codexgpt 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.example.md +20 -0
- package/CHANGELOG.md +342 -0
- package/CHATGPT_PROMPT.md +12 -0
- package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
- package/CODEX_PROMPT.md +12 -0
- package/CONTRIBUTING.md +62 -0
- package/DOMAIN_SETUP.md +275 -0
- package/FAQ.md +366 -0
- package/FAQ_ZH.md +329 -0
- package/LICENSE +21 -0
- package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
- package/README.md +490 -0
- package/README_ZH.md +747 -0
- package/SECURITY.md +295 -0
- package/config.example.env +103 -0
- package/dist/access/fullAccessLease.js +148 -0
- package/dist/access/fullAccessLease.js.map +1 -0
- package/dist/access/protectedRoots.js +122 -0
- package/dist/access/protectedRoots.js.map +1 -0
- package/dist/access/rootAdmission.js +347 -0
- package/dist/access/rootAdmission.js.map +1 -0
- package/dist/analysis/cache.js +27 -0
- package/dist/analysis/cache.js.map +1 -0
- package/dist/analysis/classify.js +102 -0
- package/dist/analysis/classify.js.map +1 -0
- package/dist/analysis/extract.js +139 -0
- package/dist/analysis/extract.js.map +1 -0
- package/dist/analysis/graph.js +22 -0
- package/dist/analysis/graph.js.map +1 -0
- package/dist/analysis/impact.js +167 -0
- package/dist/analysis/impact.js.map +1 -0
- package/dist/analysis/index.js +215 -0
- package/dist/analysis/index.js.map +1 -0
- package/dist/analysis/inventory.js +51 -0
- package/dist/analysis/inventory.js.map +1 -0
- package/dist/analysis/providers.js +24 -0
- package/dist/analysis/providers.js.map +1 -0
- package/dist/analysis/rank.js +27 -0
- package/dist/analysis/rank.js.map +1 -0
- package/dist/analysis/types.js +8 -0
- package/dist/analysis/types.js.map +1 -0
- package/dist/audit/canonicalJson.js +79 -0
- package/dist/audit/canonicalJson.js.map +1 -0
- package/dist/audit/diagnostics.js +128 -0
- package/dist/audit/diagnostics.js.map +1 -0
- package/dist/audit/index.js +12 -0
- package/dist/audit/index.js.map +1 -0
- package/dist/audit/lifecycleV3.js +53 -0
- package/dist/audit/lifecycleV3.js.map +1 -0
- package/dist/audit/lifecycleV4.js +70 -0
- package/dist/audit/lifecycleV4.js.map +1 -0
- package/dist/audit/lock.js +195 -0
- package/dist/audit/lock.js.map +1 -0
- package/dist/audit/queryTool.js +120 -0
- package/dist/audit/queryTool.js.map +1 -0
- package/dist/audit/runtime.js +48 -0
- package/dist/audit/runtime.js.map +1 -0
- package/dist/audit/schemas.js +640 -0
- package/dist/audit/schemas.js.map +1 -0
- package/dist/audit/store.js +1309 -0
- package/dist/audit/store.js.map +1 -0
- package/dist/audit/transactionParticipant.js +45 -0
- package/dist/audit/transactionParticipant.js.map +1 -0
- package/dist/audit/types.js +11 -0
- package/dist/audit/types.js.map +1 -0
- package/dist/auth/audit.js +44 -0
- package/dist/auth/audit.js.map +1 -0
- package/dist/auth/authorizationStore.js +333 -0
- package/dist/auth/authorizationStore.js.map +1 -0
- package/dist/auth/challenges.js +25 -0
- package/dist/auth/challenges.js.map +1 -0
- package/dist/auth/clientStore.js +469 -0
- package/dist/auth/clientStore.js.map +1 -0
- package/dist/auth/cloudflareConfig.js +112 -0
- package/dist/auth/cloudflareConfig.js.map +1 -0
- package/dist/auth/configuration.js +167 -0
- package/dist/auth/configuration.js.map +1 -0
- package/dist/auth/credentialStore.js +65 -0
- package/dist/auth/credentialStore.js.map +1 -0
- package/dist/auth/deploymentLock.js +220 -0
- package/dist/auth/deploymentLock.js.map +1 -0
- package/dist/auth/deploymentRegistry.js +149 -0
- package/dist/auth/deploymentRegistry.js.map +1 -0
- package/dist/auth/errors.js +26 -0
- package/dist/auth/errors.js.map +1 -0
- package/dist/auth/grantStore.js +307 -0
- package/dist/auth/grantStore.js.map +1 -0
- package/dist/auth/index.js +39 -0
- package/dist/auth/index.js.map +1 -0
- package/dist/auth/keyManager.js +148 -0
- package/dist/auth/keyManager.js.map +1 -0
- package/dist/auth/localAdminSession.js +173 -0
- package/dist/auth/localAdminSession.js.map +1 -0
- package/dist/auth/metadata.js +69 -0
- package/dist/auth/metadata.js.map +1 -0
- package/dist/auth/oauthProvider.js +589 -0
- package/dist/auth/oauthProvider.js.map +1 -0
- package/dist/auth/ownerApproval.js +51 -0
- package/dist/auth/ownerApproval.js.map +1 -0
- package/dist/auth/policyIdentity.js +189 -0
- package/dist/auth/policyIdentity.js.map +1 -0
- package/dist/auth/rateLimits.js +66 -0
- package/dist/auth/rateLimits.js.map +1 -0
- package/dist/auth/recovery.js +275 -0
- package/dist/auth/recovery.js.map +1 -0
- package/dist/auth/requestContext.js +34 -0
- package/dist/auth/requestContext.js.map +1 -0
- package/dist/auth/resourceMiddleware.js +147 -0
- package/dist/auth/resourceMiddleware.js.map +1 -0
- package/dist/auth/runtimeStatus.js +51 -0
- package/dist/auth/runtimeStatus.js.map +1 -0
- package/dist/auth/schemas.js +84 -0
- package/dist/auth/schemas.js.map +1 -0
- package/dist/auth/stateStore.js +468 -0
- package/dist/auth/stateStore.js.map +1 -0
- package/dist/auth/tokenService.js +631 -0
- package/dist/auth/tokenService.js.map +1 -0
- package/dist/auth/toolSecurity.js +108 -0
- package/dist/auth/toolSecurity.js.map +1 -0
- package/dist/auth/types.js +6 -0
- package/dist/auth/types.js.map +1 -0
- package/dist/auth/windowsDpapi.js +193 -0
- package/dist/auth/windowsDpapi.js.map +1 -0
- package/dist/bashOps.js +292 -0
- package/dist/bashOps.js.map +1 -0
- package/dist/capabilitiesOps.js +412 -0
- package/dist/capabilitiesOps.js.map +1 -0
- package/dist/changesets/crypto.js +92 -0
- package/dist/changesets/crypto.js.map +1 -0
- package/dist/changesets/index.js +9 -0
- package/dist/changesets/index.js.map +1 -0
- package/dist/changesets/moveStore.js +237 -0
- package/dist/changesets/moveStore.js.map +1 -0
- package/dist/changesets/moveUndo.js +386 -0
- package/dist/changesets/moveUndo.js.map +1 -0
- package/dist/changesets/schemas.js +234 -0
- package/dist/changesets/schemas.js.map +1 -0
- package/dist/changesets/store.js +573 -0
- package/dist/changesets/store.js.map +1 -0
- package/dist/changesets/types.js +9 -0
- package/dist/changesets/types.js.map +1 -0
- package/dist/changesets/undo.js +525 -0
- package/dist/changesets/undo.js.map +1 -0
- package/dist/changesets/unifiedUndo.js +31 -0
- package/dist/changesets/unifiedUndo.js.map +1 -0
- package/dist/cliEnvironment.js +85 -0
- package/dist/cliEnvironment.js.map +1 -0
- package/dist/codexSessions.js +733 -0
- package/dist/codexSessions.js.map +1 -0
- package/dist/codexgptSupertool.js +216 -0
- package/dist/codexgptSupertool.js.map +1 -0
- package/dist/codexproSupertool.js +204 -0
- package/dist/codexproSupertool.js.map +1 -0
- package/dist/config.js +733 -0
- package/dist/config.js.map +1 -0
- package/dist/control/localApprovalClient.js +287 -0
- package/dist/control/localApprovalClient.js.map +1 -0
- package/dist/control/localApprovalServer.js +466 -0
- package/dist/control/localApprovalServer.js.map +1 -0
- package/dist/control/runtime.js +178 -0
- package/dist/control/runtime.js.map +1 -0
- package/dist/control/schemas.js +184 -0
- package/dist/control/schemas.js.map +1 -0
- package/dist/control/windowsLocalControl.js +348 -0
- package/dist/control/windowsLocalControl.js.map +1 -0
- package/dist/fsOps.js +541 -0
- package/dist/fsOps.js.map +1 -0
- package/dist/git/admission.js +26 -0
- package/dist/git/admission.js.map +1 -0
- package/dist/git/branchService.js +51 -0
