handoffprobe 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (295) hide show
  1. package/LICENSE +201 -0
  2. package/README.md +533 -0
  3. package/dist/attacks/index.d.ts +3 -0
  4. package/dist/attacks/index.d.ts.map +1 -0
  5. package/dist/attacks/index.js +3 -0
  6. package/dist/attacks/index.js.map +1 -0
  7. package/dist/attacks/p0/approval.d.ts +5 -0
  8. package/dist/attacks/p0/approval.d.ts.map +1 -0
  9. package/dist/attacks/p0/approval.js +121 -0
  10. package/dist/attacks/p0/approval.js.map +1 -0
  11. package/dist/attacks/p0/authorization.d.ts +6 -0
  12. package/dist/attacks/p0/authorization.d.ts.map +1 -0
  13. package/dist/attacks/p0/authorization.js +241 -0
  14. package/dist/attacks/p0/authorization.js.map +1 -0
  15. package/dist/attacks/p0/credentials.d.ts +10 -0
  16. package/dist/attacks/p0/credentials.d.ts.map +1 -0
  17. package/dist/attacks/p0/credentials.js +206 -0
  18. package/dist/attacks/p0/credentials.js.map +1 -0
  19. package/dist/attacks/p0/identity.d.ts +10 -0
  20. package/dist/attacks/p0/identity.d.ts.map +1 -0
  21. package/dist/attacks/p0/identity.js +200 -0
  22. package/dist/attacks/p0/identity.js.map +1 -0
  23. package/dist/attacks/p0/index.d.ts +9 -0
  24. package/dist/attacks/p0/index.d.ts.map +1 -0
  25. package/dist/attacks/p0/index.js +9 -0
  26. package/dist/attacks/p0/index.js.map +1 -0
  27. package/dist/attacks/p0/lifecycle.d.ts +6 -0
  28. package/dist/attacks/p0/lifecycle.d.ts.map +1 -0
  29. package/dist/attacks/p0/lifecycle.js +142 -0
  30. package/dist/attacks/p0/lifecycle.js.map +1 -0
  31. package/dist/attacks/p0/target.d.ts +11 -0
  32. package/dist/attacks/p0/target.d.ts.map +1 -0
  33. package/dist/attacks/p0/target.js +177 -0
  34. package/dist/attacks/p0/target.js.map +1 -0
  35. package/dist/attacks/p0/tenant.d.ts +10 -0
  36. package/dist/attacks/p0/tenant.d.ts.map +1 -0
  37. package/dist/attacks/p0/tenant.js +155 -0
  38. package/dist/attacks/p0/tenant.js.map +1 -0
  39. package/dist/attacks/p0/types.d.ts +9 -0
  40. package/dist/attacks/p0/types.d.ts.map +1 -0
  41. package/dist/attacks/p0/types.js +2 -0
  42. package/dist/attacks/p0/types.js.map +1 -0
  43. package/dist/attacks/p1/approval.d.ts +5 -0
  44. package/dist/attacks/p1/approval.d.ts.map +1 -0
  45. package/dist/attacks/p1/approval.js +259 -0
  46. package/dist/attacks/p1/approval.js.map +1 -0
  47. package/dist/attacks/p1/audit.d.ts +4 -0
  48. package/dist/attacks/p1/audit.d.ts.map +1 -0
  49. package/dist/attacks/p1/audit.js +128 -0
  50. package/dist/attacks/p1/audit.js.map +1 -0
  51. package/dist/attacks/p1/authorization.d.ts +5 -0
  52. package/dist/attacks/p1/authorization.d.ts.map +1 -0
  53. package/dist/attacks/p1/authorization.js +239 -0
  54. package/dist/attacks/p1/authorization.js.map +1 -0
  55. package/dist/attacks/p1/index.d.ts +7 -0
  56. package/dist/attacks/p1/index.d.ts.map +1 -0
  57. package/dist/attacks/p1/index.js +7 -0
  58. package/dist/attacks/p1/index.js.map +1 -0
  59. package/dist/attacks/p1/race.d.ts +5 -0
  60. package/dist/attacks/p1/race.d.ts.map +1 -0
  61. package/dist/attacks/p1/race.js +255 -0
  62. package/dist/attacks/p1/race.js.map +1 -0
  63. package/dist/attacks/p1/replay.d.ts +6 -0
  64. package/dist/attacks/p1/replay.d.ts.map +1 -0
  65. package/dist/attacks/p1/replay.js +285 -0
  66. package/dist/attacks/p1/replay.js.map +1 -0
  67. package/dist/attacks/p1/types.d.ts +28 -0
  68. package/dist/attacks/p1/types.d.ts.map +1 -0
  69. package/dist/attacks/p1/types.js +2 -0
  70. package/dist/attacks/p1/types.js.map +1 -0
  71. package/dist/cli/config.d.ts +15 -0
  72. package/dist/cli/config.d.ts.map +1 -0
  73. package/dist/cli/config.js +100 -0
  74. package/dist/cli/config.js.map +1 -0
  75. package/dist/cli/diagnostics.d.ts +4 -0
  76. package/dist/cli/diagnostics.d.ts.map +1 -0
  77. package/dist/cli/diagnostics.js +23 -0
  78. package/dist/cli/diagnostics.js.map +1 -0
  79. package/dist/cli/discovery.d.ts +3 -0
  80. package/dist/cli/discovery.d.ts.map +1 -0
  81. package/dist/cli/discovery.js +75 -0
  82. package/dist/cli/discovery.js.map +1 -0
  83. package/dist/cli/execution-catalog.d.ts +12 -0
  84. package/dist/cli/execution-catalog.d.ts.map +1 -0
  85. package/dist/cli/execution-catalog.js +76 -0
  86. package/dist/cli/execution-catalog.js.map +1 -0
  87. package/dist/cli/protocols.d.ts +6 -0
  88. package/dist/cli/protocols.d.ts.map +1 -0
  89. package/dist/cli/protocols.js +6 -0
  90. package/dist/cli/protocols.js.map +1 -0
  91. package/dist/cli/reporters.d.ts +7 -0
  92. package/dist/cli/reporters.d.ts.map +1 -0
  93. package/dist/cli/reporters.js +126 -0
  94. package/dist/cli/reporters.js.map +1 -0
  95. package/dist/cli/run-cli.d.ts +6 -0
  96. package/dist/cli/run-cli.d.ts.map +1 -0
  97. package/dist/cli/run-cli.js +243 -0
  98. package/dist/cli/run-cli.js.map +1 -0
  99. package/dist/cli/test-command.d.ts +29 -0
  100. package/dist/cli/test-command.d.ts.map +1 -0
  101. package/dist/cli/test-command.js +118 -0
  102. package/dist/cli/test-command.js.map +1 -0
  103. package/dist/cli.d.ts +3 -0
  104. package/dist/cli.d.ts.map +1 -0
  105. package/dist/cli.js +11 -0
  106. package/dist/cli.js.map +1 -0
  107. package/dist/core/adapters.d.ts +23 -0
  108. package/dist/core/adapters.d.ts.map +1 -0
  109. package/dist/core/adapters.js +2 -0
  110. package/dist/core/adapters.js.map +1 -0
  111. package/dist/core/attacks.d.ts +29 -0
  112. package/dist/core/attacks.d.ts.map +1 -0
