@x12i/map-store-client 0.1.0

package/dist/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAiBF,wBAAsB,QAAQ,CAAC,CAAC,GAAG,OAAO,EACxC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,eAAoB,GACzB,OAAO,CAAC,CAAC,CAAC,CA+CZ"}

package/dist/fetch.js

@@ -0,0 +1,61 @@
+import { mapStoreBasePath } from './config';
+import { asRecord, nonNegInt } from './util';
+import { MapStoreError } from './types';
+import { messageFromMapStoreBody } from './errors';
+function mapErrorCode(status, body) {
+    const rec = asRecord(body);
+    const code = (typeof rec?.code === 'string' && rec.code) ||
+        (typeof rec?.error === 'string' && rec.error) ||
+        (typeof rec?.errorCode === 'string' && rec.errorCode) ||
+        (typeof rec?.status === 'string' && rec.status) ||
+        undefined;
+    if (status === 409 || code === 'mixed-generation')
+        return 'mixed-generation';
+    if (code === 'incomplete-publication')
+        return 'incomplete-publication';
+    if (code === 'live-unavailable')
+        return 'live-unavailable';
+    if (status === 503 || code === 'memorix-unavailable')
+        return 'memorix-unavailable';
+    return 'http-error';
+}
+export async function mapFetch(path, opts = {}) {
+    const base = mapStoreBasePath();
+    const url = path.startsWith('http')
+        ? path
+        : `${base}${path.startsWith('/') ? path : `/${path}`}`;
+    let res;
+    try {
+        res = await fetch(url, {
+            method: 'GET',
+            headers: { Accept: 'application/json' },
+            signal: opts.signal,
+        });
+    }
+    catch (err) {
+        throw new MapStoreError(err instanceof Error ? err.message : 'Network error talking to map-store', { code: 'memorix-unavailable', status: 0 });
+    }
+    const text = await res.text();
+    let body = null;
+    if (text) {
+        try {
+            body = JSON.parse(text);
+        }
+        catch {
+            body = { raw: text };
+        }
+    }
+    if (!res.ok) {
+        const message = messageFromMapStoreBody(body, `map-store ${res.status} for ${path}`);
+        const rec = asRecord(body);
+        const retryAfterMs = nonNegInt(rec?.retryAfterMs) ?? (res.status === 503 ? 5000 : undefined);
+        throw new MapStoreError(message, {
+            code: mapErrorCode(res.status, body),
+            status: res.status,
+            retryAfterMs,
+            body,
+        });
+    }
+    return body;
+}
+//# sourceMappingURL=fetch.js.map

