handoffprobe 0.1.0

package/dist/attacks/p0/tenant.js

@@ -0,0 +1,155 @@
+import { cloneSecurityContext } from '../../core/index.js';
+import { P0_AUTHORIZED_TENANT, P0_CAPABILITY_UPDATE, P0_UNAUTHORIZED_RESOURCE, P0_UNAUTHORIZED_TENANT, createP0ReferenceContext, createP0UpdateInvoiceScenario, } from '../../p0-fixture/index.js';
+function createUpdateAuthorizedContext() {
+    const context = createP0ReferenceContext();
+    if (context.upstreamAuthority === undefined || context.effectiveAuthority === undefined) {
+        throw new Error('HP-TENANT-001 requires authority bindings.');
+    }
+    context.capabilities = [P0_CAPABILITY_UPDATE];
+    context.upstreamAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    context.effectiveAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    return context;
+}
+function evidenceSequences(result) {
+    return result.evidence
+        .filter((event) => ['handoff.translate', 'p0.authorization', 'p0.tool.result'].includes(event.event))
+        .map((event) => event.sequence);
+}
+function executedInvoiceTenant(result) {
+    const output = result.output;
+    const value = output.mcpResult.envelope.output;
+    if (typeof value !== 'object' || value === null || !('invoice' in value)) {
+        return undefined;
+    }
+    const invoice = value.invoice;
+    if (typeof invoice !== 'object' || invoice === null || !('tenant' in invoice)) {
+        return undefined;
+    }
+    const tenant = invoice.tenant;
+    return typeof tenant === 'string' ? tenant : undefined;
+}
+function evaluateTenantMutation(result) {
+    const output = result.output;
+    const envelope = output.mcpResult.envelope;
+    const authorization = envelope.authorization;
+    const before = envelope.before.sideEffectCounter;
+    const after = envelope.after.sideEffectCounter;
+    const sequences = evidenceSequences(result);
+    if (authorization.invariantAllowed) {
+        return {
+            status: 'inconclusive',
+            observedBehavior: 'The tenant mutation did not produce an invalid tenant-bound authorization state.',
+            evidenceSequences: sequences,
+        };
+    }
+    if (!authorization.executed && after === before) {
+        return {
+            status: 'pass',
+            observedBehavior: 'The tenant-context mutation was rejected and no protected synthetic state changed.',
+            evidenceSequences: sequences,
+        };
+    }
+    if (authorization.executed && after > before) {
+        const tenant = executedInvoiceTenant(result);
+        const actualCrossTenant = tenant === P0_UNAUTHORIZED_TENANT;
+        return {
+            status: 'fail',
+            severity: actualCrossTenant ? 'critical' : 'high',
+            observedBehavior: actualCrossTenant
+                ? 'Authority originating in tenant:acme executed a protected mutation against a tenant:globex invoice.'
+                : 'A protected synthetic action executed after tenant context was lost.',
+            evidenceSequences: sequences,
+        };
+    }
+    return {
+        status: 'inconclusive',
+        observedBehavior: 'Tenant evidence and synthetic side-effect state could not establish a deterministic PASS or FAIL.',
+        evidenceSequences: sequences,
+    };
+}
+const TENANT_DEFINITION = {
+    id: 'HP-TENANT-001',
+    name: 'Tenant context loss or substitution',
+    category: 'tenant',
+    defaultSeverity: 'high',
+    priority: 'P0',
+    preconditions: [
+        'Upstream authority originates in tenant:acme.',
+        'The fixture contains an alternate tenant:globex resource.',
+    ],
+    mutationSteps: [
+        'Variant A removes the tenant binding during handoff translation.',
+        'Variant B substitutes tenant:acme with tenant:globex and targets the Globex invoice.',
+    ],
+    expectedInvariant: 'Authority from one tenant must not authorize another tenant.',
+    evidenceRequirements: [
+        'upstream tenant',
+        'translated tenant',
+        'requested resource',
+        'authorization result',
+        'resulting resource data or state',
+    ],
+    applicability: {
+        a2a: ['1.0'],
+        mcp: ['2026-07-28'],
+    },
+    propertyClass: 'composition_responsibility',
+    sourceReferences: [
+        {
+            kind: 'project',
+            title: 'P0 Security Test Specification',
+            locator: 'docs/P0_TEST_SPECIFICATION.md#hp-tenant-001--tenant-context-loss-or-substitution',
+        },
+    ],
+    sideEffectClass: 'synthetic',
+    destructive: false,
+};
+const TENANT_CASE = {
+    definition: TENANT_DEFINITION,
+    evaluate: evaluateTenantMutation,
+};
+class LoseTenantContextAdapter {
+    id = 'p0-tenant-001:loss';
+    translate(context) {
+        const translated = cloneSecurityContext(context);
+        if (translated.effectiveAuthority === undefined) {
+            throw new Error('HP-TENANT-001 loss variant requires effective authority.');
+        }
+        translated.tenant = '';
+        translated.effectiveAuthority.tenant = '';
+        return translated;
+    }
+}
+class SubstituteTenantAdapter {
+    id = 'p0-tenant-001:substitution';
+    translate(context) {
+        const translated = cloneSecurityContext(context);
+        if (translated.effectiveAuthority === undefined) {
+            throw new Error('HP-TENANT-001 substitution variant requires effective authority.');
+        }
+        translated.tenant = P0_UNAUTHORIZED_TENANT;
+        translated.resource = P0_UNAUTHORIZED_RESOURCE;
+        translated.effectiveAuthority.tenant = P0_UNAUTHORIZED_TENANT;
+        translated.effectiveAuthority.resources = [P0_UNAUTHORIZED_RESOURCE];
+        return translated;
+    }
+}
+export const HP_TENANT_001_LOSS = {
+    attack: TENANT_CASE,
+    scenario: createP0UpdateInvoiceScenario(25001),
+    handoffAdapter: new LoseTenantContextAdapter(),
+    createContext: createUpdateAuthorizedContext,
+};
+export const HP_TENANT_001 = {
+    attack: TENANT_CASE,
+    scenario: createP0UpdateInvoiceScenario(25002),
+    handoffAdapter: new SubstituteTenantAdapter(),
+    createContext: createUpdateAuthorizedContext,
+};
+export const P0_TENANT_001_VARIANTS = [HP_TENANT_001_LOSS, HP_TENANT_001];
+export const P0_TENANT_BASELINE = {
+    authorized: P0_AUTHORIZED_TENANT,
+    unauthorized: P0_UNAUTHORIZED_TENANT,
+    unauthorizedResource: P0_UNAUTHORIZED_RESOURCE,
+};
+//# sourceMappingURL=tenant.js.map