- package/dist/git/branchService.js.map +1 -0
- package/dist/git/capabilities.js +143 -0
- package/dist/git/capabilities.js.map +1 -0
- package/dist/git/commitService.js +344 -0
- package/dist/git/commitService.js.map +1 -0
- package/dist/git/durableState.js +151 -0
- package/dist/git/durableState.js.map +1 -0
- package/dist/git/execution.js +451 -0
- package/dist/git/execution.js.map +1 -0
- package/dist/git/fileTransaction.js +50 -0
- package/dist/git/fileTransaction.js.map +1 -0
- package/dist/git/indexService.js +421 -0
- package/dist/git/indexService.js.map +1 -0
- package/dist/git/integrations.js +653 -0
- package/dist/git/integrations.js.map +1 -0
- package/dist/git/locks.js +287 -0
- package/dist/git/locks.js.map +1 -0
- package/dist/git/mutationContext.js +92 -0
- package/dist/git/mutationContext.js.map +1 -0
- package/dist/git/mutationJournal.js +91 -0
- package/dist/git/mutationJournal.js.map +1 -0
- package/dist/git/mutationService.js +352 -0
- package/dist/git/mutationService.js.map +1 -0
- package/dist/git/normalization.js +57 -0
- package/dist/git/normalization.js.map +1 -0
- package/dist/git/objectQuarantine.js +243 -0
- package/dist/git/objectQuarantine.js.map +1 -0
- package/dist/git/opaqueRecordStore.js +187 -0
- package/dist/git/opaqueRecordStore.js.map +1 -0
- package/dist/git/operationStore.js +287 -0
- package/dist/git/operationStore.js.map +1 -0
- package/dist/git/parsers.js +311 -0
- package/dist/git/parsers.js.map +1 -0
- package/dist/git/privateIndex.js +79 -0
- package/dist/git/privateIndex.js.map +1 -0
- package/dist/git/productionBootstrap.js +39 -0
- package/dist/git/productionBootstrap.js.map +1 -0
- package/dist/git/readService.js +846 -0
- package/dist/git/readService.js.map +1 -0
- package/dist/git/recovery.js +417 -0
- package/dist/git/recovery.js.map +1 -0
- package/dist/git/repositoryIdentity.js +611 -0
- package/dist/git/repositoryIdentity.js.map +1 -0
- package/dist/git/repositoryStore.js +237 -0
- package/dist/git/repositoryStore.js.map +1 -0
- package/dist/git/resources.js +113 -0
- package/dist/git/resources.js.map +1 -0
- package/dist/git/restoreService.js +178 -0
- package/dist/git/restoreService.js.map +1 -0
- package/dist/git/reviewToken.js +86 -0
- package/dist/git/reviewToken.js.map +1 -0
- package/dist/git/stashService.js +566 -0
- package/dist/git/stashService.js.map +1 -0
- package/dist/git/stateToken.js +139 -0
- package/dist/git/stateToken.js.map +1 -0
- package/dist/gitOps.js +147 -0
- package/dist/gitOps.js.map +1 -0
- package/dist/guard.js +608 -0
- package/dist/guard.js.map +1 -0
- package/dist/guidance/diagnostics.js +14 -0
- package/dist/guidance/diagnostics.js.map +1 -0
- package/dist/guidance/instructions.js +167 -0
- package/dist/guidance/instructions.js.map +1 -0
- package/dist/guidance/mode.js +18 -0
- package/dist/guidance/mode.js.map +1 -0
- package/dist/guidance/openaiSkillMetadata.js +29 -0
- package/dist/guidance/openaiSkillMetadata.js.map +1 -0
- package/dist/guidance/safeTextReader.js +171 -0
- package/dist/guidance/safeTextReader.js.map +1 -0
- package/dist/guidance/skillCatalog.js +70 -0
- package/dist/guidance/skillCatalog.js.map +1 -0
- package/dist/guidance/skillDiscovery.js +353 -0
- package/dist/guidance/skillDiscovery.js.map +1 -0
- package/dist/guidance/skillMetadata.js +115 -0
- package/dist/guidance/skillMetadata.js.map +1 -0
- package/dist/guidance/skillResources.js +146 -0
- package/dist/guidance/skillResources.js.map +1 -0
- package/dist/handoffOps.js +449 -0
- package/dist/handoffOps.js.map +1 -0
- package/dist/http/localAdminApp.js +203 -0
- package/dist/http/localAdminApp.js.map +1 -0
- package/dist/http/oauthMcpRuntime.js +294 -0
- package/dist/http/oauthMcpRuntime.js.map +1 -0
- package/dist/http/publicApp.js +350 -0
- package/dist/http/publicApp.js.map +1 -0
- package/dist/http/securityHeaders.js +11 -0
- package/dist/http/securityHeaders.js.map +1 -0
- package/dist/http.js +2076 -0
- package/dist/http.js.map +1 -0
- package/dist/moves/engine.js +1079 -0
- package/dist/moves/engine.js.map +1 -0
- package/dist/moves/index.js +6 -0
- package/dist/moves/index.js.map +1 -0
- package/dist/moves/planner.js +270 -0
- package/dist/moves/planner.js.map +1 -0
- package/dist/moves/recovery.js +557 -0
- package/dist/moves/recovery.js.map +1 -0
- package/dist/moves/service.js +300 -0
- package/dist/moves/service.js.map +1 -0
- package/dist/moves/types.js +11 -0
- package/dist/moves/types.js.map +1 -0
- package/dist/mutations/index.js +4 -0
- package/dist/mutations/index.js.map +1 -0
- package/dist/mutations/lifecycle.js +165 -0
- package/dist/mutations/lifecycle.js.map +1 -0
- package/dist/mutations/localService.js +163 -0
- package/dist/mutations/localService.js.map +1 -0
- package/dist/mutations/runtime.js +322 -0
- package/dist/mutations/runtime.js.map +1 -0
- package/dist/mutations/types.js +2 -0
- package/dist/mutations/types.js.map +1 -0
- package/dist/mutations/writers.js +360 -0
- package/dist/mutations/writers.js.map +1 -0
- package/dist/patchOps.js +420 -0
- package/dist/patchOps.js.map +1 -0
- package/dist/policy/approval.js +306 -0
- package/dist/policy/approval.js.map +1 -0
- package/dist/policy/audit.js +88 -0
- package/dist/policy/audit.js.map +1 -0
- package/dist/policy/authorizationFacts.js +187 -0
- package/dist/policy/authorizationFacts.js.map +1 -0
- package/dist/policy/compat.js +104 -0
- package/dist/policy/compat.js.map +1 -0
- package/dist/policy/context.js +31 -0
- package/dist/policy/context.js.map +1 -0
- package/dist/policy/enforcement.js +46 -0
- package/dist/policy/enforcement.js.map +1 -0
- package/dist/policy/evaluator.js +338 -0
- package/dist/policy/evaluator.js.map +1 -0
- package/dist/policy/executionCapabilities.js +80 -0
- package/dist/policy/executionCapabilities.js.map +1 -0
- package/dist/policy/executionResources.js +192 -0
- package/dist/policy/executionResources.js.map +1 -0
- package/dist/policy/fullAccessResources.js +23 -0
- package/dist/policy/fullAccessResources.js.map +1 -0
- package/dist/policy/hardPolicy.js +50 -0
- package/dist/policy/hardPolicy.js.map +1 -0
- package/dist/policy/identity.js +142 -0
- package/dist/policy/identity.js.map +1 -0
- package/dist/policy/integration.js +331 -0
- package/dist/policy/integration.js.map +1 -0
- package/dist/policy/pendingApprovals.js +301 -0
- package/dist/policy/pendingApprovals.js.map +1 -0
- package/dist/policy/profileStore.js +367 -0
- package/dist/policy/profileStore.js.map +1 -0
- package/dist/policy/resources.js +249 -0
- package/dist/policy/resources.js.map +1 -0
- package/dist/policy/runtime.js +713 -0
- package/dist/policy/runtime.js.map +1 -0
- package/dist/policy/schemas.js +625 -0
- package/dist/policy/schemas.js.map +1 -0
- package/dist/policy/toolPolicy.js +141 -0
- package/dist/policy/toolPolicy.js.map +1 -0
- package/dist/policy/transport.js +10 -0
- package/dist/policy/transport.js.map +1 -0
- package/dist/policy/types.js +31 -0
- package/dist/policy/types.js.map +1 -0
- package/dist/proContext.js +675 -0
- package/dist/proContext.js.map +1 -0
- package/dist/process/authority.js +18 -0
- package/dist/process/authority.js.map +1 -0
- package/dist/process/backendDiscovery.js +83 -0
- package/dist/process/backendDiscovery.js.map +1 -0
- package/dist/process/commandCompiler.js +71 -0
- package/dist/process/commandCompiler.js.map +1 -0
- package/dist/process/outputCursor.js +67 -0
- package/dist/process/outputCursor.js.map +1 -0
