ftown 0.19.52 → 0.19.54

package/dist/security/bridge/account-state.d.ts

@@ -0,0 +1,471 @@
+import { z } from 'zod';
+import type { AccountHistory, StoredAccountTrust } from '../account-protocol.js';
+import type { SecurityErrorCode } from '../protocol.js';
+export declare const accountCheckpointSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    ownerId: z.ZodString;
+    rootId: z.ZodString;
+    head: z.ZodString;
+    revision: z.ZodNumber;
+    devices: z.ZodArray<z.ZodObject<{
+        endpoint: z.ZodEffects<z.ZodObject<{
+            version: z.ZodLiteral<1>;
+            id: z.ZodString;
+            ownerId: z.ZodString;
+            kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+            publicKey: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }>, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }>;
+        signingPublicKey: z.ZodString;
+        label: z.ZodString;
+        approvedAt: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+        signingPublicKey: string;
+    }, {
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+        signingPublicKey: string;
+    }>, "many">;
+    bridges: z.ZodArray<z.ZodObject<{
+        bridgeId: z.ZodString;
+        endpoint: z.ZodEffects<z.ZodObject<{
+            version: z.ZodLiteral<1>;
+            id: z.ZodString;
+            ownerId: z.ZodString;
+            kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+            publicKey: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }>, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }>;
+        label: z.ZodString;
+        approvedAt: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        bridgeId: string;
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+    }, {
+        bridgeId: string;
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+    }>, "many">;
+    revokedDeviceIds: z.ZodArray<z.ZodString, "many">;
+    revokedBridgeIds: z.ZodArray<z.ZodString, "many">;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    ownerId: string;
+    rootId: string;
+    revision: number;
+    head: string;
+    devices: {
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+        signingPublicKey: string;
+    }[];
+    bridges: {
+        bridgeId: string;
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+    }[];
+    revokedDeviceIds: string[];
+    revokedBridgeIds: string[];
+}, {
+    version: 1;
+    ownerId: string;
+    rootId: string;
+    revision: number;
+    head: string;
+    devices: {
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+        signingPublicKey: string;
+    }[];
+    bridges: {
+        bridgeId: string;
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+    }[];
+    revokedDeviceIds: string[];
+    revokedBridgeIds: string[];
+}>;
+export declare const verifiedAccountSchema: z.ZodObject<{
+    history: z.ZodType<AccountHistory, z.ZodTypeDef, AccountHistory>;
+    checkpoint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        ownerId: z.ZodString;
+        rootId: z.ZodString;
+        head: z.ZodString;
+        revision: z.ZodNumber;
+        devices: z.ZodArray<z.ZodObject<{
+            endpoint: z.ZodEffects<z.ZodObject<{
+                version: z.ZodLiteral<1>;
+                id: z.ZodString;
+                ownerId: z.ZodString;
+                kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+                publicKey: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }>, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }>;
+            signingPublicKey: z.ZodString;
+            label: z.ZodString;
+            approvedAt: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }, {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }>, "many">;
+        bridges: z.ZodArray<z.ZodObject<{
+            bridgeId: z.ZodString;
+            endpoint: z.ZodEffects<z.ZodObject<{
+                version: z.ZodLiteral<1>;
+                id: z.ZodString;
+                ownerId: z.ZodString;
+                kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+                publicKey: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }>, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }>;
+            label: z.ZodString;
+            approvedAt: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }, {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }>, "many">;
+        revokedDeviceIds: z.ZodArray<z.ZodString, "many">;
+        revokedBridgeIds: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        version: 1;
+        ownerId: string;
+        rootId: string;
+        revision: number;
+        head: string;
+        devices: {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }[];
+        bridges: {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }[];
+        revokedDeviceIds: string[];
+        revokedBridgeIds: string[];
+    }, {
+        version: 1;
+        ownerId: string;
+        rootId: string;
+        revision: number;
+        head: string;
+        devices: {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }[];
+        bridges: {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }[];
+        revokedDeviceIds: string[];
+        revokedBridgeIds: string[];
+    }>;
+}, "strict", z.ZodTypeAny, {
+    history: AccountHistory;
+    checkpoint: {
+        version: 1;
+        ownerId: string;
+        rootId: string;
+        revision: number;
+        head: string;
+        devices: {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }[];
+        bridges: {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }[];
+        revokedDeviceIds: string[];
+        revokedBridgeIds: string[];
+    };
+}, {
+    history: AccountHistory;
+    checkpoint: {
+        version: 1;
+        ownerId: string;
+        rootId: string;
+        revision: number;
+        head: string;
+        devices: {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }[];
+        bridges: {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }[];
+        revokedDeviceIds: string[];
+        revokedBridgeIds: string[];
+    };
+}>;
+export declare const storedAccountSchema: z.ZodType<StoredAccountTrust>;
+/** A restart deliberately has no running-process grace until a valid server read. */
+export declare class AccountConnectivity {
+    private readonly now;
+    private readonly monotonic;
+    private ready;
+    private renewedAt;
+    private lastMonotonic;
+    private observedAt;
+    private failure;
+    constructor(now: () => number, monotonic: () => number);
+    observed(stored: StoredAccountTrust): number;
+    renew(stored: StoredAccountTrust): void;
+    check(stored: StoredAccountTrust): void;
+    block(code: SecurityErrorCode): void;
+    highwater(): number;
+}

