cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/current-user-native-account.js

@@ -0,0 +1,82 @@
+/** Host-private account input. This function is also serialized into the calling Native context. */
+export async function readPinnedNativeAccount(capability, native, signal) {
+    signal.throwIfAborted();
+    const unavailable = (nativeAccountReason) => {
+        throw Object.assign(new Error('native account unavailable'), { nativeAccountReason });
+    };
+    let remove = () => { };
+    const aborted = new Promise((_, reject) => {
+        const onAbort = () => reject(new Error('native account unavailable'));
+        signal.addEventListener('abort', onAbort, { once: true });
+        remove = () => signal.removeEventListener('abort', onAbort);
+    });
+    try {
+        const operation = (async () => {
+            if (capability !== 'legacy-post') {
+                const inputs = native.TW?.accessInputs;
+                if (typeof inputs?.readAccountInfo !== 'function')
+                    return unavailable('typed-input-missing');
+                // Match the native typed account query. A failed typed input must never
+                // fall back to a second transport or a cached display identity.
+                let result;
+                try {
+                    const invocation = inputs.readAccountInfo();
+                    let released = false;
+                    const release = () => {
+                        if (released)
+                            return;
+                        released = true;
+                        const dispose = Symbol.dispose;
+                        if (dispose !== undefined) {
+                            const cleanup = invocation[dispose];
+                            if (typeof cleanup === 'function')
+                                cleanup.call(invocation);
+                        }
+                    };
+                    signal.addEventListener('abort', release, { once: true });
+                    try {
+                        // The call can synchronously abort while creating its invocation.
+                        signal.throwIfAborted();
+                        result = await invocation;
+                        signal.throwIfAborted();
+                    }
+                    finally {
+                        signal.removeEventListener('abort', release);
+                        // Release only this RPC invocation, never the shared account input.
+                        release();
+                    }
+                }
+                catch {
+                    return unavailable('typed-read-exception');
+                }
+                if (result?.status === 'error')
+                    return unavailable('typed-read-error');
+                if (result?.status === 'unavailable') {
+                    const reason = result.reason;
+                    if (typeof reason === 'string' && ['retired', 'connection', 'identity', 'unsupported-auth'].includes(reason)) {
+                        return unavailable(`typed-${reason}`);
+                    }
+                }
+                if (result?.status !== 'ready')
+                    return unavailable('typed-not-ready');
+                return result.data;
+            }
+            const client = native.gJt?.getInstance?.();
+            if (!client?.post)
+                return unavailable('legacy-input-missing');
+            try {
+                return (await client.post('vscode://codex/account-info', undefined, undefined, signal)).body;
+            }
+            catch {
+                return unavailable('legacy-read-exception');
+            }
+        })();
+        const value = await Promise.race([operation, aborted]);
+        signal.throwIfAborted();
+        return value;
+    }
+    finally {
+        remove();
+    }
+}
+//# sourceMappingURL=current-user-native-account.js.map