- package/dist/process/outputQuota.js +94 -0
- package/dist/process/outputQuota.js.map +1 -0
- package/dist/process/outputRing.js +138 -0
- package/dist/process/outputRing.js.map +1 -0
- package/dist/process/processAuditCoordinator.js +52 -0
- package/dist/process/processAuditCoordinator.js.map +1 -0
- package/dist/process/processManager.js +311 -0
- package/dist/process/processManager.js.map +1 -0
- package/dist/process/runCommand.js +332 -0
- package/dist/process/runCommand.js.map +1 -0
- package/dist/process/streamingRedactor.js +105 -0
- package/dist/process/streamingRedactor.js.map +1 -0
- package/dist/process/types.js +2 -0
- package/dist/process/types.js.map +1 -0
- package/dist/process/windowsHostClient.js +604 -0
- package/dist/process/windowsHostClient.js.map +1 -0
- package/dist/process/windowsHostProtocol.js +270 -0
- package/dist/process/windowsHostProtocol.js.map +1 -0
- package/dist/process/windowsPersistentBackend.js +263 -0
- package/dist/process/windowsPersistentBackend.js.map +1 -0
- package/dist/productionRuntime.js +907 -0
- package/dist/productionRuntime.js.map +1 -0
- package/dist/profileStore.js +231 -0
- package/dist/profileStore.js.map +1 -0
- package/dist/redact.js +124 -0
- package/dist/redact.js.map +1 -0
- package/dist/searchOps.js +186 -0
- package/dist/searchOps.js.map +1 -0
- package/dist/selfTestOps.js +786 -0
- package/dist/selfTestOps.js.map +1 -0
- package/dist/semantic/budgets.js +12 -0
- package/dist/semantic/budgets.js.map +1 -0
- package/dist/semantic/builtin/typescriptAssets.js +68 -0
- package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
- package/dist/semantic/builtin/typescriptProvider.js +211 -0
- package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
- package/dist/semantic/builtin/typescriptWorker.js +365 -0
- package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
- package/dist/semantic/diffPreview.js +36 -0
- package/dist/semantic/diffPreview.js.map +1 -0
- package/dist/semantic/index.js +11 -0
- package/dist/semantic/index.js.map +1 -0
- package/dist/semantic/manager.js +522 -0
- package/dist/semantic/manager.js.map +1 -0
- package/dist/semantic/positions.js +86 -0
- package/dist/semantic/positions.js.map +1 -0
- package/dist/semantic/previewStore.js +276 -0
- package/dist/semantic/previewStore.js.map +1 -0
- package/dist/semantic/projectResolver.js +309 -0
- package/dist/semantic/projectResolver.js.map +1 -0
- package/dist/semantic/sourceSnapshot.js +54 -0
- package/dist/semantic/sourceSnapshot.js.map +1 -0
- package/dist/semantic/status.js +46 -0
- package/dist/semantic/status.js.map +1 -0
- package/dist/semantic/types.js +2 -0
- package/dist/semantic/types.js.map +1 -0
- package/dist/server.js +8676 -0
- package/dist/server.js.map +1 -0
- package/dist/stdio.js +64 -0
- package/dist/stdio.js.map +1 -0
- package/dist/toolCardWidget.js +2000 -0
- package/dist/toolCardWidget.js.map +1 -0
- package/dist/tools/contracts/catalog.js +111 -0
- package/dist/tools/contracts/catalog.js.map +1 -0
- package/dist/tools/contracts/index.js +8 -0
- package/dist/tools/contracts/index.js.map +1 -0
- package/dist/tools/contracts/registration.js +27 -0
- package/dist/tools/contracts/registration.js.map +1 -0
- package/dist/tools/contracts/schemas.js +11 -0
- package/dist/tools/contracts/schemas.js.map +1 -0
- package/dist/tools/contracts/types.js +2 -0
- package/dist/tools/contracts/types.js.map +1 -0
- package/dist/tools/contracts/v3.js +76 -0
- package/dist/tools/contracts/v3.js.map +1 -0
- package/dist/tools/contracts/v4.js +39 -0
- package/dist/tools/contracts/v4.js.map +1 -0
- package/dist/tools/contracts/v5.js +20 -0
- package/dist/tools/contracts/v5.js.map +1 -0
- package/dist/tools/phase3dServer.js +350 -0
- package/dist/tools/phase3dServer.js.map +1 -0
- package/dist/tools/schemas/applyPatch.js +388 -0
- package/dist/tools/schemas/applyPatch.js.map +1 -0
- package/dist/tools/schemas/bash.js +202 -0
- package/dist/tools/schemas/bash.js.map +1 -0
- package/dist/tools/schemas/closeWorkspace.js +105 -0
- package/dist/tools/schemas/closeWorkspace.js.map +1 -0
- package/dist/tools/schemas/codexContext.js +402 -0
- package/dist/tools/schemas/codexContext.js.map +1 -0
- package/dist/tools/schemas/codexSessions.js +328 -0
- package/dist/tools/schemas/codexSessions.js.map +1 -0
- package/dist/tools/schemas/codexgpt.js +1068 -0
- package/dist/tools/schemas/codexgpt.js.map +1 -0
- package/dist/tools/schemas/codexgptInventory.js +359 -0
- package/dist/tools/schemas/codexgptInventory.js.map +1 -0
- package/dist/tools/schemas/codexgptSelfTest.js +563 -0
- package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
- package/dist/tools/schemas/codexpro.js +917 -0
- package/dist/tools/schemas/codexpro.js.map +1 -0
- package/dist/tools/schemas/codexproInventory.js +352 -0
- package/dist/tools/schemas/codexproInventory.js.map +1 -0
- package/dist/tools/schemas/codexproSelfTest.js +546 -0
- package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
- package/dist/tools/schemas/common.js +21 -0
- package/dist/tools/schemas/common.js.map +1 -0
- package/dist/tools/schemas/createTaskWorktree.js +51 -0
- package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/edit.js +321 -0
- package/dist/tools/schemas/edit.js.map +1 -0
- package/dist/tools/schemas/execution.js +330 -0
- package/dist/tools/schemas/execution.js.map +1 -0
- package/dist/tools/schemas/exportProContext.js +370 -0
- package/dist/tools/schemas/exportProContext.js.map +1 -0
- package/dist/tools/schemas/getTaskWorktree.js +19 -0
- package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/gitBranch.js +42 -0
- package/dist/tools/schemas/gitBranch.js.map +1 -0
- package/dist/tools/schemas/gitCommit.js +40 -0
- package/dist/tools/schemas/gitCommit.js.map +1 -0
- package/dist/tools/schemas/gitCreateBranch.js +22 -0
- package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
- package/dist/tools/schemas/gitDiff.js +222 -0
- package/dist/tools/schemas/gitDiff.js.map +1 -0
- package/dist/tools/schemas/gitLog.js +41 -0
- package/dist/tools/schemas/gitLog.js.map +1 -0
- package/dist/tools/schemas/gitRestore.js +47 -0
- package/dist/tools/schemas/gitRestore.js.map +1 -0
- package/dist/tools/schemas/gitStage.js +33 -0
- package/dist/tools/schemas/gitStage.js.map +1 -0
- package/dist/tools/schemas/gitStash.js +102 -0
- package/dist/tools/schemas/gitStash.js.map +1 -0
- package/dist/tools/schemas/gitStatus.js +226 -0
- package/dist/tools/schemas/gitStatus.js.map +1 -0
- package/dist/tools/schemas/gitV4Common.js +205 -0
- package/dist/tools/schemas/gitV4Common.js.map +1 -0
- package/dist/tools/schemas/guidance.js +40 -0
- package/dist/tools/schemas/guidance.js.map +1 -0
- package/dist/tools/schemas/handoffToAgent.js +276 -0
- package/dist/tools/schemas/handoffToAgent.js.map +1 -0
- package/dist/tools/schemas/handoffToCodex.js +137 -0
- package/dist/tools/schemas/handoffToCodex.js.map +1 -0
- package/dist/tools/schemas/inspectWorkspace.js +379 -0
- package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
- package/dist/tools/schemas/listTaskWorktrees.js +21 -0
- package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
- package/dist/tools/schemas/listWorkspaces.js +134 -0
- package/dist/tools/schemas/listWorkspaces.js.map +1 -0
- package/dist/tools/schemas/loadSkill.js +619 -0
- package/dist/tools/schemas/loadSkill.js.map +1 -0
- package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