  113. package/dist/core/attacks.js +38 -0
  114. package/dist/core/attacks.js.map +1 -0
  115. package/dist/core/errors.d.ts +16 -0
  116. package/dist/core/errors.d.ts.map +1 -0
  117. package/dist/core/errors.js +22 -0
  118. package/dist/core/errors.js.map +1 -0
  119. package/dist/core/evidence.d.ts +18 -0
  120. package/dist/core/evidence.d.ts.map +1 -0
  121. package/dist/core/evidence.js +2 -0
  122. package/dist/core/evidence.js.map +1 -0
  123. package/dist/core/findings.d.ts +25 -0
  124. package/dist/core/findings.d.ts.map +1 -0
  125. package/dist/core/findings.js +4 -0
  126. package/dist/core/findings.js.map +1 -0
  127. package/dist/core/index.d.ts +10 -0
  128. package/dist/core/index.d.ts.map +1 -0
  129. package/dist/core/index.js +10 -0
  130. package/dist/core/index.js.map +1 -0
  131. package/dist/core/provenance.d.ts +8 -0
  132. package/dist/core/provenance.d.ts.map +1 -0
  133. package/dist/core/provenance.js +2 -0
  134. package/dist/core/provenance.js.map +1 -0
  135. package/dist/core/redaction.d.ts +4 -0
  136. package/dist/core/redaction.d.ts.map +1 -0
  137. package/dist/core/redaction.js +59 -0
  138. package/dist/core/redaction.js.map +1 -0
  139. package/dist/core/runner.d.ts +42 -0
  140. package/dist/core/runner.d.ts.map +1 -0
  141. package/dist/core/runner.js +181 -0
  142. package/dist/core/runner.js.map +1 -0
  143. package/dist/core/security-context.d.ts +64 -0
  144. package/dist/core/security-context.d.ts.map +1 -0
  145. package/dist/core/security-context.js +56 -0
  146. package/dist/core/security-context.js.map +1 -0
  147. package/dist/github-action/core.d.ts +34 -0
  148. package/dist/github-action/core.d.ts.map +1 -0
  149. package/dist/github-action/core.js +118 -0
  150. package/dist/github-action/core.js.map +1 -0
  151. package/dist/github-action/run-action.d.ts +2 -0
  152. package/dist/github-action/run-action.d.ts.map +1 -0
  153. package/dist/github-action/run-action.js +112 -0
  154. package/dist/github-action/run-action.js.map +1 -0
  155. package/dist/index.d.ts +6 -0
  156. package/dist/index.d.ts.map +1 -0
  157. package/dist/index.js +6 -0
  158. package/dist/index.js.map +1 -0
  159. package/dist/p0-fixture/a2a/executor.d.ts +22 -0
  160. package/dist/p0-fixture/a2a/executor.d.ts.map +1 -0
  161. package/dist/p0-fixture/a2a/executor.js +183 -0
  162. package/dist/p0-fixture/a2a/executor.js.map +1 -0
  163. package/dist/p0-fixture/a2a/harness.d.ts +16 -0
  164. package/dist/p0-fixture/a2a/harness.d.ts.map +1 -0
  165. package/dist/p0-fixture/a2a/harness.js +160 -0
  166. package/dist/p0-fixture/a2a/harness.js.map +1 -0
  167. package/dist/p0-fixture/authorization.d.ts +24 -0
  168. package/dist/p0-fixture/authorization.d.ts.map +1 -0
  169. package/dist/p0-fixture/authorization.js +66 -0
  170. package/dist/p0-fixture/authorization.js.map +1 -0
  171. package/dist/p0-fixture/constants.d.ts +17 -0
  172. package/dist/p0-fixture/constants.d.ts.map +1 -0
  173. package/dist/p0-fixture/constants.js +17 -0
  174. package/dist/p0-fixture/constants.js.map +1 -0
  175. package/dist/p0-fixture/handoff/adapter.d.ts +6 -0
  176. package/dist/p0-fixture/handoff/adapter.d.ts.map +1 -0
  177. package/dist/p0-fixture/handoff/adapter.js +8 -0
  178. package/dist/p0-fixture/handoff/adapter.js.map +1 -0
  179. package/dist/p0-fixture/index.d.ts +11 -0
  180. package/dist/p0-fixture/index.d.ts.map +1 -0
  181. package/dist/p0-fixture/index.js +11 -0
  182. package/dist/p0-fixture/index.js.map +1 -0
  183. package/dist/p0-fixture/mcp/fake-tools.d.ts +7 -0
  184. package/dist/p0-fixture/mcp/fake-tools.d.ts.map +1 -0
  185. package/dist/p0-fixture/mcp/fake-tools.js +322 -0
  186. package/dist/p0-fixture/mcp/fake-tools.js.map +1 -0
  187. package/dist/p0-fixture/mcp/harness.d.ts +16 -0
  188. package/dist/p0-fixture/mcp/harness.d.ts.map +1 -0
  189. package/dist/p0-fixture/mcp/harness.js +114 -0
  190. package/dist/p0-fixture/mcp/harness.js.map +1 -0
  191. package/dist/p0-fixture/mcp/types.d.ts +29 -0
  192. package/dist/p0-fixture/mcp/types.d.ts.map +1 -0
  193. package/dist/p0-fixture/mcp/types.js +2 -0
  194. package/dist/p0-fixture/mcp/types.js.map +1 -0
  195. package/dist/p0-fixture/payload-hash.d.ts +2 -0
  196. package/dist/p0-fixture/payload-hash.d.ts.map +1 -0
  197. package/dist/p0-fixture/payload-hash.js +20 -0
  198. package/dist/p0-fixture/payload-hash.js.map +1 -0
  199. package/dist/p0-fixture/reference.d.ts +8 -0
  200. package/dist/p0-fixture/reference.d.ts.map +1 -0
  201. package/dist/p0-fixture/reference.js +42 -0
  202. package/dist/p0-fixture/reference.js.map +1 -0
  203. package/dist/p0-fixture/scenario.d.ts +14 -0
  204. package/dist/p0-fixture/scenario.d.ts.map +1 -0
  205. package/dist/p0-fixture/scenario.js +22 -0
  206. package/dist/p0-fixture/scenario.js.map +1 -0
  207. package/dist/p0-fixture/state.d.ts +43 -0
  208. package/dist/p0-fixture/state.d.ts.map +1 -0
  209. package/dist/p0-fixture/state.js +85 -0
  210. package/dist/p0-fixture/state.js.map +1 -0
  211. package/dist/p0-fixture/target-adapter.d.ts +20 -0
  212. package/dist/p0-fixture/target-adapter.d.ts.map +1 -0
  213. package/dist/p0-fixture/target-adapter.js +62 -0
  214. package/dist/p0-fixture/target-adapter.js.map +1 -0
  215. package/dist/p1-fixture/approval-target-adapter.d.ts +47 -0
  216. package/dist/p1-fixture/approval-target-adapter.d.ts.map +1 -0
  217. package/dist/p1-fixture/approval-target-adapter.js +172 -0
  218. package/dist/p1-fixture/approval-target-adapter.js.map +1 -0
