@yiaany/ghostapi 0.1.7 → 0.1.9

package/dist/state/stateStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"stateStore.js","sourceRoot":"","sources":["../../src/state/stateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,IAAI,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAU,EAAE,GAAY;IAC7D,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;QACpC,KAAK,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;QAEhB,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,OAAoB,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC7C,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,SAAS,CAAC;IAC9B,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;IAE7C,MAAM,WAAW,CAAC;IAClB,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"stateStore.js","sourceRoot":"","sources":["../../src/state/stateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,MAAM,aAAa,GAAG,CAAC,KAAc,EAA2B,EAAE;IAChE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9H,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC,KAAK,CAAC;IACvC,MAAM,YAAY,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;QAC/D,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,YAAY,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAU,EAAE,GAAY;IAC7D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAClI,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACjI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAI,SAAsG;IAC3I,IAAI,MAAqB,CAAC;IAC1B,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;QACtE,MAAM,WAAW,GAAG,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QAC5B,OAAO,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,iBAAiB,WAAW,CAAC,CAAC;IACnH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACtI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,qBAAqB;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACvI,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,GAAG,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC7I,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC,KAAK,CAAC;IACvC,MAAM,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/storage/fileStore.d.ts

@@ -0,0 +1,10 @@
+type FileStoreOptions = {
+    lockTimeoutMs?: number;
+    staleLockMs?: number;
+};
+export declare function ensurePrivateDirectory(directoryPath: string): Promise<void>;
+export declare function readJsonFile<T>(filePath: string, fallback: T, sanitize: (value: unknown) => T): Promise<T>;
+export declare function atomicWriteJson(filePath: string, value: unknown): Promise<void>;
+export declare function mutateJsonFile<T>(filePath: string, fallback: T, sanitize: (value: unknown) => T, mutation: (current: T) => T | Promise<T>, options?: FileStoreOptions): Promise<T>;
+export declare function withFileLock<T>(filePath: string, operation: () => Promise<T>, options?: FileStoreOptions): Promise<T>;
+export {};

package/dist/storage/fileStore.js

@@ -0,0 +1,131 @@
+import { randomUUID } from "node:crypto";
+import { chmod, lstat, mkdir, open, readFile, rename, rm, stat } from "node:fs/promises";
+import { dirname, join } from "node:path";
+const DEFAULT_LOCK_TIMEOUT_MS = 10_000;
+const DEFAULT_STALE_LOCK_MS = 30_000;
+const LOCK_RETRY_MS = 20;
+export async function ensurePrivateDirectory(directoryPath) {
+    await mkdir(directoryPath, { recursive: true, mode: 0o700 });
+    const info = await lstat(directoryPath);
+    if (info.isSymbolicLink()) {
+        throw new Error(`Refusing to use symbolic-link data directory: ${directoryPath}`);
+    }
+    if (process.platform !== "win32")
+        await chmod(directoryPath, 0o700);
+}
+export async function readJsonFile(filePath, fallback, sanitize) {
+    try {
+        return sanitize(JSON.parse(await readFile(filePath, "utf8")));
+    }
+    catch (error) {
+        if (isErrorCode(error, "ENOENT"))
+            return structuredClone(fallback);
+        throw error;
+    }
+}
+export async function atomicWriteJson(filePath, value) {
+    const directory = dirname(filePath);
+    await ensurePrivateDirectory(directory);
+    const tempFilePath = join(directory, `.${randomUUID()}.tmp`);
+    let handle;
+    try {
+        handle = await open(tempFilePath, "wx", 0o600);
+        await handle.writeFile(`${JSON.stringify(value, null, 2)}\n`, "utf8");
+        await handle.sync();
+        await handle.close();
+        handle = undefined;
+        await rename(tempFilePath, filePath);
+        if (process.platform !== "win32")
+            await chmod(filePath, 0o600);