package/dist/src/current-user-native-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-user-native-account.js","sourceRoot":"","sources":["../../src/current-user-native-account.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,MAYC,EACD,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,WAAW,GAAG,CAAC,mBAA2B,EAAS,EAAE;QACzD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAA;IACvF,CAAC,CAAA;IACD,IAAI,MAAM,GAAG,GAAG,EAAE,GAAE,CAAC,CAAA;IACrB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAA;QACrE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,YAAY,CAAA;gBACtC,IAAI,OAAO,MAAM,EAAE,eAAe,KAAK,UAAU;oBAAE,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAA;gBAC5F,wEAAwE;gBACxE,gEAAgE;gBAChE,IAAI,MAAqE,CAAA;gBACzE,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,EAAE,CAAA;oBAC3C,IAAI,QAAQ,GAAG,KAAK,CAAA;oBACpB,MAAM,OAAO,GAAG,GAAG,EAAE;wBACnB,IAAI,QAAQ;4BAAE,OAAM;wBACpB,QAAQ,GAAG,IAAI,CAAA;wBACf,MAAM,OAAO,GAAI,MAA4D,CAAC,OAAO,CAAA;wBACrF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;4BAC1B,MAAM,OAAO,GAAI,UAA4D,CAAC,OAAO,CAAC,CAAA;4BACtF,IAAI,OAAO,OAAO,KAAK,UAAU;gCAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;wBAC7D,CAAC;oBACH,CAAC,CAAA;oBACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;oBACzD,IAAI,CAAC;wBACH,kEAAkE;wBAClE,MAAM,CAAC,cAAc,EAAE,CAAA;wBACvB,MAAM,GAAG,MAAM,UAA2B,CAAA;wBAC1C,MAAM,CAAC,cAAc,EAAE,CAAA;oBACzB,CAAC;4BAAS,CAAC;wBACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;wBAC5C,oEAAoE;wBACpE,OAAO,EAAE,CAAA;oBACX,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,WAAW,CAAC,sBAAsB,CAAC,CAAA;gBAC5C,CAAC;gBACD,IAAI,MAAM,EAAE,MAAM,KAAK,OAAO;oBAAE,OAAO,WAAW,CAAC,kBAAkB,CAAC,CAAA;gBACtE,IAAI,MAAM,EAAE,MAAM,KAAK,aAAa,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;oBAC5B,IACE,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EACxG,CAAC;wBACD,OAAO,WAAW,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;oBACvC,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM,EAAE,MAAM,KAAK,OAAO;oBAAE,OAAO,WAAW,CAAC,iBAAiB,CAAC,CAAA;gBACrE,OAAO,MAAM,CAAC,IAAI,CAAA;YACpB,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAA;YAC1C,IAAI,CAAC,MAAM,EAAE,IAAI;gBAAE,OAAO,WAAW,CAAC,sBAAsB,CAAC,CAAA;YAC7D,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;YAC9F,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,WAAW,CAAC,uBAAuB,CAAC,CAAA;YAC7C,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;QACtD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO,KAAK,CAAA;IACd,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAA;IACV,CAAC;AACH,CAAC"}

package/dist/src/current-user-native-pins.d.ts

@@ -0,0 +1,21 @@
+/** Exact audited native account clients. Unknown builds must fail closed. */
+export declare const CURRENT_USER_NATIVE_PINS: readonly [Readonly<{
+    appVersion: "26.903.61454";
+    buildNumber: "8378";
+    buildFlavor: "prod";
+    module: "app://-/assets/app-initial-1b87ae739476.js";
+    clientExport: "gJt";
+}>, Readonly<{
+    appVersion: "26.908.40834";
+    buildNumber: "8881";
+    buildFlavor: "prod";
+    module: "app://-/assets/app-initial-9b95fa538c62.js";
+    clientExport: "mJt";
+}>, Readonly<{
+    appVersion: "26.908.70816";
+    buildNumber: "9275";
+    buildFlavor: "prod";
+    module: "app://-/assets/app-initial-4d7ea7f81c2d.js";
+    clientExport: "mJt";
+}>];
+//# sourceMappingURL=current-user-native-pins.d.ts.map

package/dist/src/current-user-native-pins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-user-native-pins.d.ts","sourceRoot":"","sources":["../../src/current-user-native-pins.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;GAwBpC,CAAA"}

package/dist/src/current-user-native-pins.js

@@ -0,0 +1,25 @@
+/** Exact audited native account clients. Unknown builds must fail closed. */
+export const CURRENT_USER_NATIVE_PINS = Object.freeze([
+    Object.freeze({
+        appVersion: '26.903.61454',
+        buildNumber: '8378',
+        buildFlavor: 'prod',
+        module: 'app://-/assets/app-initial-1b87ae739476.js',
+        clientExport: 'gJt',
+    }),
+    Object.freeze({
+        appVersion: '26.908.40834',
+        buildNumber: '8881',
+        buildFlavor: 'prod',
+        module: 'app://-/assets/app-initial-9b95fa538c62.js',
+        clientExport: 'mJt',
+    }),
+    Object.freeze({
+        appVersion: '26.908.70816',
+        buildNumber: '9275',
+        buildFlavor: 'prod',
+        module: 'app://-/assets/app-initial-4d7ea7f81c2d.js',
+        clientExport: 'mJt',
+    }),
+]);
+//# sourceMappingURL=current-user-native-pins.js.map

package/dist/src/current-user-native-pins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-user-native-pins.js","sourceRoot":"","sources":["../../src/current-user-native-pins.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CACnD;IACE,MAAM,CAAC,MAAM,CAAC;QACZ,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,4CAA4C;QACpD,YAAY,EAAE,KAAK;KACpB,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,4CAA4C;QACpD,YAAY,EAAE,KAAK;KACpB,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,4CAA4C;QACpD,YAAY,EAAE,KAAK;KACpB,CAAC;CACM,CACX,CAAA"}

