@viewportai/daemon 0.5.2 → 0.6.0

package/dist/security/epoch-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"epoch-sync.js","sourceRoot":"","sources":["../../src/security/epoch-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,EAC/B,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,GAGrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,mCAAmC,EACnC,oCAAoC,GAGrC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAWnE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAI3C;IACC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,QAAQ,GAAG,+BAA+B,CAAC;QAC/C,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;QACvC,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,kBAAkB,CAC1F,OAAO,CAAC,MAAM,CAAC,WAAW,CAC3B,qBAAqB,EACtB;QACE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;QACrC,KAAK,EAAE,CAAC;QACR,yBAAyB,EAAE,QAAQ,CAAC,UAAU,CAAC,sBAAsB;QACrE,sBAAsB,EAAE,QAAQ,CAAC,UAAU,CAAC,mBAAmB;KAChE,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IACF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE1C,OAAO,oBAAoB,CACzB;QACE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9C,MAAM,EAAE,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpD,eAAe,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;QACxC,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;QACjC,MAAM,EAAE,+BAA+B;QACvC,MAAM,EAAE,QAAQ;QAChB,sBAAsB,EAAE,WAAW,CAAC,IAAI,EAAE,2BAA2B,CAAc;QACnF,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;QACzD,mBAAmB,EAAE,WAAW,CAAC,IAAI,EAAE,wBAAwB,CAAc;QAC7E,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7C,wBAAwB,EACtB,OAAO,IAAI,CAAC,0BAA0B,KAAK,QAAQ;YACjD,CAAC,CAAC,IAAI,CAAC,0BAA0B;YACjC,CAAC,CAAC,IAAI;KACX,EACD,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAK3C;IACC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GAAG,+BAA+B,CAAC;QAC/C,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;QACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK,GAAG,CAAC;QACzB,wBAAwB,EAAE,QAAQ,CAAC,WAAW;KAC/C,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,OAAO,EAAE,sBAAsB,CAAC;YAC9B,IAAI,EAAE;gBACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,QAAQ,CAAC,MAAM;gBAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;gBACvD,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB,IAAI,IAAI;gBACnE,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B;YACD,EAAE,EAAE,QAAQ,CAAC,UAAU;YACvB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS;SACV,CAAC;QACF,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,wBAAwB,EAAE,QAAQ,CAAC,WAAW;KAC/C,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,kBAAkB,CAC1F,OAAO,CAAC,MAAM,CAAC,WAAW,CAC3B,qBAAqB,EACtB;QACE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;QACrC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK;QAChC,yBAAyB,EAAE,QAAQ,CAAC,UAAU,CAAC,sBAAsB;QACrE,sBAAsB,EAAE,QAAQ,CAAC,UAAU,CAAC,mBAAmB;QAC/D,0BAA0B,EAAE,QAAQ,CAAC,WAAW;QAChD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,2BAA2B,EAAE,UAAU,CAAC,wBAAwB;SACjE;KACF,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IACF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE1C,OAAO,oBAAoB,CACzB;QACE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9C,MAAM,EAAE,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpD,eAAe,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;QACxC,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;QACjC,MAAM,EAAE,+BAA+B;QACvC,MAAM,EAAE,QAAQ;QAChB,sBAAsB,EAAE,WAAW,CAAC,IAAI,EAAE,2BAA2B,CAAc;QACnF,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;QACzD,mBAAmB,EAAE,WAAW,CAAC,IAAI,EAAE,wBAAwB,CAAc;QAC7E,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7C,wBAAwB,EACtB,OAAO,IAAI,CAAC,0BAA0B,KAAK,QAAQ;YACjD,CAAC,CAAC,IAAI,CAAC,0BAA0B;YACjC,CAAC,CAAC,IAAI;KACX,EACD,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAK3C;IACC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC5C,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,IAAI,CACb,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,QAAQ,GAAG,+BAA+B,CAAC;QAC/C,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;QACvC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,kBAAkB,CAC1F,OAAO,CAAC,MAAM,CAAC,WAAW,CAC3B,iBAAiB,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAC7D;QACE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;QACrC,KAAK,EAAE,CAAC;QACR,yBAAyB,EAAE,QAAQ,CAAC,UAAU,CAAC,sBAAsB;QACrE,sBAAsB,EAAE,QAAQ,CAAC,UAAU,CAAC,mBAAmB;KAChE,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IACF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE1C,OAAO,oBAAoB,CACzB;QACE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc,EAAE,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5D,eAAe,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;QACxC,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;QACjC,MAAM,EAAE,+BAA+B;QACvC,MAAM,EAAE,QAAQ;QAChB,sBAAsB,EAAE,WAAW,CAAC,IAAI,EAAE,2BAA2B,CAAc;QACnF,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;QACzD,mBAAmB,EAAE,WAAW,CAAC,IAAI,EAAE,wBAAwB,CAAc;QAC7E,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7C,wBAAwB,EACtB,OAAO,IAAI,CAAC,0BAA0B,KAAK,QAAQ;YACjD,CAAC,CAAC,IAAI,CAAC,0BAA0B;YACjC,CAAC,CAAC,IAAI;KACX,EACD,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAM3C;IACC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC5C,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,IAAI,CACb,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,QAAQ,GAAG,+BAA+B,CAAC;QAC/C,