open-multi-agent-kit 0.95.1 → 0.95.2

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## [Unreleased]
+
+## [0.95.2] - 2026-08-15
+
+### Changed
+
+- macOS sessions now derive replay-ledger process identity from bounded BSD `ps -o lstart=` output, so replay-lock acquisition no longer fails closed during AgentSession startup on Darwin while Linux `/proc` behavior remains unchanged.
+- The status rail now verifies connected MCP servers with protocol pings, marks dead processes as failed, and retries failed servers on a bounded slower cadence without spawning idle servers.
+- Interactive UX now includes an empty-editor affordance hint, elapsed-time and interrupt details on the working indicator, transient information notices, width-safe editor scroll borders, and opt-in footer CPU/memory metrics.
+- Extension tools can resolve timeouts from current context. The subagent extension uses this to remove task-count, concurrency, execution-budget, attempt, and outer tool-timeout caps in Ultra while preserving explicit cancellation and non-Ultra limits.
+- The startup control panel now identifies the product with `WELCOME TO OMK` instead of legacy Pi agent branding.
+- Context-budget prompts use compact metadata for valid zero-resource plans while retaining cache-state and legacy optimizer compatibility telemetry; diagnostic and non-empty plans keep full observability, and invalid budgets bypass the plan cache so diagnostics cannot be hidden by a prior hit.
+- The workspace context-budget cache scans every persisted key/value, keeps credential-shaped entries in memory only, and removes unsafe legacy snapshots instead of persisting secret-shaped text.
+- Exact context representations now reuse content-addressed cache entries across different queries and budget sizes instead of forcing avoidable misses.
+- Opt-in reasoning-router learning now isolates default ledgers and compiled bias snapshots per repository or git worktree, captures explicit manual thinking-level overrides as bounded feedback, and keeps updates behind the shipped, deterministic `omk router-feedback compile-bias` between-session command. Snapshot loading rejects nonzero biases below the strong-evidence threshold, unsafe or inconsistent counts, and duplicate cells; compilation uses an exclusive randomized temporary file before atomic rename.
+- Session bash now defaults to OS sandbox enforcement instead of ledger-only audit mode. macOS `sandbox-exec` and Linux `bwrap` restrict writes to the workspace/temp directories and disable network access; missing backends fail closed. Unwrapped `audit` and disabled `off` modes now require an explicit `OMK_BASH_SANDBOX` value, and unknown values resolve to `enforce`.
+
 ## [0.95.1] - 2026-08-01
 
 ### Added

package/README.md

@@ -170,7 +170,7 @@ npm test
 
 See [Development](https://github.com/dmae97/omk/blob/main/packages/coding-agent/docs/development.md) and [CONTRIBUTING.md](https://github.com/dmae97/omk/blob/main/CONTRIBUTING.md).
 
-Release notes: [v0.95.1](https://github.com/dmae97/omk/blob/main/.github/RELEASE_NOTES_v0.95.1.md).
+Release notes: [v0.95.2](https://github.com/dmae97/omk/blob/main/.github/RELEASE_NOTES_v0.95.2.md).
 
 ## License
 

package/dist/approvals/approval-receipt-store.d.ts

@@ -0,0 +1,18 @@
+import { type ApprovalReceipt } from "./approval-receipt.ts";
+export interface ApprovalReceiptWriteResult {
+    path: string;
+    created: boolean;
+}
+export declare class ApprovalReceiptStore {
+    readonly rootDir: string;
+    constructor(rootDir: string);
+    private ensurePrivateDirectory;
+    private assertRootUnchanged;
+    private pathFor;
+    private openReceiptForRead;
+    write(receipt: ApprovalReceipt): ApprovalReceiptWriteResult;
+    has(receiptId: string): boolean;
+    read(receiptId: string): ApprovalReceipt;
+    listReceiptIds(): string[];
+}
+//# sourceMappingURL=approval-receipt-store.d.ts.map

package/dist/approvals/approval-receipt-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-receipt-store.d.ts","sourceRoot":"","sources":["../../src/approvals/approval-receipt-store.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,KAAK,eAAe,EAAqD,MAAM,uBAAuB,CAAC;AAKhH,MAAM,WAAW,0BAA0B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CACjB;AAsDD,qBAAa,oBAAoB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,YAAY,OAAO,EAAE,MAAM,EAG1B;IAED,OAAO,CAAC,sBAAsB;IAa9B,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,kBAAkB;IAW1B,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,0BAA0B,CAkC1D;IAED,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAe9B;IAED,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAUvC;IAED,cAAc,IAAI,MAAM,EAAE,CASzB;CACD","sourcesContent":["import {\n\tcloseSync,\n\tconstants,\n\tfchmodSync,\n\tfstatSync,\n\tfsyncSync,\n\tlstatSync,\n\tmkdirSync,\n\topenSync,\n\treaddirSync,\n\treadSync,\n\twriteFileSync,\n} from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport { type ApprovalReceipt, serializeApprovalReceipt, validateApprovalReceipt } from \"./approval-receipt.ts\";\n\nconst MAX_RECEIPT_BYTES = 1024 * 1024;\nconst NOFOLLOW = constants.O_NOFOLLOW ?? 0;\n\nexport interface ApprovalReceiptWriteResult {\n\tpath: string;\n\tcreated: boolean;\n}\n\ninterface RootIdentity {\n\tdev: number;\n\tino: number;\n}\n\nfunction isErrno(error: unknown, code: string): boolean {\n\treturn error instanceof Error && \"code\" in error && error.code === code;\n}\n\nfunction assertOwnedByCurrentUser(uid: number, label: string): void {\n\tconst getuid = process.getuid;\n\tif (typeof getuid === \"function\" && uid !== getuid()) {\n\t\tthrow new Error(`${label} is not owned by the current user`);\n\t}\n}\n\nfunction receiptFileName(receiptId: string): string {\n\tif (!/^approval-[a-f0-9]{32}$/u.test(receiptId)) throw new Error(\"Approval receipt id is invalid\");\n\treturn `${receiptId}.json`;\n}\n\nfunction assertPrivateReceiptFd(fd: number, filePath: string): void {\n\tconst stat = fstatSync(fd);\n\tif (!stat.isFile()) throw new Error(`Approval receipt is not a regular file: ${filePath}`);\n\tif (stat.nlink !== 1) throw new Error(`Approval receipt must not be hard-linked: ${filePath}`);\n\tassertOwnedByCurrentUser(stat.uid, `Approval receipt ${filePath}`);\n\tif ((stat.mode & 0o777) !== 0o600) {\n\t\tthrow new Error(`Approval receipt permissions must be 0600: ${filePath}`);\n\t}\n\tif (stat.size > MAX_RECEIPT_BYTES) throw new Error(`Approval receipt exceeds ${MAX_RECEIPT_BYTES} bytes`);\n}\n\nfunction readReceiptFromFd(fd: number, filePath: string): ApprovalReceipt {\n\tassertPrivateReceiptFd(fd, filePath);\n\tconst buffer = Buffer.alloc(MAX_RECEIPT_BYTES + 1);\n\tlet offset = 0;\n\twhile (offset < buffer.length) {\n\t\tconst read = readSync(fd, buffer, offset, buffer.length - offset, offset);\n\t\tif (read === 0) break;\n\t\toffset += read;\n\t}\n\tif (offset > MAX_RECEIPT_BYTES) throw new Error(`Approval receipt exceeds ${MAX_RECEIPT_BYTES} bytes`);\n\tassertPrivateReceiptFd(fd, filePath);\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(buffer.subarray(0, offset).toString(\"utf8\")) as unknown;\n\t} catch {\n\t\tthrow new Error(`Approval receipt is not valid JSON: ${filePath}`);\n\t}\n\treturn validateApprovalReceipt(value);\n}\n\nexport class ApprovalReceiptStore {\n\treadonly rootDir: string;\n\n\tconstructor(rootDir: string) {\n\t\tthis.rootDir = resolve(rootDir);\n\t\tthis.ensurePrivateDirectory();\n\t}\n\n\tprivate ensurePrivateDirectory(): RootIdentity {\n\t\tmkdirSync(this.rootDir, { recursive: true, mode: 0o700 });\n\t\tconst stat = lstatSync(this.rootDir);\n\t\tif (stat.isSymbolicLink() || !stat.isDirectory()) {\n\t\t\tthrow new Error(`Approval receipt root must be a real directory: ${this.rootDir}`);\n\t\t}\n\t\tassertOwnedByCurrentUser(stat.uid, `Approval receipt root ${this.rootDir}`);\n\t\tif ((stat.mode & 0o777) !== 0o700) {\n\t\t\tthrow new Error(`Approval receipt root permissions must be 0700: ${this.rootDir}`);\n\t\t}\n\t\treturn { dev: stat.dev, ino: stat.ino };\n\t}\n\n\tprivate assertRootUnchanged(expected: RootIdentity): void {\n\t\tconst current = this.ensurePrivateDirectory();\n\t\tif (current.dev !== expected.dev || current.ino !== expected.ino) {\n\t\t\tthrow new Error(\"Approval receipt root changed during the operation\");\n\t\t}\n\t}\n\n\tprivate pathFor(receiptId: string): string {\n\t\treturn join(this.rootDir, receiptFileName(receiptId));\n\t}\n\n\tprivate openReceiptForRead(filePath: string): number {\n\t\tconst fd = openSync(filePath, constants.O_RDONLY | NOFOLLOW);\n\t\ttry {\n\t\t\tassertPrivateReceiptFd(fd, filePath);\n\t\t\treturn fd;\n\t\t} catch (error) {\n\t\t\tcloseSync(fd);\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\twrite(receipt: ApprovalReceipt): ApprovalReceiptWriteResult {\n\t\tconst validated = validateApprovalReceipt(receipt);\n\t\tconst rootIdentity = this.ensurePrivateDirectory();\n\t\tconst filePath = this.pathFor(validated.core.receiptId);\n\t\tconst canonical = serializeApprovalReceipt(validated);\n\t\tconst bytes = Buffer.from(canonical, \"utf8\");\n\t\tif (bytes.byteLength > MAX_RECEIPT_BYTES) throw new Error(`Approval receipt exceeds ${MAX_RECEIPT_BYTES} bytes`);\n\n\t\tlet fd: number;\n\t\ttry {\n\t\t\tfd = openSync(filePath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | NOFOLLOW, 0o600);\n\t\t} catch (error) {\n\t\t\tif (!isErrno(error, \"EEXIST\")) throw error;\n\t\t\tconst existing = this.read(validated.core.receiptId);\n\t\t\tif (serializeApprovalReceipt(existing) !== canonical) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Approval receipt already exists with different content and is never overwritten: ${validated.core.receiptId}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tthis.assertRootUnchanged(rootIdentity);\n\t\t\treturn { path: filePath, created: false };\n\t\t}\n\n\t\ttry {\n\t\t\tfchmodSync(fd, 0o600);\n\t\t\tassertPrivateReceiptFd(fd, filePath);\n\t\t\twriteFileSync(fd, bytes);\n\t\t\tfsyncSync(fd);\n\t\t\tassertPrivateReceiptFd(fd, filePath);\n\t\t} finally {\n\t\t\tcloseSync(fd);\n\t\t}\n\t\tthis.assertRootUnchanged(rootIdentity);\n\t\treturn { path: filePath, created: true };\n\t}\n\n\thas(receiptId: string): boolean {\n\t\tconst rootIdentity = this.ensurePrivateDirectory();\n\t\tlet fd: number;\n\t\ttry {\n\t\t\tfd = this.openReceiptForRead(this.pathFor(receiptId));\n\t\t} catch (error) {\n\t\t\tif (isErrno(error, \"ENOENT\")) {\n\t\t\t\tthis.assertRootUnchanged(rootIdentity);\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t\tcloseSync(fd);\n\t\tthis.assertRootUnchanged(rootIdentity);\n\t\treturn true;\n\t}\n\n\tread(receiptId: string): ApprovalReceipt {\n\t\tconst rootIdentity = this.ensurePrivateDirectory();\n\t\tconst filePath = this.pathFor(receiptId);\n\t\tconst fd = this.openReceiptForRead(filePath);\n\t\ttry {\n\t\t\treturn readReceiptFromFd(fd, filePath);\n\t\t} finally {\n\t\t\tcloseSync(fd);\n\t\t\tthis.assertRootUnchanged(rootIdentity);\n\t\t}\n\t}\n\n\tlistReceiptIds(): string[] {\n\t\tconst rootIdentity = this.ensurePrivateDirectory();\n\t\tconst ids = readdirSync(this.rootDir)\n\t\t\t.map((name) => /^(approval-[a-f0-9]{32})\\.json$/u.exec(name)?.[1])\n\t\t\t.filter((id): id is string => id !== undefined)\n\t\t\t.sort((left, right) => left.localeCompare(right));\n\t\tfor (const id of ids) this.has(id);\n\t\tthis.assertRootUnchanged(rootIdentity);\n\t\treturn ids;\n\t}\n}\n"]}

