kiokuko-dsh 0.1.0

package/dist/security/sanitize.js

@@ -0,0 +1,174 @@
+import path from 'node:path';
+import { findSecret } from '../memory/secrets.js';
+import { KiokukoError } from '../errors.js';
+import { MAX_PREVIEW_BYTES } from '../ledger/types.js';
+export const HARMLESS_ENV_KEYS = new Set(['CI', 'NODE_ENV', 'TERM', 'LANG', 'LC_ALL', 'LC_CTYPE']);
+const SENSITIVE_KEY = /(?:password|passwd|secret|token|apikey|api[-_]?key|authorization|cookie|credential|private[-_]?key|client[-_]?secret|refresh[-_]?token|access[-_]?token)/i;
+const SENSITIVE_CONTAINER_KEY = /^(?:credentials|headers)$/i;
+const HIDDEN_REASONING_KEY = /(?:chain[-_]?of[-_]?thought|hidden[-_]?reasoning|private[-_]?reasoning|internal[-_]?monologue)/i;
+const PREVIEW_KEY = /^(?:stdout|stderr|output|preview|excerpt|diff)$/i;
+const PATH_KEY = /(?:^|[-_])(path|file|filename|locator|cwd|directory|workspace|target)$/i;
+function security(message) {
+    throw new KiokukoError('VALIDATION_ERROR', message);
+}
+function secretKey() {
+    throw new KiokukoError('SECURITY_REJECTION', 'JSON object key contains secret material');
+}
+function isPlainObject(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function jsonValue(value) {
+    if (value === null || typeof value === 'boolean' || typeof value === 'string')
+        return true;
+    if (typeof value === 'number')
+        return Number.isFinite(value);
+    if (Array.isArray(value))
+        return value.every(jsonValue);
+    return isPlainObject(value) && Object.values(value).every(jsonValue);
+}
+function pathLabel(segments) {
+    return segments.length === 0 ? '$' : `$${segments.map((segment) => `[${JSON.stringify(segment)}]`).join('')}`;
+}
+function boundaryPrefix(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+}
+function normalizeAbsolutePath(value, options) {
+    if (!path.isAbsolute(value))
+        return undefined;
+    const absolute = path.normalize(value);
+    if (options.workspace) {
+        const workspace = path.resolve(options.workspace);
+        if (boundaryPrefix(workspace, absolute)) {
+            const relative = path.relative(workspace, absolute).split(path.sep).join('/');
+            return { value: relative || '.', kind: 'home_path' };
+        }
+    }
+    if (options.home) {
+        const home = path.resolve(options.home);
+        if (boundaryPrefix(home, absolute)) {
+            const relative = path.relative(home, absolute).split(path.sep).join('/');
+            return { value: relative ? `<HOME>/${relative}` : '<HOME>', kind: 'home_path' };
+        }
+    }
+    return undefined;
+}
+function normalizeUrl(value) {
+    if (!/^[a-z][a-z\d+.-]*:\/\//i.test(value))
+        return undefined;
+    try {
+        const url = new URL(value);
+        return `${url.protocol}//${url.host}${url.pathname}`;
+    }
+    catch {
+        return undefined;
+    }
+}
+function truncateUtf8(value, maxBytes) {
+    if (Buffer.byteLength(value, 'utf8') <= maxBytes)
+        return value;
+    let result = '';
+    for (const character of value) {
+        const next = result + character;
+        if (Buffer.byteLength(`${next}…`, 'utf8') > maxBytes)
+            break;
+        result = next;
+    }
+    return `${result}…`;
+}
+function sanitizeNode(value, segments, options, redactions, truncated, keyHint) {
+    if (value === null || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            security('Value must contain only finite JSON numbers');
+        return value;
+    }
+    if (typeof value === 'string') {
+        let text = value;
+        const label = pathLabel(segments);
+        const secret = findSecret(text);
+        if (secret) {
+            redactions.push({ path: label, kind: 'secret_pattern' });
+            return `[REDACTED:${secret.kind}]`;
+        }
+        const url = normalizeUrl(text);
+        if (url !== undefined) {
+            if (url !== text)
+                redactions.push({ path: label, kind: 'url' });
+            text = url;
+        }
+        else if (PATH_KEY.test(keyHint ?? '') || path.isAbsolute(text)) {
+            const normalized = normalizeAbsolutePath(text, options);
+            if (normalized) {
+                if (normalized.value !== text)
+                    redactions.push({ path: label, kind: normalized.kind });
+                text = normalized.value;
+            }
+        }
+        if (keyHint && PREVIEW_KEY.test(keyHint) && Buffer.byteLength(text, 'utf8') > MAX_PREVIEW_BYTES) {
+            text = truncateUtf8(text, MAX_PREVIEW_BYTES);
+            redactions.push({ path: label, kind: 'preview_truncated' });
+            truncated.push(label);
+        }
+        return text;
+    }
+    if (Array.isArray(value))
+        return value.map((child, index) => sanitizeNode(child, [...segments, String(index)], options, redactions, truncated, keyHint));
+    if (!isPlainObject(value))
+        security('Value must be JSON-compatible');
+    const result = {};
