@viewportai/daemon 0.1.0 → 0.2.1

package/dist/config-resolution/stable-json.js

@@ -0,0 +1,18 @@
+import crypto from 'node:crypto';
+export function digestJson(value) {
+    return `sha256:${crypto.createHash('sha256').update(stableJson(value)).digest('hex')}`;
+}
+export function stableJson(value) {
+    if (Array.isArray(value)) {
+        return `[${value.map(stableJson).join(',')}]`;
+    }
+    if (value && typeof value === 'object') {
+        const object = value;
+        return `{${Object.keys(object)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${stableJson(object[key])}`)
+            .join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+//# sourceMappingURL=stable-json.js.map

package/dist/config-resolution/stable-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stable-json.js","sourceRoot":"","sources":["../../src/config-resolution/stable-json.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAC3B,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/config-resolution/types.d.ts

@@ -0,0 +1,120 @@
+export declare const VIEWPORT_CONFIG_FILE = ".viewport/config.yaml";
+export declare const VIEWPORT_LEGACY_CONFIG_FILE = ".viewport/config.json";
+export declare const VIEWPORT_CONFIG_FILES: readonly [".viewport/config.yaml", ".viewport/config.json"];
+export declare const SESSION_RESOURCE_MANIFEST_SCHEMA = "viewport.session_resource_manifest/v1";
+export type ViewportResourceKind = 'contexts' | 'workflows' | 'plans' | 'agentProfiles';
+export interface ViewportResourceRef {
+    id: string;
+    required: boolean;
+    sourceConfigPath: string;
+}
+export interface ViewportConfigDefaults {
+    inboxRoute?: string;
+    visibility?: 'private' | 'team' | 'organization';
+    contextCandidateReview?: string;
+}
+export interface ViewportConfigScope {
+    includeChildren?: boolean;
+    maxDepth?: number;
+    exclude?: string[];
+}
+export type ViewportContextProviderKind = 'repo-docs' | 'viewport-vault' | 'notebooklm' | 'glean' | 'custom-cli' | 'custom-mcp';
+export type ViewportContextProviderCapability = 'search' | 'get' | 'propose' | 'write_approved';
+export type ViewportContextProviderPrivacy = 'local_only' | 'control_plane_blind' | 'third_party_terms' | 'customer_hosted' | 'unknown';
+export interface ViewportContextProviderRef {
+    id: string;
+    provider: ViewportContextProviderKind;
+    required: boolean;
+    privacy: ViewportContextProviderPrivacy;
+    capabilities: ViewportContextProviderCapability[];
+    sourceConfigPath: string;
+    credentialRef?: string;
+    vault?: string;
+    paths?: string[];
+    notebook?: string;
+    command?: string;
+}
+export interface ViewportContextResolution {
+    order?: string[];
+    sizeBudgetBytes?: number;
+    strategy?: 'rank_by_recency_then_query' | 'pinned_then_recent' | 'provider_order';
+    proposeFallbackProvider?: string;
+}
+export interface ViewportWorkflowRef {
+    id: string;
+    required: boolean;
+    sourceConfigPath: string;
+    path?: string;
+    resource?: string;
+    version?: string;
+    digest?: string;
+}
+export interface ViewportRiskyPathRule {
+    id: string;
+    path: string;
+    require: string[];
+    checks: string[];
+    sourceConfigPath: string;
+}
+export interface ParsedViewportConfig {
+    path: string;
+    digest: string;
+    version: 1;
+    name?: string;
+    resources: Record<ViewportResourceKind, ViewportResourceRef[]>;
+    contract: {
+        contextProviders: ViewportContextProviderRef[];
+        contextResolution: ViewportContextResolution;
+        workflows: ViewportWorkflowRef[];
+        riskyPathRules: ViewportRiskyPathRule[];
+    };
+    defaults: ViewportConfigDefaults;
+    scope: ViewportConfigScope;
+}
+export interface SessionResourceManifestConfigSource {
+    path: string;