package/dist/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,aAAa,EAA0B,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAMnD,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,IAAI,GACR,CAAC,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC;QAC3C,CAAC,OAAO,GAAG,EAAE,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC;QAC7C,CAAC,OAAO,GAAG,EAAE,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC;QACrD,CAAC,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC;QAC/C,SAAS,CAAC;IACZ,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC7E,IAAI,IAAI,KAAK,wBAAwB;QAAE,OAAO,wBAAwB,CAAC;IACvE,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC3D,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,qBAAqB;QAAE,OAAO,qBAAqB,CAAC;IACnF,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,OAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAEzD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CACrB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC,EACzE,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,uBAAuB,CACrC,IAAI,EACJ,aAAa,GAAG,CAAC,MAAM,QAAQ,IAAI,EAAE,CACtC,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,YAAY,GAChB,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE;YAC/B,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;YACpC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,YAAY;YACZ,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAS,CAAC;AACnB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+export { configureMapStore, mapStoreBasePath, resolveMapStoreOrigin, stripMapStoreOrigin, } from './config';
+export type { MapStoreConfig } from './config';
+export { MAP_STORE_API_PREFIX } from './paths';
+export { mapFetch } from './fetch';
+export { MapStoreError } from './types';
+export { formatMapStoreError, messageFromMapStoreBody } from './errors';
+export { asRecord, asList, firstString, nonNegInt } from './util';
+export { parseTypedRecordCensus } from './census';
+export { fetchHealth, fetchBootstrap, fetchLiveBootstrap, flattenBootstrap, unwrapWorkingProduct, normalizeLiveBootstrap, isLiveHealthy, } from './bootstrap';
+export { fetchWorkingProduct, walkWorkingPages, parseInventoryObject, normalizePagedProduct, readWorkingPins, assertCoveringPair, resolveEntryVariant, } from './working';
+export type { PageWalkProgress, PageWalkResult, WorkingFetchOptions } from './working';
+export { fetchObjectSecurityContext, normalizeObjectSecurityContext, } from './objects';
+export { fetchInvestigationPackets, fetchInvestigationPacket, parsePacketIndex, } from './packets';
+export type { InvestigationPacketSummary } from './packets';
+export { ALL_BROWSEABLE_WORKING_PRODUCTS, ON_DEMAND_WORKING_PRODUCTS, browseableProduct, } from './products';
+export type { BrowseableProduct } from './products';
+export { BAG_PRODUCTS, SERVING_OBJECT_TYPE, DISALLOWED_SECURITY_MAP_CONTENT_TYPES, bagProduct, isDisallowedSecurityMapContentType, memorixRecordId, mapStoreWorkingPath, } from './bagCatalog';
+export type { BagProductDef, BagProductKind } from './bagCatalog';
+export { fetchAttackSurfacesIndex, fetchAttackSurfaceDossier, fetchVpnSitesIndex, fetchVpnSiteDossier, fetchAttackCasePacketsIndex, fetchAttackCasePacket, readEntrySurfaces, recordRefToRoute, defaultEpistemicChrome, parseEpistemicBuckets, } from './attackSurfaces';
+export type * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EACL,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,qCAAqC,EACrC,UAAU,EACV,kCAAkC,EAClC,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,mBAAmB,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,15 @@
+export { configureMapStore, mapStoreBasePath, resolveMapStoreOrigin, stripMapStoreOrigin, } from './config';
+export { MAP_STORE_API_PREFIX } from './paths';
+export { mapFetch } from './fetch';
+export { MapStoreError } from './types';
+export { formatMapStoreError, messageFromMapStoreBody } from './errors';
+export { asRecord, asList, firstString, nonNegInt } from './util';
+export { parseTypedRecordCensus } from './census';
+export { fetchHealth, fetchBootstrap, fetchLiveBootstrap, flattenBootstrap, unwrapWorkingProduct, normalizeLiveBootstrap, isLiveHealthy, } from './bootstrap';
+export { fetchWorkingProduct, walkWorkingPages, parseInventoryObject, normalizePagedProduct, readWorkingPins, assertCoveringPair, resolveEntryVariant, } from './working';
+export { fetchObjectSecurityContext, normalizeObjectSecurityContext, } from './objects';
+export { fetchInvestigationPackets, fetchInvestigationPacket, parsePacketIndex, } from './packets';
+export { ALL_BROWSEABLE_WORKING_PRODUCTS, ON_DEMAND_WORKING_PRODUCTS, browseableProduct, } from './products';
+export { BAG_PRODUCTS, SERVING_OBJECT_TYPE, DISALLOWED_SECURITY_MAP_CONTENT_TYPES, bagProduct, isDisallowedSecurityMapContentType, memorixRecordId, mapStoreWorkingPath, } from './bagCatalog';
+export { fetchAttackSurfacesIndex, fetchAttackSurfaceDossier, fetchVpnSitesIndex, fetchVpnSiteDossier, fetchAttackCasePacketsIndex, fetchAttackCasePacket, readEntrySurfaces, recordRefToRoute, defaultEpistemicChrome, parseEpistemicBuckets, } from './attackSurfaces';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EACL,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,qCAAqC,EACrC,UAAU,EACV,kCAAkC,EAClC,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}