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;QACvC,MAAM,EAAE,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,MAAM;QAClD,KAAK,EAAE,QAAQ,CAAC,KAAK,GAAG,CAAC;QACzB,wBAAwB,EAAE,QAAQ,CAAC,WAAW;KAC/C,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,OAAO,EAAE,sBAAsB,CAAC;YAC9B,IAAI,EAAE;gBACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,MAAM;gBACrD,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;gBACvD,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB,IAAI,IAAI;gBACnE,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B;YACD,EAAE,EAAE,QAAQ,CAAC,UAAU;YACvB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS;SACV,CAAC;QACF,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,wBAAwB,EAAE,QAAQ,CAAC,WAAW;KAC/C,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,kBAAkB,CAC1F,OAAO,CAAC,MAAM,CAAC,WAAW,CAC3B,iBAAiB,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAC7D;QACE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;QACrC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK;QAChC,yBAAyB,EAAE,QAAQ,CAAC,UAAU,CAAC,sBAAsB;QACrE,sBAAsB,EAAE,QAAQ,CAAC,UAAU,CAAC,mBAAmB;QAC/D,0BAA0B,EAAE,QAAQ,CAAC,WAAW;QAChD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,2BAA2B,EAAE,UAAU,CAAC,wBAAwB;SACjE;KACF,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IACF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE1C,OAAO,oBAAoB,CACzB;QACE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc,EAAE,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5D,eAAe,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;QACxC,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;QACjC,MAAM,EAAE,+BAA+B;QACvC,MAAM,EAAE,QAAQ;QAChB,sBAAsB,EAAE,WAAW,CAAC,IAAI,EAAE,2BAA2B,CAAc;QACnF,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;QACzD,mBAAmB,EAAE,WAAW,CAAC,IAAI,EAAE,wBAAwB,CAAc;QAC7E,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7C,wBAAwB,EACtB,OAAO,IAAI,CAAC,0BAA0B,KAAK,QAAQ;YACjD,CAAC,CAAC,IAAI,CAAC,0BAA0B;YACjC,CAAC,CAAC,IAAI;KACX,EACD,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,OAI1D;IAOC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,SAAS,EACT,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,2BAA2B,EAC5D,OAAO,CAAC,MAAM,CACf,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACpC,MAAM,qBAAqB,CAAC;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;gBACtC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS;aACV,CAAC,CAAC;YACH,aAAa,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,cAAc;gBAC9B,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;gBACtC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS;aACV,CAAC,CAAC;YACH,aAAa,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,KAAK,MAAM,gBAAgB,IAAI,OAAO,CAAC,+BAA+B,EAAE,CAAC;gBACvE,MAAM,yBAAyB,CAAC;oBAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,iBAAiB,EAAE,OAAO,CAAC,eAAe;oBAC1C,0BAA0B,EAAE,gBAAgB;oBAC5C,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS;iBACV,CAAC,CAAC;gBACH,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,SAAS;QACX,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,aAAa,GAAG,aAAa;QACxC,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAA6B;IACnD,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,kBAAkB,CACzF,MAAM,CAAC,WAAW,CACnB,EAAE,CAAC;AACN,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,SAAgC,EAChC,GAAW,EACX,gBAAuC;IAEvC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE;QACtD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,wBAAwB,EAAE;QACnC,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,OAAO,EAAE,gBAAgB,CAAC,OAAO;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GACX,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,SAAS,IAAI,OAAO;YAC5D,CAAC,CAAC,MAAM,CAAE,OAAiC,CAAC,OAAO,CAAC;YACpD,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAQ5C,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACtD,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wCAAwC,WAAW,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,+BAA+B,CAAC;IACxD,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;QAC3B,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC;QAC3C,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QACpF,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC;QACnC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YACxD,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IACE,KAAK,KAAK,gBAAgB;QAC1B,KAAK,KAAK,cAAc;QACxB,KAAK,KAAK,gBAAgB;QAC1B,KAAK,KAAK,iBAAiB;QAC3B,KAAK,KAAK,UAAU,EACpB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,SAAgC,EAChC,GAAW,EACX,IAA6B,EAC7B,mBAII,EAAE;IAEN,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,wBAAwB,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QACzE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,OAAO,EAAE,gBAAgB,CAAC,OAAO;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GACX,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,SAAS,IAAI,OAAO;YAC5D,CAAC,CAAC,MAAM,CAAE,OAAiC,CAAC,OAAO,CAAC;YACpD,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgC,EAAE;IAClE,OAAO;QACL,MAAM,EAAE,kBAAkB;QAC1B,CAAC,mCAAmC,CAAC,EAAE,oCAAoC;QAC3E,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,SAAS,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,KAAa;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,KAAa;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA8B,EAAE,KAAa;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/security/team-epoch-grants.d.ts