package/dist/approvals/approval-receipt-store.js

@@ -0,0 +1,169 @@
+import { closeSync, constants, fchmodSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readdirSync, readSync, writeFileSync, } from "node:fs";
+import { join, resolve } from "node:path";
+import { serializeApprovalReceipt, validateApprovalReceipt } from "./approval-receipt.js";
+const MAX_RECEIPT_BYTES = 1024 * 1024;
+const NOFOLLOW = constants.O_NOFOLLOW ?? 0;
+function isErrno(error, code) {
+    return error instanceof Error && "code" in error && error.code === code;
+}
+function assertOwnedByCurrentUser(uid, label) {
+    const getuid = process.getuid;
+    if (typeof getuid === "function" && uid !== getuid()) {
+        throw new Error(`${label} is not owned by the current user`);
+    }
+}
+function receiptFileName(receiptId) {
+    if (!/^approval-[a-f0-9]{32}$/u.test(receiptId))
+        throw new Error("Approval receipt id is invalid");
+    return `${receiptId}.json`;
+}
+function assertPrivateReceiptFd(fd, filePath) {
+    const stat = fstatSync(fd);
+    if (!stat.isFile())
+        throw new Error(`Approval receipt is not a regular file: ${filePath}`);
+    if (stat.nlink !== 1)
+        throw new Error(`Approval receipt must not be hard-linked: ${filePath}`);
+    assertOwnedByCurrentUser(stat.uid, `Approval receipt ${filePath}`);
+    if ((stat.mode & 0o777) !== 0o600) {
+        throw new Error(`Approval receipt permissions must be 0600: ${filePath}`);
+    }
+    if (stat.size > MAX_RECEIPT_BYTES)
+        throw new Error(`Approval receipt exceeds ${MAX_RECEIPT_BYTES} bytes`);
+}
+function readReceiptFromFd(fd, filePath) {
+    assertPrivateReceiptFd(fd, filePath);
+    const buffer = Buffer.alloc(MAX_RECEIPT_BYTES + 1);
+    let offset = 0;
+    while (offset < buffer.length) {
+        const read = readSync(fd, buffer, offset, buffer.length - offset, offset);
+        if (read === 0)
+            break;
+        offset += read;
+    }
+    if (offset > MAX_RECEIPT_BYTES)
+        throw new Error(`Approval receipt exceeds ${MAX_RECEIPT_BYTES} bytes`);
+    assertPrivateReceiptFd(fd, filePath);
+    let value;
+    try {
+        value = JSON.parse(buffer.subarray(0, offset).toString("utf8"));
+    }
+    catch {
+        throw new Error(`Approval receipt is not valid JSON: ${filePath}`);
+    }
+    return validateApprovalReceipt(value);
+}
+export class ApprovalReceiptStore {
+    rootDir;
+    constructor(rootDir) {
+        this.rootDir = resolve(rootDir);
+        this.ensurePrivateDirectory();
+    }
+    ensurePrivateDirectory() {
+        mkdirSync(this.rootDir, { recursive: true, mode: 0o700 });
+        const stat = lstatSync(this.rootDir);
+        if (stat.isSymbolicLink() || !stat.isDirectory()) {
+            throw new Error(`Approval receipt root must be a real directory: ${this.rootDir}`);
+        }
+        assertOwnedByCurrentUser(stat.uid, `Approval receipt root ${this.rootDir}`);
+        if ((stat.mode & 0o777) !== 0o700) {
+            throw new Error(`Approval receipt root permissions must be 0700: ${this.rootDir}`);
+        }
+        return { dev: stat.dev, ino: stat.ino };
+    }
+    assertRootUnchanged(expected) {
+        const current = this.ensurePrivateDirectory();
+        if (current.dev !== expected.dev || current.ino !== expected.ino) {
+            throw new Error("Approval receipt root changed during the operation");
+        }
+    }
+    pathFor(receiptId) {
+        return join(this.rootDir, receiptFileName(receiptId));
+    }
+    openReceiptForRead(filePath) {
+        const fd = openSync(filePath, constants.O_RDONLY | NOFOLLOW);
+        try {
+            assertPrivateReceiptFd(fd, filePath);
+            return fd;
+        }
+        catch (error) {
+            closeSync(fd);
+            throw error;
+        }
+    }
+    write(receipt) {
+        const validated = validateApprovalReceipt(receipt);
+        const rootIdentity = this.ensurePrivateDirectory();
+        const filePath = this.pathFor(validated.core.receiptId);
+        const canonical = serializeApprovalReceipt(validated);
+        const bytes = Buffer.from(canonical, "utf8");
+        if (bytes.byteLength > MAX_RECEIPT_BYTES)
+            throw new Error(`Approval receipt exceeds ${MAX_RECEIPT_BYTES} bytes`);
+        let fd;
+        try {
+            fd = openSync(filePath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | NOFOLLOW, 0o600);
+        }
+        catch (error) {
+            if (!isErrno(error, "EEXIST"))
+                throw error;
+            const existing = this.read(validated.core.receiptId);
+            if (serializeApprovalReceipt(existing) !== canonical) {
+                throw new Error(`Approval receipt already exists with different content and is never overwritten: ${validated.core.receiptId}`);
+            }
+            this.assertRootUnchanged(rootIdentity);
+            return { path: filePath, created: false };
+        }
+        try {
+            fchmodSync(fd, 0o600);
+            assertPrivateReceiptFd(fd, filePath);
+            writeFileSync(fd, bytes);
+            fsyncSync(fd);
+            assertPrivateReceiptFd(fd, filePath);
+        }
+        finally {
+            closeSync(fd);
+        }
+        this.assertRootUnchanged(rootIdentity);
+        return { path: filePath, created: true };
+    }
+    has(receiptId) {
+        const rootIdentity = this.ensurePrivateDirectory();
+        let fd;
+        try {
+            fd = this.openReceiptForRead(this.pathFor(receiptId));
+        }
+        catch (error) {
+            if (isErrno(error, "ENOENT")) {
+                this.assertRootUnchanged(rootIdentity);
+                return false;
+            }
+            throw error;
+        }
+        closeSync(fd);
+        this.assertRootUnchanged(rootIdentity);
+        return true;
+    }
+    read(receiptId) {
+        const rootIdentity = this.ensurePrivateDirectory();
+        const filePath = this.pathFor(receiptId);
+        const fd = this.openReceiptForRead(filePath);
+        try {
+            return readReceiptFromFd(fd, filePath);
+        }
+        finally {
+            closeSync(fd);
+            this.assertRootUnchanged(rootIdentity);
+        }
+    }
+    listReceiptIds() {
+        const rootIdentity = this.ensurePrivateDirectory();
+        const ids = readdirSync(this.rootDir)
+            .map((name) => /^(approval-[a-f0-9]{32})\.json$/u.exec(name)?.[1])
+            .filter((id) => id !== undefined)
+            .sort((left, right) => left.localeCompare(right));
+        for (const id of ids)
+            this.has(id);
+        this.assertRootUnchanged(rootIdentity);
+        return ids;
+    }
+}
+//# sourceMappingURL=approval-receipt-store.js.map