+    for (const [key, child] of Object.entries(value)) {
+        if (findSecret(key))
+            secretKey();
+        const childPath = [...segments, key];
+        const label = pathLabel(childPath);
+        if (HIDDEN_REASONING_KEY.test(key)) {
+            redactions.push({ path: label, kind: 'hidden_reasoning' });
+            continue;
+        }
+        if (/^(?:env|environment)$/i.test(key)) {
+            if (!isPlainObject(child)) {
+                redactions.push({ path: label, kind: 'environment_value' });
+                continue;
+            }
+            const environment = {};
+            for (const [envKey, envValue] of Object.entries(child)) {
+                if (!HARMLESS_ENV_KEYS.has(envKey)) {
+                    redactions.push({ path: pathLabel([...childPath, envKey]), kind: 'environment_value' });
+                    continue;
+                }
+                environment[envKey] = sanitizeNode(envValue, [...childPath, envKey], options, redactions, truncated, envKey);
+            }
+            result[key] = environment;
+            continue;
+        }
+        if (SENSITIVE_KEY.test(key) && !SENSITIVE_CONTAINER_KEY.test(key)) {
+            redactions.push({ path: label, kind: 'sensitive_key' });
+            result[key] = '[REDACTED]';
+            continue;
+        }
+        result[key] = sanitizeNode(child, childPath, options, redactions, truncated, key);
+    }
+    return result;
+}
+export function sanitizeJson(value, options = {}) {
+    if (!jsonValue(value))
+        security('Value must be JSON-compatible');
+    const effectiveOptions = {};
+    if (options.workspace !== undefined)
+        effectiveOptions.workspace = options.workspace;
+    const home = options.home ?? process.env.HOME;
+    if (home !== undefined)
+        effectiveOptions.home = home;
+    const redactions = [];
+    const truncated = [];
+    const sanitized = sanitizeNode(value, [], effectiveOptions, redactions, truncated);
+    redactions.sort((left, right) => left.path < right.path ? -1 : left.path > right.path ? 1 : left.kind < right.kind ? -1 : left.kind > right.kind ? 1 : 0);
+    truncated.sort();
+    return { value: sanitized, redactions, truncated };
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/security/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/security/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAA4E,MAAM,oBAAoB,CAAC;AAEjI,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAEnG,MAAM,aAAa,GAAG,2JAA2J,CAAC;AAClL,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AAC7D,MAAM,oBAAoB,GAAG,iGAAiG,CAAC;AAC/H,MAAM,WAAW,GAAG,kDAAkD,CAAC;AACvE,MAAM,QAAQ,GAAG,yEAAyE,CAAC;AAE3F,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,0CAA0C,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,SAAS,CAAC,QAAkB;IACnC,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAChH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,SAAiB;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,OAA4B;IACxE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9E,OAAO,EAAE,KAAK,EAAE,QAAQ,IAAI,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,QAAgB;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC;QAChC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ;YAAE,MAAM;QAC5D,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,CAAC;AACtB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,QAAkB,EAAE,OAA4B,EAAE,UAAuB,EAAE,SAAmB,EAAE,OAAgB;IACpJ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,6CAA6C,CAAC,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,EAAE,CAAC;YACX,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACzD,OAAO,aAAa,MAAM,CAAC,IAAI,GAAG,CAAC;QACrC,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,GAAG,KAAK,IAAI;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,IAAI,GAAG,GAAG,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI;oBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvF,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,IAAI,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,iBAAiB,EAAE,CAAC;YAChG,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACzJ,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAErE,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC5D,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAA8B,EAAE,CAAC;YAClD,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACxF,SAAS;gBACX,CAAC;gBACD,WAAW,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAC/G,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,UAA+B,EAAE;IAC5E,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAwB,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,gBAAgB,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9C,IAAI,IAAI,KAAK,SAAS;QAAE,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAC;IACrD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACnF,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1J,SAAS,CAAC,IAAI,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACrD,CAAC"}