+    }
+    catch (error) {
+        if (handle !== undefined)
+            await handle.close().catch(() => undefined);
+        await rm(tempFilePath, { force: true });
+        throw error;
+    }
+}
+export async function mutateJsonFile(filePath, fallback, sanitize, mutation, options = {}) {
+    return withFileLock(filePath, async () => {
+        const current = await readJsonFile(filePath, fallback, sanitize);
+        const next = await mutation(current);
+        await atomicWriteJson(filePath, next);
+        return next;
+    }, options);
+}
+export async function withFileLock(filePath, operation, options = {}) {
+    const lockPath = `${filePath}.lock`;
+    const timeoutMs = options.lockTimeoutMs ?? DEFAULT_LOCK_TIMEOUT_MS;
+    const staleLockMs = options.staleLockMs ?? DEFAULT_STALE_LOCK_MS;
+    const startedAt = Date.now();
+    await ensurePrivateDirectory(dirname(filePath));
+    while (true) {
+        let handle;
+        try {
+            handle = await open(lockPath, "wx", 0o600);
+        }
+        catch (error) {
+            if (!isErrorCode(error, "EEXIST") && !isTransientLockError(error))
+                throw error;
+            await reclaimAbandonedLock(lockPath, staleLockMs);
+            if (Date.now() - startedAt >= timeoutMs) {
+                throw new Error(`Timed out waiting for local data lock: ${lockPath}`);
+            }
+            await delay(LOCK_RETRY_MS);
+            continue;
+        }
+        try {
+            await handle.writeFile(JSON.stringify({ pid: process.pid, createdAt: new Date().toISOString() }), "utf8");
+            return await operation();
+        }
+        finally {
+            await handle.close();
+            await rm(lockPath, { force: true });
+        }
+    }
+}
+async function reclaimAbandonedLock(lockPath, staleLockMs) {
+    try {
+        const info = await stat(lockPath);
+        const oldEnough = Date.now() - info.mtimeMs >= staleLockMs;
+        let pid = null;
+        try {
+            const metadata = JSON.parse(await readFile(lockPath, "utf8"));
+            pid = typeof metadata.pid === "number" && Number.isInteger(metadata.pid) ? metadata.pid : null;
+        }
+        catch (error) {
+            if (isTransientLockError(error) || isErrorCode(error, "ENOENT"))
+                return;
+            if (!(error instanceof SyntaxError))
+                throw error;
+        }
+        if ((pid !== null && !isProcessAlive(pid)) || (pid === null && oldEnough)) {
+            await rm(lockPath, { force: true });
+        }
+    }
+    catch (error) {
+        if (isTransientLockError(error))
+            return;
+        if (!isErrorCode(error, "ENOENT"))
+            throw error;
+    }
+}
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return !isErrorCode(error, "ESRCH");
+    }
+}
+function isErrorCode(error, code) {
+    return error instanceof Error && "code" in error && error.code === code;
+}
+function isTransientLockError(error) {
+    return isErrorCode(error, "EPERM") || isErrorCode(error, "EACCES") || isErrorCode(error, "EBUSY");
+}
+function delay(milliseconds) {
+    return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+//# sourceMappingURL=fileStore.js.map

package/dist/storage/fileStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileStore.js","sourceRoot":"","sources":["../../src/storage/fileStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,aAAa,GAAG,EAAE,CAAC;AAOzB,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,aAAqB;IAChE,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,aAAa,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,QAAgB,EAAE,QAAW,EAAE,QAA+B;IAClG,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAc;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC;IAEX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,QAAW,EACX,QAA+B,EAC/B,QAAwC,EACxC,UAA4B,EAAE;IAE9B,OAAO,YAAY,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,QAAgB,EAAE,SAA2B,EAAE,UAA4B,EAAE;IACjH,MAAM,QAAQ,GAAG,GAAG,QAAQ,OAAO,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACnE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEhD,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC/E,MAAM,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,SAAS,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1G,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,QAAgB,EAAE,WAAmB;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC;QAC3D,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAsB,CAAC;YACnF,GAAG,GAAG,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACjG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO;YACxE,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;gBAAE,MAAM,KAAK,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,SAAS,CAAC,EAAE,CAAC;YAC1E,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,oBAAoB,CAAC,KAAK,CAAC;YAAE,OAAO;QACxC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,KAAK,CAAC,YAAoB;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/teamControl/controlPlane.d.ts

