handoffprobe 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +201 -0
- package/README.md +533 -0
- package/dist/attacks/index.d.ts +3 -0
- package/dist/attacks/index.d.ts.map +1 -0
- package/dist/attacks/index.js +3 -0
- package/dist/attacks/index.js.map +1 -0
- package/dist/attacks/p0/approval.d.ts +5 -0
- package/dist/attacks/p0/approval.d.ts.map +1 -0
- package/dist/attacks/p0/approval.js +121 -0
- package/dist/attacks/p0/approval.js.map +1 -0
- package/dist/attacks/p0/authorization.d.ts +6 -0
- package/dist/attacks/p0/authorization.d.ts.map +1 -0
- package/dist/attacks/p0/authorization.js +241 -0
- package/dist/attacks/p0/authorization.js.map +1 -0
- package/dist/attacks/p0/credentials.d.ts +10 -0
- package/dist/attacks/p0/credentials.d.ts.map +1 -0
- package/dist/attacks/p0/credentials.js +206 -0
- package/dist/attacks/p0/credentials.js.map +1 -0
- package/dist/attacks/p0/identity.d.ts +10 -0
- package/dist/attacks/p0/identity.d.ts.map +1 -0
- package/dist/attacks/p0/identity.js +200 -0
- package/dist/attacks/p0/identity.js.map +1 -0
- package/dist/attacks/p0/index.d.ts +9 -0
- package/dist/attacks/p0/index.d.ts.map +1 -0
- package/dist/attacks/p0/index.js +9 -0
- package/dist/attacks/p0/index.js.map +1 -0
- package/dist/attacks/p0/lifecycle.d.ts +6 -0
- package/dist/attacks/p0/lifecycle.d.ts.map +1 -0
- package/dist/attacks/p0/lifecycle.js +142 -0
- package/dist/attacks/p0/lifecycle.js.map +1 -0
- package/dist/attacks/p0/target.d.ts +11 -0
- package/dist/attacks/p0/target.d.ts.map +1 -0
- package/dist/attacks/p0/target.js +177 -0
- package/dist/attacks/p0/target.js.map +1 -0
- package/dist/attacks/p0/tenant.d.ts +10 -0
- package/dist/attacks/p0/tenant.d.ts.map +1 -0
- package/dist/attacks/p0/tenant.js +155 -0
- package/dist/attacks/p0/tenant.js.map +1 -0
- package/dist/attacks/p0/types.d.ts +9 -0
- package/dist/attacks/p0/types.d.ts.map +1 -0
- package/dist/attacks/p0/types.js +2 -0
- package/dist/attacks/p0/types.js.map +1 -0
- package/dist/attacks/p1/approval.d.ts +5 -0
- package/dist/attacks/p1/approval.d.ts.map +1 -0
- package/dist/attacks/p1/approval.js +259 -0
- package/dist/attacks/p1/approval.js.map +1 -0
- package/dist/attacks/p1/audit.d.ts +4 -0
- package/dist/attacks/p1/audit.d.ts.map +1 -0
- package/dist/attacks/p1/audit.js +128 -0
- package/dist/attacks/p1/audit.js.map +1 -0
- package/dist/attacks/p1/authorization.d.ts +5 -0
- package/dist/attacks/p1/authorization.d.ts.map +1 -0
- package/dist/attacks/p1/authorization.js +239 -0
- package/dist/attacks/p1/authorization.js.map +1 -0
- package/dist/attacks/p1/index.d.ts +7 -0
- package/dist/attacks/p1/index.d.ts.map +1 -0
- package/dist/attacks/p1/index.js +7 -0
- package/dist/attacks/p1/index.js.map +1 -0
- package/dist/attacks/p1/race.d.ts +5 -0
- package/dist/attacks/p1/race.d.ts.map +1 -0
- package/dist/attacks/p1/race.js +255 -0
- package/dist/attacks/p1/race.js.map +1 -0
- package/dist/attacks/p1/replay.d.ts +6 -0
- package/dist/attacks/p1/replay.d.ts.map +1 -0
- package/dist/attacks/p1/replay.js +285 -0
- package/dist/attacks/p1/replay.js.map +1 -0
- package/dist/attacks/p1/types.d.ts +28 -0
- package/dist/attacks/p1/types.d.ts.map +1 -0
- package/dist/attacks/p1/types.js +2 -0
- package/dist/attacks/p1/types.js.map +1 -0
- package/dist/cli/config.d.ts +15 -0
- package/dist/cli/config.d.ts.map +1 -0
- package/dist/cli/config.js +100 -0
- package/dist/cli/config.js.map +1 -0
- package/dist/cli/diagnostics.d.ts +4 -0
- package/dist/cli/diagnostics.d.ts.map +1 -0
- package/dist/cli/diagnostics.js +23 -0
- package/dist/cli/diagnostics.js.map +1 -0
- package/dist/cli/discovery.d.ts +3 -0
- package/dist/cli/discovery.d.ts.map +1 -0
- package/dist/cli/discovery.js +75 -0
- package/dist/cli/discovery.js.map +1 -0
- package/dist/cli/execution-catalog.d.ts +12 -0
- package/dist/cli/execution-catalog.d.ts.map +1 -0
- package/dist/cli/execution-catalog.js +76 -0
- package/dist/cli/execution-catalog.js.map +1 -0
- package/dist/cli/protocols.d.ts +6 -0
- package/dist/cli/protocols.d.ts.map +1 -0
- package/dist/cli/protocols.js +6 -0
- package/dist/cli/protocols.js.map +1 -0
- package/dist/cli/reporters.d.ts +7 -0
- package/dist/cli/reporters.d.ts.map +1 -0
- package/dist/cli/reporters.js +126 -0
- package/dist/cli/reporters.js.map +1 -0
- package/dist/cli/run-cli.d.ts +6 -0
- package/dist/cli/run-cli.d.ts.map +1 -0
- package/dist/cli/run-cli.js +243 -0
- package/dist/cli/run-cli.js.map +1 -0
- package/dist/cli/test-command.d.ts +29 -0
- package/dist/cli/test-command.d.ts.map +1 -0
- package/dist/cli/test-command.js +118 -0
- package/dist/cli/test-command.js.map +1 -0
- package/dist/cli.d.ts +3 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +11 -0
- package/dist/cli.js.map +1 -0
- package/dist/core/adapters.d.ts +23 -0
- package/dist/core/adapters.d.ts.map +1 -0
- package/dist/core/adapters.js +2 -0
- package/dist/core/adapters.js.map +1 -0
- package/dist/core/attacks.d.ts +29 -0
- package/dist/core/attacks.d.ts.map +1 -0
- package/dist/core/attacks.js +38 -0
- package/dist/core/attacks.js.map +1 -0
- package/dist/core/errors.d.ts +16 -0
- package/dist/core/errors.d.ts.map +1 -0
- package/dist/core/errors.js +22 -0
- package/dist/core/errors.js.map +1 -0
- package/dist/core/evidence.d.ts +18 -0
- package/dist/core/evidence.d.ts.map +1 -0
- package/dist/core/evidence.js +2 -0
- package/dist/core/evidence.js.map +1 -0
- package/dist/core/findings.d.ts +25 -0
- package/dist/core/findings.d.ts.map +1 -0
- package/dist/core/findings.js +4 -0
- package/dist/core/findings.js.map +1 -0
- package/dist/core/index.d.ts +10 -0
- package/dist/core/index.d.ts.map +1 -0
- package/dist/core/index.js +10 -0
- package/dist/core/index.js.map +1 -0
- package/dist/core/provenance.d.ts +8 -0
- package/dist/core/provenance.d.ts.map +1 -0
- package/dist/core/provenance.js +2 -0
- package/dist/core/provenance.js.map +1 -0
- package/dist/core/redaction.d.ts +4 -0
- package/dist/core/redaction.d.ts.map +1 -0
- package/dist/core/redaction.js +59 -0
- package/dist/core/redaction.js.map +1 -0
- package/dist/core/runner.d.ts +42 -0
- package/dist/core/runner.d.ts.map +1 -0
- package/dist/core/runner.js +181 -0
- package/dist/core/runner.js.map +1 -0
- package/dist/core/security-context.d.ts +64 -0
- package/dist/core/security-context.d.ts.map +1 -0
- package/dist/core/security-context.js +56 -0
- package/dist/core/security-context.js.map +1 -0
- package/dist/github-action/core.d.ts +34 -0
- package/dist/github-action/core.d.ts.map +1 -0
- package/dist/github-action/core.js +118 -0
- package/dist/github-action/core.js.map +1 -0
- package/dist/github-action/run-action.d.ts +2 -0