+    digest: string;
+    version: 1;
+    name?: string;
+}
+export interface SessionResourceManifestResource {
+    id: string;
+    required: boolean;
+    sourceConfigPath: string;
+    resolution: 'requested_unverified';
+}
+export interface SessionContextProviderManifest extends ViewportContextProviderRef {
+    resolution: 'requested_unverified';
+}
+export interface SessionWorkflowManifest extends ViewportWorkflowRef {
+    resolution: 'requested_unverified';
+}
+export interface SessionResourceConflict {
+    field: string;
+    values: Array<{
+        value: string;
+        sourceConfigPath: string;
+    }>;
+    resolution: 'requires_user_selection';
+}
+export interface SessionResourceWarning {
+    code: 'no_config_found' | 'multiple_configs_found' | 'too_many_configs_found' | 'invalid_config_skipped';
+    message: string;
+    path?: string;
+}
+export interface SessionResourceManifest {
+    schema: typeof SESSION_RESOURCE_MANIFEST_SCHEMA;
+    manifestDigest: string;
+    workingDirectory: string;
+    configSources: SessionResourceManifestConfigSource[];
+    resources: Record<ViewportResourceKind, SessionResourceManifestResource[]>;
+    contract: {
+        contextProviders: SessionContextProviderManifest[];
+        contextResolution: ViewportContextResolution;
+        workflows: SessionWorkflowManifest[];
+        riskyPathRules: ViewportRiskyPathRule[];
+    };
+    conflicts: SessionResourceConflict[];
+    warnings: SessionResourceWarning[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/config-resolution/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config-resolution/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAC5D,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AACnE,eAAO,MAAM,qBAAqB,6DAA+D,CAAC;AAClG,eAAO,MAAM,gCAAgC,0CAA0C,CAAC;AAExF,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,GAAG,eAAe,CAAC;AAExF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,cAAc,CAAC;IACjD,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,MAAM,2BAA2B,GACnC,WAAW,GACX,gBAAgB,GAChB,YAAY,GACZ,OAAO,GACP,YAAY,GACZ,YAAY,CAAC;AAEjB,MAAM,MAAM,iCAAiC,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAEhG,MAAM,MAAM,8BAA8B,GACtC,YAAY,GACZ,qBAAqB,GACrB,mBAAmB,GACnB,iBAAiB,GACjB,SAAS,CAAC;AAEd,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,2BAA2B,CAAC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,8BAA8B,CAAC;IACxC,YAAY,EAAE,iCAAiC,EAAE,CAAC;IAClD,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,4BAA4B,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;IAClF,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC/D,QAAQ,EAAE;QACR,gBAAgB,EAAE,0BAA0B,EAAE,CAAC;QAC/C,iBAAiB,EAAE,yBAAyB,CAAC;QAC7C,SAAS,EAAE,mBAAmB,EAAE,CAAC;QACjC,cAAc,EAAE,qBAAqB,EAAE,CAAC;KACzC,CAAC;IACF,QAAQ,EAAE,sBAAsB,CAAC;IACjC,KAAK,EAAE,mBAAmB,CAAC;CAC5B;AAED,MAAM,WAAW,mCAAmC;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,sBAAsB,CAAC;CACpC;AAED,MAAM,WAAW,8BAA+B,SAAQ,0BAA0B;IAChF,UAAU,EAAE,sBAAsB,CAAC;CACpC;AAED,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,UAAU,EAAE,sBAAsB,CAAC;CACpC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,KAAK,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC,CAAC;IACH,UAAU,EAAE,yBAAyB,CAAC;CACvC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EACA,iBAAiB,GACjB,wBAAwB,GACxB,wBAAwB,GACxB,wBAAwB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,gCAAgC,CAAC;IAChD,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,mCAAmC,EAAE,CAAC;IACrD,SAAS,EAAE,MAAM,CAAC,oBAAoB,EAAE,+BAA+B,EAAE,CAAC,CAAC;IAC3E,QAAQ,EAAE;QACR,gBAAgB,EAAE,8BAA8B,EAAE,CAAC;QACnD,iBAAiB,EAAE,yBAAyB,CAAC;QAC7C,SAAS,EAAE,uBAAuB,EAAE,CAAC;QACrC,cAAc,EAAE,qBAAqB,EAAE,CAAC;KACzC,CAAC;IACF,SAAS,EAAE,uBAAuB,EAAE,CAAC;IACrC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;CACpC"}