package/dist/serialization/boundary-json.d.ts

@@ -0,0 +1,20 @@
+export type BoundaryJsonValue = null | boolean | number | string | BoundaryJsonValue[] | {
+    [key: string]: BoundaryJsonValue;
+};
+export interface BoundaryJsonCloneOptions {
+    readonly failure: () => Error;
+    readonly maximumDepth?: number;
+    readonly maximumNodes?: number;
+    readonly maximumStringBytes?: number;
+}
+/** JSON text is Unicode data, not an arbitrary sequence of UTF-16 code units. */
+export declare function isWellFormedUnicode(value: string): boolean;
+/** Clone a hostile JSON boundary through data descriptors only. */
+export declare function cloneBoundaryJson(value: unknown, options: BoundaryJsonCloneOptions, seen?: Set<object>, depth?: number, budget?: {
+    nodes: number;
+    stringBytes: number;
+}): BoundaryJsonValue;
+/** Serialize an already-cloned JSON boundary without consulting inherited
+ * `toJSON` hooks or any methods on caller-controlled arrays and objects. */
+export declare function stringifyBoundaryJson(value: BoundaryJsonValue): string;
+//# sourceMappingURL=boundary-json.d.ts.map

package/dist/serialization/boundary-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary-json.d.ts","sourceRoot":"","sources":["../../src/serialization/boundary-json.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,iBAAiB,GACzB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,iBAAiB,EAAE,GACnB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAY1D;AASD,mEAAmE;AACnE,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,wBAAwB,EACjC,IAAI,cAAoB,EACxB,KAAK,SAAI,EACT,MAAM;;;CAA+B,GACpC,iBAAiB,CA2DnB;AAED;4EAC4E;AAC5E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAoBtE"}

package/dist/serialization/boundary-json.js

@@ -0,0 +1,129 @@
+import { isProxy } from 'node:util/types';
+/** JSON text is Unicode data, not an arbitrary sequence of UTF-16 code units. */
+export function isWellFormedUnicode(value) {
+    for (let index = 0; index < value.length; index += 1) {
+        const codeUnit = value.charCodeAt(index);
+        if (codeUnit >= 0xD800 && codeUnit <= 0xDBFF) {
+            const trailing = value.charCodeAt(index + 1);
+            if (!(trailing >= 0xDC00 && trailing <= 0xDFFF))
+                return false;
+            index += 1;
+            continue;
+        }
+        if (codeUnit >= 0xDC00 && codeUnit <= 0xDFFF)
+            return false;
+    }
+    return true;
+}
+function canonicalArrayIndex(value) {
+    if (value === '0')
+        return true;
+    if (!/^[1-9]\d*$/u.test(value))
+        return false;
+    const index = Number(value);
+    return Number.isSafeInteger(index) && index < 4_294_967_295 && String(index) === value;
+}
+/** Clone a hostile JSON boundary through data descriptors only. */
+export function cloneBoundaryJson(value, options, seen = new Set(), depth = 0, budget = { nodes: 0, stringBytes: 0 }) {
+    budget.nodes += 1;
+    if (budget.nodes > (options.maximumNodes ?? Number.MAX_SAFE_INTEGER))
+        throw options.failure();
+    if (value === null || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'string') {
+        if (!isWellFormedUnicode(value))
+            throw options.failure();
+        budget.stringBytes += Buffer.byteLength(value, 'utf8');
+        if (budget.stringBytes > (options.maximumStringBytes ?? Number.MAX_SAFE_INTEGER))
+            throw options.failure();
+        return value;
+    }
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw options.failure();
+        return value;
+    }
+    if (typeof value !== 'object' || isProxy(value)
+        || seen.has(value) || depth >= (options.maximumDepth ?? 128))
+        throw options.failure();
+    seen.add(value);
+    try {
+        const keys = Reflect.ownKeys(value);
+        if (keys.some((key) => typeof key !== 'string'))
+            throw options.failure();
+        const descriptors = new Map();
+        for (const key of keys) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (descriptor === undefined || !Object.hasOwn(descriptor, 'value'))
+                throw options.failure();
+            descriptors.set(key, descriptor);
+        }
+        if (Array.isArray(value)) {
+            if (Object.getPrototypeOf(value) !== Array.prototype
+                || descriptors.size !== value.length + 1 || !descriptors.has('length'))
+                throw options.failure();
+            const result = [];
+            for (let index = 0; index < value.length; index += 1) {
+                const descriptor = descriptors.get(String(index));
+                if (descriptor === undefined || descriptor.enumerable !== true || !canonicalArrayIndex(String(index))) {
+                    throw options.failure();
+                }
+                result.push(cloneBoundaryJson(descriptor.value, options, seen, depth + 1, budget));
+            }
+            return result;
+        }
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null)
+            throw options.failure();
+        const result = Object.create(null);
+        for (const key of [...descriptors.keys()].sort()) {
+            if (!isWellFormedUnicode(key))
+                throw options.failure();
+            const descriptor = descriptors.get(key);
+            if (descriptor.enumerable !== true)
+                throw options.failure();
+            budget.stringBytes += Buffer.byteLength(key, 'utf8');
+            if (budget.stringBytes > (options.maximumStringBytes ?? Number.MAX_SAFE_INTEGER))
+                throw options.failure();
+            Object.defineProperty(result, key, {
+                value: cloneBoundaryJson(descriptor.value, options, seen, depth + 1, budget),
+                enumerable: true,
+                writable: true,
+                configurable: true,
+            });
+        }
+        return result;
+    }
+    finally {
+        seen.delete(value);
+    }
+}
+/** Serialize an already-cloned JSON boundary without consulting inherited
+ * `toJSON` hooks or any methods on caller-controlled arrays and objects. */
+export function stringifyBoundaryJson(value) {
+    if (value === null)
+        return 'null';
+    if (typeof value === 'boolean' || typeof value === 'number')
+        return String(value);
+    if (typeof value === 'string')
+        return JSON.stringify(value);
+    if (Array.isArray(value)) {
+        let serialized = '[';
+        for (let index = 0; index < value.length; index += 1) {
+            if (index > 0)
+                serialized += ',';
+            serialized += stringifyBoundaryJson(value[index]);
+        }
+        return `${serialized}]`;
+    }
+    let serialized = '{';
+    const keys = Object.keys(value);
+    for (let index = 0; index < keys.length; index += 1) {
+        if (index > 0)
+            serialized += ',';
+        const key = keys[index];
+        serialized += `${JSON.stringify(key)}:${stringifyBoundaryJson(value[key])}`;
+    }
+    return `${serialized}}`;
+}
+//# sourceMappingURL=boundary-json.js.map