- package/dist/github-action/run-action.d.ts.map +1 -0
- package/dist/github-action/run-action.js +112 -0
- package/dist/github-action/run-action.js.map +1 -0
- package/dist/index.d.ts +6 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +6 -0
- package/dist/index.js.map +1 -0
- package/dist/p0-fixture/a2a/executor.d.ts +22 -0
- package/dist/p0-fixture/a2a/executor.d.ts.map +1 -0
- package/dist/p0-fixture/a2a/executor.js +183 -0
- package/dist/p0-fixture/a2a/executor.js.map +1 -0
- package/dist/p0-fixture/a2a/harness.d.ts +16 -0
- package/dist/p0-fixture/a2a/harness.d.ts.map +1 -0
- package/dist/p0-fixture/a2a/harness.js +160 -0
- package/dist/p0-fixture/a2a/harness.js.map +1 -0
- package/dist/p0-fixture/authorization.d.ts +24 -0
- package/dist/p0-fixture/authorization.d.ts.map +1 -0
- package/dist/p0-fixture/authorization.js +66 -0
- package/dist/p0-fixture/authorization.js.map +1 -0
- package/dist/p0-fixture/constants.d.ts +17 -0
- package/dist/p0-fixture/constants.d.ts.map +1 -0
- package/dist/p0-fixture/constants.js +17 -0
- package/dist/p0-fixture/constants.js.map +1 -0
- package/dist/p0-fixture/handoff/adapter.d.ts +6 -0
- package/dist/p0-fixture/handoff/adapter.d.ts.map +1 -0
- package/dist/p0-fixture/handoff/adapter.js +8 -0
- package/dist/p0-fixture/handoff/adapter.js.map +1 -0
- package/dist/p0-fixture/index.d.ts +11 -0
- package/dist/p0-fixture/index.d.ts.map +1 -0
- package/dist/p0-fixture/index.js +11 -0
- package/dist/p0-fixture/index.js.map +1 -0
- package/dist/p0-fixture/mcp/fake-tools.d.ts +7 -0
- package/dist/p0-fixture/mcp/fake-tools.d.ts.map +1 -0
- package/dist/p0-fixture/mcp/fake-tools.js +322 -0
- package/dist/p0-fixture/mcp/fake-tools.js.map +1 -0
- package/dist/p0-fixture/mcp/harness.d.ts +16 -0
- package/dist/p0-fixture/mcp/harness.d.ts.map +1 -0
- package/dist/p0-fixture/mcp/harness.js +114 -0
- package/dist/p0-fixture/mcp/harness.js.map +1 -0
- package/dist/p0-fixture/mcp/types.d.ts +29 -0
- package/dist/p0-fixture/mcp/types.d.ts.map +1 -0
- package/dist/p0-fixture/mcp/types.js +2 -0
- package/dist/p0-fixture/mcp/types.js.map +1 -0
- package/dist/p0-fixture/payload-hash.d.ts +2 -0
- package/dist/p0-fixture/payload-hash.d.ts.map +1 -0
- package/dist/p0-fixture/payload-hash.js +20 -0
- package/dist/p0-fixture/payload-hash.js.map +1 -0
- package/dist/p0-fixture/reference.d.ts +8 -0
- package/dist/p0-fixture/reference.d.ts.map +1 -0
- package/dist/p0-fixture/reference.js +42 -0
- package/dist/p0-fixture/reference.js.map +1 -0
- package/dist/p0-fixture/scenario.d.ts +14 -0
- package/dist/p0-fixture/scenario.d.ts.map +1 -0
- package/dist/p0-fixture/scenario.js +22 -0
- package/dist/p0-fixture/scenario.js.map +1 -0
- package/dist/p0-fixture/state.d.ts +43 -0
- package/dist/p0-fixture/state.d.ts.map +1 -0
- package/dist/p0-fixture/state.js +85 -0
- package/dist/p0-fixture/state.js.map +1 -0
- package/dist/p0-fixture/target-adapter.d.ts +20 -0
- package/dist/p0-fixture/target-adapter.d.ts.map +1 -0
- package/dist/p0-fixture/target-adapter.js +62 -0
- package/dist/p0-fixture/target-adapter.js.map +1 -0
- package/dist/p1-fixture/approval-target-adapter.d.ts +47 -0
- package/dist/p1-fixture/approval-target-adapter.d.ts.map +1 -0
- package/dist/p1-fixture/approval-target-adapter.js +172 -0
- package/dist/p1-fixture/approval-target-adapter.js.map +1 -0
- package/dist/p1-fixture/audit-target-adapter.d.ts +36 -0
- package/dist/p1-fixture/audit-target-adapter.d.ts.map +1 -0
- package/dist/p1-fixture/audit-target-adapter.js +226 -0
- package/dist/p1-fixture/audit-target-adapter.js.map +1 -0
- package/dist/p1-fixture/barrier.d.ts +10 -0
- package/dist/p1-fixture/barrier.d.ts.map +1 -0
- package/dist/p1-fixture/barrier.js +44 -0
- package/dist/p1-fixture/barrier.js.map +1 -0
- package/dist/p1-fixture/clock.d.ts +7 -0
- package/dist/p1-fixture/clock.d.ts.map +1 -0
- package/dist/p1-fixture/clock.js +30 -0
- package/dist/p1-fixture/clock.js.map +1 -0
- package/dist/p1-fixture/index.d.ts +9 -0
- package/dist/p1-fixture/index.d.ts.map +1 -0
- package/dist/p1-fixture/index.js +9 -0
- package/dist/p1-fixture/index.js.map +1 -0
- package/dist/p1-fixture/race-target-adapter.d.ts +49 -0
- package/dist/p1-fixture/race-target-adapter.d.ts.map +1 -0
- package/dist/p1-fixture/race-target-adapter.js +384 -0
- package/dist/p1-fixture/race-target-adapter.js.map +1 -0
- package/dist/p1-fixture/replay-target-adapter.d.ts +44 -0
- package/dist/p1-fixture/replay-target-adapter.d.ts.map +1 -0
- package/dist/p1-fixture/replay-target-adapter.js +248 -0
- package/dist/p1-fixture/replay-target-adapter.js.map +1 -0
- package/dist/p1-fixture/state.d.ts +78 -0
- package/dist/p1-fixture/state.d.ts.map +1 -0
- package/dist/p1-fixture/state.js +191 -0
- package/dist/p1-fixture/state.js.map +1 -0
- package/dist/p1-fixture/target-adapter.d.ts +30 -0
- package/dist/p1-fixture/target-adapter.d.ts.map +1 -0
- package/dist/p1-fixture/target-adapter.js +142 -0
- package/dist/p1-fixture/target-adapter.js.map +1 -0
- package/dist/protocol-lab/a2a/executor.d.ts +13 -0
- package/dist/protocol-lab/a2a/executor.d.ts.map +1 -0
- package/dist/protocol-lab/a2a/executor.js +112 -0
- package/dist/protocol-lab/a2a/executor.js.map +1 -0
- package/dist/protocol-lab/a2a/harness.d.ts +11 -0
- package/dist/protocol-lab/a2a/harness.d.ts.map +1 -0
- package/dist/protocol-lab/a2a/harness.js +160 -0
- package/dist/protocol-lab/a2a/harness.js.map +1 -0
- package/dist/protocol-lab/evidence.d.ts +17 -0
- package/dist/protocol-lab/evidence.d.ts.map +1 -0
- package/dist/protocol-lab/evidence.js +28 -0
- package/dist/protocol-lab/evidence.js.map +1 -0
- package/dist/protocol-lab/fixture.d.ts +11 -0
- package/dist/protocol-lab/fixture.d.ts.map +1 -0
- package/dist/protocol-lab/fixture.js +54 -0
- package/dist/protocol-lab/fixture.js.map +1 -0
- package/dist/protocol-lab/handoff/adapter.d.ts +9 -0
- package/dist/protocol-lab/handoff/adapter.d.ts.map +1 -0
- package/dist/protocol-lab/handoff/adapter.js +13 -0
- package/dist/protocol-lab/handoff/adapter.js.map +1 -0
- package/dist/protocol-lab/handoff/translate.d.ts +3 -0
- package/dist/protocol-lab/handoff/translate.d.ts.map +1 -0
- package/dist/protocol-lab/handoff/translate.js +14 -0
- package/dist/protocol-lab/handoff/translate.js.map +1 -0
- package/dist/protocol-lab/mcp/fake-tools.d.ts +5 -0
- package/dist/protocol-lab/mcp/fake-tools.d.ts.map +1 -0
- package/dist/protocol-lab/mcp/fake-tools.js +58 -0
- package/dist/protocol-lab/mcp/fake-tools.js.map +1 -0
- package/dist/protocol-lab/mcp/harness.d.ts +7 -0
- package/dist/protocol-lab/mcp/harness.d.ts.map +1 -0
- package/dist/protocol-lab/mcp/harness.js +97 -0