  219. package/dist/p1-fixture/audit-target-adapter.d.ts +36 -0
  220. package/dist/p1-fixture/audit-target-adapter.d.ts.map +1 -0
  221. package/dist/p1-fixture/audit-target-adapter.js +226 -0
  222. package/dist/p1-fixture/audit-target-adapter.js.map +1 -0
  223. package/dist/p1-fixture/barrier.d.ts +10 -0
  224. package/dist/p1-fixture/barrier.d.ts.map +1 -0
  225. package/dist/p1-fixture/barrier.js +44 -0
  226. package/dist/p1-fixture/barrier.js.map +1 -0
  227. package/dist/p1-fixture/clock.d.ts +7 -0
  228. package/dist/p1-fixture/clock.d.ts.map +1 -0
  229. package/dist/p1-fixture/clock.js +30 -0
  230. package/dist/p1-fixture/clock.js.map +1 -0
  231. package/dist/p1-fixture/index.d.ts +9 -0
  232. package/dist/p1-fixture/index.d.ts.map +1 -0
  233. package/dist/p1-fixture/index.js +9 -0
  234. package/dist/p1-fixture/index.js.map +1 -0
  235. package/dist/p1-fixture/race-target-adapter.d.ts +49 -0
  236. package/dist/p1-fixture/race-target-adapter.d.ts.map +1 -0
  237. package/dist/p1-fixture/race-target-adapter.js +384 -0
  238. package/dist/p1-fixture/race-target-adapter.js.map +1 -0
  239. package/dist/p1-fixture/replay-target-adapter.d.ts +44 -0
  240. package/dist/p1-fixture/replay-target-adapter.d.ts.map +1 -0
  241. package/dist/p1-fixture/replay-target-adapter.js +248 -0
  242. package/dist/p1-fixture/replay-target-adapter.js.map +1 -0
  243. package/dist/p1-fixture/state.d.ts +78 -0
  244. package/dist/p1-fixture/state.d.ts.map +1 -0
  245. package/dist/p1-fixture/state.js +191 -0
  246. package/dist/p1-fixture/state.js.map +1 -0
  247. package/dist/p1-fixture/target-adapter.d.ts +30 -0
  248. package/dist/p1-fixture/target-adapter.d.ts.map +1 -0
  249. package/dist/p1-fixture/target-adapter.js +142 -0
  250. package/dist/p1-fixture/target-adapter.js.map +1 -0
  251. package/dist/protocol-lab/a2a/executor.d.ts +13 -0
  252. package/dist/protocol-lab/a2a/executor.d.ts.map +1 -0
  253. package/dist/protocol-lab/a2a/executor.js +112 -0
  254. package/dist/protocol-lab/a2a/executor.js.map +1 -0
  255. package/dist/protocol-lab/a2a/harness.d.ts +11 -0
  256. package/dist/protocol-lab/a2a/harness.d.ts.map +1 -0
  257. package/dist/protocol-lab/a2a/harness.js +160 -0
  258. package/dist/protocol-lab/a2a/harness.js.map +1 -0
  259. package/dist/protocol-lab/evidence.d.ts +17 -0
  260. package/dist/protocol-lab/evidence.d.ts.map +1 -0
  261. package/dist/protocol-lab/evidence.js +28 -0
  262. package/dist/protocol-lab/evidence.js.map +1 -0
  263. package/dist/protocol-lab/fixture.d.ts +11 -0
  264. package/dist/protocol-lab/fixture.d.ts.map +1 -0
  265. package/dist/protocol-lab/fixture.js +54 -0
  266. package/dist/protocol-lab/fixture.js.map +1 -0
  267. package/dist/protocol-lab/handoff/adapter.d.ts +9 -0
  268. package/dist/protocol-lab/handoff/adapter.d.ts.map +1 -0
  269. package/dist/protocol-lab/handoff/adapter.js +13 -0
  270. package/dist/protocol-lab/handoff/adapter.js.map +1 -0
  271. package/dist/protocol-lab/handoff/translate.d.ts +3 -0
  272. package/dist/protocol-lab/handoff/translate.d.ts.map +1 -0
  273. package/dist/protocol-lab/handoff/translate.js +14 -0
  274. package/dist/protocol-lab/handoff/translate.js.map +1 -0
  275. package/dist/protocol-lab/mcp/fake-tools.d.ts +5 -0
  276. package/dist/protocol-lab/mcp/fake-tools.d.ts.map +1 -0
  277. package/dist/protocol-lab/mcp/fake-tools.js +58 -0
  278. package/dist/protocol-lab/mcp/fake-tools.js.map +1 -0
  279. package/dist/protocol-lab/mcp/harness.d.ts +7 -0
  280. package/dist/protocol-lab/mcp/harness.d.ts.map +1 -0
  281. package/dist/protocol-lab/mcp/harness.js +97 -0
  282. package/dist/protocol-lab/mcp/harness.js.map +1 -0
  283. package/dist/protocol-lab/models.d.ts +31 -0
  284. package/dist/protocol-lab/models.d.ts.map +1 -0
  285. package/dist/protocol-lab/models.js +2 -0
  286. package/dist/protocol-lab/models.js.map +1 -0
  287. package/dist/protocol-lab/run.d.ts +2 -0
  288. package/dist/protocol-lab/run.d.ts.map +1 -0
  289. package/dist/protocol-lab/run.js +22 -0
  290. package/dist/protocol-lab/run.js.map +1 -0
  291. package/dist/protocol-lab/target-adapter.d.ts +10 -0
  292. package/dist/protocol-lab/target-adapter.d.ts.map +1 -0
  293. package/dist/protocol-lab/target-adapter.js +33 -0
  294. package/dist/protocol-lab/target-adapter.js.map +1 -0
  295. package/package.json +77 -0
@@ -0,0 +1 @@
1
+ {"version":3,"file":"scenario.js","sourceRoot":"","sources":["../../src/p0-fixture/scenario.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAC,MAAM,wBAAwB,GAAe;IAClD,EAAE,EAAE,yBAAyB;IAC7B,IAAI,EAAE,cAAc;IAEpB,cAAc,CAAC,OAAO;QACpB,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,WAAmB;IAC/D,OAAO;QACL,EAAE,EAAE,kBAAkB,WAAW,EAAE;QACnC,IAAI,EAAE,gBAAgB;QAEtB,cAAc,CAAC,OAAO;YACpB,OAAO;gBACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW;aACZ,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
@@ -0,0 +1,43 @@
1
+ export interface SyntheticInvoice {
2
+ resource: string;
3
+ tenant: string;
4
+ amountCents: number;
5
+ currency: 'EUR';
6
+ version: number;
7
+ }
8
+ export interface SyntheticRefund {
9
+ id: string;
10
+ amount: number;
11
+ recipient: string;
12
+ approvalId: string;
13
+ }
14
+ export interface SyntheticOutboxMessage {
15
+ id: string;
16
+ recipient: string;
17
+ subject: string;
18
+ }
19
+ export interface P0FixtureState {
20
+ invoices: Record<string, SyntheticInvoice>;
21
+ refunds: SyntheticRefund[];
22
+ outbox: SyntheticOutboxMessage[];
23