@@ -0,0 +1,28 @@
+import { transportFetch } from '../cli/network.js';
+import { type LocalTeamCryptoEpoch } from './epoch-store.js';
+import { type JsonValue, type WrappedKeyEnvelope } from './epoch-protocol.js';
+import type { CryptoEpochSyncTarget } from './epoch-sync.js';
+interface TeamMemberGrantPayload {
+    id: string;
+    team_crypto_epoch_id: string;
+    recipient_user_crypto_epoch_id: string;
+    aad: JsonValue;
+    encrypted_payload: WrappedKeyEnvelope;
+}
+export declare function grantTeamEpochToUserEpoch(options: {
+    target: CryptoEpochSyncTarget;
+    teamCryptoEpochId: string;
+    recipientUserCryptoEpochId: string;
+    home?: string;
+    fetchImpl?: typeof transportFetch;
+}): Promise<TeamMemberGrantPayload>;
+export declare function acceptTeamEpochMemberGrants(options: {
+    target: CryptoEpochSyncTarget;
+    home?: string;
+    fetchImpl?: typeof transportFetch;
+}): Promise<{
+    accepted: number;
+    teamEpochs: LocalTeamCryptoEpoch[];
+}>;
+export {};
+//# sourceMappingURL=team-epoch-grants.d.ts.map