package/dist/approvals/approval-receipt-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-receipt-store.js","sourceRoot":"","sources":["../../src/approvals/approval-receipt-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,aAAa,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAwB,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhH,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC;AACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;AAY3C,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY,EAAW;IACvD,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAAA,CACxE;AAED,SAAS,wBAAwB,CAAC,GAAW,EAAE,KAAa,EAAQ;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC9D,CAAC;AAAA,CACD;AAED,SAAS,eAAe,CAAC,SAAiB,EAAU;IACnD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnG,OAAO,GAAG,SAAS,OAAO,CAAC;AAAA,CAC3B;AAED,SAAS,sBAAsB,CAAC,EAAU,EAAE,QAAgB,EAAQ;IACnE,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,EAAE,CAAC,CAAC;IAC3F,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,EAAE,CAAC,CAAC;IAC/F,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,GAAG,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,iBAAiB,QAAQ,CAAC,CAAC;AAAA,CAC1G;AAED,SAAS,iBAAiB,CAAC,EAAU,EAAE,QAAgB,EAAmB;IACzE,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;IACnD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM;QACtB,MAAM,IAAI,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,GAAG,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,iBAAiB,QAAQ,CAAC,CAAC;IACvG,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;AAAA,CACtC;AAED,MAAM,OAAO,oBAAoB;IACvB,OAAO,CAAS;IAEzB,YAAY,OAAe,EAAE;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAAA,CAC9B;IAEO,sBAAsB,GAAiB;QAC9C,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,yBAAyB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAAA,CACxC;IAEO,mBAAmB,CAAC,QAAsB,EAAQ;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACvE,CAAC;IAAA,CACD;IAEO,OAAO,CAAC,SAAiB,EAAU;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAAA,CACtD;IAEO,kBAAkB,CAAC,QAAgB,EAAU;QACpD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC;YACJ,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACrC,OAAO,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAED,KAAK,CAAC,OAAwB,EAA8B;QAC3D,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,UAAU,GAAG,iBAAiB;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,iBAAiB,QAAQ,CAAC,CAAC;QAEjH,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACJ,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,wBAAwB,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACd,oFAAoF,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAC9G,CAAC;YACH,CAAC;YACD,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC;YACJ,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACtB,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACrC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACzB,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;gBAAS,CAAC;YACV,SAAS,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAAA,CACzC;IAED,GAAG,CAAC,SAAiB,EAAW;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACJ,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBACvC,OAAO,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IAAA,CACZ;IAED,IAAI,CAAC,SAAiB,EAAmB;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC;YACJ,OAAO,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACV,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;IAAA,CACD;IAED,cAAc,GAAa;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;aACnC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aACjE,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC;aAC9C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,KAAK,MAAM,EAAE,IAAI,GAAG;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC;IAAA,CACX;CACD","sourcesContent":["import {\n\tcloseSync,\n\tconstants,\n\tfchmodSync,\n\tfstatSync,\n\tfsyncSync,\n\tlstatSync,\n\tmkdirSync,\n\topenSync,\n\treaddirSync,\n\treadSync,\n\twriteFileSync,\n} from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport { type ApprovalReceipt, serializeApprovalReceipt, validateApprovalReceipt } from \"./approval-receipt.ts\";\n\nconst MAX_RECEIPT_BYTES = 1024 * 1024;\nconst NOFOLLOW = constants.O_NOFOLLOW ?? 0;\n\nexport interface ApprovalReceiptWriteResult {\n\tpath: string;\n\tcreated: boolean;\n}\n\ninterface RootIdentity {\n\tdev: number;\n\tino: number;\n}\n\nfunction isErrno(error: unknown, code: string): boolean {\n\treturn error instanceof Error && \"code\" in error && error.code === code;\n}\n\nfunction assertOwnedByCurrentUser(uid: number, label: string): void {\n\tconst getuid = process.getuid;\n\tif (typeof getuid === \"function\" && uid !== getuid()) {\n\t\tthrow new Error(`${label} is not owned by the current user`);\n\t}\n}\n\nfunction receiptFileName(receiptId: string): string {\n\tif (!/^approval-[a-f0-9]{32}$/u.test(receiptId)) throw new Error(\"Approval receipt id is invalid\");\n\treturn `${receiptId}.json`;\n}\n\nfunction assertPrivateReceiptFd(fd: number, filePath: string): void {\n\tconst stat = fstatSync(fd);\n\tif (!stat.isFile()) throw new Error(`Approval receipt is not a regular file: ${filePath}`);\n\tif (stat.nlink !== 1) throw new Error(`Approval receipt must not be hard-linked: ${filePath}`);\n\tassertOwnedByCurrentUser(stat.uid, `Approval receipt ${filePath}`);\n\tif ((stat.mode & 0o777) !== 0o600) {\n\t\tthrow new Error(`Approval receipt permissions must be 0600: ${filePath}`);\n\t}\n\tif (stat.size > MAX_RECEIPT_BYTES) throw new Error(`Approval receipt exceeds ${MAX_RECEIPT_BYTES} bytes`);\n}\n\nfunction readReceiptFromFd(fd: number, filePath: string): ApprovalReceipt {\n\tassertPrivateReceiptFd(fd, filePath);\n\tconst buffer = Buffer.alloc(MAX_RECEIPT_BYTES + 1);\n\tlet offset = 0;\n\twhile (offset < buffer.length) {\n\t\tconst read = readSync(fd, buffer, offset, buffer.length - offset, offset);\n\t\tif (read === 0) break;\n\t\toffset += read;\n\t}\n\tif (offset > MAX_RECEIPT_BYTES) throw new Error(`Approval receipt exceeds ${MAX_RECEIPT_BYTES} bytes`);\n\tassertPrivateReceiptFd(fd, filePath);\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(buffer.subarray(0, offset).toString(\"utf8\")) as unknown;\n\t} catch {\n\t\tthrow new Error(`Approval receipt is not valid JSON: ${filePath}`);\n\t}\n\treturn validateApprovalReceipt(value);\n}\n\nexport class ApprovalReceiptStore {\n\treadonly rootDir: string;\n\n\tconstructor(rootDir: string) {\n\t\tthis.rootDir = resolve(rootDir);\n\t\tthis.ensurePrivateDirectory();\n\t}\n\n\tprivate ensurePrivateDirectory(): RootIdentity {\n\t\tmkdirSync(this.rootDir, { recursive: true, mode: 0o700 });\n\t\tconst stat = lstatSync(this.rootDir);\n\t\tif (stat.isSymbolicLink() || !stat.isDirectory()) {\n\t\t\tthrow new Error(`Approval receipt root must be a real directory: ${this.rootDir}`);\n\t\t}\n\t\tassertOwnedByCurrentUser(stat.uid, `Approval receipt root ${this.rootDir}`);\n\t\tif ((stat.mode & 0o777) !== 0o700) {\n\t\t\tthrow new Error(`Approval receipt root permissions must be 0700: ${this.rootDir}`);\n\t\t}\n\t\treturn { dev: stat.dev, ino: stat.ino };\n\t}\n\n\tprivate assertRootUnchanged(expected: RootIdentity): void {\n\t\tconst current = this.ensurePrivateDirectory();\n\t\tif (current.dev !== expected.dev || current.ino !== expected.ino) {\n\t\t\tthrow new Error(\"Approval receipt root changed during the operation\");\n\t\t}\n\t}\n\n\tprivate pathFor(receiptId: string): string {\n\t\treturn join(this.rootDir, receiptFileName(receiptId));\n\t}\n\n\tprivate openReceiptForRead(filePath: string): number {\n\t\tconst fd = openSync(filePath, constants.O_RDONLY | NOFOLLOW);\n\t\ttry {\n\t\t\tassertPrivateReceiptFd(fd, filePath);\n\t\t\treturn fd;\n\t\t} catch (error) {\n\t\t\tcloseSync(fd);\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\twrite(receipt: ApprovalReceipt): ApprovalReceiptWriteResult {\n\t\tconst validated = validateApprovalReceipt(receipt);\n\t\tconst rootIdentity = this.ensurePrivateDirectory();\n\t\tconst filePath = this.pathFor(validated.core.receiptId);\n\t\tconst canonical = serializeApprovalReceipt(validated);\n\t\tconst bytes = Buffer.from(canonical, \"utf8\");\n\t\tif (bytes.byteLength > MAX_RECEIPT_BYTES) throw new Error(`Approval receipt exceeds ${MAX_RECEIPT_BYTES} bytes`);\n\n\t\tlet fd: number;\n\t\ttry {\n\t\t\tfd = openSync(filePath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | NOFOLLOW, 0o600);\n\t\t} catch (error) {\n\t\t\tif (!isErrno(error, \"EEXIST\")) throw error;\n\t\t\tconst existing = this.read(validated.core.receiptId);\n\t\t\tif (serializeApprovalReceipt(existing) !== canonical) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Approval receipt already exists with different content and is never overwritten: ${validated.core.receiptId}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tthis.assertRootUnchanged(rootIdentity);\n\t\t\treturn { path: filePath, created: false };\n\t\t}\n\n\t\ttry {\n\t\t\tfchmodSync(fd, 0o600);\n\t\t\tassertPrivateReceiptFd(fd, filePath);\n\t\t\twriteFileSync(fd, bytes);\n\t\t\tfsyncSync(fd);\n\t\t\tassertPrivateReceiptFd(fd, filePath);\n\t\t} finally {\n\t\t\tcloseSync(fd);\n\t\t}\n\t\tthis.assertRootUnchanged(rootIdentity);\n\t\treturn { path: filePath, created: true };\n\t}\n\n\thas(receiptId: string): boolean {\n\t\tconst rootIdentity = this.ensurePrivateDirectory();\n\t\tlet fd: number;\n\t\ttry {\n\t\t\tfd = this.openReceiptForRead(this.pathFor(receiptId));\n\t\t} catch (error) {\n\t\t\tif (isErrno(error, \"ENOENT\")) {\n\t\t\t\tthis.assertRootUnchanged(rootIdentity);\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t\tcloseSync(fd);\n\t\tthis.assertRootUnchanged(rootIdentity);\n\t\treturn true;\n\t}\n\n\tread(receiptId: string): ApprovalReceipt {\n\t\tconst rootIdentity = this.ensurePrivateDirectory();\n\t\tconst filePath = this.pathFor(receiptId);\n\t\tconst fd = this.openReceiptForRead(filePath);\n\t\ttry {\n\t\t\treturn readReceiptFromFd(fd, filePath);\n\t\t} finally {\n\t\t\tcloseSync(fd);\n\t\t\tthis.assertRootUnchanged(rootIdentity);\n\t\t}\n\t}\n\n\tlistReceiptIds(): string[] {\n\t\tconst rootIdentity = this.ensurePrivateDirectory();\n\t\tconst ids = readdirSync(this.rootDir)\n\t\t\t.map((name) => /^(approval-[a-f0-9]{32})\\.json$/u.exec(name)?.[1])\n\t\t\t.filter((id): id is string => id !== undefined)\n\t\t\t.sort((left, right) => left.localeCompare(right));\n\t\tfor (const id of ids) this.has(id);\n\t\tthis.assertRootUnchanged(rootIdentity);\n\t\treturn ids;\n\t}\n}\n"]}