- package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/movePaths.js +175 -0
- package/dist/tools/schemas/movePaths.js.map +1 -0
- package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
- package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
- package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
- package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
- package/dist/tools/schemas/openWorkspace.js +193 -0
- package/dist/tools/schemas/openWorkspace.js.map +1 -0
- package/dist/tools/schemas/queryAuditEvents.js +193 -0
- package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
- package/dist/tools/schemas/read.js +199 -0
- package/dist/tools/schemas/read.js.map +1 -0
- package/dist/tools/schemas/readCodexSession.js +353 -0
- package/dist/tools/schemas/readCodexSession.js.map +1 -0
- package/dist/tools/schemas/readHandoff.js +446 -0
- package/dist/tools/schemas/readHandoff.js.map +1 -0
- package/dist/tools/schemas/removeTaskWorktree.js +40 -0
- package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/search.js +235 -0
- package/dist/tools/schemas/search.js.map +1 -0
- package/dist/tools/schemas/semantic.js +195 -0
- package/dist/tools/schemas/semantic.js.map +1 -0
- package/dist/tools/schemas/serverConfig.js +157 -0
- package/dist/tools/schemas/serverConfig.js.map +1 -0
- package/dist/tools/schemas/showChanges.js +283 -0
- package/dist/tools/schemas/showChanges.js.map +1 -0
- package/dist/tools/schemas/transactionResult.js +11 -0
- package/dist/tools/schemas/transactionResult.js.map +1 -0
- package/dist/tools/schemas/tree.js +136 -0
- package/dist/tools/schemas/tree.js.map +1 -0
- package/dist/tools/schemas/undoChangeSet.js +152 -0
- package/dist/tools/schemas/undoChangeSet.js.map +1 -0
- package/dist/tools/schemas/waitForHandoff.js +462 -0
- package/dist/tools/schemas/waitForHandoff.js.map +1 -0
- package/dist/tools/schemas/workspaceSnapshot.js +145 -0
- package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
- package/dist/tools/schemas/write.js +285 -0
- package/dist/tools/schemas/write.js.map +1 -0
- package/dist/transactions/atomicFs.js +438 -0
- package/dist/transactions/atomicFs.js.map +1 -0
- package/dist/transactions/atomicStateFile.js +190 -0
- package/dist/transactions/atomicStateFile.js.map +1 -0
- package/dist/transactions/engine.js +574 -0
- package/dist/transactions/engine.js.map +1 -0
- package/dist/transactions/index.js +12 -0
- package/dist/transactions/index.js.map +1 -0
- package/dist/transactions/installation.js +158 -0
- package/dist/transactions/installation.js.map +1 -0
- package/dist/transactions/manifestV2Store.js +96 -0
- package/dist/transactions/manifestV2Store.js.map +1 -0
- package/dist/transactions/participantRecovery.js +98 -0
- package/dist/transactions/participantRecovery.js.map +1 -0
- package/dist/transactions/recovery.js +513 -0
- package/dist/transactions/recovery.js.map +1 -0
- package/dist/transactions/schemas.js +365 -0
- package/dist/transactions/schemas.js.map +1 -0
- package/dist/transactions/stateRoot.js +63 -0
- package/dist/transactions/stateRoot.js.map +1 -0
- package/dist/transactions/types.js +11 -0
- package/dist/transactions/types.js.map +1 -0
- package/dist/transactions/workspaceLock.js +201 -0
- package/dist/transactions/workspaceLock.js.map +1 -0
- package/dist/workspaceOps.js +924 -0
- package/dist/workspaceOps.js.map +1 -0
- package/dist/worktrees/candidateWorkspace.js +566 -0
- package/dist/worktrees/candidateWorkspace.js.map +1 -0
- package/dist/worktrees/manager.js +258 -0
- package/dist/worktrees/manager.js.map +1 -0
- package/dist/worktrees/materializer.js +60 -0
- package/dist/worktrees/materializer.js.map +1 -0
- package/dist/worktrees/mergeExecute.js +498 -0
- package/dist/worktrees/mergeExecute.js.map +1 -0
- package/dist/worktrees/mergePlanStore.js +247 -0
- package/dist/worktrees/mergePlanStore.js.map +1 -0
- package/dist/worktrees/mergePrepare.js +709 -0
- package/dist/worktrees/mergePrepare.js.map +1 -0
- package/dist/worktrees/recovery.js +294 -0
- package/dist/worktrees/recovery.js.map +1 -0
- package/dist/worktrees/remove.js +296 -0
- package/dist/worktrees/remove.js.map +1 -0
- package/dist/worktrees/remover.js +57 -0
- package/dist/worktrees/remover.js.map +1 -0
- package/dist/worktrees/root.js +47 -0
- package/dist/worktrees/root.js.map +1 -0
- package/dist/worktrees/service.js +245 -0
- package/dist/worktrees/service.js.map +1 -0
- package/dist/worktrees/store.js +156 -0
- package/dist/worktrees/store.js.map +1 -0
- package/dist/worktrees/treeManifest.js +106 -0
- package/dist/worktrees/treeManifest.js.map +1 -0
- package/dist/worktrees/verificationReceipts.js +215 -0
- package/dist/worktrees/verificationReceipts.js.map +1 -0
- package/dist/worktrees/verificationTerminal.js +23 -0
- package/dist/worktrees/verificationTerminal.js.map +1 -0
- package/dist/worktrees/workspaceAuthority.js +64 -0
- package/dist/worktrees/workspaceAuthority.js.map +1 -0
- package/docs/favicon.svg +5 -0
- package/docs/index.html +624 -0
- package/docs/og.svg +52 -0
- package/docs/script.js +33 -0
- package/docs/star.svg +11 -0
- package/docs/styles.css +1571 -0
- package/docs/zh.html +428 -0
- package/package.json +121 -0
- package/scripts/analysis-cli-smoke.mjs +81 -0
- package/scripts/analysis-smoke.mjs +179 -0
- package/scripts/atomic-file.mjs +137 -0
- package/scripts/ci-change-classifier.mjs +59 -0
- package/scripts/ci-failure-summary.mjs +92 -0
- package/scripts/cloudflared-installer.mjs +215 -0
- package/scripts/cloudflared-release.mjs +63 -0
- package/scripts/codexgpt-entry.mjs +235 -0
- package/scripts/codexgpt.mjs +4987 -0
- package/scripts/connector-auth-output-shim.cjs +66 -0
- package/scripts/doctor-smoke.mjs +90 -0
- package/scripts/doctor.mjs +165 -0
- package/scripts/exact-head-ci.mjs +126 -0
- package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
- package/scripts/execute-handoff-smoke.mjs +1117 -0
- package/scripts/g8-u-live-probe.mjs +208 -0
- package/scripts/http-smoke-compat.mjs +151 -0
- package/scripts/http-smoke.mjs +776 -0
- package/scripts/long-task-runner.mjs +1037 -0
- package/scripts/oauth-admin.mjs +1608 -0
- package/scripts/output-bounds.mjs +29 -0
- package/scripts/owned-temp-root.d.mts +50 -0
- package/scripts/owned-temp-root.mjs +567 -0
- package/scripts/phase-4a-smoke.mjs +36 -0
- package/scripts/policy-windows-spike.mjs +135 -0
- package/scripts/pro-apply.mjs +152 -0
- package/scripts/pro-bundle.mjs +121 -0
- package/scripts/pro-smoke.mjs +97 -0
- package/scripts/process-identity.mjs +67 -0
- package/scripts/repository-policy.mjs +166 -0
- package/scripts/run-and-summarize.mjs +134 -0
- package/scripts/run-smoke.mjs +52 -0
- package/scripts/run-with-cleanup.mjs +98 -0
- package/scripts/settings-smoke-platform-compat.mjs +85 -0
- package/scripts/settings-smoke.mjs +769 -0
- package/scripts/smoke-platform-compat.mjs +302 -0
- package/scripts/smoke.mjs +1180 -0
- package/scripts/stress-contract-compat.mjs +94 -0
- package/scripts/stress.mjs +882 -0
- package/scripts/test-domains.mjs +247 -0
- package/scripts/test-execution-profile-manifest.mjs +273 -0
- package/scripts/test-execution-profiles.mjs +147 -0
- package/scripts/test-performance-reporter.mjs +291 -0
- package/scripts/toolchain-manager.mjs +266 -0
- package/scripts/toolchains.json +19 -0
- package/scripts/windows-conpty-probe-child.mjs +82 -0