package/dist/src/dialog-contracts.d.ts

@@ -0,0 +1,9 @@
+import '@deepseek-ai/cordis';
+import type { DialogsV1 } from '@cordisx/protocol/dialogs/v1';
+export type * from '@cordisx/protocol/dialogs/v1';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        readonly dialogs: DialogsV1;
+    }
+}
+//# sourceMappingURL=dialog-contracts.d.ts.map

package/dist/src/dialog-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialog-contracts.d.ts","sourceRoot":"","sources":["../../src/dialog-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAC7D,mBAAmB,8BAA8B,CAAA;AACjD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAA;KAC5B;CACF"}

package/dist/src/dialog-contracts.js

@@ -0,0 +1,2 @@
+import '@deepseek-ai/cordis';
+//# sourceMappingURL=dialog-contracts.js.map

package/dist/src/dialog-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialog-contracts.js","sourceRoot":"","sources":["../../src/dialog-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAA"}

package/dist/src/entity-execution-context-contracts.d.ts

@@ -0,0 +1,9 @@
+import '@deepseek-ai/cordis';
+export type * from '@cordisx/protocol/entity-execution-context/v2';
+import type { EntityExecutionContexts } from '@cordisx/protocol/entity-execution-context/v2';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        entityExecutionContexts?: EntityExecutionContexts;
+    }
+}
+//# sourceMappingURL=entity-execution-context-contracts.d.ts.map

package/dist/src/entity-execution-context-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-execution-context-contracts.d.ts","sourceRoot":"","sources":["../../src/entity-execution-context-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAA;AAC5B,mBAAmB,+CAA+C,CAAA;AAClE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAA;AAC5F,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,uBAAuB,CAAC,EAAE,uBAAuB,CAAA;KAClD;CACF"}

package/dist/src/entity-execution-context-contracts.js

@@ -0,0 +1,2 @@
+import '@deepseek-ai/cordis';
+//# sourceMappingURL=entity-execution-context-contracts.js.map

package/dist/src/entity-execution-context-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-execution-context-contracts.js","sourceRoot":"","sources":["../../src/entity-execution-context-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAA"}

package/dist/src/extension-point-interaction-permissions.d.ts

@@ -1,9 +1,9 @@
 import type { ExtensionPointInteractionCapabilityV1 } from '@cordisx/protocol/extension-point-visual/v1';
 import type { PluginRuntimeManifestV10 } from '@cordisx/protocol/plugin-manifest/v10';
-import { normalizePluginManifestV8 } from './permission-model-v4.js';
+import { normalizePluginManifestV9 } from './permission-model-v4.js';
 export declare const CORDISX_PLUGIN_MANIFEST_SCHEMA_V10: "https://raw.githubusercontent.com/cordisx/cordisx-protocol/main/schemas/plugin-manifest.v10.schema.json";
 export type CordisXPluginManifestV10 = Omit<PluginRuntimeManifestV10, 'services'> & {
-    readonly services: ReturnType<typeof normalizePluginManifestV8>['services'];
+    readonly services: ReturnType<typeof normalizePluginManifestV9>['services'];
 };
 export declare function normalizeInteractionDeclaration(value: unknown): ExtensionPointInteractionCapabilityV1;
 /** Validate the additive edge while preserving the actual v10 identity. */

package/dist/src/extension-point-interaction-permissions.js

@@ -1,4 +1,4 @@
-import { normalizePluginManifestV8 } from './permission-model-v4.js';
+import { normalizePluginManifestV9 } from './permission-model-v4.js';
 import { CapabilityRiskCatalog } from './capability-risk-catalog.js';
 import { normalizeDomCapabilityDeclarationV3, normalizeDomPermissionScopeV3 } from './permission-model-v3.js';
 export const CORDISX_PLUGIN_MANIFEST_SCHEMA_V10 = 'https://raw.githubusercontent.com/cordisx/cordisx-protocol/main/schemas/plugin-manifest.v10.schema.json';
@@ -49,10 +49,10 @@ export function normalizeVisualManifestV10(value, expectedId) {
     const interactions = manifest.capabilities.filter(item => item?.name === 'ui.extension-points.interact').map(normalizeInteractionDeclaration);
     if (interactions.length > 1)
         throw new Error('Duplicate interaction declaration');
-    const base = normalizePluginManifestV8({
+    const base = normalizePluginManifestV9({
         ...manifest,
-        $schema: 'https://raw.githubusercontent.com/cordisx/cordisx-protocol/main/schemas/plugin-manifest.v8.schema.json',
-        schemaVersion: 8,
+        $schema: 'https://raw.githubusercontent.com/cordisx/cordisx-protocol/main/schemas/plugin-manifest.v9.schema.json',
+        schemaVersion: 9,
         capabilities: manifest.capabilities.filter(item => item?.name !== 'ui.extension-points.interact' && item?.name !== 'ui.extension-points.render'),
     }, expectedId, new CapabilityRiskCatalog());
     return Object.freeze({