package/dist/approvals/approval-receipt.d.ts

@@ -0,0 +1,43 @@
+export type ApprovalDecision = "approved" | "rejected" | "invalidated";
+export interface ApprovalContentDigest {
+    sha256: string;
+    bytes: number;
+}
+export interface ApprovalPlanDigest extends ApprovalContentDigest {
+    path: string;
+}
+export interface ApprovalReceiptCore {
+    schemaVersion: 1;
+    receiptId: string;
+    provider: "plannotator";
+    trust: "external-extension-event";
+    requestId: string;
+    reviewId: string;
+    decision: ApprovalDecision;
+    decidedAt: string;
+    sessionId: string;
+    plan: ApprovalPlanDigest;
+    feedback?: ApprovalContentDigest;
+}
+export interface ApprovalReceipt {
+    core: ApprovalReceiptCore;
+    coreSha256: string;
+}
+export interface CreateApprovalReceiptInput {
+    provider: "plannotator";
+    requestId: string;
+    reviewId: string;
+    decision: ApprovalDecision;
+    decidedAt: string;
+    sessionId: string;
+    planPath: string;
+    planContent: string;
+    feedback?: string;
+}
+export declare function computeApprovalContentDigest(value: string): ApprovalContentDigest;
+export declare function computeApprovalReceiptCoreSha256(core: ApprovalReceiptCore): string;
+export declare function validateApprovalReceipt(value: unknown): ApprovalReceipt;
+export declare function createApprovalReceipt(input: CreateApprovalReceiptInput): ApprovalReceipt;
+export declare function parseApprovalReceipt(serialized: string): ApprovalReceipt;
+export declare function serializeApprovalReceipt(receipt: ApprovalReceipt): string;
+//# sourceMappingURL=approval-receipt.d.ts.map

