reviewflow 3.36.0 → 3.37.0

package/dist/tests/acceptance/196-least-privilege-platform-token.acceptance.test.js

@@ -0,0 +1,197 @@
+import { describe, it, expect } from 'vitest';
+import { AUTO_EXECUTOR_CAPABILITIES, EXECUTOR_CAPABILITY_TABLE, } from '../../modules/platform-integration/entities/executorToken/executorCapability.js';
+import { resolvePinnedThreadFetchTarget, resolvePinnedThreads, } from '../../modules/platform-integration/services/pinnedThreadFetchTarget.js';
+import { buildScopedExecutorEnvironment, ENV_ALLOWLIST, MissingExecutorTokenError, } from '../../modules/platform-integration/services/scopedExecutorEnvironment.js';
+import { executeActionsFromContext } from '../../modules/review-execution/services/contextActionsExecutor.js';
+import { dispatchConstrainedActions } from '../../modules/review-execution/services/dispatchConstrainedActions.js';
+const TOKEN = 'glpat-service-token-acceptance';
+const TEMP_ROOT = '/tmp/reviewflow-executor-acceptance';
+class RecordingFileWriter {
+    writes = [];
+    ensuredDirs = [];
+    write(path, contents) {
+        this.writes.push({ path, contents });
+    }
+    ensureDir(path) {
+        this.ensuredDirs.push(path);
+    }
+}
+class RecordingExecutor {
+    calls = [];
+    run = (command, args) => {
+        this.calls.push({ command, args });
+    };
+}
+class RecordingCliExecutor {
+    commands = [];
+    run = (command) => {
+        this.commands.push(command);
+        return '';
+    };
+}
+class RecordingPostGateway {
+    posts = [];
+    postComment = async (input) => {
+        this.posts.push(input);
+    };
+}
+class RecordingThreadFetch {
+    calls = [];
+    fetchThreads = (projectPath, mrNumber) => {
+        this.calls.push({ projectPath, mrNumber });
+        return [];
+    };
+}
+class StubInventoryGateway {
+    pages = [];
+    setPages(pages) {
+        this.pages = pages;
+    }
+    fetchPage(_projectPath, _mergeRequestNumber, page) {
+        const found = this.pages.find((candidate) => candidate.page === page);
+        if (!found)
+            throw new Error(`no page ${page}`);
+        return found;
+    }
+}
+class RecordingLogger {
+    warnings = [];
+    errors = [];
+    info() { }
+    warn(_obj, message) {
+        this.warnings.push(message);
+    }
+    debug() { }
+    error(_obj, message) {
+        this.errors.push(message);
+    }
+}
+const dispatchContext = {
+    platform: 'gitlab',
+    projectPath: 'group/project',
+    mrNumber: 42,
+    localPath: '/tmp/repo',
+};
+function resolveDiscussionWrites(executor) {
+    return executor.calls.filter((call) => call.args.includes('PUT') && call.args.some((arg) => arg.includes('/discussions/')));
+}
+function buildContextWith(actions, threadIds) {
+    return {
+        version: '1',
+        mergeRequestId: 'gitlab-group/project-42',
+        platform: 'gitlab',
+        projectPath: 'group/project',
+        mergeRequestNumber: 42,
+        createdAt: '2026-01-01T00:00:00.000Z',
+        threads: threadIds.map((id) => ({
+            id,
+            file: null,
+            line: null,
+            status: 'open',
+            body: 'thread',
+        })),
+        actions,
+        progress: { phase: 'completed', currentStep: null },
+    };
+}
+describe('SPEC-196 least-privilege platform token (acceptance)', () => {
+    describe('AC1 — dedicated service token, fail-closed', () => {
+        it('refuses to construct the executor environment when the token is absent (zero file writes)', () => {
+            const fileWriter = new RecordingFileWriter();
+            expect(() => buildScopedExecutorEnvironment({
+                parentEnv: { PATH: '/usr/bin' },
+                isolatedDir: TEMP_ROOT,
+                fileWriter,
+            })).toThrow(MissingExecutorTokenError);
+            expect(fileWriter.writes).toHaveLength(0);
+            expect(fileWriter.ensuredDirs).toHaveLength(0);
+        });
+    });
+    describe('AC2/AC3 — env built by allowlist, token never in env', () => {
+        it('keeps the child env keyset within the allowlist, drops the canary, and never carries the token', () => {