package/dist/security/bridge/account-state.js

@@ -0,0 +1,78 @@
+import { z } from 'zod';
+import { ACCOUNT_TRUST_LIMITS, parseAccountHistory } from '../account-crypto.js';
+import { endpointSchema } from './metadata.js';
+import { BridgeSecurityError } from './errors.js';
+const id = z.string().regex(/^[A-Za-z0-9_-]{43}$/);
+const timestamp = z.number().int().nonnegative().finite();
+const device = z.object({ endpoint: endpointSchema, signingPublicKey: z.string().regex(/^[A-Za-z0-9_-]{87}$/),
+    label: z.string().max(200), approvedAt: z.string().datetime() }).strict();
+const bridge = z.object({ bridgeId: z.string().regex(/^[A-Za-z0-9_-]{1,200}$/), endpoint: endpointSchema,
+    label: z.string().max(200), approvedAt: z.string().datetime() }).strict();
+export const accountCheckpointSchema = z.object({ version: z.literal(1), ownerId: z.string().uuid(), rootId: id, head: id,
+    revision: z.number().int().min(0).max(ACCOUNT_TRUST_LIMITS.maxTransitions),
+    devices: z.array(device).max(ACCOUNT_TRUST_LIMITS.maxDevices), bridges: z.array(bridge).max(ACCOUNT_TRUST_LIMITS.maxBridges),
+    revokedDeviceIds: z.array(id).max(ACCOUNT_TRUST_LIMITS.maxTransitions),
+    revokedBridgeIds: z.array(z.string().regex(/^[A-Za-z0-9_-]{1,200}$/)).max(ACCOUNT_TRUST_LIMITS.maxTransitions),
+}).strict();
+export const verifiedAccountSchema = z.object({
+    history: z.custom(value => { try {
+        parseAccountHistory(value);
+        return true;
+    }
+    catch {
+        return false;
+    } }),
+    checkpoint: accountCheckpointSchema,
+}).strict();
+export const storedAccountSchema = verifiedAccountSchema.extend({
+    lastServerReadAt: timestamp, lastObservedAt: timestamp,
+}).strict();
+/** A restart deliberately has no running-process grace until a valid server read. */
+export class AccountConnectivity {
+    now;
+    monotonic;
+    ready = false;
+    renewedAt = 0;
+    lastMonotonic = 0;
+    observedAt = 0;
+    failure = null;
+    constructor(now, monotonic) {
+        this.now = now;
+        this.monotonic = monotonic;
+    }
+    observed(stored) {
+        const now = this.now();
+        const highwater = Math.max(this.observedAt, stored.lastObservedAt, stored.lastServerReadAt);
+        if (!Number.isSafeInteger(now) || now < highwater) {
+            this.failure = 'account_offline_expired';
+            throw new BridgeSecurityError('account_offline_expired');
+        }
+        this.observedAt = now;
+        return now;
+    }
+    renew(stored) {
+        this.observed(stored);
+        const monotonic = this.monotonic();
+        if (!Number.isFinite(monotonic) || monotonic < this.lastMonotonic)
+            throw new BridgeSecurityError('account_offline_expired');
+        this.lastMonotonic = monotonic;
+        this.renewedAt = monotonic;
+        this.ready = true;
+        this.failure = null;
+    }
+    check(stored) {
+        const now = this.observed(stored);
+        const monotonic = this.monotonic();
+        if (this.failure)
+            throw new BridgeSecurityError(this.failure);
+        if (!this.ready || !Number.isFinite(monotonic) || monotonic < this.lastMonotonic
+            || monotonic - this.renewedAt >= ACCOUNT_TRUST_LIMITS.offlineGraceMs
+            || now - stored.lastServerReadAt >= ACCOUNT_TRUST_LIMITS.offlineGraceMs) {
+            throw new BridgeSecurityError('account_offline_expired');
+        }
+        this.lastMonotonic = monotonic;
+    }
+    block(code) { this.failure = code; }
+    highwater() { return this.observedAt; }
+}
+//# sourceMappingURL=account-state.js.map

