiBD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAmBnF;AAiDD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU/D;AAyBD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU/D;AAMD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQ/D;AAOD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CASlE;AAMD,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOvE;AAMD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU/D;AAeD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAsFhF;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,eAAe,GACtB,MAAM,GAAG,IAAI,CAyBf;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,QAAQ,EAAE,MAAM,EAChB,eAAe,GAAE,WAAW,CAAC,MAAM,CAAqB,GACvD,aAAa,GAAG,SAAS,CA8C3B;AA2CD,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,UAAU,EAAE,MAAM,EAClB,KAAK,SAAQ,EACb,eAAe,GAAE,WAAW,CAAC,MAAM,CAAqB,GACvD,qBAAqB,GAAG,SAAS,CAwDnC;AAgCD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGpD;AAsBD,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAKlB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAGtC,IAAI,CAAC,EAAE,MAAM,CAAC;IAId,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAM9B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAG3B,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB;AAOD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;CACnB;AACD,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,SAAS,eAAe,EAAE,GACxC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,gBAAgB,CAAA;CAAE,CAe5D;AAwBD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAkFpF;AAED,wBAAsB,OAAO,CAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,SAAS,GAAG,MAAkB,GACrC,OAAO,CAAC,WAAW,CAAC,CAItB;AAKD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAKnE;AAID,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMrD;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,CAS1F;AAKD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAI7D;AAKD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIpE;AAWD,wBAAgB,gBAAgB,CAAC,MAAM,SAAK,GAAG,MAAM,CAWpD;AAWD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAMxD,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,kBAAkB,EACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,GAC1B,eAAe,CAkBjB;AAmED,wBAAsB,GAAG,CACvB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,aAAyB,GAChC,OAAO,CAAC,WAAW,CAAC,CA0JtB;AAeD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAUD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAG3E;AA2DD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM3D;AAUD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,eAAe,EACvB,EAAE,EAAE,kBAAkB,GAAG,IAAI,GAC5B,cAAc,GAAG,IAAI,CAmBvB;AA8CD,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB9D;AAID,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAGD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,oBAAoB,CAQvB;AAKD,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,GAAG,MAAM,GAC1B,oBAAoB,GAAG,IAAI,CAa7B;AAkBD,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAE,GACjE,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAqB3E;AAmBD,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CAiB9B;AAID,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IAIZ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGpC,eAAe,EAAE,MAAM,CAAC;IAKxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAgCD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUrE;AAOD,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAwC,GAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiCxB;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAcjF;AAMD,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA4IlF;AAOD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,gBAAgB,GAAG,cAAc,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAGhB,OAAO,EAAE,OAAO,CAAC;IAEjB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAOD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,SAAS,GAAG,oBAAoB,CA2B7E;AAqFD,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAmG/E;AASD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IAGf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAGpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAGpB,UAAU,CAAC,EAAE,aAAa,CAAC;IAI3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,UAAU,CAAC;IAKlB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IAEvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAWD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAW9C;AAOD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D;AAMD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,UAAU,GAAE,MAAM,GAAG,IAAW,GAC/B,kBAAkB,CAepB;AAQD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAazE;AASD,wBAAgB,4BAA4B,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAQpE;AAED,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,kBAAkB,CAAC,CAqF7B;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,IAAI,CAAC;CACd;AAED,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAQrF;AAGD,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ/D;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C"}
+{"version":3,"file":"provision-session.d.ts","sourceRoot":"","sources":["../../src/bot/provision-session.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAoB,KAAK,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAC3F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAMlD,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EAKzB,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAS3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAmB5D,MAAM,WAAW,eAAe;IAI9B,GAAG,EAAE,MAAM,CAAC;IAGZ,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IAIZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAKzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGvB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,KAAK,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;QACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IAGZ,IAAI,CAAC,EAAE,MAAM,CAAC;IAGd,IAAI,EAAE,MAAM,CAAC;IAGb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,MAAM,CAAC,EAAE,aAAa,CAAC;IAGvB,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAI5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IAIzB,QAAQ,CAAC,EAAE,aAAa,CAAC;IAIzB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAK9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAIjC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAG9B;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAEvC;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GAIxB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAIpC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAGrD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,KAAK,CAAA;CAAE,GAKhE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAQrD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;CACpB;AAoID,wBAAgB,UAAU,CAAC,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAYzD;AAMD,wBAAgB,eAAe,CAAC,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAa9D;AAED,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,kBAAkB,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,SAAI,GACV,MAAM,CAER;AAgBD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,UAAU,EAAE,MAAM,GACjB,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAUjC;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAI7C,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM;IAJpC,QAAQ,CAAC,IAAI,eAAe;gBAGjB,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM;CAOrC;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IAIpD,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE;IAJxC,QAAQ,CAAC,IAAI,sBAAsB;gBAGxB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,SAAS,MAAM,EAAE;CAOzC;AAaD,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,MAAM,GACzB,kBAAkB,GAAG,IAAI,CAoD3B;AAiBD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI9D;AAKD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAejF;AAkCD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAkCnF;AAiDD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU/D;AAyBD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAc/D;AAMD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAY/D;AAOD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAWlE;AAMD,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAWvE;AAMD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU/D;AAeD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAsFhF;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,eAAe,GACtB,MAAM,GAAG,IAAI,CAyBf;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,QAAQ,EAAE,MAAM,EAChB,eAAe,GAAE,WAAW,CAAC,MAAM,CAAqB,GACvD,aAAa,GAAG,SAAS,CA8C3B;AAsCD,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,UAAU,EAAE,MAAM,EAClB,KAAK,SAAQ,EACb,eAAe,GAAE,WAAW,CAAC,MAAM,CAAqB,GACvD,qBAAqB,GAAG,SAAS,CA0DnC;AAgCD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGpD;AAwBD,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAKlB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAGtC,IAAI,CAAC,EAAE,MAAM,CAAC;IAId,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAM9B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAG3B,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB;AAOD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;CACnB;AACD,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,SAAS,eAAe,EAAE,GACxC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,gBAAgB,CAAA;CAAE,CAe5D;AAsBD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAkFpF;AAED,wBAAsB,OAAO,CAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,SAAS,GAAG,MAAkB,GACrC,OAAO,CAAC,WAAW,CAAC,CAItB;AAKD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAKnE;AAID,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMrD;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,CAS1F;AAKD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAI7D;AAKD,wBAAgB,sBAAsB,IAAI,iBAAiB,CAS1D;AAKD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIpE;AAWD,wBAAgB,gBAAgB,CAAC,MAAM,SAAK,GAAG,MAAM,CAWpD;AAWD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAMxD,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,kBAAkB,EACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,GAC1B,eAAe,CAkBjB;AAmED,wBAAsB,GAAG,CACvB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,aAAyB,GAChC,OAAO,CAAC,WAAW,CAAC,CAoKtB;AAeD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAUD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAG3E;AA0FD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM3D;AAUD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,eAAe,EACvB,EAAE,EAAE,kBAAkB,GAAG,IAAI,GAC5B,cAAc,GAAG,IAAI,CAwBvB;AA8CD,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB9D;AAID,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAGD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,oBAAoB,CAQvB;AAKD,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,GAAG,MAAM,GAC1B,oBAAoB,GAAG,IAAI,CAa7B;AAkBD,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAE,GACjE,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAwB3E;AAmBD,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CAmB9B;AAID,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IAIZ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGpC,eAAe,EAAE,MAAM,CAAC;IAKxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAgCD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUrE;AAOD,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAwC,GAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiCxB;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAcjF;AAMD,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA4IlF;AAOD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,gBAAgB,GAAG,cAAc,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAGhB,OAAO,EAAE,OAAO,CAAC;IAEjB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAOD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,SAAS,GAAG,oBAAoB,CA2B7E;AAmFD,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAoG/E;AASD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IAGf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAGpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAGpB,UAAU,CAAC,EAAE,aAAa,CAAC;IAI3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,UAAU,CAAC;IAKlB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IAEvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAWD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAW9C;AAOD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D;AAMD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,UAAU,GAAE,MAAM,GAAG,IAAW,GAC/B,kBAAkB,CAepB;AAQD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAazE;AASD,wBAAgB,4BAA4B,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAQpE;AAED,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,kBAAkB,CAAC,CAqF7B;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,IAAI,CAAC;CACd;AAED,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAQrF;AAGD,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ/D;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C"}

package/dist/bot/provision-session.js

@@ -17,10 +17,10 @@
 //    `finish`/extract path; the vault stays write-only.