package/dist/src/extension-point-visual-contracts.d.ts

@@ -1,3 +1,7 @@
+import type { ExtensionPointInteractionsV2 } from '@cordisx/protocol/extension-point-interactions/v2';
+export type * from '@cordisx/protocol/extension-point-interactions/v2';
+import type { ExtensionPointInteractionsV1 } from '@cordisx/protocol/extension-point-interactions/v1';
+export type * from '@cordisx/protocol/extension-point-interactions/v1';
 import type { ExtensionPointDragHandleV1 } from '@cordisx/protocol/extension-point-drag/v1';
 export type * from '@cordisx/protocol/extension-point-drag/v1';
 import type { ExtensionPointVisualSnapshotV2 } from '@cordisx/protocol/extension-point-visual/v2';
@@ -8,6 +12,7 @@ export type * from '@cordisx/protocol/extension-point-visual/v1';
 export interface CordisXReactVisualProps {
     readonly state: ExtensionPointVisualSnapshotV1 | ExtensionPointVisualSnapshotV2;
     readonly drag?: ExtensionPointDragHandleV1;
+    readonly interactions?: ExtensionPointInteractionsV1 | ExtensionPointInteractionsV2;
 }
 export interface CordisXReactVisual {
     readonly kind: 'react-svg-v1' | 'react-dom-v1';

package/dist/src/extension-point-visual-contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extension-point-visual-contracts.d.ts","sourceRoot":"","sources":["../../src/extension-point-visual-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AAC3F,mBAAmB,2CAA2C,CAAA;AAC9D,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,6CAA6C,CAAA;AACjG,mBAAmB,6CAA6C,CAAA;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EACV,2BAA2B,EAC3B,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,6CAA6C,CAAA;AACpD,mBAAmB,6CAA6C,CAAA;AAEhE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,8BAA8B,CAAA;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAA;CAC3C;AACD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAAA;IAC9C,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,uBAAuB,CAAC,CAAA;CAC3D;AACD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAA;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAA;IACxD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;CACjC;AACD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CACN,YAAY,EAAE,yBAAyB,EACvC,IAAI,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,GACtC,MAAM,IAAI,CAAA;CACd;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,qBAAqB,EAAE,4BAA4B,CAAA;KACpD;CACF"}
+{"version":3,"file":"extension-point-visual-contracts.d.ts","sourceRoot":"","sources":["../../src/extension-point-visual-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mDAAmD,CAAA;AACrG,mBAAmB,mDAAmD,CAAA;AACtE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mDAAmD,CAAA;AACrG,mBAAmB,mDAAmD,CAAA;AACtE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AAC3F,mBAAmB,2CAA2C,CAAA;AAC9D,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,6CAA6C,CAAA;AACjG,mBAAmB,6CAA6C,CAAA;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EACV,2BAA2B,EAC3B,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,6CAA6C,CAAA;AACpD,mBAAmB,6CAA6C,CAAA;AAEhE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,8BAA8B,CAAA;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAA;IAC1C,QAAQ,CAAC,YAAY,CAAC,EAAE,4BAA4B,GAAG,4BAA4B,CAAA;CACpF;AACD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAAA;IAC9C,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,uBAAuB,CAAC,CAAA;CAC3D;AACD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAA;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAA;IACxD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;CACjC;AACD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CACN,YAAY,EAAE,yBAAyB,EACvC,IAAI,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,GACtC,MAAM,IAAI,CAAA;CACd;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,qBAAqB,EAAE,4BAA4B,CAAA;KACpD;CACF"}