package/dist/approvals/approval-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-receipt.d.ts","sourceRoot":"","sources":["../../src/approvals/approval-receipt.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;AAEvE,MAAM,WAAW,qBAAqB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAChE,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAmB;IACnC,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,EAAE,0BAA0B,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,kBAAkB,CAAC;IACzB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,CAEjF;AAyFD,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAElF;AAOD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CA8CvE;AAiBD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,eAAe,CAwBxF;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,CAQxE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAEzE","sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\";\nimport { isAbsolute } from \"node:path\";\n\nconst SHA256_PATTERN = /^[a-f0-9]{64}$/u;\nconst SAFE_ID_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,126}[A-Za-z0-9])?$/u;\nconst CORE_DOMAIN = \"omk.approval-receipt.core.v1\\0\";\nconst ID_DOMAIN = \"omk.approval-receipt.id.v1\\0\";\n\nexport type ApprovalDecision = \"approved\" | \"rejected\" | \"invalidated\";\n\nexport interface ApprovalContentDigest {\n\tsha256: string;\n\tbytes: number;\n}\n\nexport interface ApprovalPlanDigest extends ApprovalContentDigest {\n\tpath: string;\n}\n\nexport interface ApprovalReceiptCore {\n\tschemaVersion: 1;\n\treceiptId: string;\n\tprovider: \"plannotator\";\n\ttrust: \"external-extension-event\";\n\trequestId: string;\n\treviewId: string;\n\tdecision: ApprovalDecision;\n\tdecidedAt: string;\n\tsessionId: string;\n\tplan: ApprovalPlanDigest;\n\tfeedback?: ApprovalContentDigest;\n}\n\nexport interface ApprovalReceipt {\n\tcore: ApprovalReceiptCore;\n\tcoreSha256: string;\n}\n\nexport interface CreateApprovalReceiptInput {\n\tprovider: \"plannotator\";\n\trequestId: string;\n\treviewId: string;\n\tdecision: ApprovalDecision;\n\tdecidedAt: string;\n\tsessionId: string;\n\tplanPath: string;\n\tplanContent: string;\n\tfeedback?: string;\n}\n\nfunction sha256(domain: string, value: string): string {\n\treturn createHash(\"sha256\").update(domain).update(value, \"utf8\").digest(\"hex\");\n}\n\nexport function computeApprovalContentDigest(value: string): ApprovalContentDigest {\n\treturn { sha256: sha256(\"omk.approval-content.v1\\0\", value), bytes: Buffer.byteLength(value, \"utf8\") };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction hasOwn(value: Record<string, unknown>, key: string): boolean {\n\treturn Object.getOwnPropertyDescriptor(value, key) !== undefined;\n}\n\nfunction exactKeys(value: Record<string, unknown>, required: string[], optional: string[] = []): void {\n\tconst allowed = new Set([...required, ...optional]);\n\tfor (const key of Object.keys(value)) {\n\t\tif (!allowed.has(key)) throw new Error(`Unexpected approval receipt field: ${key}`);\n\t}\n\tfor (const key of required) {\n\t\tif (!hasOwn(value, key)) throw new Error(`Missing approval receipt field: ${key}`);\n\t}\n}\n\nfunction safeId(value: unknown, label: string): string {\n\tif (typeof value !== \"string\" || !SAFE_ID_PATTERN.test(value)) throw new Error(`${label} is not a safe identifier`);\n\treturn value;\n}\n\nfunction sha256Hex(value: unknown, label: string): string {\n\tif (typeof value !== \"string\" || !SHA256_PATTERN.test(value)) throw new Error(`${label} must be lowercase SHA-256`);\n\treturn value;\n}\n\nfunction nonNegativeInteger(value: unknown, label: string): number {\n\tif (!Number.isSafeInteger(value) || (value as number) < 0)\n\t\tthrow new Error(`${label} must be a non-negative safe integer`);\n\treturn value as number;\n}\n\nfunction workspaceRelativePath(value: unknown): string {\n\tif (typeof value !== \"string\" || !value || value.includes(\"\\\\\") || value.includes(\"\\0\") || isAbsolute(value)) {\n\t\tthrow new Error(\"plan.path must be workspace-relative\");\n\t}\n\tconst segments = value.split(\"/\");\n\tif (segments.some((segment) => segment === \"\" || segment === \".\" || segment === \"..\")) {\n\t\tthrow new Error(\"plan.path must be workspace-relative\");\n\t}\n\treturn value;\n}\n\nfunction timestamp(value: unknown): string {\n\tif (typeof value !== \"string\") throw new Error(\"decidedAt must be an ISO timestamp\");\n\tconst parsed = new Date(value);\n\tif (!Number.isFinite(parsed.getTime()) || parsed.toISOString() !== value) {\n\t\tthrow new Error(\"decidedAt must be a canonical ISO timestamp\");\n\t}\n\treturn value;\n}\n\nfunction parseContentDigest(value: unknown, label: string): ApprovalContentDigest {\n\tif (!isRecord(value)) throw new Error(`${label} must be an object`);\n\texactKeys(value, [\"sha256\", \"bytes\"]);\n\treturn {\n\t\tsha256: sha256Hex(value.sha256, `${label}.sha256`),\n\t\tbytes: nonNegativeInteger(value.bytes, `${label}.bytes`),\n\t};\n}\n\nfunction parsePlan(value: unknown): ApprovalPlanDigest {\n\tif (!isRecord(value)) throw new Error(\"plan must be an object\");\n\texactKeys(value, [\"path\", \"sha256\", \"bytes\"]);\n\treturn {\n\t\tpath: workspaceRelativePath(value.path),\n\t\tsha256: sha256Hex(value.sha256, \"plan.sha256\"),\n\t\tbytes: nonNegativeInteger(value.bytes, \"plan.bytes\"),\n\t};\n}\n\nfunction canonicalJson(value: unknown): string {\n\tif (value === null || typeof value === \"boolean\" || typeof value === \"string\") return JSON.stringify(value);\n\tif (typeof value === \"number\") {\n\t\tif (!Number.isFinite(value)) throw new Error(\"Approval receipt contains a non-finite number\");\n\t\treturn JSON.stringify(value);\n\t}\n\tif (Array.isArray(value)) return `[${value.map(canonicalJson).join(\",\")}]`;\n\tif (!isRecord(value)) throw new Error(\"Approval receipt contains an unsupported value\");\n\treturn `{${Object.keys(value)\n\t\t.sort((left, right) => left.localeCompare(right))\n\t\t.map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)\n\t\t.join(\",\")}}`;\n}\n\nexport function computeApprovalReceiptCoreSha256(core: ApprovalReceiptCore): string {\n\treturn sha256(CORE_DOMAIN, canonicalJson(core));\n}\n\nfunction constantTimeEqual(left: string, right: string): boolean {\n\tif (!SHA256_PATTERN.test(left) || !SHA256_PATTERN.test(right)) return false;\n\treturn timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"));\n}\n\nexport function validateApprovalReceipt(value: unknown): ApprovalReceipt {\n\tif (!isRecord(value)) throw new Error(\"Approval receipt must be an object\");\n\texactKeys(value, [\"core\", \"coreSha256\"]);\n\tif (!isRecord(value.core)) throw new Error(\"Approval receipt core must be an object\");\n\tconst coreValue = value.core;\n\texactKeys(\n\t\tcoreValue,\n\t\t[\n\t\t\t\"schemaVersion\",\n\t\t\t\"receiptId\",\n\t\t\t\"provider\",\n\t\t\t\"trust\",\n\t\t\t\"requestId\",\n\t\t\t\"reviewId\",\n\t\t\t\"decision\",\n\t\t\t\"decidedAt\",\n\t\t\t\"sessionId\",\n\t\t\t\"plan\",\n\t\t],\n\t\t[\"feedback\"],\n\t);\n\tif (coreValue.schemaVersion !== 1) throw new Error(\"Unsupported approval receipt schemaVersion\");\n\tif (coreValue.provider !== \"plannotator\") throw new Error(\"Unsupported approval provider\");\n\tif (coreValue.trust !== \"external-extension-event\") throw new Error(\"Invalid approval trust classification\");\n\tif (coreValue.decision !== \"approved\" && coreValue.decision !== \"rejected\" && coreValue.decision !== \"invalidated\") {\n\t\tthrow new Error(\"Invalid approval decision\");\n\t}\n\tconst core: ApprovalReceiptCore = {\n\t\tschemaVersion: 1,\n\t\treceiptId: safeId(coreValue.receiptId, \"receiptId\"),\n\t\tprovider: \"plannotator\",\n\t\ttrust: \"external-extension-event\",\n\t\trequestId: safeId(coreValue.requestId, \"requestId\"),\n\t\treviewId: safeId(coreValue.reviewId, \"reviewId\"),\n\t\tdecision: coreValue.decision,\n\t\tdecidedAt: timestamp(coreValue.decidedAt),\n\t\tsessionId: safeId(coreValue.sessionId, \"sessionId\"),\n\t\tplan: parsePlan(coreValue.plan),\n\t\t...(hasOwn(coreValue, \"feedback\") ? { feedback: parseContentDigest(coreValue.feedback, \"feedback\") } : {}),\n\t};\n\tconst expectedReceiptId = computeApprovalReceiptId(core);\n\tif (core.receiptId !== expectedReceiptId) throw new Error(\"Approval receipt id mismatch\");\n\tconst coreSha256 = sha256Hex(value.coreSha256, \"coreSha256\");\n\tconst expectedDigest = computeApprovalReceiptCoreSha256(core);\n\tif (!constantTimeEqual(coreSha256, expectedDigest)) throw new Error(\"Approval receipt digest mismatch\");\n\treturn { core, coreSha256 };\n}\n\nfunction computeApprovalReceiptId(\n\tcore: Omit<ApprovalReceiptCore, \"receiptId\" | \"decidedAt\" | \"decision\" | \"feedback\">,\n): string {\n\tconst identity = {\n\t\tschemaVersion: core.schemaVersion,\n\t\tprovider: core.provider,\n\t\ttrust: core.trust,\n\t\trequestId: core.requestId,\n\t\treviewId: core.reviewId,\n\t\tsessionId: core.sessionId,\n\t\tplan: core.plan,\n\t};\n\treturn `approval-${sha256(ID_DOMAIN, canonicalJson(identity)).slice(0, 32)}`;\n}\n\nexport function createApprovalReceipt(input: CreateApprovalReceiptInput): ApprovalReceipt {\n\tconst plan: ApprovalPlanDigest = {\n\t\tpath: workspaceRelativePath(input.planPath),\n\t\t...computeApprovalContentDigest(input.planContent),\n\t};\n\tconst coreWithoutId = {\n\t\tschemaVersion: 1 as const,\n\t\tprovider: input.provider,\n\t\ttrust: \"external-extension-event\" as const,\n\t\trequestId: safeId(input.requestId, \"requestId\"),\n\t\treviewId: safeId(input.reviewId, \"reviewId\"),\n\t\tdecision: input.decision,\n\t\tdecidedAt: timestamp(input.decidedAt),\n\t\tsessionId: safeId(input.sessionId, \"sessionId\"),\n\t\tplan,\n\t\t...(input.feedback !== undefined && input.feedback.length > 0\n\t\t\t? { feedback: computeApprovalContentDigest(input.feedback) }\n\t\t\t: {}),\n\t};\n\tconst core: ApprovalReceiptCore = {\n\t\t...coreWithoutId,\n\t\treceiptId: computeApprovalReceiptId(coreWithoutId),\n\t};\n\treturn validateApprovalReceipt({ core, coreSha256: computeApprovalReceiptCoreSha256(core) });\n}\n\nexport function parseApprovalReceipt(serialized: string): ApprovalReceipt {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(serialized) as unknown;\n\t} catch {\n\t\tthrow new Error(\"Approval receipt is not valid JSON\");\n\t}\n\treturn validateApprovalReceipt(parsed);\n}\n\nexport function serializeApprovalReceipt(receipt: ApprovalReceipt): string {\n\treturn `${JSON.stringify(validateApprovalReceipt(receipt), null, 2)}\\n`;\n}\n"]}