package/dist/attacks/p0/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../../../src/attacks/p0/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAW3D,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAMnC,SAAS,6BAA6B;IACpC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE9C,OAAO,CAAC,iBAAiB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEhE,OAAO,CAAC,kBAAkB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA6B;IACtD,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAChB,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAClF;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA6B;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAwB,CAAC;IAE/C,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;IAE/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GACX,KAGD,CAAC,OAAO,CAAC;IAEV,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GACV,OAGD,CAAC,MAAM,CAAC;IAET,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA6B;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAwB,CAAC;IAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;IAE3C,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;IAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAEjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAE/C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,aAAa,CAAC,gBAAgB,EAAE,CAAC;QACnC,OAAO;YACL,MAAM,EAAE,cAAc;YAEtB,gBAAgB,EACd,kFAAkF;YAEpF,iBAAiB,EAAE,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,gBAAgB,EACd,oFAAoF;YAEtF,iBAAiB,EAAE,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,QAAQ,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAE7C,MAAM,iBAAiB,GAAG,MAAM,KAAK,sBAAsB,CAAC;QAE5D,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;YAEjD,gBAAgB,EAAE,iBAAiB;gBACjC,CAAC,CAAC,qGAAqG;gBACvG,CAAC,CAAC,sEAAsE;YAE1E,iBAAiB,EAAE,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,cAAc;QAEtB,gBAAgB,EACd,mGAAmG;QAErG,iBAAiB,EAAE,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAqB;IAC1C,EAAE,EAAE,eAAe;IAEnB,IAAI,EAAE,qCAAqC;IAE3C,QAAQ,EAAE,QAAQ;IAElB,eAAe,EAAE,MAAM;IAEvB,QAAQ,EAAE,IAAI;IAEd,aAAa,EAAE;QACb,+CAA+C;QAC/C,2DAA2D;KAC5D;IAED,aAAa,EAAE;QACb,kEAAkE;QAClE,sFAAsF;KACvF;IAED,iBAAiB,EAAE,8DAA8D;IAEjF,oBAAoB,EAAE;QACpB,iBAAiB;QACjB,mBAAmB;QACnB,oBAAoB;QACpB,sBAAsB;QACtB,kCAAkC;KACnC;IAED,aAAa,EAAE;QACb,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,GAAG,EAAE,CAAC,YAAY,CAAC;KACpB;IAED,aAAa,EAAE,4BAA4B;IAE3C,gBAAgB,EAAE;QAChB;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,gCAAgC;YACvC,OAAO,EAAE,kFAAkF;SAC5F;KACF;IAED,eAAe,EAAE,WAAW;IAE5B,WAAW,EAAE,KAAK;CACnB,CAAC;AAEF,MAAM,WAAW,GAAe;IAC9B,UAAU,EAAE,iBAAiB;IAE7B,QAAQ,EAAE,sBAAsB;CACjC,CAAC;AAEF,MAAM,wBAAwB;IACnB,EAAE,GAAG,oBAAoB,CAAC;IAEnC,SAAS,CAAC,OAAwB;QAChC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEjD,IAAI,UAAU,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QAED,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC;QAEvB,UAAU,CAAC,kBAAkB,CAAC,MAAM,GAAG,EAAE,CAAC;QAE1C,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED,MAAM,uBAAuB;IAClB,EAAE,GAAG,4BAA4B,CAAC;IAE3C,SAAS,CAAC,OAAwB;QAChC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEjD,IAAI,UAAU,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QAED,UAAU,CAAC,MAAM,GAAG,sBAAsB,CAAC;QAE3C,UAAU,CAAC,QAAQ,GAAG,wBAAwB,CAAC;QAE/C,UAAU,CAAC,kBAAkB,CAAC,MAAM,GAAG,sBAAsB,CAAC;QAE9D,UAAU,CAAC,kBAAkB,CAAC,SAAS,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAErE,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAiB;IAC9C,MAAM,EAAE,WAAW;IAEnB,QAAQ,EAAE,6BAA6B,CAAC,KAAK,CAAC;IAE9C,cAAc,EAAE,IAAI,wBAAwB,EAAE;IAE9C,aAAa,EAAE,6BAA6B;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,MAAM,EAAE,WAAW;IAEnB,QAAQ,EAAE,6BAA6B,CAAC,KAAK,CAAC;IAE9C,cAAc,EAAE,IAAI,uBAAuB,EAAE;IAE7C,aAAa,EAAE,6BAA6B;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAA4B,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;AAEnG,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE,oBAAoB;IAEhC,YAAY,EAAE,sBAAsB;IAEpC,oBAAoB,EAAE,wBAAwB;CACtC,CAAC"}

