kiokuko-dsh 0.2.39 → 0.2.41

package/dist/enno-oduno/repository-state.js

@@ -1,146 +0,0 @@
-import { execFileSync } from 'node:child_process';
-import { lstatSync, readFileSync, readlinkSync, readdirSync, realpathSync } from 'node:fs';
-import path from 'node:path';
-import { KiokukoError } from '../errors.js';
-import { canonicalContentHash } from '../serialization/validate.js';
-export const REPOSITORY_STATE_POLICY_VERSION = 1;
-const MAX_FILES = 50_000;
-const MAX_FILE_BYTES = 64 * 1024 * 1024;
-const MAX_STABILITY_ATTEMPTS = 3;
-const FALLBACK_IGNORED_DIRECTORIES = new Set(['.git', 'node_modules', 'dist', 'coverage']);
-function gitOutput(root, args) {
-    try {
-        return execFileSync('git', ['-C', root, ...args], {
-            encoding: 'buffer',
-            maxBuffer: 64 * 1024 * 1024,
-            stdio: ['ignore', 'pipe', 'ignore'],
-        });
-    }
-    catch {
-        return undefined;
-    }
-}
-function nulPaths(output) {
-    return output.toString('utf8').split('\0').filter((value) => value.length > 0);
-}
-function nestedGitRepository(directory) {
-    const topLevel = gitOutput(directory, ['rev-parse', '--show-toplevel'])?.toString('utf8').trim();
-    if (topLevel === undefined || topLevel.length === 0)
-        return false;
-    try {
-        return realpathSync(topLevel) === realpathSync(directory);
-    }
-    catch {
-        return false;
-    }
-}
-function fileProjection(root, relativePath, ancestors) {
-    if (path.isAbsolute(relativePath) || relativePath.split(/[\\/]/u).includes('..')) {
-        throw new KiokukoError('SECURITY_REJECTION', 'Repository snapshot path escapes the canonical root');
-    }
-    const absolute = path.resolve(root, relativePath);
-    const relative = path.relative(root, absolute);
-    if (relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {
-        throw new KiokukoError('SECURITY_REJECTION', 'Repository snapshot path escapes the canonical root');
-    }
-    const stat = lstatSync(absolute, { throwIfNoEntry: false });
-    if (stat === undefined)
-        return { path: relativePath, type: 'missing' };
-    if (stat.isSymbolicLink())
-        return { path: relativePath, type: 'symlink', mode: stat.mode, target: readlinkSync(absolute) };
-    if (stat.isDirectory()) {
-        const nestedRoot = realpathSync(absolute);
-        if (nestedGitRepository(nestedRoot)) {
-            if (ancestors.has(nestedRoot))
-                throw new KiokukoError('INTEGRITY_ERROR', 'Repository snapshot contains a recursive Git repository');
-            const nested = captureStableRepositoryState(nestedRoot, new Set([...ancestors, nestedRoot]));
-            return {
-                path: relativePath,
-                type: 'git_repository',
-                mode: stat.mode,
-                policyVersion: nested.policyVersion,
-                contentDigest: nested.digest,
-                nestedFileCount: nested.fileCount,
-            };
-        }
-        return { path: relativePath, type: 'directory', mode: stat.mode };
-    }
-    if (!stat.isFile())
-        return { path: relativePath, type: 'other', mode: stat.mode };
-    if (stat.size > MAX_FILE_BYTES)
-        throw new KiokukoError('SECURITY_REJECTION', 'Repository snapshot file exceeds the safety limit');
-    return {
-        path: relativePath,
-        type: 'file',
-        mode: stat.mode,
-        contentDigest: canonicalContentHash(readFileSync(absolute).toString('base64')),
-    };
-}
-function fallbackPaths(root) {
-    const paths = [];
-    const visit = (directory) => {
-        for (const entry of readdirSync(directory, { withFileTypes: true })) {
-            if (entry.isDirectory() && FALLBACK_IGNORED_DIRECTORIES.has(entry.name))
-                continue;
-            const absolute = path.join(directory, entry.name);
-            const relative = path.relative(root, absolute).split(path.sep).join('/');
-            if (entry.isDirectory() && !entry.isSymbolicLink())
-                visit(absolute);
-            else
-                paths.push(relative);
-            if (paths.length > MAX_FILES)
-                throw new KiokukoError('SECURITY_REJECTION', 'Repository snapshot exceeds the file-count safety limit');
-        }
-    };
-    visit(root);
-    return paths.sort();
-}
-export function repositoryPathDigest(root, relativePath) {
-    return canonicalContentHash(fileProjection(root, relativePath, new Set([realpathSync(root)])));
-}
-export function repositoryStatePaths(root) {
-    const trackedAndUntracked = gitOutput(root, ['ls-files', '-z', '--cached', '--others', '--exclude-standard']);
-    const paths = trackedAndUntracked === undefined
-        ? fallbackPaths(root)
-        : [...new Set(nulPaths(trackedAndUntracked))].sort();
-    if (paths.length > MAX_FILES)
-        throw new KiokukoError('SECURITY_REJECTION', 'Repository snapshot exceeds the file-count safety limit');
-    return paths;
-}
-function captureRepositoryStateOnce(root, ancestors) {
-    const paths = repositoryStatePaths(root);
-    const head = gitOutput(root, ['rev-parse', '--verify', 'HEAD'])?.toString('utf8').trim() ?? null;
-    const index = gitOutput(root, ['ls-files', '-s', '-z'])?.toString('base64') ?? null;
-    const status = gitOutput(root, ['status', '--porcelain=v1', '-z', '--untracked-files=all'])?.toString('base64') ?? null;
-    const files = paths.map((relativePath) => fileProjection(root, relativePath, ancestors));
-    const fileCount = files.reduce((count, file) => (count + 1 + (typeof file.nestedFileCount === 'number' ? file.nestedFileCount : 0)), 0);
-    if (fileCount > MAX_FILES)
-        throw new KiokukoError('SECURITY_REJECTION', 'Repository snapshot exceeds the file-count safety limit');
-    return {
-        policyVersion: REPOSITORY_STATE_POLICY_VERSION,
-        digest: canonicalContentHash({
-            policyVersion: REPOSITORY_STATE_POLICY_VERSION,
-            repositoryIdentity: canonicalContentHash(root),
-            head,
-            index,
-            status,
-            files,
-        }),
-        fileCount,
-    };
-}
-function captureStableRepositoryState(root, ancestors) {
-    let previous;
-    for (let attempt = 0; attempt < MAX_STABILITY_ATTEMPTS; attempt += 1) {
-        const current = captureRepositoryStateOnce(root, ancestors);
-        if (previous !== undefined && previous.digest === current.digest && previous.fileCount === current.fileCount)
-            return current;
-        previous = current;
-    }
-    throw new KiokukoError('CONFLICT', 'Repository changed while its verification state was being captured');
-}
-export function captureRepositoryState(repositoryRoot) {
-    const root = realpathSync(repositoryRoot);
-    return captureStableRepositoryState(root, new Set([root]));
-}
-//# sourceMappingURL=repository-state.js.map