package/dist/src/feedback/archive.d.ts

@@ -0,0 +1,13 @@
+import { type FeedbackArtifact, type FeedbackManifest } from './contracts.js';
+export declare function sha256(value: Buffer | string): string;
+export declare function safeRelativePath(value: string): boolean;
+export declare function writePrivateFile(root: string, relativePath: string, content: string): Promise<FeedbackArtifact>;
+export declare function makePrivateStage(parent: string, name: string): Promise<string>;
+export declare function publishPrivateStage(stage: string, finalPath: string): Promise<void>;
+export declare function inspectFeedbackBundle(root: string): Promise<FeedbackManifest>;
+export declare function inspectFeedbackArchive(archivePath: string): Promise<FeedbackManifest>;
+export declare function exportFeedbackBundle(root: string, output: string): Promise<{
+    readonly bytes: number;
+    readonly sha256: string;
+}>;
+//# sourceMappingURL=archive.d.ts.map

package/dist/src/feedback/archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../../../src/feedback/archive.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAI7E,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgBrH;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKpF;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzF;AAkOD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmCnF;AAqBD,wBAAsB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmB3F;AAMD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB9D"}

package/dist/src/feedback/archive.js

@@ -0,0 +1,348 @@
+import { createHash } from 'node:crypto';
+import { chmod, lstat, mkdir, mkdtemp, readdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+const MAX_BUNDLE_BYTES = 10 * 1024 * 1024;
+export function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+export function safeRelativePath(value) {
+    return /^(?!\/)(?!.*(?:^|\/)\.\.(?:\/|$))[A-Za-z0-9._/-]+$/u.test(value) && !value.includes('\\');
+}
+export async function writePrivateFile(root, relativePath, content) {
+    if (!safeRelativePath(relativePath))
+        throw new Error(`invalid feedback artifact path: ${relativePath}`);
+    const target = path.join(root, ...relativePath.split('/'));
+    await mkdir(path.dirname(target), { recursive: true, mode: 0o700 });
+    await writeFile(target, content, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+    await chmod(target, 0o600);
+    const bytes = Buffer.byteLength(content);
+    return {
+        path: relativePath,
+        purpose: '',
+        evidenceType: 'environment_projection',
+        status: 'present',
+        bytes,
+        sha256: sha256(content),
+        redactions: 0,
+    };
+}
+export async function makePrivateStage(parent, name) {
+    await mkdir(parent, { recursive: true, mode: 0o700 });
+    const stage = path.join(parent, `.${name}.${process.pid}.${Date.now()}.tmp`);
+    await mkdir(stage, { mode: 0o700 });
+    return stage;
+}
+export async function publishPrivateStage(stage, finalPath) {
+    await rename(stage, finalPath);
+    await chmod(finalPath, 0o700);
+}
+function isTextPath(relativePath) {
+    return /\.(?:json|jsonl|txt)$/u.test(relativePath);
+}
+function forbiddenText(text) {
+    return /(?:https?:\/\/|\bBearer\s+|(?:authorization|cookie|set-cookie|x-api-key|api[_-]?key|access[_-]?token|refresh[_-]?token|password|credential)\s*[:=]|[A-Za-z]:[\\/]|\/(?:Users|home|private|tmp|var|opt|Applications)\/)/iu
+        .test(text);
+}
+function isManifest(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const manifest = value;
+    if (!exactKeys(manifest, [
+        'contract',
+        'schemaVersion',
+        'bundleId',
+        'createdAt',
+        'producer',
+        'policy',
+        'target',
+        'selection',
+        'limits',
+        'artifacts',
+        'exclusions',
+        'missing',
+        'redactions',
+        'warnings',
+        'archive',
+    ]))
+        return false;
+    if (manifest.contract !== 'cordisx.feedback-manifest/v1' || manifest.schemaVersion !== 1
+        || typeof manifest.bundleId !== 'string' || !/^fb_[a-z0-9]{12,64}$/u.test(manifest.bundleId)
+        || !dateTime(manifest.createdAt))
+        return false;
+    if (!producer(manifest.producer) || !policy(manifest.policy) || !target(manifest.target)
+        || !selection(manifest.selection) || !limits(manifest.limits))
+        return false;
+    if (!Array.isArray(manifest.artifacts) || manifest.artifacts.length > 64 || !manifest.artifacts.every(artifact)) {