package/dist/attacks/p0/types.d.ts

@@ -0,0 +1,9 @@
+import type { AttackCase, HandoffAdapter, SecurityContext } from '../../core/index.js';
+import type { P0Scenario } from '../../p0-fixture/index.js';
+export interface P0AttackPlan {
+    attack: AttackCase;
+    scenario: P0Scenario;
+    handoffAdapter: HandoffAdapter;
+    createContext(): SecurityContext;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/attacks/p0/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/attacks/p0/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,UAAU,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAE/B,aAAa,IAAI,eAAe,CAAC;CAClC"}

package/dist/attacks/p0/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/attacks/p0/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/attacks/p0/types.ts"],"names":[],"mappings":""}

package/dist/attacks/p1/approval.d.ts

@@ -0,0 +1,5 @@
+import type { P1ApprovalAttackPlan } from './types.js';
+export declare const HP_APPROVAL_002: P1ApprovalAttackPlan;
+export declare const HP_APPROVAL_003: P1ApprovalAttackPlan;
+export declare const P1_APPROVAL_ATTACKS: readonly P1ApprovalAttackPlan[];
+//# sourceMappingURL=approval.d.ts.map

package/dist/attacks/p1/approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../../src/attacks/p1/approval.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AA0VvD,eAAO,MAAM,eAAe,EAAE,oBA4B7B,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,oBA0C7B,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,SAAS,oBAAoB,EAG9D,CAAC"}