package/dist/security/team-epoch-grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-epoch-grants.d.ts","sourceRoot":"","sources":["../../src/security/team-epoch-grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AAEvE,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAOL,KAAK,SAAS,EACd,KAAK,kBAAkB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAgB7D,UAAU,sBAAsB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB,EAAE,MAAM,CAAC;IAC7B,8BAA8B,EAAE,MAAM,CAAC;IACvC,GAAG,EAAE,SAAS,CAAC;IACf,iBAAiB,EAAE,kBAAkB,CAAC;CACvC;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,MAAM,EAAE,qBAAqB,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0BAA0B,EAAE,MAAM,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,cAAc,CAAC;CACnC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA4ClC;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IACzD,MAAM,EAAE,qBAAqB,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,cAAc,CAAC;CACnC,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,oBAAoB,EAAE,CAAA;CAAE,CAAC,CAgEpE"}

package/dist/security/team-epoch-grants.js

@@ -0,0 +1,256 @@
+import { transportFetch } from '../cli/network.js';
+import { configDir } from '../core/config.js';
+import { getLocalTeamEpochByPlatformId, getLocalUserEpochByPlatformId, upsertLocalTeamEpoch, } from './epoch-store.js';
+import { signTeamEpochMemberMaterialization, teamEpochMemberMaterializationPayload, TRUSTED_EDGE_CRYPTO_PROTOCOL_HEADER, TRUSTED_EDGE_CRYPTO_PROTOCOL_VERSION, unwrapJsonFromX25519Envelope, wrapJsonForX25519Recipient, } from './epoch-protocol.js';
+import { validateAndPinPublicEpoch } from './epoch-public-pins.js';
+export async function grantTeamEpochToUserEpoch(options) {
+    const teamEpoch = await getLocalTeamEpochByPlatformId(options.target.workspaceId, options.teamCryptoEpochId, options.home);
+    if (!teamEpoch?.platformEpochId) {
+        throw new Error('Active local team epoch with platform id is required before granting it.');
+    }
+    const recipient = await fetchPublicUserEpoch(options);
+    const aad = teamEpochMemberGrantAad({ teamEpoch, recipient });
+    const encryptedPayload = wrapJsonForX25519Recipient({
+        recipientPublicKeyJwk: recipient.encryption_public_key_jwk,
+        aad,
+        payload: {
+            schema: 'viewport.team_epoch_member_material/v1',
+            workspaceId: teamEpoch.workspaceId,
+            teamId: teamEpoch.teamId,
+            platformTeamId: teamEpoch.platformTeamId ?? null,
+            platformEpochId: teamEpoch.platformEpochId,
+            epoch: teamEpoch.epoch,
+            fingerprint: teamEpoch.fingerprint,
+            encryptionPublicKeyJwk: teamEpoch.encryptionPublicKeyJwk,
+            encryptionPrivateKeyJwk: teamEpoch.encryptionPrivateKeyJwk,
+            signingPublicKeyJwk: teamEpoch.signingPublicKeyJwk,
+            signingPrivateKeyJwk: teamEpoch.signingPrivateKeyJwk,
+            previousEpochFingerprint: teamEpoch.previousEpochFingerprint ?? null,
+        },
+    });
+    const response = await postJson(options.fetchImpl ?? transportFetch, `${runtimeBaseUrl(options.target)}/crypto/team-epochs/${encodeURIComponent(options.teamCryptoEpochId)}/member-grants`, {
+        credential: options.target.credential,
+        recipient_user_crypto_epoch_id: options.recipientUserCryptoEpochId,
+        aad,
+        encrypted_payload: encryptedPayload,
+    }, options.target);
+    return teamMemberGrantPayload(objectField(response, 'data'));
+}
+export async function acceptTeamEpochMemberGrants(options) {
+    const response = await getJson(options.fetchImpl ?? transportFetch, `${runtimeBaseUrl(options.target)}/crypto/team-epoch-member-grants`, options.target);
+    const grants = arrayField(response, 'data').map((item) => teamMemberGrantPayload(item));
+    const teamEpochs = [];
+    for (const grant of grants) {
+        const localUserEpoch = await getLocalUserEpochByPlatformId(options.target.workspaceId, grant.recipient_user_crypto_epoch_id, options.home);
+        if (!localUserEpoch)
+            continue;
+        const payload = unwrapJsonFromX25519Envelope({
+            recipientPrivateKeyJwk: localUserEpoch.encryptionPrivateKeyJwk,
+            envelope: grant.encrypted_payload,
+            aad: grant.aad,
+        });
+        const material = teamMaterialPayload(payload);
+        const teamEpoch = await upsertLocalTeamEpoch({
+            workspaceId: material.workspaceId,
+            teamId: material.teamId,
+            platformTeamId: material.platformTeamId,
+            platformEpochId: material.platformEpochId,
+            epoch: material.epoch,
+            schema: 'viewport.team_crypto_epoch/v1',
+            status: 'active',
+            encryptionPublicKeyJwk: material.encryptionPublicKeyJwk,
+            encryptionPrivateKeyJwk: material.encryptionPrivateKeyJwk,
+            signingPublicKeyJwk: material.signingPublicKeyJwk,
+            signingPrivateKeyJwk: material.signingPrivateKeyJwk,
+            fingerprint: material.fingerprint,
+            previousEpochFingerprint: material.previousEpochFingerprint,
+        }, options.home ?? configDir());
+        await postJson(options.fetchImpl ?? transportFetch, `${runtimeBaseUrl(options.target)}/crypto/team-epoch-member-grants/${encodeURIComponent(grant.id)}/materialized`, {
+            credential: options.target.credential,
+            receipt: signTeamEpochMemberMaterialization({
+                payload: teamEpochMemberMaterializationPayload({
+                    workspaceId: material.workspaceId,
+                    grantId: grant.id,
+                    teamCryptoEpochId: material.platformEpochId,
+                    teamEpochFingerprint: material.fingerprint,
+                    recipientUserCryptoEpochId: grant.recipient_user_crypto_epoch_id,
+                    recipientUserEpochFingerprint: localUserEpoch.fingerprint,
+                }),
+                signingPrivateKeyJwk: material.signingPrivateKeyJwk,
+                signedByTeamEpochFingerprint: material.fingerprint,
+            }),
+        }, options.target);
+        teamEpochs.push(teamEpoch);
+    }
+    return { accepted: teamEpochs.length, teamEpochs };
+}
+function teamEpochMemberGrantAad(input) {
+    return {
+        schema: 'viewport.team_epoch_member_grant_aad/v1',
+        workspaceId: input.teamEpoch.workspaceId,
+        platformTeamId: input.teamEpoch.platformTeamId ?? null,
+        teamEpochId: input.teamEpoch.platformEpochId ?? null,
+        teamEpochFingerprint: input.teamEpoch.fingerprint,
+        recipientUserEpochId: input.recipient.id,
+        recipientUserEpochFingerprint: input.recipient.fingerprint,
+    };
+}
+async function fetchPublicUserEpoch(options) {
+    const response = await getJson(options.fetchImpl ?? transportFetch, `${runtimeBaseUrl(options.target)}/crypto/epochs`, options.target);