+        return false;
+    }
+    if (!Array.isArray(manifest.exclusions) || !manifest.exclusions.every(exclusion))
+        return false;
+    if (!Array.isArray(manifest.missing) || manifest.missing.length > 128 || !manifest.missing.every(missing)) {
+        return false;
+    }
+    if (!redactions(manifest.redactions) || !Array.isArray(manifest.warnings) || manifest.warnings.length > 128
+        || !manifest.warnings.every(warning))
+        return false;
+    return manifest.archive === undefined || archive(manifest.archive);
+}
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function exactKeys(value, keys) {
+    const allowed = new Set(keys);
+    return Object.keys(value).every(key => allowed.has(key));
+}
+function string(value, limit) {
+    return typeof value === 'string' && value.length <= limit;
+}
+function integer(value, minimum, maximum) {
+    return typeof value === 'number' && Number.isInteger(value) && value >= minimum && value <= maximum;
+}
+function dateTime(value) {
+    return typeof value === 'string' && value.length <= 128 && Number.isFinite(Date.parse(value));
+}
+function producer(value) {
+    const item = record(value);
+    return item !== undefined
+        && exactKeys(item, ['cordisxVersion', 'nodeVersion', 'platform', 'osVersion', 'arch', 'hostVersion', 'hostBuild'])
+        && string(item.cordisxVersion, 64) && string(item.nodeVersion, 64)
+        && ['darwin', 'linux', 'win32', 'other'].includes(String(item.platform))
+        && (item.osVersion === undefined || string(item.osVersion, 128)) && string(item.arch, 32)
+        && (item.hostVersion === undefined || item.hostVersion === null || string(item.hostVersion, 128))
+        && (item.hostBuild === undefined || item.hostBuild === null || string(item.hostBuild, 128));
+}
+function policy(value) {
+    const item = record(value);
+    return item !== undefined && exactKeys(item, ['version', 'localOnly', 'contentCollection'])
+        && string(item.version, 64) && item.localOnly === true && item.contentCollection === 'excluded';
+}
+function target(value) {
+    const item = record(value);
+    const app = item === undefined ? undefined : record(item.app);
+    const profile = item === undefined ? undefined : record(item.profile);
+    return item !== undefined && app !== undefined && profile !== undefined
+        && exactKeys(item, ['app', 'profile', 'dataMode'])
+        && exactKeys(app, ['kind', 'ref']) && ['codex', 'other'].includes(String(app.kind))
+        && (app.ref === undefined || /^app_[a-f0-9]{16,64}$/u.test(String(app.ref)))
+        && exactKeys(profile, ['kind', 'ref']) && ['default', 'named'].includes(String(profile.kind))
+        && /^profile_[a-f0-9]{16,64}$/u.test(String(profile.ref))
+        && (item.dataMode === 'shared' || item.dataMode === 'host-isolated');
+}
+function selection(value) {
+    const item = record(value);
+    return item !== undefined
+        && exactKeys(item, ['launchId', 'from', 'until', 'correlationConfidence', 'disposition', 'cdpPort'])
+        && (item.launchId === null || /^launch_[a-f0-9]{16,64}$/u.test(String(item.launchId))) && dateTime(item.from)
+        && dateTime(item.until)
+        && ['exact', 'partial', 'none'].includes(String(item.correlationConfidence))
+        && ['ready', 'ready_then_cleanup_degraded', 'injection_failed', 'launch_failed', 'terminated', 'unknown'].includes(String(item.disposition))
+        && (item.cdpPort === null || integer(item.cdpPort, 1024, 65535));
+}
+function limits(value) {
+    const item = record(value);
+    return item !== undefined && exactKeys(item, ['lookbackSeconds', 'maxBytes', 'maxEvents', 'collectionTimeoutMs'])
+        && integer(item.lookbackSeconds, 1, 86400) && integer(item.maxBytes, 1, MAX_BUNDLE_BYTES)
+        && integer(item.maxEvents, 1, 10000) && integer(item.collectionTimeoutMs, 1, 30000);
+}
+function artifact(value) {
+    const item = record(value);
+    return item !== undefined
+        && exactKeys(item, [
+            'path',
+            'purpose',
+            'evidenceType',
+            'status',
+            'bytes',
+            'sha256',
+            'from',
+            'until',
+            'redactions',
+            'omittedBytes',
+        ])
+        && typeof item.path === 'string' && safeRelativePath(item.path) && item.path.length <= 240
+        && string(item.purpose, 240)