package/dist/attacks/p1/approval.js

@@ -0,0 +1,259 @@
+import { P0_APPROVAL_ID, P0_APPROVED_REFUND_PAYLOAD, P0_AUTHORIZED_RESOURCE, P0_AUTHORIZED_TENANT, P0_CAPABILITY_REFUND, P0_CAPABILITY_UPDATE, createP0ReferenceContext, hashApprovalPayload, } from '../../p0-fixture/index.js';
+const P1_APPROVAL_ALT_RESOURCE = 'invoice:INV-1003';
+const P1_APPROVAL_UPDATE_ID = 'approval:update-invoice-1001';
+const APPROVED_UPDATE_PAYLOAD = {
+    amountCents: 15000,
+};
+function projectSources(section) {
+    return [
+        {
+            kind: 'project',
+            title: 'P1 Security Test Specification',
+            locator: `docs/P1_TEST_SPECIFICATION.md#${section}`,
+        },
+        {
+            kind: 'project',
+            title: 'Attack Catalog',
+            locator: 'docs/ATTACK_CATALOG.md#v01-p1--add-after-p0-engine-is-credible',
+        },
+    ];
+}
+function createDefinition(input) {
+    return {
+        id: input.id,
+        name: input.name,
+        category: 'approval',
+        defaultSeverity: 'high',
+        priority: 'P1',
+        preconditions: input.preconditions,
+        mutationSteps: input.mutationSteps,
+        expectedInvariant: input.invariant,
+        evidenceRequirements: input.evidence,
+        applicability: {
+            a2a: ['1.0'],
+            mcp: ['2026-07-28'],
+        },
+        propertyClass: 'composition_responsibility',
+        sourceReferences: projectSources(input.section),
+        sideEffectClass: 'synthetic',
+        destructive: false,
+    };
+}
+function createUpdateScenario(id, resource, amountCents) {
+    return {
+        id,
+        tool: 'update_invoice',
+        buildArguments() {
+            return {
+                resource,
+                amountCents,
+            };
+        },
+    };
+}
+function createToolSubstitutionContext() {
+    const context = createP0ReferenceContext();
+    if (context.upstreamAuthority === undefined || context.effectiveAuthority === undefined) {
+        throw new Error('HP-APPROVAL-002 requires authority bindings.');
+    }
+    /*
+     * Both actions are allowed by
+     * ordinary authority.
+     *
+     * Therefore approval/tool binding
+     * is the property under test.
+     */
+    context.capabilities = [P0_CAPABILITY_REFUND, P0_CAPABILITY_UPDATE];
+    context.upstreamAuthority.capabilities = [P0_CAPABILITY_REFUND, P0_CAPABILITY_UPDATE];
+    context.effectiveAuthority.capabilities = [P0_CAPABILITY_REFUND, P0_CAPABILITY_UPDATE];
+    return context;
+}
+function createResourceReuseContext() {
+    const context = createP0ReferenceContext();
+    if (context.upstreamAuthority === undefined || context.effectiveAuthority === undefined) {
+        throw new Error('HP-APPROVAL-003 requires authority bindings.');
+    }
+    /*
+     * Both invoices belong to the same
+     * synthetic Acme tenant and are
+     * authorized normally.
+     *
+     * Only consent remains resource-bound
+     * to INV-1001.
+     */
+    context.resource = P1_APPROVAL_ALT_RESOURCE;
+    context.capabilities = [P0_CAPABILITY_UPDATE];
+    context.upstreamAuthority.resources = [P0_AUTHORIZED_RESOURCE, P1_APPROVAL_ALT_RESOURCE];
+    context.effectiveAuthority.resources = [P0_AUTHORIZED_RESOURCE, P1_APPROVAL_ALT_RESOURCE];
+    context.upstreamAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    context.effectiveAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    context.approval = {
+        approvalId: P1_APPROVAL_UPDATE_ID,
+        tool: 'update_invoice',
+        /*
+         * Resource binding is explicit
+         * in the P1 approval record.
+         * Keep this hash resource-neutral
+         * so the test isolates the
+         * resource binding itself.
+         */
+        payloadHash: hashApprovalPayload(APPROVED_UPDATE_PAYLOAD),
+    };
+    return context;
+}
+function relevantEvidenceSequences(result) {
+    const names = new Set([
+        'p1.approval.binding',
+        'p1.approval.blocked',
+        'p1.approval.bypassed',
+        'handoff.translate',
+        'p0.authorization',
+        'mcp.tool.call',
+        'mcp.tool.result',
+        'p0.tool.result',
+    ]);
+    return result.evidence.filter((event) => names.has(event.event)).map((event) => event.sequence);
+}
+function evaluateApprovalMismatch(result, messages) {
+    const output = result.output;
+    const evidenceSequences = relevantEvidenceSequences(result);
+    if (output.decision.allowed) {
+        return {
+            status: 'inconclusive',
+            observedBehavior: 'The intended approval mutation did not create an invalid approval binding.',
+            evidenceSequences,
+        };
+    }
+    const sideEffectDelta = output.sideEffectCounterAfter - output.sideEffectCounterBefore;
+    if (!output.executed && sideEffectDelta === 0) {
+        return {
+            status: 'pass',
+            observedBehavior: messages.pass,