- package/scripts/windows-conpty-worker.ps1 +24 -0
- package/scripts/windows-credential-host-manifest.json +16 -0
- package/scripts/windows-credential-host-protocol-v1.json +16 -0
- package/scripts/windows-credential-host.cs +256 -0
- package/scripts/windows-credential-host.ps1 +26 -0
- package/scripts/windows-local-control-manifest.json +23 -0
- package/scripts/windows-local-control-spike.cs +738 -0
- package/scripts/windows-local-control-spike.mjs +415 -0
- package/scripts/windows-local-control-spike.ps1 +35 -0
- package/scripts/windows-local-control.cs +738 -0
- package/scripts/windows-local-control.ps1 +35 -0
- package/scripts/windows-native-api-inventory-v1.json +90 -0
- package/scripts/windows-process-host-manifest.json +20 -0
- package/scripts/windows-process-host-protocol-v1.json +59 -0
- package/scripts/windows-process-host.cs +2385 -0
- package/scripts/windows-process-host.ps1 +59 -0
- package/scripts/windows-realpath-shim.cjs +78 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"inventory.js","sourceRoot":"","sources":["../../src/analysis/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,GAAG,MAAM,kBAAkB,CAAC;AAEnC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGlG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAsB,EAAE,KAAgB,EAAE,SAAoB;IACrG,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,iBAAiB,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,GAAG,QAAQ,CAAC;IAC/C,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC7B,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,QAAQ,CAAC,OAAO;gBACtB,KAAK,EAAE,IAAI,CAAC,IAAI;gBAChB,UAAU,EAAE,IAAI,CAAC,OAAO;gBACxB,QAAQ;gBACR,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;gBAClD,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5C,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mFAAmF;QACrF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvF,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,0BAA0B,QAAQ,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,OAAO;QACL,KAAK;QACL,WAAW;QACX,QAAQ,EAAE;YACR,cAAc,EAAE,KAAK,CAAC,MAAM;YAC5B,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,CAAC;YACf,WAAW,EAAE,CAAC;YACd,iBAAiB,EAAE,CAAC;YACpB,SAAS;YACT,QAAQ;SACT;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
import { redactSensitiveText } from "../redact.js";
|
|
2
|
+
const providers = new Map();
|
|
3
|
+
export function registerAnalysisProvider(provider) {
|
|
4
|
+
if (!provider.id.trim())
|
|
5
|
+
throw new Error("Analysis provider id is required.");
|
|
6
|
+
providers.set(provider.id, provider);
|
|
7
|
+
}
|
|
8
|
+
export function listAnalysisProviders() {
|
|
9
|
+
return [...providers.values()];
|
|
10
|
+
}
|
|
11
|
+
export function normalizeProviderPaths(guard, workspace, paths) {
|
|
12
|
+
const valid = [];
|
|
13
|
+
const warnings = [];
|
|
14
|
+
for (const candidate of paths) {
|
|
15
|
+
try {
|
|
16
|
+
valid.push(guard.resolve(workspace, candidate).relPath);
|
|
17
|
+
}
|
|
18
|
+
catch (error) {
|
|
19
|
+
warnings.push(redactSensitiveText(`Provider path rejected: ${error instanceof Error ? error.message : String(error)}`));
|
|
20
|
+
}
|
|
21
|
+
}
|
|
22
|
+
return { paths: [...new Set(valid)], warnings };
|
|
23
|
+
}
|
|
24
|
+
//# sourceMappingURL=providers.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/analysis/providers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGnD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;AAEtD,MAAM,UAAU,wBAAwB,CAAC,QAA0B;IACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC9E,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAgB,EAAE,SAAoB,EAAE,KAAe;IAC5F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1H,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
const GROUPS = ["definitions", "references", "tests", "configuration", "documentation", "other"];
|
|
2
|
+
export function emptySearchGroups() {
|
|
3
|
+
return { definitions: [], references: [], tests: [], configuration: [], documentation: [], other: [] };
|
|
4
|
+
}
|
|
5
|
+
export function classifySearchIntent(query, requested = "auto", regex = false) {
|
|
6
|
+
if (requested !== "auto")
|
|
7
|
+
return requested;
|
|
8
|
+
if (regex || /\s/.test(query) || /^['"].*['"]$/.test(query))
|
|
9
|
+
return "text";
|
|
10
|
+
return /^[A-Za-z_$][\w$]*$/.test(query) ? "symbol" : "text";
|
|
11
|
+
}
|
|
12
|
+
export function sortStructuredMatches(matches) {
|
|
13
|
+
return matches.sort((a, b) => b.score - a.score || a.path.localeCompare(b.path) || a.line - b.line);
|
|
14
|
+
}
|
|
15
|
+
export function groupForFile(analysis, filePath, isDefinition) {
|
|
16
|
+
if (isDefinition)
|
|
17
|
+
return "definitions";
|
|
18
|
+
const role = analysis.files.find((file) => file.path === filePath)?.role;
|
|
19
|
+
if (role === "test")
|
|
20
|
+
return "tests";
|
|
21
|
+
if (role === "config")
|
|
22
|
+
return "configuration";
|
|
23
|
+
if (role === "docs")
|
|
24
|
+
return "documentation";
|
|
25
|
+
return "references";
|
|
26
|
+
}
|
|
27
|
+
//# sourceMappingURL=rank.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rank.js","sourceRoot":"","sources":["../../src/analysis/rank.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,OAAO,CAAU,CAAC;AAE1G,MAAM,UAAU,iBAAiB;IAC/B,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,YAAkC,MAAM,EAAE,KAAK,GAAG,KAAK;IACzG,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3E,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgC;IACpE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA2B,EAAE,QAAgB,EAAE,YAAqB;IAC/F,IAAI,YAAY;QAAE,OAAO,aAAa,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC;IACzE,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IAC9C,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC;IAC5C,OAAO,YAAY,CAAC;AACtB,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/analysis/types.ts"],"names":[],"mappings":"AA8BA,MAAM,CAAC,MAAM,uBAAuB,GAAmB;IACrD,iBAAiB,EAAE,MAAM;IACzB,gBAAgB,EAAE,KAAK;IACvB,eAAe,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IACjC,UAAU,EAAE,OAAO;IACnB,gBAAgB,EAAE,OAAO;CAC1B,CAAC"}
|
|
@@ -0,0 +1,79 @@
|
|
|
1
|
+
import { createHmac } from "node:crypto";
|
|
2
|
+
import { deriveTransactionSubkey } from "../transactions/installation.js";
|
|
3
|
+
import { normalizeCanonicalWorkspaceRoot } from "../transactions/stateRoot.js";
|
|
4
|
+
import { AuditError } from "./types.js";
|
|
5
|
+
function encodeCanonical(value, ancestors) {
|
|
6
|
+
if (value === null)
|
|
7
|
+
return "null";
|
|
8
|
+
if (typeof value === "string" || typeof value === "boolean")
|
|
9
|
+
return JSON.stringify(value);
|
|
10
|
+
if (typeof value === "number") {
|
|
11
|
+
if (!Number.isFinite(value)) {
|
|
12
|
+
throw new AuditError("AUDIT_RECORD_INVALID", "Canonical JSON numbers must be finite.");
|
|
13
|
+
}
|
|
14
|
+
return JSON.stringify(value);
|
|
15
|
+
}
|
|
16
|
+
if (typeof value !== "object") {
|
|
17
|
+
throw new AuditError("AUDIT_RECORD_INVALID", "Canonical JSON contains an unsupported value.");
|
|
18
|
+
}
|
|
19
|
+
if (ancestors.has(value)) {
|
|
20
|
+
throw new AuditError("AUDIT_RECORD_INVALID", "Canonical JSON contains a cycle.");
|
|
21
|
+
}
|
|
22
|
+
ancestors.add(value);
|
|
23
|
+
try {
|
|
24
|
+
if (Array.isArray(value)) {
|
|
25
|
+
return `[${value.map((item) => encodeCanonical(item, ancestors)).join(",")}]`;
|
|
26
|
+
}
|
|
27
|
+
const prototype = Object.getPrototypeOf(value);
|
|
28
|
+
if (prototype !== Object.prototype && prototype !== null) {