@@ -0,0 +1,255 @@
+import { type EvidenceReport } from "../evidence/index.js";
+import type { GhostApiPolicy } from "../policy/index.js";
+export type TeamRole = "owner" | "admin" | "developer" | "viewer" | "service_account";
+export type TeamEnvironmentKind = "development" | "ci";
+export type TeamPermission = "member.manage" | "project.manage" | "environment.manage" | "policy.manage" | "token.manage" | "service_account.manage" | "audit.read" | "audit.export" | "data.delete" | "retention.manage" | "project.read" | "environment.read" | "scenario.read" | "evidence.read" | "policy.read" | "scenario.publish" | "evidence.upload";
+export type TeamScopedPermission = Extract<TeamPermission, "project.read" | "environment.read" | "scenario.read" | "evidence.read" | "policy.read" | "scenario.publish" | "evidence.upload">;
+export type TeamTokenScope = {
+    projectId: string;
+    environmentId: string;
+    permissions: TeamScopedPermission[];
+};
+export type TeamActor = {
+    organizationId: string;
+    memberId: string;
+    actorType?: "user";
+} | {
+    organizationId: string;
+    serviceAccountId: string;
+    actorType: "service_account";
+    tokenId: string;
+};
+export type TeamAuthenticatedActor = TeamActor;
+export type TeamOrganization = {
+    id: string;
+    name: string;
+    createdAt: string;
+};
+export type TeamMember = {
+    id: string;
+    organizationId: string;
+    role: Exclude<TeamRole, "service_account">;
+    createdAt: string;
+};
+export type TeamServiceAccount = {
+    id: string;
+    organizationId: string;
+    name: string;
+    createdBy: string;
+    createdAt: string;
+    disabledAt?: string;
+};
+export type TeamProject = {
+    id: string;
+    organizationId: string;
+    name: string;
+    createdAt: string;
+};
+export type TeamEnvironment = {
+    id: string;
+    organizationId: string;
+    projectId: string;
+    name: string;
+    kind: TeamEnvironmentKind;
+    createdAt: string;
+};
+export type TeamScenarioVersion = {
+    organizationId: string;
+    projectId: string;
+    environmentId: string;
+    scenarioId: string;
+    version: number;
+    title: string;
+    metadata: Record<string, unknown>;
+    createdBy: string;
+    createdAt: string;
+};
+export type TeamEvidence = {
+    id: string;
+    organizationId: string;
+    projectId: string;
+    environmentId: string;
+    runId: string;
+    evidenceHash: string;
+    status: EvidenceReport["run"]["status"];
+    passed: boolean;
+    failCount: number;
+    warningCount: number;
+    providers: string[];
+    scenarios: string[];
+    enforcement: Pick<EvidenceReport["enforcement"], "mode" | "isolated" | "degraded">;
+    uploadedBy: string;
+    uploadedAt: string;
+    expiresAt: string;
+};
+export type TeamPolicyVersion = {
+    organizationId: string;
+    version: number;
+    policy: GhostApiPolicy;
+    hash: string;
+    distributedBy: string;
+    distributedAt: string;
+};
+export type TeamAuditAnchor = {
+    organizationId: string;
+    sequence: number;
+    hash: string;
+};
+export type TeamAuditRecord = {
+    organizationId: string;
+    sequence: number;
+    actorId: string;
+    action: string;
+    resource: string;
+    timestamp: string;
+    previousHash: string;
+    recordHash: string;
+};
+export type TeamAuditExport = {
+    organizationId: string;
+    anchor: TeamAuditAnchor;
+    records: TeamAuditRecord[];
+    integrity: {
+        valid: boolean;
+        reason?: string;
+    };
+};
+export type TeamAuditIntegrity = TeamAuditExport["integrity"];
+type TeamToken = {
+    id: string;
+    organizationId: string;
+    type: "user" | "service";
+    subjectId: string;
+    digest: string;
+    issuedBy: string;
+    issuedAt: string;
+    expiresAt: string;
+    scope?: TeamTokenScope[];
+    revokedAt?: string;
+};
+export type TeamControlPlaneState = {
+    schemaVersion: 3;