+ sideEffectCounter: number;
24
+ }
25
+ export interface P0FixtureSnapshot {
26
+ invoices: Record<string, SyntheticInvoice>;
27
+ refunds: SyntheticRefund[];
28
+ outbox: SyntheticOutboxMessage[];
29
+ sideEffectCounter: number;
30
+ }
31
+ export declare function createP0FixtureState(): P0FixtureState;
32
+ export declare function snapshotP0FixtureState(state: P0FixtureState): P0FixtureSnapshot;
33
+ export declare function updateSyntheticInvoice(state: P0FixtureState, resource: string, amountCents: number): SyntheticInvoice;
34
+ export declare function recordSyntheticRefund(state: P0FixtureState, input: {
35
+ amount: number;
36
+ recipient: string;
37
+ approvalId: string;
38
+ }): SyntheticRefund;
39
+ export declare function recordSyntheticEmail(state: P0FixtureState, input: {
40
+ recipient: string;
41
+ subject: string;
42
+ }): SyntheticOutboxMessage;
43
+ //# sourceMappingURL=state.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/p0-fixture/state.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,KAAK,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAeD,wBAAgB,oBAAoB,IAAI,cAAc,CAwBrD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,CAc/E;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,gBAAgB,CAoBlB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE;IACL,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,GACA,eAAe,CAejB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,GACA,sBAAsB,CAcxB"}
@@ -0,0 +1,85 @@
1
+ function cloneInvoices(invoices) {
2
+ return Object.fromEntries(Object.entries(invoices).map(([key, invoice]) => [
3
+ key,
4
+ {
5
+ ...invoice,
6
+ },
7
+ ]));
8
+ }
9
+ export function createP0FixtureState() {
10
+ return {
11
+ invoices: {
12
+ 'invoice:INV-1001': {
13
+ resource: 'invoice:INV-1001',
14
+ tenant: 'tenant:acme',
15
+ amountCents: 12900,
16
+ currency: 'EUR',
17
+ version: 1,
18
+ },
19
+ 'invoice:INV-2002': {
20
+ resource: 'invoice:INV-2002',
21
+ tenant: 'tenant:globex',
22
+ amountCents: 8800,
23
+ currency: 'EUR',
24
+ version: 1,
25
+ },
26
+ },
27
+ refunds: [],
28
+ outbox: [],
29
+ sideEffectCounter: 0,
30
+ };
31
+ }
32
+ export function snapshotP0FixtureState(state) {
33
+ return {
34
+ invoices: cloneInvoices(state.invoices),
35
+ refunds: state.refunds.map((refund) => ({
36
+ ...refund,
37
+ })),
38
+ outbox: state.outbox.map((message) => ({
39
+ ...message,
40
+ })),
41
+ sideEffectCounter: state.sideEffectCounter,
42
+ };
43
+ }
44
+ export function updateSyntheticInvoice(state, resource, amountCents) {
45
+ const invoice = state.invoices[resource];
46
+ if (invoice === undefined) {
47
+ throw new Error(`Synthetic invoice not found: ${resource}`);
48
+ }
49
+ const updated = {
50
+ ...invoice,
51
+ amountCents,
52
+ version: invoice.version + 1,
53
+ };
54
+ state.invoices[resource] = updated;
55
+ state.sideEffectCounter += 1;
56
+ return {
57
+ ...updated,
58
+ };
59
+ }
60
+ export function recordSyntheticRefund(state, input) {
61
+ state.sideEffectCounter += 1;
62
+ const refund = {
63
+ id: `refund:${state.sideEffectCounter}`,
64
+ amount: input.amount,
65
+ recipient: input.recipient,
66
+ approvalId: input.approvalId,
67
+ };
68
+ state.refunds.push(refund);
69
+ return {
70
+ ...refund,
71
+ };
72
+ }
73
+ export function recordSyntheticEmail(state, input) {
74
+ state.sideEffectCounter += 1;
75
+ const message = {
76
+ id: `email:${state.sideEffectCounter}`,
77
+ recipient: input.recipient,
78
+ subject: input.subject,
79
+ };
80
+ state.outbox.push(message);
81
+ return {
82
+ ...message,
83
+ };
84
+ }
85
+ //# sourceMappingURL=state.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/p0-fixture/state.ts"],"names":[],"mappings":"AAmCA,SAAS,aAAa,CACpB,QAA0C;IAE1C,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QAC/C,GAAG;QACH;YACE,GAAG,OAAO;SACX;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,QAAQ,EAAE;YACR,kBAAkB,EAAE;gBAClB,QAAQ,EAAE,kBAAkB;gBAC5B,MAAM,EAAE,aAAa;gBACrB,WAAW,EAAE,KAAK;gBAClB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,CAAC;aACX;YAED,kBAAkB,EAAE;gBAClB,QAAQ,EAAE,kBAAkB;gBAC5B,MAAM,EAAE,eAAe;gBACvB,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,CAAC;aACX;SACF;QAED,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,EAAE;QACV,iBAAiB,EAAE,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAqB;IAC1D,OAAO;QACL,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAEvC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACtC,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACrC,GAAG,OAAO;SACX,CAAC,CAAC;QAEH,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAqB,EACrB,QAAgB,EAChB,WAAmB;IAEnB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,OAAO,GAAqB;QAChC,GAAG,OAAO;QACV,WAAW;QACX,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,CAAC;KAC7B,CAAC;IAEF,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;IAEnC,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC;IAE7B,OAAO;QACL,GAAG,OAAO;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAqB,EACrB,KAIC;IAED,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC;IAE7B,MAAM,MAAM,GAAoB;QAC9B,EAAE,EAAE,UAAU,KAAK,CAAC,iBAAiB,EAAE;QACvC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE3B,OAAO;QACL,GAAG,MAAM;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAqB,EACrB,KAGC;IAED,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC;IAE7B,MAAM,OAAO,GAA2B;QACtC,EAAE,EAAE,SAAS,KAAK,CAAC,iBAAiB,EAAE;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;IAEF,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE3B,OAAO;QACL,GAAG,OAAO;KACX,CAAC;AACJ,CAAC"}