package/dist/enno-oduno/repository-state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"repository-state.js","sourceRoot":"","sources":["../../src/enno-oduno/repository-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AACjD,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAQ3F,SAAS,SAAS,CAAC,IAAY,EAAE,IAAc;IAC7C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;YAChD,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;YAC3B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,YAAoB,EAAE,SAA8B;IACxF,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3H,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAC;YACpI,MAAM,MAAM,GAAG,4BAA4B,CAAC,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7F,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,aAAa,EAAE,MAAM,CAAC,MAAM;gBAC5B,eAAe,EAAE,MAAM,CAAC,SAAS;aAClC,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAClF,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;QAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,mDAAmD,CAAC,CAAC;IAClI,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,oBAAoB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAQ,EAAE;QACxC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzE,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;gBAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;;gBAC/D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1B,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;gBAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,yDAAyD,CAAC,CAAC;QACxI,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,YAAoB;IACrE,OAAO,oBAAoB,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC9G,MAAM,KAAK,GAAG,mBAAmB,KAAK,SAAS;QAC7C,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC;QACrB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,yDAAyD,CAAC,CAAC;IACtI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY,EAAE,SAA8B;IAC9E,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACjG,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACpF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACxH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAC9C,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAClF,EAAE,CAAC,CAAC,CAAC;IACN,IAAI,SAAS,GAAG,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,yDAAyD,CAAC,CAAC;IACnI,OAAO;QACL,aAAa,EAAE,+BAA+B;QAC9C,MAAM,EAAE,oBAAoB,CAAC;YAC3B,aAAa,EAAE,+BAA+B;YAC9C,kBAAkB,EAAE,oBAAoB,CAAC,IAAI,CAAC;YAC9C,IAAI;YACJ,KAAK;YACL,MAAM;YACN,KAAK;SACN,CAAC;QACF,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY,EAAE,SAA8B;IAChF,IAAI,QAA6C,CAAC;IAClD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,sBAAsB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC;QAC7H,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,oEAAoE,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,cAAsB;IAC3D,MAAM,IAAI,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IAC1C,OAAO,4BAA4B,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/enno-oduno/sanitize.d.ts