package/dist/config-resolution/types.js

@@ -0,0 +1,5 @@
+export const VIEWPORT_CONFIG_FILE = '.viewport/config.yaml';
+export const VIEWPORT_LEGACY_CONFIG_FILE = '.viewport/config.json';
+export const VIEWPORT_CONFIG_FILES = [VIEWPORT_CONFIG_FILE, VIEWPORT_LEGACY_CONFIG_FILE];
+export const SESSION_RESOURCE_MANIFEST_SCHEMA = 'viewport.session_resource_manifest/v1';
+//# sourceMappingURL=types.js.map

package/dist/config-resolution/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config-resolution/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAC5D,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,oBAAoB,EAAE,2BAA2B,CAAU,CAAC;AAClG,MAAM,CAAC,MAAM,gCAAgC,GAAG,uCAAuC,CAAC"}

package/dist/context/local-edge-candidates.d.ts

@@ -0,0 +1,24 @@
+import { type ContextCandidateDecisionPullRecord, type ContextCandidateProposal, type ContextCredentials } from './local-edge-types.js';
+export declare function proposeContextEntry(options: {
+    contextResourceId: string;
+    actorName: string;
+    title: string;
+    body: string;
+    source?: string;
+    sourceKind?: 'workflow' | 'plan' | 'integration';
+    credentials: ContextCredentials;
+    home?: string;
+}): Promise<ContextCandidateProposal>;
+export declare function applyContextCandidateDecision(options: {
+    contextResourceId: string;
+    actorName: string;
+    decision: ContextCandidateDecisionPullRecord;
+    credentials: ContextCredentials;
+    home?: string;
+}): Promise<{
+    applied: boolean;
+    reason?: string;
+    candidateId?: string;
+    emitted: number;
+}>;
+//# sourceMappingURL=local-edge-candidates.d.ts.map

package/dist/context/local-edge-candidates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-edge-candidates.d.ts","sourceRoot":"","sources":["../../src/context/local-edge-candidates.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,KAAK,kCAAkC,EACvC,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IACjD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,CAAC;IACjD,WAAW,EAAE,kBAAkB,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAqCpC;AAED,wBAAsB,6BAA6B,CAAC,OAAO,EAAE;IAC3D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,kCAAkC,CAAC;IAC7C,WAAW,EAAE,kBAAkB,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA0HxF"}

