@wenathlan/extension 1.1.61 → 1.1.63

package/dist/secretvault.d.ts

@@ -0,0 +1,89 @@
+import type { secretvaultentry, toolstep } from "./types.js";
+/**
+ * Secret vault logic of the 1.1.62 family.
+ * The vault seam lives here: secrets enter through put and leave through fetch at the last possible moment before a credential field, while the persisted records carry only the label, the exact origin scope, the profile workspace, the provenance and the sha-256 verification digest — no plaintext value ever reaches a storage writer, a log entry, a memory record or an export path.
+ * The scan paths refuse secrets in plain sight: a step option, a variable or a plan text whose value digests to a stored vault entry is a leak that refuses the plan, and a raw typed value behind a masked field shape never rides a step at all.
+ * Honest limit: the browser offers no vault hardware, so the seam rides the session storage area the background wires, which keeps values in memory only and never persists them to disk; the persistence layer stores metadata alone, mirroring the immutablelog seam honesty.
+ */
+/** The digest prefix every stored vault digest carries so raw values never persist anywhere. */
+export declare const vaultdigestprefix = "sha256:";
+/** Derives the sha-256 verification digest of one secret value through the platform crypto seam; the digest persists while the value never does. */
+export declare function vaultdigestof(value: string): Promise<string>;
+/** Builds one vault record from its metadata: the label, the exact origin scope, the profile workspace and the provenance; the digest verifies the value behind the seam without ever carrying it. */
+export declare function vaultentryof(input: {
+    label: string;
+    scope: string;
+    profileid: string;
+    provenance: "user" | "session";
+    digest: string;
+    now: number;
+    vaultid?: string;
+}): secretvaultentry;
+/** Creates an in memory vault seam: values live in the map only, which is the honest fallback the background wraps with the session storage area that never persists to disk. */
+export declare function inmemoryvault(): {
+    put(vaultid: string, value: string): Promise<void>;
+    fetch(vaultid: string): Promise<string | undefined>;
+    drop(vaultid: string): Promise<void>;
+};
+/** Stores one secret behind the vault seam and returns its metadata record alone: the value enters the seam and no return path carries it. */
+export declare function vaultstore(input: {
+    seam: {
+        put(vaultid: string, value: string): Promise<void>;
+    };
+    label: string;
+    scope: string;
+    profileid: string;
+    provenance: "user" | "session";
+    value: string;
+    now: number;
+}): Promise<secretvaultentry>;
+/** Reads one secret from the vault seam at the last possible moment before its credential field: the value returns to the dispatching caller only, never to a log writer, and the record stamps its last use. */
+export declare function vaultvaluefor(input: {
+    seam: {
+        fetch(vaultid: string): Promise<string | undefined>;
+    };
+    entry: secretvaultentry;
+}): Promise<{
+    ok: boolean;
+    value?: string;
+    reason: string;
+    used?: secretvaultentry;
+}>;
+/** Drops one secret from the vault seam; the metadata record leaves with it because a deleted secret leaves no trace a surface could read. */
+export declare function vaultdelete(input: {
+    seam: {
+        drop(vaultid: string): Promise<void>;
+    };
+    entry: secretvaultentry;
+}): Promise<{
+    dropped: boolean;
+    label: string;
+    reason: string;
+}>;
+/** Reads whether one vault record covers an origin: the scope binds to exactly one origin, so a secret of one site never rides another site. */
+export declare function vaultcovers(entry: secretvaultentry, origin: string): boolean;
+/** Scans candidate step values, variables and plan texts for leaked secrets: a candidate whose sha-256 digest matches a stored vault digest is a leak the plan refuses, because a plaintext secret outside the vault never rides a step, a variable or a plan. */
+export declare function secretleakscan(input: {
+    candidates: string[];
+    entries: secretvaultentry[];
+}): Promise<{
+    leaks: string[];
+    reason: string;
+}>;
+/** Reads whether one step carries a raw typed value behind a masked field shape: a credential step names its vault label instead, because a raw password or token value never rides a step option. */
+export declare function secretshapecarrying(step: Pick<toolstep, "kind" | "target" | "value" | "options">): {
+    carries: boolean;
+    reason: string;
+};
+/** Builds the vault view the surfaces render: the labels, scopes, provenance and last use times only, because no surface ever displays or exports a secret value. */
+export declare function vaultview(entries: secretvaultentry[]): Array<{
+    vaultid: string;