@@ -0,0 +1,20 @@
1
+ import type { HandoffAdapter, TargetAdapter, TargetExecutionInput, TargetExecutionResult } from '../core/index.js';
2
+ import type { P0EnforcementMode, P0McpExecutionResult } from './mcp/types.js';
3
+ import type { P0FixtureMode, P0Scenario } from './scenario.js';
4
+ export interface P0TargetOutput {
5
+ scenarioId: string;
6
+ fixture: P0FixtureMode;
7
+ enforcementMode: P0EnforcementMode;
8
+ responseText: string;
9
+ mcpResult: P0McpExecutionResult;
10
+ }
11
+ export declare class P0TargetAdapter implements TargetAdapter {
12
+ readonly fixture: P0FixtureMode;
13
+ readonly scenario: P0Scenario;
14
+ readonly handoffAdapter: HandoffAdapter;
15
+ readonly id: string;
16
+ readonly enforcementMode: P0EnforcementMode;
17
+ constructor(fixture: P0FixtureMode, scenario: P0Scenario, handoffAdapter?: HandoffAdapter, enforcementMode?: P0EnforcementMode);
18
+ execute(input: TargetExecutionInput): Promise<TargetExecutionResult>;
19
+ }
20
+ //# sourceMappingURL=target-adapter.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"target-adapter.d.ts","sourceRoot":"","sources":["../../src/p0-fixture/target-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG/D,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,iBAAiB,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,oBAAoB,CAAC;CACjC;AAED,qBAAa,eAAgB,YAAW,aAAa;IAMjD,QAAQ,CAAC,OAAO,EAAE,aAAa;IAC/B,QAAQ,CAAC,QAAQ,EAAE,UAAU;IAC7B,QAAQ,CAAC,cAAc,EAAE,cAAc;IAPzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC;gBAGjC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,UAAU,EACpB,cAAc,GAAE,cAA+C,EACxE,eAAe,CAAC,EAAE,iBAAiB;IAO/B,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAsD3E"}
@@ -0,0 +1,62 @@
1
+ import { cloneSecurityContext } from '../core/index.js';
2
+ import { EvidenceRecorder } from '../protocol-lab/evidence.js';
3
+ import { executeP0A2aFixture } from './a2a/harness.js';
4
+ import { P0IdentityHandoffAdapter } from './handoff/adapter.js';
5
+ import { createP0FixtureState } from './state.js';
6
+ export class P0TargetAdapter {
7
+ fixture;
8
+ scenario;
9
+ handoffAdapter;
10
+ id;
11
+ enforcementMode;
12
+ constructor(fixture, scenario, handoffAdapter = new P0IdentityHandoffAdapter(), enforcementMode) {
13
+ this.fixture = fixture;
14
+ this.scenario = scenario;
15
+ this.handoffAdapter = handoffAdapter;
16
+ this.enforcementMode = enforcementMode ?? (fixture === 'secure' ? 'enforce' : 'bypass');
17
+ this.id = ['p0', fixture, scenario.id, handoffAdapter.id, this.enforcementMode].join(':');
18
+ }
19
+ async execute(input) {
20
+ if (input.signal.aborted) {
21
+ throw new Error('P0 execution was aborted before start.');
22
+ }
23
+ const originalContext = cloneSecurityContext(input.context);
24
+ const recorder = new EvidenceRecorder(input.runId, this.fixture, input.correlationId);
25
+ const fixtureState = createP0FixtureState();
26
+ const runState = {};
27
+ const responseText = await executeP0A2aFixture({
28
+ recorder,
29
+ state: runState,
30
+ fixtureState,
31
+ context: originalContext,
32
+ handoffAdapter: this.handoffAdapter,
33
+ scenario: this.scenario,
34
+ enforcementMode: this.enforcementMode,
35
+ });
36
+ if (input.signal.aborted) {
37
+ throw new Error('P0 execution was aborted.');
38
+ }
39
+ const translatedContext = runState.translatedContext;
40
+ const mcpResult = runState.mcpResult;
41
+ if (translatedContext === undefined) {
42
+ throw new Error('P0 target produced no translated context.');
43
+ }
44
+ if (mcpResult === undefined) {
45
+ throw new Error('P0 target produced no MCP result.');
46
+ }
47
+ const output = {
48
+ scenarioId: this.scenario.id,
49
+ fixture: this.fixture,
50
+ enforcementMode: this.enforcementMode,
51
+ responseText,
52
+ mcpResult,
53
+ };
54
+ return {
55
+ originalContext,
56
+ translatedContext: cloneSecurityContext(translatedContext),
57
+ evidence: recorder.events,
58
+ output,
59
+ };
60
+ }
61
+ }
62
+ //# sourceMappingURL=target-adapter.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"target-adapter.js","sourceRoot":"","sources":["../../src/p0-fixture/target-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAOxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAUlD,MAAM,OAAO,eAAe;IAMf;IACA;IACA;IAPF,EAAE,CAAS;IAEX,eAAe,CAAoB;IAE5C,YACW,OAAsB,EACtB,QAAoB,EACpB,iBAAiC,IAAI,wBAAwB,EAAE,EACxE,eAAmC;QAH1B,YAAO,GAAP,OAAO,CAAe;QACtB,aAAQ,GAAR,QAAQ,CAAY;QACpB,mBAAc,GAAd,cAAc,CAAiD;QAGxE,IAAI,CAAC,eAAe,GAAG,eAAe,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAExF,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA2B;QACvC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE5D,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAEtF,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;QAE5C,MAAM,QAAQ,GAAkB,EAAE,CAAC;QAEnC,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC;YAC7C,QAAQ;YACR,KAAK,EAAE,QAAQ;YACf,YAAY;YACZ,OAAO,EAAE,eAAe;YACxB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,CAAC;QAErD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAErC,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,GAAmB;YAC7B,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,YAAY;YACZ,SAAS;SACV,CAAC;QAEF,OAAO;YACL,eAAe;YACf,iBAAiB,EAAE,oBAAoB,CAAC,iBAAiB,CAAC;YAC1D,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}
@@ -0,0 +1,47 @@
1
+ import type { TargetAdapter, TargetExecutionInput, TargetExecutionResult } from '../core/index.js';
2