|
|
29
|
+
throw new AuditError("AUDIT_RECORD_INVALID", "Canonical JSON accepts only plain objects.");
|
|
30
|
+
}
|
|
31
|
+
const record = value;
|
|
32
|
+
const keys = Object.keys(record).sort((left, right) => left.localeCompare(right, "en"));
|
|
33
|
+
return `{${keys.map((key) => {
|
|
34
|
+
const item = record[key];
|
|
35
|
+
if (item === undefined) {
|
|
36
|
+
throw new AuditError("AUDIT_RECORD_INVALID", "Canonical JSON contains an unsupported value.");
|
|
37
|
+
}
|
|
38
|
+
return `${JSON.stringify(key)}:${encodeCanonical(item, ancestors)}`;
|
|
39
|
+
}).join(",")}}`;
|
|
40
|
+
}
|
|
41
|
+
finally {
|
|
42
|
+
ancestors.delete(value);
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
export function canonicalJson(value) {
|
|
46
|
+
return encodeCanonical(value, new Set());
|
|
47
|
+
}
|
|
48
|
+
export function auditRecordMac(recordKey, envelopeWithoutMac) {
|
|
49
|
+
if (!Buffer.isBuffer(recordKey) || recordKey.length !== 32) {
|
|
50
|
+
throw new AuditError("AUDIT_RECORD_INVALID", "Audit record key has an invalid length.");
|
|
51
|
+
}
|
|
52
|
+
return createHmac("sha256", recordKey)
|
|
53
|
+
.update(canonicalJson(envelopeWithoutMac), "utf8")
|
|
54
|
+
.digest("hex");
|
|
55
|
+
}
|
|
56
|
+
export function deriveAuditRecordKey(masterKey) {
|
|
57
|
+
return deriveTransactionSubkey(masterKey, "audit-record");
|
|
58
|
+
}
|
|
59
|
+
export function deriveAuditCursorKey(masterKey) {
|
|
60
|
+
return deriveTransactionSubkey(masterKey, "audit-cursor");
|
|
61
|
+
}
|
|
62
|
+
export function deriveAuditQueryV3CursorKey(masterKey) {
|
|
63
|
+
return deriveTransactionSubkey(masterKey, "audit-query-v3");
|
|
64
|
+
}
|
|
65
|
+
export function deriveAuditQueryV4CursorKey(masterKey) {
|
|
66
|
+
return deriveTransactionSubkey(masterKey, "audit-query-v4");
|
|
67
|
+
}
|
|
68
|
+
export function workspaceAuditRef(canonicalRoot, masterKey, platform = process.platform) {
|
|
69
|
+
const key = deriveTransactionSubkey(masterKey, "audit-workspace-ref");
|
|
70
|
+
try {
|
|
71
|
+
const normalized = normalizeCanonicalWorkspaceRoot(canonicalRoot, platform);
|
|
72
|
+
const digest = createHmac("sha256", key).update(normalized, "utf8").digest("hex");
|
|
73
|
+
return `awr_${digest.slice(0, 32)}`;
|
|
74
|
+
}
|
|
75
|
+
finally {
|
|
76
|
+
key.fill(0);
|
|
77
|
+
}
|
|
78
|
+
}
|
|
79
|
+
//# sourceMappingURL=canonicalJson.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"canonicalJson.js","sourceRoot":"","sources":["../../src/audit/canonicalJson.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,SAAS,eAAe,CAAC,KAAc,EAAE,SAAsB;IAC7D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,+CAA+C,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,kCAAkC,CAAC,CAAC;IACnF,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAChF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,4CAA4C,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACxF,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,+CAA+C,CAAC,CAAC;YAChG,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,kBAA2B;IAC3E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,yCAAyC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;SACnC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;SACjD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,uBAAuB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,uBAAuB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAiB;IAC3D,OAAO,uBAAuB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAiB;IAC3D,OAAO,uBAAuB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,aAAqB,EACrB,SAAiB,EACjB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,GAAG,GAAG,uBAAuB,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,+BAA+B,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,OAAO,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,128 @@
|
|
|
1
|
+
import fs from "node:fs";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { resolveTransactionStateRoot, transactionStateDirectories } from "../transactions/stateRoot.js";
|
|
4
|
+
import { ProcessInstanceRegistry } from "../transactions/workspaceLock.js";
|
|
5
|
+
import { AuditError } from "./types.js";
|
|
6
|
+
import { PersistentAuditStore } from "./store.js";
|
|
7
|
+
function emptyChecks(retentionValid) {
|
|
8
|
+
return {
|
|
9
|
+
stateDirectoryValid: false,
|
|
10
|
+
installationKeyValid: false,
|
|
11
|
+
writerLockValid: false,
|
|
12
|
+
tailValid: false,
|
|
13
|
+
retentionValid
|
|
14
|
+
};
|
|
15
|
+
}
|
|
16
|
+
function validRetention(retention) {
|
|
17
|
+
return (Number.isInteger(retention.maxAgeDays) &&
|
|
18
|
+
retention.maxAgeDays >= 1 &&
|
|
19
|
+
retention.maxAgeDays <= 365 &&
|
|
20
|
+
Number.isInteger(retention.maxClosedBytes) &&
|
|
21
|
+
retention.maxClosedBytes >= 1024 * 1024 &&
|
|
22
|
+
retention.maxClosedBytes <= 2 * 1024 * 1024 * 1024);
|
|
23
|
+
}
|
|
24
|
+
export async function probeAuditReadiness(config, options = {}) {
|
|
25
|
+
const retentionValid = validRetention(config.auditRetention);
|
|
26
|
+
if (config.auditMode === "off") {
|
|
27
|
+
return {
|
|
28
|
+
outcome: "skipped",
|
|
29
|
+
reasonCode: "AUDIT_DISABLED",
|
|
30
|
+
checks: emptyChecks(retentionValid)
|
|
31
|
+
};
|
|
32
|
+
}
|
|
33
|
+
if (!retentionValid) {
|
|
34
|
+
return {
|
|
35
|
+
outcome: "fail",
|
|
36
|
+
reasonCode: "AUDIT_RETENTION_INVALID",
|
|
37
|
+
checks: emptyChecks(false)
|
|
38
|
+
};
|
|
39
|
+
}
|
|
40
|
+
let stateRoot;
|
|
41
|
+
try {
|
|
42
|
+
stateRoot = path.resolve(options.stateRoot ?? (options.resolveStateRoot ?? resolveTransactionStateRoot)());
|
|
43
|
+
if (!path.isAbsolute(stateRoot))
|
|
44
|
+
throw new Error("state root is not absolute");
|
|
45
|
+
}
|
|
46
|
+
catch {
|
|
47
|
+
return {
|
|
48
|
+
outcome: config.auditMode === "required" ? "fail" : "warn",
|
|
49
|
+
reasonCode: config.auditMode === "required" ? "AUDIT_UNAVAILABLE" : "AUDIT_UNINITIALIZED",
|
|
50
|
+
checks: emptyChecks(true)
|
|
51
|
+
};
|
|
52
|
+
}
|
|
53
|
+
const directories = transactionStateDirectories(stateRoot);
|
|
54
|
+
if (!fs.existsSync(directories.installationFile)) {
|
|
55
|
+
return {
|
|
56
|
+
outcome: "warn",
|
|
57
|
+
reasonCode: "AUDIT_UNINITIALIZED",
|
|
58
|
+
checks: {
|
|
59
|
+
stateDirectoryValid: true,
|
|
60
|
+
installationKeyValid: false,
|
|
61
|
+
writerLockValid: false,
|
|
62
|
+
tailValid: false,
|
|
63
|
+
retentionValid: true
|
|
64
|
+
}
|
|
65
|
+
};
|
|
66
|
+
}
|
|
67
|
+
let registry;
|
|
68
|
+
let store;
|
|
69
|
+
try {
|
|
70
|
+
registry = new ProcessInstanceRegistry(stateRoot);
|
|
71
|
+
store = PersistentAuditStore.open({
|
|
72
|
+
stateRoot,
|
|
73
|
+
registry,
|
|
74
|
+
retention: config.auditRetention,
|
|
75
|
+
lockRetryCount: 0
|
|
76
|
+
});
|
|
77
|
+
await store.probeIntegrity();
|
|
78
|
+
return {
|
|
79
|
+
outcome: "pass",
|
|
80
|
+
reasonCode: "AUDIT_READY",
|
|
81
|
+
checks: {
|
|
82
|
+
stateDirectoryValid: true,
|
|
83
|
+
installationKeyValid: true,
|
|
84
|
+
writerLockValid: true,
|
|
85
|
+
tailValid: true,
|
|
86
|
+
retentionValid: true
|
|
87
|
+
}
|
|
88
|
+
};
|
|
89
|
+
}
|
|
90
|
+
catch (error) {
|
|
91
|
+
if (error instanceof AuditError && error.code === "AUDIT_BUSY") {
|
|
92
|
+
return {
|
|
93
|
+
outcome: "warn",
|
|
94
|
+
reasonCode: "AUDIT_BUSY",
|
|
95
|
+
checks: {
|
|
96
|
+
stateDirectoryValid: true,
|
|
97
|
+
installationKeyValid: true,
|
|
98
|
+
writerLockValid: false,