package/dist/serialization/boundary-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary-json.js","sourceRoot":"","sources":["../../src/serialization/boundary-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAiB1C,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9D,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,aAAa,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;AACzF,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAC/B,KAAc,EACd,OAAiC,EACjC,OAAO,IAAI,GAAG,EAAU,EACxB,KAAK,GAAG,CAAC,EACT,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE;IAErC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAClB,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,CAAC;QAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9F,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,MAAM,CAAC,gBAAgB,CAAC;YAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1G,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;WAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;QAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACxF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;YAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACzE,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;QAC1D,KAAK,MAAM,GAAG,IAAI,IAAgB,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC;gBAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC7F,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;mBAC/C,WAAW,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAClG,MAAM,MAAM,GAAwB,EAAE,CAAC;YACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC1B,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAsC,CAAC;QACxE,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;gBAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAuB,CAAC;YAC9D,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI;gBAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5D,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,MAAM,CAAC,gBAAgB,CAAC;gBAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC1G,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE;gBACjC,KAAK,EAAE,iBAAiB,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC;gBAC5E,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,KAAwB;IAC5D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,UAAU,GAAG,GAAG,CAAC;QACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,KAAK,GAAG,CAAC;gBAAE,UAAU,IAAI,GAAG,CAAC;YACjC,UAAU,IAAI,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAsB,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,GAAG,UAAU,GAAG,CAAC;IAC1B,CAAC;IACD,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,GAAG,CAAC;YAAE,UAAU,IAAI,GAAG,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAW,CAAC;QAClC,UAAU,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC,EAAE,CAAC;IACnG,CAAC;IACD,OAAO,GAAG,UAAU,GAAG,CAAC;AAC1B,CAAC"}