+ import type { P0Scenario, SyntheticInvoice } from '../p0-fixture/index.js';
3
+ import type { P1FixtureMode } from './target-adapter.js';
4
+ export interface P1ApprovalBinding {
5
+ approvalId: string;
6
+ approvedTool: string;
7
+ approvedResource: string;
8
+ approvedPayloadHash: string;
9
+ }
10
+ export interface P1ApprovalDecision {
11
+ allowed: boolean;
12
+ reasons: string[];
13
+ contextApprovalMatches: boolean;
14
+ toolMatches: boolean;
15
+ resourceMatches: boolean;
16
+ }
17
+ export interface P1ApprovalScenario {
18
+ id: string;
19
+ approval: P1ApprovalBinding;
20
+ executedTool: string;
21
+ executedResource: string;
22
+ p0Scenario: P0Scenario;
23
+ seedInvoices?: readonly SyntheticInvoice[];
24
+ }
25
+ export interface P1ApprovalTargetOutput {
26
+ scenarioId: string;
27
+ fixture: P1FixtureMode;
28
+ decision: P1ApprovalDecision;
29
+ executed: boolean;
30
+ approvedTool: string;
31
+ executedTool: string;
32
+ approvedResource: string;
33
+ executedResource: string;
34
+ approvedPayloadHash: string;
35
+ sideEffectCounterBefore: number;
36
+ sideEffectCounterAfter: number;
37
+ resourceVersionBefore: number | null;
38
+ resourceVersionAfter: number | null;
39
+ }
40
+ export declare class P1ApprovalTargetAdapter implements TargetAdapter {
41
+ readonly fixture: P1FixtureMode;
42
+ readonly scenario: P1ApprovalScenario;
43
+ readonly id: string;
44
+ constructor(fixture: P1FixtureMode, scenario: P1ApprovalScenario);
45
+ execute(input: TargetExecutionInput): Promise<TargetExecutionResult>;
46
+ }
47
+ //# sourceMappingURL=approval-target-adapter.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"approval-target-adapter.d.ts","sourceRoot":"","sources":["../../src/p1-fixture/approval-target-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAQnG,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAM3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IAEnB,YAAY,EAAE,MAAM,CAAC;IAErB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IAEjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAElB,sBAAsB,EAAE,OAAO,CAAC;IAEhC,WAAW,EAAE,OAAO,CAAC;IAErB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IAEX,QAAQ,EAAE,iBAAiB,CAAC;IAE5B,YAAY,EAAE,MAAM,CAAC;IAErB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,UAAU,EAAE,UAAU,CAAC;IAEvB,YAAY,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IAEnB,OAAO,EAAE,aAAa,CAAC;IAEvB,QAAQ,EAAE,kBAAkB,CAAC;IAE7B,QAAQ,EAAE,OAAO,CAAC;IAElB,YAAY,EAAE,MAAM,CAAC;IAErB,YAAY,EAAE,MAAM,CAAC;IAErB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,mBAAmB,EAAE,MAAM,CAAC;IAE5B,uBAAuB,EAAE,MAAM,CAAC;IAEhC,sBAAsB,EAAE,MAAM,CAAC;IAE/B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IAErC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AA4CD,qBAAa,uBAAwB,YAAW,aAAa;IAIzD,QAAQ,CAAC,OAAO,EAAE,aAAa;IAE/B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB;IALvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAGT,OAAO,EAAE,aAAa,EAEtB,QAAQ,EAAE,kBAAkB;IAKjC,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAyN3E"}
@@ -0,0 +1,172 @@
1
+ import { cloneSecurityContext } from '../core/index.js';
2
+ import { executeP0A2aFixture } from '../p0-fixture/a2a/harness.js';
3
+ import { P0IdentityHandoffAdapter } from '../p0-fixture/handoff/adapter.js';
4
+ import { EvidenceRecorder } from '../protocol-lab/evidence.js';
5
+ import { createP1FixtureState } from './state.js';
6
+ function evaluateApproval(scenario, context) {
7
+ const contextApproval = context.approval;
8
+ const contextApprovalMatches = contextApproval?.approvalId === scenario.approval.approvalId &&
9
+ contextApproval.tool === scenario.approval.approvedTool &&
10
+ contextApproval.payloadHash === scenario.approval.approvedPayloadHash;
11
+ const toolMatches = scenario.approval.approvedTool === scenario.executedTool;
12
+ const resourceMatches = scenario.approval.approvedResource === scenario.executedResource;
13
+ const reasons = [];
14
+ if (!contextApprovalMatches) {
15
+ reasons.push('approval_context_mismatch');
16
+ }
17
+ if (!toolMatches) {
18
+ reasons.push('approval_tool_mismatch');
19
+ }
20
+ if (!resourceMatches) {
21
+ reasons.push('approval_resource_mismatch');
22
+ }
23
+ return {
24
+ allowed: reasons.length === 0,
25
+ reasons,
26
+ contextApprovalMatches,
27
+ toolMatches,
28
+ resourceMatches,
29
+ };
30
+ }
31
+ export class P1ApprovalTargetAdapter {
32
+ fixture;
33
+ scenario;
34
+ id;
35
+ constructor(fixture, scenario) {
36
+ this.fixture = fixture;
37
+ this.scenario = scenario;
38
+ this.id = ['p1', fixture, scenario.id].join(':');
39
+ }
40
+ async execute(input) {
41
+ if (input.signal.aborted) {
42
+ throw new Error('P1 approval execution was aborted before start.');
43
+ }
44
+ const originalContext = cloneSecurityContext(input.context);
45
+ const translatedContext = cloneSecurityContext(input.context);
46
+ const recorder = new EvidenceRecorder(input.runId, this.fixture, input.correlationId);
47
+ const state = createP1FixtureState();
48
+ for (const invoice of this.scenario.seedInvoices ?? []) {
49
+ state.invoices[invoice.resource] = {
50
+ ...invoice,
51
+ };
52
+ }
53
+ const before = state.sideEffectCounter;
54
+ const resourceVersionBefore = state.invoices[this.scenario.executedResource]?.version ?? null;
55
+ const decision = evaluateApproval(this.scenario, translatedContext);
56
+ recorder.record({
57
+ protocol: 'HANDOFF',
58
+ protocolVersion: 'handoffprobe-p1-v1',
59
+ boundary: 'a2a-approval -> handoff-approval-policy',
60
+ event: 'p1.approval.binding',