+            const fileWriter = new RecordingFileWriter();
+            const { env } = buildScopedExecutorEnvironment({
+                parentEnv: {
+                    REVIEWFLOW_EXECUTOR_TOKEN: TOKEN,
+                    PATH: '/usr/bin',
+                    LANG: 'en_US.UTF-8',
+                    AMBIENT_ADMIN_TOKEN: 'canary',
+                },
+                isolatedDir: TEMP_ROOT,
+                fileWriter,
+            });
+            for (const key of Object.keys(env)) {
+                expect(ENV_ALLOWLIST).toContain(key);
+            }
+            expect('AMBIENT_ADMIN_TOKEN' in env).toBe(false);
+            for (const value of Object.values(env)) {
+                expect(value).not.toBe(TOKEN);
+            }
+            expect(fileWriter.writes[0]?.contents).toContain(TOKEN);
+            expect(fileWriter.writes[0]?.path.startsWith(TEMP_ROOT)).toBe(true);
+        });
+    });
+    describe('AC5 — minimal role frozen per action', () => {
+        it('locks the auto-executor capability set to exactly {readMr, postComment}', () => {
+            expect([...AUTO_EXECUTOR_CAPABILITIES].toSorted()).toEqual(['postComment', 'readMr']);
+            expect(EXECUTOR_CAPABILITY_TABLE.threadResolve.autoPath).toBe(false);
+            expect(EXECUTOR_CAPABILITY_TABLE.revoke.autoPath).toBe(false);
+        });
+    });
+    describe('AC6/AC7 — removed write verbs are inert, postComment still fires', () => {
+        it('through the stdout chokepoint: postComment fires once, THREAD_RESOLVE records zero write calls, no throw', async () => {
+            const executor = new RecordingExecutor();
+            const postGateway = new RecordingPostGateway();
+            const inventory = new StubInventoryGateway();
+            inventory.setPages([{ page: 1, totalPages: 1, threadIds: ['10'] }]);
+            const actions = [
+                { type: 'POST_COMMENT', body: 'review summary' },
+                { type: 'THREAD_RESOLVE', threadId: '10' },
+                { type: 'FETCH_THREADS' },
+            ];
+            await dispatchConstrainedActions(actions, {
+                context: dispatchContext,
+                provenance: 'untrusted',
+                inventoryGateway: inventory,
+                logger: new RecordingLogger(),
+                executor: executor.run,
+                postGateway,
+            });
+            expect(postGateway.posts).toHaveLength(1);
+            expect(postGateway.posts[0]?.body).toBe('review summary');
+            expect(resolveDiscussionWrites(executor)).toHaveLength(0);
+        });
+        it('through the context-file path: a THREAD_RESOLVE on an empty authenticated inventory records zero write calls', async () => {
+            const executor = new RecordingCliExecutor();
+            const context = buildContextWith([{ type: 'THREAD_RESOLVE', threadId: '10' }], []);
+            await executeActionsFromContext(context, '/tmp/repo', new RecordingLogger(), executor.run);
+            expect(executor.commands).toHaveLength(0);
+        });
+    });
+    describe('AC9 — action-target identity pinned to trusted provenance, fail-closed', () => {
+        it('an unrecognized projectPath resolves to no target (fail-closed)', () => {
+            const target = resolvePinnedThreadFetchTarget({
+                payloadProjectPath: 'attacker/unknown',
+                payloadMrNumber: 5,
+                findRepository: () => null,
+                gatedMrNumber: 5,
+            });
+            expect(target).toBeNull();
+        });
+        it('the followup path never calls fetchThreads for an unrecognized project (empty action surface)', () => {
+            const fetch = new RecordingThreadFetch();
+            const logger = new RecordingLogger();
+            const threads = resolvePinnedThreads({
+                payloadProjectPath: 'attacker/unknown',
+                payloadMrNumber: 5,
+                findRepository: () => null,
+                gatedMrNumber: 5,
+                fetchThreads: fetch.fetchThreads,
+                logger,
+            });
+            expect(threads).toEqual([]);