- package/dist/protocol-lab/mcp/harness.js.map +1 -0
- package/dist/protocol-lab/models.d.ts +31 -0
- package/dist/protocol-lab/models.d.ts.map +1 -0
- package/dist/protocol-lab/models.js +2 -0
- package/dist/protocol-lab/models.js.map +1 -0
- package/dist/protocol-lab/run.d.ts +2 -0
- package/dist/protocol-lab/run.d.ts.map +1 -0
- package/dist/protocol-lab/run.js +22 -0
- package/dist/protocol-lab/run.js.map +1 -0
- package/dist/protocol-lab/target-adapter.d.ts +10 -0
- package/dist/protocol-lab/target-adapter.d.ts.map +1 -0
- package/dist/protocol-lab/target-adapter.js +33 -0
- package/dist/protocol-lab/target-adapter.js.map +1 -0
- package/package.json +77 -0
|
@@ -0,0 +1,248 @@
|
|
|
1
|
+
import { cloneSecurityContext } from '../core/index.js';
|
|
2
|
+
import { executeP0A2aFixture } from '../p0-fixture/a2a/harness.js';
|
|
3
|
+
import { P0IdentityHandoffAdapter } from '../p0-fixture/handoff/adapter.js';
|
|
4
|
+
import { EvidenceRecorder } from '../protocol-lab/evidence.js';
|
|
5
|
+
import { consumeP1Delegation, createP1FixtureState, evaluateP1Delegation, recordP1ActionSideEffect, recordP1Attempt, registerP1Action, registerP1Delegation, } from './state.js';
|
|
6
|
+
async function executeProtectedAttempt(input) {
|
|
7
|
+
const runState = {};
|
|
8
|
+
const before = input.state.sideEffectCounter;
|
|
9
|
+
await executeP0A2aFixture({
|
|
10
|
+
recorder: input.recorder,
|
|
11
|
+
state: runState,
|
|
12
|
+
fixtureState: input.state,
|
|
13
|
+
context: cloneSecurityContext(input.context),
|
|
14
|
+
handoffAdapter: new P0IdentityHandoffAdapter(),
|
|
15
|
+
scenario: input.scenario,
|
|
16
|
+
enforcementMode: 'enforce',
|
|
17
|
+
});
|
|
18
|
+
const mcpResult = runState.mcpResult;
|
|
19
|
+
if (mcpResult === undefined) {
|
|
20
|
+
throw new Error('P1 replay attempt produced no MCP result.');
|
|
21
|
+
}
|
|
22
|
+
return {
|
|
23
|
+
executed: mcpResult.envelope.authorization.executed,
|
|
24
|
+
sideEffectCounterBefore: before,
|
|
25
|
+
sideEffectCounterAfter: input.state.sideEffectCounter,
|
|
26
|
+
};
|
|
27
|
+
}
|
|
28
|
+
function copyAction(action) {
|
|
29
|
+
return {
|
|
30
|
+
...action,
|
|
31
|
+
attemptIds: [...action.attemptIds],
|
|
32
|
+
};
|
|
33
|
+
}
|
|
34
|
+
function requireAction(state, actionId) {
|
|
35
|
+
const action = state.actions[actionId];
|
|
36
|
+
if (action === undefined) {
|
|
37
|
+
throw new Error(`P1 replay action missing: ${actionId}`);
|
|
38
|
+
}
|
|
39
|
+
return action;
|
|
40
|
+
}
|
|
41
|
+
export class P1ReplayTargetAdapter {
|
|
42
|
+
fixture;
|
|
43
|
+
scenario;
|
|
44
|
+
id;
|
|
45
|
+
constructor(fixture, scenario) {
|
|
46
|
+
this.fixture = fixture;
|
|
47
|
+
this.scenario = scenario;
|
|
48
|
+
this.id = ['p1', fixture, scenario.id].join(':');
|
|
49
|
+
}
|
|
50
|
+
async execute(input) {
|
|
51
|
+
if (input.signal.aborted) {
|
|
52
|
+
throw new Error('P1 replay execution was aborted before start.');
|
|
53
|
+
}
|
|
54
|
+
const originalContext = cloneSecurityContext(input.context);
|
|
55
|
+
const translatedContext = cloneSecurityContext(input.context);
|
|
56
|
+
const recorder = new EvidenceRecorder(input.runId, this.fixture, input.correlationId);
|
|
57
|
+
const state = createP1FixtureState();
|
|
58
|
+
registerP1Delegation(state, this.scenario.delegation);
|
|
59
|
+
registerP1Action(state, this.scenario.actionId);
|
|
60
|
+
const before = state.sideEffectCounter;
|
|
61
|
+
const baselineDecision = evaluateP1Delegation(state, this.scenario.delegation.id, this.scenario.logicalTime, this.scenario.baselineRequest);
|
|
62
|
+
recorder.record({
|
|
63
|
+
protocol: 'HANDOFF',
|
|
64
|
+
protocolVersion: 'handoffprobe-p1-v1',
|
|
65
|
+
boundary: 'a2a-action -> replay-policy',
|
|
66
|
+
event: 'p1.replay.baseline',
|
|
67
|
+
context: translatedContext,
|
|
68
|
+
details: {
|
|
69
|
+
scenarioId: this.scenario.id,
|
|
70
|
+
classification: this.scenario.kind,
|
|
71
|
+
actionId: this.scenario.actionId,
|
|
72
|
+
attemptId: this.scenario.firstAttemptId,
|
|
73
|
+
delegationId: this.scenario.delegation.id,
|
|
74
|
+
taskId: this.scenario.baselineRequest.taskId,
|
|
75
|
+
runId: this.scenario.baselineRequest.runId,
|
|
76
|
+
allowed: baselineDecision.allowed,
|
|
77
|
+
sideEffectCounterBefore: before,
|
|
78
|
+
},
|
|
79
|
+
});
|
|
80
|
+
if (!baselineDecision.allowed) {
|
|
81
|
+
throw new Error('P1 replay baseline authority must be valid.');
|
|
82
|
+
}
|
|
83
|
+
recordP1Attempt(state, this.scenario.actionId, this.scenario.firstAttemptId);
|
|
84
|
+
const first = await executeProtectedAttempt({
|
|
85
|
+
recorder,
|
|
86
|
+
state,
|
|
87
|
+
context: translatedContext,
|
|
88
|
+
scenario: this.scenario.p0Scenario,
|
|
89
|
+
});
|
|
90
|
+
if (!first.executed) {
|
|
91
|
+
throw new Error('P1 replay baseline protected action did not execute.');
|
|
92
|
+
}
|
|
93
|
+
recordP1ActionSideEffect(state, this.scenario.actionId);
|
|
94
|
+
consumeP1Delegation(state, this.scenario.delegation.id, this.scenario.logicalTime, this.scenario.baselineRequest);
|
|
95
|
+
recorder.record({
|
|
96
|
+
protocol: 'HANDOFF',
|
|
97
|
+
protocolVersion: 'handoffprobe-p1-v1',
|
|
98
|
+
boundary: 'mcp-side-effect -> replay-state',
|
|
99
|
+
event: 'p1.replay.first_execution',
|
|
100
|
+
context: translatedContext,
|
|
101
|
+
details: {
|
|
102
|
+
actionId: this.scenario.actionId,
|
|
103
|
+
attemptId: this.scenario.firstAttemptId,
|
|
104
|
+
executed: first.executed,
|
|
105
|
+
sideEffectCounterBefore: first.sideEffectCounterBefore,
|
|
106
|
+
sideEffectCounterAfter: first.sideEffectCounterAfter,
|
|
107
|
+
consumptionState: this.scenario.delegation.singleUse ? 'consumed' : 'not_single_use',
|
|
108
|
+
},
|
|
109
|
+
});
|
|
110
|
+
const acknowledgementAmbiguity = this.scenario.acknowledgementAmbiguity === true;
|
|
111
|
+
if (acknowledgementAmbiguity) {
|
|
112
|
+
recorder.record({
|
|
113
|
+
protocol: 'HANDOFF',
|
|
114
|
+
protocolVersion: 'handoffprobe-p1-v1',
|
|
115
|
+
boundary: 'mcp-result -> a2a-acknowledgement',
|
|
116
|
+
event: 'p1.retry.acknowledgement_lost',
|
|
117
|
+
context: translatedContext,
|
|
118
|
+
details: {
|
|
119
|
+
actionId: this.scenario.actionId,
|
|
120
|
+
attemptId: this.scenario.firstAttemptId,
|
|
121
|
+
sideEffectExecuted: true,
|
|
122
|
+
acknowledgementDelivered: false,
|
|
123
|
+
},
|
|
124
|
+
});
|
|
125
|
+
}
|
|
126
|
+
const replayDecision = evaluateP1Delegation(state, this.scenario.delegation.id, this.scenario.logicalTime, this.scenario.replayRequest);
|
|
127
|
+
const actionBeforeReplay = requireAction(state, this.scenario.actionId);
|
|
128
|
+