+        && ['product_log', 'structured_event', 'environment_projection', 'user_report'].includes(String(item.evidenceType))
+        && (item.status === 'present' || item.status === 'truncated') && integer(item.bytes, 0, MAX_BUNDLE_BYTES)
+        && /^[a-f0-9]{64}$/u.test(String(item.sha256)) && integer(item.redactions, 0, Number.MAX_SAFE_INTEGER)
+        && (item.from === undefined || dateTime(item.from)) && (item.until === undefined || dateTime(item.until))
+        && (item.omittedBytes === undefined || integer(item.omittedBytes, 0, Number.MAX_SAFE_INTEGER));
+}
+function exclusion(value) {
+    const item = record(value);
+    return item !== undefined && exactKeys(item, ['category', 'reason'])
+        && [
+            'conversation_content',
+            'prompts',
+            'credentials',
+            'cookies',
+            'complete_config',
+            'complete_urls',
+            'absolute_paths',
+            'screenshots',
+            'project_files',
+            'browser_storage',
+        ].includes(String(item.category))
+        && string(item.reason, 240);
+}
+function missing(value) {
+    const item = record(value);
+    return item !== undefined && exactKeys(item, ['field', 'status', 'reason'])
+        && /^[a-z][a-z0-9._-]{0,127}$/u.test(String(item.field))
+        && ['missing', 'unsupported', 'permission_denied', 'not_applicable', 'truncated'].includes(String(item.status))
+        && string(item.reason, 500);
+}
+function redactions(value) {
+    const item = record(value);
+    const categories = item === undefined ? undefined : record(item.byCategory);
+    return item !== undefined && categories !== undefined && exactKeys(item, ['total', 'byCategory'])
+        && integer(item.total, 0, Number.MAX_SAFE_INTEGER)
+        && Object.entries(categories).every(([key, count]) => /^[a-z][a-z0-9._-]{0,63}$/u.test(key) && integer(count, 0, Number.MAX_SAFE_INTEGER));
+}
+function warning(value) {
+    const item = record(value);
+    return item !== undefined && exactKeys(item, ['code', 'message'])
+        && /^[a-z][a-z0-9._-]{0,63}$/u.test(String(item.code)) && string(item.message, 500);
+}
+function archive(value) {
+    const item = record(value);
+    return item !== undefined && exactKeys(item, ['format', 'bytes', 'sha256', 'verified']) && item.format === 'zip'
+        && integer(item.bytes, 1, MAX_BUNDLE_BYTES) && /^[a-f0-9]{64}$/u.test(String(item.sha256)) && item.verified === true;
+}
+async function regularFile(target) {
+    const metadata = await lstat(target);
+    if (!metadata.isFile() || metadata.isSymbolicLink()) {
+        throw new Error(`feedback bundle contains non-regular file: ${target}`);
+    }
+    if (process.platform !== 'win32' && (metadata.mode & 0o077) !== 0) {
+        throw new Error(`feedback bundle file is not private: ${target}`);
+    }
+}
+async function collectFiles(root, relative = '') {
+    const entries = await readdir(path.join(root, relative), { withFileTypes: true });
+    const output = [];
+    for (const entry of entries) {
+        const child = relative === '' ? entry.name : path.posix.join(relative, entry.name);
+        if (entry.isDirectory()) {
+            const metadata = await lstat(path.join(root, child));
+            if (metadata.isSymbolicLink() || (process.platform !== 'win32' && (metadata.mode & 0o077) !== 0)) {
+                throw new Error(`feedback bundle directory is not private: ${child}`);
+            }
+            output.push(...await collectFiles(root, child));
+        }
+        else if (entry.isFile() && !entry.isSymbolicLink())
+            output.push(child);
+        else
+            throw new Error(`feedback bundle contains an unsafe entry: ${child}`);
+    }
+    return output.sort();
+}
+export async function inspectFeedbackBundle(root) {
+    const metadata = await lstat(root);
+    if (!metadata.isDirectory() || metadata.isSymbolicLink())
+        throw new Error('feedback bundle must be a real directory');
+    if (process.platform !== 'win32' && (metadata.mode & 0o077) !== 0) {
+        throw new Error('feedback bundle directory is not private');
+    }
+    const manifestPath = path.join(root, 'manifest.json');
+    await regularFile(manifestPath);
+    const manifest = JSON.parse(await readFile(manifestPath, 'utf8'));
+    if (!isManifest(manifest))
+        throw new Error('feedback manifest is invalid');
+    const inventory = new Map(manifest.artifacts.map(item => [item.path, item]));