package/dist/context/local-edge-candidates.js

@@ -0,0 +1,184 @@
+import { configDir } from '../core/config.js';
+import { digestText } from './local-edge-crypto.js';
+import { assertCredentialsOrApprovedDevice, createVault, ensureUserOrApprovedDevice, } from './local-edge-engine.js';
+import { recordCandidateDecisionApplication } from './local-edge-decision-applications.js';
+import { readContextMetadata, touchContextMetadata } from './local-edge-metadata.js';
+import { CONTEXT_EVENT_SCHEMA_VERSION, } from './local-edge-types.js';
+export async function proposeContextEntry(options) {
+    const home = options.home ?? configDir();
+    const metadata = await readContextMetadata(options.contextResourceId, home);
+    const vault = createVault(home, metadata.keyStore);
+    assertCredentialsOrApprovedDevice(vault, {
+        userName: metadata.userName,
+        deviceName: options.actorName,
+        credentials: options.credentials,
+    });
+    await ensureUserOrApprovedDevice(vault, {
+        userName: metadata.userName,
+        deviceName: options.actorName,
+        credentials: options.credentials,
+    });
+    const source = options.source ?? 'workflow://vpd-context-candidate';
+    const event = vault.proposeEntry({
+        repoId: metadata.repoId,
+        actorName: options.actorName,
+        contextResourceId: options.contextResourceId,
+        title: options.title,
+        body: options.body,
+        source,
+        sourceKind: options.sourceKind ?? 'workflow',
+    });
+    await touchContextMetadata(metadata, home);
+    return {
+        id: event.id,
+        titleDigest: digestText(options.title),
+        bodyDigest: event.payloadDigest ?? digestText(options.body),
+        source,
+        trustState: 'candidate',
+        actorName: options.actorName,
+        createdAt: event.createdAt,
+        schemaVersion: CONTEXT_EVENT_SCHEMA_VERSION,
+    };
+}
+export async function applyContextCandidateDecision(options) {
+    const home = options.home ?? configDir();
+    const metadata = await readContextMetadata(options.contextResourceId, home);
+    const vault = createVault(home, metadata.keyStore);
+    assertCredentialsOrApprovedDevice(vault, {
+        userName: metadata.userName,
+        deviceName: options.actorName,
+        credentials: options.credentials,
+    });
+    await ensureUserOrApprovedDevice(vault, {
+        userName: metadata.userName,
+        deviceName: options.actorName,
+        credentials: options.credentials,
+    });
+    if (options.decision.repo_id !== metadata.repoId) {
+        return recordAndReturnDecisionApplication({
+            actorName: options.actorName,
+            decision: options.decision,
+            emitted: 0,
+            home,
+            contextResourceId: options.contextResourceId,
+            reason: 'repo_mismatch',
+            status: 'skipped',
+        });
+    }
+    if (options.decision.context_resource_id &&
+        options.decision.context_resource_id !== options.contextResourceId) {
+        return recordAndReturnDecisionApplication({
+            actorName: options.actorName,
+            decision: options.decision,
+            emitted: 0,
+            home,
+            contextResourceId: options.contextResourceId,
+            reason: 'context_resource_mismatch',
+            status: 'skipped',
+        });
+    }
+    const candidates = vault.allCandidates({ repoId: metadata.repoId, actorName: options.actorName });
+    const candidate = candidates.find((item) => item.proposal_event_id === options.decision.candidate_event_id ||
+        (typeof options.decision.payload_digest === 'string' &&
+            options.decision.payload_digest.length > 0 &&
+            item.payload_digest === options.decision.payload_digest));
+    if (!candidate) {
+        return recordAndReturnDecisionApplication({
+            actorName: options.actorName,
+            decision: options.decision,
+            emitted: 0,
+            home,
+            contextResourceId: options.contextResourceId,
+            reason: 'candidate_not_found',
+            status: 'skipped',
+        });
+    }
+    if (candidate.status === 'approved' || candidate.status === 'rejected') {
+        return recordAndReturnDecisionApplication({
+            actorName: options.actorName,
+            candidateId: candidate.id,
+            decision: options.decision,
+            emitted: 0,
+            home,
+            contextResourceId: options.contextResourceId,
+            reason: `candidate_already_${candidate.status}`,
+            status: 'skipped',
+        });
+    }
+    if (options.decision.decision === 'approved') {
+        vault.approveCandidate({
+            repoId: metadata.repoId,
+            actorName: options.actorName,
+            candidateId: candidate.id,
+            title: candidate.title,
+            body: candidate.body,
+            source: candidate.source ?? `candidate://${candidate.id}`,
+            contextResourceId: options.contextResourceId,
+            review: {
+                platformDecisionId: options.decision.id,
+                platformInboxItemId: options.decision.inbox_item_id ?? null,
+                decidedByUserId: options.decision.decided_by_user_id ?? null,
+                decidedAt: options.decision.decided_at ?? null,
+                platformSignatureDigest: options.decision.platform_signature.signed_payload_digest,
+            },
+        });
+        await touchContextMetadata(metadata, home);
+        return recordAndReturnDecisionApplication({
+            actorName: options.actorName,
+            candidateId: candidate.id,
+            decision: options.decision,
+            emitted: 2,
+            home,
+            contextResourceId: options.contextResourceId,
+            status: 'applied',
+        });
+    }
+    vault.rejectCandidate({
+        repoId: metadata.repoId,
+        actorName: options.actorName,
+        candidateId: candidate.id,
+        reason: options.decision.message ?? 'Rejected in Viewport Inbox.',
+    });
+    await touchContextMetadata(metadata, home);
+    return recordAndReturnDecisionApplication({
+        actorName: options.actorName,
+        candidateId: candidate.id,
+        decision: options.decision,
+        emitted: 1,
+        home,
+        contextResourceId: options.contextResourceId,
+        status: 'applied',
+    });
+}
+async function recordAndReturnDecisionApplication(options) {
+    await recordCandidateDecisionApplication({
+        home: options.home,
+        contextResourceId: options.contextResourceId,
+        application: {
+            schema_version: 'viewport.context_candidate_application/v1',
+            decision_id: options.decision.id,
+            inbox_item_id: options.decision.inbox_item_id ?? null,
+            repo_id: options.decision.repo_id,
+            ...(options.decision.context_resource_id
+                ? { context_resource_id: options.decision.context_resource_id }
+                : {}),
+            candidate_event_id: options.decision.candidate_event_id,
+            payload_digest: options.decision.payload_digest ?? null,
+            decision: options.decision.decision,
+            status: options.status,
+            ...(options.reason ? { reason: options.reason } : {}),
+            actor_name: options.actorName,
+            ...(options.candidateId ? { candidate_id: options.candidateId } : {}),
+            emitted: options.emitted,
+            applied_at: new Date().toISOString(),
+            platform_signature_digest: options.decision.platform_signature.signed_payload_digest,
+        },
+    });
+    return {
+        applied: options.status === 'applied',
+        ...(options.reason ? { reason: options.reason } : {}),
+        ...(options.candidateId ? { candidateId: options.candidateId } : {}),
+        emitted: options.emitted,
+    };
+}
+//# sourceMappingURL=local-edge-candidates.js.map