@@ -1,17 +0,0 @@
-import type * as z from 'zod/v4';
-import { ennoAnswerSchema, finishSchema, idealSubmissionSchema, meditationSubmissionSchema, planSubmissionSchema, workReportSchema } from './schemas.js';
-type PlanSubmission = z.infer<typeof planSubmissionSchema>;
-type WorkReport = z.infer<typeof workReportSchema>;
-type EnnoAnswer = z.infer<typeof ennoAnswerSchema>;
-type FinishRequest = z.infer<typeof finishSchema>;
-type IdealSubmission = z.infer<typeof idealSubmissionSchema>;
-type MeditationSubmission = z.infer<typeof meditationSubmissionSchema>;
-export declare function verifierCommandContainsSecret(verifier: Pick<PlanSubmission['finalVerifiers'][number], 'executable' | 'args'>): boolean;
-export declare function sanitizePlanSubmission(input: PlanSubmission, repositoryRoot: string): PlanSubmission;
-export declare function sanitizeWorkReport(input: WorkReport, repositoryRoot: string): WorkReport;
-export declare function sanitizeEnnoAnswer(input: EnnoAnswer, repositoryRoot: string): EnnoAnswer;
-export declare function sanitizeFinishRequest(input: FinishRequest, repositoryRoot: string): FinishRequest;
-export declare function sanitizeIdealSubmission(input: IdealSubmission, repositoryRoot: string): IdealSubmission;
-export declare function sanitizeMeditationSubmission(input: MeditationSubmission, repositoryRoot: string): MeditationSubmission;
-export {};
-//# sourceMappingURL=sanitize.d.ts.map

package/dist/enno-oduno/sanitize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/enno-oduno/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AAIjC,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,qBAAqB,EACrB,0BAA0B,EAO1B,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB,KAAK,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAC3D,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACnD,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACnD,KAAK,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAClD,KAAK,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC7D,KAAK,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAavE,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC,GAAG,OAAO,CAOtI;AAcD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,GAAG,cAAc,CA8BpG;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,UAAU,CAGxF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,UAAU,CAIxF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,GAAG,aAAa,CAGjG;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,GAAG,eAAe,CAGvG;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,GAAG,oBAAoB,CAGtH"}

package/dist/enno-oduno/sanitize.js

@@ -1,88 +0,0 @@
-import { KiokukoError } from '../errors.js';
-import { findSecret } from '../memory/secrets.js';
-import { sanitizeJson } from '../security/sanitize.js';
-import { parseEnnoAnswer, parseFinishRequest, parseIdealSubmission, parseMeditationSubmission, parsePlanSubmission, parseWorkReport, } from './schemas.js';
-function sanitizedObject(value, repositoryRoot) {
-    const omitUndefined = (candidate) => {
-        if (Array.isArray(candidate))
-            return candidate.map(omitUndefined);
-        if (typeof candidate !== 'object' || candidate === null)
-            return candidate;
-        return Object.fromEntries(Object.entries(candidate)
-            .filter(([, child]) => child !== undefined)
-            .map(([key, child]) => [key, omitUndefined(child)]));
-    };
-    return sanitizeJson(omitUndefined(value), { workspace: repositoryRoot }).value;
-}
-export function verifierCommandContainsSecret(verifier) {
-    if (findSecret(verifier.executable) !== undefined)
-        return true;
-    return verifier.args.some((argument, index) => (findSecret(argument) !== undefined
-        || index + 1 < verifier.args.length
-            && findSecret(`${argument} ${verifier.args[index + 1]}`) !== undefined));
-}
-function assertSafeVerifierCommands(plan) {
-    const verifiers = [
-        ...plan.finalVerifiers,
-        ...plan.workPlan.units.flatMap((unit) => unit.focusedVerifiers),
-    ];
-    for (const verifier of verifiers) {
-        if (verifierCommandContainsSecret(verifier)) {
-            throw new KiokukoError('SECURITY_REJECTION', 'Verifier command resembles secret material and was rejected');
-        }
-    }
-}
-export function sanitizePlanSubmission(input, repositoryRoot) {
-    assertSafeVerifierCommands(input);
-    const workPlanWithoutVerifierCommands = {
-        ...input.workPlan,
-        units: input.workPlan.units.map((unit) => ({ ...unit, focusedVerifiers: [] })),
-    };
-    const sanitized = sanitizedObject({
-        scope: input.scope,
-        exclusions: input.exclusions,
-        acceptanceCriteria: input.acceptanceCriteria,
-        workPlan: workPlanWithoutVerifierCommands,
-        skillRequirements: input.skillRequirements,
-        advisoryDisposition: input.advisoryDisposition,
-    }, repositoryRoot);
-    const sanitizedWorkPlan = sanitized.workPlan;
-    return parsePlanSubmission({
-        ...input,
-        ...sanitized,
-        workPlan: {
-            ...sanitizedWorkPlan,
-            units: sanitizedWorkPlan.units.map((unit, index) => ({
-                ...unit,
-                focusedVerifiers: input.workPlan.units[index]?.focusedVerifiers.map((verifier) => ({
-                    ...verifier,
-                    args: [...verifier.args],
-                })) ?? [],
-            })),
-        },
-        finalVerifiers: input.finalVerifiers.map((verifier) => ({ ...verifier, args: [...verifier.args] })),
-    });
-}
-export function sanitizeWorkReport(input, repositoryRoot) {
-    const sanitized = sanitizedObject({ result: input.result }, repositoryRoot);
-    return parseWorkReport({ ...input, ...sanitized });
-}
-export function sanitizeEnnoAnswer(input, repositoryRoot) {
-    if (input.requestedChanges === undefined)
-        return input;
-    const sanitized = sanitizedObject({ requestedChanges: input.requestedChanges }, repositoryRoot);
-    return parseEnnoAnswer({ ...input, ...sanitized });
-}
-export function sanitizeFinishRequest(input, repositoryRoot) {
-    const sanitized = sanitizedObject({ review: input.review, advisoryDisposition: input.advisoryDisposition }, repositoryRoot);
-    return parseFinishRequest({ ...input, ...sanitized });
-}
-export function sanitizeIdealSubmission(input, repositoryRoot) {
-    const sanitized = sanitizedObject({ ideal: input.ideal, advisoryDisposition: input.advisoryDisposition }, repositoryRoot);
-    return parseIdealSubmission({ ...input, ...sanitized });
-}
-export function sanitizeMeditationSubmission(input, repositoryRoot) {
-    const sanitized = sanitizedObject({ meditation: input.meditation }, repositoryRoot);
-    return parseMeditationSubmission({ ...input, ...sanitized });
-}
-//# sourceMappingURL=sanitize.js.map