+    label: string;
+    scope: string;
+    provenance: string;
+    createdat: number;
+    lastusedat?: number;
+}>;
+/** Builds the plain language prompt of one credential step: the label the vault carries, never the value. */
+export declare function vaultprompttext(entry: secretvaultentry, origin: string): string;
+//# sourceMappingURL=secretvault.d.ts.map

package/dist/secretvault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretvault.d.ts","sourceRoot":"","sources":["../secretvault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI7D;;;;;GAKG;AAEH,gGAAgG;AAChG,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAE3C,oJAAoJ;AACpJ,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlE;AAED,sMAAsM;AACtM,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAKxL;AAED,iLAAiL;AACjL,wBAAgB,aAAa,IAAI;IAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAAC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAOjL;AAED,8IAA8I;AAC9I,wBAAsB,UAAU,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE;QAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAKhP;AAED,iNAAiN;AACjN,wBAAsB,aAAa,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE;QAAE,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAIxN;AAED,8IAA8I;AAC9I,wBAAsB,WAAW,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAGlL;AAED,gJAAgJ;AAChJ,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAE5E;AAED,kQAAkQ;AAClQ,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAS/I;AAQD,sMAAsM;AACtM,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOvI;AAED,qKAAqK;AACrK,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3K;AAED,6GAA6G;AAC7G,wBAAgB,eAAe,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE/E"}

package/dist/sessioninterface.d.ts

@@ -0,0 +1,213 @@
+import type { agentplan, cancelrunaction, consentmemoryentry, correctionentry, emptystatesurface, errorsurface, errorcause, historyindexentry, historysearchhit, historysearchquery, planprogress, recallindexentry, recallmatch, recallquery, rollbackdescriptor, runsummary, scratchpadentry, sessiongridrow, sitenote, stepoutcome, storedrunlog, tabsessionref } from "./types.js";
+/** Seals one sensitive note body at rest with a local keystream; the sealed text persists while the plain body never does. */
+export declare function sealnotebody(id: string, body: string): string;
+/** Opens one sealed note body for the reading surface; the plain body leaves storage only through this reader. */
+export declare function opennotebody(id: string, sealedbody: string): string;
+/** Builds one site note record per origin: the title, the body, the author provenance and the timestamps; a sensitive note seals its body at rest while a plain note keeps its body readable. */
+export declare function sitenoteof(input: {
+    origin: string;
+    title: string;
+    body: string;
+    author: string;
+    sensitive?: boolean;
+    now: number;
+    id?: string;
+}): sitenote;
+/** Reads the display body of one site note: a sensitive note opens its sealed body for the reader while a plain note returns its body. */
+export declare function notebodyof(note: sitenote): string;
+/** Applies one edit to a site note: the edit keeps the author provenance of the writer and the updated timestamp while the created timestamp stays. */
+export declare function editnote(note: sitenote, input: {
+    title: string;
+    body: string;
+    author: string;
+    now: number;
+}): sitenote;
+/** Expires the site notes past the user configured window: an absent window keeps every note while the expired notes leave the store at the user boundary only. */
+export declare function expirnotes(notes: sitenote[], retention: number | undefined, now: number): sitenote[];
+/** Builds one append only scratchpad entry of one task with its step provenance; the scratchpad never rewrites a written entry. */
+export declare function scratchentryof(input: {
+    taskid: string;
+    sessionid: string;
+    text: string;
+    stepid?: string;
+    author: string;
+    now: number;
+    id?: string;
+}): scratchpadentry;
+/** Reads the scratchpad of one task only: entries of another task never cross the owning task session boundary. */
+export declare function scratchpadof(entries: scratchpadentry[], taskid: string, sessionid: string): scratchpadentry[];
+/** Prunes the scratchpad entries past the user configured window: an absent window keeps every entry while the pruned entries leave the pad only at the user boundary. */
+export declare function prunescratchpad(entries: scratchpadentry[], window: number | undefined, now: number): scratchpadentry[];
+/** Distills one run summary from the completed run: the origins visited, the kinds executed and the per step outcomes inside the user configured window with no fixed cap; the distillation names its provenance. */
+export declare function distillrunsummary(input: {