package/dist/context/local-edge-candidates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-edge-candidates.js","sourceRoot":"","sources":["../../src/context/local-edge-candidates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EACL,iCAAiC,EACjC,WAAW,EACX,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EACL,4BAA4B,GAI7B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OASzC;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnD,iCAAiC,CAAC,KAAK,EAAE;QACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,MAAM,0BAA0B,CAAC,KAAK,EAAE;QACtC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,kCAAkC,CAAC;IACpE,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;QAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM;QACN,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,UAAU;KAC7C,CAAC,CAAC;IACH,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE3C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;QACtC,UAAU,EAAE,KAAK,CAAC,aAAa,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;QAC3D,MAAM;QACN,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,4BAA4B;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAMnD;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnD,iCAAiC,CAAC,KAAK,EAAE;QACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,MAAM,0BAA0B,CAAC,KAAK,EAAE;QACtC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjD,OAAO,kCAAkC,CAAC;YACxC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,CAAC;YACV,IAAI;YACJ,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,IACE,OAAO,CAAC,QAAQ,CAAC,mBAAmB;QACpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,KAAK,OAAO,CAAC,iBAAiB,EAClE,CAAC;QACD,OAAO,kCAAkC,CAAC;YACxC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,CAAC;YACV,IAAI;YACJ,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,MAAM,EAAE,2BAA2B;YACnC,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAC/B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,iBAAiB,KAAK,OAAO,CAAC,QAAQ,CAAC,kBAAkB;QAC9D,CAAC,OAAO,OAAO,CAAC,QAAQ,CAAC,cAAc,KAAK,QAAQ;YAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YAC1C,IAAI,CAAC,cAAc,KAAK,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAC7D,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,kCAAkC,CAAC;YACxC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,CAAC;YACV,IAAI;YACJ,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,MAAM,EAAE,qBAAqB;YAC7B,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACvE,OAAO,kCAAkC,CAAC;YACxC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,CAAC;YACV,IAAI;YACJ,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,MAAM,EAAE,qBAAqB,SAAS,CAAC,MAAM,EAAE;YAC/C,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC7C,KAAK,CAAC,gBAAgB,CAAC;YACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,eAAe,SAAS,CAAC,EAAE,EAAE;YACzD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,MAAM,EAAE;gBACN,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;gBACvC,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa,IAAI,IAAI;gBAC3D,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,IAAI,IAAI;gBAC5D,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI;gBAC9C,uBAAuB,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,qBAAqB;aACnF;SACF,CAAC,CAAC;QACH,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE3C,OAAO,kCAAkC,CAAC;YACxC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,CAAC;YACV,IAAI;YACJ,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC;QACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,SAAS,CAAC,EAAE;QACzB,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,6BAA6B;KAClE,CAAC,CAAC;IACH,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE3C,OAAO,kCAAkC,CAAC;QACxC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,SAAS,CAAC,EAAE;QACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,CAAC;QACV,IAAI;QACJ,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kCAAkC,CAAC,OASjD;IACC,MAAM,kCAAkC,CAAC;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,WAAW,EAAE;YACX,cAAc,EAAE,2CAA2C;YAC3D,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;YAChC,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa,IAAI,IAAI;YACrD,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;YACjC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;gBACtC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,EAAE;gBAC/D,CAAC,CAAC,EAAE,CAAC;YACP,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;YACvD,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc,IAAI,IAAI;YACvD,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,yBAAyB,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,qBAAqB;SACrF;KACF,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS;QACrC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC"}