package/dist/serialization/envelope.d.ts

@@ -0,0 +1,20 @@
+export interface SuccessEnvelope<T = unknown> {
+    apiVersion: '1';
+    ok: true;
+    operation: string;
+    data: T;
+    meta?: Record<string, unknown>;
+}
+export interface ErrorEnvelope {
+    apiVersion: '1';
+    ok: false;
+    operation: string;
+    error: {
+        code: string;
+        message: string;
+        details: Record<string, unknown>;
+    };
+}
+export declare function successEnvelope<T>(operation: string, data: T, meta?: Record<string, unknown>): SuccessEnvelope<T>;
+export declare function errorEnvelope(operation: string, error: unknown): ErrorEnvelope;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/serialization/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/serialization/envelope.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,UAAU,EAAE,GAAG,CAAC;IAChB,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,CAAC,CAAC;IACR,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,GAAG,CAAC;IAChB,EAAE,EAAE,KAAK,CAAC;IACV,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;CACH;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAEjH;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,aAAa,CAK9E"}

package/dist/serialization/envelope.js

@@ -0,0 +1,11 @@
+import { KiokukoError } from '../errors.js';
+export function successEnvelope(operation, data, meta) {
+    return { apiVersion: '1', ok: true, operation, data, ...(meta === undefined ? {} : { meta }) };
+}
+export function errorEnvelope(operation, error) {
+    if (error instanceof KiokukoError) {
+        return { apiVersion: '1', ok: false, operation, error: { code: error.code, message: error.message, details: error.details } };
+    }
+    return { apiVersion: '1', ok: false, operation, error: { code: 'INTEGRITY_ERROR', message: 'Unexpected internal error', details: {} } };
+}
+//# sourceMappingURL=envelope.js.map

package/dist/serialization/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/serialization/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAqB5C,MAAM,UAAU,eAAe,CAAI,SAAiB,EAAE,IAAO,EAAE,IAA8B;IAC3F,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,KAAc;IAC7D,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAClC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IAChI,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;AAC1I,CAAC"}

package/dist/serialization/validate.d.ts

@@ -0,0 +1,38 @@
+export declare const ENTRY_KINDS: readonly ["fact", "decision", "lesson", "preference", "reference"];
+export declare const ENTRY_STATUSES: readonly ["candidate", "verified", "superseded"];
+export declare const TRUST_LEVELS: readonly ["untrusted", "user_asserted", "source_verified", "system_verified"];
+export type EntryKind = (typeof ENTRY_KINDS)[number];
+export type EntryStatus = (typeof ENTRY_STATUSES)[number];
+export type TrustLevel = (typeof TRUST_LEVELS)[number];
+export type JsonObject = {
+    [key: string]: JsonValue;
+};
+export type JsonValue = null | boolean | number | string | JsonValue[] | JsonObject;
+export interface ValidatedRecordInput {
+    workspace: string;
+    kind: EntryKind;
+    status: EntryStatus;
+    title: string;
+    body: string;
+    summary: string | null;
+    scope: JsonObject;
+    provenance: JsonObject;
+    trustLevel: TrustLevel;
+    confidence: number;
+    tags: string[];
+    createdBy: string;
+    actor: string;
+}
+export type EntryRevisionHashInput = Pick<ValidatedRecordInput, 'kind' | 'title' | 'body' | 'summary' | 'scope' | 'provenance' | 'tags'>;
+/** Compare strings by ECMAScript UTF-16 code units, independent of the host locale. */
+export declare function compareCanonicalStrings(left: string, right: string): number;
+/** Return the de-duplicated persisted tag order used by all new revision hashes. */
+export declare function canonicalTagOrder(tags: readonly string[]): string[];
+/** Serialize JSON values with recursively sorted object keys and no insignificant whitespace. */
+export declare function canonicalJson(value: unknown): string;
+export declare function canonicalContentHash(value: unknown): string;
+/** Hash revision content with the current locale-independent persisted tag order. */
+export declare function canonicalEntryRevisionContentHash(input: EntryRevisionHashInput): string;
+export declare function requireWorkspace(value: unknown): string;
+export declare function validateRecordInput(value: unknown): ValidatedRecordInput;
+//# sourceMappingURL=validate.d.ts.map

package/dist/serialization/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/serialization/validate.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW,oEAAqE,CAAC;AAC9F,eAAO,MAAM,cAAc,kDAAmD,CAAC;AAC/E,eAAO,MAAM,YAAY,+EAAgF,CAAC;AAE1G,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AACrD,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,MAAM,UAAU,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AACtD,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC;AAEpF,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACvC,oBAAoB,EACpB,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,GAAG,MAAM,CACxE,CAAC;AAmFF,uFAAuF;AACvF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAG3E;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAEnE;AAED,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIpD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE3D;AAcD,qFAAqF;AACrF,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAEvF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGvD;AA4DD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CA6CxE"}