package/dist/security/bridge/account-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-state.js","sourceRoot":"","sources":["../../../src/security/bridge/account-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAGjF,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACnD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC;AAC1D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC3G,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,QAAQ,EAAE,cAAc;IACtG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;IACrH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC;IAC1E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC;IAC5H,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC;IACtE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC;CAC/G,CAAC,CAAC,MAAM,EAAE,CAAC;AACd,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAiB,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC;QAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IACxH,UAAU,EAAE,uBAAuB;CACpC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,mBAAmB,GAAkC,qBAAqB,CAAC,MAAM,CAAC;IAC7F,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,qFAAqF;AACrF,MAAM,OAAO,mBAAmB;IAMD;IAAoC;IALzD,KAAK,GAAG,KAAK,CAAC;IACd,SAAS,GAAG,CAAC,CAAC;IACd,aAAa,GAAG,CAAC,CAAC;IAClB,UAAU,GAAG,CAAC,CAAC;IACf,OAAO,GAA6B,IAAI,CAAC;IACjD,YAA6B,GAAiB,EAAmB,SAAuB;QAA3D,QAAG,GAAH,GAAG,CAAc;QAAmB,cAAS,GAAT,SAAS,CAAc;IAAG,CAAC;IAC5F,QAAQ,CAAC,MAA0B;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,OAAO,GAAG,yBAAyB,CAAC;YACzC,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QACtB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,CAAC,MAA0B;QAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC5H,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,MAA0B;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,aAAa;eAC3E,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,oBAAoB,CAAC,cAAc;eACjE,GAAG,GAAG,MAAM,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,cAAc,EAAE,CAAC;YAC1E,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;IACjC,CAAC;IACD,KAAK,CAAC,IAAuB,IAAU,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7D,SAAS,KAAa,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;CAChD"}

package/dist/security/bridge/audit.d.ts

@@ -0,0 +1,37 @@
+import type { SecurityEvent, SecurityEventStatus, SecurityPage, SecurityPageQuery } from '../protocol.js';
+export interface AuditAdmission {
+    admissionId: string;
+    actionId: string;
+    parentActionId: string | null;
+    clientId: string | null;
+    grantId: string | null;
+    endpointId: string | null;
+    tool: string;
+    operation: string | null;
+    sessionId: string | null;
+    mutating: boolean;
+}
+export interface AuditOptions {
+    now?: () => number;
+    maxEvents?: number;
+}
+/** Durable received-operation evidence. Only fixed, bounded metadata is ever serialized. */
+export declare class BridgeAuditStore {
+    readonly ownerId: string;
+    readonly bridgeId: string;
+    private readonly snapshot;
+    private readonly now;
+    private readonly maxEvents;
+    private ready?;
+    constructor(dataDir: string, ownerId: string, bridgeId: string, options?: AuditOptions);
+    private check;
+    private prune;
+    initialize(): Promise<void>;
+    admit(input: AuditAdmission): Promise<{
+        event: SecurityEvent;
+        isNew: boolean;
+    }>;
+    finish(id: string, status: Exclude<SecurityEventStatus, 'started'>, errorCode?: string | null): Promise<SecurityEvent>;
+    list(query?: SecurityPageQuery): Promise<SecurityPage>;
+    close(): Promise<void>;
+}