package/dist/objects.d.ts

@@ -0,0 +1,12 @@
+import { type MapFetchOptions } from './fetch';
+import type { CoveringPair, ObjectSecurityContextJoin } from './types';
+export type ObjectSecurityContextOptions = MapFetchOptions & {
+    expectedPair?: CoveringPair;
+};
+/**
+ * Preferred detail path: station joins OSC + classification + pre-AI + live overlay.
+ * Classification may be null / incomplete — degrade honestly, do not crash.
+ */
+export declare function normalizeObjectSecurityContext(payload: unknown): ObjectSecurityContextJoin;
+export declare function fetchObjectSecurityContext(objectId: string, opts?: ObjectSecurityContextOptions): Promise<ObjectSecurityContextJoin>;
+//# sourceMappingURL=objects.d.ts.map

package/dist/objects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"objects.d.ts","sourceRoot":"","sources":["../src/objects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AAEzD,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAGvE,MAAM,MAAM,4BAA4B,GAAG,eAAe,GAAG;IAC3D,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,OAAO,GACf,yBAAyB,CA+B3B;AAED,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,4BAA4B,GAClC,OAAO,CAAC,yBAAyB,CAAC,CAWpC"}

package/dist/objects.js

@@ -0,0 +1,34 @@
+import { mapFetch } from './fetch';
+import { asRecord, firstString } from './util';
+import { assertCoveringPair } from './working';
+/**
+ * Preferred detail path: station joins OSC + classification + pre-AI + live overlay.
+ * Classification may be null / incomplete — degrade honestly, do not crash.
+ */
+export function normalizeObjectSecurityContext(payload) {
+    const top = asRecord(payload) ?? {};
+    const context = top.context ?? null;
+    const preAi = asRecord(top.preAiContext) ??
+        asRecord(asRecord(context)?.preAiContext) ??
+        null;
+    const objectId = firstString(top.objectId, asRecord(context)?.objectId, preAi?.objectId) ?? '';
+    const objectType = firstString(top.objectType, asRecord(context)?.objectType, preAi?.objectType);
+    return {
+        snapshotSetId: firstString(top.snapshotSetId),
+        liveGenerationId: firstString(top.liveGenerationId) ?? null,
+        objectId,
+        objectType,
+        context,
+        classification: top.classification ?? null,
+        preAiContext: top.preAiContext ?? preAi,
+        liveOverlay: top.liveOverlay ?? null,
+        retrieval: top.retrieval,
+        liveAuthority: top.liveAuthority,
+    };
+}
+export async function fetchObjectSecurityContext(objectId, opts) {
+    const payload = await mapFetch(`/objects/${encodeURIComponent(objectId)}/security-context`, opts);
+    assertCoveringPair(payload, opts?.expectedPair, `objects/${objectId}/security-context`);
+    return normalizeObjectSecurityContext(payload);
+}
+//# sourceMappingURL=objects.js.map

package/dist/objects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"objects.js","sourceRoot":"","sources":["../src/objects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAwB,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAM/C;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAgB;IAEhB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC;IACpC,MAAM,KAAK,GACT,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;QACzC,IAAI,CAAC;IACP,MAAM,QAAQ,GACZ,WAAW,CACT,GAAG,CAAC,QAAQ,EACZ,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAC3B,KAAK,EAAE,QAAQ,CAChB,IAAI,EAAE,CAAC;IACV,MAAM,UAAU,GAAG,WAAW,CAC5B,GAAG,CAAC,UAAU,EACd,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,EAC7B,KAAK,EAAE,UAAU,CAClB,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC;QAC7C,gBAAgB,EAAE,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI;QAC3D,QAAQ;QACR,UAAU;QACV,OAAO;QACP,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QAC1C,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,KAAK;QACvC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAgB,EAChB,IAAmC;IAEnC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,YAAY,kBAAkB,CAAC,QAAQ,CAAC,mBAAmB,EAC3D,IAAI,CACL,CAAC;IACF,kBAAkB,CAChB,OAAO,EACP,IAAI,EAAE,YAAY,EAClB,WAAW,QAAQ,mBAAmB,CACvC,CAAC;IACF,OAAO,8BAA8B,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC"}