+            evidenceSequences,
+        };
+    }
+    if (output.executed && sideEffectDelta === 1) {
+        return {
+            status: 'fail',
+            observedBehavior: messages.fail,
+            evidenceSequences,
+        };
+    }
+    return {
+        status: 'inconclusive',
+        observedBehavior: 'Approval and synthetic side-effect evidence could not establish a deterministic PASS or FAIL.',
+        evidenceSequences,
+    };
+}
+const APPROVAL_002_DEFINITION = createDefinition({
+    id: 'HP-APPROVAL-002',
+    name: 'Tool substitution after approval',
+    preconditions: [
+        'A protected refund_payment action has valid consent.',
+        'Ordinary authority also permits update_invoice so approval/tool binding can be tested independently.',
+    ],
+    mutationSteps: [
+        'Keep the original approval ID and approved payload hash.',
+        'Replace the selected downstream tool with update_invoice.',
+        'Attempt the protected update using the original refund approval.',
+    ],
+    invariant: 'Approval bound to one tool must not authorize a different protected tool.',
+    evidence: [
+        'approval ID',
+        'approved tool',
+        'executed tool',
+        'approved payload hash',
+        'translated context',
+        'approval decision',
+        'synthetic side-effect state',
+    ],
+    section: 'hp-approval-002--tool-substitution-after-approval',
+});
+const APPROVAL_003_DEFINITION = createDefinition({
+    id: 'HP-APPROVAL-003',
+    name: 'Approval reuse for another resource',
+    preconditions: [
+        'A protected update is approved for invoice:INV-1001.',
+        'A second same-tenant synthetic invoice exists and ordinary authority permits both resources.',
+    ],
+    mutationSteps: [
+        'Keep the same approval ID and approved action.',
+        'Change the execution resource from invoice:INV-1001 to invoice:INV-1003.',
+        'Attempt the protected update without new consent.',
+    ],
+    invariant: 'Resource-bound approval must remain bound to the resource that was actually approved.',
+    evidence: [
+        'approval ID',
+        'approved resource',
+        'executed resource',
+        'approved payload hash',
+        'approval decision',
+        'resource version before and after',
+        'synthetic side-effect state',
+    ],
+    section: 'hp-approval-003--approval-reuse-for-another-resource',
+});
+const APPROVAL_002_CASE = {
+    definition: APPROVAL_002_DEFINITION,
+    evaluate(result) {
+        return evaluateApprovalMismatch(result, {
+            pass: 'The substituted update_invoice tool was rejected because consent was issued for refund_payment.',
+            fail: 'update_invoice executed using approval that was issued for refund_payment.',
+        });
+    },
+};
+const APPROVAL_003_CASE = {
+    definition: APPROVAL_003_DEFINITION,
+    evaluate(result) {
+        return evaluateApprovalMismatch(result, {
+            pass: 'The second invoice was rejected because approval remained bound to invoice:INV-1001.',
+            fail: 'The protected update executed against invoice:INV-1003 using approval issued for invoice:INV-1001.',
+        });
+    },
+};
+export const HP_APPROVAL_002 = {
+    attack: APPROVAL_002_CASE,
+    scenario: {
+        id: 'approval-tool-substitution',
+        approval: {
+            approvalId: P0_APPROVAL_ID,
+            approvedTool: 'refund_payment',
+            approvedResource: P0_AUTHORIZED_RESOURCE,
+            approvedPayloadHash: hashApprovalPayload(P0_APPROVED_REFUND_PAYLOAD),
+        },
+        executedTool: 'update_invoice',
+        executedResource: P0_AUTHORIZED_RESOURCE,
+        p0Scenario: createUpdateScenario('p1-approval-tool-substitution', P0_AUTHORIZED_RESOURCE, 15000),
+    },
+    createContext: createToolSubstitutionContext,
+};
+export const HP_APPROVAL_003 = {
+    attack: APPROVAL_003_CASE,
+    scenario: {
+        id: 'approval-resource-reuse',
+        approval: {
+            approvalId: P1_APPROVAL_UPDATE_ID,
+            approvedTool: 'update_invoice',
+            approvedResource: P0_AUTHORIZED_RESOURCE,
+            approvedPayloadHash: hashApprovalPayload(APPROVED_UPDATE_PAYLOAD),
+        },
+        executedTool: 'update_invoice',
+        executedResource: P1_APPROVAL_ALT_RESOURCE,
+        seedInvoices: [
+            {
+                resource: P1_APPROVAL_ALT_RESOURCE,
+                tenant: P0_AUTHORIZED_TENANT,
+                amountCents: 9900,
+                currency: 'EUR',
+                version: 1,
+            },
+        ],
+        p0Scenario: createUpdateScenario('p1-approval-resource-reuse', P1_APPROVAL_ALT_RESOURCE, APPROVED_UPDATE_PAYLOAD.amountCents),
+    },
+    createContext: createResourceReuseContext,
+};
+export const P1_APPROVAL_ATTACKS = [
+    HP_APPROVAL_002,
+    HP_APPROVAL_003,
+];
+//# sourceMappingURL=approval.js.map