package/dist/context/local-edge-crypto.d.ts

@@ -0,0 +1,28 @@
+declare const KDF = "scrypt-n16384-r8-p1-sha256";
+declare const CIPHER = "aes-256-gcm";
+export interface EncryptedPayload {
+    cipher: typeof CIPHER;
+    ciphertext: string;
+    iv: string;
+    tag: string;
+}
+export interface WrappedKey extends EncryptedPayload {
+    kdf: typeof KDF;
+    salt: string;
+}
+export declare function createResourceKey(): Buffer;
+export declare function digestText(value: string): string;
+export declare function digestJson(value: unknown): string;
+export declare function stableJson(value: unknown): string;
+export declare function wrapResourceKey(resourceKey: Buffer, credentials: {
+    passphrase: string;
+    recoveryCode: string;
+}): WrappedKey;
+export declare function unwrapResourceKey(wrappedKey: WrappedKey, credentials: {
+    passphrase: string;
+    recoveryCode: string;
+}): Buffer;
+export declare function encryptText(plaintext: string, key: Buffer): EncryptedPayload;
+export declare function decryptText(payload: EncryptedPayload, key: Buffer): string;
+export {};
+//# sourceMappingURL=local-edge-crypto.d.ts.map

package/dist/context/local-edge-crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-edge-crypto.d.ts","sourceRoot":"","sources":["../../src/context/local-edge-crypto.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,GAAG,+BAA+B,CAAC;AACzC,QAAA,MAAM,MAAM,gBAAgB,CAAC;AAE7B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,UAAW,SAAQ,gBAAgB;IAClD,GAAG,EAAE,OAAO,GAAG,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACxD,UAAU,CAQZ;AAED,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACxD,MAAM,CAMR;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAE5E;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1E"}

package/dist/context/local-edge-crypto.js

@@ -0,0 +1,76 @@
+import crypto from 'node:crypto';
+const KDF = 'scrypt-n16384-r8-p1-sha256';
+const CIPHER = 'aes-256-gcm';
+export function createResourceKey() {
+    return crypto.randomBytes(32);
+}
+export function digestText(value) {
+    return `sha256:${crypto.createHash('sha256').update(value, 'utf8').digest('hex')}`;
+}
+export function digestJson(value) {
+    return digestText(stableJson(value));
+}
+export function stableJson(value) {
+    return JSON.stringify(sortJson(value));
+}
+export function wrapResourceKey(resourceKey, credentials) {
+    const salt = crypto.randomBytes(16).toString('base64');
+    const key = deriveKey({ ...credentials, salt });
+    return {
+        ...encryptBuffer(resourceKey, key),
+        kdf: KDF,
+        salt,
+    };
+}
+export function unwrapResourceKey(wrappedKey, credentials) {
+    if (wrappedKey.kdf !== KDF) {
+        throw new Error(`Unsupported context key KDF: ${wrappedKey.kdf}`);
+    }
+    const key = deriveKey({ ...credentials, salt: wrappedKey.salt });
+    return decryptBuffer(wrappedKey, key);
+}
+export function encryptText(plaintext, key) {
+    return encryptBuffer(Buffer.from(plaintext, 'utf8'), key);
+}
+export function decryptText(payload, key) {
+    return decryptBuffer(payload, key).toString('utf8');
+}
+function deriveKey({ passphrase, recoveryCode, salt, }) {
+    return crypto.scryptSync(`${passphrase}:${recoveryCode}`, Buffer.from(salt, 'base64'), 32, {
+        N: 16384,
+        r: 8,
+        p: 1,
+    });
+}
+function encryptBuffer(plaintext, key) {
+    const iv = crypto.randomBytes(12);
+    const cipher = crypto.createCipheriv(CIPHER, key, iv);
+    const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+    return {
+        cipher: CIPHER,
+        iv: iv.toString('base64'),
+        ciphertext: ciphertext.toString('base64'),
+        tag: cipher.getAuthTag().toString('base64'),
+    };
+}
+function decryptBuffer(payload, key) {
+    if (payload.cipher !== CIPHER) {
+        throw new Error(`Unsupported context cipher: ${payload.cipher}`);
+    }
+    const decipher = crypto.createDecipheriv(CIPHER, key, Buffer.from(payload.iv, 'base64'));
+    decipher.setAuthTag(Buffer.from(payload.tag, 'base64'));
+    return Buffer.concat([
+        decipher.update(Buffer.from(payload.ciphertext, 'base64')),
+        decipher.final(),
+    ]);
+}
+function sortJson(value) {
+    if (Array.isArray(value))
+        return value.map((item) => sortJson(item));
+    if (!value || typeof value !== 'object')
+        return value;
+    return Object.fromEntries(Object.entries(value)
+        .sort(([a], [b]) => a.localeCompare(b))
+        .map(([key, entry]) => [key, sortJson(entry)]));
+}
+//# sourceMappingURL=local-edge-crypto.js.map