package/dist/packets.d.ts

@@ -0,0 +1,31 @@
+import { type MapFetchOptions } from './fetch';
+import type { CoveringPair } from './types';
+export type PacketFetchOptions = MapFetchOptions & {
+    expectedPair?: CoveringPair;
+};
+export type InvestigationPacketSummary = {
+    packetId: string;
+    scope?: string;
+    objective?: string;
+    generatedAt?: string;
+    /** e.g. possible-attack — conditional seed, not activity claim */
+    scenarioKind?: string;
+    affectedObjectCount?: number;
+    affectedObjectIds?: string[];
+    guardrails?: string[];
+    raw: Record<string, unknown>;
+};
+export declare function parsePacketIndex(payload: unknown): {
+    snapshotSetId?: string;
+    analysisSnapshotId?: string;
+    liveGenerationId?: string | null;
+    packets: InvestigationPacketSummary[];
+};
+export declare function fetchInvestigationPackets(opts?: PacketFetchOptions): Promise<{
+    snapshotSetId?: string;
+    analysisSnapshotId?: string;
+    liveGenerationId?: string | null;
+    packets: InvestigationPacketSummary[];
+}>;
+export declare function fetchInvestigationPacket(packetId: string, opts?: PacketFetchOptions): Promise<unknown>;
+//# sourceMappingURL=packets.d.ts.map

package/dist/packets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packets.d.ts","sourceRoot":"","sources":["../src/packets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AAEzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG5C,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG;IACjD,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B,CAAC;AAoBF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,0BAA0B,EAAE,CAAC;CACvC,CAiDA;AAED,wBAAsB,yBAAyB,CAAC,IAAI,CAAC,EAAE,kBAAkB;oBAvDvD,MAAM;yBACD,MAAM;uBACR,MAAM,GAAG,IAAI;aACvB,0BAA0B,EAAE;GAwDtC;AAED,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,kBAAkB,oBAY1B"}

package/dist/packets.js

@@ -0,0 +1,76 @@
+import { mapFetch } from './fetch';
+import { asRecord, asList, firstString } from './util';
+import { assertCoveringPair } from './working';
+function parseAffectedObjectIds(affected) {
+    const items = asList(affected.items ?? affected.objects ?? affected.inline);
+    const ids = [];
+    const seen = new Set();
+    for (const row of items) {
+        const rec = asRecord(row);
+        const id = rec
+            ? firstString(rec.objectId, rec.id, rec.relatedObjectId)
+            : typeof row === 'string'
+                ? row
+                : null;
+        if (!id || seen.has(id))
+            continue;
+        seen.add(id);
+        ids.push(id);
+    }
+    return ids;
+}
+export function parsePacketIndex(payload) {
+    const top = asRecord(payload) ?? {};
+    // map-store /investigation-packets: { index: { packets: [...] } }
+    // working/security-investigation-packet: { index: [ { packetId, ... } ], packetIds }
+    const indexRec = asRecord(top.index);
+    const packetsRaw = Array.isArray(top.index)
+        ? top.index
+        : asList(indexRec?.packets ?? top.packets ?? top.items);
+    const packets = [];
+    for (const row of packetsRaw) {
+        const rec = asRecord(row);
+        if (!rec)
+            continue;
+        const identity = asRecord(rec.identity) ?? {};
+        const agentTask = asRecord(rec.agentTask) ?? {};
+        const sections = asRecord(rec.sections) ?? {};
+        const affected = asRecord(sections.affectedObjects) ?? {};
+        const packetId = firstString(identity.packetId, rec.packetId);
+        if (!packetId)
+            continue;
+        const affectedObjectIds = parseAffectedObjectIds(affected);
+        packets.push({
+            packetId,
+            scope: firstString(identity.scope, rec.scope),
+            objective: firstString(agentTask.objective, rec.objective),
+            generatedAt: firstString(identity.generatedAt, rec.generatedAt),
+            scenarioKind: firstString(identity.scenarioKind, rec.scenarioKind, agentTask.scenarioKind),
+            affectedObjectCount: typeof affected.itemCount === 'number'
+                ? affected.itemCount
+                : affectedObjectIds.length || undefined,
+            affectedObjectIds: affectedObjectIds.length > 0 ? affectedObjectIds : undefined,
+            guardrails: Array.isArray(agentTask.guardrails)
+                ? agentTask.guardrails.filter((g) => typeof g === 'string')
+                : undefined,
+            raw: rec,
+        });
+    }
+    return {
+        snapshotSetId: firstString(top.snapshotSetId),
+        analysisSnapshotId: firstString(top.analysisSnapshotId),
+        liveGenerationId: firstString(top.liveGenerationId) ?? null,
+        packets,
+    };
+}
+export async function fetchInvestigationPackets(opts) {
+    const payload = await mapFetch('/investigation-packets', opts);
+    assertCoveringPair(payload, opts?.expectedPair, 'investigation-packets');
+    return parsePacketIndex(payload);
+}
+export async function fetchInvestigationPacket(packetId, opts) {
+    const payload = await mapFetch(`/investigation-packets/${encodeURIComponent(packetId)}`, opts);
+    assertCoveringPair(payload, opts?.expectedPair, `investigation-packets/${packetId}`);
+    return payload;
+}
+//# sourceMappingURL=packets.js.map