package/dist/approvals/approval-receipt.js

@@ -0,0 +1,208 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { isAbsolute } from "node:path";
+const SHA256_PATTERN = /^[a-f0-9]{64}$/u;
+const SAFE_ID_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,126}[A-Za-z0-9])?$/u;
+const CORE_DOMAIN = "omk.approval-receipt.core.v1\0";
+const ID_DOMAIN = "omk.approval-receipt.id.v1\0";
+function sha256(domain, value) {
+    return createHash("sha256").update(domain).update(value, "utf8").digest("hex");
+}
+export function computeApprovalContentDigest(value) {
+    return { sha256: sha256("omk.approval-content.v1\0", value), bytes: Buffer.byteLength(value, "utf8") };
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasOwn(value, key) {
+    return Object.getOwnPropertyDescriptor(value, key) !== undefined;
+}
+function exactKeys(value, required, optional = []) {
+    const allowed = new Set([...required, ...optional]);
+    for (const key of Object.keys(value)) {
+        if (!allowed.has(key))
+            throw new Error(`Unexpected approval receipt field: ${key}`);
+    }
+    for (const key of required) {
+        if (!hasOwn(value, key))
+            throw new Error(`Missing approval receipt field: ${key}`);
+    }
+}
+function safeId(value, label) {
+    if (typeof value !== "string" || !SAFE_ID_PATTERN.test(value))
+        throw new Error(`${label} is not a safe identifier`);
+    return value;
+}
+function sha256Hex(value, label) {
+    if (typeof value !== "string" || !SHA256_PATTERN.test(value))
+        throw new Error(`${label} must be lowercase SHA-256`);
+    return value;
+}
+function nonNegativeInteger(value, label) {
+    if (!Number.isSafeInteger(value) || value < 0)
+        throw new Error(`${label} must be a non-negative safe integer`);
+    return value;
+}
+function workspaceRelativePath(value) {
+    if (typeof value !== "string" || !value || value.includes("\\") || value.includes("\0") || isAbsolute(value)) {
+        throw new Error("plan.path must be workspace-relative");
+    }
+    const segments = value.split("/");
+    if (segments.some((segment) => segment === "" || segment === "." || segment === "..")) {
+        throw new Error("plan.path must be workspace-relative");
+    }
+    return value;
+}
+function timestamp(value) {
+    if (typeof value !== "string")
+        throw new Error("decidedAt must be an ISO timestamp");
+    const parsed = new Date(value);
+    if (!Number.isFinite(parsed.getTime()) || parsed.toISOString() !== value) {
+        throw new Error("decidedAt must be a canonical ISO timestamp");
+    }
+    return value;
+}
+function parseContentDigest(value, label) {
+    if (!isRecord(value))
+        throw new Error(`${label} must be an object`);
+    exactKeys(value, ["sha256", "bytes"]);
+    return {
+        sha256: sha256Hex(value.sha256, `${label}.sha256`),
+        bytes: nonNegativeInteger(value.bytes, `${label}.bytes`),
+    };
+}
+function parsePlan(value) {
+    if (!isRecord(value))
+        throw new Error("plan must be an object");
+    exactKeys(value, ["path", "sha256", "bytes"]);
+    return {
+        path: workspaceRelativePath(value.path),
+        sha256: sha256Hex(value.sha256, "plan.sha256"),
+        bytes: nonNegativeInteger(value.bytes, "plan.bytes"),
+    };
+}
+function canonicalJson(value) {
+    if (value === null || typeof value === "boolean" || typeof value === "string")
+        return JSON.stringify(value);
+    if (typeof value === "number") {
+        if (!Number.isFinite(value))
+            throw new Error("Approval receipt contains a non-finite number");
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    if (!isRecord(value))
+        throw new Error("Approval receipt contains an unsupported value");
+    return `{${Object.keys(value)
+        .sort((left, right) => left.localeCompare(right))
+        .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+        .join(",")}}`;
+}
+export function computeApprovalReceiptCoreSha256(core) {
+    return sha256(CORE_DOMAIN, canonicalJson(core));
+}
+function constantTimeEqual(left, right) {
+    if (!SHA256_PATTERN.test(left) || !SHA256_PATTERN.test(right))
+        return false;
+    return timingSafeEqual(Buffer.from(left, "hex"), Buffer.from(right, "hex"));
+}
+export function validateApprovalReceipt(value) {
+    if (!isRecord(value))
+        throw new Error("Approval receipt must be an object");
+    exactKeys(value, ["core", "coreSha256"]);
+    if (!isRecord(value.core))
+        throw new Error("Approval receipt core must be an object");
+    const coreValue = value.core;
+    exactKeys(coreValue, [
+        "schemaVersion",
+        "receiptId",
+        "provider",
+        "trust",
+        "requestId",
+        "reviewId",
+        "decision",
+        "decidedAt",
+        "sessionId",
+        "plan",
+    ], ["feedback"]);
+    if (coreValue.schemaVersion !== 1)
+        throw new Error("Unsupported approval receipt schemaVersion");
+    if (coreValue.provider !== "plannotator")
+        throw new Error("Unsupported approval provider");
+    if (coreValue.trust !== "external-extension-event")
+        throw new Error("Invalid approval trust classification");
+    if (coreValue.decision !== "approved" && coreValue.decision !== "rejected" && coreValue.decision !== "invalidated") {
+        throw new Error("Invalid approval decision");
+    }
+    const core = {
+        schemaVersion: 1,
+        receiptId: safeId(coreValue.receiptId, "receiptId"),
+        provider: "plannotator",
+        trust: "external-extension-event",
+        requestId: safeId(coreValue.requestId, "requestId"),
+        reviewId: safeId(coreValue.reviewId, "reviewId"),
+        decision: coreValue.decision,
+        decidedAt: timestamp(coreValue.decidedAt),
+        sessionId: safeId(coreValue.sessionId, "sessionId"),
+        plan: parsePlan(coreValue.plan),
+        ...(hasOwn(coreValue, "feedback") ? { feedback: parseContentDigest(coreValue.feedback, "feedback") } : {}),
+    };
+    const expectedReceiptId = computeApprovalReceiptId(core);
+    if (core.receiptId !== expectedReceiptId)
+        throw new Error("Approval receipt id mismatch");
+    const coreSha256 = sha256Hex(value.coreSha256, "coreSha256");
+    const expectedDigest = computeApprovalReceiptCoreSha256(core);
+    if (!constantTimeEqual(coreSha256, expectedDigest))
+        throw new Error("Approval receipt digest mismatch");
+    return { core, coreSha256 };
+}
+function computeApprovalReceiptId(core) {
+    const identity = {
+        schemaVersion: core.schemaVersion,
+        provider: core.provider,
+        trust: core.trust,
+        requestId: core.requestId,
+        reviewId: core.reviewId,
+        sessionId: core.sessionId,
+        plan: core.plan,
+    };
+    return `approval-${sha256(ID_DOMAIN, canonicalJson(identity)).slice(0, 32)}`;
+}
+export function createApprovalReceipt(input) {
+    const plan = {
+        path: workspaceRelativePath(input.planPath),
+        ...computeApprovalContentDigest(input.planContent),
+    };
+    const coreWithoutId = {
+        schemaVersion: 1,
+        provider: input.provider,
+        trust: "external-extension-event",
+        requestId: safeId(input.requestId, "requestId"),
+        reviewId: safeId(input.reviewId, "reviewId"),
+        decision: input.decision,
+        decidedAt: timestamp(input.decidedAt),
+        sessionId: safeId(input.sessionId, "sessionId"),
+        plan,
+        ...(input.feedback !== undefined && input.feedback.length > 0
+            ? { feedback: computeApprovalContentDigest(input.feedback) }
+            : {}),
+    };
+    const core = {
+        ...coreWithoutId,
+        receiptId: computeApprovalReceiptId(coreWithoutId),
+    };
+    return validateApprovalReceipt({ core, coreSha256: computeApprovalReceiptCoreSha256(core) });
+}
+export function parseApprovalReceipt(serialized) {
+    let parsed;
+    try {
+        parsed = JSON.parse(serialized);
+    }
+    catch {
+        throw new Error("Approval receipt is not valid JSON");
+    }
+    return validateApprovalReceipt(parsed);
+}
+export function serializeApprovalReceipt(receipt) {
+    return `${JSON.stringify(validateApprovalReceipt(receipt), null, 2)}\n`;
+}
+//# sourceMappingURL=approval-receipt.js.map