const alreadyCompleted = actionBeforeReplay.completed;
|
|
129
|
+
let replayAllowedByPolicy = replayDecision.allowed;
|
|
130
|
+
if (this.scenario.kind === 'retry-double-execution') {
|
|
131
|
+
replayAllowedByPolicy = replayDecision.allowed && !alreadyCompleted;
|
|
132
|
+
}
|
|
133
|
+
const replayBlockedByPolicy = !replayAllowedByPolicy;
|
|
134
|
+
recorder.record({
|
|
135
|
+
protocol: 'HANDOFF',
|
|
136
|
+
protocolVersion: 'handoffprobe-p1-v1',
|
|
137
|
+
boundary: 'replayed-a2a-action -> replay-policy',
|
|
138
|
+
event: 'p1.replay.classify',
|
|
139
|
+
context: translatedContext,
|
|
140
|
+
details: {
|
|
141
|
+
classification: this.scenario.kind,
|
|
142
|
+
actionId: this.scenario.actionId,
|
|
143
|
+
originalAttemptId: this.scenario.firstAttemptId,
|
|
144
|
+
replayAttemptId: this.scenario.secondAttemptId,
|
|
145
|
+
originalTaskId: this.scenario.baselineRequest.taskId,
|
|
146
|
+
replayTaskId: this.scenario.replayRequest.taskId,
|
|
147
|
+
originalRunId: this.scenario.baselineRequest.runId,
|
|
148
|
+
replayRunId: this.scenario.replayRequest.runId,
|
|
149
|
+
delegationId: this.scenario.delegation.id,
|
|
150
|
+
delegationAllowed: replayDecision.allowed,
|
|
151
|
+
delegationReasons: replayDecision.reasons,
|
|
152
|
+
logicalActionCompleted: alreadyCompleted,
|
|
153
|
+
replayAllowedByPolicy,
|
|
154
|
+
acknowledgementAmbiguity,
|
|
155
|
+
},
|
|
156
|
+
});
|
|
157
|
+
recordP1Attempt(state, this.scenario.actionId, this.scenario.secondAttemptId);
|
|
158
|
+
let replayExecuted = false;
|
|
159
|
+
if (replayBlockedByPolicy && this.fixture === 'secure') {
|
|
160
|
+
recorder.record({
|
|
161
|
+
protocol: 'HANDOFF',
|
|
162
|
+
protocolVersion: 'handoffprobe-p1-v1',
|
|
163
|
+
boundary: 'replay-policy -> mcp',
|
|
164
|
+
event: 'p1.replay.blocked',
|
|
165
|
+
context: translatedContext,
|
|
166
|
+
details: {
|
|
167
|
+
actionId: this.scenario.actionId,
|
|
168
|
+
attemptId: this.scenario.secondAttemptId,
|
|
169
|
+
classification: this.scenario.kind,
|
|
170
|
+
reasons: replayDecision.reasons,
|
|
171
|
+
logicalActionCompleted: alreadyCompleted,
|
|
172
|
+
sideEffectCounter: state.sideEffectCounter,
|
|
173
|
+
},
|
|
174
|
+
});
|
|
175
|
+
}
|
|
176
|
+
else {
|
|
177
|
+
if (replayBlockedByPolicy) {
|
|
178
|
+
recorder.record({
|
|
179
|
+
protocol: 'HANDOFF',
|
|
180
|
+
protocolVersion: 'handoffprobe-p1-v1',
|
|
181
|
+
boundary: 'replay-policy -> mcp',
|
|
182
|
+
event: 'p1.replay.bypassed',
|
|
183
|
+
context: translatedContext,
|
|
184
|
+
details: {
|
|
185
|
+
actionId: this.scenario.actionId,
|
|
186
|
+
attemptId: this.scenario.secondAttemptId,
|
|
187
|
+
classification: this.scenario.kind,
|
|
188
|
+
reasons: replayDecision.reasons,
|
|
189
|
+
logicalActionCompleted: alreadyCompleted,
|
|
190
|
+
},
|
|
191
|
+
});
|
|
192
|
+
}
|
|
193
|
+
const second = await executeProtectedAttempt({
|
|
194
|
+
recorder,
|
|
195
|
+
state,
|
|
196
|
+
context: translatedContext,
|
|
197
|
+
scenario: this.scenario.p0Scenario,
|
|
198
|
+
});
|
|
199
|
+
replayExecuted = second.executed;
|
|
200
|
+
if (replayExecuted) {
|
|
201
|
+
recordP1ActionSideEffect(state, this.scenario.actionId);
|
|
202
|
+
}
|
|
203
|
+
recorder.record({
|
|
204
|
+
protocol: 'HANDOFF',
|
|
205
|
+
protocolVersion: 'handoffprobe-p1-v1',
|
|
206
|
+
boundary: 'mcp-side-effect -> replay-state',
|
|
207
|
+
event: 'p1.replay.second_execution',
|
|
208
|
+
context: translatedContext,
|
|
209
|
+
details: {
|
|
210
|
+
actionId: this.scenario.actionId,
|
|
211
|
+
attemptId: this.scenario.secondAttemptId,
|
|
212
|
+
executed: second.executed,
|
|
213
|
+
sideEffectCounterBefore: second.sideEffectCounterBefore,
|
|
214
|
+
sideEffectCounterAfter: second.sideEffectCounterAfter,
|
|
215
|
+
},
|
|
216
|
+
});
|
|
217
|
+
}
|
|
218
|
+
if (input.signal.aborted) {
|
|
219
|
+
throw new Error('P1 replay execution was aborted.');
|
|
220
|
+
}
|
|
221
|
+
const action = requireAction(state, this.scenario.actionId);
|
|
222
|
+
const output = {
|
|
223
|
+
scenarioId: this.scenario.id,
|
|
224
|
+
fixture: this.fixture,
|
|
225
|
+
kind: this.scenario.kind,
|
|
226
|
+
actionId: this.scenario.actionId,
|
|
227
|
+
firstAttemptId: this.scenario.firstAttemptId,
|
|
228
|
+
secondAttemptId: this.scenario.secondAttemptId,
|
|
229
|
+
baselineDecision,
|
|
230
|
+
replayDecision,
|
|
231
|
+
acknowledgementAmbiguity,
|
|
232
|
+
baselineExecuted: first.executed,
|
|
233
|
+
replayExecuted,
|
|
234
|
+
replayBlockedByPolicy,
|
|
235
|
+
sideEffectCounterBefore: before,
|
|
236
|
+
sideEffectCounterAfterFirst: first.sideEffectCounterAfter,
|
|
237
|
+
sideEffectCounterAfterSecond: state.sideEffectCounter,
|
|
238
|
+
action: copyAction(action),
|
|
239
|
+
};
|
|
240
|
+
return {
|
|
241
|
+
originalContext,
|
|
242
|
+
translatedContext,
|
|
243
|
+
evidence: recorder.events,
|
|
244
|
+
output,
|
|
245
|
+
};
|
|
246
|
+
}
|
|
247
|
+
}
|
|
248
|
+
//# sourceMappingURL=replay-target-adapter.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"replay-target-adapter.js","sourceRoot":"","sources":["../../src/p1-fixture/replay-target-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AASxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAInE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAI5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAiFpB,KAAK,UAAU,uBAAuB,CAAC,KAQtC;IACC,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAE7C,MAAM,mBAAmB,CAAC;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QAExB,KAAK,EAAE,QAAQ;QAEf,YAAY,EAAE,KAAK,CAAC,KAAK;QAEzB,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;QAE5C,cAAc,EAAE,IAAI,wBAAwB,EAAE;QAE9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QAExB,eAAe,EAAE,SAAS;KAC3B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IAErC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ;QAEnD,uBAAuB,EAAE,MAAM;QAE/B,sBAAsB,EAAE,KAAK,CAAC,KAAK,CAAC,iBAAiB;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAsB;IACxC,OAAO;QACL,GAAG,MAAM;QAET,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAqB,EAAE,QAAgB;IAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,qBAAqB;IAIrB;IAEA;IALF,EAAE,CAAS;IAEpB,YACW,OAAsB,EAEtB,QAA0B;QAF1B,YAAO,GAAP,OAAO,CAAe;QAEtB,aAAQ,GAAR,QAAQ,CAAkB;QAEnC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA2B;QACvC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE5D,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAEtF,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QAErC,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEtD,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC;QAEvC,MAAM,gBAAgB,GAAG,oBAAoB,CAC3C,