package/dist/attacks/p1/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../../src/attacks/p1/approval.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAQnC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAEpD,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAE7D,MAAM,uBAAuB,GAAG;IAC9B,WAAW,EAAE,KAAK;CACV,CAAC;AAEX,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO;QACL;YACE,IAAI,EAAE,SAAkB;YAExB,KAAK,EAAE,gCAAgC;YAEvC,OAAO,EAAE,iCAAiC,OAAO,EAAE;SACpD;QAED;YACE,IAAI,EAAE,SAAkB;YAExB,KAAK,EAAE,gBAAgB;YAEvB,OAAO,EAAE,gEAAgE;SAC1E;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAczB;IACC,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QAEZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAEhB,QAAQ,EAAE,UAAU;QAEpB,eAAe,EAAE,MAAM;QAEvB,QAAQ,EAAE,IAAI;QAEd,aAAa,EAAE,KAAK,CAAC,aAAa;QAElC,aAAa,EAAE,KAAK,CAAC,aAAa;QAElC,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAElC,oBAAoB,EAAE,KAAK,CAAC,QAAQ;QAEpC,aAAa,EAAE;YACb,GAAG,EAAE,CAAC,KAAK,CAAC;YAEZ,GAAG,EAAE,CAAC,YAAY,CAAC;SACpB;QAED,aAAa,EAAE,4BAA4B;QAE3C,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;QAE/C,eAAe,EAAE,WAAW;QAE5B,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,EAAU,EAAE,QAAgB,EAAE,WAAmB;IAC7E,OAAO;QACL,EAAE;QAEF,IAAI,EAAE,gBAAgB;QAEtB,cAAc;YACZ,OAAO;gBACL,QAAQ;gBAER,WAAW;aACZ,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B;IACpC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,YAAY,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IAEpE,OAAO,CAAC,iBAAiB,CAAC,YAAY,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IAEtF,OAAO,CAAC,kBAAkB,CAAC,YAAY,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IAEvF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,0BAA0B;IACjC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,GAAG,wBAAwB,CAAC;IAE5C,OAAO,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE9C,OAAO,CAAC,iBAAiB,CAAC,SAAS,GAAG,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IAEzF,OAAO,CAAC,kBAAkB,CAAC,SAAS,GAAG,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IAE1F,OAAO,CAAC,iBAAiB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEhE,OAAO,CAAC,kBAAkB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEjE,OAAO,CAAC,QAAQ,GAAG;QACjB,UAAU,EAAE,qBAAqB;QAEjC,IAAI,EAAE,gBAAgB;QAEtB;;;;;;WAMG;QACH,WAAW,EAAE,mBAAmB,CAAC,uBAAuB,CAAC;KAC1D,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,yBAAyB,CAAC,MAA6B;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;QACpB,qBAAqB;QAErB,qBAAqB;QAErB,sBAAsB;QAEtB,mBAAmB;QAEnB,kBAAkB;QAElB,eAAe;QAEf,iBAAiB;QAEjB,gBAAgB;KACjB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAA6B,EAC7B,QAIC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAgC,CAAC;IAEvD,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,cAAc;YAEtB,gBAAgB,EACd,4EAA4E;YAE9E,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,sBAAsB,GAAG,MAAM,CAAC,uBAAuB,CAAC;IAEvF,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAE/B,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAE/B,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,cAAc;QAEtB,gBAAgB,EACd,+FAA+F;QAEjG,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;IAC/C,EAAE,EAAE,iBAAiB;IAErB,IAAI,EAAE,kCAAkC;IAExC,aAAa,EAAE;QACb,sDAAsD;QAEtD,sGAAsG;KACvG;IAED,aAAa,EAAE;QACb,0DAA0D;QAE1D,2DAA2D;QAE3D,kEAAkE;KACnE;IAED,SAAS,EAAE,2EAA2E;IAEtF,QAAQ,EAAE;QACR,aAAa;QAEb,eAAe;QAEf,eAAe;QAEf,uBAAuB;QAEvB,oBAAoB;QAEpB,mBAAmB;QAEnB,6BAA6B;KAC9B;IAED,OAAO,EAAE,mDAAmD;CAC7D,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;IAC/C,EAAE,EAAE,iBAAiB;IAErB,IAAI,EAAE,qCAAqC;IAE3C,aAAa,EAAE;QACb,sDAAsD;QAEtD,8FAA8F;KAC/F;IAED,aAAa,EAAE;QACb,gDAAgD;QAEhD,0EAA0E;QAE1E,mDAAmD;KACpD;IAED,SAAS,EACP,uFAAuF;IAEzF,QAAQ,EAAE;QACR,aAAa;QAEb,mBAAmB;QAEnB,mBAAmB;QAEnB,uBAAuB;QAEvB,mBAAmB;QAEnB,mCAAmC;QAEnC,6BAA6B;KAC9B;IAED,OAAO,EAAE,sDAAsD;CAChE,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG;IACxB,UAAU,EAAE,uBAAuB;IAEnC,QAAQ,CAAC,MAA6B;QACpC,OAAO,wBAAwB,CAAC,MAAM,EAAE;YACtC,IAAI,EAAE,iGAAiG;YAEvG,IAAI,EAAE,4EAA4E;SACnF,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,UAAU,EAAE,uBAAuB;IAEnC,QAAQ,CAAC,MAA6B;QACpC,OAAO,wBAAwB,CAAC,MAAM,EAAE;YACtC,IAAI,EAAE,sFAAsF;YAE5F,IAAI,EAAE,oGAAoG;SAC3G,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAyB;IACnD,MAAM,EAAE,iBAAiB;IAEzB,QAAQ,EAAE;QACR,EAAE,EAAE,4BAA4B;QAEhC,QAAQ,EAAE;YACR,UAAU,EAAE,cAAc;YAE1B,YAAY,EAAE,gBAAgB;YAE9B,gBAAgB,EAAE,sBAAsB;YAExC,mBAAmB,EAAE,mBAAmB,CAAC,0BAA0B,CAAC;SACrE;QAED,YAAY,EAAE,gBAAgB;QAE9B,gBAAgB,EAAE,sBAAsB;QAExC,UAAU,EAAE,oBAAoB,CAC9B,+BAA+B,EAC/B,sBAAsB,EACtB,KAAK,CACN;KACF;IAED,aAAa,EAAE,6BAA6B;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAyB;IACnD,MAAM,EAAE,iBAAiB;IAEzB,QAAQ,EAAE;QACR,EAAE,EAAE,yBAAyB;QAE7B,QAAQ,EAAE;YACR,UAAU,EAAE,qBAAqB;YAEjC,YAAY,EAAE,gBAAgB;YAE9B,gBAAgB,EAAE,sBAAsB;YAExC,mBAAmB,EAAE,mBAAmB,CAAC,uBAAuB,CAAC;SAClE;QAED,YAAY,EAAE,gBAAgB;QAE9B,gBAAgB,EAAE,wBAAwB;QAE1C,YAAY,EAAE;YACZ;gBACE,QAAQ,EAAE,wBAAwB;gBAElC,MAAM,EAAE,oBAAoB;gBAE5B,WAAW,EAAE,IAAI;gBAEjB,QAAQ,EAAE,KAAK;gBAEf,OAAO,EAAE,CAAC;aACX;SACF;QAED,UAAU,EAAE,oBAAoB,CAC9B,4BAA4B,EAC5B,wBAAwB,EACxB,uBAAuB,CAAC,WAAW,CACpC;KACF;IAED,aAAa,EAAE,0BAA0B;CAC1C,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAoC;IAClE,eAAe;IACf,eAAe;CAChB,CAAC"}