61
+ context: translatedContext,
62
+ details: {
63
+ scenarioId: this.scenario.id,
64
+ approvalId: this.scenario.approval.approvalId,
65
+ approvedTool: this.scenario.approval.approvedTool,
66
+ executedTool: this.scenario.executedTool,
67
+ approvedResource: this.scenario.approval.approvedResource,
68
+ executedResource: this.scenario.executedResource,
69
+ approvedPayloadHash: this.scenario.approval.approvedPayloadHash,
70
+ contextApprovalMatches: decision.contextApprovalMatches,
71
+ toolMatches: decision.toolMatches,
72
+ resourceMatches: decision.resourceMatches,
73
+ allowed: decision.allowed,
74
+ reasons: decision.reasons,
75
+ },
76
+ });
77
+ if (!decision.allowed && this.fixture === 'secure') {
78
+ recorder.record({
79
+ protocol: 'HANDOFF',
80
+ protocolVersion: 'handoffprobe-p1-v1',
81
+ boundary: 'handoff-approval-policy -> mcp',
82
+ event: 'p1.approval.blocked',
83
+ context: translatedContext,
84
+ details: {
85
+ approvalId: this.scenario.approval.approvalId,
86
+ reasons: decision.reasons,
87
+ sideEffectCounterBefore: before,
88
+ sideEffectCounterAfter: state.sideEffectCounter,
89
+ },
90
+ });
91
+ return {
92
+ originalContext,
93
+ translatedContext,
94
+ evidence: recorder.events,
95
+ output: {
96
+ scenarioId: this.scenario.id,
97
+ fixture: this.fixture,
98
+ decision,
99
+ executed: false,
100
+ approvedTool: this.scenario.approval.approvedTool,
101
+ executedTool: this.scenario.executedTool,
102
+ approvedResource: this.scenario.approval.approvedResource,
103
+ executedResource: this.scenario.executedResource,
104
+ approvedPayloadHash: this.scenario.approval.approvedPayloadHash,
105
+ sideEffectCounterBefore: before,
106
+ sideEffectCounterAfter: state.sideEffectCounter,
107
+ resourceVersionBefore,
108
+ resourceVersionAfter: state.invoices[this.scenario.executedResource]?.version ?? null,
109
+ },
110
+ };
111
+ }
112
+ if (!decision.allowed) {
113
+ recorder.record({
114
+ protocol: 'HANDOFF',
115
+ protocolVersion: 'handoffprobe-p1-v1',
116
+ boundary: 'handoff-approval-policy -> mcp',
117
+ event: 'p1.approval.bypassed',
118
+ context: translatedContext,
119
+ details: {
120
+ approvalId: this.scenario.approval.approvalId,
121
+ reasons: decision.reasons,
122
+ },
123
+ });
124
+ }
125
+ const runState = {};
126
+ await executeP0A2aFixture({
127
+ recorder,
128
+ state: runState,
129
+ fixtureState: state,
130
+ context: translatedContext,
131
+ handoffAdapter: new P0IdentityHandoffAdapter(),
132
+ scenario: this.scenario.p0Scenario,
133
+ /*
134
+ * P0 remains secure.
135
+ * Only the P1 approval-policy
136
+ * bypass is intentionally
137
+ * vulnerable here.
138
+ */
139
+ enforcementMode: 'enforce',
140
+ });
141
+ const mcpResult = runState.mcpResult;
142
+ if (mcpResult === undefined) {
143
+ throw new Error('P1 approval execution produced no MCP result.');
144
+ }
145
+ const executed = mcpResult.envelope.authorization.executed;
146
+ const resourceVersionAfter = state.invoices[this.scenario.executedResource]?.version ?? null;
147
+ if (input.signal.aborted) {
148
+ throw new Error('P1 approval execution was aborted.');
149
+ }
150
+ return {
151
+ originalContext,
152
+ translatedContext: cloneSecurityContext(runState.translatedContext ?? translatedContext),
153
+ evidence: recorder.events,
154
+ output: {
155
+ scenarioId: this.scenario.id,
156
+ fixture: this.fixture,
157
+ decision,
158
+ executed,
159
+ approvedTool: this.scenario.approval.approvedTool,
160
+ executedTool: this.scenario.executedTool,
161
+ approvedResource: this.scenario.approval.approvedResource,
162
+ executedResource: this.scenario.executedResource,
163
+ approvedPayloadHash: this.scenario.approval.approvedPayloadHash,
164
+ sideEffectCounterBefore: before,
165
+ sideEffectCounterAfter: state.sideEffectCounter,
166
+ resourceVersionBefore,
167
+ resourceVersionAfter,
168
+ },
169
+ };
170
+ }
171
+ }
172
+ //# sourceMappingURL=approval-target-adapter.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"approval-target-adapter.js","sourceRoot":"","sources":["../../src/p1-fixture/approval-target-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAIxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAInE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAI5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAoElD,SAAS,gBAAgB,CACvB,QAA4B,EAC5B,OAAgD;IAEhD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC;IAEzC,MAAM,sBAAsB,GAC1B,eAAe,EAAE,UAAU,KAAK,QAAQ,CAAC,QAAQ,CAAC,UAAU;QAC5D,eAAe,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,CAAC,YAAY;QACvD,eAAe,CAAC,WAAW,KAAK,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAExE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC;IAE7E,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,CAAC;IAEzF,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAE7B,OAAO;QAEP,sBAAsB;QAEtB,WAAW;QAEX,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,uBAAuB;IAIvB;IAEA;IALF,EAAE,CAAS;IAEpB,YACW,OAAsB,EAEtB,QAA4B;QAF5B,YAAO,GAAP,OAAO,CAAe;QAEtB,aAAQ,GAAR,QAAQ,CAAoB;QAErC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA2B;QACvC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE5D,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAEtF,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QAErC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YACvD,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG;gBACjC,GAAG,OAAO;aACX,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC;QAEvC,MAAM,qBAAqB,