+            expect(fetch.calls).toHaveLength(0);
+        });
+    });
+});
+//# sourceMappingURL=196-least-privilege-platform-token.acceptance.test.js.map

package/dist/tests/acceptance/196-least-privilege-platform-token.acceptance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"196-least-privilege-platform-token.acceptance.test.js","sourceRoot":"","sources":["../../../src/tests/acceptance/196-least-privilege-platform-token.acceptance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,6EAA6E,CAAC;AACrF,OAAO,EACL,8BAA8B,EAC9B,oBAAoB,GACrB,MAAM,oEAAoE,CAAC;AAC5E,OAAO,EACL,8BAA8B,EAC9B,aAAa,EACb,yBAAyB,GAC1B,MAAM,sEAAsE,CAAC;AAO9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAC1G,OAAO,EAAE,0BAA0B,EAAE,MAAM,mEAAmE,CAAC;AAE/G,MAAM,KAAK,GAAG,gCAAgC,CAAC;AAC/C,MAAM,SAAS,GAAG,qCAAqC,CAAC;AAExD,MAAM,mBAAmB;IACP,MAAM,GAA8C,EAAE,CAAC;IACvD,WAAW,GAAa,EAAE,CAAC;IAC3C,KAAK,CAAC,IAAY,EAAE,QAAgB;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,SAAS,CAAC,IAAY;QACpB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,iBAAiB;IACZ,KAAK,GAA+C,EAAE,CAAC;IAChE,GAAG,GAAG,CAAC,OAAe,EAAE,IAAc,EAAQ,EAAE;QAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC;CACH;AAED,MAAM,oBAAoB;IACf,QAAQ,GAAa,EAAE,CAAC;IACjC,GAAG,GAAG,CAAC,OAAe,EAAU,EAAE;QAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;CACH;AAED,MAAM,oBAAoB;IACf,KAAK,GAAmE,EAAE,CAAC;IACpF,WAAW,GAAG,KAAK,EAAE,KAIpB,EAAiB,EAAE;QAClB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC;CACH;AAED,MAAM,oBAAoB;IACR,KAAK,GAAqD,EAAE,CAAC;IAC7E,YAAY,GAAG,CAAC,WAAmB,EAAE,QAAgB,EAAE,EAAE;QACvD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3C,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;CACH;AAED,MAAM,oBAAoB;IAChB,KAAK,GAA0B,EAAE,CAAC;IAC1C,QAAQ,CAAC,KAA4B;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,SAAS,CAAC,YAAoB,EAAE,mBAA2B,EAAE,IAAY;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,eAAe;IACV,QAAQ,GAAa,EAAE,CAAC;IACxB,MAAM,GAAa,EAAE,CAAC;IAC/B,IAAI,KAAU,CAAC;IACf,IAAI,CAAC,IAAY,EAAE,OAAe;QAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,KAAU,CAAC;IAChB,KAAK,CAAC,IAAY,EAAE,OAAe;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,eAAe,GAAG;IACtB,QAAQ,EAAE,QAAiB;IAC3B,WAAW,EAAE,eAAe;IAC5B,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,SAAS,uBAAuB,CAC9B,QAA2B;IAE3B,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAuB,EAAE,SAAmB;IACpE,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,cAAc,EAAE,yBAAyB;QACzC,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,eAAe;QAC5B,kBAAkB,EAAE,EAAE;QACtB,SAAS,EAAE,0BAA0B;QACrC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9B,EAAE;YACF,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,OAAO;QACP,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE;KACpD,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;QAC1D,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;YACnG,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,EAAE,CACV,8BAA8B,CAAC;gBAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC/B,WAAW,EAAE,SAAS;gBACtB,UAAU;aACX,CAAC,CACH,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YACrC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;QACpE,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;YACxG,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC7C,MAAM,EAAE,GAAG,EAAE,GAAG,8BAA8B,CAAC;gBAC7C,SAAS,EAAE;oBACT,yBAAyB,EAAE,KAAK;oBAChC,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,aAAa;oBACnB,mBAAmB,EAAE,QAAQ;iBAC9B;gBACD,WAAW,EAAE,SAAS;gBACtB,UAAU;aACX,CAAC,CAAC;YAEH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,CAAC,qBAAqB,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;YACjF,MAAM,CAAC,CAAC,GAAG,0BAA0B,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;YACtF,MAAM,CAAC,yBAAyB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAChF,EAAE,CAAC,0GAA0G,EAAE,KAAK,IAAI,EAAE;YACxH,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,IAAI,oBAAoB,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;YAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAEpE,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE;gBAChD,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC1C,EAAE,IAAI,EAAE,eAAe,EAAE;aAC1B,CAAC;YAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;gBACxC,OAAO,EAAE,eAAe;gBACxB,UAAU,EAAE,WAAW;gBACvB,gBAAgB,EAAE,SAAS;gBAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;gBAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG;gBACtB,WAAW;aACZ,CAAC,CAAC;YAEH,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1D,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8GAA8G,EAAE,KAAK,IAAI,EAAE;YAC5H,MAAM,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAEnF,MAAM,yBAAyB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,eAAe,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YAE3F,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wEAAwE,EAAE,GAAG,EAAE;QACtF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM,MAAM,GAAG,8BAA8B,CAAC;gBAC5C,kBAAkB,EAAE,kBAAkB;gBACtC,eAAe,EAAE,CAAC;gBAClB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC1B,aAAa,EAAE,CAAC;aACjB,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;YACvG,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAErC,MAAM,OAAO,GAAG,oBAAoB,CAAC;gBACnC,kBAAkB,EAAE,kBAAkB;gBACtC,eAAe,EAAE,CAAC;gBAClB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC1B,aAAa,EAAE,CAAC;gBAChB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,MAAM;aACP,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/acceptance/198-constrained-action-surface.acceptance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=198-constrained-action-surface.acceptance.test.d.ts.map

package/dist/tests/acceptance/198-constrained-action-surface.acceptance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"198-constrained-action-surface.acceptance.test.d.ts","sourceRoot":"","sources":["../../../src/tests/acceptance/198-constrained-action-surface.acceptance.test.ts"],"names":[],"mappings":""}

package/dist/tests/acceptance/198-constrained-action-surface.acceptance.test.js

@@ -0,0 +1,185 @@
+import { dispatchConstrainedActions } from '../../modules/review-execution/services/dispatchConstrainedActions.js';
+class RecordingExecutor {
+    calls = [];
+    run = (command, args) => {
+        this.calls.push({ command, args });
+    };
+}
+class RecordingLogger {
+    errors = [];
+    info() { }
+    warn() { }
+    debug() { }
+    error(_obj, message) {
+        this.errors.push(message);
+    }
+}
+class StubInventoryGateway {
+    pages = [];
+    failure = null;
+    setPages(pages) {
+        this.pages = pages;
+    }
+    setFailure(error) {
+        this.failure = error;
+    }
+    fetchPage(_projectPath, _mergeRequestNumber, page) {
+        if (this.failure)
+            throw this.failure;
+        const found = this.pages.find((candidate) => candidate.page === page);
+        if (!found)
+            throw new Error(`no page ${page}`);
+        return found;
+    }
+}
+const baseContext = {
+    platform: 'gitlab',
+    projectPath: 'group/project',
+    mrNumber: 42,
+    localPath: '/tmp/repo',
+};
+function postCommentCalls(executor) {
+    return executor.calls.filter((call) => call.args.includes('POST') &&
+        call.args.some((arg) => arg.endsWith('/notes') && arg.includes('/discussions/') === false));
+}
+function resolveCalls(executor) {
+    return executor.calls.filter((call) => call.args.includes('PUT') && call.args.some((arg) => arg.includes('/discussions/')));
+}
+function replyCalls(executor) {
+    return executor.calls.filter((call) => call.args.includes('POST') &&
+        call.args.some((arg) => arg.endsWith('/notes') && arg.includes('/discussions/')));
+}
+function discussionTargets(calls) {
+    return calls.map((call) => call.args.find((arg) => arg.includes('/discussions/')) ?? '');
+}
+describe('SPEC-198 constrained action surface (acceptance — full chokepoint dispatchConstrainedActions)', () => {
+    it('AC-2 + AC-5: untrusted job with one of each verb executes only postComment; resolve/reply/fetch record zero live writes', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 1, threadIds: ['10'] }]);
+        const actions = [
+            { type: 'POST_COMMENT', body: 'review summary' },
+            { type: 'THREAD_RESOLVE', threadId: '10' },
+            { type: 'THREAD_REPLY', threadId: '10', message: 'addressed' },