 import { createHash, randomInt, randomUUID } from "node:crypto";
 import { BrowserController } from "./browser.js";
-import { TwoCaptchaSolver, } from "./captcha-solver-2captcha.js";
+import { TwoCaptchaSolver } from "./captcha-solver-2captcha.js";
 import { extractApiKeyFromText, isTruncatedCapture } from "./credential-text.js";
 import { pickVerificationLink } from "./email-verification.js";
-import { detectActiveProviderSessions, ensureOAuthSession, } from "./google-login.js";
+import { detectActiveProviderSessions, ensureOAuthSession } from "./google-login.js";
 import { loggedInEmail } from "./login-state.js";
 import { loginSessionGuidance } from "./skill-hint.js";
 import { checkSuccessSignal, isSingleUseUrl, writeRecipe, } from "./operator-recipe.js";
@@ -48,9 +48,7 @@ function hostStrings(session) {
 // scope must not silently over-grant a key's egress allow-list (Codex). The
 // vault unions these with the service-default + any agent-declared egress_hosts.
 function egressSeedHosts(session) {
-    return session.allowedHosts
-        .filter((e) => e.source !== "mid_session")
-        .map((e) => e.host);
+    return session.allowedHosts.filter((e) => e.source !== "mid_session").map((e) => e.host);
 }
 const sessions = new Map();
 const settle = (ms) => new Promise((r) => setTimeout(r, ms));
@@ -296,10 +294,27 @@ export function hostAllowed(url, allowedHosts) {
 // adding "co.uk" would green-light every *.co.uk. Small curated set (the ones
 // the operator surface realistically touches); not a full PSL.
 const TWO_LABEL_PUBLIC_SUFFIXES = new Set([
-    "co.uk", "org.uk", "gov.uk", "ac.uk", "com.au", "net.au", "org.au",
-    "co.jp", "co.nz", "co.in", "com.br", "co.za", "com.cn",
-    "github.io", "web.app", "firebaseapp.com", "pages.dev", "workers.dev",
-    "vercel.app", "netlify.app", "herokuapp.com",
+    "co.uk",
+    "org.uk",
+    "gov.uk",
+    "ac.uk",
+    "com.au",
+    "net.au",
+    "org.au",
+    "co.jp",
+    "co.nz",
+    "co.in",
+    "com.br",
+    "co.za",
+    "com.cn",
+    "github.io",
+    "web.app",
+    "firebaseapp.com",
+    "pages.dev",
+    "workers.dev",
+    "vercel.app",
+    "netlify.app",
+    "herokuapp.com",
 ]);
 // Validate an agent-declared allow_host host. Returns the normalized bare
 // hostname or an error string. Hardened (Codex): reject wildcards, ports,
@@ -311,9 +326,13 @@ export function validateAllowHost(raw) {
     if (v.length === 0 || v.length > 253)
         return { error: "host empty or too long" };
     if (/[/:@?#*\s]/.test(v))
-        return { error: "host must be a bare hostname (no scheme, port, path, wildcard, or whitespace)" };
+        return {
+            error: "host must be a bare hostname (no scheme, port, path, wildcard, or whitespace)",
+        };
     if (/[^a-z0-9.-]/.test(v))
-        return { error: "host has non-ASCII or invalid characters (punycode/unicode spoofing rejected)" };
+        return {
+            error: "host has non-ASCII or invalid characters (punycode/unicode spoofing rejected)",
+        };
     if (v.includes("xn--"))
         return { error: "punycode (xn--) hosts rejected — homograph-spoof risk" };
     if (v.startsWith(".") || v.endsWith(".") || v.includes(".."))