+    const userEpochs = arrayField(objectField(response, 'data'), 'user_epochs').map((item) => publicUserEpochPayload(item));
+    const epoch = userEpochs.find((item) => item.id === options.recipientUserCryptoEpochId);
+    if (!epoch)
+        throw new Error('Recipient user epoch not found in workspace epoch feed.');
+    await validateAndPinPublicEpoch({
+        platformEpochId: epoch.id,
+        workspaceId: epoch.workspace_id,
+        subjectType: 'user',
+        subjectId: String(epoch.user_id),
+        epoch: epoch.epoch,
+        schema: 'viewport.user_crypto_epoch/v1',
+        fingerprint: epoch.fingerprint,
+        encryptionPublicKeyJwk: epoch.encryption_public_key_jwk,
+        signingPublicKeyJwk: epoch.signing_public_key_jwk,
+        previousEpochFingerprint: epoch.previous_epoch_fingerprint ?? null,
+        continuityPayload: epoch.continuity_payload ?? null,
+        continuitySignature: epoch.continuity_signature ?? null,
+        signedByEpochFingerprint: epoch.signed_by_epoch_fingerprint ?? null,
+    }, options.home);
+    return epoch;
+}
+function runtimeBaseUrl(target) {
+    return `${target.serverUrl.replace(/\/+$/, '')}/api/runtime/workspaces/${encodeURIComponent(target.workspaceId)}`;
+}
+async function postJson(fetchImpl, url, body, transportOptions = {}) {
+    const response = await fetchImpl(url, {
+        method: 'POST',
+        headers: trustedEdgeCryptoHeaders({ 'content-type': 'application/json' }),
+        body: JSON.stringify(body),
+        timeoutMs: 5_000,
+        tlsVerify: transportOptions.tlsVerify,
+        caCertPath: transportOptions.caCertPath,
+        tlsPins: transportOptions.tlsPins,
+    });
+    const payload = await response.json().catch(() => null);
+    if (!response.ok)
+        throw new Error(responseError(payload, response));
+    return payload;
+}
+async function getJson(fetchImpl, url, transportOptions) {
+    const requestUrl = new URL(url);
+    requestUrl.searchParams.set('credential', transportOptions.credential);
+    const response = await fetchImpl(requestUrl.toString(), {
+        method: 'GET',
+        headers: trustedEdgeCryptoHeaders(),
+        timeoutMs: 5_000,
+        tlsVerify: transportOptions.tlsVerify,
+        caCertPath: transportOptions.caCertPath,
+        tlsPins: transportOptions.tlsPins,
+    });
+    const payload = await response.json().catch(() => null);
+    if (!response.ok)
+        throw new Error(responseError(payload, response));
+    return payload;
+}
+function trustedEdgeCryptoHeaders(extra = {}) {
+    return {
+        accept: 'application/json',
+        [TRUSTED_EDGE_CRYPTO_PROTOCOL_HEADER]: TRUSTED_EDGE_CRYPTO_PROTOCOL_VERSION,
+        ...extra,
+    };
+}
+function responseError(payload, response) {
+    const message = payload && typeof payload === 'object' && 'message' in payload
+        ? String(payload.message)
+        : `${response.status} ${response.statusText}`;
+    return `Team epoch grant sync failed: ${message}`;
+}
+function publicUserEpochPayload(value) {
+    const data = record(value, 'user epoch');
+    return {
+        id: stringField(data, 'id'),
+        workspace_id: stringField(data, 'workspace_id'),
+        user_id: numberOrStringField(data, 'user_id'),
+        epoch: numberField(data, 'epoch'),
+        fingerprint: stringField(data, 'fingerprint'),
+        encryption_public_key_jwk: objectField(data, 'encryption_public_key_jwk'),
+        signing_public_key_jwk: objectField(data, 'signing_public_key_jwk'),
+        previous_epoch_fingerprint: typeof data.previous_epoch_fingerprint === 'string' ? data.previous_epoch_fingerprint : null,
+        continuity_payload: data.continuity_payload && typeof data.continuity_payload === 'object'
+            ? data.continuity_payload
+            : null,
+        continuity_signature: typeof data.continuity_signature === 'string' ? data.continuity_signature : null,
+        signed_by_epoch_fingerprint: typeof data.signed_by_epoch_fingerprint === 'string'
+            ? data.signed_by_epoch_fingerprint
+            : null,
+    };
+}
+function teamMemberGrantPayload(value) {
+    const data = record(value, 'team member grant');
+    return {
+        id: stringField(data, 'id'),
+        team_crypto_epoch_id: stringField(data, 'team_crypto_epoch_id'),
+        recipient_user_crypto_epoch_id: stringField(data, 'recipient_user_crypto_epoch_id'),
+        aad: objectField(data, 'aad'),
+        encrypted_payload: objectField(data, 'encrypted_payload'),
+    };
+}
+function teamMaterialPayload(value) {
+    const data = record(value, 'team material');
+    return {
+        workspaceId: stringField(data, 'workspaceId'),
+        teamId: stringField(data, 'teamId'),
+        platformTeamId: typeof data.platformTeamId === 'string' ? data.platformTeamId : null,
+        platformEpochId: stringField(data, 'platformEpochId'),
+        epoch: numberField(data, 'epoch'),
+        fingerprint: stringField(data, 'fingerprint'),
+        encryptionPublicKeyJwk: objectField(data, 'encryptionPublicKeyJwk'),
+        encryptionPrivateKeyJwk: objectField(data, 'encryptionPrivateKeyJwk'),
+        signingPublicKeyJwk: objectField(data, 'signingPublicKeyJwk'),
+        signingPrivateKeyJwk: objectField(data, 'signingPrivateKeyJwk'),
+        previousEpochFingerprint: typeof data.previousEpochFingerprint === 'string' ? data.previousEpochFingerprint : null,
+    };
+}
+function arrayField(value, field) {
+    const data = record(value, 'response');
+    const child = data[field];
+    if (!Array.isArray(child))
+        throw new Error(`Response did not include ${field} array.`);
+    return child;
+}
+function objectField(value, field) {
+    const data = record(value, 'response');
+    const child = data[field];
+    if (!child || typeof child !== 'object' || Array.isArray(child)) {
+        throw new Error(`Response did not include ${field} object.`);
+    }
+    return child;
+}
+function record(value, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`Expected ${label} object.`);
+    }
+    return value;
+}
+function stringField(value, field) {
+    const child = value[field];
+    if (typeof child !== 'string' || child.trim().length === 0) {
+        throw new Error(`Response did not include ${field}.`);
+    }
+    return child;
+}
+function numberField(value, field) {
+    const child = value[field];
+    if (typeof child !== 'number') {
+        throw new Error(`Response did not include numeric ${field}.`);
+    }
+    return child;
+}
+function numberOrStringField(value, field) {
+    const child = value[field];
+    if (typeof child !== 'number' && typeof child !== 'string') {
+        throw new Error(`Response did not include ${field}.`);
+    }
+    return child;
+}
+//# sourceMappingURL=team-epoch-grants.js.map