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAC3B,IAAI,CAAC,QAAQ,CAAC,WAAW,EACzB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAC9B,CAAC;QAEF,QAAQ,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,SAAS;YAEnB,eAAe,EAAE,oBAAoB;YAErC,QAAQ,EAAE,6BAA6B;YAEvC,KAAK,EAAE,oBAAoB;YAE3B,OAAO,EAAE,iBAAiB;YAE1B,OAAO,EAAE;gBACP,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAE5B,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAElC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAEhC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;gBAEvC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;gBAEzC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM;gBAE5C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK;gBAE1C,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBAEjC,uBAAuB,EAAE,MAAM;aAChC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE7E,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC;YAC1C,QAAQ;YAER,KAAK;YAEL,OAAO,EAAE,iBAAiB;YAE1B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAExD,mBAAmB,CACjB,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAC3B,IAAI,CAAC,QAAQ,CAAC,WAAW,EACzB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAC9B,CAAC;QAEF,QAAQ,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,SAAS;YAEnB,eAAe,EAAE,oBAAoB;YAErC,QAAQ,EAAE,iCAAiC;YAE3C,KAAK,EAAE,2BAA2B;YAElC,OAAO,EAAE,iBAAiB;YAE1B,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAEhC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;gBAEvC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBAExB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;gBAEtD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;gBAEpD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB;aACrF;SACF,CAAC,CAAC;QAEH,MAAM,wBAAwB,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,KAAK,IAAI,CAAC;QAEjF,IAAI,wBAAwB,EAAE,CAAC;YAC7B,QAAQ,CAAC,MAAM,CAAC;gBACd,QAAQ,EAAE,SAAS;gBAEnB,eAAe,EAAE,oBAAoB;gBAErC,QAAQ,EAAE,mCAAmC;gBAE7C,KAAK,EAAE,+BAA+B;gBAEtC,OAAO,EAAE,iBAAiB;gBAE1B,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;oBAEhC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;oBAEvC,kBAAkB,EAAE,IAAI;oBAExB,wBAAwB,EAAE,KAAK;iBAChC;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,oBAAoB,CACzC,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAC3B,IAAI,CAAC,QAAQ,CAAC,WAAW,EACzB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAC5B,CAAC;QAEF,MAAM,kBAAkB,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAExE,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,SAAS,CAAC;QAEtD,IAAI,qBAAqB,GAAG,cAAc,CAAC,OAAO,CAAC;QAEnD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACpD,qBAAqB,GAAG,cAAc,CAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC;QACtE,CAAC;QAED,MAAM,qBAAqB,GAAG,CAAC,qBAAqB,CAAC;QAErD,QAAQ,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,SAAS;YAEnB,eAAe,EAAE,oBAAoB;YAErC,QAAQ,EAAE,sCAAsC;YAEhD,KAAK,EAAE,oBAAoB;YAE3B,OAAO,EAAE,iBAAiB;YAE1B,OAAO,EAAE;gBACP,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAElC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAEhC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;gBAE/C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe;gBAE9C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM;gBAEpD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM;gBAEhD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK;gBAElD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK;gBAE9C,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;gBAEzC,iBAAiB,EAAE,cAAc,CAAC,OAAO;gBAEzC,iBAAiB,EAAE,cAAc,CAAC,OAAO;gBAEzC,sBAAsB,EAAE,gBAAgB;gBAExC,qBAAqB;gBAErB,wBAAwB;aACzB;SACF,CAAC,CAAC;QAEH,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAE9E,IAAI,cAAc,GAAG,KAAK,CAAC;QAE3B,IAAI,qBAAqB,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvD,QAAQ,CAAC,MAAM,CAAC;gBACd,QAAQ,EAAE,SAAS;gBAEnB,eAAe,EAAE,oBAAoB;gBAErC,QAAQ,EAAE,sBAAsB;gBAEhC,KAAK,EAAE,mBAAmB;gBAE1B,OAAO,EAAE,iBAAiB;gBAE1B,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;oBAEhC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe;oBAExC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;oBAElC,OAAO,EAAE,cAAc,CAAC,OAAO;oBAE/B,sBAAsB,EAAE,gBAAgB;oBAExC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;iBAC3C;aACF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,QAAQ,CAAC,MAAM,CAAC;oBACd,QAAQ,EAAE,SAAS;oBAEnB,eAAe,EAAE,oBAAoB;oBAErC,QAAQ,EAAE,sBAAsB;oBAEhC,KAAK,EAAE,oBAAoB;oBAE3B,OAAO,EAAE,iBAAiB;oBAE1B,OAAO,EAAE;wBACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;wBAEhC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe;wBAExC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;wBAElC,OAAO,EAAE,cAAc,CAAC,OAAO;wBAE/B,sBAAsB,EAAE,gBAAgB;qBACzC;iBACF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;gBAC3C,QAAQ;gBAER,KAAK;gBAEL,OAAO,EAAE,iBAAiB;gBAE1B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;aACnC,CAAC,CAAC;YAEH,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;YAEjC,IAAI,cAAc,EAAE,CAAC;gBACnB,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1D,CAAC;YAED,QAAQ,CAAC,MAAM,CAAC;gBACd,QAAQ,EAAE,SAAS;gBAEnB,eAAe,EAAE,oBAAoB;gBAErC,QAAQ,EAAE,iCAAiC;gBAE3C,KAAK,EAAE,4BAA4B;gBAEnC,OAAO,EAAE,iBAAiB;gBAE1B,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;oBAEhC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe;oBAExC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBAEzB,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;oBAEvD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;iBACtD;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAyB;YACnC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAE5B,OAAO,EAAE,IAAI,CAAC,OAAO;YAErB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAExB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAEhC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;YAE5C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe;YAE9C,gBAAgB;YAEhB,cAAc;YAEd,wBAAwB;YAExB,gBAAgB,EAAE,KAAK,CAAC,QAAQ;YAEhC,cAAc;YAEd,qBAAqB;YAErB,uBAAuB,EAAE,MAAM;YAE/B,2BAA2B,EAAE,KAAK,CAAC,sBAAsB;YAEzD,4BAA4B,EAAE,KAAK,CAAC,iBAAiB;YAErD,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;SAC3B,CAAC;QAEF,OAAO;YACL,eAAe;YAEf,iBAAiB;YAEjB,QAAQ,EAAE,QAAQ,CAAC,MAAM;YAEzB,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}
|
|
@@ -0,0 +1,78 @@
|
|
|
1
|
+
import type { P0FixtureSnapshot, P0FixtureState } from '../p0-fixture/state.js';
|
|
2
|
+
export interface P1DelegationRecord {
|
|
3
|
+
id: string;
|
|
4
|
+
principal: string;
|
|
5
|
+
delegate: string;
|
|
6
|
+
tenant: string;
|
|
7
|
+
resources: string[];
|
|
8
|
+
capabilities: string[];
|
|
9
|
+
chain: string[];
|
|
10
|
+
taskId: string;
|
|
11
|
+
runId: string;