+    plan: agentplan;
+    outcomes: stepoutcome[];
+    origins: string[];
+    sessionid: string;
+    window?: number;
+    provenance: "offscreenworker" | "inline";
+    now: number;
+}): runsummary;
+/** Builds the runsummary search corpus entry of one distilled summary so historysearch indexes every summary beside the notes and the session metadata. */
+export declare function summaryhistoryentry(summary: runsummary): historyindexentry;
+/** Builds the sitenote search corpus entry of one note; a sensitive note indexes its title and origin only so the sealed body never enters the corpus. */
+export declare function notehistoryentry(note: sitenote): historyindexentry;
+/** Builds one recall index entry from a past extraction record: the fingerprint deduplicates repeated extractions while the run and step provenance stays readable. */
+export declare function recallentryof(input: {
+    origin: string;
+    runid: string;
+    stepid: string;
+    text: string;
+    at: number;
+}): recallindexentry;
+/** Adds one recall index entry with fingerprint deduplication: a repeated extraction keeps its first index entry while later duplicates never double rank. */
+export declare function addrecallentry(index: recallindexentry[], entry: recallindexentry): recallindexentry[];
+/** Ranks the indexed extractions by local text similarity inside the worker: the jaccard overlap of the query terms and the entry terms, scoped to the origins of the run scope, with the provenance of every match. */
+export declare function rankrecall(index: recallindexentry[], query: recallquery, scope: {
+    origins: string[];
+}): recallmatch[];
+/** Expires the recall index entries past the user configured window: the live index keeps the window while the extraction records themselves stay for the audit trail. */
+export declare function expirerecallindex(index: recallindexentry[], window: number | undefined, now: number): recallindexentry[];
+/** Builds one correction memory entry from a plan review edit: the step shape before and after the edit with the reason in plain language. */
+export declare function editedcorrectionof(input: {
+    origin: string;
+    kind: string;
+    stepid: string;
+    original: string;
+    corrected: string;
+    reason: string;
+    now: number;
+    id?: string;
+}): correctionentry;
+/** Builds one correction memory entry from a rejected step: the step shape it refused with the rejection reason. */
+export declare function rejectedcorrectionof(input: {
+    origin: string;
+    kind: string;
+    stepid: string;
+    original: string;
+    reason: string;
+    now: number;
+    id?: string;
+}): correctionentry;
+/** Reads the past corrections that match a proposed step by origin and kind so proposal requests feed the matching history in. */
+export declare function matchingcorrections(corrections: correctionentry[], proposal: {
+    origin: string;
+    kind: string;
+}): correctionentry[];
+/** Expires the correction memory entries past the user configured window: an absent window keeps every correction. */
+export declare function expirecorrections(corrections: correctionentry[], window: number | undefined, now: number): correctionentry[];
+/** Builds one consent memory entry per origin: every grant, denial, expiry and revocation lands with its boundary and kinds while the record stays advisory. */
+export declare function consentmemoryof(input: {
+    origin: string;
+    decision: "grant" | "deny" | "expire" | "revoke";
+    boundary: string;
+    kinds: string[];
+    expiresat?: number;
+    now: number;
+    id?: string;
+}): consentmemoryentry;
+/** Reads the prior consent decisions of one origin for the prompt surface: the history stays advisory, the denial records carry the same weight as the grants and no entry ever auto grants. */
+export declare function consentadvisory(entries: consentmemoryentry[], origin: string, now: number): consentmemoryentry[];
+/** Reads the advisory verdict of the consent memory for a new prompt: the latest decision names itself, a refusal keeps its refusal and no history widens a boundary. */
+export declare function consentadvisoryverdict(entries: consentmemoryentry[], origin: string, kind: string): {
+    advisory: boolean;
+    reason: string;
+};
+/** Computes the queued and the executed steps of one run from the plan and its progress: the queued steps never executed while the executed steps stay in the sealed log. */
+export declare function rollbacksplit(plan: agentplan | undefined, progress: planprogress | undefined): {
+    executedstepids: string[];
+    queuedstepids: string[];
+};
+/** Builds the rollback option descriptor of one cancelrun: the queued scope rolls the queued steps back only while the executed steps stay untouched in the immutable log. */