package/dist/security/team-epoch-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-epoch-grants.js","sourceRoot":"","sources":["../../src/security/team-epoch-grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,oBAAoB,GAErB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kCAAkC,EAClC,qCAAqC,EACrC,mCAAmC,EACnC,oCAAoC,EACpC,4BAA4B,EAC5B,0BAA0B,GAG3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAyBnE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAM/C;IACC,MAAM,SAAS,GAAG,MAAM,6BAA6B,CACnD,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,IAAI,CACb,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,uBAAuB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;QAClD,qBAAqB,EAAE,SAAS,CAAC,yBAAyB;QAC1D,GAAG;QACH,OAAO,EAAE;YACP,MAAM,EAAE,wCAAwC;YAChD,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,IAAI;YAChD,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,sBAAsB,EAAE,SAAS,CAAC,sBAAsB;YACxD,uBAAuB,EAAE,SAAS,CAAC,uBAAuB;YAC1D,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;YAClD,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;YACpD,wBAAwB,EAAE,SAAS,CAAC,wBAAwB,IAAI,IAAI;SACrE;KACF,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,kBAAkB,CACxE,OAAO,CAAC,iBAAiB,CAC1B,gBAAgB,EACjB;QACE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;QACrC,8BAA8B,EAAE,OAAO,CAAC,0BAA0B;QAClE,GAAG;QACH,iBAAiB,EAAE,gBAAgB;KACpC,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IACF,OAAO,sBAAsB,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAIjD;IACC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,kCAAkC,EACnE,OAAO,CAAC,MAAM,CACf,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,MAAM,6BAA6B,CACxD,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,KAAK,CAAC,8BAA8B,EACpC,OAAO,CAAC,IAAI,CACb,CAAC;QACF,IAAI,CAAC,cAAc;YAAE,SAAS;QAC9B,MAAM,OAAO,GAAG,4BAA4B,CAAC;YAC3C,sBAAsB,EAAE,cAAc,CAAC,uBAAuB;YAC9D,QAAQ,EAAE,KAAK,CAAC,iBAAiB;YACjC,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAC1C;YACE,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,+BAA+B;YACvC,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;YACvD,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;YACzD,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;YACnD,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;SAC5D,EACD,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAC5B,CAAC;QACF,MAAM,QAAQ,CACZ,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,oCAAoC,kBAAkB,CACrF,KAAK,CAAC,EAAE,CACT,eAAe,EAChB;YACE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;YACrC,OAAO,EAAE,kCAAkC,CAAC;gBAC1C,OAAO,EAAE,qCAAqC,CAAC;oBAC7C,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,iBAAiB,EAAE,QAAQ,CAAC,eAAe;oBAC3C,oBAAoB,EAAE,QAAQ,CAAC,WAAW;oBAC1C,0BAA0B,EAAE,KAAK,CAAC,8BAA8B;oBAChE,6BAA6B,EAAE,cAAc,CAAC,WAAW;iBAC1D,CAAC;gBACF,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;gBACnD,4BAA4B,EAAE,QAAQ,CAAC,WAAW;aACnD,CAAC;SACH,EACD,OAAO,CAAC,MAAM,CACf,CAAC;QACF,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,uBAAuB,CAAC,KAGhC;IACC,OAAO;QACL,MAAM,EAAE,yCAAyC;QACjD,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;QACxC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,cAAc,IAAI,IAAI;QACtD,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,eAAe,IAAI,IAAI;QACpD,oBAAoB,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;QACjD,oBAAoB,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE;QACxC,6BAA6B,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;KAC3D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAKnC;IACC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EACjD,OAAO,CAAC,MAAM,CACf,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACvF,sBAAsB,CAAC,IAAI,CAAC,CAC7B,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACvF,MAAM,yBAAyB,CAC7B;QACE,eAAe,EAAE,KAAK,CAAC,EAAE;QACzB,WAAW,EAAE,KAAK,CAAC,YAAY;QAC/B,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,+BAA+B;QACvC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,sBAAsB,EAAE,KAAK,CAAC,yBAAyB;QACvD,mBAAmB,EAAE,KAAK,CAAC,sBAAsB;QACjD,wBAAwB,EAAE,KAAK,CAAC,0BAA0B,IAAI,IAAI;QAClE,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACnD,mBAAmB,EAAE,KAAK,CAAC,oBAAoB,IAAI,IAAI;QACvD,wBAAwB,EAAE,KAAK,CAAC,2BAA2B,IAAI,IAAI;KACpE,EACD,OAAO,CAAC,IAAI,CACb,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAA6B;IACnD,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,kBAAkB,CACzF,MAAM,CAAC,WAAW,CACnB,EAAE,CAAC;AACN,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,SAAgC,EAChC,GAAW,EACX,IAA6B,EAC7B,mBAII,EAAE;IAEN,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,wBAAwB,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QACzE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,OAAO,EAAE,gBAAgB,CAAC,OAAO;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,SAAgC,EAChC,GAAW,EACX,gBAAuC;IAEvC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE;QACtD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,wBAAwB,EAAE;QACnC,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,OAAO,EAAE,gBAAgB,CAAC,OAAO;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgC,EAAE;IAClE,OAAO;QACL,MAAM,EAAE,kBAAkB;QAC1B,CAAC,mCAAmC,CAAC,EAAE,oCAAoC;QAC3E,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,QAAkB;IACzD,MAAM,OAAO,GACX,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,SAAS,IAAI,OAAO;QAC5D,CAAC,CAAC,MAAM,CAAE,OAAiC,CAAC,OAAO,CAAC;QACpD,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;IAClD,OAAO,iCAAiC,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACzC,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;QAC3B,YAAY,EAAE,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC;QAC/C,OAAO,EAAE,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC;QAC7C,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;QACjC,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7C,yBAAyB,EAAE,WAAW,CAAC,IAAI,EAAE,2BAA2B,CAAc;QACtF,sBAAsB,EAAE,WAAW,CAAC,IAAI,EAAE,wBAAwB,CAAc;QAChF,0BAA0B,EACxB,OAAO,IAAI,CAAC,0BAA0B,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI;QAC9F,kBAAkB,EAChB,IAAI,CAAC,kBAAkB,IAAI,OAAO,IAAI,CAAC,kBAAkB,KAAK,QAAQ;YACpE,CAAC,CAAE,IAAI,CAAC,kBAAgC;YACxC,CAAC,CAAC,IAAI;QACV,oBAAoB,EAClB,OAAO,IAAI,CAAC,oBAAoB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI;QAClF,2BAA2B,EACzB,OAAO,IAAI,CAAC,2BAA2B,KAAK,QAAQ;YAClD,CAAC,CAAC,IAAI,CAAC,2BAA2B;YAClC,CAAC,CAAC,IAAI;KACX,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAChD,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;QAC3B,oBAAoB,EAAE,WAAW,CAAC,IAAI,EAAE,sBAAsB,CAAC;QAC/D,8BAA8B,EAAE,WAAW,CAAC,IAAI,EAAE,gCAAgC,CAAC;QACnF,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,CAAc;QAC1C,iBAAiB,EAAE,WAAW,CAAC,IAAI,EAAE,mBAAmB,CAAkC;KAC3F,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAgB;IAa3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC5C,OAAO;QACL,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7C,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC;QACnC,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QACpF,eAAe,EAAE,WAAW,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACrD,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;QACjC,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7C,sBAAsB,EAAE,WAAW,CAAC,IAAI,EAAE,wBAAwB,CAAc;QAChF,uBAAuB,EAAE,WAAW,CAAC,IAAI,EAAE,yBAAyB,CAAc;QAClF,mBAAmB,EAAE,WAAW,CAAC,IAAI,EAAE,qBAAqB,CAAc;QAC1E,oBAAoB,EAAE,WAAW,CAAC,IAAI,EAAE,sBAAsB,CAAc;QAC5E,wBAAwB,EACtB,OAAO,IAAI,CAAC,wBAAwB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI;KAC3F,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,SAAS,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,UAAU,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,KAAa;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,KAAa;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA8B,EAAE,KAAa;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server/context-preview-service.d.ts