package/dist/approvals/approval-receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-receipt.js","sourceRoot":"","sources":["../../src/approvals/approval-receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,eAAe,GAAG,qDAAqD,CAAC;AAC9E,MAAM,WAAW,GAAG,gCAAgC,CAAC;AACrD,MAAM,SAAS,GAAG,8BAA8B,CAAC;AA4CjD,SAAS,MAAM,CAAC,MAAc,EAAE,KAAa,EAAU;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC/E;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAa,EAAyB;IAClF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,2BAA2B,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;AAAA,CACvG;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,MAAM,CAAC,KAA8B,EAAE,GAAW,EAAW;IACrE,OAAO,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,SAAS,CAAC;AAAA,CACjE;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,QAAkB,EAAE,QAAQ,GAAa,EAAE,EAAQ;IACrG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;IACpF,CAAC;AAAA,CACD;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa,EAAU;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACpH,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa,EAAU;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IACpH,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa,EAAU;IAClE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IACjE,OAAO,KAAe,CAAC;AAAA,CACvB;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAU;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,SAAS,CAAC,KAAc,EAAU;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa,EAAyB;IACjF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACpE,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACtC,OAAO;QACN,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC;QAClD,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC;KACxD,CAAC;AAAA,CACF;AAED,SAAS,SAAS,CAAC,KAAc,EAAsB;IACtD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAChE,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9C,OAAO;QACN,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC;QACvC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC;QAC9C,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC;KACpD,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CAAC,KAAc,EAAU;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACxF,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC3B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;SACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAAA,CACf;AAED,MAAM,UAAU,gCAAgC,CAAC,IAAyB,EAAU;IACnF,OAAO,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AAAA,CAChD;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa,EAAW;IAChE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5E,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAAA,CAC5E;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc,EAAmB;IACxE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC5E,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;IAC7B,SAAS,CACR,SAAS,EACT;QACC,eAAe;QACf,WAAW;QACX,UAAU;QACV,OAAO;QACP,WAAW;QACX,UAAU;QACV,UAAU;QACV,WAAW;QACX,WAAW;QACX,MAAM;KACN,EACD,CAAC,UAAU,CAAC,CACZ,CAAC;IACF,IAAI,SAAS,CAAC,aAAa,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACjG,IAAI,SAAS,CAAC,QAAQ,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3F,IAAI,SAAS,CAAC,KAAK,KAAK,0BAA0B;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7G,IAAI,SAAS,CAAC,QAAQ,KAAK,UAAU,IAAI,SAAS,CAAC,QAAQ,KAAK,UAAU,IAAI,SAAS,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAwB;QACjC,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC;QACnD,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE,0BAA0B;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC;QACnD,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC;QAChD,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC;QACnD,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1G,CAAC;IACF,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,gCAAgC,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAAA,CAC5B;AAED,SAAS,wBAAwB,CAChC,IAAoF,EAC3E;IACT,MAAM,QAAQ,GAAG;QAChB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;KACf,CAAC;IACF,OAAO,YAAY,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAAA,CAC7E;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAiC,EAAmB;IACzF,MAAM,IAAI,GAAuB;QAChC,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,GAAG,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC;KAClD,CAAC;IACF,MAAM,aAAa,GAAG;QACrB,aAAa,EAAE,CAAU;QACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,0BAAmC;QAC1C,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QAC/C,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QAC/C,IAAI;QACJ,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC5D,CAAC,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;IACF,MAAM,IAAI,GAAwB;QACjC,GAAG,aAAa;QAChB,SAAS,EAAE,wBAAwB,CAAC,aAAa,CAAC;KAClD,CAAC;IACF,OAAO,uBAAuB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,gCAAgC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAAA,CAC7F;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAmB;IACzE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAAA,CACvC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAwB,EAAU;IAC1E,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAAA,CACxE","sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\";\nimport { isAbsolute } from \"node:path\";\n\nconst SHA256_PATTERN = /^[a-f0-9]{64}$/u;\nconst SAFE_ID_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,126}[A-Za-z0-9])?$/u;\nconst CORE_DOMAIN = \"omk.approval-receipt.core.v1\\0\";\nconst ID_DOMAIN = \"omk.approval-receipt.id.v1\\0\";\n\nexport type ApprovalDecision = \"approved\" | \"rejected\" | \"invalidated\";\n\nexport interface ApprovalContentDigest {\n\tsha256: string;\n\tbytes: number;\n}\n\nexport interface ApprovalPlanDigest extends ApprovalContentDigest {\n\tpath: string;\n}\n\nexport interface ApprovalReceiptCore {\n\tschemaVersion: 1;\n\treceiptId: string;\n\tprovider: \"plannotator\";\n\ttrust: \"external-extension-event\";\n\trequestId: string;\n\treviewId: string;\n\tdecision: ApprovalDecision;\n\tdecidedAt: string;\n\tsessionId: string;\n\tplan: ApprovalPlanDigest;\n\tfeedback?: ApprovalContentDigest;\n}\n\nexport interface ApprovalReceipt {\n\tcore: ApprovalReceiptCore;\n\tcoreSha256: string;\n}\n\nexport interface CreateApprovalReceiptInput {\n\tprovider: \"plannotator\";\n\trequestId: string;\n\treviewId: string;\n\tdecision: ApprovalDecision;\n\tdecidedAt: string;\n\tsessionId: string;\n\tplanPath: string;\n\tplanContent: string;\n\tfeedback?: string;\n}\n\nfunction sha256(domain: string, value: string): string {\n\treturn createHash(\"sha256\").update(domain).update(value, \"utf8\").digest(\"hex\");\n}\n\nexport function computeApprovalContentDigest(value: string): ApprovalContentDigest {\n\treturn { sha256: sha256(\"omk.approval-content.v1\\0\", value), bytes: Buffer.byteLength(value, \"utf8\") };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction hasOwn(value: Record<string, unknown>, key: string): boolean {\n\treturn Object.getOwnPropertyDescriptor(value, key) !== undefined;\n}\n\nfunction exactKeys(value: Record<string, unknown>, required: string[], optional: string[] = []): void {\n\tconst allowed = new Set([...required, ...optional]);\n\tfor (const key of Object.keys(value)) {\n\t\tif (!allowed.has(key)) throw new Error(`Unexpected approval receipt field: ${key}`);\n\t}\n\tfor (const key of required) {\n\t\tif (!hasOwn(value, key)) throw new Error(`Missing approval receipt field: ${key}`);\n\t}\n}\n\nfunction safeId(value: unknown, label: string): string {\n\tif (typeof value !== \"string\" || !SAFE_ID_PATTERN.test(value)) throw new Error(`${label} is not a safe identifier`);\n\treturn value;\n}\n\nfunction sha256Hex(value: unknown, label: string): string {\n\tif (typeof value !== \"string\" || !SHA256_PATTERN.test(value)) throw new Error(`${label} must be lowercase SHA-256`);\n\treturn value;\n}\n\nfunction nonNegativeInteger(value: unknown, label: string): number {\n\tif (!Number.isSafeInteger(value) || (value as number) < 0)\n\t\tthrow new Error(`${label} must be a non-negative safe integer`);\n\treturn value as number;\n}\n\nfunction workspaceRelativePath(value: unknown): string {\n\tif (typeof value !== \"string\" || !value || value.includes(\"\\\\\") || value.includes(\"\\0\") || isAbsolute(value)) {\n\t\tthrow new Error(\"plan.path must be workspace-relative\");\n\t}\n\tconst segments = value.split(\"/\");\n\tif (segments.some((segment) => segment === \"\" || segment === \".\" || segment === \"..\")) {\n\t\tthrow new Error(\"plan.path must be workspace-relative\");\n\t}\n\treturn value;\n}\n\nfunction timestamp(value: unknown): string {\n\tif (typeof value !== \"string\") throw new Error(\"decidedAt must be an ISO timestamp\");\n\tconst parsed = new Date(value);\n\tif (!Number.isFinite(parsed.getTime()) || parsed.toISOString() !== value) {\n\t\tthrow new Error(\"decidedAt must be a canonical ISO timestamp\");\n\t}\n\treturn value;\n}\n\nfunction parseContentDigest(value: unknown, label: string): ApprovalContentDigest {\n\tif (!isRecord(value)) throw new Error(`${label} must be an object`);\n\texactKeys(value, [\"sha256\", \"bytes\"]);\n\treturn {\n\t\tsha256: sha256Hex(value.sha256, `${label}.sha256`),\n\t\tbytes: nonNegativeInteger(value.bytes, `${label}.bytes`),\n\t};\n}\n\nfunction parsePlan(value: unknown): ApprovalPlanDigest {\n\tif (!isRecord(value)) throw new Error(\"plan must be an object\");\n\texactKeys(value, [\"path\", \"sha256\", \"bytes\"]);\n\treturn {\n\t\tpath: workspaceRelativePath(value.path),\n\t\tsha256: sha256Hex(value.sha256, \"plan.sha256\"),\n\t\tbytes: nonNegativeInteger(value.bytes, \"plan.bytes\"),\n\t};\n}\n\nfunction canonicalJson(value: unknown): string {\n\tif (value === null || typeof value === \"boolean\" || typeof value === \"string\") return JSON.stringify(value);\n\tif (typeof value === \"number\") {\n\t\tif (!Number.isFinite(value)) throw new Error(\"Approval receipt contains a non-finite number\");\n\t\treturn JSON.stringify(value);\n\t}\n\tif (Array.isArray(value)) return `[${value.map(canonicalJson).join(\",\")}]`;\n\tif (!isRecord(value)) throw new Error(\"Approval receipt contains an unsupported value\");\n\treturn `{${Object.keys(value)\n\t\t.sort((left, right) => left.localeCompare(right))\n\t\t.map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)\n\t\t.join(\",\")}}`;\n}\n\nexport function computeApprovalReceiptCoreSha256(core: ApprovalReceiptCore): string {\n\treturn sha256(CORE_DOMAIN, canonicalJson(core));\n}\n\nfunction constantTimeEqual(left: string, right: string): boolean {\n\tif (!SHA256_PATTERN.test(left) || !SHA256_PATTERN.test(right)) return false;\n\treturn timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"));\n}\n\nexport function validateApprovalReceipt(value: unknown): ApprovalReceipt {\n\tif (!isRecord(value)) throw new Error(\"Approval receipt must be an object\");\n\texactKeys(value, [\"core\", \"coreSha256\"]);\n\tif (!isRecord(value.core)) throw new Error(\"Approval receipt core must be an object\");\n\tconst coreValue = value.core;\n\texactKeys(\n\t\tcoreValue,\n\t\t[\n\t\t\t\"schemaVersion\",\n\t\t\t\"receiptId\",\n\t\t\t\"provider\",\n\t\t\t\"trust\",\n\t\t\t\"requestId\",\n\t\t\t\"reviewId\",\n\t\t\t\"decision\",\n\t\t\t\"decidedAt\",\n\t\t\t\"sessionId\",\n\t\t\t\"plan\",\n\t\t],\n\t\t[\"feedback\"],\n\t);\n\tif (coreValue.schemaVersion !== 1) throw new Error(\"Unsupported approval receipt schemaVersion\");\n\tif (coreValue.provider !== \"plannotator\") throw new Error(\"Unsupported approval provider\");\n\tif (coreValue.trust !== \"external-extension-event\") throw new Error(\"Invalid approval trust classification\");\n\tif (coreValue.decision !== \"approved\" && coreValue.decision !== \"rejected\" && coreValue.decision !== \"invalidated\") {\n\t\tthrow new Error(\"Invalid approval decision\");\n\t}\n\tconst core: ApprovalReceiptCore = {\n\t\tschemaVersion: 1,\n\t\treceiptId: safeId(coreValue.receiptId, \"receiptId\"),\n\t\tprovider: \"plannotator\",\n\t\ttrust: \"external-extension-event\",\n\t\trequestId: safeId(coreValue.requestId, \"requestId\"),\n\t\treviewId: safeId(coreValue.reviewId, \"reviewId\"),\n\t\tdecision: coreValue.decision,\n\t\tdecidedAt: timestamp(coreValue.decidedAt),\n\t\tsessionId: safeId(coreValue.sessionId, \"sessionId\"),\n\t\tplan: parsePlan(coreValue.plan),\n\t\t...(hasOwn(coreValue, \"feedback\") ? { feedback: parseContentDigest(coreValue.feedback, \"feedback\") } : {}),\n\t};\n\tconst expectedReceiptId = computeApprovalReceiptId(core);\n\tif (core.receiptId !== expectedReceiptId) throw new Error(\"Approval receipt id mismatch\");\n\tconst coreSha256 = sha256Hex(value.coreSha256, \"coreSha256\");\n\tconst expectedDigest = computeApprovalReceiptCoreSha256(core);\n\tif (!constantTimeEqual(coreSha256, expectedDigest)) throw new Error(\"Approval receipt digest mismatch\");\n\treturn { core, coreSha256 };\n}\n\nfunction computeApprovalReceiptId(\n\tcore: Omit<ApprovalReceiptCore, \"receiptId\" | \"decidedAt\" | \"decision\" | \"feedback\">,\n): string {\n\tconst identity = {\n\t\tschemaVersion: core.schemaVersion,\n\t\tprovider: core.provider,\n\t\ttrust: core.trust,\n\t\trequestId: core.requestId,\n\t\treviewId: core.reviewId,\n\t\tsessionId: core.sessionId,\n\t\tplan: core.plan,\n\t};\n\treturn `approval-${sha256(ID_DOMAIN, canonicalJson(identity)).slice(0, 32)}`;\n}\n\nexport function createApprovalReceipt(input: CreateApprovalReceiptInput): ApprovalReceipt {\n\tconst plan: ApprovalPlanDigest = {\n\t\tpath: workspaceRelativePath(input.planPath),\n\t\t...computeApprovalContentDigest(input.planContent),\n\t};\n\tconst coreWithoutId = {\n\t\tschemaVersion: 1 as const,\n\t\tprovider: input.provider,\n\t\ttrust: \"external-extension-event\" as const,\n\t\trequestId: safeId(input.requestId, \"requestId\"),\n\t\treviewId: safeId(input.reviewId, \"reviewId\"),\n\t\tdecision: input.decision,\n\t\tdecidedAt: timestamp(input.decidedAt),\n\t\tsessionId: safeId(input.sessionId, \"sessionId\"),\n\t\tplan,\n\t\t...(input.feedback !== undefined && input.feedback.length > 0\n\t\t\t? { feedback: computeApprovalContentDigest(input.feedback) }\n\t\t\t: {}),\n\t};\n\tconst core: ApprovalReceiptCore = {\n\t\t...coreWithoutId,\n\t\treceiptId: computeApprovalReceiptId(coreWithoutId),\n\t};\n\treturn validateApprovalReceipt({ core, coreSha256: computeApprovalReceiptCoreSha256(core) });\n}\n\nexport function parseApprovalReceipt(serialized: string): ApprovalReceipt {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(serialized) as unknown;\n\t} catch {\n\t\tthrow new Error(\"Approval receipt is not valid JSON\");\n\t}\n\treturn validateApprovalReceipt(parsed);\n}\n\nexport function serializeApprovalReceipt(receipt: ApprovalReceipt): string {\n\treturn `${JSON.stringify(validateApprovalReceipt(receipt), null, 2)}\\n`;\n}\n"]}