+export declare function rollbackof(plan: agentplan | undefined, progress: planprogress | undefined, preference: "queued" | "none" | undefined): rollbackdescriptor;
+/** Builds one cancelrun action with its rollback option descriptor; the action never touches the sealed log of the executed steps. */
+export declare function cancelrunactionof(input: {
+    runid: string;
+    sessionid: string;
+    plan: agentplan | undefined;
+    progress: planprogress | undefined;
+    preference: "queued" | "none" | undefined;
+}): cancelrunaction;
+/** Builds one error surface payload of a failed step: the cause class, the message, the retry hint with the policy verdict and the context facts. */
+export declare function errorsurfaceof(input: {
+    stepid: string;
+    runid: string;
+    message: string;
+    cause: errorcause;
+    retryallowed: boolean;
+    retryreason: string;
+    context: Record<string, string>;
+    now: number;
+}): errorsurface;
+/** Classifies the cause of one failed step: a policy refusal and a gate wait carry their own classes, a network shaped message names the network and every other failure stays with the page. */
+export declare function classifyfailure(input: {
+    message: string;
+    policyrefused: boolean;
+    gatewait: boolean;
+}): errorcause;
+/** Reads the retry hint of one error surface: a retry passes only through a new reviewed dispatch, so the verdict names the reviewed path instead of an automatic one. */
+export declare function retryhintof(surface: errorsurface): {
+    allowed: boolean;
+    reason: string;
+};
+/** Derives the session grid rows from the existing session stores with no new state: the live run derives from the session, the plan and its progress, the saved runs derive from the sealed logs and their summaries, and the per tab lock state names the concurrent holder. */
+export declare function sessiongridrows(input: {
+    session?: {
+        id: string;
+        tabid: number;
+        origin: string;
+        stoppedat?: number;
+        pausedat?: number;
+        grants?: string[];
+    };
+    plan?: agentplan;
+    progress?: planprogress;
+    logs: storedrunlog[];
+    summaries: runsummary[];
+    locks: Array<{
+        runid: string;
+    }>;
+    tabsessions: tabsessionref[];
+}): sessiongridrow[];
+/** Normalizes one history search query: the non empty text with the optional origin, time range and outcome filters. */
+export declare function historyqueryof(value: unknown): historysearchquery | undefined;
+/** Adds one corpus entry to the incremental history index: each store write lands in the index at once so the search reads a growing corpus with no rebuild. */
+export declare function addhistoryentry(corpus: historyindexentry[], entry: historyindexentry): historyindexentry[];
+/** Extracts the matched terms of one query inside one text, case insensitive, for the result highlighting. */
+export declare function highlightterms(text: string, query: string): string[];
+/** Searches the one corpus of session metadata, notes and run summaries: the text matches with the matched terms highlighted, filtered by origin, time range and outcome. */
+export declare function historysearch(corpus: historyindexentry[], query: historysearchquery): historysearchhit[];
+/** Serves the empty state guidance of one session interface surface in plain language: the grid explains the first run, the search box suggests a first query, the notes explain the note flow and the scratchpad explains how the agent writes. */
+export declare function emptystatemessage(surface: emptystatesurface, origin?: string): string;
+/** Builds the per tab isolation key of one tab so parallel tabs never collide inside the session stores. */
+export declare function tabsessionkey(tabid: number): string;
+/** Builds one per tab session reference that isolates the session state per tab: parallel tabs keep their own session, run and origin references. */
+export declare function tabsessionrefof(input: {
+    tabid: number;
+    sessionid: string;
+    runid?: string;
+    origin: string;
+    now: number;
+}): tabsessionref;
+/** Exports the site notes, the run summaries and the correction memory as one audit bundle: every record carries its provenance while sensitive note bodies stay sealed. */
+export declare function sessionbundleof(input: {
+    notes: sitenote[];
+    summaries: runsummary[];
+    corrections: correctionentry[];
+    exportedat: number;
+}): {
+    kind: "sessionbundle";
+    notes: sitenote[];
+    summaries: runsummary[];
+    corrections: correctionentry[];
+    exportedat: number;
+};
+/**
+ * The recall seam the memory adapter documents for the future remote recall backend: today the local fingerprint index answers every semanticrecall query inside the extension, and the seam keeps the query and answer shapes stable so a reviewed remote backend can take the calls later without touching the callers.