@@ -0,0 +1,26 @@
+import { previewContextCandidate } from '../context/local-edge-candidates.js';
+export interface ContextCandidatePreviewInput {
+    contextResourceId: string;
+    workspaceId?: string;
+    actorName: string;
+    candidateEventId?: string;
+    payloadDigest?: string;
+    passphrase?: string;
+    recoveryCode?: string;
+}
+export type ContextCandidatePreviewProof = {
+    ok: true;
+    previewProofId: string;
+    expiresAt: string | null;
+    workspaceId: string;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function previewContextCandidateForTrustedEdge(input: ContextCandidatePreviewInput): Promise<{
+    candidate: Awaited<ReturnType<typeof previewContextCandidate>> & {
+        previewProof: ContextCandidatePreviewProof;
+    };
+    previewProof: ContextCandidatePreviewProof;
+}>;
+//# sourceMappingURL=context-preview-service.d.ts.map

package/dist/server/context-preview-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-preview-service.d.ts","sourceRoot":"","sources":["../../src/server/context-preview-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAI9E,MAAM,WAAW,4BAA4B;IAC3C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC;IACT,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,GAAG;QAC/D,YAAY,EAAE,4BAA4B,CAAC;KAC5C,CAAC;IACF,YAAY,EAAE,4BAA4B,CAAC;CAC5C,CAAC,CA2BD"}

package/dist/server/context-preview-service.js

@@ -0,0 +1,71 @@
+import { resolveConfiguredContextSyncTarget } from '../cli/context-sync-target.js';
+import { previewContextCandidate } from '../context/local-edge-candidates.js';
+import { recordContextCandidatePreviewProof } from '../context/local-edge-sync.js';
+import { ConfigManager } from '../core/config.js';
+export async function previewContextCandidateForTrustedEdge(input) {
+    if (!input.candidateEventId && !input.payloadDigest) {
+        throw new Error('candidateEventId or payloadDigest is required');
+    }
+    const candidate = await previewContextCandidate({
+        contextResourceId: input.contextResourceId,
+        actorName: input.actorName,
+        candidateEventId: input.candidateEventId,
+        payloadDigest: input.payloadDigest,
+        credentials: {
+            passphrase: input.passphrase ?? '',
+            recoveryCode: input.recoveryCode ?? '',
+        },
+    });
+    const previewProof = await createPreviewProof({
+        contextResourceId: input.contextResourceId,
+        workspaceId: input.workspaceId,
+        candidateEventId: candidate.proposalEventId,
+        payloadDigest: candidate.payloadDigest,
+    });
+    return {
+        candidate: { ...candidate, previewProof },
+        previewProof,
+    };
+}
+async function createPreviewProof(input) {
+    try {
+        const target = await resolveSavedSyncTarget(input.contextResourceId, input.workspaceId);
+        if (!target) {
+            return {
+                ok: false,
+                error: input.workspaceId
+                    ? `No saved remote credentials are available for workspace ${input.workspaceId}.`
+                    : 'Preview proof requires an explicit workspace when this daemon has multiple remote bindings.',
+            };
+        }
+        const proof = await recordContextCandidatePreviewProof({
+            workspaceId: target.workspaceId,
+            serverUrl: target.serverUrl,
+            credential: target.credential,
+            contextResourceId: input.contextResourceId,
+            candidateEventId: input.candidateEventId,
+            payloadDigest: input.payloadDigest,
+            previewDigest: input.payloadDigest,
+            tlsVerify: target.tlsVerify,
+            caCertPath: target.caCertPath,
+            tlsPins: target.tlsPins,
+        });
+        return { ok: true, workspaceId: target.workspaceId, ...proof };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            error: error instanceof Error ? error.message : 'Context preview proof failed',
+        };
+    }
+}
+async function resolveSavedSyncTarget(contextResourceId, workspaceId) {
+    const manager = new ConfigManager();
+    await manager.load();
+    const daemon = manager.getDaemonConfig() ?? {};
+    return resolveConfiguredContextSyncTarget(daemon, {
+        contextResourceId,
+        requestedWorkspaceId: workspaceId,
+    });
+}
+//# sourceMappingURL=context-preview-service.js.map

package/dist/server/context-preview-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-preview-service.js","sourceRoot":"","sources":["../../src/server/context-preview-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAgBlD,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,KAAmC;IAOnC,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC;QAC9C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE;YACX,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;SACvC;KACF,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC;QAC5C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,SAAS,CAAC,eAAe;QAC3C,aAAa,EAAE,SAAS,CAAC,aAAa;KACvC,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,EAAE,GAAG,SAAS,EAAE,YAAY,EAAE;QACzC,YAAY;KACb,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAKjC;IACC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,CAAC,WAAW;oBACtB,CAAC,CAAC,2DAA2D,KAAK,CAAC,WAAW,GAAG;oBACjF,CAAC,CAAC,6FAA6F;aAClG,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,kCAAkC,CAAC;YACrD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,KAAK,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;SAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,iBAAyB,EACzB,WAAoB;IASpB,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IACpC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO,kCAAkC,CAAC,MAAM,EAAE;QAChD,iBAAiB;QACjB,oBAAoB,EAAE,WAAW;KAClC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/http-context-routes.d.ts

@@ -1,3 +1,4 @@
 import type { FastifyInstance } from 'fastify';
-export declare function registerContextRoutes(app: FastifyInstance): void;
+import type { Daemon } from '../core/daemon.js';
+export declare function registerContextRoutes(app: FastifyInstance, daemon: Daemon): void;
 //# sourceMappingURL=http-context-routes.d.ts.map

package/dist/server/http-context-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-context-routes.d.ts","sourceRoot":"","sources":["../../src/server/http-context-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAyE/C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CA4KhE"}
+{"version":3,"file":"http-context-routes.d.ts","sourceRoot":"","sources":["../../src/server/http-context-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAY/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAoEhD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAuMhF"}