package/dist/packets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packets.js","sourceRoot":"","sources":["../src/packets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAwB,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAEvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAmB/C,SAAS,sBAAsB,CAAC,QAAiC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,GAAG;YACZ,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,eAAe,CAAC;YACxD,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ;gBACvB,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAM/C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACpC,kEAAkE;IAClE,qFAAqF;IACrF,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QACzC,CAAC,CAAC,GAAG,CAAC,KAAK;QACX,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAiC,EAAE,CAAC;IAEjD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ;YACR,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC;YAC7C,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC;YAC1D,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC;YAC/D,YAAY,EAAE,WAAW,CACvB,QAAQ,CAAC,YAAY,EACrB,GAAG,CAAC,YAAY,EAChB,SAAS,CAAC,YAAY,CACvB;YACD,mBAAmB,EACjB,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;gBACpC,CAAC,CAAC,QAAQ,CAAC,SAAS;gBACpB,CAAC,CAAC,iBAAiB,CAAC,MAAM,IAAI,SAAS;YAC3C,iBAAiB,EACf,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YAC9D,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;gBAC7C,CAAC,CAAE,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAc;gBACzE,CAAC,CAAC,SAAS;YACb,GAAG,EAAE,GAAG;SACT,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC;QAC7C,kBAAkB,EAAE,WAAW,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACvD,gBAAgB,EAAE,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI;QAC3D,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAyB;IACvE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;IAC/D,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC;IACzE,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAgB,EAChB,IAAyB;IAEzB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,0BAA0B,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EACxD,IAAI,CACL,CAAC;IACF,kBAAkB,CAChB,OAAO,EACP,IAAI,EAAE,YAAY,EAClB,yBAAyB,QAAQ,EAAE,CACpC,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,2 @@
+export declare const MAP_STORE_API_PREFIX = "/map-store/v1";
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,kBAAkB,CAAC"}

package/dist/paths.js

@@ -0,0 +1,2 @@
+export const MAP_STORE_API_PREFIX = '/map-store/v1';
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC"}

package/dist/products.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Published working products reachable on-demand via More Actions.
+ * Derived from BAG_PRODUCTS (OT=security-map CT alignment). Auto-loaded /
+ * alreadyLoaded products stay listed so UI can skip duplicate eager walks.
+ */
+export type BrowseableProduct = {
+    id: string;
+    label: string;
+    /** Honesty / scope note shown next to the action */
+    note: string;
+    /** Prefer filtering loaded rows by objectId when present */
+    objectScoped?: boolean;
+    /** Already walked at session/deep-load — browse still available on demand */
+    alreadyLoaded?: boolean;
+    /** May 503 incomplete-publication on current bags */
+    mayBeMissing?: boolean;
+    /** Live overlay only — do not rewrite stable reachability/exploitability */
+    liveOverlay?: boolean;
+    /**
+     * When bare product index is incomplete, start walks at this family variant
+     * (e.g. graph → network, findings-query → open-vuln).
+     */
+    entryVariant?: string;
+};
+/** Products not auto-loaded that humans should still be able to open. */
+export declare const ON_DEMAND_WORKING_PRODUCTS: BrowseableProduct[];
+/** Already loaded elsewhere — still offer browse for leftovers / re-load. */
+export declare const ALREADY_LOADED_WORKING_PRODUCTS: BrowseableProduct[];
+export declare const ALL_BROWSEABLE_WORKING_PRODUCTS: BrowseableProduct[];
+export declare function browseableProduct(id: string): BrowseableProduct | undefined;
+//# sourceMappingURL=products.d.ts.map