+ */
+export interface recallseam {
+    recall(query: recallquery, scope: {
+        origins: string[];
+    }): Promise<recallmatch[]>;
+}
+//# sourceMappingURL=sessioninterface.d.ts.map

package/dist/sessioninterface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessioninterface.d.ts","sourceRoot":"","sources":["../sessioninterface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,iBAAiB,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AA8BvX,8HAA8H;AAC9H,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED,kHAAkH;AAClH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,iMAAiM;AACjM,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,QAAQ,CAO1J;AAED,0IAA0I;AAC1I,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAGjD;AAED,uJAAuJ;AACvJ,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,QAAQ,CAKtH;AAED,mKAAmK;AACnK,wBAAgB,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,EAAE,CAGpG;AAED,mIAAmI;AACnI,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,CAIrK;AAED,mHAAmH;AACnH,wBAAgB,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,EAAE,CAE7G;AAED,0KAA0K;AAC1K,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAGtH;AAED,qNAAqN;AACrN,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,iBAAiB,GAAG,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAQ/M;AAED,2JAA2J;AAC3J,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,UAAU,GAAG,iBAAiB,CAE1E;AAED,0JAA0J;AAC1J,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,iBAAiB,CAElE;AAED,uKAAuK;AACvK,wBAAgB,aAAa,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAKlI;AAED,8JAA8J;AAC9J,wBAAgB,cAAc,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAGrG;AAOD,wNAAwN;AACxN,wBAAgB,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,WAAW,EAAE,CAiBrH;AAED,0KAA0K;AAC1K,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAGxH;AAED,8IAA8I;AAC9I,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,CAI1L;AAED,oHAAoH;AACpH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,CAGzK;AAED,kIAAkI;AAClI,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,EAAE,CAEjI;AAED,sHAAsH;AACtH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAG5H;AAED,gKAAgK;AAChK,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,kBAAkB,CAIhN;AAED,gMAAgM;AAChM,wBAAgB,eAAe,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAEhH;AAED,yKAAyK;AACzK,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAMzI;AAED,6KAA6K;AAC7K,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,EAAE,QAAQ,EAAE,YAAY,GAAG,SAAS,GAAG;IAAE,eAAe,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAKrJ;AAED,8KAA8K;AAC9K,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,EAAE,QAAQ,EAAE,YAAY,GAAG,SAAS,EAAE,UAAU,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,kBAAkB,CAIzJ;AAED,sIAAsI;AACtI,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE,YAAY,GAAG,SAAS,CAAC;IAAC,UAAU,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,eAAe,CAE1M;AAED,qJAAqJ;AACrJ,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,CAGnN;AAED,iMAAiM;AACjM,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG,UAAU,CAKjH;AAED,0KAA0K;AAC1K,wBAAgB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAGvF;AAED,kRAAkR;AAClR,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,YAAY,EAAE,CAAC;IAAC,SAAS,EAAE,UAAU,EAAE,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,WAAW,EAAE,aAAa,EAAE,CAAA;CAAE,GAAG,cAAc,EAAE,CAiBvU;AAED,wHAAwH;AACxH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,SAAS,CAU7E;AAED,gKAAgK;AAChK,wBAAgB,eAAe,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,EAAE,CAE1G;AAED,8GAA8G;AAC9G,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAIpE;AAED,6KAA6K;AAC7K,wBAAgB,aAAa,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,EAAE,CAiBxG;AAED,oPAAoP;AACpP,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAKrF;AAED,4GAA4G;AAC5G,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,qJAAqJ;AACrJ,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,aAAa,CAIvI;AAED,4KAA4K;AAC5K,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAAC,SAAS,EAAE,UAAU,EAAE,CAAC;IAAC,WAAW,EAAE,eAAe,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAAC,SAAS,EAAE,UAAU,EAAE,CAAC;IAAC,WAAW,EAAE,eAAe,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAEpQ;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;CAClF"}