+            { type: 'FETCH_THREADS' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'untrusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: executor.run,
+        });
+        expect(executor.calls.length).toBe(1);
+        expect(postCommentCalls(executor).length).toBe(1);
+        expect(resolveCalls(executor).length).toBe(0);
+        expect(replyCalls(executor).length).toBe(0);
+    });
+    it('AC-6 + AC-7 + AC-8: trusted job resolves and replies only for in-set ids, never for out-of-set ids', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 1, threadIds: ['10'] }]);
+        const actions = [
+            { type: 'THREAD_RESOLVE', threadId: '10' },
+            { type: 'THREAD_RESOLVE', threadId: '999' },
+            { type: 'THREAD_REPLY', threadId: '10', message: 'in-set reply' },
+            { type: 'THREAD_REPLY', threadId: '999', message: 'out-of-set reply' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: executor.run,
+        });
+        const resolveTargets = discussionTargets(resolveCalls(executor));
+        const replyTargets = discussionTargets(replyCalls(executor));
+        expect(resolveTargets.filter((target) => target.endsWith('/discussions/10')).length).toBe(1);
+        expect(resolveTargets.some((target) => target.includes('/discussions/999'))).toBe(false);
+        expect(replyTargets.filter((target) => target.includes('/discussions/10/notes')).length).toBe(1);
+        expect(replyTargets.some((target) => target.includes('/discussions/999'))).toBe(false);
+    });
+    it('AC-5: trusted FETCH_THREADS survives the read-amplification gate and is dispatched exactly once', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 1, threadIds: ['10'] }]);
+        const trustedResult = await dispatchConstrainedActions([{ type: 'FETCH_THREADS' }], {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: executor.run,
+        });
+        const untrustedExecutor = new RecordingExecutor();
+        const untrustedResult = await dispatchConstrainedActions([{ type: 'FETCH_THREADS' }], {
+            context: baseContext,
+            provenance: 'untrusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: untrustedExecutor.run,
+        });
+        expect(trustedResult.total).toBe(1);
+        expect(untrustedResult.total).toBe(0);
+    });
+    it('AC-9 + AC-10.1: forged payload ids absent from the authenticated inventory produce zero resolve/reply side effects', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 1, threadIds: ['authentic-1'] }]);
+        const actions = [
+            { type: 'THREAD_RESOLVE', threadId: 'forged-1' },
+            { type: 'THREAD_REPLY', threadId: 'forged-2', message: 'forged' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: executor.run,
+        });
+        expect(resolveCalls(executor).length).toBe(0);
+        expect(replyCalls(executor).length).toBe(0);
+    });
+    it('AC-10.2: fail-closed on fetch failure — empty inventory, zero resolve/reply side effects, failure logged', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setFailure(new Error('non-2xx from threads API'));
+        const logger = new RecordingLogger();
+        const actions = [
+            { type: 'THREAD_RESOLVE', threadId: '10' },
+            { type: 'THREAD_REPLY', threadId: '10', message: 'should not run' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger,
+            executor: executor.run,
+        });
+        expect(resolveCalls(executor).length).toBe(0);
+        expect(replyCalls(executor).length).toBe(0);
+        expect(executor.calls.length).toBe(0);
+        expect(logger.errors.length).toBeGreaterThan(0);
+    });
+    it('AC-10.3: fail-closed on incomplete pagination — undelivered page yields empty inventory, in-set id from that page records zero side effects', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 2, threadIds: ['10'] }]);
+        const logger = new RecordingLogger();
+        const actions = [
+            { type: 'THREAD_RESOLVE', threadId: '10' },
+            { type: 'THREAD_RESOLVE', threadId: '20' },