package/dist/products.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"products.d.ts","sourceRoot":"","sources":["../src/products.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qDAAqD;IACrD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAeF,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,EAAE,iBAAiB,EAEvC,CAAC;AAEpB,6EAA6E;AAC7E,eAAO,MAAM,+BAA+B,EAAE,iBAAiB,EAE5C,CAAC;AAEpB,eAAO,MAAM,+BAA+B,EAAE,iBAAiB,EAG9D,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAE3E"}

package/dist/products.js

@@ -0,0 +1,30 @@
+/**
+ * Published working products reachable on-demand via More Actions.
+ * Derived from BAG_PRODUCTS (OT=security-map CT alignment). Auto-loaded /
+ * alreadyLoaded products stay listed so UI can skip duplicate eager walks.
+ */
+import { BAG_PRODUCTS } from './bagCatalog';
+function toBrowseable(def) {
+    return {
+        id: def.contentType,
+        label: def.label,
+        note: def.note,
+        objectScoped: def.objectScoped,
+        alreadyLoaded: def.alreadyLoaded,
+        mayBeMissing: def.mayBeMissing,
+        liveOverlay: def.liveOverlay,
+        entryVariant: def.entryVariant,
+    };
+}
+/** Products not auto-loaded that humans should still be able to open. */
+export const ON_DEMAND_WORKING_PRODUCTS = BAG_PRODUCTS.filter((p) => !p.alreadyLoaded).map(toBrowseable);
+/** Already loaded elsewhere — still offer browse for leftovers / re-load. */
+export const ALREADY_LOADED_WORKING_PRODUCTS = BAG_PRODUCTS.filter((p) => p.alreadyLoaded).map(toBrowseable);
+export const ALL_BROWSEABLE_WORKING_PRODUCTS = [
+    ...ON_DEMAND_WORKING_PRODUCTS,
+    ...ALREADY_LOADED_WORKING_PRODUCTS,
+];
+export function browseableProduct(id) {
+    return ALL_BROWSEABLE_WORKING_PRODUCTS.find((p) => p.id === id);
+}
+//# sourceMappingURL=products.js.map