package/dist/context/local-edge-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-edge-crypto.js","sourceRoot":"","sources":["../../src/context/local-edge-crypto.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,GAAG,GAAG,4BAA4B,CAAC;AACzC,MAAM,MAAM,GAAG,aAAa,CAAC;AAc7B,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,WAAyD;IAEzD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,OAAO;QACL,GAAG,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC;QAClC,GAAG,EAAE,GAAG;QACR,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,UAAsB,EACtB,WAAyD;IAEzD,IAAI,UAAU,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,OAAO,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,GAAW;IACxD,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAyB,EAAE,GAAW;IAChE,OAAO,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,EACjB,UAAU,EACV,YAAY,EACZ,IAAI,GAKL;IACC,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,UAAU,IAAI,YAAY,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE;QACzF,CAAC,EAAE,KAAK;QACR,CAAC,EAAE,CAAC;QACJ,CAAC,EAAE,CAAC;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,GAAW;IACnD,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO;QACL,MAAM,EAAE,MAAM;QACd,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAyB,EAAE,GAAW;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1D,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CACjD,CAAC;AACJ,CAAC"}

package/dist/context/local-edge-decision-applications.d.ts

@@ -0,0 +1,13 @@
+import type { ContextCandidateDecisionApplication } from './local-edge-types.js';
+export declare function recordCandidateDecisionApplication(options: {
+    application: ContextCandidateDecisionApplication;
+    home: string;
+    contextResourceId: string;
+}): Promise<void>;
+export declare function readCandidateDecisionApplications(options: {
+    home?: string;
+    contextResourceId?: string;
+    since?: string;
+}): Promise<ContextCandidateDecisionApplication[]>;
+export declare function applicationsPath(home: string, contextResourceId: string): string;
+//# sourceMappingURL=local-edge-decision-applications.d.ts.map

package/dist/context/local-edge-decision-applications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-edge-decision-applications.d.ts","sourceRoot":"","sources":["../../src/context/local-edge-decision-applications.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAGjF,wBAAsB,kCAAkC,CAAC,OAAO,EAAE;IAChE,WAAW,EAAE,mCAAmC,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAAC,IAAI,CAAC,CAchB;AAED,wBAAsB,iCAAiC,CAAC,OAAO,EAAE;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAyBjD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,MAAM,CAOhF"}