package/dist/server/http-context-routes.js

@@ -1,9 +1,11 @@
 import { z } from 'zod';
 import { addContextEntry, initContextResource, readContextStatus, resolveContextBundle, } from '../context/local-edge-store.js';
-import { previewContextCandidate, proposeContextEntry } from '../context/local-edge-candidates.js';
+import { proposeContextEntry } from '../context/local-edge-candidates.js';
 import { pushContextEvents } from '../context/local-edge-sync.js';
-import { ConfigManager } from '../core/config.js';
 import { resolveConfiguredContextSyncTarget } from '../cli/context-sync-target.js';
+import { ConfigManager } from '../core/config.js';
+import { previewContextCandidateForTrustedEdge } from './context-preview-service.js';
+import { verifyTrustedEdgeCommandCapability } from './trusted-edge-command-capability.js';
 const CredentialsSchema = z.object({
     passphrase: z.string().min(1),
     recoveryCode: z.string().min(1),
@@ -24,6 +26,7 @@ const AddBodySchema = CredentialsSchema.extend({
 });
 const ResolveBodySchema = z.object({
     contextResourceId: z.string().min(1).optional(),
+    workspaceId: z.string().min(1).optional(),
     actorName: z.string().min(1),
     query: z.string().default(''),
     maxItems: z.number().int().min(1).max(500).optional(),
@@ -37,12 +40,15 @@ const ResolveBodySchema = z.object({
         .optional(),
     passphrase: z.string().optional(),
     recoveryCode: z.string().optional(),
+    capabilityToken: z.string().min(1).optional(),
 });
 const CandidatePreviewBodySchema = z.object({
     contextResourceId: z.string().min(1).optional(),
+    workspaceId: z.string().min(1).optional(),
     actorName: z.string().min(1),
     candidateEventId: z.string().min(1).optional(),
     payloadDigest: z.string().min(1).optional(),
+    capabilityToken: z.string().min(1).optional(),
     passphrase: z.string().optional(),
     recoveryCode: z.string().optional(),
 });
@@ -58,7 +64,7 @@ const CandidateProposeBodySchema = z.object({
     recoveryCode: z.string().optional(),
     sync: z.boolean().optional(),
 });
-export function registerContextRoutes(app) {
+export function registerContextRoutes(app, daemon) {
     app.get('/api/context/status', async (request) => {
         return readContextStatus({
             contextResourceId: request.query.context,
@@ -123,20 +129,36 @@ export function registerContextRoutes(app) {
         if (!contextResourceId) {
             return reply.status(400).send({ error: 'contextResourceId is required' });
         }
-        const bundle = await resolveContextBundle({
-            contextResourceId,
-            actorName: parsed.data.actorName,
-            query: parsed.data.query,
-            maxItems: parsed.data.maxItems,
-            includePrivate: parsed.data.includePrivate,
-            profile: parsed.data.profile,
-            profilePin: parsed.data.profilePin,
-            credentials: {
-                passphrase: parsed.data.passphrase ?? '',
-                recoveryCode: parsed.data.recoveryCode ?? '',
-            },
-        });
-        return { bundle };
+        if (!parsed.data.workspaceId) {
+            return reply.status(400).send({ error: 'workspaceId is required for trusted-edge resolve' });
+        }
+        try {
+            await verifyTrustedEdgeCommandCapability(daemon, {
+                token: parsed.data.capabilityToken,
+                workspaceId: parsed.data.workspaceId,
+                purpose: 'context-resolve',
+                contextResourceId,
+            });
+            const bundle = await resolveContextBundle({
+                contextResourceId,
+                actorName: parsed.data.actorName,
+                query: parsed.data.query,
+                maxItems: parsed.data.maxItems,
+                includePrivate: parsed.data.includePrivate,
+                profile: parsed.data.profile,
+                profilePin: parsed.data.profilePin,
+                credentials: {
+                    passphrase: parsed.data.passphrase ?? '',
+                    recoveryCode: parsed.data.recoveryCode ?? '',
+                },
+            });
+            return { bundle };
+        }
+        catch (error) {
+            return reply
+                .status(400)
+                .send({ error: error instanceof Error ? error.message : 'Context resolve failed' });
+        }
     });
     app.post('/api/context/candidates/preview', async (request, reply) => {
         const parsed = CandidatePreviewBodySchema.safeParse(request.body);
@@ -149,20 +171,33 @@ export function registerContextRoutes(app) {
         if (!contextResourceId) {
             return reply.status(400).send({ error: 'contextResourceId is required' });
         }
-        if (!parsed.data.candidateEventId && !parsed.data.payloadDigest) {
-            return reply.status(400).send({ error: 'candidateEventId or payloadDigest is required' });
+        if (!parsed.data.workspaceId) {
+            return reply.status(400).send({ error: 'workspaceId is required for trusted-edge preview' });
+        }
+        try {
+            await verifyTrustedEdgeCommandCapability(daemon, {
+                token: parsed.data.capabilityToken,
+                workspaceId: parsed.data.workspaceId,
+                purpose: 'context-candidate-preview',
+                contextResourceId,
+                candidateEventId: parsed.data.candidateEventId,
+                payloadDigest: parsed.data.payloadDigest,
+            });
+            return await previewContextCandidateForTrustedEdge({
+                contextResourceId,
+                workspaceId: parsed.data.workspaceId,
+                actorName: parsed.data.actorName,
+                candidateEventId: parsed.data.candidateEventId,
+                payloadDigest: parsed.data.payloadDigest,
+                passphrase: parsed.data.passphrase,
+                recoveryCode: parsed.data.recoveryCode,
+            });
+        }
+        catch (error) {
+            return reply
+                .status(400)
+                .send({ error: error instanceof Error ? error.message : 'Context preview failed' });
         }
-        const candidate = await previewContextCandidate({
-            contextResourceId,
-            actorName: parsed.data.actorName,
-            candidateEventId: parsed.data.candidateEventId,
-            payloadDigest: parsed.data.payloadDigest,
-            credentials: {
-                passphrase: parsed.data.passphrase ?? '',
-                recoveryCode: parsed.data.recoveryCode ?? '',
-            },
-        });
-        return { candidate };
     });
     app.post('/api/context/candidates', async (request, reply) => {
         const parsed = CandidateProposeBodySchema.safeParse(request.body);