|
|
12
|
+
issuedAt: number;
|
|
13
|
+
expiresAt: number;
|
|
14
|
+
singleUse: boolean;
|
|
15
|
+
consumedAt?: number;
|
|
16
|
+
invalidatedAt?: number;
|
|
17
|
+
}
|
|
18
|
+
export interface P1DelegationRequest {
|
|
19
|
+
principal: string;
|
|
20
|
+
delegate: string;
|
|
21
|
+
tenant: string;
|
|
22
|
+
resource: string;
|
|
23
|
+
capability: string;
|
|
24
|
+
taskId: string;
|
|
25
|
+
runId: string;
|
|
26
|
+
requiredChain?: readonly string[];
|
|
27
|
+
}
|
|
28
|
+
export interface P1DelegationDecision {
|
|
29
|
+
allowed: boolean;
|
|
30
|
+
reasons: string[];
|
|
31
|
+
expired: boolean;
|
|
32
|
+
consumed: boolean;
|
|
33
|
+
invalidated: boolean;
|
|
34
|
+
principalMatches: boolean;
|
|
35
|
+
delegateMatches: boolean;
|
|
36
|
+
tenantMatches: boolean;
|
|
37
|
+
resourceMatches: boolean;
|
|
38
|
+
capabilityMatches: boolean;
|
|
39
|
+
taskMatches: boolean;
|
|
40
|
+
runMatches: boolean;
|
|
41
|
+
chainMatches: boolean;
|
|
42
|
+
}
|
|
43
|
+
export interface P1ActionRecord {
|
|
44
|
+
actionId: string;
|
|
45
|
+
attemptIds: string[];
|
|
46
|
+
sideEffectCount: number;
|
|
47
|
+
completed: boolean;
|
|
48
|
+
}
|
|
49
|
+
export interface P1AuditLineageRecord {
|
|
50
|
+
correlationId: string;
|
|
51
|
+
principal: string;
|
|
52
|
+
taskId: string;
|
|
53
|
+
delegationId: string;
|
|
54
|
+
handoffId: string;
|
|
55
|
+
mcpRequestId: string;
|
|
56
|
+
sideEffectId?: string;
|
|
57
|
+
}
|
|
58
|
+
export interface P1FixtureState extends P0FixtureState {
|
|
59
|
+
delegations: Record<string, P1DelegationRecord>;
|
|
60
|
+
actions: Record<string, P1ActionRecord>;
|
|
61
|
+
auditLineage: P1AuditLineageRecord[];
|
|
62
|
+
}
|
|
63
|
+
export interface P1FixtureSnapshot extends P0FixtureSnapshot {
|
|
64
|
+
delegations: Record<string, P1DelegationRecord>;
|
|
65
|
+
actions: Record<string, P1ActionRecord>;
|
|
66
|
+
auditLineage: P1AuditLineageRecord[];
|
|
67
|
+
}
|
|
68
|
+
export declare function createP1FixtureState(): P1FixtureState;
|
|
69
|
+
export declare function registerP1Delegation(state: P1FixtureState, input: P1DelegationRecord): P1DelegationRecord;
|
|
70
|
+
export declare function evaluateP1Delegation(state: P1FixtureState, delegationId: string, logicalTime: number, request: P1DelegationRequest): P1DelegationDecision;
|
|
71
|
+
export declare function consumeP1Delegation(state: P1FixtureState, delegationId: string, logicalTime: number, request: P1DelegationRequest): P1DelegationDecision;
|
|
72
|
+
export declare function invalidateP1Delegation(state: P1FixtureState, delegationId: string, logicalTime: number): void;
|
|
73
|
+
export declare function registerP1Action(state: P1FixtureState, actionId: string): P1ActionRecord;
|
|
74
|
+
export declare function recordP1Attempt(state: P1FixtureState, actionId: string, attemptId: string): void;
|
|
75
|
+
export declare function recordP1ActionSideEffect(state: P1FixtureState, actionId: string): void;
|
|
76
|
+
export declare function recordP1AuditLineage(state: P1FixtureState, record: P1AuditLineageRecord): void;
|
|
77
|
+
export declare function snapshotP1FixtureState(state: P1FixtureState): P1FixtureSnapshot;
|
|
78
|
+
//# sourceMappingURL=state.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/p1-fixture/state.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAEhF,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IAEX,SAAS,EAAE,MAAM,CAAC;IAElB,QAAQ,EAAE,MAAM,CAAC;IAEjB,MAAM,EAAE,MAAM,CAAC;IAEf,SAAS,EAAE,MAAM,EAAE,CAAC;IAEpB,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,MAAM,EAAE,MAAM,CAAC;IAEf,KAAK,EAAE,MAAM,CAAC;IAEd,QAAQ,EAAE,MAAM,CAAC;IAEjB,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,EAAE,OAAO,CAAC;IAEnB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAElB,QAAQ,EAAE,MAAM,CAAC;IAEjB,MAAM,EAAE,MAAM,CAAC;IAEf,QAAQ,EAAE,MAAM,CAAC;IAEjB,UAAU,EAAE,MAAM,CAAC;IAEnB,MAAM,EAAE,MAAM,CAAC;IAEf,KAAK,EAAE,MAAM,CAAC;IAEd,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IAEjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAElB,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,OAAO,CAAC;IAElB,WAAW,EAAE,OAAO,CAAC;IAErB,gBAAgB,EAAE,OAAO,CAAC;IAE1B,eAAe,EAAE,OAAO,CAAC;IAEzB,aAAa,EAAE,OAAO,CAAC;IAEvB,eAAe,EAAE,OAAO,CAAC;IAEzB,iBAAiB,EAAE,OAAO,CAAC;IAE3B,WAAW,EAAE,OAAO,CAAC;IAErB,UAAU,EAAE,OAAO,CAAC;IAEpB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IAEjB,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,eAAe,EAAE,MAAM,CAAC;IAExB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IAEtB,SAAS,EAAE,MAAM,CAAC;IAElB,MAAM,EAAE,MAAM,CAAC;IAEf,YAAY,EAAE,MAAM,CAAC;IAErB,SAAS,EAAE,MAAM,CAAC;IAElB,YAAY,EAAE,MAAM,CAAC;IAErB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAEhD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAExC,YAAY,EAAE,oBAAoB,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAEhD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAExC,YAAY,EAAE,oBAAoB,EAAE,CAAC;CACtC;AA0BD,wBAAgB,oBAAoB,IAAI,cAAc,CAUrD;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,kBAAkB,GACxB,kBAAkB,CA8BpB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,cAAc,EACrB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,GAC3B,oBAAoB,CAyGtB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,cAAc,EACrB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,GAC3B,oBAAoB,CActB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,cAAc,EACrB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,IAAI,CAQN;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,CAsBxF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAQhG;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMtF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAI9F;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,CAoC/E"}
|
|
@@ -0,0 +1,191 @@
|
|
|
1
|
+
import { createP0FixtureState, snapshotP0FixtureState } from '../p0-fixture/state.js';
|
|
2
|
+
function sameOrderedValues(left, right) {
|
|
3
|
+
return left.length === right.length && left.every((value, index) => value === right[index]);
|
|
4
|
+
}
|
|
5
|
+
function requireDelegation(state, delegationId) {
|
|
6
|
+
const delegation = state.delegations[delegationId];
|
|
7
|
+
if (delegation === undefined) {
|
|
8
|
+
throw new Error(`P1 delegation not found: ${delegationId}`);
|
|
9
|
+
}
|
|
10
|
+
return delegation;
|
|
11
|
+
}
|
|
12
|
+
function requireAction(state, actionId) {
|
|
13
|
+
const action = state.actions[actionId];
|
|
14
|
+
if (action === undefined) {
|
|
15
|
+
throw new Error(`P1 action not found: ${actionId}`);
|
|
16
|
+
}
|
|
17
|
+
return action;
|
|
18
|
+
}
|
|
19
|
+
export function createP1FixtureState() {
|
|
20
|
+