+    if (inventory.size !== manifest.artifacts.length)
+        throw new Error('feedback manifest has duplicate artifacts');
+    const expected = new Set(['manifest.json', ...inventory.keys()]);
+    const actual = new Set(await collectFiles(root));
+    if (actual.size !== expected.size || [...actual].some(entry => !expected.has(entry))) {
+        throw new Error('feedback bundle inventory does not match manifest');
+    }
+    let total = Buffer.byteLength(JSON.stringify(manifest));
+    for (const artifact of manifest.artifacts) {
+        if (!safeRelativePath(artifact.path))
+            throw new Error('feedback manifest has an unsafe artifact path');
+        const target = path.join(root, ...artifact.path.split('/'));
+        await regularFile(target);
+        const contents = await readFile(target);
+        total += contents.length;
+        if (contents.length !== artifact.bytes || sha256(contents) !== artifact.sha256) {
+            throw new Error(`feedback artifact integrity check failed: ${artifact.path}`);
+        }
+        if (isTextPath(artifact.path) && forbiddenText(contents.toString('utf8'))) {
+            throw new Error(`feedback artifact violates privacy policy: ${artifact.path}`);
+        }
+    }
+    if (total > MAX_BUNDLE_BYTES || total > manifest.limits.maxBytes) {
+        throw new Error('feedback bundle exceeds its byte limit');
+    }
+    return manifest;
+}
+async function runCommand(command, args, cwd) {
+    const child = spawn(command, args, { ...(cwd === undefined ? {} : { cwd }), stdio: ['ignore', 'pipe', 'pipe'] });
+    const stdout = [];
+    const stderr = [];
+    child.stdout.on('data', chunk => stdout.push(Buffer.from(chunk)));
+    child.stderr.on('data', chunk => stderr.push(Buffer.from(chunk)));
+    await new Promise((resolve, reject) => {
+        child.once('error', reject);
+        child.once('exit', code => code === 0
+            ? resolve()
+            : reject(new Error(`${command} failed: ${Buffer.concat(stderr).toString('utf8').trim()}`)));
+    });
+    return Buffer.concat(stdout).toString('utf8');
+}
+export async function inspectFeedbackArchive(archivePath) {
+    await regularFile(archivePath);
+    const entries = (await runCommand('unzip', ['-Z1', archivePath])).split(/\r?\n/u).filter(Boolean);
+    const seen = new Set();
+    for (const entry of entries) {
+        const normalized = entry.endsWith('/') ? entry.slice(0, -1) : entry;
+        if (normalized === '' || !safeRelativePath(normalized) || seen.has(entry)) {
+            throw new Error('feedback archive contains an unsafe entry');
+        }
+        seen.add(entry);
+    }
+    const stage = await mkdtemp(path.join(os.tmpdir(), 'cordisx-feedback-inspect-'));
+    try {
+        await chmod(stage, 0o700);
+        await runCommand('unzip', ['-qq', archivePath, '-d', stage]);
+        return await inspectFeedbackBundle(stage);
+    }
+    finally {
+        await rm(stage, { recursive: true, force: true });
+    }
+}
+async function runZip(root, archivePath) {
+    await runCommand('zip', ['-q', '-r', archivePath, '.'], root);
+}
+export async function exportFeedbackBundle(root, output) {
+    await inspectFeedbackBundle(root);
+    const resolvedOutput = path.resolve(output);
+    if (path.extname(resolvedOutput) !== '.zip')
+        throw new Error('feedback export output must end in .zip');
+    const relativeOutput = path.relative(path.resolve(root), resolvedOutput);
+    if (relativeOutput === ''
+        || (!relativeOutput.startsWith(`..${path.sep}`) && relativeOutput !== '..' && !path.isAbsolute(relativeOutput))) {
+        throw new Error('feedback archive output must be outside the bundle directory');
+    }
+    await mkdir(path.dirname(resolvedOutput), { recursive: true, mode: 0o700 });
+    const temporary = `${resolvedOutput}.${process.pid}.${Date.now()}.tmp`;
+    try {
+        await runZip(root, temporary);
+        await chmod(temporary, 0o600);
+        const archive = await readFile(temporary);
+        if (archive.length > MAX_BUNDLE_BYTES)
+            throw new Error('feedback archive exceeds byte limit');
+        await inspectFeedbackArchive(temporary);
+        await rename(temporary, resolvedOutput);
+        await chmod(resolvedOutput, 0o600);
+        return { bytes: archive.length, sha256: sha256(archive) };
+    }
+    finally {
+        await rm(temporary, { force: true }).catch(() => undefined);
+    }
+}
+//# sourceMappingURL=archive.js.map