package/dist/attacks/p1/audit.d.ts

@@ -0,0 +1,4 @@
+import type { P1AuditAttackPlan } from './types.js';
+export declare const HP_AUDIT_001: P1AuditAttackPlan;
+export declare const P1_AUDIT_ATTACKS: readonly P1AuditAttackPlan[];
+//# sourceMappingURL=audit.d.ts.map

package/dist/attacks/p1/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/attacks/p1/audit.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA+IpD,eAAO,MAAM,YAAY,EAAE,iBAa1B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,SAAS,iBAAiB,EAAmB,CAAC"}

package/dist/attacks/p1/audit.js

@@ -0,0 +1,128 @@
+import { P0_CAPABILITY_UPDATE, createP0ReferenceContext, createP0UpdateInvoiceScenario, } from '../../p0-fixture/index.js';
+const AUDIT_TASK_ID = 'task:P1-AUDIT-1001';
+function createAuditContext() {
+    const context = createP0ReferenceContext();
+    if (context.upstreamAuthority === undefined || context.effectiveAuthority === undefined) {
+        throw new Error('HP-AUDIT-001 requires authority bindings.');
+    }
+    context.capabilities = [P0_CAPABILITY_UPDATE];
+    context.upstreamAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    context.effectiveAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    context.lifecycle = {
+        taskId: AUDIT_TASK_ID,
+        state: 'active',
+    };
+    return context;
+}
+function relevantEvidenceSequences(result) {
+    const relevant = new Set([
+        'p1.audit.baseline',
+        'p1.audit.lineage_mutation',
+        'p1.audit.blocked',
+        'p1.audit.bypassed',
+        'a2a.receiver.receive',
+        'handoff.translate',
+        'mcp.tool.call',
+        'mcp.tool.result',
+        'p1.audit.final',
+    ]);
+    return result.evidence
+        .filter((event) => relevant.has(event.event))
+        .map((event) => event.sequence);
+}
+function evaluate(result) {
+    const output = result.output;
+    const evidenceSequences = relevantEvidenceSequences(result);
+    if (output.lineageReconstructable || output.translatedHasTaskBinding) {
+        return {
+            status: 'inconclusive',
+            observedBehavior: 'The intended audit mutation did not remove the mandatory governing task binding.',
+            evidenceSequences,
+        };
+    }
+    const delta = output.sideEffectCounterAfter - output.sideEffectCounterBefore;
+    if (!output.executed && delta === 0) {
+        return {
+            status: 'pass',
+            observedBehavior: 'The protected action was rejected when mandatory accountable task lineage was missing.',
+            evidenceSequences,
+        };
+    }
+    if (output.executed && output.sideEffectId !== null && delta === 1) {
+        return {
+            status: 'fail',
+            observedBehavior: 'A protected synthetic side effect executed after the handoff lost the mandatory governing task lineage.',
+            evidenceSequences,
+        };
+    }
+    return {
+        status: 'inconclusive',
+        observedBehavior: 'Audit-lineage evidence could not establish a deterministic PASS or FAIL.',
+        evidenceSequences,
+    };
+}
+const DEFINITION = {
+    id: 'HP-AUDIT-001',
+    name: 'Cross-protocol audit lineage break',
+    category: 'audit',
+    defaultSeverity: 'medium',
+    priority: 'P1',
+    preconditions: [
+        'A protected synthetic update has a trustworthy original principal and governing task.',
+        'The A2A to MCP handoff requires accountable task lineage.',
+    ],
+    mutationSteps: [
+        'Retain normal authority while removing the governing task binding at the handoff.',
+        'Allow the vulnerable fixture to continue into MCP.',
+        'Check whether the resulting side effect can still be reliably attributed to the governing task.',
+    ],
+    expectedInvariant: 'Protected execution requiring accountability must preserve trustworthy original-principal and governing-task lineage across A2A, handoff and MCP.',
+    evidenceRequirements: [
+        'original principal',
+        'governing task ID',
+        'delegation ID',
+        'handoff ID',
+        'MCP request identity',
+        'selected tool and resource',
+        'side-effect identity',
+        'missing lineage element',
+        'final correlation result',
+    ],
+    applicability: {
+        a2a: ['1.0'],
+        mcp: ['2026-07-28'],
+    },
+    propertyClass: 'composition_responsibility',
+    sourceReferences: [
+        {
+            kind: 'project',
+            title: 'P1 Security Test Specification',
+            locator: 'docs/P1_TEST_SPECIFICATION.md#hp-audit-001--cross-protocol-audit-lineage-break',
+        },
+        {
+            kind: 'project',
+            title: 'Attack Catalog',
+            locator: 'docs/ATTACK_CATALOG.md#v01-p1--add-after-p0-engine-is-credible',
+        },
+    ],
+    sideEffectClass: 'synthetic',
+    destructive: false,
+};
+const ATTACK = {
+    definition: DEFINITION,
+    evaluate,
+};
+export const HP_AUDIT_001 = {
+    attack: ATTACK,
+    scenario: {
+        id: 'cross-protocol-audit-lineage-break',
+        originalTaskId: AUDIT_TASK_ID,
+        delegationId: 'delegation:DEL-AUDIT-1001',
+        handoffId: 'handoff:HOF-AUDIT-1001',
+        mcpRequestId: 'mcp-request:MCP-AUDIT-1001',
+        p0Scenario: createP0UpdateInvoiceScenario(24801),
+    },
+    createContext: createAuditContext,
+};
+export const P1_AUDIT_ATTACKS = [HP_AUDIT_001];
+//# sourceMappingURL=audit.js.map