package/dist/transparency.d.ts

@@ -0,0 +1,46 @@
+import type { automationallowlistentry, connectallowentry, consentwindow, originprofile, permdiffrecord, transparencygrant } from "./types.js";
+/**
+ * Transparency logic of the 1.1.62 family.
+ * The transparencypage grammar lives here: every active grant reads as one row with its origin, scope and boundary, every consent window ever granted stays listed with its expiry even after it closed, the connectallow entries list with their senders, and the permdiff of each installed update records the added and removed permissions between two versions.
+ * The revoke actions stay one descriptor per grant row, because every listed grant revokes from the same page that shows it.
+ */
+/** Computes the permdiff between two permission versions: the permissions the new version added, the permissions it removed and the computed time; an unchanged set carries empty lists while the record still lands for the audit trail. */
+export declare function permissiondiff(input: {
+    from: string[];
+    to: string[];
+    fromversion: string;
+    toversion: string;
+    now: number;
+}): permdiffrecord;
+/** Reads whether one permdiff record reports a change between its versions; an unchanged permission set still records for the audit trail. */
+export declare function permdiffchanged(diff: permdiffrecord): boolean;
+/** Builds the plain language summary of one permdiff record for the transparencypage. */
+export declare function permdiffsummary(diff: permdiffrecord): string;
+/** Builds the transparency grant rows of every active grant: each allowlist origin carries its profile workspace scope and its grant time, and each originprofile carries its per kind scope. */
+export declare function transparencygrants(input: {
+    allowlist: automationallowlistentry[];
+    profiles: originprofile[];
+}): transparencygrant[];
+/** Builds the revoke action descriptor of one transparency grant row: every listed grant revokes from the same page that shows it. */
+export declare function revokeaction(grant: transparencygrant): {
+    action: "revoke";
+    origin: string;
+    scope: string;
+};
+/** Lists every consent window ever granted with its expiry: closed windows stay listed beside the active ones because the transparency page shows the whole grant history. */
+export declare function windowhistory(windows: consentwindow[]): Array<{
+    id: string;
+    origin: string;
+    state: string;
+    boundary: string;
+    startedat: number;
+    expiresat: number;
+}>;
+/** Lists the connectallow entries with their senders: the display names, the sender ids and the origin scopes the user allowed. */
+export declare function connectallowlist(entries: connectallowentry[]): Array<{
+    senderid: string;
+    displayname: string;
+    origin?: string;
+    addedat: number;
+}>;
+//# sourceMappingURL=transparency.d.ts.map

package/dist/transparency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transparency.d.ts","sourceRoot":"","sources":["../transparency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/I;;;;GAIG;AAEH,6OAA6O;AAC7O,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,cAAc,CAK3I;AAED,8IAA8I;AAC9I,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAE7D;AAED,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAM5D;AAED,iMAAiM;AACjM,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,GAAG,iBAAiB,EAAE,CAMnI;AAED,sIAAsI;AACtI,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAE1G;AAED,8KAA8K;AAC9K,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAEpK;AAED,mIAAmI;AACnI,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAEjJ"}