package/dist/approvals/approval-verifier.d.ts

@@ -0,0 +1,17 @@
+import { type ApprovalReceipt } from "./approval-receipt.ts";
+export type ApprovalVerificationFailure = "invalid-receipt" | "not-approved" | "session-mismatch" | "plan-path-mismatch" | "plan-content-mismatch";
+export type ApprovalVerificationResult = {
+    valid: true;
+    receipt: ApprovalReceipt;
+} | {
+    valid: false;
+    reason: ApprovalVerificationFailure;
+};
+export interface ApprovalExecutionBinding {
+    sessionId: string;
+    planPath: string;
+    planContent: string;
+}
+/** Verify immediately before execution; a persisted approval never authorizes changed plan bytes. */
+export declare function verifyApprovalForExecution(value: unknown, binding: ApprovalExecutionBinding): ApprovalVerificationResult;
+//# sourceMappingURL=approval-verifier.d.ts.map

package/dist/approvals/approval-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-verifier.d.ts","sourceRoot":"","sources":["../../src/approvals/approval-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAyD,MAAM,uBAAuB,CAAC;AAEpH,MAAM,MAAM,2BAA2B,GACpC,iBAAiB,GACjB,cAAc,GACd,kBAAkB,GAClB,oBAAoB,GACpB,uBAAuB,CAAC;AAE3B,MAAM,MAAM,0BAA0B,GACnC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GACzC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,qGAAqG;AACrG,wBAAgB,0BAA0B,CACzC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,wBAAwB,GAC/B,0BAA0B,CAe5B","sourcesContent":["import { type ApprovalReceipt, computeApprovalContentDigest, validateApprovalReceipt } from \"./approval-receipt.ts\";\n\nexport type ApprovalVerificationFailure =\n\t| \"invalid-receipt\"\n\t| \"not-approved\"\n\t| \"session-mismatch\"\n\t| \"plan-path-mismatch\"\n\t| \"plan-content-mismatch\";\n\nexport type ApprovalVerificationResult =\n\t| { valid: true; receipt: ApprovalReceipt }\n\t| { valid: false; reason: ApprovalVerificationFailure };\n\nexport interface ApprovalExecutionBinding {\n\tsessionId: string;\n\tplanPath: string;\n\tplanContent: string;\n}\n\n/** Verify immediately before execution; a persisted approval never authorizes changed plan bytes. */\nexport function verifyApprovalForExecution(\n\tvalue: unknown,\n\tbinding: ApprovalExecutionBinding,\n): ApprovalVerificationResult {\n\tlet receipt: ApprovalReceipt;\n\ttry {\n\t\treceipt = validateApprovalReceipt(value);\n\t} catch {\n\t\treturn { valid: false, reason: \"invalid-receipt\" };\n\t}\n\tif (receipt.core.decision !== \"approved\") return { valid: false, reason: \"not-approved\" };\n\tif (receipt.core.sessionId !== binding.sessionId) return { valid: false, reason: \"session-mismatch\" };\n\tif (receipt.core.plan.path !== binding.planPath) return { valid: false, reason: \"plan-path-mismatch\" };\n\tconst digest = computeApprovalContentDigest(binding.planContent);\n\tif (receipt.core.plan.sha256 !== digest.sha256 || receipt.core.plan.bytes !== digest.bytes) {\n\t\treturn { valid: false, reason: \"plan-content-mismatch\" };\n\t}\n\treturn { valid: true, receipt };\n}\n"]}

package/dist/approvals/approval-verifier.js

@@ -0,0 +1,23 @@
+import { computeApprovalContentDigest, validateApprovalReceipt } from "./approval-receipt.js";
+/** Verify immediately before execution; a persisted approval never authorizes changed plan bytes. */
+export function verifyApprovalForExecution(value, binding) {
+    let receipt;
+    try {
+        receipt = validateApprovalReceipt(value);
+    }
+    catch {
+        return { valid: false, reason: "invalid-receipt" };
+    }
+    if (receipt.core.decision !== "approved")
+        return { valid: false, reason: "not-approved" };
+    if (receipt.core.sessionId !== binding.sessionId)
+        return { valid: false, reason: "session-mismatch" };
+    if (receipt.core.plan.path !== binding.planPath)
+        return { valid: false, reason: "plan-path-mismatch" };
+    const digest = computeApprovalContentDigest(binding.planContent);
+    if (receipt.core.plan.sha256 !== digest.sha256 || receipt.core.plan.bytes !== digest.bytes) {
+        return { valid: false, reason: "plan-content-mismatch" };
+    }
+    return { valid: true, receipt };
+}
+//# sourceMappingURL=approval-verifier.js.map