+            { type: 'THREAD_REPLY', threadId: '20', message: 'from the missing page' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger,
+            executor: executor.run,
+        });
+        expect(resolveCalls(executor).length).toBe(0);
+        expect(replyCalls(executor).length).toBe(0);
+        expect(logger.errors.length).toBeGreaterThan(0);
+    });
+});
+//# sourceMappingURL=198-constrained-action-surface.acceptance.test.js.map

package/dist/tests/acceptance/198-constrained-action-surface.acceptance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"198-constrained-action-surface.acceptance.test.js","sourceRoot":"","sources":["../../../src/tests/acceptance/198-constrained-action-surface.acceptance.test.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,mEAAmE,CAAC;AAE/G,MAAM,iBAAiB;IACZ,KAAK,GAA+C,EAAE,CAAC;IAChE,GAAG,GAAG,CAAC,OAAe,EAAE,IAAc,EAAQ,EAAE;QAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC;CACH;AAED,MAAM,eAAe;IACV,MAAM,GAAa,EAAE,CAAC;IAC/B,IAAI,KAAU,CAAC;IACf,IAAI,KAAU,CAAC;IACf,KAAK,KAAU,CAAC;IAChB,KAAK,CAAC,IAAY,EAAE,OAAe;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,oBAAoB;IAChB,KAAK,GAA0B,EAAE,CAAC;IAClC,OAAO,GAAiB,IAAI,CAAC;IACrC,QAAQ,CAAC,KAA4B;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,UAAU,CAAC,KAAY;QACrB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,SAAS,CAAC,YAAoB,EAAE,mBAA2B,EAAE,IAAY;QACvE,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,QAAiB;IAC3B,WAAW,EAAE,eAAe;IAC5B,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,SAAS,gBAAgB,CAAC,QAA2B;IACnD,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,KAAK,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAA2B;IAC/C,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAA2B;IAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CACnF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiD;IAC1E,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,QAAQ,CAAC,+FAA+F,EAAE,GAAG,EAAE;IAC7G,EAAE,CAAC,yHAAyH,EAAE,KAAK,IAAI,EAAE;QACvI,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE;YAChD,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE;YAC9D,EAAE,IAAI,EAAE,eAAe,EAAE;SAC1B,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,WAAW;YACvB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;QAClH,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC3C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE;YACjE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE;SACvE,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE7D,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAC3F,CAAC,CACF,CAAC;QACF,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,aAAa,GAAG,MAAM,0BAA0B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE;YAClF,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAClD,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE;YACpF,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,WAAW;YACvB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,iBAAiB,CAAC,GAAG;SAChC,CAAC,CAAC;QAEH,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oHAAoH,EAAE,KAAK,IAAI,EAAE;QAClI,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;QAE7E,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE;YAChD,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE;SAClE,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0GAA0G,EAAE,KAAK,IAAI,EAAE;QACxH,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAErC,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE;SACpE,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6IAA6I,EAAE,KAAK,IAAI,EAAE;QAC3J,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAErC,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE;SAC3E,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/acceptance/200-webhook-event-idempotency.acceptance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=200-webhook-event-idempotency.acceptance.test.d.ts.map

package/dist/tests/acceptance/200-webhook-event-idempotency.acceptance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"200-webhook-event-idempotency.acceptance.test.d.ts","sourceRoot":"","sources":["../../../src/tests/acceptance/200-webhook-event-idempotency.acceptance.test.ts"],"names":[],"mappings":""}