+    organizations: TeamOrganization[];
+    members: TeamMember[];
+    serviceAccounts: TeamServiceAccount[];
+    projects: TeamProject[];
+    environments: TeamEnvironment[];
+    tokens: TeamToken[];
+    scenarios: TeamScenarioVersion[];
+    evidence: TeamEvidence[];
+    policies: TeamPolicyVersion[];
+    auditAnchors: TeamAuditAnchor[];
+    audit: TeamAuditRecord[];
+};
+export type LocalTeamControlPlaneOptions = {
+    path?: string;
+    now?: () => Date;
+    randomTokenBytes?: (size: number) => Buffer;
+};
+export declare const TEAM_PERMISSION_MATRIX: Readonly<Record<TeamRole, readonly TeamPermission[]>>;
+export declare class TeamControlPlaneError extends Error {
+    constructor(message: string);
+}
+export declare function createLocalTeamControlPlane(options?: LocalTeamControlPlaneOptions): LocalTeamControlPlane;
+export declare class LocalTeamControlPlane {
+    private readonly path;
+    private readonly now;
+    private readonly randomTokenBytes;
+    constructor(options?: LocalTeamControlPlaneOptions);
+    bootstrapOrganization(input: {
+        organizationId: string;
+        name: string;
+        ownerId: string;
+    }): Promise<TeamOrganization>;
+    addMember(actor: TeamActor, input: {
+        memberId: string;
+        role: Exclude<TeamRole, "owner" | "service_account">;
+    }): Promise<TeamMember>;
+    createServiceAccount(actor: TeamActor, input: {
+        serviceAccountId: string;
+        name: string;
+    }): Promise<TeamServiceAccount>;
+    disableServiceAccount(actor: TeamActor, serviceAccountId: string): Promise<void>;
+    registerProject(actor: TeamActor, input: {
+        projectId: string;
+        name: string;
+    }): Promise<TeamProject>;
+    createEnvironment(actor: TeamActor, input: {
+        environmentId: string;
+        projectId: string;
+        name: string;
+        kind: TeamEnvironmentKind;
+    }): Promise<TeamEnvironment>;
+    issueToken(actor: TeamActor, input: {
+        memberId?: string;
+        expiresAt: string;
+    }): Promise<{
+        tokenId: string;
+        token: string;
+        expiresAt: string;
+    }>;
+    issueServiceToken(actor: TeamActor, input: {
+        serviceAccountId: string;
+        expiresAt: string;
+        scope: TeamTokenScope[];
+    }): Promise<{
+        tokenId: string;
+        token: string;
+        expiresAt: string;
+    }>;
+    rotateToken(actor: TeamActor, tokenId: string, input?: {
+        expiresAt?: string;
+    }): Promise<{
+        tokenId: string;
+        token: string;
+        expiresAt: string;
+    }>;
+    revokeToken(actor: TeamActor, tokenId: string): Promise<void>;
+    authenticateToken(token: string): Promise<TeamActor>;
+    publishScenario(actor: TeamActor, input: {
+        projectId: string;
+        environmentId: string;
+        scenarioId: string;
+        version: number;
+        title: string;
+        metadata: Record<string, unknown>;
+    }): Promise<TeamScenarioVersion>;
+    uploadSanitizedEvidence(actor: TeamActor, input: {
+        evidenceId: string;
+        projectId: string;
+        environmentId: string;
+        report: unknown;
+    }): Promise<TeamEvidence>;
+    deleteEvidence(actor: TeamActor, input: {
+        projectId: string;
+        evidenceId: string;
+    }): Promise<void>;
+    distributePolicy(actor: TeamActor, input: {
+        version: number;
+        policy: GhostApiPolicy;
+    }): Promise<TeamPolicyVersion>;
+    listProjects(actor: TeamActor): Promise<TeamProject[]>;
+    listEvidence(actor: TeamActor, projectId: string): Promise<TeamEvidence[]>;
+    listScenarioVersions(actor: TeamActor, input: {
+        projectId: string;
+        environmentId: string;
+        scenarioId: string;
+    }): Promise<TeamScenarioVersion[]>;
+    getLatestPolicy(actor: TeamActor): Promise<TeamPolicyVersion | null>;
+    listAudit(actor: TeamActor): Promise<TeamAuditRecord[]>;
+    exportAudit(actor: TeamActor): Promise<TeamAuditExport>;
+    pruneRetention(actor: TeamActor): Promise<{
+        evidenceRemoved: number;
+        auditRemoved: number;
+    }>;
+    deleteProject(actor: TeamActor, projectId: string): Promise<void>;
+    readStateForTesting(): Promise<TeamControlPlaneState>;
+    private read;
+    private mutate;
+}
+export declare function verifyAuditExport(value: unknown): {
+    valid: boolean;
+    reason?: string;
+};
+export declare function migrateTeamControlPlane(value: unknown): TeamControlPlaneState;
+export {};