return {
|
|
21
|
+
...createP0FixtureState(),
|
|
22
|
+
delegations: {},
|
|
23
|
+
actions: {},
|
|
24
|
+
auditLineage: [],
|
|
25
|
+
};
|
|
26
|
+
}
|
|
27
|
+
export function registerP1Delegation(state, input) {
|
|
28
|
+
if (state.delegations[input.id] !== undefined) {
|
|
29
|
+
throw new Error(`P1 delegation already exists: ${input.id}`);
|
|
30
|
+
}
|
|
31
|
+
if (input.expiresAt <= input.issuedAt) {
|
|
32
|
+
throw new Error('P1 delegation expiry must be after issue time.');
|
|
33
|
+
}
|
|
34
|
+
const stored = {
|
|
35
|
+
...input,
|
|
36
|
+
resources: [...input.resources],
|
|
37
|
+
capabilities: [...input.capabilities],
|
|
38
|
+
chain: [...input.chain],
|
|
39
|
+
};
|
|
40
|
+
state.delegations[input.id] = stored;
|
|
41
|
+
return {
|
|
42
|
+
...stored,
|
|
43
|
+
resources: [...stored.resources],
|
|
44
|
+
capabilities: [...stored.capabilities],
|
|
45
|
+
chain: [...stored.chain],
|
|
46
|
+
};
|
|
47
|
+
}
|
|
48
|
+
export function evaluateP1Delegation(state, delegationId, logicalTime, request) {
|
|
49
|
+
const delegation = requireDelegation(state, delegationId);
|
|
50
|
+
const expired = logicalTime >= delegation.expiresAt;
|
|
51
|
+
const invalidated = delegation.invalidatedAt !== undefined && logicalTime >= delegation.invalidatedAt;
|
|
52
|
+
const consumed = delegation.singleUse && delegation.consumedAt !== undefined;
|
|
53
|
+
const principalMatches = delegation.principal === request.principal;
|
|
54
|
+
const delegateMatches = delegation.delegate === request.delegate;
|
|
55
|
+
const tenantMatches = delegation.tenant === request.tenant;
|
|
56
|
+
const resourceMatches = delegation.resources.includes(request.resource);
|
|
57
|
+
const capabilityMatches = delegation.capabilities.includes(request.capability);
|
|
58
|
+
const taskMatches = delegation.taskId === request.taskId;
|
|
59
|
+
const runMatches = delegation.runId === request.runId;
|
|
60
|
+
const chainMatches = request.requiredChain === undefined ||
|
|
61
|
+
sameOrderedValues(delegation.chain, request.requiredChain);
|
|
62
|
+
const reasons = [];
|
|
63
|
+
if (logicalTime < delegation.issuedAt) {
|
|
64
|
+
reasons.push('delegation_not_yet_valid');
|
|
65
|
+
}
|
|
66
|
+
if (expired) {
|
|
67
|
+
reasons.push('delegation_expired');
|
|
68
|
+
}
|
|
69
|
+
if (invalidated) {
|
|
70
|
+
reasons.push('delegation_invalidated');
|
|
71
|
+
}
|
|
72
|
+
if (consumed) {
|
|
73
|
+
reasons.push('single_use_delegation_consumed');
|
|
74
|
+
}
|
|
75
|
+
if (!principalMatches) {
|
|
76
|
+
reasons.push('principal_mismatch');
|
|
77
|
+
}
|
|
78
|
+
if (!delegateMatches) {
|
|
79
|
+
reasons.push('delegate_mismatch');
|
|
80
|
+
}
|
|
81
|
+
if (!tenantMatches) {
|
|
82
|
+
reasons.push('tenant_mismatch');
|
|
83
|
+
}
|
|
84
|
+
if (!resourceMatches) {
|
|
85
|
+
reasons.push('resource_mismatch');
|
|
86
|
+
}
|
|
87
|
+
if (!capabilityMatches) {
|
|
88
|
+
reasons.push('capability_mismatch');
|
|
89
|
+
}
|
|
90
|
+
if (!taskMatches) {
|
|
91
|
+
reasons.push('task_mismatch');
|
|
92
|
+
}
|
|
93
|
+
if (!runMatches) {
|
|
94
|
+
reasons.push('run_mismatch');
|
|
95
|
+
}
|
|
96
|
+
if (!chainMatches) {
|
|
97
|
+
reasons.push('delegation_chain_mismatch');
|
|
98
|
+
}
|
|
99
|
+
return {
|
|
100
|
+
allowed: reasons.length === 0,
|
|
101
|
+
reasons,
|
|
102
|
+
expired,
|
|
103
|
+
consumed,
|
|
104
|
+
invalidated,
|
|
105
|
+
principalMatches,
|
|
106
|
+
delegateMatches,
|
|
107
|
+
tenantMatches,
|
|
108
|
+
resourceMatches,
|
|
109
|
+
capabilityMatches,
|
|
110
|
+
taskMatches,
|
|
111
|
+
runMatches,
|
|
112
|
+
chainMatches,
|
|
113
|
+
};
|
|
114
|
+
}
|
|
115
|
+
export function consumeP1Delegation(state, delegationId, logicalTime, request) {
|
|
116
|
+
const decision = evaluateP1Delegation(state, delegationId, logicalTime, request);
|
|
117
|
+
if (!decision.allowed) {
|
|
118
|
+
return decision;
|
|
119
|
+
}
|
|
120
|
+
const delegation = requireDelegation(state, delegationId);
|
|
121
|
+
if (delegation.singleUse) {
|
|
122
|
+
delegation.consumedAt = logicalTime;
|
|
123
|
+
}
|
|
124
|
+
return decision;
|
|
125
|
+
}
|
|
126
|
+
export function invalidateP1Delegation(state, delegationId, logicalTime) {
|
|
127
|
+
const delegation = requireDelegation(state, delegationId);
|
|
128
|
+
if (delegation.invalidatedAt !== undefined) {
|
|
129
|
+
throw new Error(`P1 delegation already invalidated: ${delegationId}`);
|
|
130
|
+
}
|
|
131
|
+
delegation.invalidatedAt = logicalTime;
|
|
132
|
+
}
|
|
133
|
+
export function registerP1Action(state, actionId) {
|
|
134
|
+
if (state.actions[actionId] !== undefined) {
|
|
135
|
+
throw new Error(`P1 action already exists: ${actionId}`);
|
|
136
|
+
}
|
|
137
|
+
const action = {
|
|
138
|
+
actionId,
|
|
139
|
+
attemptIds: [],
|
|
140
|
+
sideEffectCount: 0,
|
|
141
|
+
completed: false,
|
|
142
|
+
};
|
|
143
|
+
state.actions[actionId] = action;
|
|
144
|
+
return {
|
|
145
|
+
...action,
|
|
146
|
+
attemptIds: [...action.attemptIds],
|
|
147
|
+
};
|
|
148
|
+
}
|
|
149
|
+
export function recordP1Attempt(state, actionId, attemptId) {
|
|
150
|
+
const action = requireAction(state, actionId);
|
|
151
|
+
if (action.attemptIds.includes(attemptId)) {
|
|
152
|
+
throw new Error(`P1 attempt already recorded: ${attemptId}`);
|
|
153
|
+
}
|
|
154
|
+
action.attemptIds.push(attemptId);
|
|
155
|
+
}
|
|
156
|
+
export function recordP1ActionSideEffect(state, actionId) {
|
|
157
|
+
const action = requireAction(state, actionId);
|
|
158
|
+
action.sideEffectCount += 1;
|
|
159
|
+
action.completed = true;
|
|
160
|
+
}
|
|
161
|
+
export function recordP1AuditLineage(state, record) {
|
|
162
|
+
state.auditLineage.push({
|
|
163
|
+
...record,
|
|
164
|
+
});
|
|
165
|
+
}
|
|
166
|
+
export function snapshotP1FixtureState(state) {
|
|
167
|
+
const p0 = snapshotP0FixtureState(state);
|
|
168
|
+
return {
|
|
169
|
+
...p0,
|
|
170
|
+
delegations: Object.fromEntries(Object.entries(state.delegations).map(([id, delegation]) => [
|
|
171
|
+
id,
|
|
172
|
+
{
|
|
173
|
+
...delegation,
|
|
174
|
+
resources: [...delegation.resources],
|
|
175
|
+
capabilities: [...delegation.capabilities],
|
|
176
|
+
chain: [...delegation.chain],
|
|
177
|
+
},
|
|
178
|
+
])),
|
|
179
|
+
actions: Object.fromEntries(Object.entries(state.actions).map(([id, action]) => [
|
|
180
|
+
id,
|
|
181
|
+
{
|
|
182
|
+
...action,
|
|
183
|
+
attemptIds: [...action.attemptIds],
|
|
184
|
+
},
|
|
185
|
+
])),
|
|
186
|
+
auditLineage: state.auditLineage.map((record) => ({
|
|
187
|
+
...record,
|
|
188
|
+
})),
|
|
189
|
+
};
|
|
190
|
+
}
|
|
191
|
+