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;QAE9F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAEpE,QAAQ,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,SAAS;YAEnB,eAAe,EAAE,oBAAoB;YAErC,QAAQ,EAAE,yCAAyC;YAEnD,KAAK,EAAE,qBAAqB;YAE5B,OAAO,EAAE,iBAAiB;YAE1B,OAAO,EAAE;gBACP,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAE5B,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU;gBAE7C,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY;gBAEjD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;gBAExC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB;gBAEzD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;gBAEhD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;gBAE/D,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;gBAEvD,WAAW,EAAE,QAAQ,CAAC,WAAW;gBAEjC,eAAe,EAAE,QAAQ,CAAC,eAAe;gBAEzC,OAAO,EAAE,QAAQ,CAAC,OAAO;gBAEzB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnD,QAAQ,CAAC,MAAM,CAAC;gBACd,QAAQ,EAAE,SAAS;gBAEnB,eAAe,EAAE,oBAAoB;gBAErC,QAAQ,EAAE,gCAAgC;gBAE1C,KAAK,EAAE,qBAAqB;gBAE5B,OAAO,EAAE,iBAAiB;gBAE1B,OAAO,EAAE;oBACP,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU;oBAE7C,OAAO,EAAE,QAAQ,CAAC,OAAO;oBAEzB,uBAAuB,EAAE,MAAM;oBAE/B,sBAAsB,EAAE,KAAK,CAAC,iBAAiB;iBAChD;aACF,CAAC,CAAC;YAEH,OAAO;gBACL,eAAe;gBAEf,iBAAiB;gBAEjB,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBAEzB,MAAM,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAE5B,OAAO,EAAE,IAAI,CAAC,OAAO;oBAErB,QAAQ;oBAER,QAAQ,EAAE,KAAK;oBAEf,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY;oBAEjD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;oBAExC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB;oBAEzD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;oBAEhD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;oBAE/D,uBAAuB,EAAE,MAAM;oBAE/B,sBAAsB,EAAE,KAAK,CAAC,iBAAiB;oBAE/C,qBAAqB;oBAErB,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI,IAAI;iBACrD;aACnC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,QAAQ,CAAC,MAAM,CAAC;gBACd,QAAQ,EAAE,SAAS;gBAEnB,eAAe,EAAE,oBAAoB;gBAErC,QAAQ,EAAE,gCAAgC;gBAE1C,KAAK,EAAE,sBAAsB;gBAE7B,OAAO,EAAE,iBAAiB;gBAE1B,OAAO,EAAE;oBACP,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU;oBAE7C,OAAO,EAAE,QAAQ,CAAC,OAAO;iBAC1B;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAkB,EAAE,CAAC;QAEnC,MAAM,mBAAmB,CAAC;YACxB,QAAQ;YAER,KAAK,EAAE,QAAQ;YAEf,YAAY,EAAE,KAAK;YAEnB,OAAO,EAAE,iBAAiB;YAE1B,cAAc,EAAE,IAAI,wBAAwB,EAAE;YAE9C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;YAElC;;;;;eAKG;YACH,eAAe,EAAE,SAAS;SAC3B,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAErC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;QAE3D,MAAM,oBAAoB,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;QAE7F,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,OAAO;YACL,eAAe;YAEf,iBAAiB,EAAE,oBAAoB,CAAC,QAAQ,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;YAExF,QAAQ,EAAE,QAAQ,CAAC,MAAM;YAEzB,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAE5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBAErB,QAAQ;gBAER,QAAQ;gBAER,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY;gBAEjD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;gBAExC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB;gBAEzD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;gBAEhD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;gBAE/D,uBAAuB,EAAE,MAAM;gBAE/B,sBAAsB,EAAE,KAAK,CAAC,iBAAiB;gBAE/C,qBAAqB;gBAErB,oBAAoB;aACY;SACnC,CAAC;IACJ,CAAC;CACF"}
@@ -0,0 +1,36 @@
1
+ import type { TargetAdapter, TargetExecutionInput, TargetExecutionResult } from '../core/index.js';
2
+ import type { P0Scenario } from '../p0-fixture/index.js';
3
+ import type { P1FixtureMode } from './target-adapter.js';
4
+ export interface P1AuditScenario {
5
+ id: string;
6
+ originalTaskId: string;
7
+ delegationId: string;
8
+ handoffId: string;
9
+ mcpRequestId: string;
10
+ p0Scenario: P0Scenario;
11
+ }
12
+ export interface P1AuditTargetOutput {
13
+ scenarioId: string;
14
+ fixture: P1FixtureMode;
15
+ originalPrincipal: string;
16
+ expectedTaskId: string;
17
+ observedTaskId: string | null;
18
+ delegationId: string;
19
+ handoffId: string;
20
+ mcpRequestId: string;
21
+ missingElement: string;
22
+ lineageReconstructable: boolean;
23
+ translatedHasTaskBinding: boolean;
24
+ executed: boolean;
25
+ sideEffectId: string | null;
26
+ sideEffectCounterBefore: number;
27
+ sideEffectCounterAfter: number;
28
+ }
29
+ export declare class P1AuditTargetAdapter implements TargetAdapter {
30
+ readonly fixture: P1FixtureMode;
31
+ readonly scenario: P1AuditScenario;
32
+ readonly id: string;
33
+ constructor(fixture: P1FixtureMode, scenario: P1AuditScenario);
34
+ execute(input: TargetExecutionInput): Promise<TargetExecutionResult>;
35
+ }
36
+ //# sourceMappingURL=audit-target-adapter.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit-target-adapter.d.ts","sourceRoot":"","sources":["../../src/p1-fixture/audit-target-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGV,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAOzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,OAAO,CAAC;IAChC,wBAAwB,EAAE,OAAO,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAgDD,qBAAa,oBAAqB,YAAW,aAAa;IAItD,QAAQ,CAAC,OAAO,EAAE,aAAa;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe;IAJpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAGT,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,eAAe;IAK9B,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA+M3E"}