@@ -334,7 +353,9 @@ export function validateAllowHost(raw) {
     // Squire's own control plane is never a legitimate cross-host — refuse to
     // widen the operator browser into the vault UI / API (confused-deputy guard).
     if (isSquireControlPlaneHost(v))
-        return { error: "Squire's own control plane (the vault UI / API) is off-limits to the operator browser" };
+        return {
+            error: "Squire's own control plane (the vault UI / API) is off-limits to the operator browser",
+        };
     return { host: v };
 }
 function visibleModeMarkers(pageText) {
@@ -618,6 +639,8 @@ function roleForAccessibility(el) {
 // slot was typed into (tracked per-session in sealedFieldKeys).
 const SEALED_FIELD_PLACEHOLDER = "[sealed]";
 function isSealedFieldValue(el, sealed) {
+    if (el.sealed === true)
+        return true;
     if ((el.type ?? "").toLowerCase() === "password")
         return true;
     return elementTargetKeys(el).some((k) => sealed.has(k));
@@ -659,7 +682,9 @@ export function buildAccessibilitySnapshot(elements, generation, limit = 12000,
             const role = roleForAccessibility(el);
             const shownValue = presentFieldValue(el, sealedFieldKeys);
             const flags = [
-                el.value !== undefined && el.value !== null ? `value="${(shownValue ?? "").slice(0, 60)}"` : null,
+                el.value !== undefined && el.value !== null
+                    ? `value="${(shownValue ?? "").slice(0, 60)}"`
+                    : null,
                 el.checked !== undefined && el.checked !== null ? `checked=${el.checked}` : null,
                 el.href !== undefined && el.href !== null ? `href="${el.href.slice(0, 120)}"` : null,
                 el.topmost === false ? `occluded_by="${el.occludedBy ?? "unknown"}"` : null,
@@ -736,7 +761,11 @@ function widenAllowedHostsFromCurrentUrl(session) {
     // agent-declared host silently pull in a whole sibling tree (scope creep).
     if (session.allowedHosts.some((e) => e.source === "start" && baseDomain(e.host) === currentBase)) {
         session.allowedHosts.push({ host, source: "auto_widen" });
-        audit(session.id, "scope_widen", { host, source: "auto_widen", allowed_hosts: hostStrings(session) });
+        audit(session.id, "scope_widen", {
+            host,
+            source: "auto_widen",
+            allowed_hosts: hostStrings(session),
+        });
     }
 }
 export function googleSessionGate(liveProviders) {
@@ -912,6 +941,17 @@ export function currentProvisionUrl(sessionId) {
         throw new Error(`unknown provision session ${sessionId}`);
     return session.browser.currentUrl();
 }
+// operate_pay has a deliberately small input contract with no session id: it
+// acts on the one live operator checkout. Fail closed rather than guessing if
+// zero or multiple browser sessions exist.
+export function activeProvisionBrowser() {
+    if (sessions.size !== 1) {
+        throw new Error(sessions.size === 0
+            ? "operate_pay requires one active operate_start browser session"
+            : "operate_pay refused: multiple active browser sessions");
+    }
+    return sessions.values().next().value.browser;
+}
 // PR3c — the user's own email captured at login (the authoritative signup
 // address), or null when none was captured. The tool layer reads this to fill
 // username/password signups so the account is user-owned.
@@ -1119,7 +1159,11 @@ export async function act(sessionId, action, detail = "compact") {
             // Type the REAL value into the page. It crosses only browser↔page; the
             // value is never returned to the host and never logged.
             await browser.type(el.selector, value);
-            audit(sessionId, "type_secret", { slot: action.slot, target: action.target, host: registrableHost(browser.currentUrl()) });
+            audit(sessionId, "type_secret", {
+                slot: action.slot,
+                target: action.target,
+                host: registrableHost(browser.currentUrl()),
+            });
             break;
         }
         case "click":
@@ -1174,7 +1218,13 @@ export async function act(sessionId, action, detail = "compact") {
     // so multi-field fills don't each echo the page. The host must call
     // operate_observe before its next ref-targeted act (refs aren't refreshed here).