|
|
99
|
+
tailValid: false,
|
|
100
|
+
retentionValid: true
|
|
101
|
+
}
|
|
102
|
+
};
|
|
103
|
+
}
|
|
104
|
+
if (error instanceof AuditError && error.code === "AUDIT_INTEGRITY_FAILURE") {
|
|
105
|
+
return {
|
|
106
|
+
outcome: "fail",
|
|
107
|
+
reasonCode: "AUDIT_INTEGRITY_FAILURE",
|
|
108
|
+
checks: {
|
|
109
|
+
stateDirectoryValid: true,
|
|
110
|
+
installationKeyValid: true,
|
|
111
|
+
writerLockValid: true,
|
|
112
|
+
tailValid: false,
|
|
113
|
+
retentionValid: true
|
|
114
|
+
}
|
|
115
|
+
};
|
|
116
|
+
}
|
|
117
|
+
return {
|
|
118
|
+
outcome: "fail",
|
|
119
|
+
reasonCode: "AUDIT_UNAVAILABLE",
|
|
120
|
+
checks: emptyChecks(true)
|
|
121
|
+
};
|
|
122
|
+
}
|
|
123
|
+
finally {
|
|
124
|
+
store?.dispose();
|
|
125
|
+
registry?.dispose();
|
|
126
|
+
}
|
|
127
|
+
}
|
|
128
|
+
//# sourceMappingURL=diagnostics.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/audit/diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAiClD,SAAS,WAAW,CAAC,cAAuB;IAC1C,OAAO;QACL,mBAAmB,EAAE,KAAK;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,SAAS,EAAE,KAAK;QAChB,cAAc;KACf,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,SAA+B;IACrD,OAAO,CACL,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC;QACtC,SAAS,CAAC,UAAU,IAAI,CAAC;QACzB,SAAS,CAAC,UAAU,IAAI,GAAG;QAC3B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,CAAC;QAC1C,SAAS,CAAC,cAAc,IAAI,IAAI,GAAG,IAAI;QACvC,SAAS,CAAC,cAAc,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA4B,EAC5B,UAAiC,EAAE;IAEnC,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,UAAU,EAAE,gBAAgB;YAC5B,MAAM,EAAE,WAAW,CAAC,cAAc,CAAC;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,yBAAyB;YACrC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;SAC3B,CAAC;IACJ,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,2BAA2B,CAAC,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC1D,UAAU,EAAE,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,qBAAqB;YACzF,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,qBAAqB;YACjC,MAAM,EAAE;gBACN,mBAAmB,EAAE,IAAI;gBACzB,oBAAoB,EAAE,KAAK;gBAC3B,eAAe,EAAE,KAAK;gBACtB,SAAS,EAAE,KAAK;gBAChB,cAAc,EAAE,IAAI;aACrB;SACF,CAAC;IACJ,CAAC;IAED,IAAI,QAA6C,CAAC;IAClD,IAAI,KAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAClD,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC;YAChC,SAAS;YACT,QAAQ;YACR,SAAS,EAAE,MAAM,CAAC,cAAc;YAChC,cAAc,EAAE,CAAC;SAClB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,aAAa;YACzB,MAAM,EAAE;gBACN,mBAAmB,EAAE,IAAI;gBACzB,oBAAoB,EAAE,IAAI;gBAC1B,eAAe,EAAE,IAAI;gBACrB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;aACrB;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE;oBACN,mBAAmB,EAAE,IAAI;oBACzB,oBAAoB,EAAE,IAAI;oBAC1B,eAAe,EAAE,KAAK;oBACtB,SAAS,EAAE,KAAK;oBAChB,cAAc,EAAE,IAAI;iBACrB;aACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,UAAU,EAAE,yBAAyB;gBACrC,MAAM,EAAE;oBACN,mBAAmB,EAAE,IAAI;oBACzB,oBAAoB,EAAE,IAAI;oBAC1B,eAAe,EAAE,IAAI;oBACrB,SAAS,EAAE,KAAK;oBAChB,cAAc,EAAE,IAAI;iBACrB;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,mBAAmB;YAC/B,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC;SAC1B,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,OAAO,EAAE,CAAC;QACjB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACtB,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
export { auditRecordMac, canonicalJson, deriveAuditCursorKey, deriveAuditQueryV3CursorKey, deriveAuditQueryV4CursorKey, deriveAuditRecordKey, workspaceAuditRef } from "./canonicalJson.js";
|
|
2
|
+
export { administrativeAuditEventV2Schema, approvalLifecycleAuditEventV3Schema, auditEnvelopeV1Schema, auditEventV2Schema, auditEventV3Schema, auditEventV4Schema, auditEventV5Schema, auditIndexV1Schema, auditRetentionStateV1Schema, auditSegmentMetadataV1Schema, persistedAuditEventSchema, queryAuditEventsInputV2Schema, queryAuditEventsResultV2Schema, queryAuditEventsInputV3Schema, queryAuditEventsResultV3Schema, queryAuditEventsInputV4Schema, queryAuditEventsResultV4Schema, auditEventProjectionV4Schema, authorizationAuditEventV2Schema, executionAuditEventV2Schema, recoveryAuditEventV2Schema } from "./schemas.js";
|
|
3
|
+
export { probeAuditReadiness } from "./diagnostics.js";
|
|
4
|
+
export { AuditWriterLock, AuditWriterLockHandle } from "./lock.js";
|
|
5
|
+
export { auditQueryFilterDigest, auditQueryFilterDigestV3, auditQueryFilterDigestV4, createAuditQueryHandler, createAuditQueryHandlerV3, createAuditQueryHandlerV4, createDirectAuditQueryAdapterV2, createSupertoolAuditQueryAdapterV2, createDirectAuditQueryAdapterV3, createSupertoolAuditQueryAdapterV3, createDirectAuditQueryAdapterV4, createSupertoolAuditQueryAdapterV4, queryAuditEventsV2, queryAuditEventsV3, queryAuditEventsV4 } from "./queryTool.js";
|
|
6
|
+
export { PersistentAuditRuntimeV2 } from "./runtime.js";
|
|
7
|
+
export { createApprovalLifecycleAuditEventV3, createApprovalLifecycleSinkV3 } from "./lifecycleV3.js";
|
|
8
|
+
export { createAuditLifecycleSinkV4, createGitLifecycleAuditEventV4, createRecoveryAuditEventV4, createTerminalAuditEventV4 } from "./lifecycleV4.js";
|
|
9
|
+
export { PersistentAuditStore } from "./store.js";
|
|
10
|
+
export { attachExecutionAuditFacts, commitAuditParticipant, commitTransactionWithAudit, executionAuditFacts } from "./transactionParticipant.js";
|
|
11
|
+
export { AuditError } from "./types.js";
|
|
12
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gCAAgC,EAChC,mCAAmC,EACnC,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,8BAA8B,EAC9B,4BAA4B,EAC5B,+BAA+B,EAC/B,2BAA2B,EAC3B,0BAA0B,EAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,mBAAmB,EAKpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,+BAA+B,EAC/B,kCAAkC,EAClC,+BAA+B,EAC/B,kCAAkC,EAClC,+BAA+B,EAC/B,kCAAkC,EAClC,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAInB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAsC,MAAM,cAAc,CAAC;AAC5F,OAAO,EACL,mCAAmC,EACnC,6BAA6B,EAE9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,0BAA0B,EAC1B,0BAA0B,EAG3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAoC,MAAM,YAAY,CAAC;AACpF,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,mBAAmB,EAIpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,UAAU,EA2BX,MAAM,YAAY,CAAC"}
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
import { createHash } from "node:crypto";
|
|
2
|
+
import { approvalLifecycleAuditEventV3Schema } from "./schemas.js";
|
|
3
|
+
function eventIdFor(transition) {
|
|
4
|
+
const digest = createHash("sha256").update(JSON.stringify({
|
|
5
|
+
approvalId: transition.approval.approvalId,
|
|
6
|
+
transitionSequence: transition.approval.transitionSequence,
|
|
7
|
+
from: transition.from,
|
|
8
|
+
to: transition.to,
|
|
9
|
+
at: transition.at,
|
|
10
|
+
resultCode: transition.resultCode
|
|
11
|
+
}), "utf8").digest("hex").slice(0, 32);
|
|
12
|
+
return `event_${digest}`;
|
|
13
|
+
}
|
|
14
|
+
function auditTransition(transition) {
|
|
15
|
+
return transition.to === "pending" ? "requested" : transition.to;
|
|
16
|
+
}
|
|
17
|
+
export function createApprovalLifecycleAuditEventV3(transition) {
|
|
18
|
+
const { approval } = transition;
|
|
19
|
+
return approvalLifecycleAuditEventV3Schema.parse({
|
|
20
|
+
schemaVersion: 3,
|
|
21
|
+
contractVersion: 3,
|
|
22
|
+
eventId: eventIdFor(transition),
|
|
23
|
+
eventType: "approval_lifecycle",
|
|
24
|
+
transition: auditTransition(transition),
|
|
25
|
+