package/dist/enno-oduno/sanitize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/enno-oduno/sanitize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAKL,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,GAGhB,MAAM,cAAc,CAAC;AAStB,SAAS,eAAe,CAAC,KAAc,EAAE,cAAsB;IAC7D,MAAM,aAAa,GAAG,CAAC,SAAkB,EAAW,EAAE;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC1E,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;aAChD,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;aAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,OAAO,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,KAAgC,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAA+E;IAC3H,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAC7C,UAAU,CAAC,QAAQ,CAAC,KAAK,SAAS;WAC/B,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM;eAC9B,UAAU,CAAC,GAAG,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,SAAS,CACzE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAoB;IACtD,MAAM,SAAS,GAAG;QAChB,GAAG,IAAI,CAAC,cAAc;QACtB,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC;KAChE,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,6BAA6B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,6DAA6D,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAqB,EAAE,cAAsB;IAClF,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,+BAA+B,GAAG;QACtC,GAAG,KAAK,CAAC,QAAQ;QACjB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;KAC/E,CAAC;IACF,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,QAAQ,EAAE,+BAA+B;QACzC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,EAAE,cAAc,CAAC,CAAC;IACnB,MAAM,iBAAiB,GAAG,SAAS,CAAC,QAAsC,CAAC;IAC3E,OAAO,mBAAmB,CAAC;QACzB,GAAG,KAAK;QACR,GAAG,SAAS;QACZ,QAAQ,EAAE;YACR,GAAG,iBAAiB;YACpB,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBACnD,GAAG,IAAI;gBACP,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBACjF,GAAG,QAAQ;oBACX,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC;iBACzB,CAAC,CAAC,IAAI,EAAE;aACV,CAAC,CAAC;SACJ;QACD,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KACpG,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,cAAsB;IAC1E,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC;IAC5E,OAAO,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,cAAsB;IAC1E,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE,cAAc,CAAC,CAAC;IAChG,OAAO,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAoB,EAAE,cAAsB;IAChF,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,EAAE,cAAc,CAAC,CAAC;IAC5H,OAAO,kBAAkB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAsB,EAAE,cAAsB;IACpF,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,EAAE,cAAc,CAAC,CAAC;IAC1H,OAAO,oBAAoB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAA2B,EAAE,cAAsB;IAC9F,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,cAAc,CAAC,CAAC;IACpF,OAAO,yBAAyB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AAC/D,CAAC"}