     if (detail === "none") {
-        return { session_id: session.id, url: browser.currentUrl(), text: "", elements: [], observed: "none" };
+        return {
+            session_id: session.id,
+            url: browser.currentUrl(),
+            text: "",
+            elements: [],
+            observed: "none",
+        };
     }
     return await observeSession(session, detail);
 }
@@ -1228,7 +1278,9 @@ function recordTrace(session, action, el) {
         try {
             host = new URL(action.url).host;
         }
-        catch { /* keep "?" */ }
+        catch {
+            /* keep "?" */
+        }
         audit(session.id, "trace_skip_single_use_goto", { url_host: host });
         return;
     }
@@ -1254,10 +1306,17 @@ function recordTrace(session, action, el) {
             a = { kind: "oauth_settle" };
             break;
         case "scroll":
-            a = { kind: "scroll", ...(action.direction !== undefined ? { direction: action.direction } : {}) };
+            a = {
+                kind: "scroll",
+                ...(action.direction !== undefined ? { direction: action.direction } : {}),
+            };
             break;
         case "type":
-            a = { kind: "type", ...withText, value: scrubKnownEmail(redactEmailForTrace(action.text), session.userEmail) };
+            a = {
+                kind: "type",
+                ...withText,
+                value: scrubKnownEmail(redactEmailForTrace(action.text), session.userEmail),
+            };
             break;
         case "type_secret":
             a = { kind: "type_secret", slot: action.slot, ...withText };
@@ -1310,7 +1369,12 @@ export function captureObserved(action, el) {
             // scrub. type_secret is a different kind and is skipped above.
             return el === null
                 ? null
-                : { kind: "fill", selector: el.selector, value: action.text, reason: traceTextFor(el) ?? "fill" };
+                : {
+                    kind: "fill",
+                    selector: el.selector,
+                    value: action.text,
+                    reason: traceTextFor(el) ?? "fill",
+                };
         case "goto":
             return { kind: "navigate", url: action.url, reason: "navigate" };
         default:
@@ -1449,7 +1513,10 @@ export async function rememberRecipe(sessionId, opts) {
     };
     const file = await writeRecipe(recipe);
     audit(sessionId, "remember_recipe", {
-        name: opts.name, steps: recipe.trace.length, secrets: secrets.length, file,
+        name: opts.name,
+        steps: recipe.trace.length,
+        secrets: secrets.length,
+        file,
     });
     return { file, name: opts.name, steps: recipe.trace.length, secrets: secrets.map((s) => s.slot) };
 }
@@ -1484,7 +1551,9 @@ export async function verifyPostcondition(sessionId, postcondition) {
     const snap = await snapshotForPostcondition(session);
     const result = checkSuccessSignal(postcondition.success_signal, snap);
     audit(sessionId, "verify_postcondition", {
-        kind: postcondition.kind, confirmed: result.confirmed, reason: result.reason,
+        kind: postcondition.kind,
+        confirmed: result.confirmed,
+        reason: result.reason,
     });
     return result;
 }
@@ -1870,7 +1939,8 @@ export async function captchaGate(sessionId) {
             token = tokenSolved.solved;
         }
     }
-    else if (!token && (det.variant === "recaptcha_v2" || det.variant === "hcaptcha" || det.variant === "turnstile")) {
+    else if (!token &&
+        (det.variant === "recaptcha_v2" || det.variant === "hcaptcha" || det.variant === "turnstile")) {
         // #279: route a configured token solver FIRST for the checkbox-family
         // captchas; solveCaptchaWithTokenSolver returns outcome "no_key" when none
         // is configured, so we fall through to the visible-captcha click below.
@@ -1885,9 +1955,7 @@ export async function captchaGate(sessionId) {
         }
     }
     const clear = await session.browser.waitForCaptchaChallengeToSettle(token ? 5_000 : 15_000);
-    const settled = det.variant === "unknown"
-        ? clear
-        : token && (clear || tokenSolverOutcome === "ok");
+    const settled = det.variant === "unknown" ? clear : token && (clear || tokenSolverOutcome === "ok");
     // Fail-fast: if we couldn't clear it, hand the host a specific, actionable
     // reason so it stops driving immediately. `no_key` means a 2Captcha solver
     // would have been tried but isn't configured → tell the user to set one up.