package/dist/products.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"products.js","sourceRoot":"","sources":["../src/products.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAsBhE,SAAS,YAAY,CAAC,GAAkB;IACtC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,WAAW;QACnB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;KAC/B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,0BAA0B,GAAwB,YAAY,CAAC,MAAM,CAChF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CACxB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAEpB,6EAA6E;AAC7E,MAAM,CAAC,MAAM,+BAA+B,GAAwB,YAAY,CAAC,MAAM,CACrF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CACvB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAEpB,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,GAAG,0BAA0B;IAC7B,GAAG,+BAA+B;CACnC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,248 @@
+/**
+ * Thin types for map-store /map-store/v1 responses.
+ * Generation tokens are opaque — display only; never send on product URLs.
+ */
+export type LiveAvailability = 'available' | 'unavailable' | 'stale-for-this-pair';
+/** Locked covering pair from working/bootstrap — every later page must match. */
+export type CoveringPair = {
+    snapshotSetId: string;
+    analysisSnapshotId?: string;
+};
+export type TypedRecordCensus = {
+    confirmedAssets: number;
+    unresolvedSubjects: number;
+    findingsAndAlerts: number;
+    findings?: number;
+    alerts?: number;
+    relationshipOnlyAliases?: number;
+    totalPublishedKnowledge?: number;
+};
+export type ProducerIdentity = {
+    publicationContractVersion?: string;
+    landerVersion?: string;
+    landerSha?: string;
+    productProjectionVersion?: string;
+    generatedAt?: string;
+};
+export type MapStoreHealth = {
+    ok?: boolean;
+    service?: string;
+    memorixReachable: boolean;
+    estateReady: boolean;
+    memorixOrgId?: string;
+    memorixUrl?: string;
+    userMessage?: string | null;
+    stationOk?: boolean;
+    estateFromMemorixOnly?: boolean;
+};
+export type SessionBootstrap = {
+    snapshotSetId: string;
+    analysisSnapshotId?: string;
+    liveGenerationId: string | null;
+    liveAvailability: LiveAvailability | null;
+    liveUnavailableReason?: string;
+    typedCensus: TypedRecordCensus | null;
+    producerIdentity: ProducerIdentity | null;
+    assessmentCoverage: Record<string, unknown> | null;
+    estateReady: boolean;
+    /** Nested Memorix bootstrap body (unwrapped). */
+    bootstrap: Record<string, unknown>;
+    liveBootstrapInline: unknown | null;
+};
+export type LiveBootstrap = {
+    liveGenerationId?: string;
+    relatedSnapshotSetId?: string;
+    relatedAnalysisSnapshotId?: string;
+    omStatus?: Record<string, unknown>;
+    observationUseLedger?: Record<string, unknown>;
+    edgeAccounting?: Record<string, unknown>;
+    admittedToServingAssessment?: boolean;
+    authority?: string;
+    disposition?: string;
+    [key: string]: unknown;
+};
+export type InventoryObject = {
+    objectId: string;
+    objectType: string;
+    displayName?: string | null;
+    addresses?: string[];
+    identityStatus?: string;
+    relationshipOnlyNonObject?: boolean;
+    observedTraffic?: boolean;
+    [key: string]: unknown;
+};
+export type PagedProduct = {
+    pageVariants?: string[];
+    pageCount?: number;
+    expectedItemCount?: number;
+    items?: unknown[];
+    objects?: unknown[];
+    coverage?: Record<string, unknown>;
+    [key: string]: unknown;
+};
+/** Epistemic plane labels — string unions only; never collapse to a boolean. */
+export type EpistemicLabel = 'REACHABLE' | 'OBSERVED' | 'POLICY_CANDIDATE' | 'NO_ALLOW' | 'UNKNOWN' | string;
+export type EpistemicBucketItem = {
+    kind?: string;
+    zone?: string;
+    statement?: string;
+    epistemic?: EpistemicLabel;
+    note?: string;
+    [key: string]: unknown;
+};
+export type EpistemicBuckets = {
+    knownCan: EpistemicBucketItem[];
+    observed: EpistemicBucketItem[];
+    knownCant: EpistemicBucketItem[];
+    maybeWorry: EpistemicBucketItem[];
+};
+export type AttackSurfaceIndexEntry = {
+    surfaceId: string;
+    priority?: string;
+    summary?: string;
+    recordRef?: string;
+};
+export type AttackSurfacesIndex = {