//# sourceMappingURL=state.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/p1-fixture/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AA0HtF,SAAS,iBAAiB,CAAC,IAAuB,EAAE,KAAwB;IAC1E,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAqB,EAAE,YAAoB;IACpE,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAEnD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,KAAqB,EAAE,QAAgB;IAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,GAAG,oBAAoB,EAAE;QAEzB,WAAW,EAAE,EAAE;QAEf,OAAO,EAAE,EAAE;QAEX,YAAY,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAqB,EACrB,KAAyB;IAEzB,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAAuB;QACjC,GAAG,KAAK;QAER,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QAE/B,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QAErC,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;KACxB,CAAC;IAEF,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;IAErC,OAAO;QACL,GAAG,MAAM;QAET,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAEhC,YAAY,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QAEtC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAqB,EACrB,YAAoB,EACpB,WAAmB,EACnB,OAA4B;IAE5B,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,WAAW,IAAI,UAAU,CAAC,SAAS,CAAC;IAEpD,MAAM,WAAW,GACf,UAAU,CAAC,aAAa,KAAK,SAAS,IAAI,WAAW,IAAI,UAAU,CAAC,aAAa,CAAC;IAEpF,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC;IAE7E,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC;IAEpE,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC;IAEjE,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;IAE3D,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExE,MAAM,iBAAiB,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE/E,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;IAEzD,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC;IAEtD,MAAM,YAAY,GAChB,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,iBAAiB,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAE7B,OAAO;QAEP,OAAO;QAEP,QAAQ;QAER,WAAW;QAEX,gBAAgB;QAEhB,eAAe;QAEf,aAAa;QAEb,eAAe;QAEf,iBAAiB;QAEjB,WAAW;QAEX,UAAU;QAEV,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAqB,EACrB,YAAoB,EACpB,WAAmB,EACnB,OAA4B;IAE5B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAEjF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAE1D,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACzB,UAAU,CAAC,UAAU,GAAG,WAAW,CAAC;IACtC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAqB,EACrB,YAAoB,EACpB,WAAmB;IAEnB,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAE1D,IAAI,UAAU,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,UAAU,CAAC,aAAa,GAAG,WAAW,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAqB,EAAE,QAAgB;IACtE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAmB;QAC7B,QAAQ;QAER,UAAU,EAAE,EAAE;QAEd,eAAe,EAAE,CAAC;QAElB,SAAS,EAAE,KAAK;KACjB,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IAEjC,OAAO;QACL,GAAG,MAAM;QAET,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAqB,EAAE,QAAgB,EAAE,SAAiB;IACxF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAE9C,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAqB,EAAE,QAAgB;IAC9E,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAE9C,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;IAE5B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAqB,EAAE,MAA4B;IACtF,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;QACtB,GAAG,MAAM;KACV,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAqB;IAC1D,MAAM,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAEzC,OAAO;QACL,GAAG,EAAE;QAEL,WAAW,EAAE,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YAC1D,EAAE;YACF;gBACE,GAAG,UAAU;gBAEb,SAAS,EAAE,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC;gBAEpC,YAAY,EAAE,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;gBAE1C,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;aAC7B;SACF,CAAC,CACH;QAED,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YAClD,EAAE;YACF;gBACE,GAAG,MAAM;gBAET,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;aACnC;SACF,CAAC,CACH;QAED,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,MAAM;SACV,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import type { TargetAdapter, TargetExecutionInput, TargetExecutionResult } from '../core/index.js';
|
|
2
|
+
import type { P0Scenario, P0TargetOutput } from '../p0-fixture/index.js';
|
|
3
|
+
import type { P1DelegationDecision, P1DelegationRecord, P1DelegationRequest } from './state.js';
|
|
4
|
+
export type P1FixtureMode = 'secure' | 'vulnerable';
|
|
5
|
+
export interface P1AuthorizationScenario {
|
|
6
|
+
id: string;
|
|
7
|
+
delegation: P1DelegationRecord;
|
|
8
|
+
request: P1DelegationRequest;
|
|
9
|
+
logicalTime: number;
|
|
10
|
+
p0Scenario: P0Scenario;
|
|
11
|
+
}
|
|
12
|
+
export interface P1AuthorizationTargetOutput {
|
|
13
|
+
scenarioId: string;
|
|
14
|
+
fixture: P1FixtureMode;
|
|
15
|
+
delegationId: string;
|
|
16
|
+
logicalTime: number;
|
|
17
|
+
decision: P1DelegationDecision;
|
|
18
|
+
executed: boolean;
|
|
19
|
+
sideEffectCounterBefore: number;
|
|
20
|
+
sideEffectCounterAfter: number;
|
|
21
|
+
p0Output?: P0TargetOutput;
|
|
22
|
+
}
|
|
23
|
+
export declare class P1AuthorizationTargetAdapter implements TargetAdapter {
|
|
24
|
+
readonly fixture: P1FixtureMode;
|
|
25
|
+
readonly scenario: P1AuthorizationScenario;
|
|
26
|
+
readonly id: string;
|
|
27
|
+
constructor(fixture: P1FixtureMode, scenario: P1AuthorizationScenario);
|
|
28
|
+
execute(input: TargetExecutionInput): Promise<TargetExecutionResult>;
|
|
29
|
+
}
|
|
30
|
+
//# sourceMappingURL=target-adapter.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"target-adapter.d.ts","sourceRoot":"","sources":["../../src/p1-fixture/target-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAInG,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAMzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEhG,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEpD,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IAEX,UAAU,EAAE,kBAAkB,CAAC;IAE/B,OAAO,EAAE,mBAAmB,CAAC;IAE7B,WAAW,EAAE,MAAM,CAAC;IAEpB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IAEnB,OAAO,EAAE,aAAa,CAAC;IAEvB,YAAY,EAAE,MAAM,CAAC;IAErB,WAAW,EAAE,MAAM,CAAC;IAEpB,QAAQ,EAAE,oBAAoB,CAAC;IAE/B,QAAQ,EAAE,OAAO,CAAC;IAElB,uBAAuB,EAAE,MAAM,CAAC;IAEhC,sBAAsB,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,qBAAa,4BAA6B,YAAW,aAAa;IAI9D,QAAQ,CAAC,OAAO,EAAE,aAAa;IAC/B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB;IAJ5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAGT,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,uBAAuB;IAKtC,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAgN3E"}
|