package/dist/context/local-edge-decision-applications.js

@@ -0,0 +1,78 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { configDir } from '../core/config.js';
+import { safeContextResourceId } from './local-edge-paths.js';
+export async function recordCandidateDecisionApplication(options) {
+    const applications = await readCandidateDecisionApplications({
+        home: options.home,
+        contextResourceId: options.contextResourceId,
+    });
+    const key = applicationKey(options.application);
+    const next = [
+        ...applications.filter((application) => applicationKey(application) !== key),
+        options.application,
+    ].sort((left, right) => left.applied_at.localeCompare(right.applied_at));
+    const file = applicationsPath(options.home, options.contextResourceId);
+    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+    await fs.writeFile(file, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
+}
+export async function readCandidateDecisionApplications(options) {
+    const home = options.home ?? configDir();
+    const files = options.contextResourceId
+        ? [applicationsPath(home, options.contextResourceId)]
+        : await applicationFiles(home);
+    const applications = [];
+    for (const file of files) {
+        try {
+            const raw = JSON.parse(await fs.readFile(file, 'utf8'));
+            if (!Array.isArray(raw))
+                continue;
+            for (const item of raw) {
+                if (isCandidateDecisionApplication(item)) {
+                    applications.push(item);
+                }
+            }
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                continue;
+            throw error;
+        }
+    }
+    return applications
+        .filter((application) => !options.since || application.applied_at > options.since)
+        .sort((left, right) => left.applied_at.localeCompare(right.applied_at));
+}
+export function applicationsPath(home, contextResourceId) {
+    return path.join(home, 'context', 'candidate-decision-applications', `${safeContextResourceId(contextResourceId)}.json`);
+}
+async function applicationFiles(home) {
+    const dir = path.join(home, 'context', 'candidate-decision-applications');
+    try {
+        const names = await fs.readdir(dir);
+        return names.filter((name) => name.endsWith('.json')).map((name) => path.join(dir, name));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return [];
+        throw error;
+    }
+}
+function applicationKey(application) {
+    return `${application.decision_id}:${application.actor_name}`;
+}
+function isCandidateDecisionApplication(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const record = value;
+    return (record.schema_version === 'viewport.context_candidate_application/v1' &&
+        typeof record.decision_id === 'string' &&
+        typeof record.repo_id === 'string' &&
+        typeof record.candidate_event_id === 'string' &&
+        (record.decision === 'approved' || record.decision === 'rejected') &&
+        (record.status === 'applied' || record.status === 'skipped') &&
+        typeof record.actor_name === 'string' &&
+        typeof record.applied_at === 'string' &&
+        typeof record.platform_signature_digest === 'string');
+}
+//# sourceMappingURL=local-edge-decision-applications.js.map

package/dist/context/local-edge-decision-applications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-edge-decision-applications.js","sourceRoot":"","sources":["../../src/context/local-edge-decision-applications.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,OAIxD;IACC,MAAM,YAAY,GAAG,MAAM,iCAAiC,CAAC;QAC3D,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG;QACX,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC;QAC5E,OAAO,CAAC,WAAW;KACpB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAEzE,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,OAIvD;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB;QACrC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACrD,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEjC,MAAM,YAAY,GAA0C,EAAE,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBACvB,IAAI,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,YAAY;SAChB,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;SACjF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,iBAAyB;IACtE,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,EACJ,SAAS,EACT,iCAAiC,EACjC,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,OAAO,CACnD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,iCAAiC,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,WAAgD;IACtE,OAAO,GAAG,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,MAAM,GAAG,KAAqD,CAAC;IACrE,OAAO,CACL,MAAM,CAAC,cAAc,KAAK,2CAA2C;QACrE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ;QAC7C,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC;QAClE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;QAC5D,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,yBAAyB,KAAK,QAAQ,CACrD,CAAC;AACJ,CAAC"}

package/dist/context/local-edge-decision-signature.d.ts

@@ -0,0 +1,3 @@
+import type { ContextCandidateDecisionPullRecord } from './local-edge-types.js';
+export declare function verifyContextCandidateDecision(record: ContextCandidateDecisionPullRecord, trustedPublicKeys: Record<string, string> | undefined): void;
+//# sourceMappingURL=local-edge-decision-signature.d.ts.map

package/dist/context/local-edge-decision-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-edge-decision-signature.d.ts","sourceRoot":"","sources":["../../src/context/local-edge-decision-signature.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAIhF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,kCAAkC,EAC1C,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GACpD,IAAI,CA6CN"}