+    schemaVersion?: string;
+    snapshotSetId?: string;
+    analysisSnapshotId?: string;
+    generatedAt?: string;
+    suggestedOrder: string[];
+    surfaces: AttackSurfaceIndexEntry[];
+    honesty?: string[];
+    pageVariants?: string[];
+    expectedItemCount?: number;
+};
+export type VpnSiteInstanceSummary = {
+    siteId: string;
+    priority?: string;
+    peerPublicIp?: string;
+    nativeAcceptDestZones?: string[];
+    recordRef?: string;
+};
+export type AttackSurfaceDossier = {
+    schemaVersion?: string;
+    surfaceId: string;
+    generatedAt?: string;
+    priority?: string;
+    summary?: string;
+    suggestedNavOrder?: number;
+    outboundAcceptCount?: number;
+    destZones?: string[];
+    epistemicBuckets?: EpistemicBuckets;
+    epistemicChrome?: EpistemicLabel[];
+    honesty?: string[];
+    deliveryGapClosed?: boolean;
+    instanceCount?: number;
+    instances?: VpnSiteInstanceSummary[];
+    accepts?: unknown[];
+    [key: string]: unknown;
+};
+export type VpnPhase2Selector = {
+    phase2?: string;
+    localSelectorCidrs?: string[];
+    remoteSelectorCidrs?: string[];
+    freshness?: string;
+    [key: string]: unknown;
+};
+export type VpnOutboundAcceptRule = {
+    ruleId?: string;
+    destZones?: string[];
+    sourceZoneMatched?: string;
+    zonePairId?: string;
+    inheritance?: string;
+    [key: string]: unknown;
+};
+export type VpnSiteDossier = {
+    siteId: string;
+    entryClass?: string;
+    priority?: string;
+    peerPublicIp?: string | null;
+    peerUnresolved?: boolean;
+    tunnels?: string[];
+    phase2Selectors?: VpnPhase2Selector[];
+    remoteInnerOrigins?: string[];
+    localInnerSelectors?: string[];
+    outboundAcceptRules?: VpnOutboundAcceptRule[];
+    nativeAcceptDestZones?: string[];
+    sharedZoneInheritedAccepts?: unknown[];
+    intrazoneDefault?: string;
+    epistemicBuckets?: EpistemicBuckets;
+    honesty?: string[];
+    deliveryNarrativeClarity?: string;
+    [key: string]: unknown;
+};
+export type VpnSitesIndex = {
+    schemaVersion?: string;
+    snapshotSetId?: string;
+    analysisSnapshotId?: string;
+    generatedAt?: string;
+    siteCount?: number;
+    sites: VpnSiteInstanceSummary[];
+    pageVariants?: string[];
+    honesty?: string[];
+};
+export type AttackCasePacketPlanes = {
+    policy?: string;
+    observation?: string;
+    reachability?: string;
+};
+export type AttackCasePacket = {
+    schemaVersion?: string;
+    caseId: string;
+    planes?: AttackCasePacketPlanes;
+    summary?: Record<string, unknown>;
+    bucketCounts?: Record<string, number>;
+    modeledCandidate?: Record<string, unknown>;
+    packetRef?: string;
+    honesty?: string[];
+    [key: string]: unknown;
+};
+export type AttackCasePacketsIndex = {
+    schemaVersion?: string;
+    snapshotSetId?: string;
+    analysisSnapshotId?: string;
+    generatedAt?: string;
+    caseCount?: number;
+    cases: Array<{
+        caseId: string;
+        recordRef?: string;
+    }>;
+    pageVariants?: string[];
+    honesty?: string[];
+};
+/** Optional reverse links from object-security-context. */
+export type EntrySurfaceLink = {
+    surfaceId?: string;
+    siteId?: string;
+    relation?: string;
+    epistemic?: EpistemicLabel;
+    recordRefs?: string[];
+    [key: string]: unknown;
+};
+export type ObjectSecurityContextJoin = {
+    snapshotSetId?: string;
+    liveGenerationId?: string | null;
+    objectId: string;
+    objectType?: string;
+    context: unknown;
+    classification: unknown | null;
+    preAiContext: unknown | null;
+    liveOverlay: unknown | null;
+    retrieval?: unknown;
+    liveAuthority?: unknown;
+};
+export type MapStoreErrorCode = 'memorix-unavailable' | 'incomplete-publication' | 'mixed-generation' | 'live-unavailable' | 'http-error' | 'config-error';
+export declare class MapStoreError extends Error {
+    readonly code: MapStoreErrorCode;
+    readonly status: number;
+    readonly retryAfterMs?: number;
+    readonly body?: unknown;
+    constructor(message: string, opts: {
+        code: MapStoreErrorCode;
+        status: number;
+        retryAfterMs?: number;
+        body?: unknown;
+    });
+}
+//# sourceMappingURL=types.d.ts.map