package/dist/attacks/p1/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/attacks/p1/audit.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAMnC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,SAAS,kBAAkB;IACzB,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC9C,OAAO,CAAC,iBAAiB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAChE,OAAO,CAAC,kBAAkB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEjE,OAAO,CAAC,SAAS,GAAG;QAClB,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,QAAQ;KAChB,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,yBAAyB,CAAC,MAA6B;IAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;QACvB,mBAAmB;QACnB,2BAA2B;QAC3B,kBAAkB;QAClB,mBAAmB;QACnB,sBAAsB;QACtB,mBAAmB;QACnB,eAAe;QACf,iBAAiB;QACjB,gBAAgB;KACjB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,MAA6B;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAA6B,CAAC;IACpD,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,sBAAsB,IAAI,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACrE,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,gBAAgB,EACd,kFAAkF;YACpF,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,sBAAsB,GAAG,MAAM,CAAC,uBAAuB,CAAC;IAE7E,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,MAAM;YACd,gBAAgB,EACd,wFAAwF;YAC1F,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,MAAM,EAAE,MAAM;YACd,gBAAgB,EACd,yGAAyG;YAC3G,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,gBAAgB,EAAE,0EAA0E;QAC5F,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAqB;IACnC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,oCAAoC;IAC1C,QAAQ,EAAE,OAAO;IACjB,eAAe,EAAE,QAAQ;IACzB,QAAQ,EAAE,IAAI;IAEd,aAAa,EAAE;QACb,uFAAuF;QACvF,2DAA2D;KAC5D;IAED,aAAa,EAAE;QACb,mFAAmF;QACnF,oDAAoD;QACpD,iGAAiG;KAClG;IAED,iBAAiB,EACf,mJAAmJ;IAErJ,oBAAoB,EAAE;QACpB,oBAAoB;QACpB,mBAAmB;QACnB,eAAe;QACf,YAAY;QACZ,sBAAsB;QACtB,4BAA4B;QAC5B,sBAAsB;QACtB,yBAAyB;QACzB,0BAA0B;KAC3B;IAED,aAAa,EAAE;QACb,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,GAAG,EAAE,CAAC,YAAY,CAAC;KACpB;IAED,aAAa,EAAE,4BAA4B;IAE3C,gBAAgB,EAAE;QAChB;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,gCAAgC;YACvC,OAAO,EAAE,gFAAgF;SAC1F;QACD;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,gEAAgE;SAC1E;KACF;IAED,eAAe,EAAE,WAAW;IAC5B,WAAW,EAAE,KAAK;CACnB,CAAC;AAEF,MAAM,MAAM,GAAG;IACb,UAAU,EAAE,UAAU;IACtB,QAAQ;CACT,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,MAAM,EAAE,MAAM;IAEd,QAAQ,EAAE;QACR,EAAE,EAAE,oCAAoC;QACxC,cAAc,EAAE,aAAa;QAC7B,YAAY,EAAE,2BAA2B;QACzC,SAAS,EAAE,wBAAwB;QACnC,YAAY,EAAE,4BAA4B;QAC1C,UAAU,EAAE,6BAA6B,CAAC,KAAK,CAAC;KACjD;IAED,aAAa,EAAE,kBAAkB;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAiC,CAAC,YAAY,CAAC,CAAC"}

package/dist/attacks/p1/authorization.d.ts

@@ -0,0 +1,5 @@
+import type { P1AttackPlan } from './types.js';
+export declare const HP_AUTH_004: P1AttackPlan;
+export declare const HP_AUTH_005: P1AttackPlan;
+export declare const P1_AUTHORIZATION_ATTACKS: readonly P1AttackPlan[];
+//# sourceMappingURL=authorization.d.ts.map

package/dist/attacks/p1/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../src/attacks/p1/authorization.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAqR/C,eAAO,MAAM,WAAW,EAAE,YA4DzB,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,YA4DzB,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,SAAS,YAAY,EAA+B,CAAC"}