timestamp: transition.at,
|
|
26
|
+
requestId: null,
|
|
27
|
+
authorizationEventId: null,
|
|
28
|
+
decisionId: null,
|
|
29
|
+
credentialRef: approval.facts.credentialRef,
|
|
30
|
+
transportSessionId: approval.facts.transportSessionId,
|
|
31
|
+
toolName: approval.facts.toolName,
|
|
32
|
+
canonicalAction: approval.facts.canonicalAction,
|
|
33
|
+
workspaceId: approval.facts.workspaceId,
|
|
34
|
+
workspaceRef: null,
|
|
35
|
+
policyRevision: approval.facts.policyRevision,
|
|
36
|
+
subjectFingerprint: approval.facts.subjectFingerprint,
|
|
37
|
+
contextFingerprint: approval.facts.contextFingerprint,
|
|
38
|
+
resultCode: transition.resultCode,
|
|
39
|
+
counts: {
|
|
40
|
+
transitionSequence: approval.transitionSequence,
|
|
41
|
+
argumentCount: approval.summary.argumentCount
|
|
42
|
+
},
|
|
43
|
+
approvalId: approval.approvalId,
|
|
44
|
+
grantId: approval.grantId,
|
|
45
|
+
reservationId: approval.reservationId
|
|
46
|
+
});
|
|
47
|
+
}
|
|
48
|
+
export function createApprovalLifecycleSinkV3(appender) {
|
|
49
|
+
return async (transition) => {
|
|
50
|
+
await appender.append(createApprovalLifecycleAuditEventV3(transition));
|
|
51
|
+
};
|
|
52
|
+
}
|
|
53
|
+
//# sourceMappingURL=lifecycleV3.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"lifecycleV3.js","sourceRoot":"","sources":["../../src/audit/lifecycleV3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mCAAmC,EAAE,MAAM,cAAc,CAAC;AAQnE,SAAS,UAAU,CAAC,UAAgC;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACxD,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,UAAU;QAC1C,kBAAkB,EAAE,UAAU,CAAC,QAAQ,CAAC,kBAAkB;QAC1D,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO,SAAS,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,UAAgC;IACvD,OAAO,UAAU,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,UAAgC;IAEhC,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;IAChC,OAAO,mCAAmC,CAAC,KAAK,CAAC;QAC/C,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,CAAC;QAClB,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC;QAC/B,SAAS,EAAE,oBAAoB;QAC/B,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC;QACvC,SAAS,EAAE,UAAU,CAAC,EAAE;QACxB,SAAS,EAAE,IAAI;QACf,oBAAoB,EAAE,IAAI;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;QAC3C,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB;QACrD,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ;QACjC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe;QAC/C,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW;QACvC,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc;QAC7C,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB;QACrD,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB;QACrD,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,MAAM,EAAE;YACN,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa;SAC9C;QACD,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,aAAa,EAAE,QAAQ,CAAC,aAAa;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,QAAkC;IAElC,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE;QAC1B,MAAM,QAAQ,CAAC,MAAM,CAAC,mCAAmC,CAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,70 @@
|
|
|
1
|
+
import { createHash } from "node:crypto";
|
|
2
|
+
import { auditEventV4Schema } from "./schemas.js";
|
|
3
|
+
function deterministicEventId(parts) {
|
|
4
|
+
return `event_${createHash("sha256")
|
|
5
|
+
.update("audit-lifecycle-v4\0", "utf8")
|
|
6
|
+
.update(parts.join("\0"), "utf8")
|
|
7
|
+
.digest("hex").slice(0, 32)}`;
|
|
8
|
+
}
|
|
9
|
+
export function createGitLifecycleAuditEventV4(input) {
|
|
10
|
+
return auditEventV4Schema.parse({
|
|
11
|
+
schemaVersion: 4,
|
|
12
|
+
contractVersion: 4,
|
|
13
|
+
eventId: input.eventId ?? deterministicEventId([
|
|
14
|
+
input.operationId,
|
|
15
|
+
input.transition,
|
|
16
|
+
input.timestamp,
|
|
17
|
+
input.resultCode ?? ""
|
|
18
|
+
]),
|
|
19
|
+
eventType: "git_operation",
|
|
20
|
+
timestamp: input.timestamp,
|
|
21
|
+
requestId: input.requestId,
|
|
22
|
+
authorizationEventId: input.authorizationEventId,
|
|
23
|
+
decisionId: input.decisionId ?? null,
|
|
24
|
+
toolName: input.toolName,
|
|
25
|
+
canonicalAction: input.canonicalAction,
|
|
26
|
+
workspaceId: input.workspaceId ?? null,
|
|
27
|
+
policyRevision: input.policyRevision,
|
|
28
|
+
subjectFingerprint: input.subjectFingerprint,
|
|
29
|
+
contextFingerprint: input.contextFingerprint,
|
|
30
|
+
resultCode: input.resultCode,
|
|
31
|
+
counts: input.counts,
|
|
32
|
+
repositoryId: input.repositoryId,
|
|
33
|
+
taskWorktreeId: input.taskWorktreeId,
|
|
34
|
+
operationId: input.operationId,
|
|
35
|
+
transition: input.transition
|
|
36
|
+
});
|
|
37
|
+
}
|
|
38
|
+
export function createTerminalAuditEventV4(input) {
|
|
39
|
+
return auditEventV4Schema.parse({
|
|
40
|
+
schemaVersion: 4,
|
|
41
|
+
contractVersion: 4,
|
|
42
|
+
eventType: "terminal",
|
|
43
|
+
eventId: input.eventId ?? deterministicEventId([
|
|
44
|
+
input.operationId,
|
|
45
|
+
input.authorizationEventId,
|
|
46
|
+
input.status,
|
|
47
|
+
input.resultCode ?? ""
|
|
48
|
+
]),
|
|
49
|
+
...input
|
|
50
|
+
});
|
|
51
|
+
}
|
|
52
|
+
export function createRecoveryAuditEventV4(input) {
|
|
53
|
+
return auditEventV4Schema.parse({
|
|
54
|
+
schemaVersion: 4,
|
|
55
|
+
contractVersion: 4,
|
|
56
|
+
eventType: "recovery",
|
|
57
|
+
eventId: input.eventId ?? deterministicEventId([
|
|
58
|
+
input.operationId,
|
|
59
|
+
input.recoveryAction,
|
|
60
|
+
input.resultCode ?? ""
|
|
61
|
+
]),
|
|
62
|
+
...input
|
|
63
|
+
});
|
|
64
|
+
}
|
|
65
|
+
export function createAuditLifecycleSinkV4(appender) {
|
|
66
|
+
return async (event) => {
|
|
67
|
+
await appender.append(auditEventV4Schema.parse(event));
|
|
68
|
+
};
|
|
69
|
+
}
|
|
70
|
+
//# sourceMappingURL=lifecycleV4.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"lifecycleV4.js","sourceRoot":"","sources":["../../src/audit/lifecycleV4.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAalD,SAAS,oBAAoB,CAAC,KAAwB;IACpD,OAAO,SAAS,UAAU,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC;SACtC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAClC,CAAC;AAsBD,MAAM,UAAU,8BAA8B,CAC5C,KAAoC;IAEpC,OAAO,kBAAkB,CAAC,KAAK,CAAC;QAC9B,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,oBAAoB,CAAC;YAC7C,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,UAAU,IAAI,EAAE;SACvB,CAAC;QACF,SAAS,EAAE,eAAe;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;QACtC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAA6B,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAE1C;IACC,OAAO,kBAAkB,CAAC,KAAK,CAAC;QAC9B,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,CAAC;QAClB,SAAS,EAAE,UAAU;QACrB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,oBAAoB,CAAC;YAC7C,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,oBAAoB;YAC1B,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,UAAU,IAAI,EAAE;SACvB,CAAC;QACF,GAAG,KAAK;KACT,CAAyB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAE1C;IACC,OAAO,kBAAkB,CAAC,KAAK,CAAC;QAC9B,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,CAAC;QAClB,SAAS,EAAE,UAAU;QACrB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,oBAAoB,CAAC;YAC7C,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,cAAc;YACpB,KAAK,CAAC,UAAU,IAAI,EAAE;SACvB,CAAC;QACF,GAAG,KAAK;KACT,CAAyB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAkC;IAElC,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;AACJ,CAAC"}
|